Skip to content

Bump the minor-patch group with 3 updates #1046

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Closed
wants to merge 1 commit into from
Closed

Bump the minor-patch group with 3 updates #1046

wants to merge 1 commit into from

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Sep 9, 2024 •
edited
Loading

Bumps the minor-patch group with 3 updates: fastapi, pydantic and ruff.

Updates fastapi from 0.112.2 to 0.114.0

Release notes

Sourced from fastapi's releases.

0.114.0

You can restrict form fields to only include those declared in a Pydantic model and forbid any extra field sent in the request using Pydantic's model_config = {"extra": "forbid"}:

from typing import Annotated
from fastapi import FastAPI, Form
from pydantic import BaseModel
app = FastAPI()
class FormData(BaseModel):
username: str
password: str
model_config = {"extra": "forbid"}
@​app.post("/login/")
async def login(data: Annotated[FormData, Form()]):
return data

Read the new docs: Form Models - Forbid Extra Form Fields.

Features

  • ✨ Add support for forbidding extra form fields with Pydantic models. PR #12134 by @​tiangolo.

Docs

  • 📝 Update docs, Form Models section title, to match config name. PR #12152 by @​tiangolo.

Internal

  • ✅ Update internal tests for latest Pydantic, including CI tweaks to install the latest Pydantic. PR #12147 by @​tiangolo.

0.113.0

Now you can declare form fields with Pydantic models:

from typing import Annotated
from fastapi import FastAPI, Form
from pydantic import BaseModel
app = FastAPI()
class FormData(BaseModel):
</tr></table>

... (truncated)

Commits
  • bde12fa 🔖 Release version 0.114.0
  • 74842f0 📝 Update release notes
  • e68d8c6 📝 Update release notes
  • 4ff22a0 📝 Update docs, Form Models section title, to match config name (#12152)
  • a11e392 📝 Update release notes
  • 4633b1b ✨ Add support for forbidding extra form fields with Pydantic models (#12134)
  • 1b06b53 📝 Update release notes
  • c411b81 ✅ Update internal tests for latest Pydantic, including CI tweaks to install t...
  • d86f660 🔖 Release version 0.113.0
  • 179f838 📝 Update release notes
  • Additional commits viewable in compare view

Updates pydantic from 2.8.2 to 2.9.0

Release notes

Sourced from pydantic's releases.

v2.9.0 (2024-09-05)

The code released in v2.9.0 is practically identical to that of v2.9.0b2.

Check out our blog post to learn more about the release highlights!

What's Changed

Packaging

New Features

Changes

Performance

... (truncated)

Changelog

Sourced from pydantic's changelog.

v2.9.0 (2024-09-05)

GitHub release

The code released in v2.9.0 is practically identical to that of v2.9.0b2.

What's Changed

Packaging

New Features

Changes

Performance

... (truncated)

Commits

Updates ruff from 0.6.3 to 0.6.4

Release notes

Sourced from ruff's releases.

0.6.4

Release Notes

Preview features

  • [flake8-builtins] Use dynamic builtins list based on Python version (#13172)
  • [pydoclint] Permit yielding None in DOC402 and DOC403 (#13148)
  • [pylint] Update diagnostic message for PLW3201 (#13194)
  • [ruff] Implement post-init-default (RUF033) (#13192)
  • [ruff] Implement useless if-else (RUF034) (#13218)

Rule changes

  • [flake8-pyi] Respect pep8_naming.classmethod-decorators settings when determining if a method is a classmethod in custom-type-var-return-type (PYI019) (#13162)
  • [flake8-pyi] Teach various rules that annotations might be stringized (#12951)
  • [pylint] Avoid no-self-use for attrs-style validators (#13166)
  • [pylint] Recurse into subscript subexpressions when searching for list/dict lookups (PLR1733, PLR1736) (#13186)
  • [pyupgrade] Detect aiofiles.open calls in UP015 (#13173)
  • [pyupgrade] Mark sys.version_info[0] < 3 and similar comparisons as outdated (UP036) (#13175)

CLI

  • Enrich messages of SARIF results (#13180)
  • Handle singular case for incompatible rules warning in ruff format output (#13212)

Bug fixes

  • [pydocstyle] Improve heuristics for detecting Google-style docstrings (#13142)
  • [refurb] Treat sep arguments with effects as unsafe removals (FURB105) (#13165)

Contributors

Install ruff 0.6.4

... (truncated)

Changelog

Sourced from ruff's changelog.

0.6.4

Preview features

  • [flake8-builtins] Use dynamic builtins list based on Python version (#13172)
  • [pydoclint] Permit yielding None in DOC402 and DOC403 (#13148)
  • [pylint] Update diagnostic message for PLW3201 (#13194)
  • [ruff] Implement post-init-default (RUF033) (#13192)
  • [ruff] Implement useless if-else (RUF034) (#13218)

Rule changes

  • [flake8-pyi] Respect pep8_naming.classmethod-decorators settings when determining if a method is a classmethod in custom-type-var-return-type (PYI019) (#13162)
  • [flake8-pyi] Teach various rules that annotations might be stringized (#12951)
  • [pylint] Avoid no-self-use for attrs-style validators (#13166)
  • [pylint] Recurse into subscript subexpressions when searching for list/dict lookups (PLR1733, PLR1736) (#13186)
  • [pyupgrade] Detect aiofiles.open calls in UP015 (#13173)
  • [pyupgrade] Mark sys.version_info[0] < 3 and similar comparisons as outdated (UP036) (#13175)

CLI

  • Enrich messages of SARIF results (#13180)
  • Handle singular case for incompatible rules warning in ruff format output (#13212)

Bug fixes

  • [pydocstyle] Improve heuristics for detecting Google-style docstrings (#13142)
  • [refurb] Treat sep arguments with effects as unsafe removals (FURB105) (#13165)
Commits
  • 65cc6ec Bump version to 0.6.4 (#13253)
  • 66fe226 [red-knot] fix lookup of nonlocal names in deferred annotations (#13236)
  • e965f9c [red-knot] Infer Unknown for the loop var in async for loops (#13243)
  • 0512428 [red-knot] Emit a diagnostic if the value of a starred expression or a `yield...
  • 46a4573 [red-knot] Add type inference for basic for loops (#13195)
  • 5728909 Make mypy pass on black in knot_benchmark (#13235)
  • 9d1bd7a [pylint] removed dunder methods in Python 3 (PLW3201) (#13194)
  • e37bde4 [ruff] implement useless if-else (RUF034) (#13218)
  • 862bd0c [red-knot] Add debug assert to check for duplicate definitions (#13214)
  • e1e9143 [red-knot] Handle multiple comprehension targets (#13213)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the minor-patch group with 3 updates
d0642ce 
Bumps the minor-patch group with 3 updates: [fastapi](https://github.com/fastapi/fastapi), [pydantic](https://github.com/pydantic/pydantic) and [ruff](https://github.com/astral-sh/ruff).


Updates `fastapi` from 0.112.2 to 0.114.0
- [Release notes](https://github.com/fastapi/fastapi/releases)
- [Commits](fastapi/fastapi@0.112.2...0.114.0)

Updates `pydantic` from 2.8.2 to 2.9.0
- [Release notes](https://github.com/pydantic/pydantic/releases)
- [Changelog](https://github.com/pydantic/pydantic/blob/main/HISTORY.md)
- [Commits](pydantic/pydantic@v2.8.2...v2.9.0)

Updates `ruff` from 0.6.3 to 0.6.4
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.6.3...0.6.4)

---
updated-dependencies:
- dependency-name: fastapi
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-patch
- dependency-name: pydantic
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-patch
- dependency-name: ruff
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot requested a review from a team as a code owner September 9, 2024 02:12
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Sep 9, 2024
@github-actions GitHub Actions
Copy link

github-actions bot commented Sep 9, 2024

The minor update of this production dependency was not automatically approved. For production dependencies, these semver updates can be automatically approved: patch

@github-actions github-actions bot enabled auto-merge (squash) September 9, 2024 02:12
@alexcottner
Copy link
Contributor

alexcottner commented Sep 11, 2024 •
edited
Loading

Pydantic bug is affecting us: pydantic/pydantic#10333 . It looks like v2.9.1 still has the issue for us. Gonna sit on this for a bit while the pydandic folks look into it.

@dependabot Dependabot
Copy link
Contributor Author

dependabot bot commented on behalf of github Sep 16, 2024

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot bot closed this Sep 16, 2024
auto-merge was automatically disabled September 16, 2024 03:01

Pull request was closed

@dependabot dependabot bot deleted the dependabot/pip/minor-patch-808a94c1bd branch September 16, 2024 03:01
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
dependencies Pull requests that update a dependency file python Pull requests that update Python code
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
1 participant
@alexcottner