Oauthlib: Release 3.1.1

what is the link? I would love to contribute to the release :dancing_men:

i joined!

I tried to add milestone "3.1.1" to closed issues and PR. Then, it could be useful to create a PR with Changelog description, and maybe we could discuss based on that.

Once everything are in master, tagging the new version should trigger the build process to release a github version and pypi. I think we should probably document the release process as well.

that sounds reasonable to me

What's the status of this release?

@mvaled : it is ready, only some paperwork are still needed to deploy it.
@auvipy : do you have time to finish it for this year?

I can, but do I need PyPI access for that?

The release rollout must be done by creating a PR with all changelog and version changes. Once it is reviewed and merged, we can tag the git revision and tagging will automatically release a pypi release with Travis.

The release rollout must be done by creating a PR with all changelog and version changes. Once it is reviewed and merged, we can tag the git revision and tagging will automatically release a pypi release with Travis.

oh OK

I think this is really needed because with the newer pips installing requirements may break due to the dependency on an old PyJWT version: https://github.com/oauthlib/oauthlib/commit/b69fa53fd836dc559aa7fcd78ce075bcbe361629

Yes oauthlib 3.1.0 is already causing CVE issues checkout PRISMA-2021-0041, the CVE scan setup in our pipeline throws a high severity vulnerability for this package, can you please update it as it's been quite some time

Hmm, this issue was created a year ago, and still no new release. Things seem to have stalled a bit.

That CVE 2021-0041 is currently reserved, but not yet disclosed. Maybe a fix is in the making.

Give me a couple of days and I will trigger the release. Thanks for your patience

Thanks for looking into this👍

On Wed, May 12, 2021, 3:21 PM Jonathan Huot @.*>
wrote:

Give me a couple of days and I will trigger the release. Thanks for your
patience

—
You are receiving this because you commented.
Reply to this email directly, view it on GitHub
https://github.com/oauthlib/oauthlib/issues/736#issuecomment-839637032,
or unsubscribe
https://github.com/notifications/unsubscribe-auth/AKYROFT6TPX5IPRNXTNPGIDTNJFRHANCNFSM4M62ML7Q
.

Release is finally out. Sorry for the delay, and enjoy...
3.2.0 coming soon with remaining PRs