Bump the pip group across 1 directory with 9 updates #31

dependabot · 2024-04-24T19:03:10Z

Bumps the pip group with 9 updates in the / directory:

Package	From	To
certifi	`2022.12.7`	`2023.7.22`
cryptography	`42.0.2`	`42.0.4`
django	`3.2.17`	`3.2.25`
gunicorn	`20.1.0`	`22.0.0`
idna	`3.4`	`3.7`
requests	`2.28.2`	`2.31.0`
social-auth-app-django	`5.0.0`	`5.4.1`
sqlparse	`0.4.3`	`0.5.0`
urllib3	`1.26.14`	`1.26.18`

Updates certifi from 2022.12.7 to 2023.7.22

Commits

8fb96ed 2023.07.22
afe7722 Bump actions/setup-python from 4.6.1 to 4.7.0 (#230)
2038739 Bump dessant/lock-threads from 3.0.0 to 4.0.1 (#229)
44df761 Hash pin Actions and enable dependabot (#228)
8b3d7ba 2023.05.07
53da240 ci: Add Python 3.12-dev to the testing (#224)
c2fc3b1 Create a Security Policy (#222)
c211ef4 Set up permissions to github workflows (#218)
2087de5 Don't let deprecation warning fail CI (#219)
e0b9fc5 remove paragraphs about 1024-bit roots from README
Additional commits viewable in compare view

Updates cryptography from 42.0.2 to 42.0.4

Changelog

Sourced from cryptography's changelog.

42.0.4 - 2024-02-20

* Fixed a null-pointer-dereference and segfault that could occur when creating a PKCS#12 bundle. Credit to **Alexander-Programming** for reporting the issue. **CVE-2024-26130** * Fixed ASN.1 encoding for PKCS7/SMIME signed messages. The fields ``SMIMECapabilities`` and ``SignatureAlgorithmIdentifier`` should now be correctly encoded according to the definitions in :rfc:`2633` :rfc:`3370`. .. _v42-0-3:

42.0.3 - 2024-02-15

Fixed an initialization issue that caused key loading failures for some users.

.. _v42-0-2:

Commits

fe18470 Bump for 42.0.4 release (#10445)
aaa2dd0 Fix ASN.1 issues in PKCS#7 and S/MIME signing (#10373) (#10442)
7a4d012 Fixes #10422 -- don't crash when a PKCS#12 key and cert don't match (#10423) ...
df314bb backport actions m1 switch to 42.0.x (#10415)
c49a7a5 changelog and version bump for 42.0.3 (#10396)
396bcf6 fix provider loading take two (#10390) (#10395)
0e0e46f backport: initialize openssl's legacy provider in rust (#10323) (#10333)
See full diff in compare view

Updates django from 3.2.17 to 3.2.25

Commits

c98eca3 [3.2.x] Bumped version for 3.2.25 release.
072963e [3.2.x] Fixed CVE-2024-27351 -- Prevented potential ReDoS in Truncator.words().
2ad2676 [3.2.x] Added release date for 3.2.25.
fc41af6 [3.2.x] Fixed #35172 -- Fixed intcomma for string floats.
b9170b4 [3.2.x] Added CVE-2024-24680 to security archive.
e5350a9 [3.2.x] Post release version bump.
f5c8808 [3.2.x] Bumped version for 3.2.24 release.
c1171ff [3.2.x] Fixed CVE-2024-24680 -- Mitigated potential DoS in intcomma template ...
9dc3456 [3.2.x] Added stub release notes 3.2.24.
90eae45 [3.2.x] Fixed documented alias of smart_text().
Additional commits viewable in compare view

Updates gunicorn from 20.1.0 to 22.0.0

Release notes

Sourced from gunicorn's releases.

Gunicorn 22.0 has been released

Gunicorn 22.0.0 has been released. This version fix the numerous security vulnerabilities. You're invited to upgrade asap your own installation.

Changes:

22.0.0 - 2024-04-17
===================

use utime to notify workers liveness
migrate setup to pyproject.toml
fix numerous security vulnerabilities in HTTP parser (closing some request smuggling vectors)
parsing additional requests is no longer attempted past unsupported request framing
on HTTP versions < 1.1 support for chunked transfer is refused (only used in exploits)
requests conflicting configured or passed SCRIPT_NAME now produce a verbose error
Trailer fields are no longer inspected for headers indicating secure scheme
support Python 3.12

** Breaking changes **

minimum version is Python 3.7
the limitations on valid characters in the HTTP method have been bounded to Internet Standards
requests specifying unsupported transfer coding (order) are refused by default (rare)
HTTP methods are no longer casefolded by default (IANA method registry contains none affected)
HTTP methods containing the number sign (#) are no longer accepted by default (rare)
HTTP versions < 1.0 or >= 2.0 are no longer accepted by default (rare, only HTTP/1.1 is supported)
HTTP versions consisting of multiple digits or containing a prefix/suffix are no longer accepted
HTTP header field names Gunicorn cannot safely map to variables are silently dropped, as in other software
HTTP headers with empty field name are refused by default (no legitimate use cases, used in exploits)
requests with both Transfer-Encoding and Content-Length are refused by default (such a message might indicate an attempt to perform request smuggling)
empty transfer codings are no longer permitted (reportedly seen with really old & broken proxies)

** SECURITY **

fix CVE-2024-1135

Documentation is available there: https://docs.gunicorn.org/en/stable/news.html
Packages: https://pypi.org/project/gunicorn/

Gunicorn 21.2.0 has been released

Gunicorn 21.2.0 has been released. This version fix the issue introduced in the threaded worker.

Changes:

21.2.0 - 2023-07-19
===================
fix thread worker: revert change considering connection as idle .
</tr></table>

... (truncated)

Commits

f63d59e bump to 22.0
4ac81e0 Merge pull request #3175 from e-kwsm/typo
401cecf Merge pull request #3179 from dhdaines/exclude-eventlet-0360
0243ec3 fix(deps): exclude eventlet 0.36.0
628a0bc chore: fix typos
88fc4a4 Merge pull request #3131 from pajod/patch-py12-rebased
deae2fc CI: back off the agressive timeout
f470382 docs: promise 3.12 compat
5e30bfa add changelog to project.urls (updated for PEP621)
481c3f9 remove setup.cfg - overridden by pyproject.toml
Additional commits viewable in compare view

Updates idna from 3.4 to 3.7

Release notes

Sourced from idna's releases.

v3.7

What's Changed

Fix issue where specially crafted inputs to encode() could take exceptionally long amount of time to process. [CVE-2024-3651]

Thanks to Guido Vranken for reporting the issue.

Full Changelog: kjd/idna@v3.6...v3.7

Changelog

Sourced from idna's changelog.

3.7 (2024-04-11) ++++++++++++++++

Fix issue where specially crafted inputs to encode() could take exceptionally long amount of time to process. [CVE-2024-3651]

Thanks to Guido Vranken for reporting the issue.

3.6 (2023-11-25) ++++++++++++++++

Fix regression to include tests in source distribution.

3.5 (2023-11-24) ++++++++++++++++

Update to Unicode 15.1.0

String codec name is now "idna2008" as overriding the system codec "idna" was not working.

Fix typing error for codec encoding

"setup.cfg" has been added for this release due to some downstream lack of adherence to PEP 517. Should be removed in a future release so please prepare accordingly.

Removed reliance on a symlink for the "idna-data" tool to comport with PEP 517 and the Python Packaging User Guide for sdist archives.

Added security reporting protocol for project

Thanks Jon Ribbens, Diogo Teles Sant'Anna, Wu Tingfeng for contributions to this release.

Commits

1d365e1 Release v3.7
c1b3154 Merge pull request #172 from kjd/optimize-contextj
0394ec7 Merge branch 'master' into optimize-contextj
cd58a23 Merge pull request #152 from elliotwutingfeng/dev
5beb28b More efficient resolution of joiner contexts
1b12148 Update ossf/scorecard-action to v2.3.1
d516b87 Update Github actions/checkout to v4
c095c75 Merge branch 'master' into dev
60a0a4c Fix typo in GitHub Actions workflow key
5918a0e Merge branch 'master' into dev
Additional commits viewable in compare view

Updates requests from 2.28.2 to 2.31.0

Release notes

Sourced from requests's releases.

v2.31.0

2.31.0 (2023-05-22)

Security

Versions of Requests between v2.3.0 and v2.30.0 are vulnerable to potential forwarding of Proxy-Authorization headers to destination servers when following HTTPS redirects.

When proxies are defined with user info (https://user:pass@proxy:8080), Requests will construct a Proxy-Authorization header that is attached to the request to authenticate with the proxy.

In cases where Requests receives a redirect response, it previously reattached the Proxy-Authorization header incorrectly, resulting in the value being sent through the tunneled connection to the destination server. Users who rely on defining their proxy credentials in the URL are strongly encouraged to upgrade to Requests 2.31.0+ to prevent unintentional leakage and rotate their proxy credentials once the change has been fully deployed.

Users who do not use a proxy or do not supply their proxy credentials through the user information portion of their proxy URL are not subject to this vulnerability.

Full details can be read in our Github Security Advisory and CVE-2023-32681.

v2.30.0

2.30.0 (2023-05-03)

Dependencies

⚠️ Added support for urllib3 2.0. ⚠️

This may contain minor breaking changes so we advise careful testing and reviewing https://urllib3.readthedocs.io/en/latest/v2-migration-guide.html prior to upgrading.

Users who wish to stay on urllib3 1.x can pin to urllib3<2.

v2.29.0

2.29.0 (2023-04-26)

Improvements

Requests now defers chunked requests to the urllib3 implementation to improve standardization. (#6226)

Requests relaxes header component requirements to support bytes/str subclasses. (#6356)

Changelog

Sourced from requests's changelog.

2.31.0 (2023-05-22)

Security

Versions of Requests between v2.3.0 and v2.30.0 are vulnerable to potential forwarding of Proxy-Authorization headers to destination servers when following HTTPS redirects.

When proxies are defined with user info (https://user:pass@proxy:8080), Requests will construct a Proxy-Authorization header that is attached to the request to authenticate with the proxy.

In cases where Requests receives a redirect response, it previously reattached the Proxy-Authorization header incorrectly, resulting in the value being sent through the tunneled connection to the destination server. Users who rely on defining their proxy credentials in the URL are strongly encouraged to upgrade to Requests 2.31.0+ to prevent unintentional leakage and rotate their proxy credentials once the change has been fully deployed.

Users who do not use a proxy or do not supply their proxy credentials through the user information portion of their proxy URL are not subject to this vulnerability.

Full details can be read in our Github Security Advisory and CVE-2023-32681.

2.30.0 (2023-05-03)

Dependencies

⚠️ Added support for urllib3 2.0. ⚠️

This may contain minor breaking changes so we advise careful testing and reviewing https://urllib3.readthedocs.io/en/latest/v2-migration-guide.html prior to upgrading.

Users who wish to stay on urllib3 1.x can pin to urllib3<2.

2.29.0 (2023-04-26)

Improvements

Requests now defers chunked requests to the urllib3 implementation to improve standardization. (#6226)

Requests relaxes header component requirements to support bytes/str subclasses. (#6356)

Commits

147c851 v2.31.0
74ea7cf Merge pull request from GHSA-j8r2-6x86-q33q
3022253 test on pypy 3.8 and pypy 3.9 on windows and macos (#6424)
b639e66 test on py3.12 (#6448)
d3d5044 Fixed a small typo (#6452)
2ad18e0 v2.30.0
f2629e9 Remove strict parameter (#6434)
87d63de v2.29.0
51716c4 enable the warnings plugin (#6416)
a7da1ab try on ubuntu 22.04 (#6418)
Additional commits viewable in compare view

Updates social-auth-app-django from 5.0.0 to 5.4.1

Release notes

Sourced from social-auth-app-django's releases.

Release 5.4.1

Changed

Added reverse migration for JSON field

Fixed improper handling of case sensitivity with MySQL/MariaDB (CVE-2024-32879)

Release 5.4.0

Changed

Improved JSON field migration performance

Introduce configuration to request POST only requests for social authentication

Updated list of supported Django and Python versions

Release 5.3.0

Uses Django native JSON field

Release 5.2.0

Changed

Removed support for Django<3.2

Fixed missing migration issue

Release 5.1.0

Changed

Compatibility with recent Django and Python versions

Coding style improvements

Improved error handling in SocialAuthExceptionMiddleware

Changelog

Sourced from social-auth-app-django's changelog.

5.4.1 - 2024-04-24

Changed

Added reverse migration for JSON field

Fixed improper handling of case sensitivity with MySQL/MariaDB (CVE-2024-32879)

5.4.0 - 2023-10-17

Changed

Improved JSON field migration performance

Introduce configuration to request POST only requests for social authentication

Updated list of supported Django and Python versions

5.3.0 - 2023-09-01

Changed

Uses Django native JSON field

5.2.0 - 2023-03-31

Changed

Removed support for Django<3.2

Fixed missing migration issue

5.1.0 - 2023-03-15

Changed

Compatibility with recent Django and Python versions

Coding style improvements

Improved error handling in SocialAuthExceptionMiddleware

Commits

593ee46 Version bump 5.4.1
31c3e0c models: make sure uid is compared case-sensitive
7033ff7 [pre-commit.ci] pre-commit autoupdate
39da389 [pre-commit.ci] pre-commit autoupdate
0ec1bca [pre-commit.ci] pre-commit autoupdate
03bce61 [pre-commit.ci] pre-commit autoupdate
2278da6 [pre-commit.ci] pre-commit autoupdate
033302c build(deps-dev): bump tox from 4.14.1 to 4.14.2
c50bc4a [pre-commit.ci] pre-commit autoupdate
13e10d9 [pre-commit.ci] pre-commit autoupdate
Additional commits viewable in compare view

Updates sqlparse from 0.4.3 to 0.5.0

Changelog

Sourced from sqlparse's changelog.

Release 0.5.0 (Apr 13, 2024)

Notable Changes

Drop support for Python 3.5, 3.6, and 3.7.

Python 3.12 is now supported (pr725, by hugovk).

IMPORTANT: Fixes a potential denial of service attack (DOS) due to recursion error for deeply nested statements. Instead of recursion error a generic SQLParseError is raised. See the security advisory for details: GHSA-2m57-hf25-phgg The vulnerability was discovered by @uriyay-jfrog. Thanks for reporting!

Enhancements:

Splitting statements now allows to remove the semicolon at the end. Some database backends love statements without semicolon (issue742).

Support TypedLiterals in get_parameters (pr749, by Khrol).

Improve splitting of Transact SQL when using GO keyword (issue762).

Support for some JSON operators (issue682).

Improve formatting of statements containing JSON operators (issue542).

Support for BigQuery and Snowflake keywords (pr699, by griffatrasgo).

Support parsing of OVER clause (issue701, pr768 by r33s3n6).

Bug Fixes

Ignore dunder attributes when creating Tokens (issue672).

Allow operators to precede dollar-quoted strings (issue763).

Fix parsing of nested order clauses (issue745, pr746 by john-bodley).

Thread-safe initialization of Lexer class (issue730).

Classify TRUNCATE as DDL and GRANT/REVOKE as DCL keywords (based on pr719 by josuc1, thanks for bringing this up!).

Fix parsing of PRIMARY KEY (issue740).

Other

Optimize performance of matching function (pr799, by admachainz).

Release 0.4.4 (Apr 18, 2023)

Notable Changes

IMPORTANT: This release fixes a security vulnerability in the parser where a regular expression vulnerable to ReDOS (Regular Expression Denial of Service) was used. See the security advisory for details: GHSA-rrm6-wvj7-cwh2 The vulnerability was discovered by @erik-krogh from GitHub Security Lab (GHSL). Thanks for reporting!

... (truncated)

Commits

ddbd0ec Bump version.
29f2e0a Raise recursion limit for tests.
b4a39d9 Raise SQLParseError instead of RecursionError.
f1bcf2f Update AUHTORS and Changelog.
e03b74e Fix Function.get_parameters(), add Funtion.get_window()
617b8f6 Add OVER clause, and group it into Function (fixes #701)
d8f8147 Update AUHTORS and Changelog.
012c9f1 Optimize sqlparse.utils.imt().
46971e5 Fix parsing of PRIMARY KEY (fixes #740).
fc4b0be Code cleanup.
Additional commits viewable in compare view

Updates urllib3 from 1.26.14 to 1.26.18

Release notes

Sourced from urllib3's releases.

