Skip to content

Bump twisted from 20.3.0 to 22.10.0

Placeholder github Source User requested to merge dependabot/pip/twisted-22.10.0 into develop

Bumps twisted from 20.3.0 to 22.10.0.

Release notes

Sourced from twisted's releases.

Twisted 22.10.0 (2022-10-30)

This release contains a security fix for CVE-2022-39348. This is a low-severity security bug.

Twisted 22.10.0rc1 release candidate was released on 2022-10-26 and there are no changes between the release candidate and the final release.

Features

  • The systemd: endpoint parser now supports "named" file descriptors. This is a more reliable mechanism for choosing among several inherited descriptors. (#8147)

Improved Documentation

  • The systemd endpoint parser's index parameter is now documented as leading to non-deterministic results in which descriptor is selected. The new name parameter is now documented as preferred. (#8146)
  • The implementers of Zope interfaces are once more displayed in the documentations. (#11690)

Deprecations and Removals

  • twisted.protocols.dict, which was deprecated in 17.9, has been removed. (#11725)

Misc

Conch

Bugfixes


- twisted.conch.manhole.ManholeInterpreter now captures tracebacks even if sys.excepthook has been modified. ([#11638](https://github.com/twisted/twisted/issues/11638))
Web
Features

... (truncated)

Changelog

Sourced from twisted's changelog.

Twisted 22.10.0 (2022-10-30)

This release contains a security fix for CVE-2022-39348. This is a low-severity security bug.

Twisted 22.10.0rc1 release candidate was released on 2022-10-26 and there are no changes between the release candidate and the final release.

Features

  • The systemd: endpoint parser now supports "named" file descriptors. This is a more reliable mechanism for choosing among several inherited descriptors. (#8147)

Improved Documentation

  • The systemd endpoint parser's index parameter is now documented as leading to non-deterministic results in which descriptor is selected. The new name parameter is now documented as preferred. (#8146)
  • The implementers of Zope interfaces are once more displayed in the documentations. (#11690)

Deprecations and Removals

  • twisted.protocols.dict, which was deprecated in 17.9, has been removed. (#11725)

Misc

Conch

Bugfixes


- twisted.conch.manhole.ManholeInterpreter now captures tracebacks even if sys.excepthook has been modified. ([#11638](https://github.com/twisted/twisted/issues/11638))
Web
Features

... (truncated)

Commits
  • 39ee213 Update news for final version.
  • 7e76513 python -m incremental.update Twisted --newversion 22.10.0
  • 3f1f502 Apply suggestions from twm.
  • 3185b01 Add info about CVE at the start of the release notes.
  • 15aa477 tox -e towncrier
  • 0a29d34 python -m incremental.update Twisted --rc
  • f2f5e81 Merge pull request from GHSA-vg46-2rrj-3647
  • b0545bc Merge branch 'trunk' into advisory-fix-1
  • 50761f4 #11715: Use NEXT in deprecation examples (#11720)
  • 927a5dc Add newsfragment
  • Additional commits viewable in compare view

Dependabot compatibility score

You can trigger a rebase of this PR by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  • @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
  • @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
  • @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
  • @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

Note Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

Merge request reports