DM-41424: Prepare Gafaelfawr 9.5.1

.pre-commit-config.yaml

@@ -23,7 +23,7 @@ repos:
     rev: 1.16.0
     hooks:
       - id: blacken-docs
-        additional_dependencies: [black==23.10.0]
+        additional_dependencies: [black==23.10.1]
         args: [-l, '79', -t, py311]
 
   - repo: https://github.com/pre-commit/mirrors-eslint

CHANGELOG.md

@@ -6,6 +6,15 @@ Find changes for the upcoming release in the project's [changelog.d directory](h
 
 <!-- scriv-insert-here -->
 
+<a id='changelog-9.5.1'></a>
+## 9.5.1 (2023-10-30)
+
+### Bug fixes
+
+- Add a socket timeout, enable keepalive, and fix the retry specification for the Redis connection pool to help Gafaelfawr recover from Redis outages.
+
+- Always mask all headers to which Gafaelfawr gives special meaning when passing requests to a service downstream of a `GafaelfawrIngress`, instead of only masking the ones Gafaelfawr might set in that configuration. This ensures that no service behind a `GafaelfawrIngress` sees, e.g., `X-Auth-Request-User` unless it truly is authenticated by Gafaelfawr.
+
 <a id='changelog-9.5.0'></a>
 ## 9.5.0 (2023-10-25)
 

requirements/main.txt

@@ -377,9 +377,9 @@ cryptography==41.0.5 \
     #   -r requirements/main.in
     #   pyjwt
     #   safir
-fastapi==0.104.0 \
-    --hash=sha256:456482c1178fb7beb2814b88e1885bc49f9a81f079665016feffe3e1c6a7663e \
-    --hash=sha256:9c44de45693ae037b0c6914727a29c49a40668432b67c859a87851fc6a7b74c6
+fastapi==0.104.1 \
+    --hash=sha256:752dc31160cdbd0436bb93bad51560b57e525cbb1d4bbf6f4904ceee75548241 \
+    --hash=sha256:e5e4540a7c5e1dcfbbcf5b903c234feddcdcd881f191977a1c5dfd917487e7ae
     # via
     #   -r requirements/main.in
     #   safir

ui/package.json

@@ -2,7 +2,7 @@
   "name": "gafaelfawr",
   "private": true,
   "description": "The user-facing UI for Gafaelfawr",
-  "version": "5.0.0",
+  "version": "9.5.1",
   "license": "MIT",
   "scripts": {
     "build": "gatsby build --prefix-paths",