Releases: PyMySQL/PyMySQL
Releases · PyMySQL/PyMySQL
v1.1.1
Warning
This release fixes a vulnerability (CVE-2024-36039).
All users are recommended to update to this version.
If you can not update soon, check the input value from untrusted source has an expected type.
Only dict input from untrusted source can be an attack vector.
What's Changed
- Prohibit dict parameter for
Cursor.execute()
. It didn't produce valid SQL
and might cause SQL injection. (CVE-2024-36039) - Added ssl_key_password param by @svaskov in #1145
Merged PRs
- Add support for Python 3.12 by @hugovk in #1134
- chore(deps): update actions/checkout action to v4 by @renovate in #1136
- Update codecov/codecov-action action to v4 by @renovate in #1137
- ci: use codecov@v3 by @methane in #1142
- chore(deps): update dessant/lock-threads action to v5 by @renovate in #1141
- doc: use rtd theme by @methane in #1143
- use Ruff as formatter by @methane in #1144
- chore(deps): update dependency sphinx-rtd-theme to v2 by @renovate in #1147
- chore(deps): update actions/setup-python action to v5 by @renovate in #1152
- chore(deps): update github/codeql-action action to v3 by @renovate in #1154
- chore(deps): update codecov/codecov-action action to v4 by @renovate in #1158
- Support error packet without sqlstate by @methane in #1160
- test json - mariadb without JSON type by @grooverdan in #1165
New Contributors
Full Changelog: v1.1.0...v1.1.1
v1.1.0
What's Changed
- Remove redundant wheel dep from pyproject.toml by @mgorny in #1099
- ci: Fix black options by @methane in #1109
- Remove unused function by @methane in #1108
- Expose
Cursor.warning_count
by @Nothing4You in #1056 - Add constants and tests related to query timeouts by @Nothing4You in #1033
- Fix SSCursor raising query timeout error on wrong query on MySQL DB by @Nothing4You in #1035
- Make Cursor an iterator by @sanchezg in #995
- ci: Update CodeQL workflow by @methane in #1110
- Use Ruff instead of flake8 by @methane in #1112
- Use Codecov instead of coveralls. by @methane in #1113
- optionfile: Replace
_
with-
by @methane in #1114 - Cursor.fetchall() always return list. by @methane in #1115
- Fix LOAD DATA LOCAL INFILE write EOF packet on closed connection. by @methane in #1116
- Deprecate Cursor.Error access by @methane in #1117
- Run pyupgrade by @methane in #1118
- Add
collation
option andset_character_set()
to Connection by @methane in #1119 - CI: Run Django test by @methane in #1121
- Release v1.1.0rc1 by @methane in #1122
- Bump mariadb version by @grooverdan in #1123
- Configure Renovate by @renovate in #1124
- Make charset="utf8" use utf8mb4. by @methane in #1127
- Add codecov.yml by @methane in #1128
- Release v1.1.0rc2 by @methane in #1129
- Release v1.1.0 by @methane in #1130
New Contributors
Full Changelog: v1.0.3...v1.1.0
v1.1.0rc2
v1.1.0rc1
What's Changed
- Remove redundant wheel dep from pyproject.toml by @mgorny in #1099
- ci: Fix black options by @methane in #1109
- Remove unused function by @methane in #1108
- Expose
Cursor.warning_count
by @Nothing4You in #1056 - Add constants and tests related to query timeouts by @Nothing4You in #1033
- Fix SSCursor raising query timeout error on wrong query on MySQL DB by @Nothing4You in #1035
- Make Cursor an iterator by @sanchezg in #995
- ci: Update CodeQL workflow by @methane in #1110
- Use Ruff instead of flake8 by @methane in #1112
- Use Codecov instead of coveralls. by @methane in #1113
- optionfile: Replace
_
with-
by @methane in #1114 - Cursor.fetchall() always return list. by @methane in #1115
- Fix LOAD DATA LOCAL INFILE write EOF packet on closed connection. by @methane in #1116
- Deprecate Cursor.Error access by @methane in #1117
- Run pyupgrade by @methane in #1118
- Add
collation
option andset_character_set()
to Connection by @methane in #1119 - CI: Run Django test by @methane in #1121
- Release v1.1.0rc1 by @methane in #1122
New Contributors
Full Changelog: v1.0.3...v1.1.0rc1
v1.0.3
What's Changed
- Removed _last_executed because of duplication with _executed by @rajat315315 in #948
- Actions: Fix 422 error on Coveralls by @methane in #949
- Actions: Use cache in finish by @methane in #950
- Fix docstring for converter functions by @darxriggs in #952
- Improve docstrings by @darxriggs in #954
- Fix generating authentication response with long strings by @netch80 in #988
- Fix doctest in pymysql.converters by @methane in #994
- Actions: Run test with Python 3.10 by @methane in #996
- Fix calling undefined function by @methane in #1003
- Stop showing handler name when hander is not set. by @methane in #1004
- tests: container docker-entrypoint-initdb.d for ease of testing by @grooverdan in #1009
- fix typo in comment by @Nothing4You in #1024
- Update black by @methane in #1026
- Actions: Use actions/setup-python cache by @methane in #1027
- update pymysql.constants.CR by @Nothing4You in #1029
- we have these constants, why not make use of them? by @Nothing4You in #1028
- Improve GitHub workflow by @Nothing4You in #1031
- Drop support of EOL Python and DB versions by @Nothing4You in #1030
- Fix coveralls branch in README.rst by @Nothing4You in #1034
- Fix minor typo in error message by @nattybear in #1038
- Document that the ssl connection parameter can be an SSLContext by @cakemanny in #1045
- Update mariadb tests to 10.8, remove end of life mariadb 10.2 by @Nothing4You in #1049
- Fix CodeQL target branch by @Nothing4You in #1054
- Update CodeQL GitHub action to v2 by @Nothing4You in #1055
- tests: remove duplicate test
test_nextset
by @wd0517 in #1057 - Remove deprecated socket.error from Connection.connect exception handler by @Nothing4You in #1062
- Raise ProgrammingError on -np.inf in addition to np.inf by @cdcadman in #1067
- Add unix socket connection test by @SergeantMenacingGarlic in #1061
- Use Python 3.11 release instead of -dev in tests by @Nothing4You in #1076
- docs: Fix a few typos by @timgates42 in #1053
- flake8: Use max_line_length instead of ignoring E501 by @cclauss in #1081
- Fix typos discovered by codespell by @cclauss in #1082
- Add doctest by @methane in #1086
- Use pyproject.toml by @methane in #1087
- Upgrade GitHub Actions by @cclauss in #1080
- Upgrade more GitHub Actions by @cclauss in #1088
- Convert README to Markdown by @methane in #1093
- Release v1.0.3rc1 by @methane in #1094
- Fix setuptools didn't include pymysql.constants by @methane in #1096
- v1.0.3 by @methane in #1097
- Fix VERSION for dynamic version by @methane in #1098
New Contributors
- @rajat315315 made their first contribution in #948
- @darxriggs made their first contribution in #952
- @netch80 made their first contribution in #988
- @Nothing4You made their first contribution in #1024
- @nattybear made their first contribution in #1038
- @cakemanny made their first contribution in #1045
- @wd0517 made their first contribution in #1057
- @cdcadman made their first contribution in #1067
- @SergeantMenacingGarlic made their first contribution in #1061
- @cclauss made their first contribution in #1081
Full Changelog: v1.0.2...v1.0.3
v1.0.3rc1
What's Changed
- Removed _last_executed because of duplication with _executed by @rajat315315 in #948
- Actions: Fix 422 error on Coveralls by @methane in #949
- Actions: Use cache in finish by @methane in #950
- Fix docstring for converter functions by @darxriggs in #952
- Improve docstrings by @darxriggs in #954
- Fix generating authentication response with long strings by @netch80 in #988
- Fix doctest in pymysql.converters by @methane in #994
- Actions: Run test with Python 3.10 by @methane in #996
- Fix calling undefined function by @methane in #1003
- Stop showing handler name when hander is not set. by @methane in #1004
- tests: container docker-entrypoint-initdb.d for ease of testing by @grooverdan in #1009
- fix typo in comment by @Nothing4You in #1024
- Update black by @methane in #1026
- Actions: Use actions/setup-python cache by @methane in #1027
- update pymysql.constants.CR by @Nothing4You in #1029
- we have these constants, why not make use of them? by @Nothing4You in #1028
- Improve GitHub workflow by @Nothing4You in #1031
- Drop support of EOL Python and DB versions by @Nothing4You in #1030
- Fix coveralls branch in README.rst by @Nothing4You in #1034
- Fix minor typo in error message by @nattybear in #1038
- Document that the ssl connection parameter can be an SSLContext by @cakemanny in #1045
- Update mariadb tests to 10.8, remove end of life mariadb 10.2 by @Nothing4You in #1049
- Fix CodeQL target branch by @Nothing4You in #1054
- Update CodeQL GitHub action to v2 by @Nothing4You in #1055
- tests: remove duplicate test
test_nextset
by @wd0517 in #1057 - Remove deprecated socket.error from Connection.connect exception handler by @Nothing4You in #1062
- Raise ProgrammingError on -np.inf in addition to np.inf by @cdcadman in #1067
- Add unix socket connection test by @SergeantMenacingGarlic in #1061
- Use Python 3.11 release instead of -dev in tests by @Nothing4You in #1076
- docs: Fix a few typos by @timgates42 in #1053
- flake8: Use max_line_length instead of ignoring E501 by @cclauss in #1081
- Fix typos discovered by codespell by @cclauss in #1082
- Add doctest by @methane in #1086
- Use pyproject.toml by @methane in #1087
- Upgrade GitHub Actions by @cclauss in #1080
- Upgrade more GitHub Actions by @cclauss in #1088
- Convert README to Markdown by @methane in #1093
- Release v1.0.3rc1 by @methane in #1094
New Contributors
- @rajat315315 made their first contribution in #948
- @darxriggs made their first contribution in #952
- @netch80 made their first contribution in #988
- @Nothing4You made their first contribution in #1024
- @nattybear made their first contribution in #1038
- @cakemanny made their first contribution in #1045
- @wd0517 made their first contribution in #1057
- @cdcadman made their first contribution in #1067
- @SergeantMenacingGarlic made their first contribution in #1061
- @cclauss made their first contribution in #1081
Full Changelog: v1.0.2...v1.0.3rc1