Bump the pip-version-updates group across 2 directories with 19 updates
Type: Pull Request
State: Open
Association: Contributor
Comments: 0
(4 months ago)
(4 months ago)
dependencies python
Bumps the pip-version-updates group with 16 updates in the /auto-discovery/kubernetes/pull-secret-extractor directory:
| Package | From | To |
|---|---|---|
| cachetools | 5.2.1 |
6.2.0 |
| certifi | 2024.7.4 |
2025.8.3 |
| charset-normalizer | 3.0.1 |
3.4.3 |
| google-auth | 2.16.0 |
2.40.3 |
| idna | 3.7 |
3.10 |
| kubernetes | 25.3.0 |
33.1.0 |
| oauthlib | 3.2.2 |
3.3.1 |
| pyasn1 | 0.4.8 |
0.6.1 |
| pyasn1-modules | 0.2.8 |
0.4.2 |
| python-dateutil | 2.8.2 |
2.9.0.post0 |
| pyyaml | 6.0.1 |
6.0.2 |
| requests | 2.32.4 |
2.32.5 |
| requests-oauthlib | 1.3.1 |
2.0.0 |
| rsa | 4.9 |
4.9.1 |
| six | 1.16.0 |
1.17.0 |
| websocket-client | 1.4.2 |
1.8.0 |
Bumps the pip-version-updates group with 3 updates in the /scanners/git-repo-scanner/scanner directory: pygithub, python-gitlab and pytz.
Updates cachetools from 5.2.1 to 6.2.0
Changelog
Sourced from cachetools's changelog.
v6.2.0 (2025-08-25)
Improve general
RRCacheperformance by storing cache keys in an additional sequence container. Note that this will increase memory consumption.Add more unit tests.
v6.1.0 (2025-06-16)
Improve
LFUCacheinsertion performance by switching to an implementation based on thecacheing <https://pypi.org/project/cacheing/>_ library.Update CI environment.
v6.0.0 (2025-05-23)
Require Python 3.9 or later (breaking change).
Remove
MRUCacheand the@func.mru_cachedecorator (breaking change).Add an optional
conditionparameter to the@cachedand@cachedmethoddecorators, which, when used with athreading.Conditioninstance, should improvecache stampede <https://en.wikipedia.org/wiki/Cache_stampede>_ issues in massively parallel environments. Note that this will inflict some performance penalty, and therefore has to be enabled explicitly.Convert the
cachetools.funcdecorators to use athreading.Conditioninstance to deal withcache stampede <https://en.wikipedia.org/wiki/Cache_stampede>_ issues. Note that this may result in a noticable performance degradation, depending on your actual use case.Deprecate support for
cache(self)returningNoneto suppress caching with the@cachedmethoddecorator.Improve documentation.
Update CI environment.
v5.5.2 (2025-02-20)
... (truncated)
Commits
4a238adRelease v6.2.0.9d511b7Improve unit tests.79aa8c7Fix #356: Improve RRCache performance.bb6d71aRelease v6.1.0.77a9c59Fix #260: Use LFUCache implementation based on Blake Reid's "cacheing" library.b1d4eb2Bump codecov/codecov-action from 5.4.2 to 5.4.3820b154Refactor@​cachedmethodunit tests.e497575Release v6.0.0.0a8f391Update related projects section.3afef37Pre-release v6.0.0b4.- Additional commits viewable in compare view
Updates certifi from 2024.7.4 to 2025.8.3
Commits
a97d9ad2025.08.03 (#362)ddd90c62025.07.14 (#359)d9052212025.07.09 (#358)e767d592025.06.15 (#357)3e70765Bump actions/setup-python from 5.5.0 to 5.6.09afd2ffBump actions/download-artifact from 4.2.1 to 4.3.0d7c816cremove code that's no longer required that 3.7 is our minimum (#351)1899613Declare setuptools as the build backend in pyproject.toml (#350)c874142update CI for ubuntu 20.04 deprecation (#348)275c9eb2025.04.26 (#347)- Additional commits viewable in compare view
Updates charset-normalizer from 3.0.1 to 3.4.3
Release notes
Sourced from charset-normalizer's releases.
Version 3.4.3
3.4.3 (2025-08-09)
Changed
- mypy(c) is no longer a required dependency at build time if
CHARSET_NORMALIZER_USE_MYPYCisn't set to1. (#595) (#583)- automatically lower confidence on small bytes samples that are not Unicode in
detectoutput legacy function. (#391)Added
- Custom build backend to overcome inability to mark mypy as an optional dependency in the build phase.
