Sourced from djangorestframework's releases.

Version 3.15.1

What's Changed

• Update the message to be consistent with the Django `HttpResponseBa… by @​maycuatroi in encode/django-rest-framework#9287
• Make inflection package truly optional by @​browniebroke in encode/django-rest-framework#9303
• Fix broken links in release notes for 3.15 by @​browniebroke in encode/django-rest-framework#9305
• TokenAdmin.autocomplete_fields Breaks Some Use Cases, Revert by @​alexdlaird in encode/django-rest-framework#9301
• Add drf-sendables to third-party-packages.md by @​amikrop in encode/django-rest-framework#9261
• Revert "feat: Add some changes to ValidationError to support django style vad…" by @​auvipy in encode/django-rest-framework#9326
• Revert "Re-prefetch related objects after updating" by @​auvipy in encode/django-rest-framework#9327
• Revert #8863 by @​tomchristie in encode/django-rest-framework#9330
• Revert #8009 by @​tomchristie in encode/django-rest-framework#9332
• Revert #9030 by @​tomchristie in encode/django-rest-framework#9333
• Revert "Fix NamespaceVersioning ignoring DEFAULT_VERSION on non-None namespaces" by @​auvipy in encode/django-rest-framework#9335
• SearchFilter.get_search_terms returns list. by @​tomchristie in encode/django-rest-framework#9338
• Version 3.15.1 by @​tomchristie in encode/django-rest-framework#9339

New Contributors

• @​maycuatroi made their first contribution in encode/django-rest-framework#9287
• @​alexdlaird made their first contribution in encode/django-rest-framework#9301

Full Changelog: encode/django-rest-framework@3.15.0...3.15.1

Version 3.14.0

• Django 2.2 is no longer supported. #8662
• Django 4.1 compatibility. #8591
• Add --api-version CLI option to generateschema management command. #8663
• Enforce is_valid(raise_exception=False) as a keyword-only argument. #7952
• Stop calling set_context on Validators. #8589
• Return NotImplemented from ErrorDetails.__ne__. #8538
• Don't evaluate DateTimeField.default_timezone when a custom timezone is set. #8531
• Make relative URLs clickable in Browseable API. #8464
• Support ManyRelatedField falling back to the default value when the attribute specified by dot notation doesn't exist. Matches ManyRelatedField.get_attribute to Field.get_attribute. #7574
• Make schemas.openapi.get_reference public. #7515
• Make ReturnDict support dict union operators on Python 3.9 and later. #8302
• Update throttling to check if request.user is set before checking if the user is authenticated. #8370

Version 3.13.1

• Revert schema naming changes with function based @api_view. #8297

Version 3.13.0

• Django 4.0 compatability. #8178
• Add max_length and min_length options to ListSerializer. #8165
• Add get_request_serializer and get_response_serializer hooks to AutoSchema. #7424
• Fix OpenAPI representation of null-able read only fields. #8116
• Respect UNICODE_JSON setting in API schema outputs. #7991
• Fix for RemoteUserAuthentication. #7158
• Make Field constructors keyword-only. #7632

3.12.4

No release notes provided.

... (truncated)

• c7a7eae Version 3.15.2 (#9439)
• 3b41f01 Fix potential XSS vulnerability in break_long_headers template filter (#9435)
• fe92f0d Add __hash__ method for permissions.OperandHolder class (#9417)
• fbdab09 docs: Correct some evaluation results and a httpie option in Tutorial1 (#9421)
• 36d5c0e tests: Check urlpatterns after cleanups (#9400)
• 9d4ed05 Don't use Windows line endings
• b34bde4 Fix typo in setup.cfg setting
• ab681f2 Update requirements in docs
• 2237724 bump pygments (security hygiene)
• d58b8da Update deprecation hints
• Additional commits viewable in compare view

Sourced from marshmallow's changelog.

