chore(deps): lock file maintenance vulnfeeds #2562
Merged
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
v1.10.0
->v1.11.0
v1.13.1
->v1.14.0
v1.7.4
->v1.8.4
v0.2.4
->v0.3.0
1.22.5-alpine
->1.23.1-alpine
fc45aab
->701f63a
==0.11.6
->==0.13.1
==2.1.3
->==2.2.2
3.2.5
->3.2.7
==2.8.2
->==2.9.0.post0
🔧 This Pull Request updates lock files to use the latest dependency versions.
Release Notes
google/osv-scanner (github.com/google/osv-scanner)
v1.8.4
Compare Source
Features:
--upgrade-config
flag for configuring allowed upgrades on a per-package basis. Also hide & deprecate previous--disallow-major-upgrades
and--disallow-package-upgrades
flags.Fixes:
Misc:
v1.8.3
Compare Source
Features:
Fixes:
semantic
is passed a validmodels.Ecosystem
.Misc:
v1.8.2
Compare Source
Features:
Fixes:
--experimental-local-db
.package
exists inaffected
property.v1.8.1
Compare Source
Features:
OSV-Scanner now scans transitive dependencies in Maven
pom.xml
files!See our documentation for more information.
The
osv-scanner.toml
configuration file can now filter specific packages with new[[PackageOverrides]]
sections:[[PackageOverrides]]
v1.8.0
Compare Source
Features:
OSV-Scanner now scans transitive dependencies in Maven
pom.xml
files!See our documentation for more information.
The
osv-scanner.toml
configuration file can now filter specific packages with new[[PackageOverrides]]
sections:[[PackageOverrides]]
sethvargo/go-retry (github.com/sethvargo/go-retry)
v0.3.0
Compare Source
What's Changed
Full Changelog: sethvargo/go-retry@v0.2.4...v0.3.0
matthewwithanm/python-markdownify (markdownify)
v0.13.1
Compare Source
What's Changed
Full Changelog: matthewwithanm/python-markdownify@0.13.0...0.13.1
v0.13.0
Compare Source
What's Changed
<code>
/<pre>
conversion by @jsm28 in https://github.com/matthewwithanm/python-markdownify/pull/117<sub>
/<sup>
by @jsm28 in https://github.com/matthewwithanm/python-markdownify/pull/119New Contributors
Full Changelog: matthewwithanm/python-markdownify@0.12.1...0.13.0
v0.12.1
: Fix wrong versionCompare Source
pandas-dev/pandas (pandas)
v2.2.2
Compare Source
v2.2.1
: Pandas 2.2.1Compare Source
We are pleased to announce the release of pandas 2.2.1.
This release includes some new features, bug fixes, and performance improvements. We recommend that all users upgrade to this version.
See the full whatsnew for a list of all the changes.
Pandas 2.2.1 supports Python 3.9 and higher.
The release will be available on the defaults and conda-forge channels:
Or via PyPI:
Please report any issues with the release on the pandas issue tracker.
Thanks to all the contributors who made this release possible.
v2.2.0
Compare Source
v2.1.4
: Pandas 2.1.4Compare Source
This is a patch release in the 2.1.x series and includes some regression and bug fixes, and a security fix. We recommend that all users upgrade to this version.
See the full whatsnew for a list of all the changes.
The release will be available on the defaults and conda-forge channels:
Or via PyPI:
Please report any issues with the release on the pandas issue tracker.
Thanks to all the contributors who made this release possible.
pylint-dev/pylint (pylint)
v3.2.7
Compare Source
What's new in Pylint 3.2.7?
Release date: 2024-08-31
False Positives Fixed
Fixed a false positive
unreachable
forNoReturn
coroutine functions.Closes #9840
Other Bug Fixes
Fix crash in refactoring checker when calling a lambda bound as a method.
Closes #9865
Fix a crash in
undefined-loop-variable
when providing theiterable
argument toenumerate()
.Closes #9875
Fix to address indeterminacy of error message in case a module name is same as another in a separate namespace.
Refs #9883
v3.2.6
Compare Source
What's new in Pylint 3.2.6?
Release date: 2024-07-21
False Positives Fixed
Quiet false positives for
unexpected-keyword-arg
when pylint cannotdetermine which of two or more dynamically defined classes is being instantiated.
Closes #9672
Fix a false positive for
missing-param-doc
where a method which is decorated withtyping.overload
was expected to have a docstring specifying its parameters.Closes #9739
Fix a regression that raised
invalid-name
on class attributes merelyoverriding invalid names from an ancestor.
Closes #9765
Treat
assert_never()
the same way when imported fromtyping_extensions
.Closes #9780
Fix a false positive for
consider-using-min-max-builtin
when the assignment target is an attribute.Refs #9800
Other Bug Fixes
Fix an
AssertionError
arising from properties that return partial functions.Closes #9214
Fix a crash when a subclass extends
__slots__
.Closes #9814
dateutil/dateutil (python-dateutil)
v2.9.0.post0
Compare Source
Version 2.9.0.post0 (2024-03-01)
Bugfixes
setuptools_scm
to<8
, which should make the generated_version.py
file compatible with all supported versions of Python.v2.9.0
Compare Source
Version 2.9.0 (2024-02-29)
Data updates
Features
dateutil
submodules lazily imported using PEP 562. On Python 3.7+, things likeimport dateutil; dateutil.tz.gettz("America/New_York")
will now work without explicitly importingdateutil.tz
, with the import occurring behind the scenes on first use. The old behavior remains on Python 3.6 and earlier. Fixed by Orson Adams. (gh issue #771, gh pr #1007)Bugfixes
datetime.utcfromtimestamp
, which is deprecated as of Python 3.12. Reported by Hugo van Kemenade (gh pr #1284), fixed by Thomas Grainger (gh pr #1285).Documentation changes
Configuration
📅 Schedule: Branch creation - "before 6am on wednesday" in timezone Australia/Sydney, Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.