Bump the dependencies group in /.config with 21 updates #203

dependabot · 2024-04-14T01:07:28Z

Bumps the dependencies group in /.config with 21 updates:

Package	From	To
build	`1.1.1`	`1.2.1`
coverage	`7.4.3`	`7.4.4`
docutils	`0.20.1`	`0.21.1`
filelock	`3.13.1`	`3.13.4`
gitpython	`3.1.42`	`3.1.43`
idna	`3.6`	`3.7`
importlib-metadata	`7.0.2`	`7.1.0`
jaraco-classes	`3.3.1`	`3.4.0`
keyring	`24.3.1`	`25.1.0`
markdown	`3.5.2`	`3.6`
mkdocs-material	`9.5.13`	`9.5.17`
nh3	`0.2.15`	`0.2.17`
packaging	`23.2`	`24.0`
pillow	`10.2.0`	`10.3.0`
pipdeptree	`2.16.1`	`2.18.1`
pycparser	`2.21`	`2.22`
pytest-plus	`0.6.1`	`0.7.0`
tox	`4.14.1`	`4.14.2`
typer	`0.9.0`	`0.12.3`
typing-extensions	`4.10.0`	`4.11.0`
zipp	`3.17.0`	`3.18.1`

Updates build from 1.1.1 to 1.2.1

Release notes

Sourced from build's releases.

Version 1.2.1

What's Changed

Avoid error when terminal width is undetectable on Python < 3.11 (PR #761)

Full Changelog: pypa/build@1.2.0...1.2.1

Version 1.2.0

What's Changed

Add --installer option, supporting pip and uv. Added uv extra. (PR #751)

Improve console output and provide -v for dependency installation (PR #749)

Avoid compiling unused bytecode when using pip (PR #752)

Dropped support for Python 3.7 (PR #743)

Full Changelog: pypa/build@1.1.1...1.2.0

Changelog

Sourced from build's changelog.

1.2.1 (2024-03-28)

Avoid error when terminal width is undetectable on Python < 3.11 (PR :pr:761)

1.2.0 (2024-03-27)

Add --installer option, supporting pip and uv. Added uv extra. (PR :pr:751)

Improve console output and provide -v for dependency installation (PR :pr:749)

Avoid compiling unused bytecode when using pip (PR :pr:752)

Dropped support for Python 3.7 (PR :pr:743)

Commits

1e67c06 chore: bump version number to 1.2.1
e5072e3 fix: support min width not detectable (#761)
d5fb6fb chore: prepare for 1.2.0 (#758)
1ae6eb1 pre-commit: bump repositories (#757)
a1f005d pre-commit: bump repositories (#756)
5076a56 uv: support double verbosity flag
5662669 chore: bump mypy
24c513d chore: reformat using Black 2024 style
08cdb76 ruff: bump version and update config
97ea57b perf: avoid compiling unused bytecode (#752)
Additional commits viewable in compare view

Updates coverage from 7.4.3 to 7.4.4

Changelog

Sourced from coverage's changelog.

Version 7.4.4 — 2024-03-14

Fix: in some cases, even with [run] relative_files=True, a data file could be created with absolute path names. When combined with other relative data files, it was random whether the absolute file names would be made relative or not. If they weren't, then a file would be listed twice in reports, as detailed in issue 1752_. This is now fixed: absolute file names are always made relative when combining. Thanks to Bruno Rodrigues dos Santos for support.

Fix: the last case of a match/case statement had an incorrect message if the branch was missed. It said the pattern never matched, when actually the branch is missed if the last case always matched.

Fix: clicking a line number in the HTML report now positions more accurately.

Fix: the report:format setting was defined as a boolean, but should be a string. Thanks, Tanaydin Sirin <pull 1754_>_. It is also now documented on the :ref:configuration page <config_report_format>.

.. _issue 1752: nedbat/coveragepy#1752 .. _pull 1754: nedbat/coveragepy#1754

.. _changes_7-4-3:

Commits

bc5e2d7 docs: sample HTML for 7.4.4
9b0008b docs: prep for 7.4.4
a536161 docs: thanks, Bruno Rodrigues dos Santos
e06e4f9 chore: make doc_upgrade
f30818e chore: make upgrade
1b19799 fix: ensure absolute paths are relative when combined #1752
1ef020d build: more cheats for convenient URLs
3d57a07 docs: document the report:format setting
8e30221 fix: correct the type of report:format in config.py (#1754)
6289be8 refactor: use dataclasses, no namedtuple
Additional commits viewable in compare view

Updates docutils from 0.20.1 to 0.21.1

Updates filelock from 3.13.1 to 3.13.4

Release notes

Sourced from filelock's releases.

3.13.4

What's Changed

Raise error on incompatible singleton timeout and mode args by @nefrob in tox-dev/filelock#320

Full Changelog: tox-dev/filelock@3.13.3...3.13.4

3.13.3

What's Changed

Make singleton class instance dict unique per subclass by @nefrob in tox-dev/filelock#318

Full Changelog: tox-dev/filelock@3.13.2...3.13.3

3.13.2

What's Changed

Fixed small typo in _unix.py by @snemes in tox-dev/filelock#302

Update SECURITY.md to reflect Python 3.7 support dropoff by @kemzeb in tox-dev/filelock#304

Update index.rst to improve the demo usage by @youkaichao in tox-dev/filelock#314

[BugFix] fix permission denied error when lock file is placed in /tmp by @kota-iizuka in tox-dev/filelock#317

New Contributors

@snemes made their first contribution in tox-dev/filelock#302

@kemzeb made their first contribution in tox-dev/filelock#304

@youkaichao made their first contribution in tox-dev/filelock#314

@kota-iizuka made their first contribution in tox-dev/filelock#317

Full Changelog: tox-dev/filelock@3.13.1...3.13.2

Commits

000a3fa Raise error on incompatible singleton timeout and mode args (#320)
312fb4e [pre-commit.ci] pre-commit autoupdate (#321)
f50a337 [pre-commit.ci] pre-commit autoupdate (#319)
3f6df70 Make singleton class instance dict unique per subclass (#318)
9a64375 [BugFix] fix permission denied error when lock file is placed in /tmp (#317)
e2f121b Update index.rst to improve the demo usage (#314)
a46ea71 [pre-commit.ci] pre-commit autoupdate (#312)
766e12d [pre-commit.ci] pre-commit autoupdate (#311)
f641eb6 Bump pypa/gh-action-pypi-publish from 1.8.12 to 1.8.14 (#310)
9048580 Bump pypa/gh-action-pypi-publish from 1.8.11 to 1.8.12 (#308)
Additional commits viewable in compare view

Updates gitpython from 3.1.42 to 3.1.43

Release notes

Sourced from gitpython's releases.

3.1.43

Particularly Important Changes

These are likely to affect you, please do take a careful look.

Issue and test deprecation warnings by @EliahKagan in gitpython-developers/GitPython#1886

Fix version_info cache invalidation, typing, parsing, and serialization by @EliahKagan in gitpython-developers/GitPython#1838

Document manual refresh path treatment by @EliahKagan in gitpython-developers/GitPython#1839

Improve static typing and docstrings related to git object types by @EliahKagan in gitpython-developers/GitPython#1859

Other Changes

Test in Docker with Alpine Linux on CI by @EliahKagan in gitpython-developers/GitPython#1826

Build online docs (RTD) with -W and dependencies by @EliahKagan in gitpython-developers/GitPython#1843

Suggest full-path refresh() in failure message by @EliahKagan in gitpython-developers/GitPython#1844

repo.blame and repo.blame_incremental now accept None as the rev parameter. by @Gaubbe in gitpython-developers/GitPython#1846

Make sure diff always uses the default diff driver when create_patch=True by @can-taslicukur in gitpython-developers/GitPython#1832

Revise docstrings, comments, and a few messages by @EliahKagan in gitpython-developers/GitPython#1850

Expand what is included in the API Reference by @EliahKagan in gitpython-developers/GitPython#1855

Restore building of documentation downloads by @EliahKagan in gitpython-developers/GitPython#1856

Revise type annotations slightly by @EliahKagan in gitpython-developers/GitPython#1860

Updating regex pattern to handle unicode whitespaces. by @jcole-crowdstrike in gitpython-developers/GitPython#1853

Use upgraded pip in test fixture virtual environment by @EliahKagan in gitpython-developers/GitPython#1864

lint: replace flake8 with ruff check by @Borda in gitpython-developers/GitPython#1862

lint: switch Black with ruff-format by @Borda in gitpython-developers/GitPython#1865

Update readme and tox.ini for recent tooling changes by @EliahKagan in gitpython-developers/GitPython#1868

Split tox lint env into three envs, all safe by @EliahKagan in gitpython-developers/GitPython#1870

Slightly broaden Ruff, and update and clarify tool configuration by @EliahKagan in gitpython-developers/GitPython#1871

Add a "doc" extra for documentation build dependencies by @EliahKagan in gitpython-developers/GitPython#1872

Describe Submodule.__init__ parent_commit parameter by @EliahKagan in gitpython-developers/GitPython#1877

Include TagObject in git.types.Tree_ish by @EliahKagan in gitpython-developers/GitPython#1878

Improve Sphinx role usage, including linking Git manpages by @EliahKagan in gitpython-developers/GitPython#1879

Replace all wildcard imports with explicit imports by @EliahKagan in gitpython-developers/GitPython#1880