- Support for Python 3.14
Fixed
- sdist archive contained useless directories.
- automatically fallback on valid UTF-16 or UTF-32 even if the md says it's noisy. (#633)
Misc
- SBOM are automatically published to the relevant GitHub release to comply with regulatory changes. Each published wheel comes with its SBOM. We choose CycloneDX as the format.
- Prebuilt optimized wheel are no longer distributed by default for CPython 3.7 due to a change in cibuildwheel.
Version 3.4.2
3.4.2 (2025-05-02)
Fixed
- Addressed the DeprecationWarning in our CLI regarding
argparse.FileTypeby backporting the target class into the package. (#591)- Improved the overall reliability of the detector with CJK Ideographs. (#605) (#587)
Changed
- Optional mypyc compilation upgraded to version 1.15 for Python >= 3.9
Version 3.4.1
🚀 We're still raising awareness around HTTP/2, and HTTP/3!
Did you know that Internet Explorer 11 shipped with an optional HTTP/2 support back in 2013? also libcurl did ship it in 2014[...] Using Requests today is the rough equivalent of using EOL Windows 8! We promptly invite Python developers to look at the first drop-in replacement for Requests, namely Niquests. Ship with native WebSocket, SSE, Happy Eyeballs, DNS over HTTPS, and so on[...] All of this while remaining compatible with all Requests prior plug-ins / add-ons.
It leverages charset-normalizer in a better way! Check it out, you will gain up to being 3X faster and get a real/respectable support with it.
3.4.1 (2024-12-24)
Changed
- Project metadata are now stored using
pyproject.tomlinstead ofsetup.cfgusing setuptools as the build backend.- Enforce annotation delayed loading for a simpler and consistent types in the project.
- Optional mypyc compilation upgraded to version 1.14 for Python >= 3.8
Added
- pre-commit configuration.
- noxfile.
Removed
... (truncated)
Changelog
Sourced from charset-normalizer's changelog.
3.4.3 (2025-08-09)
Changed
- mypy(c) is no longer a required dependency at build time if
CHARSET_NORMALIZER_USE_MYPYCisn't set to1. (#595) (#583)- automatically lower confidence on small bytes samples that are not Unicode in
detectoutput legacy function. (#391)Added
- Custom build backend to overcome inability to mark mypy as an optional dependency in the build phase.
- Support for Python 3.14
Fixed
- sdist archive contained useless directories.
- automatically fallback on valid UTF-16 or UTF-32 even if the md says it's noisy. (#633)
Misc
- SBOM are automatically published to the relevant GitHub release to comply with regulatory changes. Each published wheel comes with its SBOM. We choose CycloneDX as the format.
- Prebuilt optimized wheel are no longer distributed by default for CPython 3.7 due to a change in cibuildwheel.
3.4.2 (2025-05-02)
Fixed
- Addressed the DeprecationWarning in our CLI regarding
argparse.FileTypeby backporting the target class into the package. (#591)- Improved the overall reliability of the detector with CJK Ideographs. (#605) (#587)
Changed
- Optional mypyc compilation upgraded to version 1.15 for Python >= 3.8
3.4.1 (2024-12-24)
Changed
- Project metadata are now stored using
pyproject.tomlinstead ofsetup.cfgusing setuptools as the build backend.- Enforce annotation delayed loading for a simpler and consistent types in the project.
- Optional mypyc compilation upgraded to version 1.14 for Python >= 3.8
Added
- pre-commit configuration.
- noxfile.
Removed
build-requirements.txtas per usingpyproject.tomlnative build configuration.bin/integration.pyandbin/serve.pyin favor of downstream integration test (see noxfile).setup.cfgin favor ofpyproject.tomlmetadata configuration.- Unused
utils.range_scanfunction.Fixed
- Converting content to Unicode bytes may insert
utf_8instead of preferredutf-8. (#572)- Deprecation warning "'count' is passed as positional argument" when converting to Unicode bytes on Python 3.13+
3.4.0 (2024-10-08)
... (truncated)
Commits
46f662dRelease 3.4.3 (#638)1a059b2:wrench: skip building on freethreaded as we're not confident it is stable2275e3d:pencil: final note in CHANGELOG.mdc96acdf:pencil: update release date on CHANGELOG.md43e5460:pencil: update README.mdf277074:wrench: automatically lower confidence on small bytes str on non Unicode res...15ae241:bug: automatically fallback on valid UTF-16 or UTF-32 even if the md says it...37397c1:wrench: enable 3.14 in nox test_mypyc sessioncb82537:rewind: revert license due to compat python 3.7 issue setuptools6a2efeb:art: fix linter errors- Additional commits viewable in compare view
Updates google-auth from 2.16.0 to 2.40.3
Release notes
Sourced from google-auth's releases.
v2.40.3
2.40.3 (2025-06-04)
Bug Fixes
- Auth fetch token from default endpoint (#1779) (88891cc)
- Remove unnecessary call to mds service (#1769) (7c61c7d)
- Retry 504 errors (#1767) (554f967)
v2.40.2
2.40.2 (2025-05-21)
Bug Fixes
- Remove sync response logs in AuthorizedSession (97ed1c8)
- Update test to consider new error message from cryptography (#1765) (44e38b6)
v2.40.1
2.40.1 (2025-05-06)
Bug Fixes
v2.40.0
2.40.0 (2025-04-29)
Features
Bug Fixes
v2.39.0
2.39.0 (2025-04-14)
Features
Bug Fixes
... (truncated)
Changelog
Sourced from google-auth's changelog.
2.40.3 (2025-06-04)
Bug Fixes
- Auth fetch token from default endpoint (#1779) (88891cc)
- Remove unnecessary call to mds service (#1769) (7c61c7d)
- Retry 504 errors (#1767) (554f967)
2.40.2 (2025-05-21)
Bug Fixes
- Remove sync response logs in AuthorizedSession (97ed1c8)
- Update test to consider new error message from cryptography (#1765) (44e38b6)
2.40.1 (2025-05-06)
Bug Fixes
2.40.0 (2025-04-29)
Features
Bug Fixes
2.39.0 (2025-04-14)
Features
Bug Fixes
... (truncated)
Commits
ca94eadchore(main): release 2.40.3 (#1768)88891ccfix: auth fetch token from default endpoint (#1779)0be91e2Revert "fix: remove unnecessary call to mds service (#1769)" (#1777)25660bcchore: update secret (#1774)7c61c7dfix: remove unnecessary call to mds service (#1769)554f967fix: retry 504 errors (#1767)6845065chore(main): release 2.40.2 (#1766)44e38b6fix: Update test to consider new error message from cryptography (#1765)97ed1c8chore: remove sync response logs in AuthorizedSession (#1761)13a897echore: update secret (#1764)- Additional commits viewable in compare view
Updates idna from 3.7 to 3.10
Release notes
Sourced from idna's releases.
v3.10
No release notes provided.
v3.9
No release notes provided.
v3.8
What's Changed
- Fix regression where IDNAError exception was not being produced for certain inputs.
- Add support for Python 3.13, drop support for Python 3.5 as it is no longer testable.
- Documentation improvements
- Updates to package testing using Github actions
Thanks to Hugo van Kemenade for contributions to this release.
Full Changelog: https://github.com/kjd/idna/compare/v3.7...v3.8
Changelog
Sourced from idna's changelog.
3.10 (2024-09-15) +++++++++++++++++
- Reverted to Unicode 15.1.0 data. Unicode 16 has some significant changes to UTS46 processing that will require more work to properly implement.
3.9 (2024-09-13) ++++++++++++++++
- Update to Unicode 16.0.0
- Deprecate setup.cfg in favour of pyproject.toml
- Use ruff for code formatting
Thanks to Waket Zheng for contributions to this release.
3.8 (2024-08-23) ++++++++++++++++
- Fix regression where IDNAError exception was not being produced for certain inputs.
- Add support for Python 3.13, drop support for Python 3.5 as it is no longer testable.
- Documentation improvements
- Updates to package testing using Github actions
Thanks to Hugo van Kemenade for contributions to this release.
Commits
729225dRelease v3.103eef168Merge pull request #194 from kjd/revert-unicode-16ceca619Revert Unicode 16.0.0 data updatesc43ac75Merge pull request #191 from kjd/release-3.91b8800aRelease v3.9a1fd168Merge pull request #190 from kjd/unicode-167732c61Merge branch 'master' into unicode-164ed183dRefactor membership test762216bFormat with ruff580ece9Implement changes to UTS46 algorithm- Additional commits viewable in compare view
Updates kubernetes from 25.3.0 to 33.1.0
Release notes
Sourced from kubernetes's releases.
