Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump nautobot from 2.0.0 to 2.0.3 #184

Closed
wants to merge 1 commit into from

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Oct 24, 2023

Bumps nautobot from 2.0.0 to 2.0.3.

Release notes

Sourced from nautobot's releases.

v2.0.3 - 2023-10-23

What's Changed

Added

  • #4612 - Added validation step to handle invalid/legacy filters from v1.x in DynamicGroup form validation.
  • #4668 - Added an ENABLE_ALPHA_UI configuration option to the settings, which is initially set to False. When set to True, this option enables the "Alpha UI 2.0" feature.

Changed

  • #4668 - Changed the flag --no-build-ui to --build-ui, and its default value to False for the nautobot-server post-upgrade command.

Fixed

  • #4604 - Fixed post_upgrade bug involving potential left over references to Aggregate, DeviceRole, and RackRole ContentTypes in ObjectChange records.
  • #4608 - Fixed error 'IPAddressBulkAddForm' has no field named 'parent' when bulk creating IPs via UI.
  • #4669 - Added redirects from 1.x documentation paths to their 2.x equivalents to fix broken links/bookmarks.
  • #4676 - Ensured that ScheduledJob.job_class values are correctly transferred to ScheduledJob.task during v2 migration.
  • #4692 - Fixed incorrect inheritance of Meta attributes into nested serializers (depth >= 1).

Housekeeping

  • #4692 - Added check in REST API generic test cases to detect strings like password and sha256 that shouldn't generally appear in REST API responses.

Security

  • #4671 - Updated urllib3 to 2.0.7 due to CVE-2023-45803. This is not a direct dependency so it will not auto-update when upgrading. Please be sure to upgrade your local environment.
  • #4673 - Fixed token exposure in JobResult traceback and result output when a GitRepositorySync job fails in certain ways.
  • #4692 - Fixed potential exposure of hashed user password data on certain REST API endpoints when using the ?depth=1 query parameter. For more details, please refer to GHSA-r2hw-74xv-4gqp.

Contributors

Full Changelog: nautobot/nautobot@v2.0.2...v2.0.3

v2.0.2 - 2023-10-17

What's Changed

Added

  • #4361 - Added SUPPORT_MESSAGE configuration setting.
  • #4607 - Added nautobot-server audit_graphql_queries management command for evaluating breaking filter changes to existing GraphQLQuery instances.

Changed

... (truncated)

Commits
  • ea72936 Merge pull request #4693 from nautobot/release/2.0.3
  • 02c9ab2 towncrier
  • 80c6653 Merge branch 'develop' into release/2.0.3
  • 4cee222 Fixed token exposure in JobResult traceback and result output when `GitRepo...
  • bfe1f80 Merge branch 'develop' into release/2.0.3
  • 1ce8e5c Fix Meta inheritance in nested serializer classes (#4692)
  • 3bf4d0e Bump version
  • 896c10c Bump urllib3 from 2.0.6 to 2.0.7 (#4671)
  • 817dba8 Ensured that job_class values ScheduledJob instances are transferred to task ...
  • 41b009a Disable New UI by default (#4661)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [nautobot](https://github.com/nautobot/nautobot) from 2.0.0 to 2.0.3.
- [Release notes](https://github.com/nautobot/nautobot/releases)
- [Changelog](https://github.com/nautobot/nautobot/blob/develop/CHANGELOG.md)
- [Commits](nautobot/nautobot@v2.0.0...v2.0.3)

---
updated-dependencies:
- dependency-name: nautobot
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Oct 24, 2023
Copy link
Contributor Author

dependabot bot commented on behalf of github Nov 22, 2023

Superseded by #191.

@dependabot dependabot bot closed this Nov 22, 2023
@dependabot dependabot bot deleted the dependabot/pip/nautobot-2.0.3 branch November 22, 2023 20:59
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants