Udata

Latest version: v8.0.0

Safety actively analyzes 630094 Python packages for vulnerabilities to keep your Python projects secure.

Scan your dependencies

Page 3 of 25

6.1.5

Not secure
- Specify *public* datasets and reuses in admin count [2852](https://github.com/opendatateam/udata/pull/2852)
- Fix url params being stripped in markdown for internal URLs [2855](https://github.com/opendatateam/udata/pull/2855)

6.1.4

Not secure
- Upgrade development dependencies [2844](https://github.com/opendatateam/udata/pull/2844)
- Compile translations for testing [2845](https://github.com/opendatateam/udata/pull/2845)
- Add user arg to discussion list API [2842](https://github.com/opendatateam/udata/pull/2842)
- No more sending email, slug and user name to sentry [2846](https://github.com/opendatateam/udata/pull/2846)
- Add test for passwordless user [2848](https://github.com/opendatateam/udata/pull/2848)
- Parse IANA and EUROPA URIs format [2849](https://github.com/opendatateam/udata/pull/2849)
- Dataset last update sorting:
- Transmit dataset's `last_update` field to search service [2847](https://github.com/opendatateam/udata/pull/2847)
- Check if dataset's and resource's harvesting date `modified_at` are ealier than today's date [2850](https://github.com/opendatateam/udata/pull/2850)
- Upgrade mongoengine and storage deps [2839](https://github.com/opendatateam/udata/pull/2839):
- Upgrade flask-storage 1.0.0 -> 1.3.2
- Upgrade flask-mongoengine 0.9.5 -> 1.0.0, now returning a ValidationError on get_or_404 on invalid id
- Upgrade mongoengine 0.26.0 -> 0.27.0
- Prevent raising unecessary error in index command [2851](https://github.com/opendatateam/udata/pull/2851)
- Use `datetime.utcnow` to make sure to handle utc datetimes [2853](https://github.com/opendatateam/udata/pull/2853)

6.1.3

Not secure
- Fix XSS vulnerability: escape user content in selectize items in admin [2843](https://github.com/opendatateam/udata/pull/2843)
- Fix schema is undefined when checking for schema.url in admin resource form [2837](https://github.com/opendatateam/udata/pull/2837)
- Fix to_naive_datetime in harvest preview [2835](https://github.com/opendatateam/udata/pull/2835)
- :warning: Flask-Security update to enable `GenericResponses` [2826](https://github.com/opendatateam/udata/pull/2826):
- Upgrade Flask-Security 4.5.1 -> 5.1.1
- Upgrade WTForms 2.2.1 -> 3.0.1
- Upgrade WTForms-json 0.3.3 -> 0.3.5
- New security email template for existing users
- Fix SelectField validation failure following WTForms upgrade [2841](https://github.com/opendatateam/udata/pull/2841)
- Add `format_timedelta` to `udata.i18n` [2836](https://github.com/opendatateam/udata/pull/2836)
- Improve send_mail resilience with refused address among recipients [2840](https://github.com/opendatateam/udata/pull/2840)

6.1.2

Not secure
- Resources schema can now have an URL field. [2825](https://github.com/opendatateam/udata/pull/2825)
- Fix URLField validation error message [2831](https://github.com/opendatateam/udata/pull/2831)
- Dates renaming to provide more relevant computed dates between internal and harvested dates [2815](https://github.com/opendatateam/udata/pull/2815):
- Removed `published` attribute from Resource model
- Renamed `created_at` and `last_modified` of Dataset model to `created_at_internal` and `last_modified_internal`
- Renamed `created_at` and `modified` of Resource model to `created_at_internal` and `last_modified_internal`
- Added `created_at` computed property in Dataset and Resource model to provide harvested date if present and internal otherwise
- Added `last_modified` computed property in Dataset and Resource model to provide max date between internal and harvested date
- Fix for PR [2815](https://github.com/opendatateam/udata/pull/2815) [#2832](https://github.com/opendatateam/udata/pull/2832)
- Fix following dates refactoring [2815](https://github.com/opendatateam/udata/pull/2815) [#2832](https://github.com/opendatateam/udata/pull/2832)
- Fix dcat harvesting on dcat:Dataset with blank nodes [2834](https://github.com/opendatateam/udata/pull/2834)
- Add dataset archived field in resource catalog [2833](https://github.com/opendatateam/udata/pull/2833)

6.1.1

Not secure
- Fix edge case on aware datetime string [2827](https://github.com/opendatateam/udata/pull/2827)
- :warning: MongoDB support up to 6.0.4 [2819](https://github.com/opendatateam/udata/pull/2819):
- Older versions of MongoDB >=3.6 are still supported
- Upgrade must be done release by release to set the `FeatureCompatibilityVersion` variable like stated in [this](https://www.mongodb.com/docs/v4.2/release-notes/4.0/#upgrade-procedures) documentation.
- Upgrade pymongo 3.10.1 -> 4.3.3
- Upgrade mongoengine 0.20.0 -> 0.26.0
- Add IATA `ssim` among allowed file extensions [2828](https://github.com/opendatateam/udata/pull/2828)
- Copy user mail card back from udata-front [2822](https://github.com/opendatateam/udata/pull/2822)
- Upgrade node to a version still available [2830](https://github.com/opendatateam/udata/pull/2830)

6.1.0

Not secure
- :warning: Upgrading Flask to 2.1.2, leading to an upgrade of click (8.0), Flask-BabelEx (0.9.4), Flask-Caching (2.0.2), flask-storage (1.0.0) instead of flask-fs, Flask-Login (0.6.2), flask-restx (1.0.5), Flask-Security-Too (4.1.5), Jinja2 (3.1.2), pillow (9.2.0), werkzeug (2.2.2) [2816](https://github.com/opendatateam/udata/pull/2816)
- Use the full path to the caching backend in `CACHE_TYPE`, ex: `flask_caching.backends.redis`. Named backends are deprecated.
- Werkzeug redirect now returns the relative url as location in response (https://github.com/pallets/werkzeug/issues/2352).
- Removed functions have been replaced (`contextfilter` and `contextfunction` from Jinja, root imports and `Href` from Werkzeug, `JSONWebSignatureSerializer` from itsdangerous)
- Prevent multiple blueprint with same name registration (not supported anymore in Flask).
- Removed all code logic related to the `published` date in resource model, now deprecated. :warning: The attribute itself was left in the model because of the complexity of the migration [2807](https://github.com/opendatateam/udata/pull/2807)
- Add `xlsx` and `docx` as closed format for quality score [2814](https://github.com/opendatateam/udata/pull/2814)
- Flush latest rows in csv catalog export before storing file [2818](https://github.com/opendatateam/udata/pull/2818)
- Exposed dates through API are now timezone aware [2810](https://github.com/opendatateam/udata/pull/2810)
- Fix frequency reminder [2821](https://github.com/opendatateam/udata/pull/2821)

Page 3 of 25

© 2024 Safety CLI Cybersecurity Inc. All Rights Reserved.