·
5 commits
to main
since this release
Immutable
release. Only release title and notes can be modified.
What's Changed
3 Security improvements:
fixed in:
#199
This highlights again the need to switch to allow-lists rather than deny-lists for security on simpleeval.
So the next phase is a 1.1.x stream where it's backwards compatible, BUT with deprecation warnings about any use of the system without opt in to allow-lists, and then a 2.x release where it's required.
A few other process improvements that were helpful in getting those fixes in:
- Move tests to separate files. #177
- Upgrade to latest ruff,uv,etc, tiny cleanups #194
- Add tox to dev for easy testing all supported python versions locally by #198
Full Changelog: 1.0.7...1.0.8