Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Deps: Bump the python-packages group across 1 directory with 12 updates #41

Merged
merged 1 commit into from
Oct 28, 2024
Merged

Deps: Bump the python-packages group across 1 directory with 12 updates #41

merged 1 commit into from
Oct 28, 2024

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Oct 28, 2024

Bumps the python-packages group with 11 updates in the / directory:

Package From To
fastapi 0.115.2 0.115.4
uvicorn 0.31.1 0.32.0
coverage 7.6.3 7.6.4
anyio 4.6.2 4.6.2.post1
httptools 0.6.1 0.6.4
mypy 1.11.2 1.13.0
pydantic 1.10.18 2.9.2
rich 13.9.2 13.9.3
ruff 0.6.9 0.7.1
sqlalchemy 2.0.35 2.0.36
uvloop 0.20.0 0.21.0

Updates fastapi from 0.115.2 to 0.115.4

Release notes

Sourced from fastapi's releases.

0.115.4

Refactors

  • ♻️ Update logic to import and check python-multipart for compatibility with newer version. PR #12627 by @​tiangolo.

Docs

Translations

  • 📝 Update includes in docs/de/docs/advanced/async-tests.md. PR #12567 by @​imjuanleonard.
  • 🌐 Add Portuguese translation for docs/pt/docs/tutorial/sql-databases.md. PR #12530 by @​ilacftemp.
  • 🌐 Add Korean translation for docs/ko/docs/benchmarks.md. PR #12540 by @​Limsunoh.
  • 🌐 Add Portuguese translation for docs/pt/docs/how-to/separate-openapi-schemas.md. PR #12518 by @​ilacftemp.
  • 🌐 Update Traditional Chinese translation for docs/zh-hant/docs/deployment/index.md. PR #12521 by @​codingjenny.
  • 🌐 Update Traditional Chinese translation for docs/zh-hant/docs/deployment/cloud.md. PR #12522 by @​codingjenny.
  • 🌐 Update Traditional Chinese translation for docs/zh-hant/docs/how-to/index.md. PR #12523 by @​codingjenny.
  • 🌐 Update Traditional Chinese translation for docs/zh-hant/docs/tutorial/index.md. PR #12524 by @​codingjenny.
  • 🌐 Add Traditional Chinese translation for docs/zh-hant/docs/how-to/index.md. PR #12468 by @​codingjenny.
  • 🌐 Add Traditional Chinese translation for docs/zh-hant/docs/tutorial/index.md. PR #12466 by @​codingjenny.

... (truncated)

Commits
  • 31887b1 🔖 Release version 0.115.4
  • b270ff1 📝 Update release notes
  • b31cbbf ♻️ Update logic to import and check python-multipart for compatibility with...
  • aee7674 📝 Update release notes
  • 4e6b1ac 📝 Update includes in docs/fr/docs/tutorial/body.md (#12596)
  • 9b1e5f2 📝 Update release notes
  • 60aba02 📝 Update includes in docs/fr/docs/tutorial/debugging.md (#12595)
  • 2a4cf17 📝 Update release notes
  • 453f559 📝 Update includes in docs/fr/docs/tutorial/query-params-str-validations.md ...
  • af269cd 📝 Update release notes
  • Additional commits viewable in compare view

Updates uvicorn from 0.31.1 to 0.32.0

Release notes

Sourced from uvicorn's releases.

Version 0.32.0

Added

  • Officially support Python 3.13 (#2482)
  • Warn when max_request_limit is exceeded (#2430)

Full Changelog: encode/uvicorn@0.31.1...0.32.0

Changelog

Sourced from uvicorn's changelog.

0.32.0 (2024-10-15)

Added

  • Officially support Python 3.13 (#2482)
  • Warn when max_request_limit is exceeded (#2430)
Commits

Updates coverage from 7.6.3 to 7.6.4

Changelog

Sourced from coverage's changelog.

Version 7.6.4 — 2024-10-20

  • fix: multi-line with statements could cause contained branches to be incorrectly marked as missing (issue 1880_). This is now fixed.

.. _issue 1880: nedbat/coveragepy#1880

.. _changes_7-6-3:

Commits
  • f24f76b docs: sample HTML for 7.6.4
  • 96e10f7 docs: prep for 7.6.4
  • b8c236a fix: multi-line with-statements exit correctly. #1880
  • 64b7a45 docs: another discord reference
  • 68d7427 docs: Python Discord
  • 43adcea build: include 3.14 in the usual Pythons
  • fb2b49f build: github_releases can update older releases, and pauses to get the sorti...
  • ca550ca 3.0b2 wasn't correctly titled
  • debcc77 build: bump version
  • See full diff in compare view

Updates anyio from 4.6.2 to 4.6.2.post1

Commits

Updates httptools from 0.6.1 to 0.6.4

Release notes

Sourced from httptools's releases.

v0.6.4

Fixes

  • Include Cython source files in sdist (by @​mgorny in 2287a95a for #115)

v0.6.3

Fixes

v0.6.2

Fixes

Commits

Updates mypy from 1.11.2 to 1.13.0

Changelog

Sourced from mypy's changelog.

Mypy Release Notes

Next release

Mypy 1.13

We’ve just uploaded mypy 1.13 to the Python Package Index (PyPI). Mypy is a static type checker for Python. You can install it as follows:

python3 -m pip install -U mypy

You can read the full documentation for this release on Read the Docs.

Note that unlike typical releases, Mypy 1.13 does not have any changes to type checking semantics from 1.12.1.

Improved performance

Mypy 1.13 contains several performance improvements. Users can expect mypy to be 5-20% faster. In environments with long search paths (such as environments using many editable installs), mypy can be significantly faster, e.g. 2.2x faster in the use case targeted by these improvements.

Mypy 1.13 allows use of the orjson library for handling the cache instead of the stdlib json, for improved performance. You can ensure the presence of orjson using the faster-cache extra:

python3 -m pip install -U mypy[faster-cache]

Mypy may depend on orjson by default in the future.

These improvements were contributed by Shantanu.

List of changes:

  • Significantly speed up file handling error paths (Shantanu, PR 17920)
  • Use fast path in modulefinder more often (Shantanu, PR 17950)
  • Let mypyc optimise os.path.join (Shantanu, PR 17949)
  • Make is_sub_path faster (Shantanu, PR 17962)
  • Speed up stubs suggestions (Shantanu, PR 17965)
  • Use sha1 for hashing (Shantanu, PR 17953)
  • Use orjson instead of json, when available (Shantanu, PR 17955)
  • Add faster-cache extra, test in CI (Shantanu, PR 17978)

Acknowledgements

Thanks to all mypy contributors who contributed to this release:

  • Shantanu Jain
  • Jukka Lehtosalo

Mypy 1.12

We’ve just uploaded mypy 1.12 to the Python Package Index (PyPI). Mypy is a static type

... (truncated)

Commits

Updates pydantic from 1.10.18 to 2.9.2

Release notes

Sourced from pydantic's releases.

v2.9.2 (2024-09-17)

What's Changed

Fixes

Full Changelog: pydantic/pydantic@v2.9.1...v2.9.2

v2.9.1 (2024-09-09)

What's Changed

Fixes

Full Changelog: pydantic/pydantic@v2.9.0...v2.9.1

v2.9.0 (2024-09-05)

The code released in v2.9.0 is practically identical to that of v2.9.0b2.

Check out our blog post to learn more about the release highlights!

What's Changed

Packaging

New Features

... (truncated)

Changelog

Sourced from pydantic's changelog.

v2.9.2 (2024-09-17)

GitHub release

What's Changed

Fixes

v2.9.1 (2024-09-09)

GitHub release

What's Changed

Fixes

v2.9.0 (2024-09-05)

GitHub release

The code released in v2.9.0 is practically identical to that of v2.9.0b2.

What's Changed

Packaging

New Features

... (truncated)

Commits
  • 7cedbfb history updates
  • 7eab2b8 v bump
  • c0a288f Fix ZoneInfo with various invalid types (#10408)
  • ea6115d Fix variance issue in _IncEx type alias, only allow True (#10414)
  • fbfe25a Fix serialization schema generation when using PlainValidator (#10427)
  • 26cff3c Adding notes on designing callable discriminators (#10400)
  • 8a0e7ad Do not error when trying to evaluate annotations of private attributes (#10358)
  • ecc5275 bump
  • 2c61bfd Fix evaluation of stringified annotations during namespace inspection (#10347)
  • 3d364cb Use correct types namespace when building namedtuple core schemas (#10337)
  • Additional commits viewable in compare view

Updates rich from 13.9.2 to 13.9.3

Release notes

Sourced from rich's releases.

The irregular expression release

Fix a broken regex that resulted in the slow path being chosen for some operations. This fix should result in notable speedups for some operations, such as wrapping text.

[13.9.3] - 2024-10-22

Fixed

Changelog

Sourced from rich's changelog.

[13.9.3] - 2024-10-22

Fixed

Commits

Updates ruff from 0.6.9 to 0.7.1

Release notes

Sourced from ruff's releases.

0.7.1

Release Notes

Preview features

  • Fix E221 and E222 to flag missing or extra whitespace around == operator (#13890)
  • Formatter: Alternate quotes for strings inside f-strings in preview (#13860)
  • Formatter: Join implicit concatenated strings when they fit on a line (#13663)
  • [pylint] Restrict iteration-over-set to only work on sets of literals (PLC0208) (#13731)

Rule changes

  • [flake8-type-checking] Support auto-quoting when annotations contain quotes (#11811)

Server

  • Avoid indexing the workspace for single-file mode (#13770)

Bug fixes

  • Make ARG002 compatible with EM101 when raising NotImplementedError (#13714)

Other changes

  • Introduce more Docker tags for Ruff (similar to uv) (#13274)

Contributors

Install ruff 0.7.1

Install prebuilt binaries via shell script

... (truncated)

Changelog

Sourced from ruff's changelog.

0.7.1

Preview features

  • Fix E221 and E222 to flag missing or extra whitespace around == operator (#13890)
  • Formatter: Alternate quotes for strings inside f-strings in preview (#13860)
  • Formatter: Join implicit concatenated strings when they fit on a line (#13663)
  • [pylint] Restrict iteration-over-set to only work on sets of literals (PLC0208) (#13731)

Rule changes

  • [flake8-type-checking] Support auto-quoting when annotations contain quotes (#11811)

Server

  • Avoid indexing the workspace for single-file mode (#13770)

Bug fixes

  • Make ARG002 compatible with EM101 when raising NotImplementedError (#13714)

Other changes

  • Introduce more Docker tags for Ruff (similar to uv) (#13274)

0.7.0

Check out the blog post for a migration guide and overview of the changes!

Breaking changes

  • The pytest rules PT001 and PT023 now default to omitting the decorator parentheses when there are no arguments (#12838, #13292). This was a change that we attempted to make in Ruff v0.6.0, but only partially made due to an error on our part. See the blog post for more details.
  • The useless-try-except rule (in our tryceratops category) has been recoded from TRY302 to TRY203 (#13502). This ensures Ruff's code is consistent with the same rule in the tryceratops linter.
  • The lint.allow-unused-imports setting has been removed (#13677). Use lint.pyflakes.allow-unused-imports instead.

Formatter preview style

  • Normalize implicit concatenated f-string quotes per part (#13539)

Preview linter features

  • [refurb] implement hardcoded-string-charset (FURB156) (#13530)
  • [refurb] Count codepoints not bytes for slice-to-remove-prefix-or-suffix (FURB188) (#13631)

... (truncated)

Commits
  • 337af83 Bump version to 0.7.1 (#13913)
  • 113ce84 Fix normalize arguments when fstring_formatting is disabled (#13910)
  • 7272f83 Fix preview style name in can_omit_parentheses to is_f_string_formatting_en...
  • 3eb4546 [red-knot] Format mdtest Python snippets more concisely (#13905)
  • 77ae0cc [red-knot] Infer subscript expression types for bytes literals (#13901)
  • 73ee72b Join implicit concatenated strings when they fit on a line (#13663)
  • e402e27 Use referencial equality in traversal helper methods (#13895)
  • de4181d Remove "default" remark from ruff check (#13900)
  • 2c57c2d [red-knot] Type narrowing for isinstance checks (#13894)
  • 72c18c8 Fix E221 and E222 to flag missing or extra whitespace around == operator (#...
  • Additional commits viewable in compare view

Updates sqlalchemy from 2.0.35 to 2.0.36

Release notes

Sourced from sqlalchemy's releases.

2.0.36

Released: October 15, 2024

orm

  • [orm] [usecase] Added new parameter _orm.mapped_column.hash to ORM constructs such as _orm.mapped_column(), _orm.relationship(), etc., which is interpreted for ORM Native Dataclasses in the same way as other dataclass-specific field parameters.

    References: #11923

  • [orm] [bug] Fixed bug in ORM bulk update/delete where using RETURNING with bulk update/delete in combination with populate_existing would fail to accommodate the populate_existing option.

    References: #11912

  • [orm] [bug] Continuing from #11912, columns marked with mapped_column.onupdate, mapped_column.server_onupdate, or Computed are now refreshed in ORM instances when running an ORM enabled UPDATE with WHERE criteria, even if the statement does not use RETURNING or populate_existing.

    References: #11917

  • [orm] [bug] Fixed regression caused by fixes to joined eager loading in #11449 released in 2.0.31, where a particular joinedload case could not be asserted correctly. We now have an example of that case so the assertion has been repaired to allow for it.

    References: #11965

  • [orm] [bug] Improved the error message emitted when trying to map as dataclass a class while also manually providing the __table__ attribute. This usage is currently not supported.

    References: #11973

  • [orm] [bug] Refined the check which the ORM lazy loader uses to detect "this would be loading by primary key and the primary key is NULL, skip loading" to take into account the current setting for the orm.Mapper.allow_partial_pks parameter. If this parameter is False, then a composite PK value that has partial NULL elements should also be skipped. This can apply to some composite overlapping foreign key configurations.

... (truncated)

Commits

Updates starlette from 0.39.2 to 0.41.2

Release notes

Sourced from starlette's releases.

Version 0.41.2

What's Changed

Full Changelog: encode/starlette@0.41.1...0.41.2

Version 0.41.1

What's Changed

Full Changelog: encode/starlette@0.41.0...0.41.1

Version 0.41.0

Added

Version 0.40.0

This release fixes a Denial of service (DoS) via multipart/form-data requests.

You can view the full security advisory: GHSA-f96h-pmfr-66vw

Fixed

  • Add max_part_size to MultiPartParser to limit the size of parts in multipart/form-data requests fd038f3.
Changelog

Sourced from starlette's changelog.

0.41.2 (October 27, 2024)

Fixed

  • Revert bump on python-multipart on starlette[full] extras #2737.

0.41.1 (October 24, 2024)

Fixed

  • Bump minimum python-multipart version to 0.0.13 #2734.
  • Change python-multipart import to python_multipart #2733.

0.41.0 (October 15, 2024)

Added

  • Allow to raise HTTPException before websocket.accept() #2725.

0.40.0 (October 15, 2024)

This release fixes a Denial of service (DoS) via multipart/form-data requests.

You can view the full security advisory: GHSA-f96h-pmfr-66vw

Fixed

  • Add max_part_size to MultiPartParser to limit the size of parts in multipart/form-data requests fd038f3.
Commits

Updates uvloop from 0.20.0 to 0.21.0

Release notes

Sourced from uvloop's releases.

v0.21.0

Changes

  • Add cleanup_socket param on create_unix_server() (#623) (by @​fantix in d6114d2)

Fixes

v0.21.0beta1

No release notes provided.

Commits

@dependabot
Deps: Bump the python-packages group across 1 directory with 12 updates
ae35b12 
Bumps the python-packages group with 11 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [fastapi](https://github.com/fastapi/fastapi) | `0.115.2` | `0.115.4` |
| [uvicorn](https://github.com/encode/uvicorn) | `0.31.1` | `0.32.0` |
| [coverage](https://github.com/nedbat/coveragepy) | `7.6.3` | `7.6.4` |
| [anyio](https://github.com/agronholm/anyio) | `4.6.2` | `4.6.2.post1` |
| [httptools](https://github.com/MagicStack/httptools) | `0.6.1` | `0.6.4` |
| [mypy](https://github.com/python/mypy) | `1.11.2` | `1.13.0` |
| [pydantic](https://github.com/pydantic/pydantic) | `1.10.18` | `2.9.2` |
| [rich](https://github.com/Textualize/rich) | `13.9.2` | `13.9.3` |
| [ruff](https://github.com/astral-sh/ruff) | `0.6.9` | `0.7.1` |
| [sqlalchemy](https://github.com/sqlalchemy/sqlalchemy) | `2.0.35` | `2.0.36` |
| [uvloop](https://github.com/MagicStack/uvloop) | `0.20.0` | `0.21.0` |



Updates `fastapi` from 0.115.2 to 0.115.4
- [Release notes](https://github.com/fastapi/fastapi/releases)
- [Commits](fastapi/fastapi@0.115.2...0.115.4)

Updates `uvicorn` from 0.31.1 to 0.32.0
- [Release notes](https://github.com/encode/uvicorn/releases)
- [Changelog](https://github.com/encode/uvicorn/blob/master/CHANGELOG.md)
- [Commits](encode/uvicorn@0.31.1...0.32.0)

Updates `coverage` from 7.6.3 to 7.6.4
- [Release notes](https://github.com/nedbat/coveragepy/releases)
- [Changelog](https://github.com/nedbat/coveragepy/blob/master/CHANGES.rst)
- [Commits](nedbat/coveragepy@7.6.3...7.6.4)

Updates `anyio` from 4.6.2 to 4.6.2.post1
- [Release notes](https://github.com/agronholm/anyio/releases)
- [Changelog](https://github.com/agronholm/anyio/blob/master/docs/versionhistory.rst)
- [Commits](agronholm/anyio@4.6.2...4.6.2.post1)

Updates `httptools` from 0.6.1 to 0.6.4
- [Release notes](https://github.com/MagicStack/httptools/releases)
- [Commits](MagicStack/httptools@v0.6.1...v0.6.4)

Updates `mypy` from 1.11.2 to 1.13.0
- [Changelog](https://github.com/python/mypy/blob/master/CHANGELOG.md)
- [Commits](python/mypy@v1.11.2...v1.13.0)

Updates `pydantic` from 1.10.18 to 2.9.2
- [Release notes](https://github.com/pydantic/pydantic/releases)
- [Changelog](https://github.com/pydantic/pydantic/blob/main/HISTORY.md)
- [Commits](pydantic/pydantic@v1.10.18...v2.9.2)

Updates `rich` from 13.9.2 to 13.9.3
- [Release notes](https://github.com/Textualize/rich/releases)
- [Changelog](https://github.com/Textualize/rich/blob/master/CHANGELOG.md)
- [Commits](Textualize/rich@v13.9.2...v13.9.3)

Updates `ruff` from 0.6.9 to 0.7.1
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.6.9...0.7.1)

Updates `sqlalchemy` from 2.0.35 to 2.0.36
- [Release notes](https://github.com/sqlalchemy/sqlalchemy/releases)
- [Changelog](https://github.com/sqlalchemy/sqlalchemy/blob/main/CHANGES.rst)
- [Commits](https://github.com/sqlalchemy/sqlalchemy/commits)

Updates `starlette` from 0.39.2 to 0.41.2
- [Release notes](https://github.com/encode/starlette/releases)
- [Changelog](https://github.com/encode/starlette/blob/master/docs/release-notes.md)
- [Commits](encode/starlette@0.39.2...0.41.2)

Updates `uvloop` from 0.20.0 to 0.21.0
- [Release notes](https://github.com/MagicStack/uvloop/releases)
- [Commits](MagicStack/uvloop@v0.20.0...v0.21.0)

---
updated-dependencies:
- dependency-name: fastapi
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-packages
- dependency-name: uvicorn
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-packages
- dependency-name: coverage
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python-packages
- dependency-name: anyio
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: python-packages
- dependency-name: httptools
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: python-packages
- dependency-name: mypy
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: python-packages
- dependency-name: pydantic
  dependency-type: indirect
  update-type: version-update:semver-major
  dependency-group: python-packages
- dependency-name: rich
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: python-packages
- dependency-name: ruff
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: python-packages
- dependency-name: sqlalchemy
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: python-packages
- dependency-name: starlette
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: python-packages
- dependency-name: uvloop
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: python-packages
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot requested a review from a team as a code owner October 28, 2024 05:06
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Oct 28, 2024
@greenbonebot greenbonebot enabled auto-merge (rebase) October 28, 2024 05:06
@greenbonebot greenbonebot merged commit ec191d5 into main Oct 28, 2024
9 of 11 checks passed
@greenbonebot greenbonebot deleted the dependabot/pip/python-packages-f8ed6b2835 branch October 28, 2024 09:58
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@y0urself y0urself y0urself approved these changes

Assignees
No one assigned
Labels
dependencies Pull requests that update a dependency file python Pull requests that update Python code
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
2 participants
@y0urself @greenbonebot