Release 🍓 0.243.0

strawberry-graphql · Sep 25, 2024 · 2f21067 · 2f21067
1 parent 37265b2
commit 2f21067
Show file tree

Hide file tree

Showing 3 changed files with 13 additions and 8 deletions.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -1,6 +1,18 @@
 CHANGELOG
 =========
 
+0.243.0 - 2024-09-25
+--------------------
+
+Starting with this release, multipart uploads are disabled by default and Strawberry Django view is no longer implicitly exempted from Django's CSRF protection.
+Both changes relieve users from implicit security implications inherited from the GraphQL multipart request specification which was enabled in Strawberry by default.
+
+These are breaking changes if you are using multipart uploads OR the Strawberry Django view.
+Migrations guides including further information are available on the Strawberry website.
+
+Contributed by [Jonathan Ehwald](https://github.com/DoctorJohn) via [PR #3645](https://github.com/strawberry-graphql/strawberry/pull/3645/)
+
+
 0.242.0 - 2024-09-19
 --------------------
 

diff --git a/RELEASE.md b/RELEASE.md
diff --git a/pyproject.toml b/pyproject.toml
@@ -1,7 +1,7 @@
 [tool.poetry]
 name = "strawberry-graphql"
 packages = [ { include = "strawberry" } ]
-version = "0.242.0"
+version = "0.243.0"
 description = "A library for creating GraphQL APIs"
 authors = ["Patrick Arminio <[email protected]>"]
 license = "MIT"