Skip to content

Commit 2100bf0

Browse files
authored
Release/prepare 6.2.0 (#762)
* Prepare release 6.2.0 * Update link to renaming * Bump transitive dependency cryptography
1 parent 877b0d7 commit 2100bf0

9 files changed

Lines changed: 89 additions & 77 deletions

File tree

.github/actions/security-issues/action.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -39,7 +39,7 @@ runs:
3939
- name: Install Python Toolbox / Security tool
4040
shell: bash
4141
run: |
42-
pip install exasol-toolbox==6.1.1
42+
pip install exasol-toolbox==6.2.0
4343
4444
- name: Create Security Issue Report
4545
shell: bash

doc/changes/changelog.md

Lines changed: 2 additions & 0 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

doc/changes/changes_6.2.0.md

Lines changed: 28 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,28 @@
1+
# 6.2.0 - 2026-04-10
2+
3+
## Summary
4+
5+
This release fixes vulnerabilities by updating transitive dependencies in the `poetry.lock` file.
6+
7+
| Dependency | Version | ID | Fix Versions | Updated to |
8+
|--------------|---------|----------------|--------------|------------|
9+
| cryptography | 46.0.5 | CVE-2026-34073 | 46.0.6 | 46.0.7 |
10+
| cryptography | 46.0.6 | CVE-2026-39892 | 46.0.7 | 46.0.7 |
11+
| pygments | 2.19.2 | CVE-2026-4539 | 2.20.0 | 2.20.0 |
12+
| requests | 2.32.5 | CVE-2026-25645 | 2.33.0 | 2.33.1 |
13+
14+
To ensure usage of secure packages, it is up to the user to similarly relock their dependencies.
15+
16+
## Features
17+
18+
* #740: Added nox session `release:update`
19+
20+
## Security Issues
21+
22+
* #759: Fixed vulnerabilities by re-locking transitive dependencies & updated `actions/deploy-pages` from v4 to v5
23+
24+
## Dependency Updates
25+
26+
### `main`
27+
28+
* Updated dependency `pysonar:1.3.0.4086` to `1.0.2.1722`

doc/changes/unreleased.md

Lines changed: 0 additions & 18 deletions
Original file line numberDiff line numberDiff line change
@@ -1,21 +1,3 @@
11
# Unreleased
22

33
## Summary
4-
5-
This release fixes vulnerabilities by updating transitive dependencies in the `poetry.lock` file.
6-
7-
| Dependency | Version | ID | Fix Versions | Updated to |
8-
|--------------|---------|----------------|--------------|------------|
9-
| cryptography | 46.0.5 | CVE-2026-34073 | 46.0.6 | 46.0.6 |
10-
| pygments | 2.19.2 | CVE-2026-4539 | 2.20.0 | 2.20.0 |
11-
| requests | 2.32.5 | CVE-2026-25645 | 2.33.0 | 2.33.1 |
12-
13-
To ensure usage of secure packages, it is up to the user to similarly relock their dependencies.
14-
15-
## Features
16-
17-
* #740: Added nox session `release:update`
18-
19-
## Security Issues
20-
21-
* #759: Fixed vulnerabilities by re-locking transitive dependencies & updated `actions/deploy-pages` from v4 to v5

doc/user_guide/dependencies.rst

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -56,7 +56,7 @@ system-wide Poetry installation to most effectively use Poetry ``2.3.0``:
5656
* `PEP-735 <https://peps.python.org/pep-0735/>`__
5757

5858
.. note::
59-
Note that `uvx migrate-to-uv <https://github.com/mkniewallner/migrate-to-uv>`__
59+
Note that `uvx migrate-to-uv <https://github.com/osprey-oss/migrate-to-uv>`__
6060
seems to do a good job with automating many of the PEP-related changes.
6161
Though, a developer should take care to verify the changes, as some are unneeded
6262
as it completes the migration to ``uv`` which the PTB does NOT yet support.

exasol/toolbox/version.py

Lines changed: 2 additions & 2 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

poetry.lock

Lines changed: 52 additions & 52 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

project-template/cookiecutter.json

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -9,11 +9,11 @@
99
"author_email": "opensource@exasol.com",
1010
"project_short_tag": "",
1111
"python_version_min": "3.10",
12-
"exasol_toolbox_version_range": ">=6.1.1,<7",
12+
"exasol_toolbox_version_range": ">=6.2.0,<7",
1313
"license_year": "{% now 'utc', '%Y' %}",
1414
"__repo_name_slug": "{{cookiecutter.package_name}}",
1515
"__package_name_slug": "{{cookiecutter.package_name}}",
1616
"_extensions": [
1717
"cookiecutter.extensions.TimeExtension"
1818
]
19-
}
19+
}

pyproject.toml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
[project]
22
name = "exasol-toolbox"
3-
version = "6.1.1"
3+
version = "6.2.0"
44
description = "Your one-stop solution for managing all standard tasks and core workflows of your Python project."
55
authors = [
66
{ name = "Nicola Coretti", email = "nicola.coretti@exasol.com" },

0 commit comments

Comments
 (0)