Skip to content

2.20.0: CVE you later

Compare
Choose a tag to compare
@cicdw cicdw released this 03 Aug 14:41
· 70 commits to 2.x since this release
15274df

Continuing the 2.0 lineage, Prefect's 2.20 release includes a major compatibility upgrade with anyio: previous versions of anyio were subject to a critical race condition that many CVE scanners are flagging as a high severity vulnerability. Because of the changes necessary in this upgrade, please be aware that new versions of many Prefect integration packages such as prefect-dask and prefect-ray will require 2.20.0 to function properly.

(For those who have already upgraded to 3.0, don't worry - Prefect 3.0 release candidates are already anyio>=4.4.0 compatible).

Bug Fixes 🐞

Integrations & Dependencies 🤝

Development & Tidiness 🧹

  • Remove unnecessary config for releases by @cicdw in #14763

Full Changelog: 2.19.9...2.20