Bump yarl from 1.9.2 to 1.9.3

[dependabot]

Bumps yarl from 1.9.2 to 1.9.3.

Release notes

Sourced from yarl's releases.

1.9.3

🐛 Bug fixes

• Stopped dropping trailing slashes in yarl.URL.joinpath() -- by [@​gmacon]. (#862, #866)
• Started accepting string subclasses in __truediv__() operations (URL / segment) -- by [@​mjpieters]. (#871, #884)
• Fixed the human representation of URLs with square brackets in usernames and passwords -- by @​mjpieters. (#876, #882)
• Updated type hints to include URL.missing_port(), URL.__bytes__() and the encoding argument to yarl.URL.joinpath() -- by @​mjpieters. (#891)

📦 Packaging updates and notes for downstreams

• Integrated Cython 3 to enable building yarl under Python 3.12 -- by @​mjpieters. (#829, #881)

• Added the changelog URL to the dist metadata -- by [@​scop]. (#877)

• Declared modern setuptools.build_meta as the :pep:517 build backend in pyproject.toml explicitly -- by [@​webknjaz]. (#886)

• Converted most of the packaging setup into a declarative setup.cfg config -- by @​webknjaz. (#890)

• Replaced the packaging is replaced from an old-fashioned setup.py to an in-tree :pep:517 build backend -- by @​webknjaz.

  Whenever the end-users or downstream packagers need to build yarl from source (a Git checkout or an sdist), they may pass a config_settings flag --pure-python. If this flag is not set, a C-extension will be built and included into the distribution.

  Here is how this can be done with pip:

  $ python -m pip install . --config-settings=--pure-python=

  This will also work with -e | --editable.

  The same can be achieved via pypa/build:

  $ python -m build --config-setting=--pure-python=

  Adding -w | --wheel can force pypa/build produce a wheel from source directly, as opposed to building an sdist and then building from it. (#893)

• Declared Python 3.12 supported officially in the distribution package metadata -- by [@​edgarrmondragon]. (#942)

🛠️ Contributor-facing changes

• A regression test for no-host URLs was added per #821 and RFC 3986 -- by [@​kenballus]. (#821, #822)

• Started testing yarl against Python 3.12 in CI -- by @​mjpieters. (#881)

• All Python 3.12 jobs are now marked as required to pass in CI -- by @​edgarrmondragon. (#942)

• MyST is now integrated in Sphinx -- by @​webknjaz.

  This allows the contributors to author new documents in Markdown when they have difficulties with going straight RST. (#953)

💪 New Contributors

• @​gmacon made their first contribution in aio-libs/yarl#866
• @​scop made their first contribution in aio-libs/yarl#877
• @​edgarrmondragon made their first contribution in aio-libs/yarl#942

... (truncated)

Changelog

Sourced from yarl's changelog.

1.9.3 (2023-11-20)

Bug fixes

• Stopped dropping trailing slashes in :py:meth:~yarl.URL.joinpath -- by :user:gmacon. (:issue:862, :issue:866)
• Started accepting string subclasses in __truediv__() operations (URL / segment) -- by :user:mjpieters. (:issue:871, :issue:884)
• Fixed the human representation of URLs with square brackets in usernames and passwords -- by :user:mjpieters. (:issue:876, :issue:882)
• Updated type hints to include URL.missing_port(), URL.__bytes__() and the encoding argument to :py:meth:~yarl.URL.joinpath -- by :user:mjpieters. (:issue:891)

Packaging updates and notes for downstreams

• Integrated Cython 3 to enable building yarl under Python 3.12 -- by :user:mjpieters. (:issue:829, :issue:881)

• Declared modern setuptools.build_meta as the :pep:517 build backend in :file:pyproject.toml explicitly -- by :user:webknjaz. (:issue:886)

• Converted most of the packaging setup into a declarative :file:setup.cfg config -- by :user:webknjaz. (:issue:890)

• The packaging is replaced from an old-fashioned :file:setup.py to an in-tree :pep:517 build backend -- by :user:webknjaz.

  Whenever the end-users or downstream packagers need to build yarl from source (a Git checkout or an sdist), they may pass a config_settings flag --pure-python. If this flag is not set, a C-extension will be built and included into the distribution.

  Here is how this can be done with pip:

  .. code-block:: console

  $ python -m pip install . --config-settings=--pure-python=false
  

  This will also work with -e | --editable.

  The same can be achieved via pypa/build:

  .. code-block:: console

  $ python -m build --config-setting=--pure-python=false
  

  Adding -w | --wheel can force pypa/build produce a wheel from source directly, as opposed to building an sdist and then building from it. (:issue:893)

  .. attention::

  v1.9.3 was the only version using the --pure-python setting name.

... (truncated)

Commits

• 0698dc9 ⇪📦 Release yarl v1.9.3
• 690b54c 💄 Mark the GHA workflow as CI/CD
• 1addb55 🐛🧪 Fix issue replacement in changelog @ CI
• c2ab1e9 🎨 Pass explicit --no-color to Pip in CI
• f202823 🐛🧪 Unset FORCE_COLOR on Bash level @ CI
• ef5664b 💡Use NO_COLOR to override FORCE_COLOR @ pip
• d1d9f6e Merge PR #956
• e14d10e Attempt disabling FORCE_COLOR env var w/ YAML null
• 11276e0 📦Explicitly list NOTICE @ wheel license files
• 180c2b2 🐛Uncolorize pip JSON report in whl compat cmd
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)