Skip to content
This repository has been archived by the owner on Nov 28, 2024. It is now read-only.

build(deps): bump the general group with 3 updates #182

Closed
wants to merge 1 commit into from
Closed

build(deps): bump the general group with 3 updates #182

wants to merge 1 commit into from

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Aug 26, 2024 •
edited
Loading

Bumps the general group with 3 updates: pefile, pyparsing and zope-interface.

Updates pefile from 2023.2.7 to 2024.8.26

Release notes

Sourced from pefile's releases.

pefile 2024.8.26

What's Changed

New Contributors

Full Changelog: erocarrera/pefile@v2023.2.7...v2024.8.26

Commits

Updates pyparsing from 3.1.2 to 3.1.4

Changelog

Sourced from pyparsing's changelog.

Version 3.1.4 - August, 2024

  • Fixed a regression introduced in pyparsing 3.1.3, addition of a type annotation that referenced re.Pattern. Since this type was introduced in Python 3.7, using this type definition broke Python 3.6 installs of pyparsing 3.1.3. PR submitted by Felix Fontein, nice work!

Version 3.1.3 - August, 2024

  • Added new Tag ParserElement, for inserting metadata into the parsed results. This allows a parser to add metadata or annotations to the parsed tokens. The Tag element also accepts an optional value parameter, defaulting to True. See the new tag_metadata.py example in the examples directory.

    Example:

      # add tag indicating mood
  end_punc = "." | ("!" + Tag("enthusiastic")))
  greeting = "Hello" + Word(alphas) + end_punc

    result = greeting.parse_string("Hello World.")
print(result.dump())
    

    result = greeting.parse_string("Hello World!")
print(result.dump())

    prints:

      ['Hello', 'World', '.']

    ['Hello', 'World', '!']
    

      

    • enthusiastic: True

  • Added example mongodb_query_expression.py, to convert human-readable infix query expressions (such as a==100 and b>=200) and transform them into the equivalent query argument for the pymongo package ({'$and': [{'a': 100}, {'b': {'$gte': 200}}]}). Supports many equality and inequality operators - see the docstring for the transform_query function for more examples.

  • Fixed issue where PEP8 compatibility names for ParserElement static methods were not themselves defined as staticmethods. When called using a ParserElement instance, this resulted in a TypeError exception. Reported by eylenburg (#548).

  • To address a compatibility issue in RDFLib, added a property setter for the ParserElement.name property, to call ParserElement.set_name.

  • Modified ParserElement.set_name() to accept a None value, to clear the defined name and corresponding error message for a ParserElement.

    • ... (truncated)

    Commits
    • b846e4a Prep for 3.1.4 release
    • 9bd2356 Add Python 3.6 to CI (#566)
    • ee50a19 Add Tag notes to HowToUsePyparsing.rst
    • 3ffc3ef Fix typo
    • e5e97f7 Add mongodb_query_expression.py to examples; updated 0README.html and test_ex...
    • 10cef98 Add Tag ParserElement class
    • cf41d90 Prep for 3.1.3 release
    • d7c163c Some minor code changes in chemical_formulas.py
    • eb56030 Various code cleanups
    • a9e7d47 Added name property setter, and enhanced set_name() to accept a None value to...
    • Additional commits viewable in compare view

    Updates zope-interface from 7.0.1 to 7.0.2

    Changelog

    Sourced from zope-interface's changelog.

    7.0.2 (2024-08-26)

    • Fix reference-counting bug in C module initialization (broken in 7.0). ([#316](https://github.com/zopefoundation/zope.interface/issues/316) <https://github.com/zopefoundation/zope.interface/issues/316>_)
    Commits
    • bcf4cbb Merge pull request #318 from zopefoundation/release-7.0.2
    • db74300 Prepare 7.0.2 release
    • 9a2d03e Merge pull request #317 from zopefoundation/davisagli-fix-gc-assertion
    • c8ada7e call Py_INCREF after null check
    • f9a7458 Fix refcounting bug in module initialization
    • a44f50e - remove appveyor reference [ci skip]
    • ff7c830 chore: svb
    • See full diff in compare view

    Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

    Dependabot commands and options

    You can trigger Dependabot actions by commenting on this PR:

    • @dependabot rebase will rebase this PR
    • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
    • @dependabot merge will merge this PR after your CI passes on it
    • @dependabot squash and merge will squash and merge this PR after your CI passes on it
    • @dependabot cancel merge will cancel a previously requested merge and block automerging
    • @dependabot reopen will reopen this PR if it is closed
    • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
    • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
    • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
    • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
    • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
    • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
    • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

    @dependabot
    build(deps): bump the general group with 3 updates
    133e4b0 
    Bumps the general group with 3 updates: [pefile](https://github.com/erocarrera/pefile), [pyparsing](https://github.com/pyparsing/pyparsing) and [zope-interface](https://github.com/zopefoundation/zope.interface).


Updates `pefile` from 2023.2.7 to 2024.8.26
- [Release notes](https://github.com/erocarrera/pefile/releases)
- [Commits](erocarrera/pefile@v2023.2.7...v2024.8.26)

Updates `pyparsing` from 3.1.2 to 3.1.4
- [Release notes](https://github.com/pyparsing/pyparsing/releases)
- [Changelog](https://github.com/pyparsing/pyparsing/blob/master/CHANGES)
- [Commits](pyparsing/pyparsing@pyparsing_3.1.2...3.1.4)

Updates `zope-interface` from 7.0.1 to 7.0.2
- [Changelog](https://github.com/zopefoundation/zope.interface/blob/master/CHANGES.rst)
- [Commits](zopefoundation/zope.interface@7.0.1...7.0.2)

---
updated-dependencies:
- dependency-name: pefile
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: general
- dependency-name: pyparsing
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: general
- dependency-name: zope-interface
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: general
...

Signed-off-by: dependabot[bot] <[email protected]>
    @dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Aug 26, 2024
    @github-actions GitHub Actions
    Copy link

    Dependency Review

    ✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

    OpenSSF Scorecard

    PackageVersionScoreDetails
    pip/pefile 2024.8.26 🟢 5.1
    Details
    CheckScoreReason
    Binary-Artifacts🟢 10no binaries found in the repo
    Branch-Protection⚠️ 0branch protection not enabled on development/release branches
    CI-Tests🟢 913 out of 14 merged PRs checked by a CI test -- score normalized to 9
    CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
    Code-Review🟢 5found 11 unreviewed changesets out of 25 -- score normalized to 5
    Contributors🟢 1010 different organizations found -- score normalized to 10
    Dangerous-Workflow🟢 10no dangerous workflow patterns detected
    Dependency-Update-Tool⚠️ 0no update tool detected
    Fuzzing⚠️ 0project is not fuzzed
    License🟢 10license file detected
    Maintained🟢 1030 commit(s) out of 30 and 1 issue activity out of 30 found in the last 90 days -- score normalized to 10
    Packaging⚠️ -1no published package detected
    Pinned-Dependencies🟢 6dependency not pinned by hash detected -- score normalized to 6
    SAST🟢 9SAST tool detected but not run on all commits
    Security-Policy⚠️ 0security policy file not detected
    Signed-Releases⚠️ 00 out of 5 artifacts are signed or have provenance
    Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
    Vulnerabilities🟢 10no vulnerabilities detected
    pip/pyparsing 3.1.4 🟢 6.6
    Details
    CheckScoreReason
    Code-Review⚠️ 0Found 2/30 approved changesets -- score normalized to 0
    Maintained🟢 1018 commit(s) and 6 issue activity found in the last 90 days -- score normalized to 10
    CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
    License🟢 10license file detected
    Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
    Signed-Releases⚠️ 0Project has not signed or included provenance with any releases.
    Dangerous-Workflow🟢 10no dangerous workflow patterns detected
    Token-Permissions🟢 10GitHub workflow tokens follow principle of least privilege
    Packaging⚠️ -1packaging workflow not detected
    Security-Policy🟢 10security policy file detected
    Binary-Artifacts🟢 10no binaries found in the repo
    Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
    Fuzzing🟢 10project is fuzzed
    Vulnerabilities🟢 100 existing vulnerabilities detected
    SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
    pip/zope.interface 7.0.2 🟢 6.2
    Details
    CheckScoreReason
    Code-Review🟢 4Found 8/18 approved changesets -- score normalized to 4
    Maintained🟢 1017 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10
    CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
    License🟢 9license file detected
    Signed-Releases⚠️ -1no releases found
    Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
    Dangerous-Workflow🟢 10no dangerous workflow patterns detected
    Binary-Artifacts🟢 10no binaries found in the repo
    Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
    Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
    Fuzzing⚠️ 0project is not fuzzed
    Vulnerabilities🟢 100 existing vulnerabilities detected
    Security-Policy🟢 10security policy file detected
    Packaging🟢 10packaging workflow detected
    SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0

    Scanned Manifest Files

    requirements.txt

    @sonarcloud SonarCloud
    Copy link

    sonarcloud bot commented Aug 26, 2024

    Quality Gate Passed Quality Gate passed

    Issues
    0 New issues
    0 Accepted issues

    Measures
    0 Security Hotspots
    0.0% Coverage on New Code
    0.0% Duplication on New Code

    See analysis details on SonarCloud

    @dependabot Dependabot
    Copy link
    Contributor Author

    dependabot bot commented on behalf of github Aug 27, 2024

    Looks like these dependencies are updatable in another way, so this is no longer needed.

    @dependabot dependabot bot closed this Aug 27, 2024
    @dependabot dependabot bot deleted the dependabot/pip/general-8f9dea6464 branch August 27, 2024 22:34
    Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
    Reviewers
    No reviews
    Assignees
    No one assigned
    Labels
    dependencies Pull requests that update a dependency file python Pull requests that update Python code
    Projects
    None yet
    Milestone
    No milestone
    Development

    Successfully merging this pull request may close these issues.
    0 participants