[requires.io] dependency update on master branch #39
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Member
mithrandi
commented
Feb 1, 2016
mithrandi
commented
|
Reviewed 1 of 1 files at r1. Comments from the review on Reviewable.io |
mithrandi
added a commit
that referenced
this pull request
Feb 2, 2016
[requires.io] dependency update on master branch
bors-fusion bot
added a commit
that referenced
this pull request
Oct 2, 2017
155: Scheduled weekly dependency update for week 40 r=mithrandi
## Updates
Here's a list of all the updates bundled in this pull request. I've added some links to make it easier for you to find all the information you need.
<table align="center">
<tr>
<td><b>asn1crypto</b></td>
<td align="center">0.22.0</td>
<td align="center">»</td>
<td align="center">0.23.0</td>
<td>
<a href="https://pypi.python.org/pypi/asn1crypto">PyPI</a> | <a href="https://pyup.io/changelogs/asn1crypto/">Changelog</a> | <a href="https://github.com/wbond/asn1crypto/issues">Repo</a>
</td>
<tr>
<td><b>cffi</b></td>
<td align="center">1.10.0</td>
<td align="center">»</td>
<td align="center">1.11.0</td>
<td>
<a href="https://pypi.python.org/pypi/cffi">PyPI</a> | <a href="https://pyup.io/changelogs/cffi/">Changelog</a> | <a href="http://cffi.readthedocs.org">Docs</a>
</td>
<tr>
<td><b>lxml</b></td>
<td align="center">3.8.0</td>
<td align="center">»</td>
<td align="center">4.0.0</td>
<td>
<a href="https://pypi.python.org/pypi/lxml">PyPI</a> | <a href="https://pyup.io/changelogs/lxml/">Changelog</a> | <a href="http://lxml.de/">Homepage</a> | <a href="https://bugs.launchpad.net/lxml">Bugtracker</a>
</td>
<tr>
<td><b>pyasn1-modules</b></td>
<td align="center">0.1.1</td>
<td align="center">»</td>
<td align="center">0.1.4</td>
<td>
<a href="https://pypi.python.org/pypi/pyasn1-modules">PyPI</a> | <a href="https://pyup.io/changelogs/pyasn1-modules/">Changelog</a> | <a href="https://github.com/etingof/pyasn1-modules">Repo</a>
</td>
<tr>
<td><b>pyasn1</b></td>
<td align="center">0.3.3</td>
<td align="center">»</td>
<td align="center">0.3.6</td>
<td>
<a href="https://pypi.python.org/pypi/pyasn1">PyPI</a> | <a href="https://pyup.io/changelogs/pyasn1/">Changelog</a> | <a href="https://github.com/etingof/pyasn1">Repo</a>
</td>
<tr>
<td><b>pyopenssl</b></td>
<td align="center">17.2.0</td>
<td align="center">»</td>
<td align="center">17.3.0</td>
<td>
<a href="https://pypi.python.org/pypi/pyopenssl">PyPI</a> | <a href="https://pyup.io/changelogs/pyopenssl/">Changelog</a> | <a href="https://pyopenssl.org/">Homepage</a> | <a href="http://pythonhosted.org/pyOpenSSL/">Docs</a>
</td>
<tr>
<td><b>six</b></td>
<td align="center">1.10.0</td>
<td align="center">»</td>
<td align="center">1.11.0</td>
<td>
<a href="https://pypi.python.org/pypi/six">PyPI</a> | <a href="https://pyup.io/changelogs/six/">Changelog</a> | <a href="http://pypi.python.org/pypi/six/">Homepage</a> | <a href="http://pythonhosted.org/six/">Docs</a>
</td>
<tr>
<td><b>twisted[conch,tls]</b></td>
<td align="center">17.5.0</td>
<td align="center">»</td>
<td align="center">17.9.0</td>
<td>
<a href="https://pypi.python.org/pypi/twisted">PyPI</a> | <a href="https://pyup.io/changelogs/twisted/">Changelog</a> | <a href="http://twistedmatrix.com/">Homepage</a> | <a href="https://twistedmatrix.com/trac/">Bugtracker</a>
</td>
<tr>
<td><b>zope.interface</b></td>
<td align="center">4.4.2</td>
<td align="center">»</td>
<td align="center">4.4.3</td>
<td>
<a href="https://pypi.python.org/pypi/zope.interface">PyPI</a> | <a href="https://pyup.io/changelogs/zope.interface/">Changelog</a> | <a href="https://github.com/zopefoundation/zope.interface">Repo</a>
</td>
</tr>
</table>
## Changelogs
### asn1crypto 0.22.0 -> 0.23.0
>### 0.23.0
> - Backwards compatibility break: the `tag_type`, `explicit_tag` and
> `explicit_class` attributes on `core.Asn1Value` no longer exist and were
> replaced by the `implicit` and `explicit` attributes. Field param dicts
> may use the new `explicit` and `implicit` keys, or the old `tag_type` and
> `tag` keys. The attribute changes will likely to have little to no impact
> since they were primarily an implementation detail.
> - Teletex strings used inside of X.509 certificates are now interpreted
> using Windows-1252 (a superset of ISO-8859-1). This enables compatibility
> with certificates generated by OpenSSL. Strict parsing of Teletex strings
> can be retained by using the `x509.strict_teletex()` context manager.
> - Added support for nested explicit tagging, supporting values that are
> defined with explicit tagging and then added as a field of another
> structure using explicit tagging.
> - Fixed a `UnicodeDecodeError` when trying to find the (optional) dependency
> OpenSSL on Python 2
> - Fixed `next_update` field of `crl.TbsCertList` to be optional
> - Added the `x509.Certificate.sha256_fingerprint` property
> - `x509.Certificate.ocsp_urls` and `x509.DistributionPoint.url` will now
> return `https://`, `ldap://` and `ldaps://` URLs in addition to `http://`.
> - Added CMS Attribute Protection definitions from RFC 6211
> - Added OIDs from RFC 6962
### cffi 1.10.0 -> 1.11.0
>### 1.11
>=====
>* Support the modern standard types ``char16_t`` and ``char32_t``.
> These work like ``wchar_t``: they represent one unicode character, or
> when used as ``charN_t *`` or ``charN_t[]`` they represent a unicode
> string. The difference with ``wchar_t`` is that they have a known,
> fixed size. They should work at all places that used to work with
> ``wchar_t`` (please report an issue if I missed something). Note
> that with ``set_source()``, you need to make sure that these types are
> actually defined by the C source you provide (if used in ``cdef()``).
>* Support the C99 types ``float _Complex`` and ``double _Complex``.
> Note that libffi doesn't support them, which means that in the ABI
> mode you still cannot call C functions that take complex numbers
> directly as arguments or return type.
>* Fixed a rare race condition when creating multiple ``FFI`` instances
> from multiple threads. (Note that you aren't meant to create many
> ``FFI`` instances: in inline mode, you should write ``ffi =
> cffi.FFI()`` at module level just after ``import cffi``; and in
> out-of-line mode you don't instantiate ``FFI`` explicitly at all.)
>* Windows: using callbacks can be messy because the CFFI internal error
> messages show up to stderr---but stderr goes nowhere in many
> applications. This makes it particularly hard to get started with the
> embedding mode. (Once you get started, you can at least use
> ``ffi.def_extern(onerror=...)`` and send the error logs where it
> makes sense for your application, or record them in log files, and so
> on.) So what is new in CFFI is that now, on Windows CFFI will try to
> open a non-modal MessageBox (in addition to sending raw messages to
> stderr). The MessageBox is only visible if the process stays alive:
> typically, console applications that crash close immediately, but that
> is also the situation where stderr should be visible anyway.
>* Progress on support for `callbacks in NetBSD`__.
>* Functions returning booleans would in some case still return 0 or 1
> instead of False or True. Fixed.
>* `ffi.gc()`__ now takes an optional third parameter, which gives an
> estimate of the size (in bytes) of the object. So far, this is only
> used by PyPy, to make the next GC occur more quickly (`issue 320`__).
> In the future, this might have an effect on CPython too (provided
> the CPython `issue 31105`__ is addressed).
>* Add a note to the documentation: the ABI mode gives function objects
> that are *slower* to call than the API mode does. For some reason it
> is often thought to be faster. It is not!
>.. __: https://bitbucket.org/cffi/cffi/issues/321/cffi-191-segmentation-fault-during-self
>.. __: ref.htmlffi-gc
>.. __: https://bitbucket.org/cffi/cffi/issues/320/improve-memory_pressure-management
>.. __: http://bugs.python.org/issue31105
>### 1.10.1
>=======
### lxml 3.8.0 -> 4.0.0
>### 4.0.0
>==================
>Features added
>--------------
>* The ElementPath implementation is now compiled using Cython,
> which speeds up the ``.find*()`` methods quite significantly.
>* The modules ``lxml.builder``, ``lxml.html.diff`` and ``lxml.html.clean``
> are also compiled using Cython in order to speed them up.
>* ``xmlfile()`` supports async coroutines using ``async with`` and ``await``.
>* ``iterwalk()`` has a new method ``skip_subtree()`` that prevents walking into
> the descendants of the current element.
>* ``RelaxNG.from_rnc_string()`` accepts a ``base_url`` argument to
> allow relative resource lookups.
>* The XSLT result object has a new method ``.write_output(file)`` that serialises
> output data into a file according to the ``<xsl:output>`` configuration.
>Bugs fixed
>----------
>* GH251: HTML comments were handled incorrectly by the soupparser.
> Patch by mozbugbox.
>* LP1654544: The html5parser no longer passes the ``useChardet`` option
> if the input is a Unicode string, unless explicitly requested. When parsing
> files, the default is to enable it when a URL or file path is passed (because
> the file is then opened in binary mode), and to disable it when reading from
> a file(-like) object.
> Note: This is a backwards incompatible change of the default configuration.
> If your code parses byte strings/streams and depends on character detection,
> please pass the option ``guess_charset=True`` explicitly, which already worked
> in older lxml versions.
>* LP1703810: ``etree.fromstring()`` failed to parse UTF-32 data with BOM.
>* LP1526522: Some RelaxNG errors were not reported in the error log.
>* LP1567526: Empty and plain text input raised a TypeError in soupparser.
>* LP1710429: Uninitialised variable usage in HTML diff.
>* LP1415643: The closing tags context manager in ``xmlfile()`` could continue
> to output end tags even after writing failed with an exception.
>* LP1465357: ``xmlfile.write()`` now accepts and ignores None as input argument.
>* Compilation under Py3.7-pre failed due to a modified function signature.
>Other changes
>-------------
>* The main module source files were renamed from ``lxml.*.pyx`` to plain
> ``*.pyx`` (e.g. ``etree.pyx``) to simplify their handling in the build
> process. Care was taken to keep the old header files as fallbacks for
> code that compiles against the public C-API of lxml, but it might still
> be worth validating that third-party code does not notice this change.
### pyopenssl 17.2.0 -> 17.3.0
>### 17.3.0
>-------------------
>Backward-incompatible changes:
>^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
>- Dropped support for Python 3.3.
> `677 <https://github.com/pyca/pyopenssl/pull/677>`_
>- Removed the deprecated ``OpenSSL.rand`` module.
> This is being done ahead of our normal deprecation schedule due to its lack of use and the fact that it was becoming a maintenance burden.
> ``os.urandom()`` should be used instead.
> `675 <https://github.com/pyca/pyopenssl/pull/675>`_
>Deprecations:
>^^^^^^^^^^^^^
>- Deprecated ``OpenSSL.tsafe``.
> `673 <https://github.com/pyca/pyopenssl/pull/673>`_
>Changes:
>^^^^^^^^
>- Fixed a memory leak in ``OpenSSL.crypto.CRL``.
> `690 <https://github.com/pyca/pyopenssl/pull/690>`_
>- Fixed a memory leak when verifying certificates with ``OpenSSL.crypto.X509StoreContext``.
> `691 <https://github.com/pyca/pyopenssl/pull/691>`_
>----
### six 1.10.0 -> 1.11.0
>### 1.11.0
>------
>- Pull request 178: `with_metaclass` now properly proxies `__prepare__` to the
> underlying metaclass.
>- Pull request 191: Allow `with_metaclass` to work with metaclasses implemented
> in C.
>- Pull request 203: Add parse_http_list and parse_keqv_list to moved
> urllib.request.
>- Pull request 172 and issue 171: Add unquote_to_bytes to moved urllib.parse.
>- Pull request 167: Add `six.moves.getoutput`.
>- Pull request 80: Add `six.moves.urllib_parse.splitvalue`.
>- Pull request 75: Add `six.moves.email_mime_image`.
>- Pull request 72: Avoid creating reference cycles through tracebacks in
> `reraise`.
### zope.interface 4.4.2 -> 4.4.3
>### 4.4.3
>------------------
>- Avoid exceptions when the ``__annotations__`` attribute is added to
> interface definitions with Python 3.x type hints. See `issue 98
> <https://github.com/zopefoundation/zope.interface/issues/98>`_.
>- Fix the possibility of a rare crash in the C extension when
> deallocating items. See `issue 100
> <https://github.com/zopefoundation/zope.interface/issues/100>`_.
That's it for now!
Happy merging! 🤖
bors-fusion bot
added a commit
that referenced
this pull request
Oct 16, 2017
157: Scheduled weekly dependency update for week 42 r=mithrandi
## Updates
Here's a list of all the updates bundled in this pull request. I've added some links to make it easier for you to find all the information you need.
<table align="center">
<tr>
<td><b>cffi</b></td>
<td align="center">1.11.0</td>
<td align="center">»</td>
<td align="center">1.11.2</td>
<td>
<a href="https://pypi.python.org/pypi/cffi">PyPI</a> | <a href="https://pyup.io/changelogs/cffi/">Changelog</a> | <a href="http://cffi.readthedocs.org">Docs</a>
</td>
<tr>
<td><b>cryptography</b></td>
<td align="center">2.0.3</td>
<td align="center">»</td>
<td align="center">2.1.1</td>
<td>
<a href="https://pypi.python.org/pypi/cryptography">PyPI</a> | <a href="https://pyup.io/changelogs/cryptography/">Changelog</a> | <a href="https://github.com/pyca/cryptography">Repo</a>
</td>
<tr>
<td><b>lxml</b></td>
<td align="center">4.0.0</td>
<td align="center">»</td>
<td align="center">4.1.0</td>
<td>
<a href="https://pypi.python.org/pypi/lxml">PyPI</a> | <a href="https://pyup.io/changelogs/lxml/">Changelog</a> | <a href="http://lxml.de/">Homepage</a> | <a href="https://bugs.launchpad.net/lxml">Bugtracker</a>
</td>
<tr>
<td><b>pillow</b></td>
<td align="center">4.2.1</td>
<td align="center">»</td>
<td align="center">4.3.0</td>
<td>
<a href="https://pypi.python.org/pypi/pillow">PyPI</a> | <a href="https://pyup.io/changelogs/pillow/">Changelog</a> | <a href="https://python-pillow.org">Homepage</a>
</td>
<tr>
<td><b>pyasn1-modules</b></td>
<td align="center">0.1.4</td>
<td align="center">»</td>
<td align="center">0.1.5</td>
<td>
<a href="https://pypi.python.org/pypi/pyasn1-modules">PyPI</a> | <a href="https://pyup.io/changelogs/pyasn1-modules/">Changelog</a> | <a href="https://github.com/etingof/pyasn1-modules">Repo</a>
</td>
<tr>
<td><b>pyasn1</b></td>
<td align="center">0.3.6</td>
<td align="center">»</td>
<td align="center">0.3.7</td>
<td>
<a href="https://pypi.python.org/pypi/pyasn1">PyPI</a> | <a href="https://pyup.io/changelogs/pyasn1/">Changelog</a> | <a href="https://github.com/etingof/pyasn1">Repo</a>
</td>
<tr>
<td><b>pyrsistent</b></td>
<td align="center">0.13.0</td>
<td align="center">»</td>
<td align="center">0.14.0</td>
<td>
<a href="https://pypi.python.org/pypi/pyrsistent">PyPI</a> | <a href="https://pyup.io/changelogs/pyrsistent/">Changelog</a> | <a href="http://github.com/tobgu/pyrsistent/">Repo</a>
</td>
</tr>
</table>
## Changelogs
### cffi 1.11.0 -> 1.11.2
>### 1.11.2
>=======
>* Fix Windows issue with managing the thread-state on CPython 3.0 to 3.5
>### 1.11.1
>=======
>* Fix tests, remove deprecated C API usage
>* Fix (hack) for 3.6.0/3.6.1/3.6.2 giving incompatible binary extensions
> (cpython issue `29943`_)
>* Fix for 3.7.0a1+
>.. _`29943`: https://bugs.python.org/issue29943
### cryptography 2.0.3 -> 2.1.1
>### 2.1
>~~~~~~~~~~~~~~~~
>* **FINAL DEPRECATION** Python 2.6 support is deprecated, and will be removed
> in the next release of ``cryptography``.
>* **BACKWARDS INCOMPATIBLE:** ``Whirlpool``, ``RIPEMD160``, and
> ``UnsupportedExtension`` have been removed in accordance with our
> :doc:`/api-stability` policy.
>* **BACKWARDS INCOMPATIBLE:** :attr:`~cryptography.x509.DNSName.value`,
> :attr:`~cryptography.x509.RFC822Name.value`, and
> :attr:`~cryptography.x509.UniformResourceIdentifier.value` will now return
> an :term:`A-label` string when parsing a certificate containing an
> internationalized domain name (IDN) or if the caller passed a :term:`U-label`
> to the constructor. See below for additional deprecations related to this
> change.
>* Installing ``cryptography`` now requires ``pip`` 6 or newer.
>* Deprecated passing :term:`U-label` strings to the
> :class:`~cryptography.x509.DNSName`,
> :class:`~cryptography.x509.UniformResourceIdentifier`, and
> :class:`~cryptography.x509.RFC822Name` constructors. Instead, users should
> pass values as :term:`A-label` strings with ``idna`` encoding if necessary.
> This change will not affect anyone who is not processing internationalized
> domains.
>* Added support for
> :class:`~cryptography.hazmat.primitives.ciphers.algorithms.ChaCha20`. In
> most cases users should choose
> :class:`~cryptography.hazmat.primitives.ciphers.aead.ChaCha20Poly1305`
> rather than using this unauthenticated form.
>* Added :meth:`~cryptography.x509.CertificateRevocationList.is_signature_valid`
> to :class:`~cryptography.x509.CertificateRevocationList`.
>* Support :class:`~cryptography.hazmat.primitives.hashes.BLAKE2b` and
> :class:`~cryptography.hazmat.primitives.hashes.BLAKE2s` with
> :class:`~cryptography.hazmat.primitives.hmac.HMAC`.
>* Added support for
> :class:`~cryptography.hazmat.primitives.ciphers.modes.XTS` mode for
> AES.
>* Added support for using labels with
> :class:`~cryptography.hazmat.primitives.asymmetric.padding.OAEP` when using
> OpenSSL 1.0.2 or greater.
>* Improved compatibility with NSS when issuing certificates from an issuer
> that has a subject with non-``UTF8String`` string types.
>* Add support for the :class:`~cryptography.x509.DeltaCRLIndicator` extension.
>* Add support for the :class:`~cryptography.x509.TLSFeature`
> extension. This is commonly used for enabling ``OCSP Must-Staple`` in
> certificates.
>* Add support for the :class:`~cryptography.x509.FreshestCRL` extension.
>.. _v2-0-3:
### lxml 4.0.0 -> 4.1.0
>### 4.1.0
>==================
>Features added
>--------------
>* ElementPath supports text predicates for current node, like "[.='text']".
>* ElementPath allows spaces in predicates.
>* Custom Element classes and XPath functions can now be registered with a
> decorator rather than explicit dict assignments.
>* Static Linux wheels are now built with link time optimisation (LTO) enabled.
> This should have a beneficial impact on the overall performance by providing
> a tighter compiler integration between lxml and libxml2/libxslt.
>Bugs fixed
>----------
>* LP1722776: Requesting non-Element objects like comments from a document with
> ``PythonElementClassLookup`` could fail with a TypeError.
### pillow 4.2.1 -> 4.3.0
>### 4.3.0
>------------------
>- Fix warning on pointer cast in isblock 2775, 2778
> [cgohlke]
>- Doc: Added macOS High Sierra tested Pillow version 2777
> [radarhere]
>- Use correct Windows handle type on 64 bit in imagingcms 2774
> [cgohlke]
>
>- 64 Bit Windows fix for block storage 2773
> [cgohlke]
>- Fix "expression result unused" warning 2764
> [radarhere]
>- Add 16bit Read/Write and RLE read support to SgiImageFile 2769
> [jbltx, wiredfool]
>- Block & array hybrid storage 2738
> [homm]
>- Common seek frame position check 1849
> [radarhere]
>- Doc: Add note about aspect ratio to Image thumbnail script 2281
> [wilsonge]
>- Fix ValueError: invalid version number '1.0.0rc1' in scipy release candidate 2771
> [cgohlke]
>- Unfreeze requirements.txt 2766
> [hugovk]
>- Test: ResourceWarning tests 2756
> [hugovk]
>- Use n_frames to determine is_animated if possible 2315
> [radarhere]
>- Doc: Corrected parameters in documentation 2768
> [radarhere]
>- Avoid unnecessary Image operations 1891
> [radarhere]
>- Added register_extensions method 1860
> [radarhere]
>- Fix TIFF support for I;16S, I;16BS, and I;32BS rawmodes 2748
> [wiredfool]
>- Fixed doc syntax in ImageDraw 2752
> [radarhere]
>- Fixed support for building on Windows/msys2. Added Appveyor CI coverage for python3 on msys2 2476
> [wiredfool]
>- Fix ValueError in Exif/Tiff IFD 2719
> [wiredfool]
>- Use pathlib2 for Path objects on Python < 3.4 2291
> [asergi]
>- Export only required properties in unsafe_ptrs 2740
> [homm]
>- Alpha composite fixes 2709
> [homm]
>- Faster Transpose operations, added 'Transverse' option 2730
> [homm]
>- Deprecate ImageOps undocumented functions gaussian_blur, gblur, unsharp_mask, usm and box_blur in favor of ImageFilter implementations 2735
> [homm]
>- Dependencies: Updated freetype to 2.8.1 2741
> [radarhere]
>- Bug: Player skipped first image 2742
> [radarhere]
>- Faster filter operations for Kernel, Gaussian, and Unsharp Mask filters 2679
> [homm]
>- EPS: Add showpage to force rendering of some EPS images 2636
> [kaplun]
>- DOC: Fix type of palette parameter in Image.quantize. 2703
> [kkopachev]
>- DOC: Fix Ico docs to match code 2712
> [hugovk]
>- Added file pointer save to SpiderImagePlugin 2647
> [radarhere]
>- Add targa version 2 footer 2713
> [jhultgre]
>- Removed redundant lines 2714
> [radarhere]
>- Travis CI: Use default pypy/pypy3 2721
> [hugovk]
>- Fix for SystemError when rendering an empty string, added in 4.2.0 2706
> [wiredfool]
>- Fix for memory leaks in font handling added in 4.2.0 2634
> [wiredfool]
>- Tests: cleanup, more tests. Fixed WMF save handler 2689
> [radarhere]
>- Removed debugging interface for Image.core.grabclipboard 2708
> [radarhere]
>- Doc syntax fix 2710
> [radarhere]
>- Faster packing and unpacking for RGB, LA, and related storage modes 2693
> [homm]
>- Use RGBX rawmode for RGB JPEG images where possible 1989
> [homm]
>- Remove palettes from non-palette modes in _new 2702
> [wiredfool]
>- Delete transparency info when convert'ing RGB/L to RGBA 2633
> [olt]
>- Code tweaks to ease type annotations 2687
> [neiljp]
>- Fixed incorrect use of 's' to byteslike object 2691
> [wiredfool]
>- Fix JPEG subsampling labels for subsampling=2 2698
> [homm]
>- Region of interest (box) for resampling 2254
> [homm]
>- Basic support for Termux (android) in setup.py 2684
> [wiredfool]
>- Bug: Fix Image.fromarray for numpy.bool type. 2683
> [wiredfool]
>- CI: Add Fedora 24 and 26 to Docker tests
> [wiredfool]
>- JPEG: Fix ZeroDivisionError when EXIF contains invalid DPI (0/0). 2667
> [vytisb]
>- Depends: Updated openjpeg to 2.2.0 2669
> [radarhere]
>- Depends: Updated Tk Tcl to 8.6.7 2668
> [radarhere]
>- Depends: Updated libimagequant to 2.10.2 2660
> [radarhere]
>- Test: Added test for ImImagePlugin tell() 2675
> [radarhere]
>- Test: Additional tests for SGIImagePlugin 2659
> [radarhere]
>- New Image.getchannel method 2661
> [homm]
>- Remove unused im.copy2 and core.copy methods 2657
> [homm]
>- Fast Image.merge() 2677
> [homm]
>- Fast Image.split() 2676
> [homm]
>- Fast image allocation 2655
> [homm]
>- Storage cleanup 2654
> [homm]
>- FLI: Use frame count from FLI header 2674
> [radarhere]
>- Test: Test animated FLI file 2650
> [hugovk]
>- Bug: Fixed uninitialized memory in bc5 decoding 2648
> [ifeherva]
>- Moved SgiImagePlugin save error to before the start of write operations 2646
> [radarhere]
>- Move createfontdatachunk.py so isn't installed globally 2645
> [hugovk]
>- Bug: Fix unexpected keyword argument 'align' 2641
> [hugovk]
>- Add newlines to error message for clarity 2640
> [hugovk]
>- Docs: Updated redirected URL 2637
> [radarhere]
>- Bug: Fix JPEG DPI when EXIF is invalid 2632
> [wiredfool]
>- Bug: Fix for font getsize on empty string 2624
> [radarhere]
>- Docs: Improved ImageDraw documentation 2626
> [radarhere]
>- Docs: Corrected alpha_composite args documentation 2627
> [radarhere]
>- Docs: added the description of the filename attribute to images.rst 2621
> [dasdachs]
>- Dependencies: Updated libimagequant to 2.10.1 2616
> [radarhere]
>- PDF: Renamed parameter to not shadow built-in dict 2612
> [kijeong]
### pyrsistent 0.13.0 -> 0.14.0
>### 0.14.0
> * Fix 117, pmap now accepts iterators as input to constructor. Thanks Julian for this!
> * Drop support for Python 2.6. Nothing has been done in this release that will explicitly
> break pyrsistent for 2.6 but it will not be considered moving forward. Dropping 2.6
> support is the reason for stepping the second decimal instead of the third.
That's it for now!
Happy merging! 🤖
bors-fusion bot
added a commit
that referenced
this pull request
Jan 1, 2018
167: Scheduled weekly dependency update for week 00 r=mithrandi a=pyup-bot
## Updates
Here's a list of all the updates bundled in this pull request. I've added some links to make it easier for you to find all the information you need.
<table align="center">
<tr>
<td><b>asn1crypto</b></td>
<td align="center">0.23.0</td>
<td align="center">»</td>
<td align="center">0.24.0</td>
<td>
<a href="https://pypi.python.org/pypi/asn1crypto">PyPI</a> | <a href="https://pyup.io/changelogs/asn1crypto/">Changelog</a> | <a href="https://github.com/wbond/asn1crypto/issues">Repo</a>
</td>
<tr>
<td><b>attrs</b></td>
<td align="center">17.3.0</td>
<td align="center">»</td>
<td align="center">17.4.0</td>
<td>
<a href="https://pypi.python.org/pypi/attrs">PyPI</a> | <a href="https://pyup.io/changelogs/attrs/">Changelog</a> | <a href="http://www.attrs.org/">Homepage</a>
</td>
<tr>
<td><b>ipaddress</b></td>
<td align="center">1.0.18</td>
<td align="center">»</td>
<td align="center">1.0.19</td>
<td>
<a href="https://pypi.python.org/pypi/ipaddress">PyPI</a> | <a href="https://github.com/phihag/ipaddress">Repo</a>
</td>
<tr>
<td><b>txaws</b></td>
<td align="center">0.4.0</td>
<td align="center">»</td>
<td align="center">0.5.0</td>
<td>
<a href="https://pypi.python.org/pypi/txaws">PyPI</a> | <a href="https://pyup.io/changelogs/txaws/">Changelog</a> | <a href="https://github.com/twisted/txaws">Repo</a>
</td>
</tr>
</table>
## Changelogs
### asn1crypto 0.23.0 -> 0.24.0
>### 0.24.0
> - `x509.Certificate().self_signed` will no longer return `"yes"` under any
> circumstances. This helps prevent confusion since the library does not
> verify the signature. Instead a library like oscrypto should be used
> to confirm if a certificate is self-signed.
> - Added various OIDs to `x509.KeyPurposeId()`
> - Added `x509.Certificate().private_key_usage_period_value`
> - Added structures for parsing common subject directory attributes for
> X.509 certificates, including `x509.SubjectDirectoryAttribute()`
> - Added `algos.AnyAlgorithmIdentifier()` for situations where an
> algorithm identifier may contain a digest, signed digest or encryption
> algorithm OID
> - Fixed a bug with `x509.Certificate().subject_directory_attributes_value`
> not returning the correct value
> - Fixed a bug where explicitly-tagged fields in a `core.Sequence()` would
> not function properly when the field had a default value
> - Fixed a bug with type checking in `pem.armor()`
### attrs 17.3.0 -> 17.4.0
>### 17.4.0
>-------------------
>Backward-incompatible Changes
>^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
>- The traversal of MROs when using multiple inheritance was backward:
> If you defined a class ``C`` that subclasses ``A`` and ``B`` like ``C(A, B)``, ``attrs`` would have collected the attributes from ``B`` *before* those of ``A``.
> This is now fixed and means that in classes that employ multiple inheritance, the output of ``__repr__`` and the order of positional arguments in ``__init__`` changes.
> Due to the nature of this bug, a proper deprecation cycle was unfortunately impossible.
> Generally speaking, it's advisable to prefer ``kwargs``-based initialization anyways – *especially* if you employ multiple inheritance and diamond-shaped hierarchies.
