Bump spotipy from 2.18.0 to 2.24.0

[dependabot]

Bumps spotipy from 2.18.0 to 2.24.0.

Release notes

Sourced from spotipy's releases.

2.24: Audiobooks support

Added

• Added MemcacheCacheHandler, a cache handler that stores the token info using pymemcache.
• Added support for audiobook endpoints: get_audiobook, get_audiobooks, and get_audiobook_chapters.
• Added integration tests for audiobook endpoints.
• Added update field to current_user_follow_playlist.

Changed

• Fixed error obfuscation when Spotify class is being inherited and an error is raised in the Child's __init__
• Replaced artist_albums(album_type=...) with artist_albums(include_groups=...) due to an API change.
• Updated _regex_spotify_url to ignore /intl-<countrycode> in Spotify links
• Improved README, docs and examples

Fixed

• Readthedocs build
• Split test_current_user_save_and_save_tracks unit test

Full Changelog: spotipy-dev/spotipy@2.23.0...2.24.0

2.23: Misc. updates

Added

• Added optional encoder_cls argument to CacheFileHandler, which overwrite default encoder for token before writing to disk spotipy-dev/spotipy#941 by @​shawncruz
• Integration tests for searching multiple types in multiple markets (non-user endpoints) spotipy-dev/spotipy#901 by @​rngolam
• Publish to PyPI action spotipy-dev/spotipy#958 by @​stephanebruckert

Fixed

• Fixed CVE-2023-23608 regex for matching playlist URIs with the format spotify:user:USERNAME:playlist:PLAYLISTID spotipy-dev/spotipy#949 by @​ludwigjo
• search_markets now factors the counts of all types in the total rather than just the first type (#534) spotipy-dev/spotipy#901 by @​rngolam

2.22.1: CVE-2023-23608

Fixed

• CVE-2023-23608: fixed path traversal vulnerability that may lead to type confusion in URI handling code. Can prevent a potential XSS attack.
  • Upgrade if your app is user-facing and it allows user inputs for any type of Spotify IDs/URIs/URLs that may be forwarded to the Spotify API. Thanks to @​Shaderbug for finding and fixing this bug spotipy-dev/spotipy@b1db0b6

Changed

• Modified docstring for deprecated playlist_add_items() to accept "only URIs or URLs", with intended fix for IDs in v3.
  • The bug still exists for developers dealing with episodes IDs rather than just track IDs. However it is recommended to use the new playlist_add_tracks() or playlist_add_episodes() if dealing with episodes or simply to avoid confusion. See spotipy-dev/spotipy#919 by @​oliveraw for context

2.22: Get queue endpoint

Added

• Integration tests via GHA (non-user endpoints)
• Unit tests for new releases, passing limit parameter with minimum and maximum values of 1 and 50
• Unit tests for categories, omitting country code to test global releases
• Added CODE_OF_CONDUCT.md

Fixed

... (truncated)

Changelog

Sourced from spotipy's changelog.

[2.24.0] - 2024-05-30

Added

• Added MemcacheCacheHandler, a cache handler that stores the token info using pymemcache.
• Added support for audiobook endpoints: get_audiobook, get_audiobooks, and get_audiobook_chapters.
• Added integration tests for audiobook endpoints.
• Added update field to current_user_follow_playlist.

Changed

• Fixed error obfuscation when Spotify class is being inherited and an error is raised in the Child's __init__
• Replaced artist_albums(album_type=...) with artist_albums(include_groups=...) due to an API change.
• Updated _regex_spotify_url to ignore /intl-<countrycode> in Spotify links
• Improved README, docs and examples

Fixed

• Readthedocs build
• Split test_current_user_save_and_usave_tracks unit test

Removed

• Drop support for EOL Python 3.7

[2.23.0] - 2023-04-07

Added

• Added optional encoder_cls argument to CacheFileHandler, which overwrite default encoder for token before writing to disk
• Integration tests for searching multiple types in multiple markets (non-user endpoints)
• Publish to PyPI action

Fixed

• Fixed the regex for matching playlist URIs with the format spotify:user:USERNAME:playlist:PLAYLISTID.
• search_markets now factors the counts of all types in the total rather than just the first type (#534)

[2.22.1] - 2023-01-23

Added

• Add alternative module installation instruction to README
• Added Comment to README - Getting Started for user to add URI to app in Spotify Developer Dashboard.
• Added playlist_add_tracks.py to example folder

Changed

• Modified docstring for playlist_add_items() to accept "only URIs or URLs", with intended deprecation for IDs in v3

Fixed

• Path traversal vulnerability that may lead to type confusion in URI handling code
• Update contributing.md

... (truncated)

Commits

• 8a40e03 Remove python2.7 from pypi build
• c0343b8 Bump to 2.24.0
• 5fa2343 TUTORIAL.md updates (#1009)
• 22e3b74 Update current_user_follow_playlist (#1040)
• a810edf Corrections to Grammar Errors and Typos in Documentation (#1017)
• 126da62 Fix API Reference (#1126)
• df27fe9 Combined assertion tests, fixes #1051 (#1052)
• 62a27a2 Added MemcacheCacheHandler (#1042)
• 913ae57 Fix docs badge
• 1ce8c4f RTD theme fix (#1122)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)