Releases: pallets/itsdangerous
2.2.0
This is a feature release, which includes new features, removes previously deprecated code, and adds new deprecations. The 2.2.x branch is now the supported fix branch, the 2.1.x branch will become a tag marking the end of support for that branch. We encourage everyone to upgrade, and to use a tool such as pip-tools to pin all dependencies and control upgrades. Test with warnings treated as errors to be able to adapt to deprecation warnings early.
Changes: https://itsdangerous.palletsprojects.com/en/2.2.x/changes/#version-2-2-0
Milestone: https://github.com/pallets/itsdangerous/milestone/8?closed=1
- Drop support for Python 3.7.
- Use modern packaging metadata with
pyproject.toml
instead ofsetup.cfg
. - Use
flit_core
instead ofsetuptools
as build backend. - Deprecate the
__version__
attribute. Use feature detection, orimportlib.metadata.version("itsdangerous")
, instead. Serializer
and the return type ofdumps
is generic for type checking. By default it isSerializer[str]
anddumps
returns astr
. If a differentserializer
argument is given, it will try to infer the return type of itsdumps
method.- The default
hashlib.sha1
may not be available in FIPS builds. Don't access it at import time so the developer has time to change the default.
2.1.2
2.1.1
2.1.0
2.0.1
2.0.0
New major versions of all the core Pallets libraries, including ItsDangerous 2.0, have been released! 🎉
- Read the announcement on our blog: https://palletsprojects.com/blog/flask-2-0-released/
- Read the full list of changes: https://itsdangerous.palletsprojects.com/changes/#version-2-0-0
- Retweet the announcement on Twitter: https://twitter.com/PalletsTeam/status/1392266507296514048
- Follow our blog, Twitter, or GitHub to see future announcements.
This represents a significant amount of work, and there are quite a few changes. Be sure to carefully read the changelog, and use tools such as pip-compile and Dependabot to pin your dependencies and control your updates.