Update dependency loguru to v0.6.0 [SECURITY] - autoclosed

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
loguru (changelog)	==0.5.3 -> ==0.6.0

GitHub Vulnerability Alerts

CVE-2022-0329

In versions of loguru up to and including 0.5.3 a lack of sanitization on log serialization can lead to arbitrary code execution. The maintainer disputes the issue, but has altered behavior of the library in commit 4b0070a4f30cbf6d5e12e6274b242b62ea11c81b. See Delgan/loguru#563 for further discussion of the issue. The function in question is intended for internal use only, but is not restricted. This has been patched in version 0.6.0.

---

Release Notes

Delgan/loguru

v0.6.0

Compare Source

=====================

• Remove internal use of pickle.loads() considered as a security vulnerability referenced as CVE-2022-0329 <https://nvd.nist.gov/vuln/detail/CVE-2022-0329>_ (#&#8203;563 <https://github.com/Delgan/loguru/issues/563>_).
• Modify coroutine sink to make it discard log messages when loop=None and no event loop is running (due to internally using asyncio.get_running_loop() in place of asyncio.get_event_loop()).
• Remove the possibility to add a coroutine sink with enqueue=True if loop=None and no event loop is running.
• Change default encoding of file sink to be utf8 instead of locale.getpreferredencoding() (#&#8203;339 <https://github.com/Delgan/loguru/issues/339>_).
• Prevent non-ascii characters to be escaped while logging JSON message with serialize=True (#&#8203;575 <https://github.com/Delgan/loguru/pull/575>, thanks @ponponon <https://github.com/ponponon>).
• Fix flake8 errors and improve code readability (#&#8203;353 <https://github.com/Delgan/loguru/issues/353>, thanks @AndrewYakimets <https://github.com/AndrewYakimets>).

---

Configuration

📅 Schedule: "" (UTC).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, click this checkbox.

---

This PR has been generated by WhiteSource Renovate. View repository job log here.