Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump cleo from 1.0.0a5 to 2.0.0 #4

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

dependabot[bot]
Copy link

@dependabot dependabot bot commented on behalf of github Dec 1, 2022

Bumps cleo from 1.0.0a5 to 2.0.0.

Release notes

Sourced from cleo's releases.

2.0.0

No source code changes.

This is a version-only release to replace 1.0.0, which was yanked on the grounds that it was incompatible with real dependents (i.e. Poetry) based on their version specifiers, which explicitly included 1.0.0 pre-releases.

1.0.0

Key points

  • Supported Python versions are now 3.7 up to 3.11.
  • cleo is now fully type-checked.
  • cleo no longer depends on clikit.

Changed

  • Replaced Terminal class with shutil.get_terminal_size() from standard library (#175).
  • Exceptions are now Errors (#179).
  • pylev was dropped in favor of much faster rapidfuzz (#173).
  • Default error verbosity was reduced (#132 & #166).

Removed

  • Removed doc comment-based command configuration notation (#239).

Fixed

  • --no-interaction is now automatically set when running in non-TTY terminals (#245).
  • Generated completions will no longer cause shell errors for namespaced commands (#247).
  • Using ^C while autocompleting Question answer will no longer break terminal (#240).
  • Namespaced commands no longer reset interactive state (#234).
  • Fixed underlying regex that caused CVE-2022-42966 (#285).
Changelog

Sourced from cleo's changelog.

[2.0.0] - 2022-11-21

No source code changes.

This is a version-only release to replace 1.0.0, which was yanked on the grounds that it was incompatible with real dependents (i.e. Poetry) based on their version specifiers, which explicitly included 1.0.0 pre-releases.

[1.0.0] - 2022-11-21

Key points

  • Supported Python versions are now 3.7 up to 3.11.
  • cleo is now fully type-checked.
  • cleo no longer depends on clikit.

Changed

  • Replaced Terminal class with shutil.get_terminal_size() from standard library (#175).
  • Exceptions are now Errors (#179).
  • pylev was dropped in favor of much faster rapidfuzz (#173).
  • Default error verbosity was reduced (#132 & #166).

Removed

  • Removed doc comment-based command configuration notation (#239).

Fixed

  • --no-interaction is now automatically set when running in non-TTY terminals (#245).
  • Generated completions will no longer cause shell errors for namespaced commands (#247).
  • Using ^C while autocompleting Question answer will no longer break terminal (#240).
  • Namespaced commands no longer reset interactive state (#234).
  • Fixed underlying regex that caused CVE-2022-42966 (#285).

[0.8.1] - 2020-04-17

Changed

  • Upgraded clikit to version ^0.6.0.

[0.8.0] - 2020-03-26

Added

  • Errors are now rendered in a nicer way for Python 3.6+.

... (truncated)

Commits
  • 108f821 chore: Release 2.0.0
  • 78ae030 Release 1.0.0
  • b5b9a04 Change regex string to less permissive one
  • 9ebf24f Recreate lock
  • 675ec7e Refactor exceptions into errors as per PEP8 guidelines
  • 7d3623b [pre-commit.ci] pre-commit autoupdate
  • f760a59 removal(tox): remove unused tox
  • d338ef7 chore(mypy): bump mypy version (#282)
  • 7af3362 chore(pre-commit): update flake8 plugins (#280)
  • 2efa20e chore: add maintainers to pyproject.toml (#278)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  • @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
  • @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
  • @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
  • @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [cleo](https://github.com/python-poetry/cleo) from 1.0.0a5 to 2.0.0.
- [Release notes](https://github.com/python-poetry/cleo/releases)
- [Changelog](https://github.com/python-poetry/cleo/blob/main/CHANGELOG.md)
- [Commits](python-poetry/cleo@1.0.0a5...2.0.0)

---
updated-dependencies:
- dependency-name: cleo
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Dec 1, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants