Upgrade: Bump the dependencies-pip group with 11 updates #233
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
![dependabot[bot]](https://avatars.githubusercontent.com/in/29110?s=60&v=4){kind=small}
Bumps the dependencies-pip group with 11 updates: | Package | From | To | | --- | --- | --- | | [blinker](https://github.com/pallets-eco/blinker) | `1.6.2` | `1.7.0` | | [certifi](https://github.com/certifi/python-certifi) | `2023.7.22` | `2023.11.17` | | [charset-normalizer](https://github.com/Ousret/charset_normalizer) | `3.2.0` | `3.3.2` | | [click](https://github.com/pallets/click) | `8.1.6` | `8.1.7` | | [flask](https://github.com/pallets/flask) | `2.3.2` | `3.0.0` | | [idna](https://github.com/kjd/idna) | `3.4` | `3.6` | | [importlib-metadata](https://github.com/python/importlib_metadata) | `6.8.0` | `7.0.1` | | [sentry-sdk](https://github.com/getsentry/sentry-python) | `1.28.1` | `1.39.1` | | [urllib3](https://github.com/urllib3/urllib3) | `2.0.4` | `2.1.0` | | [werkzeug](https://github.com/pallets/werkzeug) | `2.3.6` | `3.0.1` | | [zipp](https://github.com/jaraco/zipp) | `3.16.2` | `3.17.0` | Updates `blinker` from 1.6.2 to 1.7.0 - [Release notes](https://github.com/pallets-eco/blinker/releases) - [Changelog](https://github.com/pallets-eco/blinker/blob/main/CHANGES.rst) - [Commits](pallets-eco/blinker@1.6.2...1.7.0) Updates `certifi` from 2023.7.22 to 2023.11.17 - [Commits](certifi/python-certifi@2023.07.22...2023.11.17) Updates `charset-normalizer` from 3.2.0 to 3.3.2 - [Release notes](https://github.com/Ousret/charset_normalizer/releases) - [Changelog](https://github.com/Ousret/charset_normalizer/blob/master/CHANGELOG.md) - [Commits](jawah/charset_normalizer@3.2.0...3.3.2) Updates `click` from 8.1.6 to 8.1.7 - [Release notes](https://github.com/pallets/click/releases) - [Changelog](https://github.com/pallets/click/blob/main/CHANGES.rst) - [Commits](pallets/click@8.1.6...8.1.7) Updates `flask` from 2.3.2 to 3.0.0 - [Release notes](https://github.com/pallets/flask/releases) - [Changelog](https://github.com/pallets/flask/blob/main/CHANGES.rst) - [Commits](pallets/flask@2.3.2...3.0.0) Updates `idna` from 3.4 to 3.6 - [Changelog](https://github.com/kjd/idna/blob/master/HISTORY.rst) - [Commits](kjd/idna@v3.4...v3.6) Updates `importlib-metadata` from 6.8.0 to 7.0.1 - [Release notes](https://github.com/python/importlib_metadata/releases) - [Changelog](https://github.com/python/importlib_metadata/blob/main/NEWS.rst) - [Commits](python/importlib_metadata@v6.8.0...v7.0.1) Updates `sentry-sdk` from 1.28.1 to 1.39.1 - [Release notes](https://github.com/getsentry/sentry-python/releases) - [Changelog](https://github.com/getsentry/sentry-python/blob/master/CHANGELOG.md) - [Commits](getsentry/sentry-python@1.28.1...1.39.1) Updates `urllib3` from 2.0.4 to 2.1.0 - [Release notes](https://github.com/urllib3/urllib3/releases) - [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst) - [Commits](urllib3/urllib3@2.0.4...2.1.0) Updates `werkzeug` from 2.3.6 to 3.0.1 - [Release notes](https://github.com/pallets/werkzeug/releases) - [Changelog](https://github.com/pallets/werkzeug/blob/main/CHANGES.rst) - [Commits](pallets/werkzeug@2.3.6...3.0.1) Updates `zipp` from 3.16.2 to 3.17.0 - [Release notes](https://github.com/jaraco/zipp/releases) - [Changelog](https://github.com/jaraco/zipp/blob/main/NEWS.rst) - [Commits](jaraco/zipp@v3.16.2...v3.17.0) --- updated-dependencies: - dependency-name: blinker dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies-pip - dependency-name: certifi dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies-pip - dependency-name: charset-normalizer dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies-pip - dependency-name: click dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies-pip - dependency-name: flask dependency-type: direct:production update-type: version-update:semver-major dependency-group: dependencies-pip - dependency-name: idna dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies-pip - dependency-name: importlib-metadata dependency-type: direct:production update-type: version-update:semver-major dependency-group: dependencies-pip - dependency-name: sentry-sdk dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies-pip - dependency-name: urllib3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies-pip - dependency-name: werkzeug dependency-type: direct:production update-type: version-update:semver-major dependency-group: dependencies-pip - dependency-name: zipp dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies-pip ... Signed-off-by: dependabot[bot] <[email protected]>
dependabot
bot
added
dependencies
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Bumps the dependencies-pip group with 11 updates:
1.6.21.7.02023.7.222023.11.173.2.03.3.28.1.68.1.72.3.23.0.03.43.66.8.07.0.11.28.11.39.12.0.42.1.02.3.63.0.13.16.23.17.0Updates
blinkerfrom 1.6.2 to 1.7.0Release notes
Sourced from blinker's releases.
Changelog
Sourced from blinker's changelog.
Commits
2adbe03Relase version 1.7.07f3f1a0Update the supported Python versionsd32c27aUpdate the requirements200786dBump actions/checkout from 3.6.0 to 4.1.15186dc1Bump actions/upload-artifact from 3.1.2 to 3.1.35ad0039Allow the Signal set_class to be customisedfe3ec89Add changelog entry44d29b3Fix weakref callback errors during finalization36560daFix deployment issue and re-release 1.6.3aafe30dRelase version 1.6.3Updates
certififrom 2023.7.22 to 2023.11.17Commits
515962bMerge pull request #252 from certifi/create-pull-request/patch28b2a0d2023.11.177ccda9fBump actions/checkout from 4.1.0 to 4.1.1 (#251)5e4bb9eBump actions/setup-python from 4.7.0 to 4.7.1 (#248)610354fBump actions/checkout from 4.0.0 to 4.1.0 (#247)2d98c76Bump actions/upload-artifact from 3.1.2 to 3.1.3 (#246)7f0e639ci: add minimal permissions to workflows bump.yml and release.yml (#245)600713dBump actions/checkout from 3.6.0 to 4.0.0 (#244)0435b2aBump actions/checkout from 3.5.3 to 3.6.0 (#242)25ea83aFix bashUpdates
charset-normalizerfrom 3.2.0 to 3.3.2Release notes
Sourced from charset-normalizer's releases.
Changelog
Sourced from charset-normalizer's changelog.
Commits
79dce48🐛 Regression on some detection case showcased in the documentation (#371)...a4b9b01Bump github/codeql-action from 2.22.4 to 2.22.5 (#375)dcc01ccBump ossf/scorecard-action from 2.3.0 to 2.3.1 (#374)9cd402cBump pytest from 7.4.2 to 7.4.3 (#373)e274dcc🐛 Fix unintentional memory usage regression when using large payload that...07f3041⬆️ Bump github/codeql-action from 2.22.3 to 2.22.4 (#370)5208644🔖 Release 3.3.1 (#367)66966f1❇️ Improve the detection around some cases (#366)49653a6⬆️ Bump actions/setup-python from 4.7.0 to 4.7.1 (#359)f6a66ed⬆️ Bump pypa/cibuildwheel from 2.16.0 to 2.16.2 (#361)Updates
clickfrom 8.1.6 to 8.1.7Release notes
Sourced from click's releases.
Changelog
Sourced from click's changelog.
Commits
874ca2brelease version 8.1.76e1f6d3completion(fish): add back ; as line endings in fish script (#2570)a955c77update fish enabling script3c1529eadd back semicolons in fish scripta260ca6Replace bash shell completion version error with warning (#2576)d9db70cbash version support shows warning instead of error22b9b1cFix incorrect passing of flags to re.sub (#2581)d69d210fix flake8 findingaf2da1eFix incorrect passing of flags to re.subbb6a872start version 8.1.7Updates
flaskfrom 2.3.2 to 3.0.0Release notes
Sourced from flask's releases.
Changelog
Sourced from flask's changelog.
Commits
735a470Release version 3.0.0efe39aeBump Werkzeug 3.0.0438edcdAllow self as an argument to url_forb7c1290Fix wrong spelling of JS method .innerHTML8037487Bump pypa/gh-action-pypi-publish from 1.8.8 to 1.8.10 (#5248)e8076d9Bump slsa-framework/slsa-github-generator from 1.7.0 to 1.9.0 (#5247)ecc4a38Bump actions/checkout from 3.5.3 to 3.6.0 (#5246)24c6508Bump pypa/gh-action-pypi-publish from 1.8.8 to 1.8.1098cef9fBump slsa-framework/slsa-github-generator from 1.7.0 to 1.9.00c97a41Bump actions/checkout from 3.5.3 to 3.6.0Updates
idnafrom 3.4 to 3.6Changelog
Sourced from idna's changelog.
Commits
4ae74cfRelease v3.621888f3Merge pull request #164 from mgorny/sdist-testc5ba76aInclude tests in sdist2eb16d3Merge pull request #162 from kjd/release-3.589cd061Release v3.59fc29cdMerge pull request #161 from kjd/masteracb8c4aMerge pull request #160 from cclauss/patch-1adca101README.rst: Fix typos33a8f7bMerge pull request #159 from diogoteles08/add-scorecard354a412Add Scorecard GitHub ActionUpdates
importlib-metadatafrom 6.8.0 to 7.0.1Changelog
Sourced from importlib-metadata's changelog.
Commits
f2e84e3Finalizee9e9f77Merge commit '98196a'98196a7Fixed type annotations to allow strings.f38e051Add Python 3.13 to compatibility matrix. Ref python/cpython#113174.0c1d32eInline os.PathLike using future annotations.b99c9d6Refine SimplePath to allow for os.PathLike on input and SimplePath on output.200cf45Merge pull request #480 from python/bugfix/distribution-simplepathac243d3Include _meta in docs to fix doc build failures.1b3f272Corrected the interface for SimplePath to encompass the expectations of locat...fc4df51Rely on read_text and read_bytes from located paths.Updates
sentry-sdkfrom 1.28.1 to 1.39.1Release notes
Sourced from sentry-sdk's releases.
... (truncated)
Changelog
Sourced from sentry-sdk's changelog.
... (truncated)
Commits
2b46ec3Update CHANGELOG.mdd634c05release: 1.39.1d76fa98fix(django): Fix psycopg2 detection (#2593)64c42cafix(utils): Filter out empty string releases (#2591)4731312Fixed local var not present when error in users error_sampler function (#2511)4deaa38Fixed typing in aiohttp (#2590)507d409Merge branch 'release/1.39.0'c6cd636Update CHANGELOG.mdc3a60a6release: 1.39.07df152bChangecode.filepathframe picking logic (#2568)Updates
urllib3from 2.0.4 to 2.1.0Release notes
Sourced from urllib3's releases.
Changelog
Sourced from urllib3's changelog.
Commits
69be299Release 2.1.077f71d3Mention myself in READMEe601a0eCheck _has_route within the test function (#3187)f7cd7f3Stop naming urllib3/requests tests "integration" (#3182)6fc4260Use more precise type checks5fa8ea6Fix lint on Python 3.128727683Remove Sphinx version pin5fc48e7Treat x-gzip content encoding as gzipff764a0Allow loading CA certificates from memory for proxies (#3150)b99cc39Replace deprecated set-output in GitHub ActionsUpdates
werkzeugfrom 2.3.6 to 3.0.1Release notes
Sourced from werkzeug's releases.
Changelog
Sourced from werkzeug's changelog.
Commits
ce4eff5Release version 3.0.1b1916c0Fix: slow multipart parsing for huge files with few CR/LF characters726eaa2Release version 3.0.06427542Default the PathConverter (and descendants) to be non part isolating4820d8cProvide elapsed and timestamp info to filename_format599993dBump pypa/gh-action-pypi-publish from 1.8.8 to 1.8.10 (#2780)a2394edBump slsa-framework/slsa-github-generator from 1.7.0 to 1.9.0 (#2779)1efd6f3Bump actions/checkout from 3.5.3 to 3.6.0 (#2778)76a5419Bump pypa/gh-action-pypi-publish from 1.8.8 to 1.8.10ce8cfe7Bump slsa-framework/slsa-github-generator from 1.7.0 to 1.9.0Updates
zippfrom 3.16.2 to 3.17.0Changelog
Sourced from zipp's changelog.
Commits
5c59b56Merge https://github.com/jaraco/skeletonca1831cPreferpass_envin tox config. Preferred failure mode for tox-dev/tox#312...488dd04Finalizec230d98Add CompleteDirs.inject classmethod for use elsewherec331584In tests, always use alpharep fixture.92a8531Merge https://github.com/jaraco/skeleton928e9a8Add FORCE_COLOR to the TOX_OVERRIDE for GHA. Requires tox 4.11.1. Closes jara...a6256e2Add descriptions to the tox environments. Closes jaraco/skeleton#91.b02bf32Add diff-cover check to Github Actions CI. Closes jaraco/skeleton#90.0484daaClean up 'color' environment variables.Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions