What's Changed
Security
- #4876 - Updated
cryptography
to41.0.7
due to CVE-2023-49083. As this is not a direct dependency of Nautobot, it will not auto-update when upgrading. Please be sure to upgrade your local environment. - #4988 - Fixed missing object-level permissions enforcement when running a JobButton (GHSA-vf5m-xrhm-v999).
- #4988 - Removed the requirement for users to have both
extras.run_job
andextras.run_jobbutton
permissions to run a Job via a Job Button. Onlyextras.run_job
permission is now required. - #5002 - Updated
paramiko
to3.4.0
due to CVE-2023-48795. As this is not a direct dependency of Nautobot, it will not auto-update when upgrading. Please be sure to upgrade your local environment.
Added
- #4965 - Added MMF OM5 cable type to cable type choices.
Removed
- #4988 - Removed redundant
/extras/job-button/<uuid>/run/
URL endpoint; Job Buttons now use/extras/jobs/<uuid>/run/
endpoint like any other job.
Fixed
- #4977 - Fixed early return conditional in
ensure_git_repository
.
Housekeeping
- #4988 - Fixed some bugs in
example_plugin.jobs.ExampleComplexJobButtonReceiver
.
Contributors
Full Changelog: v1.6.7...v1.6.8