Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Upgrade: Bump the dependencies group with 7 updates #477

Closed
wants to merge 1 commit into from
Closed

Upgrade: Bump the dependencies group with 7 updates #477

wants to merge 1 commit into from

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Aug 1, 2024 •
edited
Loading

Bumps the dependencies group with 7 updates:

Package From To
aiohttp 3.9.5 3.10.0
boto3 1.34.138 1.34.151
botocore 1.34.138 1.34.151
certifi 2024.6.2 2024.7.4
cryptography 42.0.8 43.0.0
exceptiongroup 1.2.1 1.2.2
sentry-sdk 2.7.1 2.12.0

Updates aiohttp from 3.9.5 to 3.10.0

Release notes

Sourced from aiohttp's releases.

3.10.0

Bug fixes

  • Fixed server response headers for Content-Type and Content-Encoding for static compressed files -- by :user:steverep.

    Server will now respond with a Content-Type appropriate for the compressed file (e.g. "application/gzip"), and omit the Content-Encoding header. Users should expect that most clients will no longer decompress such responses by default.

    Related issues and pull requests on GitHub: #4462.

  • Fixed duplicate cookie expiration calls in the CookieJar implementation

    Related issues and pull requests on GitHub: #7784.

  • Adjusted FileResponse to check file existence and access when preparing the response -- by :user:steverep.

    The :py:class:~aiohttp.web.FileResponse class was modified to respond with 403 Forbidden or 404 Not Found as appropriate. Previously, it would cause a server error if the path did not exist or could not be accessed. Checks for existence, non-regular files, and permissions were expected to be done in the route handler. For static routes, this now permits a compressed file to exist without its uncompressed variant and still be served. In addition, this changes the response status for files without read permission to 403, and for non-regular files from 404 to 403 for consistency.

    Related issues and pull requests on GitHub: #8182.

  • Fixed AsyncResolver to match ThreadedResolver behavior -- by :user:bdraco.

    On system with IPv6 support, the :py:class:~aiohttp.resolver.AsyncResolver would not fallback to providing A records when AAAA records were not available. Additionally, unlike the :py:class:~aiohttp.resolver.ThreadedResolver, the :py:class:~aiohttp.resolver.AsyncResolver did not handle link-local addresses correctly.

... (truncated)

Changelog

Sourced from aiohttp's changelog.

3.10.0 (2024-07-30)

Bug fixes

  • Fixed server response headers for Content-Type and Content-Encoding for static compressed files -- by :user:steverep.

    Server will now respond with a Content-Type appropriate for the compressed file (e.g. "application/gzip"), and omit the Content-Encoding header. Users should expect that most clients will no longer decompress such responses by default.

    Related issues and pull requests on GitHub: :issue:4462.

  • Fixed duplicate cookie expiration calls in the CookieJar implementation

    Related issues and pull requests on GitHub: :issue:7784.

  • Adjusted FileResponse to check file existence and access when preparing the response -- by :user:steverep.

    The :py:class:~aiohttp.web.FileResponse class was modified to respond with 403 Forbidden or 404 Not Found as appropriate. Previously, it would cause a server error if the path did not exist or could not be accessed. Checks for existence, non-regular files, and permissions were expected to be done in the route handler. For static routes, this now permits a compressed file to exist without its uncompressed variant and still be served. In addition, this changes the response status for files without read permission to 403, and for non-regular files from 404 to 403 for consistency.

    Related issues and pull requests on GitHub: :issue:8182.

  • Fixed AsyncResolver to match ThreadedResolver behavior -- by :user:bdraco.

    On system with IPv6 support, the :py:class:~aiohttp.resolver.AsyncResolver would not fallback to providing A records when AAAA records were not available.

... (truncated)

Commits

Updates boto3 from 1.34.138 to 1.34.151

Commits
  • 64fb912 Merge branch 'release-1.34.151'
  • 37f7211 Bumping version to 1.34.151
  • 00f626a Add changelog entries from botocore
  • 0f53991 Merge branch 'release-1.34.150'
  • d2588d7 Merge branch 'release-1.34.150' into develop
  • a1cbd94 Bumping version to 1.34.150
  • ceb4335 Add changelog entries from botocore
  • 12bdc6e Update setuptools (#4219)
  • 9dc3e48 Merge branch 'release-1.34.149'
  • 330532c Merge branch 'release-1.34.149' into develop
  • Additional commits viewable in compare view

Updates botocore from 1.34.138 to 1.34.151

Changelog

Sourced from botocore's changelog.

1.34.151

  • api-change:appstream: Added support for Red Hat Enterprise Linux 8 on Amazon AppStream 2.0
  • api-change:autoscaling: Increase the length limit for VPCZoneIdentifier from 2047 to 5000
  • api-change:codepipeline: AWS CodePipeline V2 type pipelines now support stage level conditions to enable development teams to safely release changes that meet quality and compliance requirements.
  • api-change:elasticache: Doc only update for changes to deletion API.
  • api-change:elb: Add v2 smoke tests and smithy smokeTests trait for SDK testing.
  • api-change:events: Add v2 smoke tests and smithy smokeTests trait for SDK testing.
  • api-change:lexv2-models: This release adds new capabilities to the AMAZON.QnAIntent: Custom prompting, Guardrails integration and ExactResponse support for Bedrock Knowledge Base.
  • api-change:logs: Add v2 smoke tests and smithy smokeTests trait for SDK testing.
  • api-change:rolesanywhere: IAM RolesAnywhere now supports custom role session name on the CreateSession. This release adds the acceptRoleSessionName option to a profile to control whether a role session name will be accepted in a session request with a given profile.
  • api-change:tnb: This release adds Network Service Update, through which customers will be able to update their instantiated networks to a new network package. See the documentation for limitations. The release also enhances the Get network operation API to return parameter overrides used during the operation.
  • api-change:workspaces: Removing multi-session as it isn't supported for pools

1.34.150

  • api-change:elasticache: Renaming full service name as it appears in developer documentation.
  • api-change:memorydb: Renaming full service name as it appears in developer documentation.

1.34.149

  • api-change:application-autoscaling: Application Auto Scaling is now more responsive to the changes in demand of your SageMaker Inference endpoints. To get started, create or update a Target Tracking policy based on High Resolution CloudWatch metrics.
  • api-change:application-signals: CloudWatch Application Signals now supports application logs correlation with traces and operational health metrics of applications running on EC2 instances. Users can view the most relevant telemetry to troubleshoot application health anomalies such as spikes in latency, errors, and availability.
  • api-change:bedrock-runtime: Provides ServiceUnavailableException error message
  • api-change:codecommit: CreateRepository API now throws OperationNotAllowedException when the account has been restricted from creating a repository.
  • api-change:datazone: Introduces GetEnvironmentCredentials operation to SDK
  • api-change:ec2: EC2 Fleet now supports using custom identifiers to reference Amazon Machine Images (AMI) in launch requests that are configured to choose from a diversified list of instance types.
  • api-change:ecr: API and documentation updates for Amazon ECR, adding support for creating, updating, describing and deleting ECR Repository Creation Template.
  • api-change:eks: This release adds support for EKS cluster to manage extended support.
  • api-change:elbv2: This release adds support for sharing trust stores across accounts and organizations through integration with AWS Resource Access Manager.
  • api-change:network-firewall: You can now log events that are related to TLS inspection, in addition to the existing alert and flow logging.
  • api-change:outposts: Adding default vCPU information to GetOutpostSupportedInstanceTypes and GetOutpostInstanceTypes responses
  • api-change:stepfunctions: This release adds support to customer managed KMS key encryption in AWS Step Functions.

1.34.148

  • api-change:cleanrooms: Three enhancements to the AWS Clean Rooms: Disallowed Output Columns, Flexible Result Receivers, SQL as a Seed
  • api-change:dynamodb: DynamoDB doc only update for July
  • api-change:iotsitewise: Adds support for creating SiteWise Edge gateways that run on a Siemens Industrial Edge Device.
  • api-change:mediapackagev2: This release adds support for Irdeto DRM encryption in DASH manifests.
  • api-change:medical-imaging: CopyImageSet API adds copying selected instances between image sets, and overriding inconsistent metadata with a force parameter. UpdateImageSetMetadata API enables reverting to prior versions; updates to Study, Series, and SOP Instance UIDs; and updates to private elements, with a force parameter.
  • api-change:pinpoint-sms-voice-v2: Update for rebrand to AWS End User Messaging SMS and Voice.

... (truncated)

Commits

Updates certifi from 2024.6.2 to 2024.7.4

Commits

Updates cryptography from 42.0.8 to 43.0.0

Changelog

Sourced from cryptography's changelog.

43.0.0 - 2024-07-20


* **BACKWARDS INCOMPATIBLE:** Support for OpenSSL less than 1.1.1e has been
  removed.  Users on older version of OpenSSL will need to upgrade.
* **BACKWARDS INCOMPATIBLE:** Dropped support for LibreSSL < 3.8.
* Updated Windows, macOS, and Linux wheels to be compiled with OpenSSL 3.3.1.
* Updated the minimum supported Rust version (MSRV) to 1.65.0, from 1.63.0.
* :func:`~cryptography.hazmat.primitives.asymmetric.rsa.generate_private_key`
  now enforces a minimum RSA key size of 1024-bit. Note that 1024-bit is still
  considered insecure, users should generally use a key size of 2048-bits.
* :func:`~cryptography.hazmat.primitives.serialization.pkcs7.serialize_certificates`
  now emits ASN.1 that more closely follows the recommendations in :rfc:`2315`.
* Added new :doc:`/hazmat/decrepit/index` module which contains outdated and
  insecure cryptographic primitives.
  :class:`~cryptography.hazmat.primitives.ciphers.algorithms.CAST5`,
  :class:`~cryptography.hazmat.primitives.ciphers.algorithms.SEED`,
  :class:`~cryptography.hazmat.primitives.ciphers.algorithms.IDEA`, and
  :class:`~cryptography.hazmat.primitives.ciphers.algorithms.Blowfish`, which were
  deprecated in 37.0.0, have been added to this module. They will be removed
  from the ``cipher`` module in 45.0.0.
* Moved :class:`~cryptography.hazmat.primitives.ciphers.algorithms.TripleDES`
  and :class:`~cryptography.hazmat.primitives.ciphers.algorithms.ARC4` into
  :doc:`/hazmat/decrepit/index` and deprecated them in the ``cipher`` module.
  They will be removed from the ``cipher`` module in 48.0.0.
* Added support for deterministic
  :class:`~cryptography.hazmat.primitives.asymmetric.ec.ECDSA` (:rfc:`6979`)
* Added support for client certificate verification to the
  :mod:`X.509 path validation <cryptography.x509.verification>` APIs in the
  form of :class:`~cryptography.x509.verification.ClientVerifier`,
  :class:`~cryptography.x509.verification.VerifiedClient`, and
  ``PolicyBuilder``
  :meth:`~cryptography.x509.verification.PolicyBuilder.build_client_verifier`.
* Added Certificate
  :attr:`~cryptography.x509.Certificate.public_key_algorithm_oid`
  and Certificate Signing Request
  :attr:`~cryptography.x509.CertificateSigningRequest.public_key_algorithm_oid`
  to determine the :class:`~cryptography.hazmat._oid.PublicKeyAlgorithmOID`
  Object Identifier of the public key found inside the certificate.
* Added :attr:`~cryptography.x509.InvalidityDate.invalidity_date_utc`, a
  timezone-aware alternative to the naïve ``datetime`` attribute
  :attr:`~cryptography.x509.InvalidityDate.invalidity_date`.
* Added support for parsing empty DN string in
  :meth:`~cryptography.x509.Name.from_rfc4514_string`.
* Added the following properties that return timezone-aware ``datetime`` objects:
  :meth:`~cryptography.x509.ocsp.OCSPResponse.produced_at_utc`,
  :meth:`~cryptography.x509.ocsp.OCSPResponse.revocation_time_utc`,
  :meth:`~cryptography.x509.ocsp.OCSPResponse.this_update_utc`,
  :meth:`~cryptography.x509.ocsp.OCSPResponse.next_update_utc`,
  :meth:`~cryptography.x509.ocsp.OCSPSingleResponse.revocation_time_utc`,
</tr></table>

... (truncated)

Commits

Updates exceptiongroup from 1.2.1 to 1.2.2

Release notes

Sourced from exceptiongroup's releases.

