Skip to content

Bump httplib2 from 0.17.4 to 0.19.1 in /megalist_dataflow#14

Closed
dependabot[bot] wants to merge 23 commits intomasterfrom
dependabot/pip/megalist_dataflow/httplib2-0.19.1
Closed

Bump httplib2 from 0.17.4 to 0.19.1 in /megalist_dataflow#14
dependabot[bot] wants to merge 23 commits intomasterfrom
dependabot/pip/megalist_dataflow/httplib2-0.19.1

Conversation

@dependabot
Copy link

@dependabot dependabot bot commented on behalf of github Apr 29, 2021

Bumps httplib2 from 0.17.4 to 0.19.1.

Changelog

Sourced from httplib2's changelog.

0.19.1

auth header parsing performance optimizations; Thanks to Paul McGuire

Use mock from the standard library on Python>=3.3

0.19.0

auth: parse headers using pyparsing instead of regexp httplib2/httplib2#182

auth: WSSE token needs to be string not bytes httplib2/httplib2#179

0.18.1

explicit build-backend workaround for pip build isolation bug "AttributeError: 'module' object has no attribute 'legacy'" on pip install httplib2/httplib2#169

0.18.0

IMPORTANT security vulnerability CWE-93 CRLF injection Force %xx quote of space, CR, LF characters in uri. Special thanks to Recar https://github.com/Ciyfly for discrete notification. https://cwe.mitre.org/data/definitions/93.html

Commits
  • 58e6f66 v0.19.1 release
  • 77464f8 auth header parsing performance optimizations; Thanks to Paul McGuire
  • f88fe0a Use mock from the standard library
  • 81e80d0 v0.19.0 release
  • c3aed1e fix release script, interactive part
  • bd9ee25 parse auth headers using pyparsing instead of regexp
  • 33090ab initial fuzz testing integration with OSS-Fuzz
  • 595e248 auth: WSSE token needs to be string not bytes
  • 9bf300c v0.18.1 release
  • cb2940a explicit build-backend workaround pip build isolation bug 6264
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

caiotomazelli and others added 2 commits April 8, 2021 17:20
build: 🏗️ terraform improvements and CI
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Apr 29, 2021
caiotomazelli and others added 21 commits April 30, 2021 18:10
Translate constants and remove unnecessary metadata
Changed name for Marketing Data Sync and added credit to Google Project
- Added config variables in pyproject.toml to replace default behavior
- Changed dependabot scheduler frequency
Added semantic release to generating git tags and release, without make python package and publish on pipy
pytest-cov, pytz, aiohttp, six and terraform.yml
Co-authored-by: nivaldoh <nivaldo.humbertoo@gmail.com>
feat:🆕  Add Firestore source
feat:🆕  Add Firestore source
perf: ⬆️ Update dependencies
@dependabot dependabot bot changed the base branch from main to master May 3, 2021 02:19
@dependabot dependabot bot force-pushed the dependabot/pip/megalist_dataflow/httplib2-0.19.1 branch from ea97912 to 71f67f7 Compare May 3, 2021 02:19
nivaldoh pushed a commit that referenced this pull request May 4, 2021
Added JSON configuration support
nivaldoh added a commit that referenced this pull request May 7, 2021
…pendencies

Refactor Firestore integration style to match PR #14 and update supporting files. Extra: accept custom source and destination names
nivaldoh added a commit that referenced this pull request May 7, 2021
Refactor Firestore integration following the style introduced in PR #14
nivaldoh added a commit that referenced this pull request May 25, 2021
Refactor Firestore integration following the style introduced in PR #14
nivaldoh added a commit that referenced this pull request May 26, 2021
Refactor Firestore integration following the style introduced in PR #14
nivaldoh added a commit that referenced this pull request May 26, 2021
Refactor Firestore integration following the style introduced in PR #14
nivaldoh added a commit that referenced this pull request Jun 6, 2021
Refactor Firestore integration following the style introduced in PR #14
nivaldoh added a commit that referenced this pull request Jun 6, 2021
Refactor Firestore integration following the style introduced in PR #14
@dependabot @github
Copy link
Author

dependabot bot commented on behalf of github Nov 1, 2021

Superseded by #39.

@dependabot dependabot bot closed this Nov 1, 2021
@dependabot dependabot bot deleted the dependabot/pip/megalist_dataflow/httplib2-0.19.1 branch November 1, 2021 08:01
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Pull requests that update Python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants