Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Oct 21, 2024

Bumps the minor-and-patch group with 13 updates:

Package From To
pystac-client 0.8.3 0.8.4
stac-check 1.3.3 1.4.0
coverage 7.6.3 7.6.4
mypy 1.12.0 1.12.1
cryptography 43.0.1 43.0.3
markupsafe 3.0.1 3.0.2
marshmallow 3.22.0 3.23.0
orjson 3.10.7 3.10.9
ruamel-yaml-clib 0.2.8 0.2.12
setuptools 75.1.0 75.2.0
starlette 0.39.2 0.41.0
uvicorn 0.31.1 0.32.0
virtualenv 20.26.6 20.27.0

Updates pystac-client from 0.8.3 to 0.8.4

Release notes

Sourced from pystac-client's releases.

v0.8.4

What's Changed

New Contributors

Full Changelog: stac-utils/pystac-client@v0.8.3...v0.8.4

Changelog

Sourced from pystac-client's changelog.

[v0.8.4] - 2024-10-16

Added

  • Support for collection search via CollectionSearch class and associated client methods #735

Removed

  • Python 3.9 support #724
Commits
  • e666078 Release v0.8.4 (#742)
  • 60bf1fa ci: don't use mambaforge (#741)
  • 3fe2670 Collection search (#735)
  • 44aa3a5 build(deps): update pre-commit requirement from ~=3.2 to ~=4.0 (#738)
  • 79a5a0b build(deps): bump ruff from 0.6.8 to 0.6.9 (#739)
  • cba02d2 build(deps): update hvplot requirement from ~=0.10.0 to ~=0.11.0 (#737)
  • e57a99d build(deps): bump ruff from 0.6.7 to 0.6.8 (#736)
  • 0b536ca build(deps): bump ruff from 0.6.5 to 0.6.7 (#734)
  • b1fcf2e build(deps): bump ruff from 0.6.4 to 0.6.5 (#733)
  • 5d1ae07 build(deps): update types-requests requirement from ~=2.31.0 to ~=2.32.0 (#720)
  • Additional commits viewable in compare view

Updates stac-check from 1.3.3 to 1.4.0

Release notes

Sourced from stac-check's releases.

v1.4.0

What's Changed

Added

  • Added pre-commit config (#111)
  • Added publish.yml to automatically publish new releases to PyPI (#111)

Changed

  • Updated stac-validator dependency to ensure STAC v1.1.0 compliance (#111)

Full Changelog: stac-utils/stac-check@v1.3.3...v1.4.0

Changelog

Sourced from stac-check's changelog.

[v1.4.0] - 2024-10-09

Added

  • Added pre-commit config (#111)
  • Added publish.yml to automatically publish new releases to PyPI (#111)

Changed

  • Updated stac-validator dependency to ensure STAC v1.1.0 compliance (#111)
Commits

Updates coverage from 7.6.3 to 7.6.4

Changelog

Sourced from coverage's changelog.

Version 7.6.4 — 2024-10-20

  • fix: multi-line with statements could cause contained branches to be incorrectly marked as missing (issue 1880_). This is now fixed.

.. _issue 1880: nedbat/coveragepy#1880

.. _changes_7-6-3:

Commits
  • f24f76b docs: sample HTML for 7.6.4
  • 96e10f7 docs: prep for 7.6.4
  • b8c236a fix: multi-line with-statements exit correctly. #1880
  • 64b7a45 docs: another discord reference
  • 68d7427 docs: Python Discord
  • 43adcea build: include 3.14 in the usual Pythons
  • fb2b49f build: github_releases can update older releases, and pauses to get the sorti...
  • ca550ca 3.0b2 wasn't correctly titled
  • debcc77 build: bump version
  • See full diff in compare view

Updates mypy from 1.12.0 to 1.12.1

Changelog

Sourced from mypy's changelog.

Mypy 1.12.1

  • Fix crash when showing partially analyzed type in error message (Ivan Levkivskyi, PR 17961)
  • Fix iteration over union (when self type is involved) (Shantanu, PR 17976)
  • Fix type object with type var default in union context (Jukka Lehtosalo, PR 17991)
  • Revert change to os.path stubs affecting use of os.PathLike[Any] (Shantanu, PR 17995)

Acknowledgements

Thanks to all mypy contributors who contributed to this release:

  • Ali Hamdan
  • Anders Kaseorg
  • Bénédikt Tran
  • Brian Schubert
  • bzoracler
  • Chelsea Durazo
  • Danny Yang
  • Edgar Ramírez Mondragón
  • Eric Mark Martin
  • InSync
  • Ivan Levkivskyi
  • Jordandev678
  • Katrina Connors
  • Kirill Podoprigora
  • Marc Mueller
  • Max Muoto
  • Max Murin
  • Michael Carlstrom
  • Michael I Chen
  • Pradyun Gedam
  • quinn-sasha
  • Raphael Krupinski
  • Sebastian Rittau
  • Shantanu
  • sobolevn
  • Soubhik Kumar Mitra
  • Stanislav Terliakov
  • wyattscarpenter

I’d also like to thank my employer, Dropbox, for supporting mypy development.

Mypy 1.11

We’ve just uploaded mypy 1.11 to the Python Package Index (PyPI). Mypy is a static type checker for Python. This release includes new features, performance improvements and bug fixes. You can install it as follows:

python3 -m pip install -U mypy

You can read the full documentation for this release on Read the Docs.

Support Python 3.12 Syntax for Generics (PEP 695)

... (truncated)

Commits

Updates cryptography from 43.0.1 to 43.0.3

Changelog

Sourced from cryptography's changelog.

43.0.3 - 2024-10-18


* Fixed release metadata for ``cryptography-vectors``

.. _v43-0-2:

43.0.2 - 2024-10-18

  • Fixed compilation when using LibreSSL 4.0.0.

.. _v43-0-1:

Commits

Updates markupsafe from 3.0.1 to 3.0.2

Release notes

Sourced from markupsafe's releases.

3.0.2

This is the MarkupSafe 3.0.2 fix release, which fixes bugs but does not otherwise change behavior and should not result in breaking changes.

PyPI: https://pypi.org/project/MarkupSafe/3.0.2/ Changes: https://markupsafe.palletsprojects.com/page/changes/#version-3-0-2 Milestone: https://github.com/pallets/markupsafe/milestone/14?closed=1

  • Fix compatibility when __str__ returns a str subclass. #472
  • Build requires setuptools >= 70.1. #475
Changelog

Sourced from markupsafe's changelog.

Version 3.0.2

Released 2024-10-18

  • Fix compatibility when __str__ returns a str subclass. :issue:472
  • Build requires setuptools >= 70.1. :issue:475
Commits

Updates marshmallow from 3.22.0 to 3.23.0

Changelog

Sourced from marshmallow's changelog.

3.23.0 (2024-10-17)


Features:

  • Typing: replace "type" with specific metaclass for Schema and Field.

Other changes:

  • Officially support Python 3.13 (:pr:2319).
  • Drop support for Python 3.8 (:pr:2318).
Commits

Updates orjson from 3.10.7 to 3.10.9

Release notes

Sourced from orjson's releases.

3.10.9

Fixed

  • Fix int serialization on 32-bit Python 3.8, 3.9, 3.10. This was introduced in 3.10.8.

3.10.8

Changed

  • int serialization no longer chains OverflowError to the the __cause__ attribute of orjson.JSONEncodeError when range exceeded.
  • Compatibility with CPython 3.14 alpha 1.
  • Improve performance.
Changelog

Sourced from orjson's changelog.

3.10.9

Fixed

  • Fix int serialization on 32-bit Python 3.8, 3.9, 3.10. This was introduced in 3.10.8.

3.10.8

Changed

  • int serialization no longer chains OverflowError to the the __cause__ attribute of orjson.JSONEncodeError when range exceeded.
  • Compatibility with CPython 3.14 alpha 1.
  • Improve performance.
Commits

Updates ruamel-yaml-clib from 0.2.8 to 0.2.12

Updates setuptools from 75.1.0 to 75.2.0

Changelog

Sourced from setuptools's changelog.

v75.2.0

Features

  • Made errors when parsing Distribution data more explicit about the expected type (tuple[str, ...] | list[str]) -- by :user:Avasam (#4578)

Bugfixes

  • Fix a TypeError when a Distribution's old included attribute was a tuple -- by :user:Avasam (#4578)
  • Add workaround for bdist_wheel --dist-info-dir errors when customisation does not inherit from setuptools. (#4684)

v75.1.1

Bugfixes

  • Re-use pre-existing .dist-info dir when creating wheels via the build backend APIs (PEP 517) and the metadata_directory argument is passed -- by :user:pelson. (#1825)
  • Changed egg_info command to avoid adding an empty .egg-info directory while iterating over entry-points. This avoids triggering integration problems with importlib.metadata/importlib_metadata (reference: pypa/pyproject-hooks#206). (#4680)
Commits
  • 61a5a03 Bump version: 75.1.1 → 75.2.0
  • 8ad3ea7 Workaround for bdist_wheel.dist_info_dir problems (#4684)
  • 9af0877 Type sequence checks in setuptools/dist.py (#4578)
  • 0534fde Add news fragment
  • 50b732a Check for more specific error message
  • a663287 Add pragma for edge-case code path
  • 96be735 Workaround for bdist_wheel.dist_info_dir problems
  • 000a413 Deprecate public access to setuptools.dist.sequence
  • 00995c1 Use variable msg instead of tmpl in setuptools/dist
  • d457d0e Type sequence checks in setuptools/dist.py
  • Additional commits viewable in compare view

Updates starlette from 0.39.2 to 0.41.0

Release notes

Sourced from starlette's releases.

Version 0.41.0

Added

Version 0.40.0

This release fixes a Denial of service (DoS) via multipart/form-data requests.

You can view the full security advisory: GHSA-f96h-pmfr-66vw

Fixed

  • Add max_part_size to MultiPartParser to limit the size of parts in multipart/form-data requests fd038f3.
Changelog

Sourced from starlette's changelog.

0.41.0 (October 15, 2024)

Added

  • Allow to raise HTTPException before websocket.accept() #2725.

0.40.0 (October 15, 2024)

This release fixes a Denial of service (DoS) via multipart/form-data requests.

You can view the full security advisory: GHSA-f96h-pmfr-66vw

Fixed

  • Add max_part_size to MultiPartParser to limit the size of parts in multipart/form-data requests fd038f3.
Commits

Updates uvicorn from 0.31.1 to 0.32.0

Release notes

Sourced from uvicorn's releases.

Version 0.32.0

Added

  • Officially support Python 3.13 (#2482)
  • Warn when max_request_limit is exceeded (#2430)

Full Changelog: Kludex/uvicorn@0.31.1...0.32.0

Changelog

Sourced from uvicorn's changelog.

0.32.0 (2024-10-15)

Added

  • Officially support Python 3.13 (#2482)
  • Warn when max_request_limit is exceeded (#2430)
Commits

Updates virtualenv from 20.26.6 to 20.27.0

Release notes

Sourced from virtualenv's releases.

20.27.0

What's Changed

New Contributors

Full Changelog: pypa/virtualenv@20.26.5...20.27.0

Changelog

Sourced from virtualenv's changelog.

v20.27.0 (2024-10-17)

Features - 20.27.0

- Drop 3.7 support as the CI environments no longer allow it running - by :user:`gaborbernat`. (:issue:`2758`)

Bugfixes - 20.27.0

  • When a $PATH entry cannot be checked for existence, skip it instead of terminating - by :user:hroncok. (:issue:2782)

  • Upgrade embedded wheels:

    • setuptools to 75.2.0 from 75.1.0
    • Removed pip of 24.0
    • Removed setuptools of 68.0.0
    • Removed wheel of 0.42.0
    • by :user:gaborbernat. (:issue:2783)
  • Fix zipapp is broken on Windows post distlib 0.3.9 - by :user:gaborbernat. (:issue:2784)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the minor-and-patch group with 13 updates:

| Package | From | To |
| --- | --- | --- |
| [pystac-client](https://github.com/stac-utils/pystac-client) | `0.8.3` | `0.8.4` |
| [stac-check](https://github.com/stac-utils/stac-check) | `1.3.3` | `1.4.0` |
| [coverage](https://github.com/nedbat/coveragepy) | `7.6.3` | `7.6.4` |
| [mypy](https://github.com/python/mypy) | `1.12.0` | `1.12.1` |
| [cryptography](https://github.com/pyca/cryptography) | `43.0.1` | `43.0.3` |
| [markupsafe](https://github.com/pallets/markupsafe) | `3.0.1` | `3.0.2` |
| [marshmallow](https://github.com/marshmallow-code/marshmallow) | `3.22.0` | `3.23.0` |
| [orjson](https://github.com/ijl/orjson) | `3.10.7` | `3.10.9` |
| ruamel-yaml-clib | `0.2.8` | `0.2.12` |
| [setuptools](https://github.com/pypa/setuptools) | `75.1.0` | `75.2.0` |
| [starlette](https://github.com/encode/starlette) | `0.39.2` | `0.41.0` |
| [uvicorn](https://github.com/encode/uvicorn) | `0.31.1` | `0.32.0` |
| [virtualenv](https://github.com/pypa/virtualenv) | `20.26.6` | `20.27.0` |


Updates `pystac-client` from 0.8.3 to 0.8.4
- [Release notes](https://github.com/stac-utils/pystac-client/releases)
- [Changelog](https://github.com/stac-utils/pystac-client/blob/main/CHANGELOG.md)
- [Commits](stac-utils/pystac-client@v0.8.3...v0.8.4)

Updates `stac-check` from 1.3.3 to 1.4.0
- [Release notes](https://github.com/stac-utils/stac-check/releases)
- [Changelog](https://github.com/stac-utils/stac-check/blob/main/CHANGELOG.md)
- [Commits](stac-utils/stac-check@v1.3.3...v1.4.0)

Updates `coverage` from 7.6.3 to 7.6.4
- [Release notes](https://github.com/nedbat/coveragepy/releases)
- [Changelog](https://github.com/nedbat/coveragepy/blob/master/CHANGES.rst)
- [Commits](nedbat/coveragepy@7.6.3...7.6.4)

Updates `mypy` from 1.12.0 to 1.12.1
- [Changelog](https://github.com/python/mypy/blob/master/CHANGELOG.md)
- [Commits](python/mypy@v1.12.0...v1.12.1)

Updates `cryptography` from 43.0.1 to 43.0.3
- [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst)
- [Commits](pyca/cryptography@43.0.1...43.0.3)

Updates `markupsafe` from 3.0.1 to 3.0.2
- [Release notes](https://github.com/pallets/markupsafe/releases)
- [Changelog](https://github.com/pallets/markupsafe/blob/main/CHANGES.rst)
- [Commits](pallets/markupsafe@3.0.1...3.0.2)

Updates `marshmallow` from 3.22.0 to 3.23.0
- [Changelog](https://github.com/marshmallow-code/marshmallow/blob/dev/CHANGELOG.rst)
- [Commits](marshmallow-code/marshmallow@3.22.0...3.23.0)

Updates `orjson` from 3.10.7 to 3.10.9
- [Release notes](https://github.com/ijl/orjson/releases)
- [Changelog](https://github.com/ijl/orjson/blob/master/CHANGELOG.md)
- [Commits](ijl/orjson@3.10.7...3.10.9)

Updates `ruamel-yaml-clib` from 0.2.8 to 0.2.12

Updates `setuptools` from 75.1.0 to 75.2.0
- [Release notes](https://github.com/pypa/setuptools/releases)
- [Changelog](https://github.com/pypa/setuptools/blob/main/NEWS.rst)
- [Commits](pypa/setuptools@v75.1.0...v75.2.0)

Updates `starlette` from 0.39.2 to 0.41.0
- [Release notes](https://github.com/encode/starlette/releases)
- [Changelog](https://github.com/encode/starlette/blob/master/docs/release-notes.md)
- [Commits](Kludex/starlette@0.39.2...0.41.0)

Updates `uvicorn` from 0.31.1 to 0.32.0
- [Release notes](https://github.com/encode/uvicorn/releases)
- [Changelog](https://github.com/encode/uvicorn/blob/master/CHANGELOG.md)
- [Commits](Kludex/uvicorn@0.31.1...0.32.0)

Updates `virtualenv` from 20.26.6 to 20.27.0
- [Release notes](https://github.com/pypa/virtualenv/releases)
- [Changelog](https://github.com/pypa/virtualenv/blob/main/docs/changelog.rst)
- [Commits](pypa/virtualenv@20.26.6...20.27.0)

---
updated-dependencies:
- dependency-name: pystac-client
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: stac-check
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: coverage
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: mypy
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: cryptography
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: markupsafe
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: marshmallow
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: orjson
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: ruamel-yaml-clib
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: setuptools
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: starlette
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: uvicorn
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: virtualenv
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Oct 21, 2024
@gadomski gadomski merged commit 764b4d0 into main Oct 21, 2024
8 checks passed
@gadomski gadomski deleted the dependabot/pip/minor-and-patch-86ccc5f47c branch October 21, 2024 12:33
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Pull requests that update Python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant