From 86d5371264b443221d49ac0052b2e1d5b103a07f Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 24 Dec 2024 10:38:54 +0000 Subject: [PATCH 1/8] Bump identify from 2.6.1 to 2.6.3 (#10225) Bumps [identify](https://github.com/pre-commit/identify) from 2.6.1 to 2.6.3.
Commits

[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=identify&package-manager=pip&previous-version=2.6.1&new-version=2.6.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) ---
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> --- requirements/constraints.txt | 2 +- requirements/dev.txt | 2 +- requirements/lint.txt | 2 +- 3 files changed, 3 insertions(+), 3 deletions(-) diff --git a/requirements/constraints.txt b/requirements/constraints.txt index 2403a8312df..2d1b4c1ce7b 100644 --- a/requirements/constraints.txt +++ b/requirements/constraints.txt @@ -83,7 +83,7 @@ gidgethub==5.3.0 # via cherry-picker gunicorn==23.0.0 # via -r requirements/base.in -identify==2.6.1 +identify==2.6.3 # via pre-commit idna==3.6 # via diff --git a/requirements/dev.txt b/requirements/dev.txt index 3c3516e9cc9..5e8cd2c4686 100644 --- a/requirements/dev.txt +++ b/requirements/dev.txt @@ -81,7 +81,7 @@ gidgethub==5.3.0 # via cherry-picker gunicorn==23.0.0 # via -r requirements/base.in -identify==2.6.1 +identify==2.6.3 # via pre-commit idna==3.6 # via diff --git a/requirements/lint.txt b/requirements/lint.txt index a5b34afb7e0..0caa392324b 100644 --- a/requirements/lint.txt +++ b/requirements/lint.txt @@ -37,7 +37,7 @@ filelock==3.16.1 # virtualenv freezegun==1.5.1 # via -r requirements/lint.in -identify==2.6.1 +identify==2.6.3 # via pre-commit idna==3.7 # via From 5100eb537d7637f8909ee661416e6814338ae28b Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 24 Dec 2024 10:57:52 +0000 Subject: [PATCH 2/8] Bump tomli from 2.0.2 to 2.2.1 (#10226) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Bumps [tomli](https://github.com/hukkin/tomli) from 2.0.2 to 2.2.1.
Changelog

Sourced from tomli's changelog.

2.2.1

  • Fixed
    • Don't attempt to compile binary wheels for Python 3.8, 3.9 and 3.10 where cibuildwheel depends on a conflicting Tomli version

2.2.0

  • Added
    • mypyc generated binary wheels for common platforms

2.1.0

  • Deprecated
    • Instantiating TOMLDecodeError with free-form arguments. msg, doc and pos arguments should be given.
  • Added
    • msg, doc, pos, lineno and colno attributes to TOMLDecodeError
Commits

[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=tomli&package-manager=pip&previous-version=2.0.2&new-version=2.2.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) ---
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> --- requirements/constraints.txt | 2 +- requirements/dev.txt | 2 +- requirements/doc-spelling.txt | 2 +- requirements/doc.txt | 2 +- requirements/lint.txt | 2 +- requirements/test.txt | 2 +- 6 files changed, 6 insertions(+), 6 deletions(-) diff --git a/requirements/constraints.txt b/requirements/constraints.txt index 2d1b4c1ce7b..e5376391c42 100644 --- a/requirements/constraints.txt +++ b/requirements/constraints.txt @@ -232,7 +232,7 @@ sphinxcontrib-spelling==8.0.1 ; platform_system != "Windows" # via -r requirements/doc-spelling.in sphinxcontrib-towncrier==0.4.0a0 # via -r requirements/doc.in -tomli==2.0.2 +tomli==2.2.1 # via # build # cherry-picker diff --git a/requirements/dev.txt b/requirements/dev.txt index 5e8cd2c4686..d623d248777 100644 --- a/requirements/dev.txt +++ b/requirements/dev.txt @@ -223,7 +223,7 @@ sphinxcontrib-serializinghtml==2.0.0 # via sphinx sphinxcontrib-towncrier==0.4.0a0 # via -r requirements/doc.in -tomli==2.0.2 +tomli==2.2.1 # via # build # cherry-picker diff --git a/requirements/doc-spelling.txt b/requirements/doc-spelling.txt index 6a555c3ba77..9777d8ead0c 100644 --- a/requirements/doc-spelling.txt +++ b/requirements/doc-spelling.txt @@ -63,7 +63,7 @@ sphinxcontrib-spelling==8.0.1 ; platform_system != "Windows" # via -r requirements/doc-spelling.in sphinxcontrib-towncrier==0.4.0a0 # via -r requirements/doc.in -tomli==2.0.2 +tomli==2.2.1 # via # incremental # sphinx diff --git a/requirements/doc.txt b/requirements/doc.txt index 76c52295692..f6ac7a5287d 100644 --- a/requirements/doc.txt +++ b/requirements/doc.txt @@ -56,7 +56,7 @@ sphinxcontrib-serializinghtml==2.0.0 # via sphinx sphinxcontrib-towncrier==0.4.0a0 # via -r requirements/doc.in -tomli==2.0.2 +tomli==2.2.1 # via # incremental # sphinx diff --git a/requirements/lint.txt b/requirements/lint.txt index 0caa392324b..8fe79d1d22a 100644 --- a/requirements/lint.txt +++ b/requirements/lint.txt @@ -102,7 +102,7 @@ six==1.17.0 # via python-dateutil slotscheck==0.19.1 # via -r requirements/lint.in -tomli==2.0.2 +tomli==2.2.1 # via # mypy # pytest diff --git a/requirements/test.txt b/requirements/test.txt index c7931d3429c..c3b466cfc1f 100644 --- a/requirements/test.txt +++ b/requirements/test.txt @@ -121,7 +121,7 @@ shellingham==1.5.4 # via typer six==1.17.0 # via python-dateutil -tomli==2.0.2 +tomli==2.2.1 # via # coverage # mypy From 6f941772b8d6ec0c1ce0282af7689e3756a571e3 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 24 Dec 2024 10:58:25 +0000 Subject: [PATCH 3/8] Bump wait-for-it from 2.2.2 to 2.3.0 (#10227) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Bumps [wait-for-it](https://github.com/hartwork/wait-for-it) from 2.2.2 to 2.3.0.
Release notes

Sourced from wait-for-it's releases.

2.3.0

What's Changed

Full Changelog: https://github.com/hartwork/wait-for-it/compare/v2.2.2...v2.3.0

Commits
  • 6ba15ad Merge pull request #6 from hartwork/prepare-release
  • 902a160 Bump version to 2.3.0
  • b04be12 Merge pull request #5 from hartwork/drop-python-3-8-and-add-3-13
  • 42d90ee Drop end-of-life Python 3.8 and add Python 3.13
  • 3c95b9a Merge pull request #4 from hartwork/try-fixing-readthedocs-yml
  • 2fa50ba .readthedocs.yml: First try at fixing the Read the Docs build
  • cbffb59 Merge pull request #3 from hartwork/new-project-home
  • ff7a582 Apply new project home
  • cea7d83 setup.py: Extend author info
  • c3bb7c5 Stop GitHub Dependabot from requesting explicit review
  • Additional commits viewable in compare view

