Skip to content

Update dependency pymysql to v1.1.1

Stackspin-renovate Bot requested to merge renovate/pymysql-1.x into main

This MR contains the following updates:

Package Update Change
pymysql minor ==1.0.2 -> ==1.1.1

Release Notes

PyMySQL/PyMySQL (pymysql)

v1.1.1

Compare Source

Release date: 2024-05-21

[!WARNING] This release fixes a vulnerability (CVE-2024-36039). All users are recommended to update to this version.

If you can not update soon, check the input value from untrusted source has an expected type. Only dict input from untrusted source can be an attack vector.

  • Prohibit dict parameter for Cursor.execute(). It didn't produce valid SQL and might cause SQL injection. (CVE-2024-36039)
  • Added ssl_key_password param. #​1145

v1.1.0

Compare Source

Release date: 2023-06-26

  • Fixed SSCursor raising OperationalError for query timeouts on wrong statement (#​1032)
  • Exposed Cursor.warning_count to check for warnings without additional query (#​1056)
  • Make Cursor iterator (#​995)
  • Support '_' in key name in my.cnf (#​1114)
  • Cursor.fetchall() returns empty list instead of tuple (#​1115). Note that Cursor.fetchmany() still return empty tuple after reading all rows for compatibility with Django.
  • Deprecate Error classes in Cursor class (#​1117)
  • Add Connection.set_character_set(charset, collation=None). This method is compatible with mysqlclient. (#​1119)
  • Deprecate Connection.set_charset(charset) (#​1119)
  • New connection always send "SET NAMES charset [COLLATE collation]" query. (#​1119) Since collation table is vary on MySQL server versions, collation in handshake is fragile.
  • Support charset="utf8mb3" option (#​1127)

v1.0.3

Compare Source

Release date: 2023-03-28


Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

Rebasing: Whenever MR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this MR and you won't be reminded about this update again.


  • If you want to rebase/retry this MR, check this box

This MR has been generated by Renovate Bot.

Merge request reports

Loading