Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Aug 28, 2023

Bumps the development-dependencies group with 9 updates:

Package From To
black 23.3.0 23.7.0
coverage 7.2.7 7.3.0
flake8 6.0.0 6.1.0
mypy 1.2.0 1.5.1
tox 4.6.4 4.10.0
twine 3.1.1 4.0.2
types-jsonschema 4.17.0.6 4.17.0.10
types-pytz 2023.3.0.0 2023.3.0.1
wheel 0.41.0 0.41.2

Updates black from 23.3.0 to 23.7.0

Release notes

Sourced from black's releases.

23.7.0

Highlights

  • Runtime support for Python 3.7 has been removed. Formatting 3.7 code will still be supported until further notice (#3765)

Stable style

  • Fix a bug where an illegal trailing comma was added to return type annotations using PEP 604 unions (#3735)
  • Fix several bugs and crashes where comments in stub files were removed or mishandled under some circumstances (#3745)
  • Fix a crash with multi-line magic comments like type: ignore within parentheses (#3740)
  • Fix error in AST validation when Black removes trailing whitespace in a type comment (#3773)

Preview style

  • Implicitly concatenated strings used as function args are no longer wrapped inside parentheses (#3640)
  • Remove blank lines between a class definition and its docstring (#3692)

Configuration

  • The --workers argument to Black can now be specified via the BLACK_NUM_WORKERS environment variable (#3743)
  • .pytest_cache, .ruff_cache and .vscode are now excluded by default (#3691)
  • Fix Black not honouring pyproject.toml settings when running --stdin-filename and the pyproject.toml found isn't in the current working directory (#3719)
  • Black will now error if exclude and extend-exclude have invalid data types in pyproject.toml, instead of silently doing the wrong thing (#3764)

Packaging

  • Upgrade mypyc from 0.991 to 1.3 (#3697)
  • Remove patching of Click that mitigated errors on Python 3.6 with LANG=C (#3768)

Parser

  • Add support for the new PEP 695 syntax in Python 3.12 (#3703)

Performance

  • Speed up Black significantly when the cache is full (#3751)
  • Avoid importing IPython in a case where we wouldn't need it (#3748)

Output

... (truncated)

Changelog

Sourced from black's changelog.

23.7.0

Highlights

  • Runtime support for Python 3.7 has been removed. Formatting 3.7 code will still be supported until further notice (#3765)

Stable style

  • Fix a bug where an illegal trailing comma was added to return type annotations using PEP 604 unions (#3735)
  • Fix several bugs and crashes where comments in stub files were removed or mishandled under some circumstances (#3745)
  • Fix a crash with multi-line magic comments like type: ignore within parentheses (#3740)
  • Fix error in AST validation when Black removes trailing whitespace in a type comment (#3773)

Preview style

  • Implicitly concatenated strings used as function args are no longer wrapped inside parentheses (#3640)
  • Remove blank lines between a class definition and its docstring (#3692)

Configuration

  • The --workers argument to Black can now be specified via the BLACK_NUM_WORKERS environment variable (#3743)
  • .pytest_cache, .ruff_cache and .vscode are now excluded by default (#3691)
  • Fix Black not honouring pyproject.toml settings when running --stdin-filename and the pyproject.toml found isn't in the current working directory (#3719)
  • Black will now error if exclude and extend-exclude have invalid data types in pyproject.toml, instead of silently doing the wrong thing (#3764)

Packaging

  • Upgrade mypyc from 0.991 to 1.3 (#3697)
  • Remove patching of Click that mitigated errors on Python 3.6 with LANG=C (#3768)

Parser

  • Add support for the new PEP 695 syntax in Python 3.12 (#3703)

Performance

  • Speed up Black significantly when the cache is full (#3751)
  • Avoid importing IPython in a case where we wouldn't need it (#3748)

Output

... (truncated)

Commits

Updates coverage from 7.2.7 to 7.3.0

Changelog

Sourced from coverage's changelog.

Version 7.3.0 — 2023-08-12

  • Added a :meth:.Coverage.collect context manager to start and stop coverage data collection.

  • Dropped support for Python 3.7.

  • Fix: in unusual circumstances, SQLite cannot be set to asynchronous mode. Coverage.py would fail with the error Safety level may not be changed inside a transaction. This is now avoided, closing issue 1646_. Thanks to Michael Bell for the detailed bug report.

  • Docs: examples of configuration files now include separate examples for the different syntaxes: .coveragerc, pyproject.toml, setup.cfg, and tox.ini.

  • Fix: added nosemgrep comments to our JavaScript code so that semgrep-based SAST security checks won't raise false alarms about security problems that aren't problems.

  • Added a CITATION.cff file, thanks to Ken Schackart <pull 1641_>_.

.. _pull 1641: nedbat/coveragepy#1641 .. _issue 1646: nedbat/coveragepy#1646

.. _changes_7-2-7:

Commits
  • 9c2f924 docs: sample HTML for 7.3.0
  • 0421fdb docs: prep for 7.3.0
  • f2aa871 build: move pylint config into pyproject.toml
  • 1873ccb docs: drop a bunch of badges
  • 5937a62 feat: cov.collect() context manager
  • da7ee52 build(deps): bump sigstore/gh-action-sigstore-python from 2.0.0 to 2.0.1
  • d87f64a test: excluding NotImplementedError excluded too much
  • e51b1f7 test: ensure lines are properly ignored during metacov
  • b02de96 test(refactor): abstract method compatible with both pytest and mypy
  • ada3ade test(build): PytestCollectionWarning should be an error
  • Additional commits viewable in compare view

Updates flake8 from 6.0.0 to 6.1.0

Commits

Updates mypy from 1.2.0 to 1.5.1

Commits

Updates tox from 4.6.4 to 4.10.0

Release notes

Sourced from tox's releases.

4.10.0

What's Changed

New Contributors

Full Changelog: tox-dev/tox@4.9.0...4.10.0

4.9.0

What's Changed

New Contributors

Full Changelog: tox-dev/tox@4.8.0...4.9.0

4.8.0

What's Changed

New Contributors

Full Changelog: tox-dev/tox@4.7.0...4.8.0

4.7.0

What's Changed

Full Changelog: tox-dev/tox@4.6.4...4.7.0

Changelog

Sourced from tox's changelog.

v4.10.0 (2023-08-21)

Features - 4.10.0

- Change accepted environment name rule: must be made up of factors defined in configuration or match regex
  ``(pypy|py|cython|)((\d(\.\d+(\.\d+)?)?)|\d+)?``. If an environment name does not match this fail, and if a close match
  found suggest that to the user. (:issue:`3099`)

Bugfixes - 4.10.0

  • --override foo+=bar appending syntax will now work correctly when foo wasn't defined in tox.ini. (:issue:3100)

v4.9.0 (2023-08-16)

Features - 4.9.0

- Disallow command line environments which are not explicitly specified in the config file - by :user:`tjsmart`. (:issue:`2858`)

v4.8.0 (2023-08-12)

Features - 4.8.0

  • --override can now take options in the form of foo+=bar which will append bar to the end of an existing list/dict, rather than replacing it. (:issue:3087)

v4.7.0 (2023-08-08)

Features - 4.7.0

- Make --hashseed default to PYTHONHASHSEED, if defined - by :user:`paravoid`.
  The main motivation for this is to able to set the hash seed when building the
  documentation with "tox -e docs", and thus avoid embedding a random value in
  the tox documentation for --help. This caused documentation builds to fail to
  build reproducibly. (:issue:`2942`)

Bugfixes - 4.7.0

  • Update a regular expression in tests to match the exception message in both Python 3.12 and older. (:issue:3065)

Improved Documentation - 4.7.0

- Fix broken links - by :user:`gaborbernat`. (:issue:`3072`)
Commits
  • 9ceec6e release 4.10.0
  • 1024592 Accept environments with defined factors or of python selector form - suggest...
  • 6b8e83a Replace undefined settings with overrides when appending (#3101)
  • 0ac7121 Update README.md
  • 29b5e42 Document release process (#3094)
  • 2c4a745 Set basepython for docs env in alignment to Read the Docs default (#3097)
  • 3627f11 release 4.9.0
  • 6ca8d9b [pre-commit.ci] pre-commit autoupdate (#3091)
  • 2124458 Disallow command line environments which are not explicitly specified in the ...
  • f516cb5 release 4.8.0
  • Additional commits viewable in compare view

Updates twine from 3.1.1 to 4.0.2

Release notes

Sourced from twine's releases.

4.0.2

https://pypi.org/project/twine/4.0.2/

Changelog

4.0.1

https://pypi.org/project/twine/4.0.1/

Changelog

4.0.0

https://pypi.org/project/twine/4.0.0/

Changelog

3.8.0

https://pypi.org/project/twine/3.8.0/

Changelog

3.7.1

https://pypi.org/project/twine/3.7.1/

Changelog

3.7.0

https://pypi.org/project/twine/3.7.0/

Changelog

3.6.0

https://pypi.org/project/twine/3.6.0/

Changelog

3.5.0

https://pypi.org/project/twine/3.5.0/

Changelog

3.4.2

https://pypi.org/project/twine/3.4.2/

Changelog

Changelog

Sourced from twine's changelog.

Twine 4.0.2 (2022-11-30)

Bugfixes ^^^^^^^^

  • Remove deprecated function to fix twine check with pkginfo 1.9.0. ([#941](https://github.com/pypa/twine/issues/941) <https://github.com/pypa/twine/issues/941>_)

Twine 4.0.1 (2022-06-01)

Bugfixes ^^^^^^^^

  • Improve logging when keyring fails. ([#890](https://github.com/pypa/twine/issues/890) <https://github.com/pypa/twine/issues/890>_)
  • Reconfgure root logger to show all log messages. ([#896](https://github.com/pypa/twine/issues/896) <https://github.com/pypa/twine/issues/896>_)

Twine 4.0.0 (2022-03-31)

Features ^^^^^^^^

  • Drop support for Python 3.6. ([#869](https://github.com/pypa/twine/issues/869) <https://github.com/pypa/twine/issues/869>_)
  • Use Rich to add color to upload output. ([#851](https://github.com/pypa/twine/issues/851) <https://github.com/pypa/twine/issues/851>_)
  • Use Rich to add color to check output. ([#874](https://github.com/pypa/twine/issues/874) <https://github.com/pypa/twine/issues/874>_)
  • Use Rich instead of tqdm for upload progress bar. ([#877](https://github.com/pypa/twine/issues/877) <https://github.com/pypa/twine/issues/877>_)

Bugfixes ^^^^^^^^

  • Remove Twine's dependencies from the User-Agent header when uploading. ([#871](https://github.com/pypa/twine/issues/871) <https://github.com/pypa/twine/issues/871>_)
  • Improve detection of disabled BLAKE2 hashing due to FIPS mode. ([#879](https://github.com/pypa/twine/issues/879) <https://github.com/pypa/twine/issues/879>_)
  • Restore warning for missing long_description. ([#887](https://github.com/pypa/twine/issues/887) <https://github.com/pypa/twine/issues/887>_)

Twine 3.8.0 (2022-02-02)

Features ^^^^^^^^

  • Add --verbose logging for querying keyring credentials. ([#849](https://github.com/pypa/twine/issues/849) <https://github.com/pypa/twine/issues/849>_)
  • Log all upload responses with --verbose. ([#859](https://github.com/pypa/twine/issues/859) <https://github.com/pypa/twine/issues/859>_)
  • Show more helpful error message for invalid metadata. ([#861](https://github.com/pypa/twine/issues/861) <https://github.com/pypa/twine/issues/861>_)

... (truncated)

Commits

Updates types-jsonschema from 4.17.0.6 to 4.17.0.10

Commits

Updates types-pytz from 2023.3.0.0 to 2023.3.0.1

Commits

Updates wheel from 0.41.0 to 0.41.2

Changelog

Sourced from wheel's changelog.

Release Notes

0.41.2 (2023-08-22)

  • Fixed platform tag detection for GraalPy and 32-bit python running on an aarch64 kernel (PR by Matthieu Darbois)
  • Fixed wheel tags to not list directories in RECORD files (PR by Mike Taves)
  • Fixed ABI tag generation for GraalPy (PR by Michael Simacek)

0.41.1 (2023-08-05)

  • Fixed naming of the data_dir directory in the presence of local version segment given via egg_info.tag_build (PR by Anderson Bravalheri)
  • Fixed version specifiers in Requires-Dist being wrapped in parentheses

0.41.0 (2023-07-22)

  • Added full support of the build tag syntax to wheel tags (you can now set a build tag like 123mytag)
  • Fixed warning on Python 3.12 about onerror deprecation. (PR by Henry Schreiner)
  • Support testing on Python 3.12 betas (PR by Ewout ter Hoeven)

0.40.0 (2023-03-14)

  • Added a wheel tags command to modify tags on an existing wheel (PR by Henry Schreiner)
  • Updated vendored packaging to 23.0
  • wheel unpack now preserves the executable attribute of extracted files
  • Fixed spaces in platform names not being converted to underscores (PR by David Tucker)
  • Fixed RECORD files in generated wheels missing the regular file attribute
  • Fixed DeprecationWarning about the use of the deprecated pkg_resources API (PR by Thomas Grainger)
  • Wheel now uses flit-core as a build backend (PR by Henry Schreiner)

0.38.4 (2022-11-09)

  • Fixed PKG-INFO conversion in bdist_wheel mangling UTF-8 header values in METADATA (PR by Anderson Bravalheri)

0.38.3 (2022-11-08)

  • Fixed install failure when used with --no-binary, reported on Ubuntu 20.04, by removing setup_requires from setup.cfg

0.38.2 (2022-11-05)

  • Fixed regression introduced in v0.38.1 which broke parsing of wheel file names with multiple platform tags

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the development-dependencies group with 9 updates:

| Package | From | To |
| --- | --- | --- |
| [black](https://github.com/psf/black) | `23.3.0` | `23.7.0` |
| [coverage](https://github.com/nedbat/coveragepy) | `7.2.7` | `7.3.0` |
| [flake8](https://github.com/pycqa/flake8) | `6.0.0` | `6.1.0` |
| [mypy](https://github.com/python/mypy) | `1.2.0` | `1.5.1` |
| [tox](https://github.com/tox-dev/tox) | `4.6.4` | `4.10.0` |
| [twine](https://github.com/pypa/twine) | `3.1.1` | `4.0.2` |
| [types-jsonschema](https://github.com/python/typeshed) | `4.17.0.6` | `4.17.0.10` |
| [types-pytz](https://github.com/python/typeshed) | `2023.3.0.0` | `2023.3.0.1` |
| [wheel](https://github.com/pypa/wheel) | `0.41.0` | `0.41.2` |


Updates `black` from 23.3.0 to 23.7.0
- [Release notes](https://github.com/psf/black/releases)
- [Changelog](https://github.com/psf/black/blob/main/CHANGES.md)
- [Commits](psf/black@23.3.0...23.7.0)

Updates `coverage` from 7.2.7 to 7.3.0
- [Release notes](https://github.com/nedbat/coveragepy/releases)
- [Changelog](https://github.com/nedbat/coveragepy/blob/master/CHANGES.rst)
- [Commits](coveragepy/coveragepy@7.2.7...7.3.0)

Updates `flake8` from 6.0.0 to 6.1.0
- [Commits](PyCQA/flake8@6.0.0...6.1.0)

Updates `mypy` from 1.2.0 to 1.5.1
- [Commits](python/mypy@v1.2.0...v1.5.1)

Updates `tox` from 4.6.4 to 4.10.0
- [Release notes](https://github.com/tox-dev/tox/releases)
- [Changelog](https://github.com/tox-dev/tox/blob/main/docs/changelog.rst)
- [Commits](tox-dev/tox@4.6.4...4.10.0)

Updates `twine` from 3.1.1 to 4.0.2
- [Release notes](https://github.com/pypa/twine/releases)
- [Changelog](https://github.com/pypa/twine/blob/main/docs/changelog.rst)
- [Commits](pypa/twine@3.1.1...4.0.2)

Updates `types-jsonschema` from 4.17.0.6 to 4.17.0.10
- [Commits](https://github.com/python/typeshed/commits)

Updates `types-pytz` from 2023.3.0.0 to 2023.3.0.1
- [Commits](https://github.com/python/typeshed/commits)

Updates `wheel` from 0.41.0 to 0.41.2
- [Changelog](https://github.com/pypa/wheel/blob/main/docs/news.rst)
- [Commits](pypa/wheel@0.41.0...0.41.2)

---
updated-dependencies:
- dependency-name: black
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
- dependency-name: coverage
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
- dependency-name: flake8
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
- dependency-name: mypy
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
- dependency-name: tox
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
- dependency-name: twine
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: development-dependencies
- dependency-name: types-jsonschema
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: development-dependencies
- dependency-name: types-pytz
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: development-dependencies
- dependency-name: wheel
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: development-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Aug 28, 2023
@sonarqubecloud
Copy link

Kudos, SonarCloud Quality Gate passed!    Quality Gate passed

Bug A 0 Bugs
Vulnerability A 0 Vulnerabilities
Security Hotspot A 0 Security Hotspots
Code Smell A 0 Code Smells

No Coverage information No Coverage information
No Duplication information No Duplication information

@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Sep 1, 2023

Superseded by #530.

@dependabot dependabot bot closed this Sep 1, 2023
@dependabot dependabot bot deleted the dependabot/pip/development-dependencies-fed014a9ae branch September 1, 2023 09:05
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant