Commit e1968d0
Upgrade: [dependabot] - bump pip-licenses from 5.5.0 to 5.5.1 (#829)
Bumps [pip-licenses](https://github.com/raimon49/pip-licenses) from
5.5.0 to 5.5.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/raimon49/pip-licenses/releases">pip-licenses's
releases</a>.</em></p>
<blockquote>
<h2>v-5.5.1</h2>
<h1>Patch Notes for 5.5.1</h1>
<p>Contains packaging and CI updates, dependency/dev-dependency security
updates, small code/style fixes (typos, formatting), and preparation for
PEP-compliant metadata and sdist behaviour.</p>
<h3>Notable user-visible changes</h3>
<ul>
<li><input type="checkbox" checked="" disabled="" /> Version bump:
version set to 5.5.1 (piplicenses.py).</li>
<li><input type="checkbox" checked="" disabled="" /> Typos fixed: README
examples and internal docstrings (codespell fix).</li>
<li><input type="checkbox" checked="" disabled="" /> Formatting: Applied
black 26.1.0 changes across the codebase.</li>
<li><input type="checkbox" checked="" disabled="" /> CI/CD:
<ul>
<li>Upgraded GitHub Actions runners/actions versions used in workflows:
<ul>
<li>actions/checkout → v6.0.1</li>
<li>actions/setup-python → v6.1.0</li>
<li>actions/upload-artifact → v6.0.0</li>
<li>actions/download-artifact → v7.0.0</li>
<li>codecov/codecov-action → v5.5.2</li>
</ul>
</li>
<li>Workaround to bypass black lint step for Python 3.9 (black GHA
failures with v3.9).</li>
</ul>
</li>
<li><input type="checkbox" checked="" disabled="" /> Packaging &
metadata:
<ul>
<li>pyproject.toml: made PEP-compliant changes:
<ul>
<li>build-system requires reviewed
<ul>
<li>project URLs normalized to "homepage",
"releasenotes", "issues" (PEP-753 well-known
labels)</li>
<li>MANIFEST.in updated to use a prune/exclude strategy suitable for
<code>setuptools-scm</code> (avoid duplicative explicit include
lists).</li>
</ul>
</li>
<li>project.license and license-files fields normalized (PEP-639)</li>
<li>requires-python remains >=3.9 (note: CI deprecates 3.9 for
black)</li>
</ul>
</li>
</ul>
</li>
</ul>
<h3>Developer dependencies updated (security/maintenance):</h3>
<ul>
<li>urllib3 bumped 2.5.0 → 2.6.3</li>
<li>wheel bumped 0.45.1 → 0.46.2</li>
</ul>
<h3>Small code cleanups:</h3>
<ul>
<li>minor whitespace/annotation/style alignment and improved tuple
assignment readability in piplicenses.py</li>
<li>some filename/text extraction behavior unchanged but formatting and
docstrings clarified.</li>
</ul>
<h3>Files (high-level) changed in this PR</h3>
<p>piplicenses.py — version bump, docstring typo fix, style/formatting
adjustments
CHANGELOG.md — added 5.5.1 notes
pyproject.toml — PEP-639/753 packaging metadata and URL label
normalisation
MANIFEST.in — adapted for setuptools-scm (prune/exclude)
dev-requirements.txt — urllib3, wheel updates
.github/workflows/python-package.yml and .github/workflows/CD-PyPi.yml —
updated action references, black job conditional, upload/download
artifact and codecov action upgrades</p>
<h2>Impacted GitHub Issues (GHI)</h2>
<ul>
<li><input type="checkbox" checked="" disabled="" /> Closes <a
href="https://redirect.github.com/raimon49/pip-licenses/issues/209">#209</a></li>
<li><input type="checkbox" checked="" disabled="" /> Closes <a
href="https://redirect.github.com/raimon49/pip-licenses/issues/264">#264</a></li>
<li><input type="checkbox" disabled="" /> Opened <a
href="https://redirect.github.com/raimon49/pip-licenses/issues/265">#265</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/raimon49/pip-licenses/blob/master/CHANGELOG.md">pip-licenses's
changelog</a>.</em></p>
<blockquote>
<h3>5.5.1</h3>
<ul>
<li>Fixed typographical issue in README examples, closing GHI <a
href="https://redirect.github.com/raimon49/pip-licenses/issues/209">#209</a>.</li>
<li>Fixed typographical issue in docstring found by codespell.</li>
<li>Aligned Project URLs in <code>pyproject.toml</code> with <a
href="https://peps.python.org/pep-0753/">PEP 753</a></li>
<li>Brought <code>pyproject.toml</code> (e.g., packaging metadata) into
alignment with <a href="https://peps.python.org/pep-0639/">PEP 639</a>
and related packaging guidance.
<ul>
<li>Improved <code>MANIFEST.in</code> to <code>setuptools-scm</code>
build logic with better filtering, closing GHI <a
href="https://redirect.github.com/raimon49/pip-licenses/issues/266">#266</a></li>
</ul>
</li>
<li>Fixed a regression in linting via <code>black</code> by deprecating
support for python 3.9, closing GHI <a
href="https://redirect.github.com/raimon49/pip-licenses/issues/264">#264</a>
<ul>
<li>Applied <code>black 26.1.0</code>suggestions to codebase, closing
GHI <a
href="https://redirect.github.com/raimon49/pip-licenses/issues/269">#269</a></li>
</ul>
</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/raimon49/pip-licenses/commit/6b975819018d240861ac411dbbc0137565c3cb0e"><code>6b97581</code></a>
[UPDATE] Version 5.5.1</li>
<li><a
href="https://github.com/raimon49/pip-licenses/commit/35b13b482af066d4b2e0dd6735fce12b250281e1"><code>35b13b4</code></a>
[MERGE] remote-tracking branch 'DimitriPapadopoulos/GitHub_jobs' into
dev-5.5.1</li>
<li><a
href="https://github.com/raimon49/pip-licenses/commit/12885222b504175a49ef61edbcd460587bec9830"><code>1288522</code></a>
Work around MyPy limitation</li>
<li><a
href="https://github.com/raimon49/pip-licenses/commit/721334af0aba8120e3aaf18204b7c78a57f0e8a8"><code>721334a</code></a>
Pin version of Python used to run Black/MyPy</li>
<li><a
href="https://github.com/raimon49/pip-licenses/commit/c368dc8517b72e4029b58eca8ae762864a93b6ca"><code>c368dc8</code></a>
Run Black and MyPy only once</li>
<li><a
href="https://github.com/raimon49/pip-licenses/commit/d06d0d72d11cb3dd88dd19c9e1ec474e7062c040"><code>d06d0d7</code></a>
Merge branch
'dependabot/github_actions/dot-github/workflows/master/codecov/c...</li>
<li><a
href="https://github.com/raimon49/pip-licenses/commit/77378c3892918a290f8088bab837127d34dcbb71"><code>77378c3</code></a>
[SECURITY] Security update of developer dependencies</li>
<li><a
href="https://github.com/raimon49/pip-licenses/commit/69d173a3c75ecde901cfe59b39755c1d643ce85d"><code>69d173a</code></a>
[SECURITY] Security update of developer dependencies</li>
<li><a
href="https://github.com/raimon49/pip-licenses/commit/6b9e05fd9ebd268a64ac410d82d7f8e986371c2e"><code>6b9e05f</code></a>
Merge remote-tracking branch 'DimitriPapadopoulos/black' into
dev-5.5.1</li>
<li><a
href="https://github.com/raimon49/pip-licenses/commit/35de465e94177075c901423e483263c1b55e2419"><code>35de465</code></a>
[UPDATE] Release canididate for v5.5.1</li>
<li>Additional commits viewable in <a
href="https://github.com/raimon49/pip-licenses/compare/v-5.5.0...v-5.5.1">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: anthony-nhs <121869075+anthony-nhs@users.noreply.github.com>1 parent c644bd3 commit e1968d0
2 files changed
+5
-5
lines changedSome generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
23 | 23 | | |
24 | 24 | | |
25 | 25 | | |
26 | | - | |
| 26 | + | |
27 | 27 | | |
28 | 28 | | |
29 | 29 | | |
| |||
0 commit comments