Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Dependency updates for 2.3.0 #1154

Merged
merged 34 commits into from
Feb 24, 2025
Merged

Dependency updates for 2.3.0 #1154

merged 34 commits into from
Feb 24, 2025

Conversation

MyPyDavid
Copy link
Member

@MyPyDavid MyPyDavid commented Sep 23, 2024

Description

Dependency updates for 2.3.0

Motivation and Context

How has this been tested?

Screenshots (if appropriate)

@MyPyDavid MyPyDavid added this to the 2.2.2 milestone Sep 23, 2024
@MyPyDavid MyPyDavid self-assigned this Sep 23, 2024
@MyPyDavid MyPyDavid changed the base branch from 2.2.2 to 2.3.0 October 11, 2024 11:38
@MyPyDavid MyPyDavid changed the title Dependency updates for 2.2.2 Dependency updates for 2.3.0 Oct 11, 2024
@MyPyDavid MyPyDavid modified the milestones: RDMO 2.2.2, RDMO 2.3.0 Oct 11, 2024
@afuetterer
Copy link
Member

This needs a rebase?

These files with merge conflicts should not be part of this PR:

  • rdmo/projects/assets/js/api/ProjectsApi.js
  • rdmo/projects/assets/js/components/helper/ProjectFilters.js

@MyPyDavid
Copy link
Member Author

This needs a rebase?

These files with merge conflicts should not be part of this PR:

* rdmo/projects/assets/js/api/ProjectsApi.js

* rdmo/projects/assets/js/components/helper/ProjectFilters.js

yes, this one was rebased on the 2.2.2 but now it will go only in the 2.3.0, so far I only switched the target branch of this PR

@MyPyDavid
Copy link
Member Author

rebased to 2.3.0 without any changes

@MyPyDavid
Copy link
Member Author

rebased (interactive) again to 2.3.0

@MyPyDavid
Copy link
Member Author

there are some sass related deprecation warnings, https://github.com/sass/dart-sass/blob/main/CHANGELOG.md, sass libs need to be pinned or warnings can be silenced

@afuetterer
Copy link
Member

Maybe you want to lift this pin?

"django-mptt==0.14.0", # pinned, 0.15 requires Python >= 3.9

If rdmo now supports python >= 3.9, you can update django-mptt?

@MyPyDavid
Copy link
Member Author

Maybe you want to lift this pin?

"django-mptt==0.14.0", # pinned, 0.15 requires Python >= 3.9

If rdmo now supports python >= 3.9, you can update django-mptt?

thanks for the notice! I will check it 👀

@MyPyDavid
Copy link
Member Author

there are some sass related deprecation warnings, https://github.com/sass/dart-sass/blob/main/CHANGELOG.md, sass libs need to be pinned or warnings can be silenced

maybe the legacy sass code can be kept https://github.com/webpack-contrib/sass-loader/releases/tag/v16.0.0

@MyPyDavid
Copy link
Member Author

rebased, fixed the sass warnings and bumped mptt 0.16

@MyPyDavid
Copy link
Member Author

rebased to 2.3.0 without any changes

@MyPyDavid
Copy link
Member Author

rebased to 2.3.0, resolved conflict in rdmo/core/xml.py

pyproject.toml Outdated
"django-rest-swagger>=2.2,<3.0",
"django-settings-export>=1.2,<2.0",
"django-split-settings>=1.2,<2.0",
"django-widget-tweaks>=1.5,<2.0",
"djangorestframework>=3.15,<4.0",
"drf-extensions>=0.7.1,<1.0",
"importlib_metadata<8.5.0", # upstrem problem, see https://github.com/python/importlib_metadata/issues/506
"importlib_metadata<8.7.0", # upstrem problem, see https://github.com/python/importlib_metadata/issues/506
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Do we still need this pin? I added it, but I thought maybe they will fix it.

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

ok, now I see, this package was not even in the dependencies before it needed to be pinned. Think I'll remove it then.

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I've removed it now

@@ -2,7 +2,7 @@

from django.core.exceptions import ValidationError

from rest_framework.exceptions import ValidationError as RestFameworkValidationError
from rest_framework.exceptions import ValidationError as RestFrameworkValidationError
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Nice typo!

@MyPyDavid
Copy link
Member Author

rebased to 2.3.0 without any changes

dependabot bot and others added 25 commits February 24, 2025 09:28
---
updated-dependencies:
- dependency-name: django-cleanup
  dependency-type: direct:production
  dependency-group: django
- dependency-name: django-allauth[openid,socialaccount]
  dependency-type: direct:production
  dependency-group: django
...

Signed-off-by: dependabot[bot] <[email protected]>
---
updated-dependencies:
- dependency-name: django-allauth[openid,socialaccount]
  dependency-type: direct:production
  dependency-group: django
...

Signed-off-by: dependabot[bot] <[email protected]>
Bumps the webpack group with 1 update: [webpack](https://github.com/webpack/webpack).


Updates `webpack` from 5.95.0 to 5.96.0
- [Release notes](https://github.com/webpack/webpack/releases)
- [Commits](webpack/webpack@v5.95.0...v5.96.0)

---
updated-dependencies:
- dependency-name: webpack
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: webpack
...

Signed-off-by: dependabot[bot] <[email protected]>
Bumps the babel group with 3 updates: [@babel/core](https://github.com/babel/babel/tree/HEAD/packages/babel-core), [@babel/preset-env](https://github.com/babel/babel/tree/HEAD/packages/babel-preset-env) and [@babel/preset-react](https://github.com/babel/babel/tree/HEAD/packages/babel-preset-react).


Updates `@babel/core` from 7.25.2 to 7.26.0
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v7.26.0/packages/babel-core)

Updates `@babel/preset-env` from 7.25.3 to 7.26.0
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v7.26.0/packages/babel-preset-env)

Updates `@babel/preset-react` from 7.24.1 to 7.25.9
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v7.25.9/packages/babel-preset-react)

---
updated-dependencies:
- dependency-name: "@babel/core"
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: babel
- dependency-name: "@babel/preset-env"
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: babel
- dependency-name: "@babel/preset-react"
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: babel
...

Signed-off-by: dependabot[bot] <[email protected]>
Bumps the react group with 1 update: [react-datepicker](https://github.com/Hacker0x01/react-datepicker).

Updates `react-datepicker` from 7.3.0 to 7.5.0
- [Release notes](https://github.com/Hacker0x01/react-datepicker/releases)
- [Commits](Hacker0x01/react-datepicker@v7.3.0...v7.5.0)

---
updated-dependencies:
- dependency-name: react-datepicker
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: react
...

Signed-off-by: dependabot[bot] <[email protected]>
# Conflicts:
#	package.json
Bumps the github-actions group with 1 update: [coverallsapp/github-action](https://github.com/coverallsapp/github-action).


Updates `coverallsapp/github-action` from 2.3.0 to 2.3.4
- [Release notes](https://github.com/coverallsapp/github-action/releases)
- [Commits](coverallsapp/github-action@643bc37...cfd0633)

---
updated-dependencies:
- dependency-name: coverallsapp/github-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <[email protected]>
Bumps the eslint group with 1 update in the / directory: [eslint-plugin-react](https://github.com/jsx-eslint/eslint-plugin-react).


Updates `eslint-plugin-react` from 7.36.1 to 7.37.2
- [Release notes](https://github.com/jsx-eslint/eslint-plugin-react/releases)
- [Changelog](https://github.com/jsx-eslint/eslint-plugin-react/blob/master/CHANGELOG.md)
- [Commits](jsx-eslint/eslint-plugin-react@v7.36.1...v7.37.2)

---
updated-dependencies:
- dependency-name: eslint-plugin-react
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: eslint
...

Signed-off-by: dependabot[bot] <[email protected]>
updates:
- [github.com/astral-sh/ruff-pre-commit: v0.6.9 → v0.7.2](astral-sh/ruff-pre-commit@v0.6.9...v0.7.2)
- [github.com/pre-commit/mirrors-eslint: v9.12.0 → v9.14.0](pre-commit/mirrors-eslint@v9.12.0...v9.14.0)
- [github.com/crate-ci/typos: v1.26.0 → v1.27.0](crate-ci/typos@v1.26.0...v1.27.0)
Bumps the dev-dependencies group with 1 update in the / directory: [sass](https://github.com/sass/dart-sass).


Updates `sass` from 1.79.3 to 1.81.0
- [Release notes](https://github.com/sass/dart-sass/releases)
- [Changelog](https://github.com/sass/dart-sass/blob/main/CHANGELOG.md)
- [Commits](sass/dart-sass@1.79.3...1.81.0)

---
updated-dependencies:
- dependency-name: sass
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>
Updates the requirements on [pre-commit](https://github.com/pre-commit/pre-commit), [django-auth-ldap](https://github.com/django-auth-ldap/django-auth-ldap), [pytest-cov](https://github.com/pytest-dev/pytest-cov) and [pytest-playwright](https://github.com/microsoft/playwright-pytest) to permit the latest version.

Updates `pre-commit` to 4.0.1
- [Release notes](https://github.com/pre-commit/pre-commit/releases)
- [Changelog](https://github.com/pre-commit/pre-commit/blob/main/CHANGELOG.md)
- [Commits](pre-commit/pre-commit@v3.4.0...v4.0.1)

Updates `django-auth-ldap` to 5.1.0
- [Release notes](https://github.com/django-auth-ldap/django-auth-ldap/releases)
- [Changelog](https://github.com/django-auth-ldap/django-auth-ldap/blob/master/docs/changes.rst)
- [Commits](django-auth-ldap/django-auth-ldap@4.5.0...5.1.0)

Updates `pytest-cov` to 6.0.0
- [Changelog](https://github.com/pytest-dev/pytest-cov/blob/master/CHANGELOG.rst)
- [Commits](pytest-dev/pytest-cov@v4.1.0...v6.0.0)

Updates `pytest-playwright` to 0.6.2
- [Release notes](https://github.com/microsoft/playwright-pytest/releases)
- [Commits](microsoft/playwright-pytest@v0.4.3...v0.6.2)

---
updated-dependencies:
- dependency-name: pre-commit
  dependency-type: direct:production
  dependency-group: optional
- dependency-name: django-auth-ldap
  dependency-type: direct:production
  dependency-group: optional
- dependency-name: pytest-cov
  dependency-type: direct:production
  dependency-group: optional
- dependency-name: pytest-playwright
  dependency-type: direct:production
  dependency-group: optional
...

Signed-off-by: dependabot[bot] <[email protected]>
---
updated-dependencies:
- dependency-name: django-allauth[openid,socialaccount]
  dependency-type: direct:production
  dependency-group: django
...

Signed-off-by: dependabot[bot] <[email protected]>
Updates the requirements on [wheel](https://github.com/pypa/wheel) to permit the latest version.
- [Release notes](https://github.com/pypa/wheel/releases)
- [Changelog](https://github.com/pypa/wheel/blob/main/docs/news.rst)
- [Commits](pypa/wheel@0.42.0...0.45.1)

---
updated-dependencies:
- dependency-name: wheel
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <[email protected]>
Bumps the webpack group with 2 updates: [webpack](https://github.com/webpack/webpack) and [webpack-cli](https://github.com/webpack/webpack-cli).


Updates `webpack` from 5.96.0 to 5.97.1
- [Release notes](https://github.com/webpack/webpack/releases)
- [Commits](webpack/webpack@v5.96.0...v5.97.1)

Updates `webpack-cli` from 5.1.4 to 6.0.1
- [Release notes](https://github.com/webpack/webpack-cli/releases)
- [Changelog](https://github.com/webpack/webpack-cli/blob/master/CHANGELOG.md)
- [Commits](https://github.com/webpack/webpack-cli/compare/[email protected]@6.0.1)

---
updated-dependencies:
- dependency-name: webpack
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: webpack
- dependency-name: webpack-cli
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: webpack
...

Signed-off-by: dependabot[bot] <[email protected]>
Bumps the babel group with 2 updates: [@babel/cli](https://github.com/babel/babel/tree/HEAD/packages/babel-cli) and [@babel/preset-react](https://github.com/babel/babel/tree/HEAD/packages/babel-preset-react).


Updates `@babel/cli` from 7.25.6 to 7.26.4
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v7.26.4/packages/babel-cli)

Updates `@babel/preset-react` from 7.25.9 to 7.26.3
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v7.26.3/packages/babel-preset-react)

---
updated-dependencies:
- dependency-name: "@babel/cli"
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: babel
- dependency-name: "@babel/preset-react"
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: babel
...

Signed-off-by: dependabot[bot] <[email protected]>
Bumps the dev-dependencies group with 1 update in the / directory: [sass](https://github.com/sass/dart-sass).


Updates `sass` from 1.81.0 to 1.83.1
- [Release notes](https://github.com/sass/dart-sass/releases)
- [Changelog](https://github.com/sass/dart-sass/blob/main/CHANGELOG.md)
- [Commits](sass/dart-sass@1.81.0...1.83.1)

---
updated-dependencies:
- dependency-name: sass
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>
Updates the requirements on [twine](https://github.com/pypa/twine) to permit the latest version.
- [Release notes](https://github.com/pypa/twine/releases)
- [Changelog](https://github.com/pypa/twine/blob/main/docs/changelog.rst)
- [Commits](pypa/twine@v5.1.1...6.1.0)

---
updated-dependencies:
- dependency-name: twine
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <[email protected]>
Updates the requirements on [importlib-metadata](https://github.com/python/importlib_metadata) to permit the latest version.
- [Release notes](https://github.com/python/importlib_metadata/releases)
- [Changelog](https://github.com/python/importlib_metadata/blob/main/NEWS.rst)
- [Commits](python/importlib_metadata@0.1...v8.6.1)

---
updated-dependencies:
- dependency-name: importlib-metadata
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <[email protected]>
Updates the requirements on [pytest-github-actions-annotate-failures](https://github.com/pytest-dev/pytest-github-actions-annotate-failures) and [pytest-playwright](https://github.com/microsoft/playwright-pytest) to permit the latest version.

Updates `pytest-github-actions-annotate-failures` to 0.3.0
- [Release notes](https://github.com/pytest-dev/pytest-github-actions-annotate-failures/releases)
- [Changelog](https://github.com/pytest-dev/pytest-github-actions-annotate-failures/blob/main/CHANGELOG.md)
- [Commits](pytest-dev/pytest-github-actions-annotate-failures@v0.2.0...v0.3.0)

Updates `pytest-playwright` to 0.7.0
- [Release notes](https://github.com/microsoft/playwright-pytest/releases)
- [Commits](microsoft/playwright-pytest@v0.4.3...v0.7.0)

---
updated-dependencies:
- dependency-name: pytest-github-actions-annotate-failures
  dependency-type: direct:production
  dependency-group: optional
- dependency-name: pytest-playwright
  dependency-type: direct:production
  dependency-group: optional
...

Signed-off-by: dependabot[bot] <[email protected]>
Bumps the github-actions group with 1 update: [coverallsapp/github-action](https://github.com/coverallsapp/github-action).


Updates `coverallsapp/github-action` from 2.3.4 to 2.3.6
- [Release notes](https://github.com/coverallsapp/github-action/releases)
- [Commits](coverallsapp/github-action@cfd0633...648a8eb)

---
updated-dependencies:
- dependency-name: coverallsapp/github-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <[email protected]>
@MyPyDavid MyPyDavid merged commit 24e970c into 2.3.0 Feb 24, 2025
19 checks passed
@MyPyDavid MyPyDavid deleted the dependency-updates branch February 24, 2025 12:12
@afuetterer
Copy link
Member

Maybe this line can be removed as well?

- dependency-name: django-mptt # pinned, 0.15 requires Python >= 3.9

@MyPyDavid
Copy link
Member Author

Maybe this line can be removed as well?

- dependency-name: django-mptt # pinned, 0.15 requires Python >= 3.9

thanks, yes, even though there probably won't be so many updates ;) I'll make a new PR for the dependencies, maybe some updates come at the start of the month again.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants