github koxudaxi/datamodel-code-generator 0.63.0

4 hours ago

Breaking Changes

Default Behavior Changes

  • --check output now uses POSIX-style paths - File paths in --check diagnostic output are now normalized with Path.as_posix() instead of str(path). On POSIX systems the output is unchanged, but on Windows the diff headers and MISSING:/EXTRA: lines now use forward slashes (models/foo.py) instead of backslashes (models\foo.py). Tooling or snapshot tests that parse --check output on Windows may need updating. (#3287)

Security

  • Fixed SSRF protection bypass via DNS rebinding during HTTP(S) schema fetching. (GHSA-vx7x-vcc2-c44g)
  • Fixed leakage of scoped request headers such as Authorization, Cookie, and Proxy-Authorization when a remote schema fetch follows a cross-origin redirect. (GHSA-r5vv-ff45-prp2)
  • Hardened HTTP(S) schema fetching against embedded IPv4 address forms that could bypass private-network checks. (#3319)

What's Changed

Full Changelog: 0.62.0...0.63.0

Don't miss a new datamodel-code-generator release

NewReleases is sending notifications on new releases.