Skip to content

fix(deps): update dependency loguru to ^0.5.0 [security]#77

Open
renovate[bot] wants to merge 1 commit intomasterfrom
renovate/pypi-loguru-vulnerability
Open

fix(deps): update dependency loguru to ^0.5.0 [security]#77
renovate[bot] wants to merge 1 commit intomasterfrom
renovate/pypi-loguru-vulnerability

Conversation

@renovate
Copy link
Copy Markdown

@renovate renovate bot commented Aug 6, 2024

This PR contains the following updates:

Package Change Age Confidence
loguru (changelog) ^0.4^0.5.0 age confidence

GitHub Vulnerability Alerts

CVE-2022-0338

Insertion of Sensitive Information into Log File in Conda loguru prior to 0.5.3.

Severity
  • CVSS Score: 5.3 / 10 (Medium)
  • Vector String: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

Release Notes

Delgan/loguru (loguru)

v0.5.3

Compare Source

=====================

  • Fix child process possibly hanging at exit while combining enqueue=True with third party library like uwsgi (#&#8203;309 <https://github.com/Delgan/loguru/issues/309>, thanks @dstlmrk <https://github.com/dstlmrk>).
  • Fix possible exception during formatting of non-string messages (#&#8203;331 <https://github.com/Delgan/loguru/issues/331>_).

v0.5.2

Compare Source

=====================

  • Fix AttributeError within handlers using serialize=True when calling logger.exception() outside of the context of an exception (#&#8203;296 <https://github.com/Delgan/loguru/issues/296>_).
  • Fix error while logging an exception containing a non-picklable value to a handler with enqueue=True (#&#8203;298 <https://github.com/Delgan/loguru/issues/298>_).
  • Add support for async callable classes (with __call__ method) used as sinks (#&#8203;294 <https://github.com/Delgan/loguru/pull/294>, thanks @jessekrubin <https://github.com/jessekrubin>).

v0.5.1

Compare Source

=====================

  • Modify the way the extra dict is used by LogRecord in order to prevent possible KeyError with standard logging handlers (#&#8203;271 <https://github.com/Delgan/loguru/issues/271>_).
  • Add a new default optional argument to logger.catch(), it should be the returned value by the decorated function in case an error occurred (#&#8203;272 <https://github.com/Delgan/loguru/issues/272>_).
  • Fix ValueError when using serialize=True in combination with logger.catch() or logger.opt(record=True) due to circular reference of the record dict (#&#8203;286 <https://github.com/Delgan/loguru/issues/286>_).

v0.5.0

Compare Source

=====================

  • Remove the possibility to modify the severity no of levels once they have been added in order to prevent surprising behavior (#&#8203;209 <https://github.com/Delgan/loguru/issues/209>_).
  • Add better support for "structured logging" by automatically adding **kwargs to the extra dict besides using these arguments to format the message. This behavior can be disabled by setting the new .opt(capture=False) parameter (#&#8203;2 <https://github.com/Delgan/loguru/issues/2>_).
  • Add a new onerror optional argument to logger.catch(), it should be a function which will be called when an exception occurs in order to customize error handling (#&#8203;224 <https://github.com/Delgan/loguru/issues/224>_).
  • Add a new exclude optional argument to logger.catch(), is should be a type of exception to be purposefully ignored and propagated to the caller without being logged (#&#8203;248 <https://github.com/Delgan/loguru/issues/248>_).
  • Modify complete() to make it callable from non-asynchronous functions, it can thus be used if enqueue=True to make sure all messages have been processed (#&#8203;231 <https://github.com/Delgan/loguru/issues/231>_).
  • Fix possible deadlocks on Linux when multiprocessing.Process() collides with enqueue=True or threading (#&#8203;231 <https://github.com/Delgan/loguru/issues/231>_).
  • Fix compression function not executable concurrently due to file renaming (to resolve conflicts) being performed after and not before it (#&#8203;243 <https://github.com/Delgan/loguru/issues/243>_).
  • Fix the filter function listing files for retention being too restrictive, it now matches files based on the pattern "root(.*).ext(.*)" (#&#8203;229 <https://github.com/Delgan/loguru/issues/229>_).
  • Fix the impossibility to remove() a handler if an exception is raised while the sink' stop() function is called (#&#8203;237 <https://github.com/Delgan/loguru/issues/237>_).
  • Fix file sink left in an unstable state if an exception occurred during retention or compression process (#&#8203;238 <https://github.com/Delgan/loguru/issues/238>_).
  • Fix situation where changes made to record["message"] were unexpectedly ignored when opt(colors=True), causing "out-of-date" message to be logged due to implementation details (#&#8203;221 <https://github.com/Delgan/loguru/issues/221>_).
  • Fix possible exception if a stream having an isatty() method returning True but not being compatible with colorama is used on Windows (#&#8203;249 <https://github.com/Delgan/loguru/issues/249>_).
  • Fix exceptions occurring in coroutine sinks never retrieved and hence causing warnings (#&#8203;227 <https://github.com/Delgan/loguru/issues/227>_).

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • ""
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot force-pushed the renovate/pypi-loguru-vulnerability branch from 4235cf5 to 76b8e42 Compare November 18, 2025 10:50
@renovate renovate bot changed the title fix(deps): update dependency loguru to ^0.5.0 [security] fix(deps): update dependency loguru to ^0.5.0 [security] - autoclosed Mar 27, 2026
@renovate renovate bot closed this Mar 27, 2026
@renovate renovate bot deleted the renovate/pypi-loguru-vulnerability branch March 27, 2026 04:50
@renovate renovate bot changed the title fix(deps): update dependency loguru to ^0.5.0 [security] - autoclosed fix(deps): update dependency loguru to ^0.5.0 [security] Mar 30, 2026
@renovate renovate bot reopened this Mar 30, 2026
@renovate renovate bot force-pushed the renovate/pypi-loguru-vulnerability branch 2 times, most recently from 76b8e42 to 51996ed Compare March 30, 2026 21:45
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants