docker icon indicating copy to clipboard operation
docker copied to clipboard

build(deps): bump python3-saml from 1.12.0 to 1.14.0

Open dependabot[bot] opened this issue 3 years ago • 1 comments

Bumps python3-saml from 1.12.0 to 1.14.0.

Release notes

Sourced from python3-saml's releases.

OneLogin's SAML Python3 Toolkit v1.14.0

  • #297 Don't require yanked version of lxml.
  • #298 Add support for python 3.10 and cleanup the GHA.
  • #299 Remove stats from coveralls removed as they are no longer maintained.

OneLogin's SAML Python3 Toolkit v1.13.0

  • #296 Add rejectDeprecatedAlgorithm settings in order to be able reject messages signed with deprecated algorithms.
  • Set sha256 and rsa-sha256 as default algorithms
  • #288 Support building a LogoutResponse with non-success status
  • Added warning about Open Redirect and Reply attacks
  • [##274](onelogin/python3-saml#274) Replace double-underscored names with single underscores
  • Add at OneLogin_Saml2_Auth get_last_assertion_issue_instant() and get_last_response_in_response_to() methods
  • Upgrade dependencies
Changelog

Sourced from python3-saml's changelog.

1.14.0 (Feb 18, 2022)

  • #297 Don't require yanked version of lxml.
  • #298 Add support for python 3.10 and cleanup the GHA.
  • #299 Remove stats from coveralls removed as they are no longer maintained.

1.13.0 (Jan 28, 2022)

  • #296 Add rejectDeprecatedAlgorithm settings in order to be able reject messages signed with deprecated algorithms.
  • Set sha256 and rsa-sha256 as default algorithms
  • #288 Support building a LogoutResponse with non-success status
  • Added warning about Open Redirect and Reply attacks
  • [##274](onelogin/python3-saml#274) Replace double-underscored names with single underscores
  • Add at OneLogin_Saml2_Auth get_last_assertion_issue_instant() and get_last_response_in_response_to() methods
  • Upgrade dependencies
Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

dependabot[bot] avatar Jul 18 '22 00:07 dependabot[bot]

Blocked by https://github.com/onelogin/python3-saml/issues/292

nijel avatar Jul 18 '22 07:07 nijel

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

dependabot[bot] avatar Dec 08 '22 14:12 dependabot[bot]