Skip to content

Commit

Permalink
[v1.1.0] Security fixes
Browse files Browse the repository at this point in the history
  • Loading branch information
Diapolo10 committed May 28, 2023
1 parent 35985e9 commit e0c0710
Show file tree
Hide file tree
Showing 2 changed files with 34 additions and 12 deletions.
44 changes: 33 additions & 11 deletions CHANGELOG.md
Original file line number Diff line number Diff line change
Expand Up @@ -50,27 +50,49 @@ Lorem Ipsum dolor sit amet.
<!--
_______________________________________________________________________________
## [1.0.2] - 2023-02-09
## [1.1.0] - 2023-05-29
Updated dependencies, metadata files, and GitHub Actions workflows.
Fixed a potential catastrophic backtracking vulnerability with a regular
expression used to parse strings in the package.
### Added
### Changed
- Added automated GitHub release builds
- Added Dependabot auto-updates
- Added `CODEOWNERS`
- Updated dependencies
- Replaced Pylint and Flake8 with Ruff
### Fixed
- Fixed miscellaneous linting issues
### Security
- A regular expression used to parse strings was found to have a potential
catastrophic backtracking vulnerability; this was fixed by replacing the
regex with a non-vulnerable variant
-->

_______________________________________________________________________________

## [1.1.0] - 2023-05-29

Fixed a potential catastrophic backtracking vulnerability with a regular
expression used to parse strings in the package.

### Changed

- Updated wording from American English to British English, because we have
our dignity
- Releases are now made from tags instead of merges
- Updated dependencies
- Replaced Pylint and Flake8 with Ruff

### Fixed

- Fixed a broken coverage option
- Fixed miscellaneous linting issues

-->
### Security

- A regular expression used to parse strings was found to have a potential
catastrophic backtracking vulnerability; this was fixed by replacing the
regex with a non-vulnerable variant

_______________________________________________________________________________

Expand Down
2 changes: 1 addition & 1 deletion pyproject.toml
Original file line number Diff line number Diff line change
Expand Up @@ -14,7 +14,7 @@ omit = [

[tool.poetry]
name = 'python_ms'
version = '1.0.2'
version = '1.1.0'
description = "A Python equivalent to the JavaScript ms package."

authors = ["Lari Liuhamo <lari.liuhamo+pypi@gmail.com>",]
Expand Down

0 comments on commit e0c0710

Please sign in to comment.