Bump the dependencies group in /.config with 8 updates #180

dependabot · 2024-05-26T06:27:02Z

Bumps the dependencies group in /.config with 8 updates:

Package	From	To
griffe	`0.45.1`	`0.45.2`
markdown-exec	`1.8.1`	`1.8.3`
mkdocs-material	`9.5.23`	`9.5.24`
mkdocstrings-python	`1.10.2`	`1.10.3`
pipdeptree	`2.20.0`	`2.21.0`
pytest	`8.2.0`	`8.2.1`
requests	`2.31.0`	`2.32.2`
watchdog	`4.0.0`	`4.0.1`

Updates griffe from 0.45.1 to 0.45.2

Release notes

Sourced from griffe's releases.

0.45.2

0.45.2 - 2024-05-23

Compare with 0.45.1

Bug Fixes

Support setuptools' new editable modules using type annotations (14d45e8 by Timothée Mazzucotelli). Issue-273

Changelog

Sourced from griffe's changelog.

0.45.2 - 2024-05-23

Compare with 0.45.1

Bug Fixes

Support setuptools' new editable modules using type annotations (14d45e8 by Timothée Mazzucotelli). Issue-273

Commits

58b1742 chore: Prepare release 0.45.2
14d45e8 fix: Support setuptools' new editable modules using type annotations
See full diff in compare view

Updates markdown-exec from 1.8.1 to 1.8.3

Release notes

Sourced from markdown-exec's releases.

1.8.3

1.8.3 - 2024-05-22

Compare with 1.8.2

Bug Fixes

Don't leak future annotations in user code (ba0c35e by Timothée Mazzucotelli). Issue-47

1.8.2

1.8.2 - 2024-05-20

Compare with 1.8.1

Bug Fixes

Give __name__ to executed Python "modules", and populate sys.modules too (db25ee7 by Timothée Mazzucotelli). Issue-47

Changelog

Sourced from markdown-exec's changelog.

1.8.3 - 2024-05-22

Compare with 1.8.2

Bug Fixes

Don't leak future annotations in user code (ba0c35e by Timothée Mazzucotelli). Issue-47

1.8.2 - 2024-05-20

Compare with 1.8.1

Bug Fixes

Give __name__ to executed Python "modules", and populate sys.modules too (db25ee7 by Timothée Mazzucotelli). Issue-47

Commits

97de061 chore: Prepare release 1.8.3
ba0c35e fix: Don't leak future annotations in user code
0a485b4 chore: Prepare release 1.8.2
db25ee7 fix: Give __name__ to executed Python "modules", and populate sys.modules...
20b7570 ci: Fix installing project with extras
See full diff in compare view

Updates mkdocs-material from 9.5.23 to 9.5.24

Release notes

Sourced from mkdocs-material's releases.

mkdocs-material-9.5.24

Fixed #7187: Version selector title rendering issue

Changelog

Sourced from mkdocs-material's changelog.

mkdocs-material-9.5.24+insiders-4.53.10 (2024-05-20)

Fixed projects plugin crashing in serve mode when disabled

Fixed projects plugin crashing when building nested projects

mkdocs-material-9.5.24+insiders-4.53.9 (2024-05-20)

Fixed #7191: Tags listings not rendering when toc_depth is changed

mkdocs-material-9.5.24 (2024-05-20)

Fixed #7187: Version selector title rendering issue

mkdocs-material-9.5.23 (2024-05-15)

Fixed #7183: Edge case in anchor navigation when using instant navigation

Fixed #6436: Version selector not showing version alias

mkdocs-material-9.5.22 (2024-05-12)

Fixed #7170: Copy button adds empty lines for line spans (9.5.18 regression)

Fixed #7160: Version switching doesn't stay on page (9.5.5 regression)

Fixed #5619: Links in Mermaid.js diagrams not discernible

mkdocs-material-9.5.21 (2024-05-03)

Fixed #7133: Ensure latest version of Mermaid.js is used

Fixed #7125: Added warning for dotfiles in info plugin

mkdocs-material-9.5.20 (2024-04-29)

Fixed deprecation warning in privacy plugin (9.5.19 regression)

Fixed #7119: Tags plugin emits deprecation warning (9.5.19 regression)

Fixed #7118: Social plugin crashes if fonts are disabled (9.5.19 regression)

Fixed #7085: Social plugin crashes on Windows when downloading fonts

mkdocs-material-9.5.19+insiders-4.53.8 (2024-04-26)

Fixed #7052: Preview extension automatically including all pages

Fixed #7051: Instant previews mounting on footnote references

Fixed #5165: Improved tooltips not mounting in sidebar for typeset plugin

mkdocs-material-9.5.19+insiders-4.53.7 (2024-04-25)

Fixed #7060: Incorrect resolution of translation when using static-i18n

mkdocs-material-9.5.19 (2024-04-25)

Updated MkDocs to 1.6 and limited version to < 2

Updated Docker image to latest Alpine Linux

... (truncated)

Commits

a5cc069 Prepare 9.5.24 release
72caddf Updated dependencies
407335d Fixed title rendering in version selector
f494840 Documented for scope setting
See full diff in compare view

Updates mkdocstrings-python from 1.10.2 to 1.10.3

Release notes

Sourced from mkdocstrings-python's releases.

1.10.3

1.10.3 - 2024-05-22

Compare with 1.10.2

Bug Fixes

Don't crash when rendering the source of an object whose lineno is none (64df00b by Timothée Mazzucotelli). Issue-163

Changelog

Sourced from mkdocstrings-python's changelog.

1.10.3 - 2024-05-22

Compare with 1.10.2

Bug Fixes

Don't crash when rendering the source of an object whose lineno is none (64df00b by Timothée Mazzucotelli). Issue-163

Commits

9c7e304 chore: Prepare release 1.10.3
64df00b fix: Don't crash when rendering the source of an object whose lineno is none
See full diff in compare view

Updates pipdeptree from 2.20.0 to 2.21.0

Release notes

Sourced from pipdeptree's releases.

2.21.0

What's Changed

Implement --python auto for virtual environment detection by @kemzeb in tox-dev/pipdeptree#366

Full Changelog: tox-dev/pipdeptree@2.20.0...2.21.0

Commits

3c41d39 [pre-commit.ci] pre-commit autoupdate (#367)
0f558b3 Implement --python auto for environment detection (#366)
5cc7ba2 [pre-commit.ci] pre-commit autoupdate (#365)
See full diff in compare view

Updates pytest from 8.2.0 to 8.2.1

Release notes

Sourced from pytest's releases.

8.2.1

pytest 8.2.1 (2024-05-19)

Improvements

#12334: Support for Python 3.13 (beta1 at the time of writing).

Bug Fixes

#12120: Fix [PermissionError]{.title-ref} crashes arising from directories which are not selected on the command-line.

#12191: Keyboard interrupts and system exits are now properly handled during the test collection.

#12300: Fixed handling of 'Function not implemented' error under squashfuse_ll, which is a different way to say that the mountpoint is read-only.

#12308: Fix a regression in pytest 8.2.0 where the permissions of automatically-created .pytest_cache directories became rwx------ instead of the expected rwxr-xr-x.

Trivial/Internal Changes

#12333: pytest releases are now attested using the recent Artifact Attestation support from GitHub, allowing users to verify the provenance of pytest's sdist and wheel artifacts.

Commits

66ff8df Prepare release version 8.2.1
3ffcfd1 Merge pull request #12340 from pytest-dev/backport-12334-to-8.2.x
0b28313 [8.2.x] Add Python 3.13 (beta) support
f3dd93a [8.2.x] Attest package provenance (#12335)
bb5a125 [8.2.x] Spelling (#12331)
f179bf2 Merge pull request #12327 from pytest-dev/backport-12325-to-8.2.x
2b671b5 [8.2.x] cacheprovider: fix .pytest_cache not being world-readable
65ab7cb Merge pull request #12324 from pytest-dev/backport-12320-to-8.2.x
4d5fb7d Merge pull request #12319 from pytest-dev/backport-12311-to-8.2.x
cbe5996 [8.2.x] changelog: document unittest 8.2 change as breaking
Additional commits viewable in compare view

Updates requests from 2.31.0 to 2.32.2

Release notes

Sourced from requests's releases.

v2.32.2

2.32.2 (2024-05-21)

Deprecations

To provide a more stable migration for custom HTTPAdapters impacted by the CVE changes in 2.32.0, we've renamed _get_connection to a new public API, get_connection_with_tls_context. Existing custom HTTPAdapters will need to migrate their code to use this new API. get_connection is considered deprecated in all versions of Requests>=2.32.0.

A minimal (2-line) example has been provided in the linked PR to ease migration, but we strongly urge users to evaluate if their custom adapter is subject to the same issue described in CVE-2024-35195. (#6710)

v2.32.1

2.32.1 (2024-05-20)

Bugfixes

Add missing test certs to the sdist distributed on PyPI.

v2.32.0

2.32.0 (2024-05-20)

🐍 PYCON US 2024 EDITION 🐍

Security

Fixed an issue where setting verify=False on the first request from a Session will cause subsequent requests to the same origin to also ignore cert verification, regardless of the value of verify. (GHSA-9wx4-h78v-vm56)

Improvements

verify=True now reuses a global SSLContext which should improve request time variance between first and subsequent requests. It should also minimize certificate load time on Windows systems when using a Python version built with OpenSSL 3.x. (#6667)

Requests now supports optional use of character detection (chardet or charset_normalizer) when repackaged or vendored. This enables pip and other projects to minimize their vendoring surface area. The Response.text() and apparent_encoding APIs will default to utf-8 if neither library is present. (#6702)

Bugfixes

Fixed bug in length detection where emoji length was incorrectly calculated in the request content-length. (#6589)

Fixed deserialization bug in JSONDecodeError. (#6629)

Fixed bug where an extra leading / (path separator) could lead urllib3 to unnecessarily reparse the request URI. (#6644)

... (truncated)

Changelog

Sourced from requests's changelog.

2.32.2 (2024-05-21)

Deprecations

To provide a more stable migration for custom HTTPAdapters impacted by the CVE changes in 2.32.0, we've renamed _get_connection to a new public API, get_connection_with_tls_context. Existing custom HTTPAdapters will need to migrate their code to use this new API. get_connection is considered deprecated in all versions of Requests>=2.32.0.

A minimal (2-line) example has been provided in the linked PR to ease migration, but we strongly urge users to evaluate if their custom adapter is subject to the same issue described in CVE-2024-35195. (#6710)

2.32.1 (2024-05-20)

Bugfixes

Add missing test certs to the sdist distributed on PyPI.

2.32.0 (2024-05-20)

Security

Fixed an issue where setting verify=False on the first request from a Session will cause subsequent requests to the same origin to also ignore cert verification, regardless of the value of verify. (GHSA-9wx4-h78v-vm56)

Improvements

verify=True now reuses a global SSLContext which should improve request time variance between first and subsequent requests. It should also minimize certificate load time on Windows systems when using a Python version built with OpenSSL 3.x. (#6667)

Requests now supports optional use of character detection (chardet or charset_normalizer) when repackaged or vendored. This enables pip and other projects to minimize their vendoring surface area. The Response.text() and apparent_encoding APIs will default to utf-8 if neither library is present. (#6702)

Bugfixes

Fixed bug in length detection where emoji length was incorrectly calculated in the request content-length. (#6589)

Fixed deserialization bug in JSONDecodeError. (#6629)

Fixed bug where an extra leading / (path separator) could lead urllib3 to unnecessarily reparse the request URI. (#6644)

Deprecations

... (truncated)

Commits

88dce9d v2.32.2
c98e4d1 Merge pull request #6710 from nateprewitt/api_rename
92075b3 Add deprecation warning
aa1461b Move _get_connection to get_connection_with_tls_context
970e8ce v2.32.1
d6ebc4a v2.32.0
9a40d12 Avoid reloading root certificates to improve concurrent performance (#6667)
0c030f7 Merge pull request #6702 from nateprewitt/no_char_detection
555b870 Allow character detection dependencies to be optional in post-packaging steps
d6dded3 Merge pull request #6700 from franekmagiera/update-redirect-to-invalid-uri-test
Additional commits viewable in compare view

Updates watchdog from 4.0.0 to 4.0.1

Release notes

Sourced from watchdog's releases.

4.0.1

[inotify] Fix missing event_filter for the full emitter (#1032)

💟 Thanks to our beloved contributors: @mraspaud, @BoboTiG

Changelog

Sourced from watchdog's changelog.

4.0.1


2024-05-23 • `full history <https://github.com/gorakhargosh/watchdog/compare/v4.0.0...v4.0.1>`__

[inotify] Fix missing event_filter for the full emitter ([#1032](https://github.com/gorakhargosh/watchdog/issues/1032) &lt;https://github.com/gorakhargosh/watchdog/pull/1032&gt;__)
Thanks to our beloved contributors: @mraspaud, @BoboTiG

Commits

1a1f400 Version 4.0.1
b92b6fa doc: tweak
29ab159 [inotify] Fix missing event_filter for the full emitter (#1032)
2fe1609 Bump the version
9a4f3e2 ci: final fix
d134073 ci: fix missing wheels
5c8f620 Revert "Bump the version"
df07c90 Bump the version
c7a7842 ci: fix publish workflow
d1439f9 ci: fix blob storage
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the dependencies group in /.config with 8 updates: | Package | From | To | | --- | --- | --- | | [griffe](https://github.com/mkdocstrings/griffe) | `0.45.1` | `0.45.2` | | [markdown-exec](https://github.com/pawamoy/markdown-exec) | `1.8.1` | `1.8.3` | | [mkdocs-material](https://github.com/squidfunk/mkdocs-material) | `9.5.23` | `9.5.24` | | [mkdocstrings-python](https://github.com/mkdocstrings/python) | `1.10.2` | `1.10.3` | | [pipdeptree](https://github.com/tox-dev/pipdeptree) | `2.20.0` | `2.21.0` | | [pytest](https://github.com/pytest-dev/pytest) | `8.2.0` | `8.2.1` | | [requests](https://github.com/psf/requests) | `2.31.0` | `2.32.2` | | [watchdog](https://github.com/gorakhargosh/watchdog) | `4.0.0` | `4.0.1` | Updates `griffe` from 0.45.1 to 0.45.2 - [Release notes](https://github.com/mkdocstrings/griffe/releases) - [Changelog](https://github.com/mkdocstrings/griffe/blob/main/CHANGELOG.md) - [Commits](mkdocstrings/griffe@0.45.1...0.45.2) Updates `markdown-exec` from 1.8.1 to 1.8.3 - [Release notes](https://github.com/pawamoy/markdown-exec/releases) - [Changelog](https://github.com/pawamoy/markdown-exec/blob/main/CHANGELOG.md) - [Commits](pawamoy/markdown-exec@1.8.1...1.8.3) Updates `mkdocs-material` from 9.5.23 to 9.5.24 - [Release notes](https://github.com/squidfunk/mkdocs-material/releases) - [Changelog](https://github.com/squidfunk/mkdocs-material/blob/master/CHANGELOG) - [Commits](squidfunk/mkdocs-material@9.5.23...9.5.24) Updates `mkdocstrings-python` from 1.10.2 to 1.10.3 - [Release notes](https://github.com/mkdocstrings/python/releases) - [Changelog](https://github.com/mkdocstrings/python/blob/main/CHANGELOG.md) - [Commits](mkdocstrings/python@1.10.2...1.10.3) Updates `pipdeptree` from 2.20.0 to 2.21.0 - [Release notes](https://github.com/tox-dev/pipdeptree/releases) - [Commits](tox-dev/pipdeptree@2.20.0...2.21.0) Updates `pytest` from 8.2.0 to 8.2.1 - [Release notes](https://github.com/pytest-dev/pytest/releases) - [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst) - [Commits](pytest-dev/pytest@8.2.0...8.2.1) Updates `requests` from 2.31.0 to 2.32.2 - [Release notes](https://github.com/psf/requests/releases) - [Changelog](https://github.com/psf/requests/blob/main/HISTORY.md) - [Commits](psf/requests@v2.31.0...v2.32.2) Updates `watchdog` from 4.0.0 to 4.0.1 - [Release notes](https://github.com/gorakhargosh/watchdog/releases) - [Changelog](https://github.com/gorakhargosh/watchdog/blob/master/changelog.rst) - [Commits](gorakhargosh/watchdog@v4.0.0...v4.0.1) --- updated-dependencies: - dependency-name: griffe dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: markdown-exec dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: mkdocs-material dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: mkdocstrings-python dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: pipdeptree dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: pytest dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: requests dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: watchdog dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot bot requested review from NilashishC and a team as code owners May 26, 2024 06:27

dependabot bot added dependabot-deps-updates skip-changelog Skip changelog check when this label is found. labels May 26, 2024

dependabot bot requested review from audgirka and alisonlhart and removed request for a team May 26, 2024 06:27

dependabot bot temporarily deployed to ack May 26, 2024 06:27 Inactive

ansibuddy enabled auto-merge (squash) May 26, 2024 06:27

ansibuddy approved these changes May 26, 2024

View reviewed changes

ansibuddy merged commit 359df38 into main May 26, 2024
23 checks passed

dependabot bot deleted the dependabot/pip/dot-config/dependencies-2aab6551d4 branch May 26, 2024 06:35

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump the dependencies group in /.config with 8 updates #180

Bump the dependencies group in /.config with 8 updates #180

dependabot bot commented on behalf of github May 26, 2024

Bump the dependencies group in /.config with 8 updates #180

Bump the dependencies group in /.config with 8 updates #180

Conversation

dependabot bot commented on behalf of github May 26, 2024

0.45.2

0.45.2 - 2024-05-23

Bug Fixes

0.45.2 - 2024-05-23

Bug Fixes

1.8.3

1.8.3 - 2024-05-22

Bug Fixes

1.8.2

1.8.2 - 2024-05-20

Bug Fixes

1.8.3 - 2024-05-22

Bug Fixes

1.8.2 - 2024-05-20

Bug Fixes

mkdocs-material-9.5.24

1.10.3

1.10.3 - 2024-05-22

Bug Fixes

1.10.3 - 2024-05-22

Bug Fixes

2.21.0

What's Changed

8.2.1

pytest 8.2.1 (2024-05-19)

Improvements

Bug Fixes

Trivial/Internal Changes

v2.32.2

2.32.2 (2024-05-21)

v2.32.1

2.32.1 (2024-05-20)

v2.32.0

2.32.0 (2024-05-20)

🐍 PYCON US 2024 EDITION 🐍

2.32.2 (2024-05-21)

2.32.1 (2024-05-20)

2.32.0 (2024-05-20)

4.0.1