Bump the dependencies group in /.config with 22 updates #197

dependabot · 2024-03-10T01:25:57Z

Bumps the dependencies group in /.config with 22 updates:

Package	From	To
coverage	`7.4.1`	`7.4.3`
pytest	`8.0.0`	`8.1.1`
tox	`4.12.1`	`4.14.1`
mkdocs-autorefs	`0.5.0`	`1.0.1`
mkdocs-htmlproofer-plugin	`1.0.0`	`1.2.0`
mkdocs-material	`9.5.9`	`9.5.13`
pipdeptree	`2.13.2`	`2.16.1`
pymdown-extensions	`10.7`	`10.7.1`
build	`1.0.3`	`1.1.1`
cachetools	`5.3.2`	`5.3.3`
cryptography	`42.0.2`	`42.0.5`
gitpython	`3.1.41`	`3.1.42`
importlib-metadata	`7.0.1`	`7.0.2`
keyring	`24.3.0`	`24.3.1`
pkginfo	`1.9.6`	`1.10.0`
python-dateutil	`2.8.2`	`2.9.0.post0`
readme-renderer	`42.0`	`43.0`
rich	`13.7.0`	`13.7.1`
twine	`4.0.2`	`5.0.0`
typing-extensions	`4.9.0`	`4.10.0`
urllib3	`2.2.0`	`2.2.1`
virtualenv	`20.25.0`	`20.25.1`

Updates coverage from 7.4.1 to 7.4.3

Changelog

Sourced from coverage's changelog.

Version 7.4.3 — 2024-02-23

Fix: in some cases, coverage could fail with a RuntimeError: "Set changed size during iteration." This is now fixed, closing issue 1733_.

.. _issue 1733: nedbat/coveragepy#1733

.. _changes_7-4-2:

Version 7.4.2 — 2024-02-20

Fix: setting COVERAGE_CORE=sysmon no longer errors on 3.11 and lower, thanks Hugo van Kemenade <pull 1747_>_. It now issues a warning that sys.monitoring is not available and falls back to the default core instead.

.. _pull 1747: nedbat/coveragepy#1747

.. _changes_7-4-1:

Commits

1af3624 docs: sample HTML for 7.4.3
f06c5e4 docs: prep for 7.4.3
08fc997 fix: get atomic copies of iterables when flushing data. #1733
4e34571 build: put a time limit on the Python nightly tests
a1d8d29 build: make targets should use underscores not dashes
f7d40a0 build: tweak the release instructions
0f19b82 build: bump version
5d69334 test: if a test fails randomly, let it retry with @flaky
65d686c docs: sample HTML for 7.4.2
026dca7 docs: prep for 7.4.2
Additional commits viewable in compare view

Updates pytest from 8.0.0 to 8.1.1

Release notes

Sourced from pytest's releases.

8.1.1

pytest 8.1.1 (2024-03-08)

::: {.note} ::: {.title} Note :::

This release is not a usual bug fix release -- it contains features and improvements, being a follow up to 8.1.0, which has been yanked from PyPI. :::

Features

#11475: Added the new consider_namespace_packages{.interpreted-text role="confval"} configuration option, defaulting to False.

If set to True, pytest will attempt to identify modules that are part of namespace packages when importing modules.

#11653: Added the new verbosity_test_cases{.interpreted-text role="confval"} configuration option for fine-grained control of test execution verbosity. See Fine-grained verbosity <pytest.fine_grained_verbosity>{.interpreted-text role="ref"} for more details.

Improvements

#10865: pytest.warns{.interpreted-text role="func"} now validates that warnings.warn{.interpreted-text role="func"} was called with a [str]{.title-ref} or a [Warning]{.title-ref}. Currently in Python it is possible to use other types, however this causes an exception when warnings.filterwarnings{.interpreted-text role="func"} is used to filter those warnings (see [CPython #103577](python/cpython#103577) for a discussion). While this can be considered a bug in CPython, we decided to put guards in pytest as the error message produced without this check in place is confusing.

#11311: When using --override-ini for paths in invocations without a configuration file defined, the current working directory is used as the relative directory.

Previoulsy this would raise an AssertionError{.interpreted-text role="class"}.

#11475: --import-mode=importlib <import-mode-importlib>{.interpreted-text role="ref"} now tries to import modules using the standard import mechanism (but still without changing :pysys.path{.interpreted-text role="data"}), falling back to importing modules directly only if that fails.

This means that installed packages will be imported under their canonical name if possible first, for example app.core.models, instead of having the module name always be derived from their path (for example .env310.lib.site_packages.app.core.models).

#11801: Added the iter_parents() <_pytest.nodes.Node.iter_parents>{.interpreted-text role="func"} helper method on nodes. It is similar to listchain <_pytest.nodes.Node.listchain>{.interpreted-text role="func"}, but goes from bottom to top, and returns an iterator, not a list.

#11850: Added support for sys.last_exc{.interpreted-text role="data"} for post-mortem debugging on Python>=3.12.

#11962: In case no other suitable candidates for configuration file are found, a pyproject.toml (even without a [tool.pytest.ini_options] table) will be considered as the configuration file and define the rootdir.

#11978: Add --log-file-mode option to the logging plugin, enabling appending to log-files. This option accepts either "w" or "a" and defaults to "w".

Previously, the mode was hard-coded to be "w" which truncates the file before logging.

... (truncated)

Commits

81653ee Adjust changelog manually for 8.1.1
e60b4b9 Prepare release version 8.1.1
15fbe57 [8.1.x] Revert legacy path removals (#12093)
86c3aab [8.1.x] Do not import duplicated modules with --importmode=importlib (#12077)
5b82b0c [8.1.x] Yank version 8.1.0 (#12076)
0a53681 Merge pull request #12054 from pytest-dev/release-8.1.0
b9a167f Prepare release version 8.1.0
00043f7 Merge pull request #12038 from bluetech/fixtures-rm-arg2index
f4e1025 Merge pull request #12048 from bluetech/fixture-teardown-excgroup
43492f5 Merge pull request #12051 from jakkdl/test_debugging_pythonbreakpoint
Additional commits viewable in compare view

Updates tox from 4.12.1 to 4.14.1

Release notes

Sourced from tox's releases.

4.14.1

What's Changed

Fix fresh subprocesses and allow duplicate register config calls for the core set only by @gaborbernat in tox-dev/tox#3237

Full Changelog: tox-dev/tox@4.14.0...4.14.1

4.14.0

What's Changed

Fix issue/PR number in 4.13.0 changelog by @hroncok in tox-dev/tox#3223

Fix linkcheck failing by @gaborbernat in tox-dev/tox#3229

Support fresh subprocess for build backends by @gaborbernat in tox-dev/tox#3233

Allow plugins to attach data to --version by @gaborbernat in tox-dev/tox#3234

Full Changelog: tox-dev/tox@4.13.0...4.14.0

4.13.0

What's Changed

Document usage of Pytest with Tox as a FAQ entry by @faph in tox-dev/tox#3192

docs/config.rst: State in config directive sections their ini file sections by @0cjs in tox-dev/tox#3194

.gitignore: Add /tests/demo_pkg_inline/.tox/ by @0cjs in tox-dev/tox#3198

docs/development: Summarise important points experienced devs need to know by @0cjs in tox-dev/tox#3197

Add tests for CliEnv by @0cjs in tox-dev/tox#3204

Document how CliEnv works by @0cjs in tox-dev/tox#3206

docs/development "Key points": Two updates and general improvement by @0cjs in tox-dev/tox#3205

session.env_select.CliEnv: Document and test spaces behaviour by @0cjs in tox-dev/tox#3208

config.cli.test_cli_ini: Re-order for clarity (textual moves only) by @0cjs in tox-dev/tox#3209

Revert previous "precommit autoupdate (#3214)" commit; it's broken by @0cjs in tox-dev/tox#3215

Extract packaging virtualenv code to its own class by @gaborbernat in tox-dev/tox#3221

New Contributors

@faph made their first contribution in tox-dev/tox#3192

@0cjs made their first contribution in tox-dev/tox#3194

Full Changelog: tox-dev/tox@4.12.1...4.13.0

Changelog

Sourced from tox's changelog.

v4.14.1 (2024-03-06)

Bugfixes - 4.14.1
- Fix crash with fresh subprocess, if the build backend is setuptools automatically enable fresh subprocesses for
  build backend calls - by :user:`gaborbernat`. (:issue:`3235`)
v4.14.0 (2024-03-05)
Features - 4.14.0
Support enabling fresh subprocess for packaging build backends via :ref:fresh_subprocess - by :user:gaborbernat. (:issue:3227)

Allow plugins attaching additional information to --version via tox_append_version_info method in the plugin module - by :user:gaborbernat. (:issue:3234)

v4.13.0 (2024-02-16)

Features - 4.13.0
- Extract virtual environment packaging code to its own base class not tied to ``virtualenv`` - by :user:`gaborbernat`. (:issue:`3221`)
Improved Documentation - 4.13.0
Documented usage of pytest with tox run-parallel - by :user:faph. (:issue:3187)

Configuration: state in config directive sections their ini file sections - by :user:0cjs. (:issue:3194)

Development: summarize important points experienced developers need to know - by :user:0cjs. (:issue:3197)

Commits

acbef2d release 4.14.1
969fbec Fix fresh subprocesses and allow duplicate register config calls for the core...
d37cb08 release 4.14.0
5356d96 Allow plugins to attach data to --version (#3234)
717e27f Support fresh subprocess for build backends (#3233)
0fd872d Bump pypa/gh-action-pypi-publish from 1.8.11 to 1.8.12 (#3230)
ed447c4 Fix linkcheck failing (#3229)
57783e3 [pre-commit.ci] pre-commit autoupdate (#3226)
c024fe2 Fix issue/PR number in 4.13.0 changelog
ae156e2 release 4.13.0
Additional commits viewable in compare view

Updates mkdocs-autorefs from 0.5.0 to 1.0.1

Release notes

Sourced from mkdocs-autorefs's releases.

