PYUP Scheduled weekly dependency update for week 13 #89

pyup-bot · 2023-03-27T14:06:09Z

Update pytest from 7.1.2 to 7.2.2.

Changelog

7.2.2

=========================

Bug Fixes
---------

- `10533 &lt;https://github.com/pytest-dev/pytest/issues/10533&gt;`_: Fixed :func:`pytest.approx` handling of dictionaries containing one or more values of `0.0`.


- `10592 &lt;https://github.com/pytest-dev/pytest/issues/10592&gt;`_: Fixed crash if `--cache-show` and `--help` are passed at the same time.


- `10597 &lt;https://github.com/pytest-dev/pytest/issues/10597&gt;`_: Fixed bug where a fixture method named ``teardown`` would be called as part of ``nose`` teardown stage.


- `10626 &lt;https://github.com/pytest-dev/pytest/issues/10626&gt;`_: Fixed crash if ``--fixtures`` and ``--help`` are passed at the same time.


- `10660 &lt;https://github.com/pytest-dev/pytest/issues/10660&gt;`_: Fixed :py:func:`pytest.raises` to return a &#x27;ContextManager&#x27; so that type-checkers could narrow
:code:`pytest.raises(...) if ... else nullcontext()` down to &#x27;ContextManager&#x27; rather than &#x27;object&#x27;.



Improved Documentation
----------------------

- `10690 &lt;https://github.com/pytest-dev/pytest/issues/10690&gt;`_: Added `CI` and `BUILD_NUMBER` environment variables to the documentation.


- `10721 &lt;https://github.com/pytest-dev/pytest/issues/10721&gt;`_: Fixed entry-points declaration in the documentation example using Hatch.


- `10753 &lt;https://github.com/pytest-dev/pytest/issues/10753&gt;`_: Changed wording of the module level skip to be very explicit
about not collecting tests and not executing the rest of the module.

7.2.1

=========================

Bug Fixes
---------

- `10452 &lt;https://github.com/pytest-dev/pytest/issues/10452&gt;`_: Fix &#x27;importlib.abc.TraversableResources&#x27; deprecation warning in Python 3.12.


- `10457 &lt;https://github.com/pytest-dev/pytest/issues/10457&gt;`_: If a test is skipped from inside a fixture, the test summary now shows the test location instead of the fixture location.


- `10506 &lt;https://github.com/pytest-dev/pytest/issues/10506&gt;`_: Fix bug where sometimes pytest would use the file system root directory as :ref:`rootdir &lt;rootdir&gt;` on Windows.


- `10607 &lt;https://github.com/pytest-dev/pytest/issues/10607&gt;`_: Fix a race condition when creating junitxml reports, which could occur when multiple instances of pytest execute in parallel.


- `10641 &lt;https://github.com/pytest-dev/pytest/issues/10641&gt;`_: Fix a race condition when creating or updating the stepwise plugin&#x27;s cache, which could occur when multiple xdist worker nodes try to simultaneously update the stepwise plugin&#x27;s cache.

7.2.0

=========================

Deprecations
------------

- `10012 &lt;https://github.com/pytest-dev/pytest/issues/10012&gt;`_: Update :class:`pytest.PytestUnhandledCoroutineWarning` to a deprecation; it will raise an error in pytest 8.


- `10396 &lt;https://github.com/pytest-dev/pytest/issues/10396&gt;`_: pytest no longer depends on the ``py`` library.  ``pytest`` provides a vendored copy of ``py.error`` and ``py.path`` modules but will use the ``py`` library if it is installed.  If you need other ``py.*`` modules, continue to install the deprecated ``py`` library separately, otherwise it can usually be removed as a dependency.


- `4562 &lt;https://github.com/pytest-dev/pytest/issues/4562&gt;`_: Deprecate configuring hook specs/impls using attributes/marks.

Instead use :py:func:`pytest.hookimpl` and :py:func:`pytest.hookspec`.
For more details, see the :ref:`docs &lt;legacy-path-hooks-deprecated&gt;`.


- `9886 &lt;https://github.com/pytest-dev/pytest/issues/9886&gt;`_: The functionality for running tests written for ``nose`` has been officially deprecated.

This includes:

* Plain ``setup`` and ``teardown`` functions and methods: this might catch users by surprise, as ``setup()`` and ``teardown()`` are not pytest idioms, but part of the ``nose`` support.
* Setup/teardown using the `with_setup &lt;with-setup-nose&gt;`_ decorator.

For more details, consult the :ref:`deprecation docs &lt;nose-deprecation&gt;`.

.. _`with-setup-nose`: https://nose.readthedocs.io/en/latest/testing_tools.html?highlight=with_setup#nose.tools.with_setup

- `7337 &lt;https://github.com/pytest-dev/pytest/issues/7337&gt;`_: A deprecation warning is now emitted if a test function returns something other than `None`. This prevents a common mistake among beginners that expect that returning a `bool` (for example `return foo(a, b) == result`) would cause a test to pass or fail, instead of using `assert`. The plan is to make returning non-`None` from tests an error in the future.


Features
--------

- `9897 &lt;https://github.com/pytest-dev/pytest/issues/9897&gt;`_: Added shell-style wildcard support to ``testpaths``.



Improvements
------------

- `10218 &lt;https://github.com/pytest-dev/pytest/issues/10218&gt;`_: ``pytest.mark.parametrize()`` (and similar functions) now accepts any ``Sequence[str]`` for the argument names,
instead of just ``list[str]`` and ``tuple[str, ...]``.

(Note that ``str``, which is itself a ``Sequence[str]``, is still treated as a
comma-delimited name list, as before).


- `10381 &lt;https://github.com/pytest-dev/pytest/issues/10381&gt;`_: The ``--no-showlocals`` flag has been added. This can be passed directly to tests to override ``--showlocals`` declared through ``addopts``.


- `3426 &lt;https://github.com/pytest-dev/pytest/issues/3426&gt;`_: Assertion failures with strings in NFC and NFD forms that normalize to the same string now have a dedicated error message detailing the issue, and their utf-8 representation is expressed instead.


- `8508 &lt;https://github.com/pytest-dev/pytest/issues/8508&gt;`_: Introduce multiline display for warning matching  via :py:func:`pytest.warns` and
enhance match comparison for :py:func:`_pytest._code.ExceptionInfo.match` as returned by :py:func:`pytest.raises`.


- `8646 &lt;https://github.com/pytest-dev/pytest/issues/8646&gt;`_: Improve :py:func:`pytest.raises`. Previously passing an empty tuple would give a confusing
error. We now raise immediately with a more helpful message.


- `9741 &lt;https://github.com/pytest-dev/pytest/issues/9741&gt;`_: On Python 3.11, use the standard library&#x27;s :mod:`tomllib` to parse TOML.

:mod:`tomli` is no longer a dependency on Python 3.11.


- `9742 &lt;https://github.com/pytest-dev/pytest/issues/9742&gt;`_: Display assertion message without escaped newline characters with ``-vv``.


- `9823 &lt;https://github.com/pytest-dev/pytest/issues/9823&gt;`_: Improved error message that is shown when no collector is found for a given file.


- `9873 &lt;https://github.com/pytest-dev/pytest/issues/9873&gt;`_: Some coloring has been added to the short test summary.


- `9883 &lt;https://github.com/pytest-dev/pytest/issues/9883&gt;`_: Normalize the help description of all command-line options.


- `9920 &lt;https://github.com/pytest-dev/pytest/issues/9920&gt;`_: Display full crash messages in ``short test summary info``, when running in a CI environment.


- `9987 &lt;https://github.com/pytest-dev/pytest/issues/9987&gt;`_: Added support for hidden configuration file by allowing ``.pytest.ini`` as an alternative to ``pytest.ini``.



Bug Fixes
---------

- `10150 &lt;https://github.com/pytest-dev/pytest/issues/10150&gt;`_: :data:`sys.stdin` now contains all expected methods of a file-like object when capture is enabled.


- `10382 &lt;https://github.com/pytest-dev/pytest/issues/10382&gt;`_: Do not break into pdb when ``raise unittest.SkipTest()`` appears top-level in a file.


- `7792 &lt;https://github.com/pytest-dev/pytest/issues/7792&gt;`_: Marks are now inherited according to the full MRO in test classes. Previously, if a test class inherited from two or more classes, only marks from the first super-class would apply.

When inheriting marks from super-classes, marks from the sub-classes are now ordered before marks from the super-classes, in MRO order. Previously it was the reverse.

When inheriting marks from super-classes, the `pytestmark` attribute of the sub-class now only contains the marks directly applied to it. Previously, it also contained marks from its super-classes. Please note that this attribute should not normally be accessed directly; use :func:`pytest.Node.iter_markers` instead.


- `9159 &lt;https://github.com/pytest-dev/pytest/issues/9159&gt;`_: Showing inner exceptions by forcing native display in ``ExceptionGroups`` even when using display options other than ``--tb=native``. A temporary step before full implementation of pytest-native display for inner exceptions in ``ExceptionGroups``.


- `9877 &lt;https://github.com/pytest-dev/pytest/issues/9877&gt;`_: Ensure ``caplog.get_records(when)`` returns current/correct data after invoking ``caplog.clear()``.



Improved Documentation
----------------------

- `10344 &lt;https://github.com/pytest-dev/pytest/issues/10344&gt;`_: Update information on writing plugins to use ``pyproject.toml`` instead of ``setup.py``.


- `9248 &lt;https://github.com/pytest-dev/pytest/issues/9248&gt;`_: The documentation is now built using Sphinx 5.x (up from 3.x previously).


- `9291 &lt;https://github.com/pytest-dev/pytest/issues/9291&gt;`_: Update documentation on how :func:`pytest.warns` affects :class:`DeprecationWarning`.



Trivial/Internal Changes
------------------------

- `10313 &lt;https://github.com/pytest-dev/pytest/issues/10313&gt;`_: Made ``_pytest.doctest.DoctestItem`` export ``pytest.DoctestItem`` for
type check and runtime purposes. Made `_pytest.doctest` use internal APIs
to avoid circular imports.


- `9906 &lt;https://github.com/pytest-dev/pytest/issues/9906&gt;`_: Made ``_pytest.compat`` re-export ``importlib_metadata`` in the eyes of type checkers.


- `9910 &lt;https://github.com/pytest-dev/pytest/issues/9910&gt;`_: Fix default encoding warning (``EncodingWarning``) in ``cacheprovider``


- `9984 &lt;https://github.com/pytest-dev/pytest/issues/9984&gt;`_: Improve the error message when we attempt to access a fixture that has been
torn down.
Add an additional sentence to the docstring explaining when it&#x27;s not a good
idea to call ``getfixturevalue``.

7.1.3

=========================

Bug Fixes
---------

- `10060 &lt;https://github.com/pytest-dev/pytest/issues/10060&gt;`_: When running with ``--pdb``, ``TestCase.tearDown`` is no longer called for tests when the *class* has been skipped via ``unittest.skip`` or ``pytest.mark.skip``.


- `10190 &lt;https://github.com/pytest-dev/pytest/issues/10190&gt;`_: Invalid XML characters in setup or teardown error messages are now properly escaped for JUnit XML reports.


- `10230 &lt;https://github.com/pytest-dev/pytest/issues/10230&gt;`_: Ignore ``.py`` files created by ``pyproject.toml``-based editable builds introduced in `pip 21.3 &lt;https://pip.pypa.io/en/stable/news/#v21-3&gt;`__.


- `3396 &lt;https://github.com/pytest-dev/pytest/issues/3396&gt;`_: Doctests now respect the ``--import-mode`` flag.


- `9514 &lt;https://github.com/pytest-dev/pytest/issues/9514&gt;`_: Type-annotate ``FixtureRequest.param`` as ``Any`` as a stop gap measure until :issue:`8073` is fixed.


- `9791 &lt;https://github.com/pytest-dev/pytest/issues/9791&gt;`_: Fixed a path handling code in ``rewrite.py`` that seems to work fine, but was incorrect and fails in some systems.


- `9917 &lt;https://github.com/pytest-dev/pytest/issues/9917&gt;`_: Fixed string representation for :func:`pytest.approx` when used to compare tuples.



Improved Documentation
----------------------

- `9937 &lt;https://github.com/pytest-dev/pytest/issues/9937&gt;`_: Explicit note that :fixture:`tmpdir` fixture is discouraged in favour of :fixture:`tmp_path`.



Trivial/Internal Changes
------------------------

- `10114 &lt;https://github.com/pytest-dev/pytest/issues/10114&gt;`_: Replace `atomicwrites &lt;https://github.com/untitaker/python-atomicwrites&gt;`__ dependency on windows with `os.replace`.

Links

PyPI: https://pypi.org/project/pytest
Changelog: https://pyup.io/changelogs/pytest/
Homepage: https://docs.pytest.org/en/latest/

Update opencensus from 0.9.0 to 0.11.2.

Changelog

0.11.1

Released 2023-01-18

- Updated `azure`, `httpx` modules

0.11.0

Released 2022-08-03

- Updated `azure`, `context`, `flask`, `requests` modules

0.10.0

Released 2022-07-05

- Add kwargs to derived gauge
([1135](https://github.com/census-instrumentation/opencensus-python/pull/1135))

Links

PyPI: https://pypi.org/project/opencensus
Changelog: https://pyup.io/changelogs/opencensus/
Repo: https://github.com/census-instrumentation/opencensus-python

Update black from 22.3.0 to 23.1.0.

Changelog

22.12.0

Preview style

&lt;!-- Changes that affect Black&#x27;s preview style --&gt;

- Enforce empty lines before classes and functions with sticky leading comments (3302)
- Reformat empty and whitespace-only files as either an empty file (if no newline is
present) or as a single newline character (if a newline is present) (3348)
- Implicitly concatenated strings used as function args are now wrapped inside
parentheses (3307)
- For assignment statements, prefer splitting the right hand side if the left hand side
fits on a single line (3368)
- Correctly handle trailing commas that are inside a line&#x27;s leading non-nested parens
(3370)

Configuration

&lt;!-- Changes to how Black can be configured --&gt;

- Fix incorrectly applied `.gitignore` rules by considering the `.gitignore` location
and the relative path to the target file (3338)
- Fix incorrectly ignoring `.gitignore` presence when more than one source directory is
specified (3336)

Parser

&lt;!-- Changes to the parser or to version autodetection --&gt;

- Parsing support has been added for walruses inside generator expression that are
passed as function args (for example,
`any(match := my_re.match(text) for text in texts)`) (3327).

Integrations

&lt;!-- For example, Docker, GitHub Actions, pre-commit, editors --&gt;

- Vim plugin: Optionally allow using the system installation of Black via
`let g:black_use_virtualenv = 0`(3309)

22.10.0

Highlights

- Runtime support for Python 3.6 has been removed. Formatting 3.6 code will still be
supported until further notice.

Stable style

- Fix a crash when ` fmt: on` is used on a different block level than ` fmt: off`
(3281)

Preview style

- Fix a crash when formatting some dicts with parenthesis-wrapped long string keys
(3262)

Configuration

- `.ipynb_checkpoints` directories are now excluded by default (3293)
- Add `--skip-source-first-line` / `-x` option to ignore the first line of source code
while formatting (3299)

Packaging

- Executables made with PyInstaller will no longer crash when formatting several files
at once on macOS. Native x86-64 executables for macOS are available once again.
(3275)
- Hatchling is now used as the build backend. This will not have any effect for users
who install Black with its wheels from PyPI. (3233)
- Faster compiled wheels are now available for CPython 3.11 (3276)

_Blackd_

- Windows style (CRLF) newlines will be preserved (3257).

Integrations

- Vim plugin: add flag (`g:black_preview`) to enable/disable the preview style (3246)
- Update GitHub Action to support formatting of Jupyter Notebook files via a `jupyter`
option (3282)
- Update GitHub Action to support use of version specifiers (e.g. `&lt;23`) for Black
version (3265)

22.8.0

Highlights

- Python 3.11 is now supported, except for _blackd_ as aiohttp does not support 3.11 as
of publishing (3234)
- This is the last release that supports running _Black_ on Python 3.6 (formatting 3.6
code will continue to be supported until further notice)
- Reword the stability policy to say that we may, in rare cases, make changes that
affect code that was not previously formatted by _Black_ (3155)

Stable style

- Fix an infinite loop when using ` fmt: on/off` in the middle of an expression or code
block (3158)
- Fix incorrect handling of ` fmt: skip` on colon (`:`) lines (3148)
- Comments are no longer deleted when a line had spaces removed around power operators
(2874)

Preview style

- Single-character closing docstring quotes are no longer moved to their own line as
this is invalid. This was a bug introduced in version 22.6.0. (3166)
- `--skip-string-normalization` / `-S` now prevents docstring prefixes from being
normalized as expected (3168)
- When using `--skip-magic-trailing-comma` or `-C`, trailing commas are stripped from
subscript expressions with more than 1 element (3209)
- Implicitly concatenated strings inside a list, set, or tuple are now wrapped inside
parentheses (3162)
- Fix a string merging/split issue when a comment is present in the middle of implicitly
concatenated strings on its own line (3227)

_Blackd_

- `blackd` now supports enabling the preview style via the `X-Preview` header (3217)

Configuration

- Black now uses the presence of debug f-strings to detect target version (3215)
- Fix misdetection of project root and verbose logging of sources in cases involving
`--stdin-filename` (3216)
- Immediate `.gitignore` files in source directories given on the command line are now
also respected, previously only `.gitignore` files in the project root and
automatically discovered directories were respected (3237)

Documentation

- Recommend using BlackConnect in IntelliJ IDEs (3150)

Integrations

- Vim plugin: prefix messages with `Black: ` so it&#x27;s clear they come from Black (3194)
- Docker: changed to a /opt/venv installation + added to PATH to be available to
non-root users (3202)

Output

- Change from deprecated `asyncio.get_event_loop()` to create our event loop which
removes DeprecationWarning (3164)
- Remove logging from internal `blib2to3` library since it regularly emits error logs
about failed caching that can and should be ignored (3193)

Parser

- Type comments are now included in the AST equivalence check consistently so accidental
deletion raises an error. Though type comments can&#x27;t be tracked when running on PyPy
3.7 due to standard library limitations. (2874)

Performance

- Reduce Black&#x27;s startup time when formatting a single file by 15-30% (3211)

22.6.0

Style

- Fix unstable formatting involving `fmt: skip` and ` fmt:skip` comments (notice the
lack of spaces) (2970)

Preview style

- Docstring quotes are no longer moved if it would violate the line length limit (3044)
- Parentheses around return annotations are now managed (2990)
- Remove unnecessary parentheses around awaited objects (2991)
- Remove unnecessary parentheses in `with` statements (2926)
- Remove trailing newlines after code block open (3035)

Integrations

- Add `scripts/migrate-black.py` script to ease introduction of Black to a Git project
(3038)

Output

- Output Python version and implementation as part of `--version` flag (2997)

Packaging

- Use `tomli` instead of `tomllib` on Python 3.11 builds where `tomllib` is not
available (2987)

Parser

- [PEP 654](https://peps.python.org/pep-0654/#except) syntax (for example,
`except *ExceptionGroup:`) is now supported (3016)
- [PEP 646](https://peps.python.org/pep-0646) syntax (for example,
`Array[Batch, *Shape]` or `def fn(*args: *T) -&gt; None`) is now supported (3071)

Vim Plugin

- Fix `strtobool` function. It didn&#x27;t parse true/on/false/off. (3025)

Links

PyPI: https://pypi.org/project/black
Changelog: https://pyup.io/changelogs/black/

Update grpcio from 1.46.3 to 1.52.0.

The bot wasn't able to find a changelog for this release. Got an idea?

Links

PyPI: https://pypi.org/project/grpcio
Homepage: https://grpc.io

Update mypy from 0.960 to 1.1.1.

The bot wasn't able to find a changelog for this release. Got an idea?

Links

PyPI: https://pypi.org/project/mypy
Homepage: http://www.mypy-lang.org/

Update pylint from 2.13.9 to 2.17.1.

The bot wasn't able to find a changelog for this release. Got an idea?

Links

PyPI: https://pypi.org/project/pylint
Changelog: https://pyup.io/changelogs/pylint/

Update bandit from 1.7.4 to 1.7.5.

Changelog

1.7.5

What&#x27;s Changed
* Add an example screen shot of Bandit to README by ericwb in https://github.com/PyCQA/bandit/pull/847
* Bad link to screen shot by ericwb in https://github.com/PyCQA/bandit/pull/848
* Use a constant for weak hashes by ericwb in https://github.com/PyCQA/bandit/pull/850
* Group location line with code output by ericwb in https://github.com/PyCQA/bandit/pull/822
* Fix line range using Python 3.8 end_lineno by ericwb in https://github.com/PyCQA/bandit/pull/821
* Add classifier to indicate Py3 only by ericwb in https://github.com/PyCQA/bandit/pull/853
* Removal of blacklist call B309 httpsconnection by ericwb in https://github.com/PyCQA/bandit/pull/858
* Remove blacklist call check for os.tempnam by ericwb in https://github.com/PyCQA/bandit/pull/859
* Indiciate hash type in message by ericwb in https://github.com/PyCQA/bandit/pull/860
* Add the httpx module check for verify by ericwb in https://github.com/PyCQA/bandit/pull/861
* Add doc for hashlib plugin by ericwb in https://github.com/PyCQA/bandit/pull/862
* Make use of rich for progress bar by ericwb in https://github.com/PyCQA/bandit/pull/863
* Replace `toml` with `tomli` by mkniewallner in https://github.com/PyCQA/bandit/pull/829
* Fix up B109 and B111 removed plugins docs by ericwb in https://github.com/PyCQA/bandit/pull/864
* add check for &quot;requests&quot; calls without timeout by mschfh in https://github.com/PyCQA/bandit/pull/743
* Fix for build breaks in format job by ericwb in https://github.com/PyCQA/bandit/pull/869
* Add license and contributing links to docs by ericwb in https://github.com/PyCQA/bandit/pull/867
* Remove redundant word Bandit in titles of sections by ericwb in https://github.com/PyCQA/bandit/pull/873
* Add request for feedback via 👍 by ericwb in https://github.com/PyCQA/bandit/pull/871
* Add a Discord link to the docs by ericwb in https://github.com/PyCQA/bandit/pull/870
* Adding logging.config.listen() plugin with examples by raj3shp in https://github.com/PyCQA/bandit/pull/874
* Removal of ghugo by ericwb in https://github.com/PyCQA/bandit/pull/881
* Remove redundant pip line by ericwb in https://github.com/PyCQA/bandit/pull/884
* Corrected documentation on configuration by a-takahashi223 in https://github.com/PyCQA/bandit/pull/868
* Start testing against Python 3.11 by mkniewallner in https://github.com/PyCQA/bandit/pull/887
* Add myself to sponsor list by ericwb in https://github.com/PyCQA/bandit/pull/885
* Add Discord link to README by ericwb in https://github.com/PyCQA/bandit/pull/875
* Update action versions in Actions workflows (890) by mportesdev in https://github.com/PyCQA/bandit/pull/893
* Add dependency review action by ericwb in https://github.com/PyCQA/bandit/pull/891
* Fix an unclosed &lt;b&gt; tag in HTML formatter by mportesdev in https://github.com/PyCQA/bandit/pull/896
* &#x27;Test plugin listing&#x27; in docs incorrectly pointing B612 to plugin ref of B102 by rajaramsrn in https://github.com/PyCQA/bandit/pull/897
* Make small fixes in docs by mportesdev in https://github.com/PyCQA/bandit/pull/899
* Specify semver range for Python 3.11 by mportesdev in https://github.com/PyCQA/bandit/pull/901
* Add another bad example of yaml load by ericwb in https://github.com/PyCQA/bandit/pull/905
* Add releases link in &quot;Version control integration&quot; by travisjungroth in https://github.com/PyCQA/bandit/pull/909
* Update version of dependency-review-action by mportesdev in https://github.com/PyCQA/bandit/pull/911
* Avoid redundant message if debug on by ericwb in https://github.com/PyCQA/bandit/pull/913
* Remove invalid checking on hashlib by ericwb in https://github.com/PyCQA/bandit/pull/914
* Add some missing curve types by ericwb in https://github.com/PyCQA/bandit/pull/920
* add jsonpickle deserialization blacklist by SugarP1g in https://github.com/PyCQA/bandit/pull/707
* Fix reading the number argument from config file by KAUTH in https://github.com/PyCQA/bandit/pull/923
* Add end_col_offset if available by ericwb in https://github.com/PyCQA/bandit/pull/851
* Enhancement Proposal: Plugin &quot;assert_used&quot; config-skip snippet by marianomartinelli in https://github.com/PyCQA/bandit/pull/695
* Blacklist pandas read_pickle and add functional test for it by jaspersival in https://github.com/PyCQA/bandit/pull/710
* Docs for request without timeout has dead link by ericwb in https://github.com/PyCQA/bandit/pull/925
* Add case for global exec by tonybaloney in https://github.com/PyCQA/bandit/pull/570
* Fix a false positive condition yaml_load by ericwb in https://github.com/PyCQA/bandit/pull/927
* Fix issue 453 jinja2 template select_autoescape when using jinja2.select_autoescape by kinow in https://github.com/PyCQA/bandit/pull/454
* Adding tarfile.extractall() plugin with examples by yilmi in https://github.com/PyCQA/bandit/pull/549
* Check for deprecated TLS 1.1 by ericwb in https://github.com/PyCQA/bandit/pull/928
* weak_cryptographic_key assumes positional arg by ericwb in https://github.com/PyCQA/bandit/pull/930
* Fix filename of B202 in docs by mportesdev in https://github.com/PyCQA/bandit/pull/932
* Remove python 2 reference in docs by ericwb in https://github.com/PyCQA/bandit/pull/933
* Pass correct number of arguments to match the `%s` placeholders. by mportesdev in https://github.com/PyCQA/bandit/pull/934
* Fixup some invalid pickle testing by ericwb in https://github.com/PyCQA/bandit/pull/924
* Fix json and yaml formatters to respect num lines by ericwb in https://github.com/PyCQA/bandit/pull/929
* Fix AttributeError on detect of tuple assign condition by ericwb in https://github.com/PyCQA/bandit/pull/931
* [docs] Mention `exclude_dirs` option available in TOML and YAML by bittner in https://github.com/PyCQA/bandit/pull/876
* Typo fix by PermanAtayev in https://github.com/PyCQA/bandit/pull/945
* remove py2 exec example in docs by clavedeluna in https://github.com/PyCQA/bandit/pull/947
* Add official Python 3.11 support by ericwb in https://github.com/PyCQA/bandit/pull/964
* DOC: Add explanation on how to use pre-commit with config file by phofl in https://github.com/PyCQA/bandit/pull/968
* Fix breaking build due to new tox by ericwb in https://github.com/PyCQA/bandit/pull/983
* Correct build status badge in README by gliptak in https://github.com/PyCQA/bandit/pull/980
* Improve detecting SQL injections in f-strings by kfrydel in https://github.com/PyCQA/bandit/pull/917
* Improve handling nosec for multi-line strings by kfrydel in https://github.com/PyCQA/bandit/pull/915
* Check for github action updates monthly by jlosito in https://github.com/PyCQA/bandit/pull/989
* Added a bit more `project_urls` by KOLANICH in https://github.com/PyCQA/bandit/pull/985

New Contributors
* mschfh made their first contribution in https://github.com/PyCQA/bandit/pull/743
* raj3shp made their first contribution in https://github.com/PyCQA/bandit/pull/874
* a-takahashi223 made their first contribution in https://github.com/PyCQA/bandit/pull/868
* mportesdev made their first contribution in https://github.com/PyCQA/bandit/pull/893
* rajaramsrn made their first contribution in https://github.com/PyCQA/bandit/pull/897
* travisjungroth made their first contribution in https://github.com/PyCQA/bandit/pull/909
* SugarP1g made their first contribution in https://github.com/PyCQA/bandit/pull/707
* KAUTH made their first contribution in https://github.com/PyCQA/bandit/pull/923
* marianomartinelli made their first contribution in https://github.com/PyCQA/bandit/pull/695
* jaspersival made their first contribution in https://github.com/PyCQA/bandit/pull/710
* kinow made their first contribution in https://github.com/PyCQA/bandit/pull/454
* yilmi made their first contribution in https://github.com/PyCQA/bandit/pull/549
* PermanAtayev made their first contribution in https://github.com/PyCQA/bandit/pull/945
* clavedeluna made their first contribution in https://github.com/PyCQA/bandit/pull/947
* phofl made their first contribution in https://github.com/PyCQA/bandit/pull/968
* gliptak made their first contribution in https://github.com/PyCQA/bandit/pull/980
* kfrydel made their first contribution in https://github.com/PyCQA/bandit/pull/917
* jlosito made their first contribution in https://github.com/PyCQA/bandit/pull/989
* KOLANICH made their first contribution in https://github.com/PyCQA/bandit/pull/985

**Full Changelog**: https://github.com/PyCQA/bandit/compare/1.7.4...1.7.5

Links

PyPI: https://pypi.org/project/bandit
Changelog: https://pyup.io/changelogs/bandit/
Docs: https://bandit.readthedocs.io/

pyup-bot · 2023-04-10T14:06:11Z

Closing this in favor of #90

pyup-bot added 11 commits March 27, 2023 17:06

Update pytest from 7.1.2 to 7.2.2

ea49791

Update pytest from 7.1.2 to 7.2.2

87689b4

Update opencensus from 0.9.0 to 0.11.2

336115e

Update opencensus from 0.9.0 to 0.11.2

23784cd

Update black from 22.3.0 to 23.1.0

f0e6275

Update black from 22.3.0 to 23.1.0

a008e5d

Update grpcio from 1.46.3 to 1.52.0

a012386

Update grpcio from 1.46.3 to 1.52.0

e8b70cd

Update mypy from 0.960 to 1.1.1

db23852

Update pylint from 2.13.9 to 2.17.1

5433e54

Update bandit from 1.7.4 to 1.7.5

969c5bd

pyup-bot added the update label Mar 27, 2023

pyup-bot assigned amor71 Mar 27, 2023

pyup-bot mentioned this pull request Mar 27, 2023

PYUP Scheduled weekly dependency update for week 11 #88

Closed

pyup-bot closed this Apr 10, 2023

amor71 deleted the pyup/scheduled-update-2023-03-27 branch April 10, 2023 14:06

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

PYUP Scheduled weekly dependency update for week 13 #89

PYUP Scheduled weekly dependency update for week 13 #89

pyup-bot commented Mar 27, 2023

pyup-bot commented Apr 10, 2023

PYUP Scheduled weekly dependency update for week 13 #89

PYUP Scheduled weekly dependency update for week 13 #89

Conversation

pyup-bot commented Mar 27, 2023

Update pytest from 7.1.2 to 7.2.2.

7.2.2

7.2.1

7.2.0

7.1.3

Update opencensus from 0.9.0 to 0.11.2.

0.11.1

0.11.0

0.10.0

Update black from 22.3.0 to 23.1.0.

22.12.0

22.10.0

22.8.0

22.6.0

Update grpcio from 1.46.3 to 1.52.0.

Update mypy from 0.960 to 1.1.1.

Update pylint from 2.13.9 to 2.17.1.

Update bandit from 1.7.4 to 1.7.5.

1.7.5

pyup-bot commented Apr 10, 2023