1.2.2

  • Removed an assert in exceptiongroup._formatting that caused compatibility issues with Sentry (#123)
Changelog

Sourced from exceptiongroup's changelog.

Version history

This library adheres to Semantic Versioning 2.0 <http://semver.org/>_.

1.2.2

  • Removed an assert in exceptiongroup._formatting that caused compatibility issues with Sentry ([#123](https://github.com/agronholm/exceptiongroup/issues/123) <https://github.com/agronholm/exceptiongroup/issues/123>_)

1.2.1

  • Updated the copying of __notes__ to match CPython behavior (PR by CF Bolz-Tereick)
  • Corrected the type annotation of the exception handler callback to accept a BaseExceptionGroup instead of BaseException
  • Fixed type errors on Python < 3.10 and the type annotation of suppress() (PR by John Litborn)

1.2.0

  • Added special monkeypatching if Apport <https://github.com/canonical/apport>_ has overridden sys.excepthook so it will format exception groups correctly (PR by John Litborn)
  • Added a backport of contextlib.suppress() from Python 3.12.1 which also handles suppressing exceptions inside exception groups
  • Fixed bare raise in a handler reraising the original naked exception rather than an exception group which is what is raised when you do a raise in an except* handler

1.1.3

  • catch() now raises a TypeError if passed an async exception handler instead of just giving a RuntimeWarning about the coroutine never being awaited. (#66, PR by John Litborn)
  • Fixed plain raise statement in an exception handler callback to work like a raise in an except* block
  • Fixed new exception group not being chained to the original exception when raising an exception group from exceptions raised in handler callbacks
  • Fixed type annotations of the derive(), subgroup() and split() methods to match the ones in typeshed

1.1.2

  • Changed handling of exceptions in exception group handler callbacks to not wrap a single exception in an exception group, as per CPython issue 103590 <https://github.com/python/cpython/issues/103590>_

1.1.1

  • Worked around

... (truncated)

Commits
  • 2399d54 Added the release version
  • bec9651 Removed problematic assert that caused compatibility issues
  • f3f0ff6 Updated Ruff configuration
  • bb43ee0 Fixed formatting tests failing on Python 3.13
  • eb8fbbc [pre-commit.ci] pre-commit autoupdate (#129)
  • 6ff8300 [pre-commit.ci] pre-commit autoupdate (#128)
  • 761933f [pre-commit.ci] pre-commit autoupdate (#127)
  • 1b43294 [pre-commit.ci] pre-commit autoupdate (#125)
  • dd87018 [pre-commit.ci] pre-commit autoupdate (#124)
  • 54d8b8d [pre-commit.ci] pre-commit autoupdate (#121)
  • Additional commits viewable in compare view

Updates sentry-sdk from 2.7.1 to 2.12.0

Release notes

Sourced from sentry-sdk's releases.

2.12.0

Various fixes & improvements

2.11.0

Various fixes & improvements

... (truncated)

Changelog

Sourced from sentry-sdk's changelog.

2.12.0

Various fixes & improvements

2.11.0

Various fixes & improvements

  • Add disabled_integrations (#3328) by @​sentrivana

    Disabling individual integrations is now much easier. Instead of disabling all automatically enabled integrations and specifying the ones you want to keep, you can now use the new disabled_integrations config option to provide a list of integrations to disable:

    import sentry_sdk
from sentry_sdk.integrations.flask import FlaskIntegration
sentry_sdk.init(
# Do not use the Flask integration even if Flask is installed.
disabled_integrations=[
FlaskIntegration(),
],
)

  • Use operation name as transaction name in Strawberry (#3294) by @​sentrivana

  • WSGI integrations respect SCRIPT_NAME env variable (#2622) by @​sarvaSanjay

  • Make Django DB spans have origin auto.db.django (#3319) by @​antonpirker

  • Sort breadcrumbs by time before sending (#3307) by @​antonpirker

  • Fix KeyError('sentry-monitor-start-timestamp-s') (#3278) by @​Mohsen-Khodabakhshi

... (truncated)

Commits
  • 441c0f7 Updated changelog
  • ab3eb1f release: 2.12.0
  • f8e5d2f Add span data to the transactions trace context (#3374)
  • 0f3e5db ci: Remove Django setuptools pin
  • b658e4b feat(integrations): Add async support for ai_track decorator
  • fc5db4f ref(otel): Remove experimental autoinstrumentation (#3239)
  • 6bb2081 build(deps): bump checkouts/data-schemas from 0feb234 to 6d2c435 (#3369)
  • 2ce6677 tests: Test with Django 5.1 RC (#3370)
  • bd293e5 Expose the scope getters to top level API and use them everywhere (#3357)
  • c9765cd ci: Workaround bug preventing Django test runs (#3371)
  • Additional commits viewable in compare view

Most Recent Ignore Conditions Applied to This Pull Request
Dependency Name Ignore Conditions
boto3 [< 1.25, > 1.24.17]
botocore [< 1.28, > 1.27.17]

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Upgrade: Bump the dependencies group with 7 updates
d92d7fd 
Bumps the dependencies group with 7 updates:

| Package | From | To |
| --- | --- | --- |
| [aiohttp](https://github.com/aio-libs/aiohttp) | `3.9.5` | `3.10.0` |
| [boto3](https://github.com/boto/boto3) | `1.34.138` | `1.34.151` |
| [botocore](https://github.com/boto/botocore) | `1.34.138` | `1.34.151` |
| [certifi](https://github.com/certifi/python-certifi) | `2024.6.2` | `2024.7.4` |
| [cryptography](https://github.com/pyca/cryptography) | `42.0.8` | `43.0.0` |
| [exceptiongroup](https://github.com/agronholm/exceptiongroup) | `1.2.1` | `1.2.2` |
| [sentry-sdk](https://github.com/getsentry/sentry-python) | `2.7.1` | `2.12.0` |


Updates `aiohttp` from 3.9.5 to 3.10.0
- [Release notes](https://github.com/aio-libs/aiohttp/releases)
- [Changelog](https://github.com/aio-libs/aiohttp/blob/master/CHANGES.rst)
- [Commits](aio-libs/aiohttp@v3.9.5...v3.10.0)

Updates `boto3` from 1.34.138 to 1.34.151
- [Release notes](https://github.com/boto/boto3/releases)
- [Commits](boto/boto3@1.34.138...1.34.151)

Updates `botocore` from 1.34.138 to 1.34.151
- [Changelog](https://github.com/boto/botocore/blob/develop/CHANGELOG.rst)
- [Commits](boto/botocore@1.34.138...1.34.151)

Updates `certifi` from 2024.6.2 to 2024.7.4
- [Commits](certifi/python-certifi@2024.06.02...2024.07.04)

Updates `cryptography` from 42.0.8 to 43.0.0
- [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst)
- [Commits](pyca/cryptography@42.0.8...43.0.0)

Updates `exceptiongroup` from 1.2.1 to 1.2.2
- [Release notes](https://github.com/agronholm/exceptiongroup/releases)
- [Changelog](https://github.com/agronholm/exceptiongroup/blob/main/CHANGES.rst)
- [Commits](agronholm/exceptiongroup@1.2.1...1.2.2)

Updates `sentry-sdk` from 2.7.1 to 2.12.0
- [Release notes](https://github.com/getsentry/sentry-python/releases)
- [Changelog](https://github.com/getsentry/sentry-python/blob/master/CHANGELOG.md)
- [Commits](getsentry/sentry-python@2.7.1...2.12.0)

---
updated-dependencies:
- dependency-name: aiohttp
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: boto3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: botocore
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: certifi
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: cryptography
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: exceptiongroup
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: sentry-sdk
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Aug 1, 2024
@dependabot Dependabot
Copy link
Contributor Author

dependabot bot commented on behalf of github Sep 1, 2024

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot bot closed this Sep 1, 2024
@dependabot dependabot bot deleted the dependabot/pip/dependencies-3e7f21874c branch September 1, 2024 14:19
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
dependencies Pull requests that update a dependency file python Pull requests that update Python code
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
0 participants