Skip to content

build(deps): bump pymysql from 0.10.1 to 1.1.1 in /tests/opentelemetry-docker-tests/tests#4546

Merged
xrmx merged 2 commits intomainfrom
dependabot/pip/tests/opentelemetry-docker-tests/tests/pymysql-1.1.1
May 7, 2026
Merged

build(deps): bump pymysql from 0.10.1 to 1.1.1 in /tests/opentelemetry-docker-tests/tests#4546
xrmx merged 2 commits intomainfrom
dependabot/pip/tests/opentelemetry-docker-tests/tests/pymysql-1.1.1

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 7, 2026 •
edited
Loading

Bumps pymysql from 0.10.1 to 1.1.1.

Release notes

Sourced from pymysql's releases.

v1.1.1

[!WARNING] This release fixes a vulnerability (CVE-2024-36039). All users are recommended to update to this version.

If you can not update soon, check the input value from untrusted source has an expected type. Only dict input from untrusted source can be an attack vector.

What's Changed

Merged PRs

New Contributors

Full Changelog: PyMySQL/PyMySQL@v1.1.0...v1.1.1

v1.1.0

What's Changed

... (truncated)

Changelog

Sourced from pymysql's changelog.

v1.1.1

Release date: 2024-05-21

[!WARNING] This release fixes a vulnerability (CVE-2024-36039). All users are recommended to update to this version.

If you can not update soon, check the input value from untrusted source has an expected type. Only dict input from untrusted source can be an attack vector.

  • Prohibit dict parameter for Cursor.execute(). It didn't produce valid SQL and might cause SQL injection. (CVE-2024-36039)
  • Added ssl_key_password param. #1145

v1.1.0

Release date: 2023-06-26

  • Fixed SSCursor raising OperationalError for query timeouts on wrong statement (#1032)
  • Exposed Cursor.warning_count to check for warnings without additional query (#1056)
  • Make Cursor iterator (#995)
  • Support '_' in key name in my.cnf (#1114)
  • Cursor.fetchall() returns empty list instead of tuple (#1115). Note that Cursor.fetchmany() still return empty tuple after reading all rows for compatibility with Django.
  • Deprecate Error classes in Cursor class (#1117)
  • Add Connection.set_character_set(charset, collation=None). This method is compatible with mysqlclient. (#1119)
  • Deprecate Connection.set_charset(charset) (#1119)
  • New connection always send "SET NAMES charset [COLLATE collation]" query. (#1119) Since collation table is vary on MySQL server versions, collation in handshake is fragile.
  • Support charset="utf8mb3" option (#1127)

v1.0.3

Release date: 2023-03-28

v1.0.2

... (truncated)

Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels May 7, 2026
@dependabot dependabot Bot requested a review from a team as a code owner May 7, 2026 08:12
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels May 7, 2026
@dependabot
build(deps): bump pymysql in /tests/opentelemetry-docker-tests/tests
e503a8d 
Bumps [pymysql](https://github.com/PyMySQL/PyMySQL) from 0.10.1 to 1.1.1.
- [Release notes](https://github.com/PyMySQL/PyMySQL/releases)
- [Changelog](https://github.com/PyMySQL/PyMySQL/blob/main/CHANGELOG.md)
- [Commits](PyMySQL/PyMySQL@v0.10.1...v1.1.1)

---
updated-dependencies:
- dependency-name: pymysql
  dependency-version: 1.1.1
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/pip/tests/opentelemetry-docker-tests/tests/pymysql-1.1.1 branch from bcb5b3e to e503a8d Compare May 7, 2026 08:24
@xrmx xrmx added the Skip Changelog PRs that do not require a CHANGELOG.md entry label May 7, 2026
@github-project-automation github-project-automation Bot moved this to Approved PRs in Python PR digest May 7, 2026
@xrmx xrmx moved this from Approved PRs to Ready for merge in Python PR digest May 7, 2026
@xrmx xrmx enabled auto-merge (squash) May 7, 2026 08:31
@xrmx xrmx merged commit a7436ff into main May 7, 2026
751 checks passed
@xrmx xrmx deleted the dependabot/pip/tests/opentelemetry-docker-tests/tests/pymysql-1.1.1 branch May 7, 2026 08:38
@github-project-automation github-project-automation Bot moved this from Ready for merge to Done in Python PR digest May 7, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@xrmx xrmx xrmx approved these changes

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python Pull requests that update python code Skip Changelog PRs that do not require a CHANGELOG.md entry

Projects

Python PR digest
Status: Done

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@xrmx