> `298 <https://github.com/python-attrs/attrs/issues/298>`_,
> `299 <https://github.com/python-attrs/attrs/issues/299>`_,
> `304 <https://github.com/python-attrs/attrs/issues/304>`_
>- The ``__repr__`` set by ``attrs``
> no longer produces an ``AttributeError``
> when the instance is missing some of the specified attributes
> (either through deleting
> or after using ``init=False`` on some attributes).
> This can break code
> that relied on ``repr(attr_cls_instance)`` raising ``AttributeError``
> to check if any attr-specified members were unset.
> If you were using this,
> you can implement a custom method for checking this::
> def has_unset_members(self):
> for field in attr.fields(type(self)):
> try:
> getattr(self, field.name)
> except AttributeError:
> return True
> return False
> `308 <https://github.com/python-attrs/attrs/issues/308>`_
>Deprecations
>^^^^^^^^^^^^
>- The ``attr.ib(convert=callable)`` option is now deprecated in favor of ``attr.ib(converter=callable)``.
> This is done to achieve consistency with other noun-based arguments like *validator*.
> *convert* will keep working until at least January 2019 while raising a ``DeprecationWarning``.
> `307 <https://github.com/python-attrs/attrs/issues/307>`_
>Changes
>^^^^^^^
>- Generated ``__hash__`` methods now hash the class type along with the attribute values.
> Until now the hashes of two classes with the same values were identical which was a bug.
> The generated method is also *much* faster now.
> `261 <https://github.com/python-attrs/attrs/issues/261>`_,
> `295 <https://github.com/python-attrs/attrs/issues/295>`_,
> `296 <https://github.com/python-attrs/attrs/issues/296>`_
>- ``attr.ib``\ ’s ``metadata`` argument now defaults to a unique empty ``dict`` instance instead of sharing a common empty ``dict`` for all.
> The singleton empty ``dict`` is still enforced.
> `280 <https://github.com/python-attrs/attrs/issues/280>`_
>- ``ctypes`` is optional now however if it's missing, a bare ``super()`` will not work in slots classes.
> This should only happen in special environments like Google App Engine.
> `284 <https://github.com/python-attrs/attrs/issues/284>`_,
> `286 <https://github.com/python-attrs/attrs/issues/286>`_
>- The attribute redefinition feature introduced in 17.3.0 now takes into account if an attribute is redefined via multiple inheritance.
> In that case, the definition that is closer to the base of the class hierarchy wins.
> `285 <https://github.com/python-attrs/attrs/issues/285>`_,
> `287 <https://github.com/python-attrs/attrs/issues/287>`_
>- Subclasses of ``auto_attribs=True`` can be empty now.
> `291 <https://github.com/python-attrs/attrs/issues/291>`_,
> `292 <https://github.com/python-attrs/attrs/issues/292>`_
>- Equality tests are *much* faster now.
> `306 <https://github.com/python-attrs/attrs/issues/306>`_
>- All generated methods now have correct ``__module__``, ``__name__``, and (on Python 3) ``__qualname__`` attributes.
> `309 <https://github.com/python-attrs/attrs/issues/309>`_
>----
That's it for now!
Happy merging! 🤖
bors-fusion bot
added a commit
that referenced
this pull request
May 9, 2018
185: Scheduled weekly dependency update for week 18 r=mithrandi a=pyup-bot ### Update [attrs](https://pypi.org/project/attrs) from **17.4.0** to **18.1.0**. <details> <summary>Changelog</summary> ### 18.1.0 ``` ------------------- Changes ^^^^^^^ - ``x=X(); x.cycle = x; repr(x)`` will no longer raise a ``RecursionError``, and will instead show as ``X(x=...)``. `95 <https://github.com/python-attrs/attrs/issues/95>`_ - ``attr.ib(factory=f)`` is now syntactic sugar for the common case of ``attr.ib(default=attr.Factory(f))``. `178 <https://github.com/python-attrs/attrs/issues/178>`_, `356 <https://github.com/python-attrs/attrs/issues/356>`_ - Added ``attr.field_dict()`` to return an ordered dictionary of ``attrs`` attributes for a class, whose keys are the attribute names. `290 <https://github.com/python-attrs/attrs/issues/290>`_, `349 <https://github.com/python-attrs/attrs/issues/349>`_ - The order of attributes that are passed into ``attr.make_class()`` or the ``these`` argument of ``attr.s()`` is now retained if the dictionary is ordered (i.e. ``dict`` on Python 3.6 and later, ``collections.OrderedDict`` otherwise). Before, the order was always determined by the order in which the attributes have been defined which may not be desirable when creating classes programatically. `300 <https://github.com/python-attrs/attrs/issues/300>`_, `339 <https://github.com/python-attrs/attrs/issues/339>`_, `343 <https://github.com/python-attrs/attrs/issues/343>`_ - In slotted classes, ``__getstate__`` and ``__setstate__`` now ignore the ``__weakref__`` attribute. `311 <https://github.com/python-attrs/attrs/issues/311>`_, `326 <https://github.com/python-attrs/attrs/issues/326>`_ - Setting the cell type is now completely best effort. This fixes ``attrs`` on Jython. We cannot make any guarantees regarding Jython though, because our test suite cannot run due to dependency incompatabilities. `321 <https://github.com/python-attrs/attrs/issues/321>`_, `334 <https://github.com/python-attrs/attrs/issues/334>`_ - If ``attr.s`` is passed a *these* argument, it will not attempt to remove attributes with the same name from the class body anymore. `322 <https://github.com/python-attrs/attrs/issues/322>`_, `323 <https://github.com/python-attrs/attrs/issues/323>`_ - The hash of ``attr.NOTHING`` is now vegan and faster on 32bit Python builds. `331 <https://github.com/python-attrs/attrs/issues/331>`_, `332 <https://github.com/python-attrs/attrs/issues/332>`_ - The overhead of instantiating frozen dict classes is virtually eliminated. `336 <https://github.com/python-attrs/attrs/issues/336>`_ - Generated ``__init__`` methods now have an ``__annotations__`` attribute derived from the types of the fields. `363 <https://github.com/python-attrs/attrs/issues/363>`_ - We have restructured the documentation a bit to account for ``attrs``' growth in scope. Instead of putting everything into the `examples <http://www.attrs.org/en/stable/examples.html>`_ page, we have started to extract narrative chapters. So far, we've added chapters on `initialization <http://www.attrs.org/en/stable/init.html>`_ and `hashing <http://www.attrs.org/en/stable/hashing.html>`_. Expect more to come! `369 <https://github.com/python-attrs/attrs/issues/369>`_, `370 <https://github.com/python-attrs/attrs/issues/370>`_ ---- ``` </details> <details> <summary>Links</summary> - PyPI: https://pypi.org/project/attrs - Changelog: https://pyup.io/changelogs/attrs/ - Homepage: http://www.attrs.org/ </details> ### Update [cffi](https://pypi.org/project/cffi) from **1.11.2** to **1.11.5**. <details> <summary>Changelog</summary> ### 1.11.5 ``` ======= * `Issue 357`_: fix ``ffi.emit_python_code()`` which generated a buggy Python file if you are using a ``struct`` with an anonymous ``union`` field or vice-versa. * Windows: ``ffi.dlopen()`` should now handle unicode filenames. * ABI mode: implemented ``ffi.dlclose()`` for the in-line case (it used to be present only in the out-of-line case). * Fixed a corner case for ``setup.py install --record=xx --root=yy`` with an out-of-line ABI module. Also fixed `Issue 345`_. * More hacks on Windows for running CFFI's own ``setup.py``. * `Issue 358`_: in embedding, to protect against (the rare case of) Python initialization from several threads in parallel, we have to use a spin-lock. On CPython 3 it is worse because it might spin-lock for a long time (execution of ``Py_InitializeEx()``). Sadly, recent changes to CPython make that solution needed on CPython 2 too. * CPython 3 on Windows: we no longer compile with ``Py_LIMITED_API`` by default because such modules cannot be used with virtualenv. `Issue 350`_ mentions a workaround if you still want that and are not concerned about virtualenv: pass a ``define_macros=[("Py_LIMITED_API", None)]`` to the ``ffibuilder.set_source()`` call. .. _`Issue 345`: https://bitbucket.org/cffi/cffi/issues/345/ .. _`Issue 350`: https://bitbucket.org/cffi/cffi/issues/350/ .. _`Issue 358`: https://bitbucket.org/cffi/cffi/issues/358/ .. _`Issue 357`: https://bitbucket.org/cffi/cffi/issues/357/ ``` ### 1.11.4 ``` ======= * Windows: reverted linking with ``python3.dll``, because virtualenv does not make this DLL available to virtual environments for now. See `Issue 355`_. On Windows only, the C extension modules created by cffi follow for now the standard naming scheme ``foo.cp36-win32.pyd``, to make it clear that they are regular CPython modules depending on ``python36.dll``. .. _`Issue 355`: https://bitbucket.org/cffi/cffi/issues/355/ ``` ### 1.11.3 ``` ======= * Fix on CPython 3.x: reading the attributes ``__loader__`` or ``__spec__`` from the cffi-generated lib modules gave a buggy SystemError. (These attributes are always None, and provided only to help compatibility with tools that expect them in all modules.) * More Windows fixes: workaround for MSVC not supporting large literal strings in C code (from ``ffi.embedding_init_code(large_string)``); and an issue with ``Py_LIMITED_API`` linking with ``python35.dll/python36.dll`` instead of ``python3.dll``. * Small documentation improvements. ``` </details> <details> <summary>Links</summary> - PyPI: https://pypi.org/project/cffi - Changelog: https://pyup.io/changelogs/cffi/ - Docs: http://cffi.readthedocs.org </details> ### Update [cryptography](https://pypi.org/project/cryptography) from **2.1.4** to **2.2.2**. <details> <summary>Changelog</summary> ### 2.2.1 ``` ~~~~~~~~~~~~~~~~~~ * Reverted a change to ``GeneralNames`` which prohibited having zero elements, due to breakages. * Fixed a bug in :func:`~cryptography.hazmat.primitives.keywrap.aes_key_unwrap_with_padding` that caused it to raise ``InvalidUnwrap`` when key length modulo 8 was zero. .. _v2-2: ``` ### 2.2 ``` ~~~~~~~~~~~~~~~~ * **BACKWARDS INCOMPATIBLE:** Support for Python 2.6 has been dropped. * Resolved a bug in ``HKDF`` that incorrectly constrained output size. * Added :class:`~cryptography.hazmat.primitives.asymmetric.ec.BrainpoolP256R1`, :class:`~cryptography.hazmat.primitives.asymmetric.ec.BrainpoolP384R1`, and :class:`~cryptography.hazmat.primitives.asymmetric.ec.BrainpoolP512R1` to support inter-operating with systems like German smart meters. * Added token rotation support to :doc:`Fernet </fernet>` with :meth:`~cryptography.fernet.MultiFernet.rotate`. * Fixed a memory leak in :func:`~cryptography.hazmat.primitives.asymmetric.ec.derive_private_key`. * Added support for AES key wrapping with padding via :func:`~cryptography.hazmat.primitives.keywrap.aes_key_wrap_with_padding` and :func:`~cryptography.hazmat.primitives.keywrap.aes_key_unwrap_with_padding` . * Allow loading DSA keys with 224 bit ``q``. .. _v2-1-4: ``` </details> <details> <summary>Links</summary> - PyPI: https://pypi.org/project/cryptography - Changelog: https://pyup.io/changelogs/cryptography/ - Repo: https://github.com/pyca/cryptography </details> ### Update [hyperlink](https://pypi.org/project/hyperlink) from **17.3.1** to **18.0.0**. *The bot wasn't able to find a changelog for this release. [Got an idea?](https://github.com/pyupio/changelogs/issues/new)* <details> <summary>Links</summary> - PyPI: https://pypi.org/project/hyperlink - Changelog: https://pyup.io/changelogs/hyperlink/ - Repo: https://github.com/python-hyper/hyperlink </details> ### Update [ipaddress](https://pypi.org/project/ipaddress) from **1.0.19** to **1.0.21**. *The bot wasn't able to find a changelog for this release. [Got an idea?](https://github.com/pyupio/changelogs/issues/new)* <details> <summary>Links</summary> - PyPI: https://pypi.org/project/ipaddress - Repo: https://github.com/phihag/ipaddress </details> ### Update [lxml](https://pypi.org/project/lxml) from **4.1.1** to **4.2.1**. <details> <summary>Changelog</summary> ### 4.2.1 ``` ================== Bugs fixed ---------- * LP1755825: ``iterwalk()`` failed to return the 'start' event for the initial element if a tag selector is used. * LP1756314: Failure to import 4.2.0 into PyPy due to a missing library symbol. * LP1727864, GH258: Add "-isysroot" linker option on MacOS as needed by XCode 9. ``` ### 4.2.0 ``` ================== Features added -------------- * GH255: ``SelectElement.value`` returns more standard-compliant and browser-like defaults for non-multi-selects. If no option is selected, the value of the first option is returned (instead of None). If multiple options are selected, the value of the last one is returned (instead of that of the first one). If no options are present (not standard-compliant) ``SelectElement.value`` still returns ``None``. * GH261: The ``HTMLParser()`` now supports the ``huge_tree`` option. Patch by stranac. Bugs fixed ---------- * LP1551797: Some XSLT messages were not captured by the transform error log. * LP1737825: Crash at shutdown after an interrupted iterparse run with XMLSchema validation. Other changes ------------- ``` </details> <details> <summary>Links</summary> - PyPI: https://pypi.org/project/lxml - Changelog: https://pyup.io/changelogs/lxml/ - Homepage: http://lxml.de/ - Bugtracker: https://bugs.launchpad.net/lxml </details> ### Update [olefile](https://pypi.org/project/olefile) from **0.44** to **0.45.1**. *The bot wasn't able to find a changelog for this release. [Got an idea?](https://github.com/pyupio/changelogs/issues/new)* <details> <summary>Links</summary> - PyPI: https://pypi.org/project/olefile - Changelog: https://pyup.io/changelogs/olefile/ - Repo: https://github.com/decalage2/olefile/tarball/master - Homepage: https://www.decalage.info/python/olefileio </details> ### Update [pillow](https://pypi.org/project/pillow) from **4.3.0** to **5.1.0**. <details> <summary>Changelog</summary> ### 5.1.0 ``` ------------------ - Close fp before return in ImagingSavePPM 3061 [kathryndavies] - Added documentation for ICNS append_images 3051 [radarhere] - Docs: Move intro text below its header 3021 [hugovk] - CI: Rename appveyor.yml as .appveyor.yml 2978 [hugovk] - Fix TypeError for JPEG2000 parser feed 3042 [hugovk] - Certain corrupted jpegs can result in no data read 3023 [kkopachev] - Add support for BLP file format 3007 [jleclanche] - Simplify version checks 2998 [hugovk] - Fix "invalid escape sequence" warning on Python 3.6+ 2996 [timgraham] - Allow append_images to set .icns scaled images 3005 [radarhere] - Support appending to existing PDFs 2965 [vashek] - Fix and improve efficient saving of ICNS on macOS 3004 [radarhere] - Build: Enable pip cache in AppVeyor build 3009 [thijstriemstra] - Trim trailing whitespace 2985 [Metallicow] - Docs: Correct reference to Image.new method 3000 [radarhere] - Rearrange ImageFilter classes into alphabetical order 2990 [radarhere] - Test: Remove duplicate line 2983 [radarhere] - Build: Update AppVeyor PyPy version 3003 [radarhere] - Tiff: Open 8 bit Tiffs with 5 or 6 channels, discarding extra channels 2938 [homm] - Readme: Added Twitter badge 2930 [hugovk] - Removed __main__ code from ImageCms 2942 [radarhere] - Test: Changed assert statements to unittest calls 2961 [radarhere] - Depends: Update libimagequant to 2.11.10, raqm to 0.5.0, freetype to 2.9 3036, 3017, 2957 [radarhere] - Remove _imaging.crc32 in favor of builtin Python crc32 implementation 2935 [wiredfool] - Move Tk directory to src directory 2928 [hugovk] - Enable pip cache in Travis CI 2933 [jdufresne] - Remove unused and duplicate imports 2927 [radarhere] - Docs: Changed documentation references to 2.x to 2.7 2921 [radarhere] - Fix memory leak when opening webp files 2974 [wiredfool] - Setup: Fix "TypeError: 'NoneType' object is not iterable" for PPC and CRUX 2951 [hugovk] - Setup: Add libdirs for ppc64le and armv7l 2968 [nehaljwani] ``` ### 5.0.0 ``` ------------------ - Docs: Added docstrings from documentation 2914 [radarhere] - Test: Switch from nose to pytest 2815 [hugovk] - Rework Source directory layout, preventing accidental import of PIL. 2911 [wiredfool] - Dynamically link libraqm 2753 [wiredfool] - Removed scripts directory 2901 [wiredfool] - TIFF: Run all compressed tiffs through libtiff decoder 2899 [wiredfool] - GIF: Add disposal option when saving GIFs 2902 [linnil1, wiredfool] - EPS: Allow for an empty line in EPS header data 2903 [radarhere] - PNG: Add support for sRGB and cHRM chunks, permit sRGB when no iCCP chunk present 2898 [wiredfool] - Dependencies: Update Tk Tcl to 8.6.8 2905 [radarhere] - Decompression bomb error now raised for images 2x larger than a decompression bomb warning 2583 [wiredfool] - Test: avoid random failure in test_effect_noise 2894 [hugovk] - Increased epsilon for test_file_eps.py:test_showpage due to Arch update. 2896 [wiredfool] - Removed check parameter from _save in BmpImagePlugin, PngImagePlugin, ImImagePlugin, PalmImagePlugin, and PcxImagePlugin. 2873 [radarhere] - Make PngImagePlugin.add_text() zip argument type bool 2890 [jdufresne] - Depends: Updated libwebp to 0.6.1 2880 [radarhere] - Remove unnecessary bool() calls in Image.registered_extensions and skipKnownBadTests 2891 [jdufresne] - Fix count of BITSPERSAMPLE items in broken TIFF files 2883 [homm] - Fillcolor parameter for Image.Transform 2852 [wiredfool] - Test: Display differences for test failures 2862 [wiredfool] - Added executable flag to file with shebang line 2884 [radarhere] - Setup: Specify compatible Python versions for pip 2877 [hugovk] - Dependencies: Updated libimagequant to 2.11.4 2878 [radarhere] - Setup: Warn if trying to install for Py3.7 on Windows 2855 [hugovk] - Doc: Fonts can be loaded from a file-like object, not just filename 2861 [robin-norwood] - Add eog support for Ubuntu Image Viewer 2864 [NafisFaysal] - Test: Test on 3.7-dev on Travis.ci 2870 [hugovk] - Dependencies: Update libtiff to 4.0.9 2871 [radarhere] - Setup: Replace deprecated platform.dist with file existence check 2869 [wiredfool] - Build: Fix setup.py on Debian 2853 [wiredfool] - Docs: Correct error in ImageDraw documentation 2858 [meribold] - Test: Drop Ubuntu Precise, Fedora 24, Fedora 25, add Fedora 27, Centos 7, Amazon v2 CI Support 2854, 2843, 2895, 2897 [wiredfool] - Dependencies: Updated libimagequant to 2.11.3 2849 [radarhere] - Test: Fix test_image.py to use tempfile 2841 [radarhere] - Replace PIL.OleFileIO deprecation warning with descriptive ImportError 2833 [hugovk] - WebP: Add support for animated WebP files 2761 [jd20] - PDF: Set encoderinfo for images when saving multi-page PDF. Fixes 2804. 2805 [ixio] - Allow the olefile dependency to be optional 2789 [jdufresne] - GIF: Permit LZW code lengths up to 12 bits in GIF decode 2813 [wiredfool] - Fix unterminated string and unchecked exception in _font_text_asBytes. 2825 [wiredfool] - PPM: Use fixed list of whitespace, rather relying on locale, fixes 272. 2831 [markmiscavage] - Added support for generators when using append_images 2829, 2835 [radarhere] - Doc: Correct PixelAccess.rst 2824 [hasahmed] - Depends: Update raqm to 0.3.0 2822 [radarhere] - Docs: Link to maintained version of aggdraw 2809 [hugovk] - Include license file in the generated wheel packages 2801 [jdufresne] - Depends: Update openjpeg to 2.3.0 2791 [radarhere] - Add option to Makefile to build and install with C coverage 2781 [hugovk] - Add context manager support to ImageFile.Parser and PngImagePlugin.ChunkStream 2793 [radarhere] - ImageDraw.textsize: fix zero length error 2788 [wiredfool, hugovk] ``` </details> <details> <summary>Links</summary> - PyPI: https://pypi.org/project/pillow - Changelog: https://pyup.io/changelogs/pillow/ - Homepage: https://python-pillow.org </details> ### Update [python-dateutil](https://pypi.org/project/python-dateutil) from **2.6.1** to **2.7.2**. <details> <summary>Changelog</summary> ### 2.7.2 ``` ========================== Bugfixes -------- - Fixed an issue with the setup script running in non-UTF-8 environment. Reported and fixed by gergondet (gh pr 651) Misc ---- - GH 655 ``` ### 2.7.1 ``` =========================== Data updates ------------ - Updated tzdata version to 2018d. Bugfixes -------- - Fixed issue where parser.parse would occasionally raise decimal.Decimal-specific error types rather than ValueError. Reported by amureki (gh issue 632). Fixed by pganssle (gh pr 636). - Improve error message when rrule's dtstart and until are not both naive or both aware. Reported and fixed by ryanpetrello (gh issue 633, gh pr 634) Misc ---- - GH 644, GH 648 ``` ### 2.7.0 ``` ============= - Dropped support for Python 2.6 (gh pr 362 by jdufresne) - Dropped support for Python 3.2 (gh pr 626) - Updated zoneinfo file to 2018c (gh pr 616) - Changed licensing scheme so all new contributions are dual licensed under Apache 2.0 and BSD. (gh pr 542, issue 496) - Added __all__ variable to the root package. Reported by tebriel (gh issue 406), fixed by mariocj89 (gh pr 494) - Added python_requires to setup.py so that pip will distribute the right version of dateutil. Fixed by jakec-github (gh issue 537, pr 552) - Added the utils submodule, for miscellaneous utilities. - Added within_delta function to utils - added by justanr (gh issue 432, gh pr 437) - Added today function to utils (gh pr 474) - Added default_tzinfo function to utils (gh pr 475), solving an issue reported by nealmcb (gh issue 94) - Added dedicated ISO 8601 parsing function isoparse (gh issue 424). Initial implementation by pganssle in gh pr 489 and 622, with a pre-release fix by kirit93 (gh issue 546, gh pr 573). - Moved parser module into parser/_parser.py and officially deprecated the use of several private functions and classes from that module. (gh pr 501, 515) - Tweaked parser error message to include rejected string format, added by pbiering (gh pr 300) - Add support for parsing bytesarray, reported by uckelman (gh issue 417) and fixed by uckelman and pganssle (gh pr 514) - Started raising a warning when the parser finds a timezone string that it cannot construct a tzinfo instance for (rather than succeeding with no indication of an error). Reported and fixed by jbrockmendel (gh pr 540) - Dropped the use of assert in the parser. Fixed by jbrockmendel (gh pr 502) - Fixed to assertion logic in parser to support dates like '2015-15-May', reported and fixed by jbrockmendel (gh pr 409) - Fixed IndexError in parser on dates with trailing colons, reported and fixed by jbrockmendel (gh pr 420) - Fixed bug where hours were not validated, leading to improper parse. Reported by heappro (gh pr 353), fixed by jbrockmendel (gh pr 482) - Fixed problem parsing strings in %b-%Y-%d format. Reported and fixed by jbrockmendel (gh pr 481) - Fixed problem parsing strings in the %d%B%y format. Reported by asishm (gh issue 360), fixed by jbrockmendel (gh pr 483) - Fixed problem parsing certain unambiguous strings when year <99 (gh pr 510). Reported by alexwlchan (gh issue 293). - Fixed issue with parsing an unambiguous string representation of an ambiguous datetime such that if possible the correct value for fold is set. Fixes issue reported by JordonPhillips and pganssle (gh issue 318, 320, gh pr 517) - Fixed issue with improper rounding of fractional components. Reported by dddmello (gh issue 427), fixed by m-dz (gh pr 570) - Performance improvement to parser from removing certain min() calls. Reported and fixed by jbrockmendel (gh pr 589) - Significantly refactored parser code by jbrockmendel (gh prs 419, 436, 490, 498, 539) and pganssle (gh prs 435, 468) - Implementated of __hash__ for relativedelta and weekday, reported and fixed by mrigor (gh pr 389) - Implemented __abs__ for relativedelta. Reported by binnisb and pferreir (gh issue 350, pr 472) - Fixed relativedelta.weeks property getter and setter to work for both negative and positive values. Reported and fixed by souliane (gh issue 459, pr 460) - Fixed issue where passing whole number floats to the months or years arguments of the relativedelta constructor would lead to errors during addition. Reported by arouanet (gh pr 411), fixed by lkollar (gh pr 553) - Added a pre-built tz.UTC object representing UTC (gh pr 497) - Added a cache to tz.gettz so that by default it will return the same object for identical inputs. This will change the semantics of certain operations between datetimes constructed with tzinfo=tz.gettz(...). (gh pr 628) - Changed the behavior of tz.tzutc to return a singleton (gh pr 497, 504) - Changed the behavior of tz.tzoffset to return the same object when passed the same inputs, with a corresponding performance improvement (gh pr 504) - Changed the behavior of tz.tzstr to return the same object when passed the same inputs. (gh pr 628) - Added .instance alternate constructors for tz.tzoffset and tz.tzstr, to allow the construction of a new instance if desired. (gh pr 628) - Added the tz.gettz.nocache function to allow explicit retrieval of a new instance of the relevant tzinfo. (gh pr 628) - Expand definition of tz.tzlocal equality so that the local zone is allow equality with tzoffset and tzutc. (gh pr 598) - Deprecated the idiosyncratic tzstr format mentioned in several examples but evidently designed exclusively for dateutil, and very likely not used by any current users. (gh issue 595, gh pr 606) - Added the tz.resolve_imaginary function, which generates a real date from an imaginary one, if necessary. Implemented by Cheukting (gh issue 339, gh pr 607) - Fixed issue where the tz.tzstr constructor would erroneously succeed if passed an invalid value for tzstr. Fixed by pablogsal (gh issue 259, gh pr 581) - Fixed issue with tz.gettz for TZ variables that start with a colon. Reported and fixed by lapointexavier (gh pr 601) - Added a lock to tz.tzical's cache. Reported and fixed by Unrud (gh pr 430) - Fixed an issue with fold support on certain Python 3 implementations that used the pre-3.6 pure Python implementation of datetime.replace, most notably pypy3 (gh pr 446). - Added support for VALUE=DATE-TIME for DTSTART in rrulestr. Reported by potuz (gh issue 401) and fixed by Unrud (gh pr 429) - Started enforcing that within VTIMEZONE, the VALUE parameter can only be omitted or DATE-TIME, per RFC 5545. Reported by Unrud (gh pr 439) - Added support for TZID parameter for DTSTART in rrulestr. Reported and fixed by ryanpetrello (gh issue 614, gh pr 624) - Added 'RRULE:' prefix to rrule strings generated by rrule.__str__, in compliance with the RFC. Reported by AndrewPashkin (gh issue 86), fixed by jarondl and mlorant (gh pr 450) - Switched to setuptools_scm for version management, automatically calculating a version number from the git metadata. Reported by jreback (gh issue 511), implemented by Sulley38 (gh pr 564) - Switched setup.py to use find_packages, and started testing against pip installed versions of dateutil in CI. Fixed issue with parser import discovered by jreback in pandas-dev/pandas18141. (gh issue 507, pr 509) - Switched test suite to using pytest (gh pr 495) - Switched CI over to use tox. Fixed by gaborbernat (gh pr 549) - Added a test-only dependency on freezegun. (gh pr 474) - Reduced number of CI builds on Appveyor. Fixed by kirit93 (gh issue 529, gh pr 579) - Made xfails strict by default, so that an xpass is a failure. (gh pr 567) - Added a documentation generation stage to tox and CI. (gh pr 568) - Added an explicit warning when running python setup.py explaining how to run the test suites with pytest. Fixed by lkollar. (gh issue 544, gh pr 548) - Added requirements-dev.txt for test dependency management (gh pr 499, 516) - Fixed code coverage metrics to account for Windows builds (gh pr 526) - Fixed code coverage metrics to NOT count xfails. Fixed by gaborbernat (gh issue 519, gh pr 563) - Style improvement to zoneinfo.tzfile that was confusing to static type checkers. Reported and fixed by quodlibetor (gh pr 485) - Several unused imports were removed by jdufresne. (gh pr 486) - Switched isinstance(*, collections.Callable) to callable, which is available on all supported Python versions. Implemented by jdufresne (gh pr 612) - Added CONTRIBUTING.md (gh pr 533) - Added AUTHORS.md (gh pr 542) - Corrected setup.py metadata to reflect author vs. maintainer, (gh issue 477, gh pr 538) - Corrected README to reflect that tests are now run in pytest. Reported and fixed by m-dz (gh issue 556, gh pr 557) - Updated all references to RFC 2445 (iCalendar) to point to RFC 5545. Fixed by mariocj89 (gh issue 543, gh pr 555) - Corrected parse documentation to reflect proper integer offset units, reported and fixed by abrugh (gh pr 458) - Fixed dangling parenthesis in tzoffset documentation (gh pr 461) - Started including the license file in wheels. Reported and fixed by jdufresne (gh pr 476) - Indendation fixes to parser docstring by jbrockmendel (gh pr 492) - Moved many examples from the "examples" documentation into their appropriate module documentation pages. Fixed by Tomasz-Kluczkowski and jakec-github (gh pr 558, 561) - Fixed documentation so that the parser.isoparse documentation displays. Fixed by alexchamberlain (gh issue 545, gh pr 560) - Refactored build and release sections and added setup instructions to CONTRIBUTING. Reported and fixed by kynan (gh pr 562) - Cleaned up various dead links in the documentation. (gh pr 602, 608, 618) ``` </details> <details> <summary>Links</summary> - PyPI: https://pypi.org/project/python-dateutil - Changelog: https://pyup.io/changelogs/python-dateutil/ - Docs: https://dateutil.readthedocs.io </details> ### Update [pytz](https://pypi.org/project/pytz) from **2017.3** to **2018.4**. *The bot wasn't able to find a changelog for this release. [Got an idea?](https://github.com/pyupio/changelogs/issues/new)* <details> <summary>Links</summary> - PyPI: https://pypi.org/project/pytz - Homepage: http://pythonhosted.org/pytz - Docs: https://pythonhosted.org/pytz/ </details> ### Update [twisted[tls,conch]](https://pypi.org/project/twisted) from **17.9.0** to **18.4.0**. <details> <summary>Changelog</summary> ### 18.4.0 ``` =========================== Features -------- - The --port/--https arguments to web plugin are now deprecated, in favor of --listen. The --listen argument can be given multiple times to listen on multiple ports. (6670) - Twisted now requires zope.interface 4.4.2 or higher across all platforms and Python versions. (8149) - The osx_platform setuptools extra has been renamed to macos_platform, with the former name being a compatibility alias. (8848) - Zsh completions are now provided for the twist command. (9338) - twisted.internet.endpoints.HostnameEndpoint now has a __repr__ method which includes the host and port to which the endpoint connects. (9341) Bugfixes -------- - twistd now uses the UID's default GID to initialize groups when --uid is given but --gid is not. This prevents an unhandled TypeError from being raised when os.initgroups() is called. (4442) - twisted.protocols.basic.LineReceiver checks received lines' lengths against its MAX_LENGTH only after receiving a complete delimiter. A line ending in a multi-byte delimiter like '\r\n' might be split by the network, with the first part arriving before the rest; previously, LineReceiver erroneously disconnected if the first part, e.g. 'zzzz....\r' exceeded MAX_LENGTH. LineReceiver now checks received data against MAX_LENGTH plus the delimiter's length, allowing short reads to complete a line. (6556) - twisted.protocols.basic.LineOnlyReceiver disconnects the transport after receiving a line that exceeds MAX_LENGTH, like LineReceiver. (6557) - twisted.web.http.Request.getClientIP now returns the host part of the client's address when connected over IPv6. (7704) - twisted.application.service.IService is now documented as requiring the 'running', 'name' and 'parent' attributes (the documentation previously implied they were required, but was unclear). (7922) - twisted.web.wsgi.WSGIResource no longer raises an exception when a client connects over IPv6. (8241) - When using TLS enable automatic ECDH curve selection on OpenSSL 1.0.2+ instead of only supporting P-256 (9210) - twisted.trial._dist.worker and twisted.trial._dist.workertrial consistently pass bytes, not unicode to AMP. This fixes "trial -j" on Python 3. (9264) - twisted.trial.runner now uses the 'importlib' module instead of the 'imp' module on Python 3+. This eliminates DeprecationWarnings caused by importing 'imp' on Python 3. (9275) - twisted.web.client.HTTP11ClientProtocol now closes the connection when the server is sending a header line which is longer than he line limit of twisted.protocols.basic.LineReceiver.MAX_LENGTH. (9295) - twisted.python.failure now handles long stacktraces better; in particular it will log tracebacks for stack overflow errors. (9301) - The "--_shell-completion" argument to twistd now works on Python 3. (9303) - twisted.python.failure.Failure now raises the wrapped exception in Python3, and self (Failure) n Python2 when trap() is called without a matching exception (9307) - Writing large amounts of data no longer implies repeated, expensive copying under Python 3. Python 3's write speeds are now as fast as Python 2's. (9324) - twisted.protocols.postfix now properly encodes errors which are unicode strings to bytes. (9335) - twisted.protocols.policies.ProtocolWrapper and twisted.protocols.tls.TLSMemoryBIOProtocol no longer create circular references that keep protocol instances in memory after connection is closed. (9374) - twisted.conch.ssh.transport.SSHTransportBase no longer strips trailing spaces from the SSH version string of the connected peer. (9377) - `trial -j` no longer crashes on Python 2 on test failure messages containing non-ASCII bytes. (9378) - RSA keys replaced with 2048bit ones in twisted.conch.test.keydata in order to be compatible with OpenSSH 7.6. (9388) - AsyncioSelectorReactor uses the global policy's event loop. asyncio libraries that retrieve the running event loop with get_event_loop() will now receive the one used by AsyncioSelectorReactor. (9390) Improved Documentation ---------------------- - public attributes of `twisted.logger.Logger` are now documented as attributes. (8157) - List indentation formatting errors have been corrected throughout the documentation. (9256) Deprecations and Removals ------------------------- - twisted.protocols.basic.LineOnlyReceiver.lineLengthExceeded no longer returns twisted.internet.error.ConnectionLost. It instead directly disconnects the transport and returns None. (6557) - twisted.python.win32.getProgramsMenuPath and twisted.python.win32.getProgramFilesPath were deprecated in Twisted 15.3.0 and have now been removed. (9312) - Python 3.3 is no longer supported. (9352) Misc ---- - 7033, 8887, 9204, 9289, 9291, 9292, 9293, 9302, 9336, 9355, 9356, 9364, 9375, 9381, 9382, 9389, 9391, 9393, 9394, 9396 Conch ----- Bugfixes ~~~~~~~~ - twisted.plugins.cred_unix now properly converts a username and password from bytes to str on Python 3. In addition, passwords which are encrypted with SHA512 and SH256 are properly verified. This fixes running a conch server with: "twistd -n conch -d /etc/ssh/ --auth=unix". (9130) - In twisted.conch.scripts.conch, on Python 3 do not write bytes directly to sys.stderr. On Python 3, this fixes remote SSH execution of a command which fails. (9344) Deprecations and Removals ~~~~~~~~~~~~~~~~~~~~~~~~~ - twisted.conch.ssh.filetransfer.FileTransferClient.wasAFile attribute has been removed as it serves no purpose. (9362) - Removed deprecated support for PyCrypto key objects in conch (9368) Web --- Features ~~~~~~~~ - The new twisted.iweb.IRequest.getClientAddress returns the IAddress provider representing the client's address. Callers should check the type of the returned value before using it. (7707) - Eliminate use of twisted.python.log in twisted.web modules. (9280) Bugfixes ~~~~~~~~ - Scripts ending with .rpy, .epy, and .cgi now execute properly in Twisted Web on Python 3. (9271) - twisted.web.http.Request and twisted.web.server.Request are once again hashable on Python 2, fixing a regression introduced in Twisted 17.5.0. (9314) Improved Documentation ~~~~~~~~~~~~~~~~~~~~~~ - Correct reactor docstrings for twisted.web.client.Agent and twisted.web.client._StandardEndpointFactory to communicate interface requirements since 17.1. (9274) - The examples for the "Twisted Web in 60 Seconds" tutorial have been fixed to work on Python 3. (9285) Deprecations and Removals ~~~~~~~~~~~~~~~~~~~~~~~~~ - twisted.iweb.IRequest.getClientIP is deprecated. Use twisted.iweb.IRequest.getClientAddress instead (see 7707). (7705) - twisted.web.iweb.IRequest.getClient and its implementations (deprecated in 2552) have been removed. (9395) Mail ---- Bugfixes ~~~~~~~~ - twistd.mail.scripts.mailmail has been ported to Python 3. (8487) - twisted.mail.bounce now works on Python 3. (9260) - twisted.mail.pop3 and twisted.mail.pop3client now work on Python 3. (9269) - SMTP authentication in twisted.mail.smtp now works better on Python 3, due to improved improved bytes vs unicode handling. (9299) Misc ~~~~ - 9310 Words ----- No significant changes. Names ----- No significant changes. ``` </details> <details> <summary>Links</summary> - PyPI: https://pypi.org/project/twisted - Changelog: https://pyup.io/changelogs/twisted/ - Homepage: http://twistedmatrix.com/ - Bugtracker: https://twistedmatrix.com/trac/ </details> ### Update [zope.interface](https://pypi.org/project/zope.interface) from **4.4.3** to **4.5.0**. <details> <summary>Changelog</summary> ### 4.5.0 ``` ------------------ - Drop support for 3.3, avoid accidental dependence breakage via setup.py. See `PR 110 <https://github.com/zopefoundation/zope.interface/pull/110>`_. - Allow registering and unregistering instance methods as listeners. See `issue 12 <https://github.com/zopefoundation/zope.interface/issues/12>`_ and `PR 102 <https://github.com/zopefoundation/zope.interface/pull/102>`_. - Synchronize and simplify zope/__init__.py. See `issue 114 <https://github.com/zopefoundation/zope.interface/issues/114>`_ ``` </details> <details> <summary>Links</summary> - PyPI: https://pypi.org/project/zope.interface - Changelog: https://pyup.io/changelogs/zope.interface/ - Repo: https://github.com/zopefoundation/zope.interface </details>
bors-fusion bot
added a commit
that referenced
this pull request
Jul 3, 2018
192: Scheduled weekly dependency update for week 26 r=mithrandi a=pyup-bot ### Update [epsilon](https://pypi.org/project/epsilon) from **0.7.2** to **0.7.3**. <details> <summary>Changelog</summary> ### 0.7.3 ``` Minor: - Make ``epsilon.benchmark`` handle ``/proc/self/mounts`` more leniently. ``` </details> <details> <summary>Links</summary> - PyPI: https://pypi.org/project/epsilon - Changelog: https://pyup.io/changelogs/epsilon/ - Repo: https://github.com/twisted/epsilon </details> ### Update [lxml](https://pypi.org/project/lxml) from **4.2.2** to **4.2.3**. <details> <summary>Changelog</summary> ### 4.2.3 ``` ================== Bugs fixed ---------- * Reverted GH265: lxml links against zlib as a shared library again. ``` </details> <details> <summary>Links</summary> - PyPI: https://pypi.org/project/lxml - Changelog: https://pyup.io/changelogs/lxml/ - Homepage: http://lxml.de/ - Bugtracker: https://bugs.launchpad.net/lxml </details> ### Update [pillow](https://pypi.org/project/pillow) from **5.1.0** to **5.2.0**. <details> <summary>Changelog</summary> ### 5.2.0 ``` ------------------ - Fixed saving a multiframe image as a single frame PDF 3137 [radarhere] - If a Qt version is already imported, attempt to use it first 3143 [radarhere] - Fix transform fill color for alpha images 3147 [fozcode] - TGA: Add support for writing RLE data 3186 [danpla] - TGA: Read and write LA data 3178 [danpla] - QuantOctree.c: Remove erroneous attempt to average over an empty range 3196 [tkoeppe] - Changed ICNS format tests to pass on OS X 10.11 3202 [radarhere] - Fixed bug in ImageDraw.multiline_textsize() 3114 [tianyu139] - Added getsize_multiline support for PIL.ImageFont 3113 [tianyu139] - Added ImageFile get_format_mimetype method 3190 [radarhere] - Changed mmap file pointer to use context manager 3216 [radarhere] - Changed ellipse point calculations to be more evenly distributed 3142 [radarhere] - Only extract first Exif segment 2946 [hugovk] - Tests: Test ImageDraw2, WalImageFile 3135, 2989 [hugovk] - Remove unnecessary 'if 0' code 3075 [hugovk] - Tests: Added GD tests 1817 [radarhere] - Fix collections ABCs DeprecationWarning in Python 3.7 3123 [hugovk] - unpack_from is faster than unpack of slice 3201 [landfillbaby] - Docs: Add coordinate system links and file handling links in documentation 3204, 3214 [radarhere] - Tests: TestFilePng: Fix test_save_l_transparency() 3182 [danpla] - Docs: Correct argument name 3171 [radarhere] - Docs: Update CMake download URL 3166 [radarhere] - Docs: Improve Image.transform documentation 3164 [radarhere] - Fix transform fillcolor argument when image mode is RGBA or LA 3163 [radarhere] - Tests: More specific Exception testing 3158 [radarhere] - Add getrgb HSB/HSV color strings 3148 [radarhere] - Allow float values in getrgb HSL color string 3146 [radarhere] - AppVeyor: Upgrade to Python 2.7.15 and 3.4.4 3140 [radarhere] - AppVeyor: Upgrade to PyPy 6.0.0 3133 [hugovk] - Deprecate PILLOW_VERSION and VERSION 3090 [hugovk] - Support Python 3.7 3076 [hugovk] - Depends: Update freetype to 2.9.1, libjpeg to 9c, libwebp to 1.0.0 3121, 3136, 3108 [radarhere] - Build macOS wheels with Xcode 6.4, supporting older macOS versions 3068 [wiredfool] - Fix _i2f compilation on some GCC versions 3067 [homm] - Changed encoderinfo to have priority over info when saving GIF images 3086 [radarhere] - Rename PIL.version to PIL._version and remove it from module 3083 [homm] - Enable background colour parameter on rotate 3057 [storesource] - Remove unnecessary `if 1` directive 3072 [jdufresne] - Remove unused Python class, Path 3070 [jdufresne] - Fix dereferencing type-punned pointer will break strict-aliasing 3069 [jdufresne] ``` </details> <details> <summary>Links</summary> - PyPI: https://pypi.org/project/pillow - Changelog: https://pyup.io/changelogs/pillow/ - Homepage: http://python-pillow.org </details> ### Update [pyasn1-modules](https://pypi.org/project/pyasn1-modules) from **0.2.1** to **0.2.2**. *The bot wasn't able to find a changelog for this release. [Got an idea?](https://github.com/pyupio/changelogs/issues/new)* <details> <summary>Links</summary> - PyPI: https://pypi.org/project/pyasn1-modules - Changelog: https://pyup.io/changelogs/pyasn1-modules/ - Repo: https://github.com/etingof/pyasn1-modules </details> ### Update [pytz](https://pypi.org/project/pytz) from **2018.4** to **2018.5**. *The bot wasn't able to find a changelog for this release. [Got an idea?](https://github.com/pyupio/changelogs/issues/new)* <details> <summary>Links</summary> - PyPI: https://pypi.org/project/pytz - Homepage: http://pythonhosted.org/pytz - Docs: https://pythonhosted.org/pytz/ </details> Co-authored-by: pyup-bot <github-bot@pyup.io>
bors-fusion bot
added a commit
that referenced
this pull request
Jul 23, 2018
196: Scheduled weekly dependency update for week 29 r=mithrandi a=pyup-bot ### Update [cryptography](https://pypi.org/project/cryptography) from **2.2.2** to **2.3**. <details> <summary>Changelog</summary> ### 2.3 ``` ~~~~~~~~~~~~~~~~ * **SECURITY ISSUE:** :meth:`~cryptography.hazmat.primitives.ciphers.AEADDecryptionContext.finalize_with_tag` allowed tag truncation by default which can allow tag forgery in some cases. The method now enforces the ``min_tag_length`` provided to the :class:`~cryptography.hazmat.primitives.ciphers.modes.GCM` constructor. * Added support for Python 3.7. * Added :meth:`~cryptography.fernet.Fernet.extract_timestamp` to get the authenticated timestamp of a :doc:`Fernet </fernet>` token. * Support for Python 2.7.x without ``hmac.compare_digest`` has been deprecated. We will require Python 2.7.7 or higher (or 2.7.6 on Ubuntu) in the next ``cryptography`` release. * Fixed multiple issues preventing ``cryptography`` from compiling against LibreSSL 2.7.x. * Added :class:`~cryptography.x509.CertificateRevocationList.get_revoked_certificate_by_serial_number` for quick serial number searches in CRLs. * The :class:`~cryptography.x509.RelativeDistinguishedName` class now preserves the order of attributes. Duplicate attributes now raise an error instead of silently discarding duplicates. * :func:`~cryptography.hazmat.primitives.keywrap.aes_key_unwrap` and :func:`~cryptography.hazmat.primitives.keywrap.aes_key_unwrap_with_padding` now raise :class:`~cryptography.hazmat.primitives.keywrap.InvalidUnwrap` if the wrapped key is an invalid length, instead of ``ValueError``. .. _v2-2-2: ``` </details> <details> <summary>Links</summary> - PyPI: https://pypi.org/project/cryptography - Changelog: https://pyup.io/changelogs/cryptography/ - Repo: https://github.com/pyca/cryptography </details> ### Update [twisted[tls,conch]](https://pypi.org/project/twisted) from **18.4.0** to **18.7.0**. <details> <summary>Changelog</summary> ### 18.7.0 ``` =========================== Features -------- - Cancelling a Deferred returned by twisted.internet.defer.inlineCallbacks now cancels the Deferred it is waiting on. (4632) - twisted.application.internet.ClientService now accepts a function to initialize or validate a connection before it is returned by the whenConnected method as the prepareConnection argument. (8375) - Traceback generated for twisted.internet.defer.inlineCallbacks now includes the full stack of inlineCallbacks generators between catcher and raiser (before it only contained raiser's stack). (9176) - Add optional cwd argument to twisted.runner.procmon.ProcMon.addProcess (9287) - twisted.python.failure.Failure tracebacks generated by coroutines scheduled with twisted.internet.defer.ensureDeferred - i.e. any Deferred-awaiting coroutine - now contain fewer extraneous frames from the trampoline implementation, and correctly indicate the source of exceptions raised in other call stacks - i.e. the function that raised the exception. In other words: if you 'await' a function that raises an exception, you'll be able to see where the error came from. (9459) Bugfixes -------- - On UNIX-like platforms, Twisted attempts to recover from EMFILE when accepting connections on TCP and UNIX ports by shedding incoming clients. (5368) - The documentation of IReactorTime.getDelayedCalls() has been corrected to indicate that the method returns a list, not a tuple. (9418) - "python -m twisted web --help" now refers to "--listen" instead of the non-existing "--http" (9434) - twisted.python.htmlizer.TokenPrinter now explicitly works on bytestrings. (9442) - twisted.enterprise.adbapi.ConnectionPool.runWithConnection and runInteraction now use the reactor that is passed to ConnectionPool's constructor. (9467) Improved Documentation ---------------------- - The Twisted Coding Standard now contains examples of how to mark up a feature as added in the next Twisted release. (9460) Deprecations and Removals ------------------------- - Deprecate direct introspection of ProcMon's processes: processes should not be directly accessed or pickled. (9287) - twisted.internet.address.IPv4Address._bwHack and twisted.internet.address.UNIXAddress._bwHack, as well as the parameters to the constructors, deprecated since Twisted 11.0, have been removed. (9450) Misc ---- - 7495, 9399, 9406, 9411, 9425, 9439, 9449, 9450, 9452 Conch ----- Features ~~~~~~~~ - twisted.conch.ssh.transport.SSHTransportBase now includes Twisted's version in the software version string it sends to the server, allowing servers to apply compatibility workarounds for bugs in particular client versions. (9424) Bugfixes ~~~~~~~~ - If the command run by twisted.conch.endpoints.SSHCommandClientEndpoint exits because of a delivered signal, the client protocol's connectionLost is now called with a ProcessTerminated exception instead of a ConnectionDone exception. (9412) - twisted.conch.ssh.transport.SSHTransportBase now correctly handles MSG_DEBUG with a false alwaysDisplay field on Python 2 (broken since 8.0.0). (9422) - twisted.conch.manhole.lastColorizedLine now does not throw a UnicodeDecodeError on non-ASCII input. (9442) Web --- Features ~~~~~~~~ - Added support for SameSite cookies in ``http.Request.addCookie``. (9387) Bugfixes ~~~~~~~~ - twisted.web.server.GzipEncoderFactory would sometimes fail to gzip requests if the Accept-Encoding header contained whitespace between the comma-separated acceptable encodings. It now trims whitespace before checking if gzip is an acceptable encoding. (9086) - twisted.web.static.File renders directory listings on Python 2, including those with text paths. (9438) - twisted.python.http.Request now correcly parses multipart bodies on Python 3.7. (9448) - twisted.web.http.combinedLogFormatter (used by t.w.http.Server and t.w.server.Site) no longer produces DeprecationWarning about Request.getClientIP. (9470) Misc ~~~~ - 9432, 9466, 9479, 9480 Mail ---- No significant changes. Words ----- No significant changes. Names ----- Misc ~~~~ - 9398 ``` </details> <details> <summary>Links</summary> - PyPI: https://pypi.org/project/twisted - Changelog: https://pyup.io/changelogs/twisted/ - Homepage: http://twistedmatrix.com/ - Bugtracker: https://twistedmatrix.com/trac/ </details> Co-authored-by: pyup-bot <github-bot@pyup.io>
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.