Kubernetes Python Client v33.1.0 Stable Release
Getting started:
pip install --pre --upgrade kubernetesOr from source, download attached zip file, then
unzip client-python-v33.1.0.zip cd client-python-v33.1.0 python setup.py installThen follow examples in https://github.com/kubernetes-client/python/tree/release-33.0/examples
Changelog: https://github.com/kubernetes-client/python/blob/release-33.0/CHANGELOG.md
Kubernetes Python Client v33.1.0 Beta 1 Release
Getting started:
pip install --pre --upgrade kubernetesOr from source, download attached zip file, then
unzip client-python-v33.1.0b1.zip cd client-python-v33.1.0b1 python setup.py installThen follow examples in https://github.com/kubernetes-client/python/tree/release-33.0/examples
Changelog: https://github.com/kubernetes-client/python/blob/release-33.0/CHANGELOG.md
Kubernetes Python Client v33.1.0 Alpha 1 Release
Getting started:
pip install --pre --upgrade kubernetesOr from source, download attached zip file, then
unzip client-python-v33.1.0a1.zip cd client-python-v33.1.0a1 </tr></table>
... (truncated)
Changelog
Sourced from kubernetes's changelog.
v33.1.0
Kubernetes API Version: v1.33.1
v33.1.0b1
Kubernetes API Version: v1.33.1
v33.1.0a1
Kubernetes API Version: v1.33.1
API Change
A new alpha feature gate,
MutableCSINodeAllocatableCount, has been introduced.When this feature gate is enabled, the
CSINode.Spec.Drivers[*].Allocatable.Countfield becomes mutable, and a new field,NodeAllocatableUpdatePeriodSeconds, is available in theCSIDriverobject. This allows periodic updates to a node's reported allocatable volume capacity, preventing stateful pods from becoming stuck due to outdated information that kube-scheduler relies on. (kubernetes/kubernetes#130007,@​torredil) [SIG Apps, Node, Scheduling and Storage]Added feature gate
DRAPartitionableDevices, when enabled, Dynamic Resource Allocation support partitionable devices allocation. (kubernetes/kubernetes#130764,@​cici37) [SIG API Machinery, Architecture, Auth, CLI, Cloud Provider, Cluster Lifecycle, Instrumentation, Network, Node, Scheduling, Storage and Testing]Added DRA support for a "one-of" prioritized list of selection criteria to satisfy a device request in a resource claim. (kubernetes/kubernetes#128586,
@​mortent) [SIG API Machinery, Apps, Etcd, Node, Scheduling and Testing]Added a
/flagzendpoint for kubelet endpoint (kubernetes/kubernetes#128857,@​zhifei92) [SIG Architecture, Instrumentation and Node]Added a new
tolerancefield to HorizontalPodAutoscaler, overriding the cluster-wide default. Enabled via the HPAConfigurableTolerance alpha feature gate. (kubernetes/kubernetes#130797,@​jm-franc) [SIG API Machinery, Apps, Autoscaling, Etcd, Node, Scheduling and Testing]Added support for configuring custom stop signals with a new StopSignal container lifecycle (kubernetes/kubernetes#130556,
@​sreeram-venkitesh) [SIG API Machinery, Apps, Node and Testing]Added support for in-place vertical scaling of Pods with sidecars (containers defined within
initContainerswhere therestartPolicyis set toAlways). (kubernetes/kubernetes#128367,@​vivzbansal) [SIG API Machinery, Apps, CLI, Node, Scheduling and Testing]CPUManager Policy Options support is GA (kubernetes/kubernetes#130535,
@​ffromani) [SIG API Machinery, Node and Testing]Changed the Pod API to support
hugepage resourcesatspeclevel for pod-level resources. (kubernetes/kubernetes#130577,@​KevinTMtz) [SIG Apps, CLI, Node, Scheduling, Storage and Testing]DRA API: The maximum number of pods that can use the same ResourceClaim is now 256 instead of 32. Downgrading a cluster where this relaxed limit is in use to Kubernetes 1.32.0 is not supported, as version 1.32.0 would refuse to update ResourceClaims with more than 32 entries in the
status.reservedForfield. (kubernetes/kubernetes#129543,@​pohly) [SIG API Machinery, Node and Testing]DRA: CEL expressions using attribute strings exceeded the cost limit because their cost estimation was incomplete. (kubernetes/kubernetes#129661,
@​pohly) [SIG Node]DRA: Device taints enable DRA drivers or admins to mark device as unusable, which prevents allocating them. Pods may also get evicted at runtime if a device becomes unusable, depending on the severity of the taint and whether the claim tolerates the taint. (kubernetes/kubernetes#130447,
@​pohly) [SIG API Machinery, Apps, Architecture, Auth, Etcd, Instrumentation, Node, Scheduling and Testing]DRA: Starting Kubernetes 1.33, only users with access to an admin namespace with the
kubernetes.io/dra-admin-accesslabel are authorized to create ResourceClaim or ResourceClaimTemplate objects with theadminAccessfield in this admin namespace if they want to and only they can reference these ResourceClaims or ResourceClaimTemplates in their pod or deployment specs. (kubernetes/kubernetes#130225,@​ritazh) [SIG API Machinery, Apps, Auth, Node and Testing]DRA: when asking for "All" devices on a node, Kubernetes <= 1.32 proceeded to schedule pods onto nodes with no devices by not allocating any devices for those pods. Kubernetes 1.33 changes that to only picking nodes which have at least one device. Users who want the "proceed with scheduling also without devices" semantic can use the upcoming prioritized list feature with one sub-request for "all" devices and a second alternative with "count: 0". (kubernetes/kubernetes#129560,
@​bart0sh) [SIG API Machinery and Node]Expanded the on-disk kubelet credential provider configuration to allow an optional
tokenAttributefield to be configured. When it is set, the kubelet will provision a token with the given audience bound to the current pod and its service account. This KSA token along with required annotations on the KSA defined in configuration will be sent to the credential provider plugin via its standard input (along with the image information that is already sent today). The KSA annotations to be sent are configurable in the kubelet credential provider configuration. (kubernetes/kubernetes#128372,@​aramase) [SIG API Machinery, Auth, Node and Testing]Fixed the example validation rule in godoc:
When configuring a JWT authenticator:
If username.expression uses 'claims.email', then 'claims.email_verified' must be used in username.expression or extra[].valueExpression or claimValidationRules[].expression. An example claim validation rule expression that matches the validation automatically applied when username.claim is set to 'email' is 'claims.?email_verified.orValue(true) == true'. By explicitly comparing the value to true, we let type-checking see the result will be a boolean, and to make sure a non-boolean
email_verifiedclaim will be caught at runtime. (kubernetes/kubernetes#130875,@​aramase) [SIG Auth and Release]For the
InPlacePodVerticalScalingfeature, the API server will no longer set the resize status toProposedupon receiving a resize request. (kubernetes/kubernetes#130574,@​natasha41575) [SIG Apps, Node and Testing]Graduate the
MatchLabelKeys(MismatchLabelKeys) feature in PodAffinity (PodAntiAffinity) to GA (kubernetes/kubernetes#130463,@​sanposhiho) [SIG API Machinery, Apps, Node, Scheduling and Testing]Graduated image volume sources to beta:
- Allowed
subPath/subPathExprfor image volumes- Added kubelet metrics
kubelet_image_volume_requested_total,kubelet_image_volume_mounted_succeed_totalandkubelet_image_volume_mounted_errors_total(kubernetes/kubernetes#130135,@​saschagrunert) [SIG API Machinery, Apps, Node and Testing]Implemented a new status field,
.status.terminatingReplicas, for Deployments and ReplicaSets to track terminating pods. The new field is present when theDeploymentPodReplacementPolicyfeature gate is enabled. (kubernetes/kubernetes#128546,@​atiratree) [SIG API Machinery, Apps and Testing]Implemented validation for
NodeSelectorRequirementvalues in Kubernetes when creating pods. (kubernetes/kubernetes#128212,@​AxeZhan) [SIG Apps and Scheduling]Improved how the API server responds to list requests where the response format negotiates to Protobuf. List responses in Protobuf are marshalled one element at the time, drastically reducing memory needed to serve large collections. Streaming list responses can be disabled via the
StreamingCollectionEncodingToProtobuffeature gate. (kubernetes/kubernetes#129407,@​serathius) [SIG API Machinery, Apps, Architecture, Auth, CLI, Cloud Provider, Network, Node, Release, Scheduling, Storage and Testing]
... (truncated)
Commits
8f5578eMerge pull request #2412 from yliaog/automated-release-of-33.1.0-upstream-rel...5a367e9updated compatibility matrix and maintenance statusf00d2b7generated client change9d712b4update changelog45eb341update version constants for 33.1.0 release58551e4Merge pull request #2408 from yliaog/automated-release-of-33.1.0b1-upstream-r...bd6c752updated compatibility matrixde8ee89generated client changefec5585update changelog78aee45update version constants for 33.1.0b1 release- Additional commits viewable in compare view
Updates oauthlib from 3.2.2 to 3.3.1
Release notes
Sourced from oauthlib's releases.
v3.3.1
What's Changed
- Stop installing
examplesintosite-packagesby@​mgornyin oauthlib/oauthlib#904- Add explicit GHSA for vuln disclosure by
@​JonathanHuotin oauthlib/oauthlib#903- Add mandatory RTD configuration by
@​JonathanHuotin oauthlib/oauthlib#908- Fix 3.3.0 regression of expires_in by
@​JonathanHuotin oauthlib/oauthlib#907Full Changelog: https://github.com/oauthlib/oauthlib/compare/v3.3.0...v3.3.1
3.3.0
What's Changed
See also CHANGELOG.md
- Use proper SPDX identifier by
@​Shortfingain oauthlib/oauthlib#836- Upgrade GitHub Actions and make bandit, codespell, and pytest mandatory by
@​cclaussin oauthlib/oauthlib#835- OAuth2Error: Allow falsy values as state by
@​TiphaineLAURENTin oauthlib/oauthlib#815- Update pre-configured OIDC server to use OIDC flavor of Refresh Token grant type by
@​burkel24in oauthlib/oauthlib#838- Update setup.cfg to use license_files by
@​mgornyin oauthlib/oauthlib#839- Ensure expires_at is always int by
@​sindrigin oauthlib/oauthlib#828- create security policy by
@​auvipyin oauthlib/oauthlib#831- Fix failing GitHub Action lint_python.yml by
@​cclaussin oauthlib/oauthlib#854- Lint with ruff to replace bandit, flake8, isort, pyupgrade by
@​cclaussin oauthlib/oauthlib#855- Add classifier for Python 3.11 by
@​eseifertin oauthlib/oauthlib#840- Move from Travis to GitHub Actions CI by
@​auvipyin oauthlib/oauthlib#834- Add support for Python 3.12 by
@​hugovkin oauthlib/oauthlib#859- CI: Only attempt upload for upstream by
@​hugovkin oauthlib/oauthlib#858- Lint with ruff to replace bandit, flake8, isort, pyupgrade by
@​cclaussin oauthlib/oauthlib#861- Ensure that
request.client_idis set during Refresh Token Grant. by@​luhnin oauthlib/oauthlib#853- Tox use ruff by
@​cclaussin oauthlib/oauthlib#864- Make UtilsTests.test_filter_params Python 3.13+ compatible by
@​hroncokin oauthlib/oauthlib#866- Create dependency-review.yml by
@​auvipyin oauthlib/oauthlib#850- Update supported python versions in classifier by
@​auvipyin oauthlib/oauthlib#860- Coveralls parallel is True — Turn GitHub Actions green by
@​cclaussin oauthlib/oauthlib#871- Fix CI Errors by
@​shawnzin oauthlib/oauthlib#878- Update create_code_verifier to output the proper length by
@​shawnzin oauthlib/oauthlib#876- Add the device authorization endpoint (RFC8628 section 3.1 & 3.2) by
@​duzumakiin oauthlib/oauthlib#881- Add support for Python 3.13 by
@​hugovkin oauthlib/oauthlib#883- Allow user_code to be configured for device auth flow (Device Authorization Grant) by
@​duzumakiin oauthlib/oauthlib#885- Guard ui_locales.split() by
@​jaap3in oauthlib/oauthlib#879- Add DeviceCodeGrant type for device code flow(rfc8628) section 3.4 & 3.5 by
@​duzumakiin oauthlib/oauthlib#889- Device flow: Pass verification_uri_complete to endpoint + pass Server kwargs to DeviceCodeGrant to allow validators to be setup with more flexibility by
@​duzumakiin oauthlib/oauthlib#891- Remove code verifier regex by
@​shawnzin oauthlib/oauthlib#893- Remove generic classifier by
@​EvertonSAin oauthlib/oauthlib#895- docs: add django-allauth to available options by
@​pennersrin oauthlib/oauthlib#902- Handle expires_at with best effort basis by
@​JonathanHuotin oauthlib/oauthlib#900- 3.3.0 release by
@​JonathanHuotin oauthlib/oauthlib#898New Contributors
@​Shortfingamade their first contribution in oauthlib/oauthlib#836
... (truncated)
Changelog
Sourced from oauthlib's changelog.
3.3.1 (2025-06-19):
OAuth2.0 Client:
- #906: fix regression of expires_in parsing when float in string.
3.3.0 (2025-06-17):
OAuth2.0 Provider:
- OIDC: #879 Changed in how ui_locales is parsed
- RFC8628: Added OAuth2.0 Device Authorization Grant support
- PKCE: #876, #893 Fixed
create_code_verifierlength- OIDC: Pre-configured OIDC server to use Refresh Token by default
OAuth2.0 Common:
- OAuth2Error: Allow 0 to be a valid state
OAuth2.0 Client:
General:
- Removed Python 3.5, 3.6, 3.7 support
- #859, #883: Added Python 3.12, 3.13 Support
- Added dependency-review GitHub Action
- Updated various references of license (SPDX identifier..)
- Added GitHub Action for lint, replaced bandy with ruff, removed isort...
- Migrated to GitHub Actions from Travis
- Added Security Policy
Commits
a2779c6Bump dependency-review38c2a8eMerge publish into build workflow9b65bafBump version93fdf91Add twine manual instructions6b65bd1Merge branch 'master' into release-3.3.134c9012Handle expires_in as float to be backward compatible with 3.2.*f5d58f8Merge pull request #908 from oauthlib/rtd-cfg136b3e7Add mandatory RTD configuration8929532Add unit test sample based on 3.3.0 regression of expires_in9ed616dMerge pull request #903 from oauthlib/security-ghsa- Additional commits viewable in compare view
Updates pyasn1 from 0.4.8 to 0.6.1
Release notes
Sourced from pyasn1's releases.
Release 0.6.1
It's a minor release.
- Added support for Python 3.13.
- Cleaned Python 2-related code.
- Removed bdist_wheel universal flag from setup.cfg.
All changes are noted in the CHANGELOG.
Release 0.6.0
It's a major release where we drop Python 2 support entirely. The most significant changes are:
- Removed support for EOL Python 2.7, 3.6, 3.7
- Added support for previously missing
RELATIVE-OIDconstruct- Updated link to Layman's Guide
All changes are noted in the CHANGELOG.
Release 0.5.1
It's a minor release.
- Added support for PyPy 3.10 and Python 3.12
- Updated RTD configuration to include a dummy index.rst redirecting to contents.html, ensuring compatibility with third-party documentation and search indexes.
- Fixed the API breakage wih decoder.decode(substrateFun=...). A substrateFun passed to
decoder.decode()can now be either v0.4 Non-Streaming or v0.5 Streaming. pyasn1 will detect and handle both cases transparently. A substrateFun passed to one of the new streaming decoders is still expected to be v0.5 Streaming only.All changes are noted in the CHANGELOG.
Release 0.5.0
It's a major release. The most important changes are:
- PyPI package ownership for
pyasn1andpyasn1-modulehas been transferred to Christian Heimes and Simon Pichugin in [PyPI support ticket #2090](pypa/pypi-support#2090).- The upstream repositories for
pyasn1andpyasn1-modulesare now in the GitHub organization https://github.com/pyasn1/.- Modernized packaging and testing. pyasn1 now uses
setup.cfg,pyproject.toml, build, and GitHub Actions.- Make BER/CER/DER decoders streaming and suspendible
- Added support for Python 3.8, 3.9, 3.10, 3.11
- Removed support for EOL Pythons 2.4, 2.5, 2.6, 3.2, 3.3, 3.4, 3.5
- Added support for PyPy 3.7, 3.8, 3.9
All changes are noted in the CHANGELOG.
Changelog
Sourced from pyasn1's changelog.
Revision 0.6.1, released 10-09-2024
- Added support for Python 3.13 and updated GitHub Actions [pr #73](pyasn1/pyasn1#73)
- Removed Python 2 support and related code [pr #62](pyasn1/pyasn1#62) [pr #61Description has been truncated
Pull Request Statistics
1
2
+19
-19
Package Dependencies
Technical Details
| ID: | 5857370 |
| UUID: | 2777071036 |
| Node ID: | PR_kwDOBM-Q_c6lhr28 |
| Host: | GitHub |
| Repository: | secureCodeBox/secureCodeBox |
| Merge State: | Unknown |