2.15.1 (2018-04-25) +++++++++++++++++++

Bug fixes:

• :cve:CVE-2018-17175: Fix behavior when an empty list is passed as the only argument (:issue:772). Thanks :user:deckar01 for reporting and thanks :user:lafrech for the fix.

2.15.0 (2017-12-02) +++++++++++++++++++

Bug fixes:

• Handle UnicodeDecodeError when deserializing bytes with a String field (:issue:650). Thanks :user:dan-blanchard for the suggestion and thanks :user:4lissonsilveira for the PR.

2.14.0 (2017-10-23) +++++++++++++++++++

Features:

• Add require_tld parameter to validate.URL (:issue:664). Thanks :user:sduthil for the suggestion and the PR.

2.13.6 (2017-08-16) +++++++++++++++++++

Bug fixes:

• Fix serialization of types that implement __getitem__ (:issue:669). Thanks :user:MichalKononenko.

2.13.5 (2017-04-12) +++++++++++++++++++

Bug fixes:

• Fix validation of iso8601-formatted dates (:issue:556). Thanks :user:lafrech for reporting.

2.13.4 (2017-03-19) +++++++++++++++++++

Bug fixes:

• Fix symmetry of serialization and deserialization behavior when passing a dot-delimited path to the attribute parameter of fields (:issue:450). Thanks :user:itajaja for reporting.

2.13.3 (2017-03-11) +++++++++++++++++++

... (truncated)

• 251bff3 Bump version and update changelog
• d5d9cb2 Merge pull request #782 from Nobatek/dev_2x_772_only_empty
• e849fd8 Docs: BaseSchema docstring reword
• 98f2b47 Don't serialize any field if only is empty.
• 07cebb9 Merge pull request #719 from marshmallow-code/code-of-conduct
• 2b94e65 Remove incorrect Nested documentation
• fa91308 Add code of conduct and update contributing docs
• 764f504 Remove unnecessary deps
• 8a3b3ce Update license year and footer link
• 1579398 Add missing @​post_load decorator in example
• Additional commits viewable in compare view

Sourced from numpy's releases.

v1.22.0

NumPy 1.22.0 Release Notes

NumPy 1.22.0 is a big release featuring the work of 153 contributors spread over 609 pull requests. There have been many improvements, highlights are:

• Annotations of the main namespace are essentially complete. Upstream is a moving target, so there will likely be further improvements, but the major work is done. This is probably the most user visible enhancement in this release.
• A preliminary version of the proposed Array-API is provided. This is a step in creating a standard collection of functions that can be used across application such as CuPy and JAX.
• NumPy now has a DLPack backend. DLPack provides a common interchange format for array (tensor) data.
• New methods for quantile, percentile, and related functions. The new methods provide a complete set of the methods commonly found in the literature.
• A new configurable allocator for use by downstream projects.

These are in addition to the ongoing work to provide SIMD support for commonly used functions, improvements to F2PY, and better documentation.

The Python versions supported in this release are 3.8-3.10, Python 3.7 has been dropped. Note that 32 bit wheels are only provided for Python 3.8 and 3.9 on Windows, all other wheels are 64 bits on account of Ubuntu, Fedora, and other Linux distributions dropping 32 bit support. All 64 bit wheels are also linked with 64 bit integer OpenBLAS, which should fix the occasional problems encountered by folks using truly huge arrays.

Expired deprecations

Deprecated numeric style dtype strings have been removed

Using the strings "Bytes0", "Datetime64", "Str0", "Uint32", and "Uint64" as a dtype will now raise a TypeError.

(gh-19539)

Expired deprecations for loads, ndfromtxt, and mafromtxt in npyio

numpy.loads was deprecated in v1.15, with the recommendation that users use pickle.loads instead. ndfromtxt and mafromtxt were both deprecated in v1.17 - users should use numpy.genfromtxt instead with the appropriate value for the usemask parameter.

(gh-19615)

... (truncated)

• 4adc87d Merge pull request #20685 from charris/prepare-for-1.22.0-release
• fd66547 REL: Prepare for the NumPy 1.22.0 release.
• 125304b wip
• c283859 Merge pull request #20682 from charris/backport-20416
• 5399c03 Merge pull request #20681 from charris/backport-20954
• f9c45f8 Merge pull request #20680 from charris/backport-20663
• 794b36f Update armccompiler.py
• d93b14e Update test_public_api.py
• 7662c07 Update init.py
• 311ab52 Update armccompiler.py
• Additional commits viewable in compare view

Sourced from scrapy's releases.

2.11.2

Mostly bug fixes, including security bug fixes.

See the full changelog.

2.11.1

• Security bug fixes.
• Support for Twisted >= 23.8.0.
• Documentation improvements.

See the full changelog.

2.11.0

• Spiders can now modify settings in their from_crawler methods, e.g. based on spider arguments.
• Periodic logging of stats.
• Bug fixes.

See the full changelog.

2.10.1

Marked Twisted >= 23.8.0 as unsupported.

2.10.0

• Added Python 3.12 support, dropped Python 3.7 support.
• The new add-ons framework simplifies configuring 3rd-party components that support it.
• Exceptions to retry can now be configured.
• Many fixes and improvements for feed exports.

See the full changelog.

2.9.0

• Per-domain download settings.
• Compatibility with new cryptography and new parsel.
• JMESPath selectors from the new parsel.
• Bug fixes.

See the full changelog.

2.8.0

This is a maintenance release, with minor features, bug fixes, and cleanups.

See the full changelog.

2.7.1

• Relaxed the restriction introduced in 2.6.2 so that the Proxy-Authentication header can again be set explicitly in certain cases, restoring compatibility with scrapy-zyte-smartproxy 2.1.0 and older
• Bug fixes

See the full changelog

2.7.0

... (truncated)

Sourced from scrapy's changelog.

Scrapy 2.11.2 (2024-05-14)

Security bug fixes

-   Redirects to non-HTTP protocols are no longer followed. Please, see the
    `23j4-mw76-5v7h security advisory`_ for more information. (:issue:`457`)
.. _23j4-mw76-5v7h security advisory: https://github.com/scrapy/scrapy/security/advisories/GHSA-23j4-mw76-5v7h



The Authorization header is now dropped on redirects to a different

scheme (http:// or https://) or port, even if the domain is the

same. Please, see the 4qqq-9vqf-3h3f security advisory_ for more

information.
.. _4qqq-9vqf-3h3f security advisory: https://github.com/scrapy/scrapy/security/advisories/GHSA-4qqq-9vqf-3h3f


When using system proxy settings that are different for http:// and

https://, redirects to a different URL scheme will now also trigger the

corresponding change in proxy settings for the redirected request. Please,

see the jm3v-qxmh-hxwv security advisory_ for more information.

(:issue:767)
.. _jm3v-qxmh-hxwv security advisory: https://github.com/scrapy/scrapy/security/advisories/GHSA-jm3v-qxmh-hxwv


:attr:Spider.allowed_domains <scrapy.Spider.allowed_domains> is now

enforced for all requests, and not only requests from spider callbacks.

(:issue:1042, :issue:2241, :issue:6358)


:func:~scrapy.utils.iterators.xmliter_lxml no longer resolves XML

entities. (:issue:6265)


defusedxml_ is now used to make

:class:scrapy.http.request.rpc.XmlRpcRequest more secure.

(:issue:6250, :issue:6251)
.. _defusedxml: https://github.com/tiran/defusedxml


Bug fixes

-   Restored support for brotlipy_, which had been dropped in Scrapy 2.11.1 in
    favor of brotli_. (:issue:`6261`)
.. _brotli: https://github.com/google/brotli

.. note:: brotlipy is deprecated, both in Scrapy and upstream. Use brotli
    instead if you can.

</tr></table>

</code></pre>

</blockquote>

<p>... (truncated)</p>

</details>

<details>

<summary>Commits</summary>
<ul>

<li><a href="https://github.com/scrapy/scrapy/commit/e8cb5a03b382b98f2c8945355076390f708b918d&quot;&gt;&lt;code&gt;e8cb5a0&lt;/code&gt;&lt;/a> Bump version: 2.11.1 → 2.11.2</li>

<li><a href="https://github.com/scrapy/scrapy/commit/2c031f4061ae9bf486cc9e2a699355450638e8c2&quot;&gt;&lt;code&gt;2c031f4&lt;/code&gt;&lt;/a> Set the release date of 2.11.2</li>

<li><a href="https://github.com/scrapy/scrapy/commit/3ffa17c0204deb3bdf2c7c60f5a56c9f777698c6&quot;&gt;&lt;code&gt;3ffa17c&lt;/code&gt;&lt;/a> Use posargs for pypy3-pinned</li>

<li><a href="https://github.com/scrapy/scrapy/commit/c6a8f0e4d945622a7e71adf635e272b66eddbbd0&quot;&gt;&lt;code&gt;c6a8f0e&lt;/code&gt;&lt;/a> Update VERSION references</li>

<li><a href="https://github.com/scrapy/scrapy/commit/60d2577284128cd0cf4af54745730da4a9005177&quot;&gt;&lt;code&gt;60d2577&lt;/code&gt;&lt;/a> Merge remote-tracking branch '23j4/2.11.2-release-notes' into 2.11</li>

<li><a href="https://github.com/scrapy/scrapy/commit/36287cb665ab4b0c65fd53181c9a0ef04990ada6&quot;&gt;&lt;code&gt;36287cb&lt;/code&gt;&lt;/a> Merge branch 'redirect-protocols' into 2.11</li>

<li><a href="https://github.com/scrapy/scrapy/commit/f138d5d1450ef38ee077c2472c136c70d8d673e8&quot;&gt;&lt;code&gt;f138d5d&lt;/code&gt;&lt;/a> Merge branch 'environ-proxy-protocol' into 2.11</li>

<li><a href="https://github.com/scrapy/scrapy/commit/1d0502f25bbe55a22899af915623fda1aaeb9dd8&quot;&gt;&lt;code&gt;1d0502f&lt;/code&gt;&lt;/a> Merge branch 'advisory-fix' into 2.11</li>

<li><a href="https://github.com/scrapy/scrapy/commit/bb948af00babe545a7fb52700f4ba1424d206677&quot;&gt;&lt;code&gt;bb948af&lt;/code&gt;&lt;/a> Release notes for 2.11.2 (<a href="https://redirect.github.com/scrapy/scrapy/issues/6359&quot;&gt;#6359&lt;/a&gt;)&lt;/li>

<li><a href="https://github.com/scrapy/scrapy/commit/5ad9433dd59cd8436ce33bf2c44796516eef4c3c&quot;&gt;&lt;code&gt;5ad9433&lt;/code&gt;&lt;/a> Merge remote-tracking branch 'scrapy/2.11' into 2.11</li>

<li>Additional commits viewable in <a href="https://github.com/scrapy/scrapy/compare/1.6.0...2.11.2&quot;&gt;compare view</a></li>

</ul>

</details>
<br />


Updates lxml from 4.3.4 to 4.9.1

Changelog
Sourced from lxml's changelog.

4.9.1 (2022-07-01)
Bugs fixed

A crash was resolved when using iterwalk() (or canonicalize())
after parsing certain incorrect input.  Note that iterwalk() can crash
on valid input parsed with the same parser after failing to parse the
incorrect input.

4.9.0 (2022-06-01)
Bugs fixed

GH#341: The mixin inheritance order in lxml.html was corrected.
Patch by xmo-odoo.

Other changes


Built with Cython 0.29.30 to adapt to changes in Python 3.11 and 3.12.


Wheels include zlib 1.2.12, libxml2 2.9.14 and libxslt 1.1.35
(libxml2 2.9.12+ and libxslt 1.1.34 on Windows).


GH#343: Windows-AArch64 build support in Visual Studio.
Patch by Steve Dower.


4.8.0 (2022-02-17)
Features added


GH#337: Path-like objects are now supported throughout the API instead of just strings.
Patch by Henning Janssen.


The ElementMaker now supports QName values as tags, which always override
the default namespace of the factory.


Bugs fixed

GH#338: In lxml.objectify, the XSI float annotation "nan" and "inf" were spelled in
lower case, whereas XML Schema datatypes define them as "NaN" and "INF" respectively.



... (truncated)


Commits

d01872c Prevent parse failure in new test from leaking into later test runs.
d65e632 Prepare release of lxml 4.9.1.
86368e9 Fix a crash when incorrect parser input occurs together with usages of iterwa...
50c2764 Delete unused Travis CI config and reference in docs (GH-345)
8f0bf2d Try to speed up the musllinux AArch64 build by splitting the different CPytho...
b9f7074 Remove debug print from test.
b224e0f Try to install 'xz' in wheel builds, if available, since it's now needed to e...
897ebfa Update macOS deployment target version from 10.14 to 10.15 since 10.14 starts...
853c9e9 Prepare release of 4.9.0.
d3f77e6 Add a test for https://bugs.launchpad.net/lxml/+bug/1965070 leaving out the a...
Additional commits viewable in compare view




Updates scrapy-splash from 0.7.2 to 0.8.0

Release notes
Sourced from scrapy-splash's releases.

0.8.0


Security bug fix:
If you use HttpAuthMiddleware (i.e. the http_user and http_pass spider attributes) for Splash authentication, any non-Splash request will expose your credentials to the request target. This includes robots.txt requests sent by Scrapy when the ROBOTSTXT_OBEY setting is set to True.
Use the new SPLASH_USER and SPLASH_PASS settings instead to set your Splash authentication credentials safely.


Responses now expose the HTTP status code and headers from Splash as response.splash_response_status and response.splash_response_headers (#158)


The meta argument passed to the scrapy_splash.request.SplashRequest constructor is no longer modified (#164)


Website responses with 400 or 498 as HTTP status code are no longer handled as the equivalent Splash responses (#158)


Cookies are no longer sent to Splash itself (#156)


scrapy_splash.utils.dict_hash now also works with obj=None (225793b)


Our test suite now includes integration tests (#156) and tests can be run in parallel (6fb8c41)


There’s a new ‘Getting help’ section in the README.rst file (#161, #162), the documentation about SPLASH_SLOT_POLICY has been improved (#157) and a typo as been fixed (#121)


Made some internal improvements (ee5000d, 25de545, 2aaa79d)





Changelog
Sourced from scrapy-splash's changelog.

0.8.0 (2021-10-05)


Security bug fix:
If you use HttpAuthMiddleware_ (i.e. the http_user and http_pass
spider attributes) for Splash authentication, any non-Splash request will
expose your credentials to the request target. This includes robots.txt
requests sent by Scrapy when the ROBOTSTXT_OBEY setting is set to
True.
Use the new SPLASH_USER and SPLASH_PASS settings instead to set
your Splash authentication credentials safely.
.. _HttpAuthMiddleware: http://doc.scrapy.org/en/latest/topics/downloader-middleware.html#module-scrapy.downloadermiddlewares.httpauth


Responses now expose the HTTP status code and headers from Splash as
response.splash_response_status and
response.splash_response_headers (#158)


The meta argument passed to the scrapy_splash.request.SplashRequest
constructor is no longer modified (#164)


Website responses with 400 or 498 as HTTP status code are no longer
handled as the equivalent Splash responses (#158)


Cookies are no longer sent to Splash itself (#156)


scrapy_splash.utils.dict_hash now also works with obj=None
(225793b)


Our test suite now includes integration tests (#156) and tests can be run
in parallel (6fb8c41)


There’s a new ‘Getting help’ section in the README.rst file (#161,
#162), the documentation about SPLASH_SLOT_POLICY has been improved
(#157) and a typo as been fixed (#121)


Made some internal improvements (ee5000d, 25de545, 2aaa79d)





Commits

b42e191 README.rst: remove :ref: usage
e942d28 CHANGES.rst: update 0.8.0 release date
8643db2 CHANGES.rst: remove :ref: usage
263418a GitHub Actions: use the official codecov action (#293)
2b253e5 Implement SPLASH_USER and SPLASH_PASS
783c58d Version bump for 0.8.0 (#230)
c96e00b Travis CI → GitHub Actions (#292)
e40ca4f TST test for GH-164
f05c870 Merge pull request #164 from whalebot-helmsman/master
6658431 use a copy instead of changing external dict
Additional commits viewable in compare view




Updates twisted from 19.2.1 to 23.10.0

Release notes
Sourced from twisted's releases.

Twisted 23.10.0 (2023-10-31)
No changes since 23.10.0.rc1.
Features

twisted.python.filepath.FilePath and related classes (twisted.python.filepath.IFilepath, twisted.python.filepath.AbstractFilePath, twisted.python.zippath.ZipPath, and twisted.python.zippath.ZipArchive) now have type annotations.  Additionally, FilePath is now generic, describing its mode, so you can annotate variables as FilePath[str] or FilePath[bytes] depending on the types that you wish to get back from the 'path' attribute and related methods like 'basename'. (#11822)
When using CPython, functions wrapped by twisted.internet.defer.inlineCallbacks can have their arguments and return values freed immediately after completion (due to there no longer being circular references). (#11885)

Bugfixes

Fix TypeError on t.i.cfreactor due to 3.10 type annotation syntax (#11965)
Fix the type annotations of DeferredLock.run, DeferredSemaphore.run, maybeDeferred, ensureDeferred, inlineCallbacks and fromCoroutine that used to return Deferred[Any] to return the result of the passed Coroutine/Coroutine function (#11985)
Fixed significant performance overhead (CPU and bandwidth) when doing small writes to a TLS transport. Specifically, small writes to a TLS transport are now buffered until the next reactor iteration. (#11989)
fix mypy due to hypothesis 6.85 (#11995)

Improved Documentation

The search and version navigation for the documentation hosted on
Read The Docs was fixed.
This was a regression introduced with 23.8.0. (#12012)

Deprecations and Removals

Drop support for Python 3.7. Remove twisted[contextvars] extra (contextvars are always available in Python 3.7+) (#11913)

Misc

#5206, #11583, #11787, #11871, #11912, #11921, #11922, #11926, #11932, #11934, #11936, #11938, #11940, #11942, #11945, #11948, #11952, #11953, #11955, #11957, #11959, #11961, #11964, #11973, #11977, #11980, #11982, #11993, #11999, #12004, #12005, #12009

Conch
No significant changes.
Web


... (truncated)


Changelog
Sourced from twisted's changelog.

Twisted 23.10.0 (2023-10-31)
No changes since 23.10.0.rc1.
Features

twisted.python.filepath.FilePath and related classes (twisted.python.filepath.IFilepath, twisted.python.filepath.AbstractFilePath, twisted.python.zippath.ZipPath, and twisted.python.zippath.ZipArchive) now have type annotations.  Additionally, FilePath is now generic, describing its mode, so you can annotate variables as FilePath[str] or FilePath[bytes] depending on the types that you wish to get back from the 'path' attribute and related methods like 'basename'. (#11822)
When using CPython, functions wrapped by twisted.internet.defer.inlineCallbacks can have their arguments and return values freed immediately after completion (due to there no longer being circular references). (#11885)

