Bump the dev-dependencies group in /client with 15 updates #1871

dependabot · 2024-02-26T22:31:31Z

Bumps the dev-dependencies group in /client with 15 updates:

Package	From	To
babel	`2.12.1`	`2.14.0`
diffoscope	`251`	`258`
flake8	`6.1.0`	`7.0.0`
mypy	`1.6.1`	`1.8.0`
pyotp	`2.8.0`	`2.9.0`
pytest	`7.4.3`	`8.0.2`
pytest-qt	`4.2.0`	`4.4.0`
pytest-random-order	`1.1.0`	`1.1.1`
pytest-xdist	`3.3.1`	`3.5.0`
semgrep	`1.48.0`	`1.62.0`
translate-toolkit	`3.10.1`	`3.12.2`
types-polib	`1.2.0.1`	`1.2.0.20240115`
types-python-dateutil	`2.8.19.14`	`2.8.19.20240106`
types-requests	`2.31.0.6`	`2.31.0.20240218`
types-setuptools	`68.2.0.0`	`69.1.0.20240223`

Updates babel from 2.12.1 to 2.14.0

Release notes

Sourced from babel's releases.

Version 2.14.0

Upcoming deprecation

This version, Babel 2.14, is the last version of Babel to support Python 3.7. Babel 2.15 will require Python 3.8 or newer. We had previously announced Babel 2.13 to have been the last version to support Python 3.7, but being able to use CLDR 43 with Python 3.7 was deemed important enough to keep supporting the EOL Python version for one more release.

Possibly backwards incompatible changes

Locale.number_symbols will now have first-level keys for each numbering system. Since the implicit default numbering system still is "latn", what had previously been e.g. Locale.number_symbols['decimal'] is now Locale.number_symbols['latn']['decimal'].

Babel no longer directly depends on either distutils or setuptools; if you had been using the Babel setuptools command extensions, you would need to explicitly depend on setuptools – though given you're running setup.py you probably already do.

The changelog below is auto-generated by GitHub.

Please see CHANGELOG.rst for additional details.

What's Changed

Upgrade to CLDR 43 by @rix0rrr in python-babel/babel#1043

Decouple pybabel frontend from distutils/setuptools; remove dependency by @akx in python-babel/babel#1041

Enforce trailing commas (enable Ruff COM rule and autofix) by @akx in python-babel/babel#1045

CI: use GitHub output formats by @akx in python-babel/babel#1046

Allow last_translator to be passed as an option to extract_message by @AivGitHub in python-babel/babel#1044

Add support of local numbering systems for number symbols by @kajte in python-babel/babel#1036

fix(numbers): correctly determine malformed decimals by @Olunusib in python-babel/babel#1042

Prepare for 2.14.0 release by @akx in python-babel/babel#1047

New Contributors

@rix0rrr made their first contribution in python-babel/babel#1043

@AivGitHub made their first contribution in python-babel/babel#1044

@kajte made their first contribution in python-babel/babel#1036

@Olunusib made their first contribution in python-babel/babel#1042

Full Changelog: python-babel/babel@v2.13.1...v2.14.0

Version 2.13.1

What's Changed

Depend on setuptools since Python 3.12 by @oprypin in python-babel/babel#1033

Fix _locales_to_names (Fix for #1037) by @DI84 in python-babel/babel#1038

New Contributors

@oprypin made their first contribution in python-babel/babel#1033

@DI84 made their first contribution in python-babel/babel#1038

Full Changelog: python-babel/babel@v2.13.0...v2.13.1

PyPI: https://pypi.org/project/Babel/2.13.1/

v2.13.0

PyPI: https://pypi.org/project/Babel/2.13.0/

... (truncated)

Changelog

Sourced from babel's changelog.

Version 2.14.0

Upcoming deprecation
* This version, Babel 2.14, is the last version of Babel to support Python 3.7.
  Babel 2.15 will require Python 3.8 or newer.
* We had previously announced Babel 2.13 to have been the last version to support
  Python 3.7, but being able to use CLDR 43 with Python 3.7 was deemed important
  enough to keep supporting the EOL Python version for one more release.
Possibly backwards incompatible changes
Locale.number_symbols will now have first-level keys for each numbering system. Since the implicit default numbering system still is "latn", what had previously been e.g. Locale.number_symbols['decimal'] is now Locale.number_symbols['latn']['decimal'].

Babel no longer directly depends on either distutils or setuptools; if you had been using the Babel setuptools command extensions, you would need to explicitly depend on setuptools – though given you're running setup.py you probably already do.

Features
* CLDR/Numbers: Add support of local numbering systems for number symbols by @kajte in :gh:`1036`
* CLDR: Upgrade to CLDR 43 by @rix0rrr in :gh:`1043`
* Frontend: Allow last_translator to be passed as an option to extract_message by @AivGitHub in :gh:`1044`
* Frontend: Decouple `pybabel` CLI frontend from distutils/setuptools by @akx in :gh:`1041`
* Numbers: Improve parsing of malformed decimals by @Olunusib and @akx in :gh:`1042`
Infrastructure
Enforce trailing commas (enable Ruff COM rule and autofix) by @akx in :gh:1045

CI: use GitHub output formats by @akx in :gh:1046

Version 2.13.1

This is a patch release to fix a few bugs.

