Skip to content

chore(deps): bump the dependencies group with 25 updates#508

Merged
TrueBrain merged 1 commit intomainfrom
dependabot/pip/dependencies-0975f5fff9
Jan 4, 2024
Merged

chore(deps): bump the dependencies group with 25 updates#508
TrueBrain merged 1 commit intomainfrom
dependabot/pip/dependencies-0975f5fff9

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Jan 4, 2024

Bumps the dependencies group with 25 updates:

Package From To
aiohttp 3.8.5 3.9.1
anyio 3.7.1 4.2.0
async-timeout 4.0.2 4.0.3
attrs 23.1.0 23.2.0
certifi 2023.7.22 2023.11.17
cffi 1.15.1 1.16.0
charset-normalizer 3.2.0 3.3.2
click 8.1.6 8.1.7
cryptography 41.0.2 41.0.7
exceptiongroup 1.1.2 1.2.0
frozenlist 1.4.0 1.4.1
gitdb 4.0.10 4.0.11
gitpython 3.1.32 3.1.40
httpcore 0.17.3 1.0.2
httpx 0.24.1 0.26.0
idna 3.4 3.6
pygments 2.15.1 2.17.2
regex 2023.6.3 2023.12.25
sentry-sdk 1.28.1 1.39.1
smmap 5.0.0 5.0.1
typing-extensions 4.7.1 4.9.0
urllib3 2.0.4 2.1.0
wcwidth 0.2.6 0.2.12
wikitextparser 0.53.0 0.55.7
yarl 1.9.2 1.9.4

Updates aiohttp from 3.8.5 to 3.9.1

Release notes

Sourced from aiohttp's releases.

3.9.1

Bugfixes

  • Fixed importing aiohttp under PyPy on Windows.

    (#7848)

  • Fixed async concurrency safety in websocket compressor.

    (#7865)

  • Fixed ClientResponse.close() releasing the connection instead of closing.

    (#7869)

  • Fixed a regression where connection may get closed during upgrade. -- by :user:Dreamsorcerer

    (#7879)

  • Fixed messages being reported as upgraded without an Upgrade header in Python parser. -- by :user:Dreamsorcerer

    (#7895)

3.9.0

Features

  • Introduced AppKey for static typing support of Application storage. See https://docs.aiohttp.org/en/stable/web_advanced.html#application-s-config

    (#5864)

  • Added a graceful shutdown period which allows pending tasks to complete before the application's cleanup is called. The period can be adjusted with the shutdown_timeout parameter. -- by :user:Dreamsorcerer. See https://docs.aiohttp.org/en/latest/web_advanced.html#graceful-shutdown

    (#7188)

  • Added handler_cancellation <https://docs.aiohttp.org/en/stable/web_advanced.html#web-handler-cancellation>_ parameter to cancel web handler on client disconnection. -- by :user:mosquito This (optionally) reintroduces a feature removed in a previous release. Recommended for those looking for an extra level of protection against denial-of-service attacks.

    (#7056)

  • Added support for setting response header parameters max_line_size and max_field_size.

... (truncated)

Changelog

Sourced from aiohttp's changelog.

3.9.1 (2023-11-26)

Bugfixes

  • Fixed importing aiohttp under PyPy on Windows.

    [#7848](https://github.com/aio-libs/aiohttp/issues/7848) <https://github.com/aio-libs/aiohttp/issues/7848>_

  • Fixed async concurrency safety in websocket compressor.

    [#7865](https://github.com/aio-libs/aiohttp/issues/7865) <https://github.com/aio-libs/aiohttp/issues/7865>_

  • Fixed ClientResponse.close() releasing the connection instead of closing.

    [#7869](https://github.com/aio-libs/aiohttp/issues/7869) <https://github.com/aio-libs/aiohttp/issues/7869>_

  • Fixed a regression where connection may get closed during upgrade. -- by :user:Dreamsorcerer

    [#7879](https://github.com/aio-libs/aiohttp/issues/7879) <https://github.com/aio-libs/aiohttp/issues/7879>_

  • Fixed messages being reported as upgraded without an Upgrade header in Python parser. -- by :user:Dreamsorcerer

    [#7895](https://github.com/aio-libs/aiohttp/issues/7895) <https://github.com/aio-libs/aiohttp/issues/7895>_

3.9.0 (2023-11-18)

Features

  • Introduced AppKey for static typing support of Application storage. See https://docs.aiohttp.org/en/stable/web_advanced.html#application-s-config

    [#5864](https://github.com/aio-libs/aiohttp/issues/5864) <https://github.com/aio-libs/aiohttp/issues/5864>_

  • Added a graceful shutdown period which allows pending tasks to complete before the application's cleanup is called. The period can be adjusted with the shutdown_timeout parameter. -- by :user:Dreamsorcerer. See https://docs.aiohttp.org/en/latest/web_advanced.html#graceful-shutdown

    [#7188](https://github.com/aio-libs/aiohttp/issues/7188) <https://github.com/aio-libs/aiohttp/issues/7188>_

  • Added handler_cancellation <https://docs.aiohttp.org/en/stable/web_advanced.html#web-handler-cancellation>_ parameter to cancel web handler on client disconnection. -- by :user:mosquito This (optionally) reintroduces a feature removed in a previous release.

... (truncated)

Commits

Updates anyio from 3.7.1 to 4.2.0

Release notes

Sourced from anyio's releases.

4.2.0

  • Add support for byte-based paths in connect_unix, create_unix_listeners, create_unix_datagram_socket, and create_connected_unix_datagram_socket. (PR by Lura Skye)

  • Enabled the Event and CapacityLimiter classes to be instantiated outside an event loop thread

  • Broadly improved/fixed the type annotations. Among other things, many functions and methods that take variadic positional arguments now make use of PEP 646 TypeVarTuple to allow the positional arguments to be validated by static type checkers. These changes affected numerous methods and functions, including:

    • anyio.run()
    • TaskGroup.start_soon()
    • anyio.from_thread.run()
    • anyio.from_thread.run_sync()
    • anyio.to_thread.run_sync()
    • anyio.to_process.run_sync()
    • BlockingPortal.call()
    • BlockingPortal.start_task_soon()
    • BlockingPortal.start_task()

    (also resolves #560)

  • Fixed various type annotations of anyio.Path to match Typeshed:

    • anyio.Path.__lt__()
    • anyio.Path.__le__()
    • anyio.Path.__gt__()
    • anyio.Path.__ge__()
    • anyio.Path.__truediv__()
    • anyio.Path.__rtruediv__()
    • anyio.Path.hardlink_to()
    • anyio.Path.samefile()
    • anyio.Path.symlink_to()
    • anyio.Path.with_segments()

    (PR by Ganden Schaffner)

  • Fixed adjusting the total number of tokens in a CapacityLimiter on asyncio failing to wake up tasks waiting to acquire the limiter in certain edge cases (fixed with help from Egor Blagov)

  • Fixed loop_factory and use_uvloop options not being used on the asyncio backend (#643)

  • Fixed cancellation propagating on asyncio from a task group to child tasks if the task hosting the task group is in a shielded cancel scope (#642)

4.1.0

  • Adapted to API changes made in Trio v0.23:
    • Call trio.to_thread.run_sync() using the abandon_on_cancel keyword argument instead of cancellable
    • Removed a checkpoint when exiting a task group
    • Renamed the cancellable argument in anyio.to_thread.run_sync() to abandon_on_cancel (and deprecated the old parameter name)
    • Bumped minimum version of Trio to v0.23
  • Added support for voluntary thread cancellation via anyio.from_thread.check_cancelled()
  • Bumped minimum version of trio to v0.23
  • Exposed the ResourceGuard class in the public API (#627)
  • Fixed RuntimeError: Runner is closed when running higher-scoped async generator fixtures in some cases (#619)

... (truncated)

Changelog

Sourced from anyio's changelog.

Version history

This library adheres to Semantic Versioning 2.0 <http://semver.org/>_.

UNRELEASED

  • Added support for the Python 3.12 walk_up keyword argument in anyio.Path.relative_to() (PR by Colin Taylor)

4.2.0

  • Add support for byte-based paths in connect_unix, create_unix_listeners, create_unix_datagram_socket, and create_connected_unix_datagram_socket. (PR by Lura Skye)

  • Enabled the Event and CapacityLimiter classes to be instantiated outside an event loop thread

  • Broadly improved/fixed the type annotations. Among other things, many functions and methods that take variadic positional arguments now make use of PEP 646 TypeVarTuple to allow the positional arguments to be validated by static type checkers. These changes affected numerous methods and functions, including:

    • anyio.run()
    • TaskGroup.start_soon()
    • anyio.from_thread.run()
    • anyio.from_thread.run_sync()
    • anyio.to_thread.run_sync()
    • anyio.to_process.run_sync()
    • BlockingPortal.call()
    • BlockingPortal.start_task_soon()
    • BlockingPortal.start_task()

    (also resolves [#560](https://github.com/agronholm/anyio/issues/560) <https://github.com/agronholm/anyio/issues/560>_)

  • Fixed various type annotations of anyio.Path to match Typeshed:

    • anyio.Path.__lt__()
    • anyio.Path.__le__()
    • anyio.Path.__gt__()
    • anyio.Path.__ge__()
    • anyio.Path.__truediv__()
    • anyio.Path.__rtruediv__()
    • anyio.Path.hardlink_to()
    • anyio.Path.samefile()
    • anyio.Path.symlink_to()
    • anyio.Path.with_segments()

    (PR by Ganden Schaffner)

  • Fixed adjusting the total number of tokens in a CapacityLimiter on asyncio failing to wake up tasks waiting to acquire the limiter in certain edge cases (fixed with help from Egor Blagov)

... (truncated)

Commits
  • f757314 Bumped up the version
  • fe31dd5 Added Litestar to the downstream test suite
  • b7be190 Updated GitHub actions
  • 45b9ece Rearranged the changelog
  • 0b66994 Fix more Path typing that doesn't match Typeshed (#653)
  • e5fadb3 Added mention of anyio.from_thread.run_sync() to the changelog
  • 89795b9 Used TypeVarTuple and ParamSpec in several places (#652)
  • 3a4ec47 Removed the pyright version pin
  • 28516e2 Enabled Event and CapacityLimiter to be instantiated outside an event loop (#...
  • 44ca5ea Fixed cancellation propagation when task group host is in a shielded scope (#...
  • Additional commits viewable in compare view

Updates async-timeout from 4.0.2 to 4.0.3

Release notes

Sourced from async-timeout's releases.

4.0.3

  • Fixed compatibility with asyncio.timeout() on Python 3.11+.
  • Added support for Python 3.11.
  • Dropped support for Python 3.6.
Changelog

Sourced from async-timeout's changelog.

4.0.3 (2023-08-10)

  • Fixed compatibility with asyncio.timeout() on Python 3.11+.
  • Added support for Python 3.11.
  • Dropped support for Python 3.6.
Commits

Updates attrs from 23.1.0 to 23.2.0

Commits

Updates certifi from 2023.7.22 to 2023.11.17

Commits
  • 515962b Merge pull request #252 from certifi/create-pull-request/patch
  • 28b2a0d 2023.11.17
  • 7ccda9f Bump actions/checkout from 4.1.0 to 4.1.1 (#251)
  • 5e4bb9e Bump actions/setup-python from 4.7.0 to 4.7.1 (#248)
  • 610354f Bump actions/checkout from 4.0.0 to 4.1.0 (#247)
  • 2d98c76 Bump actions/upload-artifact from 3.1.2 to 3.1.3 (#246)
  • 7f0e639 ci: add minimal permissions to workflows bump.yml and release.yml (#245)
  • 600713d Bump actions/checkout from 3.6.0 to 4.0.0 (#244)
  • 0435b2a Bump actions/checkout from 3.5.3 to 3.6.0 (#242)
  • 25ea83a Fix bash
  • Additional commits viewable in compare view

Updates cffi from 1.15.1 to 1.16.0

Release notes

Sourced from cffi's releases.

v1.16.0

  • Add support for Python 3.12. With the removal of distutils from Python 3.12, projects using CFFI features that depend on distutils at runtime must add a dependency on setuptools to function under Python 3.12+. CFFI does not declare a runtime setuptools requirement to avoid an unnecessary dependency for projects that do not require it.
  • Drop support for end-of-life Python versions (2.7, 3.6, 3.7).
  • Add support for PEP517 builds; setuptools is now a required build dependency.
  • Declare python_requires metadata for Python 3.8+. This allows unsupported Pythons to continue using previously released sdists and wheels.
  • Move project source under src/; a more standard layout that also enables CI to more easily catch packaging errors.

v1.16.0rc2

  • Fix packaging issue in v1.16.0rc1.
  • Rearrange project sources (src/ layout) so packaging tests can properly detect similar issues in the future.

Full Changelog: python-cffi/cffi@v1.16.0rc1...v1.16.0rc2

v1.16.0rc1

  • Add support for Python 3.12. With the removal of distutils from Python 3.12, projects using CFFI features that depend on distutils at runtime must add a dependency on setuptools to function under Python 3.12+. CFFI does not declare a runtime setuptools requirement to avoid an unnecessary dependency for projects that do not require it.
  • Drop support for end-of-life Python versions (2.7, 3.6, 3.7).
  • Move project home to python-cffi/cffi on GitHub.
  • Add support for PEP517 builds; setuptools is now a required build dependency.
  • Declare python_requires metadata for Python 3.8+. This allows unsupported Pythons to continue using previously released sdists and wheels.
  • Add missing calls to PyObject_GC_UnTrack to avoid ResourceWarning 15c4b71d5e3f2295c0e4773e99b23ac751e02534
Commits

Updates charset-normalizer from 3.2.0 to 3.3.2

Release notes

Sourced from charset-normalizer's releases.

Version 3.3.2

3.3.2 (2023-10-31)

Fixed

  • Unintentional memory usage regression when using large payloads that match several encodings (#376)
  • Regression on some detection cases showcased in the documentation (#371)

Added

  • Noise (md) probe that identifies malformed Arabic representation due to the presence of letters in isolated form (credit to my wife, thanks!)

Version 3.3.1

3.3.1 (2023-10-22)

Changed

  • Optional mypyc compilation upgraded to version 1.6.1 for Python >= 3.8
  • Improved the general detection reliability based on reports from the community

Release 3.3.0

3.3.0 (2023-09-30)

Added

  • Allow to execute the CLI (e.g. normalizer) through python -m charset_normalizer.cli or python -m charset_normalizer
  • Support for 9 forgotten encodings that are supported by Python but unlisted in encoding.aliases as they have no alias (#323)

Removed

  • (internal) Redundant utils.is_ascii function and unused function is_private_use_only
  • (internal) charset_normalizer.assets is moved inside charset_normalizer.constant

Changed

  • (internal) Unicode code blocks in constants are updated using the latest v15.0.0 definition to improve detection
  • Optional mypyc compilation upgraded to version 1.5.1 for Python >= 3.8

Fixed

  • Unable to properly sort CharsetMatch when both chaos/noise and coherence were close due to an unreachable condition in __lt__ (#350)
Changelog

Sourced from charset-normalizer's changelog.

3.3.2 (2023-10-31)

Fixed

  • Unintentional memory usage regression when using large payload that match several encoding (#376)
  • Regression on some detection case showcased in the documentation (#371)

Added

  • Noise (md) probe that identify malformed arabic representation due to the presence of letters in isolated form (credit to my wife)

3.3.1 (2023-10-22)

Changed

  • Optional mypyc compilation upgraded to version 1.6.1 for Python >= 3.8
  • Improved the general detection reliability based on reports from the community

3.3.0 (2023-09-30)

Added

  • Allow to execute the CLI (e.g. normalizer) through python -m charset_normalizer.cli or python -m charset_normalizer
  • Support for 9 forgotten encoding that are supported by Python but unlisted in encoding.aliases as they have no alias (#323)

Removed

  • (internal) Redundant utils.is_ascii function and unused function is_private_use_only
  • (internal) charset_normalizer.assets is moved inside charset_normalizer.constant

Changed

  • (internal) Unicode code blocks in constants are updated using the latest v15.0.0 definition to improve detection
  • Optional mypyc compilation upgraded to version 1.5.1 for Python >= 3.8

Fixed

  • Unable to properly sort CharsetMatch when both chaos/noise and coherence were close due to an unreachable condition in __lt__ (#350)
Commits
  • 79dce48 🐛 Regression on some detection case showcased in the documentation (#371)...
  • a4b9b01 Bump github/codeql-action from 2.22.4 to 2.22.5 (#375)
  • dcc01cc Bump ossf/scorecard-action from 2.3.0 to 2.3.1 (#374)
  • 9cd402c Bump pytest from 7.4.2 to 7.4.3 (#373)
  • e274dcc 🐛 Fix unintentional memory usage regression when using large payload that...
  • 07f3041 ⬆️ Bump github/codeql-action from 2.22.3 to 2.22.4 (#370)
  • 5208644 🔖 Release 3.3.1 (#367)
  • 66966f1 ❇️ Improve the detection around some cases (#366)
  • 49653a6 ⬆️ Bump actions/setup-python from 4.7.0 to 4.7.1 (#359)
  • f6a66ed ⬆️ Bump pypa/cibuildwheel from 2.16.0 to 2.16.2 (#361)
  • Additional commits viewable in compare view

Updates click from 8.1.6 to 8.1.7

Release notes

Sourced from click's releases.

8.1.7

This is a fix release for the 8.1.x feature branch.

Changelog

Sourced from click's changelog.

Version 8.1.7

Released 2023-08-17

  • Fix issue with regex flags in shell completion. :issue:2581
  • Bash version detection issues a warning instead of an error. :issue:2574
  • Fix issue with completion script for Fish shell. :issue:2567
Commits
  • 874ca2b release version 8.1.7
  • 6e1f6d3 completion(fish): add back ; as line endings in fish script (#2570)
  • a955c77 update fish enabling script
  • 3c1529e add back semicolons in fish script
  • a260ca6 Replace bash shell completion version error with warning (#2576)
  • d9db70c bash version support shows warning instead of error
  • 22b9b1c Fix incorrect passing of flags to re.sub (#2581)
  • d69d210 fix flake8 finding
  • af2da1e Fix incorrect passing of flags to re.sub
  • bb6a872 start version 8.1.7
  • Additional commits viewable in compare view

Updates cryptography from 41.0.2 to 41.0.7

Changelog

Sourced from cryptography's changelog.

41.0.7 - 2023-11-27


* Fixed compilation when using LibreSSL 3.8.2.

.. _v41-0-6:


41.0.6 - 2023-11-27

  • Fixed a null-pointer-dereference and segfault that could occur when loading certificates from a PKCS#7 bundle. Credit to pkuzco for reporting the issue. CVE-2023-49083

.. _v41-0-5:

41.0.5 - 2023-10-24


* Updated Windows, macOS, and Linux wheels to be compiled with OpenSSL 3.1.4.
* Added a function to support an upcoming ``pyOpenSSL`` release.

.. _v41-0-4:


41.0.4 - 2023-09-19

  • Updated Windows, macOS, and Linux wheels to be compiled with OpenSSL 3.1.3.

.. _v41-0-3:

41.0.3 - 2023-08-01


* Fixed performance regression loading DH public keys.
* Fixed a memory leak when using
  :class:`~cryptography.hazmat.primitives.ciphers.aead.ChaCha20Poly1305`.
* Updated Windows, macOS, and Linux wheels to be compiled with OpenSSL 3.1.2.

.. _v41-0-2:

Commits

Updates exceptiongroup from 1.1.2 to 1.2.0

Release notes

Sourced from exceptiongroup's releases.

1.2.0

  • Added special monkeypatching if Apport has overridden sys.excepthook so it will format exception groups correctly (PR by John Litborn)
  • Added a backport of contextlib.suppress() from Python 3.12.1 which also handles suppressing exceptions inside exception groups
  • Fixed bare raise in a handler reraising the original naked exception rather than an exception group which is what is raised when you do a raise in an except* handler
Changelog

Sourced from exceptiongroup's changelog.

Version history

This library adheres to Semantic Versioning 2.0 <http://semver.org/>_.

1.2.0

  • Added special monkeypatching if Apport <https://github.com/canonical/apport>_ has overridden sys.excepthook so it will format exception groups correctly (PR by John Litborn)
  • Added a backport of contextlib.suppress() from Python 3.12.1 which also handles suppressing exceptions inside exception groups
  • Fixed bare raise in a handler reraising the original naked exception rather than an exception group which is what is raised when you do a raise in an except* handler

1.1.3

  • catch() now raises a TypeError if passed an async exception handler instead of just giving a RuntimeWarning about the coroutine never being awaited. (#66, PR by John Litborn)
  • Fixed plain raise statement in an exception handler callback to work like a raise in an except* block
  • Fixed new exception group not being chained to the original exception when raising an exception group from exceptions raised in handler callbacks
  • Fixed type annotations of the derive(), subgroup() and split() methods to match the ones in typeshed

1.1.2

  • Changed handling of exceptions in exception group handler callbacks to not wrap a single exception in an exception group, as per CPython issue 103590 <https://github.com/python/cpython/issues/103590>_

1.1.1

  • Worked around CPython issue [#98778](https://github.com/agronholm/exceptiongroup/issues/98778) <https://github.com/python/cpython/issues/98778>_, urllib.error.HTTPError(..., fp=None) raises KeyError on unknown attribute access, on affected Python versions. (PR by Zac Hatfield-Dodds)

1.1.0

  • Backported upstream fix for gh-99553 (custom subclasses of BaseExceptionGroup that also inherit from Exception should not be able to wrap base exceptions)
  • Moved all initialization code to __new__() (thus matching Python 3.11 behavior)

1.0.4

  • Fixed regression introduced in v1.0.3 where the code computing the suggestions would

... (truncated)

Commits
  • 4e2df21 Added the release version
  • f7c00cf Backported contextlib.suppress from Python 3.12.1 (#95)
  • 1ede26f Enabled pyupgrade ruff rules
  • 767e62b Eliminated pyupgrade and black in favor of ruff/ruff-format
  • d025269 Fixed bare raise in a handler not raising an exception group
  • 4357e11 Updated the checkout action to the latest version
  • e299167 [pre-commit.ci] pre-commit autoupdate (#94)
  • 4e4e879 [pre-commit.ci] pre-commit autoupdate (#92)
  • 27a2963 [pre-commit.ci] pre-commit autoupdate (#90)
  • fae9d9a Monkeypatch Apport excepthook (#88)
  • Additional commits viewable in compare view

Updates frozenlist from 1.4.0 to 1.4.1

Release notes

Sourced from frozenlist's releases.

1.4.1

Packaging updates and notes for downstreams

  • Declared Python 3.12 and PyPy 3.8-3.10 supported officially in the distribution package metadata.

    Related issues and pull requests on GitHub: #553.

  • Replaced the packaging is replaced from an old-fashioned :file:setup.py to an in-tree :pep:517 build backend -- by :user:webknjaz.

    Whenever the end-users or downstream packagers need to build frozenlist from source (a Git checkout or an sdist), they may pass a config_settings flag pure-python. If this flag is not set, a C-extension will be built and included into the distribution.

    Here is how this can be done with pip:

    .. code-block:: console

    $ python3 -m pip install . --config-settings=pure-python=

    This will also work with -e | --editable.

    The same can be achieved via pypa/build:

    .. code-block:: console

    $ python3 -m build --config-setting=pure-python=

    Adding -w | --wheel can force pypa/build produce a wheel from source directly, as opposed to building an sdist and then building from it.

    Related issues and pull requests on GitHub: #560.

Contributor-facing changes

  • It is now possible to request line tracing in Cython builds using the with-cython-tracing :pep:517 config setting -- :user:webknjaz.

    This can be used in CI and development environment to measure coverage on Cython modules, but is not normally useful to the end-users or

... (truncated)

Changelog

Sourced from frozenlist's changelog.

1.4.1 (2023-12-15)

Packaging updates and notes for downstreams

  • Declared Python 3.12 and PyPy 3.8-3.10 supported officially in the distribution package metadata.

    Related issues and pull requests on GitHub: :issue:553.

  • Replaced the packaging is replaced from an old-fashioned :file:setup.py to an in-tree :pep:517 build backend -- by :user:webknjaz.

    Whenever the end-users or downstream packagers need to build frozenlist from source (a Git checkout or an sdist), they may pass a config_settings flag pure-python. If this flag is not set, a C-extension will be built and included into the distribution.

    Here is how this can be done with pip:

    .. code-block:: console

    $ python3 -m pip install . --config-settings=pure-python=

    This will also work with -e | --editable.

    The same can be achieved via pypa/build:

    .. code-block:: console

    $ python3 -m build --config-setting=pure-python=

    Adding -w | --wheel can force pypa/build produce a wheel from source directly, as opposed to building an sdist and then building from it.

    Related issues and pull requests on GitHub: :issue:560.

Contributor-facing changes

  • It is now possible to request line tracing in Cython builds using the with-cython-tracing :pep:517 config setting -- :user:webknjaz.

... (truncated)

Commits
  • 457b28e ⇪📦 Bump to v1.4.1
  • 4998859 📝 Mark "dev" as a known word
  • 3d740da ⇪📦 Bump to v1.4.1.dev0
  • d92751c 🧪 Cache pre-commit.com virtualenvs @ CI
  • 7394415 🧪🐛 List explicit MyPy coverage.xml paths @ CI
  • a26ba84 🧪 Update codecov action input to plural files
  • e12ecf6 🧪 Upload MyPy coverage to Codecov
  • 59b9a74 🐛🧪 Fix the operator in test_lt
  • 01720b2 🧪 Keep building macosx_x86_64 wheels for tests
  • d9f5e0c 🧪💅 Add a reusable project name var to CI/CD
  • Additional commits viewable in compare view

Updates gitdb from 4.0.10 to 4.0.11

Release notes

Sourced from gitdb's releases.

4.0.11

What's Changed

New Contributors

Full Changelog: gitpython-developers/gitdb@4.0.10...4.0.11

Commits
  • 2057ae6 bump versions to prepare for next release
  • 6a22706 Merge pull request #100 from gitpython-developers/dependabot/submodules/gitdb...
  • 8e61396 Bump gitdb/ext/smmap from 334ef84 to f1ace75
  • 9ea0635 Merge pull request #99 from EliahKagan/submodule-dependabot
  • 12db86c Have Dependabot update smmap submodule dependency
  • 8ec2390 Merge pull request #98 from DeflateAwning/patch-1
  • 70098c9 Add all to exc for linting
  • 256d341 Merge pull request #97 from EliahKagan/312stable
  • 00bbc44 No longer treat 3.12 as experimental on CI
  • cd8da41 Run CI on all branches
  • Additional commits viewable in compare view

Updates gitpython from 3.1.32 to 3.1.40

Release notes

Sourced from gitpython's releases.

3.1.40 - fix downstream CI

What's Changed

@dependabot
chore(deps): bump the dependencies group with 25 updates
e2e1aa8 
Bumps the dependencies group with 25 updates:

| Package | From | To |
| --- | --- | --- |
| [aiohttp](https://github.com/aio-libs/aiohttp) | `3.8.5` | `3.9.1` |
| [anyio](https://github.com/agronholm/anyio) | `3.7.1` | `4.2.0` |
| [async-timeout](https://github.com/aio-libs/async-timeout) | `4.0.2` | `4.0.3` |
| [attrs](https://github.com/sponsors/hynek) | `23.1.0` | `23.2.0` |
| [certifi](https://github.com/certifi/python-certifi) | `2023.7.22` | `2023.11.17` |
| [cffi](https://github.com/python-cffi/cffi) | `1.15.1` | `1.16.0` |
| [charset-normalizer](https://github.com/Ousret/charset_normalizer) | `3.2.0` | `3.3.2` |
| [click](https://github.com/pallets/click) | `8.1.6` | `8.1.7` |
| [cryptography](https://github.com/pyca/cryptography) | `41.0.2` | `41.0.7` |
| [exceptiongroup](https://github.com/agronholm/exceptiongroup) | `1.1.2` | `1.2.0` |
| [frozenlist](https://github.com/aio-libs/frozenlist) | `1.4.0` | `1.4.1` |
| [gitdb](https://github.com/gitpython-developers/gitdb) | `4.0.10` | `4.0.11` |
| [gitpython](https://github.com/gitpython-developers/GitPython) | `3.1.32` | `3.1.40` |
| [httpcore](https://github.com/encode/httpcore) | `0.17.3` | `1.0.2` |
| [httpx](https://github.com/encode/httpx) | `0.24.1` | `0.26.0` |
| [idna](https://github.com/kjd/idna) | `3.4` | `3.6` |
| [pygments](https://github.com/pygments/pygments) | `2.15.1` | `2.17.2` |
| [regex](https://github.com/mrabarnett/mrab-regex) | `2023.6.3` | `2023.12.25` |
| [sentry-sdk](https://github.com/getsentry/sentry-python) | `1.28.1` | `1.39.1` |
| [smmap](https://github.com/gitpython-developers/smmap) | `5.0.0` | `5.0.1` |
| [typing-extensions](https://github.com/python/typing_extensions) | `4.7.1` | `4.9.0` |
| [urllib3](https://github.com/urllib3/urllib3) | `2.0.4` | `2.1.0` |
| [wcwidth](https://github.com/jquast/wcwidth) | `0.2.6` | `0.2.12` |
| [wikitextparser](https://github.com/5j9/wikitextparser) | `0.53.0` | `0.55.7` |
| [yarl](https://github.com/aio-libs/yarl) | `1.9.2` | `1.9.4` |


Updates `aiohttp` from 3.8.5 to 3.9.1
- [Release notes](https://github.com/aio-libs/aiohttp/releases)
- [Changelog](https://github.com/aio-libs/aiohttp/blob/master/CHANGES.rst)
- [Commits](aio-libs/aiohttp@v3.8.5...v3.9.1)

Updates `anyio` from 3.7.1 to 4.2.0
- [Release notes](https://github.com/agronholm/anyio/releases)
- [Changelog](https://github.com/agronholm/anyio/blob/master/docs/versionhistory.rst)
- [Commits](agronholm/anyio@3.7.1...4.2.0)

Updates `async-timeout` from 4.0.2 to 4.0.3
- [Release notes](https://github.com/aio-libs/async-timeout/releases)
- [Changelog](https://github.com/aio-libs/async-timeout/blob/master/CHANGES.rst)
- [Commits](aio-libs/async-timeout@v4.0.2...v4.0.3)

Updates `attrs` from 23.1.0 to 23.2.0
- [Commits](https://github.com/sponsors/hynek/commits)

Updates `certifi` from 2023.7.22 to 2023.11.17
- [Commits](certifi/python-certifi@2023.07.22...2023.11.17)

Updates `cffi` from 1.15.1 to 1.16.0
- [Release notes](https://github.com/python-cffi/cffi/releases)
- [Commits](python-cffi/cffi@v1.15.1...v1.16.0)

Updates `charset-normalizer` from 3.2.0 to 3.3.2
- [Release notes](https://github.com/Ousret/charset_normalizer/releases)
- [Changelog](https://github.com/Ousret/charset_normalizer/blob/master/CHANGELOG.md)
- [Commits](jawah/charset_normalizer@3.2.0...3.3.2)

Updates `click` from 8.1.6 to 8.1.7
- [Release notes](https://github.com/pallets/click/releases)
- [Changelog](https://github.com/pallets/click/blob/main/CHANGES.rst)
- [Commits](pallets/click@8.1.6...8.1.7)

Updates `cryptography` from 41.0.2 to 41.0.7
- [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst)
- [Commits](pyca/cryptography@41.0.2...41.0.7)

Updates `exceptiongroup` from 1.1.2 to 1.2.0
- [Release notes](https://github.com/agronholm/exceptiongroup/releases)
- [Changelog](https://github.com/agronholm/exceptiongroup/blob/main/CHANGES.rst)
- [Commits](agronholm/exceptiongroup@1.1.2...1.2.0)

Updates `frozenlist` from 1.4.0 to 1.4.1
- [Release notes](https://github.com/aio-libs/frozenlist/releases)
- [Changelog](https://github.com/aio-libs/frozenlist/blob/master/CHANGES.rst)
- [Commits](aio-libs/frozenlist@v1.4.0...v1.4.1)

Updates `gitdb` from 4.0.10 to 4.0.11
- [Release notes](https://github.com/gitpython-developers/gitdb/releases)
- [Commits](gitpython-developers/gitdb@4.0.10...4.0.11)

Updates `gitpython` from 3.1.32 to 3.1.40
- [Release notes](https://github.com/gitpython-developers/GitPython/releases)
- [Changelog](https://github.com/gitpython-developers/GitPython/blob/main/CHANGES)
- [Commits](gitpython-developers/GitPython@3.1.32...3.1.40)

Updates `httpcore` from 0.17.3 to 1.0.2
- [Release notes](https://github.com/encode/httpcore/releases)
- [Changelog](https://github.com/encode/httpcore/blob/master/CHANGELOG.md)
- [Commits](encode/httpcore@0.17.3...1.0.2)

Updates `httpx` from 0.24.1 to 0.26.0
- [Release notes](https://github.com/encode/httpx/releases)
- [Changelog](https://github.com/encode/httpx/blob/master/CHANGELOG.md)
- [Commits](encode/httpx@0.24.1...0.26.0)

Updates `idna` from 3.4 to 3.6
- [Changelog](https://github.com/kjd/idna/blob/master/HISTORY.rst)
- [Commits](kjd/idna@v3.4...v3.6)

Updates `pygments` from 2.15.1 to 2.17.2
- [Release notes](https://github.com/pygments/pygments/releases)
- [Changelog](https://github.com/pygments/pygments/blob/master/CHANGES)
- [Commits](pygments/pygments@2.15.1...2.17.2)

Updates `regex` from 2023.6.3 to 2023.12.25
- [Changelog](https://github.com/mrabarnett/mrab-regex/blob/hg/changelog.txt)
- [Commits](mrabarnett/mrab-regex@2023.6.3...2023.12.25)

Updates `sentry-sdk` from 1.28.1 to 1.39.1
- [Release notes](https://github.com/getsentry/sentry-python/releases)
- [Changelog](https://github.com/getsentry/sentry-python/blob/master/CHANGELOG.md)
- [Commits](getsentry/sentry-python@1.28.1...1.39.1)

Updates `smmap` from 5.0.0 to 5.0.1
- [Commits](gitpython-developers/smmap@v5.0.0...v5.0.1)

Updates `typing-extensions` from 4.7.1 to 4.9.0
- [Release notes](https://github.com/python/typing_extensions/releases)
- [Changelog](https://github.com/python/typing_extensions/blob/main/CHANGELOG.md)
- [Commits](python/typing_extensions@4.7.1...4.9.0)

Updates `urllib3` from 2.0.4 to 2.1.0
- [Release notes](https://github.com/urllib3/urllib3/releases)
- [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst)
- [Commits](urllib3/urllib3@2.0.4...2.1.0)

Updates `wcwidth` from 0.2.6 to 0.2.12
- [Release notes](https://github.com/jquast/wcwidth/releases)
- [Commits](jquast/wcwidth@0.2.6...0.2.12)

Updates `wikitextparser` from 0.53.0 to 0.55.7
- [Changelog](https://github.com/5j9/wikitextparser/blob/master/CHANGELOG.rst)
- [Commits](5j9/wikitextparser@v0.53.0...v0.55.7)

Updates `yarl` from 1.9.2 to 1.9.4
- [Release notes](https://github.com/aio-libs/yarl/releases)
- [Changelog](https://github.com/aio-libs/yarl/blob/master/CHANGES.rst)
- [Commits](aio-libs/yarl@v1.9.2...v1.9.4)

---
updated-dependencies:
- dependency-name: aiohttp
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: anyio
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: async-timeout
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: attrs
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: certifi
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: cffi
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: charset-normalizer
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: click
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: cryptography
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: exceptiongroup
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: frozenlist
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: gitdb
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: gitpython
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: httpcore
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: httpx
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: idna
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: pygments
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: regex
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: sentry-sdk
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: smmap
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: typing-extensions
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: urllib3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: wcwidth
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: wikitextparser
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: yarl
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Jan 4, 2024
@TrueBrain TrueBrain merged commit e5f4dbc into main Jan 4, 2024
@TrueBrain TrueBrain deleted the dependabot/pip/dependencies-0975f5fff9 branch January 4, 2024 10:08
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@TrueBrain