Skip to content
This repository has been archived by the owner on Nov 28, 2024. It is now read-only.

build(deps): bump the general group across 1 directory with 5 updates #183

Merged
merged 1 commit into from
Aug 27, 2024
Merged

build(deps): bump the general group across 1 directory with 5 updates #183

merged 1 commit into from
Aug 27, 2024

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Aug 27, 2024

Bumps the general group with 5 updates in the / directory:

Package From To
pbr 6.0.0 6.1.0
pefile 2023.2.7 2024.8.26
pyparsing 3.1.2 3.1.4
setuptools 73.0.1 74.0.0
zope-interface 7.0.1 7.0.3

Updates pbr from 6.0.0 to 6.1.0

Updates pefile from 2023.2.7 to 2024.8.26

Release notes

Sourced from pefile's releases.

pefile 2024.8.26

What's Changed

New Contributors

Full Changelog: erocarrera/pefile@v2023.2.7...v2024.8.26

Commits

Updates pyparsing from 3.1.2 to 3.1.4

Changelog

Sourced from pyparsing's changelog.

Version 3.1.4 - August, 2024

  • Fixed a regression introduced in pyparsing 3.1.3, addition of a type annotation that referenced re.Pattern. Since this type was introduced in Python 3.7, using this type definition broke Python 3.6 installs of pyparsing 3.1.3. PR submitted by Felix Fontein, nice work!

Version 3.1.3 - August, 2024

  • Added new Tag ParserElement, for inserting metadata into the parsed results. This allows a parser to add metadata or annotations to the parsed tokens. The Tag element also accepts an optional value parameter, defaulting to True. See the new tag_metadata.py example in the examples directory.

    Example:

      # add tag indicating mood
  end_punc = "." | ("!" + Tag("enthusiastic")))
  greeting = "Hello" + Word(alphas) + end_punc

    result = greeting.parse_string("Hello World.")
print(result.dump())
    

    result = greeting.parse_string("Hello World!")
print(result.dump())

    prints:

      ['Hello', 'World', '.']

    ['Hello', 'World', '!']
    

      

    • enthusiastic: True

  • Added example mongodb_query_expression.py, to convert human-readable infix query expressions (such as a==100 and b>=200) and transform them into the equivalent query argument for the pymongo package ({'$and': [{'a': 100}, {'b': {'$gte': 200}}]}). Supports many equality and inequality operators - see the docstring for the transform_query function for more examples.

  • Fixed issue where PEP8 compatibility names for ParserElement static methods were not themselves defined as staticmethods. When called using a ParserElement instance, this resulted in a TypeError exception. Reported by eylenburg (#548).

  • To address a compatibility issue in RDFLib, added a property setter for the ParserElement.name property, to call ParserElement.set_name.

  • Modified ParserElement.set_name() to accept a None value, to clear the defined name and corresponding error message for a ParserElement.

    • ... (truncated)

    Commits
    • b846e4a Prep for 3.1.4 release
    • 9bd2356 Add Python 3.6 to CI (#566)
    • ee50a19 Add Tag notes to HowToUsePyparsing.rst
    • 3ffc3ef Fix typo
    • e5e97f7 Add mongodb_query_expression.py to examples; updated 0README.html and test_ex...
    • 10cef98 Add Tag ParserElement class
    • cf41d90 Prep for 3.1.3 release
    • d7c163c Some minor code changes in chemical_formulas.py
    • eb56030 Various code cleanups
    • a9e7d47 Added name property setter, and enhanced set_name() to accept a None value to...
    • Additional commits viewable in compare view

    Updates setuptools from 73.0.1 to 74.0.0

    Changelog

    Sourced from setuptools's changelog.

    v74.0.0

    Features

    • Changed the type of error raised by setuptools.command.easy_install.CommandSpec.from_param on unsupported argument from AttributeError to TypeError -- by :user:Avasam (#4548)
    • Added detection of ARM64 variant of MSVC -- by :user:saschanaz (#4553)
    • Made setuptools.package_index.Credential a typing.NamedTuple -- by :user:Avasam (#4585)
    • Reraise error from setuptools.command.easy_install.auto_chmod instead of nonsensical TypeError: 'Exception' object is not subscriptable -- by :user:Avasam (#4593)
    • Fully typed all collection attributes in pkg_resources -- by :user:Avasam (#4598)
    • Automatically exclude .tox|.nox|.venv directories from sdist. (#4603)

    Deprecations and Removals

    Misc

    Commits
    • 98ad794 Bump version: 73.0.1 → 74.0.0
    • b4fb917 Merge pull request #4600 from pypa/debt/msvc-monkey
    • 18a44d8 Add news fragment.
    • 5f8215d Merge pull request #4548 from Avasam/from_param-TypeError
    • 6928048 Merge branch 'main' into debt/msvc-monkey
    • 11a6b59 Merge pull request #4606 from pypa/distutils-58fe058e4
    • 903604b Reraise sensible errors from auto_chmod (#4593)
    • 8ec5b5a Add missing news fragment for PR 4603
    • e90dfd5 Exclude top-level .tox|.nox|.venv from sdist (#4603)
    • ef2957a Reraise sensible errors from auto_chmod
    • Additional commits viewable in compare view

    Updates zope-interface from 7.0.1 to 7.0.3

    Changelog

    Sourced from zope-interface's changelog.

    7.0.3 (2024-08-27)

    • Fix Assertion 'memb->type == T_PYSSIZET' failed. for Python < 3.12. ([#319](https://github.com/zopefoundation/zope.interface/issues/319) <https://github.com/zopefoundation/zope.interface/issues/319>_)

    7.0.2 (2024-08-26)

    • Fix reference-counting bug in C module initialization (broken in 7.0). ([#316](https://github.com/zopefoundation/zope.interface/issues/316) <https://github.com/zopefoundation/zope.interface/issues/316>_)
    Commits
    • cf5ac5b Prepare release 7.0.3
    • ef32bf2 Merge pull request #320 from zopefoundation/fix-weaklistoffset
    • 81f64e3 Fix weaklistoffset in SB_members with USE_EXPLICIT_WEAKREFLIST
    • c3a4945 svb
    • bcf4cbb Merge pull request #318 from zopefoundation/release-7.0.2
    • db74300 Prepare 7.0.2 release
    • 9a2d03e Merge pull request #317 from zopefoundation/davisagli-fix-gc-assertion
    • c8ada7e call Py_INCREF after null check
    • f9a7458 Fix refcounting bug in module initialization
    • a44f50e - remove appveyor reference [ci skip]
    • Additional commits viewable in compare view

    Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

    Dependabot commands and options

    You can trigger Dependabot actions by commenting on this PR:

    • @dependabot rebase will rebase this PR
    • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
    • @dependabot merge will merge this PR after your CI passes on it
    • @dependabot squash and merge will squash and merge this PR after your CI passes on it
    • @dependabot cancel merge will cancel a previously requested merge and block automerging
    • @dependabot reopen will reopen this PR if it is closed
    • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
    • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
    • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
    • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
    • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
    • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
    • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

    @dependabot
    build(deps): bump the general group across 1 directory with 5 updates
    51d7b6b 
    Bumps the general group with 5 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [pbr](https://docs.openstack.org/pbr/latest/) | `6.0.0` | `6.1.0` |
| [pefile](https://github.com/erocarrera/pefile) | `2023.2.7` | `2024.8.26` |
| [pyparsing](https://github.com/pyparsing/pyparsing) | `3.1.2` | `3.1.4` |
| [setuptools](https://github.com/pypa/setuptools) | `73.0.1` | `74.0.0` |
| [zope-interface](https://github.com/zopefoundation/zope.interface) | `7.0.1` | `7.0.3` |



Updates `pbr` from 6.0.0 to 6.1.0

Updates `pefile` from 2023.2.7 to 2024.8.26
- [Release notes](https://github.com/erocarrera/pefile/releases)
- [Commits](erocarrera/pefile@v2023.2.7...v2024.8.26)

Updates `pyparsing` from 3.1.2 to 3.1.4
- [Release notes](https://github.com/pyparsing/pyparsing/releases)
- [Changelog](https://github.com/pyparsing/pyparsing/blob/master/CHANGES)
- [Commits](pyparsing/pyparsing@pyparsing_3.1.2...3.1.4)

Updates `setuptools` from 73.0.1 to 74.0.0
- [Release notes](https://github.com/pypa/setuptools/releases)
- [Changelog](https://github.com/pypa/setuptools/blob/main/NEWS.rst)
- [Commits](pypa/setuptools@v73.0.1...v74.0.0)

Updates `zope-interface` from 7.0.1 to 7.0.3
- [Changelog](https://github.com/zopefoundation/zope.interface/blob/master/CHANGES.rst)
- [Commits](zopefoundation/zope.interface@7.0.1...7.0.3)

---
updated-dependencies:
- dependency-name: pbr
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: general
- dependency-name: pefile
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: general
- dependency-name: pyparsing
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: general
- dependency-name: setuptools
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: general
- dependency-name: zope-interface
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: general
...

Signed-off-by: dependabot[bot] <[email protected]>
    @dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Aug 27, 2024
    @github-actions GitHub Actions
    Copy link

    Dependency Review

    The following issues were found:
    • ✅ 0 vulnerable package(s)
    • ✅ 0 package(s) with incompatible licenses
    • ✅ 0 package(s) with invalid SPDX license definitions
    • ⚠️ 1 package(s) with unknown licenses.
    See the Details below.

    License Issues

    requirements.txt

    PackageVersionLicenseIssue Type
    zope.interface7.0.3NullUnknown License

    OpenSSF Scorecard

    PackageVersionScoreDetails
    pip/pbr 6.1.0 UnknownUnknown
    pip/pefile 2024.8.26 🟢 5.1
    Details
    CheckScoreReason
    Binary-Artifacts🟢 10no binaries found in the repo
    Branch-Protection⚠️ 0branch protection not enabled on development/release branches
    CI-Tests🟢 913 out of 14 merged PRs checked by a CI test -- score normalized to 9
    CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
    Code-Review🟢 5found 11 unreviewed changesets out of 25 -- score normalized to 5
    Contributors🟢 1010 different organizations found -- score normalized to 10
    Dangerous-Workflow🟢 10no dangerous workflow patterns detected
    Dependency-Update-Tool⚠️ 0no update tool detected
    Fuzzing⚠️ 0project is not fuzzed
    License🟢 10license file detected
    Maintained🟢 1030 commit(s) out of 30 and 1 issue activity out of 30 found in the last 90 days -- score normalized to 10
    Packaging⚠️ -1no published package detected
    Pinned-Dependencies🟢 6dependency not pinned by hash detected -- score normalized to 6
    SAST🟢 9SAST tool detected but not run on all commits
    Security-Policy⚠️ 0security policy file not detected
    Signed-Releases⚠️ 00 out of 5 artifacts are signed or have provenance
    Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
    Vulnerabilities🟢 10no vulnerabilities detected
    pip/pyparsing 3.1.4 🟢 6.6
    Details
    CheckScoreReason
    Code-Review⚠️ 0Found 2/30 approved changesets -- score normalized to 0
    Maintained🟢 1018 commit(s) and 6 issue activity found in the last 90 days -- score normalized to 10
    CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
    License🟢 10license file detected
    Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
    Signed-Releases⚠️ 0Project has not signed or included provenance with any releases.
    Dangerous-Workflow🟢 10no dangerous workflow patterns detected
    Token-Permissions🟢 10GitHub workflow tokens follow principle of least privilege
    Packaging⚠️ -1packaging workflow not detected
    Security-Policy🟢 10security policy file detected
    Binary-Artifacts🟢 10no binaries found in the repo
    Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
    Fuzzing🟢 10project is fuzzed
    Vulnerabilities🟢 100 existing vulnerabilities detected
    SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
    pip/setuptools 74.0.0 🟢 6
    Details
    CheckScoreReason
    Code-Review🟢 4Found 7/15 approved changesets -- score normalized to 4
    Maintained🟢 1030 commit(s) and 15 issue activity found in the last 90 days -- score normalized to 10
    CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
    License🟢 10license file detected
    Signed-Releases⚠️ -1no releases found
    Dangerous-Workflow🟢 10no dangerous workflow patterns detected
    Packaging⚠️ -1packaging workflow not detected
    Token-Permissions🟢 10GitHub workflow tokens follow principle of least privilege
    Security-Policy🟢 10security policy file detected
    Branch-Protection⚠️ 0branch protection not enabled on development/release branches
    Vulnerabilities🟢 100 existing vulnerabilities detected
    Binary-Artifacts⚠️ 0binaries present in source code
    Fuzzing🟢 10project is fuzzed
    Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
    SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
    pip/zope.interface 7.0.3 🟢 6.2
    Details
    CheckScoreReason
    Code-Review🟢 4Found 8/18 approved changesets -- score normalized to 4
    Maintained🟢 1017 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10
    CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
    License🟢 9license file detected
    Signed-Releases⚠️ -1no releases found
    Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
    Dangerous-Workflow🟢 10no dangerous workflow patterns detected
    Binary-Artifacts🟢 10no binaries found in the repo
    Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
    Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
    Fuzzing⚠️ 0project is not fuzzed
    Vulnerabilities🟢 100 existing vulnerabilities detected
    Security-Policy🟢 10security policy file detected
    Packaging🟢 10packaging workflow detected
    SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0

    Scanned Manifest Files

    requirements.txt

    @sonarcloud SonarCloud
    Copy link

    sonarcloud bot commented Aug 27, 2024

    Quality Gate Passed Quality Gate passed

    Issues
    0 New issues
    0 Accepted issues

    Measures
    0 Security Hotspots
    0.0% Coverage on New Code
    0.0% Duplication on New Code

    See analysis details on SonarCloud

    @Nick2bad4u Nick2bad4u merged commit 245c39d into main Aug 27, 2024
    41 checks passed
    @dependabot dependabot bot deleted the dependabot/pip/general-92ccf920c4 branch August 27, 2024 23:51
    Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
    Reviewers
    No reviews
    Assignees
    No one assigned
    Labels
    dependencies Pull requests that update a dependency file python Pull requests that update Python code
    Projects
    None yet
    Milestone
    No milestone
    Development

    Successfully merging this pull request may close these issues.
    1 participant
    @Nick2bad4u