frictionlessdata/frictionless-py v5.20.0

on GitHub

fix(security): profile references ($ref) are now resolved by frictionless
instead of jsonschema: remote references go through system.http_session (injectable,
10 seconds timeout), non-http(s) schemes are refused, relative references
resolve from the profile location, and error messages no longer disclose the
content of referenced documents
(#1832)

fix(security): fix command injection vulnerability in frictionless explore
command
(#1820)

feat: Data Package v2, accept $schema property
(#1784)

feat: Data Package v2, support missingValues as objects
(#1787)

feat: Data Package v2, support fieldsMatch property
(#1790)

fix: Console errors are now sent to stderr instead of stdout
(#1792)

fix: Various fixes on header matching: correct
reporting of duplicate labels with header_case=False, error on ambiguous
fields, no redundant extra-cell or missing-cell errors
(#1797,
#1798,
#1799)

fix: missing label in "extra-label" error message
(#1772)