Scheduled biweekly dependency update for week 42 #50

pyup-bot · 2020-10-19T14:06:19Z

Update asgiref from 3.2.10 to 3.3.0.

Changelog

3.3.0

------------------

* sync_to_async now defaults to thread-sensitive mode being on
* async_to_sync now works inside of forked processes
* WsgiToAsgi now correctly clamps its response body when Content-Length is set

Links

PyPI: https://pypi.org/project/asgiref
Changelog: https://pyup.io/changelogs/asgiref/
Repo: https://github.com/django/asgiref/

Update django-axes from 5.7.1 to 5.8.0.

Changelog

5.8.0

------------------

- Improve Django REST Framework (DRF) integration.
[Anatoly]

Links

PyPI: https://pypi.org/project/django-axes
Changelog: https://pyup.io/changelogs/django-axes/
Repo: https://github.com/jazzband/django-axes

Update lxml from 4.5.2 to 4.6.1.

Changelog

4.6.1

==================

Bugs fixed
----------

* A vulnerability was discovered in the HTML Cleaner by Yaniv Nizry, which allowed
JavaScript to pass through.  The cleaner now removes more sneaky &quot;style&quot; content.

4.6.0

==================

Features added
--------------

* GH310: ``lxml.html.InputGetter`` supports ``__len__()`` to count the number of input fields.
Patch by Aidan Woolley.

* ``lxml.html.InputGetter`` has a new ``.items()`` method to ease processing all input fields.

* ``lxml.html.InputGetter.keys()`` now returns the field names in document order.

* GH-309: The API documentation is now generated using ``sphinx-apidoc``.
Patch by Chris Mayo.

Bugs fixed
----------

* LP1869455: C14N 2.0 serialisation failed for unprefixed attributes
when a default namespace was defined.

* ``TreeBuilder.close()`` raised ``AssertionError`` in some error cases where it
should have raised ``XMLSyntaxError``.  It now raises a combined exception to
keep up backwards compatibility, while switching to ``XMLSyntaxError`` as an
interface.

Links

PyPI: https://pypi.org/project/lxml
Changelog: https://pyup.io/changelogs/lxml/
Homepage: https://lxml.de/

Update pillow from 7.2.0 to 8.0.0.

Changelog

8.0.0

------------------

- Drop support for EOL Python 3.5 4746, 4794
[hugovk, radarhere, nulano]

- Drop support for PyPy3 &lt; 7.2.0 4964
[nulano]

- Remove ImageCms.CmsProfile attributes deprecated since 3.2.0 4768
[hugovk, radarhere]

- Remove long-deprecated Image.py functions 4798
[hugovk, nulano, radarhere]

- Add support for 16-bit precision JPEG quantization values 4918
[gofr]

- Added reading of IFD tag type 4979
[radarhere]

- Initialize offset memory for PyImagingPhotoPut 4806
[nqbit]

- Fix TiffDecode comparison warnings 4756
[nulano]

- Docs: Add dark mode 4968
[hugovk, nulano]

- Added macOS SDK install path to library and include directories 4974
[radarhere, fxcoudert]

- Imaging.h: prevent confusion with system 4923
[ax3l, ,radarhere]

- Avoid using pkg_resources in PIL.features.pilinfo 4975
[nulano]

- Add getlength and getbbox functions for TrueType fonts 4959
[nulano, radarhere, hugovk]

- Allow tuples with one item to give single color value in getink 4927
[radarhere, nulano]

- Add support for CBDT and COLR fonts 4955
[nulano, hugovk]

- Removed OSError in favour of DecompressionBombError for BMP 4966
[radarhere]

- Implemented another ellipse drawing algorithm 4523
[xtsm, radarhere]

- Removed unused JpegImagePlugin._fixup_dict function 4957
[radarhere]

- Added reading and writing of private PNG chunks 4292
[radarhere]

- Implement anchor for TrueType fonts 4930
[nulano, hugovk]

- Fixed bug in Exif __delitem__ 4942
[radarhere]

- Fix crash in ImageTk.PhotoImage on MinGW 64-bit 4946
[nulano]

