Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump the dependencies group with 9 updates #631

Merged
merged 1 commit into from
Nov 1, 2023

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Nov 1, 2023

Bumps the dependencies group with 9 updates:

Package From To
coverage[toml] 7.3.1 7.3.2
cryptography 41.0.3 41.0.5
packaging 23.1 23.2
pyopenssl 23.2.0 23.3.0
pytest 7.4.2 7.4.3
types-pyopenssl 23.2.0.2 23.3.0.0
babel 2.12.1 2.13.1
charset-normalizer 3.3.0 3.3.1
urllib3 2.0.6 2.0.7

Updates coverage[toml] from 7.3.1 to 7.3.2

Release notes

Sourced from coverage[toml]'s releases.

7.3.2

  • The coverage lcov command ignored the [report] exclude_lines and [report] exclude_also settings (issue 1684). This is now fixed, thanks Jacqueline Lee.
  • Sometimes SQLite will create journal files alongside the coverage.py database files. These are ephemeral, but could be mistakenly included when combining data files. Now they are always ignored, fixing issue 1605. Thanks to Brad Smith for suggesting fixes and providing detailed debugging.
  • On Python 3.12+, we now disable SQLite writing journal files, which should be a little faster.
  • The new 3.12 soft keyword type is properly bolded in HTML reports.
  • Removed the "fullcoverage" feature used by CPython to measure the coverage of early-imported standard library modules. CPython stopped using it in 2021, and it stopped working completely in Python 3.13.

➡️  PyPI page: coverage 7.3.2. :arrow_right:  To install: python3 -m pip install coverage==7.3.2

Changelog

Sourced from coverage[toml]'s changelog.

Version 7.3.2 — 2023-10-02

  • The coverage lcov command ignored the [report] exclude_lines and [report] exclude_also settings (issue 1684). This is now fixed, thanks Jacqueline Lee <pull 1685_>.

  • Sometimes SQLite will create journal files alongside the coverage.py database files. These are ephemeral, but could be mistakenly included when combining data files. Now they are always ignored, fixing issue 1605_. Thanks to Brad Smith for suggesting fixes and providing detailed debugging.

  • On Python 3.12+, we now disable SQLite writing journal files, which should be a little faster.

  • The new 3.12 soft keyword type is properly bolded in HTML reports.

  • Removed the "fullcoverage" feature used by CPython to measure the coverage of early-imported standard library modules. CPython stopped using it <88054_>_ in 2021, and it stopped working completely in Python 3.13.

.. _issue 1605: nedbat/coveragepy#1605 .. _issue 1684: nedbat/coveragepy#1684 .. _pull 1685: nedbat/coveragepy#1685 .. _88054: python/cpython#88054

.. _changes_7-3-1:

Commits
  • a316513 build: fix the pypy wheel arguments
  • 7ec2c62 docs: sample HTML for 7.3.2
  • ffd954f docs: prep for 7.3.2
  • 1ea3907 refactor: don't access frame structs directly
  • 7b8dec9 feat!: remove fullcoverage, it doesn't work in 3.13
  • 1040bce refactor: remove unused interned strings
  • 9ab9e0c fix: 3.12 soft keyword type is bolded in HTML
  • 8624ce9 fix: really turn off SQLite journal files on 3.12+
  • 604aafa chore: make upgrade
  • 7c25ba0 fix: don't combine journal files. #1605
  • Additional commits viewable in compare view

Updates cryptography from 41.0.3 to 41.0.5

Changelog

Sourced from cryptography's changelog.

41.0.5 - 2023-10-24


* Updated Windows, macOS, and Linux wheels to be compiled with OpenSSL 3.1.4.
* Added a function to support an upcoming ``pyOpenSSL`` release.

.. _v41-0-4:

41.0.4 - 2023-09-19

  • Updated Windows, macOS, and Linux wheels to be compiled with OpenSSL 3.1.3.

.. _v41-0-3:

Commits

Updates packaging from 23.1 to 23.2

Release notes

Sourced from packaging's releases.

23.2

What's Changed

New Contributors

Full Changelog: pypa/packaging@23.1...23.2

Changelog

Sourced from packaging's changelog.

23.2 - 2023-10-01


* Document calendar-based versioning scheme (:issue:`716`)
* Enforce that the entire marker string is parsed (:issue:`687`)
* Requirement parsing no longer automatically validates the URL (:issue:`120`)
* Canonicalize names for requirements comparison (:issue:`644`)
* Introduce ``metadata.Metadata`` (along with ``metadata.ExceptionGroup`` and ``metadata.InvalidMetadata``; :issue:`570`)
* Introduce the ``validate`` keyword parameter to ``utils.normalize_name()`` (:issue:`570`)
* Introduce ``utils.is_normalized_name()`` (:issue:`570`)
* Make ``utils.parse_sdist_filename()`` and ``utils.parse_wheel_filename()``
  raise ``InvalidSdistFilename`` and ``InvalidWheelFilename``, respectively,
  when the version component of the name is invalid
Commits
  • b3a5d7d Bump for release
  • d7ce40d Fix code blocks in CHANGELOG.md (#724)
  • 524b701 parse_{sdist,wheel}_filename: don't raise InvalidVersion (#721)
  • b509bef Typing annotations fixed (#723)
  • 0206c39 Bump pip version to avoid known vulnerabilities (#720)
  • 7023537 fix: Update copyright date for docs (#713)
  • 39786bb Document use of calendar-based versioning scheme (#717)
  • c1346df fix: Detect when a platform is 32-bit more accurately (#711)
  • 7e68d82 Correct rST syntax in CHANGELOG.rst (#709)
  • 61e6efb Support enriched metadata in packaging.metadata (#686)
  • Additional commits viewable in compare view

Updates pyopenssl from 23.2.0 to 23.3.0

Changelog

Sourced from pyopenssl's changelog.

23.3.0 (2023-10-25)

Backward-incompatible changes: ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

  • Dropped support for Python 3.6.
  • The minimum cryptography version is now 41.0.5.
  • Removed OpenSSL.crypto.loads_pkcs7 and OpenSSL.crypto.loads_pkcs12 which had been deprecated for 3 years.
  • Added OpenSSL.SSL.OP_LEGACY_SERVER_CONNECT to allow legacy insecure renegotiation between OpenSSL and unpatched servers. [#1234](https://github.com/pyca/pyopenssl/issues/1234) <https://github.com/pyca/pyopenssl/pull/1234>_.

Deprecations: ^^^^^^^^^^^^^

  • Deprecated OpenSSL.crypto.PKCS12 (which was intended to have been deprecated at the same time as OpenSSL.crypto.load_pkcs12).
  • Deprecated OpenSSL.crypto.NetscapeSPKI.
  • Deprecated OpenSSL.crypto.CRL
  • Deprecated OpenSSL.crypto.Revoked
  • Deprecated OpenSSL.crypto.load_crl and OpenSSL.crypto.dump_crl
  • Deprecated OpenSSL.crypto.sign and OpenSSL.crypto.verify
  • Deprecated OpenSSL.crypto.X509Extension

Changes: ^^^^^^^^

  • Changed OpenSSL.crypto.X509Store.add_crl to also accept cryptography's x509.CertificateRevocationList arguments in addition to the now deprecated OpenSSL.crypto.CRL arguments.
  • Fixed test_set_default_verify_paths test so that it is skipped if no network connection is available.
Commits

Updates pytest from 7.4.2 to 7.4.3

Release notes

Sourced from pytest's releases.

pytest 7.4.3 (2023-10-24)

Bug Fixes

  • #10447: Markers are now considered in the reverse mro order to ensure base class markers are considered first -- this resolves a regression.

  • #11239: Fixed := in asserts impacting unrelated test cases.

  • #11439: Handled an edge case where :data:sys.stderr might already be closed when :ref:faulthandler is tearing down.

Commits
  • 2390610 Tweak changelog.rst
  • a0714aa Prepare release version 7.4.3
  • 44ad1c9 [7.4.x] fix #10447 - consider marks in reverse mro order to give base classes...
  • 5dc7725 [7.4.x] Ensure logging tests always cleanup after themselves (#11541)
  • a517827 [7.4.x] Configure ReadTheDocs to fail on warnings (#11540)
  • 21fe071 [7.4.x] fix for ValueError raised in faulthandler teardown code (#11455)
  • f8bb857 Force terminal width when running tests (#11425) (#11432)
  • 1944dc0 [7.4.x] Fix --import-mode=importlib when root contains __init__.py file (#1...
  • 946634c Merge pull request #11419 from nicoddemus/backport-11414-to-7.4.x
  • d849a3e [7.4.x] fix: closes #11343's [attr-defined] type errors (#11421)
  • Additional commits viewable in compare view

Updates types-pyopenssl from 23.2.0.2 to 23.3.0.0

Commits

Updates babel from 2.12.1 to 2.13.1

Release notes

Sourced from babel's releases.

Version 2.13.1

What's Changed

New Contributors

Full Changelog: python-babel/babel@v2.13.0...v2.13.1


PyPI: https://pypi.org/project/Babel/2.13.1/

v2.13.0

PyPI: https://pypi.org/project/Babel/2.13.0/

Upcoming deprecation

  • This version, Babel 2.13, is the last version of Babel to support Python 3.7. Babel 2.14 will require Python 3.8 or newer.

(This changelog is auto-generated by GitHub; please see CHANGES.rst for a less verbose listing.)

What's Changed

New Contributors

... (truncated)

Changelog

Sourced from babel's changelog.

Version 2.13.1

This is a patch release to fix a few bugs.

Fixes


* Fix a typo in ``_locales_to_names`` by @Dl84 in :gh:`1038` (issue :gh:`1037`)
* Fix ``setuptools`` dependency for Python 3.12 by @opryprin in :gh:`1033`

Version 2.13.0

Upcoming deprecation

  • This version, Babel 2.13, is the last version of Babel to support Python 3.7. Babel 2.14 will require Python 3.8 or newer.

Features


* Add flag to ignore POT-Creation-Date for updates by @joeportela in :gh:`999`
* Support 't' specifier in keywords by @jeanas in :gh:`1015`
* Add f-string parsing for Python 3.12 (PEP 701) by @encukou in :gh:`1027`

Fixes


* Various typing-related fixes by @akx in :gh:`979`, in :gh:`978`, :gh:`981`,  :gh:`983`
* babel.messages.catalog: deduplicate _to_fuzzy_match_key logic by @akx in :gh:`980`
* Freeze format_time() tests to a specific date to fix test failures by @mgorny in :gh:`998`
* Spelling and grammar fixes by @scop in :gh:`1008`
* Renovate lint tools by @akx in :gh:`1017`, :gh:`1028`
* Use SPDX license identifier by @vargenau in :gh:`994`
* Use aware UTC datetimes internally by @scop in :gh:`1009`

New Contributors
</code></pre>
<ul>
<li><a href="https://github.com/mgorny&quot;&gt;&lt;code&gt;@​mgorny&lt;/code&gt;&lt;/a> made their first contribution in :gh:<code>998</code></li>
<li><a href="https://github.com/vargenau&quot;&gt;&lt;code&gt;@​vargenau&lt;/code&gt;&lt;/a> made their first contribution in :gh:<code>994</code></li>
<li><a href="https://github.com/joeportela&quot;&gt;&lt;code&gt;@​joeportela&lt;/code&gt;&lt;/a> made their first contribution in :gh:<code>999</code></li>
<li><a href="https://github.com/encukou&quot;&gt;&lt;code&gt;@​encukou&lt;/code&gt;&lt;/a> made their first contribution in :gh:<code>1027</code></li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>

<ul>
<li><a href="https://github.com/python-babel/babel/commit/65de3dcf2dc217d6135eff999dc87a3861065e8d&quot;&gt;&lt;code&gt;65de3dc&lt;/code&gt;&lt;/a> Prepare for 2.13.1 release</li>
<li><a href="https://github.com/python-babel/babel/commit/139dc11baeb3bbd3bcbb900abb3519e71521a3f7&quot;&gt;&lt;code&gt;139dc11&lt;/code&gt;&lt;/a> Fix _locales_to_names: Call str() on the parameter variable instead of the mo...</li>
<li><a href="https://github.com/python-babel/babel/commit/eeb2feb13f7273636d2214dbdb3fb780d9b4fa4f&quot;&gt;&lt;code&gt;eeb2feb&lt;/code&gt;&lt;/a> Depend on setuptools since Python 3.12</li>
<li><a href="https://github.com/python-babel/babel/commit/76677eacd10cc35bea0a11ec1d2f0566cadd4066&quot;&gt;&lt;code&gt;76677ea&lt;/code&gt;&lt;/a> Prepare for 2.13.0 release</li>
<li><a href="https://github.com/python-babel/babel/commit/fb6ab5fa6685c98433a9d558de2a3e76fbe54f83&quot;&gt;&lt;code&gt;fb6ab5f&lt;/code&gt;&lt;/a> Renovate CI &amp; tools (<a href="https://redirect.github.com/python-babel/babel/issues/1028&quot;&gt;#1028&lt;/a&gt;)&lt;/li>
<li><a href="https://github.com/python-babel/babel/commit/72bccffc7c35f07ec8bf97ff90079d51fc4da012&quot;&gt;&lt;code&gt;72bccff&lt;/code&gt;&lt;/a> Add f-string parsing for Python 3.12 (PEP 701) (<a href="https://redirect.github.com/python-babel/babel/issues/1027&quot;&gt;#1027&lt;/a&gt;)&lt;/li>
<li><a href="https://github.com/python-babel/babel/commit/6fc07a27c00cc67e32a5e5e610fe8a9a0b3756f1&quot;&gt;&lt;code&gt;6fc07a2&lt;/code&gt;&lt;/a> Support 't' specifier in keywords (<a href="https://redirect.github.com/python-babel/babel/issues/1015&quot;&gt;#1015&lt;/a&gt;)&lt;/li>
<li><a href="https://github.com/python-babel/babel/commit/9ef53c6a6ab5fc604b58ccb19dc63ebcf8edd28b&quot;&gt;&lt;code&gt;9ef53c6&lt;/code&gt;&lt;/a> Add flag to ignore POT-Creation-Date for updates (<a href="https://redirect.github.com/python-babel/babel/issues/999&quot;&gt;#999&lt;/a&gt;)&lt;/li>
<li><a href="https://github.com/python-babel/babel/commit/1747d2230a0294a07c99563cf50fb95a37b6ac0f&quot;&gt;&lt;code&gt;1747d22&lt;/code&gt;&lt;/a> Use aware UTC datetimes internally (<a href="https://redirect.github.com/python-babel/babel/issues/1009&quot;&gt;#1009&lt;/a&gt;)&lt;/li>
<li><a href="https://github.com/python-babel/babel/commit/95a0ea818f5d555ab4bad0ae7722971934b4a193&quot;&gt;&lt;code&gt;95a0ea8&lt;/code&gt;&lt;/a> Use SPDX license identifier: BSD-3-Clause (<a href="https://redirect.github.com/python-babel/babel/issues/994&quot;&gt;#994&lt;/a&gt;)&lt;/li>
<li>Additional commits viewable in <a href="https://github.com/python-babel/babel/compare/v2.12.1...v2.13.1&quot;&gt;compare view</a></li>
</ul>
</details>

<br />

Updates charset-normalizer from 3.3.0 to 3.3.1

Release notes

Sourced from charset-normalizer's releases.

Version 3.3.1

3.3.1 (2023-10-22)

Changed

  • Optional mypyc compilation upgraded to version 1.6.1 for Python >= 3.8
  • Improved the general detection reliability based on reports from the community
Changelog

Sourced from charset-normalizer's changelog.

3.3.1 (2023-10-22)

Changed

  • Optional mypyc compilation upgraded to version 1.6.1 for Python >= 3.8
  • Improved the general detection reliability based on reports from the community
Commits
  • 5208644 :bookmark: Release 3.3.1 (#367)
  • 66966f1 :sparkle: Improve the detection around some cases (#366)
  • 49653a6 :arrow_up: Bump actions/setup-python from 4.7.0 to 4.7.1 (#359)
  • f6a66ed :arrow_up: Bump pypa/cibuildwheel from 2.16.0 to 2.16.2 (#361)
  • bace468 :arrow_up: Bump ossf/scorecard-action from 2.2.0 to 2.3.0 (#362)
  • f0e1755 :arrow_up: Bump github/codeql-action from 2.21.9 to 2.22.3 (#363)
  • 749ed7f :arrow_up: Bump mypy from 1.5.1 to 1.6.0 (#364)
  • See full diff in compare view

Updates urllib3 from 2.0.6 to 2.0.7

Release notes

Sourced from urllib3's releases.

2.0.7

  • Made body stripped from HTTP requests changing the request method to GET after HTTP 303 "See Other" redirect responses. (GHSA-g4mx-q9vg-27p4)
Changelog

Sourced from urllib3's changelog.

2.0.7 (2023-10-17)

  • Made body stripped from HTTP requests changing the request method to GET after HTTP 303 "See Other" redirect responses.
Commits

Most Recent Ignore Conditions Applied to This Pull Request
Dependency Name Ignore Conditions
babel [< 2.11, > 2.10.2]
pytest [< 7.2, > 7.1.2]
cryptography [< 38.1, > 38.0.0]
pytest [< 7.3, > 7.2.0]
types-pyopenssl [>= 23.1.a, < 23.2]

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the dependencies group with 9 updates:

| Package | From | To |
| --- | --- | --- |
| [coverage[toml]](https://github.com/nedbat/coveragepy) | `7.3.1` | `7.3.2` |
| [cryptography](https://github.com/pyca/cryptography) | `41.0.3` | `41.0.5` |
| [packaging](https://github.com/pypa/packaging) | `23.1` | `23.2` |
| [pyopenssl](https://github.com/pyca/pyopenssl) | `23.2.0` | `23.3.0` |
| [pytest](https://github.com/pytest-dev/pytest) | `7.4.2` | `7.4.3` |
| [types-pyopenssl](https://github.com/python/typeshed) | `23.2.0.2` | `23.3.0.0` |
| [babel](https://github.com/python-babel/babel) | `2.12.1` | `2.13.1` |
| [charset-normalizer](https://github.com/Ousret/charset_normalizer) | `3.3.0` | `3.3.1` |
| [urllib3](https://github.com/urllib3/urllib3) | `2.0.6` | `2.0.7` |


Updates `coverage[toml]` from 7.3.1 to 7.3.2
- [Release notes](https://github.com/nedbat/coveragepy/releases)
- [Changelog](https://github.com/nedbat/coveragepy/blob/master/CHANGES.rst)
- [Commits](nedbat/coveragepy@7.3.1...7.3.2)

Updates `cryptography` from 41.0.3 to 41.0.5
- [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst)
- [Commits](pyca/cryptography@41.0.3...41.0.5)

Updates `packaging` from 23.1 to 23.2
- [Release notes](https://github.com/pypa/packaging/releases)
- [Changelog](https://github.com/pypa/packaging/blob/main/CHANGELOG.rst)
- [Commits](pypa/packaging@23.1...23.2)

Updates `pyopenssl` from 23.2.0 to 23.3.0
- [Changelog](https://github.com/pyca/pyopenssl/blob/main/CHANGELOG.rst)
- [Commits](pyca/pyopenssl@23.2.0...23.3.0)

Updates `pytest` from 7.4.2 to 7.4.3
- [Release notes](https://github.com/pytest-dev/pytest/releases)
- [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst)
- [Commits](pytest-dev/pytest@7.4.2...7.4.3)

Updates `types-pyopenssl` from 23.2.0.2 to 23.3.0.0
- [Commits](https://github.com/python/typeshed/commits)

Updates `babel` from 2.12.1 to 2.13.1
- [Release notes](https://github.com/python-babel/babel/releases)
- [Changelog](https://github.com/python-babel/babel/blob/master/CHANGES.rst)
- [Commits](python-babel/babel@v2.12.1...v2.13.1)

Updates `charset-normalizer` from 3.3.0 to 3.3.1
- [Release notes](https://github.com/Ousret/charset_normalizer/releases)
- [Changelog](https://github.com/Ousret/charset_normalizer/blob/master/CHANGELOG.md)
- [Commits](jawah/charset_normalizer@3.3.0...3.3.1)

Updates `urllib3` from 2.0.6 to 2.0.7
- [Release notes](https://github.com/urllib3/urllib3/releases)
- [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst)
- [Commits](urllib3/urllib3@2.0.6...2.0.7)

---
updated-dependencies:
- dependency-name: coverage[toml]
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: cryptography
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: packaging
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: pyopenssl
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: pytest
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: types-pyopenssl
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: babel
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: charset-normalizer
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: urllib3
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Nov 1, 2023
@pquentin pquentin merged commit 86a5520 into master Nov 1, 2023
20 checks passed
@pquentin pquentin deleted the dependabot/pip/dependencies-6541754df4 branch November 1, 2023 04:45
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

1 participant