Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Deps: Bump the python-packages group across 1 directory with 11 updates #30

Closed
wants to merge 1 commit into from

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Aug 19, 2024

Bumps the python-packages group with 11 updates in the / directory:

Package From To
fastapi 0.112.0 0.112.1
uvicorn 0.30.5 0.30.6
lxml 5.2.2 5.3.0
pydantic-core 2.20.1 2.22.0
pyyaml 6.0.1 6.0.2
ruff 0.5.6 0.6.1
sqlalchemy 2.0.31 2.0.32
starlette 0.37.2 0.38.2
tomlkit 0.13.0 0.13.2
uvloop 0.19.0 0.20.0
watchfiles 0.22.0 0.23.0

Updates fastapi from 0.112.0 to 0.112.1

Release notes

Sourced from fastapi's releases.

0.112.1

Upgrades

Docs

Translations

  • 🌐 Add Portuguese translation for docs/pt/docs/tutorial/bigger-applications.md. PR #11971 by @​marcelomarkus.
  • 🌐 Add Portuguese translation for docs/pt/docs/advanced/testing-websockets.md. PR #11994 by @​ceb10n.
  • 🌐 Add Portuguese translation for docs/pt/docs/advanced/testing-dependencies.md. PR #11995 by @​ceb10n.
  • 🌐 Add Portuguese translation for docs/pt/docs/advanced/using-request-directly.md. PR #11956 by @​ceb10n.
  • 🌐 Add French translation for docs/fr/docs/tutorial/body-multiple-params.md. PR #11796 by @​pe-brian.
  • 🌐 Update Chinese translation for docs/zh/docs/tutorial/query-params.md. PR #11557 by @​caomingpei.
  • 🌐 Update typo in Chinese translation for docs/zh/docs/advanced/testing-dependencies.md. PR #11944 by @​bestony.
  • 🌐 Add Portuguese translation for docs/pt/docs/advanced/sub-applications.md and docs/pt/docs/advanced/behind-a-proxy.md. PR #11856 by @​marcelomarkus.
  • 🌐 Add Portuguese translation for docs/pt/docs/tutorial/cors.md and docs/pt/docs/tutorial/middleware.md. PR #11916 by @​wesinalves.
  • 🌐 Add French translation for docs/fr/docs/tutorial/path-params-numeric-validations.md. PR #11788 by @​pe-brian.

Internal

Commits
  • 4f937c0 🔖 Release version 0.112.1
  • 94be8ff 📝 Update release notes
  • 285a54c ⬆ Bump pypa/gh-action-pypi-publish from 1.8.14 to 1.9.0 (#11727)
  • b7c80cb 📝 Update release notes
  • 0d92b42 🔧 Add changelog URL to pyproject.toml, shows in PyPI (#11152)
  • 2f5ed4f 📝 Update release notes
  • 2c98017 👷 Do not sync labels as it overrides manually added labels (#12024)
  • fc91078 📝 Update release notes
  • 5fd9ab9 ⬆️ Allow Starlette 0.38.x, update the pin to >=0.37.2,<0.39.0 (#11876)
  • 84d69bb 📝 Update release notes
  • Additional commits viewable in compare view

Updates uvicorn from 0.30.5 to 0.30.6

Release notes

Sourced from uvicorn's releases.

Version 0.30.6

Fixed

  • Don't warn when upgrade is not WebSocket and depedencies are installed (#2360)

Full Changelog: encode/uvicorn@0.30.5...0.30.6

Changelog

Sourced from uvicorn's changelog.

0.30.6 (2024-08-13)

Fixed

  • Don't warn when upgrade is not WebSocket and depedencies are installed (#2360)
Commits
  • 7dc027d Version 0.30.6 (#2428)
  • 587a1cc fix: upgrade is not websocket and dependencies are installed, should not warn...
  • cee31a6 test(signal): add sleep to ensure shutdown completion (#2427)
  • eba64ef ci: timeout for test suite runs to 30 minutes (#2426)
  • 0f513d2 Remove signal testing order dependency (#2382)
  • See full diff in compare view

Updates lxml from 5.2.2 to 5.3.0

Changelog

Sourced from lxml's changelog.

5.3.0 (2024-08-10)

Features added

  • GH#421: Nested CDATA sections are no longer rejected but split on output to represent ]]> correctly. Patch by Gertjan Klein.

Bugs fixed

  • LP#2060160: Attribute values serialised differently in xmlfile.element() and xmlfile.write().

  • LP#2058177: The ISO-Schematron implementation could fail on unknown prefixes. Patch by David Lakin.

Other changes

  • LP#2067707: The strip_cdata option in HTMLParser() turned out to be useless and is now deprecated.

  • Binary wheels use the library versions libxml2 2.12.9 and libxslt 1.1.42.

  • Windows binary wheels use the library versions libxml2 2.11.8 and libxslt 1.1.39.

  • Built with Cython 3.0.11.

Commits
  • 475f4ab Update release date.
  • e356a1e Build: Add some debug output.
  • 8345680 Build: Retry library downloads on failures.
  • 2fe6c90 CI: Test oldest officially supported library versions again (the slightly new...
  • 00335a1 Build: Improve download regexes.
  • f3da47d Prepare release of lxml 5.3.0.
  • 3119703 Add missing global name to "all" in lxml.etree.
  • 9de6180 Build: Upgrade cibuildwheel version also for the matrix setup.
  • 54e36cb Build: Upgrade libxslt to latest (1.1.42).
  • d4f56ee Build: Slightly increase the oldest libxslt version that we test against to w...
  • Additional commits viewable in compare view

Updates pydantic-core from 2.20.1 to 2.22.0

Release notes

Sourced from pydantic-core's releases.

v2.22.0 2024-08-15

What's Changed

New Contributors

Full Changelog: pydantic/pydantic-core@v2.21.0...v2.22.0

v2.21.0 2024-08-05

What's Changed

Packaging

Fixes

Features

Performance

New Contributors

... (truncated)

Commits
  • a6d0d63 Version bump to prep for new release (#1406)
  • 08a99b5 Introduce exactness into Decimal validation logic (#1405)
  • fdd1e85 Adding tagged union serializer 🚀 (#1397)
  • 3d8295e Support complex numbers (#1331)
  • bb67044 Use typing_extensions.TypedDict on Python < 3.12 (#1404)
  • a072575 For missing fields, we don't warn on exclude_, so don't warn on exclude (...
  • 39a6b10 Fix float serialization behavior in strict mode (#1400)
  • 7368c1f stop clone-ing serializers (#1402)
  • fd81a75 Try each option in union serializer before inference (#1398)
  • 863640b Show value of wrongly typed in serialization warning (#1377)
  • Additional commits viewable in compare view

Updates pyyaml from 6.0.1 to 6.0.2

Release notes

Sourced from pyyaml's releases.

6.0.2

What's Changed

  • Support for Cython 3.x and Python 3.13.

Full Changelog: yaml/pyyaml@6.0.1...6.0.2

6.0.2rc1

  • Support for extension build with Cython 3.x
  • Support for Python 3.13
  • Added PyPI wheels for musllinux on aarch64
Changelog

Sourced from pyyaml's changelog.

6.0.2 (2024-08-06)

Commits

Updates ruff from 0.5.6 to 0.6.1

Release notes

Sourced from ruff's releases.

0.6.1

Release Notes

This is a hotfix release to address an issue with ruff-pre-commit. In v0.6, Ruff changed its behavior to lint and format Jupyter notebooks by default; however, due to an oversight, these files were still excluded by default if Ruff was run via pre-commit, leading to inconsistent behavior. This has now been fixed.

Preview features

  • [fastapi] Implement fast-api-unused-path-parameter (FAST003) (#12638)

Rule changes

  • [pylint] Rename too-many-positional to too-many-positional-arguments (R0917) (#12905)

Server

  • Fix crash when applying "fix-all" code-action to notebook cells (#12929)

Other changes

  • [flake8-naming]: Respect import conventions (N817) (#12922)

Contributors

Install ruff 0.6.1

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://github.com/astral-sh/ruff/releases/download/0.6.1/ruff-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -c "irm https://github.com/astral-sh/ruff/releases/download/0.6.1/ruff-installer.ps1 | iex"

Download ruff 0.6.1

File Platform Checksum
ruff-aarch64-apple-darwin.tar.gz Apple Silicon macOS checksum
ruff-x86_64-apple-darwin.tar.gz Intel macOS checksum

... (truncated)

Changelog

Sourced from ruff's changelog.

0.6.1

This is a hotfix release to address an issue with ruff-pre-commit. In v0.6, Ruff changed its behavior to lint and format Jupyter notebooks by default; however, due to an oversight, these files were still excluded by default if Ruff was run via pre-commit, leading to inconsistent behavior. This has now been fixed.

Preview features

  • [fastapi] Implement fast-api-unused-path-parameter (FAST003) (#12638)

Rule changes

  • [pylint] Rename too-many-positional to too-many-positional-arguments (R0917) (#12905)

Server

  • Fix crash when applying "fix-all" code-action to notebook cells (#12929)

Other changes

  • [flake8-naming]: Respect import conventions (N817) (#12922)

0.6.0

Check out the blog post for a migration guide and overview of the changes!

Breaking changes

See also, the "Remapped rules" section which may result in disabled rules.

  • Lint and format Jupyter Notebook by default (#12878).
  • Detect imports in src layouts by default for isort rules (#12848)
  • The pytest rules PT001 and PT023 now default to omitting the decorator parentheses when there are no arguments (#12838).

Deprecations

The following rules are now deprecated:

Remapped rules

The following rules have been remapped to new rule codes:

... (truncated)

Commits

Updates sqlalchemy from 2.0.31 to 2.0.32

Release notes

Sourced from sqlalchemy's releases.

2.0.32

Released: August 5, 2024

general

  • [general] [bug] [regression] Restored legacy class names removed from sqlalalchemy.orm.collections.*, including _orm.MappedCollection, _orm.mapped_collection(), _orm.column_mapped_collection(), _orm.attribute_mapped_collection(). Pull request courtesy Takashi Kajinami.

    References: #11435

orm

  • [orm] [usecase] The _orm.aliased.name parameter to _orm.aliased() may now be combined with the _orm.aliased.flat parameter, producing per-table names based on a name-prefixed naming convention. Pull request courtesy Eric Atkin.

    References: #11575

  • [orm] [bug] [regression] Fixed regression going back to 1.4 where accessing a collection using the "dynamic" strategy on a transient object and attempting to query would raise an internal error rather than the expected NoResultFound that occurred in 1.3.

    This change is also backported to: 1.4.53

    References: #11562

  • [orm] [bug] Fixed issue where using the _orm.Query.enable_eagerloads() and _orm.Query.yield_per() methods at the same time, in order to disable eager loading that's configured on the mapper directly, would be silently ignored, leading to errors or unexpected eager population of attributes.

    References: #10834

  • [orm] [bug] [regression] Fixed regression appearing in 2.0.21 caused by #10279 where using a _sql.delete() or _sql.update() against an ORM class that is the base of an inheritance hierarchy, while also specifying that subclasses should be loaded polymorphically, would leak the polymorphic joins into the UPDATE or DELETE statement as well creating incorrect SQL.

    References: #11625

  • [orm] [bug] [regression] Fixed regression from version 1.4 in

... (truncated)

Commits

Updates starlette from 0.37.2 to 0.38.2

Release notes

Sourced from starlette's releases.

Version 0.38.2

Fixed

  • Fix routing.get_name() not to assume all routines have __name__ #2648

Full Changelog: encode/starlette@0.38.1...0.38.2

Version 0.38.1

Removed

  • Revert "Add support for ASGI pathsend extension" #2649.

Full Changelog: encode/starlette@0.38.0...0.38.1

Version 0.38.0

Added

  • Allow use of memoryview in StreamingResponse and Response #2576 and #2577.
  • Send 404 instead of 500 when filename requested is too long on StaticFiles #2583.

Changed

  • Fail fast on invalid Jinja2Template instantiation parameters #2568.
  • Check endpoint handler is async only once #2536.

Fixed

  • Add proper synchronization to WebSocketTestSession #2597.

Full Changelog: encode/starlette@0.37.2...0.38.0

Changelog

Sourced from starlette's changelog.

0.38.2

July 27, 2024

Fixed

  • Not assume all routines have __name__ on routing.get_name() #2648.

0.38.1

July 23, 2024

Removed

  • Revert "Add support for ASGI pathsend extension" #2649.

0.38.0

July 20, 2024

Added

  • Allow use of memoryview in StreamingResponse and Response #2576 and #2577.
  • Send 404 instead of 500 when filename requested is too long on StaticFiles #2583.

Changed

  • Fail fast on invalid Jinja2Template instantiation parameters #2568.
  • Check endpoint handler is async only once #2536.

Fixed

  • Add proper synchronization to WebSocketTestSession #2597.
Commits

Updates tomlkit from 0.13.0 to 0.13.2

Release notes

Sourced from tomlkit's releases.

0.13.2

What's Changed

Full Changelog: python-poetry/tomlkit@0.13.1...0.13.2

0.13.1

What's Changed

New Contributors

Full Changelog: python-poetry/tomlkit@0.13.0...0.13.1

Changelog

Sourced from tomlkit's changelog.

[0.13.2] - 2024-08-14

Fixed

  • Fix deleting keys from an out-of-order table does not remove all table parts. (#379)

[0.13.1] - 2024-08-14

Fixed

  • Fix the Table.is_super_table() check for tables with dotted key as the only child. (#374)
  • Count table as a super table if it has children and all children are either tables or arrays of tables. (#377)
Commits
  • e6e5d38 fix: delete keys from out of order table (#379)
  • 8c1671a chore: bump version to 0.13.1
  • 28fe6ec fix: Empty table dumped when number of subtables > 1 (#378)
  • 168cb22 [pre-commit.ci] pre-commit autoupdate (#376)
  • 3594bdf [pre-commit.ci] pre-commit autoupdate (#372)
  • 8b288a5 fix: Table header missing (#375)
  • b1b38b3 Merge branch 'master' of github.com:python-poetry/tomlkit
  • 507ca76 doc: upgrade docs requirements
  • c35ab33 [pre-commit.ci] pre-commit autoupdate (#369)
  • 2344a42 Add tomlkit.dump() example (#370)
  • Additional commits viewable in compare view

Updates uvloop from 0.19.0 to 0.20.0

Release notes

Sourced from uvloop's releases.

v0.20.0

Changes

Fixes

Commits

Updates watchfiles from 0.22.0 to 0.23.0

Release notes

Sourced from watchfiles's releases.

v0.23.0 2024-08-07

What's Changed

New Contributors

Full Changelog: samuelcolvin/watchfiles@v0.22.0...v0.23.0

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot cr...

Description has been truncated

Bumps the python-packages group with 11 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [fastapi](https://github.com/fastapi/fastapi) | `0.112.0` | `0.112.1` |
| [uvicorn](https://github.com/encode/uvicorn) | `0.30.5` | `0.30.6` |
| [lxml](https://github.com/lxml/lxml) | `5.2.2` | `5.3.0` |
| [pydantic-core](https://github.com/pydantic/pydantic-core) | `2.20.1` | `2.22.0` |
| [pyyaml](https://github.com/yaml/pyyaml) | `6.0.1` | `6.0.2` |
| [ruff](https://github.com/astral-sh/ruff) | `0.5.6` | `0.6.1` |
| [sqlalchemy](https://github.com/sqlalchemy/sqlalchemy) | `2.0.31` | `2.0.32` |
| [starlette](https://github.com/encode/starlette) | `0.37.2` | `0.38.2` |
| [tomlkit](https://github.com/sdispater/tomlkit) | `0.13.0` | `0.13.2` |
| [uvloop](https://github.com/MagicStack/uvloop) | `0.19.0` | `0.20.0` |
| [watchfiles](https://github.com/samuelcolvin/watchfiles) | `0.22.0` | `0.23.0` |



Updates `fastapi` from 0.112.0 to 0.112.1
- [Release notes](https://github.com/fastapi/fastapi/releases)
- [Commits](fastapi/fastapi@0.112.0...0.112.1)

Updates `uvicorn` from 0.30.5 to 0.30.6
- [Release notes](https://github.com/encode/uvicorn/releases)
- [Changelog](https://github.com/encode/uvicorn/blob/master/CHANGELOG.md)
- [Commits](encode/uvicorn@0.30.5...0.30.6)

Updates `lxml` from 5.2.2 to 5.3.0
- [Release notes](https://github.com/lxml/lxml/releases)
- [Changelog](https://github.com/lxml/lxml/blob/master/CHANGES.txt)
- [Commits](lxml/lxml@lxml-5.2.2...lxml-5.3.0)

Updates `pydantic-core` from 2.20.1 to 2.22.0
- [Release notes](https://github.com/pydantic/pydantic-core/releases)
- [Commits](pydantic/pydantic-core@v2.20.1...v2.22.0)

Updates `pyyaml` from 6.0.1 to 6.0.2
- [Release notes](https://github.com/yaml/pyyaml/releases)
- [Changelog](https://github.com/yaml/pyyaml/blob/main/CHANGES)
- [Commits](yaml/pyyaml@6.0.1...6.0.2)

Updates `ruff` from 0.5.6 to 0.6.1
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.5.6...0.6.1)

Updates `sqlalchemy` from 2.0.31 to 2.0.32
- [Release notes](https://github.com/sqlalchemy/sqlalchemy/releases)
- [Changelog](https://github.com/sqlalchemy/sqlalchemy/blob/main/CHANGES.rst)
- [Commits](https://github.com/sqlalchemy/sqlalchemy/commits)

Updates `starlette` from 0.37.2 to 0.38.2
- [Release notes](https://github.com/encode/starlette/releases)
- [Changelog](https://github.com/encode/starlette/blob/master/docs/release-notes.md)
- [Commits](encode/starlette@0.37.2...0.38.2)

Updates `tomlkit` from 0.13.0 to 0.13.2
- [Release notes](https://github.com/sdispater/tomlkit/releases)
- [Changelog](https://github.com/python-poetry/tomlkit/blob/master/CHANGELOG.md)
- [Commits](python-poetry/tomlkit@0.13.0...0.13.2)

Updates `uvloop` from 0.19.0 to 0.20.0
- [Release notes](https://github.com/MagicStack/uvloop/releases)
- [Commits](MagicStack/uvloop@v0.19.0...v0.20.0)

Updates `watchfiles` from 0.22.0 to 0.23.0
- [Release notes](https://github.com/samuelcolvin/watchfiles/releases)
- [Commits](samuelcolvin/watchfiles@v0.22.0...v0.23.0)

---
updated-dependencies:
- dependency-name: fastapi
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-packages
- dependency-name: uvicorn
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-packages
- dependency-name: lxml
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: python-packages
- dependency-name: pydantic-core
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: python-packages
- dependency-name: pyyaml
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: python-packages
- dependency-name: ruff
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: python-packages
- dependency-name: sqlalchemy
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: python-packages
- dependency-name: starlette
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: python-packages
- dependency-name: tomlkit
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: python-packages
- dependency-name: uvloop
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: python-packages
- dependency-name: watchfiles
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: python-packages
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot requested a review from a team as a code owner August 19, 2024 04:29
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Aug 19, 2024
@greenbonebot greenbonebot enabled auto-merge (rebase) August 19, 2024 04:29
Copy link
Contributor Author

dependabot bot commented on behalf of github Aug 26, 2024

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot bot closed this Aug 26, 2024
auto-merge was automatically disabled August 26, 2024 05:09

Pull request was closed

@dependabot dependabot bot deleted the dependabot/pip/python-packages-3f82eef35b branch August 26, 2024 05:09
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file python Pull requests that update Python code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants