Deps: Bump the dependencies group with 3 updates by dependabot[bot] · Pull Request #613 · greenbone/autohooks

dependabot · 2023-09-25T04:30:47Z

Bumps the dependencies group with 3 updates: ruff, urllib3 and zipp.

Updates ruff from 0.0.290 to 0.0.291

Release notes

v0.0.291

What's Changed

Deprecations

The format command-line argument and configuration option has been renamed to output-format. While Ruff will continue to respect format when passed as a command-line argument or configuration option, this backwards-compatible support will be dropped in a future release. See: astral-sh/ruff#7514.

Rules

[flake8-bandit] Implement S201: flask-debug-true by @mkniewallner in astral-sh/ruff#7503

[flake8-bandit] Implement S507: ssh_no_host_key_verification by @mkniewallner in astral-sh/ruff#7528

[flake8-logging] Implement LOG002: invalid-get-logger-argument by @dhruvmanila in astral-sh/ruff#7399

[flake8-logging] Implement LOG007: exception-without-exc-info by @qdegraaf in astral-sh/ruff#7410

[refurb] Implement FURB140: reimplemented-starmap by @SavchenkoValeriy in astral-sh/ruff#7253

[refurb] Implement FURB148: unnecessary-enumerate by @tjkuson in astral-sh/ruff#7454

[ruff] Detect asyncio.get_running_loop calls in RUF006 by @charliermarsh in astral-sh/ruff#7562

Settings

Show --no-X variants in CLI help by @charliermarsh in astral-sh/ruff#7504

Rename format option to output-format by @MichaReiser in astral-sh/ruff#7514

Enable tab completion for ruff rule by @charliermarsh in astral-sh/ruff#7560

Bug Fixes

Add padding to prevent some autofix errors by @charliermarsh in astral-sh/ruff#7461

Remove parentheses when rewriting assert calls to statements by @charliermarsh in astral-sh/ruff#7464

Avoid flagging starred elements in C402 by @charliermarsh in astral-sh/ruff#7466

Extend bad-dunder-method-name to permit attrs dunders by @tjkuson in astral-sh/ruff#7472

Avoid N802 violations for @overload methods by @JonathanPlasse in astral-sh/ruff#7498

Avoid flagging starred expressions in UP007 by @charliermarsh in astral-sh/ruff#7505

Ensure that LOG007 only triggers on .exception() calls by @charliermarsh in astral-sh/ruff#7524

Use strict sorted and union for NoQA mapping insertion by @dhruvmanila in astral-sh/ruff#7531

Avoid inserting imports directly after continuation by @charliermarsh in astral-sh/ruff#7553

Add padding in PERF102 fixes by @charliermarsh in astral-sh/ruff#7554

Avoid invalid fix for parenthesized values in F601 by @charliermarsh in astral-sh/ruff#7559

Treat os.error as an OSError alias by @charliermarsh in astral-sh/ruff#7582

Extend bad-dunder-method-name to permit __html__ by @jaap3 in astral-sh/ruff#7492

Fix stylist indentation with a formfeed by @konstin in astral-sh/ruff#7489

New Contributors

@MicaelJarniac made their first contribution in astral-sh/ruff#5498

@maheshsaripalli9 made their first contribution in astral-sh/ruff#7552

@T-256 made their first contribution in astral-sh/ruff#7585

Full Changelog: astral-sh/ruff@v0.0.290...v0.0.291

Commits

8bfe9bd Bump version to v0.0.291 (#7606)
01843af Support option group documentation (#7593)
2ecf597 Refactor Options representation (#7591)
f137819 Improve B005 documentation to reflect duplicate-character behavior (#7601)
9d16e46 Add most formatter options to ruff.toml / pyproject.toml (#7566)
82978ac Bump indicatif from 0.17.6 to 0.17.7 (#7592)
814403c Bump lint rules count to 700 (#7585)
f254aaa Remove unwrap in os_error_alias.rs (#7583)
a51b0b0 Treat os.error as an OSError alias (#7582)
74dbd87 Make ruff format idempotent when using stdin input (#7581)
Additional commits viewable in compare view

Updates urllib3 from 2.0.4 to 2.0.5

Release notes

Sourced from urllib3's releases.

2.0.5

Allowed pyOpenSSL third-party module without any deprecation warning. #3126

Fixed default blocksize of HTTPConnection classes to match high-level classes. Previously was 8KiB, now 16KiB. #3066

Changelog

Sourced from urllib3's changelog.

2.0.5 (2023-09-20)

Allowed pyOpenSSL third-party module without any deprecation warning. ([#3126](https://github.com/urllib3/urllib3/issues/3126) <https://github.com/urllib3/urllib3/issues/3126>__)

Fixed default blocksize of HTTPConnection classes to match high-level classes. Previously was 8KiB, now 16KiB. ([#3066](https://github.com/urllib3/urllib3/issues/3066) <https://github.com/urllib3/urllib3/issues/3066>__)

Commits

d9f85a7 Release 2.0.5
d41f412 Undeprecate pyOpenSSL module (#3127)
b6c04cb Fix a link to "absolute URI" definition (#3128)
af7c78f refactor: change double conditional to one (#3118)
34c13c8 Refer to current internet standards in docs on proxies (#3124)
a3e94f2 Fix a name of an attribute in docs (#3125)
da69d4f Fix docs build (#3123)
18831e5 Bump actions/checkout from 3.6.0 to 4.0.0 (#3116)
cf8e184 Unquote all GitHub Action names to fix auto-updating comments (#3121)
26c1b3f Unquote GitHub Action name to test auto-updating comments
Additional commits viewable in compare view

Updates zipp from 3.16.2 to 3.17.0

Changelog

Sourced from zipp's changelog.

v3.17.0

Features

Added CompleteDirs.inject classmethod to make available for use elsewhere.

Bugfixes

Avoid matching path separators for '?' in glob.

Commits

5c59b56 Merge https://github.com/jaraco/skeleton
ca1831c Prefer pass_env in tox config. Preferred failure mode for tox-dev/tox#312...
488dd04 Finalize
c230d98 Add CompleteDirs.inject classmethod for use elsewhere
c331584 In tests, always use alpharep fixture.
92a8531 Merge https://github.com/jaraco/skeleton
928e9a8 Add FORCE_COLOR to the TOX_OVERRIDE for GHA. Requires tox 4.11.1. Closes jara...
a6256e2 Add descriptions to the tox environments. Closes jaraco/skeleton#91.
b02bf32 Add diff-cover check to Github Actions CI. Closes jaraco/skeleton#90.
0484daa Clean up 'color' environment variables.
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the dependencies group with 3 updates: [ruff](https://github.com/astral-sh/ruff), [urllib3](https://github.com/urllib3/urllib3) and [zipp](https://github.com/jaraco/zipp). Updates `ruff` from 0.0.290 to 0.0.291 - [Release notes](https://github.com/astral-sh/ruff/releases) - [Changelog](https://github.com/astral-sh/ruff/blob/main/BREAKING_CHANGES.md) - [Commits](astral-sh/ruff@v0.0.290...v0.0.291) Updates `urllib3` from 2.0.4 to 2.0.5 - [Release notes](https://github.com/urllib3/urllib3/releases) - [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst) - [Commits](urllib3/urllib3@2.0.4...v2.0.5) Updates `zipp` from 3.16.2 to 3.17.0 - [Release notes](https://github.com/jaraco/zipp/releases) - [Changelog](https://github.com/jaraco/zipp/blob/main/NEWS.rst) - [Commits](jaraco/zipp@v3.16.2...v3.17.0) --- updated-dependencies: - dependency-name: ruff dependency-type: indirect update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: urllib3 dependency-type: indirect update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: zipp dependency-type: indirect update-type: version-update:semver-minor dependency-group: dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

github-actions · 2023-09-25T04:31:27Z

Conventional Commits Report

Type	Number
Dependencies	1

🚀 Conventional commits found.

dependabot bot requested a review from a team as a code owner September 25, 2023 04:30

dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Sep 25, 2023

greenbonebot enabled auto-merge (squash) September 25, 2023 04:31

y0urself approved these changes Sep 25, 2023

View reviewed changes

greenbonebot merged commit 7a46b05 into main Sep 25, 2023

greenbonebot deleted the dependabot/pip/dependencies-f6841598d7 branch September 25, 2023 05:03

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Deps: Bump the dependencies group with 3 updates#613

Deps: Bump the dependencies group with 3 updates#613
greenbonebot merged 1 commit intomainfrom
dependabot/pip/dependencies-f6841598d7

dependabot bot commented on behalf of github Sep 25, 2023

Uh oh!

github-actions bot commented Sep 25, 2023

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Conversation

dependabot bot commented on behalf of github Sep 25, 2023

v0.0.291

What's Changed

Deprecations

Rules

Settings

Bug Fixes

New Contributors

2.0.5

2.0.5 (2023-09-20)

v3.17.0

Features

Bugfixes

Uh oh!

github-actions bot commented Sep 25, 2023

Conventional Commits Report

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants