Bump the all-dependencies group in /api with 22 updates #341

dependabot · 2024-01-29T18:34:22Z

Bumps the all-dependencies group in /api with 22 updates:

Package	From	To
coverage	`7.3.2`	`7.4.1`
distlib	`0.3.7`	`0.3.8`
identify	`2.5.32`	`2.5.33`
pluggy	`1.3.0`	`1.4.0`
pre-commit	`3.5.0`	`3.6.0`
pytest	`7.4.3`	`8.0.0`
tox	`4.11.4`	`4.12.1`
urllib3	`2.0.7`	`2.1.0`
boto3	`1.33.6`	`1.34.29`
botocore	`1.33.6`	`1.34.29`
flask	`3.0.0`	`3.0.1`
greenlet	`3.0.1`	`3.0.3`
importlib-metadata	`7.0.0`	`7.0.1`
jinja2	`3.1.2`	`3.1.3`
markupsafe	`2.1.3`	`2.1.4`
pydantic	`2.5.2`	`2.6.0`
pydantic-core	`2.14.5`	`2.16.1`
pytz	`2023.3.post1`	`2023.4`
s3transfer	`0.8.2`	`0.10.0`
sqlalchemy	`2.0.23`	`2.0.25`
typing-extensions	`4.8.0`	`4.9.0`
pip	`23.3.1`	`23.3.2`

Updates coverage from 7.3.2 to 7.4.1

Changelog

Sourced from coverage's changelog.

Version 7.4.1 — 2024-01-26

Python 3.13.0a3 is supported.

Fix: the JSON report now includes an explicit format version number, closing issue 1732_.

.. _issue 1732: nedbat/coveragepy#1732

.. _changes_7-4-0:

Version 7.4.0 — 2023-12-27

In Python 3.12 and above, you can try an experimental core based on the new :mod:sys.monitoring <python:sys.monitoring> module by defining a COVERAGE_CORE=sysmon environment variable. This should be faster for line coverage, but not for branch coverage, and plugins and dynamic contexts are not yet supported with it. I am very interested to hear how it works (or doesn't!) for you.

.. _changes_7-3-4:

Version 7.3.4 — 2023-12-20

Fix: the change for multi-line signature exclusions in 7.3.3 broke other forms of nested clauses being excluded properly. This is now fixed, closing issue 1713_.

Fix: in the HTML report, selecting code for copying won't select the line numbers also. Thanks, Robert Harris <pull 1717_>_.

.. _issue 1713: nedbat/coveragepy#1713 .. _pull 1717: nedbat/coveragepy#1717

.. _changes_7-3-3:

Version 7.3.3 — 2023-12-14

Fix: function definitions with multi-line signatures can now be excluded by matching any of the lines, closing issue 684. Thanks, Jan Rusak, Maciej Kowalczyk and Joanna Ejzel <pull 1705_>.

Fix: XML reports could fail with a TypeError if files had numeric components

... (truncated)

Commits

07588ea test: give hypothesis a little more time
2c96518 build: tags should be signed
8d1857f docs: sample HTML for 7.4.1
ddc88f7 docs: prep for 7.4.1
98cd671 docs: correct two library urls
498b8c9 build: coverage runs have to skip windows pypy too
75b22f0 test: ignore color in tracebacks
b7c41a2 build: show action environment variables for debugging
f8be865 build: run actions on 3.13 since a3 came out.
de60a6d build(deps): bump actions/dependency-review-action from 3 to 4
Additional commits viewable in compare view

Updates distlib from 0.3.7 to 0.3.8

Changelog

Sourced from distlib's changelog.

0.3.8


Released: 2023-12-12


markers

Fix #209: use legacy version implementation for Python versions.



tests


Fix #204: use symlinks in venv creation during test.


Fix #208: handle deprecation removals in Python 3.13.

Commits

ab5f8e7 Changes for 0.3.8.
86bb212 Update change log.
488599f Updates based on flake8 checks.
0e261af Use legacy version implementation for Python itself.
8242f39 Update copyright years.
e27569b Fix #208: Handle deprecation removals in Python 3.13.
65a014b Update requirements and CI matrix.
124108a Skip test for non-final Python versions.
ff48e09 Fix #206: include tox.ini in sdist.
eeaa18d Fix #204: Use symlinks in venv creation during test.
Additional commits viewable in compare view

Updates identify from 2.5.32 to 2.5.33

Commits

3d4672c v2.5.33
69fcae7 Merge pull request #433 from om-henners/patch-1
8dfb002 Add pyt extension
bce1aad Merge pull request #430 from pre-commit/pre-commit-ci-update-config
5bf8237 [pre-commit.ci] pre-commit autoupdate
See full diff in compare view

Updates pluggy from 1.3.0 to 1.4.0

Changelog

Sourced from pluggy's changelog.

pluggy 1.4.0 (2024-01-24)

Features

[#463](https://github.com/pytest-dev/pluggy/issues/463) <https://github.com/pytest-dev/pluggy/issues/463>_: A warning :class:~pluggy.PluggyTeardownRaisedWarning is now issued when an old-style hookwrapper raises an exception during teardown. See the warning documentation for more details.

