Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update FinanceDatabase to v2.0.9 #4434

Merged
merged 6 commits into from
Mar 8, 2023
Merged

Update FinanceDatabase to v2.0.9 #4434

merged 6 commits into from
Mar 8, 2023

Conversation

JerBouma
Copy link
Contributor

@JerBouma JerBouma commented Mar 8, 2023

Very small change, fixes #4422. Now loads different files, other than that nothing changes. Old files are still there so nothing breaks for earlier versions. Files are now CSV compressed with BZ2 instead of Pickle. I don't fully agree with the security risk (as it is just me maintaining, no PRs in the last 3 years and you would need to add malicious code to a CSV file) but this just gets rid of the risk altogether.

@reviewpad reviewpad bot added the feat XS Extra small feature label Mar 8, 2023
@reviewpad reviewpad bot added feat XL Extra Large feature and removed feat XS Extra small feature labels Mar 8, 2023
@JerBouma
Copy link
Contributor Author

JerBouma commented Mar 8, 2023

Need to rewrite a whole bunch of tests just because the file extension changed from .pkl to .bz2, smh.

@jmaslek
Copy link
Collaborator

jmaslek commented Mar 8, 2023

Need to rewrite a whole bunch of tests just because the file extension changed from .pkl to .bz2, smh.

plz just not infinite numbers of tests

@JerBouma
Copy link
Contributor Author

JerBouma commented Mar 8, 2023

Need to rewrite a whole bunch of tests just because the file extension changed from .pkl to .bz2, smh.

plz just not infinite numbers of tests

Test passed so just 800k lines. I don't even get why it updates so much lol.

@jmaslek jmaslek added this pull request to the merge queue Mar 8, 2023
Merged via the queue into develop with commit c1537d8 Mar 8, 2023
@piiq piiq deleted the feature/mini-update branch March 22, 2023 14:03
jmaslek pushed a commit that referenced this pull request Apr 13, 2023
* Update to v2.0.9

* Fix tests just because it said pkl instead of bz2

* Fix unrelated pylint issue

* Someone doesnt care about linting

* Update more tests
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
feat XL Extra Large feature
Projects
None yet
Development

Successfully merging this pull request may close these issues.

[IMPROVE] Insecure loading of external Pickle data
2 participants