Grimoirelab

Latest version: v1.9.2

Safety actively analyzes 724206 Python packages for vulnerabilities to keep your Python projects secure.

Scan your dependencies

Page 1 of 6

1.9.2

**New components:**

* sortinghat 1.6.2
* grimoire-elk 1.3.4
* sirmordred 1.1.6

The following list describes the changes by component:

sortinghat

**Dependencies updateds:**

* Package dependencies updated\
Update the version of django-cors-headers package to the latest
version available.

grimoire-elk

* Update Poetry's package dependencies

sirmordred

* Update Poetry's package dependencies

1.9.1

**New components:**

* grimoirelab-toolkit 1.0.9
* kidash 1.0.10
* sortinghat 1.6.1
* cereslib 1.0.9
* sigils 1.1.2
* perceval 1.1.1
* perceval-mozilla 1.0.11
* perceval-opnfv 1.0.11
* perceval-puppet 1.0.11
* perceval-weblate 1.0.11
* graal 1.1.2
* grimoire-elk 1.3.3
* sirmordred 1.1.5

The following list describes the changes by component:

grimoirelab-toolkit

* Update Poetry's package dependencies

kidash

* Update Poetry's package dependencies

sortinghat

* Update Poetry's package dependencies

cereslib

* Update Poetry's package dependencies

sigils

* Update Poetry's package dependencies

perceval

* Update Poetry's package dependencies

perceval-mozilla

* Update Poetry's package dependencies

perceval-opnfv

* Update Poetry's package dependencies

perceval-puppet

* Update Poetry's package dependencies

perceval-weblate

* Update Poetry's package dependencies

graal

* Update Poetry's package dependencies

grimoire-elk

* Update Poetry's package dependencies

sirmordred

* Update Poetry's package dependencies

1.9.0

**New components:**

* grimoirelab-toolkit 1.0.8
* kidash 1.0.9
* sortinghat 1.6.0
* cereslib 1.0.8
* perceval 1.1.0
* perceval-mozilla 1.0.10
* perceval-opnfv 1.0.10
* perceval-puppet 1.0.10
* perceval-weblate 1.0.10
* graal 1.1.1
* grimoire-elk 1.3.2
* sirmordred 1.1.4

The following list describes the changes by component:

grimoirelab-toolkit

* Update Poetry's package dependencies

kidash

* Update Poetry's package dependencies

sortinghat

**New features:**

* Skip recommendations (937)\
Users can now skip a recommendation and review the next one if they
are unsure of whether to apply it or dismiss it.
* Sort organizations by number of enrollments (940)\
Organizations are now sorted by the number of enrollments they have by
default. Clicking on a column header sorts the table results by that
field.

cereslib

* Update Poetry's package dependencies

perceval

**Bug fixes:**

* Git stats not assigned with their actions\
Git stats were not assigned to their actions in a commit for filenames
that contain whitespaces. Instead, an empty stat was created like in a
merge commit, where actions normally don't take place.

**Performance improvements:**

* Git sync improved for `--latest-items` flag\
The speed updating a git repository when `--lates-items` is set was
very poor. The main problem was when the references were updated to
the new hashes. All the active refs on the repository were modified,
even when they were up-to-date. Now, only references updated on the
remote repository are modified on the local one. Repositories are
synched 2 times faster than before.

perceval-mozilla

* Update Poetry's package dependencies

perceval-opnfv

* Update Poetry's package dependencies

perceval-puppet

* Update Poetry's package dependencies

perceval-weblate

* Update Poetry's package dependencies

graal

* Update Poetry's package dependencies

grimoire-elk

* Update Poetry's package dependencies

sirmordred

* Update Poetry's package dependencies

1.8.0

**New components:**

* grimoirelab-toolkit 1.0.7
* kidash 1.0.8
* sortinghat 1.5.1
* cereslib 1.0.7
* perceval 1.0.9
* perceval-mozilla 1.0.9
* perceval-opnfv 1.0.9
* perceval-puppet 1.0.9
* perceval-weblate 1.0.9
* graal 1.1.0
* grimoire-elk 1.3.1
* sirmordred 1.1.3

The following list describes the changes by component:

grimoirelab-toolkit

* Update Poetry's package dependencies

kidash

* Update Poetry's package dependencies

sortinghat

* Update Poetry's package dependencies

cereslib

* Update Poetry's package dependencies

perceval

* Update Poetry's package dependencies

perceval-mozilla

**Bug fixes:**

* Kitsune resuming feature fixed (79)\
Kitsune backend resuming feature was broken. It didn't retrieve the
updated questions right using the parameter 'offset'. Changing the
backend to use 'from-date' parameter instead has fixed the problem.

perceval-opnfv

* Update Poetry's package dependencies

perceval-puppet

* Update Poetry's package dependencies

perceval-weblate

* Update Poetry's package dependencies

graal

**New features:**

* Compatible namespace package for Python 3.12\
Remove old format to define namespace packages. And use native
namespace packages that requires removing the `__init__.py` file. It
is important that every distribution that uses the namespace package
omits that file. For more information see
https://peps.python.org/pep-0420/

grimoire-elk

* Update Poetry's package dependencies

sirmordred

**Bug fixes:**

* Panels import bug and Micro Mordred failure\
A bug was causing Panels to fail to import in Kibiter and preventing
micro Mordred from working. The issue was in tasks that didn’t require
a SortingHat client to run.

1.7.0

**New components:**

* grimoirelab-toolkit 1.0.6
* kidash 1.0.7
* sortinghat 1.5.0
* cereslib 1.0.6
* perceval 1.0.8
* perceval-mozilla 1.0.8
* perceval-opnfv 1.0.8
* perceval-puppet 1.0.8
* perceval-weblate 1.0.8
* graal 1.0.8
* grimoire-elk 1.3.0
* sirmordred 1.1.2

The following list describes the changes by component:

grimoirelab-toolkit

* Update Poetry's package dependencies

kidash

* Update Poetry's package dependencies

sortinghat

**New features:**

* Mark individuals as reviewed\
Individuals can now be marked as reviewed to keep track of which
profiles have already been checked and when. A profile can be marked
as reviewed more than once, it will show the date of the last review.
If there have been any changes to the profile data since the last
review, the review button displays a warning icon. The list of
individuals can be filtered by whether they have been reviewed and by
their review date. The list can also be ordered by review date.

**Bug fixes:**

* Wrong arrong direction when merging recommendations (934)\
When recommendations were merged, the arrow showing the direction of
the merge was wrong. It showed `foo → bar` but the resulting identity
will be named `foo` instead of `bar`. The arrow now points in the
other direction showing that `bar` will be merged on `foo`.

cereslib

* Update Poetry's package dependencies

perceval

* Update Poetry's package dependencies

perceval-mozilla

* Update Poetry's package dependencies

perceval-opnfv

* Update Poetry's package dependencies

perceval-puppet

* Update Poetry's package dependencies

perceval-weblate

* Update Poetry's package dependencies

graal

* Update Poetry's package dependencies

grimoire-elk

**New features:**

* Keywords data on enriched items\
Keywords field is included now on the enriched items of bugzilla and
bugzillarest indices.
* New reponse times on bugzilla items\
The Bugzilla enriched items include two new fields to track response
times on these type of repositories. The field
`time_to_first_attention` is the the time expressed in days between
the ticket creation and the first comment from a contributor different
from the author creating the bug. The field `last_comment_date` is the
date of the last comment posted in the bug.

**Bug fixes:**

* All references processed for the reference analysis study\
The `enrich_reference_analysis` study analyzes the cross-references
between "issues" and "pull request". When we use an aggregations
query, it returns only the first 10 items (ElasticSearch/OpenSearch by
default). By using 'composite aggregations', we can paginate the
result and thus, obtain all the references.

sirmordred

* Update Poetry's package dependencies

1.6.0

**New components:**

* grimoirelab-toolkit 1.0.5
* kidash 1.0.6
* sortinghat 1.4.0
* cereslib 1.0.5
* sigils 1.1.1
* perceval 1.0.7
* perceval-mozilla 1.0.7
* perceval-opnfv 1.0.7
* perceval-puppet 1.0.7
* perceval-weblate 1.0.7
* graal 1.0.7
* grimoire-elk 1.2.0
* sirmordred 1.1.1

The following list describes the changes by component:

grimoirelab-toolkit

**Dependencies updateds:**

* Python minimum version updated\
Python 3.8 will reach its end of life in October 2024. Python 3.9 is
the minimum version required by the project.

kidash

**Dependencies updateds:**

* Python minimum version updated\
Python 3.8 will reach its end of life in October 2024. Python 3.9 is
the minimum version required by the project.

sortinghat

**New features:**

* Less distracting main identity indicator (920)\
The star icon that marked an individual's main identity was
distracting and potentially misleading for users. It has changed to a
more subtle indicator since it is not relevant for most users.
* Redirect to the original URL after log in (925)\
Users are now redirected to the page they originally requested after
they log in.
* Merge organizations when adding an alias\
Users now have the option to merge the organizations when adding an
alias that already exists on the "Edit organization" dialog. That
option was only previously available at the organization's detail
page.
* Customizable trusted sources for username matching\
Enable customization of trusted sources for username matching in
settings. This feature allows to define and manage the trusted data
sources for username matching from the configuration.

**Bug fixes:**

* Users permissions migrated (849)\
User permissions are stored in a separate table within the database.
These permissions will be automatically migrated when running
`sortinghat-admin upgrade`.
* Update workspace when identities are split (919)\
When an individual's identities are split, they are shown in the
workspace, but they were only shown the first time. The workspace is
now updated with the new individuals every time.

**Dependencies updateds:**

* Python minimum version updated\
Python 3.8 will reach its end of life in October 2024. Python 3.9 is
the minimum version required by the project. Update the Docker images
to use Python 3.9.

cereslib

**Dependencies updateds:**

* Python minimum version updated\
Python 3.8 will reach its end of life in October 2024. Python 3.9 is
the minimum version required by the project.

sigils

**Dependencies updateds:**

* Python minimum version updated\
Python 3.8 will reach its end of life in October 2024. Python 3.9 is
the minimum version required by the project.

perceval

**Dependencies updateds:**

* Python minimum version updated\
Python 3.8 will reach its end of life in October 2024. Python 3.9 is
the minimum version required by the project.

perceval-mozilla

**Dependencies updateds:**

* Python minimum version updated\
Python 3.8 will reach its end of life in October 2024. Python 3.9 is
the minimum version required by the project.

perceval-opnfv

**Dependencies updateds:**

* Python minimum version updated\
Python 3.8 will reach its end of life in October 2024. Python 3.9 is
the minimum version required by the project.

perceval-puppet

**Dependencies updateds:**

* Python minimum version updated\
Python 3.8 will reach its end of life in October 2024. Python 3.9 is
the minimum version required by the project.

perceval-weblate

**Dependencies updateds:**

* Python minimum version updated\
Python 3.8 will reach its end of life in October 2024. Python 3.9 is
the minimum version required by the project.

graal

**Dependencies updateds:**

* Python minimum version updated\
Python 3.8 will reach its end of life in October 2024. Python 3.9 is
the minimum version required by the project.

grimoire-elk

**New features:**

* Status in SUMO enriched index\
Add the missing status in the SUMO backend. The status could be
`solved`, `archived`, `locked` or `open`.

**Bug fixes:**

* Avoid UNDEFINED values in author fields\
Avoid `-- UNDEFINED --` values for all SortingHat fields when Mordred
loses connection to the SortingHat server during the enrichment or
autorefresh execution. It will keep the values of the `name`, `email`,
`id` and `uuid` fields.
* Handle OpenSearch page info on pagination\
In OpenSearch and ElasticSearch < 7.x the page info on pagination is
different. This will handle both of them.

**Dependencies updateds:**

* Python minimum version updated\
Python 3.8 will reach its end of life in October 2024. Python 3.9 is
the minimum version required by the project.

sirmordred

**Dependencies updateds:**

* Python minimum version updated\
Python 3.8 will reach its end of life in October 2024. Python 3.9 is
the minimum version required by the project.

Page 1 of 6

© 2025 Safety CLI Cybersecurity Inc. All Rights Reserved.