Skip to content

Conversation

@pyup-bot
Copy link
Collaborator

@pyup-bot pyup-bot commented Mar 9, 2022

This PR updates itsdangerous from 1.1.0 to 2.1.1.

Changelog

2.1.1

-------------

Released 2022-03-09

-   Handle date overflow in timed unsign. :pr:`296`

2.1.0

-------------

Released 2022-02-17

-   Drop support for Python 3.6. :pr:`272`
-   Remove previously deprecated code. :pr:`273`

 -   JWS functionality: Use a dedicated library such as Authlib
     instead.
 -   ``import itsdangerous.json``: Import ``json`` from the standard
     library instead.

2.0.1

-------------

Released 2021-05-18

-   Mark top-level names as exported so type checking understands
 imports in user projects. :pr:`240`
-   The ``salt`` argument to ``Serializer`` and ``Signer`` can be
 ``None`` again. :issue:`237`

2.0.0

-------------

Released 2021-05-11

-   Drop support for Python 2 and 3.5.
-   JWS support (``JSONWebSignatureSerializer``,
 ``TimedJSONWebSignatureSerializer``) is deprecated. Use a dedicated
 JWS/JWT library such as authlib instead. :issue:`129`
-   Importing ``itsdangerous.json`` is deprecated. Import Python's
 ``json`` module instead. :pr:`152`
-   Simplejson is no longer used if it is installed. To use a different
 library, pass it as ``Serializer(serializer=...)``. :issue:`146`
-   ``datetime`` values are timezone-aware with ``timezone.utc``. Code
 using ``TimestampSigner.unsign(return_timestamp=True)`` or
 ``BadTimeSignature.date_signed`` may need to change. :issue:`150`
-   If a signature has an age less than 0, it will raise
 ``SignatureExpired`` rather than appearing valid. This can happen if
 the timestamp offset is changed. :issue:`126`
-   ``BadTimeSignature.date_signed`` is always a ``datetime`` object
 rather than an ``int`` in some cases. :issue:`124`
-   Added support for key rotation. A list of keys can be passed as
 ``secret_key``, oldest to newest. The newest key is used for
 signing, all keys are tried for unsigning. :pr:`141`
-   Removed the default SHA-512 fallback signer from
 ``default_fallback_signers``. :issue:`155`
-   Add type information for static typing tools. :pr:`186`
Links

@pyup-bot
Copy link
Collaborator Author

Closing this in favor of #363

@pyup-bot pyup-bot closed this Mar 24, 2022
@matthew29tang matthew29tang deleted the pyup-update-itsdangerous-1.1.0-to-2.1.1 branch March 24, 2022 18:08
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants