Skip to content

Conversation

@fpinto-cdd
Copy link
Contributor

Ref: #781

jtrobles-cdd and others added 28 commits January 28, 2025 19:54
The step “Check that compiled Python dependency manifests are up-to-date with their sources”
is supposed to run only for the lowest supported Python version (currently 3.8).
However, commit 751adb0 inadvertently disabled
this step for all Python versions because of an incorrect string comparison
(`3.8.` is not a substring of `3.8`).
Python dependency sync check is never executed in CI/CD workflow
Bumps the production-dependencies group with 3 updates: [actions/setup-python](https://github.com/actions/setup-python), [codecov/codecov-action](https://github.com/codecov/codecov-action) and [actions/upload-artifact](https://github.com/actions/upload-artifact).


Updates `actions/setup-python` from 5.3.0 to 5.4.0
- [Release notes](https://github.com/actions/setup-python/releases)
- [Commits](actions/setup-python@v5.3.0...v5.4.0)

Updates `codecov/codecov-action` from 5.1.2 to 5.3.1
- [Release notes](https://github.com/codecov/codecov-action/releases)
- [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md)
- [Commits](codecov/codecov-action@v5.1.2...v5.3.1)

Updates `actions/upload-artifact` from 4.5.0 to 4.6.0
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](actions/upload-artifact@v4.5.0...v4.6.0)

---
updated-dependencies:
- dependency-name: actions/setup-python
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: codecov/codecov-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: actions/upload-artifact
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
…tion-dependencies-682fc29e55

chore: Bump the production-dependencies group with 3 updates
Bumps the development-dependencies group with 1 update: [twine](https://github.com/pypa/twine).


Updates `twine` from 6.0.1 to 6.1.0
- [Release notes](https://github.com/pypa/twine/releases)
- [Changelog](https://github.com/pypa/twine/blob/main/docs/changelog.rst)
- [Commits](pypa/twine@6.0.1...6.1.0)

---
updated-dependencies:
- dependency-name: twine
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
…dencies-bf8e59e19c

chore(deps-dev): Bump twine from 6.0.1 to 6.1.0 in the development-dependencies group
Bumps [pydantic](https://github.com/pydantic/pydantic) from 2.10.4 to 2.10.6.
- [Release notes](https://github.com/pydantic/pydantic/releases)
- [Changelog](https://github.com/pydantic/pydantic/blob/main/HISTORY.md)
- [Commits](pydantic/pydantic@v2.10.4...v2.10.6)

---
updated-dependencies:
- dependency-name: pydantic
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
chore(deps): Bump pydantic from 2.10.4 to 2.10.6
Bumps [pyopenssl](https://github.com/pyca/pyopenssl) from 24.3.0 to 25.0.0.
- [Changelog](https://github.com/pyca/pyopenssl/blob/main/CHANGELOG.rst)
- [Commits](pyca/pyopenssl@24.3.0...25.0.0)

---
updated-dependencies:
- dependency-name: pyopenssl
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
chore(deps): Bump pyopenssl from 24.3.0 to 25.0.0
Bumps [pytz](https://github.com/stub42/pytz) from 2024.2 to 2025.1.
- [Release notes](https://github.com/stub42/pytz/releases)
- [Commits](stub42/pytz@release_2024.2...release_2025.1)

---
updated-dependencies:
- dependency-name: pytz
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
chore(deps): Bump pytz from 2024.2 to 2025.1
Bumps the pip group with 1 update: [cryptography](https://github.com/pyca/cryptography).

Updates `cryptography` from 44.0.0 to 44.0.1
- [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst)
- [Commits](pyca/cryptography@44.0.0...44.0.1)

---
updated-dependencies:
- dependency-name: cryptography
  dependency-type: direct:production
  dependency-group: pip
...

Signed-off-by: dependabot[bot] <support@github.com>
chore(deps): Bump cryptography from 44.0.0 to 44.0.1 in the pip group
Bumps the production-dependencies group with 4 updates: [actions/cache](https://github.com/actions/cache), [codecov/codecov-action](https://github.com/codecov/codecov-action), [actions/upload-artifact](https://github.com/actions/upload-artifact) and [actions/download-artifact](https://github.com/actions/download-artifact).


Updates `actions/cache` from 4.2.0 to 4.2.2
- [Release notes](https://github.com/actions/cache/releases)
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
- [Commits](actions/cache@v4.2.0...v4.2.2)

Updates `codecov/codecov-action` from 5.3.1 to 5.4.0
- [Release notes](https://github.com/codecov/codecov-action/releases)
- [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md)
- [Commits](codecov/codecov-action@v5.3.1...v5.4.0)

Updates `actions/upload-artifact` from 4.6.0 to 4.6.1
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](actions/upload-artifact@v4.6.0...v4.6.1)

Updates `actions/download-artifact` from 4.1.8 to 4.1.9
- [Release notes](https://github.com/actions/download-artifact/releases)
- [Commits](actions/download-artifact@v4.1.8...v4.1.9)

---
updated-dependencies:
- dependency-name: actions/cache
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: codecov/codecov-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: actions/upload-artifact
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: actions/download-artifact
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
…tion-dependencies-fb79b8cccd

chore: Bump the production-dependencies group with 4 updates
…rt-from-pkcs12

libs: Add utility to get X.509 certificate from PKCS12 (PFX) file
Bumps [django](https://github.com/django/django) from 4.2.18 to 4.2.20.
- [Commits](django/django@4.2.18...4.2.20)

---
updated-dependencies:
- dependency-name: django
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
chore(deps): Bump django from 4.2.18 to 4.2.20
Bumps [lxml](https://github.com/lxml/lxml) from 5.3.0 to 5.3.1.
- [Release notes](https://github.com/lxml/lxml/releases)
- [Changelog](https://github.com/lxml/lxml/blob/master/CHANGES.txt)
- [Commits](lxml/lxml@lxml-5.3.0...lxml-5.3.1)

---
updated-dependencies:
- dependency-name: lxml
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
chore(deps): Bump lxml from 5.3.0 to 5.3.1
- Stop running **tests** for Python **3.8** in CI/CD.
- Remove **explicit** support for Python **3.8** from
  Python project configuration (`setup.py`, `setup.cfg`, and/or `pyproject.toml`).
- Compile Python **dependency manifests** with the **next highest**
  Python version (**3.9**).
- Remove Python **3.8** from **Black** configuration.
- Remove support for Python **3.8** from Mypy configuration.
- Remove support for Python **3.8** from Tox configuration.
- Update documentation in README.

Reasons for this change:

- The end of support date of Python **3.8** is **2024-10-07**:
  - [PEP 569 – Python 3.8 Release Schedule → 3.8 Lifespan](https://peps.python.org/pep-0569/#lifespan)
  - [Status of Python versions](https://devguide.python.org/versions/)
- Dependabot end-of-support date for Python **3.8** is **2025-02-05**:
  - [Closing down notice: Dependabot will no longer support Python version 3.8 ← GitHub Changelog](https://github.blog/changelog/2025-01-06-closing-down-notice-dependabot-will-no-longer-support-python-version-3-8/)

Ref: https://app.shortcut.com/cordada/story/12613
Update code format for Mypy linter using Python 3.9

Ref: https://app.shortcut.com/cordada/story/12613 [12613]
@fpinto-cdd fpinto-cdd requested a review from a team as a code owner March 12, 2025 15:57
@fpinto-cdd fpinto-cdd requested a review from jtrobles-cdd March 12, 2025 15:57
@fpinto-cdd fpinto-cdd self-assigned this Mar 12, 2025
@fpinto-cdd fpinto-cdd added task Task or chore kind: deploy Deployment labels Mar 12, 2025
@fpinto-cdd fpinto-cdd enabled auto-merge March 12, 2025 15:57
@sonarqubecloud
Copy link

@fpinto-cdd fpinto-cdd merged commit b326e29 into master Mar 12, 2025
22 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

kind: deploy Deployment task Task or chore

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants