Skip to content

Bump strawberry-graphql[fastapi] from 0.242.0 to 0.243.0

Ronan Amicel requested to merge dependabot-pip-strawberry-graphql-fastapi--0.243.0 into main

Bumps strawberry-graphql[fastapi] from 0.242.0 to 0.243.0.

Release notes

Sourced from strawberry-graphql[fastapi]'s releases.

🍓 0.243.0

Starting with this release, multipart uploads are disabled by default and Strawberry Django view is no longer implicitly exempted from Django's CSRF protection. Both changes relieve users from implicit security implications inherited from the GraphQL multipart request specification which was enabled in Strawberry by default.

These are breaking changes if you are using multipart uploads OR the Strawberry Django view. Migrations guides including further information are available on the Strawberry website.

Releases contributed by @​DoctorJohn via #3645

Changelog

Sourced from strawberry-graphql[fastapi]'s changelog.

0.243.0 - 2024-09-25

Starting with this release, multipart uploads are disabled by default and Strawberry Django view is no longer implicitly exempted from Django's CSRF protection. Both changes relieve users from implicit security implications inherited from the GraphQL multipart request specification which was enabled in Strawberry by default.

These are breaking changes if you are using multipart uploads OR the Strawberry Django view. Migrations guides including further information are available on the Strawberry website.

Contributed by Jonathan Ehwald via [PR #3645](strawberry-graphql/strawberry#3645)

Commits

Merge request reports