Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump the pip-minor-and-patch group across 1 directory with 9 updates #904

Closed

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Nov 4, 2024

Bumps the pip-minor-and-patch group with 9 updates in the /src directory:

Package From To
azure-identity 1.17.1 1.19.0
django-cors-headers 4.4.0 4.6.0
orjson 3.10.7 3.10.11
sentry-sdk 2.14.0 2.18.0
whitenoise 6.7.0 6.8.2
black 24.8.0 24.10.0
ruff 0.6.8 0.7.2
termcolor 2.4.0 2.5.0
tomli 2.0.1 2.0.2

Updates azure-identity from 1.17.1 to 1.19.0

Release notes

Sourced from azure-identity's releases.

azure-identity_1.19.0

1.19.0 (2024-10-08)

Bugs Fixed

  • Fixed the request sent in AzurePipelinesCredential so it doesn't result in a redirect response when an invalid system access token is provided. (#37510)

Other Changes

  • Deprecated AzureAuthorityHosts.AZURE_GERMANY
Commits

Updates django-cors-headers from 4.4.0 to 4.6.0

Changelog

Sourced from django-cors-headers's changelog.

4.6.0 (2024-10-29)

  • Drop Django 3.2 to 4.1 support.

4.5.0 (2024-10-12)

  • Drop Python 3.8 support.

  • Support Python 3.13.

Commits

Updates orjson from 3.10.7 to 3.10.11

Release notes

Sourced from orjson's releases.

3.10.11

Changed

  • Improve performance of UUIDs.
  • Publish PyPI wheels with trusted publishing and PEP 740 attestations.
  • Include text of licenses for vendored dependencies.

3.10.10

Fixed

  • Fix int serialization on s390x. This was introduced in 3.10.8.

Changed

  • Publish aarch64 manylinux_2_17 wheel for 3.13 to PyPI.

3.10.9

Fixed

  • Fix int serialization on 32-bit Python 3.8, 3.9, 3.10. This was introduced in 3.10.8.

3.10.8

Changed

  • int serialization no longer chains OverflowError to the the __cause__ attribute of orjson.JSONEncodeError when range exceeded.
  • Compatibility with CPython 3.14 alpha 1.
  • Improve performance.
Changelog

Sourced from orjson's changelog.

3.10.11

Changed

  • Improve performance of UUIDs.
  • Publish PyPI wheels with trusted publishing and PEP 740 attestations.
  • Include text of licenses for vendored dependencies.

3.10.10

Fixed

  • Fix int serialization on s390x. This was introduced in 3.10.8.

Changed

  • Publish aarch64 manylinux_2_17 wheel for 3.13 to PyPI.

3.10.9

Fixed

  • Fix int serialization on 32-bit Python 3.8, 3.9, 3.10. This was introduced in 3.10.8.

3.10.8

Changed

  • int serialization no longer chains OverflowError to the the __cause__ attribute of orjson.JSONEncodeError when range exceeded.
  • Compatibility with CPython 3.14 alpha 1.
  • Improve performance.
Commits

Updates sentry-sdk from 2.14.0 to 2.18.0

Release notes

Sourced from sentry-sdk's releases.

2.18.0

Various fixes & improvements

2.17.0

Various fixes & improvements

2.16.0

Integrations

  • Bottle: Add failed_request_status_codes (#3618) by @​szokeasaurusrex

    You can now define a set of integers that will determine which status codes should be reported to Sentry.

... (truncated)

Changelog

Sourced from sentry-sdk's changelog.

2.18.0

Various fixes & improvements

2.17.0

Various fixes & improvements

2.16.0

Integrations

... (truncated)

Commits

Updates whitenoise from 6.7.0 to 6.8.2

Changelog

Sourced from whitenoise's changelog.

6.8.2 (2024-10-29)

  • Fix compression speed gains for the thread pool when running Django’s collectstatic. The thread pool had no effect due to use of a generator for the results, a refactoring introduced when reviewing the initial PR.

    Thanks to Petr Přikryl for the investigation and fix in PR [#616](https://github.com/evansd/whitenoise/issues/616) <https://github.com/evansd/whitenoise/pull/616>__.

6.8.1 (2024-10-28)

  • Raise any errors from threads in the whitenoise.compress command.

    Regression in 6.8.0. Thanks to Tom Grainger for the spotting this with a comment on PR [#484](https://github.com/evansd/whitenoise/issues/484) <https://github.com/evansd/whitenoise/pull/484#discussion_r1818989096>__.

