Bump the pip-all group across 1 directory with 6 updates #384

dependabot · 2024-11-23T20:07:54Z

Bumps the pip-all group with 6 updates in the / directory:

Package	From	To
configobj	`5.0.8`	`5.0.9`
setuptools	`70.0.0`	`75.6.0`
wheel	`0.43.0`	`0.45.1`
pre-commit	`3.7.1`	`4.0.1`
pytest	`8.2.1`	`8.3.3`
pytest-cov	`5.0.0`	`6.0.0`

Updates configobj from 5.0.8 to 5.0.9

Release notes

Sourced from configobj's releases.

5.0.9

What's Changed

Address CVE-2023-26112 ReDoS by @cdcadman in DiffSK/configobj#236

Drop Python 2 support and compatibility code by @jelmer in DiffSK/configobj#237

Extra 2014 by @jelmer in DiffSK/configobj#245

setup.py: fix license tag by @yegorich in DiffSK/configobj#241

Update minimum python to 3.7 everywhere, and add 3.12 by @jelmer in DiffSK/configobj#246

New Contributors

@cdcadman made their first contribution in DiffSK/configobj#236

@yegorich made their first contribution in DiffSK/configobj#241

Full Changelog: DiffSK/configobj@v5.0.8...v5.0.9

Changelog

Sourced from configobj's changelog.

Changelog

Release 5.0.9 """""""""""""

drop support for Python 2 and <3.7

fix CVE-2023-26112, ReDoS attack

Release 5.0.8 """""""""""""

fixing/test for a regression introduced in 5.0.7 that prevented import validate from working

Release 5.0.7 """""""""""""

update testing to validate against python version 2.7 and 3.5-3.11

update broken links / non-existent services and references

Older Releases """"""""""""""

Release 5.0.6 improves error messages in certain edge cases

Release 5.0.5 corrects a unicode-bug that still existed in writing files

Release 5.0.4 corrects a unicode-bug that still existed in reading files after fixing lists of string in 5.0.3

Release 5.0.3 corrects errors related to the incorrectly handling unicode encoding and writing out files

Release 5.0.2 adds a specific error message when trying to install on Python versions older than 2.5

Release 5.0.1 fixes a regression with unicode conversion not happening in certain cases PY2

Release 5.0.0 updates the supported Python versions to 2.6, 2.7, 3.2, 3.3 and is otherwise unchanged

Release 4.7.2 fixes several bugs in 4.7.1

Release 4.7.1 fixes a bug with the deprecated options keyword in 4.7.0.

Release 4.7.0 improves performance adds features for validation and fixes some bugs.

Commits

242dfd0 release 5.0.9
8857b08 Merge pull request #246 from DiffSK/python-version
d6f7597 Update minimum python to 3.7 everywhere, and add 3.12
8ffcf0c Merge pull request #241 from yegorich/license
5e2f143 Merge pull request #245 from jelmer/extra-2014
fdf3634 Drop extra '2014' in LICENSE file. Fixes #233
3480a6e Merge pull request #237 from jelmer/drop-python2
008165c Drop python 3.5 from GitHub action, since it now fails to download
861383c Drop support for Python < 3.5
7c618b0 Merge pull request #236 from cdcadman/cve_2023_26112
Additional commits viewable in compare view

Updates setuptools from 70.0.0 to 75.6.0

Changelog

Sourced from setuptools's changelog.

v75.6.0

Features

Preserve original PKG-INFO into METADATA when creating wheel (instead of calling wheel.metadata.pkginfo_to_metadata). This helps to be more compliant with the flow specified in PEP 517. (#4701)

Changed the WindowsSdkVersion, FrameworkVersion32 and FrameworkVersion64 properties of setuptools.msvc.PlatformInfo to return an empty tuple instead of None as a fallthrough case -- by :user:Avasam (#4754)

v75.5.0

Features

Removed support for SETUPTOOLS_DANGEROUSLY_SKIP_PYPROJECT_VALIDATION, as it is deemed prone to errors. (#4746)

v75.4.0

Features

Added support for the environment variable SETUPTOOLS_DANGEROUSLY_SKIP_PYPROJECT_VALIDATION=true, allowing users to bypass the validation of pyproject.toml. This option should be used only as a last resort when resolving dependency issues, as it may lead to improper functioning. Users who enable this setting are responsible for ensuring that pyproject.toml complies with setuptools requirements. (#4611)

.. attention:: This environment variable was removed in a later version of setuptools.

Require Python 3.9 or later. (#4718)

Remove dependency on importlib_resources and the vendored copy of the library. Instead, setuptools consistently rely on stdlib's importlib.resources (available on Python 3.9+). (#4718)

Setuptools' bdist_wheel implementation no longer produces wheels with the m SOABI flag (pymalloc-related). This flag was removed on Python 3.8+ (see :obj:sys.abiflags). (#4718)

Updated vendored packaging version to 24.2. (#4740)

... (truncated)

Commits

bf2ced2 Bump version: 75.5.0 → 75.6.0
8685c80 Empty tuple instead of None for PlatformInfo version properties fallthrough (...
50d671b Rename news fragment
2b471c2 Changed the WindowsSdkVersion, FrameworkVersion32 and ``FrameworkVers...
2c77cd2 Runtime typing fixes for typeshed return type merge (#4753
9a4c8d4 Runtime typing fixes for typeshed return type merge
e622859 Preserve original PKG-INFO contents when creating wheel (instead of calling...
0b5b417 Mark tests that may depend on external network
a4fa01d Add news fragment
089aca9 Ignore coverage in test code
Additional commits viewable in compare view

Updates wheel from 0.43.0 to 0.45.1

Release notes

Sourced from wheel's releases.

0.45.1

Fixed pure Python wheels converted from eggs and wininst files having the ABI tag in the file name

0.45.0

Refactored the convert command to not need setuptools to be installed

Don't configure setuptools logging unless running bdist_wheel

Added a redirection from wheel.bdist_wheel.bdist_wheel to setuptools.command.bdist_wheel.bdist_wheel to improve compatibility with setuptools' latest fixes.

Projects are still advised to migrate away from the deprecated module and import the setuptools' implementation explicitly. (PR by @abravalheri)

0.44.0

Canonicalized requirements in METADATA file (PR by Wim Jeantine-Glenn)

Deprecated the bdist_wheel module, as the code was migrated to setuptools itself

Changelog

Sourced from wheel's changelog.

Release Notes

0.45.1 (2024-11-23)

Fixed pure Python wheels converted from eggs and wininst files having the ABI tag in the file name

0.45.0 (2024-11-08)

Refactored the convert command to not need setuptools to be installed

Don't configure setuptools logging unless running bdist_wheel

Added a redirection from wheel.bdist_wheel.bdist_wheel to setuptools.command.bdist_wheel.bdist_wheel to improve compatibility with setuptools' latest fixes.

Projects are still advised to migrate away from the deprecated module and import the setuptools' implementation explicitly. (PR by @abravalheri)

0.44.0 (2024-08-04)

Canonicalized requirements in METADATA file (PR by Wim Jeantine-Glenn)

Deprecated the bdist_wheel module, as the code was migrated to setuptools itself

0.43.0 (2024-03-11)

Dropped support for Python 3.7

Updated vendored packaging to 24.0

0.42.0 (2023-11-26)

Allowed removing build tag with wheel tags --build ""

Fixed wheel pack and wheel tags writing updated WHEEL fields after a blank line, causing other tools to ignore them

Fixed wheel pack and wheel tags writing WHEEL with CRLF line endings or a mix of CRLF and LF

Fixed wheel pack --build-number "" not removing build tag from WHEEL (above changes by Benjamin Gilbert)

0.41.3 (2023-10-30)

Updated vendored packaging to 23.2

Fixed ABI tag generation for CPython 3.13a1 on Windows (PR by Sam Gross)

0.41.2 (2023-08-22)

Fixed platform tag detection for GraalPy and 32-bit python running on an aarch64 kernel (PR by Matthieu Darbois)

Fixed wheel tags to not list directories in RECORD files

... (truncated)

Commits

7855525 Created a new release
d343391 Fixed wrong wheel file names in converted pure-Python eggs/wininsts
d78f0e3 Created a new release
f064c69 Added license files for vendored packaging
68387af Only configure setuptools logging if bdist_wheel is imported (#641)
c81f5c9 Refactored the wheel convert command to not require setuptools (#640)
e43464d Adjusted target Python versions in GitHub CI
e9894e7 Tweaked pytest settings to make the tracebacks easier to read
baf6bf8 Removed Cirrus CI configuration
28c1ba1 Improved compatibility with future versions of setuptools (#638)
Additional commits viewable in compare view

Updates pre-commit from 3.7.1 to 4.0.1

Release notes

Sourced from pre-commit's releases.

pre-commit v4.0.1

Fixes

Fix pre-commit migrate-config for unquoted deprecated stages names with purelib pyyaml.

#3324 PR by @asottile.

pre-commit-ci/issues#234 issue by @lorenzwalthert.

pre-commit v4.0.0

Features

Improve pre-commit migrate-config to handle more yaml formats.

#3301 PR by @asottile.

Handle stages deprecation in pre-commit migrate-config.

#3302 PR by @asottile.

#2732 issue by @asottile.

Upgrade ruby-build.

#3199 PR by @ThisGuyCodes.

Add "sensible regex" warnings to repo: meta.

#3311 PR by @asottile.

Add warnings for deprecated stages (commit -> pre-commit, push -> pre-push, merge-commit -> pre-merge-commit).

#3312 PR by @asottile.

#3313 PR by @asottile.

#3315 PR by @asottile.

#2732 issue by @asottile.

Migrating

language: python_venv has been removed -- use language: python instead.

#3320 PR by @asottile.

#2734 issue by @asottile.

pre-commit v3.8.0

Features

Implement health checks for language: r so environments are recreated if the system version of R changes.

#3206 issue by @lorenzwalthert.

#3265 PR by @lorenzwalthert.

Changelog

Sourced from pre-commit's changelog.

4.0.1 - 2024-10-08

Fixes

Fix pre-commit migrate-config for unquoted deprecated stages names with purelib pyyaml.

#3324 PR by @asottile.

pre-commit-ci/issues#234 issue by @lorenzwalthert.

4.0.0 - 2024-10-05

Features

Improve pre-commit migrate-config to handle more yaml formats.

#3301 PR by @asottile.

Handle stages deprecation in pre-commit migrate-config.

#3302 PR by @asottile.

#2732 issue by @asottile.

Upgrade ruby-build.

#3199 PR by @ThisGuyCodes.

Add "sensible regex" warnings to repo: meta.

#3311 PR by @asottile.

Add warnings for deprecated stages (commit -> pre-commit, push -> pre-push, merge-commit -> pre-merge-commit).

#3312 PR by @asottile.

#3313 PR by @asottile.

#3315 PR by @asottile.

#2732 issue by @asottile.

Migrating

language: python_venv has been removed -- use language: python instead.

#3320 PR by @asottile.

#2734 issue by @asottile.

3.8.0 - 2024-07-28

Features

Implement health checks for language: r so environments are recreated if the system version of R changes.

#3206 issue by @lorenzwalthert.

#3265 PR by @lorenzwalthert.

Commits

cc4a522 v4.0.1
772d7d4 Merge pull request #3324 from pre-commit/migrate-config-purelib
222c62b fix migrate-config for purelib yaml
3d5548b Merge pull request #3323 from pre-commit/pre-commit-ci-update-config
4235a87 [pre-commit.ci] pre-commit autoupdate
dbccd57 v4.0.0
d07e529 Merge pull request #3320 from pre-commit/remove-python-venv
801b956 remove deprecated python_venv alias
a2f7b80 Merge pull request #3315 from pre-commit/warn-deprecated-stage-names-on-init
d317223 add warning for deprecates stages for remote repos on init
Additional commits viewable in compare view

Updates pytest from 8.2.1 to 8.3.3

Release notes

Sourced from pytest's releases.

8.3.3

pytest 8.3.3 (2024-09-09)

Bug fixes

#12446: Avoid calling @property (and other instance descriptors) during fixture discovery -- by asottile{.interpreted-text role="user"}

#12659: Fixed the issue of not displaying assertion failure differences when using the parameter --import-mode=importlib in pytest>=8.1.

#12667: Fixed a regression where type change in [ExceptionInfo.errisinstance]{.title-ref} caused [mypy]{.title-ref} to fail.

#12744: Fixed typing compatibility with Python 3.9 or less -- replaced [typing.Self]{.title-ref} with [typing_extensions.Self]{.title-ref} -- by Avasam{.interpreted-text role="user"}

#12745: Fixed an issue with backslashes being incorrectly converted in nodeid paths on Windows, ensuring consistent path handling across environments.

#6682: Fixed bug where the verbosity levels where not being respected when printing the "msg" part of failed assertion (as in assert condition, msg).

#9422: Fix bug where disabling the terminal plugin via -p no:terminal would cause crashes related to missing the verbose option.

-- by GTowers1{.interpreted-text role="user"}

Improved documentation

#12663: Clarify that the [pytest_deselected]{.title-ref} hook should be called from [pytest_collection_modifyitems]{.title-ref} hook implementations when items are deselected.

#12678: Remove erroneous quotes from [tmp_path_retention_policy]{.title-ref} example in docs.

Miscellaneous internal changes

#12769: Fix typos discovered by codespell and add codespell to pre-commit hooks.

8.3.2

pytest 8.3.2 (2024-07-24)

Bug fixes

#12652: Resolve regression [conda]{.title-ref} environments where no longer being automatically detected.

-- by RonnyPfannschmidt{.interpreted-text role="user"}

8.3.1

pytest 8.3.1 (2024-07-20)

The 8.3.0 release failed to include the change notes and docs for the release. This patch release remedies this. There are no other changes.

... (truncated)

Commits

d0f136f build(deps): Bump pypa/gh-action-pypi-publish from 1.10.0 to 1.10.1 (#12790)
972f307 Prepare release version 8.3.3
0dabdcf Include co-authors in release announcement (#12795) (#12797)
a9910a4 Do not discover properties when iterating fixtures (#12781) (#12788)
0f10b6b Fix issue with slashes being turned into backslashes on Windows (#12760) (#12...
300d13d Merge pull request #12785 from pytest-dev/patchback/backports/8.3.x/57cccf7f4...
e5d32c7 Merge pull request #12784 from svenevs/fix/docs-example-parametrize-minor-typo
bc913d1 Streamline checks for verbose option (#12706) (#12778)
01cfcc9 Fix typos and introduce codespell pre-commit hook (#12769) (#12774)
4873394 doc: Remove past training (#12772) (#12773)
Additional commits viewable in compare view

Updates pytest-cov from 5.0.0 to 6.0.0

Changelog

Sourced from pytest-cov's changelog.

6.0.0 (2024-10-29)

Updated various documentation inaccuracies, especially on subprocess handling.

Changed fail under checks to use the precision set in the coverage configuration. Now it will perform the check just like coverage report would.

Added a --cov-precision cli option that can override the value set in your coverage configuration.

Dropped support for now EOL Python 3.8.

Commits

9540437 Bump version: 5.0.0 → 6.0.0
9f81754 Further trim down envs and drop Python 3.8.
b12b5ec Update conf.
23f4b27 Update changelog.
291a04f Bump test deps and trim config.
08f1101 Add --cov-precision option. Close #655.
76fe2a7 Move the warnings/errors in a place that doesn't import anything.
a9ea7b7 Implement error/warning for the bad dynamic_context being set in config.
c299e01 Add explicit suffixing to make it easier to see the identify the sources/usag...
c87e546 Add reproducer for weird xdist dynamic_context interaction. Ref #604.
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

felddy · 2024-11-23T21:13:50Z

@dependabot recreate

Bumps the pip-all group with 6 updates in the / directory: | Package | From | To | | --- | --- | --- | | [configobj](https://github.com/DiffSK/configobj) | `5.0.8` | `5.0.9` | | [setuptools](https://github.com/pypa/setuptools) | `70.0.0` | `75.6.0` | | [wheel](https://github.com/pypa/wheel) | `0.43.0` | `0.45.1` | | [pre-commit](https://github.com/pre-commit/pre-commit) | `3.7.1` | `4.0.1` | | [pytest](https://github.com/pytest-dev/pytest) | `8.2.1` | `8.3.3` | | [pytest-cov](https://github.com/pytest-dev/pytest-cov) | `5.0.0` | `6.0.0` | Updates `configobj` from 5.0.8 to 5.0.9 - [Release notes](https://github.com/DiffSK/configobj/releases) - [Changelog](https://github.com/DiffSK/configobj/blob/release/CHANGES.rst) - [Commits](DiffSK/configobj@v5.0.8...v5.0.9) Updates `setuptools` from 70.0.0 to 75.6.0 - [Release notes](https://github.com/pypa/setuptools/releases) - [Changelog](https://github.com/pypa/setuptools/blob/main/NEWS.rst) - [Commits](pypa/setuptools@v70.0.0...v75.6.0) Updates `wheel` from 0.43.0 to 0.45.1 - [Release notes](https://github.com/pypa/wheel/releases) - [Changelog](https://github.com/pypa/wheel/blob/main/docs/news.rst) - [Commits](pypa/wheel@0.43.0...0.45.1) Updates `pre-commit` from 3.7.1 to 4.0.1 - [Release notes](https://github.com/pre-commit/pre-commit/releases) - [Changelog](https://github.com/pre-commit/pre-commit/blob/main/CHANGELOG.md) - [Commits](pre-commit/pre-commit@v3.7.1...v4.0.1) Updates `pytest` from 8.2.1 to 8.3.3 - [Release notes](https://github.com/pytest-dev/pytest/releases) - [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst) - [Commits](pytest-dev/pytest@8.2.1...8.3.3) Updates `pytest-cov` from 5.0.0 to 6.0.0 - [Changelog](https://github.com/pytest-dev/pytest-cov/blob/master/CHANGELOG.rst) - [Commits](pytest-dev/pytest-cov@v5.0.0...v6.0.0) --- updated-dependencies: - dependency-name: configobj dependency-type: direct:production update-type: version-update:semver-patch dependency-group: pip-all - dependency-name: setuptools dependency-type: direct:production update-type: version-update:semver-major dependency-group: pip-all - dependency-name: wheel dependency-type: direct:production update-type: version-update:semver-minor dependency-group: pip-all - dependency-name: pre-commit dependency-type: direct:development update-type: version-update:semver-major dependency-group: pip-all - dependency-name: pytest dependency-type: direct:development update-type: version-update:semver-minor dependency-group: pip-all - dependency-name: pytest-cov dependency-type: direct:development update-type: version-update:semver-major dependency-group: pip-all ... Signed-off-by: dependabot[bot] <[email protected]>

dependabot bot requested a review from felddy as a code owner November 23, 2024 20:07

dependabot bot added bot 🤖 dependencies 🎲 python 🐍 labels Nov 23, 2024

felddy approved these changes Nov 23, 2024

View reviewed changes

felddy enabled auto-merge November 23, 2024 20:50

github-actions bot added the automerge 🔔 label Nov 23, 2024

dependabot bot force-pushed the dependabot/pip/pip-all-8301dc15d6 branch from bdd1c1b to 56da0fd Compare November 23, 2024 21:15

felddy disabled auto-merge November 24, 2024 17:57

felddy merged commit fd8e789 into develop Nov 24, 2024
24 of 26 checks passed

felddy deleted the dependabot/pip/pip-all-8301dc15d6 branch November 24, 2024 17:57

github-actions bot removed the automerge 🔔 label Nov 24, 2024

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump the pip-all group across 1 directory with 6 updates #384

Bump the pip-all group across 1 directory with 6 updates #384

dependabot bot commented on behalf of github Nov 23, 2024 •

edited

Loading

felddy commented Nov 23, 2024

Bump the pip-all group across 1 directory with 6 updates #384

Bump the pip-all group across 1 directory with 6 updates #384

Conversation

dependabot bot commented on behalf of github Nov 23, 2024 • edited Loading

5.0.9

What's Changed

New Contributors

Changelog

v75.6.0

Features

v75.5.0

Features

v75.4.0

Features

0.45.1

0.45.0

0.44.0

Release Notes

pre-commit v4.0.1

Fixes

pre-commit v4.0.0

Features

Migrating

pre-commit v3.8.0

Features

4.0.1 - 2024-10-08

Fixes

4.0.0 - 2024-10-05

Features

Migrating

3.8.0 - 2024-07-28

Features

8.3.3

pytest 8.3.3 (2024-09-09)

Bug fixes

Improved documentation

Miscellaneous internal changes

8.3.2

pytest 8.3.2 (2024-07-24)

Bug fixes

8.3.1

pytest 8.3.1 (2024-07-20)

6.0.0 (2024-10-29)

felddy commented Nov 23, 2024

dependabot bot commented on behalf of github Nov 23, 2024 •

edited

Loading