Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump the python-root group across 1 directory with 7 updates #1188

Closed
wants to merge 1 commit into from

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Nov 25, 2024

Bumps the python-root group with 7 updates in the / directory:

Package From To
flake8 3.8.4 7.1.1
isort 5.7.0 5.13.2
build 0.3.0 1.2.2.post1
twine 3.3.0 5.1.1
wheel 0.38.1 0.45.1
setuptools 70.0.0 75.6.0
protobuf 3.20.2 5.28.3

Updates flake8 from 3.8.4 to 7.1.1

Commits

Updates isort from 5.7.0 to 5.13.2

Release notes

Sourced from isort's releases.

5.13.2

Changes

🪲 Fixes

5.13.1

Changes

  • Fix integration tests (#2208) @​bp72
  • Added a fix for normalizing imports from more than one level of parent modules (issue/2152) (#2191) @​bp72

🪲 Fixes

5.13.0

Changes

🔥 Removals and Deprecations

📦 Dependencies

... (truncated)

Changelog

Sourced from isort's changelog.

5.13.2 December 13 2023

5.13.1 December 11 2023

5.13.0 December 9 2023

5.12.0 January 28 2023

  • Removed support for Python 3.7
  • Fixed incompatiblity with latest poetry version
  • Added support for directory limitations within built in git hook

5.11.5 January 30 2023 [hotfix]

  • Fixed incompatiblity with latest poetry version

5.11.4 December 21 2022

  • Fixed #2038 (again): stop installing documentation files to top-level site-packages (#2057) @​mgorny

... (truncated)

Commits
  • c655831 Merge pull request #2214 from PyCQA/version/5.13.2
  • b4335b4 Prepare version 5.13.2
  • c36e43c Merge pull request #2184 from bp72/issue/2154
  • e38702f Merge pull request #2213 from davidculley/confine-precommit-to-stages
  • ee8d87f Add fix for the error found by hypothesis
  • 5849ec2 Apply the bracket fix from issue 471 only for use_parentheses=True
  • df0e119 confine pre-commit to stages
  • 9255bca Merge pull request #2212 from PyCQA/bugfix/#2211-colors-extra
  • 5336d7d Fix colors extras
  • 643d9c4 Merge pull request #2210 from PyCQA/version/5.13.1
  • Additional commits viewable in compare view

Updates build from 0.3.0 to 1.2.2.post1

Release notes

Sourced from build's releases.

1.2.2.post1

This release only makes metadata (Python 3.13 classifier), docs, and test suite changes.

What's Changed

New Contributors

Full Changelog: pypa/build@1.2.2...1.2.2.post1

Version 1.2.2

What's Changed

  • Add editable to builder.get_requries_for_build's static types (PR #764, fixes issue #763)
  • Include artifact attestations in our release (PR #782)
  • Fix typing compatibility with typed pyproject-hooks (PR #788)
  • Mark more tests with network (PR #808)
  • Add more intersphinx links to docs (PR #804)
  • Make uv optional for tests (PR #807 and #813)

New Contributors

Full Changelog: pypa/build@1.2.1...1.2.2

Version 1.2.1

What's Changed

  • Avoid error when terminal width is undetectable on Python < 3.11 (PR #761)

... (truncated)

Changelog

Sourced from build's changelog.

+++++++++ Changelog +++++++++

1.2.2 (2024-09-06)

  • Add editable to builder.get_requries_for_build's static types (PR :pr:764, fixes issue :issue:763)
  • Include artifact attestations in our release (PR :pr:782)
  • Fix typing compatibility with typed pyproject-hooks (PR :pr:788)
  • Mark more tests with network (PR :pr:808)
  • Add more intersphinx links to docs (PR :pr:804)
  • Make uv optional for tests (PR :pr:807 and :pr:813)

1.2.1 (2024-03-28)

  • Avoid error when terminal width is undetectable on Python < 3.11 (PR :pr:761)

1.2.0 (2024-03-27)

  • Add --installer option, supporting pip and uv. Added uv extra. (PR :pr:751)
  • Improve console output and provide -v for dependency installation (PR :pr:749)
  • Avoid compiling unused bytecode when using pip (PR :pr:752)
  • Dropped support for Python 3.7 (PR :pr:743)

1.1.1 (2024-02-29)

  • Fixed invoking outer pip from user site packages (PR :pr:746, fixes issue :issue:745)
  • Corrected the minimum pip version required to use an outer pip (PR :pr:746, fixes issue :issue:745)

1.1.0 (2024-02-29)

... (truncated)

Commits

Updates twine from 3.3.0 to 5.1.1

Release notes

Sourced from twine's releases.

Release v5.1.1

No release notes provided.

5.1.0

No release notes provided.

5.0.0

No release notes provided.

