Skip to content

Bump the minor-patch-dependencies group across 1 directory with 11 updates #1003

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Merged
github-actions merged 1 commit into from
Dec 2, 2024
Merged

Bump the minor-patch-dependencies group across 1 directory with 11 updates #1003

github-actions merged 1 commit into from
Dec 2, 2024

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Dec 2, 2024

Bumps the minor-patch-dependencies group with 11 updates in the / directory:

Package From To
starlette 0.41.2 0.41.3
pydantic 2.9.2 2.10.2
uvicorn 0.32.0 0.32.1
python-multipart 0.0.17 0.0.19
sentry-sdk 2.18.0 2.19.0
pyjwt 2.10.0 2.10.1
pytest 8.3.3 8.3.4
coverage 7.6.7 7.6.8
bandit 1.7.10 1.8.0
httpx 0.27.2 0.28.0
ruff 0.7.4 0.8.1

Updates starlette from 0.41.2 to 0.41.3

Release notes

Sourced from starlette's releases.

Version 0.41.3

Fixed

  • Exclude the query parameters from the scope[raw_path] on the TestClient #2716.
  • Replace dict by Mapping on HTTPException.headers #2749.
  • Correct middleware argument passing and improve factory pattern #2752.

Full Changelog: Kludex/starlette@0.41.2...0.41.3

Changelog

Sourced from starlette's changelog.

0.41.3 (November 18, 2024)

Fixed

  • Exclude the query parameters from the scope[raw_path] on the TestClient #2716.
  • Replace dict by Mapping on HTTPException.headers #2749.
  • Correct middleware argument passing and improve factory pattern #2752.
Commits

Updates pydantic from 2.9.2 to 2.10.2

Release notes

Sourced from pydantic's releases.

v2.10.2 2024-11-26

What's Changed

Fixes

Full Changelog: pydantic/pydantic@v2.10.1...v2.10.2

v2.10.1 2024-11-21

What's Changed

Packaging

Fixes

Full Changelog: pydantic/pydantic@v2.10.0...v2.10.1

v2.10.0 2024-11-20

The code released in v2.10.0 is practically identical to that of v2.10.0b2. See the v2.10 release blog post for the highlights!

What's Changed

Packaging

New Features

... (truncated)

Changelog

Sourced from pydantic's changelog.

v2.10.2 (2024-11-25)

GitHub release

What's Changed

Fixes

v2.10.1 (2024-11-21)

GitHub release

What's Changed

Packaging

Fixes

New Contributors

v2.10.0 (2024-11-20)

The code released in v2.10.0 is practically identical to that of v2.10.0b2.

GitHub release

See the v2.10 release blog post for the highlights!

What's Changed

Packaging

... (truncated)

Commits

Updates uvicorn from 0.32.0 to 0.32.1

Release notes

Sourced from uvicorn's releases.

Version 0.32.1

What's Changed

Full Changelog: Kludex/uvicorn@0.32.0...0.32.1

Changelog

Sourced from uvicorn's changelog.

0.32.1 (2024-11-20)

Fixed

  • Drop ASGI spec version to 2.3 on HTTP scope #2513
  • Enable httptools lenient data on httptools >= 0.6.3 #2488
Commits

Updates python-multipart from 0.0.17 to 0.0.19

Release notes

Sourced from python-multipart's releases.

Version 0.0.19

What's Changed

Full Changelog: Kludex/python-multipart@0.0.18...0.0.19

Version 0.0.18

What's Changed

Full Changelog: Kludex/python-multipart@0.0.17...0.0.18

Changelog

Sourced from python-multipart's changelog.

0.0.19 (2024-11-30)

  • Don't warn when CRLF is found after last boundary on MultipartParser #193.

0.0.18 (2024-11-28)

  • Hard break if found data after last boundary on MultipartParser #189.
Commits

Updates sentry-sdk from 2.18.0 to 2.19.0

Release notes

Sourced from sentry-sdk's releases.

2.19.0

Various fixes & improvements

Changelog

Sourced from sentry-sdk's changelog.

2.19.0

Various fixes & improvements

Commits

Updates pyjwt from 2.10.0 to 2.10.1

Release notes

Sourced from pyjwt's releases.

2.10.1

Fixed

Full Changelog: jpadilla/pyjwt@2.10.0...2.10.1

Changelog

Sourced from pyjwt's changelog.

v2.10.1 <https://github.com/jpadilla/pyjwt/compare/2.10.0...2.10.1>__

Fixed


- Prevent partial matching of `iss` claim by @fabianbadoi in `GHSA-75c5-xw7c-p5pm <https://github.com/jpadilla/pyjwt/security/advisories/GHSA-75c5-xw7c-p5pm>`__
Commits

Updates pytest from 8.3.3 to 8.3.4

Release notes

Sourced from pytest's releases.

8.3.4

pytest 8.3.4 (2024-12-01)

Bug fixes

  • #12592: Fixed KeyError{.interpreted-text role="class"} crash when using --import-mode=importlib in a directory layout where a directory contains a child directory with the same name.

  • #12818: Assertion rewriting now preserves the source ranges of the original instructions, making it play well with tools that deal with the AST, like executing.

  • #12849: ANSI escape codes for colored output now handled correctly in pytest.fail{.interpreted-text role="func"} with [pytrace=False]{.title-ref}.

  • #9353: pytest.approx{.interpreted-text role="func"} now uses strict equality when given booleans.

Improved documentation

  • #10558: Fix ambiguous docstring of pytest.Config.getoption{.interpreted-text role="func"}.

  • #10829: Improve documentation on the current handling of the --basetemp option and its lack of retention functionality (temporary directory location and retention{.interpreted-text role="ref"}).

  • #12866: Improved cross-references concerning the recwarn{.interpreted-text role="fixture"} fixture.

  • #12966: Clarify filterwarnings{.interpreted-text role="ref"} docs on filter precedence/order when using multiple @pytest.mark.filterwarnings <pytest.mark.filterwarnings ref>{.interpreted-text role="ref"} marks.

Contributor-facing changes

  • #12497: Fixed two failing pdb-related tests on Python 3.13.
Commits
  • 53f8b4e Update pypa/gh-action-pypi-publish to v1.12.2
  • 98dff36 Prepare release version 8.3.4
  • 1b474e2 approx: use exact comparison for bool (#13013)
  • b541721 docs: Fix wrong statement about sys.modules with importlib import mode (#1298...
  • 16cb87b pytest.fail: fix ANSI escape codes for colored output (#12959) (#12990)
  • be6bc81 Issue #12966 Clarify filterwarnings docs on precedence when using multiple ma...
  • 7aeb72b Improve docs on basetemp and retention (#12912) (#12928)
  • c875841 Merge pull request #12917 from pytest-dev/patchback/backports/8.3.x/ded1f44e5...
  • 6502816 Merge pull request #12913 from jakkdl/dontfailonbadpath
  • 52135b0 Merge pull request #12885 from The-Compiler/pdb-py311 (#12887)
  • Additional commits viewable in compare view

Updates coverage from 7.6.7 to 7.6.8

Changelog

Sourced from coverage's changelog.

Version 7.6.8 — 2024-11-23

  • Fix: the LCOV report code assumed that a branch line that took no branches meant that the entire line was unexecuted. This isn't true in a few cases: the line might always raise an exception, or might have been optimized away. Fixes issue 1896_.

  • Fix: similarly, the HTML report will now explain that a line that jumps to none of its expected destinations must have always raised an exception. Previously, it would say something nonsensical like, "line 4 didn't jump to line 5 because line 4 was never true, and it didn't jump to line 7 because line 4 was always true." This was also shown in issue 1896_.

.. _issue 1896: nedbat/coveragepy#1896

.. _changes_7-6-7:

Commits
  • 6134266 docs: sample HTML for 7.6.8
  • 041f963 docs: prep for 7.6.8
  • 7fe48b6 build: don't search generated report files
  • f219144 docs: start changelog entries with capital letters
  • d1a916a fix: a line that branches nowhere must always raise an exception
  • 2ace7a2 fix: don't assume 'no branches' means 'not executed' #1896
  • 3ed5915 style: all of ci should use underscores
  • 0db86f2 build: automate updating readthedocs
  • 2a89551 chore: make upgrade (not sure why files became absolute)
  • ba9c157 chore: make doc_upgrade
  • Additional commits viewable in compare view

Updates bandit from 1.7.10 to 1.8.0

Release notes

Sourced from bandit's releases.

1.8.0

What's Changed

Full Changelog: PyCQA/bandit@1.7.10...1.8.0

Commits

Updates httpx from 0.27.2 to 0.28.0

Release notes

Sourced from httpx's releases.

Version 0.28.0

0.28.0 (28th November, 2024)

The 0.28 release includes a limited set of deprecations.

Deprecations:

We are working towards a simplified SSL configuration API.

For users of the standard verify=True or verify=False cases, or verify=<ssl_context> case this should require no changes. The following cases have been deprecated...

  • The verify argument as a string argument is now deprecated and will raise warnings.
  • The cert argument is now deprecated and will raise warnings.

Our revised SSL documentation covers how to implement the same behaviour with a more constrained API.

The following changes are also included:

  • The deprecated proxies argument has now been removed.
  • The deprecated app argument has now been removed.
  • JSON request bodies use a compact representation. (#3363)
  • Review URL percent escape sets, based on WHATWG spec. (#3371, #3373)
  • Ensure certifi and httpcore are only imported if required. (#3377)
  • Treat socks5h as a valid proxy scheme. (#3178)
  • Cleanup Request() method signature in line with client.request() and httpx.request(). (#3378)
Changelog

Sourced from httpx's changelog.

0.28.0 (28th November, 2024)

The 0.28 release includes a limited set of deprecations.

Deprecations:

We are working towards a simplified SSL configuration API.

For users of the standard verify=True or verify=False cases, or verify=<ssl_context> case this should require no changes. The following cases have been deprecated...

  • The verify argument as a string argument is now deprecated and will raise warnings.
  • The cert argument is now deprecated and will raise warnings.

Our revised SSL documentation covers how to implement the same behaviour with a more constrained API.

The following changes are also included:

  • The deprecated proxies argument has now been removed.
  • The deprecated app argument has now been removed.
  • JSON request bodies use a compact representation. (#3363)
  • Review URL percent escape sets, based on WHATWG spec. (#3371, #3373)
  • Ensure certifi and httpcore are only imported if required. (#3377)
  • Treat socks5h as a valid proxy scheme. (#3178)
  • Cleanup Request() method signature in line with client.request() and httpx.request(). (#3378)
Commits

Updates ruff from 0.7.4 to 0.8.1

Release notes

Sourced from ruff's releases.

0.8.1

Release Notes

Preview features

  • Formatter: Avoid invalid syntax for format-spec with quotes for all Python versions (#14625)
  • Formatter: Consider quotes inside format-specs when choosing the quotes for an f-string (#14493)
  • Formatter: Do not consider f-strings with escaped newlines as multiline (#14624)
  • Formatter: Fix f-string formatting in assignment statement (#14454)
  • Formatter: Fix unnecessary space around power operator (**) in overlong f-string expressions (#14489)
  • [airflow] Avoid implicit schedule argument to DAG and @dag (AIR301) (#14581)
  • [flake8-builtins] Exempt private built-in modules (A005) (#14505)
  • [flake8-pytest-style] Fix pytest.mark.parametrize rules to check calls instead of decorators (#14515)
  • [flake8-type-checking] Implement runtime-cast-value (TC006) (#14511)
  • [flake8-type-checking] Implement unquoted-type-alias (TC007) and quoted-type-alias (TC008) (#12927)
  • [flake8-use-pathlib] Recommend Path.iterdir() over os.listdir() (PTH208) (#14509)
  • [pylint] Extend invalid-envvar-default to detect os.environ.get (PLW1508) (#14512)
  • [pylint] Implement len-test (PLC1802) (#14309)
  • [refurb] Fix bug where methods defined using lambdas were flagged by FURB118 (#14639)
  • [ruff] Auto-add r prefix when string has no backslashes for unraw-re-pattern (RUF039) (#14536)
  • [ruff] Implement invalid-assert-message-literal-argument (RUF040) (#14488)
  • [ruff] Implement unnecessary-nested-literal (RUF041) (#14323)
  • [ruff] Implement unnecessary-regular-expression (RUF055) (#14659)

Rule changes

  • Ignore more rules for stub files (#14541)
  • [pep8-naming] Eliminate false positives for single-letter names (N811, N814) (#14584)
  • [pyflakes] Avoid false positives in @no_type_check contexts (F821, F722) (#14615)
  • [ruff] Detect redirected-noqa in file-level comments (RUF101) (#14635)
  • [ruff] Mark fixes for unsorted-dunder-all and unsorted-dunder-slots as unsafe when there are complex comments in the sequence (RUF022, RUF023) (#14560)

Bug fixes

  • Avoid fixing code to None | None for redundant-none-literal (PYI061) and never-union (RUF020) (#14583, #14589)
  • [flake8-bugbear] Fix mutable-contextvar-default to resolve annotated function calls properly (B039) (#14532)
  • [flake8-pyi, ruff] Fix traversal of nested literals and u...

    Description has been truncated

@dependabot
Bump the minor-patch-dependencies group across 1 directory with 11 up…
61e27e1 
…dates

Bumps the minor-patch-dependencies group with 11 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [starlette](https://github.com/encode/starlette) | `0.41.2` | `0.41.3` |
| [pydantic](https://github.com/pydantic/pydantic) | `2.9.2` | `2.10.2` |
| [uvicorn](https://github.com/encode/uvicorn) | `0.32.0` | `0.32.1` |
| [python-multipart](https://github.com/Kludex/python-multipart) | `0.0.17` | `0.0.19` |
| [sentry-sdk](https://github.com/getsentry/sentry-python) | `2.18.0` | `2.19.0` |
| [pyjwt](https://github.com/jpadilla/pyjwt) | `2.10.0` | `2.10.1` |
| [pytest](https://github.com/pytest-dev/pytest) | `8.3.3` | `8.3.4` |
| [coverage](https://github.com/nedbat/coveragepy) | `7.6.7` | `7.6.8` |
| [bandit](https://github.com/PyCQA/bandit) | `1.7.10` | `1.8.0` |
| [httpx](https://github.com/encode/httpx) | `0.27.2` | `0.28.0` |
| [ruff](https://github.com/astral-sh/ruff) | `0.7.4` | `0.8.1` |



Updates `starlette` from 0.41.2 to 0.41.3
- [Release notes](https://github.com/encode/starlette/releases)
- [Changelog](https://github.com/encode/starlette/blob/master/docs/release-notes.md)
- [Commits](Kludex/starlette@0.41.2...0.41.3)

Updates `pydantic` from 2.9.2 to 2.10.2
- [Release notes](https://github.com/pydantic/pydantic/releases)
- [Changelog](https://github.com/pydantic/pydantic/blob/main/HISTORY.md)
- [Commits](pydantic/pydantic@v2.9.2...v2.10.2)

Updates `uvicorn` from 0.32.0 to 0.32.1
- [Release notes](https://github.com/encode/uvicorn/releases)
- [Changelog](https://github.com/encode/uvicorn/blob/master/CHANGELOG.md)
- [Commits](Kludex/uvicorn@0.32.0...0.32.1)

Updates `python-multipart` from 0.0.17 to 0.0.19
- [Release notes](https://github.com/Kludex/python-multipart/releases)
- [Changelog](https://github.com/Kludex/python-multipart/blob/master/CHANGELOG.md)
- [Commits](Kludex/python-multipart@0.0.17...0.0.19)

Updates `sentry-sdk` from 2.18.0 to 2.19.0
- [Release notes](https://github.com/getsentry/sentry-python/releases)
- [Changelog](https://github.com/getsentry/sentry-python/blob/master/CHANGELOG.md)
- [Commits](getsentry/sentry-python@2.18.0...2.19.0)

Updates `pyjwt` from 2.10.0 to 2.10.1
- [Release notes](https://github.com/jpadilla/pyjwt/releases)
- [Changelog](https://github.com/jpadilla/pyjwt/blob/master/CHANGELOG.rst)
- [Commits](jpadilla/pyjwt@2.10.0...2.10.1)

Updates `pytest` from 8.3.3 to 8.3.4
- [Release notes](https://github.com/pytest-dev/pytest/releases)
- [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst)
- [Commits](pytest-dev/pytest@8.3.3...8.3.4)

Updates `coverage` from 7.6.7 to 7.6.8
- [Release notes](https://github.com/nedbat/coveragepy/releases)
- [Changelog](https://github.com/nedbat/coveragepy/blob/master/CHANGES.rst)
- [Commits](coveragepy/coveragepy@7.6.7...7.6.8)

Updates `bandit` from 1.7.10 to 1.8.0
- [Release notes](https://github.com/PyCQA/bandit/releases)
- [Commits](PyCQA/bandit@1.7.10...1.8.0)

Updates `httpx` from 0.27.2 to 0.28.0
- [Release notes](https://github.com/encode/httpx/releases)
- [Changelog](https://github.com/encode/httpx/blob/master/CHANGELOG.md)
- [Commits](encode/httpx@0.27.2...0.28.0)

Updates `ruff` from 0.7.4 to 0.8.1
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.7.4...0.8.1)

---
updated-dependencies:
- dependency-name: starlette
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-patch-dependencies
- dependency-name: pydantic
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-patch-dependencies
- dependency-name: uvicorn
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-patch-dependencies
- dependency-name: python-multipart
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-patch-dependencies
- dependency-name: sentry-sdk
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-patch-dependencies
- dependency-name: pyjwt
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-patch-dependencies
- dependency-name: pytest
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-patch-dependencies
- dependency-name: coverage
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-patch-dependencies
- dependency-name: bandit
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-patch-dependencies
- dependency-name: httpx
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-patch-dependencies
- dependency-name: ruff
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-patch-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot requested a review from a team as a code owner December 2, 2024 08:37
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Dec 2, 2024
@github-actions github-actions bot enabled auto-merge (squash) December 2, 2024 08:38
@github-actions
Copy link

github-actions bot commented Dec 2, 2024

The minor update of this production dependency was not automatically approved. For production dependencies, these semver updates can be automatically approved: patch

@github-actions github-actions bot merged commit bfce79b into main Dec 2, 2024
8 checks passed
@github-actions github-actions bot deleted the dependabot/pip/minor-patch-dependencies-4255176022 branch December 2, 2024 15:41
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

1 more reviewer

@robhudson robhudson robhudson approved these changes

Reviewers whose approvals may not affect merge requirements

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python Pull requests that update Python code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@robhudson