Skip to content
This repository has been archived by the owner on Dec 5, 2023. It is now read-only.

Bump django-storages-redux from 1.3 to 1.3.3 #666

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

dependabot-preview[bot]
Copy link

Bumps django-storages-redux from 1.3 to 1.3.3.

Changelog

Sourced from django-storages-redux's changelog.

django-storages CHANGELOG

1.7.1 (2018-09-06)


  • Fix off-by-1 error in get_available_name whenever file_overwrite or overwrite_files is True (#588, #589)
  • Change S3Boto3Storage.listdir() to use list_objects instead of list_objects_v2 to restore
    compatibility with services implementing the S3 protocol that do not yet support the new method (#586, #590)

.. _#588: https://github-redirect.dependabot.com/jschneier/django-storages/issues/588
.. _#589: https://github-redirect.dependabot.com/jschneier/django-storages/pull/589
.. _#586: https://github-redirect.dependabot.com/jschneier/django-storages/issues/586
.. _#590: https://github-redirect.dependabot.com/jschneier/django-storages/pull/590

1.7 (2018-09-03)


Security

  • The S3BotoStorage and S3Boto3Storage backends have an insecure
    default ACL of public-read. It is recommended that all current users audit their bucket
    permissions. Support has been added for setting AWS_DEFAULT_ACL = None and AWS_BUCKET_ACL = None which causes all created files to inherit the bucket's ACL (and created buckets to inherit the
    Amazon account's default ACL). This will become the default in version 2.0 (for S3Boto3Storage only
    since S3BotoStorage will be removed in version 1.8, see below). Additionally, a warning is now
    raised if AWS_DEFAULT_ACL or AWS_BUCKET_ACL is not explicitly set. (#381, #535, #579_)

Breaking

  • The AzureStorage backend and documentation has been completely rewritten. It now
    depends on azure and azure-storage-blob and is vastly improved. Big thanks to nitely and all
    other contributors along the way (#565_)
  • The .url() method of GoogleCloudStorage has been completely reworked. Many use
    cases should require no changes and will experience a massive speedup. The .url() method no longer hits
    the network for public urls and generates signed urls (with a default of 1-day expiration, configurable
    via GS_EXPIRATION) for non-public buckets. Check out the docs for more information. (#570_)
  • Various backends will now raise ImproperlyConfigured at runtime if their
    location (GS_LOCATION, AWS_LOCATION) begins with a leading / rather than silently
    stripping it. Verify yours does not. (#520_)
  • The long deprecated GSBotoStorage backend is removed. (#518_)

Deprecation

  • The insecure default of public-read for AWS_DEFAULT_ACL and
    AWS_BUCKET_ACL in S3Boto3Storage will change to inherit the bucket's setting in version 2.0 (#579_)
  • The legacy S3BotoBackend is deprecated and will be removed in version 1.8.
    It is strongly recommended to move to the S3Boto3Storage backend for performance,
    stability and bugfix reasons. See the boto migration docs_ for step-by-step guidelines. (#578, #584)
  • The long aliased arguments to S3Boto3Storage of acl and bucket are
... (truncated)
Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Note: This repo was added to Dependabot recently, so you'll receive a maximum of 5 PRs for your first few update runs. Once an update run creates fewer than 5 PRs we'll remove that limit.

You can always request more updates by clicking Bump now in your Dependabot dashboard.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot ignore this [patch|minor|major] version will close this PR and stop Dependabot creating any more for this minor/major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  • @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
  • @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
  • @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
  • @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language
  • @dependabot badge me will comment on this PR with code to add a "Dependabot enabled" badge to your readme

Additionally, you can set the following in your Dependabot dashboard:

  • Update frequency (including time of day and day of week)
  • Automerge options (never/patch/minor, and dev/runtime dependencies)
  • Pull request limits (per update run and/or open at any time)
  • Out-of-range updates (receive only lockfile updates, if desired)
  • Security updates (receive only security updates, if desired)

Finally, you can contact us by mentioning @dependabot.

@dependabot-preview dependabot-preview bot added the dependencies Pull requests that update a dependency file label Dec 14, 2018
@coveralls
Copy link

Coverage Status

Coverage remained the same at 71.773% when pulling fbbb42d on dependabot/pip/django-storages-redux-1.3.3 into 2f1daba on master.

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
dependencies Pull requests that update a dependency file
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants