Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore(deps): bump the pip group with 6 updates #255

Merged
merged 1 commit into from
May 25, 2024

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github May 25, 2024

Bumps the pip group with 6 updates:

Package From To
pyinstaller 6.6.0 6.7.0
pylint 3.2.0 3.2.2
pyside6 6.7.0 6.7.1
pytest 8.2.0 8.2.1
requests 2.32.0 2.32.2
validators 0.28.1 0.28.3

Updates pyinstaller from 6.6.0 to 6.7.0

Release notes

Sourced from pyinstaller's releases.

v6.7.0

Please see the v6.7.0 section of the changelog for a list of the changes since v6.6.0.

Changelog

Sourced from pyinstaller's changelog.

6.7.0 (2024-05-21)

Bugfix


* (POSIX) Fix ``PyInstaller.depend.bindepend.resolve_library_path`` for
  cases when ``ldconfig`` cache is not available (e.g., ``musl libc`` on
  Alpine Linux). In such cases, the search code now distinguishes between
  the case when fully suffixed library name is given (i.e., search for
  exact match) and the case when library name has no suffix (i.e., search
  for library with matching basename). (:issue:`8422`)
* (Windows) Fix mangling of path to the entry-point script when the script
  is in the current working directory, and the path to this directory
  contains two or more consecutive ``$`` or ``%`` characters. (:issue:`8434`)

Incompatible Changes

  • PyInstaller does not attempt to expand environment variables in paths given via :option:--workpath, :option:--distpath, :option:--specpath, and :option:--additional-hooks-dir anymore (note that other paths were never subject to environment variable expansion in the first place). Expansion of the starting tilde (~) into user's home directory is still performed, as a work-around for tilde not being expanded by the shell when passing arguments as --workpath=~/path/abc instead of --workpath ~/path/abc. (:issue:8441)

Hooks


* Have ``sqlalchemy`` hook collect all dialects and plugins that are
  registered via ``sqlalchemy.dialects`` and ``sqlalchemy.plugins``
  entry-points. This ensures collection of 3rd party dialects and plugins
  that may be available in the build environment (e.g., ``ibm-db-sa``).
  (:issue:`8465`)
* The ``pywin32-ctypes`` hook now always collects the
  ``win32ctypes.core.ctypes``
  modules, so that the ``ctypes`` backend is always available (i.e., even
  if we also collect the ``cffi`` backend due to availability of ``cffi``
  in the build environment). This fixes issues when ``cffi`` ends up
  unavailable at run-time in spite of being available in the build environment
  at build time (for example, due to explicit exclusion via
  :option:`--exclude-module`
  option). (:issue:`8544`)
* Update ``pkg_resources`` hook for compatibility with ``setuptools`` v70.0.0
  and later (fix ``ModuleNotFoundError: No module named
  'pkg_resources.extern'``). (:issue:`8554`)
Commits
  • 48336c0 Release v6.7.0. [skip ci]
  • a8da1a7 hooks: update pkg_resources hook for setuptools >= 70.0.0
  • 6765848 conftest: macOS: have pyi_builder set up minimal PATH
  • 4f111a7 Tests: Requirements: Scheduled weekly dependency update for week 20 (#8549)
  • 22e928e tests: re-enable test_unbuffered_stdio on CI
  • 2806e90 hook: win32ctypes.core: always collect the ctypes backend
  • c5bf786 hooks: sqlalchemy: collect plugins and dialects via entry-points
  • 6c1a9fe Tests: Requirements: Scheduled weekly dependency update for week 19 (#8462)
  • a351183 Tests: Requirements: Scheduled weekly dependency update for week 18 (#8450)
  • 5663cd5 doc: Promote python -m PyInstaller [skip ci]
  • Additional commits viewable in compare view

Updates pylint from 3.2.0 to 3.2.2

Commits
  • 769ffd2 Bump pylint to 3.2.2, update changelog (#9658)
  • 98c5af9 Fix false-positive with contextmanager missing cleanup (#9654) (#9657)
  • 9a9db8f Update astroid to 3.2.2 (#9655) (#9656)
  • 9223172 Bump pylint to 3.2.1, update changelog
  • 926547b [trailing-comma-tuple] Fix enabling with message control locally when disable...
  • 1498675 Fix linterstats.get_module_message_count() (#9146) (#9648)
  • aed496a Fix FP for possibly-used-before-assignment with assert_never() (#9645) (#...
  • 9dae975 [Backport maintenance/3.2.x] Add --prefer-stubs=y option (#9646)
  • a03ceae Add --prefer-stubs=y option (#9632)
  • b2ea316 [Backport maintenance/3.2.x] Don't emit incorrect-variance for type parameter...
  • Additional commits viewable in compare view

Updates pyside6 from 6.7.0 to 6.7.1

Updates pytest from 8.2.0 to 8.2.1

Release notes

Sourced from pytest's releases.

8.2.1

pytest 8.2.1 (2024-05-19)

Improvements

  • #12334: Support for Python 3.13 (beta1 at the time of writing).

Bug Fixes

  • #12120: Fix [PermissionError]{.title-ref} crashes arising from directories which are not selected on the command-line.
  • #12191: Keyboard interrupts and system exits are now properly handled during the test collection.
  • #12300: Fixed handling of 'Function not implemented' error under squashfuse_ll, which is a different way to say that the mountpoint is read-only.
  • #12308: Fix a regression in pytest 8.2.0 where the permissions of automatically-created .pytest_cache directories became rwx------ instead of the expected rwxr-xr-x.

Trivial/Internal Changes

  • #12333: pytest releases are now attested using the recent Artifact Attestation support from GitHub, allowing users to verify the provenance of pytest's sdist and wheel artifacts.
Commits
  • 66ff8df Prepare release version 8.2.1
  • 3ffcfd1 Merge pull request #12340 from pytest-dev/backport-12334-to-8.2.x
  • 0b28313 [8.2.x] Add Python 3.13 (beta) support
  • f3dd93a [8.2.x] Attest package provenance (#12335)
  • bb5a125 [8.2.x] Spelling (#12331)
  • f179bf2 Merge pull request #12327 from pytest-dev/backport-12325-to-8.2.x
  • 2b671b5 [8.2.x] cacheprovider: fix .pytest_cache not being world-readable
  • 65ab7cb Merge pull request #12324 from pytest-dev/backport-12320-to-8.2.x
  • 4d5fb7d Merge pull request #12319 from pytest-dev/backport-12311-to-8.2.x
  • cbe5996 [8.2.x] changelog: document unittest 8.2 change as breaking
  • Additional commits viewable in compare view

Updates requests from 2.32.0 to 2.32.2

Release notes

Sourced from requests's releases.

v2.32.2

2.32.2 (2024-05-21)

Deprecations

  • To provide a more stable migration for custom HTTPAdapters impacted by the CVE changes in 2.32.0, we've renamed _get_connection to a new public API, get_connection_with_tls_context. Existing custom HTTPAdapters will need to migrate their code to use this new API. get_connection is considered deprecated in all versions of Requests>=2.32.0.

    A minimal (2-line) example has been provided in the linked PR to ease migration, but we strongly urge users to evaluate if their custom adapter is subject to the same issue described in CVE-2024-35195. (#6710)

v2.32.1

2.32.1 (2024-05-20)

Bugfixes

  • Add missing test certs to the sdist distributed on PyPI.
Changelog

Sourced from requests's changelog.

2.32.2 (2024-05-21)

Deprecations

  • To provide a more stable migration for custom HTTPAdapters impacted by the CVE changes in 2.32.0, we've renamed _get_connection to a new public API, get_connection_with_tls_context. Existing custom HTTPAdapters will need to migrate their code to use this new API. get_connection is considered deprecated in all versions of Requests>=2.32.0.

    A minimal (2-line) example has been provided in the linked PR to ease migration, but we strongly urge users to evaluate if their custom adapter is subject to the same issue described in CVE-2024-35195. (#6710)

2.32.1 (2024-05-20)

Bugfixes

  • Add missing test certs to the sdist distributed on PyPI.
Commits

Updates validators from 0.28.1 to 0.28.3

Release notes

Sourced from validators's releases.

0.28.3 (2024-05-25)

Breaking

No breaking changes were introduced in this version.

Features

No features were introduced in this version.

Maintenance

Full Changelog: 0.28.2...0.28.3

0.28.2

Breaking

No breaking changes were introduced in this version.

Features

No features were introduced in this version.

Maintenance

Full Changelog: 0.28.1...0.28.2

New Contributors

Changelog

Sourced from validators's changelog.

0.28.3 (2024-05-25)

Breaking

No breaking changes were introduced in this version.

Features

No features were introduced in this version.

Maintenance

Full Changelog: 0.28.2...0.28.3

0.28.2 (2024-05-24)

Breaking

No breaking changes were introduced in this version.

Features

No features were introduced in this version.

Maintenance

Full Changelog: 0.28.1...0.28.2

Commits
  • cdc987d Merge pull request #379 from yozachar/workshop
  • 8cf75e5 hotfix: ensure _tld.txt is in sdist and bdist
  • cfa5aa1 Merge pull request #377 from yozachar/workshop
  • 999af26 chore: fix typo; update dev deps; bump version
  • a25f3a7 Merge pull request #376 from python-validators/dependabot/pip/package/request...
  • 6de8182 ---
  • 88d4e89 Merge pull request #375 from prousso/chore/add-symbols-pictographs-support
  • bcb1342 Merge pull request #374 from grleblanc/fix-ipv4-private
  • 0623b4a chore: address comments
  • d711ee7 chore(url): allow symbols and pictographs in url
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the pip group with 6 updates:

| Package | From | To |
| --- | --- | --- |
| [pyinstaller](https://github.com/pyinstaller/pyinstaller) | `6.6.0` | `6.7.0` |
| [pylint](https://github.com/pylint-dev/pylint) | `3.2.0` | `3.2.2` |
| [pyside6](https://pyside.org) | `6.7.0` | `6.7.1` |
| [pytest](https://github.com/pytest-dev/pytest) | `8.2.0` | `8.2.1` |
| [requests](https://github.com/psf/requests) | `2.32.0` | `2.32.2` |
| [validators](https://github.com/python-validators/validators) | `0.28.1` | `0.28.3` |


Updates `pyinstaller` from 6.6.0 to 6.7.0
- [Release notes](https://github.com/pyinstaller/pyinstaller/releases)
- [Changelog](https://github.com/pyinstaller/pyinstaller/blob/develop/doc/CHANGES.rst)
- [Commits](pyinstaller/pyinstaller@v6.6.0...v6.7.0)

Updates `pylint` from 3.2.0 to 3.2.2
- [Release notes](https://github.com/pylint-dev/pylint/releases)
- [Commits](pylint-dev/pylint@v3.2.0...v3.2.2)

Updates `pyside6` from 6.7.0 to 6.7.1

Updates `pytest` from 8.2.0 to 8.2.1
- [Release notes](https://github.com/pytest-dev/pytest/releases)
- [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst)
- [Commits](pytest-dev/pytest@8.2.0...8.2.1)

Updates `requests` from 2.32.0 to 2.32.2
- [Release notes](https://github.com/psf/requests/releases)
- [Changelog](https://github.com/psf/requests/blob/main/HISTORY.md)
- [Commits](psf/requests@v2.32.0...v2.32.2)

Updates `validators` from 0.28.1 to 0.28.3
- [Release notes](https://github.com/python-validators/validators/releases)
- [Changelog](https://github.com/python-validators/validators/blob/master/CHANGES.md)
- [Commits](python-validators/validators@0.28.1...0.28.3)

---
updated-dependencies:
- dependency-name: pyinstaller
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pip
- dependency-name: pylint
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: pip
- dependency-name: pyside6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: pip
- dependency-name: pytest
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: pip
- dependency-name: requests
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: pip
- dependency-name: validators
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: pip
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels May 25, 2024
@ayushmanchhabra
Copy link
Contributor

@dependabot squash and merge

@dependabot dependabot bot merged commit 522ba98 into master May 25, 2024
3 checks passed
@dependabot dependabot bot deleted the dependabot/pip/pip-e3db7c1839 branch May 25, 2024 14:17
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file python Pull requests that update Python code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant