RELEASE: v0.20.0

aiidateam · Aug 10, 2021 · 6c8f86a · 6c8f86a
1 parent 009b3c3
commit 6c8f86a
Show file tree

Hide file tree

Showing 2 changed files with 9 additions and 1 deletion.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -1,5 +1,13 @@
 # Changelog
 
+## v0.20.0 - 2021-08-10
+
+- 🔧 MAINTAIN: update requirement to `pyyaml~=5.4` (#221)
+ The versions of `pyyaml` up to v5.4 contained severe security issues where the default loaders could be abused for arbitrary code execution.
+ The default `FullLoader` was patched to no longer allow this behavior, but as a result, data sets that could be successfully deserialized with it, now will fail.
+ This required using the unsafe `Loader` in for the deserialization of the exception state of a process.
+
+
 ## v0.19.0 - 2021-03-09
 
 - ‼️ DEPRECATE: `Process.done` method:

diff --git a/plumpy/version.py b/plumpy/version.py
@@ -1,4 +1,4 @@
 # -*- coding: utf-8 -*-
-__version__: str = '0.19.0'
+__version__: str = '0.20.0'
 
 __all__ = ['__version__']