From 66c931920251540130e512cb04c1c0a9e57a31a7 Mon Sep 17 00:00:00 2001 From: David Lord Date: Fri, 26 Oct 2018 16:40:59 -0700 Subject: [PATCH] link #114 changelog --- CHANGES.rst | 7 +++++-- src/itsdangerous/serializer.py | 8 ++++---- 2 files changed, 9 insertions(+), 6 deletions(-) diff --git a/CHANGES.rst b/CHANGES.rst index ade84c8..a2abcb7 100644 --- a/CHANGES.rst +++ b/CHANGES.rst @@ -4,7 +4,8 @@ Version 1.1.0 Released 2018-10-26 - Change default signing algorithm back to SHA-1. (`#113`_) -- Added a default SHA-512 fallback. +- Added a default SHA-512 fallback for users who used the yanked 1.0.0 + release which defaulted to SHA-512. (`#114`_) - Add support for fallback algorithms during deserialization to support changing the default in the future without breaking existing signatures. (`#113`_) @@ -12,6 +13,7 @@ Released 2018-10-26 in capitalization broke some tooling. (`#113`_) .. _#113: https://github.com/pallets/itsdangerous/pull/113 +.. _#114: https://github.com/pallets/itsdangerous/pull/114 Version 1.0.0 @@ -22,7 +24,8 @@ Released 2018-10-18 YANKED *Note*: This release was yanked from PyPI because it changed the default -algorithm to SHA-512. This decision was reverted and it remains at SHA1. +algorithm to SHA-512. This decision was reverted in 1.1.0 and it remains +at SHA1. - Drop support for Python 2.6 and 3.3. - Refactor code from a single module to a package. Any object in the diff --git a/src/itsdangerous/serializer.py b/src/itsdangerous/serializer.py index e8f2e72..12c20f4 100644 --- a/src/itsdangerous/serializer.py +++ b/src/itsdangerous/serializer.py @@ -30,7 +30,7 @@ class Serializer(object): class to the constructor as well as keyword arguments as a dict that should be forwarded. - .. code-block:: python3 + .. code-block:: python s = Serializer(signer_kwargs={'key_derivation': 'hmac'}) @@ -58,10 +58,10 @@ class to the constructor as well as keyword arguments as a dict that The ``signer`` and ``signer_kwargs`` parameters were added to the constructor. - .. versionchanged:: 1.1: + .. versionchanged:: 1.1.0: Added support for ``fallback_signers`` and configured a default - SHA-512 fallback. This fallback is for users who used the 1.0 - release which was yanked which had SHA-512 support in it. + SHA-512 fallback. This fallback is for users who used the yanked + 1.0.0 release which defaulted to SHA-512. """ #: If a serializer module or class is not passed to the constructor