Scheduled weekly dependency update for week 26 #1935

pyup-bot · 2020-06-29T17:16:16Z

Update django-redis from 4.11.0 to 4.12.1.

Changelog

4.12.1

--------------

Date: 2020-05-27

- No code changes.
- Fixed a typo in setup.cfg metadata preventing a successful release.

4.12.0

--------------

Date: 2020-05-27

- The project has moved to `Jazzband &lt;https://jazzband.co/&gt;`_. This is the
first release under the new organization. The new repository URL is
`&lt;https://github.com/jazzband/django-redis&gt;`_.
- Removed support for end-of-life Django &lt; 2.2.
- Removed support for unmaintained redis-py 2.X.
- Changed uses of deprecated ``smart_text()`` to ``smart_str()``.
- Fixed deprecation warning with the msgpack serializer.
- The ``.touch()`` method now uses the default timeout, to cache forever pass
``None``.
- Subclasses of ``JSONSerializer`` can now override the ``encoder_class``
attribute to change the JSON encoder. It defaults to ``DjangoJSONEncoder``.
- Fixed ``DefaultClient.set()`` to work with empty ``Pipeline``.
- The ``thread_local`` parameter is now forwarded to the Redis client.

Links

PyPI: https://pypi.org/project/django-redis
Changelog: https://pyup.io/changelogs/django-redis/
Repo: https://github.com/jazzband/django-redis

Update whitenoise from 5.0.1 to 5.1.0.

Changelog

5.1.0

------

* Add a :any:`manifest_strict &lt;WHITENOISE_MANIFEST_STRICT&gt;` setting to prevent
Django throwing errors when missing files are referenced (thanks
`MegacoderKim &lt;https://github.com/MegacoderKim&gt;`_).

Links

PyPI: https://pypi.org/project/whitenoise
Changelog: https://pyup.io/changelogs/whitenoise/
Homepage: http://whitenoise.evans.io

Update Django from 2.2.12 to 2.2.13.

Changelog

2.2.13

===========================

*June 3, 2020*

Django 2.2.13 fixes two security issues and a regression in 2.2.12.

CVE-2020-13254: Potential data leakage via malformed memcached keys
===================================================================

In cases where a memcached backend does not perform key validation, passing
malformed cache keys could result in a key collision, and potential data
leakage. In order to avoid this vulnerability, key validation is added to the
memcached cache backends.

CVE-2020-13596: Possible XSS via admin ``ForeignKeyRawIdWidget``
================================================================

Query parameters for the admin ``ForeignKeyRawIdWidget`` were not properly URL
encoded, posing an XSS attack vector. ``ForeignKeyRawIdWidget`` now
ensures query parameters are correctly URL encoded.

Bugfixes
========

* Fixed a regression in Django 2.2.12 that affected translation loading for
apps providing translations for territorial language variants as well as a
generic language, where the project has different plural equations for the
language (:ticket:`31570`).

* Tracking a jQuery security release, upgraded the version of jQuery used by
the admin from 3.3.1 to 3.5.1.


===========================

Links

PyPI: https://pypi.org/project/django
Changelog: https://pyup.io/changelogs/django/
Homepage: https://www.djangoproject.com/

Update django-allauth from 0.41.0 to 0.42.0.

Changelog

0.42.0

*******************

Note worthy changes
-------------------

- New providers: EDX, Yandex, Mixer.

- Fixed Twitch ``get_avatar_url()`` method to use the profile picture retrieved
by new user details endpoint introduced in version 0.40.0.

- The Facebook API version now defaults to v7.0.

Links

PyPI: https://pypi.org/project/django-allauth
Changelog: https://pyup.io/changelogs/django-allauth/
Repo: http://github.com/pennersr/django-allauth

Update django-filter from 2.2.0 to 2.3.0.

Changelog

2.3.0

------------------------

* Fixed import of FieldDoesNotExist. (1127)
* Added testing against Django 3.0. (1125)
* Declared support for, and added testing against, Python 3.8. (1138)
* Fix filterset multiple inheritance bug (1131)
* Allowed customising default lookup expression. (1129)
* Drop Django 2.1 and below (1180)
* Fixed IsoDateTimeRangeFieldTests for Django 3.1
* Require tests to pass against Django `master`.

Links

PyPI: https://pypi.org/project/django-filter
Changelog: https://pyup.io/changelogs/django-filter/
Repo: https://github.com/carltongibson/django-filter/tree/master

Update html5lib from 1.0.1 to 1.1.

Changelog

1.1

~~~

UNRELEASED

Breaking changes:

* Drop support for Python 3.3. (358)
* Drop support for Python 3.4. (421)

Deprecations:

* Deprecate the ``html5lib`` sanitizer (``html5lib.serialize(sanitize=True)`` and
``html5lib.filters.sanitizer``). We recommend users migrate to `Bleach
&lt;https://github.com/mozilla/bleach&gt;`. Please let us know if Bleach doesn&#39;t suffice for your
use. (443)

Other changes:

* Try to import from ``collections.abc`` to remove DeprecationWarning and ensure
``html5lib`` keeps working in future Python versions. (403)
* Drop optional ``datrie`` dependency. (442)

Links

PyPI: https://pypi.org/project/html5lib
Changelog: https://pyup.io/changelogs/html5lib/
Repo: https://github.com/html5lib/html5lib-python

Update XlsxWriter from 1.2.8 to 1.2.9.

Changelog

1.2.9

---------------------------

* Added support for ``stacked`` and ``percent_stacked`` Line charts.

Links

PyPI: https://pypi.org/project/xlsxwriter
Changelog: https://pyup.io/changelogs/xlsxwriter/
Repo: https://github.com/jmcnamara/XlsxWriter

Update Faker from 4.1.0 to 4.1.1.

Changelog

4.1.1

----------------------------------------------------------------------------------

* Add ``date_time`` providers for ``cs_CZ``, ``de_AT``, ``es_ES``, ``it_IT``, ``sk_SK``,
``tr_TR``. Thanks eumiro.
* Add prefix support to BarcodeProvider. Thanks yu-ichiro.
* Fix company format for ``hy_AM`` provider. Thanks mdantonio.
* Add .uk email providers and TLDs for ``en_GB``. Thanks craiga.
* Add ``language_name`` generator. Thanks ikhomutov and mondeja.
* Add ``pytimezone`` generator returning ``tzinfo`` objects. Thanks OJFord.
* Add ``es_ES`` currency provider. Thanks mondeja.

Links

PyPI: https://pypi.org/project/faker
Changelog: https://pyup.io/changelogs/faker/
Repo: https://github.com/joke2k/faker

Update flake8 from 3.8.1 to 3.8.3.

Changelog

3.8.3

-------------------

You can view the `3.8.3 milestone`_ on GitLab for more details.

Bugs Fixed
~~~~~~~~~~

- Also catch ``SyntaxError`` when tokenizing (See also `GitLab!433`_,
`GitLab662`_)

- Fix ``--jobs`` default display in ``flake8 --help`` (See also `GitLab!434`_,
`GitLab665`_)

.. all links
.. _3.8.3 milestone:
 https://gitlab.com/pycqa/flake8/-/milestones/36

.. issue links
.. _GitLab662:
 https://gitlab.com/pycqa/flake8/issues/662
.. _GitLab665:
 https://gitlab.com/pycqa/flake8/issues/665

.. merge request links
.. _GitLab!433:
 https://gitlab.com/pycqa/flake8/merge_requests/433
.. _GitLab!434:
 https://gitlab.com/pycqa/flake8/merge_requests/434

3.8.2

-------------------

You can view the `3.8.2 milestone`_ on GitLab for more details.

Bugs Fixed
~~~~~~~~~~

- Improve performance by eliminating unncessary sort (See also `GitLab!429`_)

- Improve messaging of ``--jobs`` argument by utilizing ``argparse`` (See also
`GitLab!428`_, `GitLab567`_)

- Fix file configuration options to be relative to the config passed on the
command line (See also `GitLab!431`_, `GitLab651`_)

- Fix incorrect handling of ``--extend-exclude`` by treating its values as
files (See also `GitLab!432`_, `GitLab653`_)

.. all links
.. _3.8.2 milestone:
 https://gitlab.com/pycqa/flake8/-/milestones/35

.. issue links
.. _GitLab567:
 https://gitlab.com/pycqa/flake8/issues/567
.. _GitLab651:
 https://gitlab.com/pycqa/flake8/issues/651
.. _GitLab653:
 https://gitlab.com/pycqa/flake8/issues/653

.. merge request links
.. _GitLab!428:
 https://gitlab.com/pycqa/flake8/merge_requests/428
.. _GitLab!429:
 https://gitlab.com/pycqa/flake8/merge_requests/429
.. _GitLab!431:
 https://gitlab.com/pycqa/flake8/merge_requests/431
.. _GitLab!432:
 https://gitlab.com/pycqa/flake8/merge_requests/432

Links

PyPI: https://pypi.org/project/flake8
Changelog: https://pyup.io/changelogs/flake8/
Repo: https://gitlab.com/pycqa/flake8

Update pytest-cov from 2.8.1 to 2.10.0.

Changelog

2.10.0

-------------------

* Improved the ``--no-cov`` warning. Now it&#39;s only shown if ``--no-cov`` is present before ``--cov``.
* Removed legacy pytest support. Changed ``setup.py`` so that ``pytest&gt;=4.6`` is required.

2.9.0

------------------

* Fixed ``RemovedInPytest4Warning`` when using Pytest 3.10.
Contributed by Michael Manganiello in `354 &lt;https://github.com/pytest-dev/pytest-cov/pull/354&gt;`_.
* Made pytest startup faster when plugin not active by lazy-importing.
Contributed by Anders Hovmöller in `339 &lt;https://github.com/pytest-dev/pytest-cov/pull/339&gt;`_.
* Various CI improvements.
Contributed by Daniel Hahler in `363 &lt;https://github.com/pytest-dev/pytest-cov/pull/&gt;`_ and
`364 &lt;https://github.com/pytest-dev/pytest-cov/pull/364&gt;`_.
* Various Python support updates (drop EOL 3.4, test against 3.8 final).
Contributed by Hugo van Kemenade in
`336 &lt;https://github.com/pytest-dev/pytest-cov/pull/336&gt;`_ and
`367 &lt;https://github.com/pytest-dev/pytest-cov/pull/367&gt;`_.
* Changed ``--cov-append`` to always enable ``data_suffix`` (a coverage setting).
Contributed by Harm Geerts in
`387 &lt;https://github.com/pytest-dev/pytest-cov/pull/387&gt;`_.
* Changed ``--cov-append`` to handle loading previous data better
(fixes various path aliasing issues).
* Various other testing improvements, github issue templates, example updates.
* Fixed internal failures that are caused by tests that change the current working directory by
ensuring a consistent working directory when coverage is called.
See `306 &lt;https://github.com/pytest-dev/pytest-cov/issues/306&gt;`_ and
`coveragepy881 &lt;https://github.com/nedbat/coveragepy/issues/881&gt;`_

Links

PyPI: https://pypi.org/project/pytest-cov
Changelog: https://pyup.io/changelogs/pytest-cov/
Repo: https://github.com/pytest-dev/pytest-cov

Update pytest from 5.4.2 to 5.4.3.

The bot wasn't able to find a changelog for this release. Got an idea?

Links

PyPI: https://pypi.org/project/pytest
Homepage: https://docs.pytest.org/en/latest/

Update six from 1.14.0 to 1.15.0.

Changelog

1.15.0

------

- Pull request 331: Optimize `six.ensure_str` and `six.ensure_binary`.

Links

PyPI: https://pypi.org/project/six
Changelog: https://pyup.io/changelogs/six/
Repo: https://github.com/benjaminp/six

Update transifex-client from 0.13.9 to 0.13.10.

Changelog

Links

PyPI: https://pypi.org/project/transifex-client
Changelog: https://pyup.io/changelogs/transifex-client/
Homepage: https://www.transifex.com

pyup-bot · 2020-07-06T17:22:24Z

Closing this in favor of #1939

pyup-bot added 13 commits June 29, 2020 19:16

Update django-redis from 4.11.0 to 4.12.1

2e15c12

Update whitenoise from 5.0.1 to 5.1.0

aad3e47

Update django from 2.2.12 to 2.2.13

515b095

Update django-allauth from 0.41.0 to 0.42.0

629be0b

Update django-filter from 2.2.0 to 2.3.0

155de65

Update html5lib from 1.0.1 to 1.1

d29bf8c

Update xlsxwriter from 1.2.8 to 1.2.9

8457a48

Update faker from 4.1.0 to 4.1.1

efe30b3

Update flake8 from 3.8.1 to 3.8.3

b8a80f3

Update pytest-cov from 2.8.1 to 2.10.0

dd4218b

Update pytest from 5.4.2 to 5.4.3

754c994

Update six from 1.14.0 to 1.15.0

8a9d952

Update transifex-client from 0.13.9 to 0.13.10

60df65d

pyup-bot mentioned this pull request Jun 29, 2020

Scheduled weekly dependency update for week 25 #1933

Closed

pyup-bot closed this Jul 6, 2020

fuzzylogic2000 deleted the pyup-scheduled-update-2020-06-29 branch July 6, 2020 17:22

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Scheduled weekly dependency update for week 26 #1935

Scheduled weekly dependency update for week 26 #1935

pyup-bot commented Jun 29, 2020

pyup-bot commented Jul 6, 2020

Scheduled weekly dependency update for week 26 #1935

Scheduled weekly dependency update for week 26 #1935

Conversation

pyup-bot commented Jun 29, 2020

Update django-redis from 4.11.0 to 4.12.1.

4.12.1

4.12.0

Update whitenoise from 5.0.1 to 5.1.0.

5.1.0

Update Django from 2.2.12 to 2.2.13.

2.2.13

Update django-allauth from 0.41.0 to 0.42.0.

0.42.0

Update django-filter from 2.2.0 to 2.3.0.

2.3.0

Update html5lib from 1.0.1 to 1.1.

1.1

Update XlsxWriter from 1.2.8 to 1.2.9.

1.2.9

Update Faker from 4.1.0 to 4.1.1.

4.1.1

Update flake8 from 3.8.1 to 3.8.3.

3.8.3

3.8.2

Update pytest-cov from 2.8.1 to 2.10.0.

2.10.0

2.9.0

Update pytest from 5.4.2 to 5.4.3.

Update six from 1.14.0 to 1.15.0.

1.15.0

Update transifex-client from 0.13.9 to 0.13.10.

pyup-bot commented Jul 6, 2020