Sourced from dnspython's releases.
dnspython 2.9.2
A malicious WKS record in text format can consume excessive memory and CPU when parsed, possibly causing the process to exit due to memory exhaustion. Thanks to Jace (GitHub
@manus-use) for discovering and reporting this issue.See What's New for details.
The minimum supported version of Python is 3.11.
My thanks to the many people who have contributed to this release. Also thanks to my co-maintainers: Nicki Křížek, Petr Špaček, and Brian Wellington.
This release was published to PyPI using Trusted Publishing.
Sourced from dnspython's changelog.
2.9.2
- A maliciously crafted zone file could use a WKS record to consume excessive memory and CPU, possibly causing the process to exit due to memory exhaustion. Thanks to Jace (GitHub
@manus-use) for discovering and reporting this issue.
854bedd
bump README.md version388db14
Constrain WKS bitmap size.7e1832f
version bumpSourced from authlib's releases.
v1.9.5
Changelog: https://docs.authlib.org/en/stable/upgrades/changelog.html#changelog-1-9-5
Full Changelog: https://github.com/authlib/authlib/compare/v1.9.4...v1.9.5
v1.9.4
Changelog: https://docs.authlib.org/en/stable/upgrades/changelog.html#changelog-1-9-4
Full Changelog: https://github.com/authlib/authlib/compare/v1.9.3...v1.9.4
v1.9.3
Changelog: https://docs.authlib.org/en/stable/upgrades/changelog.html#changelog-1-9-3
Full Changelog: https://github.com/authlib/authlib/compare/v1.9.2...v1.9.3
42607cb
chore: release 1.9.5ce5bb0d
fix(jose): refuse SSH keys with a tab and SSH certificates as HMAC
secrets9dffddf
chore: release 1.9.467db2aa
fix(oauth): let IDJAGGrant resolve users by issuer and subjecte90d1b1
chore: release 1.9.3ec4c7a1
Merge commit from forkSourced from joserfc's releases.
1.8.0
🐞 Bug Fixes
- Use python>=3.11, improve type hints - by
@lepture(7c6de)- Replace typing as t syntax - by
@lepture(7422a)- Treat claims option "value" as the expected claim value - by
@choksi2212(232d6)- jwe: Refresh ECDH ephemeral keys per encryption - by
@lepture(cc6ec)- jwe: Reject explicitly empty AAD - by
@lepture(96ef5)- jwk: Reject certificates and prefixed public keys as oct - by
@lepture(bf664)- jws: Protect critical JSON headers and b64 mode - by
@lepture(04cb5)- jwt: Reject tokens whose exp equals the current time - by
@carlokand Claude Sonnet 5.5 (e2e3a)- jwt: Reject NaN and Infinity in exp, nbf and iat - by
@carlokand Claude Sonnet 5.5 (b8a23)- jwt: Reject True/False in exp/nbf/iat - by
@lepture(953e5)- mypy: Use NotRequired in TypedDict - by
@lepture(351c1)View changes on GitHub
Sourced from joserfc's changelog.
1.8.0
Released on November 3, 2026
- JWT: Reject non-finite and boolean NumericDate claims, and reject JWT payloads that are not JSON objects.
- JWK: Reject X.509 certificates and prefixed asymmetric public keys as oct keys.
- JWS: Require critical headers and RFC 7797
b64parameters to be protected, and require a consistentb64value across General JSON signatures.- JWE: Generate fresh ECDH ephemeral keys for each encryption and reject an explicitly empty AAD member.
- Drop Python 3.10 support; Python 3.11 or newer is required.
- Preserve key subclasses in factory return types with
typing.Self.- Improve claim validation type narrowing with
typing.TypeGuardand refine password, native key, and equality annotations.
f345ff7
chore: release 1.8.0f1a3e43
chore: update deps96ef53a
fix(jwe): reject explicitly empty AADcc6ec3f
fix(jwe): refresh ECDH ephemeral keys per encryption04cb5d8
fix(jws): protect critical JSON headers and b64 modebf66415
fix(jwk): reject certificates and prefixed public keys as oct953e509
fix(jwt): reject True/False in exp/nbf/iat6ec88f2
Merge pull request #109
from carlok/fix/exp-boundaryb8a2394
fix(jwt): reject NaN and Infinity in exp, nbf and iate2e3a29
fix(jwt): reject tokens whose exp equals the current timeSourced from seleniumbase's releases.
4.57.1 - Linux
aarch64driver support (and more)Linux
aarch64driver support (and more)
- Add support for "aarch64" drivers on Linux --> This resolves seleniumbase/SeleniumBase#4546
- Update the default geckodriver version
- Refresh Python dependencies
What's Changed
- Linux
aarch64driver support (and more) by@mdmintzin seleniumbase/SeleniumBase#4547Full Changelog: https://github.com/seleniumbase/SeleniumBase/compare/v4.57.0...v4.57.1
4.57.0 - CDP and MCP updates (and dependencies)
CDP and MCP updates (and dependencies)
- Add timeout arg to CDP Mode's get_attribute() method --> This resolves seleniumbase/SeleniumBase#4542
- Auto-detect when evaluate() needs to await a Promise --> This resolves seleniumbase/SeleniumBase#4543
- Update the default Chromium config --> More stealth
- Refresh Python dependencies -->
pip-->websockets-->filelock-->trio-->selenium-->uv(optional dependency)What's Changed
- CDP and MCP updates (and dependencies) by
@mdmintzin seleniumbase/SeleniumBase#4545Full Changelog: https://github.com/seleniumbase/SeleniumBase/compare/v4.56.5...v4.57.0
d98668b
Merge pull request #4547
from seleniumbase/linux-aarch64-driver-support2c46b3b
Version 4.57.1c30c9b4
Update MCP versioningff6b226
Update the ReadMeebebbc9
Refresh Python dependenciesd71ca0c
Update the docs8504f66
Update the default geckodriver versionc737901
Add support for "aarch64" drivers on Linux5b87e78
Update examples and the ReadMeb0e0a33
Update the ReadMeSourced from prek's releases.
0.5.10
Release Notes
Released on 2026-11-04.
Enhancements
- Add a builtin
replace-patternhook (#2981)Bug fixes
- Avoid downloading Node prereleases by default (#2995)
- Keep file checks out of rayon's recursive frames (#2999)
- Skip Node releases without a compatible archive (#2996)
Documentation
- Add equivalent prek.toml examples throughout the documentation (#2979)
Contributors
Install prek 0.5.10
Install prebuilt binaries via shell script
curl --proto '=https' --tlsv1.2 -LsSf https://github.com/j178/prek/releases/download/v0.5.10/prek-installer.sh | shInstall prebuilt binaries via powershell script
powershell -ExecutionPolicy Bypass -c "irm https://github.com/j178/prek/releases/download/v0.5.10/prek-installer.ps1 | iex"Install prebuilt binaries via Homebrew
brew install prekDownload prek 0.5.10
File Platform Checksum prek-aarch64-apple-darwin.tar.gz Apple Silicon macOS checksum prek-x86_64-apple-darwin.tar.gz Intel macOS checksum
... (truncated)
Sourced from prek's changelog.
0.5.10
Released on 2026-11-04.
Enhancements
- Add a builtin
replace-patternhook (#2981)Bug fixes
- Avoid downloading Node prereleases by default (#2995)
- Keep file checks out of rayon's recursive frames (#2999)
- Skip Node releases without a compatible archive (#2996)
Documentation
- Add equivalent prek.toml examples throughout the documentation (#2979)
Contributors
516f5bd
Bump version to 0.5.10 (#3001)6201a32
Upgrade serde-saphyr to 2.1.0 (#2877)d08703e
Infer the release version from Cargo metadata (#3000)f03096a
Keep file checks out of rayon's recursive frames (#2999)c88a1cc
Skip Node releases without a compatible archive (#2996)10e7648
Avoid downloading Node prereleases by default (#2995)f1bfe9d
Update prek hooks (#2993)71e02db
Make release publishing resumable (#2992)84c3c67
Update CI tools (#2983)e4a4b4d
Group CI tools and compatible Rust dependencies (#2991)Sourced from ruff's releases.
0.17.4
Release Notes
Released on 2026-11-05.
Preview features
- [
flake8-logging-format] Avoid behavior changes and syntax errors in fixes (G004) (#27419)- [
security] Implementtarfile-ignore-zeros-true(#28680)Bug fixes
- Accept a bare raise before a semicolon (#29761)
- Allow match identifiers after a semicolon (#29760)
- Fix panic on BOM-prefixed files in diagnostic renderer (#30017)
- [
flake8-simplify] Report collapsibleelifclauses after a multi-statementifbranch (SIM102) (#29814)Rule changes
- Show more nonprinting characters in diagnostic fix diffs (#30062)
Performance
- Coalesce source slices when formatting attributes (#29841)
- Collect return statements with a statement-only visitor (#29911)
- [
pyflakes] Defer value comparisons for repeated dictionary keys (F601,F602) (#29739)- Format node fields directly when comment handling is unnecessary (#29853)
- Reduce formatter source-slice overhead (#29855)
- Reuse a callee's qualified name across lint rules (#29916)
- Skip invalid string character checks when the source contains none (#29883)
- Use a Bloom filter for formatter comment lookups (#29852)
- Use a concrete buffer for ordinary writes (#29819)
CLI
- Give
NO_COLORprecedence in Ruff and ty diagnostics (#29898)- Honor
CLICOLOR=0in Ruff and ty diagnostics (#29910)Documentation
- Correct the documented
versionandsrcdefaults forruff-action(#29880)- [
flake8-bugbear] MakeB014example error out-of-the-box (#29941)- [
flake8-no-pep420] Document preview behavior (INP001) (#29764)- [
isort] ExpandI001documentation (#29843)Other changes
- [syntax-errors] Extend
__debug__write check to attribute targets (#27908)Contributors
... (truncated)
Sourced from ruff's changelog.
0.17.4
Released on 2026-11-05.
Preview features
- [
flake8-logging-format] Avoid behavior changes and syntax errors in fixes (G004) (#27419)- [
security] Implementtarfile-ignore-zeros-true(#28680)Bug fixes
- Accept a bare raise before a semicolon (#29761)
- Allow match identifiers after a semicolon (#29760)
- Fix panic on BOM-prefixed files in diagnostic renderer (#30017)
- [
flake8-simplify] Report collapsibleelifclauses after a multi-statementifbranch (SIM102) (#29814)Rule changes
- Show more nonprinting characters in diagnostic fix diffs (#30062)
Performance
- Coalesce source slices when formatting attributes (#29841)
- Collect return statements with a statement-only visitor (#29911)
- [
pyflakes] Defer value comparisons for repeated dictionary keys (F601,F602) (#29739)- Format node fields directly when comment handling is unnecessary (#29853)
- Reduce formatter source-slice overhead (#29855)
- Reuse a callee's qualified name across lint rules (#29916)
- Skip invalid string character checks when the source contains none (#29883)
- Use a Bloom filter for formatter comment lookups (#29852)
- Use a concrete buffer for ordinary writes (#29819)
CLI
- Give
NO_COLORprecedence in Ruff and ty diagnostics (#29898)- Honor
CLICOLOR=0in Ruff and ty diagnostics (#29910)Documentation
- Correct the documented
versionandsrcdefaults forruff-action(#29880)- [
flake8-bugbear] MakeB014example error out-of-the-box (#29941)- [
flake8-no-pep420] Document preview behavior (INP001) (#29764)- [
isort] ExpandI001documentation (#29843)Other changes
- [syntax-errors] Extend
__debug__write check to attribute targets (#27908)Contributors
... (truncated)
05cdc36
Bump version to 0.17.4 (#30073)c6b17c2
[ty] Freshen method typevars before owner specialization (#29543)4b0b407
[ty] Preserve unions inferred during fixpoint iteration (#29927)1dd3e9e
Show more nonprinting characters in diagnostic fix diffs (#30062)32be8e7
[ty] Skip fixpoint iteration for simple generic calls (#30054)926ccc8
[ty] Handle output errors when generating shell completions (#29997)c86652a
[ty] Skip active Conda and Pixi environments during discovery if the
environm...c9150f0
Add project walltime benchmarks for Ruff (#30061)64989ec
[ty] Report invalid module globs once per override pattern (#30031)367a563
[ty] Fix conditional type and tuple annotations (#29987)