Fixes
* Fix a typo in ``_locales_to_names`` by @Dl84 in :gh:`1038` (issue :gh:`1037`)
* Fix ``setuptools`` dependency for Python 3.12 by @opryprin in :gh:`1033`
Version 2.13.0
</tr></table>

... (truncated)

Commits

a8505a4 Prepare for 2.14.0 release (#1047)
946efcd Improve parsing of malformed decimals (#1042)
aca7663 Add support for non-Latin numbering systems for number symbols (#1036)
d4e65e2 Allow last_translator to be passed as an option to extract_message (#1044)
5dff607 CI: use GitHub output formats (#1046)
8a1eef5 Enforce trailing commas (enable Ruff COM rule and autofix) (#1045)
bf7b2ca Decouple pybabel frontend from distutils/setuptools; remove dependency (#1041)
a6c52b3 Bump CLDR download script to 43 (#1043)
65de3dc Prepare for 2.13.1 release
139dc11 Fix _locales_to_names: Call str() on the parameter variable instead of the mo...
Additional commits viewable in compare view

Updates diffoscope from 251 to 258

Updates flake8 from 6.1.0 to 7.0.0

Commits

88a4f9b Release 7.0.0
6f3a60d Merge pull request #1906 from PyCQA/upgrade-pyflakes
cde8570 upgrade pyflakes to 3.2.x
2ab9d76 Merge pull request #1903 from PyCQA/pre-commit-ci-update-config
e27611f [pre-commit.ci] pre-commit autoupdate
9d20be1 Merge pull request #1902 from PyCQA/pre-commit-ci-update-config
06c1503 [pre-commit.ci] auto fixes from pre-commit.com hooks
b67ce03 Fix bugbear lints
c8801c1 [pre-commit.ci] pre-commit autoupdate
045f297 Merge pull request #1893 from PyCQA/pre-commit-ci-update-config
Additional commits viewable in compare view

Updates mypy from 1.6.1 to 1.8.0

Changelog

Sourced from mypy's changelog.

Mypy Release Notes

Next release

Stubtest will ignore private function/method parameters when they are missing from the stub. Private parameters names start with a single underscore and have a default (PR 16507).

Mypy 1.8

We’ve just uploaded mypy 1.8 to the Python Package Index (PyPI). Mypy is a static type checker for Python. This release includes new features, performance improvements and bug fixes. You can install it as follows:
python3 -m pip install -U mypy
You can read the full documentation for this release on Read the Docs.

Type-checking Improvements

Do not intersect types in isinstance checks if at least one is final (Christoph Tyralla, PR 16330)

Detect that @final class without __bool__ cannot have falsey instances (Ilya Priven, PR 16566)

Do not allow TypedDict classes with extra keywords (Nikita Sobolev, PR 16438)

Do not allow class-level keywords for NamedTuple (Nikita Sobolev, PR 16526)

Make imprecise constraints handling more robust (Ivan Levkivskyi, PR 16502)

Fix strict-optional in extending generic TypedDict (Ivan Levkivskyi, PR 16398)

Allow type ignores of PEP 695 constructs (Shantanu, PR 16608)

Enable type_check_only support for TypedDict and NamedTuple (Nikita Sobolev, PR 16469)

Performance Improvements

Add fast path to analyzing special form assignments (Jukka Lehtosalo, PR 16561)

Improvements to Error Reporting

Don't show documentation links for plugin error codes (Ivan Levkivskyi, PR 16383)

Improve error messages for super checks and add more tests (Nikita Sobolev, PR 16393)

Add error code for mutable covariant override (Ivan Levkivskyi, PR 16399)

Stubgen Improvements

Preserve simple defaults in function signatures (Ali Hamdan, PR 15355)

Include __all__ in output (Jelle Zijlstra, PR 16356)

Fix stubgen regressions with pybind11 and mypy 1.7 (Chad Dombrova, PR 16504)

Stubtest Improvements

Improve handling of unrepresentable defaults (Jelle Zijlstra, PR 16433)

Print more helpful errors if a function is missing from stub (Alex Waygood, PR 16517)

Support @type_check_only decorator (Nikita Sobolev, PR 16422)

Warn about missing __del__ (Shantanu, PR 16456)

Fix crashes with some uses of final and deprecated (Shantanu, PR 16457)

Fixes to Crashes

Fix crash with type alias to Callable[[Unpack[Tuple[Any, ...]]], Any] (Alex Waygood, PR 16541)

Fix crash on TypeGuard in __call__ (Ivan Levkivskyi, PR 16516)

Fix crash on invalid enum in method (Ivan Levkivskyi, PR 16511)

Fix crash on unimported Any in TypedDict (Ivan Levkivskyi, PR 16510)

... (truncated)

Commits

3b46750 remove +dev suffix from version
c9bc833 Fix tests broken by hatchling (#16655)
60d30e3 Fix crash with type alias to Callable[[Unpack[Tuple[Any, ...]]], Any] (#16541)
f53f422 Allow type ignores of PEP 695 constructs (#16608)
7c33e7c @final class without bool cannot have falsey instances (#16566)
c224da5 Do not intersect types in isinstance checks if at least one is final (#16330)
d54cc35 Change example in test cases with no stubs available (#16513)
eb1ee97 Update hashes in sync-typeshed.py following recent typeshed sync (#16600)
344298e Revert use of ParamSpec for functools.wraps
3e5d813 Revert typeshed ctypes change
Additional commits viewable in compare view

Updates pyotp from 2.8.0 to 2.9.0

Release notes

Sourced from pyotp's releases.

v2.9.0

Add parse_uri() support for Steam TOTP (#153)

Test and documentation improvements

Changelog

Sourced from pyotp's changelog.

Changes for v2.9.0 (2023-07-27)

Add parse_uri() support for Steam TOTP (#153)

Test and documentation improvements

Commits

c119693 v2.9.0
6c42125 Add parse_uri() support for Steam TOTP (#153)
55f69ba Use sphinxext-opengraph
04af2b6 Use furo sphinx doc theme
ce52636 Use ruff
1aea757 Add note about Steam TOTP; format readme to not exceed 120 chars
08ab3f9 Use standalone jobs for black and isort actions
f0ecc2f Add security policy
daf2557 Use gh to manage releases
3636d58 Add semver versioning note
See full diff in compare view

Updates pytest from 7.4.3 to 8.0.2

Release notes

Sourced from pytest's releases.

8.0.2

pytest 8.0.2 (2024-02-24)

Bug Fixes

#11895: Fix collection on Windows where initial paths contain the short version of a path (for example c:\PROGRA~1\tests).

#11953: Fix an IndexError crash raising from getstatementrange_ast.

#12021: Reverted a fix to [--maxfail]{.title-ref} handling in pytest 8.0.0 because it caused a regression in pytest-xdist whereby session fixture teardowns may get executed multiple times when the max-fails is reached.

8.0.1

pytest 8.0.1 (2024-02-16)

Bug Fixes

#11875: Correctly handle errors from getpass.getuser{.interpreted-text role="func"} in Python 3.13.

#11879: Fix an edge case where ExceptionInfo._stringify_exception could crash pytest.raises{.interpreted-text role="func"}.

#11906: Fix regression with pytest.warns{.interpreted-text role="func"} using custom warning subclasses which have more than one parameter in their [__init__]{.title-ref}.

#11907: Fix a regression in pytest 8.0.0 whereby calling pytest.skip{.interpreted-text role="func"} and similar control-flow exceptions within a pytest.warns(){.interpreted-text role="func"} block would get suppressed instead of propagating.

#11929: Fix a regression in pytest 8.0.0 whereby autouse fixtures defined in a module get ignored by the doctests in the module.

#11937: Fix a regression in pytest 8.0.0 whereby items would be collected in reverse order in some circumstances.

pytest 8.0.0 (2024-01-27)

See 8.0.0rc1 and 8.0.0rc2 for the full changes since pytest 7.4!

Bug Fixes

#11842: Properly escape the reason of a skip <pytest.mark.skip ref>{.interpreted-text role="ref"} mark when writing JUnit XML files.

#11861: Avoid microsecond exceeds 1_000_000 when using log-date-format with %f specifier, which might cause the test suite to crash.

8.0.0rc2

pytest 8.0.0rc2 (2024-01-17)

Improvements

#11233: Improvements to -r for xfailures and xpasses:

Report tracebacks for xfailures when -rx is set.

Report captured output for xpasses when -rX is set.

For xpasses, add - in summary between test name and reason, to match how xfail is displayed.

#11825: The pytest_plugin_registered{.interpreted-text role="hook"} hook has a new plugin_name parameter containing the name by which plugin is registered.

Bug Fixes

#11706: Fix reporting of teardown errors in higher-scoped fixtures when using [--maxfail]{.title-ref} or [--stepwise]{.title-ref}.

... (truncated)

Commits

31afeeb Prepare release version 8.0.2
1b00a2f Merge pull request #12025 from pytest-dev/backport-12022-to-8.0.x
ff2f66d [8.0.x] Revert "Fix teardown error reporting when --maxfail=1 (#11721)"
8a8eed6 [8.0.x] Fix collection of short paths on Windows (#12024)
74346f0 [8.0.x] Allow Sphinx 7.x (#12005)
b7657b4 [8.0.x] Disallow Sphinx 6 and 7 (#12001)
feb7c5e Merge pull request #11999 from pytest-dev/backport-11996-to-8.0.x
0909655 [8.0.x] code: fix IndexError crash in getstatementrange_ast
68524d4 Merge pull request #11993 from pytest-dev/release-8.0.1
d7d320a Prepare release version 8.0.1
Additional commits viewable in compare view

Updates pytest-qt from 4.2.0 to 4.4.0

Changelog

Sourced from pytest-qt's changelog.

4.4.0 (2024-02-07)

pluggy >=1.1 is now required: we now use new-style hook wrappers, which are less error prone.

Fixed exception handling so they are properly cleared in Python 3.12, due to the new sys.last_exc <https://docs.python.org/3/library/sys.html#sys.last_exc>__ attribute ([#532](https://github.com/pytest-dev/pytest-qt/issues/532)_).

.. _#532: pytest-dev/pytest-qt#532

4.3.1 (2023-12-22)

Added official support for Python 3.12.

Python 3.7 is no longer supported.

qapp now sets up the QApplication instance with a command line argument like this QApplication([prog_name]) instead of using an empty list QApplication([]). Here prog_name is the name of the app which defaults to pytest-qt-app, but can be redefined in the pytest.ini file, see :ref:qapp fixture<setting-qapp-name>. Alternatively, the arguments that will be passed to QApplication can be defined explicitly using the qapp_args fixture. This means that the default behavior of the qapp_args fixture is now also changed accordingly: it now returns the list [prog_name] instead of an empty list. Thanks to @The-Compiler_ ([#483](https://github.com/pytest-dev/pytest-qt/issues/483)) and @hakonhagland ([#515](https://github.com/pytest-dev/pytest-qt/issues/515)_).

.. _#515: pytest-dev/pytest-qt#515 .. _#483: pytest-dev/pytest-qt#483

4.3.0 (2023-12-22)

Failure during publish.

Commits

172e779 Release 4.4.0
bd3469b Use new-style hook wrappers (#542)
4d099f5 Add me to FUNDING.yml (#540)
60bc6c0 [pre-commit.ci] pre-commit autoupdate (#538)
c1c9e9a [pre-commit.ci] pre-commit autoupdate (#537)
ed5668a Fix test_exceptions_dont_leak in Python 3.12 (#535)
36a436d [pre-commit.ci] pre-commit autoupdate (#536)
0b22ccb Merge pull request #534 from nicoddemus/release-4.3.0
9a9804d Fix GitHub Release publishing
063ada2 Use an environment for deploy
Additional commits viewable in compare view

Updates pytest-random-order from 1.1.0 to 1.1.1

Release notes

Sourced from pytest-random-order's releases.

v1.1.1

Fix error when cacheprovider plugin disabled or missing. Thanks @jhanm12 for reporting and suggesting the fix.

Commits

763f0f9 Fix error when cacheprovider plugin disabled or missing (#56)
See full diff in compare view

Updates pytest-xdist from 3.3.1 to 3.5.0

Changelog

Sourced from pytest-xdist's changelog.

pytest-xdist 3.5.0 (2023-11-21)

Features

[#632](https://github.com/pytest-dev/pytest-xdist/issues/632) <https://github.com/pytest-dev/pytest-xdist/issues/632>_: --dist=loadscope now sorts scopes by number of tests to assign largest scopes early -- in many cases this should improve overall test session running time, as there is less chance of a large scope being left to be processed near the end of the session, leaving other workers idle.

pytest-xdist 3.4.0 (2023-11-11)

Features

[#963](https://github.com/pytest-dev/pytest-xdist/issues/963) <https://github.com/pytest-dev/pytest-xdist/issues/963>_: Wait for workers to finish reporting when test run stops early.

This makes sure that the results of in-progress tests are displayed. Previously these reports were being discarded, losing information about the test run.

[#965](https://github.com/pytest-dev/pytest-xdist/issues/965) <https://github.com/pytest-dev/pytest-xdist/issues/965>_: Added support for Python 3.12.

Commits

95b309e Release 3.5.0
3fe877b LoadScope scheduler: Sort scopes by number of tests to assign biggest scopes ...
f36ea25 Create GitHub release after deploy (#973)
d81f575 Merge pull request #969 from pytest-dev/pre-commit-ci-update-config
1d26164 [pre-commit.ci] pre-commit autoupdate
5f43575 Merge pull request #966 from pytest-dev/release-3.4.0
a6b5611 Update CHANGELOG
64f9388 Add support for Python 3.12
230ba6a Properly wait for workers when test run terminates early (#963)
93ca202 fix typo index -> instead
Additional commits viewable in compare view

Updates semgrep from 1.48.0 to 1.62.0

Release notes

Sourced from semgrep's releases.

Release v1.62.0

1.62.0 - 2024-02-22

Added

Pro: Adds support for python constructors to taint analysis.

If interfile naming resolves that a python constructor is called taint will now track these objects with less heuristics. Without interfile analysis these changes have no effect on the behavior of tainting. The overall result is that in the following program the oss analysis would match both calls to sink while the interfile analysis would only match the second call to sink.

class A:
    untainted = "not"
    tainted = "not"
    def __init__(self, x):
    	self.tainted = x
a = A("tainted")
OK:
sink(a.untainted)
MATCH:
sink(a.tainted)
</code></pre>
</li>
<li>
<p>Pro: taint-mode: Added basic support for &quot;index sensitivity&quot;, that is,
Semgrep will track taint on individual indexes of a data structure when
these are constant values (integers or strings), and the code uses the
built-in syntax for array indexing in the corresponding language
(typically <code>E[i]</code>). For example, in the Python code below Semgrep Pro
will <em>not</em> report a finding on <code>sink(x)</code> or <code>sink(x[1])</code> because it will
know that only <code>x[42]</code> is tainted:</p>
<pre lang="python"><code>x[1] = safe
x[42] = source()
sink(x) // no more finding
sink(x[1]) // no more finding
sink(x[42]) // finding
sink(x[i]) // finding
</code></pre>
<p>There is still a finding for <code>sink(x[i])</code> when <code>i</code> is not constant. (flow-7)</p>
</li>
</ul>
<h3>Changed</h3>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/semgrep/semgrep/blob/develop/CHANGELOG.md&quot;&gt;semgrep's changelog</a>.</em></p>

<blockquote>

<h2><a href="https://github.com/returntocorp/semgrep/releases/tag/v1.62.0&quot;&gt;1.62.0&lt;/a> - 2024-02-22</h2>

<h3>Added</h3>

<ul>

<li>

<p>Pro: Adds support for python constructors to taint analysis.</p>

<p>If interfile naming resolves that a python constructor is called taint

will now track these objects with less heuristics. Without interfile

analysis these changes have no effect on the behavior of tainting.

The overall result is that in the following program the oss analysis

would match both calls to sink while the interfile analysis would only

match the second call to sink.</p>

<pre><code>class A:

untainted = &quot;not&quot;

tainted = &quot;not&quot;

def init(self, x):

self.tainted = x
a = A(&quot;tainted&quot;)
OK:
sink(a.untainted)
MATCH:
sink(a.tainted)
&lt;/code&gt;&lt;/pre&gt;
&lt;/li&gt;
&lt;li&gt;
&lt;p&gt;Pro: taint-mode: Added basic support for &amp;quot;index sensitivity&amp;quot;, that is,
Semgrep will track taint on individual indexes of a data structure when
these are constant values (integers or strings), and the code uses the
built-in syntax for array indexing in the corresponding language
(typically &lt;code&gt;E[i]&lt;/code&gt;). For example, in the Python code below Semgrep Pro
will &lt;em&gt;not&lt;/em&gt; report a finding on &lt;code&gt;sink(x)&lt;/code&gt; or &lt;code&gt;sink(x[1])&lt;/code&gt; because it will
know that only &lt;code&gt;x[42]&lt;/code&gt; is tainted:&lt;/p&gt;
&lt;pre lang=&quot;python&quot;&gt;&lt;code&gt;x[1] = safe
x[42] = source()
sink(x) // no more finding
sink(x[1]) // no more finding
sink(x[42]) // finding
sink(x[i]) // finding
&lt;/code&gt;&lt;/pre&gt;
&lt;p&gt;There is still a finding for &lt;code&gt;sink(x[i])&lt;/code&gt; when &lt;code&gt;i&lt;/code&gt; is not constant. (flow-7)&lt;/p&gt;
&lt;/li&gt;
&lt;/ul&gt;
&lt;h3&gt;Changed&lt;/h3&gt;
&lt;!-- raw HTML omitted --&gt;
&lt;/blockquote&gt;
&lt;p&gt;... (truncated)&lt;/p&gt;
&lt;/details&gt;
&lt;details&gt;
&lt;summary&gt;Commits&lt;/summary&gt;

&lt;ul&gt;
&lt;li&gt;&lt;a href=&quot;https://github.com/semgrep/semgrep/commit/d50609f50e350defae20f2f3d010341c5f4c6f1a&quot;&gt;&lt;code&gt;d50609f&lt;/code&gt;&lt;/a&gt; chore: Bump version to 1.62.0&lt;/li&gt;
&lt;li&gt;&lt;a href=&quot;https://github.com/semgrep/semgrep/commit/0fc51a30ae0b4ea870ed544822b5c2e4d65a7d23&quot;&gt;&lt;code&gt;0fc51a3&lt;/code&gt;&lt;/a&gt; fix: Handle &lt;code&gt;ModuleNotFoundErrror&lt;/code&gt; (&lt;a href=&quot;https://redirect.github.com/returntocorp/semgrep/issues/9822&quot;&gt;#9822&lt;/a&gt;)&lt;/li&gt;
&lt;li&gt;&lt;a href=&quot;https://github.com/semgrep/semgrep/commit/0aef3b504de1512b2794a5c897d5bef17bd6fb3a&quot;&gt;&lt;code&gt;0aef3b5&lt;/code&gt;&lt;/a&gt; chore: Set timeout for semgrep-comparison argo job (10min) (&lt;a href=&quot;https://redirect.github.com/returntocorp/semgrep/issues/9820&quot;&gt;#9820&lt;/a&gt;)&lt;/li&gt;
&lt;li&gt;&lt;a href=&quot;https://github.com/semgrep/semgrep/commit/1bfa7157c8fb06e27a1f43fd001733dbe1ff1f3a&quot;&gt;&lt;code&gt;1bfa715&lt;/code&gt;&lt;/a&gt; fix: Apply autofixes in reverse to avoid error-prone bookkeeping (&lt;a href=&quot;https://redirect.github.com/returntocorp/semgrep/issues/9819&quot;&gt;#9819&lt;/a&gt;)&lt;/li&gt;
&lt;li&gt;&lt;a href=&quot;https://github.com/semgrep/semgrep/commit/307eaa6961f8ef2675b80d34e0c8ce6535447200&quot;&gt;&lt;code&gt;307eaa6&lt;/code&gt;&lt;/a&gt; feat(cli output): Put the repo in the findings link (&lt;a href=&quot;https://redirect.github.com/returntocorp/semgrep/issues/9786&quot;&gt;#9786&lt;/a&gt;)&lt;/li&gt;
&lt;li&gt;&lt;a href=&quot;https://github.com/semgrep/semgrep/commit/cdafbb1bc5fb6cb92038acc93e20d13575327f53&quot;&gt;&lt;code&gt;cdafbb1&lt;/code&gt;&lt;/a&gt; Revert &amp;quot;refactor(rules): decouple conditions from &lt;code&gt;And&lt;/code&gt;s&amp;quot; (&lt;a href=&quot;https://redirect.github.com/returntocorp/semgrep/issues/9818&quot;&gt;#9818&lt;/a&gt;)&lt;/li&gt;
&lt;li&gt;&lt;a href=&quot;https://github.com/semgrep/semgrep/commit/d5b2eae0df316bc80de7024397b94e57399b7e2e&quot;&gt;&lt;code&gt;d5b2eae&lt;/code&gt;&lt;/a&gt; OCaml: add type arguments parenthesis in AST for autofix (&lt;a href=&quot;https://redirect.github.com/returntocorp/semgrep/issues/9817&quot;&gt;#9817&lt;/a&gt;)&lt;/li&gt;
&lt;li&gt;&lt;a href=&quot;https://github.com/semgrep/semgrep/commit/5f1ec012862443a7d1f2a9d0f2c936405604eb80&quot;&gt;&lt;code&gt;5f1ec01&lt;/code&gt;&lt;/a&gt; Addd bracket for type parameters in AST_generic (&lt;a href=&quot;https://redirect.github.com/returntocorp/semgrep/issues/9816&quot;&gt;#9816&lt;/a&gt;)&lt;/li&gt;
&lt;li&gt;&lt;a href=&quot;https://github.com/semgrep/semgrep/commit/e4fae8a880badee473732c101912d1493b0ede86&quot;&gt;&lt;code&gt;e4fae8a&lt;/code&gt;&lt;/a&gt; Match C++'s thread local storage specifier (&lt;a href=&quot;https://redirect.github.com/returntocorp/semgrep/issues/9804&quot;&gt;#9804&lt;/a&gt;)&lt;/li&gt;
&lt;li&gt;&lt;a href=&quot;https://github.com/semgrep/semgrep/commit/5deffcad457fe2221aa8b57bc2280787af7e9aa2&quot;&gt;&lt;code&gt;5deffca&lt;/code&gt;&lt;/a&gt; OCaml: add parenthesis in AST_ocaml.ml for type parameters (&lt;a href=&quot;https://redirect.github.com/returntocorp/semgrep/issues/9812&quot;&gt;#9812&lt;/a&gt;)&lt;/li&gt;
&lt;li&gt;Additional commits viewable in &lt;a href=&quot;https://github.com/returntocorp/semgrep/compare/v1.48.0...v1.62.0&quot;&gt;compare view&lt;/a&gt;&lt;/li&gt;
&lt;/ul&gt;
&lt;/details&gt;

&lt;br /&gt;
</code></pre>

Updates `translate-toolkit` from 3.10.1 to 3.12.2
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/translate/translate/releases">translate-toolkit's releases</a>.</em></p>
<blockquote>
<h2>3.12.2</h2>
<p>The major changes in this release are:</p>
<ul>
<li>Several improvements to the JSON formats</li>
<li>Added support for FormatJS</li>
<li>Improved error and whitespace handling in XLIFF, TS2, CSV and Android</li>
</ul>
<p>Read the full <a href="https://docs.translatehouse.org/projects/translate-toolkit/en/latest/releases/3.12.2.html">Release notes</a> for more details.</p>
<h2>3.12.1</h2>
<p>The major changes in this release are:</p>
<ul>
<li>Fixed parsing of some Android translation files</li>
</ul>
<p>Read the full <a href="https://docs.translatehouse.org/projects/translate-toolkit/en/latest/releases/3.12.1.html">Release notes</a> for more details.</p>
<h2>3.12.0</h2>
<p>The major changes in this release are:</p>
<ul>
<li>Improved Android format compatibility with plurals and CDATA</li>
<li>Added support for MOKO resources</li>
<li>Gettext PO honors line wrapping configuration when adding unit</li>
<li>Use correct plurals matching Qt implementation</li>
<li>Properties notes behave consistently with other formats</li>
<li>RESX/RESW use Windows newlines instead of UNIX ones</li>
<li>INI does not treat lines starting with rem as comments</li>
<li>Improved JSON round-trip</li>
</ul>
<p>Read the full <a href="https://docs.translatehouse.org/projects/translate-toolkit/en/latest/releases/3.12.0.html">Release notes</a> for more details.</p>
<h2>3.11.1</h2>
<p>The major changes in this release are:</p>
<ul>
<li>Updated language definitions to CLDR 44</li>
</ul>
<p>Read the full <a href="https://docs.translatehouse.org/projects/translate-toolkit/en/latest/releases/3.11.1.html">Release notes</a> for more details.</p>
<h2>3.11.0</h2>
<p>The major changes in this release are:</p>
<ul>
<li>Improved Android format compatibility</li>
<li>Improved JSON round-trip</li>
<li>Add support for relative locations in TS2</li>
<li>Python 3.12 is now supported</li>
<li>Tests are no longer distributed in the module</li>
<li>Switched to ruff for linting and formatting</li>
</ul>
<p>Read the full <a href="https://docs.translatehouse.org/projects/translate-toolkit/en/latest/releases/3.11.0.html">Release notes</a> for more details.</p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/translate/translate/commit/6666f806a654f5751f1420a1c3e478b380e0d03a"><code>6666f80</code></a> Version bump to 3.12.2</li>
<li><a href="https://github.com/translate/translate/commit/980f64bb7ccdb323acabf666ee19990f1c639b4b"><code>980f64b</code></a> build(deps): bump codecov/codecov-action from 3 to 4</li>
<li><a href="https://github.com/translate/translate/commit/53851f1a80b197684ac0ffdd19c693d92502de03"><code>53851f1</code></a> json: improved error messages on invalid data</li>
<li><a href="https://github.com/translate/translate/commit/1ff9d3e2dcc1e3e12d328f8630ef8d863b4424fd"><code>1ff9d3e</code></a> build(deps): bump mistletoe from 1.2.1 to 1.3.0</li>
<li><a href="https://github.com/translate/translate/commit/39159366d5f3fe5facd190a35a327458a02431bc"><code>3915936</code></a> [pre-commit.ci] pre-commit autoupdate</li>
<li><a href="https://github.com/translate/translate/commit/792d3a3cdf3e34c50b39a60a2b281dc37155eba6"><code>792d3a3</code></a> xliff: preserve whitespace for rich target as well</li>
<li><a href="https://github.com/translate/translate/commit/74bf15027766eddb9fa6e7b7fd0c029fab5b4afe"><code>74bf150</code></a> xliff: improve indentation</li>
<li><a href="https://github.com/translate/translate/commit/570bd5a4b1862561e2236a08522f0ed08b6020e7"><code>570bd5a</code></a> xliff: test xml:space handling</li>
<li><a href="https://github.com/translate/translate/commit/965c7a6ebc20dc8a44ff37f4b8e6a314eb7e22ac"><code>965c7a6</code></a> subtitles: drop gaupol module support</li>
<li><a href="https://github.com/translate/translate/commit/e23b59bc892e0c8e8083995560d7cfcf3a279f36"><code>e23b59b</code></a> chore: use compiled regex</li>
<li>Additional commits viewable in <a href="https://github.com/translate/translate/compare/3.10.1...3.12.2">compare view</a></li>
</ul>
</details>
<br />

Updates `types-polib` from 1.2.0.1 to 1.2.0.20240115
<details>
<summary>Commits</summary>
<ul>
<li>See full diff in <a href="https://github.com/python/typeshed/commits">compare view</a></li>
</ul>
</details>
<br />

Updates `types-python-dateutil` from 2.8.19.14 to 2.8.19.20240106
<details>
<summary>Commits</summary>
<ul>
<li>See full diff in <a href="https://github.com/python/typeshed/commits">compare view</a></li>
</ul>
</details>
<br />

Updates `types-requests` from 2.31.0.6 to 2.31.0.20240218
<details>
<summary>Commits</summary>
<ul>
<li>See full diff in <a href="https://github.com/python/typeshed/commits">compare view</a></li>
</ul>
</details>
<br />

Updates `types-setuptools` from 68.2.0.0 to 69.1.0.20240223
<details>
<summary>Commits</summary>
<ul>
<li>See full diff in <a href="https://github.com/python/typeshed/commits">compare view</a></li>
</ul>
</details>
<br />


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions


</details>

Bumps the dev-dependencies group in /client with 15 updates: | Package | From | To | | --- | --- | --- | | [babel](https://github.com/python-babel/babel) | `2.12.1` | `2.14.0` | | [diffoscope](https://diffoscope.org/) | `251` | `258` | | [flake8](https://github.com/pycqa/flake8) | `6.1.0` | `7.0.0` | | [mypy](https://github.com/python/mypy) | `1.6.1` | `1.8.0` | | [pyotp](https://github.com/pyotp/pyotp) | `2.8.0` | `2.9.0` | | [pytest](https://github.com/pytest-dev/pytest) | `7.4.3` | `8.0.2` | | [pytest-qt](https://github.com/pytest-dev/pytest-qt) | `4.2.0` | `4.4.0` | | [pytest-random-order](https://github.com/jbasko/pytest-random-order) | `1.1.0` | `1.1.1` | | [pytest-xdist](https://github.com/pytest-dev/pytest-xdist) | `3.3.1` | `3.5.0` | | [semgrep](https://github.com/returntocorp/semgrep) | `1.48.0` | `1.62.0` | | [translate-toolkit](https://github.com/translate/translate) | `3.10.1` | `3.12.2` | | [types-polib](https://github.com/python/typeshed) | `1.2.0.1` | `1.2.0.20240115` | | [types-python-dateutil](https://github.com/python/typeshed) | `2.8.19.14` | `2.8.19.20240106` | | [types-requests](https://github.com/python/typeshed) | `2.31.0.6` | `2.31.0.20240218` | | [types-setuptools](https://github.com/python/typeshed) | `68.2.0.0` | `69.1.0.20240223` | Updates `babel` from 2.12.1 to 2.14.0 - [Release notes](https://github.com/python-babel/babel/releases) - [Changelog](https://github.com/python-babel/babel/blob/master/CHANGES.rst) - [Commits](python-babel/babel@v2.12.1...v2.14.0) Updates `diffoscope` from 251 to 258 Updates `flake8` from 6.1.0 to 7.0.0 - [Commits](PyCQA/flake8@6.1.0...7.0.0) Updates `mypy` from 1.6.1 to 1.8.0 - [Changelog](https://github.com/python/mypy/blob/master/CHANGELOG.md) - [Commits](python/mypy@v1.6.1...v1.8.0) Updates `pyotp` from 2.8.0 to 2.9.0 - [Release notes](https://github.com/pyotp/pyotp/releases) - [Changelog](https://github.com/pyauth/pyotp/blob/develop/Changes.rst) - [Commits](pyauth/pyotp@v2.8.0...v2.9.0) Updates `pytest` from 7.4.3 to 8.0.2 - [Release notes](https://github.com/pytest-dev/pytest/releases) - [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst) - [Commits](pytest-dev/pytest@7.4.3...8.0.2) Updates `pytest-qt` from 4.2.0 to 4.4.0 - [Release notes](https://github.com/pytest-dev/pytest-qt/releases) - [Changelog](https://github.com/pytest-dev/pytest-qt/blob/master/CHANGELOG.rst) - [Commits](pytest-dev/pytest-qt@4.2.0...4.4.0) Updates `pytest-random-order` from 1.1.0 to 1.1.1 - [Release notes](https://github.com/jbasko/pytest-random-order/releases) - [Commits](pytest-dev/pytest-random-order@v1.1.0...v1.1.1) Updates `pytest-xdist` from 3.3.1 to 3.5.0 - [Release notes](https://github.com/pytest-dev/pytest-xdist/releases) - [Changelog](https://github.com/pytest-dev/pytest-xdist/blob/master/CHANGELOG.rst) - [Commits](pytest-dev/pytest-xdist@v3.3.1...v3.5.0) Updates `semgrep` from 1.48.0 to 1.62.0 - [Release notes](https://github.com/returntocorp/semgrep/releases) - [Changelog](https://github.com/semgrep/semgrep/blob/develop/CHANGELOG.md) - [Commits](semgrep/semgrep@v1.48.0...v1.62.0) Updates `translate-toolkit` from 3.10.1 to 3.12.2 - [Release notes](https://github.com/translate/translate/releases) - [Changelog](https://github.com/translate/translate/blob/master/docs/history.rst) - [Commits](translate/translate@3.10.1...3.12.2) Updates `types-polib` from 1.2.0.1 to 1.2.0.20240115 - [Commits](https://github.com/python/typeshed/commits) Updates `types-python-dateutil` from 2.8.19.14 to 2.8.19.20240106 - [Commits](https://github.com/python/typeshed/commits) Updates `types-requests` from 2.31.0.6 to 2.31.0.20240218 - [Commits](https://github.com/python/typeshed/commits) Updates `types-setuptools` from 68.2.0.0 to 69.1.0.20240223 - [Commits](https://github.com/python/typeshed/commits) --- updated-dependencies: - dependency-name: babel dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dev-dependencies - dependency-name: diffoscope dependency-type: direct:development update-type: version-update:semver-major dependency-group: dev-dependencies - dependency-name: flake8 dependency-type: direct:development update-type: version-update:semver-major dependency-group: dev-dependencies - dependency-name: mypy dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dev-dependencies - dependency-name: pyotp dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dev-dependencies - dependency-name: pytest dependency-type: direct:development update-type: version-update:semver-major dependency-group: dev-dependencies - dependency-name: pytest-qt dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dev-dependencies - dependency-name: pytest-random-order dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-dependencies - dependency-name: pytest-xdist dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dev-dependencies - dependency-name: semgrep dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dev-dependencies - dependency-name: translate-toolkit dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dev-dependencies - dependency-name: types-polib dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-dependencies - dependency-name: types-python-dateutil dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-dependencies - dependency-name: types-requests dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-dependencies - dependency-name: types-setuptools dependency-type: direct:development update-type: version-update:semver-major dependency-group: dev-dependencies ... Signed-off-by: dependabot[bot] <[email protected]>

dependabot · 2024-03-04T19:04:31Z

Superseded by #1886.

dependabot bot requested a review from a team as a code owner February 26, 2024 22:31

dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Feb 26, 2024

dependabot bot mentioned this pull request Feb 26, 2024

Bump the dev-dependencies group in /client with 15 updates #1863

Closed

dependabot bot closed this Mar 4, 2024

dependabot bot deleted the dependabot/pip/client/dev-dependencies-2a873e4c86 branch March 4, 2024 19:04

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump the dev-dependencies group in /client with 15 updates #1871

Bump the dev-dependencies group in /client with 15 updates #1871

dependabot bot commented on behalf of github Feb 26, 2024 •

edited

Loading

Version 2.13.0

OK:

MATCH:

OK:

MATCH:

dependabot bot commented on behalf of github Mar 4, 2024

Bump the dev-dependencies group in /client with 15 updates #1871

Bump the dev-dependencies group in /client with 15 updates #1871

Conversation

dependabot bot commented on behalf of github Feb 26, 2024 • edited Loading

Version 2.14.0

Upcoming deprecation

Possibly backwards incompatible changes

What's Changed

New Contributors

Version 2.13.1

What's Changed

New Contributors

v2.13.0

Version 2.14.0

Version 2.13.1

Version 2.13.0

Mypy Release Notes

Next release

Mypy 1.8

Type-checking Improvements

Performance Improvements

Improvements to Error Reporting

Stubgen Improvements

Stubtest Improvements

Fixes to Crashes

v2.9.0

Changes for v2.9.0 (2023-07-27)

8.0.2

pytest 8.0.2 (2024-02-24)

Bug Fixes

8.0.1

pytest 8.0.1 (2024-02-16)

Bug Fixes

pytest 8.0.0 (2024-01-27)

Bug Fixes

8.0.0rc2

pytest 8.0.0rc2 (2024-01-17)

Improvements

Bug Fixes

4.4.0 (2024-02-07)

4.3.1 (2023-12-22)

4.3.0 (2023-12-22)

v1.1.1

pytest-xdist 3.5.0 (2023-11-21)

Features

pytest-xdist 3.4.0 (2023-11-11)

Features

Release v1.62.0

1.62.0 - 2024-02-22

Added

OK:

MATCH:

OK:

MATCH:

dependabot bot commented on behalf of github Mar 4, 2024

dependabot bot commented on behalf of github Feb 26, 2024 •

edited

Loading