1.0.1

1.0.1 - 2024-02-29

Compare with 1.0.0

Bug Fixes

Don't import MkDocsConfig (does not exist on MkDocs 1.3-) (9c15664 by Timothée Mazzucotelli).

1.0.0

1.0.0 - 2024-02-27

Compare with 0.5.0

Features

Add Markdown anchors and aliases (a215a97 by Timothée Mazzucotelli). [Replaces-PR-#20](mkdocstrings/autorefs#20), [Related-to-PR-#25](mkdocstrings/autorefs#25), [Related-to-issue-#35](mkdocstrings/autorefs#35), Co-authored-by: Oleh Prypin [email protected], Co-authored-by: tvdboom [email protected]

Preserve HTML data attributes (from spans to anchors) (0c1781d by Timothée Mazzucotelli). [Issue-#41](mkdocstrings/autorefs#41), [PR-#42](mkdocstrings/autorefs#42), Co-authored-by: Oleh Prypin [email protected]

Support [`identifier`][] with pymdownx.inlinehilite enabled (e7f2228 by Oleh Prypin). [Issue-#34](mkdocstrings/autorefs#34), [PR-#40](mkdocstrings/autorefs#40), Co-authored-by: Timothée Mazzucotelli [email protected]

Bug Fixes

Recognize links with multi-line text (225a6f2 by Oleh Prypin). [Issue #31](mkdocstrings/autorefs#31), [PR #32](mkdocstrings/autorefs#32)

Changelog

Sourced from mkdocs-autorefs's changelog.

1.0.1 - 2024-02-29

Compare with 1.0.0

Bug Fixes

Don't import MkDocsConfig (does not exist on MkDocs 1.3-) (9c15664 by Timothée Mazzucotelli).

1.0.0 - 2024-02-27

Compare with 0.5.0

Features

Add Markdown anchors and aliases (a215a97 by Timothée Mazzucotelli). [Replaces-PR-#20](mkdocstrings/autorefs#20), [Related-to-PR-#25](mkdocstrings/autorefs#25), [Related-to-issue-#35](mkdocstrings/autorefs#35), Co-authored-by: Oleh Prypin [email protected], Co-authored-by: tvdboom [email protected]

Preserve HTML data attributes (from spans to anchors) (0c1781d by Timothée Mazzucotelli). [Issue-#41](mkdocstrings/autorefs#41), [PR-#42](mkdocstrings/autorefs#42), Co-authored-by: Oleh Prypin [email protected]

Support [`identifier`][] with pymdownx.inlinehilite enabled (e7f2228 by Oleh Prypin). [Issue-#34](mkdocstrings/autorefs#34), [PR-#40](mkdocstrings/autorefs#40), Co-authored-by: Timothée Mazzucotelli [email protected]

Bug Fixes

Recognize links with multi-line text (225a6f2 by Oleh Prypin). [Issue #31](mkdocstrings/autorefs#31), [PR #32](mkdocstrings/autorefs#32)

Commits

08c8945 chore: Prepare release 1.0.1
9c15664 fix: Don't import MkDocsConfig (does not exist on MkDocs 1.3-)
95d32b4 chore: Prepare release 1.0.0
a215a97 feat: Add Markdown anchors and aliases
0c1781d feat: Preserve HTML data attributes (from spans to anchors)
24325ff ci: Fix type of the fallback callable
e7f2228 feat: Support [identifier][] with pymdownx.inlinehilite enabled
143d768 chore: Template upgrade
225a6f2 fix: Recognize links with multi-line text
See full diff in compare view

Updates mkdocs-htmlproofer-plugin from 1.0.0 to 1.2.0

Release notes

Sourced from mkdocs-htmlproofer-plugin's releases.

Release 1.2.0

What's Changed

Don't treat some HTTP status error codes as not errors by @SeanTAllen in manuzhang/mkdocs-htmlproofer-plugin#78

Add option to optionally skip downloading the contents of a file by @benjamb in manuzhang/mkdocs-htmlproofer-plugin#79

New Contributors

@benjamb made their first contribution in manuzhang/mkdocs-htmlproofer-plugin#79

Full Changelog: manuzhang/mkdocs-htmlproofer-plugin@v1.1.0...v1.2.0

Release 1.1.0

What's Changed

Add support for ignoring URLs (no fetching) with wildcards. by @es-fabricemarie in manuzhang/mkdocs-htmlproofer-plugin#62

Allow special characters in directory name, optimization by @marmotton in manuzhang/mkdocs-htmlproofer-plugin#68

Support wildcard in raise_error_excludes by @manuzhang in manuzhang/mkdocs-htmlproofer-plugin#73

Fix incorrect dev-requirements.txt in CONTRIBUTING.md by @SeanTAllen in manuzhang/mkdocs-htmlproofer-plugin#71

Provide compatibility with mkdocs-material blog plugin by @SeanTAllen in manuzhang/mkdocs-htmlproofer-plugin#72

Update contributing development section by @SeanTAllen in manuzhang/mkdocs-htmlproofer-plugin#74

Fix naive handling of relative links when proofing by @SeanTAllen in manuzhang/mkdocs-htmlproofer-plugin#75

New Contributors

@es-fabricemarie made their first contribution in manuzhang/mkdocs-htmlproofer-plugin#62

@marmotton made their first contribution in manuzhang/mkdocs-htmlproofer-plugin#68

@SeanTAllen made their first contribution in manuzhang/mkdocs-htmlproofer-plugin#71

Full Changelog: manuzhang/mkdocs-htmlproofer-plugin@v1.0.0...v1.1.0

Commits

3b5535b Release 1.2.0
fce60c9 Add option to optionally skip downloading the contents of a file (#79)
ed60f7c Don't treat some HTTP status error codes as not errors (#78)
36bd1e6 Bump up version to 1.2.0.dev
f0bb286 Release 1.1.0
5776fea Fix naive handling of relative links when proofing (#75)
14c97cc Update contributing development section (#74)
65ae40f Provide compatibility with mkdocs-material blog plugin (#72)
d195827 Fix incorrect dev-requirements.txt in CONTRIBUTING.md (#71)
392a4e1 Support wildcard in raise_error_excludes (#73)
Additional commits viewable in compare view

Updates mkdocs-material from 9.5.9 to 9.5.13

Release notes

Sourced from mkdocs-material's releases.

mkdocs-material-9.5.13

Updated Slovak translations

Improved info plugin interop with projects plugin

Improved info plugin inclusion/exclusion logic

Fixed info plugin not gathering files recursively

Fixed #6750: Ensure info plugin packs up all necessary files

Thanks to @kamilkrzyskow and @scepka for their contributions

mkdocs-material-9.5.12

Fixed #6846: Some meta tags removed on instant navigation (9.4.2 regression)

Fixed #6823: KaTex not rendering on instant navigation (9.5.5 regression)

Fixed #6821: Privacy plugin doesn't handle URLs with encoded characters

mkdocs-material-9.5.11

Updated Finnish translation

mkdocs-material-9.5.10

Updated Bahasa Malaysia translations

Fixed #6783: Hide continue reading link for blog posts without separators

Fixed #6779: Incorrect positioning of integrated table of contents

Changelog

Sourced from mkdocs-material's changelog.

mkdocs-material-9.5.13+insiders-4.53.1 (2024-03-06)

Fixed #6877: Projects plugin computes incorrect path to assets

Fixed #6869: Blog plugin should emit warning on invalid related link

mkdocs-material-9.5.13 (2024-03-06)

Updated Slovak translations

Improved info plugin interop with projects plugin

Improved info plugin inclusion/exclusion logic

Fixed info plugin not gathering files recursively

Fixed #6750: Ensure info plugin packs up all necessary files

mkdocs-material-9.5.12 (2024-02-29)

Fixed #6846: Some meta tags removed on instant navigation (9.4.2 regression)

Fixed #6823: KaTex not rendering on instant navigation (9.5.5 regression)

Fixed #6821: Privacy plugin doesn't handle URLs with encoded characters

mkdocs-material-9.5.11+insiders-4.53.0 (2024-02-24)

Added support for automatic instant previews

Added support for pinned blog posts

mkdocs-material-9.5.11 (2024-02-19)

Updated Finnish translation

mkdocs-material-9.5.10+insiders-4.52.3 (2024-02-21)

Fixed resolution of URLs in instant previews

Fixed instant previews not mounting for same-page links

mkdocs-material-9.5.10 (2024-02-19)

Updated Bahasa Malaysia translations

Fixed #6783: Hide continue reading link for blog posts without separators

Fixed #6779: Incorrect positioning of integrated table of contents

mkdocs-material-9.5.9 (2024-02-10)

Fixed navigation pruning with tabs and sections enabled

mkdocs-material-9.5.8+insiders-4.52.2 (2024-02-07)

Fixed #6735: Instant previews misplaced when below tabs

mkdocs-material-9.5.8 (2024-02-07)

Added Tamil translations

... (truncated)

Commits

6ace043 Updated changelog
36e9cff Prepare 9.5.13 release
c7de6ef Documentation (#6873)
dc808ca Updated dependencies
63de275 Extended info plugin's validation message
4478522 Added validation of paths to the info plugin
819e209 Added projects plugin handling in the info plugin
79129d5 Added exclusion logic for info plugin
64a8b6a Changed info plugin to store more platform information
712bc1c Fixed info plugin to gather all files recursively
Additional commits viewable in compare view

Updates pipdeptree from 2.13.2 to 2.16.1

Release notes

Sourced from pipdeptree's releases.

2.16.1

What's Changed

Mock importlib.metadata usage in PackageDAG.from_pkgs() tests by @kemzeb in tox-dev/pipdeptree#327

Full Changelog: tox-dev/pipdeptree@2.16.0...2.16.1

2.16.0

What's Changed

Fix key mismatch between requirements and dists by @f3flight in tox-dev/pipdeptree#325

New Contributors

@f3flight made their first contribution in tox-dev/pipdeptree#325

Full Changelog: tox-dev/pipdeptree@2.15.1...2.16.0

2.15.1

What's Changed

Have --license work with --reverse by @kemzeb in tox-dev/pipdeptree#321

Full Changelog: tox-dev/pipdeptree@2.15.0...2.15.1

2.15.0

What's Changed

Have --license and --reverse options in the "render" argument group by @kemzeb in tox-dev/pipdeptree#320

Full Changelog: tox-dev/pipdeptree@2.14.0...2.15.0

2.14.0

What's Changed

Implement --license option by @kemzeb in tox-dev/pipdeptree#318

Full Changelog: tox-dev/pipdeptree@2.13.2...2.14.0

Commits

2d527a7 Mock importlib.metadata usage in PackageDAG.from_pkgs() tests (#327)
200a36e Delete outdated changelog
4ebaca8 Fix key mismatch between requirements and dists (#325)
f009a19 Bump pypa/gh-action-pypi-publish from 1.8.11 to 1.8.12 (#323)
bc804e3 Have --license work with --reverse (#321)
e8a7801 Have --license and --reverse options in the "render" argument group (#320)
c6de3c3 [pre-commit.ci] pre-commit autoupdate (#319)
134ca6e Implement --license option (#318)
312818a [pre-commit.ci] pre-commit autoupdate (#317)
9d8f2b7 [pre-commit.ci] pre-commit autoupdate (#316)
Additional commits viewable in compare view

Updates pymdown-extensions from 10.7 to 10.7.1

Release notes

Sourced from pymdown-extensions's releases.

10.7.1

FIX: SmartSymbols: Ensure symbols are properly translated in table of content tokens.

Commits

87e649d Upgrade JS doc deps
1270c86 Fix SmartSymbols in TOC tokens (#2327)
See full diff in compare view

Updates build from 1.0.3 to 1.1.1

Release notes

Sourced from build's releases.

Version 1.1.1

What's Changed

Fixed invoking outer pip from user site packages (PR #746, fixes issue #745)

Corrected the minimum pip version required to use an outer pip (PR #746, fixes issue #745)

Full Changelog: pypa/build@v1.1.0...1.1.1

Version 1.1.0

What's Changed

Use external pip if available instead of installing, speeds up environment setup with virtualenv slightly and venv significantly. (PR #736)

Stopped injecting wheel as a build dependency automatically, in the case of missing pyproject.toml -- by @webknjaz. (PR #716)

Use importlib_metadata on Python <3.10.2 for bugfixes not present in those CPython standard libraries (not required when bootstrapping) -- by @GianlucaFicarelli. (PR #693, fixes issue #692)

New Contributors

@MichaReiser made their first contribution in pypa/build#697

@GianlucaFicarelli made their first contribution in pypa/build#693

Full Changelog: pypa/build@1.0.3...v1.1.0

Changelog

Sourced from build's changelog.

1.1.1 (2024-02-29)

Fixed invoking outer pip from user site packages (PR :pr:746, fixes issue :issue:745)

Corrected the minimum pip version required to use an outer pip (PR :pr:746, fixes issue :issue:745)

1.1.0 (2024-02-29)

Use external pip if available instead of installing, speeds up environment setup with virtualenv slightly and venv significantly. (PR :pr:736)

Stopped injecting wheel as a build dependency automatically, in the case of missing pyproject.toml -- by :user:webknjaz. (PR :pr:716)

Use importlib_metadata on Python <3.10.2 for bugfixes not present in those CPython standard libraries (not required when bootstrapping) -- by :user:GianlucaFicarelli. (PR :pr:693, fixes issue :issue:692)

Commits

b36126a release 1.1.1
9588222 env: fix global pip (#746)
da06973 chore: prepare for 1.1.0 (#744)
42231a7 compat: create separate importlib, tarfile and tomllib shims
894998a chore: address feedback
aa0aa04 fix(types): make the passthrough general
af5ff53 feat: use external pip if available
9ceb49d build(deps): bump the actions group with 1 update (#739)
ac57b94 refactor: pull out pip checks (#735)
e6969d1 pre-commit: bump repositories (#734)
Additional commits viewable in compare view

Updates cachetools from 5.3.2 to 5.3.3

Changelog

Sourced from cachetools's changelog.

v5.3.3 (2024-02-26)

Documentation improvements.

Update CI environment.

Commits

1fcadea Bump copyright year and version.
2b0a7cb Bump copyright year.
d566834 LICENSE: update the year
4a284ca Merge branch 'kuraga-get-rid-of-operator-usage'
86ff2f0 Merge branch 'get-rid-of-operator-usage' of https://github.com/kuraga/cacheto...
2862109 Bump actions/setup-python from 4.7.1 to 5.0.0
4c5d179 Bump actions/checkout from 4.1.0 to 4.1.1
98453e8 Get rid of operator usage
d991ac7 Add cacheing reference.
See full diff in compare view

Updates cryptography from 42.0.2 to 42.0.5

Changelog

Sourced from cryptography's changelog.

42.0.5 - 2024-02-23
* Limit the number of name constraint checks that will be performed in
  :mod:`X.509 path validation <cryptography.x509.verification>` to protect
  against denial of service attacks.
* Upgrade ``pyo3`` version, which fixes building on PowerPC.
.. _v42-0-4:
42.0.4 - 2024-02-20
Fixed a null-pointer-dereference and segfault that could occur when creating a PKCS#12 bundle. Credit to Alexander-Programming for reporting the issue. CVE-2024-26130

Fixed ASN.1 encoding for PKCS7/SMIME signed messages. The fields SMIMECapabilities and SignatureAlgorithmIdentifier should now be correctly encoded according to the definitions in :rfc:2633 :rfc:3370.

.. _v42-0-3:

42.0.3 - 2024-02-15
* Fixed an initialization issue that caused key loading failures for some
  users.
.. _v42-0-2:

Commits

33833f0 Release 42.0.5 (#10470)
4be53bf Added a budget for NC checks to protect against DoS (#10467) (#10468)
8e9de30 Bump pyo3 from 0.20.2 to 0.20.3 in /src/rust (#10462) (#10465)
fe18470 Bump for 42.0.4 release (#10445)
aaa2dd0 Fix ASN.1 issues in PKCS#7 and S/MIME signing (#10373) (#10442)
7a4d012 Fixes #10422 -- don't crash when a PKCS#12 key and cert don't match (#10423) ...
df314bb backport actions m1 switch to 42.0.x (#10415)
c49a7a5 changelog and version bump for 42.0.3 (#10396)
396bcf6 fix provider loading take two (#10390) (#10395)
0e0e46f backport: initialize openssl's legacy provider in rust (#10323) (#10333)
See full diff in compare view

Updates gitpython from 3.1.41 to 3.1.42

Release notes

Sourced from gitpython's releases.

3.1.42

What's Changed

Fix release link in changelog by @PeterJCLaw in gitpython-developers/GitPython#1795

Remove test dependency on sumtypes library by @EliahKagan in gitpython-developers/GitPython#1798

Pin Sphinx plugins to compatible versions by @EliahKagan in gitpython-developers/GitPython#1803

fix: treeNotSorted issue by @et-repositories in gitpython-developers/GitPython#1799

Remove git.util.NullHandler by @EliahKagan in gitpython-developers/GitPython#1807

Clarify why GIT_PYTHON_GIT_EXECUTABLE may be set on failure by @EliahKagan in gitpython-developers/GitPython#1810

Report actual attempted Git command when Git.refresh fails by @EliahKagan in gitpython-developers/GitPython#1812

Don't suppress messages when logging is not configured by @EliahKagan in gitpython-developers/GitPython#1813

Pin Python 3.9.16 on Cygwin CI by @EliahKagan in gitpython-developers/GitPython#1814

Have initial refresh use a logger to warn by @EliahKagan in

Bumps the dependencies group in /.config with 22 updates: | Package | From | To | | --- | --- | --- | | [coverage](https://github.com/nedbat/coveragepy) | `7.4.1` | `7.4.3` | | [pytest](https://github.com/pytest-dev/pytest) | `8.0.0` | `8.1.1` | | [tox](https://github.com/tox-dev/tox) | `4.12.1` | `4.14.1` | | [mkdocs-autorefs](https://github.com/mkdocstrings/autorefs) | `0.5.0` | `1.0.1` | | [mkdocs-htmlproofer-plugin](https://github.com/manuzhang/mkdocs-htmlproofer-plugin) | `1.0.0` | `1.2.0` | | [mkdocs-material](https://github.com/squidfunk/mkdocs-material) | `9.5.9` | `9.5.13` | | [pipdeptree](https://github.com/tox-dev/pipdeptree) | `2.13.2` | `2.16.1` | | [pymdown-extensions](https://github.com/facelessuser/pymdown-extensions) | `10.7` | `10.7.1` | | [build](https://github.com/pypa/build) | `1.0.3` | `1.1.1` | | [cachetools](https://github.com/tkem/cachetools) | `5.3.2` | `5.3.3` | | [cryptography](https://github.com/pyca/cryptography) | `42.0.2` | `42.0.5` | | [gitpython](https://github.com/gitpython-developers/GitPython) | `3.1.41` | `3.1.42` | | [importlib-metadata](https://github.com/python/importlib_metadata) | `7.0.1` | `7.0.2` | | [keyring](https://github.com/jaraco/keyring) | `24.3.0` | `24.3.1` | | [pkginfo](https://code.launchpad.net/~tseaver/pkginfo/trunk) | `1.9.6` | `1.10.0` | | [python-dateutil](https://github.com/dateutil/dateutil) | `2.8.2` | `2.9.0.post0` | | [readme-renderer](https://github.com/pypa/readme_renderer) | `42.0` | `43.0` | | [rich](https://github.com/Textualize/rich) | `13.7.0` | `13.7.1` | | [twine](https://github.com/pypa/twine) | `4.0.2` | `5.0.0` | | [typing-extensions](https://github.com/python/typing_extensions) | `4.9.0` | `4.10.0` | | [urllib3](https://github.com/urllib3/urllib3) | `2.2.0` | `2.2.1` | | [virtualenv](https://github.com/pypa/virtualenv) | `20.25.0` | `20.25.1` | Updates `coverage` from 7.4.1 to 7.4.3 - [Release notes](https://github.com/nedbat/coveragepy/releases) - [Changelog](https://github.com/nedbat/coveragepy/blob/master/CHANGES.rst) - [Commits](nedbat/coveragepy@7.4.1...7.4.3) Updates `pytest` from 8.0.0 to 8.1.1 - [Release notes](https://github.com/pytest-dev/pytest/releases) - [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst) - [Commits](pytest-dev/pytest@8.0.0...8.1.1) Updates `tox` from 4.12.1 to 4.14.1 - [Release notes](https://github.com/tox-dev/tox/releases) - [Changelog](https://github.com/tox-dev/tox/blob/main/docs/changelog.rst) - [Commits](tox-dev/tox@4.12.1...4.14.1) Updates `mkdocs-autorefs` from 0.5.0 to 1.0.1 - [Release notes](https://github.com/mkdocstrings/autorefs/releases) - [Changelog](https://github.com/mkdocstrings/autorefs/blob/main/CHANGELOG.md) - [Commits](mkdocstrings/autorefs@0.5.0...1.0.1) Updates `mkdocs-htmlproofer-plugin` from 1.0.0 to 1.2.0 - [Release notes](https://github.com/manuzhang/mkdocs-htmlproofer-plugin/releases) - [Commits](manuzhang/mkdocs-htmlproofer-plugin@v1.0.0...v1.2.0) Updates `mkdocs-material` from 9.5.9 to 9.5.13 - [Release notes](https://github.com/squidfunk/mkdocs-material/releases) - [Changelog](https://github.com/squidfunk/mkdocs-material/blob/master/CHANGELOG) - [Commits](squidfunk/mkdocs-material@9.5.9...9.5.13) Updates `pipdeptree` from 2.13.2 to 2.16.1 - [Release notes](https://github.com/tox-dev/pipdeptree/releases) - [Commits](tox-dev/pipdeptree@2.13.2...2.16.1) Updates `pymdown-extensions` from 10.7 to 10.7.1 - [Release notes](https://github.com/facelessuser/pymdown-extensions/releases) - [Commits](facelessuser/pymdown-extensions@10.7...10.7.1) Updates `build` from 1.0.3 to 1.1.1 - [Release notes](https://github.com/pypa/build/releases) - [Changelog](https://github.com/pypa/build/blob/main/CHANGELOG.rst) - [Commits](pypa/build@1.0.3...1.1.1) Updates `cachetools` from 5.3.2 to 5.3.3 - [Changelog](https://github.com/tkem/cachetools/blob/master/CHANGELOG.rst) - [Commits](tkem/cachetools@v5.3.2...v5.3.3) Updates `cryptography` from 42.0.2 to 42.0.5 - [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst) - [Commits](pyca/cryptography@42.0.2...42.0.5) Updates `gitpython` from 3.1.41 to 3.1.42 - [Release notes](https://github.com/gitpython-developers/GitPython/releases) - [Changelog](https://github.com/gitpython-developers/GitPython/blob/main/CHANGES) - [Commits](gitpython-developers/GitPython@3.1.41...3.1.42) Updates `importlib-metadata` from 7.0.1 to 7.0.2 - [Release notes](https://github.com/python/importlib_metadata/releases) - [Changelog](https://github.com/python/importlib_metadata/blob/main/NEWS.rst) - [Commits](python/importlib_metadata@v7.0.1...v7.0.2) Updates `keyring` from 24.3.0 to 24.3.1 - [Release notes](https://github.com/jaraco/keyring/releases) - [Changelog](https://github.com/jaraco/keyring/blob/main/NEWS.rst) - [Commits](jaraco/keyring@v24.3.0...v24.3.1) Updates `pkginfo` from 1.9.6 to 1.10.0 Updates `python-dateutil` from 2.8.2 to 2.9.0.post0 - [Release notes](https://github.com/dateutil/dateutil/releases) - [Changelog](https://github.com/dateutil/dateutil/blob/master/NEWS) - [Commits](dateutil/dateutil@2.8.2...2.9.0.post0) Updates `readme-renderer` from 42.0 to 43.0 - [Release notes](https://github.com/pypa/readme_renderer/releases) - [Changelog](https://github.com/pypa/readme_renderer/blob/main/CHANGES.rst) - [Commits](pypa/readme_renderer@42.0...43.0) Updates `rich` from 13.7.0 to 13.7.1 - [Release notes](https://github.com/Textualize/rich/releases) - [Changelog](https://github.com/Textualize/rich/blob/master/CHANGELOG.md) - [Commits](Textualize/rich@v13.7.0...v13.7.1) Updates `twine` from 4.0.2 to 5.0.0 - [Release notes](https://github.com/pypa/twine/releases) - [Changelog](https://github.com/pypa/twine/blob/main/docs/changelog.rst) - [Commits](pypa/twine@4.0.2...5.0.0) Updates `typing-extensions` from 4.9.0 to 4.10.0 - [Release notes](https://github.com/python/typing_extensions/releases) - [Changelog](https://github.com/python/typing_extensions/blob/main/CHANGELOG.md) - [Commits](python/typing_extensions@4.9.0...4.10.0) Updates `urllib3` from 2.2.0 to 2.2.1 - [Release notes](https://github.com/urllib3/urllib3/releases) - [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst) - [Commits](urllib3/urllib3@2.2.0...2.2.1) Updates `virtualenv` from 20.25.0 to 20.25.1 - [Release notes](https://github.com/pypa/virtualenv/releases) - [Changelog](https://github.com/pypa/virtualenv/blob/main/docs/changelog.rst) - [Commits](pypa/virtualenv@20.25.0...20.25.1) --- updated-dependencies: - dependency-name: coverage dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: pytest dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: tox dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: mkdocs-autorefs dependency-type: direct:production update-type: version-update:semver-major dependency-group: dependencies - dependency-name: mkdocs-htmlproofer-plugin dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: mkdocs-material dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: pipdeptree dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: pymdown-extensions dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: build dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: cachetools dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: cryptography dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: gitpython dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: importlib-metadata dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: keyring dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: pkginfo dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: python-dateutil dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: readme-renderer dependency-type: direct:production update-type: version-update:semver-major dependency-group: dependencies - dependency-name: rich dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: twine dependency-type: direct:production update-type: version-update:semver-major dependency-group: dependencies - dependency-name: typing-extensions dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: urllib3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: virtualenv dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies ... Signed-off-by: dependabot[bot] <[email protected]>

dependabot · 2024-03-10T01:25:59Z

The following labels could not be found: dependabot-deps-updates.

dependabot bot requested a review from ssbarnea as a code owner March 10, 2024 01:25

dependabot bot added the skip-changelog label Mar 10, 2024

dependabot bot temporarily deployed to ack March 10, 2024 01:26 Inactive

github-actions bot enabled auto-merge (squash) March 10, 2024 01:26

github-actions bot approved these changes Mar 10, 2024

View reviewed changes

ssbarnea temporarily deployed to ack March 12, 2024 16:28 — with GitHub Actions Inactive

Fix links in README.md

743d562

ssbarnea force-pushed the dependabot/pip/dot-config/dependencies-1ede4f0502 branch from 2d369f7 to 743d562 Compare March 12, 2024 16:31

ssbarnea temporarily deployed to ack March 12, 2024 16:31 — with GitHub Actions Inactive

github-actions bot merged commit 3b731d1 into main Mar 12, 2024
17 checks passed

github-actions bot deleted the dependabot/pip/dot-config/dependencies-1ede4f0502 branch March 12, 2024 16:34

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump the dependencies group in /.config with 22 updates #197

Bump the dependencies group in /.config with 22 updates #197

dependabot bot commented on behalf of github Mar 10, 2024

v4.14.0 (2024-03-05)

dependabot bot commented on behalf of github Mar 10, 2024

Bump the dependencies group in /.config with 22 updates #197

Bump the dependencies group in /.config with 22 updates #197

Conversation

dependabot bot commented on behalf of github Mar 10, 2024

Version 7.4.3 — 2024-02-23

Version 7.4.2 — 2024-02-20

8.1.1

pytest 8.1.1 (2024-03-08)

Features

Improvements

4.14.1

What's Changed

4.14.0

What's Changed

4.13.0

What's Changed

New Contributors

v4.14.1 (2024-03-06)

v4.14.0 (2024-03-05)

v4.13.0 (2024-02-16)

1.0.1

1.0.1 - 2024-02-29

Bug Fixes

1.0.0

1.0.0 - 2024-02-27

Features

Bug Fixes

1.0.1 - 2024-02-29

Bug Fixes

1.0.0 - 2024-02-27

Features

Bug Fixes

Release 1.2.0

What's Changed

New Contributors

Release 1.1.0

What's Changed

New Contributors

mkdocs-material-9.5.13

mkdocs-material-9.5.12

mkdocs-material-9.5.11

mkdocs-material-9.5.10

2.16.1

What's Changed

2.16.0

What's Changed

New Contributors

2.15.1

What's Changed

2.15.0

What's Changed

2.14.0

What's Changed

10.7.1

Version 1.1.1

What's Changed

Version 1.1.0

What's Changed

New Contributors

1.1.1 (2024-02-29)

1.1.0 (2024-02-29)

v5.3.3 (2024-02-26)

3.1.42

What's Changed

dependabot bot commented on behalf of github Mar 10, 2024