[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=wait-for-it&package-manager=pip&previous-version=2.2.2&new-version=2.3.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) ---
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> --- requirements/constraints.txt | 2 +- requirements/dev.txt | 2 +- requirements/test.txt | 2 +- 3 files changed, 3 insertions(+), 3 deletions(-) diff --git a/requirements/constraints.txt b/requirements/constraints.txt index e5376391c42..d85942adc69 100644 --- a/requirements/constraints.txt +++ b/requirements/constraints.txt @@ -277,7 +277,7 @@ valkey==6.0.2 # via -r requirements/lint.in virtualenv==20.28.0 # via pre-commit -wait-for-it==2.2.2 +wait-for-it==2.3.0 # via -r requirements/test.in wheel==0.44.0 # via pip-tools diff --git a/requirements/dev.txt b/requirements/dev.txt index d623d248777..838b5b8a6e6 100644 --- a/requirements/dev.txt +++ b/requirements/dev.txt @@ -268,7 +268,7 @@ valkey==6.0.2 # via -r requirements/lint.in virtualenv==20.28.0 # via pre-commit -wait-for-it==2.2.2 +wait-for-it==2.3.0 # via -r requirements/test.in wheel==0.44.0 # via pip-tools diff --git a/requirements/test.txt b/requirements/test.txt index c3b466cfc1f..5e6f58566da 100644 --- a/requirements/test.txt +++ b/requirements/test.txt @@ -145,7 +145,7 @@ urllib3==2.3.0 # via requests uvloop==0.21.0 ; platform_system != "Windows" and implementation_name == "cpython" # via -r requirements/base.in -wait-for-it==2.2.2 +wait-for-it==2.3.0 # via -r requirements/test.in yarl==1.18.3 # via -r requirements/runtime-deps.in From cbca681f45bf88a0457e38f43099824f8e410be1 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 24 Dec 2024 10:58:32 +0000 Subject: [PATCH 4/8] Bump propcache from 0.2.0 to 0.2.1 (#10228) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Bumps [propcache](https://github.com/aio-libs/propcache) from 0.2.0 to 0.2.1.
Release notes

Sourced from propcache's releases.

0.2.1

Bug fixes

  • Stopped implicitly allowing the use of Cython pre-release versions when building the distribution package -- by :user:ajsanchezsanz and :user:markgreene74.

    Related commits on GitHub: :commit:64df0a6.

  • Fixed wrapped and func not being accessible in the Cython versions of :func:propcache.api.cached_property and :func:propcache.api.under_cached_property decorators -- by :user:bdraco.

    Related issues and pull requests on GitHub: #72.

Removals and backward incompatible breaking changes

  • Removed support for Python 3.8 as it has reached end of life -- by :user:bdraco.

    Related issues and pull requests on GitHub: #57.

Packaging updates and notes for downstreams

  • Stopped implicitly allowing the use of Cython pre-release versions when building the distribution package -- by :user:ajsanchezsanz and :user:markgreene74.

    Related commits on GitHub: :commit:64df0a6.

Changelog

Sourced from propcache's changelog.

0.2.1

(2024-12-01)

Bug fixes

  • Stopped implicitly allowing the use of Cython pre-release versions when building the distribution package -- by :user:ajsanchezsanz and :user:markgreene74.

    Related commits on GitHub: :commit:64df0a6.

  • Fixed wrapped and func not being accessible in the Cython versions of :func:propcache.api.cached_property and :func:propcache.api.under_cached_property decorators -- by :user:bdraco.

    Related issues and pull requests on GitHub: :issue:72.

Removals and backward incompatible breaking changes

  • Removed support for Python 3.8 as it has reached end of life -- by :user:bdraco.

    Related issues and pull requests on GitHub: :issue:57.

Packaging updates and notes for downstreams

  • Stopped implicitly allowing the use of Cython pre-release versions when building the distribution package -- by :user:ajsanchezsanz and :user:markgreene74.

    Related commits on GitHub: :commit:64df0a6.

Commits
  • 24fd58a Split wheel builds to disable manylinux armv7l wheels (#76)
  • 08091df Fix wheel builds when cffi needs to be built from source (#75)
  • b0a554f Release 0.2.1 (#74)
  • 4c94388 Fix codecov upload (#73)
  • 2514c3f Ensure wrapped function is accessible in Cython versions (#72)
  • cf8aab9 Bump pypa/cibuildwheel from 2.21.3 to 2.22.0 (#71)
  • ef6af70 Cleanup mypy config for codspeed (#67)
  • d6980a7 🧪 Exclude requirements/ from pytest discovery
  • 57eb5ae 🧪 Fail test jobs on Codecov upload problems
  • 6222b01 🧪 Declare a packaging flag @ codecov
  • Additional commits viewable in compare view

