Skip to content

Conversation

@pull
Copy link

@pull pull bot commented Aug 18, 2025

See Commits and Changes for more details.


Created by pull[bot] (v2.0.0-alpha.3)

Can you help keep this open source service alive? 💖 Please sponsor : )

dependabot bot added 2 commits August 18, 2025 15:33
Bumps [coverage](https://github.com/nedbat/coveragepy) from 7.10.3 to
7.10.4.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/nedbat/coveragepy/blob/master/CHANGES.rst">coverage's
changelog</a>.</em></p>
<blockquote>
<h2>Version 7.10.4 — 2025-08-16</h2>
<ul>
<li>
<p>Added <code>patch = fork</code> for times when the built-in forking
support is
insufficient.</p>
</li>
<li>
<p>Fix: <code>patch = execv</code> also inherits the entire coverage
configuration now.</p>
</li>
</ul>
<p>.. _changes_7-10-3:</p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/nedbat/coveragepy/commit/1cd29f24ce3859c9b2d824959031b9142c218904"><code>1cd29f2</code></a>
docs: sample HTML for 7.10.4</li>
<li><a
href="https://github.com/nedbat/coveragepy/commit/92a91e9cbbde7ea05a960b4c85bfc9d16b4a8d33"><code>92a91e9</code></a>
docs: prep for 7.10.4</li>
<li><a
href="https://github.com/nedbat/coveragepy/commit/9ee6390200e1946ba5458e86d6e9f46adace4751"><code>9ee6390</code></a>
debug: more details in debug messages</li>
<li><a
href="https://github.com/nedbat/coveragepy/commit/6af8a5d13314eba82c2c5974b2fbf133f09b51d0"><code>6af8a5d</code></a>
feat: patch=fork</li>
<li><a
href="https://github.com/nedbat/coveragepy/commit/0eb292d24d3790ec46f2961cd05136e9e5f5d0c6"><code>0eb292d</code></a>
refactor: a nicer way to inject config from the environment</li>
<li><a
href="https://github.com/nedbat/coveragepy/commit/183cd9b5358d41fc67210c66df9169a9e495df0b"><code>183cd9b</code></a>
build: tweaks to how the python build is bannered for tox</li>
<li><a
href="https://github.com/nedbat/coveragepy/commit/6c2fb87e14e0d18859cac4763577ef4f717c2f38"><code>6c2fb87</code></a>
chore: make upgrade</li>
<li><a
href="https://github.com/nedbat/coveragepy/commit/a22436cb0e17397a79ae480be0ce6f19b98b3188"><code>a22436c</code></a>
test: since 62434e79 we don't need to account for .tox</li>
<li><a
href="https://github.com/nedbat/coveragepy/commit/4ab4bb04db299cee912d1f930dcab59f01317f54"><code>4ab4bb0</code></a>
test: add a test for env var truncation</li>
<li><a
href="https://github.com/nedbat/coveragepy/commit/bf1a9706b3eb2a1c27743815e475ab6d966a6d6f"><code>bf1a970</code></a>
refactor: better style for constants</li>
<li>Additional commits viewable in <a
href="https://github.com/nedbat/coveragepy/compare/7.10.3...7.10.4">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=coverage&package-manager=pip&previous-version=7.10.3&new-version=7.10.4)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [zstandard](https://github.com/indygreg/python-zstandard) from
0.23.0 to 0.24.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/indygreg/python-zstandard/releases">zstandard's
releases</a>.</em></p>
<blockquote>
<h2>0.24.0</h2>
<h1>Backwards Compatibility Notes</h1>
<ul>
<li>Support for Python 3.8 has been dropped because it reached end of
life. Python 3.9 is the minimum supported Python version. The code
should still be compatible with Python 3.8 and removing of version
checks from <code>setup.py</code> will likely yield a working install.
However, this is not officially supported.</li>
</ul>
<h1>Changes</h1>
<ul>
<li>Bundled zstd library upgraded from 1.5.6 to 1.5.7. (<a
href="https://redirect.github.com/indygreg/python-zstandard/issues/255">#255</a>)</li>
<li>We now use and require cffi 1.17.0 or newer. Previously, the
constraint was &gt;=1.11.0 on Python &lt;3.13.</li>
<li>The <code>pyproject.toml</code> file now defines a
<code>[project]</code> section.</li>
<li>We now use GitHub's native ARM Linux runners to build wheels and run
tests. Previously, Linux ARM wheels were built inside a QEMU virtualized
environment and we didn't run tests on this platform.</li>
<li>We now use GitHub's native ARM Windows runners to build wheels and
run tests. Previously, Windows ARM wheels were cross compiled from an
x86-64 runner and we never ran tests for the Windows ARM platform.</li>
<li>We now <code>collections.abs.Buffer</code> on Python 3.12+ instead
of <code>typing.ByteString</code>, as <code>typing.ByteString</code> was
deprecated and later removed. (<a
href="https://redirect.github.com/indygreg/python-zstandard/issues/238">#238</a>,
<a
href="https://redirect.github.com/indygreg/python-zstandard/issues/262">#262</a>)</li>
<li>PyO3 Rust crate upgraded from 0.21 to 0.22 (<a
href="https://redirect.github.com/indygreg/python-zstandard/issues/257">#257</a>)
and later to 0.24.</li>
<li>Removed CI coverage for PyPy 3.9.</li>
<li>Added CI coverage for PyPy 3.11.</li>
<li>Anaconda Windows CI builds have been disabled because we're running
into an apparent conda bug.</li>
<li>Added CI coverage for Anaconda 3.12 and 3.13 on Linux and Windows
x86-64 (but the Windows builds no-op due to above issue).</li>
<li><code>get_frame_parameters()</code> now accepts an optional
<code>format</code> argument defining the zstandard frame type. You can
pass e.g. <code>zstandard.FORMAT_ZSTD1_MAGICLESS</code> to decode frames
without header magic. (<a
href="https://redirect.github.com/indygreg/python-zstandard/issues/217">#217</a>)</li>
<li>Initial Python 3.14 support. We build wheels and have CI test
coverage.</li>
</ul>
<h1>Source Archive Publishing Error</h1>
<p>During the release process of this version, we uploaded the source
archive to PyPI after some wheels. PyPI rejected the source archive
because of presence of a <code>license-file</code> entry while using
metadata version 2.4. We manually generated the source distribution
locally. The source distribution on PyPI therefore does not match what
GitHub Actions produced.</p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/indygreg/python-zstandard/blob/main/docs/news.rst">zstandard's
changelog</a>.</em></p>
<blockquote>
<h1>0.24.0 (released 2025-08-17)</h1>
<h2>Changes</h2>
<ul>
<li>Bundled zstd library upgraded from 1.5.6 to 1.5.7. (<a
href="https://redirect.github.com/indygreg/python-zstandard/issues/255">#255</a>)</li>
<li>We now use and require cffi 1.17.0 or newer. Previously, the
constraint
was &gt;=1.11.0 on Python &lt;3.13.</li>
<li>The <code>pyproject.toml</code> file now defines a
<code>[project]</code> section.</li>
<li>We now use GitHub's native ARM Linux runners to build wheels and run
tests.
Previously, Linux ARM wheels were built inside a QEMU virtualized
environment
and we didn't run tests on this platform.</li>
<li>We now use GitHub's native ARM Windows runners to build wheels and
run tests.
Previously, Windows ARM wheels were cross-compiled from an x86-64 runner
and
we never ran tests for the Windows ARM platform.</li>
<li>We now <code>collections.abs.Buffer</code> on Python 3.12+ instead
of <code>typing.ByteString</code>,
as <code>typing.ByteString</code> was deprecated and later removed. (<a
href="https://redirect.github.com/indygreg/python-zstandard/issues/238">#238</a>,
<a
href="https://redirect.github.com/indygreg/python-zstandard/issues/262">#262</a>)</li>
<li>PyO3 Rust crate upgraded from 0.21 to 0.22 (<a
href="https://redirect.github.com/indygreg/python-zstandard/issues/257">#257</a>)
and later to 0.24.</li>
<li>Removed CI coverage for PyPy 3.9.</li>
<li>Added CI coverage for PyPy 3.11.</li>
<li>Anaconda Windows CI builds have been disabled because we're running
into
an apparant conda bug.</li>
<li>Added CI coverage for Anaconda 3.12 and 3.13 on Linux and Windows
x86-64
(but the Windows builds no-op due to above issue).</li>
<li><code>get_frame_parameters()</code> now accepts an optional
<code>format</code> argument
defining the zstandard frame type. You can pass e.g.
<code>zstandard.FORMAT_ZSTD1_MAGICLESS</code> to decode frames without
header magic.
(<a
href="https://redirect.github.com/indygreg/python-zstandard/issues/217">#217</a>)</li>
<li>Initial Python 3.14 support. We build wheels and have CI test
coverage.</li>
</ul>
<h2>Backwards Compatibility Notes</h2>
<ul>
<li>Support for Python 3.8 has been dropped because it reached end of
life.
Python 3.9 is the minimum supported Python version. The code should
still be
compatible with Python 3.7 and removing of version checks from
<code>setup.py</code>
will likely yield a working install. However, this is not officially
supported.</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/indygreg/python-zstandard/commit/9223924b1db8f36cf1c7c2dcd55232093890d145"><code>9223924</code></a>
global: release 0.24.0</li>
<li><a
href="https://github.com/indygreg/python-zstandard/commit/b63f21e75c85537feb6e9ede6b515ce1f109ac6e"><code>b63f21e</code></a>
ci: remove cibuildwheel from <code>requirements.txt</code></li>
<li><a
href="https://github.com/indygreg/python-zstandard/commit/724df3df0ff524d6f6278e7ac1e72061f6b5bc62"><code>724df3d</code></a>
build: require cffi 1.17.0</li>
<li><a
href="https://github.com/indygreg/python-zstandard/commit/58fca18a3aaa9a520c33cc874517fc10d36957f7"><code>58fca18</code></a>
build: use static dependency metadata</li>
<li><a
href="https://github.com/indygreg/python-zstandard/commit/fd9553600d91626ed2070eb721bb01780cb37310"><code>fd95536</code></a>
docs: move the potential 1.0 feature list from <code>news.rst</code> to
`missing_feature...</li>
<li><a
href="https://github.com/indygreg/python-zstandard/commit/a32e7a6ee530c37e665b97a4ac6cabeccfb1ec79"><code>a32e7a6</code></a>
docs: fix incorrect <code>dict_id()</code> reference</li>
<li><a
href="https://github.com/indygreg/python-zstandard/commit/4110f711ca658e43b8ab03fd350ee80d22c59596"><code>4110f71</code></a>
ci: add Python 3.14 wheels and test coverage</li>
<li><a
href="https://github.com/indygreg/python-zstandard/commit/c950bbf5c86a9641bbab7d232cc5371475c7e025"><code>c950bbf</code></a>
ci: upgrade macOS wheel environment to Python 3.13</li>
<li><a
href="https://github.com/indygreg/python-zstandard/commit/075f8ca4eefd366f89f642037e44685953bcf1cf"><code>075f8ca</code></a>
docs: add top-level docs section for One-Shot APIs</li>
<li><a
href="https://github.com/indygreg/python-zstandard/commit/7312fae803fb33758f9ef6f9fafd5d33f912007f"><code>7312fae</code></a>
frameparams: support defining frame format for
<code>get_frame_parameters()</code></li>
<li>Additional commits viewable in <a
href="https://github.com/indygreg/python-zstandard/compare/0.23.0...0.24.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=zstandard&package-manager=pip&previous-version=0.23.0&new-version=0.24.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@pull pull bot locked and limited conversation to collaborators Aug 18, 2025
@pull pull bot added the ⤵️ pull label Aug 18, 2025
@pull pull bot merged commit 3587895 into tj-python:master Aug 18, 2025
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants