Grimoirelab

Latest version: v1.9.2

Safety actively analyzes 724206 Python packages for vulnerabilities to keep your Python projects secure.

Scan your dependencies

Page 4 of 6

0.16.0

**New components:**

* kidash 0.6.1
* sortinghat 0.15.0
* perceval 0.23.1
* perceval-mozilla 0.3.17
* perceval-opnfv 0.2.17
* perceval-puppet 0.2.17
* perceval-weblate 0.2.17
* graal 0.4.15
* grimoire-elk 0.109.1
* sirmordred 0.10.1

The following list describes the changes by component:

kidash

* Update Poetry's package dependencies

sortinghat

**New features:**

* Recommendations for individuals modified after a given date (813)\
Users can generate merge and affiliation recommendations for
individuals that have been created or modified after a date specified
with the `last_modified` parameter.
* Add individual to workspace from their profile page (816)\
A new button on the individual's profile page allows users to save the
identity in the workspace to continue working with it later on the
dashboard.
* Cache individuals table data (821)\
Using cached queries prevents the table from refetching all the data
from the server everytime any information is edited. This is
particularly helpful if there is a huge number of identities, where
reloading the table is very slow. However, there are some cases when
the queries need to be refetched, eg. when identities are merged or
split.

perceval

* Update Poetry's package dependencies

perceval-mozilla

* Update Poetry's package dependencies

perceval-opnfv

* Update Poetry's package dependencies

perceval-puppet

* Update Poetry's package dependencies

perceval-weblate

* Update Poetry's package dependencies

graal

* Update Poetry's package dependencies

grimoire-elk

* Update Poetry's package dependencies

sirmordred

**Bug fixes:**

* Periodic autorefresh not working\
Periodic refresh of identities was not working for backend sections
that included `:` in their name.

0.15.1

**New components:**


The following list describes the changes by component:

0.15.0

**New components:**

* grimoirelab-toolkit 0.4.0
* kidash 0.6.0
* sortinghat 0.14.0
* cereslib 0.4.3
* sigils 0.3.0
* perceval 0.23.0
* perceval-mozilla 0.3.16
* perceval-opnfv 0.2.16
* perceval-puppet 0.2.16
* perceval-weblate 0.2.16
* graal 0.4.14
* grimoire-elk 0.109.0
* sirmordred 0.10.0

The following list describes the changes by component:

grimoirelab-toolkit

**Feature removals:**

* Drop Python 3.7 support\
Python 3.7 reaches the end of life in June 2023. This means it won't
receive new updates or patches to fix security issues. Therefore, this
package only works with Python >= 3.8 from now on.

kidash

**Feature removals:**

* Drop Python 3.7 support\
Python 3.7 reaches the end of life in June 2023. This means it won't
receive new updates or patches to fix security issues. Therefore, this
package only works with Python >= 3.8 from now on.

**Dependencies updateds:**

* Bump urllib3 version\
Bump urllib3 from ^1.26 to ^2.0.7

sortinghat

**New features:**

* Strict criteria for merge recommendations (812)\
The merge recommendations filter out invalid email adresses and names
that don't have at least a first and last name when looking for
matches. To disable this behavior, set the `strict` parameter on
`recommendMatches` or `unify` to `false`.
* Text field to update enrollment dates (819)\
Users have the option to enter the dates on a text field when editing
affiliations.
* Improved organization selector (820)\
The organization selector that is used to affiliate individuals now
has the option to create an organization if the desired one is not
found. Its size is also increased to improve the readability of longer
names.
* API method to create a scheduled task\
The `add_scheduled_task` API method adds a new scheduled task to the
registry.
* Manage app settings from the user interface\
Users can configure automatic affiliations, profile unification and
identity data synchronization from the new `Settings` section on the
user interface.

**Bug fixes:**

* Remove tasks that fail to be scheduled\
When there was an issue with the Redis connection when a task was
created, the task was added to the database but there was not
scheduled job linked to it. Tasks are now removed from the database
and an error is raised in this case.

**Dependencies updateds:**

* Add Python 3.9 and drop 3.7 support\
Python 3.7 reached the end of life phase on June 27 2023 and is no
longer supported.

cereslib

**Dependencies updateds:**

* Add Python 3.9 and 3.10 and drop 3.7 support\
Python 3.7 reached the end of life phase on June 27 2023 and is no
longer supported.

sigils

**Feature removals:**

* Drop Python 3.7 support\
Python 3.7 reaches the end of life in June 2023. This means it won't
receive new updates or patches to fix security issues. Therefore, this
package only works with Python >= 3.8 from now on.

perceval

**New features:**

* Jira authentication with token (813)\
Authentication in `jira` backend is supported using personal access
tokens. Jira Core/Software (8.14 and later), Jira Service Management
(4.15 and later) Data Center and server editions can use personal
access tokens without a username. For Jira Cloud, username and token
are required. Usage: perceval jira <YOUR_JIRA_SERVER> -u <USERNAME> -p
<PASSWORD> perceval jira <YOUR_JIRA_SERVER> -t <PERSONAL_ACCESS_TOKEN>
perceval jira <YOUR_JIRA_CLOUD_SITE> -u <USERNAME> -t <TOKEN>
* Clonfluence authentication with personal access tokens\
Authentication in `confluence` backend is supported using personal
access tokens. Confluence Data Center and server editions 7.9 and
later can use personal access tokens without a username. For
Confluence Cloud, username and token are required.

**Feature removals:**

* Drop Python 3.7 support\
Python 3.7 reaches the end of life in June 2023. This means it won't
receive new updates or patches to fix security issues. Therefore, this
package only works with Python >= 3.8 from now on.

**Dependencies updateds:**

* Bump urllib3 version\
Bump urllib3 from ^1.26 to ^2.0.7

perceval-mozilla

**Dependencies updateds:**

* Add Python 3.10 and 3.11 and drop 3.7 support\
Python 3.7 reached the end of life phase on June 27 2023 and is no
longer supported.

perceval-opnfv

**Dependencies updateds:**

* Add Python 3.10 and 3.11 and drop 3.7 support\
Python 3.7 reached the end of life phase on June 27 2023 and is no
longer supported.

perceval-puppet

**Dependencies updateds:**

* Add Python 3.10 and 3.11 and drop 3.7 support\
Python 3.7 reached the end of life phase on June 27 2023 and is no
longer supported.

perceval-weblate

**Dependencies updateds:**

* Add Python 3.10 and 3.11 and drop 3.7 support\
Python 3.7 reached the end of life phase on June 27 2023 and is no
longer supported.

graal

**Dependencies updateds:**

* Update markdown-it-py version\
Use `markdown-it-py^2.0.0` to be aligned with Perceval packages.
* Add Python 3.9 and drop 3.7 support\
Python 3.7 reached the end of life phase on June 27 2023 and is no
longer supported.

grimoire-elk

**New features:**

* Anonymize repository URLs in graal backend\
The raw data generated by the graal backend had non-anonymized URLs on
the meta fields 'origin' and 'tag'. This was necessary to generate
enriched data for non-public repositories.
* Bug description in Bugzilla\
Include the description of the bugs in Bugzilla. The new fields are
'description' and 'description_analyzed'. The second allows to query
any of the words of the description.
* SortingHat backend name per data source\
Allow to define the name of the backend for the identities stored in
SortingHat. From now on github2 is renamed as github in SortingHat
identities.

**Bug fixes:**

* Individual `id` incorrectly assigned\
Correct a bug that results in enriched items using the individual ID
as the identity ID, and vice versa.
* Error in OpenSearch response stops demography study\
Fix an issue that stops demography study when OpenSearch occasionally
provides a response without some expected fields.
* Undefined identities in GitHub comments\
Fix a bug that causes certain identities from commentaries to not be
imported into SortingHat, resulting in them appearing as UNDEFINED in
OpenSearch.

**Dependencies updateds:**

* Add Python 3.9 and 3.10 and drop 3.7 support\
Python 3.7 reached the end of life phase on June 27 2023 and is no
longer supported.
* Bump urllib3 version\
Bump urllib3 from ^1.26 to ^2.0.7
* Remove Python pymsql dependency\
Remove the dependency with PyMySQL because it is not used anymore.

sirmordred

**New features:**

* Refresh identities in a shorter period\
This update significantly reduces the time required for identity
refresh operations on large projects.

**Bug fixes:**

* Missing database parameters for SortingHat\
SortingHat database parameters were not included during the
initialization of the enrich backend.

**Breaking changes:**

* Log format updated with the Mordred project name\
Update the log format of SirMordred and MicroMordred to include the
name of the project.

**Dependencies updateds:**

* Add Python 3.9 and 3.10 and drop 3.7 support\
Python 3.7 reached the end of life phase on June 27 2023 and is no
longer supported.

0.14.0

**New components:**

* sortinghat 0.13.0
* perceval 0.22.3
* perceval-mozilla 0.3.15
* perceval-opnfv 0.2.15
* perceval-puppet 0.2.15
* perceval-weblate 0.2.15
* graal 0.4.13
* grimoire-elk 0.108.1
* sirmordred 0.9.3

The following list describes the changes by component:

sortinghat

**Bug fixes:**

* Sub-domain affiliation error (805)\
The `affiliate` and `recommend affiliations` jobs no longer recommend
matches based on a domain's sub-domains if it is not marked as
`top_domain`.

**New deprecations:**

* Use the task scheduler to import identities\
Manage periodic tasks to import identities with the `scheduleTask`,
`updateScheduledTask` and `deleteScheduledTask` GraphQL mutations. The
tasks that were already scheduled using the `addImportIdentitiesTask`
mutation are kept when the migrations are applied.

perceval

* Update Poetry's package dependencies

perceval-mozilla

* Update Poetry's package dependencies

perceval-opnfv

* Update Poetry's package dependencies

perceval-puppet

* Update Poetry's package dependencies

perceval-weblate

* Update Poetry's package dependencies

graal

* Update Poetry's package dependencies

grimoire-elk

* Update Poetry's package dependencies

sirmordred

* Update Poetry's package dependencies

0.13.0

**New components:**

* kidash 0.5.9
* sortinghat 0.12.0
* perceval 0.22.2
* perceval-mozilla 0.3.14
* perceval-opnfv 0.2.14
* perceval-puppet 0.2.14
* perceval-weblate 0.2.14
* graal 0.4.12
* grimoire-elk 0.108.0
* sirmordred 0.9.2

The following list describes the changes by component:

kidash

* Update Poetry's package dependencies

sortinghat

**New features:**

* Job scheduler\
This new feature allows users to schedule jobs, such as `affiliate` or
`unify`, to run periodically. The tasks can be configured, updated and
deleted using the GraphQL API.

perceval

* Update Poetry's package dependencies

perceval-mozilla

* Update Poetry's package dependencies

perceval-opnfv

* Update Poetry's package dependencies

perceval-puppet

* Update Poetry's package dependencies

perceval-weblate

* Update Poetry's package dependencies

graal

* Update Poetry's package dependencies

grimoire-elk

**Bug fixes:**

* Enrich items with multiple enrollments\
The `date` field must be a string since improved performance by
decreasing calls to the `str_to_datetime` method.

**Performance improvements:**

* Load identities performance\
Improve the load identities process performance by reducing the number
of queries to SortingHat.

sirmordred

* Update Poetry's package dependencies

0.12.0

**New components:**

* grimoirelab-toolkit 0.3.6
* kidash 0.5.8
* sortinghat 0.11.1
* cereslib 0.4.2
* perceval 0.22.1
* perceval-mozilla 0.3.13
* perceval-opnfv 0.2.13
* perceval-puppet 0.2.13
* perceval-weblate 0.2.13
* graal 0.4.11
* grimoire-elk 0.107.0
* sirmordred 0.9.1

The following list describes the changes by component:

grimoirelab-toolkit

* Update Poetry's package dependencies

kidash

* Update Poetry's package dependencies

sortinghat

**Bug fixes:**

* Show an organization's members\
Repeatedly clicking on the button to see the members of an
organization or team on the table sometimes showed the full
individuals list.

cereslib

* Update Poetry's package dependencies

perceval

* Update Poetry's package dependencies

perceval-mozilla

* Update Poetry's package dependencies

perceval-opnfv

* Update Poetry's package dependencies

perceval-puppet

* Update Poetry's package dependencies

perceval-weblate

* Update Poetry's package dependencies

graal

* Update Poetry's package dependencies

grimoire-elk

**Performance improvements:**

* Enrichment processing time reduced by 50%\
The general performance was improved reducing the number of calls to
the identities manager (i.g. `SortingHat`). There were some deprecated
calls that weren't needed any longer and also, we increased the cache
of individuals in ELKs. We were also able to reduce the processing
time of the Git backend by converting commit dates only once.

sirmordred

* Update Poetry's package dependencies

Page 4 of 6

© 2025 Safety CLI Cybersecurity Inc. All Rights Reserved.