PYUP Scheduled weekly dependency update for week 17 #92

pyup-bot · 2023-04-24T14:06:07Z

Update pytest from 7.1.2 to 7.3.1.

Changelog

7.3.1

=========================

Improvements
------------

- `10875 &lt;https://github.com/pytest-dev/pytest/issues/10875&gt;`_: Python 3.12 support: fixed ``RuntimeError: TestResult has no addDuration method`` when running ``unittest`` tests.


- `10890 &lt;https://github.com/pytest-dev/pytest/issues/10890&gt;`_: Python 3.12 support: fixed ``shutil.rmtree(onerror=...)`` deprecation warning when using :fixture:`tmp_path`.



Bug Fixes
---------

- `10896 &lt;https://github.com/pytest-dev/pytest/issues/10896&gt;`_: Fixed performance regression related to :fixture:`tmp_path` and the new :confval:`tmp_path_retention_policy` option.


- `10903 &lt;https://github.com/pytest-dev/pytest/issues/10903&gt;`_: Fix crash ``INTERNALERROR IndexError: list index out of range`` which happens when displaying an exception where all entries are hidden.
This reverts the change &quot;Correctly handle ``__tracebackhide__`` for chained exceptions.&quot; introduced in version 7.3.0.

7.3.0

=========================

Features
--------

- `10525 &lt;https://github.com/pytest-dev/pytest/issues/10525&gt;`_: Test methods decorated with ``classmethod`` can now be discovered as tests, following the same rules as normal methods. This fills the gap that static methods were discoverable as tests but not class methods.


- `10755 &lt;https://github.com/pytest-dev/pytest/issues/10755&gt;`_: :confval:`console_output_style` now supports ``progress-even-when-capture-no`` to force the use of the progress output even when capture is disabled. This is useful in large test suites where capture may have significant performance impact.


- `7431 &lt;https://github.com/pytest-dev/pytest/issues/7431&gt;`_: ``--log-disable`` CLI option added to disable individual loggers.


- `8141 &lt;https://github.com/pytest-dev/pytest/issues/8141&gt;`_: Added :confval:`tmp_path_retention_count` and :confval:`tmp_path_retention_policy` configuration options to control how directories created by the :fixture:`tmp_path` fixture are kept.



Improvements
------------

- `10226 &lt;https://github.com/pytest-dev/pytest/issues/10226&gt;`_: If multiple errors are raised in teardown, we now re-raise an ``ExceptionGroup`` of them instead of discarding all but the last.


- `10658 &lt;https://github.com/pytest-dev/pytest/issues/10658&gt;`_: Allow ``-p`` arguments to include spaces (eg: ``-p no:logging`` instead of
``-pno:logging``). Mostly useful in the ``addopts`` section of the configuration
file.


- `10710 &lt;https://github.com/pytest-dev/pytest/issues/10710&gt;`_: Added ``start`` and ``stop`` timestamps to ``TestReport`` objects.


- `10727 &lt;https://github.com/pytest-dev/pytest/issues/10727&gt;`_: Split the report header for ``rootdir``, ``config file`` and ``testpaths`` so each has its own line.


- `10840 &lt;https://github.com/pytest-dev/pytest/issues/10840&gt;`_: pytest should no longer crash on AST with pathological position attributes, for example testing AST produced by `Hylang &lt;https://github.com/hylang/hy&gt;__`.


- `6267 &lt;https://github.com/pytest-dev/pytest/issues/6267&gt;`_: The full output of a test is no longer truncated if the truncation message would be longer than
the hidden text. The line number shown has also been fixed.



Bug Fixes
---------

- `10743 &lt;https://github.com/pytest-dev/pytest/issues/10743&gt;`_: The assertion rewriting mechanism now works correctly when assertion expressions contain the walrus operator.


- `10765 &lt;https://github.com/pytest-dev/pytest/issues/10765&gt;`_: Fixed :fixture:`tmp_path` fixture always raising :class:`OSError` on ``emscripten`` platform due to missing :func:`os.getuid`.


- `1904 &lt;https://github.com/pytest-dev/pytest/issues/1904&gt;`_: Correctly handle ``__tracebackhide__`` for chained exceptions.
NOTE: This change was reverted in version 7.3.1.



Improved Documentation
----------------------

- `10782 &lt;https://github.com/pytest-dev/pytest/issues/10782&gt;`_: Fixed the minimal example in :ref:`goodpractices`: ``pip install -e .`` requires a ``version`` entry in ``pyproject.toml`` to run successfully.



Trivial/Internal Changes
------------------------

- `10669 &lt;https://github.com/pytest-dev/pytest/issues/10669&gt;`_: pytest no longer directly depends on the `attrs &lt;https://www.attrs.org/en/stable/&gt;`__ package. While
we at pytest all love the package dearly and would like to thank the ``attrs`` team for many years of cooperation and support,
it makes sense for ``pytest`` to have as little external dependencies as possible, as this helps downstream projects.
With that in mind, we have replaced the pytest&#x27;s limited internal usage to use the standard library&#x27;s ``dataclasses`` instead.

Nice diffs for ``attrs`` classes are still supported though.

7.2.2

=========================

Bug Fixes
---------

- `10533 &lt;https://github.com/pytest-dev/pytest/issues/10533&gt;`_: Fixed :func:`pytest.approx` handling of dictionaries containing one or more values of `0.0`.


- `10592 &lt;https://github.com/pytest-dev/pytest/issues/10592&gt;`_: Fixed crash if `--cache-show` and `--help` are passed at the same time.


- `10597 &lt;https://github.com/pytest-dev/pytest/issues/10597&gt;`_: Fixed bug where a fixture method named ``teardown`` would be called as part of ``nose`` teardown stage.


- `10626 &lt;https://github.com/pytest-dev/pytest/issues/10626&gt;`_: Fixed crash if ``--fixtures`` and ``--help`` are passed at the same time.


- `10660 &lt;https://github.com/pytest-dev/pytest/issues/10660&gt;`_: Fixed :py:func:`pytest.raises` to return a &#x27;ContextManager&#x27; so that type-checkers could narrow
:code:`pytest.raises(...) if ... else nullcontext()` down to &#x27;ContextManager&#x27; rather than &#x27;object&#x27;.



Improved Documentation
----------------------

- `10690 &lt;https://github.com/pytest-dev/pytest/issues/10690&gt;`_: Added `CI` and `BUILD_NUMBER` environment variables to the documentation.


- `10721 &lt;https://github.com/pytest-dev/pytest/issues/10721&gt;`_: Fixed entry-points declaration in the documentation example using Hatch.


- `10753 &lt;https://github.com/pytest-dev/pytest/issues/10753&gt;`_: Changed wording of the module level skip to be very explicit
about not collecting tests and not executing the rest of the module.

7.2.1

=========================

Bug Fixes
---------

- `10452 &lt;https://github.com/pytest-dev/pytest/issues/10452&gt;`_: Fix &#x27;importlib.abc.TraversableResources&#x27; deprecation warning in Python 3.12.


- `10457 &lt;https://github.com/pytest-dev/pytest/issues/10457&gt;`_: If a test is skipped from inside a fixture, the test summary now shows the test location instead of the fixture location.


- `10506 &lt;https://github.com/pytest-dev/pytest/issues/10506&gt;`_: Fix bug where sometimes pytest would use the file system root directory as :ref:`rootdir &lt;rootdir&gt;` on Windows.


- `10607 &lt;https://github.com/pytest-dev/pytest/issues/10607&gt;`_: Fix a race condition when creating junitxml reports, which could occur when multiple instances of pytest execute in parallel.


- `10641 &lt;https://github.com/pytest-dev/pytest/issues/10641&gt;`_: Fix a race condition when creating or updating the stepwise plugin&#x27;s cache, which could occur when multiple xdist worker nodes try to simultaneously update the stepwise plugin&#x27;s cache.

7.2.0

=========================

Deprecations
------------

- `10012 &lt;https://github.com/pytest-dev/pytest/issues/10012&gt;`_: Update :class:`pytest.PytestUnhandledCoroutineWarning` to a deprecation; it will raise an error in pytest 8.


- `10396 &lt;https://github.com/pytest-dev/pytest/issues/10396&gt;`_: pytest no longer depends on the ``py`` library.  ``pytest`` provides a vendored copy of ``py.error`` and ``py.path`` modules but will use the ``py`` library if it is installed.  If you need other ``py.*`` modules, continue to install the deprecated ``py`` library separately, otherwise it can usually be removed as a dependency.


- `4562 &lt;https://github.com/pytest-dev/pytest/issues/4562&gt;`_: Deprecate configuring hook specs/impls using attributes/marks.

Instead use :py:func:`pytest.hookimpl` and :py:func:`pytest.hookspec`.
For more details, see the :ref:`docs &lt;legacy-path-hooks-deprecated&gt;`.


- `9886 &lt;https://github.com/pytest-dev/pytest/issues/9886&gt;`_: The functionality for running tests written for ``nose`` has been officially deprecated.

This includes:

* Plain ``setup`` and ``teardown`` functions and methods: this might catch users by surprise, as ``setup()`` and ``teardown()`` are not pytest idioms, but part of the ``nose`` support.
* Setup/teardown using the `with_setup &lt;with-setup-nose&gt;`_ decorator.

For more details, consult the :ref:`deprecation docs &lt;nose-deprecation&gt;`.

.. _`with-setup-nose`: https://nose.readthedocs.io/en/latest/testing_tools.html?highlight=with_setup#nose.tools.with_setup

- `7337 &lt;https://github.com/pytest-dev/pytest/issues/7337&gt;`_: A deprecation warning is now emitted if a test function returns something other than `None`. This prevents a common mistake among beginners that expect that returning a `bool` (for example `return foo(a, b) == result`) would cause a test to pass or fail, instead of using `assert`. The plan is to make returning non-`None` from tests an error in the future.


Features
--------

- `9897 &lt;https://github.com/pytest-dev/pytest/issues/9897&gt;`_: Added shell-style wildcard support to ``testpaths``.



Improvements
------------

- `10218 &lt;https://github.com/pytest-dev/pytest/issues/10218&gt;`_: ``pytest.mark.parametrize()`` (and similar functions) now accepts any ``Sequence[str]`` for the argument names,
instead of just ``list[str]`` and ``tuple[str, ...]``.

(Note that ``str``, which is itself a ``Sequence[str]``, is still treated as a
comma-delimited name list, as before).


- `10381 &lt;https://github.com/pytest-dev/pytest/issues/10381&gt;`_: The ``--no-showlocals`` flag has been added. This can be passed directly to tests to override ``--showlocals`` declared through ``addopts``.


- `3426 &lt;https://github.com/pytest-dev/pytest/issues/3426&gt;`_: Assertion failures with strings in NFC and NFD forms that normalize to the same string now have a dedicated error message detailing the issue, and their utf-8 representation is expressed instead.


- `8508 &lt;https://github.com/pytest-dev/pytest/issues/8508&gt;`_: Introduce multiline display for warning matching  via :py:func:`pytest.warns` and
enhance match comparison for :py:func:`_pytest._code.ExceptionInfo.match` as returned by :py:func:`pytest.raises`.


- `8646 &lt;https://github.com/pytest-dev/pytest/issues/8646&gt;`_: Improve :py:func:`pytest.raises`. Previously passing an empty tuple would give a confusing
error. We now raise immediately with a more helpful message.


- `9741 &lt;https://github.com/pytest-dev/pytest/issues/9741&gt;`_: On Python 3.11, use the standard library&#x27;s :mod:`tomllib` to parse TOML.

:mod:`tomli` is no longer a dependency on Python 3.11.


- `9742 &lt;https://github.com/pytest-dev/pytest/issues/9742&gt;`_: Display assertion message without escaped newline characters with ``-vv``.


- `9823 &lt;https://github.com/pytest-dev/pytest/issues/9823&gt;`_: Improved error message that is shown when no collector is found for a given file.


- `9873 &lt;https://github.com/pytest-dev/pytest/issues/9873&gt;`_: Some coloring has been added to the short test summary.


- `9883 &lt;https://github.com/pytest-dev/pytest/issues/9883&gt;`_: Normalize the help description of all command-line options.


- `9920 &lt;https://github.com/pytest-dev/pytest/issues/9920&gt;`_: Display full crash messages in ``short test summary info``, when running in a CI environment.


- `9987 &lt;https://github.com/pytest-dev/pytest/issues/9987&gt;`_: Added support for hidden configuration file by allowing ``.pytest.ini`` as an alternative to ``pytest.ini``.



Bug Fixes
---------

- `10150 &lt;https://github.com/pytest-dev/pytest/issues/10150&gt;`_: :data:`sys.stdin` now contains all expected methods of a file-like object when capture is enabled.


- `10382 &lt;https://github.com/pytest-dev/pytest/issues/10382&gt;`_: Do not break into pdb when ``raise unittest.SkipTest()`` appears top-level in a file.


- `7792 &lt;https://github.com/pytest-dev/pytest/issues/7792&gt;`_: Marks are now inherited according to the full MRO in test classes. Previously, if a test class inherited from two or more classes, only marks from the first super-class would apply.

When inheriting marks from super-classes, marks from the sub-classes are now ordered before marks from the super-classes, in MRO order. Previously it was the reverse.

When inheriting marks from super-classes, the `pytestmark` attribute of the sub-class now only contains the marks directly applied to it. Previously, it also contained marks from its super-classes. Please note that this attribute should not normally be accessed directly; use :func:`pytest.Node.iter_markers` instead.


- `9159 &lt;https://github.com/pytest-dev/pytest/issues/9159&gt;`_: Showing inner exceptions by forcing native display in ``ExceptionGroups`` even when using display options other than ``--tb=native``. A temporary step before full implementation of pytest-native display for inner exceptions in ``ExceptionGroups``.


- `9877 &lt;https://github.com/pytest-dev/pytest/issues/9877&gt;`_: Ensure ``caplog.get_records(when)`` returns current/correct data after invoking ``caplog.clear()``.



Improved Documentation
----------------------

- `10344 &lt;https://github.com/pytest-dev/pytest/issues/10344&gt;`_: Update information on writing plugins to use ``pyproject.toml`` instead of ``setup.py``.


- `9248 &lt;https://github.com/pytest-dev/pytest/issues/9248&gt;`_: The documentation is now built using Sphinx 5.x (up from 3.x previously).


- `9291 &lt;https://github.com/pytest-dev/pytest/issues/9291&gt;`_: Update documentation on how :func:`pytest.warns` affects :class:`DeprecationWarning`.



Trivial/Internal Changes
------------------------

- `10313 &lt;https://github.com/pytest-dev/pytest/issues/10313&gt;`_: Made ``_pytest.doctest.DoctestItem`` export ``pytest.DoctestItem`` for
type check and runtime purposes. Made `_pytest.doctest` use internal APIs
to avoid circular imports.


- `9906 &lt;https://github.com/pytest-dev/pytest/issues/9906&gt;`_: Made ``_pytest.compat`` re-export ``importlib_metadata`` in the eyes of type checkers.


- `9910 &lt;https://github.com/pytest-dev/pytest/issues/9910&gt;`_: Fix default encoding warning (``EncodingWarning``) in ``cacheprovider``


- `9984 &lt;https://github.com/pytest-dev/pytest/issues/9984&gt;`_: Improve the error message when we attempt to access a fixture that has been
torn down.
Add an additional sentence to the docstring explaining when it&#x27;s not a good
idea to call ``getfixturevalue``.

7.1.3

=========================

Bug Fixes
---------

- `10060 &lt;https://github.com/pytest-dev/pytest/issues/10060&gt;`_: When running with ``--pdb``, ``TestCase.tearDown`` is no longer called for tests when the *class* has been skipped via ``unittest.skip`` or ``pytest.mark.skip``.


- `10190 &lt;https://github.com/pytest-dev/pytest/issues/10190&gt;`_: Invalid XML characters in setup or teardown error messages are now properly escaped for JUnit XML reports.


- `10230 &lt;https://github.com/pytest-dev/pytest/issues/10230&gt;`_: Ignore ``.py`` files created by ``pyproject.toml``-based editable builds introduced in `pip 21.3 &lt;https://pip.pypa.io/en/stable/news/#v21-3&gt;`__.


- `3396 &lt;https://github.com/pytest-dev/pytest/issues/3396&gt;`_: Doctests now respect the ``--import-mode`` flag.


- `9514 &lt;https://github.com/pytest-dev/pytest/issues/9514&gt;`_: Type-annotate ``FixtureRequest.param`` as ``Any`` as a stop gap measure until :issue:`8073` is fixed.


- `9791 &lt;https://github.com/pytest-dev/pytest/issues/9791&gt;`_: Fixed a path handling code in ``rewrite.py`` that seems to work fine, but was incorrect and fails in some systems.


- `9917 &lt;https://github.com/pytest-dev/pytest/issues/9917&gt;`_: Fixed string representation for :func:`pytest.approx` when used to compare tuples.



Improved Documentation
----------------------

- `9937 &lt;https://github.com/pytest-dev/pytest/issues/9937&gt;`_: Explicit note that :fixture:`tmpdir` fixture is discouraged in favour of :fixture:`tmp_path`.



Trivial/Internal Changes
------------------------

- `10114 &lt;https://github.com/pytest-dev/pytest/issues/10114&gt;`_: Replace `atomicwrites &lt;https://github.com/untitaker/python-atomicwrites&gt;`__ dependency on windows with `os.replace`.

Links

PyPI: https://pypi.org/project/pytest
Changelog: https://pyup.io/changelogs/pytest/
Homepage: https://docs.pytest.org/en/latest/

Update opencensus from 0.9.0 to 0.11.2.

Changelog

0.11.1

Released 2023-01-18

- Updated `azure`, `httpx` modules

0.11.0

Released 2022-08-03

- Updated `azure`, `context`, `flask`, `requests` modules

0.10.0

Released 2022-07-05

- Add kwargs to derived gauge
([1135](https://github.com/census-instrumentation/opencensus-python/pull/1135))

Links

PyPI: https://pypi.org/project/opencensus
Changelog: https://pyup.io/changelogs/opencensus/
Repo: https://github.com/census-instrumentation/opencensus-python

Update black from 22.3.0 to 23.3.0.

Changelog

23.3.0

Highlights

This release fixes a longstanding confusing behavior in Black&#x27;s GitHub action, where the
version of the action did not determine the version of Black being run (issue 3382). In
addition, there is a small bug fix around imports and a number of improvements to the
preview style.

Please try out the
[preview style](https://black.readthedocs.io/en/stable/the_black_code_style/future_style.html#preview-style)
with `black --preview` and tell us your feedback. All changes in the preview style are
expected to become part of Black&#x27;s stable style in January 2024.

Stable style

- Import lines with ` fmt: skip` and ` fmt: off` no longer have an extra blank line
added when they are right after another import line (3610)

Preview style

- Add trailing commas to collection literals even if there&#x27;s a comment after the last
entry (3393)
- `async def`, `async for`, and `async with` statements are now formatted consistently
compared to their non-async version. (3609)
- `with` statements that contain two context managers will be consistently wrapped in
parentheses (3589)
- Let string splitters respect [East Asian Width](https://www.unicode.org/reports/tr11/)
(3445)
- Now long string literals can be split after East Asian commas and periods (`、` U+3001
IDEOGRAPHIC COMMA, `。` U+3002 IDEOGRAPHIC FULL STOP, &amp; `，` U+FF0C FULLWIDTH COMMA)
besides before spaces (3445)
- For stubs, enforce one blank line after a nested class with a body other than just
`...` (3564)
- Improve handling of multiline strings by changing line split behavior (1879)

Parser

- Added support for formatting files with invalid type comments (3594)

Integrations

- Update GitHub Action to use the version of Black equivalent to action&#x27;s version if
version input is not specified (3543)
- Fix missing Python binary path in autoload script for vim (3508)

Documentation

- Document that only the most recent release is supported for security issues;
vulnerabilities should be reported through Tidelift (3612)

23.1.0

Highlights

This is the first release of 2023, and following our
[stability policy](https://black.readthedocs.io/en/stable/the_black_code_style/index.html#stability-policy),
it comes with a number of improvements to our stable style, including improvements to
empty line handling, removal of redundant parentheses in several contexts, and output
that highlights implicitly concatenated strings better.

There are also many changes to the preview style; try out `black --preview` and give us
feedback to help us set the stable style for next year.

In addition to style changes, Black now automatically infers the supported Python
versions from your `pyproject.toml` file, removing the need to set Black&#x27;s target
versions separately.

Stable style

&lt;!-- Changes that affect Black&#x27;s stable style --&gt;

- Introduce the 2023 stable style, which incorporates most aspects of last year&#x27;s
preview style (3418). Specific changes:
- Enforce empty lines before classes and functions with sticky leading comments
 (3302) (22.12.0)
- Reformat empty and whitespace-only files as either an empty file (if no newline is
 present) or as a single newline character (if a newline is present) (3348)
 (22.12.0)
- Implicitly concatenated strings used as function args are now wrapped inside
 parentheses (3307) (22.12.0)
- Correctly handle trailing commas that are inside a line&#x27;s leading non-nested parens
 (3370) (22.12.0)
- `--skip-string-normalization` / `-S` now prevents docstring prefixes from being
 normalized as expected (3168) (since 22.8.0)
- When using `--skip-magic-trailing-comma` or `-C`, trailing commas are stripped from
 subscript expressions with more than 1 element (3209) (22.8.0)
- Implicitly concatenated strings inside a list, set, or tuple are now wrapped inside
 parentheses (3162) (22.8.0)
- Fix a string merging/split issue when a comment is present in the middle of
 implicitly concatenated strings on its own line (3227) (22.8.0)
- Docstring quotes are no longer moved if it would violate the line length limit
 (3044, 3430) (22.6.0)
- Parentheses around return annotations are now managed (2990) (22.6.0)
- Remove unnecessary parentheses around awaited objects (2991) (22.6.0)
- Remove unnecessary parentheses in `with` statements (2926) (22.6.0)
- Remove trailing newlines after code block open (3035) (22.6.0)
- Code cell separators `%%` are now standardised to ` %%` (2919) (22.3.0)
- Remove unnecessary parentheses from `except` statements (2939) (22.3.0)
- Remove unnecessary parentheses from tuple unpacking in `for` loops (2945) (22.3.0)
- Avoid magic-trailing-comma in single-element subscripts (2942) (22.3.0)
- Fix a crash when a colon line is marked between ` fmt: off` and ` fmt: on` (3439)

Preview style

&lt;!-- Changes that affect Black&#x27;s preview style --&gt;

- Format hex codes in unicode escape sequences in string literals (2916)
- Add parentheses around `if`-`else` expressions (2278)
- Improve performance on large expressions that contain many strings (3467)
- Fix a crash in preview style with assert + parenthesized string (3415)
- Fix crashes in preview style with walrus operators used in function return annotations
and except clauses (3423)
- Fix a crash in preview advanced string processing where mixed implicitly concatenated
regular and f-strings start with an empty span (3463)
- Fix a crash in preview advanced string processing where a standalone comment is placed
before a dict&#x27;s value (3469)
- Fix an issue where extra empty lines are added when a decorator has ` fmt: skip`
applied or there is a standalone comment between decorators (3470)
- Do not put the closing quotes in a docstring on a separate line, even if the line is
too long (3430)
- Long values in dict literals are now wrapped in parentheses; correspondingly
unnecessary parentheses around short values in dict literals are now removed; long
string lambda values are now wrapped in parentheses (3440)
- Fix two crashes in preview style involving edge cases with docstrings (3451)
- Exclude string type annotations from improved string processing; fix crash when the
return type annotation is stringified and spans across multiple lines (3462)
- Wrap multiple context managers in parentheses when targeting Python 3.9+ (3489)
- Fix several crashes in preview style with walrus operators used in `with` statements
or tuples (3473)
- Fix an invalid quote escaping bug in f-string expressions where it produced invalid
code. Implicitly concatenated f-strings with different quotes can now be merged or
quote-normalized by changing the quotes used in expressions. (3509)
- Fix crash on `await (yield)` when Black is compiled with mypyc (3533)

Configuration

&lt;!-- Changes to how Black can be configured --&gt;

- Black now tries to infer its `--target-version` from the project metadata specified in
`pyproject.toml` (3219)

Packaging

&lt;!-- Changes to how Black is packaged, such as dependency requirements --&gt;

- Upgrade mypyc from `0.971` to `0.991` so mypycified _Black_ can be built on armv7
(3380)
- This also fixes some crashes while using compiled Black with a debug build of
 CPython
- Drop specific support for the `tomli` requirement on 3.11 alpha releases, working
around a bug that would cause the requirement not to be installed on any non-final
Python releases (3448)
- Black now depends on `packaging` version `22.0` or later. This is required for new
functionality that needs to parse part of the project metadata (3219)

Output

&lt;!-- Changes to Black&#x27;s terminal output and error messages --&gt;

- Calling `black --help` multiple times will return the same help contents each time
(3516)
- Verbose logging now shows the values of `pyproject.toml` configuration variables
(3392)
- Fix false symlink detection messages in verbose output due to using an incorrect
relative path to the project root (3385)

Integrations

&lt;!-- For example, Docker, GitHub Actions, pre-commit, editors --&gt;

- Move 3.11 CI to normal flow now that all dependencies support 3.11 (3446)
- Docker: Add new `latest_prerelease` tag automation to follow latest black alpha
release on docker images (3465)

Documentation

&lt;!-- Major changes to documentation and policies. Small docs changes
  don&#x27;t need a changelog entry. --&gt;

- Expand `vim-plug` installation instructions to offer more explicit options (3468)

22.12.0

Preview style

&lt;!-- Changes that affect Black&#x27;s preview style --&gt;

- Enforce empty lines before classes and functions with sticky leading comments (3302)
- Reformat empty and whitespace-only files as either an empty file (if no newline is
present) or as a single newline character (if a newline is present) (3348)
- Implicitly concatenated strings used as function args are now wrapped inside
parentheses (3307)
- For assignment statements, prefer splitting the right hand side if the left hand side
fits on a single line (3368)
- Correctly handle trailing commas that are inside a line&#x27;s leading non-nested parens
(3370)

Configuration

&lt;!-- Changes to how Black can be configured --&gt;

- Fix incorrectly applied `.gitignore` rules by considering the `.gitignore` location
and the relative path to the target file (3338)
- Fix incorrectly ignoring `.gitignore` presence when more than one source directory is
specified (3336)

Parser

&lt;!-- Changes to the parser or to version autodetection --&gt;

- Parsing support has been added for walruses inside generator expression that are
passed as function args (for example,
`any(match := my_re.match(text) for text in texts)`) (3327).

Integrations

&lt;!-- For example, Docker, GitHub Actions, pre-commit, editors --&gt;

- Vim plugin: Optionally allow using the system installation of Black via
`let g:black_use_virtualenv = 0`(3309)

22.10.0

Highlights

- Runtime support for Python 3.6 has been removed. Formatting 3.6 code will still be
supported until further notice.

Stable style

- Fix a crash when ` fmt: on` is used on a different block level than ` fmt: off`
(3281)

Preview style

- Fix a crash when formatting some dicts with parenthesis-wrapped long string keys
(3262)

Configuration

- `.ipynb_checkpoints` directories are now excluded by default (3293)
- Add `--skip-source-first-line` / `-x` option to ignore the first line of source code
while formatting (3299)

Packaging

- Executables made with PyInstaller will no longer crash when formatting several files
at once on macOS. Native x86-64 executables for macOS are available once again.
(3275)
- Hatchling is now used as the build backend. This will not have any effect for users
who install Black with its wheels from PyPI. (3233)
- Faster compiled wheels are now available for CPython 3.11 (3276)

_Blackd_

- Windows style (CRLF) newlines will be preserved (3257).

Integrations

- Vim plugin: add flag (`g:black_preview`) to enable/disable the preview style (3246)
- Update GitHub Action to support formatting of Jupyter Notebook files via a `jupyter`
option (3282)
- Update GitHub Action to support use of version specifiers (e.g. `&lt;23`) for Black
version (3265)

22.8.0

Highlights

- Python 3.11 is now supported, except for _blackd_ as aiohttp does not support 3.11 as
of publishing (3234)
- This is the last release that supports running _Black_ on Python 3.6 (formatting 3.6
code will continue to be supported until further notice)
- Reword the stability policy to say that we may, in rare cases, make changes that
affect code that was not previously formatted by _Black_ (3155)

Stable style

- Fix an infinite loop when using ` fmt: on/off` in the middle of an expression or code
block (3158)
- Fix incorrect handling of ` fmt: skip` on colon (`:`) lines (3148)
- Comments are no longer deleted when a line had spaces removed around power operators
(2874)

Preview style

- Single-character closing docstring quotes are no longer moved to their own line as
this is invalid. This was a bug introduced in version 22.6.0. (3166)
- `--skip-string-normalization` / `-S` now prevents docstring prefixes from being
normalized as expected (3168)
- When using `--skip-magic-trailing-comma` or `-C`, trailing commas are stripped from
subscript expressions with more than 1 element (3209)
- Implicitly concatenated strings inside a list, set, or tuple are now wrapped inside
parentheses (3162)
- Fix a string merging/split issue when a comment is present in the middle of implicitly
concatenated strings on its own line (3227)

_Blackd_

- `blackd` now supports enabling the preview style via the `X-Preview` header (3217)

Configuration

- Black now uses the presence of debug f-strings to detect target version (3215)
- Fix misdetection of project root and verbose logging of sources in cases involving
`--stdin-filename` (3216)
- Immediate `.gitignore` files in source directories given on the command line are now
also respected, previously only `.gitignore` files in the project root and
automatically discovered directories were respected (3237)

Documentation

- Recommend using BlackConnect in IntelliJ IDEs (3150)

Integrations

- Vim plugin: prefix messages with `Black: ` so it&#x27;s clear they come from Black (3194)
- Docker: changed to a /opt/venv installation + added to PATH to be available to
non-root users (3202)

Output

- Change from deprecated `asyncio.get_event_loop()` to create our event loop which
removes DeprecationWarning (3164)
- Remove logging from internal `blib2to3` library since it regularly emits error logs
about failed caching that can and should be ignored (3193)

Parser

- Type comments are now included in the AST equivalence check consistently so accidental
deletion raises an error. Though type comments can&#x27;t be tracked when running on PyPy
3.7 due to standard library limitations. (2874)

Performance

- Reduce Black&#x27;s startup time when formatting a single file by 15-30% (3211)

22.6.0

Style

- Fix unstable formatting involving `fmt: skip` and ` fmt:skip` comments (notice the
lack of spaces) (2970)

Preview style

- Docstring quotes are no longer moved if it would violate the line length limit (3044)
- Parentheses around return annotations are now managed (2990)
- Remove unnecessary parentheses around awaited objects (2991)
- Remove unnecessary parentheses in `with` statements (2926)
- Remove trailing newlines after code block open (3035)

Integrations

- Add `scripts/migrate-black.py` script to ease introduction of Black to a Git project
(3038)

Output

- Output Python version and implementation as part of `--version` flag (2997)

Packaging

- Use `tomli` instead of `tomllib` on Python 3.11 builds where `tomllib` is not
available (2987)

Parser

- [PEP 654](https://peps.python.org/pep-0654/#except) syntax (for example,
`except *ExceptionGroup:`) is now supported (3016)
- [PEP 646](https://peps.python.org/pep-0646) syntax (for example,
`Array[Batch, *Shape]` or `def fn(*args: *T) -&gt; None`) is now supported (3071)

Vim Plugin

- Fix `strtobool` function. It didn&#x27;t parse true/on/false/off. (3025)

Links

PyPI: https://pypi.org/project/black
Changelog: https://pyup.io/changelogs/black/

Update grpcio from 1.46.3 to 1.54.0.

The bot wasn't able to find a changelog for this release. Got an idea?

Links

PyPI: https://pypi.org/project/grpcio
Homepage: https://grpc.io

Update mypy from 0.960 to 1.2.0.

The bot wasn't able to find a changelog for this release. Got an idea?

Links

PyPI: https://pypi.org/project/mypy
Homepage: http://www.mypy-lang.org/

Update pylint from 2.13.9 to 2.17.2.

The bot wasn't able to find a changelog for this release. Got an idea?

Links

PyPI: https://pypi.org/project/pylint
Changelog: https://pyup.io/changelogs/pylint/

Update bandit from 1.7.4 to 1.7.5.

Changelog

1.7.5

What&#x27;s Changed
* Add an example screen shot of Bandit to README by ericwb in https://github.com/PyCQA/bandit/pull/847
* Bad link to screen shot by ericwb in https://github.com/PyCQA/bandit/pull/848
* Use a constant for weak hashes by ericwb in https://github.com/PyCQA/bandit/pull/850
* Group location line with code output by ericwb in https://github.com/PyCQA/bandit/pull/822
* Fix line range using Python 3.8 end_lineno by ericwb in https://github.com/PyCQA/bandit/pull/821
* Add classifier to indicate Py3 only by ericwb in https://github.com/PyCQA/bandit/pull/853
* Removal of blacklist call B309 httpsconnection by ericwb in https://github.com/PyCQA/bandit/pull/858
* Remove blacklist call check for os.tempnam by ericwb in https://github.com/PyCQA/bandit/pull/859
* Indiciate hash type in message by ericwb in https://github.com/PyCQA/bandit/pull/860
* Add the httpx module check for verify by ericwb in https://github.com/PyCQA/bandit/pull/861
* Add doc for hashlib plugin by ericwb in https://github.com/PyCQA/bandit/pull/862
* Make use of rich for progress bar by ericwb in https://github.com/PyCQA/bandit/pull/863
* Replace `toml` with `tomli` by mkniewallner in https://github.com/PyCQA/bandit/pull/829
* Fix up B109 and B111 removed plugins docs by ericwb in https://github.com/PyCQA/bandit/pull/864
* add check for &quot;requests&quot; calls without timeout by mschfh in https://github.com/PyCQA/bandit/pull/743
* Fix for build breaks in format job by ericwb in https://github.com/PyCQA/bandit/pull/869
* Add license and contributing links to docs by ericwb in https://github.com/PyCQA/bandit/pull/867
* Remove redundant word Bandit in titles of sections by ericwb in https://github.com/PyCQA/bandit/pull/873
* Add request for feedback via 👍 by ericwb in https://github.com/PyCQA/bandit/pull/871
* Add a Discord link to the docs by ericwb in https://github.com/PyCQA/bandit/pull/870
* Adding logging.config.listen() plugin with examples by raj3shp in https://github.com/PyCQA/bandit/pull/874
* Removal of ghugo by ericwb in https://github.com/PyCQA/bandit/pull/881
* Remove redundant pip line by ericwb in https://github.com/PyCQA/bandit/pull/884
* Corrected documentation on configuration by a-takahashi223 in https://github.com/PyCQA/bandit/pull/868
* Start testing against Python 3.11 by mkniewallner in https://github.com/PyCQA/bandit/pull/887
* Add myself to sponsor list by ericwb in https://github.com/PyCQA/bandit/pull/885
* Add Discord link to README by ericwb in https://github.com/PyCQA/bandit/pull/875
* Update action versions in Actions workflows (890) by mportesdev in https://github.com/PyCQA/bandit/pull/893
* Add dependency review action by ericwb in https://github.com/PyCQA/bandit/pull/891
* Fix an unclosed &lt;b&gt; tag in HTML formatter by mportesdev in https://github.com/PyCQA/bandit/pull/896
* &#x27;Test plugin listing&#x27; in docs incorrectly pointing B612 to plugin ref of B102 by rajaramsrn in https://github.com/PyCQA/bandit/pull/897
* Make small fixes in docs by mportesdev in https://github.com/PyCQA/bandit/pull/899
* Specify semver range for Python 3.11 by mportesdev in https://github.com/PyCQA/bandit/pull/901
* Add another bad example of yaml load by ericwb in https://github.com/PyCQA/bandit/pull/905
* Add releases link in &quot;Version control integration&quot; by travisjungroth in https://github.com/PyCQA/bandit/pull/909
* Update version of dependency-review-action by mportesdev in https://github.com/PyCQA/bandit/pull/911
* Avoid redundant message if debug on by ericwb in https://github.com/PyCQA/bandit/pull/913
* Remove invalid checking on hashlib by ericwb in https://github.com/PyCQA/bandit/pull/914
* Add some missing curve types by ericwb in https://github.com/PyCQA/bandit/pull/920
* add jsonpickle deserialization blacklist by SugarP1g in https://github.com/PyCQA/bandit/pull/707
* Fix reading the number argument from config file by KAUTH in https://github.com/PyCQA/bandit/pull/923
* Add end_col_offset if available by ericwb in https://github.com/PyCQA/bandit/pull/851
* Enhancement Proposal: Plugin &quot;assert_used&quot; config-skip snippet by marianomartinelli in https://github.com/PyCQA/bandit/pull/695
* Blacklist pandas read_pickle and add functional test for it by jaspersival in https://github.com/PyCQA/bandit/pull/710
* Docs for request without timeout has dead link by ericwb in https://github.com/PyCQA/bandit/pull/925
* Add case for global exec by tonybaloney in https://github.com/PyCQA/bandit/pull/570
* Fix a false positive condition yaml_load by ericwb in https://github.com/PyCQA/bandit/pull/927
* Fix issue 453 jinja2 template select_autoescape when using jinja2.select_autoescape by kinow in https://github.com/PyCQA/bandit/pull/454
* Adding tarfile.extractall() plugin with examples by yilmi in https://github.com/PyCQA/bandit/pull/549
* Check for deprecated TLS 1.1 by ericwb in https://github.com/PyCQA/bandit/pull/928
* weak_cryptographic_key assumes positional arg by ericwb in https://github.com/PyCQA/bandit/pull/930
* Fix filename of B202 in docs by mportesdev in https://github.com/PyCQA/bandit/pull/932
* Remove python 2 reference in docs by ericwb in https://github.com/PyCQA/bandit/pull/933
* Pass correct number of arguments to match the `%s` placeholders. by mportesdev in https://github.com/PyCQA/bandit/pull/934
* Fixup some invalid pickle testing by ericwb in https://github.com/PyCQA/bandit/pull/924
* Fix json and yaml formatters to respect num lines by ericwb in https://github.com/PyCQA/bandit/pull/929
* Fix AttributeError on detect of tuple assign condition by ericwb in https://github.com/PyCQA/bandit/pull/931
* [docs] Mention `exclude_dirs` option available in TOML and YAML by bittner in https://github.com/PyCQA/bandit/pull/876
* Typo fix by PermanAtayev in https://github.com/PyCQA/bandit/pull/945
* remove py2 exec example in docs by clavedeluna in https://github.com/PyCQA/bandit/pull/947
* Add official Python 3.11 support by ericwb in https://github.com/PyCQA/bandit/pull/964
* DOC: Add explanation on how to use pre-commit with config file by phofl in https://github.com/PyCQA/bandit/pull/968
* Fix breaking build due to new tox by ericwb in https://github.com/PyCQA/bandit/pull/983
* Correct build status badge in README by gliptak in https://github.com/PyCQA/bandit/pull/980
* Improve detecting SQL injections in f-strings by kfrydel in https://github.com/PyCQA/bandit/pull/917
* Improve handling nosec for multi-line strings by kfrydel in https://github.com/PyCQA/bandit/pull/915
* Check for github action updates monthly by jlosito in https://github.com/PyCQA/bandit/pull/989
* Added a bit more `project_urls` by KOLANICH in https://github.com/PyCQA/bandit/pull/985

New Contributors
* mschfh made their first contribution in https://github.com/PyCQA/bandit/pull/743
* raj3shp made their first contribution in https://github.com/PyCQA/bandit/pull/874
* a-takahashi223 made their first contribution in https://github.com/PyCQA/bandit/pull/868
* mportesdev made their first contribution in https://github.com/PyCQA/bandit/pull/893
* rajaramsrn made their first contribution in https://github.com/PyCQA/bandit/pull/897
* travisjungroth made their first contribution in https://github.com/PyCQA/bandit/pull/909
* SugarP1g made their first contribution in https://github.com/PyCQA/bandit/pull/707
* KAUTH made their first contribution in https://github.com/PyCQA/bandit/pull/923
* marianomartinelli made their first contribution in https://github.com/PyCQA/bandit/pull/695
* jaspersival made their first contribution in https://github.com/PyCQA/bandit/pull/710
* kinow made their first contribution in https://github.com/PyCQA/bandit/pull/454
* yilmi made their first contribution in https://github.com/PyCQA/bandit/pull/549
* PermanAtayev made their first contribution in https://github.com/PyCQA/bandit/pull/945
* clavedeluna made their first contribution in https://github.com/PyCQA/bandit/pull/947
* phofl made their first contribution in https://github.com/PyCQA/bandit/pull/968
* gliptak made their first contribution in https://github.com/PyCQA/bandit/pull/980
* kfrydel made their first contribution in https://github.com/PyCQA/bandit/pull/917
* jlosito made their first contribution in https://github.com/PyCQA/bandit/pull/989
* KOLANICH made their first contribution in https://github.com/PyCQA/bandit/pull/985

**Full Changelog**: https://github.com/PyCQA/bandit/compare/1.7.4...1.7.5

Links

PyPI: https://pypi.org/project/bandit
Changelog: https://pyup.io/changelogs/bandit/
Docs: https://bandit.readthedocs.io/

pyup-bot · 2023-05-22T14:06:11Z

Closing this in favor of #93

pyup-bot added 11 commits April 24, 2023 17:06

Update pytest from 7.1.2 to 7.3.1

7c794d8

Update pytest from 7.1.2 to 7.3.1

b8c29c7

Update opencensus from 0.9.0 to 0.11.2

8394a30

Update opencensus from 0.9.0 to 0.11.2

c920917

Update black from 22.3.0 to 23.3.0

a91948d

Update black from 22.3.0 to 23.3.0

7ac1328

Update grpcio from 1.46.3 to 1.54.0

4d53bc2

Update grpcio from 1.46.3 to 1.54.0

8b4b544

Update mypy from 0.960 to 1.2.0

9b647fa

Update pylint from 2.13.9 to 2.17.2

d0ccb3a

Update bandit from 1.7.4 to 1.7.5

b88f806

pyup-bot added the update label Apr 24, 2023

pyup-bot assigned amor71 Apr 24, 2023

pyup-bot mentioned this pull request Apr 24, 2023

PYUP Scheduled weekly dependency update for week 16 #91

Closed

pyup-bot closed this May 22, 2023

amor71 deleted the pyup/scheduled-update-2023-04-24 branch May 22, 2023 14:06

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

PYUP Scheduled weekly dependency update for week 17 #92

PYUP Scheduled weekly dependency update for week 17 #92

pyup-bot commented Apr 24, 2023

pyup-bot commented May 22, 2023

PYUP Scheduled weekly dependency update for week 17 #92

PYUP Scheduled weekly dependency update for week 17 #92

Conversation

pyup-bot commented Apr 24, 2023

Update pytest from 7.1.2 to 7.3.1.

7.3.1

7.3.0

7.2.2

7.2.1

7.2.0

7.1.3

Update opencensus from 0.9.0 to 0.11.2.

0.11.1

0.11.0

0.10.0

Update black from 22.3.0 to 23.3.0.

23.3.0

23.1.0

22.12.0

22.10.0

22.8.0

22.6.0

Update grpcio from 1.46.3 to 1.54.0.

Update mypy from 0.960 to 1.2.0.

Update pylint from 2.13.9 to 2.17.2.

Update bandit from 1.7.4 to 1.7.5.

1.7.5

pyup-bot commented May 22, 2023