v1.6.8 - 2023-12-22

[glennmatthews]

What's Changed

Security

• #4876 - Updated cryptography to 41.0.7 due to CVE-2023-49083. As this is not a direct dependency of Nautobot, it will not auto-update when upgrading. Please be sure to upgrade your local environment.
• #4988 - Fixed missing object-level permissions enforcement when running a JobButton (GHSA-vf5m-xrhm-v999).
• #4988 - Removed the requirement for users to have both extras.run_job and extras.run_jobbutton permissions to run a Job via a Job Button. Only extras.run_job permission is now required.
• #5002 - Updated paramiko to 3.4.0 due to CVE-2023-48795. As this is not a direct dependency of Nautobot, it will not auto-update when upgrading. Please be sure to upgrade your local environment.

Added

• #4965 - Added MMF OM5 cable type to cable type choices.

Removed

• #4988 - Removed redundant /extras/job-button/<uuid>/run/ URL endpoint; Job Buttons now use /extras/jobs/<uuid>/run/ endpoint like any other job.

Fixed

• #4977 - Fixed early return conditional in ensure_git_repository.

Housekeeping

• #4988 - Fixed some bugs in example_plugin.jobs.ExampleComplexJobButtonReceiver.

Contributors

• @nrnvgh
• @Kircheneer
• @glennmatthews

Full Changelog: v1.6.7...v1.6.8

---

This discussion was created from the release v1.6.8 - 2023-12-22.