Bugfixes

Fix TypeError on t.i.cfreactor due to 3.10 type annotation syntax (#11965)
Fix the type annotations of DeferredLock.run, DeferredSemaphore.run, maybeDeferred, ensureDeferred, inlineCallbacks and fromCoroutine that used to return Deferred[Any] to return the result of the passed Coroutine/Coroutine function (#11985)
Fixed significant performance overhead (CPU and bandwidth) when doing small writes to a TLS transport. Specifically, small writes to a TLS transport are now buffered until the next reactor iteration. (#11989)
fix mypy due to hypothesis 6.85 (#11995)

Improved Documentation

The search and version navigation for the documentation hosted on
Read The Docs was fixed.
This was a regression introduced with 23.8.0. (#12012)

Deprecations and Removals

Drop support for Python 3.7. Remove twisted[contextvars] extra (contextvars are always available in Python 3.7+) (#11913)

Misc

#5206, #11583, #11787, #11871, #11912, #11921, #11922, #11926, #11932, #11934, #11936, #11938, #11940, #11942, #11945, #11948, #11952, #11953, #11955, #11957, #11959, #11961, #11964, #11973, #11977, #11980, #11982, #11993, #11999, #12004, #12005, #12009

Conch
No significant changes.
Web


... (truncated)


Commits

f3f3389 python -m incremental.update Twisted --newversion
2d15c00 Add CVE id to bug.
61c46d4 tox -e towncrier
650c59d python -m incremental.update Twisted --rc
157cd8e #11985 fix DeferredLock.run/Semaphore.run/maybeDeferred/ensureDeferred/inline...
ed25d4a [pre-commit.ci] auto fixes from pre-commit.com hooks
5eb2078 Merge branch 'trunk' into fix-concurrency-primative-type
2df4c76 Update src/twisted/test/test_defer.py
105a9f5 #11989 Lots of small writes to the TLS transport use a lot of cpu (#11996)
524a2fa Fix lint
Additional commits viewable in compare view




Updates autobahn from 18.3.1 to 20.12.3

Changelog
Sourced from autobahn's changelog.

20.12.3

fix: URL must be re-encoded when doing redirect (#1439)
fix: update and migrate CI/CD pipeline to GitHub Actions
new: minimum supported Python (language) version is now 3.6 (on CPython and PyPy)

20.12.2

fix: derive_bip32childkey traceback (#1436)
fix: update and adjust docker files to upstream changes

20.12.1

new: CLI commands for WAMP IDL (xbrnetwork describe-schema / codegen-schema)
new: add eth address helpers (#1413)
new: cryptosign authextra allow arbitrary keys (#1411)
fix: adapt to planet api prefix change (#1408)
fix: Type check improve (#1405)

20.7.1

new: add market login eip. expose helpers (#1402)

20.6.2

fix: xbr fixes (#1396)
fix: use cpy 3.8 for running flake in CI
new: Ticket1392 internal attrs (#1394)
new: internal-only router attributes and hook for router to add custom information

20.6.1

new: massive expansion of XBR CLI and EIP712 helpers
new: more (exhaustive) serializer cross-tripping tests
fix: some code quality and bug-risk issues (#1379)
fix: removed externalPort assignment when not set (#1378)
fix: docs link in README (#1381)
fix: docs typo frameword -> framework (#1380)
fix: improve logging; track results on observable mixin
new: add environmental variable that strips xbr. (#1374)
fix: trollius is gone (#1373)
new: added ability to disable TLS channel binding (#1368)

20.4.3


... (truncated)


Commits

3960cba fix deploy step
79ae908 fix deploy step
bef42d9 sync (#1441)
268e986 migrate travis to gh actions (#1440)
d889394 deletes deleted example from README.md (#1438)
f7b7ad5 URL must be re-encoded when doing redirect (#1439)
c08e9e3 fix minor docker makefile targets
cd3c4d8 fix xbr mnemonic helper (#1437)
e1cc990 fix dep
4bbc1a6 Wamp idl 3 (#1434)
Additional commits viewable in compare view




Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options


You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

You can disable automated security fix PRs for this repo from the Security Alerts page.