changelog=0.4.1 - Security scan fixes in the bundled geobr
The QGIS plugin repository's Bandit scan blocked 0.4.0 over 16
findings
in the bundled geobr library. This release bundles geobr 2.1.1,
which
resolves all of them: the one genuine issue (data downloads no
longer
skip TLS certificate verification), a missing request timeout, and
the
string-built SQL and silent except blocks the scanner flags,
rewritten
with DuckDB's relational API and debug logging. No change in the
data,
the algorithms, or their parameters.
yes
rafapereirabr
2026-09-24T01:12:34.190020+00:00
3.40.0
4.99.0
None
no
Plugin Tags