authlib icon indicating copy to clipboard operation
authlib copied to clipboard

Published 20 hours ago • verified publisher icon lepture

Missing v1.1.0 tag

Open alonbl opened this issue 3 years ago • 1 comments

Hi, I see there is a new release but no tag and no release notes. Can you please fix? Thanks!

alonbl avatar Sep 14 '22 08:09 alonbl

It also looks like commits weren't pushed to GitHub - the release was done 13 sep but the last commit currently visible on master is 16efa94e96565c5cd2b29f3e726bc961b275f832, from 27 aug.

Given the lack of linked info, I was worried that this release was due to credentials getting hacked. I diffed the contents of the two wheels on PyPI. The patch I generated is in this gist. It doesn't look like there’s any malicious code, and the changes seem to align with the repository 😅

adamchainz avatar Sep 14 '22 08:09 adamchainz

Hi, there are security fixes in 1.1.0, I'll push the code soon.

lepture avatar Sep 18 '22 12:09 lepture

code is updated

lepture avatar Sep 19 '22 03:09 lepture