Update dependency pydantic to v1.10.13 [SECURITY] #25
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
==1.10.2
->==1.10.13
GitHub Vulnerability Alerts
CVE-2024-3772
Regular expression denial of service in Pydantic < 2.4.0, < 1.10.13 allows remote attackers to cause denial of service via a crafted email string.
Release Notes
pydantic/pydantic (pydantic)
v1.10.13
Compare Source
pydantic.validate_email
, #7673 by @hramezaniv1.10.12
Compare Source
maxlen
property being dropped ondeque
validation. Happened only if the deque item has been typed. Changes the_validate_sequence_like
func, #6581 by @maciekglowkav1.10.11
Compare Source
v1.10.10
Compare Source
Json
field support to settings management, #6250 by @hramezaniv1.10.9
Compare Source
v1.10.8
Compare Source
Literal
usage withtyping-extension==4.6.0
, #5826 by @hramezaniAnyClassMethod
for changes in python/typeshed#9771, #5505 by @ITProKylev1.10.7
Compare Source
ConstrainedStr
withregex
as dict key, #5223 by @matejetzfrom_orm
in their own classes, #5187 by @dmontaguInitVar
usage with pydantic dataclasses, mypy version1.1.1
and the custom mypy plugin, #5162 by @cdce8pv1.10.6
Compare Source
functools.partial
andfunctools.partialmethod
when checking the signature, #5126 by @JensHeinrichdataclass_transform
decorator for pydantic dataclasses, #5111 by @cdce8pValidationError
, notConfigError
, when a discriminator value is unhashable, #4773 by @kurtmckeev1.10.5
Compare Source
GenericModel
s with complex sets of models, #5052 by @MarkusSintonenRecursionError
when deep-copying dataclass types wrapped by pydantic, #4949 by @mbillingrX | Y
union syntax breakingGenericModel
, #4146 by @thenxv1.10.4
Compare Source
typing-extensions>=4.2.0
, #4885 by @samuelcolvinv1.10.3
Compare Source
NOTE: v1.10.3 was "yanked" from PyPI due to #4885 which is fixed in v1.10.4
schema
andschema_json
on models where a model instance is a one of default values, #4781 by @BobroniumDataclassProxy
, #4695 by @PrettyWoodpostgresql+psycopg
as allowed scheme forPostgreDsn
to make it usable with SQLAlchemy 2, #4689 by @morianpatternProperties
andadditionalProperties
, #4641 by @jpariseunique_items
, #4568 by @mfulgoGenericModel
withCallable
param raising aTypeError
, #4551 by @mfulgoStrictStr
type annotation, #4538 by @sispdataclass_transform
keyword argument name fromfield_descriptors
tofield_specifiers
, #4500 by @samuelcolvin__post_init__
when dataclasses are inherited, #4487 by @PrettyWoodConfiguration
📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.