⬆️ Bump pydantic from 1.7.3 to 1.8.2

[dependabot]

Bumps pydantic from 1.7.3 to 1.8.2.

Release notes

Sourced from pydantic's releases.

v1.8.2 (2021-05-11)

See Changelog.

Warning

A security vulnerability, level "moderate" is fixed in v1.8.2. Please upgrade ASAP. See security advisory CVE-2021-29510.

Changes

• Security fix: Fix date and datetime parsing so passing either 'infinity' or float('inf') (or their negative values) does not cause an infinite loop, see security advisory CVE-2021-29510
• fix schema generation with Enum by generating a valid name, #2575 by @​PrettyWood
• fix JSON schema generation with a Literal of an enum member, #2536 by @​PrettyWood
• Fix bug with configurations declarations that are passed as keyword arguments during class creation, #2532 by @​uriyyo
• Allow passing json_encoders in class kwargs, #2521 by @​layday
• support arbitrary types with custom __eq__, #2483 by @​PrettyWood
• support Annotated in validate_arguments and in generic models with python 3.9, #2483 by @​PrettyWood

v1.8.1 (2021-03-03)

See Changelog.

Bug fixes for regressions and new features in v1.8

• allow elements of Config.field to update elements of a Field, #2461 by @​samuelcolvin
• fix validation with a BaseModel field and a custom root type, #2449 by @​PrettyWood
• expose Pattern encoder to fastapi, #2444 by @​PrettyWood
• enable the Hypothesis plugin to generate a constrained float when the multiple_of argument is specified, #2442 by @​tobi-lipede-oodle
• Avoid RecursionError when using some types like Enum or Literal with generic models, #2436 by @​PrettyWood
• do not overwrite declared __hash__ in subclasses of a model, #2422 by @​PrettyWood
• fix mypy complaints on Path and UUID related custom types, #2418 by @​PrettyWood
• Support properly variable length tuples of compound types, #2416 by @​PrettyWood

v1.8 (2021-02-26)

See Changelog.

Thank you to pydantic's sponsors: @​jorgecarleitao, @​BCarley, @​chdsbd, @​tiangolo, @​matin, @​linusg, @​kevinalh, @​koxudaxi, @​timdrijvers, @​mkeen, @​meadsteve, @​ginomempin, @​primer-io, @​and-semakin, @​tomthorogood, @​AjitZK, @​westonsteimel, @​Mazyod, @​christippett, @​CarlosDomingues, @​Kludex, @​r-m-n for their kind support.

Highlights

• Hypothesis plugin for testing, #2097 by @​Zac-HD
• support for NamedTuple and TypedDict, #2216 by @​PrettyWood
• Support Annotated hints on model fields, #2147 by @​JacobHayes
• frozen parameter on Config to allow models to be hashed, #1880 by @​rhuille

... (truncated)

Changelog

Sourced from pydantic's changelog.

v1.8.2 (2021-05-11)

!!! warning A security vulnerability, level "moderate" is fixed in v1.8.2. Please upgrade ASAP. See security advisory CVE-2021-29510

• Security fix: Fix date and datetime parsing so passing either 'infinity' or float('inf') (or their negative values) does not cause an infinite loop, see security advisory CVE-2021-29510
• fix schema generation with Enum by generating a valid name, #2575 by @​PrettyWood
• fix JSON schema generation with a Literal of an enum member, #2536 by @​PrettyWood
• Fix bug with configurations declarations that are passed as keyword arguments during class creation, #2532 by @​uriyyo
• Allow passing json_encoders in class kwargs, #2521 by @​layday
• support arbitrary types with custom __eq__, #2483 by @​PrettyWood
• support Annotated in validate_arguments and in generic models with python 3.9, #2483 by @​PrettyWood

v1.8.1 (2021-03-03)

Bug fixes for regressions and new features from v1.8

• allow elements of Config.field to update elements of a Field, #2461 by @​samuelcolvin
• fix validation with a BaseModel field and a custom root type, #2449 by @​PrettyWood
• expose Pattern encoder to fastapi, #2444 by @​PrettyWood
• enable the Hypothesis plugin to generate a constrained float when the multiple_of argument is specified, #2442 by @​tobi-lipede-oodle
• Avoid RecursionError when using some types like Enum or Literal with generic models, #2436 by @​PrettyWood
• do not overwrite declared __hash__ in subclasses of a model, #2422 by @​PrettyWood
• fix mypy complaints on Path and UUID related custom types, #2418 by @​PrettyWood
• Support properly variable length tuples of compound types, #2416 by @​PrettyWood

v1.8 (2021-02-26)

Thank you to pydantic's sponsors: @​jorgecarleitao, @​BCarley, @​chdsbd, @​tiangolo, @​matin, @​linusg, @​kevinalh, @​koxudaxi, @​timdrijvers, @​mkeen, @​meadsteve, @​ginomempin, @​primer-io, @​and-semakin, @​tomthorogood, @​AjitZK, @​westonsteimel, @​Mazyod, @​christippett, @​CarlosDomingues, @​Kludex, @​r-m-n for their kind support.

Highlights

• Hypothesis plugin for testing, #2097 by @​Zac-HD
• support for NamedTuple and TypedDict, #2216 by @​PrettyWood
• Support Annotated hints on model fields, #2147 by @​JacobHayes
• frozen parameter on Config to allow models to be hashed, #1880 by @​rhuille

Changes

• Breaking Change, remove old deprecation aliases from v1, #2415 by @​samuelcolvin:
  • remove notes on migrating to v1 in docs
  • remove Schema which was replaced by Field

... (truncated)

Commits

• a84cfac v1.6.2 and v1.7.4 to history
• d209e13 fix warning
• 2d92558 remove CI branch change
• ccdf472 add #2465 to history
• 2bff0bf Support user defined generic field types in generic models. (#2554)
• 870cb6e fix mypy
• 9131d2d update linting requirements
• e2a44f7 try and get tests to run
• d3ad4e1 bump
• 92c52ae add change log for v1.8.2
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)