Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Deps: Bump the python-packages group with 12 updates #838

Closed

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Nov 6, 2023

Bumps the python-packages group with 12 updates:

Package From To
django 4.2.6 4.2.7
rope 1.10.0 1.11.0
sentry-sdk 1.32.0 1.34.0
pylint 2.17.7 3.0.2
pylint-django 2.5.4 2.5.5
pytest 7.4.2 7.4.3
pytest-django 4.5.2 4.6.0
pytest-env 1.0.1 1.1.1
black 23.10.0 23.10.1
charset-normalizer 3.3.1 3.3.2
fonttools 4.43.1 4.44.0
tomlkit 0.12.1 0.12.2

Updates django from 4.2.6 to 4.2.7

Commits
  • d254a54 [4.2.x] Bumped version for 4.2.7 release.
  • 048a9eb [4.2.x] Fixed CVE-2023-46695 -- Fixed potential DoS in UsernameField on Windows.
  • 3fae5d9 [4.2.x] Refs #30601 -- Fixed typos in docs/topics/db/transactions.txt.
  • a8aa940 [4.2.x] Refs #15578 -- Made cosmetic edits to fixtures docs.
  • 109f39a [4.2.x] Fixed #34932 -- Restored varchar_pattern_ops/text_pattern_ops index c...
  • 6161299 [4.2.x] Fixed typos in docs/ref/models/expressions.txt.
  • 696fbc3 [4.2.x] Fixed #30601 -- Doc'd the need to manually revert all app state on tr...
  • ffba631 [4.2.x] Fixed typo in docs/ref/contrib/gis/geos.txt.
  • 43a3646 [4.2.x] Fixed #15578 -- Stated the processing order of fixtures in the fixtur...
  • 0cd8b86 [4.2.x] Added stub release notes and release date for 4.2.7, 4.1.13, and 3.2.23.
  • Additional commits viewable in compare view

Updates rope from 1.10.0 to 1.11.0

Changelog

Sourced from rope's changelog.

Release 1.11.0

Commits
  • afe08c2 Update CHANGELOG
  • dfed096 Bump version
  • 90a781d Update CHANGELOG
  • 78315b5 Merge pull request #719 from tkrabel/named-inmemory-db
  • 340176a Merge remote-tracking branch 'origin/master' into named-inmemory-db
  • f75467d Change in-memory database name prefix memdb -> rope-
  • 9856c02 Change to use sha256 hashing
  • 7c39119 Merge remote-tracking branch 'origin/master' into named-inmemory-db
  • 4c3b48c Merge pull request #724 from python-rope/all-contributors/add-tkrabel
  • c7ef507 update .all-contributorsrc
  • Additional commits viewable in compare view

Updates sentry-sdk from 1.32.0 to 1.34.0

Release notes

Sourced from sentry-sdk's releases.

1.34.0

Various fixes & improvements

1.33.1

Various fixes & improvements

1.33.0

Various fixes & improvements

Changelog

Sourced from sentry-sdk's changelog.

1.34.0

Various fixes & improvements

1.33.1

Various fixes & improvements

1.33.0

Various fixes & improvements

Commits

Updates pylint from 2.17.7 to 3.0.2

Commits

Updates pylint-django from 2.5.4 to 2.5.5

Commits

Updates pytest from 7.4.2 to 7.4.3

Release notes

Sourced from pytest's releases.

pytest 7.4.3 (2023-10-24)

Bug Fixes

  • #10447: Markers are now considered in the reverse mro order to ensure base class markers are considered first -- this resolves a regression.

  • #11239: Fixed := in asserts impacting unrelated test cases.

  • #11439: Handled an edge case where :data:sys.stderr might already be closed when :ref:faulthandler is tearing down.

Commits
  • 2390610 Tweak changelog.rst
  • a0714aa Prepare release version 7.4.3
  • 44ad1c9 [7.4.x] fix #10447 - consider marks in reverse mro order to give base classes...
  • 5dc7725 [7.4.x] Ensure logging tests always cleanup after themselves (#11541)
  • a517827 [7.4.x] Configure ReadTheDocs to fail on warnings (#11540)
  • 21fe071 [7.4.x] fix for ValueError raised in faulthandler teardown code (#11455)
  • f8bb857 Force terminal width when running tests (#11425) (#11432)
  • 1944dc0 [7.4.x] Fix --import-mode=importlib when root contains __init__.py file (#1...
  • 946634c Merge pull request #11419 from nicoddemus/backport-11414-to-7.4.x
  • d849a3e [7.4.x] fix: closes #11343's [attr-defined] type errors (#11421)
  • Additional commits viewable in compare view

Updates pytest-django from 4.5.2 to 4.6.0

Release notes

Sourced from pytest-django's releases.

4.6.0

https://github.com/pytest-dev/pytest-django/blob/master/docs/changelog.rst#v460-2023-10-30

Changelog

Sourced from pytest-django's changelog.

v4.6.0 (2023-10-30)

Compatibility ^^^^^^^^^^^^^

  • Official Django 4.1 & 4.2 support.

  • Official Python 3.11 support.

  • Drop support for Python version 3.5, 3.6 & 3.7.

  • Drop official support for Django 4.0.

  • Drop support for pytest < 7.

Improvements ^^^^^^^^^^^^

  • Add support for setting :py:attr:available_apps <django.test.TransactionTestCase.available_apps> in the :func:django_db <pytest.mark.django_db> marker.

  • Convert Django :ref:test tags <django:topics-tagging-tests> to :ref:Pytest markers <pytest:mark examples>.

  • Show Django's version in the pytest django report header.

  • Add precise pytest_django.asserts.assertQuerySetEqual typing.

Bugfixes ^^^^^^^^

  • Fix bug where the effect of :func:@pytest.mark.ignore_template_errors <pytest.mark.ignore_template_errors> was not reset when using --fail-on-template-vars.
Commits
  • a703c8f Release 4.6.0
  • c3434f6 Update changelog
  • b578262 pyproject.toml: point to license file
  • 93e49a9 Excise mentions of setup.py
  • 8d188d7 Move setup.cfg/setuptools to pyproject.toml
  • 3bfcbb9 tox: remove unused readme target
  • c3effd1 Add .git-blame-ignore-revs file
  • 6939b23 Format code with Ruff
  • 8a499b2 Replace flake8, isort with ruff
  • 56c181e Remove requirements.txt, some Makefile rules
  • Additional commits viewable in compare view

Updates pytest-env from 1.0.1 to 1.1.1

Release notes

Sourced from pytest-env's releases.

1.1.1

What's Changed

Full Changelog: pytest-dev/pytest-env@1.1.0...1.1.1

1.1.0

What's Changed

New Contributors

Full Changelog: pytest-dev/pytest-env@1.0.1...1.1.0

Commits

Updates black from 23.10.0 to 23.10.1

Release notes

Sourced from black's releases.

23.10.1

Highlights

  • Maintanence release to get a fix out for GitHub Action edge case (#3957)

Preview style

  • Fix merging implicit multiline strings that have inline comments (#3956)
  • Allow empty first line after block open before a comment or compound statement (#3967)

Packaging

  • Change Dockerfile to hatch + compile black (#3965)

Integrations

  • The summary output for GitHub workflows is now suppressible using the summary parameter. (#3958)
  • Fix the action failing when Black check doesn't pass (#3957)

Documentation

Changelog

Sourced from black's changelog.

23.10.1

Highlights

  • Maintenance release to get a fix out for GitHub Action edge case (#3957)

Preview style

  • Fix merging implicit multiline strings that have inline comments (#3956)
  • Allow empty first line after block open before a comment or compound statement (#3967)

Packaging

  • Change Dockerfile to hatch + compile black (#3965)

Integrations

  • The summary output for GitHub workflows is now suppressible using the summary parameter. (#3958)
  • Fix the action failing when Black check doesn't pass (#3957)

Documentation

Commits

Updates charset-normalizer from 3.3.1 to 3.3.2

Release notes

Sourced from charset-normalizer's releases.

Version 3.3.2

3.3.2 (2023-10-31)

Fixed

  • Unintentional memory usage regression when using large payloads that match several encodings (#376)
  • Regression on some detection cases showcased in the documentation (#371)

Added

  • Noise (md) probe that identifies malformed Arabic representation due to the presence of letters in isolated form (credit to my wife, thanks!)
Changelog

Sourced from charset-normalizer's changelog.

3.3.2 (2023-10-31)

Fixed

  • Unintentional memory usage regression when using large payload that match several encoding (#376)
  • Regression on some detection case showcased in the documentation (#371)

Added

  • Noise (md) probe that identify malformed arabic representation due to the presence of letters in isolated form (credit to my wife)
Commits
  • 79dce48 🐛 Regression on some detection case showcased in the documentation (#371)...
  • a4b9b01 Bump github/codeql-action from 2.22.4 to 2.22.5 (#375)
  • dcc01cc Bump ossf/scorecard-action from 2.3.0 to 2.3.1 (#374)
  • 9cd402c Bump pytest from 7.4.2 to 7.4.3 (#373)
  • e274dcc 🐛 Fix unintentional memory usage regression when using large payload that...
  • 07f3041 ⬆️ Bump github/codeql-action from 2.22.3 to 2.22.4 (#370)
  • See full diff in compare view

Updates fonttools from 4.43.1 to 4.44.0

Release notes

Sourced from fonttools's releases.

4.44.0

  • [instancer] Recalc OS/2 AvgCharWidth after instancing if default changes (#3317).
  • [otlLib] Make ClassDefBuilder class order match varLib.merger's, i.e. large classes first, then glyph lexicographic order (#3321, #3324).
  • [instancer] Allow not specifying any of min:default:max values and let be filled up with fvar's values (#3322, #3323).
  • [instancer] When running --update-name-table ignore axes that have no STAT axis values (#3318, #3319).
  • [Debg] When dumping to ttx, write the embedded JSON as multi-line string with indentation (92cbfee0d).
  • [varStore] Handle > 65535 items per encoding by splitting VarData subtable (#3310).
  • [subset] Handle null-offsets in MarkLigPos subtables.
  • [subset] Keep East Asian spacing fatures vhal, halt, chws, vchw by default (#3305).
  • [instancer.solver] Fixed case where axisDef < lower and upper < axisMax (#3304).
  • [glyf] Speed up compilation, mostly around recalcBounds (#3301).
  • [varLib.interpolatable] Speed it up when working on variable fonts, plus various micro-optimizations (#3300).
  • Require unicodedata2 >= 15.1.0 when installed with 'unicode' extra, contains UCD 15.1.
Changelog

Sourced from fonttools's changelog.

4.44.0 (released 2023-11-03)

  • [instancer] Recalc OS/2 AvgCharWidth after instancing if default changes (#3317).
  • [otlLib] Make ClassDefBuilder class order match varLib.merger's, i.e. large classes first, then glyph lexicographic order (#3321, #3324).
  • [instancer] Allow not specifying any of min:default:max values and let be filled up with fvar's values (#3322, #3323).
  • [instancer] When running --update-name-table ignore axes that have no STAT axis values (#3318, #3319).
  • [Debg] When dumping to ttx, write the embedded JSON as multi-line string with indentation (92cbfee0d).
  • [varStore] Handle > 65535 items per encoding by splitting VarData subtable (#3310).
  • [subset] Handle null-offsets in MarkLigPos subtables.
  • [subset] Keep East Asian spacing fatures vhal, halt, chws, vchw by default (#3305).
  • [instancer.solver] Fixed case where axisDef < lower and upper < axisMax (#3304).
  • [glyf] Speed up compilation, mostly around recalcBounds (#3301).
  • [varLib.interpolatable] Speed it up when working on variable fonts, plus various micro-optimizations (#3300).
  • Require unicodedata2 >= 15.1.0 when installed with 'unicode' extra, contains UCD 15.1.
Commits
  • 4c64709 Release 4.44.0
  • 5c6fe71 Update NEWS.rst [skip ci]
  • db7d9ea Merge pull request #3325 from fonttools/unicode-15-1
  • e1b0dab [ci] test on pypy3.9
  • 6d43bd7 [setup.py] require unicodedata2>=15.1.0 for Unicode 15.1
  • 53e71f9 Merge pull request #3309 from fonttools/pyup-scheduled-update-2023-10-23
  • 335a1e5 re-run black v23.10 on all .py files
  • d210cc5 requirements.txt: tell pyup bot to keep scipy pinned for py3.8
  • 74da89b Merge pull request #3317 from fonttools/instantiate-avgcharwidth
  • 71e991b Fixup expectations
  • Additional commits viewable in compare view

Updates tomlkit from 0.12.1 to 0.12.2

Release notes

Sourced from tomlkit's releases.

0.12.2

What's Changed

New Contributors

Full Changelog: python-poetry/tomlkit@0.12.1...0.12.2

Changelog

Sourced from tomlkit's changelog.

[0.12.2] - 2023-11-02

Fixed

  • Fixed a bug that overwriting a sub table with a plain value raises an error. (#313)
  • Correct the return type of integer division. (#312)
Commits

Most Recent Ignore Conditions Applied to This Pull Request
Dependency Name Ignore Conditions
django [>= 3.a, < 4]

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the python-packages group with 12 updates:

| Package | From | To |
| --- | --- | --- |
| [django](https://github.com/django/django) | `4.2.6` | `4.2.7` |
| [rope](https://github.com/python-rope/rope) | `1.10.0` | `1.11.0` |
| [sentry-sdk](https://github.com/getsentry/sentry-python) | `1.32.0` | `1.34.0` |
| [pylint](https://github.com/pylint-dev/pylint) | `2.17.7` | `3.0.2` |
| [pylint-django](https://github.com/PyCQA/pylint-django) | `2.5.4` | `2.5.5` |
| [pytest](https://github.com/pytest-dev/pytest) | `7.4.2` | `7.4.3` |
| [pytest-django](https://github.com/pytest-dev/pytest-django) | `4.5.2` | `4.6.0` |
| [pytest-env](https://github.com/pytest-dev/pytest-env) | `1.0.1` | `1.1.1` |
| [black](https://github.com/psf/black) | `23.10.0` | `23.10.1` |
| [charset-normalizer](https://github.com/Ousret/charset_normalizer) | `3.3.1` | `3.3.2` |
| [fonttools](https://github.com/fonttools/fonttools) | `4.43.1` | `4.44.0` |
| [tomlkit](https://github.com/sdispater/tomlkit) | `0.12.1` | `0.12.2` |


Updates `django` from 4.2.6 to 4.2.7
- [Commits](django/django@4.2.6...4.2.7)

Updates `rope` from 1.10.0 to 1.11.0
- [Changelog](https://github.com/python-rope/rope/blob/master/CHANGELOG.md)
- [Commits](python-rope/rope@1.10.0...1.11.0)

Updates `sentry-sdk` from 1.32.0 to 1.34.0
- [Release notes](https://github.com/getsentry/sentry-python/releases)
- [Changelog](https://github.com/getsentry/sentry-python/blob/master/CHANGELOG.md)
- [Commits](getsentry/sentry-python@1.32.0...1.34.0)

Updates `pylint` from 2.17.7 to 3.0.2
- [Release notes](https://github.com/pylint-dev/pylint/releases)
- [Commits](pylint-dev/pylint@v2.17.7...v3.0.2)

Updates `pylint-django` from 2.5.4 to 2.5.5
- [Release notes](https://github.com/PyCQA/pylint-django/releases)
- [Changelog](https://github.com/pylint-dev/pylint-django/blob/master/CHANGELOG.rst)
- [Commits](https://github.com/PyCQA/pylint-django/commits)

Updates `pytest` from 7.4.2 to 7.4.3
- [Release notes](https://github.com/pytest-dev/pytest/releases)
- [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst)
- [Commits](pytest-dev/pytest@7.4.2...7.4.3)

Updates `pytest-django` from 4.5.2 to 4.6.0
- [Release notes](https://github.com/pytest-dev/pytest-django/releases)
- [Changelog](https://github.com/pytest-dev/pytest-django/blob/master/docs/changelog.rst)
- [Commits](pytest-dev/pytest-django@v4.5.2...v4.6.0)

Updates `pytest-env` from 1.0.1 to 1.1.1
- [Release notes](https://github.com/pytest-dev/pytest-env/releases)
- [Commits](pytest-dev/pytest-env@1.0.1...1.1.1)

Updates `black` from 23.10.0 to 23.10.1
- [Release notes](https://github.com/psf/black/releases)
- [Changelog](https://github.com/psf/black/blob/main/CHANGES.md)
- [Commits](psf/black@23.10.0...23.10.1)

Updates `charset-normalizer` from 3.3.1 to 3.3.2
- [Release notes](https://github.com/Ousret/charset_normalizer/releases)
- [Changelog](https://github.com/Ousret/charset_normalizer/blob/master/CHANGELOG.md)
- [Commits](jawah/charset_normalizer@3.3.1...3.3.2)

Updates `fonttools` from 4.43.1 to 4.44.0
- [Release notes](https://github.com/fonttools/fonttools/releases)
- [Changelog](https://github.com/fonttools/fonttools/blob/main/NEWS.rst)
- [Commits](fonttools/fonttools@4.43.1...4.44.0)

Updates `tomlkit` from 0.12.1 to 0.12.2
- [Release notes](https://github.com/sdispater/tomlkit/releases)
- [Changelog](https://github.com/sdispater/tomlkit/blob/master/CHANGELOG.md)
- [Commits](python-poetry/tomlkit@0.12.1...0.12.2)

---
updated-dependencies:
- dependency-name: django
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-packages
- dependency-name: rope
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-packages
- dependency-name: sentry-sdk
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-packages
- dependency-name: pylint
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: python-packages
- dependency-name: pylint-django
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python-packages
- dependency-name: pytest
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python-packages
- dependency-name: pytest-django
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python-packages
- dependency-name: pytest-env
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python-packages
- dependency-name: black
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: python-packages
- dependency-name: charset-normalizer
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: python-packages
- dependency-name: fonttools
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: python-packages
- dependency-name: tomlkit
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: python-packages
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot requested a review from a team as a code owner November 6, 2023 04:39
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Nov 6, 2023
@greenbonebot greenbonebot enabled auto-merge (rebase) November 6, 2023 04:39
Copy link
Contributor Author

dependabot bot commented on behalf of github Nov 6, 2023

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot bot closed this Nov 6, 2023
auto-merge was automatically disabled November 6, 2023 14:31

Pull request was closed

@dependabot dependabot bot deleted the dependabot/pip/main/python-packages-0f8d25aa9e branch November 6, 2023 14:31
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file python Pull requests that update Python code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants