Bump the python-packages group with 9 updates #39

dependabot · 2024-06-05T06:10:52Z

Bumps the python-packages group with 9 updates:

Package	From	To
flake8	`3.9.2`	`7.0.0`
pytest	`6.2.5`	`8.2.2`
twine	`3.4.2`	`5.1.0`
build	`0.5.1`	`1.2.1`
wheel	`0.38.1`	`0.43.0`
requests	`2.31.0`	`2.32.3`
pytest-mock	`3.6.1`	`3.14.0`
pyjwt	`2.4.0`	`2.8.0`
pyinstaller	`5.13.1`	`6.7.0`

Updates flake8 from 3.9.2 to 7.0.0

Commits

88a4f9b Release 7.0.0
6f3a60d Merge pull request #1906 from PyCQA/upgrade-pyflakes
cde8570 upgrade pyflakes to 3.2.x
2ab9d76 Merge pull request #1903 from PyCQA/pre-commit-ci-update-config
e27611f [pre-commit.ci] pre-commit autoupdate
9d20be1 Merge pull request #1902 from PyCQA/pre-commit-ci-update-config
06c1503 [pre-commit.ci] auto fixes from pre-commit.com hooks
b67ce03 Fix bugbear lints
c8801c1 [pre-commit.ci] pre-commit autoupdate
045f297 Merge pull request #1893 from PyCQA/pre-commit-ci-update-config
Additional commits viewable in compare view

Updates pytest from 6.2.5 to 8.2.2

Release notes

Sourced from pytest's releases.

8.2.2

pytest 8.2.2 (2024-06-04)

Bug Fixes

#12355: Fix possible catastrophic performance slowdown on a certain parametrization pattern involving many higher-scoped parameters.

#12367: Fix a regression in pytest 8.2.0 where unittest class instances (a fresh one is created for each test) were not released promptly on test teardown but only on session teardown.

#12381: Fix possible "Directory not empty" crashes arising from concurent cache dir (.pytest_cache) creation. Regressed in pytest 8.2.0.

Improved Documentation

#12290: Updated Sphinx theme to use Furo instead of Flask, enabling Dark mode theme.

#12356: Added a subsection to the documentation for debugging flaky tests to mention lack of thread safety in pytest as a possible source of flakyness.

#12363: The documentation webpages now links to a canonical version to reduce outdated documentation in search engine results.

8.2.1

pytest 8.2.1 (2024-05-19)

Improvements

#12334: Support for Python 3.13 (beta1 at the time of writing).

Bug Fixes

#12120: Fix [PermissionError]{.title-ref} crashes arising from directories which are not selected on the command-line.

#12191: Keyboard interrupts and system exits are now properly handled during the test collection.

#12300: Fixed handling of 'Function not implemented' error under squashfuse_ll, which is a different way to say that the mountpoint is read-only.

#12308: Fix a regression in pytest 8.2.0 where the permissions of automatically-created .pytest_cache directories became rwx------ instead of the expected rwxr-xr-x.

Trivial/Internal Changes

#12333: pytest releases are now attested using the recent Artifact Attestation support from GitHub, allowing users to verify the provenance of pytest's sdist and wheel artifacts.

8.2.0

pytest 8.2.0 (2024-04-27)

Deprecations

#12069: A deprecation warning is now raised when implementations of one of the following hooks request a deprecated py.path.local parameter instead of the pathlib.Path parameter which replaced it:

... (truncated)

Commits

329d371 Prepare release version 8.2.2
214d098 Merge pull request #12414 from bluetech/backport-12409
153a436 [8.2.x] fixtures: fix catastrophic performance problem in reorder_items
b41d5a5 Merge pull request #12412 from pytest-dev/backport-12408-to-8.2.x
9bb73d7 [8.2.x] cacheprovider: fix "Directory not empty" crash from cache directory c...
4569a01 [8.2.x] doc: Update trainings/events (#12402)
1d103e5 [8.2.x] Clarify pytest_ignore_collect docs (#12386)
240a252 [8.2.x] Add html_baseurl to sphinx conf.py (#12372)
a5ee3c4 Merge pull request #12370 from pytest-dev/backport-12368-to-8.2.x
f7358ae [8.2.x] unittest: fix class instances no longer released on test teardown sin...
Additional commits viewable in compare view

Updates twine from 3.4.2 to 5.1.0

Release notes

Sourced from twine's releases.

5.1.0

No release notes provided.

5.0.0

No release notes provided.

4.0.2

https://pypi.org/project/twine/4.0.2/

Changelog

4.0.1

https://pypi.org/project/twine/4.0.1/

Changelog

4.0.0

https://pypi.org/project/twine/4.0.0/

Changelog

3.8.0

https://pypi.org/project/twine/3.8.0/

Changelog

3.7.1

https://pypi.org/project/twine/3.7.1/

Changelog

3.7.0

https://pypi.org/project/twine/3.7.0/

Changelog

3.6.0

https://pypi.org/project/twine/3.6.0/

Changelog

3.5.0

https://pypi.org/project/twine/3.5.0/

Changelog

Changelog

Sourced from twine's changelog.

Twine 5.1.0 (2024-05-15)

Features ^^^^^^^^

Add the experimental --attestations flag. ([#1095](https://github.com/pypa/twine/issues/1095) <https://github.com/pypa/twine/issues/1095>_)

Twine 5.1.0 (2024-05-15)

Misc ^^^^

[#1104](https://github.com/pypa/twine/issues/1104) <https://github.com/pypa/twine/issues/1104>_

Twine 5.0.0 (2024-02-10)

Bugfixes ^^^^^^^^

Use email.message instead of cgi as cgi has been deprecated ([#969](https://github.com/pypa/twine/issues/969) <https://github.com/pypa/twine/issues/969>_)

Misc ^^^^

[#931](https://github.com/pypa/twine/issues/931) <https://github.com/pypa/twine/issues/931>, [#991](https://github.com/pypa/twine/issues/991) <https://github.com/pypa/twine/issues/991>, [#1028](https://github.com/pypa/twine/issues/1028) <https://github.com/pypa/twine/issues/1028>, [#1040](https://github.com/pypa/twine/issues/1040) <https://github.com/pypa/twine/issues/1040>

Twine 4.0.2 (2022-11-30)

Bugfixes ^^^^^^^^

Remove deprecated function to fix twine check with pkginfo 1.9.0. ([#941](https://github.com/pypa/twine/issues/941) <https://github.com/pypa/twine/issues/941>_)

Twine 4.0.1 (2022-06-01)

Bugfixes ^^^^^^^^

Improve logging when keyring fails. ([#890](https://github.com/pypa/twine/issues/890) <https://github.com/pypa/twine/issues/890>_)

Reconfigure root logger to show all log messages. ([#896](https://github.com/pypa/twine/issues/896) <https://github.com/pypa/twine/issues/896>_)

... (truncated)

Commits

e9f70cf Merge pull request #1108 from pypa/fix-release-workflow
1908be7 Fix release workflow
6d7ffea Merge pull request #1107 from woodruffw-forks/release-5.1.0
bc91e57 Update changelog for 5.1.0
de39ade Merge pull request #1085 from pypa/feature/pep-621
75de094 Merge pull request #1104 from ascheel/main
c512bbf Properly handle repository URLs with auth in them
e0ed808 Changelog entry
72ee030 Change regex string to a raw string.
04d7e27 Sanitize URLs for logging/display purposes.
Additional commits viewable in compare view

Updates build from 0.5.1 to 1.2.1

Release notes

Sourced from build's releases.

Version 1.2.1

What's Changed

Avoid error when terminal width is undetectable on Python < 3.11 (PR #761)

Full Changelog: pypa/build@1.2.0...1.2.1

Version 1.2.0

What's Changed

Add --installer option, supporting pip and uv. Added uv extra. (PR #751)

Improve console output and provide -v for dependency installation (PR #749)

Avoid compiling unused bytecode when using pip (PR #752)

Dropped support for Python 3.7 (PR #743)

Full Changelog: pypa/build@1.1.1...1.2.0

Version 1.1.1

What's Changed

Fixed invoking outer pip from user site packages (PR #746, fixes issue #745)

Corrected the minimum pip version required to use an outer pip (PR #746, fixes issue #745)

Full Changelog: pypa/build@v1.1.0...1.1.1

Version 1.1.0

What's Changed

Use external pip if available instead of installing, speeds up environment setup with virtualenv slightly and venv significantly. (PR #736)

Stopped injecting wheel as a build dependency automatically, in the case of missing pyproject.toml -- by @webknjaz. (PR #716)

Use importlib_metadata on Python <3.10.2 for bugfixes not present in those CPython standard libraries (not required when bootstrapping) -- by @GianlucaFicarelli. (PR #693, fixes issue #692)

New Contributors

@MichaReiser made their first contribution in pypa/build#697

@GianlucaFicarelli made their first contribution in pypa/build#693

Full Changelog: pypa/build@1.0.3...v1.1.0

Version 1.0.3

What's Changed

fix: avoid bug in various patch releases of Python by @henryiii in pypa/build#675

changelog: fix issue reference by @michael-k in pypa/build#671

... (truncated)

Changelog

Sourced from build's changelog.

1.2.1 (2024-03-28)

Avoid error when terminal width is undetectable on Python < 3.11 (PR :pr:761)

1.2.0 (2024-03-27)

Add --installer option, supporting pip and uv. Added uv extra. (PR :pr:751)

Improve console output and provide -v for dependency installation (PR :pr:749)

Avoid compiling unused bytecode when using pip (PR :pr:752)

Dropped support for Python 3.7 (PR :pr:743)

1.1.1 (2024-02-29)

Fixed invoking outer pip from user site packages (PR :pr:746, fixes issue :issue:745)

Corrected the minimum pip version required to use an outer pip (PR :pr:746, fixes issue :issue:745)

1.1.0 (2024-02-29)

Use external pip if available instead of installing, speeds up environment setup with virtualenv slightly and venv significantly. (PR :pr:736)

Stopped injecting wheel as a build dependency automatically, in the case of missing pyproject.toml -- by :user:webknjaz. (PR :pr:716)

Use importlib_metadata on Python <3.10.2 for bugfixes not present in those CPython standard libraries (not required when bootstrapping) -- by :user:GianlucaFicarelli. (PR :pr:693, fixes issue :issue:692)

1.0.3 (2023-09-06)

Avoid CPython 3.8.17, 3.9.17, 3.10.12, and 3.11.4 tarfile symlink bug triggered by adding data_filter in 1.0.0. (PR :pr:675, fixes issue :issue:674)

... (truncated)

Commits

1e67c06 chore: bump version number to 1.2.1
e5072e3 fix: support min width not detectable (#761)
d5fb6fb chore: prepare for 1.2.0 (#758)
1ae6eb1 pre-commit: bump repositories (#757)
a1f005d pre-commit: bump repositories (#756)
5076a56 uv: support double verbosity flag
5662669 chore: bump mypy
24c513d chore: reformat using Black 2024 style
08cdb76 ruff: bump version and update config
97ea57b perf: avoid compiling unused bytecode (#752)
Additional commits viewable in compare view

Updates wheel from 0.38.1 to 0.43.0

Release notes

Sourced from wheel's releases.

0.43.0

Dropped support for Python 3.7

Updated vendored packaging to 24.0

0.42.0

Allowed removing build tag with wheel tags --build ""

Fixed wheel pack and wheel tags writing updated WHEEL fields after a blank line, causing other tools to ignore them

Fixed wheel pack and wheel tags writing WHEEL with CRLF line endings or a mix of CRLF and LF

Fixed wheel pack --build-number "" not removing build tag from WHEEL (above changes by Benjamin Gilbert)

0.41.3

Updated vendored packaging to 23.2

Fixed ABI tag generation for CPython 3.13a1 on Windows (PR by Sam Gross)

Changelog

Sourced from wheel's changelog.

Release Notes

UNRELEASED

Canonicalize requirements in METADATA file (PR by Wim Jeantine-Glenn)

0.43.0 (2024-03-11)

Dropped support for Python 3.7

Updated vendored packaging to 24.0

0.42.0 (2023-11-26)

Allowed removing build tag with wheel tags --build ""

Fixed wheel pack and wheel tags writing updated WHEEL fields after a blank line, causing other tools to ignore them

Fixed wheel pack and wheel tags writing WHEEL with CRLF line endings or a mix of CRLF and LF

Fixed wheel pack --build-number "" not removing build tag from WHEEL (above changes by Benjamin Gilbert)

0.41.3 (2023-10-30)

Updated vendored packaging to 23.2

Fixed ABI tag generation for CPython 3.13a1 on Windows (PR by Sam Gross)

0.41.2 (2023-08-22)

Fixed platform tag detection for GraalPy and 32-bit python running on an aarch64 kernel (PR by Matthieu Darbois)

Fixed wheel tags to not list directories in RECORD files (PR by Mike Taves)

Fixed ABI tag generation for GraalPy (PR by Michael Simacek)

0.41.1 (2023-08-05)

Fixed naming of the data_dir directory in the presence of local version segment given via egg_info.tag_build (PR by Anderson Bravalheri)

Fixed version specifiers in Requires-Dist being wrapped in parentheses

0.41.0 (2023-07-22)

Added full support of the build tag syntax to wheel tags (you can now set a build tag like 123mytag)

Fixed warning on Python 3.12 about onerror deprecation. (PR by Henry Schreiner)

Support testing on Python 3.12 betas (PR by Ewout ter Hoeven)

0.40.0 (2023-03-14)

... (truncated)

Commits

fa33dfd Created a new release
b2c8272 Removed PyPy + Windows from the test matrix for now
dedcc19 Worked around a bizarre PyPy+Windows issue with bdist_egg
fa480d6 Added Codecov.io token to the test workflow
1280f03 Skip the test_platform_linux32 test on non-Linux platforms
0b4b259 Removed failing test code
b91b377 Fixed erroneous attribute access on the capsys fixture
819baa3 Updated more GitHub actions and improved test workflow
92921a0 Updated vendored packaging to 24.0
a9119c8 Updated GitHub actions to their latest versions
Additional commits viewable in compare view

Updates requests from 2.31.0 to 2.32.3

Release notes

Sourced from requests's releases.

v2.32.3

2.32.3 (2024-05-29)

Bugfixes

Fixed bug breaking the ability to specify custom SSLContexts in sub-classes of HTTPAdapter. (#6716)

Fixed issue where Requests started failing to run on Python versions compiled without the ssl module. (#6724)

v2.32.2

2.32.2 (2024-05-21)

Deprecations

To provide a more stable migration for custom HTTPAdapters impacted by the CVE changes in 2.32.0, we've renamed _get_connection to a new public API, get_connection_with_tls_context. Existing custom HTTPAdapters will need to migrate their code to use this new API. get_connection is considered deprecated in all versions of Requests>=2.32.0.

A minimal (2-line) example has been provided in the linked PR to ease migration, but we strongly urge users to evaluate if their custom adapter is subject to the same issue described in CVE-2024-35195. (#6710)

v2.32.1

2.32.1 (2024-05-20)

Bugfixes

Add missing test certs to the sdist distributed on PyPI.

v2.32.0

2.32.0 (2024-05-20)

🐍 PYCON US 2024 EDITION 🐍

Security

Fixed an issue where setting verify=False on the first request from a Session will cause subsequent requests to the same origin to also ignore cert verification, regardless of the value of verify. (GHSA-9wx4-h78v-vm56)

Improvements

verify=True now reuses a global SSLContext which should improve request time variance between first and subsequent requests. It should also minimize certificate load time on Windows systems when using a Python version built with OpenSSL 3.x. (#6667)

Requests now supports optional use of character detection (chardet or charset_normalizer) when repackaged or vendored.

... (truncated)

Changelog

Sourced from requests's changelog.

2.32.3 (2024-05-29)

Bugfixes

Fixed bug breaking the ability to specify custom SSLContexts in sub-classes of HTTPAdapter. (#6716)

Fixed issue where Requests started failing to run on Python versions compiled without the ssl module. (#6724)

2.32.2 (2024-05-21)

Deprecations

To provide a more stable migration for custom HTTPAdapters impacted by the CVE changes in 2.32.0, we've renamed _get_connection to a new public API, get_connection_with_tls_context. Existing custom HTTPAdapters will need to migrate their code to use this new API. get_connection is considered deprecated in all versions of Requests>=2.32.0.

A minimal (2-line) example has been provided in the linked PR to ease migration, but we strongly urge users to evaluate if their custom adapter is subject to the same issue described in CVE-2024-35195. (#6710)

2.32.1 (2024-05-20)

Bugfixes

Add missing test certs to the sdist distributed on PyPI.

2.32.0 (2024-05-20)

Security

Fixed an issue where setting verify=False on the first request from a Session will cause subsequent requests to the same origin to also ignore cert verification, regardless of the value of verify. (GHSA-9wx4-h78v-vm56)

Improvements

verify=True now reuses a global SSLContext which should improve request time variance between first and subsequent requests. It should also minimize certificate load time on Windows systems when using a Python version built with OpenSSL 3.x. (#6667)

Requests now supports optional use of character detection (chardet or charset_normalizer) when repackaged or vendored. This enables pip and other projects to minimize their vendoring surface area. The Response.text() and apparent_encoding APIs will default to utf-8 if neither library is present. (#6702)

... (truncated)

Commits

0e322af v2.32.3
e188799 Don't create default SSLContext if ssl module isn't present (#6724)
145b539 Merge pull request #6716 from sigmavirus24/bug/6715
b1d73dd Don't use default SSLContext with custom poolmanager kwargs
6badbac Update HISTORY.md
a62a2d3 Allow for overriding of specific pool key params
88dce9d v2.32.2
c98e4d1 Merge pull request #6710 from nateprewitt/api_rename
92075b3 Add deprecation warning
aa1461b Move _get_connection to get_connection_with_tls_context
Additional commits viewable in compare view

Updates pytest-mock from 3.6.1 to 3.14.0

Release notes

Sourced from pytest-mock's releases.

v3.14.0

#415: MockType and AsyncMockType can be imported from pytest_mock for type annotation purposes.

#420: Fixed a regression which would cause mocker.patch.object to not being properly cleared between tests.

v3.13.0

#417: spy now has spy_return_list, which is a list containing all the values returned by the spied function.

pytest-mock now requires pytest>=6.2.5.

#410: pytest-mock's setup.py file is removed. If you relied on this file, e.g. to install pytest using setup.py install, please see Why you shouldn't invoke setup.py directly for alternatives.

v3.12.0

Added support for Python 3.12.

Dropped support for EOL Python 3.7.

mocker.resetall() now also resets mocks created by mocker.create_autospec (#390).

v3.11.1

Fixed introspection for failed assert_has_calls (#365).

Updated type annotations for mocker.patch and mocker.spy (#364).

v3.10.0

Added new mocker.stop(m) method to stop specific mocker.patch or mocker.spy calls (#319).

v3.9.0

Expose NonCallableMagicMock via the mocker fixture (#318).

v3.8.2

Fixed AsyncMock support for Python 3.7+ in mocker.async_stub (#302).

v3.8.1

Fix regression caused by an explicit mock dependency in the code (#298).

v3.8.0

Add MockerFixture.async_mock method. Thanks @PerchunPak for the PR (#296).

3.7.0

Python 3.10 now officially supported.

Dropped support for Python 3.6.

Changelog

Sourced from pytest-mock's changelog.

3.14.0 (2024-03-21)

[#415](https://github.com/pytest-dev/pytest-mock/issues/415) <https://github.com/pytest-dev/pytest-mock/pull/415>_: MockType and AsyncMockType can be imported from pytest_mock for type annotation purposes.

[#420](https://github.com/pytest-dev/pytest-mock/issues/420) <https://github.com/pytest-dev/pytest-mock/issues/420>_: Fixed a regression which would cause mocker.patch.object to not being properly cleared between tests.

3.13.0 (2024-03-21)

[#417](https://github.com/pytest-dev/pytest-mock/issues/417) <https://github.com/pytest-dev/pytest-mock/pull/417>_: spy now has spy_return_list, which is a list containing all the values returned by the spied function.

pytest-mock now requires pytest>=6.2.5.

[#410](https://github.com/pytest-dev/pytest-mock/issues/410) <https://github.com/pytest-dev/pytest-mock/pull/410>: pytest-mock's setup.py file is removed. If you relied on this file, e.g. to install pytest using setup.py install, please see Why you shouldn't invoke setup.py directly <https://blog.ganssle.io/articles/2021/10/setup-py-deprecated.html#summary> for alternatives.

3.12.0 (2023-10-19)

Added support for Python 3.12.

Dropped support for EOL Python 3.7.

mocker.resetall() now also resets mocks created by mocker.create_autospec ([#390](https://github.com/pytest-dev/pytest-mock/issues/390)_).

.. _#390: pytest-dev/pytest-mock#390

3.11.1 (2023-06-15)

(This release source code is identical to 3.11.0 except a small internal fix to deployment/CI)

Fixed introspection for failed assert_has_calls ([#365](https://github.com/pytest-dev/pytest-mock/issues/365)_).

Updated type annotations for mocker.patch and mocker.spy ([#364](https://github.com/pytest-dev/pytest-mock/issues/364)_).

.. _#365: pytest-dev/pytest-mock#365 .. _#364: pytest-dev/pytest-mock#364

3.11.0 (2023-06-15)

Fixed introspection for failed assert_has_calls ([#365](https://github.com/pytest-dev/pytest-mock/issues/365)_).

Updated type annotations for mocker.patch and mocker.spy ([#364](https://github.com/pytest-dev/pytest-mock/issues/364)_).

.. _#365: pytest-dev/pytest-mock#365 .. _#364: pytest-dev/pytest-mock#364

3.10.0 (2022-10-05)

... (truncated)

Commits

8733134 Update CHANGELOG for 3.14.0
5257e3c Refactor MockCache to have a narrow interface
4faf92a Fix regression with mocker.patch not being undone correctly
6bd8712 Drop pre-Python 3.8 support code
366966b Export MockType/AsyncMockType for type annotations (#415)
852116b Merge pull request #418 from pytest-dev/release-3.13.0
ef9461b Add instructions on how to start deploy from command-line
5b9d285 Release 3.13.0
6d5d6dc Implement spy_return_list (#417)
dc28a0e [pre-commit.ci] pre-commit autoupdate (#416)
Additional commits viewable in compare view

Updates pyjwt from 2.4.0 to 2.8.0

Release notes

Sourced from pyjwt's releases.

2.8.0

What's Changed

Export PyJWKClientConnectionError class by @daviddavis in jpadilla/pyjwt#887

[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci in jpadilla/pyjwt#889

Patch 1 by @juur in jpadilla/pyjwt#891

[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci in jpadilla/pyjwt#896

[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci in jpadilla/pyjwt#898

[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci in jpadilla/pyjwt#900

Update python version by @auvipy in jpadilla/pyjwt#895

api_jwt: add a strict_aud option by @woodruffw in jpadilla/pyjwt#902

New Contributors

@juur made their first contribution in jpadilla/pyjwt#891

Full Changelog: jpadilla/pyjwt@2.7.0...2.8.0

2.7.0

What's Changed

Add classifier for Python 3.11 by @eseifert in jpadilla/pyjwt#818

Add Algorithm.compute_hash_digest and use it to implement at_hash validation example by @sirosen in jpadilla/pyjwt#775

fix: use datetime.datetime.timestamp function to have a milliseconds by @daillouf in jpadilla/pyjwt#821

[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci in jpadilla/pyjwt#825

Custom header configuration in jwk client by @thundercat1 in jpadilla/pyjwt#823

[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci in jpadilla/pyjwt#828

[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci in jpadilla/pyjwt#833

[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci in jpadilla/pyjwt#835

Add PyJWT._{de,en}code_payload hooks by @akx in jpadilla/pyjwt#829

Add sort_headers parameter to api_jwt.encode by @evroon in jpadilla/pyjwt#832

Make mypy configuration stricter and improve typing by @akx in jpadilla/pyjwt#830

Bump actions/stale from 6 to 7 by @dependabot in jpadilla/pyjwt#840

[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci in jpadilla/pyjwt#838

Add more types by @Viicos in jpadilla/pyjwt#843

Differentiate between two errors by @irdkwmnsb in jpadilla/pyjwt#809

Fix _validate_iat validation by @Viicos in jpadilla/pyjwt#847

Improve error messages when cryptography isn't installed by @Viicos in jpadilla/pyjwt#846

[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci in jpadilla/pyjwt#852

[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci in jpadilla/pyjwt#855

[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci in jpadilla/pyjwt#859

Make Algorithm an abstract base class by @Viicos in jpadilla/pyjwt#845

docs: correct mistake in the changelog about verify param by @gbillig in jpadilla/pyjwt#866

[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci in jpadilla/pyjwt#868

Bump actions/stale from 7 to 8 by @dependabot in jpadilla/pyjwt#872

[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci in jpadilla/pyjwt#874

Add a timeout for PyJWKClient requests by @daviddavis in jpadilla/pyjwt#875

Add client connection error exception by @daviddavis in jpadilla/pyjwt#876

Add complete types to take all allowed keys into account by @Viicos in jpadilla/pyjwt#873

[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci in jpadilla/pyjwt#878

Build and upload PyPI package by @jpadilla in jpadilla/pyjwt#884

Fix for issue #862 - ignore invalid keys in a jwks. by @timw6n in jpadilla/pyjwt#863

Add as_dict option to Algorithm.to_jwk by @fluxth in jpadilla/pyjwt#881

... (truncated)

Changelog

Sourced from pyjwt's changelog.

v2.8.0 <https://github.com/jpadilla/pyjwt/compare/2.7.0...2.8.0>__

Changed
- Update python version test matrix by @auvipy in `[#895](https://github.com/jpadilla/pyjwt/issues/895) <https://github.com/jpadilla/pyjwt/pull/895>`__
Fixed

Added


Add strict_aud as an option to jwt.decode by @woodruffw in [#902](https://github.com/jpadilla/pyjwt/issues/902) &lt;https://github.com/jpadilla/pyjwt/pull/902&gt;__
Export PyJWKClientConnectionError class by @daviddavis in [#887](https://github.com/jpadilla/pyjwt/issues/887) &lt;https://github.com/jpadilla/pyjwt/pull/887&gt;__
Allows passing of ssl.SSLContext to PyJWKClient by @juur in [#891](https://github.com/jpadilla/pyjwt/issues/891) &lt;https://github.com/jpadilla/pyjwt/pull/891&gt;__

v2.7.0 &lt;https://github.com/jpadilla/pyjwt/compare/2.6.0...2.7.0&gt;__
Changed
Changed the error message when the token audience doesn't match the expected audience by @irdkwmnsb [#809](https://github.com/jpadilla/pyjwt/issues/809) <https://github.com/jpadilla/pyjwt/pull/809>__

Improve error messages when cryptography isn't installed by @Viicos in [#846](https://github.com/jpadilla/pyjwt/issues/846) <https://github.com/jpadilla/pyjwt/pull/846>__

Make Algorithm an abstract base class by @Viicos in [#845](https://github.com/jpadilla/pyjwt/issues/845) <https://github.com/jpadilla/pyjwt/pull/845>__

ignore invalid keys in a jwks by @timw6n in [#863](https://github.com/jpadilla/pyjwt/issues/863) <https://github.com/jpadilla/pyjwt/pull/863>__

Fixed
- Add classifier for Python 3.11 by @eseifert in `[#818](https://github.com/jpadilla/pyjwt/issues/818) <https://github.com/jpadilla/pyjwt/pull/818>`__
- Fix ``_validate_iat`` validation by @Viicos in `[#847](https://github.com/jpadilla/pyjwt/issues/847) <https://github.com/jpadilla/pyjwt/pull/847>`__
- fix: use datetime.datetime.timestamp function to have a milliseconds by @daillouf `[#821](https://github.com/jpadilla/pyjwt/issues/821) <https://github.com/jpadilla/pyjwt/pull/821>`__
- docs: correct mistake in the changelog about verify param by @gbillig in `[#866](https://github.com/jpadilla/pyjwt/issues/866) <https://github.com/jpadilla/pyjwt/pull/866>`__
Added
Add compute_hash_digest as a method of Algorithm objects, which uses the underlying hash algorithm to compute a digest. If there is no appropriate hash algorithm, a NotImplementedError will be raised in [#775](https://github.com/jpadilla/pyjwt/issues/775) <https://github.com/jpadilla/pyjwt/pull/775>__

Add optional headers argument to PyJWKClient. If provided, the headers will be included in requests that the client uses when fetching the JWK set by @thundercat1 in [#823](https://github.com/jpadilla/pyjwt/issues/823) <https://github.com/jpadilla/pyjwt/pull/823>__

Add PyJWT._{de,en}code_payload hooks by @akx in [#829](https://github.com/jpadilla/pyjwt/issues/829) <https://github.com/jpadilla/pyjwt/pull/829>__

Add sort_headers parameter to api_jwt.encode by @evroon in [#832](https://github.com/jpadilla/pyjwt/issues/832) <https://github.com/jpadilla/pyjwt/pull/832>__

Make mypy configuration stricter and improve typing by @akx in [#830](https://github.com/jpadilla/pyjwt/issues/830) <https://github.com/jpadilla/pyjwt/pull/830>__

Add more types by @Viicos in [#843](https://github.com/jpadilla/pyjwt/issues/843) <https://github.com/jpadilla/pyjwt/pull/843>__

Add a timeout for PyJWKClient requests by @daviddavis in [#875](https://github.com/jpadilla/pyjwt/issues/875) <https://github.com/jpadilla/pyjwt/pull/875>__

... (truncated)

Commits

72ad55f bump version
22ba132 api_jwt: add a strict_aud option (#902)
6db5df7 Update python version (#895)
6e70276 [pre-commit.ci] pre-commit autoupdate (#900)
ea35155 [pre-commit.ci] pre-commit autoupdate (#898)
faeae6e [pre-commit.ci] pre-commit autoupdate (#896)
6cef6f2 Patch 1 (#891)
7f07d50 [pre-commit.ci] pre-commit autoupdate (#889)
1c27281 Export PyJWKClientConnectionError class (#887)
d7c54db chore: update readme
Additional commits viewable in compare view

Updates pyinstaller from 5.13.1 to 6.7.0

Release notes

Sourced from pyinstaller's releases.

v6.7.0

Please see the v6.7.0 section of the changelog for a list of the changes since v6.6.0.

v6.6.0

Please see the v6.6.0 section of the changelog for a list of the changes since v6.5.0.

v6.5.0

Please see the v6.5.0 section of the changelog for a list of the changes since v6.4.0.

v6.4.0

Please see the v6.4.0 section of the changelog for a list of the changes since v6.3.0.

v6.3.0

Please see the v6.3.0 section of the changelog for a list of the changes since v6.2.0.

v6.2.0

Please see the v6.2.0 section of the changelog for a list of the changes since v6.1.0.

v6.1.0

Please see the v6.1.0 section of the changelog for a list of the changes since v6.0.0.

v6.0.0

Please see the v6.0.0 section of the changelog for a list of the changes since v5.13.2.

v5.13.2

Please see the v5.13.2 section of the changelog for a list of the changes since v5.13.1.

Changelog

Sourced from pyinstaller's changelog.

6.7.0 (2024-05-21)

Bugfix


* (POSIX) Fix ``PyInstaller.depend.bindepend.resolve_library_path`` for
  cases when ``ldconfig`` cache is not available (e.g., ``musl libc`` on
  Alpine Linux). In such cases, the search code now distinguishes between
  the case when fully suffixed library name is given (i.e., search for
  exact match) and the case when library name has no suffix (i.e., search
  for library ...
Description has been truncated

Bumps the python-packages group with 9 updates: | Package | From | To | | --- | --- | --- | | [flake8](https://github.com/pycqa/flake8) | `3.9.2` | `7.0.0` | | [pytest](https://github.com/pytest-dev/pytest) | `6.2.5` | `8.2.2` | | [twine](https://github.com/pypa/twine) | `3.4.2` | `5.1.0` | | [build](https://github.com/pypa/build) | `0.5.1` | `1.2.1` | | [wheel](https://github.com/pypa/wheel) | `0.38.1` | `0.43.0` | | [requests](https://github.com/psf/requests) | `2.31.0` | `2.32.3` | | [pytest-mock](https://github.com/pytest-dev/pytest-mock) | `3.6.1` | `3.14.0` | | [pyjwt](https://github.com/jpadilla/pyjwt) | `2.4.0` | `2.8.0` | | [pyinstaller](https://github.com/pyinstaller/pyinstaller) | `5.13.1` | `6.7.0` | Updates `flake8` from 3.9.2 to 7.0.0 - [Commits](PyCQA/flake8@3.9.2...7.0.0) Updates `pytest` from 6.2.5 to 8.2.2 - [Release notes](https://github.com/pytest-dev/pytest/releases) - [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst) - [Commits](pytest-dev/pytest@6.2.5...8.2.2) Updates `twine` from 3.4.2 to 5.1.0 - [Release notes](https://github.com/pypa/twine/releases) - [Changelog](https://github.com/pypa/twine/blob/main/docs/changelog.rst) - [Commits](pypa/twine@3.4.2...5.1.0) Updates `build` from 0.5.1 to 1.2.1 - [Release notes](https://github.com/pypa/build/releases) - [Changelog](https://github.com/pypa/build/blob/main/CHANGELOG.rst) - [Commits](pypa/build@0.5.1...1.2.1) Updates `wheel` from 0.38.1 to 0.43.0 - [Release notes](https://github.com/pypa/wheel/releases) - [Changelog](https://github.com/pypa/wheel/blob/main/docs/news.rst) - [Commits](pypa/wheel@0.38.1...0.43.0) Updates `requests` from 2.31.0 to 2.32.3 - [Release notes](https://github.com/psf/requests/releases) - [Changelog](https://github.com/psf/requests/blob/main/HISTORY.md) - [Commits](psf/requests@v2.31.0...v2.32.3) Updates `pytest-mock` from 3.6.1 to 3.14.0 - [Release notes](https://github.com/pytest-dev/pytest-mock/releases) - [Changelog](https://github.com/pytest-dev/pytest-mock/blob/main/CHANGELOG.rst) - [Commits](pytest-dev/pytest-mock@v3.6.1...v3.14.0) Updates `pyjwt` from 2.4.0 to 2.8.0 - [Release notes](https://github.com/jpadilla/pyjwt/releases) - [Changelog](https://github.com/jpadilla/pyjwt/blob/master/CHANGELOG.rst) - [Commits](jpadilla/pyjwt@2.4.0...2.8.0) Updates `pyinstaller` from 5.13.1 to 6.7.0 - [Release notes](https://github.com/pyinstaller/pyinstaller/releases) - [Changelog](https://github.com/pyinstaller/pyinstaller/blob/develop/doc/CHANGES.rst) - [Commits](pyinstaller/pyinstaller@v5.13.1...v6.7.0) --- updated-dependencies: - dependency-name: flake8 dependency-type: direct:production update-type: version-update:semver-major dependency-group: python-packages - dependency-name: pytest dependency-type: direct:production update-type: version-update:semver-major dependency-group: python-packages - dependency-name: twine dependency-type: direct:production update-type: version-update:semver-major dependency-group: python-packages - dependency-name: build dependency-type: direct:production update-type: version-update:semver-major dependency-group: python-packages - dependency-name: wheel dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-packages - dependency-name: requests dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-packages - dependency-name: pytest-mock dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-packages - dependency-name: pyjwt dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-packages - dependency-name: pyinstaller dependency-type: direct:production update-type: version-update:semver-major dependency-group: python-packages ... Signed-off-by: dependabot[bot] <[email protected]>

sailro · 2024-06-05T06:24:07Z

I've just enabled dependabot on this repo.

^ @drscholly could you try this branch locally to see if everything is still working ? You probably need to run pip install -r requirements.txt

(I'm quite confident given everything is compiling fine + tests).

cc @ggrossetie

dependabot · 2024-06-10T05:25:52Z

Superseded by #40.

sailro · 2024-06-10T05:32:17Z

I've just enabled dependabot on this repo.

^ @drscholly could you try this branch locally to see if everything is still working ? You probably need to run pip install -r requirements.txt

(I'm quite confident given everything is compiling fine + tests).

cc @ggrossetie

Now te be tested against #40 @drscholly

dependabot bot requested a review from a team as a code owner June 5, 2024 06:10

dependabot bot added the dependencies Pull requests that update a dependency file label Jun 5, 2024

dependabot bot closed this Jun 10, 2024

dependabot bot deleted the dependabot/pip/python-packages-64e39e46cc branch June 10, 2024 05:25

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump the python-packages group with 9 updates #39

Bump the python-packages group with 9 updates #39

dependabot bot commented on behalf of github Jun 5, 2024 •

edited

Loading

`v2.7.0 <https://github.com/jpadilla/pyjwt/compare/2.6.0...2.7.0>`__

sailro commented Jun 5, 2024

dependabot bot commented on behalf of github Jun 10, 2024

sailro commented Jun 10, 2024

Bump the python-packages group with 9 updates #39

Bump the python-packages group with 9 updates #39

Conversation

dependabot bot commented on behalf of github Jun 5, 2024 • edited Loading

8.2.2

pytest 8.2.2 (2024-06-04)

Bug Fixes

Improved Documentation

8.2.1

pytest 8.2.1 (2024-05-19)

Improvements

Bug Fixes

Trivial/Internal Changes

8.2.0

pytest 8.2.0 (2024-04-27)

Deprecations

5.1.0

5.0.0

4.0.2

4.0.1

4.0.0

3.8.0

3.7.1

3.7.0

3.6.0

3.5.0

Twine 5.1.0 (2024-05-15)

Twine 5.1.0 (2024-05-15)

Twine 5.0.0 (2024-02-10)

Twine 4.0.2 (2022-11-30)

Twine 4.0.1 (2022-06-01)

Version 1.2.1

What's Changed

Version 1.2.0

What's Changed

Version 1.1.1

What's Changed

Version 1.1.0

What's Changed

New Contributors

Version 1.0.3

What's Changed

1.2.1 (2024-03-28)

1.2.0 (2024-03-27)

1.1.1 (2024-02-29)

1.1.0 (2024-02-29)

1.0.3 (2023-09-06)

0.43.0

0.42.0

0.41.3

Release Notes

v2.32.3

2.32.3 (2024-05-29)

v2.32.2

2.32.2 (2024-05-21)

v2.32.1

2.32.1 (2024-05-20)

v2.32.0

2.32.0 (2024-05-20)

🐍 PYCON US 2024 EDITION 🐍

2.32.3 (2024-05-29)

2.32.2 (2024-05-21)

2.32.1 (2024-05-20)

2.32.0 (2024-05-20)

v3.14.0

v3.13.0

v3.12.0

v3.11.1

v3.10.0

v3.9.0

v3.8.2

v3.8.1

v3.8.0

3.7.0

3.14.0 (2024-03-21)

3.13.0 (2024-03-21)

3.12.0 (2023-10-19)

3.11.1 (2023-06-15)

3.11.0 (2023-06-15)

2.8.0

dependabot bot commented on behalf of github Jun 5, 2024 •

edited

Loading

`v2.8.0 <https://github.com/jpadilla/pyjwt/compare/2.7.0...2.8.0>`__

`v2.7.0 <https://github.com/jpadilla/pyjwt/compare/2.6.0...2.7.0>`__