From cde30a8313bcf658ad4b2570798c9f1048bf983c Mon Sep 17 00:00:00 2001 From: Philip Iezzi Date: Tue, 21 May 2024 23:36:06 +0200 Subject: [PATCH] Upgrade pip package requirements Release v0.7.3 with security advice about PyMySQL 1.1.1 --- CHANGELOG.md | 10 +++++++++- README.md | 2 +- docker-compose.yml | 2 -- requirements.txt | 8 ++++---- 4 files changed, 14 insertions(+), 8 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index 8c9cec4..a4baba1 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,10 +1,18 @@ # CHANGELOG -## [v0.7.3](https://github.com/onlime/policyd-rate-guard/releases/tag/v0.7.3) (unreleased) +## [v0.7.4](https://github.com/onlime/policyd-rate-guard/releases/tag/v0.7.4) (unreleased) + + +## [v0.7.3](https://github.com/onlime/policyd-rate-guard/releases/tag/v0.7.3) (2024-05-21) **Improved:** - Improved PEP8 Python code style: Added configuration for [YAPF](https://github.com/google/yapf) and applied yapf formatting rules. +- Upgraded packages: DBUtils 3.1.0, cryptography 42.0.7, PyMySQL 1.1.1, python-dotenv 1.0.1, requests 2.32.2, sentry-sdk 2.2.1 + +**Security:** + +- **It is strongly recommended to upgrade all pip packages, as [PyMySQL 1.1.1](https://github.com/PyMySQL/PyMySQL/releases/tag/v1.1.1) fixes a SQL Injection vulnerability ([CVE-2024-36039](https://github.com/advisories/GHSA-v9hf-5j83-6xpp)).** ## [v0.7.2](https://github.com/onlime/policyd-rate-guard/releases/tag/v0.7.2) (2023-09-11) diff --git a/README.md b/README.md index d3dc6e1..066d61c 100644 --- a/README.md +++ b/README.md @@ -8,7 +8,7 @@ A slick sender rate limit policy daemon for Postfix, written in Python. -©2023 by [Onlime GmbH](https://www.onlime.ch/) – Your Swiss webhosting provider living the "no BS" philosophy! +©2024 by [Onlime GmbH](https://www.onlime.ch/) – Your Swiss webhosting provider living the "no BS" philosophy! ## Features ✨ diff --git a/docker-compose.yml b/docker-compose.yml index a9319eb..f90d07a 100644 --- a/docker-compose.yml +++ b/docker-compose.yml @@ -1,5 +1,3 @@ -version: '3.2' - services: # Database service to set up a testing/development environment db: diff --git a/requirements.txt b/requirements.txt index b00e9f6..c8ff5cb 100644 --- a/requirements.txt +++ b/requirements.txt @@ -1,8 +1,8 @@ -cryptography==41.0.* -DBUtils==3.0.* +cryptography==42.0.* +DBUtils==3.1.* PyMySQL==1.1.* PyJWT==2.8.* python-dotenv==1.0.* -requests==2.31.* -sentry-sdk==1.29.* +requests==2.32.* +sentry-sdk==2.2.* yoyo-migrations==8.2.*