Bump cachebox from 5.2.3 to 6.2.4

[dependabot]

Bumps cachebox from 5.2.3 to 6.2.4.

Release notes

Sourced from cachebox's releases.

Release v6.2.4

This is a patch release that fixes two important correctness and stability issues.

Bug Fixes

• #67 / #68: setdefault_with no longer runs the factory while holding the internal lock.
  Previously, if the factory triggered a GC pass (which also needs the same lock), the whole process could freeze. The key is now looked up under the lock, the lock is released, the factory runs, and the lock is re-acquired only to insert (with a re-check).
  Note: If two threads miss the same key at the same time, the factory may run twice; the first inserted value is kept and returned to both callers.

• #69 / #70: Iterators returned by keys(), values(), and items() now hold a strong reference to the cache.
  Previously they only kept a raw cursor, so a cache that was no longer referenced elsewhere could be freed while the iterator was still alive, causing use-after-free (access violation or silently wrong results). This is fixed for all seven cache types with no performance regression.

Special Thanks To

• @​Malkiz223 for finding and fixing both issues in #68 and #70.

Full Changelog: v6.2.3...v6.2.4

Release v6.2.3

This release improves the internal linked-list implementation used by LRU policy, updates the CI pipeline, and applies various project/metadata cleanups.

Changes

• Optimized the internal doubly-linked list (linked_list) used by LRU policy. The new implementation uses a sentinel-based intrusive design with a free-list for node reuse, reducing allocation overhead and improving performance.
• Updated and modernized the CI workflows (interpreters, platforms, actions versions, etc.).
• Added zizmor and typos checks to CI.
• Sorted PyPI classifiers, formatted pyproject.toml, and expanded project.urls.
• Rust dependencies updated.
• Added rust-toolchain.toml and various formatting/cleanup changes across the codebase.

Special Thanks To

• @​chirizxc for the contributions in #64, #65, and #66.

Full Changelog: awolverp/cachebox@v6.2.2...v6.2.3

Release v6.2.2

Fixed several bugs related to miss counting, missing await, lock cleanup on exceptions, and cancellation handling.

Bug fixes

• @cached bugs:

  • With lock=False, misses were never incremented and hits were double-counted. Now they are counted correctly.
  • In the async wrapper, when cachebox__ignore=True and lock was off, the function was not awaited and a coroutine object was returned. Now it is properly awaited.
  • If the cached function raised an exception, the per-key lock was never removed and stayed in memory. It is now cleaned up properly.
  • If a task was cancelled while waiting for the lock, the waiter count stayed high and the lock was never cleaned up. Now it is decremented with try/finally.
  • All exceptions (even BaseException) now go through the same cleanup path (previously only Exceptions was caught).

• In Frozen class, the check for the underlying cache no longer relies on assert (so it still works with -O flag).

... (truncated)

Commits

• f5f8778 Update README
• 3c81614 Update README
• 2cd4507 Update README
• d36a9f7 Update README
• eb50d41 Update README
• d6c3203 Update CI
• b47e3d5 Update CI
• f897b80 Merge pull request #70 from Malkiz223/iterator_cache_ref
• cb652e1 Merge branch 'main' into iterator_cache_ref
• 378267f Skip the iterator cycle test on PyPy
• Additional commits viewable in compare view

You can trigger a rebase of this PR by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 70.12%. Comparing base (a7773ca) to head (c3fedab).

Additional details and impacted files

@@            Coverage Diff             @@
##             main    #8401      +/-   ##
==========================================
- Coverage   71.09%   70.12%   -0.98%     
==========================================
  Files         305      305              
  Lines       31934    31934              
==========================================
- Hits        22705    22394     -311     
- Misses       9229     9540     +311     

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

[dependabot]

Superseded by #8404.