Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion .github/actions/security-issues/action.yml
Original file line number Diff line number Diff line change
Expand Up @@ -39,7 +39,7 @@ runs:
- name: Install Python Toolbox / Security tool
shell: bash
run: |
pip install exasol-toolbox==6.1.1
pip install exasol-toolbox==6.2.0

- name: Create Security Issue Report
shell: bash
Expand Down
2 changes: 2 additions & 0 deletions doc/changes/changelog.md

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

28 changes: 28 additions & 0 deletions doc/changes/changes_6.2.0.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,28 @@
# 6.2.0 - 2026-04-10

## Summary

This release fixes vulnerabilities by updating transitive dependencies in the `poetry.lock` file.

| Dependency | Version | ID | Fix Versions | Updated to |
|--------------|---------|----------------|--------------|------------|
| cryptography | 46.0.5 | CVE-2026-34073 | 46.0.6 | 46.0.7 |
| cryptography | 46.0.6 | CVE-2026-39892 | 46.0.7 | 46.0.7 |
| pygments | 2.19.2 | CVE-2026-4539 | 2.20.0 | 2.20.0 |
| requests | 2.32.5 | CVE-2026-25645 | 2.33.0 | 2.33.1 |

To ensure usage of secure packages, it is up to the user to similarly relock their dependencies.

## Features

* #740: Added nox session `release:update`

## Security Issues

* #759: Fixed vulnerabilities by re-locking transitive dependencies & updated `actions/deploy-pages` from v4 to v5

## Dependency Updates

### `main`

* Updated dependency `pysonar:1.3.0.4086` to `1.0.2.1722`
18 changes: 0 additions & 18 deletions doc/changes/unreleased.md
Original file line number Diff line number Diff line change
@@ -1,21 +1,3 @@
# Unreleased

## Summary

This release fixes vulnerabilities by updating transitive dependencies in the `poetry.lock` file.

| Dependency | Version | ID | Fix Versions | Updated to |
|--------------|---------|----------------|--------------|------------|
| cryptography | 46.0.5 | CVE-2026-34073 | 46.0.6 | 46.0.6 |
| pygments | 2.19.2 | CVE-2026-4539 | 2.20.0 | 2.20.0 |
| requests | 2.32.5 | CVE-2026-25645 | 2.33.0 | 2.33.1 |

To ensure usage of secure packages, it is up to the user to similarly relock their dependencies.

## Features

* #740: Added nox session `release:update`

## Security Issues

* #759: Fixed vulnerabilities by re-locking transitive dependencies & updated `actions/deploy-pages` from v4 to v5
2 changes: 1 addition & 1 deletion doc/user_guide/dependencies.rst
Original file line number Diff line number Diff line change
Expand Up @@ -56,7 +56,7 @@ system-wide Poetry installation to most effectively use Poetry ``2.3.0``:
* `PEP-735 <https://peps.python.org/pep-0735/>`__

.. note::
Note that `uvx migrate-to-uv <https://github.com/mkniewallner/migrate-to-uv>`__
Note that `uvx migrate-to-uv <https://github.com/osprey-oss/migrate-to-uv>`__
seems to do a good job with automating many of the PEP-related changes.
Though, a developer should take care to verify the changes, as some are unneeded
as it completes the migration to ``uv`` which the PTB does NOT yet support.
4 changes: 2 additions & 2 deletions exasol/toolbox/version.py

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

104 changes: 52 additions & 52 deletions poetry.lock

Large diffs are not rendered by default.

4 changes: 2 additions & 2 deletions project-template/cookiecutter.json
Original file line number Diff line number Diff line change
Expand Up @@ -9,11 +9,11 @@
"author_email": "opensource@exasol.com",
"project_short_tag": "",
"python_version_min": "3.10",
"exasol_toolbox_version_range": ">=6.1.1,<7",
"exasol_toolbox_version_range": ">=6.2.0,<7",
"license_year": "{% now 'utc', '%Y' %}",
"__repo_name_slug": "{{cookiecutter.package_name}}",
"__package_name_slug": "{{cookiecutter.package_name}}",
"_extensions": [
"cookiecutter.extensions.TimeExtension"
]
}
}
2 changes: 1 addition & 1 deletion pyproject.toml
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
[project]
name = "exasol-toolbox"
version = "6.1.1"
version = "6.2.0"
description = "Your one-stop solution for managing all standard tasks and core workflows of your Python project."
authors = [
{ name = "Nicola Coretti", email = "nicola.coretti@exasol.com" },
Expand Down