1.26.18

Made body stripped from HTTP requests changing the request method to GET after HTTP 303 "See Other" redirect responses. (GHSA-g4mx-q9vg-27p4)

1.26.17

Added the Cookie header to the list of headers to strip from requests when redirecting to a different host. As before, different headers can be set via Retry.remove_headers_on_redirect. (GHSA-v845-jxx5-vc9f)

1.26.16

Fixed thread-safety issue where accessing a PoolManager with many distinct origins would cause connection pools to be closed while requests are in progress (#2954)

1.26.15

Fix socket timeout value when HTTPConnection is reused (urllib3/urllib3#2645)

Remove "!" character from the unreserved characters in IPv6 Zone ID parsing (urllib3/urllib3#2899)

Fix IDNA handling of 'x80' byte (urllib3/urllib3#2901)

Changelog

Sourced from urllib3's changelog.

1.26.18 (2023-10-17)

Made body stripped from HTTP requests changing the request method to GET after HTTP 303 "See Other" redirect responses.

1.26.17 (2023-10-02)

Added the Cookie header to the list of headers to strip from requests when redirecting to a different host. As before, different headers can be set via Retry.remove_headers_on_redirect. ([#3139](https://github.com/urllib3/urllib3/issues/3139) <https://github.com/urllib3/urllib3/pull/3139>_)

1.26.16 (2023-05-23)

Fixed thread-safety issue where accessing a PoolManager with many distinct origins would cause connection pools to be closed while requests are in progress ([#2954](https://github.com/urllib3/urllib3/issues/2954) <https://github.com/urllib3/urllib3/pull/2954>_)

1.26.15 (2023-03-10)

Fix socket timeout value when HTTPConnection is reused ([#2645](https://github.com/urllib3/urllib3/issues/2645) <https://github.com/urllib3/urllib3/issues/2645>__)

Remove "!" character from the unreserved characters in IPv6 Zone ID parsing ([#2899](https://github.com/urllib3/urllib3/issues/2899) <https://github.com/urllib3/urllib3/issues/2899>__)

Fix IDNA handling of '\x80' byte ([#2901](https://github.com/urllib3/urllib3/issues/2901) <https://github.com/urllib3/urllib3/issues/2901>__)

Commits

9c2c230 Release 1.26.18 (#3159)
b594c5c Merge pull request from GHSA-g4mx-q9vg-27p4
944f0eb [1.26] Use vendored six in urllib3.contrib.securetransport
c9016bf Release 1.26.17
0122035 Backport GHSA-v845-jxx5-vc9f (#3139)
e63989f Fix installing brotli extra on Python 2.7
2e7a24d [1.26] Configure OS for RTD to fix building docs
57181d6 [1.26] Improve error message when calling urllib3.request() (#3058)
3c01480 [1.26] Run coverage even with failed jobs
d94029b Release 1.26.16
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps the pip group with 9 updates in the / directory: | Package | From | To | | --- | --- | --- | | [certifi](https://github.com/certifi/python-certifi) | `2022.12.7` | `2023.7.22` | | [cryptography](https://github.com/pyca/cryptography) | `42.0.2` | `42.0.4` | | [django](https://github.com/django/django) | `3.2.17` | `3.2.25` | | [gunicorn](https://github.com/benoitc/gunicorn) | `20.1.0` | `22.0.0` | | [idna](https://github.com/kjd/idna) | `3.4` | `3.7` | | [requests](https://github.com/psf/requests) | `2.28.2` | `2.31.0` | | [social-auth-app-django](https://github.com/python-social-auth/social-app-django) | `5.0.0` | `5.4.1` | | [sqlparse](https://github.com/andialbrecht/sqlparse) | `0.4.3` | `0.5.0` | | [urllib3](https://github.com/urllib3/urllib3) | `1.26.14` | `1.26.18` | Updates `certifi` from 2022.12.7 to 2023.7.22 - [Commits](certifi/python-certifi@2022.12.07...2023.07.22) Updates `cryptography` from 42.0.2 to 42.0.4 - [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst) - [Commits](pyca/cryptography@42.0.2...42.0.4) Updates `django` from 3.2.17 to 3.2.25 - [Commits](django/django@3.2.17...3.2.25) Updates `gunicorn` from 20.1.0 to 22.0.0 - [Release notes](https://github.com/benoitc/gunicorn/releases) - [Commits](benoitc/gunicorn@20.1.0...22.0.0) Updates `idna` from 3.4 to 3.7 - [Release notes](https://github.com/kjd/idna/releases) - [Changelog](https://github.com/kjd/idna/blob/master/HISTORY.rst) - [Commits](kjd/idna@v3.4...v3.7) Updates `requests` from 2.28.2 to 2.31.0 - [Release notes](https://github.com/psf/requests/releases) - [Changelog](https://github.com/psf/requests/blob/main/HISTORY.md) - [Commits](psf/requests@v2.28.2...v2.31.0) Updates `social-auth-app-django` from 5.0.0 to 5.4.1 - [Release notes](https://github.com/python-social-auth/social-app-django/releases) - [Changelog](https://github.com/python-social-auth/social-app-django/blob/master/CHANGELOG.md) - [Commits](python-social-auth/social-app-django@5.0.0...5.4.1) Updates `sqlparse` from 0.4.3 to 0.5.0 - [Changelog](https://github.com/andialbrecht/sqlparse/blob/master/CHANGELOG) - [Commits](andialbrecht/sqlparse@0.4.3...0.5.0) Updates `urllib3` from 1.26.14 to 1.26.18 - [Release notes](https://github.com/urllib3/urllib3/releases) - [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst) - [Commits](urllib3/urllib3@1.26.14...1.26.18) --- updated-dependencies: - dependency-name: certifi dependency-type: indirect dependency-group: pip - dependency-name: cryptography dependency-type: indirect dependency-group: pip - dependency-name: django dependency-type: direct:production dependency-group: pip - dependency-name: gunicorn dependency-type: direct:production dependency-group: pip - dependency-name: idna dependency-type: indirect dependency-group: pip - dependency-name: requests dependency-type: direct:production dependency-group: pip - dependency-name: social-auth-app-django dependency-type: direct:production dependency-group: pip - dependency-name: sqlparse dependency-type: indirect dependency-group: pip - dependency-name: urllib3 dependency-type: indirect dependency-group: pip ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot bot added the dependencies Pull requests that update a dependency file label Apr 24, 2024

dependabot bot mentioned this pull request Apr 24, 2024

Bump the pip group across 1 directory with 8 updates #30

Closed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump the pip group across 1 directory with 9 updates #31

Bump the pip group across 1 directory with 9 updates #31

dependabot bot commented on behalf of github Apr 24, 2024

Bump the pip group across 1 directory with 9 updates #31

Are you sure you want to change the base?

Bump the pip group across 1 directory with 9 updates #31

Conversation

dependabot bot commented on behalf of github Apr 24, 2024

Gunicorn 22.0 has been released

Gunicorn 21.2.0 has been released

v3.7

What's Changed

v2.31.0

2.31.0 (2023-05-22)

v2.30.0

2.30.0 (2023-05-03)

v2.29.0

2.29.0 (2023-04-26)

2.31.0 (2023-05-22)

2.30.0 (2023-05-03)

2.29.0 (2023-04-26)

Release 5.4.1

Changed

Release 5.4.0

Changed

Release 5.3.0

Release 5.2.0

Changed

Release 5.1.0

Changed

5.4.1 - 2024-04-24

Changed

5.4.0 - 2023-10-17

Changed

5.3.0 - 2023-09-01

Changed

5.2.0 - 2023-03-31

Changed

5.1.0 - 2023-03-15

Changed

Release 0.5.0 (Apr 13, 2024)

Release 0.4.4 (Apr 18, 2023)

1.26.18

1.26.17

1.26.16

1.26.15

1.26.18 (2023-10-17)

1.26.17 (2023-10-02)

1.26.16 (2023-05-23)

1.26.15 (2023-03-10)