6.8.0 (2024-10-28)

  • Drop Django 3.2 to 4.1 support.

  • Drop Python 3.8 support.

  • Support Python 3.13.

  • Fix a bug introduced in version 6.0.0 where Range requests could lead to database connection errors in other requests.

    Thanks to Per Myren for the detailed investigation and fix in PR [#612](https://github.com/evansd/whitenoise/issues/612) <https://github.com/evansd/whitenoise/pull/612>__.

  • Use Django’s |FORCE_SCRIPT_NAME|__ setting correctly. This reverts a change from version 5.3.0 that added a call to Django’s |get_script_prefix() method|__ outside of the request-response cycle.

    .. |FORCE_SCRIPT_NAME| replace:: FORCE_SCRIPT_NAME __ https://docs.djangoproject.com/en/stable/ref/settings/#std:setting-FORCE_SCRIPT_NAME

    .. |get_script_prefix() method| replace:: get_script_prefix() method __ https://docs.djangoproject.com/en/stable/ref/urlresolvers/#django.urls.get_script_prefix

    Thanks to Sarah Boyce in PR [#486](https://github.com/evansd/whitenoise/issues/486) <https://github.com/evansd/whitenoise/pull/486>__.

  • Compress files using a thread pool. This speeds up the compression step up to four times in benchmarks.

    Thanks to Anthony Ricaud in PR [#484](https://github.com/evansd/whitenoise/issues/484) <https://github.com/evansd/whitenoise/pull/484>__.

Commits

Updates black from 24.8.0 to 24.10.0

Release notes

Sourced from black's releases.

24.10.0

Highlights

  • Black is now officially tested with Python 3.13 and provides Python 3.13 mypyc-compiled wheels. (#4436) (#4449)
  • Black will issue an error when used with Python 3.12.5, due to an upstream memory safety issue in Python 3.12.5 that can cause Black's AST safety checks to fail. Please use Python 3.12.6 or Python 3.12.4 instead. (#4447)
  • Black no longer supports running with Python 3.8 (#4452)

Stable style

  • Fix crashes involving comments in parenthesised return types or X | Y style unions. (#4453)
  • Fix skipping Jupyter cells with unknown %% magic (#4462)

Preview style

  • Fix type annotation spacing between * and more complex type variable tuple (i.e. def fn(*args: *tuple[*Ts, T]) -> None: pass) (#4440)

Caching

  • Fix bug where the cache was shared between runs with and without --unstable (#4466)

Packaging

  • Upgrade version of mypyc used to 1.12 beta (#4450) (#4449)
  • blackd now requires a newer version of aiohttp. (#4451)

Output

  • Added Python target version information on parse error (#4378)
  • Add information about Black version to internal error messages (#4457)
Changelog

Sourced from black's changelog.

24.10.0

Highlights

  • Black is now officially tested with Python 3.13 and provides Python 3.13 mypyc-compiled wheels. (#4436) (#4449)
  • Black will issue an error when used with Python 3.12.5, due to an upstream memory safety issue in Python 3.12.5 that can cause Black's AST safety checks to fail. Please use Python 3.12.6 or Python 3.12.4 instead. (#4447)
  • Black no longer supports running with Python 3.8 (#4452)

Stable style

  • Fix crashes involving comments in parenthesised return types or X | Y style unions. (#4453)
  • Fix skipping Jupyter cells with unknown %% magic (#4462)

Preview style

  • Fix type annotation spacing between * and more complex type variable tuple (i.e. def fn(*args: *tuple[*Ts, T]) -> None: pass) (#4440)

Caching

  • Fix bug where the cache was shared between runs with and without --unstable (#4466)

Packaging

  • Upgrade version of mypyc used to 1.12 beta (#4450) (#4449)
  • blackd now requires a newer version of aiohttp. (#4451)

Output

  • Added Python target version information on parse error (#4378)
  • Add information about Black version to internal error messages (#4457)
Commits

Updates ruff from 0.6.8 to 0.7.2

Release notes

Sourced from ruff's releases.

0.7.2

Release Notes

Preview features

  • Fix formatting of single with-item with trailing comment (#14005)
  • [pyupgrade] Add PEP 646 Unpack conversion to * with fix (UP044) (#13988)

Rule changes

  • Regenerate known_stdlibs.rs with stdlibs 2024.10.25 (#13963)
  • [flake8-no-pep420] Skip namespace package enforcement for PEP 723 scripts (INP001) (#13974)

Server

  • Fix server panic when undoing an edit (#14010)

Bug fixes

  • Fix issues in discovering ruff in pip build environments (#13881)
  • [flake8-type-checking] Fix false positive for singledispatchmethod (TCH003) (#13941)
  • [flake8-type-checking] Treat return type of singledispatch as runtime-required (TCH003) (#13957)

Documentation

  • [flake8-simplify] Include caveats of enabling if-else-block-instead-of-if-exp (SIM108) (#14019)

Install ruff 0.7.2

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://github.com/astral-sh/ruff/releases/download/0.7.2/ruff-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy ByPass -c "irm https://github.com/astral-sh/ruff/releases/download/0.7.2/ruff-installer.ps1 | iex"

Download ruff 0.7.2

File Platform Checksum
ruff-aarch64-apple-darwin.tar.gz Apple Silicon macOS checksum
ruff-x86_64-apple-darwin.tar.gz Intel macOS checksum
ruff-aarch64-pc-windows-msvc.zip ARM64 Windows checksum
ruff-i686-pc-windows-msvc.zip x86 Windows checksum
ruff-x86_64-pc-windows-msvc.zip x64 Windows checksum

... (truncated)

Changelog

Sourced from ruff's changelog.

0.7.2

Preview features

  • Fix formatting of single with-item with trailing comment (#14005)
  • [pyupgrade] Add PEP 646 Unpack conversion to * with fix (UP044) (#13988)

Rule changes

  • Regenerate known_stdlibs.rs with stdlibs 2024.10.25 (#13963)
  • [flake8-no-pep420] Skip namespace package enforcement for PEP 723 scripts (INP001) (#13974)

Server

  • Fix server panic when undoing an edit (#14010)

Bug fixes

  • Fix issues in discovering ruff in pip build environments (#13881)
  • [flake8-type-checking] Fix false positive for singledispatchmethod (TCH003) (#13941)
  • [flake8-type-checking] Treat return type of singledispatch as runtime-required (TCH003) (#13957)

Documentation

  • [flake8-simplify] Include caveats of enabling if-else-block-instead-of-if-exp (SIM108) (#14019)

0.7.1

Preview features

  • Fix E221 and E222 to flag missing or extra whitespace around == operator (#13890)
  • Formatter: Alternate quotes for strings inside f-strings in preview (#13860)
  • Formatter: Join implicit concatenated strings when they fit on a line (#13663)
  • [pylint] Restrict iteration-over-set to only work on sets of literals (PLC0208) (#13731)

Rule changes

  • [flake8-type-checking] Support auto-quoting when annotations contain quotes (#11811)

Server

  • Avoid indexing the workspace for single-file mode (#13770)

Bug fixes

  • Make ARG002 compatible with EM101 when raising NotImplementedError (#13714)

Other changes

  • Introduce more Docker tags for Ruff (similar to uv) (#13274)

... (truncated)

Commits

Updates termcolor from 2.4.0 to 2.5.0

Release notes

Sourced from termcolor's releases.

Release 2.5.0

Added

Changed

Commits

Updates tomli from 2.0.1 to 2.0.2

Changelog

Sourced from tomli's changelog.

2.0.2

  • Removed
    • Python 3.7 support
  • Improved
    • Make loads raise TypeError not AttributeError on bad input types that do not have the replace attribute. Improve error message when bytes is received.
  • Type annotations
    • Type annotate load input as typing.IO[bytes] (previously typing.BinaryIO).
Commits
  • 3ec6775 Bump version: 2.0.1 → 2.0.2
  • 1dcd317 Add v2.0.2 changelog
  • c94ee69 Fix GitHub Actions badge
  • 4e245a4 tomli.loads: Raise TypeError not AttributeError. Improve message (#229)
  • facdab0 Update pre-commit. Remove docformatter
  • a613867 Use sys.version_info in compatibility layer (#220)
  • 39eff9b Add support for Python 3.12, drop EOL 3.7 (#224)
  • 0054e60 [pre-commit.ci] pre-commit autoupdate (#208)
  • 1bd3345 Test against Python 3.12-dev
  • 5646e69 Type annotate as IO[bytes], not BinaryIO
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the pip-minor-and-patch group with 9 updates in the /src directory:

| Package | From | To |
| --- | --- | --- |
| [azure-identity](https://github.com/Azure/azure-sdk-for-python) | `1.17.1` | `1.19.0` |
| [django-cors-headers](https://github.com/adamchainz/django-cors-headers) | `4.4.0` | `4.6.0` |
| [orjson](https://github.com/ijl/orjson) | `3.10.7` | `3.10.11` |
| [sentry-sdk](https://github.com/getsentry/sentry-python) | `2.14.0` | `2.18.0` |
| [whitenoise](https://github.com/evansd/whitenoise) | `6.7.0` | `6.8.2` |
| [black](https://github.com/psf/black) | `24.8.0` | `24.10.0` |
| [ruff](https://github.com/astral-sh/ruff) | `0.6.8` | `0.7.2` |
| [termcolor](https://github.com/termcolor/termcolor) | `2.4.0` | `2.5.0` |
| [tomli](https://github.com/hukkin/tomli) | `2.0.1` | `2.0.2` |



Updates `azure-identity` from 1.17.1 to 1.19.0
- [Release notes](https://github.com/Azure/azure-sdk-for-python/releases)
- [Changelog](https://github.com/Azure/azure-sdk-for-python/blob/main/doc/esrp_release.md)
- [Commits](Azure/azure-sdk-for-python@azure-identity_1.17.1...azure-identity_1.19.0)

Updates `django-cors-headers` from 4.4.0 to 4.6.0
- [Changelog](https://github.com/adamchainz/django-cors-headers/blob/main/CHANGELOG.rst)
- [Commits](adamchainz/django-cors-headers@4.4.0...4.6.0)

Updates `orjson` from 3.10.7 to 3.10.11
- [Release notes](https://github.com/ijl/orjson/releases)
- [Changelog](https://github.com/ijl/orjson/blob/master/CHANGELOG.md)
- [Commits](ijl/orjson@3.10.7...3.10.11)

Updates `sentry-sdk` from 2.14.0 to 2.18.0
- [Release notes](https://github.com/getsentry/sentry-python/releases)
- [Changelog](https://github.com/getsentry/sentry-python/blob/master/CHANGELOG.md)
- [Commits](getsentry/sentry-python@2.14.0...2.18.0)

Updates `whitenoise` from 6.7.0 to 6.8.2
- [Changelog](https://github.com/evansd/whitenoise/blob/main/docs/changelog.rst)
- [Commits](evansd/whitenoise@6.7.0...6.8.2)

Updates `black` from 24.8.0 to 24.10.0
- [Release notes](https://github.com/psf/black/releases)
- [Changelog](https://github.com/psf/black/blob/main/CHANGES.md)
- [Commits](psf/black@24.8.0...24.10.0)

Updates `ruff` from 0.6.8 to 0.7.2
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.6.8...0.7.2)

Updates `termcolor` from 2.4.0 to 2.5.0
- [Release notes](https://github.com/termcolor/termcolor/releases)
- [Changelog](https://github.com/termcolor/termcolor/blob/main/CHANGES.md)
- [Commits](termcolor/termcolor@2.4.0...2.5.0)

Updates `tomli` from 2.0.1 to 2.0.2
- [Changelog](https://github.com/hukkin/tomli/blob/master/CHANGELOG.md)
- [Commits](hukkin/tomli@2.0.1...2.0.2)

---
updated-dependencies:
- dependency-name: azure-identity
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pip-minor-and-patch
- dependency-name: django-cors-headers
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pip-minor-and-patch
- dependency-name: orjson
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: pip-minor-and-patch
- dependency-name: sentry-sdk
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pip-minor-and-patch
- dependency-name: whitenoise
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pip-minor-and-patch
- dependency-name: black
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: pip-minor-and-patch
- dependency-name: ruff
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: pip-minor-and-patch
- dependency-name: termcolor
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: pip-minor-and-patch
- dependency-name: tomli
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: pip-minor-and-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Nov 4, 2024
@vdboor
Copy link
Contributor

vdboor commented Nov 7, 2024

See #905

@vdboor vdboor closed this Nov 7, 2024
Copy link
Contributor Author

dependabot bot commented on behalf of github Nov 7, 2024

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

@dependabot dependabot bot deleted the dependabot/pip/src/pip-minor-and-patch-5b65e787b7 branch November 7, 2024 15:59
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file python Pull requests that update Python code
Development

Successfully merging this pull request may close these issues.

1 participant