4.0.2

https://pypi.org/project/twine/4.0.2/

Changelog

4.0.1

https://pypi.org/project/twine/4.0.1/

Changelog

4.0.0

https://pypi.org/project/twine/4.0.0/

Changelog

3.8.0

https://pypi.org/project/twine/3.8.0/

Changelog

3.7.1

https://pypi.org/project/twine/3.7.1/

Changelog

3.7.0

https://pypi.org/project/twine/3.7.0/

Changelog

3.6.0

https://pypi.org/project/twine/3.6.0/

Changelog

3.5.0

https://pypi.org/project/twine/3.5.0/

Changelog

3.4.2

... (truncated)

Changelog

Sourced from twine's changelog.

Twine 5.1.1 (2024-06-26)

Bugfixes ^^^^^^^^

  • Resolve DeprecationWarnings when extracting twine metadata. ([#1115](https://github.com/pypa/twine/issues/1115) <https://github.com/pypa/twine/issues/1115>_)

  • Fix bug for Repository URLs with auth where the port was lost. When attempting to prevent printing authentication credentials in URLs provided with username and password, we did not properly handle the case where the URL also contains a port (when reconstructing the URL). This is now handled and tested to ensure no regressions. (#fix-repo-urls-with-auth-and-port <https://github.com/pypa/twine/issues/fix-repo-urls-with-auth-and-port>_)

Twine 5.1.0 (2024-05-15)

Features ^^^^^^^^

  • Add the experimental --attestations flag. ([#1095](https://github.com/pypa/twine/issues/1095) <https://github.com/pypa/twine/issues/1095>_)

Twine 5.1.0 (2024-05-15)

Misc ^^^^

  • [#1104](https://github.com/pypa/twine/issues/1104) <https://github.com/pypa/twine/issues/1104>_

Twine 5.0.0 (2024-02-10)

Bugfixes ^^^^^^^^

  • Use email.message instead of cgi as cgi has been deprecated ([#969](https://github.com/pypa/twine/issues/969) <https://github.com/pypa/twine/issues/969>_)

Features ^^^^^^^^

  • Remove support for usernames other than __token__ when uploading to PyPI and TestPyPI ([#1040](https://github.com/pypa/twine/issues/1040) <https://github.com/pypa/twine/issues/1040>_)

Misc ^^^^

  • [#931](https://github.com/pypa/twine/issues/931) <https://github.com/pypa/twine/issues/931>, [#991](https://github.com/pypa/twine/issues/991) <https://github.com/pypa/twine/issues/991>, [#1028](https://github.com/pypa/twine/issues/1028) <https://github.com/pypa/twine/issues/1028>_

... (truncated)

Commits
  • e29791d Prepare for v5.1.1 (#1114)
  • f213ede fix: Retrieve metadata correctly from importlib_metadata (#1115)
  • 6fbf880 Merge pull request #1112 from pypa/bug/1111
  • 3eb9121 Remove extra line from changelog entry
  • 0191f0c Preserve ports when munging repository URLs
  • c588793 Merge pull request #1110 from DimitriPapadopoulos/principle
  • 1fdc197 Fix a couple typos
  • 13b07b6 Merge pull request #1109 from pypa/dependabot/github_actions/actions/checkout...
  • a3e8373 build(deps): bump actions/checkout from 4.1.5 to 4.1.6
  • e9f70cf Merge pull request #1108 from pypa/fix-release-workflow
  • Additional commits viewable in compare view

Updates wheel from 0.38.1 to 0.45.1

Release notes

Sourced from wheel's releases.

0.45.1

  • Fixed pure Python wheels converted from eggs and wininst files having the ABI tag in the file name

0.45.0

  • Refactored the convert command to not need setuptools to be installed

  • Don't configure setuptools logging unless running bdist_wheel

  • Added a redirection from wheel.bdist_wheel.bdist_wheel to setuptools.command.bdist_wheel.bdist_wheel to improve compatibility with setuptools' latest fixes.

    Projects are still advised to migrate away from the deprecated module and import the setuptools' implementation explicitly. (PR by @​abravalheri)

0.44.0

  • Canonicalized requirements in METADATA file (PR by Wim Jeantine-Glenn)
  • Deprecated the bdist_wheel module, as the code was migrated to setuptools itself

0.43.0

  • Dropped support for Python 3.7
  • Updated vendored packaging to 24.0

0.42.0

  • Allowed removing build tag with wheel tags --build ""
  • Fixed wheel pack and wheel tags writing updated WHEEL fields after a blank line, causing other tools to ignore them
  • Fixed wheel pack and wheel tags writing WHEEL with CRLF line endings or a mix of CRLF and LF
  • Fixed wheel pack --build-number "" not removing build tag from WHEEL (above changes by Benjamin Gilbert)

0.41.3

  • Updated vendored packaging to 23.2
  • Fixed ABI tag generation for CPython 3.13a1 on Windows (PR by Sam Gross)
Changelog

Sourced from wheel's changelog.

Release Notes

0.45.1 (2024-11-23)

  • Fixed pure Python wheels converted from eggs and wininst files having the ABI tag in the file name

0.45.0 (2024-11-08)

  • Refactored the convert command to not need setuptools to be installed

  • Don't configure setuptools logging unless running bdist_wheel

  • Added a redirection from wheel.bdist_wheel.bdist_wheel to setuptools.command.bdist_wheel.bdist_wheel to improve compatibility with setuptools' latest fixes.

    Projects are still advised to migrate away from the deprecated module and import the setuptools' implementation explicitly. (PR by @​abravalheri)

0.44.0 (2024-08-04)

  • Canonicalized requirements in METADATA file (PR by Wim Jeantine-Glenn)
  • Deprecated the bdist_wheel module, as the code was migrated to setuptools itself

0.43.0 (2024-03-11)

  • Dropped support for Python 3.7
  • Updated vendored packaging to 24.0

0.42.0 (2023-11-26)

  • Allowed removing build tag with wheel tags --build ""
  • Fixed wheel pack and wheel tags writing updated WHEEL fields after a blank line, causing other tools to ignore them
  • Fixed wheel pack and wheel tags writing WHEEL with CRLF line endings or a mix of CRLF and LF
  • Fixed wheel pack --build-number "" not removing build tag from WHEEL (above changes by Benjamin Gilbert)

0.41.3 (2023-10-30)

  • Updated vendored packaging to 23.2
  • Fixed ABI tag generation for CPython 3.13a1 on Windows (PR by Sam Gross)

0.41.2 (2023-08-22)

  • Fixed platform tag detection for GraalPy and 32-bit python running on an aarch64 kernel (PR by Matthieu Darbois)
  • Fixed wheel tags to not list directories in RECORD files

... (truncated)

Commits
  • 7855525 Created a new release
  • d343391 Fixed wrong wheel file names in converted pure-Python eggs/wininsts
  • d78f0e3 Created a new release
  • f064c69 Added license files for vendored packaging
  • 68387af Only configure setuptools logging if bdist_wheel is imported (#641)
  • c81f5c9 Refactored the wheel convert command to not require setuptools (#640)
  • e43464d Adjusted target Python versions in GitHub CI
  • e9894e7 Tweaked pytest settings to make the tracebacks easier to read
  • baf6bf8 Removed Cirrus CI configuration
  • 28c1ba1 Improved compatibility with future versions of setuptools (#638)
  • Additional commits viewable in compare view

Updates setuptools from 70.0.0 to 75.6.0

Changelog

Sourced from setuptools's changelog.

v75.6.0

Features

  • Preserve original PKG-INFO into METADATA when creating wheel (instead of calling wheel.metadata.pkginfo_to_metadata). This helps to be more compliant with the flow specified in PEP 517. (#4701)
  • Changed the WindowsSdkVersion, FrameworkVersion32 and FrameworkVersion64 properties of setuptools.msvc.PlatformInfo to return an empty tuple instead of None as a fallthrough case -- by :user:Avasam (#4754)

v75.5.0

Features

  • Removed support for SETUPTOOLS_DANGEROUSLY_SKIP_PYPROJECT_VALIDATION, as it is deemed prone to errors. (#4746)

v75.4.0

Features

  • Added support for the environment variable SETUPTOOLS_DANGEROUSLY_SKIP_PYPROJECT_VALIDATION=true, allowing users to bypass the validation of pyproject.toml. This option should be used only as a last resort when resolving dependency issues, as it may lead to improper functioning. Users who enable this setting are responsible for ensuring that pyproject.toml complies with setuptools requirements. (#4611)

    .. attention:: This environment variable was removed in a later version of setuptools.

  • Require Python 3.9 or later. (#4718)

  • Remove dependency on importlib_resources and the vendored copy of the library. Instead, setuptools consistently rely on stdlib's importlib.resources (available on Python 3.9+). (#4718)

  • Setuptools' bdist_wheel implementation no longer produces wheels with the m SOABI flag (pymalloc-related). This flag was removed on Python 3.8+ (see :obj:sys.abiflags). (#4718)

  • Updated vendored packaging version to 24.2. (#4740)

... (truncated)

Commits
  • bf2ced2 Bump version: 75.5.0 → 75.6.0
  • 8685c80 Empty tuple instead of None for PlatformInfo version properties fallthrough (...
  • 50d671b Rename news fragment
  • 2b471c2 Changed the WindowsSdkVersion, FrameworkVersion32 and ``FrameworkVers...
  • 2c77cd2 Runtime typing fixes for typeshed return type merge (#4753
  • 9a4c8d4 Runtime typing fixes for typeshed return type merge
  • e622859 Preserve original PKG-INFO contents when creating wheel (instead of calling...
  • 0b5b417 Mark tests that may depend on external network
  • a4fa01d Add news fragment
  • 089aca9 Ignore coverage in test code
  • Additional commits viewable in compare view

Updates protobuf from 3.20.2 to 5.28.3

Release notes

Sourced from protobuf's releases.

Protocol Buffers v3.20.3

Java

  • Refactoring java full runtime to reuse sub-message builders and prepare to migrate parsing logic from parse constructor to builder.
  • Move proto wireformat parsing functionality from the private "parsing constructor" to the Builder class.
  • Change the Lite runtime to prefer merging from the wireformat into mutable messages rather than building up a new immutable object before merging. This way results in fewer allocations and copy operations.
  • Make message-type extensions merge from wire-format instead of building up instances and merging afterwards. This has much better performance.
  • Fix TextFormat parser to build up recurring (but supposedly not repeated) sub-messages directly from text rather than building a new sub-message and merging the fully formed message into the existing field.
  • This release addresses a Security Advisory for Java users
Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot dependabot bot added Dependencies Updates a dependency Python Python language support labels Nov 25, 2024
Bumps the python-root group with 7 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [flake8](https://github.com/pycqa/flake8) | `3.8.4` | `7.1.1` |
| [isort](https://github.com/pycqa/isort) | `5.7.0` | `5.13.2` |
| [build](https://github.com/pypa/build) | `0.3.0` | `1.2.2.post1` |
| [twine](https://github.com/pypa/twine) | `3.3.0` | `5.1.1` |
| [wheel](https://github.com/pypa/wheel) | `0.38.1` | `0.45.1` |
| [setuptools](https://github.com/pypa/setuptools) | `70.0.0` | `75.6.0` |
| [protobuf](https://github.com/protocolbuffers/protobuf) | `3.20.2` | `5.28.3` |



Updates `flake8` from 3.8.4 to 7.1.1
- [Commits](PyCQA/flake8@3.8.4...7.1.1)

Updates `isort` from 5.7.0 to 5.13.2
- [Release notes](https://github.com/pycqa/isort/releases)
- [Changelog](https://github.com/PyCQA/isort/blob/main/CHANGELOG.md)
- [Commits](PyCQA/isort@5.7.0...5.13.2)

Updates `build` from 0.3.0 to 1.2.2.post1
- [Release notes](https://github.com/pypa/build/releases)
- [Changelog](https://github.com/pypa/build/blob/main/CHANGELOG.rst)
- [Commits](pypa/build@0.3.0...1.2.2.post1)

Updates `twine` from 3.3.0 to 5.1.1
- [Release notes](https://github.com/pypa/twine/releases)
- [Changelog](https://github.com/pypa/twine/blob/main/docs/changelog.rst)
- [Commits](pypa/twine@3.3.0...v5.1.1)

Updates `wheel` from 0.38.1 to 0.45.1
- [Release notes](https://github.com/pypa/wheel/releases)
- [Changelog](https://github.com/pypa/wheel/blob/main/docs/news.rst)
- [Commits](pypa/wheel@0.38.1...0.45.1)

Updates `setuptools` from 70.0.0 to 75.6.0
- [Release notes](https://github.com/pypa/setuptools/releases)
- [Changelog](https://github.com/pypa/setuptools/blob/main/NEWS.rst)
- [Commits](pypa/setuptools@v70.0.0...v75.6.0)

Updates `protobuf` from 3.20.2 to 5.28.3
- [Release notes](https://github.com/protocolbuffers/protobuf/releases)
- [Changelog](https://github.com/protocolbuffers/protobuf/blob/main/protobuf_release.bzl)
- [Commits](protocolbuffers/protobuf@v3.20.2...v5.28.3)

---
updated-dependencies:
- dependency-name: flake8
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: python-root
- dependency-name: isort
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-root
- dependency-name: build
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: python-root
- dependency-name: twine
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: python-root
- dependency-name: wheel
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-root
- dependency-name: setuptools
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: python-root
- dependency-name: protobuf
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: python-root
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot force-pushed the dependabot/pip/python-root-69396b6654 branch from a6ac0e7 to 5513efe Compare November 26, 2024 17:30
Copy link
Contributor Author

dependabot bot commented on behalf of github Dec 2, 2024

Superseded by #1191.

@dependabot dependabot bot closed this Dec 2, 2024
@dependabot dependabot bot deleted the dependabot/pip/python-root-69396b6654 branch December 2, 2024 12:52
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Dependencies Updates a dependency Python Python language support
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants