Bump the python-packages group across 1 directory with 6 updates by dependabot[bot] · Pull Request #25 · mattbox/onebot

dependabot · 2024-09-01T02:22:56Z

Bumps the python-packages group with 6 updates in the / directory:

Package	From	To
cryptography	`42.0.8`	`43.0.0`
tekore	`5.4.0`	`5.5.0`
redis	`5.0.7`	`5.0.8`
yfinance	`0.2.40`	`0.2.43`
pytest	`8.2.2`	`8.3.2`
black	`24.4.2`	`24.8.0`

Updates cryptography from 42.0.8 to 43.0.0

Changelog

Sourced from cryptography's changelog.

43.0.0 - 2024-07-20


* **BACKWARDS INCOMPATIBLE:** Support for OpenSSL less than 1.1.1e has been
  removed.  Users on older version of OpenSSL will need to upgrade.
* **BACKWARDS INCOMPATIBLE:** Dropped support for LibreSSL < 3.8.
* Updated Windows, macOS, and Linux wheels to be compiled with OpenSSL 3.3.1.
* Updated the minimum supported Rust version (MSRV) to 1.65.0, from 1.63.0.
* :func:`~cryptography.hazmat.primitives.asymmetric.rsa.generate_private_key`
  now enforces a minimum RSA key size of 1024-bit. Note that 1024-bit is still
  considered insecure, users should generally use a key size of 2048-bits.
* :func:`~cryptography.hazmat.primitives.serialization.pkcs7.serialize_certificates`
  now emits ASN.1 that more closely follows the recommendations in :rfc:`2315`.
* Added new :doc:`/hazmat/decrepit/index` module which contains outdated and
  insecure cryptographic primitives.
  :class:`~cryptography.hazmat.primitives.ciphers.algorithms.CAST5`,
  :class:`~cryptography.hazmat.primitives.ciphers.algorithms.SEED`,
  :class:`~cryptography.hazmat.primitives.ciphers.algorithms.IDEA`, and
  :class:`~cryptography.hazmat.primitives.ciphers.algorithms.Blowfish`, which were
  deprecated in 37.0.0, have been added to this module. They will be removed
  from the ``cipher`` module in 45.0.0.
* Moved :class:`~cryptography.hazmat.primitives.ciphers.algorithms.TripleDES`
  and :class:`~cryptography.hazmat.primitives.ciphers.algorithms.ARC4` into
  :doc:`/hazmat/decrepit/index` and deprecated them in the ``cipher`` module.
  They will be removed from the ``cipher`` module in 48.0.0.
* Added support for deterministic
  :class:`~cryptography.hazmat.primitives.asymmetric.ec.ECDSA` (:rfc:`6979`)
* Added support for client certificate verification to the
  :mod:`X.509 path validation <cryptography.x509.verification>` APIs in the
  form of :class:`~cryptography.x509.verification.ClientVerifier`,
  :class:`~cryptography.x509.verification.VerifiedClient`, and
  ``PolicyBuilder``
  :meth:`~cryptography.x509.verification.PolicyBuilder.build_client_verifier`.
* Added Certificate
  :attr:`~cryptography.x509.Certificate.public_key_algorithm_oid`
  and Certificate Signing Request
  :attr:`~cryptography.x509.CertificateSigningRequest.public_key_algorithm_oid`
  to determine the :class:`~cryptography.hazmat._oid.PublicKeyAlgorithmOID`
  Object Identifier of the public key found inside the certificate.
* Added :attr:`~cryptography.x509.InvalidityDate.invalidity_date_utc`, a
  timezone-aware alternative to the naïve ``datetime`` attribute
  :attr:`~cryptography.x509.InvalidityDate.invalidity_date`.
* Added support for parsing empty DN string in
  :meth:`~cryptography.x509.Name.from_rfc4514_string`.
* Added the following properties that return timezone-aware ``datetime`` objects:
  :meth:`~cryptography.x509.ocsp.OCSPResponse.produced_at_utc`,
  :meth:`~cryptography.x509.ocsp.OCSPResponse.revocation_time_utc`,
  :meth:`~cryptography.x509.ocsp.OCSPResponse.this_update_utc`,
  :meth:`~cryptography.x509.ocsp.OCSPResponse.next_update_utc`,
  :meth:`~cryptography.x509.ocsp.OCSPSingleResponse.revocation_time_utc`,
</tr></table>

... (truncated)

Commits

ebf14f2 bump for 43.0.0 and update changelog (#11311)
42788a0 Fix exchange with keys that had Q automatically computed (#11309)
2dbdfb8 don't assign unused name (#11310)
ccc66e6 Bump openssl from 0.10.64 to 0.10.65 in /src/rust (#11308)
4310c87 Bump sphinxcontrib-qthelp from 1.0.7 to 1.0.8 (#11307)
f66a9c4 Bump sphinxcontrib-htmlhelp from 2.0.5 to 2.0.6 (#11306)
a8fcf18 Bump openssl-sys from 0.9.102 to 0.9.103 in /src/rust (#11305)
2fe32b2 Bump mypy from 1.10.1 to 1.11.0 (#11303)
ee24e82 Bump setuptools from 71.0.3 to 71.0.4 in /.github/requirements (#11304)
7249ccd Bump portable-atomic from 1.6.0 to 1.7.0 in /src/rust (#11302)
Additional commits viewable in compare view

Updates tekore from 5.4.0 to 5.5.0

Commits

b504b7c Prepare release 5.5.0
fbe83e3 Add ugc_image_upload permission to playlist_cover_image_upload (#324)
737503c Add open_browser param to auth prompts (#325)
98d4048 Make available_markets optional (#323)
40ba9eb Fix workflow badge
See full diff in compare view

Updates redis from 5.0.7 to 5.0.8

Release notes

Sourced from redis's releases.

5.0.8

Changes

Resolve some docs warnings (#3322)

Add missing type hints for retry.py (#3250)

🔥 Breaking Changes

Timeseries insertion filters for close samples (#3228)

🚀 New Features

Hash field expiration commands (#3218)

Support the MAXAGE option for CLIENT KILL (#3187)

Support NOVALUES parameter for HSCAN (#3157)

Document XREAD of last message (+) (#3187)

Support missing/empty values in search (#3231)

Timeseries insertion filters for close samples (#3228)

🧰 Maintenance

Add extra tests for GEO search (#3244)

Test special characters escaping in search (#3276)

🐛 Bug Fixes

Decode search results at field level (#3309)

Commits

6a2a636 Decode search results at field level (#3309)
e7ef54a Fix bug: client side caching causes unexpected disconnections (async version)...
0cd0c5d Format connection errors in the same way everywhere (#3305)
6fedfef Prepare for Redis 7.4 RC2 (#3303)
ed1680f Add details to the asyncio connection error message (#3211)
511fda0 Add missing type hints for retry.py (#3250)
c1a6ff7 Bump rojopolis/spellcheck-github-actions from 0.37.0 to 0.38.0 (#3301)
338cbfd Re-enable Graph tests (#3287)
532bc02 Do not restrict pytest dependencies versions (#3286)
b6a0f96 Add CODECOV token to CI (#3285)
Additional commits viewable in compare view

Updates yfinance from 0.2.40 to 0.2.43

Release notes

Sourced from yfinance's releases.

0.2.43

Fix price-repair bug introduced in 0.2.42 #2036

0.2.42

Features:

fetch SEC filings & analysis

price repair extended to dividends & adjust

Fix fetch errors for: options, holders, download, news

Full changelog: #2034

Contributors: @Fidasek009 @aaron-jencks @stevenbischoff @ericpien @mreiche

0.2.41

Improvements:

add some missing keys to financials

new: Ticker.sustainability

prices fetch: fixes, Pandas warnings, and improve repair

deprecate Ticker.earnings RIP

Full changelog: #1971

Contributors: @MohamedAlaa201 @vittoboa @SnowCheetos @rhwvu @lp177

Changelog

Sourced from yfinance's changelog.

0.2.43

Fix price-repair bug introduced in 0.2.42 #2036

0.2.42

Features:

fetch SEC filings #2009

fetch analysis #2023 @Fidasek009

price repair extended to dividends & adjust #2031 Fixes:

fix error on empty options chain #1995 @stevenbischoff

use dict.get() to safely access key in Holders #2013 @ericpien

fix datetime conversion with mixed timezones when ignore_tz is False #2016 @mreiche

handle faulty response object when getting news. #2021 @ericpien Maintenance:

prices: improve exceptions and logging #2000

0.2.41

Improvements:

add keys to financials #1965 #1985

fetch Sustainability #1959

improve price-repair-zeroes #1990 Fixes (prices):

fetching when period='max' #1967

metadata: Fix '1wk is invalid' & repeated calls #1970

Pandas warnings #1955 #1981

price repair syntax errors #1989 Maintenance:

deprecate Ticker.earnings #1977

Commits

ed43f6f Version 0.2.43
f87a9af Merge pull request #2036 from ranaroussi/fix/price-repair-currency-bug
e329f26 Fix price-repair-currency, logic was inverted
bd1a597 Version 0.2.42
0193cec Merge pull request #2034 from ranaroussi/dev
a2b5d6b Fix 2x old tests
ce9becd Merge branch 'main' into dev
7e12f20 Merge pull request #2031 from ranaroussi/feature/price-repair-div-adjust
a74ad47 Repair dividends: fine-tune logic + unit tests
2f5203d New: repair bad dividends and div-adjusts. Plus other repair fixes.
Additional commits viewable in compare view

Updates pytest from 8.2.2 to 8.3.2

Release notes

Sourced from pytest's releases.

8.3.2

pytest 8.3.2 (2024-07-24)

Bug fixes

#12652: Resolve regression [conda]{.title-ref} environments where no longer being automatically detected.

-- by RonnyPfannschmidt{.interpreted-text role="user"}

8.3.1

pytest 8.3.1 (2024-07-20)

The 8.3.0 release failed to include the change notes and docs for the release. This patch release remedies this. There are no other changes.

8.3.0

pytest 8.3.0 (2024-07-20)

New features

#12231: Added [--xfail-tb]{.title-ref} flag, which turns on traceback output for XFAIL results.

If the [--xfail-tb]{.title-ref} flag is not given, tracebacks for XFAIL results are NOT shown.

The style of traceback for XFAIL is set with [--tb]{.title-ref}, and can be [auto|long|short|line|native|no]{.title-ref}.

Note: Even if you have [--xfail-tb]{.title-ref} set, you won't see them if [--tb=no]{.title-ref}.

Some history:

With pytest 8.0, [-rx]{.title-ref} or [-ra]{.title-ref} would not only turn on summary reports for xfail, but also report the tracebacks for xfail results. This caused issues with some projects that utilize xfail, but don't want to see all of the xfail tracebacks.

This change detaches xfail tracebacks from [-rx]{.title-ref}, and now we turn on xfail tracebacks with [--xfail-tb]{.title-ref}. With this, the default [-rx]{.title-ref}/ [-ra]{.title-ref} behavior is identical to pre-8.0 with respect to xfail tracebacks. While this is a behavior change, it brings default behavior back to pre-8.0.0 behavior, which ultimately was considered the better course of action.

#12281: Added support for keyword matching in marker expressions.

Now tests can be selected by marker keyword arguments. Supported values are int{.interpreted-text role="class"}, (unescaped) str{.interpreted-text role="class"}, bool{.interpreted-text role="class"} & None{.interpreted-text role="data"}.

See marker examples <marker_keyword_expression_example>{.interpreted-text role="ref"} for more information.

-- by lovetheguitar{.interpreted-text role="user"}

#12567: Added --no-fold-skipped command line option.

If this option is set, then skipped tests in short summary are no longer grouped by reason but all tests are printed individually with their nodeid in the same way as other statuses.

-- by pbrezina{.interpreted-text role="user"}

... (truncated)

Commits

bbcec9c Prepare release version 8.3.2
78fe8b6 Merge pull request #12657 from pytest-dev/patchback/backports/8.3.x/6c806b499...
238bad2 Merge pull request #12656 from RonnyPfannschmidt/fix-12652-detect-conda-env
ae6034a Merge pull request #12641 from pytest-dev/patchback/backports/8.3.x/c03989cee...
31337ab Merge pull request #12640 from pytest-dev/update-user
ca3070b Merge pull request #12637 from pytest-dev/release-8.3.1
de98446 Prepare release version 8.3.1
bd0a042 Merge pull request #12636 from pytest-dev/update-release-notes
664325b doc/changelog: update 8.3.0 notes
19d225d Merge pull request #12635 from pytest-dev/release-8.3.0
Additional commits viewable in compare view

Updates black from 24.4.2 to 24.8.0

Release notes

Sourced from black's releases.

24.8.0

Stable style

Fix crash when # fmt: off is used before a closing parenthesis or bracket. (#4363)

Packaging

Packaging metadata updated: docs are explictly linked, the issue tracker is now also linked. This improves the PyPI listing for Black. (#4345)

Parser

Fix regression where Black failed to parse a multiline f-string containing another multiline string (#4339)

Fix regression where Black failed to parse an escaped single quote inside an f-string (#4401)

Fix bug with Black incorrectly parsing empty lines with a backslash (#4343)

Fix bugs with Black's tokenizer not handling \{ inside f-strings very well (#4422)

Fix incorrect line numbers in the tokenizer for certain tokens within f-strings (#4423)

Performance

Improve performance when a large directory is listed in .gitignore (#4415)

Blackd

Fix blackd (and all extras installs) for docker container (#4357)

Changelog

Sourced from black's changelog.

24.8.0

Stable style

Fix crash when # fmt: off is used before a closing parenthesis or bracket. (#4363)

Packaging

Packaging metadata updated: docs are explictly linked, the issue tracker is now also linked. This improves the PyPI listing for Black. (#4345)

Parser

Fix regression where Black failed to parse a multiline f-string containing another multiline string (#4339)

Fix regression where Black failed to parse an escaped single quote inside an f-string (#4401)

Fix bug with Black incorrectly parsing empty lines with a backslash (#4343)

Fix bugs with Black's tokenizer not handling \{ inside f-strings very well (#4422)

Fix incorrect line numbers in the tokenizer for certain tokens within f-strings (#4423)

Performance

Improve performance when a large directory is listed in .gitignore (#4415)

Blackd

Fix blackd (and all extras installs) for docker container (#4357)

Commits

b965c2a Prepare release 24.8.0 (#4426)
9ccf279 Document find_project_root ignoring pyproject.toml without [tool.black]...
14b6e61 fix: Enhace black efficiently to skip directories listed in .gitignore (#4415)
b1c4dd9 fix: respect braces better in f-string parsing (#4422)
4b4ae43 Fix incorrect linenos on fstring tokens with escaped newlines (#4423)
7fa1faf docs: fix the installation command of extra for blackd (#4413)
8827acc Bump sphinx from 7.3.7 to 7.4.0 in /docs (#4404)
b0da11d Bump furo from 2024.5.6 to 2024.7.18 in /docs (#4409)
721dff5 fix: avoid formatting backslash strings inside f-strings (#4401)
7e2afc9 Update actions/checkout to v4 to stop node deprecation warnings (#4379)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the python-packages group with 6 updates in the / directory: | Package | From | To | | --- | --- | --- | | [cryptography](https://github.com/pyca/cryptography) | `42.0.8` | `43.0.0` | | [tekore](https://github.com/felix-hilden/tekore) | `5.4.0` | `5.5.0` | | [redis](https://github.com/redis/redis-py) | `5.0.7` | `5.0.8` | | [yfinance](https://github.com/ranaroussi/yfinance) | `0.2.40` | `0.2.43` | | [pytest](https://github.com/pytest-dev/pytest) | `8.2.2` | `8.3.2` | | [black](https://github.com/psf/black) | `24.4.2` | `24.8.0` | Updates `cryptography` from 42.0.8 to 43.0.0 - [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst) - [Commits](pyca/cryptography@42.0.8...43.0.0) Updates `tekore` from 5.4.0 to 5.5.0 - [Release notes](https://github.com/felix-hilden/tekore/releases) - [Commits](felix-hilden/tekore@v5.4.0...v5.5.0) Updates `redis` from 5.0.7 to 5.0.8 - [Release notes](https://github.com/redis/redis-py/releases) - [Changelog](https://github.com/redis/redis-py/blob/master/CHANGES) - [Commits](redis/redis-py@v5.0.7...v5.0.8) Updates `yfinance` from 0.2.40 to 0.2.43 - [Release notes](https://github.com/ranaroussi/yfinance/releases) - [Changelog](https://github.com/ranaroussi/yfinance/blob/main/CHANGELOG.rst) - [Commits](ranaroussi/yfinance@0.2.40...0.2.43) Updates `pytest` from 8.2.2 to 8.3.2 - [Release notes](https://github.com/pytest-dev/pytest/releases) - [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst) - [Commits](pytest-dev/pytest@8.2.2...8.3.2) Updates `black` from 24.4.2 to 24.8.0 - [Release notes](https://github.com/psf/black/releases) - [Changelog](https://github.com/psf/black/blob/main/CHANGES.md) - [Commits](psf/black@24.4.2...24.8.0) --- updated-dependencies: - dependency-name: cryptography dependency-type: direct:production update-type: version-update:semver-major dependency-group: python-packages - dependency-name: tekore dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-packages - dependency-name: redis dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python-packages - dependency-name: yfinance dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python-packages - dependency-name: pytest dependency-type: direct:development update-type: version-update:semver-minor dependency-group: python-packages - dependency-name: black dependency-type: direct:development update-type: version-update:semver-minor dependency-group: python-packages ... Signed-off-by: dependabot[bot] <support@github.com>

myglesia and others added 11 commits June 23, 2024 19:55

stocks plugin dependencies

83ce597

ignore macOS files

ccb0c20

stocks plugin

99d592f

update

b78f946

fix

f78b3b5

update

8aad0a8

versioning

c3d76fe

update

cfd18d3

formatting

d3065b0

formatting

65e9d75

dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Sep 1, 2024

dependabot bot mentioned this pull request Sep 1, 2024

Bump black from 22.3.0 to 23.1.0 #19

Closed

mattbox force-pushed the develop branch from 65e9d75 to ecb8d46 Compare February 5, 2026 20:11

mattbox force-pushed the develop branch from 60af2df to caeecc6 Compare February 14, 2026 03:47

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump the python-packages group across 1 directory with 6 updates#25

Bump the python-packages group across 1 directory with 6 updates#25
dependabot[bot] wants to merge 11 commits intodevelopfrom
dependabot/pip/python-packages-4b06d137f6

dependabot bot commented on behalf of github Sep 1, 2024

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot bot commented on behalf of github Sep 1, 2024

5.0.8

Changes

🔥 Breaking Changes

🚀 New Features

🧰 Maintenance

🐛 Bug Fixes

0.2.43

0.2.42

0.2.41

0.2.43

0.2.42

0.2.41

8.3.2

pytest 8.3.2 (2024-07-24)

Bug fixes

8.3.1

pytest 8.3.1 (2024-07-20)

8.3.0

pytest 8.3.0 (2024-07-20)

New features

24.8.0

Stable style

Packaging

Parser

Performance

Blackd

24.8.0

Stable style

Packaging

Parser

Performance

Blackd

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant