More fully sanitized the filename in PackageIndex._download. (#4946)
v78.1.0
Features
Restore access to _get_vc_env with a warning. (#4874)
v78.0.2
Bugfixes
Postponed removals of deprecated dash-separated and uppercase fields in setup.cfg.
All packages with deprecated configurations are advised to move before 2026. (#4911)
This version introduces a more generalized handling of potential denial of
service attack (DOS) due to recursion errors for deeply nested statements.
Brought up and fixed by @living180. Thanks a lot!
Release 0.5.2 (Nov 14, 2024)
Bug Fixes
EXTENSION is now recognized as a keyword (issue785).
SQL hints are not removed when removing comments (issue262, by skryzh).
Release 0.5.1 (Jul 15, 2024)
Enhancements
New "compact" option for formatter. If set, the formatter tries to produce
a more compact output by avoiding some line breaks (issue783).
Bug Fixes
The strip comments filter was a bit greedy and removed too much
whitespace (issue772).
Note: In some cases you might want to add strip_whitespace=True where you
previously used just strip_comments=True. strip_comments did some of the
work that strip_whitespace should do.
Fix error when splitting statements that contain multiple CASE clauses
within a BEGIN block (issue784).
Fix whitespace removal with nested expressions (issue782).
Fix parsing and formatting of ORDER clauses containing NULLS FIRST or
NULLS LAST (issue532).
Release 0.5.0 (Apr 13, 2024)
Notable Changes
Drop support for Python 3.5, 3.6, and 3.7.
Python 3.12 is now supported (pr725, by hugovk).
IMPORTANT: Fixes a potential denial of service attack (DOS) due to recursion
error for deeply nested statements. Instead of recursion error a generic
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
You can disable automated security fix PRs for this repo from the Security Alerts page.
Bumps the pip group with 3 updates in the / directory: [django](https://github.com/django/django), [djangorestframework](https://github.com/encode/django-rest-framework) and [setuptools](https://github.com/pypa/setuptools).
Updates `django` from 4.0.1 to 4.2.21
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/django/django/commit/87175d270aec969d3cad4bad1abf45e07302d795"><code>87175d2</code></a> [4.2.x] Bumped version for 4.2.21 release.</li>
<li><a href="https://github.com/django/django/commit/9cd8028f3e38dca8e51c1388f474eecbe7d6ca3c"><code>9cd8028</code></a> [4.2.x] Fixed CVE-2025-32873 -- Mitigated potential DoS in strip_tags().</li>
<li><a href="https://github.com/django/django/commit/ca31ca09f7ae5abab76012752a24a317544cdc2d"><code>ca31ca0</code></a> [4.2.x] Changed packing recommendation to use pyproject.toml in reusable apps...</li>
<li><a href="https://github.com/django/django/commit/f4bd5647019bf4b4dc85dd9f05894e5c0e377e00"><code>f4bd564</code></a> [4.2.x] Adjusted GitHub Action workflow to test Python versions based off pyp...</li>
<li><a href="https://github.com/django/django/commit/3456eee4a3a00dc14e72d4f7d6eecc15ed9571e7"><code>3456eee</code></a> [4.2.x] Fixed <a href="https://redirect.github.com/django/django/issues/35980">#35980</a> -- Updated setuptools to normalize package names in buil...</li>
<li><a href="https://github.com/django/django/commit/afe52d89c4f42870622a4bb161ab5f4d4913aac5"><code>afe52d8</code></a> [4.2.x] Migrated setuptools configuration to pyproject.toml.</li>
<li><a href="https://github.com/django/django/commit/35c34ed2d0039db98a871da300531514bb0cbac0"><code>35c34ed</code></a> [4.2.x] Removed obsolete rpm-related install code.</li>
<li><a href="https://github.com/django/django/commit/93973d4f88b46fe72e806361711eeefa83f8e535"><code>93973d4</code></a> [4.2.x] Added upcoming security release to release notes.</li>
<li><a href="https://github.com/django/django/commit/b3df75339904fb0bc5742d0b458ac59b8e68835b"><code>b3df753</code></a> [4.2.x] Refs <a href="https://redirect.github.com/django/django/issues/36341">#36341</a> -- Added release note for 4.2.21 for fix in wordwrap temp...</li>
<li><a href="https://github.com/django/django/commit/e61e3daaf037507211028494d61f24382be31e5a"><code>e61e3da</code></a> [4.2.x] Fixed <a href="https://redirect.github.com/django/django/issues/36341">#36341</a> -- Preserved whitespaces in wordwrap template filter.</li>
<li>Additional commits viewable in <a href="https://github.com/django/django/compare/4.0.1...4.2.21">compare view</a></li>
</ul>
</details>
<br />
Updates `djangorestframework` from 3.13.1 to 3.15.2
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/encode/django-rest-framework/releases">djangorestframework's releases</a>.</em></p>
<blockquote>
<h2>3.15.2</h2>
<h2>What's Changed</h2>
<ul>
<li>Add <a href="https://github.com/api"><code>@api</code></a>_view example to caching documentation by <a href="https://github.com/BradWells"><code>@BradWells</code></a> in <a href="https://redirect.github.com/encode/django-rest-framework/pull/9131">encode/django-rest-framework#9131</a></li>
<li>Update docstring by <a href="https://github.com/jthevos"><code>@jthevos</code></a> in <a href="https://redirect.github.com/encode/django-rest-framework/pull/9340">encode/django-rest-framework#9340</a></li>
<li>Apply black formatting to caching markdown by <a href="https://github.com/jthevos"><code>@jthevos</code></a> in <a href="https://redirect.github.com/encode/django-rest-framework/pull/9341">encode/django-rest-framework#9341</a></li>
<li>Update renderers documentation example by <a href="https://github.com/mgaligniana"><code>@mgaligniana</code></a> in <a href="https://redirect.github.com/encode/django-rest-framework/pull/9362">encode/django-rest-framework#9362</a></li>
<li>Removing live examples of tutorial code that are no longer hosted by <a href="https://github.com/TGoddessana"><code>@TGoddessana</code></a> in <a href="https://redirect.github.com/encode/django-rest-framework/pull/9363">encode/django-rest-framework#9363</a></li>
<li>Docs: Remove an unnecessary step from quickstart.md by <a href="https://github.com/gogowitsch"><code>@gogowitsch</code></a> in <a href="https://redirect.github.com/encode/django-rest-framework/pull/9387">encode/django-rest-framework#9387</a></li>
<li>Documentation: Add Python 3.12 to the requirements by <a href="https://github.com/Szaroslav"><code>@Szaroslav</code></a> in <a href="https://redirect.github.com/encode/django-rest-framework/pull/9382">encode/django-rest-framework#9382</a></li>
<li>Tweak README.md links. by <a href="https://github.com/tomchristie"><code>@tomchristie</code></a> in <a href="https://redirect.github.com/encode/django-rest-framework/pull/9375">encode/django-rest-framework#9375</a></li>
<li>Revert "Ensure CursorPagination respects nulls in the ordering field" by <a href="https://github.com/max-muoto"><code>@max-muoto</code></a> in <a href="https://redirect.github.com/encode/django-rest-framework/pull/9381">encode/django-rest-framework#9381</a></li>
<li>use warnings rather than logging a warning for DecimalField warnings by <a href="https://github.com/terencehonles"><code>@terencehonles</code></a> in <a href="https://redirect.github.com/encode/django-rest-framework/pull/9367">encode/django-rest-framework#9367</a></li>
<li>20240426 docs by <a href="https://github.com/peterthomassen"><code>@peterthomassen</code></a> in <a href="https://redirect.github.com/encode/django-rest-framework/pull/9392">encode/django-rest-framework#9392</a></li>
<li>Cleanup by <a href="https://github.com/peterthomassen"><code>@peterthomassen</code></a> in <a href="https://redirect.github.com/encode/django-rest-framework/pull/9393">encode/django-rest-framework#9393</a></li>
<li>tests: Check urlpatterns after cleanups by <a href="https://github.com/stanislavlevin"><code>@stanislavlevin</code></a> in <a href="https://redirect.github.com/encode/django-rest-framework/pull/9400">encode/django-rest-framework#9400</a></li>
<li>docs: Correct some evaluation results and a httpie option in Tutorial1 by <a href="https://github.com/wkwkhautbois"><code>@wkwkhautbois</code></a> in <a href="https://redirect.github.com/encode/django-rest-framework/pull/9421">encode/django-rest-framework#9421</a></li>
<li>Add <code>__hash__</code> method for <code>permissions.OperandHolder</code> class by <a href="https://github.com/vanya909"><code>@vanya909</code></a> in <a href="https://redirect.github.com/encode/django-rest-framework/pull/9417">encode/django-rest-framework#9417</a></li>
<li>Fix potential XSS vulnerability in break_long_headers template filter by <a href="https://github.com/ch4n3-yoon"><code>@ch4n3-yoon</code></a> in <a href="https://redirect.github.com/encode/django-rest-framework/pull/9435">encode/django-rest-framework#9435</a></li>
<li>Version 3.15.2. by <a href="https://github.com/tomchristie"><code>@tomchristie</code></a> in <a href="https://redirect.github.com/encode/django-rest-framework/pull/9439">encode/django-rest-framework#9439</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/BradWells"><code>@BradWells</code></a> made their first contribution in <a href="https://redirect.github.com/encode/django-rest-framework/pull/9131">encode/django-rest-framework#9131</a></li>
<li><a href="https://github.com/jthevos"><code>@jthevos</code></a> made their first contribution in <a href="https://redirect.github.com/encode/django-rest-framework/pull/9340">encode/django-rest-framework#9340</a></li>
<li><a href="https://github.com/gogowitsch"><code>@gogowitsch</code></a> made their first contribution in <a href="https://redirect.github.com/encode/django-rest-framework/pull/9387">encode/django-rest-framework#9387</a></li>
<li><a href="https://github.com/Szaroslav"><code>@Szaroslav</code></a> made their first contribution in <a href="https://redirect.github.com/encode/django-rest-framework/pull/9382">encode/django-rest-framework#9382</a></li>
<li><a href="https://github.com/wkwkhautbois"><code>@wkwkhautbois</code></a> made their first contribution in <a href="https://redirect.github.com/encode/django-rest-framework/pull/9421">encode/django-rest-framework#9421</a></li>
<li><a href="https://github.com/ch4n3-yoon"><code>@ch4n3-yoon</code></a> made their first contribution in <a href="https://redirect.github.com/encode/django-rest-framework/pull/9435">encode/django-rest-framework#9435</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a href="https://github.com/encode/django-rest-framework/compare/3.15.1...3.15.2">https://github.com/encode/django-rest-framework/compare/3.15.1...3.15.2</a></p>
<h2>Version 3.15.1</h2>
<h2>What's Changed</h2>
<ul>
<li>Update the message to be consistent with the Django `HttpResponseBa… by <a href="https://github.com/maycuatroi"><code>@maycuatroi</code></a> in <a href="https://redirect.github.com/encode/django-rest-framework/pull/9287">encode/django-rest-framework#9287</a></li>
<li>Make <code>inflection</code> package truly optional by <a href="https://github.com/browniebroke"><code>@browniebroke</code></a> in <a href="https://redirect.github.com/encode/django-rest-framework/pull/9303">encode/django-rest-framework#9303</a></li>
<li>Fix broken links in release notes for 3.15 by <a href="https://github.com/browniebroke"><code>@browniebroke</code></a> in <a href="https://redirect.github.com/encode/django-rest-framework/pull/9305">encode/django-rest-framework#9305</a></li>
<li>TokenAdmin.autocomplete_fields Breaks Some Use Cases, Revert by <a href="https://github.com/alexdlaird"><code>@alexdlaird</code></a> in <a href="https://redirect.github.com/encode/django-rest-framework/pull/9301">encode/django-rest-framework#9301</a></li>
<li>Add drf-sendables to third-party-packages.md by <a href="https://github.com/amikrop"><code>@amikrop</code></a> in <a href="https://redirect.github.com/encode/django-rest-framework/pull/9261">encode/django-rest-framework#9261</a></li>
<li>Revert "feat: Add some changes to ValidationError to support django style vad…" by <a href="https://github.com/auvipy"><code>@auvipy</code></a> in <a href="https://redirect.github.com/encode/django-rest-framework/pull/9326">encode/django-rest-framework#9326</a></li>
<li>Revert "Re-prefetch related objects after updating" by <a href="https://github.com/auvipy"><code>@auvipy</code></a> in <a href="https://redirect.github.com/encode/django-rest-framework/pull/9327">encode/django-rest-framework#9327</a></li>