[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=propcache&package-manager=pip&previous-version=0.2.0&new-version=0.2.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) ---
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> --- requirements/base.txt | 2 +- requirements/constraints.txt | 2 +- requirements/dev.txt | 2 +- requirements/runtime-deps.txt | 2 +- requirements/test.txt | 2 +- 5 files changed, 5 insertions(+), 5 deletions(-) diff --git a/requirements/base.txt b/requirements/base.txt index dbef368efa0..1acfbc04287 100644 --- a/requirements/base.txt +++ b/requirements/base.txt @@ -30,7 +30,7 @@ multidict==6.1.0 # yarl packaging==24.2 # via gunicorn -propcache==0.2.0 +propcache==0.2.1 # via # -r requirements/runtime-deps.in # yarl diff --git a/requirements/constraints.txt b/requirements/constraints.txt index d85942adc69..6d8fa038e2a 100644 --- a/requirements/constraints.txt +++ b/requirements/constraints.txt @@ -133,7 +133,7 @@ pluggy==1.5.0 # via pytest pre-commit==3.5.0 # via -r requirements/lint.in -propcache==0.2.0 +propcache==0.2.1 # via # -r requirements/runtime-deps.in # yarl diff --git a/requirements/dev.txt b/requirements/dev.txt index 838b5b8a6e6..f35e7374d4a 100644 --- a/requirements/dev.txt +++ b/requirements/dev.txt @@ -130,7 +130,7 @@ pluggy==1.5.0 # via pytest pre-commit==3.5.0 # via -r requirements/lint.in -propcache==0.2.0 +propcache==0.2.1 # via # -r requirements/runtime-deps.in # yarl diff --git a/requirements/runtime-deps.txt b/requirements/runtime-deps.txt index 53e931b291a..7904535f1d8 100644 --- a/requirements/runtime-deps.txt +++ b/requirements/runtime-deps.txt @@ -26,7 +26,7 @@ multidict==6.1.0 # via # -r requirements/runtime-deps.in # yarl -propcache==0.2.0 +propcache==0.2.1 # via # -r requirements/runtime-deps.in # yarl diff --git a/requirements/test.txt b/requirements/test.txt index 5e6f58566da..d36b049be24 100644 --- a/requirements/test.txt +++ b/requirements/test.txt @@ -74,7 +74,7 @@ packaging==24.2 # pytest pluggy==1.5.0 # via pytest -propcache==0.2.0 +propcache==0.2.1 # via # -r requirements/runtime-deps.in # yarl From db25d04852e3785b962804c548731cab42f0e55a Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 24 Dec 2024 10:58:50 +0000 Subject: [PATCH 5/8] Bump docutils from 0.20.1 to 0.21.2 (#10229) Bumps [docutils](https://docutils.sourceforge.io) from 0.20.1 to 0.21.2. [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=docutils&package-manager=pip&previous-version=0.20.1&new-version=0.21.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) ---
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> --- requirements/constraints.txt | 2 +- requirements/dev.txt | 2 +- requirements/doc-spelling.txt | 2 +- requirements/doc.txt | 2 +- 4 files changed, 4 insertions(+), 4 deletions(-) diff --git a/requirements/constraints.txt b/requirements/constraints.txt index 6d8fa038e2a..c307c0fb519 100644 --- a/requirements/constraints.txt +++ b/requirements/constraints.txt @@ -61,7 +61,7 @@ cython==3.0.11 # via -r requirements/cython.in distlib==0.3.9 # via virtualenv -docutils==0.20.1 +docutils==0.21.2 # via sphinx exceptiongroup==1.2.2 # via pytest diff --git a/requirements/dev.txt b/requirements/dev.txt index f35e7374d4a..6eefaa68033 100644 --- a/requirements/dev.txt +++ b/requirements/dev.txt @@ -59,7 +59,7 @@ cryptography==43.0.3 # trustme distlib==0.3.9 # via virtualenv -docutils==0.20.1 +docutils==0.21.2 # via sphinx exceptiongroup==1.2.2 # via pytest diff --git a/requirements/doc-spelling.txt b/requirements/doc-spelling.txt index 9777d8ead0c..cd4457eecf8 100644 --- a/requirements/doc-spelling.txt +++ b/requirements/doc-spelling.txt @@ -16,7 +16,7 @@ charset-normalizer==3.4.0 # via requests click==8.1.8 # via towncrier -docutils==0.20.1 +docutils==0.21.2 # via sphinx idna==3.6 # via requests diff --git a/requirements/doc.txt b/requirements/doc.txt index f6ac7a5287d..394fd3cf90c 100644 --- a/requirements/doc.txt +++ b/requirements/doc.txt @@ -16,7 +16,7 @@ charset-normalizer==3.4.0 # via requests click==8.1.8 # via towncrier -docutils==0.20.1 +docutils==0.21.2 # via sphinx idna==3.6 # via requests From 6940115ad856e9b342377dabb64d17117feb9939 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 24 Dec 2024 11:43:52 +0000 Subject: [PATCH 6/8] Bump wheel from 0.44.0 to 0.45.1 (#10231) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Bumps [wheel](https://github.com/pypa/wheel) from 0.44.0 to 0.45.1.
Release notes

Sourced from wheel's releases.

0.45.1

  • Fixed pure Python wheels converted from eggs and wininst files having the ABI tag in the file name

0.45.0

  • Refactored the convert command to not need setuptools to be installed

  • Don't configure setuptools logging unless running bdist_wheel

  • Added a redirection from wheel.bdist_wheel.bdist_wheel to setuptools.command.bdist_wheel.bdist_wheel to improve compatibility with setuptools' latest fixes.

    Projects are still advised to migrate away from the deprecated module and import the setuptools' implementation explicitly. (PR by @​abravalheri)

Changelog

Sourced from wheel's changelog.

Release Notes

0.45.1 (2024-11-23)

  • Fixed pure Python wheels converted from eggs and wininst files having the ABI tag in the file name

0.45.0 (2024-11-08)

  • Refactored the convert command to not need setuptools to be installed

  • Don't configure setuptools logging unless running bdist_wheel

  • Added a redirection from wheel.bdist_wheel.bdist_wheel to setuptools.command.bdist_wheel.bdist_wheel to improve compatibility with setuptools' latest fixes.

    Projects are still advised to migrate away from the deprecated module and import the setuptools' implementation explicitly. (PR by @​abravalheri)

0.44.0 (2024-08-04)

  • Canonicalized requirements in METADATA file (PR by Wim Jeantine-Glenn)
  • Deprecated the bdist_wheel module, as the code was migrated to setuptools itself

0.43.0 (2024-03-11)

  • Dropped support for Python 3.7
  • Updated vendored packaging to 24.0

0.42.0 (2023-11-26)

  • Allowed removing build tag with wheel tags --build ""
  • Fixed wheel pack and wheel tags writing updated WHEEL fields after a blank line, causing other tools to ignore them
  • Fixed wheel pack and wheel tags writing WHEEL with CRLF line endings or a mix of CRLF and LF
  • Fixed wheel pack --build-number "" not removing build tag from WHEEL (above changes by Benjamin Gilbert)

0.41.3 (2023-10-30)

  • Updated vendored packaging to 23.2
  • Fixed ABI tag generation for CPython 3.13a1 on Windows (PR by Sam Gross)

0.41.2 (2023-08-22)

  • Fixed platform tag detection for GraalPy and 32-bit python running on an aarch64 kernel (PR by Matthieu Darbois)
  • Fixed wheel tags to not list directories in RECORD files

... (truncated)