[#471](https://github.com/pytest-dev/pluggy/issues/471) <https://github.com/pytest-dev/pluggy/issues/471>_: Add :func:PluginManager.unblock <pluggy.PluginManager.unblock> method to unblock a plugin by plugin name.

Bug Fixes

[#441](https://github.com/pytest-dev/pluggy/issues/441) <https://github.com/pytest-dev/pluggy/issues/441>_: Fix :func:~pluggy.HookCaller.call_extra() extra methods getting ordered before everything else in some circumstances. Regressed in pluggy 1.1.0.

[#438](https://github.com/pytest-dev/pluggy/issues/438) <https://github.com/pytest-dev/pluggy/issues/438>_: Fix plugins registering other plugins in a hook when the other plugins implement the same hook itself. Regressed in pluggy 1.1.0.

Commits

2efd28e Preparing release 1.4.0
ebeb2f2 Merge pull request #471 from bluetech/unblock
3a28b4d Merge pull request #464 from bluetech/hookwrapper-teardown-warning
4331b7a Merge pull request #473 from bluetech/iterator-invalidation
7aef3e6 hooks: fix plugins registering other plugins in a hook
cc36605 Merge pull request #472 from bluetech/call-extra-ordering-fix
443fee6 hooks: fix call_extra extra methods getting ordered before everything else
4577b45 hooks: add comment describing _hookimpls's format/invariants.
13b3661 Add PluginManager.unblock method to unblock a name
4b5b2d4 CHANGELOG: fix errors in 1.0.0 entry
Additional commits viewable in compare view

Updates pre-commit from 3.5.0 to 3.6.0

Release notes

Sourced from pre-commit's releases.

pre-commit v3.6.0

Features

Check minimum_pre_commit_version first when parsing configs.

#3092 PR by @asottile.

Fixes

Fix deprecation warnings for importlib.resources.

#3043 PR by @asottile.

Fix deprecation warnings for rmtree.

#3079 PR by @edgarrmondragon.

Updating

Drop support for python<3.9.

#3042 PR by @asottile.

#3093 PR by @asottile.

Changelog

Sourced from pre-commit's changelog.

3.6.0 - 2023-12-09

Features

Check minimum_pre_commit_version first when parsing configs.

#3092 PR by @asottile.

Fixes

Fix deprecation warnings for importlib.resources.

#3043 PR by @asottile.

Fix deprecation warnings for rmtree.

#3079 PR by @edgarrmondragon.

Updating

Drop support for python<3.9.

#3042 PR by @asottile.

#3093 PR by @asottile.

Commits

9c9983d v3.6.0
7dc0a59 Merge pull request #3093 from pre-commit/removeprefix
d3fa7f4 Merge pull request #3092 from pre-commit/minimum-version-first
08478ec python 3.9+: use removeprefix
047439a attempt minimum_pre_commit_version first when parsing configs
23a2b73 Merge pull request #3079 from edgarrmondragon/deprecation-rmtree-onerror
cffabe5 Address deprecation warning in shutil.rmtree(onerror=...)
51df34e Merge pull request #3078 from pre-commit/pre-commit-ci-update-config
e36cefc [pre-commit.ci] pre-commit autoupdate
2280645 Merge pull request #3064 from pre-commit/pre-commit-ci-update-config
Additional commits viewable in compare view

Updates pytest from 7.4.3 to 8.0.0

Release notes

Sourced from pytest's releases.

pytest 8.0.0 (2024-01-27)

See 8.0.0rc1 and 8.0.0rc2 for the full changes since pytest 7.4!

Bug Fixes

#11842: Properly escape the reason of a skip <pytest.mark.skip ref>{.interpreted-text role="ref"} mark when writing JUnit XML files.

#11861: Avoid microsecond exceeds 1_000_000 when using log-date-format with %f specifier, which might cause the test suite to crash.

8.0.0rc2

pytest 8.0.0rc2 (2024-01-17)

Improvements

#11233: Improvements to -r for xfailures and xpasses:

Report tracebacks for xfailures when -rx is set.

Report captured output for xpasses when -rX is set.

For xpasses, add - in summary between test name and reason, to match how xfail is displayed.

#11825: The pytest_plugin_registered{.interpreted-text role="hook"} hook has a new plugin_name parameter containing the name by which plugin is registered.

Bug Fixes

#11706: Fix reporting of teardown errors in higher-scoped fixtures when using [--maxfail]{.title-ref} or [--stepwise]{.title-ref}.

#11758: Fixed IndexError: string index out of range crash in if highlighted[-1] == "\n" and source[-1] != "\n". This bug was introduced in pytest 8.0.0rc1.

#9765, #11816: Fixed a frustrating bug that afflicted some users with the only error being assert mod not in mods. The issue was caused by the fact that str(Path(mod)) and mod.__file__ don't necessarily produce the same string, and was being erroneously used interchangably in some places in the code.

This fix also broke the internal API of PytestPluginManager.consider_conftest by introducing a new parameter -- we mention this in case it is being used by external code, even if marked as private.

pytest 8.0.0rc1 (2023-12-30)

See https://docs.pytest.org/en/latest/changelog.html#pytest-8-0-0rc1-2023-12-30 for the rendered changelog.

Breaking Changes

Old Deprecations Are Now Errors
#7363: PytestRemovedIn8Warning deprecation warnings are now errors by default.

Following our plan to remove deprecated features with as little disruption as possible, all warnings of type PytestRemovedIn8Warning now generate errors instead of warning messages by default.

The affected features will be effectively removed in pytest 8.1, so please consult the deprecations{.interpreted-text role="ref"} section in the docs for directions on how to update existing code.

In the pytest 8.0.X series, it is possible to change the errors back into warnings as a stopgap measure by adding this to your pytest.ini file:
[pytest]

... (truncated)

Commits

478f823 Prepare release version 8.0.0
6085900 [8.0.x] fix: avoid rounding microsecond to 1_000_000 (#11863)
3b41c65 [8.0.x] Escape skip reason in junitxml (#11845)
747072a [8.0.x] Update docstring of scripts/generate-gh-release-notes.py (#11768)
011a475 Properly attach packages to the GH release notes (#11839) (#11840)
97960bd Merge pull request #11835 from pytest-dev/release-8.0.0rc2
6be0a3c Prepare release version 8.0.0rc2
44ffe07 Merge pull request #11837 from pytest-dev/backport-11836-to-8.0.x
14ecb04 [8.0.x] testing: temporarily disable test due to hypothesis issue
41c8dab Merge pull request #11831 from bluetech/backport-11825-to-8.0.x
Additional commits viewable in compare view

Updates tox from 4.11.4 to 4.12.1

Release notes

Sourced from tox's releases.

4.12.1

What's Changed

Fix tox version requirement in docs by @Viicos in tox-dev/tox#3184

#3165 fixed Tox failing with --installpkg and multi testenvs by @Stefanhg in tox-dev/tox#3186

New Contributors

@Viicos made their first contribution in tox-dev/tox#3184

Full Changelog: tox-dev/tox@4.12.0...4.12.1

4.12.0

What's Changed

Exclude bots from generated release notes by @hugovk in tox-dev/tox#3163

Imply --parallel when --parallel-no-spinner is passed by @tusharsadhwani in tox-dev/tox#3159

Fix 'open an issue' link in development.rst by @TheRealFalcon in tox-dev/tox#3179

Fix the CI by @gaborbernat in tox-dev/tox#3183

Always pass FORCE_COLOR & NO_COLOR to the environment by @hashar in tox-dev/tox#3172

New Contributors

@tusharsadhwani made their first contribution in tox-dev/tox#3159

@TheRealFalcon made their first contribution in tox-dev/tox#3179

Full Changelog: tox-dev/tox@4.11.4...4.12.0

Changelog

Sourced from tox's changelog.

v4.12.1 (2024-01-16)

Bugfixes - 4.12.1
- Fixed bug where running with --installpkg and multiple envs could not clean up between tests (:issue:`3165`)
v4.12.0 (2024-01-11)
Features - 4.12.0
Always pass FORCE_COLOR and NO_COLOR to the environment (:issue:3171)

Bugfixes - 4.12.0
- ``--parallel-no-spinner`` flag now implies ``--parallel`` (:issue:`3158`)
Improved Documentation - 4.12.0
-Fix open an issue link in development.rst (:issue:3179)

Commits

8eaf09f release 4.12.1
37b11d4 #3165 fixed Tox failing with --installpkg and multi testenvs (#3186)
fa390ce [pre-commit.ci] pre-commit autoupdate (#3185)
3b403bc Fix tox version requirement in docs (#3184)
776718c release 4.12.0
fc80080 Always pass FORCE_COLOR & NO_COLOR to the environment (#3172)
659f714 Fix the CI (#3183)
8406971 [pre-commit.ci] pre-commit autoupdate (#3182)
3f8f53d [pre-commit.ci] pre-commit autoupdate (#3177)
61547b0 Fix 'open an issue' link in development.rst (#3179)
Additional commits viewable in compare view

Updates urllib3 from 2.0.7 to 2.1.0

Release notes

Sourced from urllib3's releases.

2.1.0

Read the v2 migration guide for help upgrading to the latest version of urllib3.

Removals

Removed support for the deprecated urllib3[secure] extra. (#2680)

Removed support for the deprecated SecureTransport TLS implementation. (#2681)

Removed support for the end-of-life Python 3.7. (#3143)

Bugfixes

Allowed loading CA certificates from memory for proxies. (#3065)

Fixed decoding Gzip-encoded responses which specified x-gzip content-encoding. (#3174)

Changelog

Sourced from urllib3's changelog.

2.1.0 (2023-11-13)

Read the v2 migration guide <https://urllib3.readthedocs.io/en/latest/v2-migration-guide.html>__ for help upgrading to the latest version of urllib3.

Removals

Removed support for the deprecated urllib3[secure] extra. ([#2680](https://github.com/urllib3/urllib3/issues/2680) <https://github.com/urllib3/urllib3/issues/2680>__)

Removed support for the deprecated SecureTransport TLS implementation. ([#2681](https://github.com/urllib3/urllib3/issues/2681) <https://github.com/urllib3/urllib3/issues/2681>__)

Removed support for the end-of-life Python 3.7. ([#3143](https://github.com/urllib3/urllib3/issues/3143) <https://github.com/urllib3/urllib3/issues/3143>__)

Bugfixes

Allowed loading CA certificates from memory for proxies. ([#3065](https://github.com/urllib3/urllib3/issues/3065) <https://github.com/urllib3/urllib3/issues/3065>__)

Fixed decoding Gzip-encoded responses which specified x-gzip content-encoding. ([#3174](https://github.com/urllib3/urllib3/issues/3174) <https://github.com/urllib3/urllib3/issues/3174>__)

Commits

69be299 Release 2.1.0
77f71d3 Mention myself in README
e601a0e Check _has_route within the test function (#3187)
f7cd7f3 Stop naming urllib3/requests tests "integration" (#3182)
6fc4260 Use more precise type checks
5fa8ea6 Fix lint on Python 3.12
8727683 Remove Sphinx version pin
5fc48e7 Treat x-gzip content encoding as gzip
ff764a0 Allow loading CA certificates from memory for proxies (#3150)
b99cc39 Replace deprecated set-output in GitHub Actions
Additional commits viewable in compare view

Updates boto3 from 1.33.6 to 1.34.29

Changelog

Sourced from boto3's changelog.

1.34.29

api-change:connect: [botocore] Update list and string length limits for predefined attributes.

api-change:inspector2: [botocore] This release adds ECR container image scanning based on their lastRecordedPullTime.

api-change:sagemaker: [botocore] Amazon SageMaker Automatic Model Tuning now provides an API to programmatically delete tuning jobs.

1.34.28

api-change:acm-pca: [botocore] AWS Private CA now supports an option to omit the CDP extension from issued certificates, when CRL revocation is enabled.

api-change:lightsail: [botocore] This release adds support for IPv6-only instance plans.

1.34.27

api-change:ec2: [botocore] Introduced a new clientToken request parameter on CreateNetworkAcl and CreateRouteTable APIs. The clientToken parameter allows idempotent operations on the APIs.

api-change:ecs: [botocore] Documentation updates for Amazon ECS.

api-change:outposts: [botocore] DeviceSerialNumber parameter is now optional in StartConnection API

api-change:rds: [botocore] This release adds support for Aurora Limitless Database.

api-change:storagegateway: [botocore] Add DeprecationDate and SoftwareVersion to response of ListGateways.

1.34.26

api-change:inspector2: [botocore] This release adds support for CIS scans on EC2 instances.

1.34.25

enhancement:documentation: [botocore] Updates the GitHub issue creation link in our README

1.34.24

api-change:appconfigdata: [botocore] Fix FIPS Endpoints in aws-us-gov.

api-change:cloud9: [botocore] Doc-only update around removing AL1 from list of available AMIs for Cloud9

api-change:cloudfront-keyvaluestore: [botocore] This release improves upon the DescribeKeyValueStore API by returning two additional fields, Status of the KeyValueStore and the FailureReason in case of failures during creation of KeyValueStore.

api-change:connectcases: [botocore] This release adds the ability to view audit history on a case and introduces a new parameter, performedBy, for CreateCase and UpdateCase API's.

api-change:ec2: [botocore] Documentation updates for Amazon EC2.

api-change:ecs: [botocore] This release adds support for Transport Layer Security (TLS) and Configurable Timeout to ECS Service Connect. TLS facilitates privacy and data security for inter-service communications, while Configurable Timeout allows customized per-request timeout and idle timeout for Service Connect services.

api-change:finspace: [botocore] Allow customer to set zip default through command line arguments.

api-change:organizations: [botocore] Doc only update for quota increase change

api-change:rds: [botocore] Introduced support for the InsufficientDBInstanceCapacityFault error in the RDS CreateDBCluster API method. This provides enhanced error handling, ensuring a more robust experience when creating database clusters with insufficient instance capacity.

api-change:endpoint-rules: [botocore] Update endpoint-rules client to latest version

... (truncated)

Commits

45be5e9 Merge branch 'release-1.34.29'
40e58d4 Bumping version to 1.34.29
c0f6375 Add changelog entries from botocore
8ef5c71 Minor GitHub workflow changes (#3998)
4ab369a Merge branch 'release-1.34.28'
038a03f Merge branch 'release-1.34.28' into develop
0053833 Bumping version to 1.34.28
8177fb0 Add changelog entries from botocore
f869e7a Merge branch 'release-1.34.27'
819c0c8 Merge branch 'release-1.34.27' into develop
Additional commits viewable in compare view

Updates botocore from 1.33.6 to 1.34.29

Changelog

Sourced from botocore's changelog.

1.34.29

api-change:connect: Update list and string length limits for predefined attributes.

api-change:inspector2: This release adds ECR container image scanning based on their lastRecordedPullTime.

api-change:sagemaker: Amazon SageMaker Automatic Model Tuning now provides an API to programmatically delete tuning jobs.

1.34.28

api-change:acm-pca: AWS Private CA now supports an option to omit the CDP extension from issued certificates, when CRL revocation is enabled.

api-change:lightsail: This release adds support for IPv6-only instance plans.

1.34.27

api-change:ec2: Introduced a new clientToken request parameter on CreateNetworkAcl and CreateRouteTable APIs. The clientToken parameter allows idempotent operations on the APIs.

api-change:ecs: Documentation updates for Amazon ECS.

api-change:outposts: DeviceSerialNumber parameter is now optional in StartConnection API

api-change:rds: This release adds support for Aurora Limitless Database.

api-change:storagegateway: Add DeprecationDate and SoftwareVersion to response of ListGateways.

1.34.26

api-change:inspector2: This release adds support for CIS scans on EC2 instances.

1.34.25

enhancement:documentation: Updates the GitHub issue creation link in our README

1.34.24

api-change:appconfigdata: Fix FIPS Endpoints in aws-us-gov.

api-change:cloud9: Doc-only update around removing AL1 from list of available AMIs for Cloud9

api-change:cloudfront-keyvaluestore: This release improves upon the DescribeKeyValueStore API by returning two additional fields, Status of the KeyValueStore and the FailureReason in case of failures during creation of KeyValueStore.

api-change:connectcases: This release adds the ability to view audit history on a case and introduces a new parameter, performedBy, for CreateCase and UpdateCase API's.

api-change:ec2: Documentation updates for Amazon EC2.

api-change:ecs: This release adds support for Transport Layer Security (TLS) and Configurable Timeout to ECS Service Connect. TLS facilitates privacy and data security for inter-service communications, while Configurable Timeout allows customized per-request timeout and idle timeout for Service Connect services.

api-change:finspace: Allow customer to set zip default through command line arguments.

api-change:organizations: Doc only update for quota increase change

api-change:rds: Introduced support for the InsufficientDBInstanceCapacityFault error in the RDS CreateDBCluster API method. This provides enhanced error handling, ensuring a more robust experience when creating database clusters with insufficient instance capacity.

api-change:endpoint-rules: Update endpoint-rules client to latest version

... (truncated)

Commits

535ecc3 Merge branch 'release-1.34.29'
56fd757 Bumping version to 1.34.29
cd526a7 Update to latest models
bd1d85b Minor GitHub workflow changes (#3104)
27b2aaa Merge branch 'release-1.34.28'
573510f Merge branch 'release-1.34.28' into develop
d24a5cc Bumping version to 1.34.28
0d0f0e0 Update to latest models
cadb988 Merge branch 'release-1.34.27'
e7c5b6a Merge branch 'release-1.34.27' into develop
Additional commits viewable in compare view

Updates flask from 3.0.0 to 3.0.1

Release notes

Sourced from flask's releases.

3.0.1

This is a fix release for the 3.0.x feature release branch.

Fixes an issue where using other JSON providers, such as flask-orjson, previously caused loaded session data to have an incorrect format in some cases.

Changes: https://flask.palletsprojects.com/en/3.0.x/changes/#version-3-0-1

Milestone: https://github.com/pallets/flask/milestone/32?closed=1

PyPI: https://pypi.org/project/Flask/3.0.1/

Changelog

Sourced from flask's changelog.

Version 3.0.1

Released 2024-01-18

Correct type for path argument to send_file. :issue:5230

Fix a typo in an error message for the flask run --key option. :pr:5344

Session data is untagged without relying on the built-in json.loads object_hook. This allows other JSON providers that don't implement that. :issue:5381

Address more type findings when using mypy strict mode. :pr:5383

Commits

f622b1c release version 3.0.1
5fcc999 fix create release action
da3a0dd fix slsa generator version
5e059be update actions versions
bae6ee8 address mypy strict findings (#5383)
81b3c85 update requirements
08d3185 update pre-commit hooks
6000e80 address mypy strict findings
5a48a0f untag without object_hook (#5382)
700fc7d untag without object_hook
Additional commits viewable in compare view

Updates greenlet from 3.0.1 to 3.0.3

Changelog

Sourced from greenlet's changelog.

3.0.3 (2023-12-21)

Python 3.12: Restore the full ability to walk the stack of a suspended greenlet; previously only the innermost frame was exposed. See issue 388 <https://github.com/python-greenlet/greenlet/issues/388>. Fix by Joshua Oreman in PR 393 <https://github.com/python-greenlet/greenlet/pull/393/>.

3.0.2 (2023-12-08)

Packaging: Add a minimal pyproject.toml to sdists.

Packaging: Various updates to macOS wheels.

Fix a test case on Arm32. Note that this is not a supported platform (there is no CI for it) and support is best effort; there may be other issues lurking. See issue 385 <https://github.com/python-greenlet/greenlet/issues/385>_

Commits

ea4bc27 Preparing release 3.0.3
7694880 Make doctests work on 3.7 again, which doesn't have importlib.
073b1e1 Linting. Add linting to CI.
9e73b59 Docs: Update from the old default theme to furo.
5f4b4bb Py3.12: Always expose greenlet frames on a switch.
13148f9 Update comment that was still referring to a different, less-robust approach ...
b5f9d23 Restore stack introspection ability on 3.12
edbdda2 Back to development: 3.0.3
719ea47 Preparing release 3.0.2
2c0793c Add change note about macOS wheels.
Additional commits viewable in compare view

Updates importlib-metadata from 7.0.0 to 7.0.1

Changelog

Sourced from importlib-metadata's changelog.

v7.0.1

Bugfixes

Corrected the interface for SimplePath to encompass the expectations of locate_file and PackagePath.

Fixed type annotations to allow strings.

Commits

f2e84e3 Finalize
e9e9f77 Merge commit '98196a'
98196a7 Fixed type annotations to allow strings.
f38e051 Add Python 3.13 to compatibility matrix. Ref python/cpython#113174.
0c1d32e Inline os.PathLike using future annotations.
b99c9d6 Refine SimplePath to allow for os.PathLike on input and SimplePath on output.
200cf45 Merge pull request #480 from python/bugfix/distribution-simplepath
ac243d3 Include _meta in docs to fix doc build failures.
1b3f272 Corrected the interface for SimplePath to encompass the expectations of locat...
fc4df51 Rely on read_text and read_bytes from located paths.
Additional commits viewable in compare view

Updates jinja2 from 3.1.2 to 3.1.3

Release notes

Sourced from jinja2's releases.

3.1.3

This is a fix release for the 3.1.x feature branch.

Fix for GHSA-h5c8-rqwp-cp95. You are affected if you are using xmlattr and passing user input as attribute keys.

Changes: https://jinja.palletsprojects.com/en/3.1.x/changes/#version-3-1-3

Milestone: https://github.com/pallets/jinja/milestone/15?closed=1

Changelog

Sourced from jinja2's changelog.

Version 3.1.3

Released 2024-01-10

Fix compiler error when checking if required blocks in parent templates are empty. :pr:1858

xmlattr filter does not allow keys with spaces. GHSA-h5c8-rqwp-cp95

Make error messages stemming from invalid nesting of {% trans %} blocks more helpful. :pr:1918

Commits

d9de4bb release version 3.1.3
50124e1 skip test pypi
9ea7222 use trusted publishing
da703f7 use trusted publishing
bce1746 use trusted publishing
7277d80 update pre-commit hooks
5c8a105 Make nested-trans-block exceptions nicer (#1918)
19a55db Make nested-trans-block exceptions nicer
7167953 Merge pull request from GHSA-h5c8-rqwp-cp95
7dd3680 xmlattr filter disallows keys with spaces
Additional commits viewable in compare view

Updates markupsafe from 2.1.3 to 2.1.4

Release notes

Sourced from markupsafe's releases.

2.1.4

This is a fix release for the 2.1.x feature release branch. It fixes bugs but does not otherwise change behavior and should not result in breaking changes.

Improves performance of the Markup.striptags method for large input.

Changes: https://markupsafe.palletsprojects.com/en/2.1.x/changes/#version-2-1-4

Milestone: https://github.com/pallets/markupsafe/milestone/11?closed=1

PyPI: https://pypi.org/project/MarkupSafe/2.1.4/

Changelog

Sourced from markupsafe's changelog.

Version 2.1.4

Released 2024-01-19

Don't use regular expressions for striptags, avoiding a performance issue. :pr:413

Commits

b7cd652 release version 2.1.4
3bead8e update cibuildwheel for 3.12 wheels
a24df39 improve striptags performance (#413)
750e22b improve striptags performance
4c397ef start version 2.1.4
bc0cb5c [pre-commit.ci] pre-commit autoupdate (#387)
35ab8a0 [pre-commit.ci] pre-commit autoupdate
f5a40c7 [pre-commit.ci] pre-commit autoupdate (#386)
8dd8dac [pre-commit.ci] pre-commit autoupdate
e2fd390 update dependencies
Additional commits viewable in compare view

Updates pydantic from 2.5.2 to 2.6.0

Release notes

Sourced from pydantic's releases.

v2.6.0 2024-01-29

v2.6.0 (2024-01-29)

GitHub release

The code released in v2.6.0 is practically identical to that of v2.6.0b1.

What's Changed

Packaging

Check for email-validator version >= 2.0 by @commonism in #6033

Upgrade ruff target version to Python 3.8 by @Elkiwa in #8341

Update to pydantic-extra-types==2.4.1 by @yezz123 in #8478

Update to pyright==1.1.345 by @Viicos in #8453

Update pydantic-core from 2.14.6 to 2.16.1, significant changes from these upda...
Description has been truncated

Bumps the all-dependencies group in /api with 22 updates: | Package | From | To | | --- | --- | --- | | [coverage](https://github.com/nedbat/coveragepy) | `7.3.2` | `7.4.1` | | [distlib](https://github.com/pypa/distlib) | `0.3.7` | `0.3.8` | | [identify](https://github.com/pre-commit/identify) | `2.5.32` | `2.5.33` | | [pluggy](https://github.com/pytest-dev/pluggy) | `1.3.0` | `1.4.0` | | [pre-commit](https://github.com/pre-commit/pre-commit) | `3.5.0` | `3.6.0` | | [pytest](https://github.com/pytest-dev/pytest) | `7.4.3` | `8.0.0` | | [tox](https://github.com/tox-dev/tox) | `4.11.4` | `4.12.1` | | [urllib3](https://github.com/urllib3/urllib3) | `2.0.7` | `2.1.0` | | [boto3](https://github.com/boto/boto3) | `1.33.6` | `1.34.29` | | [botocore](https://github.com/boto/botocore) | `1.33.6` | `1.34.29` | | [flask](https://github.com/pallets/flask) | `3.0.0` | `3.0.1` | | [greenlet](https://github.com/python-greenlet/greenlet) | `3.0.1` | `3.0.3` | | [importlib-metadata](https://github.com/python/importlib_metadata) | `7.0.0` | `7.0.1` | | [jinja2](https://github.com/pallets/jinja) | `3.1.2` | `3.1.3` | | [markupsafe](https://github.com/pallets/markupsafe) | `2.1.3` | `2.1.4` | | [pydantic](https://github.com/pydantic/pydantic) | `2.5.2` | `2.6.0` | | [pydantic-core](https://github.com/pydantic/pydantic-core) | `2.14.5` | `2.16.1` | | [pytz](https://github.com/stub42/pytz) | `2023.3.post1` | `2023.4` | | [s3transfer](https://github.com/boto/s3transfer) | `0.8.2` | `0.10.0` | | [sqlalchemy](https://github.com/sqlalchemy/sqlalchemy) | `2.0.23` | `2.0.25` | | [typing-extensions](https://github.com/python/typing_extensions) | `4.8.0` | `4.9.0` | | [pip](https://github.com/pypa/pip) | `23.3.1` | `23.3.2` | Updates `coverage` from 7.3.2 to 7.4.1 - [Release notes](https://github.com/nedbat/coveragepy/releases) - [Changelog](https://github.com/nedbat/coveragepy/blob/master/CHANGES.rst) - [Commits](nedbat/coveragepy@7.3.2...7.4.1) Updates `distlib` from 0.3.7 to 0.3.8 - [Release notes](https://github.com/pypa/distlib/releases) - [Changelog](https://github.com/pypa/distlib/blob/master/CHANGES.rst) - [Commits](pypa/distlib@0.3.7...0.3.8) Updates `identify` from 2.5.32 to 2.5.33 - [Commits](pre-commit/identify@v2.5.32...v2.5.33) Updates `pluggy` from 1.3.0 to 1.4.0 - [Changelog](https://github.com/pytest-dev/pluggy/blob/main/CHANGELOG.rst) - [Commits](pytest-dev/pluggy@1.3.0...1.4.0) Updates `pre-commit` from 3.5.0 to 3.6.0 - [Release notes](https://github.com/pre-commit/pre-commit/releases) - [Changelog](https://github.com/pre-commit/pre-commit/blob/main/CHANGELOG.md) - [Commits](pre-commit/pre-commit@v3.5.0...v3.6.0) Updates `pytest` from 7.4.3 to 8.0.0 - [Release notes](https://github.com/pytest-dev/pytest/releases) - [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst) - [Commits](pytest-dev/pytest@7.4.3...8.0.0) Updates `tox` from 4.11.4 to 4.12.1 - [Release notes](https://github.com/tox-dev/tox/releases) - [Changelog](https://github.com/tox-dev/tox/blob/main/docs/changelog.rst) - [Commits](tox-dev/tox@4.11.4...4.12.1) Updates `urllib3` from 2.0.7 to 2.1.0 - [Release notes](https://github.com/urllib3/urllib3/releases) - [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst) - [Commits](urllib3/urllib3@2.0.7...2.1.0) Updates `boto3` from 1.33.6 to 1.34.29 - [Release notes](https://github.com/boto/boto3/releases) - [Changelog](https://github.com/boto/boto3/blob/develop/CHANGELOG.rst) - [Commits](boto/boto3@1.33.6...1.34.29) Updates `botocore` from 1.33.6 to 1.34.29 - [Changelog](https://github.com/boto/botocore/blob/develop/CHANGELOG.rst) - [Commits](boto/botocore@1.33.6...1.34.29) Updates `flask` from 3.0.0 to 3.0.1 - [Release notes](https://github.com/pallets/flask/releases) - [Changelog](https://github.com/pallets/flask/blob/main/CHANGES.rst) - [Commits](pallets/flask@3.0.0...3.0.1) Updates `greenlet` from 3.0.1 to 3.0.3 - [Changelog](https://github.com/python-greenlet/greenlet/blob/master/CHANGES.rst) - [Commits](python-greenlet/greenlet@3.0.1...3.0.3) Updates `importlib-metadata` from 7.0.0 to 7.0.1 - [Release notes](https://github.com/python/importlib_metadata/releases) - [Changelog](https://github.com/python/importlib_metadata/blob/main/NEWS.rst) - [Commits](python/importlib_metadata@v7.0.0...v7.0.1) Updates `jinja2` from 3.1.2 to 3.1.3 - [Release notes](https://github.com/pallets/jinja/releases) - [Changelog](https://github.com/pallets/jinja/blob/main/CHANGES.rst) - [Commits](pallets/jinja@3.1.2...3.1.3) Updates `markupsafe` from 2.1.3 to 2.1.4 - [Release notes](https://github.com/pallets/markupsafe/releases) - [Changelog](https://github.com/pallets/markupsafe/blob/main/CHANGES.rst) - [Commits](pallets/markupsafe@2.1.3...2.1.4) Updates `pydantic` from 2.5.2 to 2.6.0 - [Release notes](https://github.com/pydantic/pydantic/releases) - [Changelog](https://github.com/pydantic/pydantic/blob/main/HISTORY.md) - [Commits](pydantic/pydantic@v2.5.2...v2.6.0) Updates `pydantic-core` from 2.14.5 to 2.16.1 - [Release notes](https://github.com/pydantic/pydantic-core/releases) - [Commits](pydantic/pydantic-core@v2.14.5...v2.16.1) Updates `pytz` from 2023.3.post1 to 2023.4 - [Commits](stub42/pytz@release_2023.3.post1...release_2023.4) Updates `s3transfer` from 0.8.2 to 0.10.0 - [Changelog](https://github.com/boto/s3transfer/blob/develop/CHANGELOG.rst) - [Commits](boto/s3transfer@0.8.2...0.10.0) Updates `sqlalchemy` from 2.0.23 to 2.0.25 - [Release notes](https://github.com/sqlalchemy/sqlalchemy/releases) - [Changelog](https://github.com/sqlalchemy/sqlalchemy/blob/main/CHANGES.rst) - [Commits](https://github.com/sqlalchemy/sqlalchemy/commits) Updates `typing-extensions` from 4.8.0 to 4.9.0 - [Release notes](https://github.com/python/typing_extensions/releases) - [Changelog](https://github.com/python/typing_extensions/blob/main/CHANGELOG.md) - [Commits](python/typing_extensions@4.8.0...4.9.0) Updates `pip` from 23.3.1 to 23.3.2 - [Changelog](https://github.com/pypa/pip/blob/main/NEWS.rst) - [Commits](pypa/pip@23.3.1...23.3.2) --- updated-dependencies: - dependency-name: coverage dependency-type: direct:development update-type: version-update:semver-minor dependency-group: all-dependencies - dependency-name: distlib dependency-type: direct:development update-type: version-update:semver-patch dependency-group: all-dependencies - dependency-name: identify dependency-type: direct:development update-type: version-update:semver-patch dependency-group: all-dependencies - dependency-name: pluggy dependency-type: direct:development update-type: version-update:semver-minor dependency-group: all-dependencies - dependency-name: pre-commit dependency-type: direct:development update-type: version-update:semver-minor dependency-group: all-dependencies - dependency-name: pytest dependency-type: direct:development update-type: version-update:semver-major dependency-group: all-dependencies - dependency-name: tox dependency-type: direct:development update-type: version-update:semver-minor dependency-group: all-dependencies - dependency-name: urllib3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-dependencies - dependency-name: boto3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-dependencies - dependency-name: botocore dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-dependencies - dependency-name: flask dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-dependencies - dependency-name: greenlet dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-dependencies - dependency-name: importlib-metadata dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-dependencies - dependency-name: jinja2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-dependencies - dependency-name: markupsafe dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-dependencies - dependency-name: pydantic dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-dependencies - dependency-name: pydantic-core dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-dependencies - dependency-name: pytz dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-dependencies - dependency-name: s3transfer dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-dependencies - dependency-name: sqlalchemy dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-dependencies - dependency-name: typing-extensions dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-dependencies - dependency-name: pip dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-dependencies ... Signed-off-by: dependabot[bot] <[email protected]>

dependabot · 2024-02-05T18:32:54Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Jan 29, 2024

dependabot bot closed this Feb 5, 2024

dependabot bot deleted the dependabot/pip/api/all-dependencies-3243022526 branch February 5, 2024 18:32

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump the all-dependencies group in /api with 22 updates #341

Bump the all-dependencies group in /api with 22 updates #341

dependabot bot commented on behalf of github Jan 29, 2024 •

edited

Loading

v4.12.0 (2024-01-11)

dependabot bot commented on behalf of github Feb 5, 2024

Bump the all-dependencies group in /api with 22 updates #341

Bump the all-dependencies group in /api with 22 updates #341

Conversation

dependabot bot commented on behalf of github Jan 29, 2024 • edited Loading

Version 7.4.1 — 2024-01-26

Version 7.4.0 — 2023-12-27

Version 7.3.4 — 2023-12-20

Version 7.3.3 — 2023-12-14

pluggy 1.4.0 (2024-01-24)

Features

Bug Fixes

pre-commit v3.6.0

Features

Fixes

Updating

3.6.0 - 2023-12-09

Features

Fixes

Updating

pytest 8.0.0 (2024-01-27)

Bug Fixes

8.0.0rc2

pytest 8.0.0rc2 (2024-01-17)

Improvements

Bug Fixes

pytest 8.0.0rc1 (2023-12-30)

Breaking Changes

Old Deprecations Are Now Errors

4.12.1

What's Changed

New Contributors

4.12.0

What's Changed

New Contributors

v4.12.1 (2024-01-16)

v4.12.0 (2024-01-11)

2.1.0

Removals

Bugfixes

2.1.0 (2023-11-13)

Removals

Bugfixes

1.34.29

1.34.28

1.34.27

1.34.26

1.34.25

1.34.24

1.34.29

1.34.28

1.34.27

1.34.26

1.34.25

1.34.24

3.0.1

Version 3.0.1

3.0.3 (2023-12-21)

3.0.2 (2023-12-08)

v7.0.1

Bugfixes

3.1.3

Version 3.1.3

2.1.4

Version 2.1.4

v2.6.0 2024-01-29

v2.6.0 (2024-01-29)

What's Changed

Packaging

dependabot bot commented on behalf of github Feb 5, 2024

dependabot bot commented on behalf of github Jan 29, 2024 •

edited

Loading