- Moved CVE images to pillow-depends 4929
[radarhere]

- Refactor font_getsize and font_render 4910
[nulano]

- Fixed loading profile with non-ASCII path on Windows 4914
[radarhere]

- Fixed effect_spread bug for zero distance 4908
[radarhere, hugovk]

- Added formats parameter to Image.open 4837
[nulano, radarhere]

- Added regular_polygon draw method 4846
[comhar]

- Raise proper TypeError in putpixel 4882
[nulano, hugovk]

- Added writing of subIFDs 4862
[radarhere]

- Fix IFDRational __eq__ bug 4888
[luphord, radarhere]

- Fixed duplicate variable name 4885
[liZe, radarhere]

- Added homebrew zlib include directory 4842
[radarhere]

- Corrected inverted PDF CMYK colors 4866
[radarhere]

- Do not try to close file pointer if file pointer is empty 4823
[radarhere]

- ImageOps.autocontrast: add mask parameter 4843
[navneeth, hugovk]

- Read EXIF data tEXt chunk into info as bytes instead of string 4828
[radarhere]

- Replaced distutils with setuptools 4797, 4809, 4814, 4817, 4829, 4890
[hugovk, radarhere]

- Add MIME type to PsdImagePlugin 4788
[samamorgan]

- Allow ImageOps.autocontrast to specify low and high cutoffs separately 4749
[millionhz, radarhere]

Links

PyPI: https://pypi.org/project/pillow
Changelog: https://pyup.io/changelogs/pillow/
Homepage: https://python-pillow.org

Update iniconfig from 1.0.1 to 1.1.1.

Changelog

1.1.1

=========

* fix version determination (thanks florimondmanca)

1.1.0

=====

- typing stubs (thanks bluetech)
- ci fixes

Links

PyPI: https://pypi.org/project/iniconfig
Changelog: https://pyup.io/changelogs/iniconfig/
Repo: http://github.com/RonnyPfannschmidt/iniconfig

Update isort from 5.6.3 to 5.6.4.

Changelog

5.6.4

- Fixed 1556: Empty line added between imports that should be skipped.

Links

PyPI: https://pypi.org/project/isort
Changelog: https://pyup.io/changelogs/isort/
Repo: https://pycqa.github.io/isort/

Update lazy-object-proxy from 1.4.3 to 1.5.1.

Changelog

1.5.1

------------------

* Added ARM64 wheels (manylinux2014).

1.5.0

------------------

* Added support for ``__fspath__``.
* Dropped support for Python 3.4.

Links

PyPI: https://pypi.org/project/lazy-object-proxy
Changelog: https://pyup.io/changelogs/lazy-object-proxy/
Repo: https://github.com/ionelmc/python-lazy-object-proxy

Update parso from 0.7.1 to 0.8.0.

The bot wasn't able to find a changelog for this release. Got an idea?

Links

PyPI: https://pypi.org/project/parso
Changelog: https://pyup.io/changelogs/parso/
Repo: https://github.com/davidhalter/parso

Update pytest-django from 3.10.0 to 4.0.0.

Changelog

4.0.0

-------------------

Compatibility
^^^^^^^^^^^^^

This release contains no breaking changes, except dropping compatibility
with some older/unsupported versions.

* Drop support for Python versions before 3.5 (868).

Previously 2.7 and 3.4 were supported. Running ``pip install pytest-django``
on Python 2.7 or 3.4 would continue to install the compatible 3.x series.

* Drop support for Django versions before 2.2 (868).

Previously Django&gt;=1.8 was supported.

* Drop support for pytest versions before 5.4 (868).

Previously pytest&gt;=3.6 was supported.

Improvements
^^^^^^^^^^^^

* Officialy support Python 3.9.

* Add ``pytest_django.__version__`` (880).

* Minor documentation improvements (882).

Bugfixes
^^^^^^^^

* Make the ``admin_user`` and ``admin_client`` fixtures compatible with custom
user models which don&#39;t have a ``username`` field (457).

* Change the ``admin_user`` fixture to use ``get_by_natural_key()`` to get the
user instead of directly using ``USERNAME_FIELD``, in case it is overridden,
and to match Django (879).

Misc
^^^^

* Fix pytest-django&#39;s own tests failing due to some deprecation warnings
(875).

Links

PyPI: https://pypi.org/project/pytest-django
Changelog: https://pyup.io/changelogs/pytest-django/
Docs: https://pytest-django.readthedocs.io/

Update virtualenv from 20.0.34 to 20.0.35.

Changelog

20.0.35

~~~~~~~~~~~~~~~~~~
- Bump embedded setuptools from ``50.3.0`` to ``50.3.1`` - by :user:`gaborbernat`. (`1982 &lt;https://github.com/pypa/virtualenv/issues/1982&gt;`_)
- After importing virtualenv passing cwd to a subprocess calls breaks with ``invalid directory`` - by :user:`gaborbernat`. (`1983 &lt;https://github.com/pypa/virtualenv/issues/1983&gt;`_)

Links

PyPI: https://pypi.org/project/virtualenv
Changelog: https://pyup.io/changelogs/virtualenv/
Homepage: https://virtualenv.pypa.io/

Update zipp from 3.3.0 to 3.3.1.

Changelog

3.3.1

======

bpo-42043: Add tests capturing subclassing requirements.

Links

PyPI: https://pypi.org/project/zipp
Changelog: https://pyup.io/changelogs/zipp/
Repo: https://github.com/jaraco/zipp

sonarcloud · 2020-10-19T14:07:23Z

Kudos, SonarCloud Quality Gate passed!

0 Bugs
0 Vulnerabilities (and 0 Security Hotspots to review)
0 Code Smells

No Coverage information
No Duplication information

pyup-bot added 11 commits October 19, 2020 16:06

Update asgiref from 3.2.10 to 3.3.0

8a10f6b

Update django-axes from 5.7.1 to 5.8.0

61ceff7

Update lxml from 4.5.2 to 4.6.1

688765b

Update pillow from 7.2.0 to 8.0.0

3e9110b

Update iniconfig from 1.0.1 to 1.1.1

58971bb

Update isort from 5.6.3 to 5.6.4

6af9c2a

Update lazy-object-proxy from 1.4.3 to 1.5.1

575a057

Update parso from 0.7.1 to 0.8.0

3d8481e

Update pytest-django from 3.10.0 to 4.0.0

9028857

Update virtualenv from 20.0.34 to 20.0.35

51a80aa

Update zipp from 3.3.0 to 3.3.1

1b6a4a2

pyup-bot requested a review from djbrown as a code owner October 19, 2020 14:06

djbrown closed this Oct 28, 2020

djbrown deleted the pyup-scheduled-update-2020-10-19 branch October 28, 2020 17:25

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Scheduled biweekly dependency update for week 42 #50

Scheduled biweekly dependency update for week 42 #50

pyup-bot commented Oct 19, 2020

sonarcloud bot commented Oct 19, 2020

Scheduled biweekly dependency update for week 42 #50

Scheduled biweekly dependency update for week 42 #50

Conversation

pyup-bot commented Oct 19, 2020

Update asgiref from 3.2.10 to 3.3.0.

3.3.0

Update django-axes from 5.7.1 to 5.8.0.

5.8.0

Update lxml from 4.5.2 to 4.6.1.

4.6.1

4.6.0

Update pillow from 7.2.0 to 8.0.0.

8.0.0

Update iniconfig from 1.0.1 to 1.1.1.

1.1.1

1.1.0

Update isort from 5.6.3 to 5.6.4.

5.6.4

Update lazy-object-proxy from 1.4.3 to 1.5.1.

1.5.1

1.5.0

Update parso from 0.7.1 to 0.8.0.

Update pytest-django from 3.10.0 to 4.0.0.

4.0.0

Update virtualenv from 20.0.34 to 20.0.35.

20.0.35

Update zipp from 3.3.0 to 3.3.1.

3.3.1

sonarcloud bot commented Oct 19, 2020