<li>Revert <a href="https://redirect.github.com/encode/django-rest-framework/issues/8863">#8863</a> by <a href="https://github.com/tomchristie"><code>@tomchristie</code></a> in <a href="https://redirect.github.com/encode/django-rest-framework/pull/9330">encode/django-rest-framework#9330</a></li>
<li>Revert <a href="https://redirect.github.com/encode/django-rest-framework/issues/8009">#8009</a> by <a href="https://github.com/tomchristie"><code>@tomchristie</code></a> in <a href="https://redirect.github.com/encode/django-rest-framework/pull/9332">encode/django-rest-framework#9332</a></li>
<li>Revert <a href="https://redirect.github.com/encode/django-rest-framework/issues/9030">#9030</a> by <a href="https://github.com/tomchristie"><code>@tomchristie</code></a> in <a href="https://redirect.github.com/encode/django-rest-framework/pull/9333">encode/django-rest-framework#9333</a></li>
<li>Revert "Fix NamespaceVersioning ignoring DEFAULT_VERSION on non-None namespaces" by <a href="https://github.com/auvipy"><code>@auvipy</code></a> in <a href="https://redirect.github.com/encode/django-rest-framework/pull/9335">encode/django-rest-framework#9335</a></li>
<li><code>SearchFilter.get_search_terms</code> returns list. by <a href="https://github.com/tomchristie"><code>@tomchristie</code></a> in <a href="https://redirect.github.com/encode/django-rest-framework/pull/9338">encode/django-rest-framework#9338</a></li>
<li>Version 3.15.1 by <a href="https://github.com/tomchristie"><code>@tomchristie</code></a> in <a href="https://redirect.github.com/encode/django-rest-framework/pull/9339">encode/django-rest-framework#9339</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/maycuatroi"><code>@maycuatroi</code></a> made their first contribution in <a href="https://redirect.github.com/encode/django-rest-framework/pull/9287">encode/django-rest-framework#9287</a></li>
<li><a href="https://github.com/alexdlaird"><code>@alexdlaird</code></a> made their first contribution in <a href="https://redirect.github.com/encode/django-rest-framework/pull/9301">encode/django-rest-framework#9301</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/encode/django-rest-framework/commit/c7a7eae551528b6887614df816c8a26df70272d6"><code>c7a7eae</code></a> Version 3.15.2 (<a href="https://redirect.github.com/encode/django-rest-framework/issues/9439">#9439</a>)</li>
<li><a href="https://github.com/encode/django-rest-framework/commit/3b41f0124194430da957b119712978fa2266b642"><code>3b41f01</code></a> Fix potential XSS vulnerability in break_long_headers template filter (<a href="https://redirect.github.com/encode/django-rest-framework/issues/9435">#9435</a>)</li>
<li><a href="https://github.com/encode/django-rest-framework/commit/fe92f0dd0d4c587eed000c7de611ddbff241bd6a"><code>fe92f0d</code></a> Add <code>__hash__</code> method for <code>permissions.OperandHolder</code> class (<a href="https://redirect.github.com/encode/django-rest-framework/issues/9417">#9417</a>)</li>
<li><a href="https://github.com/encode/django-rest-framework/commit/fbdab09c776d5ceef041793a7acd1c9e91695e5d"><code>fbdab09</code></a> docs: Correct some evaluation results and a httpie option in Tutorial1 (<a href="https://redirect.github.com/encode/django-rest-framework/issues/9421">#9421</a>)</li>
<li><a href="https://github.com/encode/django-rest-framework/commit/36d5c0e74f562cbe3055f0d20818bd48d3c32359"><code>36d5c0e</code></a> tests: Check urlpatterns after cleanups (<a href="https://redirect.github.com/encode/django-rest-framework/issues/9400">#9400</a>)</li>
<li><a href="https://github.com/encode/django-rest-framework/commit/9d4ed054bf8acfac6209b7e7f837fc97517affcc"><code>9d4ed05</code></a> Don't use Windows line endings</li>
<li><a href="https://github.com/encode/django-rest-framework/commit/b34bde47d7fff403df4143a35c71975d7c2e7763"><code>b34bde4</code></a> Fix typo in setup.cfg setting</li>
<li><a href="https://github.com/encode/django-rest-framework/commit/ab681f2d5e4a9645aa68eabf1ff18e41d0d5f642"><code>ab681f2</code></a> Update requirements in docs</li>
<li><a href="https://github.com/encode/django-rest-framework/commit/22377241a89c8233b45441b5adde5b858edef371"><code>2237724</code></a> bump pygments (security hygiene)</li>
<li><a href="https://github.com/encode/django-rest-framework/commit/d58b8da591120abedc94c1b71576cb9afb2d7868"><code>d58b8da</code></a> Update deprecation hints</li>
<li>Additional commits viewable in <a href="https://github.com/encode/django-rest-framework/compare/3.13.1...3.15.2">compare view</a></li>
</ul>
</details>
<br />
Updates `setuptools` from 60.6.0 to 78.1.1
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/pypa/setuptools/blob/main/NEWS.rst">setuptools's changelog</a>.</em></p>
<blockquote>
<h1>v78.1.1</h1>
<h2>Bugfixes</h2>
<ul>
<li>More fully sanitized the filename in PackageIndex._download. (<a href="https://redirect.github.com/pypa/setuptools/issues/4946">#4946</a>)</li>
</ul>
<h1>v78.1.0</h1>
<h2>Features</h2>
<ul>
<li>Restore access to _get_vc_env with a warning. (<a href="https://redirect.github.com/pypa/setuptools/issues/4874">#4874</a>)</li>
</ul>
<h1>v78.0.2</h1>
<h2>Bugfixes</h2>
<ul>
<li>Postponed removals of deprecated dash-separated and uppercase fields in <code>setup.cfg</code>.
All packages with deprecated configurations are advised to move before 2026. (<a href="https://redirect.github.com/pypa/setuptools/issues/4911">#4911</a>)</li>
</ul>
<h1>v78.0.1</h1>
<h2>Misc</h2>
<ul>
<li><a href="https://redirect.github.com/pypa/setuptools/issues/4909">#4909</a></li>
</ul>
<h1>v78.0.0</h1>
<h2>Bugfixes</h2>
<ul>
<li>Reverted distutils changes that broke the monkey patching of command classes. (<a href="https://redirect.github.com/pypa/setuptools/issues/4902">#4902</a>)</li>
</ul>
<h2>Deprecations and Removals</h2>
<ul>
<li>Setuptools no longer accepts options containing uppercase or dash characters in <code>setup.cfg</code>.</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/pypa/setuptools/commit/8e4868a036b7fae3208d16cb4e5fe6d63c3752df"><code>8e4868a</code></a> Bump version: 78.1.0 → 78.1.1</li>
<li><a href="https://github.com/pypa/setuptools/commit/100e9a61ad24d5a147ada57357425a8d40626d09"><code>100e9a6</code></a> Merge pull request <a href="https://redirect.github.com/pypa/setuptools/issues/4951">#4951</a></li>
<li><a href="https://github.com/pypa/setuptools/commit/8faf1d7e0ca309983252e4f21837b73ee12e960f"><code>8faf1d7</code></a> Add news fragment.</li>
<li><a href="https://github.com/pypa/setuptools/commit/2ca4a9fe4758fcd39d771d3d3a5b4840aacebdf7"><code>2ca4a9f</code></a> Rely on re.sub to perform the decision in one expression.</li>
<li><a href="https://github.com/pypa/setuptools/commit/e409e8002932f2b86aae7b1abc8f8c2ebf96df2c"><code>e409e80</code></a> Extract _sanitize method for sanitizing the filename.</li>
<li><a href="https://github.com/pypa/setuptools/commit/250a6d17978f9f6ac3ac887091f2d32886fbbb0b"><code>250a6d1</code></a> Add a check to ensure the name resolves relative to the tmpdir.</li>
<li><a href="https://github.com/pypa/setuptools/commit/d8390feaa99091d1ba9626bec0e4ba7072fc507a"><code>d8390fe</code></a> Extract _resolve_download_filename with test.</li>
<li><a href="https://github.com/pypa/setuptools/commit/4e1e89392de5cb405e7844cdc8b20fc2755dbaba"><code>4e1e893</code></a> Merge <a href="https://github.com/jaraco/skeleton">https://github.com/jaraco/skeleton</a></li>
<li><a href="https://github.com/pypa/setuptools/commit/3a3144f0d2887fa37c06550f42a101e9eebd953a"><code>3a3144f</code></a> Fix typo: <code>pyproject.license</code> -> <code>project.license</code> (<a href="https://redirect.github.com/pypa/setuptools/issues/4931">#4931</a>)</li>
<li><a href="https://github.com/pypa/setuptools/commit/d751068fd2627d6d8f1729e39cbcd8119049998f"><code>d751068</code></a> Fix typo: pyproject.license -> project.license</li>
<li>Additional commits viewable in <a href="https://github.com/pypa/setuptools/compare/v60.6.0...v78.1.1">compare view</a></li>
</ul>
</details>
<br />
Updates `sqlparse` from 0.4.2 to 0.5.3
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/andialbrecht/sqlparse/blob/master/CHANGELOG">sqlparse's changelog</a>.</em></p>
<blockquote>
<h2>Release 0.5.3 (Dez 10, 2024)</h2>
<p>Bug Fixes</p>
<ul>
<li>This version introduces a more generalized handling of potential denial of
service attack (DOS) due to recursion errors for deeply nested statements.
Brought up and fixed by <a href="https://github.com/living180"><code>@living180</code></a>. Thanks a lot!</li>
</ul>
<h2>Release 0.5.2 (Nov 14, 2024)</h2>
<p>Bug Fixes</p>
<ul>
<li>EXTENSION is now recognized as a keyword (issue785).</li>
<li>SQL hints are not removed when removing comments (issue262, by skryzh).</li>
</ul>
<h2>Release 0.5.1 (Jul 15, 2024)</h2>
<p>Enhancements</p>
<ul>
<li>New "compact" option for formatter. If set, the formatter tries to produce
a more compact output by avoiding some line breaks (issue783).</li>
</ul>
<p>Bug Fixes</p>
<ul>
<li>The strip comments filter was a bit greedy and removed too much
whitespace (issue772).
Note: In some cases you might want to add <code>strip_whitespace=True</code> where you
previously used just <code>strip_comments=True</code>. <code>strip_comments</code> did some of the
work that <code>strip_whitespace</code> should do.</li>
<li>Fix error when splitting statements that contain multiple CASE clauses
within a BEGIN block (issue784).</li>
<li>Fix whitespace removal with nested expressions (issue782).</li>
<li>Fix parsing and formatting of ORDER clauses containing NULLS FIRST or
NULLS LAST (issue532).</li>
</ul>
<h2>Release 0.5.0 (Apr 13, 2024)</h2>
<p>Notable Changes</p>
<ul>
<li>Drop support for Python 3.5, 3.6, and 3.7.</li>
<li>Python 3.12 is now supported (pr725, by hugovk).</li>
<li>IMPORTANT: Fixes a potential denial of service attack (DOS) due to recursion
error for deeply nested statements. Instead of recursion error a generic</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/andialbrecht/sqlparse/commit/ec0af5bf6345750d84274bc5c857d4a75b88619b"><code>ec0af5b</code></a> Update version number.</li>
<li><a href="https://github.com/andialbrecht/sqlparse/commit/c81cdf9117726b7d679991d816fcca08d3627d15"><code>c81cdf9</code></a> Disable checks for pypy-3.8.</li>
<li><a href="https://github.com/andialbrecht/sqlparse/commit/a31245eb1ceb292ad220a66b57de1fccd6f8917b"><code>a31245e</code></a> Update changelog.</li>
<li><a href="https://github.com/andialbrecht/sqlparse/commit/bbd8f51d57da96bc07229995192a45514237eb4d"><code>bbd8f51</code></a> Generalize RecursionError handling.</li>
<li><a href="https://github.com/andialbrecht/sqlparse/commit/e57923b3aa823c524c807953cecc48cf6eec2cb2"><code>e57923b</code></a> Switch back to development.</li>
<li><a href="https://github.com/andialbrecht/sqlparse/commit/7084df8a741084045c0f74c3e91bc4779cb834a9"><code>7084df8</code></a> Add support for Python 3.13.</li>
<li><a href="https://github.com/andialbrecht/sqlparse/commit/5f37dd6cfe14b378205d02883d49f694fd569cf8"><code>5f37dd6</code></a> Bump version to 0.5.2.</li>
<li><a href="https://github.com/andialbrecht/sqlparse/commit/7c70674437711c7bbc2aec65001fcaae49ca3ba3"><code>7c70674</code></a> Update authors and changelog.</li>
<li><a href="https://github.com/andialbrecht/sqlparse/commit/48bd14ea394785200cb1cccc7343b644881e5971"><code>48bd14e</code></a> [feature] returning .gitignore to previous version</li>
<li><a href="https://github.com/andialbrecht/sqlparse/commit/2f9c7ec38f98c004ee8c328ed24ba49bd19951bc"><code>2f9c7ec</code></a> [feature] deleting envs from .gitignore, creating test for SQL-Hints</li>
<li>Additional commits viewable in <a href="https://github.com/andialbrecht/sqlparse/compare/0.4.2...0.5.3">compare view</a></li>
</ul>
</details>
<br />
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions
You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/JMR-dev/LevelUp-API/network/alerts).
</details>
This repo is archived. You cannot comment on pull requests.
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
Bumps the pip group with 3 updates in the / directory: django, djangorestframework and setuptools.
Updates
djangofrom 4.0.1 to 4.2.21Commits
87175d2[4.2.x] Bumped version for 4.2.21 release.9cd8028[4.2.x] Fixed CVE-2025-32873 -- Mitigated potential DoS in strip_tags().ca31ca0[4.2.x] Changed packing recommendation to use pyproject.toml in reusable apps...f4bd564[4.2.x] Adjusted GitHub Action workflow to test Python versions based off pyp...3456eee[4.2.x] Fixed #35980 -- Updated setuptools to normalize package names in buil...afe52d8[4.2.x] Migrated setuptools configuration to pyproject.toml.35c34ed[4.2.x] Removed obsolete rpm-related install code.93973d4[4.2.x] Added upcoming security release to release notes.b3df753[4.2.x] Refs #36341 -- Added release note for 4.2.21 for fix in wordwrap temp...e61e3da[4.2.x] Fixed #36341 -- Preserved whitespaces in wordwrap template filter.Updates
djangorestframeworkfrom 3.13.1 to 3.15.2Release notes
Sourced from djangorestframework's releases.
... (truncated)
Commits
c7a7eaeVersion 3.15.2 (#9439)3b41f01Fix potential XSS vulnerability in break_long_headers template filter (#9435)fe92f0dAdd__hash__method forpermissions.OperandHolderclass (#9417)fbdab09docs: Correct some evaluation results and a httpie option in Tutorial1 (#9421)36d5c0etests: Check urlpatterns after cleanups (#9400)9d4ed05Don't use Windows line endingsb34bde4Fix typo in setup.cfg settingab681f2Update requirements in docs2237724bump pygments (security hygiene)d58b8daUpdate deprecation hintsUpdates
setuptoolsfrom 60.6.0 to 78.1.1Changelog
Sourced from setuptools's changelog.
... (truncated)
Commits
8e4868aBump version: 78.1.0 → 78.1.1100e9a6Merge pull request #49518faf1d7Add news fragment.2ca4a9fRely on re.sub to perform the decision in one expression.e409e80Extract _sanitize method for sanitizing the filename.250a6d1Add a check to ensure the name resolves relative to the tmpdir.d8390feExtract _resolve_download_filename with test.4e1e893Merge https://github.com/jaraco/skeleton3a3144fFix typo:pyproject.license->project.license(#4931)d751068Fix typo: pyproject.license -> project.licenseUpdates
sqlparsefrom 0.4.2 to 0.5.3Changelog
Sourced from sqlparse's changelog.
... (truncated)
Commits
ec0af5bUpdate version number.c81cdf9Disable checks for pypy-3.8.a31245eUpdate changelog.bbd8f51Generalize RecursionError handling.e57923bSwitch back to development.7084df8Add support for Python 3.13.5f37dd6Bump version to 0.5.2.7c70674Update authors and changelog.48bd14e[feature] returning .gitignore to previous version2f9c7ec[feature] deleting envs from .gitignore, creating test for SQL-HintsDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditionsYou can disable automated security fix PRs for this repo from the Security Alerts page.