Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore(deps): update dependency azure-identity to v1.16.1 [security] - autoclosed #101

Closed
wants to merge 1 commit into from

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented Jun 11, 2024

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
azure-identity (source) ==1.15.0 -> ==1.16.1 age adoption passing confidence

GitHub Vulnerability Alerts

CVE-2024-35255

Azure Identity Libraries and Microsoft Authentication Library Elevation of Privilege Vulnerability.


Release Notes

Azure/azure-sdk-for-python (azure-identity)

v1.16.1

Compare Source

1.16.1 (2024-06-11)
Bugs Fixed
  • Managed identity bug fixes

v1.16.0

Compare Source

1.16.0 (2024-05-14)

Features Added
  • Add experimental support for working with Promptflow evaluators: ml_client.evaluators.
  • Many changes to the Connection entity class and its associated operations.
  • Workspace Connection list, get, and create_or_update operations now include an optional populate_secrets input, which causes the operations to try making a secondary call to fill in the returned connections' credential info if possible. Only works with api key-based credentials for now.
  • Many workspace connection subtypes added. The full list of subclasses is now:
    • AzureBlobStoreConnection
    • AzureBlobStoreConnection
    • MicrosoftOneLakeConnection
    • AzureOpenAIConnection
    • AzureAIServicesConnection
    • AzureAISearchConnection
    • AzureContentSafetyConnection
    • AzureSpeechServicesConnection
    • APIKeyConnection
    • OpenAIConnection
    • SerpConnection
    • ServerlessConnection
  • Many workspace connections only accept api keys or entra ids for credentials. Since Entra IDs require not inputs, these have been refactored to not required a full credential object. Instead they only accept an api_key as a top-level input, and default to an entra credential otherwise. Their YAML schemas have been similarly altered.
  • Client-side credential-type validation added for some workspace connection types.
  • Added new credential type: AadCredentialConfiguration
  • Renamed WorkspaceHub class as Hub.
  • Added Project entity class and YAML support.
  • Project and Hub operations supported by workspace operations.
  • workspace list operation supports type filtering.
  • Add support for Microsoft Entra token (aad_token) auth in invoke and get-credentials operations.
  • Add experimental support for working with indexes: ml_client.indexes
Breaking Changes
  • Removed WorkspaceHubConfig entity, and renamed WorkspaceHub to Hub.
  • workspace_hub input of Workspace class hidden, renamed to hub_id, and re-surfaced in child class Project.
  • Removed Workspace Hub Operations from ML Client.

Configuration

📅 Schedule: Branch creation - "" in timezone Europe/London, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot changed the title chore(deps): update dependency azure-identity to v1.16.1 [security] chore(deps): update dependency azure-identity to v1.16.1 [security] - autoclosed Sep 20, 2024
@renovate renovate bot closed this Sep 20, 2024
@renovate renovate bot deleted the renovate/pypi-azure-identity-vulnerability branch September 20, 2024 14:16
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants