Bump the pip group across 1 directory with 6 updates #736

dependabot · 2025-01-06T13:15:31Z

Bumps the pip group with 6 updates in the /automated_tests directory:

Package	From	To
certifi	`2024.7.4`	`2024.12.14`
configobj	`5.0.6`	`5.0.9`
idna	`3.7`	`3.10`
requests	`2.32.2`	`2.32.3`
urllib3	`1.26.19`	`2.3.0`
zipp	`3.19.1`	`3.21.0`

Updates certifi from 2024.7.4 to 2024.12.14

Commits

4ba3900 2024.12.14 (#329)
9164660 Bump pypa/gh-action-pypi-publish from 1.12.2 to 1.12.3 (#331)
3dc3651 Bump pypa/gh-action-pypi-publish from 1.11.0 to 1.12.2 (#328)
c5bf18d Bump pypa/gh-action-pypi-publish from 1.10.3 to 1.11.0 (#327)
b908391 Bump actions/setup-python from 5.2.0 to 5.3.0 (#326)
bc26b41 Bump actions/checkout from 4.2.1 to 4.2.2 (#325)
57afc22 Bump actions/upload-artifact from 4.4.1 to 4.4.3 (#323)
a495091 test against 3.13 final
62f8144 Added 3.13 classifier (#322)
94d23a0 Bump pypa/gh-action-pypi-publish from 1.10.2 to 1.10.3 (#321)
Additional commits viewable in compare view

Updates configobj from 5.0.6 to 5.0.9

Release notes

Sourced from configobj's releases.

5.0.9

What's Changed

Address CVE-2023-26112 ReDoS by @cdcadman in DiffSK/configobj#236

Drop Python 2 support and compatibility code by @jelmer in DiffSK/configobj#237

Extra 2014 by @jelmer in DiffSK/configobj#245

setup.py: fix license tag by @yegorich in DiffSK/configobj#241

Update minimum python to 3.7 everywhere, and add 3.12 by @jelmer in DiffSK/configobj#246

New Contributors

@cdcadman made their first contribution in DiffSK/configobj#236

@yegorich made their first contribution in DiffSK/configobj#241

Full Changelog: DiffSK/configobj@v5.0.8...v5.0.9

confirming things work in newer python versions

5.0.7 originally did this work, but 5.0.8 fixes a regression (#230)

Changelog

Sourced from configobj's changelog.

Changelog

Release 5.0.9 """""""""""""

drop support for Python 2 and <3.7

fix CVE-2023-26112, ReDoS attack

Release 5.0.8 """""""""""""

fixing/test for a regression introduced in 5.0.7 that prevented import validate from working

Release 5.0.7 """""""""""""

update testing to validate against python version 2.7 and 3.5-3.11

update broken links / non-existent services and references

Older Releases """"""""""""""

Release 5.0.6 improves error messages in certain edge cases

Release 5.0.5 corrects a unicode-bug that still existed in writing files

Release 5.0.4 corrects a unicode-bug that still existed in reading files after fixing lists of string in 5.0.3

Release 5.0.3 corrects errors related to the incorrectly handling unicode encoding and writing out files

Release 5.0.2 adds a specific error message when trying to install on Python versions older than 2.5

Release 5.0.1 fixes a regression with unicode conversion not happening in certain cases PY2

Release 5.0.0 updates the supported Python versions to 2.6, 2.7, 3.2, 3.3 and is otherwise unchanged

Release 4.7.2 fixes several bugs in 4.7.1

Release 4.7.1 fixes a bug with the deprecated options keyword in 4.7.0.

Release 4.7.0 improves performance adds features for validation and fixes some bugs.

Commits

242dfd0 release 5.0.9
8857b08 Merge pull request #246 from DiffSK/python-version
d6f7597 Update minimum python to 3.7 everywhere, and add 3.12
8ffcf0c Merge pull request #241 from yegorich/license
5e2f143 Merge pull request #245 from jelmer/extra-2014
fdf3634 Drop extra '2014' in LICENSE file. Fixes #233
3480a6e Merge pull request #237 from jelmer/drop-python2
008165c Drop python 3.5 from GitHub action, since it now fails to download
861383c Drop support for Python < 3.5
7c618b0 Merge pull request #236 from cdcadman/cve_2023_26112
Additional commits viewable in compare view

Updates idna from 3.7 to 3.10

Release notes

Sourced from idna's releases.

v3.10

No release notes provided.

v3.9

No release notes provided.

v3.8

What's Changed

Fix regression where IDNAError exception was not being produced for certain inputs.

Add support for Python 3.13, drop support for Python 3.5 as it is no longer testable.

Documentation improvements

Updates to package testing using Github actions

Thanks to Hugo van Kemenade for contributions to this release.

Full Changelog: kjd/idna@v3.7...v3.8

Changelog

Sourced from idna's changelog.

3.10 (2024-09-15) +++++++++++++++++

Reverted to Unicode 15.1.0 data. Unicode 16 has some significant changes to UTS46 processing that will require more work to properly implement.

3.9 (2024-09-13) ++++++++++++++++

Update to Unicode 16.0.0

Deprecate setup.cfg in favour of pyproject.toml

Use ruff for code formatting

Thanks to Waket Zheng for contributions to this release.

3.8 (2024-08-23) ++++++++++++++++

Fix regression where IDNAError exception was not being produced for certain inputs.

Add support for Python 3.13, drop support for Python 3.5 as it is no longer testable.

Documentation improvements

Updates to package testing using Github actions

Thanks to Hugo van Kemenade for contributions to this release.

Commits

729225d Release v3.10
3eef168 Merge pull request #194 from kjd/revert-unicode-16
ceca619 Revert Unicode 16.0.0 data updates
c43ac75 Merge pull request #191 from kjd/release-3.9
1b8800a Release v3.9
a1fd168 Merge pull request #190 from kjd/unicode-16
7732c61 Merge branch 'master' into unicode-16
4ed183d Refactor membership test
762216b Format with ruff
580ece9 Implement changes to UTS46 algorithm
Additional commits viewable in compare view

Updates requests from 2.32.2 to 2.32.3

Release notes

Sourced from requests's releases.

v2.32.3

2.32.3 (2024-05-29)

Bugfixes

Fixed bug breaking the ability to specify custom SSLContexts in sub-classes of HTTPAdapter. (#6716)

Fixed issue where Requests started failing to run on Python versions compiled without the ssl module. (#6724)

Changelog

Sourced from requests's changelog.

2.32.3 (2024-05-29)

Bugfixes

Fixed bug breaking the ability to specify custom SSLContexts in sub-classes of HTTPAdapter. (#6716)

Fixed issue where Requests started failing to run on Python versions compiled without the ssl module. (#6724)

Commits

0e322af v2.32.3
e188799 Don't create default SSLContext if ssl module isn't present (#6724)
145b539 Merge pull request #6716 from sigmavirus24/bug/6715
b1d73dd Don't use default SSLContext with custom poolmanager kwargs
6badbac Update HISTORY.md
a62a2d3 Allow for overriding of specific pool key params
See full diff in compare view

Updates urllib3 from 1.26.19 to 2.3.0

Release notes

Sourced from urllib3's releases.

2.3.0

🚀 urllib3 is fundraising for HTTP/2 support

urllib3 is raising ~$40,000 USD to release HTTP/2 support and ensure long-term sustainable maintenance of the project after a sharp decline in financial support for 2023. If your company or organization uses Python and would benefit from HTTP/2 support in Requests, pip, cloud SDKs, and thousands of other projects please consider contributing financially to ensure HTTP/2 support is developed sustainably and maintained for the long-haul.

Thank you for your support.

Features

Added HTTPResponse.shutdown() to stop any ongoing or future reads for a specific response. It calls shutdown(SHUT_RD) on the underlying socket. This feature was sponsored by LaunchDarkly. (urllib3/urllib3#2868)

Added support for JavaScript Promise Integration on Emscripten. This enables more efficient WebAssembly requests and streaming, and makes it possible to use in Node.js if you launch it as node --experimental-wasm-stack-switching. (urllib3/urllib3#3400)

Added the proxy_is_tunneling property to HTTPConnection and HTTPSConnection. (urllib3/urllib3#3285)

Added pickling support to NewConnectionError and NameResolutionError. (urllib3/urllib3#3480)

Bugfixes

Fixed an issue in debug logs where the HTTP version was rendering as "HTTP/11" instead of "HTTP/1.1". (urllib3/urllib3#3489)

Deprecations and Removals

Removed support for Python 3.8. (urllib3/urllib3#3492)

Full Changelog: urllib3/urllib3@2.2.3...2.3.0

2.2.3

🚀 urllib3 is fundraising for HTTP/2 support

urllib3 is raising ~$40,000 USD to release HTTP/2 support and ensure long-term sustainable maintenance of the project after a sharp decline in financial support for 2023. If your company or organization uses Python and would benefit from HTTP/2 support in Requests, pip, cloud SDKs, and thousands of other projects please consider contributing financially to ensure HTTP/2 support is developed sustainably and maintained for the long-haul.

Thank you for your support.

Features

Added support for Python 3.13. (#3473)

Bugfixes

Fixed the default encoding of chunked request bodies to be UTF-8 instead of ISO-8859-1. All other methods of supplying a request body already use UTF-8 starting in urllib3 v2.0. (#3053)

Fixed ResourceWarning on CONNECT with Python < 3.11.4 by backporting python/cpython#103472. (`#3252)

Adjust tolerance for floating-point comparison on Windows to avoid flakiness in CI (#3413)

Fixed a crash where certain standard library hash functions were absent in restricted environments. (#3432)

Fixed mypy error when adding to HTTPConnection.default_socket_options. (#3448)

HTTP/2 (experimental)

HTTP/2 support is still in early development.

Excluded Transfer-Encoding: chunked from HTTP/2 request body (#3425)

Added version checking for h2 (https://pypi.org/project/h2/) usage. Now only accepting supported h2 major version 4.x.x. (#3290)

Added a probing mechanism for determining whether a given target origin supports HTTP/2 via ALPN. (#3301)

... (truncated)

Changelog

Sourced from urllib3's changelog.

2.3.0 (2024-12-22)

Features

Added HTTPResponse.shutdown() to stop any ongoing or future reads for a specific response. It calls shutdown(SHUT_RD) on the underlying socket. This feature was sponsored by LaunchDarkly <https://opencollective.com/urllib3/contributions/815307>. ([#2868](https://github.com/urllib3/urllib3/issues/2868) <https://github.com/urllib3/urllib3/issues/2868>)

Added support for JavaScript Promise Integration on Emscripten. This enables more efficient WebAssembly requests and streaming, and makes it possible to use in Node.js if you launch it as node --experimental-wasm-stack-switching. ([#3400](https://github.com/urllib3/urllib3/issues/3400) <https://github.com/urllib3/urllib3/issues/3400>__)

Added the proxy_is_tunneling property to HTTPConnection and HTTPSConnection. ([#3285](https://github.com/urllib3/urllib3/issues/3285) <https://github.com/urllib3/urllib3/issues/3285>__)

Added pickling support to NewConnectionError and NameResolutionError. ([#3480](https://github.com/urllib3/urllib3/issues/3480) <https://github.com/urllib3/urllib3/issues/3480>__)

Bugfixes

Fixed an issue in debug logs where the HTTP version was rendering as "HTTP/11" instead of "HTTP/1.1". ([#3489](https://github.com/urllib3/urllib3/issues/3489) <https://github.com/urllib3/urllib3/issues/3489>__)

Deprecations and Removals

Removed support for Python 3.8. ([#3492](https://github.com/urllib3/urllib3/issues/3492) <https://github.com/urllib3/urllib3/issues/3492>__)

2.2.3 (2024-09-12)

Features

Added support for Python 3.13. ([#3473](https://github.com/urllib3/urllib3/issues/3473) <https://github.com/urllib3/urllib3/issues/3473>__)

Bugfixes

Fixed the default encoding of chunked request bodies to be UTF-8 instead of ISO-8859-1. All other methods of supplying a request body already use UTF-8 starting in urllib3 v2.0. ([#3053](https://github.com/urllib3/urllib3/issues/3053) <https://github.com/urllib3/urllib3/issues/3053>__)

Fixed ResourceWarning on CONNECT with Python `__)

Adjust tolerance for floating-point comparison on Windows to avoid flakiness in CI ([#3413](https://github.com/urllib3/urllib3/issues/3413) <https://github.com/urllib3/urllib3/issues/3413>__)

Fixed a crash where certain standard library hash functions were absent in restricted environments. ([#3432](https://github.com/urllib3/urllib3/issues/3432) <https://github.com/urllib3/urllib3/issues/3432>__)

Fixed mypy error when adding to HTTPConnection.default_socket_options. ([#3448](https://github.com/urllib3/urllib3/issues/3448) <https://github.com/urllib3/urllib3/issues/3448>__)

HTTP/2 (experimental)

HTTP/2 support is still in early development.

Excluded Transfer-Encoding: chunked from HTTP/2 request body ([#3425](https://github.com/urllib3/urllib3/issues/3425) <https://github.com/urllib3/urllib3/issues/3425>__)

Added version checking for h2 (https://pypi.org/project/h2/) usage.

... (truncated)

Commits

2f68c53 Release 2.3.0
f7bcf69 Add HTTPResponse.shutdown() to stop blocking reads (#3527)
e942249 Update .readthedocs.yml addressing a deprecation (#3534)
905549d Upgrade Python pre-commit tools (#3529)
716d834 Fix PyPI publish with Core metadata 2.4 (#3531)
7ab935c Address zizmor issues
181357e Bump Quart to fix CI (#3524)
0e7e0df Start testing with Python 3.14
d67d09b Bump mypy version
20032ec Drop unneeded dependency pins and a warning filter
Additional commits viewable in compare view

Updates zipp from 3.19.1 to 3.21.0

Changelog

Sourced from zipp's changelog.

v3.21.0

Features

Improve performances of :meth:zipfile.Path.open for non-reading modes. (1a1928d)

Rely on cached_property to cache values on the instance.

Rely on save_method_args to save method args.

v3.20.2

Bugfixes

Make zipp.compat.overlay.zipfile hashable. (#126)

v3.20.1

Bugfixes

python/cpython#123270

v3.20.0

Features

Made the zipfile compatibility overlay available as zipp.compat.overlay.

v3.19.3

Bugfixes

Also match directories in Path.glob. (#121)

v3.19.2

... (truncated)

Commits

45b7f67 Finalize
71ddd8d Skip zipfile.Path.existspython/cpython#126576
9a2705e Merge https://github.com/jaraco/skeleton
5c34e69 Use extend for proper workaround.
ee027f6 Merge https://github.com/jaraco/skeleton
750a189 Require Python 3.9 or later now that Python 3.8 is EOL.
e61a9df Include pyproject.toml in ruff.toml.
db4dfc4jaraco/skeleton#151
62b6678 Bump pre-commit hook for ruff to avoid clashes with pytest-ruff (jaraco/skele...
466f535 Merge pull request #109 from jaraco/feature/functools
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps the pip group with 6 updates in the /automated_tests directory: | Package | From | To | | --- | --- | --- | | [certifi](https://github.com/certifi/python-certifi) | `2024.7.4` | `2024.12.14` | | [configobj](https://github.com/DiffSK/configobj) | `5.0.6` | `5.0.9` | | [idna](https://github.com/kjd/idna) | `3.7` | `3.10` | | [requests](https://github.com/psf/requests) | `2.32.2` | `2.32.3` | | [urllib3](https://github.com/urllib3/urllib3) | `1.26.19` | `2.3.0` | | [zipp](https://github.com/jaraco/zipp) | `3.19.1` | `3.21.0` | Updates `certifi` from 2024.7.4 to 2024.12.14 - [Commits](certifi/python-certifi@2024.07.04...2024.12.14) Updates `configobj` from 5.0.6 to 5.0.9 - [Release notes](https://github.com/DiffSK/configobj/releases) - [Changelog](https://github.com/DiffSK/configobj/blob/release/CHANGES.rst) - [Commits](DiffSK/configobj@v5.0.6...v5.0.9) Updates `idna` from 3.7 to 3.10 - [Release notes](https://github.com/kjd/idna/releases) - [Changelog](https://github.com/kjd/idna/blob/master/HISTORY.rst) - [Commits](kjd/idna@v3.7...v3.10) Updates `requests` from 2.32.2 to 2.32.3 - [Release notes](https://github.com/psf/requests/releases) - [Changelog](https://github.com/psf/requests/blob/main/HISTORY.md) - [Commits](psf/requests@v2.32.2...v2.32.3) Updates `urllib3` from 1.26.19 to 2.3.0 - [Release notes](https://github.com/urllib3/urllib3/releases) - [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst) - [Commits](urllib3/urllib3@1.26.19...2.3.0) Updates `zipp` from 3.19.1 to 3.21.0 - [Release notes](https://github.com/jaraco/zipp/releases) - [Changelog](https://github.com/jaraco/zipp/blob/main/NEWS.rst) - [Commits](jaraco/zipp@v3.19.1...v3.21.0) --- updated-dependencies: - dependency-name: certifi dependency-type: direct:production dependency-group: pip - dependency-name: configobj dependency-type: direct:production dependency-group: pip - dependency-name: idna dependency-type: direct:production dependency-group: pip - dependency-name: requests dependency-type: direct:production dependency-group: pip - dependency-name: urllib3 dependency-type: direct:production dependency-group: pip - dependency-name: zipp dependency-type: direct:production dependency-group: pip ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot bot added the dependencies Pull requests that update a dependency file label Jan 6, 2025

leoparente assigned leoparente and unassigned leoparente Jan 6, 2025

leoparente self-requested a review January 6, 2025 13:50

leoparente approved these changes Jan 6, 2025

View reviewed changes

leoparente merged commit 40775a1 into develop Jan 6, 2025
15 checks passed

leoparente deleted the dependabot/pip/automated_tests/pip-4ee8aa2bca branch January 6, 2025 13:51

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump the pip group across 1 directory with 6 updates #736

Bump the pip group across 1 directory with 6 updates #736

Uh oh!

dependabot bot commented on behalf of github Jan 6, 2025

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Bump the pip group across 1 directory with 6 updates #736

Bump the pip group across 1 directory with 6 updates #736

Uh oh!

Conversation

dependabot bot commented on behalf of github Jan 6, 2025

5.0.9

What's Changed

New Contributors

confirming things work in newer python versions

Changelog

v3.10

v3.9

v3.8

What's Changed

v2.32.3

2.32.3 (2024-05-29)

2.32.3 (2024-05-29)

2.3.0

🚀 urllib3 is fundraising for HTTP/2 support

Features

Bugfixes

Deprecations and Removals

2.2.3

🚀 urllib3 is fundraising for HTTP/2 support

Features

Bugfixes

HTTP/2 (experimental)

2.3.0 (2024-12-22)

Features

Bugfixes

Deprecations and Removals

2.2.3 (2024-09-12)

Features

Bugfixes

HTTP/2 (experimental)

v3.21.0

Features

v3.20.2

Bugfixes

v3.20.1

Bugfixes

v3.20.0

Features

v3.19.3

Bugfixes

v3.19.2

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant