Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Bump the pip group across 9 directories with 1 update #3

Merged
merged 1 commit into from
Jul 12, 2024
Merged

Bump the pip group across 9 directories with 1 update #3

merged 1 commit into from
Jul 12, 2024

Conversation

dependabot[bot]
Copy link

@dependabot dependabot bot commented on behalf of github Jun 18, 2024

Bumps the pip group with 1 update in the /apiserver directory: pymysql.
Bumps the pip group with 1 update in the /demo/accounting directory: pymysql.
Bumps the pip group with 1 update in the /demo/customer-data directory: pymysql.
Bumps the pip group with 1 update in the /demo/fulfillment directory: pymysql.
Bumps the pip group with 1 update in the /demo/inventory directory: pymysql.
Bumps the pip group with 1 update in the /demo/shipping directory: pymysql.
Bumps the pip group with 1 update in the /demo/shipping-records directory: pymysql.
Bumps the pip group with 1 update in the /demo/transaction-processing directory: pymysql.
Bumps the pip group with 1 update in the /demo/web-portal directory: pymysql.

Updates pymysql from 0.9.3 to 1.1.1

Release notes

Sourced from pymysql's releases.

v1.1.1

[!WARNING] This release fixes a vulnerability (CVE-2024-36039). All users are recommended to update to this version.

If you can not update soon, check the input value from untrusted source has an expected type. Only dict input from untrusted source can be an attack vector.

What's Changed

Merged PRs

New Contributors

Full Changelog: PyMySQL/PyMySQL@v1.1.0...v1.1.1

v1.1.0

What's Changed

... (truncated)

Changelog

Sourced from pymysql's changelog.

v1.1.1

Release date: 2024-05-21

[!WARNING] This release fixes a vulnerability (CVE-2024-36039). All users are recommended to update to this version.

If you can not update soon, check the input value from untrusted source has an expected type. Only dict input from untrusted source can be an attack vector.

  • Prohibit dict parameter for Cursor.execute(). It didn't produce valid SQL and might cause SQL injection. (CVE-2024-36039)
  • Added ssl_key_password param. #1145

v1.1.0

Release date: 2023-06-26

  • Fixed SSCursor raising OperationalError for query timeouts on wrong statement (#1032)
  • Exposed Cursor.warning_count to check for warnings without additional query (#1056)
  • Make Cursor iterator (#995)
  • Support '_' in key name in my.cnf (#1114)
  • Cursor.fetchall() returns empty list instead of tuple (#1115). Note that Cursor.fetchmany() still return empty tuple after reading all rows for compatibility with Django.
  • Deprecate Error classes in Cursor class (#1117)
  • Add Connection.set_character_set(charset, collation=None). This method is compatible with mysqlclient. (#1119)
  • Deprecate Connection.set_charset(charset) (#1119)
  • New connection always send "SET NAMES charset [COLLATE collation]" query. (#1119) Since collation table is vary on MySQL server versions, collation in handshake is fragile.
  • Support charset="utf8mb3" option (#1127)

v1.0.3

Release date: 2023-03-28

v1.0.2

... (truncated)

Commits

Updates pymysql from 0.9.3 to 1.1.1

Release notes

Sourced from pymysql's releases.

v1.1.1

[!WARNING] This release fixes a vulnerability (CVE-2024-36039). All users are recommended to update to this version.

If you can not update soon, check the input value from untrusted source has an expected type. Only dict input from untrusted source can be an attack vector.

What's Changed

Merged PRs

New Contributors

Full Changelog: PyMySQL/PyMySQL@v1.1.0...v1.1.1

v1.1.0

What's Changed

... (truncated)

Changelog

Sourced from pymysql's changelog.

v1.1.1

Release date: 2024-05-21

[!WARNING] This release fixes a vulnerability (CVE-2024-36039). All users are recommended to update to this version.

If you can not update soon, check the input value from untrusted source has an expected type. Only dict input from untrusted source can be an attack vector.

  • Prohibit dict parameter for Cursor.execute(). It didn't produce valid SQL and might cause SQL injection. (CVE-2024-36039)
  • Added ssl_key_password param. #1145

v1.1.0

Release date: 2023-06-26

  • Fixed SSCursor raising OperationalError for query timeouts on wrong statement (#1032)
  • Exposed Cursor.warning_count to check for warnings without additional query (#1056)
  • Make Cursor iterator (#995)
  • Support '_' in key name in my.cnf (#1114)
  • Cursor.fetchall() returns empty list instead of tuple (#1115). Note that Cursor.fetchmany() still return empty tuple after reading all rows for compatibility with Django.
  • Deprecate Error classes in Cursor class (#1117)
  • Add Connection.set_character_set(charset, collation=None). This method is compatible with mysqlclient. (#1119)
  • Deprecate Connection.set_charset(charset) (#1119)
  • New connection always send "SET NAMES charset [COLLATE collation]" query. (#1119) Since collation table is vary on MySQL server versions, collation in handshake is fragile.
  • Support charset="utf8mb3" option (#1127)

v1.0.3

Release date: 2023-03-28

v1.0.2

... (truncated)

Commits

Updates pymysql from 0.9.3 to 1.1.1

Release notes

Sourced from pymysql's releases.

v1.1.1

[!WARNING] This release fixes a vulnerability (CVE-2024-36039). All users are recommended to update to this version.

If you can not update soon, check the input value from untrusted source has an expected type. Only dict input from untrusted source can be an attack vector.

What's Changed

Merged PRs

New Contributors

Full Changelog: PyMySQL/PyMySQL@v1.1.0...v1.1.1

v1.1.0

What's Changed

... (truncated)

Changelog

Sourced from pymysql's changelog.

v1.1.1

Release date: 2024-05-21

[!WARNING] This release fixes a vulnerability (CVE-2024-36039). All users are recommended to update to this version.

If you can not update soon, check the input value from untrusted source has an expected type. Only dict input from untrusted source can be an attack vector.

  • Prohibit dict parameter for Cursor.execute(). It didn't produce valid SQL and might cause SQL injection. (CVE-2024-36039)
  • Added ssl_key_password param. #1145

v1.1.0

Release date: 2023-06-26

  • Fixed SSCursor raising OperationalError for query timeouts on wrong statement (#1032)
  • Exposed Cursor.warning_count to check for warnings without additional query (#1056)
  • Make Cursor iterator (#995)
  • Support '_' in key name in my.cnf (#1114)
  • Cursor.fetchall() returns empty list instead of tuple (#1115). Note that Cursor.fetchmany() still return empty tuple after reading all rows for compatibility with Django.
  • Deprecate Error classes in Cursor class (#1117)
  • Add Connection.set_character_set(charset, collation=None). This method is compatible with mysqlclient. (#1119)
  • Deprecate Connection.set_charset(charset) (#1119)
  • New connection always send "SET NAMES charset [COLLATE collation]" query. (#1119) Since collation table is vary on MySQL server versions, collation in handshake is fragile.
  • Support charset="utf8mb3" option (#1127)

v1.0.3

Release date: 2023-03-28

v1.0.2

... (truncated)

Commits

Updates pymysql from 0.9.3 to 1.1.1

Release notes

Sourced from pymysql's releases.

v1.1.1

[!WARNING] This release fixes a vulnerability (CVE-2024-36039). All users are recommended to update to this version.

If you can not update soon, check the input value from untrusted source has an expected type. Only dict input from untrusted source can be an attack vector.

What's Changed

Merged PRs

New Contributors

Full Changelog: PyMySQL/PyMySQL@v1.1.0...v1.1.1

v1.1.0

What's Changed

... (truncated)

Changelog

Sourced from pymysql's changelog.

v1.1.1

Release date: 2024-05-21

[!WARNING] This release fixes a vulnerability (CVE-2024-36039). All users are recommended to update to this version.

If you can not update soon, check the input value from untrusted source has an expected type. Only dict input from untrusted source can be an attack vector.

  • Prohibit dict parameter for Cursor.execute(). It didn't produce valid SQL and might cause SQL injection. (CVE-2024-36039)
  • Added ssl_key_password param. #1145

v1.1.0

Release date: 2023-06-26

  • Fixed SSCursor raising OperationalError for query timeouts on wrong statement (#1032)
  • Exposed Cursor.warning_count to check for warnings without additional query (#1056)
  • Make Cursor iterator (#995)
  • Support '_' in key name in my.cnf (#1114)
  • Cursor.fetchall() returns empty list instead of tuple (#1115). Note that Cursor.fetchmany() still return empty tuple after reading all rows for compatibility with Django.
  • Deprecate Error classes in Cursor class (#1117)
  • Add Connection.set_character_set(charset, collation=None). This method is compatible with mysqlclient. (#1119)
  • Deprecate Connection.set_charset(charset) (#1119)
  • New connection always send "SET NAMES charset [COLLATE collation]" query. (#1119) Since collation table is vary on MySQL server versions, collation in handshake is fragile.
  • Support charset="utf8mb3" option (#1127)

v1.0.3

Release date: 2023-03-28

v1.0.2

... (truncated)

Commits

Updates pymysql from 0.9.3 to 1.1.1

Release notes

Sourced from pymysql's releases.

v1.1.1

[!WARNING] This release fixes a vulnerability (CVE-2024-36039). All users are recommended to update to this version.

If you can not update soon, check the input value from untrusted source has an expected type. Only dict input from untrusted source can be an attack vector.

What's Changed

Merged PRs

New Contributors

Full Changelog: PyMySQL/PyMySQL@v1.1.0...v1.1.1

v1.1.0

What's Changed

... (truncated)

Changelog

Sourced from pymysql's changelog.

v1.1.1

Release date: 2024-05-21

[!WARNING] This release fixes a vulnerability (CVE-2024-36039). All users are recommended to update to this version.

If you can not update soon, check the input value from untrusted source has an expected type. Only dict input from untrusted source can be an attack vector.

  • Prohibit dict parameter for Cursor.execute(). It didn't produce valid SQL and might cause SQL injection. (CVE-2024-36039)
  • Added ssl_key_password param. #1145

v1.1.0

Release date: 2023-06-26

  • Fixed SSCursor raising OperationalError for query timeouts on wrong statement (#1032)
  • Exposed Cursor.warning_count to check for warnings without additional query (#1056)
  • Make Cursor iterator (#995)
  • Support '_' in key name in my.cnf (#1114)
  • Cursor.fetchall() returns empty list instead of tuple (#1115). Note that Cursor.fetchmany() still return empty tuple after reading all rows for compatibility with Django.
  • Deprecate Error classes in Cursor class (#1117)
  • Add Connection.set_character_set(charset, collation=None). This method is compatible with mysqlclient. (#1119)
  • Deprecate Connection.set_charset(charset) (#1119)
  • New connection always send "SET NAMES charset [COLLATE collation]" query. (#1119) Since collation table is vary on MySQL server versions, collation in handshake is fragile.
  • Support charset="utf8mb3" option (#1127)

v1.0.3

Release date: 2023-03-28

@dependabot
Bump the pip group across 9 directories with 1 update
762a2db 
Bumps the pip group with 1 update in the /apiserver directory: [pymysql](https://github.com/PyMySQL/PyMySQL).
Bumps the pip group with 1 update in the /demo/accounting directory: [pymysql](https://github.com/PyMySQL/PyMySQL).
Bumps the pip group with 1 update in the /demo/customer-data directory: [pymysql](https://github.com/PyMySQL/PyMySQL).
Bumps the pip group with 1 update in the /demo/fulfillment directory: [pymysql](https://github.com/PyMySQL/PyMySQL).
Bumps the pip group with 1 update in the /demo/inventory directory: [pymysql](https://github.com/PyMySQL/PyMySQL).
Bumps the pip group with 1 update in the /demo/shipping directory: [pymysql](https://github.com/PyMySQL/PyMySQL).
Bumps the pip group with 1 update in the /demo/shipping-records directory: [pymysql](https://github.com/PyMySQL/PyMySQL).
Bumps the pip group with 1 update in the /demo/transaction-processing directory: [pymysql](https://github.com/PyMySQL/PyMySQL).
Bumps the pip group with 1 update in the /demo/web-portal directory: [pymysql](https://github.com/PyMySQL/PyMySQL).


Updates `pymysql` from 0.9.3 to 1.1.1
- [Release notes](https://github.com/PyMySQL/PyMySQL/releases)
- [Changelog](https://github.com/PyMySQL/PyMySQL/blob/main/CHANGELOG.md)
- [Commits](PyMySQL/PyMySQL@v0.9.3...v1.1.1)

Updates `pymysql` from 0.9.3 to 1.1.1
- [Release notes](https://github.com/PyMySQL/PyMySQL/releases)
- [Changelog](https://github.com/PyMySQL/PyMySQL/blob/main/CHANGELOG.md)
- [Commits](PyMySQL/PyMySQL@v0.9.3...v1.1.1)

Updates `pymysql` from 0.9.3 to 1.1.1
- [Release notes](https://github.com/PyMySQL/PyMySQL/releases)
- [Changelog](https://github.com/PyMySQL/PyMySQL/blob/main/CHANGELOG.md)
- [Commits](PyMySQL/PyMySQL@v0.9.3...v1.1.1)

Updates `pymysql` from 0.9.3 to 1.1.1
- [Release notes](https://github.com/PyMySQL/PyMySQL/releases)
- [Changelog](https://github.com/PyMySQL/PyMySQL/blob/main/CHANGELOG.md)
- [Commits](PyMySQL/PyMySQL@v0.9.3...v1.1.1)

Updates `pymysql` from 0.9.3 to 1.1.1
- [Release notes](https://github.com/PyMySQL/PyMySQL/releases)
- [Changelog](https://github.com/PyMySQL/PyMySQL/blob/main/CHANGELOG.md)
- [Commits](PyMySQL/PyMySQL@v0.9.3...v1.1.1)

Updates `pymysql` from 0.9.3 to 1.1.1
- [Release notes](https://github.com/PyMySQL/PyMySQL/releases)
- [Changelog](https://github.com/PyMySQL/PyMySQL/blob/main/CHANGELOG.md)
- [Commits](PyMySQL/PyMySQL@v0.9.3...v1.1.1)

Updates `pymysql` from 0.9.3 to 1.1.1
- [Release notes](https://github.com/PyMySQL/PyMySQL/releases)
- [Changelog](https://github.com/PyMySQL/PyMySQL/blob/main/CHANGELOG.md)
- [Commits](PyMySQL/PyMySQL@v0.9.3...v1.1.1)

Updates `pymysql` from 0.9.3 to 1.1.1
- [Release notes](https://github.com/PyMySQL/PyMySQL/releases)
- [Changelog](https://github.com/PyMySQL/PyMySQL/blob/main/CHANGELOG.md)
- [Commits](PyMySQL/PyMySQL@v0.9.3...v1.1.1)

Updates `pymysql` from 0.9.3 to 1.1.1
- [Release notes](https://github.com/PyMySQL/PyMySQL/releases)
- [Changelog](https://github.com/PyMySQL/PyMySQL/blob/main/CHANGELOG.md)
- [Commits](PyMySQL/PyMySQL@v0.9.3...v1.1.1)

---
updated-dependencies:
- dependency-name: pymysql
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: pymysql
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: pymysql
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: pymysql
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: pymysql
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: pymysql
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: pymysql
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: pymysql
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: pymysql
  dependency-type: direct:production
  dependency-group: pip
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Jun 18, 2024
@CharlesFleming888 CharlesFleming888 merged commit 541086b into main Jul 12, 2024
1 check failed
@dependabot dependabot bot deleted the dependabot/pip/apiserver/pip-629686f3cf branch July 12, 2024 13:57
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
dependencies Pull requests that update a dependency file python Pull requests that update Python code
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
1 participant
@CharlesFleming888