Bump itsdangerous from 1.1.0 to 2.0.1
Bumps itsdangerous from 1.1.0 to 2.0.1.
Release notes
Sourced from itsdangerous's releases.
2.0.1
2.0.0
New major versions of all the core Pallets libraries, including ItsDangerous 2.0, have been released!
🎉
- Read the announcement on our blog: https://palletsprojects.com/blog/flask-2-0-released/
- Read the full list of changes: https://itsdangerous.palletsprojects.com/changes/#version-2-0-0
- Retweet the announcement on Twitter: https://twitter.com/PalletsTeam/status/1392266507296514048
- Follow our blog, Twitter, or GitHub to see future announcements.
This represents a significant amount of work, and there are quite a few changes. Be sure to carefully read the changelog, and use tools such as pip-compile and Dependabot to pin your dependencies and control your updates.
2.0.0rc2
Changelog
Sourced from itsdangerous's changelog.
Version 2.0.1
Released 2021-05-18
- Mark top-level names as exported so type checking understands imports in user projects.
🇵🇷 240
- The
salt
argument toSerializer
andSigner
can beNone
again. :issue:237
Version 2.0.0
Released 2021-05-11
- Drop support for Python 2 and 3.5.
- JWS support (
JSONWebSignatureSerializer
,TimedJSONWebSignatureSerializer
) is deprecated. Use a dedicated JWS/JWT library such as authlib instead. :issue:129
- Importing
itsdangerous.json
is deprecated. Import Python'sjson
module instead.🇵🇷 152
- Simplejson is no longer used if it is installed. To use a different library, pass it as
Serializer(serializer=...)
. :issue:146
datetime
values are timezone-aware withtimezone.utc
. Code usingTimestampSigner.unsign(return_timestamp=True)
orBadTimeSignature.date_signed
may need to change. :issue:150
- If a signature has an age less than 0, it will raise
SignatureExpired
rather than appearing valid. This can happen if the timestamp offset is changed. :issue:126
BadTimeSignature.date_signed
is always adatetime
object rather than anint
in some cases. :issue:124
- Added support for key rotation. A list of keys can be passed as
secret_key
, oldest to newest. The newest key is used for signing, all keys are tried for unsigning.🇵🇷 141
- Removed the default SHA-512 fallback signer from
default_fallback_signers
. :issue:155
- Add type information for static typing tools.
🇵🇷 186
Commits
-
8f39dd3
Merge pull request #242 from pallets/release-2.0.1 -
eccb31f
release version 2.0.1 -
87d4e83
Merge pull request #241 from pallets/salt-default -
41ec419
allow salt=None again -
15a2e0d
Merge pull request #240 from pallets/update-typing -
d2250ed
mark top-level names as exported -
56823cd
Merge pull request #236 from pallets/default-branch -
b9c36cc
rename default branch in files -
0f37243
start version 2.0.1.dev0 -
d101100
Merge pull request #235 from pallets/release-2.0.0 - Additional commits viewable in compare view