fix(deps): update dependency loguru to ^0.5.0 [security]#77
Open
renovate[bot] wants to merge 1 commit intomasterfrom
Open
fix(deps): update dependency loguru to ^0.5.0 [security]#77renovate[bot] wants to merge 1 commit intomasterfrom
renovate[bot] wants to merge 1 commit intomasterfrom
Conversation
4235cf5 to
76b8e42
Compare
76b8e42 to
51996ed
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
^0.4→^0.5.0GitHub Vulnerability Alerts
CVE-2022-0338
Insertion of Sensitive Information into Log File in Conda loguru prior to 0.5.3.
Severity
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:NRelease Notes
Delgan/loguru (loguru)
v0.5.3Compare Source
=====================
enqueue=Truewith third party library likeuwsgi(#​309 <https://github.com/Delgan/loguru/issues/309>, thanks@dstlmrk <https://github.com/dstlmrk>).#​331 <https://github.com/Delgan/loguru/issues/331>_).v0.5.2Compare Source
=====================
AttributeErrorwithin handlers usingserialize=Truewhen callinglogger.exception()outside of the context of an exception (#​296 <https://github.com/Delgan/loguru/issues/296>_).valueto a handler withenqueue=True(#​298 <https://github.com/Delgan/loguru/issues/298>_).__call__method) used as sinks (#​294 <https://github.com/Delgan/loguru/pull/294>, thanks@jessekrubin <https://github.com/jessekrubin>).v0.5.1Compare Source
=====================
extradict is used byLogRecordin order to prevent possibleKeyErrorwith standardlogginghandlers (#​271 <https://github.com/Delgan/loguru/issues/271>_).defaultoptional argument tologger.catch(), it should be the returned value by the decorated function in case an error occurred (#​272 <https://github.com/Delgan/loguru/issues/272>_).ValueErrorwhen usingserialize=Truein combination withlogger.catch()orlogger.opt(record=True)due to circular reference of therecorddict (#​286 <https://github.com/Delgan/loguru/issues/286>_).v0.5.0Compare Source
=====================
noof levels once they have been added in order to prevent surprising behavior (#​209 <https://github.com/Delgan/loguru/issues/209>_).**kwargsto theextradict besides using these arguments to format the message. This behavior can be disabled by setting the new.opt(capture=False)parameter (#​2 <https://github.com/Delgan/loguru/issues/2>_).onerroroptional argument tologger.catch(), it should be a function which will be called when an exception occurs in order to customize error handling (#​224 <https://github.com/Delgan/loguru/issues/224>_).excludeoptional argument tologger.catch(), is should be a type of exception to be purposefully ignored and propagated to the caller without being logged (#​248 <https://github.com/Delgan/loguru/issues/248>_).complete()to make it callable from non-asynchronous functions, it can thus be used ifenqueue=Trueto make sure all messages have been processed (#​231 <https://github.com/Delgan/loguru/issues/231>_).multiprocessing.Process()collides withenqueue=Trueorthreading(#​231 <https://github.com/Delgan/loguru/issues/231>_).compressionfunction not executable concurrently due to file renaming (to resolve conflicts) being performed after and not before it (#​243 <https://github.com/Delgan/loguru/issues/243>_).retentionbeing too restrictive, it now matches files based on the pattern"root(.*).ext(.*)"(#​229 <https://github.com/Delgan/loguru/issues/229>_).remove()a handler if an exception is raised while the sink'stop()function is called (#​237 <https://github.com/Delgan/loguru/issues/237>_).retentionorcompressionprocess (#​238 <https://github.com/Delgan/loguru/issues/238>_).record["message"]were unexpectedly ignored whenopt(colors=True), causing "out-of-date"messageto be logged due to implementation details (#​221 <https://github.com/Delgan/loguru/issues/221>_).isatty()method returningTruebut not being compatible withcoloramais used on Windows (#​249 <https://github.com/Delgan/loguru/issues/249>_).#​227 <https://github.com/Delgan/loguru/issues/227>_).Configuration
📅 Schedule: (UTC)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.