Commits
  • 7855525 Created a new release
  • d343391 Fixed wrong wheel file names in converted pure-Python eggs/wininsts
  • d78f0e3 Created a new release
  • f064c69 Added license files for vendored packaging
  • 68387af Only configure setuptools logging if bdist_wheel is imported (#641)
  • c81f5c9 Refactored the wheel convert command to not require setuptools (#640)
  • e43464d Adjusted target Python versions in GitHub CI
  • e9894e7 Tweaked pytest settings to make the tracebacks easier to read
  • baf6bf8 Removed Cirrus CI configuration
  • 28c1ba1 Improved compatibility with future versions of setuptools (#638)
  • Additional commits viewable in compare view

[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=wheel&package-manager=pip&previous-version=0.44.0&new-version=0.45.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) ---
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> --- requirements/constraints.txt | 2 +- requirements/dev.txt | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/requirements/constraints.txt b/requirements/constraints.txt index c307c0fb519..ea4753263d6 100644 --- a/requirements/constraints.txt +++ b/requirements/constraints.txt @@ -279,7 +279,7 @@ virtualenv==20.28.0 # via pre-commit wait-for-it==2.3.0 # via -r requirements/test.in -wheel==0.44.0 +wheel==0.45.1 # via pip-tools yarl==1.18.3 # via -r requirements/runtime-deps.in diff --git a/requirements/dev.txt b/requirements/dev.txt index 6eefaa68033..e1eec311f60 100644 --- a/requirements/dev.txt +++ b/requirements/dev.txt @@ -270,7 +270,7 @@ virtualenv==20.28.0 # via pre-commit wait-for-it==2.3.0 # via -r requirements/test.in -wheel==0.44.0 +wheel==0.45.1 # via pip-tools yarl==1.18.3 # via -r requirements/runtime-deps.in From 41d0f00a1407ee0dc0cfab88dc1da54c25c0eac9 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 24 Dec 2024 11:53:27 +0000 Subject: [PATCH 7/8] Bump cherry-picker from 2.2.0 to 2.4.0 (#10230) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Bumps [cherry-picker](https://github.com/python/cherry-picker) from 2.2.0 to 2.4.0.
Release notes

Sourced from cherry-picker's releases.

cherry-picker-v2.4.0

What's Changed

Full Changelog: https://github.com/python/cherry-picker/compare/cherry-picker-v2.3.0...cherry-picker-v2.4.0

cherry-picker v2.3.0

What's Changed

New Contributors

Full Changelog: https://github.com/python/cherry-picker/compare/cherry-picker-v2.0.0...cherry-picker-v2.3.0

Changelog

Sourced from cherry-picker's changelog.

2.4.0

  • Add support for Python 3.14 (PR 145
  • Allow passing a base branch that doesn't have version info (PR 70
    • This makes cherry-picker useful for projects other than CPython that don't have versioned branch names.

2.3.0

  • Add support for Python 3.13 (PR 127, PR 134)
  • Drop support for EOL Python 3.8 (PR 133, PR 137)
  • Resolve usernames when the remote ends with a trailing slash (PR 110)
  • Optimize validate_sha() with --max-count=1 (PR 111)
  • Make # replacing more strict (PR 115)
  • Remove multiple commit prefixes (PR 118)
  • Handle whitespace when calculating usernames (PR 132)
  • Publish to PyPI using Trusted Publishers (PR 94)
  • Generate digital attestations for PyPI (PEP 740) (PR 135)
Commits
  • 34d27eb Update changelog for 2.4.0 (#146)
  • c81925c Add support for Python 3.14 (#145)
  • 940787a Allow passing a base branch that doesn't have version info (#70)
  • a1552fb Remove outdated README info (#143)
  • 7721133 PyPI metatada: re-add description (#140)
  • a7d1d0d Generate __version__ at build to avoid slow importlib.metadata import (#141)
  • 71490d0 Exclude bots from generated release notes (#139)
  • 52565cb Update changelog for 2.3.0 (#138)
  • 7fdaa08 Update minimum Python version to 3.9 in the configuration (#137)
  • e2540af Generate digital attestations for PyPI (PEP 740) (#135)
  • Additional commits viewable in compare view

[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=cherry-picker&package-manager=pip&previous-version=2.2.0&new-version=2.4.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) ---
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> --- requirements/constraints.txt | 2 +- requirements/dev.txt | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/requirements/constraints.txt b/requirements/constraints.txt index ea4753263d6..6f2b6ce54af 100644 --- a/requirements/constraints.txt +++ b/requirements/constraints.txt @@ -39,7 +39,7 @@ cfgv==3.4.0 # via pre-commit charset-normalizer==3.4.0 # via requests -cherry-picker==2.2.0 +cherry-picker==2.4.0 # via -r requirements/dev.in click==8.1.8 # via diff --git a/requirements/dev.txt b/requirements/dev.txt index e1eec311f60..19252723da3 100644 --- a/requirements/dev.txt +++ b/requirements/dev.txt @@ -39,7 +39,7 @@ cfgv==3.4.0 # via pre-commit charset-normalizer==3.4.0 # via requests -cherry-picker==2.2.0 +cherry-picker==2.4.0 # via -r requirements/dev.in click==8.1.8 # via From f52ec5cff68609b065ff33d9765eb8e253a4850d Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 24 Dec 2024 12:11:03 +0000 Subject: [PATCH 8/8] Bump trustme from 1.1.0 to 1.2.0 (#10232) Bumps [trustme](https://github.com/python-trio/trustme) from 1.1.0 to 1.2.0.
Release notes

Sourced from trustme's releases.

1.2.0

Features

  • Add support for Python 3.13. (#664)
  • Allow setting of cert's notBefore attribute (#628)

Bugfixes

  • Add the Authority Key Identifier extension to child CA certificates. (#642)

Deprecations and Removals

  • Remove support for Python 3.8 and PyPy 3.9. (#664)
Commits

[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=trustme&package-manager=pip&previous-version=1.1.0&new-version=1.2.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) ---
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> --- requirements/constraints.txt | 2 +- requirements/dev.txt | 2 +- requirements/lint.txt | 2 +- requirements/test.txt | 2 +- 4 files changed, 4 insertions(+), 4 deletions(-) diff --git a/requirements/constraints.txt b/requirements/constraints.txt index 6f2b6ce54af..3fec7478678 100644 --- a/requirements/constraints.txt +++ b/requirements/constraints.txt @@ -250,7 +250,7 @@ towncrier==23.11.0 # sphinxcontrib-towncrier tqdm==4.67.1 # via python-on-whales -trustme==1.1.0 ; platform_machine != "i686" +trustme==1.2.0 ; platform_machine != "i686" # via # -r requirements/lint.in # -r requirements/test.in diff --git a/requirements/dev.txt b/requirements/dev.txt index 19252723da3..3d9bbd7494e 100644 --- a/requirements/dev.txt +++ b/requirements/dev.txt @@ -241,7 +241,7 @@ towncrier==23.11.0 # sphinxcontrib-towncrier tqdm==4.67.1 # via python-on-whales -trustme==1.1.0 ; platform_machine != "i686" +trustme==1.2.0 ; platform_machine != "i686" # via # -r requirements/lint.in # -r requirements/test.in diff --git a/requirements/lint.txt b/requirements/lint.txt index 8fe79d1d22a..8f1179bb845 100644 --- a/requirements/lint.txt +++ b/requirements/lint.txt @@ -109,7 +109,7 @@ tomli==2.2.1 # slotscheck tqdm==4.67.1 # via python-on-whales -trustme==1.1.0 +trustme==1.2.0 # via -r requirements/lint.in typer==0.12.5 # via python-on-whales diff --git a/requirements/test.txt b/requirements/test.txt index d36b049be24..909af4bd937 100644 --- a/requirements/test.txt +++ b/requirements/test.txt @@ -128,7 +128,7 @@ tomli==2.2.1 # pytest tqdm==4.67.1 # via python-on-whales -trustme==1.1.0 ; platform_machine != "i686" +trustme==1.2.0 ; platform_machine != "i686" # via -r requirements/test.in typer==0.12.5 # via python-on-whales