Clarify how tag objects are usually tree-ish and commit-ish by @EliahKagan in gitpython-developers/GitPython#1881

New Contributors

@Gaubbe made their first contribution in gitpython-developers/GitPython#1846

@can-taslicukur made their first contribution in gitpython-developers/GitPython#1832

@jcole-crowdstrike made their first contribution in gitpython-developers/GitPython#1853

@Borda made their first contribution in gitpython-developers/GitPython#1862

Full Changelog: gitpython-developers/GitPython@3.1.42...3.1.43

Commits

5364053 bump version to 3.1.43
4e626bd Merge pull request #1886 from EliahKagan/deprecation-warnings
f6060df Add GitMeta alias
8327b45 Test GitMeta alias
f92f4c3 Clarify security risk in USE_SHELL doc and warnings
c7675d2 update security policy, to use GitHub instead of email
cf2576e Make/use test.deprecation.lib; abandon idea to filter by module
7cd3aa9 Make test.performance.lib docstring more specific
b51b080 Explain the approach in test.deprecation to static checking
bdabb21 Expand USE_SHELL docstring; clarify a test usage
Additional commits viewable in compare view

Updates idna from 3.6 to 3.7

Release notes

Sourced from idna's releases.

v3.7

What's Changed

Fix issue where specially crafted inputs to encode() could take exceptionally long amount of time to process. [CVE-2024-3651]

Thanks to Guido Vranken for reporting the issue.

Full Changelog: kjd/idna@v3.6...v3.7

Changelog

Sourced from idna's changelog.

3.7 (2024-04-11) ++++++++++++++++

Fix issue where specially crafted inputs to encode() could take exceptionally long amount of time to process. [CVE-2024-3651]

Thanks to Guido Vranken for reporting the issue.

Commits

1d365e1 Release v3.7
c1b3154 Merge pull request #172 from kjd/optimize-contextj
0394ec7 Merge branch 'master' into optimize-contextj
cd58a23 Merge pull request #152 from elliotwutingfeng/dev
5beb28b More efficient resolution of joiner contexts
1b12148 Update ossf/scorecard-action to v2.3.1
d516b87 Update Github actions/checkout to v4
c095c75 Merge branch 'master' into dev
60a0a4c Fix typo in GitHub Actions workflow key
5918a0e Merge branch 'master' into dev
Additional commits viewable in compare view

Updates importlib-metadata from 7.0.2 to 7.1.0

Changelog

Sourced from importlib-metadata's changelog.

v7.1.0

Features

python/cpython#114664

Bugfixes

Make MetadataPathFinder.find_distributions a classmethod for consistency with CPython. Closes #484. (#484)

Allow MetadataPathFinder.invalidate_caches to be called as a classmethod.

Commits

f5d6b5f Finalize
2ef3b5f Merge commit '1711b2c198'
1711b2c Need to include names from test.support for py312 compat.
47b14ac Make MetadataPathFinder.find_distributions a classmethod for consistency with...
adc4b12 Ensure tests do not leak references in sys.modules.
07d894d Copy backport of isolated_modules from importlib_resources.
e30a16d Consolidated test support logic in jaraco.test.cpython.
41ca039 Moved compatibility tests to the compat package, as they're not included in C...
5950f43 Remove legacy logic for Python 3.7.
ffa719b Moved compatibility module to compat package.
Additional commits viewable in compare view

Updates jaraco-classes from 3.3.1 to 3.4.0

Changelog

Sourced from jaraco-classes's changelog.

v3.4.0

Features

Better type hints for NonDataProperty. (#13)

Commits

0b64201 Fix failing docs build.
d79d074 Merge https://github.com/jaraco/skeleton
3fc7a93 Move Python 3.11 out of the test matrix.
071a6eb Finalize
458db61 Merge https://github.com/jaraco/skeleton
c43b87f Add news fragment.
aa9e788 better type hints for NonDataProperty (#13)
d72c6a0 Fetch unshallow clones in readthedocs. Closes jaraco/skeleton#114.
c9a7f97 Re-enable ignoring of temporary merge queue branches. Closes jaraco/skeleton#...
a0d0c4bjaraco/skeleton#111
Additional commits viewable in compare view

Updates keyring from 24.3.1 to 25.1.0

Changelog

Sourced from keyring's changelog.

v25.1.0

Features

Replace ExceptionRaisedContext with ExceptionTrap.

v25.0.1

Bugfixes

When completion is unavailable, exit with non-zero status and emit message to stderr. (#671)

v25.0.0

Deprecations and Removals

Removed check for config in XDG_DATA_HOME on Linux systems. (#99)

In platform config support, remove support for Windows XP, now 10 years sunset.

Commits

437c167 Finalize
3e8134a Merge pull request #672 from jaraco/feature/exception-trap
2ecc667 Finalize
a2aa173 When completion is unavailable, exit with non-zero status and emit message to...
04bdbd3 Move Python 3.8 compatibility logic into the compat package.
07fab63 Inject the current directory to sys.path in multiprocessing tests. Closes #67...
33ad6a5 Remove test skip, no longer relevant with Python 3.8 minimum.
a85a7cb Replace ExceptionRaisedContext with ExceptionTrap.
1899770 Merge https://github.com/jaraco/skeleton
6ff02e0 Configure pytest to support namespace packages. Ref pytest-dev/pytest#12112.
Additional commits viewable in compare view

Updates markdown from 3.5.2 to 3.6

Release notes

Sourced from markdown's releases.

Release 3.6

Changed

Refactor TOC Sanitation

All postprocessors are now run on heading content.

Footnote references are now stripped from heading content. Fixes #660.

A more robust striptags is provided to convert headings to plain text. Unlike, the markupsafe implementation, HTML entities are not unescaped.

The plain text name, rich html, and unescaped raw data-toc-label are saved to toc_tokens, allowing users to access the full rich text content of the headings directly from toc_tokens.

The value of data-toc-label is sanitized separate from heading content before being written to name. This fixes a bug which allowed markup through in certain circumstances. To access the raw unsanitized data, retrieve the value from token['data-toc-label'] directly.

An html.unescape call is made just prior to calling slugify so that slugify only operates on Unicode characters. Note that html.unescape is not run on name, html, or data-toc-label.

The functions get_name and stashedHTML2text defined in the toc extension are both deprecated. Instead, third party extensions should use some combination of the new functions run_postprocessors, render_inner_html and striptags.

Fixed

Include scripts/*.py in the generated source tarballs (#1430).

Ensure lines after heading in loose list are properly detabbed (#1443).

Give smarty tree processor higher priority than toc (#1440).

Permit carets (^) and square brackets (]) but explicitly exclude backslashes (\) from abbreviations (#1444).

In attribute lists (attr_list, fenced_code), quoted attribute values are now allowed to contain curly braces (}) (#1414).

Changelog

Sourced from markdown's changelog.

[3.6] -- 2024-03-14

Changed

Refactor TOC Sanitation

All postprocessors are now run on heading content.

Footnote references are now stripped from heading content. Fixes #660.

A more robust striptags is provided to convert headings to plain text. Unlike, the markupsafe implementation, HTML entities are not unescaped.

The plain text name, rich html, and unescaped raw data-toc-label are saved to toc_tokens, allowing users to access the full rich text content of the headings directly from toc_tokens.

The value of data-toc-label is sanitized separate from heading content before being written to name. This fixes a bug which allowed markup through in certain circumstances. To access the raw unsanitized data, retrieve the value from token['data-toc-label'] directly.

An html.unescape call is made just prior to calling slugify so that slugify only operates on Unicode characters. Note that html.unescape is not run on name, html, or data-toc-label.

The functions get_name and stashedHTML2text defined in the toc extension are both deprecated. Instead, third party extensions should use some combination of the new functions run_postprocessors, render_inner_html and striptags.

Fixed

Include scripts/*.py in the generated source tarballs (#1430).

Ensure lines after heading in loose list are properly detabbed (#1443).

Give smarty tree processor higher priority than toc (#1440).

Permit carets (^) and square brackets (]) but explicitly exclude backslashes (\) from abbreviations (#1444).

In attribute lists (attr_list, fenced_code), quoted attribute values are now allowed to contain curly braces (}) (#1414).

Commits

e524b8f Bump version to 3.6
3d8afc6 Allow attr_list quoted values to contain curly braces
9edba85 Refactor abbr escaping
e4ab4a6 Refactor TOC sanitation
a18765c Explicitly omit carot and backslash from abbr
421f1e8 Give smarty tree processor higher priority than toc
c334a3e Ensure lines after heading in loose list are properly detabbed
ea92856 Update the license template so GitHub can detect it
a2effd6 Disable mkdocstrings show_symbol_type_toc option to work around searching iss...
91f9a12 Restore Attribute symbol type in mkdocstrings template
Additional commits viewable in compare view

Updates mkdocs-material from 9.5.13 to 9.5.17

Release notes

Sourced from mkdocs-material's releases.

mkdocs-material-9.5.17

Updated Serbian translations

Fixed #7003: Confusing keyboard interaction for palette toggle

Fixed #7001: Blog posts now show time by default (9.5.16 regression)

Fixed edge case in backport of social plugin font loading logic

Thanks to @stcksmsh for their contributions.

mkdocs-material-9.5.16

Updated Russian translations

Improved error handling and reporting in social plugin

Improved error handling and reporting in privacy plugin

Fixed blog plugin not allowing to use time in format strings

Fixed #6983: Social plugin crashes because of Google Fonts API change

Thanks to @kamilkrzyskow, @Guts, @szg-alex-payne and @natakazakova for their contributions

mkdocs-material-9.5.15

Reverted fix for transparent iframes (9.5.14)

Fixed #6929: Interference of social plugin and auto dark mode

Fixed #6938: Giscus shows dark background in light mode (9.5.14 regression)

mkdocs-material-9.5.14

Added support for hiding versions from selector when using mike

Added init system to improve signal handling in Docker image

Fixed edge cases in exclusion logic of info plugin

Fixed inability to reset pipeline in search plugin

Fixed syntax error in Finnish translations

Fixed #6917: UTF-8 encoding problems in blog plugin on Windows

Fixed #6889: Transparent iframes get background color

Thanks to @kamilkrzyskow, @yubiuser and @todeveni for their contributions

Changelog

Sourced from mkdocs-material's changelog.

mkdocs-material-9.5.17+insiders-4.53.6 (2024-04-05)

Ensure working directory is set for projects when using projects plugin

Fixed #6970: Incorrect relative paths in git submodules with projects plugin

mkdocs-material-9.5.17+insiders-4.53.5 (2024-04-02)

Fixed social plugin crashing when no colors are specified in palettes

mkdocs-material-9.5.17 (2024-04-02)

Updated Serbian translations

Fixed #7003: Confusing keyboard interaction for palette toggle

Fixed #7001: Blog posts now show time by default (9.5.16 regression)

Fixed edge case in backport of social plugin font loading logic

mkdocs-material-9.5.16+insiders-4.53.4 (2024-03-31)

Fixed #6973: Escaping issue in tags extra files deprecation helper

mkdocs-material-9.5.16 (2024-03-31)

Updated Russian translations

Improved error handling and reporting in social plugin

Improved error handling and reporting in privacy plugin

Fixed blog plugin not allowing to use time in format strings

Fixed #6983: Social plugin crashes because of Google Fonts API change

mkdocs-material-9.5.15+insiders-4.53.3 (2024-03-23)

Added support for font variants in social plugin

Improved resilience of font resolution in social plugin

Fixed tag listing sometimes not being auto-populated

Fixed tag listing scope not being correctly resolved

Fixed #6941: Meta plugin adding duplicate entries

Fixed #6928: Social plugin crashes for some fonts

mkdocs-material-9.5.15 (2024-03-23)

Reverted fix for transparent iframes (9.5.14)

Fixed #6929: Interference of social plugin and auto dark mode

Fixed #6938: Giscus shows dark background in light mode (9.5.14 regression)

mkdocs-material-9.5.14+insiders-4.53.2 (2024-03-18)

Fixed abort on first non-matching configuration in preview extension

Fixed #6914: Meta files take precedence over front matter

mkdocs-material-9.5.14 (2024-03-18)

... (truncated)

Commits

570161a Prepare 9.5.17 release
78e93ac Improved keyboard interactions for palette toggle
a3655e8 Updated Serbian translations
1041766 Fixed time sneaking into default post format string
e741f80 Documentation
7e13ae6 Fix typos
7d6d8d7 Updated slugify documentation
e71f00b Fixed backporting of social plugin font loading logic
8956524 Updated Insiders changelog
0db4e66 Updated changelog
Additional commits viewable in compare view

Updates nh3 from 0.2.15 to 0.2.17

Release notes

Sourced from nh3's releases.

v0.2.17

What's Changed

Fix type for ALLOWED_ATTRIBUTES by @seanbudd in messense/nh3#35

Improve documentation by @lepture in messense/nh3#39

Bump ammonia from 3.3.0 to 4.0.0 by @dependabot in messense/nh3#40

New Contributors

@seanbudd made their first contribution in messense/nh3#35

@lepture made their first contribution in messense/nh3#39

Full Changelog: messense/nh3@v0.2.15...v0.2.17

Commits

9b6e7a5 Bump version to 0.2.17
84c99cd Upgrade pyo3 to 0.21
d40df61 Bump version to 0.2.16
bb84a67 Use virtualenv in musllinux tests
9bda7b8 Bump ammonia from 3.3.0 to 4.0.0 (#40)
e023d16 Improve documentation (#39)
3c0dc3a Bump pyo3 from 0.20.0 to 0.20.2 (#34)
70b1cd0 Fix type for ALLOWED_ATTRIBUTES (#35)
See full diff in compare view

Updates packaging from 23.2 to 24.0

Release notes

Sourced from packaging's releases.

24.0

What's Changed

Fix specifier matching when the specifier is long and has an epoch by @SpecLad in pypa/packaging#712

Clarify version split/join usage by @uranusjr in pypa/packaging#725

Default optional metadata values to None by @dstufft in pypa/packaging#734

Stop using deprecated/removed keys by @dstufft in pypa/packaging#739

Correctly use the ExceptionGroup shim only when needed by @dstufft in pypa/packaging#736

Update CHANGELOG entry about validate kwarg by @pradyunsg in pypa/packaging#731

Support --disable-gil builds (PEP 703) in packaging.tags by @colesbury in pypa/packaging#728

Skip test_glibc_version_string_ctypes_raise_oserror if ctypes is unavailable by @kevinchang96 in pypa/packaging#741

Enable CodeQL by @joycebrum in pypa/packaging#743

PEP 703: Rename Py_NOGIL to Py_GIL_DISABLED by @hugovk in pypa/packaging#747

Replace PEP references with PUG links by @jeanas in pypa/packaging#750

Remove coverage ignore for non-existent file by @shenanigansd in pypa/packaging#752

Update URLs by @DimitriPapadopoulos in pypa/packaging#764

Configure dependabot by @joycebrum in pypa/packaging#757

Hash pin github actions by @joycebrum in pypa/packaging#758

Apply some refurb suggestions by @DimitriPapadopoulos in pypa/packaging#763

Appply some bugbear suggestions by @DimitriPapadopoulos in pypa/packaging#761

Apply some ruff suggestions by @DimitriPapadopoulos in pypa/packaging#772

Add riscv64 as a supported manylinux architecture by @markdryan in pypa/packaging#751

New Contributors

@colesbury made their first contribution in pypa/packaging#728

@kevinchang96 made their first contribution in pypa/packaging#741

@jeanas made their first contribution in pypa/packaging#750

@shenanigansd made their first contribution in pypa/packaging#752

@markdryan made their first contribution in pypa/packaging#751

Full Changelog: pypa/packaging@23.2...24.0

Changelog

Sourced from packaging's changelog.

24.0 - 2024-03-10


* Do specifier matching correctly when the specifier contains an epoch number
  and has more components than the version (:issue:`683`)
* Support the experimental ``--disable-gil`` builds in packaging.tags
  (:issue:`727`)
* BREAKING: Make optional ``metadata.Metadata`` attributes default to ``None`` (:issue:`733`)
* Fix errors when trying to access the ``description_content_type``, ``keywords``,
  and ``requires_python`` attributes on ``metadata.Metadata`` when those values
  have not been provided (:issue:`733`)
* Fix a bug preventing the use of the built in ``ExceptionGroup`` on versions of
  Python that support it (:issue:`725`)

Commits

7a983f7 Bump for release
4d85340 Add riscv64 as a supported manylinux architecture (#751)
4dce761 Apply some ruff suggestions (#772)
57a6a7f Appply some bugbear suggestions (#761)
7bcd6d8 Apply some refurb suggestions (#763)
d0067e9 [StepSecurity] ci: Harden GitHub Actions (#1) (#758)
eae70dd feat: Create dependabot.yml (#757)
241bb35 Update URLs (#764)
7698237 Remove coverage ignore for non-existent file (#752)
b271d2b Replace PEP references with PUG links (#750)
Additional commits viewable in compare view

Updates pillow from 10.2.0 to 10.3.0

Release notes

Sourced from

Bumps the dependencies group in /.config with 21 updates: | Package | From | To | | --- | --- | --- | | [build](https://github.com/pypa/build) | `1.1.1` | `1.2.1` | | [coverage](https://github.com/nedbat/coveragepy) | `7.4.3` | `7.4.4` | | [docutils](https://docutils.sourceforge.io) | `0.20.1` | `0.21.1` | | [filelock](https://github.com/tox-dev/py-filelock) | `3.13.1` | `3.13.4` | | [gitpython](https://github.com/gitpython-developers/GitPython) | `3.1.42` | `3.1.43` | | [idna](https://github.com/kjd/idna) | `3.6` | `3.7` | | [importlib-metadata](https://github.com/python/importlib_metadata) | `7.0.2` | `7.1.0` | | [jaraco-classes](https://github.com/jaraco/jaraco.classes) | `3.3.1` | `3.4.0` | | [keyring](https://github.com/jaraco/keyring) | `24.3.1` | `25.1.0` | | [markdown](https://github.com/Python-Markdown/markdown) | `3.5.2` | `3.6` | | [mkdocs-material](https://github.com/squidfunk/mkdocs-material) | `9.5.13` | `9.5.17` | | [nh3](https://github.com/messense/nh3) | `0.2.15` | `0.2.17` | | [packaging](https://github.com/pypa/packaging) | `23.2` | `24.0` | | [pillow](https://github.com/python-pillow/Pillow) | `10.2.0` | `10.3.0` | | [pipdeptree](https://github.com/tox-dev/pipdeptree) | `2.16.1` | `2.18.1` | | [pycparser](https://github.com/eliben/pycparser) | `2.21` | `2.22` | | [pytest-plus](https://github.com/pytest-dev/pytest-plus) | `0.6.1` | `0.7.0` | | [tox](https://github.com/tox-dev/tox) | `4.14.1` | `4.14.2` | | [typer](https://github.com/tiangolo/typer) | `0.9.0` | `0.12.3` | | [typing-extensions](https://github.com/python/typing_extensions) | `4.10.0` | `4.11.0` | | [zipp](https://github.com/jaraco/zipp) | `3.17.0` | `3.18.1` | Updates `build` from 1.1.1 to 1.2.1 - [Release notes](https://github.com/pypa/build/releases) - [Changelog](https://github.com/pypa/build/blob/main/CHANGELOG.rst) - [Commits](pypa/build@1.1.1...1.2.1) Updates `coverage` from 7.4.3 to 7.4.4 - [Release notes](https://github.com/nedbat/coveragepy/releases) - [Changelog](https://github.com/nedbat/coveragepy/blob/master/CHANGES.rst) - [Commits](nedbat/coveragepy@7.4.3...7.4.4) Updates `docutils` from 0.20.1 to 0.21.1 Updates `filelock` from 3.13.1 to 3.13.4 - [Release notes](https://github.com/tox-dev/py-filelock/releases) - [Changelog](https://github.com/tox-dev/filelock/blob/main/docs/changelog.rst) - [Commits](tox-dev/filelock@3.13.1...3.13.4) Updates `gitpython` from 3.1.42 to 3.1.43 - [Release notes](https://github.com/gitpython-developers/GitPython/releases) - [Changelog](https://github.com/gitpython-developers/GitPython/blob/main/CHANGES) - [Commits](gitpython-developers/GitPython@3.1.42...3.1.43) Updates `idna` from 3.6 to 3.7 - [Release notes](https://github.com/kjd/idna/releases) - [Changelog](https://github.com/kjd/idna/blob/master/HISTORY.rst) - [Commits](kjd/idna@v3.6...v3.7) Updates `importlib-metadata` from 7.0.2 to 7.1.0 - [Release notes](https://github.com/python/importlib_metadata/releases) - [Changelog](https://github.com/python/importlib_metadata/blob/main/NEWS.rst) - [Commits](python/importlib_metadata@v7.0.2...v7.1.0) Updates `jaraco-classes` from 3.3.1 to 3.4.0 - [Release notes](https://github.com/jaraco/jaraco.classes/releases) - [Changelog](https://github.com/jaraco/jaraco.classes/blob/main/NEWS.rst) - [Commits](jaraco/jaraco.classes@v3.3.1...v3.4.0) Updates `keyring` from 24.3.1 to 25.1.0 - [Release notes](https://github.com/jaraco/keyring/releases) - [Changelog](https://github.com/jaraco/keyring/blob/main/NEWS.rst) - [Commits](jaraco/keyring@v24.3.1...v25.1.0) Updates `markdown` from 3.5.2 to 3.6 - [Release notes](https://github.com/Python-Markdown/markdown/releases) - [Changelog](https://github.com/Python-Markdown/markdown/blob/master/docs/changelog.md) - [Commits](Python-Markdown/markdown@3.5.2...3.6) Updates `mkdocs-material` from 9.5.13 to 9.5.17 - [Release notes](https://github.com/squidfunk/mkdocs-material/releases) - [Changelog](https://github.com/squidfunk/mkdocs-material/blob/master/CHANGELOG) - [Commits](squidfunk/mkdocs-material@9.5.13...9.5.17) Updates `nh3` from 0.2.15 to 0.2.17 - [Release notes](https://github.com/messense/nh3/releases) - [Commits](messense/nh3@v0.2.15...v0.2.17) Updates `packaging` from 23.2 to 24.0 - [Release notes](https://github.com/pypa/packaging/releases) - [Changelog](https://github.com/pypa/packaging/blob/main/CHANGELOG.rst) - [Commits](pypa/packaging@23.2...24.0) Updates `pillow` from 10.2.0 to 10.3.0 - [Release notes](https://github.com/python-pillow/Pillow/releases) - [Changelog](https://github.com/python-pillow/Pillow/blob/main/CHANGES.rst) - [Commits](python-pillow/Pillow@10.2.0...10.3.0) Updates `pipdeptree` from 2.16.1 to 2.18.1 - [Release notes](https://github.com/tox-dev/pipdeptree/releases) - [Commits](tox-dev/pipdeptree@2.16.1...2.18.1) Updates `pycparser` from 2.21 to 2.22 - [Release notes](https://github.com/eliben/pycparser/releases) - [Changelog](https://github.com/eliben/pycparser/blob/main/CHANGES) - [Commits](eliben/pycparser@release_v2.21...release_v2.22) Updates `pytest-plus` from 0.6.1 to 0.7.0 - [Release notes](https://github.com/pytest-dev/pytest-plus/releases) - [Commits](pytest-dev/pytest-plus@v0.6.1...v0.7.0) Updates `tox` from 4.14.1 to 4.14.2 - [Release notes](https://github.com/tox-dev/tox/releases) - [Changelog](https://github.com/tox-dev/tox/blob/main/docs/changelog.rst) - [Commits](tox-dev/tox@4.14.1...4.14.2) Updates `typer` from 0.9.0 to 0.12.3 - [Release notes](https://github.com/tiangolo/typer/releases) - [Changelog](https://github.com/tiangolo/typer/blob/master/docs/release-notes.md) - [Commits](fastapi/typer@0.9.0...0.12.3) Updates `typing-extensions` from 4.10.0 to 4.11.0 - [Release notes](https://github.com/python/typing_extensions/releases) - [Changelog](https://github.com/python/typing_extensions/blob/main/CHANGELOG.md) - [Commits](python/typing_extensions@4.10.0...4.11.0) Updates `zipp` from 3.17.0 to 3.18.1 - [Release notes](https://github.com/jaraco/zipp/releases) - [Changelog](https://github.com/jaraco/zipp/blob/main/NEWS.rst) - [Commits](jaraco/zipp@v3.17.0...v3.18.1) --- updated-dependencies: - dependency-name: build dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: coverage dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: docutils dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: filelock dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: gitpython dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: idna dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: importlib-metadata dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: jaraco-classes dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: keyring dependency-type: direct:production update-type: version-update:semver-major dependency-group: dependencies - dependency-name: markdown dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: mkdocs-material dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: nh3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: packaging dependency-type: direct:production update-type: version-update:semver-major dependency-group: dependencies - dependency-name: pillow dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: pipdeptree dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: pycparser dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: pytest-plus dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: tox dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: typer dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: typing-extensions dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: zipp dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies ... Signed-off-by: dependabot[bot] <[email protected]>

dependabot · 2024-04-14T01:07:31Z

The following labels could not be found: dependabot-deps-updates.

dependabot · 2024-04-21T01:17:36Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot bot requested a review from ssbarnea as a code owner April 14, 2024 01:07

dependabot bot added the skip-changelog label Apr 14, 2024

dependabot bot temporarily deployed to ack April 14, 2024 01:07 Inactive

dependabot bot temporarily deployed to test April 14, 2024 01:08 Inactive

dependabot bot had a problem deploying to test April 14, 2024 01:08 Failure

dependabot bot temporarily deployed to test April 14, 2024 01:08 Inactive

dependabot bot had a problem deploying to test April 14, 2024 01:08 Failure

dependabot bot temporarily deployed to test April 14, 2024 01:08 Inactive

dependabot bot had a problem deploying to test April 14, 2024 01:08 Failure

dependabot bot closed this Apr 21, 2024

dependabot bot deleted the dependabot/pip/dot-config/dependencies-6dcdc15e26 branch April 21, 2024 01:17

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump the dependencies group in /.config with 21 updates #203

Bump the dependencies group in /.config with 21 updates #203

dependabot bot commented on behalf of github Apr 14, 2024 •

edited

Loading

dependabot bot commented on behalf of github Apr 14, 2024

dependabot bot commented on behalf of github Apr 21, 2024

Bump the dependencies group in /.config with 21 updates #203

Bump the dependencies group in /.config with 21 updates #203

Conversation

dependabot bot commented on behalf of github Apr 14, 2024 • edited Loading

Version 1.2.1

What's Changed

Version 1.2.0

What's Changed

1.2.1 (2024-03-28)

1.2.0 (2024-03-27)

Version 7.4.4 — 2024-03-14

3.13.4

What's Changed

3.13.3

What's Changed

3.13.2

What's Changed

New Contributors

3.1.43

Particularly Important Changes

Other Changes

New Contributors

v3.7

What's Changed

v7.1.0

Features

Bugfixes

v3.4.0

Features

v25.1.0

Features

v25.0.1

Bugfixes

v25.0.0

Deprecations and Removals

Release 3.6

Changed

Refactor TOC Sanitation

Fixed

[3.6] -- 2024-03-14

Changed

Refactor TOC Sanitation

Fixed

mkdocs-material-9.5.17

mkdocs-material-9.5.16

mkdocs-material-9.5.15

mkdocs-material-9.5.14

v0.2.17

What's Changed

New Contributors

24.0

What's Changed

New Contributors

dependabot bot commented on behalf of github Apr 14, 2024

dependabot bot commented on behalf of github Apr 21, 2024

dependabot bot commented on behalf of github Apr 14, 2024 •

edited

Loading