Bump datasette from 0.51.1 to 0.56.1

[dependabot]

Bumps datasette from 0.51.1 to 0.56.1.

Release notes

Sourced from datasette's releases.

0.56.1

• Fix for a security hole: reflected cross-site scripting in the ?_trace=1 feature. #1360

0.56

Documentation improvements, bug fixes and support for SpatiaLite 5.

• The SQL editor can now be resized by dragging a handle. (#1236)
• Fixed a bug with JSON faceting and the __arraycontains filter caused by tables with spaces in their names. (#1239)
• Upgraded httpx dependency. (#1005)
• JSON faceting is now suggested even if a column contains blank strings. (#1246)
• New datasette.add_memory_database() method. (#1247)
• The Response.asgi_send() method is now documented. (#1266)
• The official Datasette Docker image now bundles SpatiaLite version 5. (#1278)
• Fixed a no such table: pragma_database_list bug when running Datasette against SQLite versions prior to SQLite 3.16.0. (#1276)
• HTML lists displayed in table cells are now styled correctly. Thanks, Bob Whitelock. (#1141, #1252)
• Configuration directory mode now correctly serves immutable databases that are listed in inspect-data.json. Thanks Campbell Allen and Frankie Robertson. (#1031, #1229)

0.55

Support for cross-database SQL queries and built-in support for serving via HTTPS.

• The new --crossdb command-line option causes Datasette to attach up to ten database files to the same /_memory database connection. This enables cross-database SQL queries, including the ability to use joins and unions to combine data from tables that exist in different database files. See Cross-database queries for details. (#283)
• --ssl-keyfile and --ssl-certfile options can be used to specify a TLS certificate, allowing Datasette to serve traffic over https:// without needing to run it behind a separate proxy. (#1221)
• The /:memory: page has been renamed (and redirected) to /_memory for consistency with the new /_internal database introduced in Datasette 0.54. (#1205)
• Added plugin testing documentation on Using pdb for errors thrown inside Datasette. (#1207)
• The official Datasette Docker image now uses Python 3.7.10, applying the latest security fix for that Python version. (#1235)

0.54.1

• Fixed a bug where ?_search= and ?_sort= parameters were incorrectly duplicated when the filter form on the table page was re-submitted. (#1214)

0.54

The two big new features in this release are the _internal SQLite in-memory database storing details of all connected databases and tables, and support for JavaScript modules in plugins and additional scripts.

For additional commentary on this release, see Datasette 0.54, the annotated release notes.

The _internal database

As part of ongoing work to help Datasette handle much larger numbers of connected databases and tables (see Datasette Library) Datasette now maintains an in-memory SQLite database with details of all of the attached databases, tables, columns, indexes and foreign keys. (#1150)

This will support future improvements such as a searchable, paginated homepage of all available tables.

You can explore an example of this database by signing in as root to the latest.datasette.io demo instance and then navigating to latest.datasette.io/_internal.

Plugins can use these tables to introspect attached data in an efficient way. Plugin authors should note that this is not yet considered a stable interface, so any plugins that use this may need to make changes prior to Datasette 1.0 if the _internal table schemas change.

Named in-memory database support

As part of the work building the _internal database, Datasette now supports named in-memory databases that can be shared across multiple connections. This allows plugins to create in-memory databases which will persist data for the lifetime of the Datasette server process. (#1151)

The new memory_name= parameter to the Database class can be used to create named, shared in-memory databases.

... (truncated)

Changelog

Sourced from datasette's changelog.

0.56.1 (2021-06-05)

.. warning:: This release fixes a reflected cross-site scripting <https://owasp.org/www-community/attacks/xss/#reflected-xss-attacks>__ security hole with the ?_trace=1 feature. You should upgrade to this version, or to Datasette 0.57, as soon as possible. (:issue:1360)

.. _v0_56:

0.56 (2021-03-28)

Documentation improvements, bug fixes and support for SpatiaLite 5.

• The SQL editor can now be resized by dragging a handle. (:issue:1236)
• Fixed a bug with JSON faceting and the __arraycontains filter caused by tables with spaces in their names. (:issue:1239)
• Upgraded httpx dependency. (:issue:1005)
• JSON faceting is now suggested even if a column contains blank strings. (:issue:1246)
• New :ref:datasette.add_memory_database() <datasette_add_memory_database> method. (:issue:1247)
• The :ref:Response.asgi_send() <internals_response_asgi_send> method is now documented. (:issue:1266)
• The official Datasette Docker image now bundles SpatiaLite version 5. (:issue:1278)
• Fixed a no such table: pragma_database_list bug when running Datasette against SQLite versions prior to SQLite 3.16.0. (:issue:1276)
• HTML lists displayed in table cells are now styled correctly. Thanks, Bob Whitelock. (:issue:1141, [#1252](https://github.com/simonw/datasette/issues/1252) <https://github.com/simonw/datasette/pull/1252>__)
• Configuration directory mode now correctly serves immutable databases that are listed in inspect-data.json. Thanks Campbell Allen and Frankie Robertson. ([#1031](https://github.com/simonw/datasette/issues/1031) <https://github.com/simonw/datasette/pull/1031>, [#1229](https://github.com/simonw/datasette/issues/1229) <https://github.com/simonw/datasette/pull/1229>)

.. _v0_55:

0.55 (2021-02-18)

Support for cross-database SQL queries and built-in support for serving via HTTPS.

• The new --crossdb command-line option causes Datasette to attach up to ten database files to the same /_memory database connection. This enables cross-database SQL queries, including the ability to use joins and unions to combine data from tables that exist in different database files. See :ref:cross_database_queries for details. (:issue:283)
• --ssl-keyfile and --ssl-certfile options can be used to specify a TLS certificate, allowing Datasette to serve traffic over https:// without needing to run it behind a separate proxy. (:issue:1221)
• The /:memory: page has been renamed (and redirected) to /_memory for consistency with the new /_internal database introduced in Datasette 0.54. (:issue:1205)
• Added plugin testing documentation on :ref:testing_plugins_pdb. (:issue:1207)
• The official Datasette Docker image <https://hub.docker.com/r/datasetteproject/datasette>__ now uses Python 3.7.10, applying the latest security fix <https://www.python.org/downloads/release/python-3710/>__ for that Python version. (:issue:1235)

.. _v0_54_1:

0.54.1 (2021-02-02)

• Fixed a bug where ?_search= and ?_sort= parameters were incorrectly duplicated when the filter form on the table page was re-submitted. (:issue:1214)

.. _v0_54:

0.54 (2021-01-25)

The two big new features in this release are the _internal SQLite in-memory database storing details of all connected databases and tables, and support for JavaScript modules in plugins and additional scripts.

... (truncated)

Commits

• 6536e02 Release 0.56.1
• 26fc539 Correctly escape output of ?_trace, refs #1360
• af5a7f1 Release 0.56
• d579fcf Applied some fixes suggested by @​withshubh in #1260
• f92d823 ensure immutable databses when starting in configuration directory mode with ...
• e72397d Add styling to lists within table cells (fixes #1141) (#1252)
• c96a382 Added --app to fly install command. (#1279)
• 48d5e0e Fix for no such table: pragma_database_list, refs #1276
• 3fcfc85 Fix links in SpatiaLite tutorial, closes #1278
• 8ebdcc9 Remove obsolete note about building SpatiaLite from source, refs #1249
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
• @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
• @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
• @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
• @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.