2 Commits

Include renames

Author	SHA1	Message	Date
Alexandru Ardelean	018901e42b	pymysql: update to 1.2.3 ... 1.2.1 fixes a SQL injection via wrongly escaped bytes parameters on the big5, gbk, sjis, cp932 and gb18030 charsets (GHSA-x4f8-9hx9-hpp9). Drop the pymysql.converters assertions from test.sh: escape_dict is now a non-callable placeholder kept only for aiomysql, and upstream states the module is internal with no compatibility guarantee. Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>	2026-10-13 16:28:06 +03:00
Alexandru Ardelean	24f5b1039c	python-pymysql: update to 1.1.3 ... Security fix: - Fix Cursor.callproc() to escape procedure name, preventing SQL injection when calling a procedure with a string received from an untrusted source - NOTICE: Backward compatibility change - procedure names like "dbname.funcname" are now backtick-quoted: ``CALL \`dbname.funcname\` `` Other changes: - CI: use ubuntu-slim, add dependabot for GitHub Actions - Bump GitHub Actions (checkout v4→v6, setup-python v5→v6, codecov v5→v6) - Add publish.yml workflow (copied from psf/requests) - Upgrade dependencies: cryptography>=46.0.7, PyNaCl>=1.6.2 - Drop Python 3.8, require Python 3.9+ Changelog: https://github.com/PyMySQL/PyMySQL/releases/tag/v1.1.3 NOTE: added test.sh for basic validation. Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>	2026-05-25 18:47:13 +03:00