Grimoirelab

Latest version: v1.9.0

Safety actively analyzes 688924 Python packages for vulnerabilities to keep your Python projects secure.

Scan your dependencies

Page 4 of 6

0.15.0

**New components:**

* grimoirelab-toolkit 0.4.0
* kidash 0.6.0
* sortinghat 0.14.0
* cereslib 0.4.3
* sigils 0.3.0
* perceval 0.23.0
* perceval-mozilla 0.3.16
* perceval-opnfv 0.2.16
* perceval-puppet 0.2.16
* perceval-weblate 0.2.16
* graal 0.4.14
* grimoire-elk 0.109.0
* sirmordred 0.10.0

The following list describes the changes by component:

grimoirelab-toolkit

**Feature removals:**

* Drop Python 3.7 support\
Python 3.7 reaches the end of life in June 2023. This means it won't
receive new updates or patches to fix security issues. Therefore, this
package only works with Python >= 3.8 from now on.

kidash

**Feature removals:**

* Drop Python 3.7 support\
Python 3.7 reaches the end of life in June 2023. This means it won't
receive new updates or patches to fix security issues. Therefore, this
package only works with Python >= 3.8 from now on.

**Dependencies updateds:**

* Bump urllib3 version\
Bump urllib3 from ^1.26 to ^2.0.7

sortinghat

**New features:**

* Strict criteria for merge recommendations (812)\
The merge recommendations filter out invalid email adresses and names
that don't have at least a first and last name when looking for
matches. To disable this behavior, set the `strict` parameter on
`recommendMatches` or `unify` to `false`.
* Text field to update enrollment dates (819)\
Users have the option to enter the dates on a text field when editing
affiliations.
* Improved organization selector (820)\
The organization selector that is used to affiliate individuals now
has the option to create an organization if the desired one is not
found. Its size is also increased to improve the readability of longer
names.
* API method to create a scheduled task\
The `add_scheduled_task` API method adds a new scheduled task to the
registry.
* Manage app settings from the user interface\
Users can configure automatic affiliations, profile unification and
identity data synchronization from the new `Settings` section on the
user interface.

**Bug fixes:**

* Remove tasks that fail to be scheduled\
When there was an issue with the Redis connection when a task was
created, the task was added to the database but there was not
scheduled job linked to it. Tasks are now removed from the database
and an error is raised in this case.

**Dependencies updateds:**

* Add Python 3.9 and drop 3.7 support\
Python 3.7 reached the end of life phase on June 27 2023 and is no
longer supported.

cereslib

**Dependencies updateds:**

* Add Python 3.9 and 3.10 and drop 3.7 support\
Python 3.7 reached the end of life phase on June 27 2023 and is no
longer supported.

sigils

**Feature removals:**

* Drop Python 3.7 support\
Python 3.7 reaches the end of life in June 2023. This means it won't
receive new updates or patches to fix security issues. Therefore, this
package only works with Python >= 3.8 from now on.

perceval

**New features:**

* Jira authentication with token (813)\
Authentication in `jira` backend is supported using personal access
tokens. Jira Core/Software (8.14 and later), Jira Service Management
(4.15 and later) Data Center and server editions can use personal
access tokens without a username. For Jira Cloud, username and token
are required. Usage: perceval jira <YOUR_JIRA_SERVER> -u <USERNAME> -p
<PASSWORD> perceval jira <YOUR_JIRA_SERVER> -t <PERSONAL_ACCESS_TOKEN>
perceval jira <YOUR_JIRA_CLOUD_SITE> -u <USERNAME> -t <TOKEN>
* Clonfluence authentication with personal access tokens\
Authentication in `confluence` backend is supported using personal
access tokens. Confluence Data Center and server editions 7.9 and
later can use personal access tokens without a username. For
Confluence Cloud, username and token are required.

**Feature removals:**

* Drop Python 3.7 support\
Python 3.7 reaches the end of life in June 2023. This means it won't
receive new updates or patches to fix security issues. Therefore, this
package only works with Python >= 3.8 from now on.

**Dependencies updateds:**

* Bump urllib3 version\
Bump urllib3 from ^1.26 to ^2.0.7

perceval-mozilla

**Dependencies updateds:**

* Add Python 3.10 and 3.11 and drop 3.7 support\
Python 3.7 reached the end of life phase on June 27 2023 and is no
longer supported.

perceval-opnfv

**Dependencies updateds:**

* Add Python 3.10 and 3.11 and drop 3.7 support\
Python 3.7 reached the end of life phase on June 27 2023 and is no
longer supported.

perceval-puppet

**Dependencies updateds:**

* Add Python 3.10 and 3.11 and drop 3.7 support\
Python 3.7 reached the end of life phase on June 27 2023 and is no
longer supported.

perceval-weblate

**Dependencies updateds:**

* Add Python 3.10 and 3.11 and drop 3.7 support\
Python 3.7 reached the end of life phase on June 27 2023 and is no
longer supported.

graal

**Dependencies updateds:**

* Update markdown-it-py version\
Use `markdown-it-py^2.0.0` to be aligned with Perceval packages.
* Add Python 3.9 and drop 3.7 support\
Python 3.7 reached the end of life phase on June 27 2023 and is no
longer supported.

grimoire-elk

**New features:**

* Anonymize repository URLs in graal backend\
The raw data generated by the graal backend had non-anonymized URLs on
the meta fields 'origin' and 'tag'. This was necessary to generate
enriched data for non-public repositories.
* Bug description in Bugzilla\
Include the description of the bugs in Bugzilla. The new fields are
'description' and 'description_analyzed'. The second allows to query
any of the words of the description.
* SortingHat backend name per data source\
Allow to define the name of the backend for the identities stored in
SortingHat. From now on github2 is renamed as github in SortingHat
identities.

**Bug fixes:**

* Individual `id` incorrectly assigned\
Correct a bug that results in enriched items using the individual ID
as the identity ID, and vice versa.
* Error in OpenSearch response stops demography study\
Fix an issue that stops demography study when OpenSearch occasionally
provides a response without some expected fields.
* Undefined identities in GitHub comments\
Fix a bug that causes certain identities from commentaries to not be
imported into SortingHat, resulting in them appearing as UNDEFINED in
OpenSearch.

**Dependencies updateds:**

* Add Python 3.9 and 3.10 and drop 3.7 support\
Python 3.7 reached the end of life phase on June 27 2023 and is no
longer supported.
* Bump urllib3 version\
Bump urllib3 from ^1.26 to ^2.0.7
* Remove Python pymsql dependency\
Remove the dependency with PyMySQL because it is not used anymore.

sirmordred

**New features:**

* Refresh identities in a shorter period\
This update significantly reduces the time required for identity
refresh operations on large projects.

**Bug fixes:**

* Missing database parameters for SortingHat\
SortingHat database parameters were not included during the
initialization of the enrich backend.

**Breaking changes:**

* Log format updated with the Mordred project name\
Update the log format of SirMordred and MicroMordred to include the
name of the project.

**Dependencies updateds:**

* Add Python 3.9 and 3.10 and drop 3.7 support\
Python 3.7 reached the end of life phase on June 27 2023 and is no
longer supported.

0.14.0

**New components:**

* sortinghat 0.13.0
* perceval 0.22.3
* perceval-mozilla 0.3.15
* perceval-opnfv 0.2.15
* perceval-puppet 0.2.15
* perceval-weblate 0.2.15
* graal 0.4.13
* grimoire-elk 0.108.1
* sirmordred 0.9.3

The following list describes the changes by component:

sortinghat

**Bug fixes:**

* Sub-domain affiliation error (805)\
The `affiliate` and `recommend affiliations` jobs no longer recommend
matches based on a domain's sub-domains if it is not marked as
`top_domain`.

**New deprecations:**

* Use the task scheduler to import identities\
Manage periodic tasks to import identities with the `scheduleTask`,
`updateScheduledTask` and `deleteScheduledTask` GraphQL mutations. The
tasks that were already scheduled using the `addImportIdentitiesTask`
mutation are kept when the migrations are applied.

perceval

* Update Poetry's package dependencies

perceval-mozilla

* Update Poetry's package dependencies

perceval-opnfv

* Update Poetry's package dependencies

perceval-puppet

* Update Poetry's package dependencies

perceval-weblate

* Update Poetry's package dependencies

graal

* Update Poetry's package dependencies

grimoire-elk

* Update Poetry's package dependencies

sirmordred

* Update Poetry's package dependencies

0.13.0

**New components:**

* kidash 0.5.9
* sortinghat 0.12.0
* perceval 0.22.2
* perceval-mozilla 0.3.14
* perceval-opnfv 0.2.14
* perceval-puppet 0.2.14
* perceval-weblate 0.2.14
* graal 0.4.12
* grimoire-elk 0.108.0
* sirmordred 0.9.2

The following list describes the changes by component:

kidash

* Update Poetry's package dependencies

sortinghat

**New features:**

* Job scheduler\
This new feature allows users to schedule jobs, such as `affiliate` or
`unify`, to run periodically. The tasks can be configured, updated and
deleted using the GraphQL API.

perceval

* Update Poetry's package dependencies

perceval-mozilla

* Update Poetry's package dependencies

perceval-opnfv

* Update Poetry's package dependencies

perceval-puppet

* Update Poetry's package dependencies

perceval-weblate

* Update Poetry's package dependencies

graal

* Update Poetry's package dependencies

grimoire-elk

**Bug fixes:**

* Enrich items with multiple enrollments\
The `date` field must be a string since improved performance by
decreasing calls to the `str_to_datetime` method.

**Performance improvements:**

* Load identities performance\
Improve the load identities process performance by reducing the number
of queries to SortingHat.

sirmordred

* Update Poetry's package dependencies

0.12.0

**New components:**

* grimoirelab-toolkit 0.3.6
* kidash 0.5.8
* sortinghat 0.11.1
* cereslib 0.4.2
* perceval 0.22.1
* perceval-mozilla 0.3.13
* perceval-opnfv 0.2.13
* perceval-puppet 0.2.13
* perceval-weblate 0.2.13
* graal 0.4.11
* grimoire-elk 0.107.0
* sirmordred 0.9.1

The following list describes the changes by component:

grimoirelab-toolkit

* Update Poetry's package dependencies

kidash

* Update Poetry's package dependencies

sortinghat

**Bug fixes:**

* Show an organization's members\
Repeatedly clicking on the button to see the members of an
organization or team on the table sometimes showed the full
individuals list.

cereslib

* Update Poetry's package dependencies

perceval

* Update Poetry's package dependencies

perceval-mozilla

* Update Poetry's package dependencies

perceval-opnfv

* Update Poetry's package dependencies

perceval-puppet

* Update Poetry's package dependencies

perceval-weblate

* Update Poetry's package dependencies

graal

* Update Poetry's package dependencies

grimoire-elk

**Performance improvements:**

* Enrichment processing time reduced by 50%\
The general performance was improved reducing the number of calls to
the identities manager (i.g. `SortingHat`). There were some deprecated
calls that weren't needed any longer and also, we increased the cache
of individuals in ELKs. We were also able to reduce the processing
time of the Git backend by converting commit dates only once.

sirmordred

* Update Poetry's package dependencies

0.11.0

**New components:**

* sortinghat 0.11.0
* cereslib 0.4.1
* perceval 0.22.0
* perceval-mozilla 0.3.12
* perceval-opnfv 0.2.12
* perceval-puppet 0.2.12
* perceval-weblate 0.2.12
* graal 0.4.10
* grimoire-elk 0.106.0
* sirmordred 0.9.0

The following list describes the changes by component:

sortinghat

**New features:**

* Merge organizations (571)\
Merging organizations automatically moves all the domains, teams and
enrollments to the target organization. This is helpful in case an
organization has duplicates or if an organization absorbs another one.
Organizations can be merged using drag and drop on the user interface.
* Recommendations by individual (779)\
Users can generate matching recommendations for a specific individual
by clicking on the drop down menu on each individual or on the
individual's profile.

**Bug fixes:**

* Show hidden buttons when the mouse is over the table row (787)\
The buttons to lock an individual or mark it as a bot were only
visible when the mouse wass over the individual's name, which made it
hard to find them. Now they appear when the mouse is over the table
row.
* Email affiliation error (793)\
Fix an error when the email domain ends with a dot, causing the
affiliation process to stop.
* ADD button doesn't affiliate individuals to organizations\
Affiliating an individual to an organization using the "+ ADD" button
on the table expanded view failed.
* Enrollment filter on organizations view\
Filtering individuals by their affiliation to an organization also
returned results of organizations that contained that name. The filter
now only returns organizations that match the exact name.

cereslib

* Update Poetry's package dependencies

perceval

**New features:**

* Git backend alternates mechanism\
Git alternates is a mechanism that lets a repository borrow objects
from another repository on the same machine. Allow to execute Git
Perceval backend using this mechanism.

perceval-mozilla

* Update Poetry's package dependencies

perceval-opnfv

* Update Poetry's package dependencies

perceval-puppet

* Update Poetry's package dependencies

perceval-weblate

* Update Poetry's package dependencies

graal

* Update Poetry's package dependencies

grimoire-elk

**Performance improvements:**

* Refreshing identities performance\
Decrease the time required to execute the autorefresh process by
reducing the number of queries to SortingHat.

sirmordred

**Performance improvements:**

* Refreshing identities performance\
Decrease the time required to execute the autorefresh process by
reducing the number of queries to SortingHat.

0.10.0

**New components:**

* kidash 0.5.6
* sortinghat 0.10.0
* perceval 0.21.7
* perceval-mozilla 0.3.11
* perceval-opnfv 0.2.11
* perceval-puppet 0.2.11
* perceval-weblate 0.2.11
* graal 0.4.9
* grimoire-elk 0.105.0
* sirmordred 0.8.0

The following list describes the changes by component:

kidash

* Update Poetry's package dependencies

sortinghat

**New features:**

* Show when tables are loading (772)\
The individuals and organizations tables now show a progress bar to
indicate that the items are loading.
* Organization profiles\
Each organization's full profile is available by clicking its name on
the table or at `/organization/<organization name>`. This view shows
the organization's teams, members and domains.

**Bug fixes:**

* Sort jobs from newest to oldest (769)\
The jobs page now sorts the list from newest to oldest to show running
jobs first.
* Unreadable large numbers in pagination (770)\
Large page numbers were not fully visible in the tables pagination.
* Edit a profile name with the pencil button (773)\
Clicking on an invidual's name no longer activates the edition mode.
The name can now be edited with the pencil button.
* Fix enrollment in individual's profile\
In the individual's profile, the button to add an organization was not
working.
* Job timeouts\
Jobs failed because they exceeded the default timeout while running
tasks involving numerous identities. To ensure successful completion,
we adjusted the timeout setting to an infinite duration, allowing jobs
to finish without interruptions.

**Breaking changes:**

* Multi-tenancy using headers\
Tenants are now selected using the `sortinghat-tenant` header instead
of the host. Proxies and clients using multi-tenancy should include
that header.

**Performance improvements:**

* Performance improved for recommendations and merging jobs\
The performance of the matching and merging algorithms that are used
on these jobs have been considerably improved. These jobs will be 4
times faster than on the previous version.
* uWSGI threads and workers\
Include two new environments variables to define the number of threads
and workers for uWSGI. These new variables are
`SORTINGHAT_UWSGI_WORKERS` and `SORTINGHAT_UWSGI_THREADS`
* SortingHat database performance\
Improve SortingHat performance when there are a lot of individuals in
the database.

**Dependencies updateds:**

* Update dependencies\
Include google-auth as a dependency to fix release issues.

perceval

* Update Poetry's package dependencies

perceval-mozilla

* Update Poetry's package dependencies

perceval-opnfv

* Update Poetry's package dependencies

perceval-puppet

* Update Poetry's package dependencies

perceval-weblate

* Update Poetry's package dependencies

graal

* Update Poetry's package dependencies

grimoire-elk

**Breaking changes:**

* SortingHat configuration\
When SortingHat's multi-tenancy is enabled, the tenant is included in
all clients during execution.

sirmordred

**New features:**

* Optional configuration for SortingHat\
Include an optional configuration for SortingHat to define the name of
the tenant when multi-tenancy is enabled.

**Bug fixes:**

* Race condition initializing SirMordred\
There was a race condition when SirMordred initializes. The thread
that read the list of projects didn't have time to even start before
the manager finalizes it, so data backends didn't have any have any
input to work with. This bug was originally reported by ncsibra-lab49
on
[grimoirelab585](https://github.com/chaoss/grimoirelab/issues/585).

Page 4 of 6

© 2024 Safety CLI Cybersecurity Inc. All Rights Reserved.