Django-storages

Latest version: v1.14.4

Safety actively analyzes 688724 Python packages for vulnerabilities to keep your Python projects secure.

Scan your dependencies

Page 5 of 8

1.6.4

Not secure
******************

* Files uploaded with ``GoogleCloudStorage`` will now set their appropriate mimetype (`320`_)
* Fix ``DropBoxStorage.url`` to work. (`357`_)
* Fix ``S3Boto3Storage`` when ``AWS_PRELOAD_METADATA = True`` (`366`_)
* Fix ``S3Boto3Storage`` uploading file-like objects without names (`195`_, `368`_)
* ``S3Boto3Storage`` is now threadsafe - a separate session is created on a
per-thread basis (`268`_, `358`_)

.. _320: https://github.com/jschneier/django-storages/pull/320
.. _357: https://github.com/jschneier/django-storages/pull/357
.. _366: https://github.com/jschneier/django-storages/pull/366
.. _195: https://github.com/jschneier/django-storages/pull/195
.. _368: https://github.com/jschneier/django-storages/pull/368
.. _268: https://github.com/jschneier/django-storages/issues/268
.. _358: https://github.com/jschneier/django-storages/pull/358

1.6.3

Not secure
******************

* Revert default ``AWS_S3_SIGNATURE_VERSION`` to V2 to restore backwards
compatibility in ``S3Boto3``. It's recommended that all new projects set
this to be ``'s3v4'``. (`344`_)

.. _344: https://github.com/jschneier/django-storages/pull/344

1.6.2

Not secure
******************

* Fix regression in ``safe_join()`` to handle a trailing slash in an
intermediate path. (`341`_)
* Fix regression in ``gs.GSBotoStorage`` getting an unexpected kwarg.
(`342`_)

.. _341: https://github.com/jschneier/django-storages/pull/341
.. _342: https://github.com/jschneier/django-storages/pull/342

1.6.1

Not secure
******************

* Drop support for Django 1.9 (`e89db45`_)
* Fix regression in ``safe_join()`` to allow joining a base path with an empty
string. (`336`_)

.. _e89db45: https://github.com/jschneier/django-storages/commit/e89db451d7e617638b5991e31df4c8de196546a6
.. _336: https://github.com/jschneier/django-storages/pull/336

1.6

Not secure
******************

* **Breaking:** Remove backends deprecated in v1.5.1 (`280`_)
* **Breaking:** ``DropBoxStorage`` has been upgrade to support v2 of the API, v1 will be shut off at the
end of the month - upgrading is recommended (`273`_)
* **Breaking:** The ``SFTPStorage`` backend now checks for the existence of the fallback ``~/.ssh/known_hosts``
before attempting to load it. If you had previously been passing in a path to a non-existent file it will no longer
attempt to load the fallback. (`118`_, `325`_)
* **Breaking:** The default version value for ``AWS_S3_SIGNATURE_VERSION`` is now ``'s3v4'``. No changes should
be required (`335`_)
* **Deprecation:** The undocumented ``gs.GSBotoStorage`` backend. See the new ``gcloud.GoogleCloudStorage``
or ``apache_libcloud.LibCloudStorage`` backends instead. (`236`_)
* Add a new backend, ``gcloud.GoogleCloudStorage`` based on the ``google-cloud`` bindings. (`236`_)
* Pass in the location constraint when auto creating a bucket in ``S3Boto3Storage`` (`257`_, `258`_)
* Add support for reading ``AWS_SESSION_TOKEN`` and ``AWS_SECURITY_TOKEN`` from the environment
to ``S3Boto3Storage`` and ``S3BotoStorage``. (`283`_)
* Fix Boto3 non-ascii filenames on Python 2.7 (`216`_, `217`_)
* Fix ``collectstatic`` timezone handling in and add ``get_modified_time`` to ``S3BotoStorage`` (`290`_)
* Add support for Django 1.11 (`295`_)
* Add ``project`` keyword support to GCS in ``LibCloudStorage`` backend (`269`_)
* Files that have a guessable encoding (e.g. gzip or compress) will be uploaded with that Content-Encoding in
the ``s3boto3`` backend (`263`_, `264`_)
* The Dropbox backend now properly translates backslashes in Windows paths into forward slashes (`e52a127`_)
* The S3 backends now permit colons in the keys (`248`_, `322`_)

.. _217: https://github.com/jschneier/django-storages/pull/217
.. _273: https://github.com/jschneier/django-storages/pull/273
.. _216: https://github.com/jschneier/django-storages/issues/216
.. _283: https://github.com/jschneier/django-storages/pull/283
.. _280: https://github.com/jschneier/django-storages/pull/280
.. _257: https://github.com/jschneier/django-storages/issues/257
.. _258: https://github.com/jschneier/django-storages/pull/258
.. _290: https://github.com/jschneier/django-storages/pull/290
.. _295: https://github.com/jschneier/django-storages/pull/295
.. _269: https://github.com/jschneier/django-storages/pull/269
.. _263: https://github.com/jschneier/django-storages/issues/263
.. _264: https://github.com/jschneier/django-storages/pull/264
.. _e52a127: https://github.com/jschneier/django-storages/commit/e52a127523fdd5be50bb670ccad566c5d527f3d1
.. _236: https://github.com/jschneier/django-storages/pull/236
.. _118: https://github.com/jschneier/django-storages/issues/118
.. _325: https://github.com/jschneier/django-storages/pull/325
.. _248: https://github.com/jschneier/django-storages/issues/248
.. _322: https://github.com/jschneier/django-storages/pull/322
.. _335: https://github.com/jschneier/django-storages/pull/335

1.5.2

Not secure
******************

* Actually use ``SFTP_STORAGE_HOST`` in ``SFTPStorage`` backend (`204`_)
* Fix ``S3Boto3Storage`` to avoid race conditions in a multi-threaded WSGI environment (`238`_)
* Fix trying to localize a naive datetime when ``settings.USE_TZ`` is ``False`` in ``S3Boto3Storage.modified_time``.
(`235`_, `234`_)
* Fix automatic bucket creation in ``S3Boto3Storage`` when ``AWS_AUTO_CREATE_BUCKET`` is ``True`` (`196`_)
* Improve the documentation for the S3 backends

.. _204: https://github.com/jschneier/django-storages/pull/204
.. _238: https://github.com/jschneier/django-storages/pull/238
.. _234: https://github.com/jschneier/django-storages/issues/234
.. _235: https://github.com/jschneier/django-storages/pull/235
.. _196: https://github.com/jschneier/django-storages/pull/196

Page 5 of 8

© 2024 Safety CLI Cybersecurity Inc. All Rights Reserved.