Skip to content

Conversation

@nginx-bot
Copy link
Contributor

Bumps the python group in /tests with 3 updates: charset-normalizer, cryptography and playwright.

Updates charset-normalizer from 3.4.1 to 3.4.2

Release notes

Sourced from charset-normalizer's releases.

Version 3.4.2

3.4.2 (2025-05-02)

Fixed

  • Addressed the DeprecationWarning in our CLI regarding argparse.FileType by backporting the target class into the package. (#591)
  • Improved the overall reliability of the detector with CJK Ideographs. (#605) (#587)

Changed

  • Optional mypyc compilation upgraded to version 1.15 for Python >= 3.9
Changelog

Sourced from charset-normalizer's changelog.

3.4.2 (2025-05-02)

Fixed

  • Addressed the DeprecationWarning in our CLI regarding argparse.FileType by backporting the target class into the package. (#591)
  • Improved the overall reliability of the detector with CJK Ideographs. (#605) (#587)

Changed

  • Optional mypyc compilation upgraded to version 1.15 for Python >= 3.8
Commits
  • 6422af1 📝 update release date
  • 0e60ec1 🔖 Release 3.4.2 (#614)
  • f6630ce ⬆️ Bump pypa/cibuildwheel from 2.23.2 to 2.23.3 (#617)
  • 677c999 ⬆️ Bump actions/download-artifact from 4.2.1 to 4.3.0 (#618)
  • 960ab1e ⬆️ Bump actions/setup-python from 5.5.0 to 5.6.0 (#619)
  • 6eb6325 ⬆️ Bump github/codeql-action from 3.28.10 to 3.28.16 (#620)
  • c99c0f2 ⬆️ Update coverage requirement from <7.7,>=7.2.7 to >=7.2.7,<7.9 (#606)
  • 270f28e ⬆️ Bump actions/setup-python from 5.4.0 to 5.5.0 (#607)
  • d4d89a0 ⬆️ Bump pypa/cibuildwheel from 2.22.0 to 2.23.2 (#608)
  • 905fcf5 ⬆️ Bump slsa-framework/slsa-github-generator from 2.0.0 to 2.1.0 (#609)
  • Additional commits viewable in compare view

Updates cryptography from 44.0.2 to 44.0.3

Changelog

Sourced from cryptography's changelog.

44.0.3 - 2025-05-02


* Fixed compilation when using LibreSSL 4.1.0.

.. _v44-0-2:

Commits

Updates playwright from 1.51.0 to 1.52.0

Release notes

Sourced from playwright's releases.

v1.52.0

Highlights

  • New method expect(locator).to_contain_class() to ergonomically assert individual class names on the element.

      expect(page.get_by_role("listitem", name="Ship v1.52")).to_contain_class("done")
  • Aria Snapshots got two new properties: /children for strict matching and /url for links.

    expect(locator).to_match_aria_snapshot("""
      - list
        - /children: equal
        - listitem: Feature A
        - listitem:
          - link "Feature B":
            - /url: "https://playwright.dev"
    """)

Miscellaneous

Breaking Changes

  • Method route.continue() does not allow to override the Cookie header anymore. If a Cookie header is provided, it will be ignored, and the cookie will be loaded from the browser's cookie store. To set custom cookies, use browserContext.add_cookies().
  • macOS 13 is now deprecated and will no longer receive WebKit updates. Please upgrade to a more recent macOS version to continue benefiting from the latest WebKit improvements.

Browser Versions

  • Chromium 136.0.7103.25
  • Mozilla Firefox 137.0
  • WebKit 18.4

This version was also tested against the following stable channels:

  • Google Chrome 135
  • Microsoft Edge 135
Commits
  • eec856f chore(roll): roll glob changes from Playwright 1.52.0 (#2824)
  • f5857df chore: publish win32-arm64 wheel (#2800)
  • ec92f20 build(deps): bump types-requests from 2.32.0.20250306 to 2.32.0.20250328 (#2807)
  • 0e23e33 build(deps): bump pytest-repeat from 0.9.3 to 0.9.4 (#2812)
  • dc525e7 chore: adjust license metadata in pyproject.toml (#2828)
  • 805147f build(deps): bump actions/create-github-app-token from 1 to 2 in the actions ...
  • 10e9ea3 build(deps): bump typing-extensions from 4.12.2 to 4.13.2 (#2817)
  • 353c9d5 build(deps): bump pytest-cov from 6.0.0 to 6.1.1 (#2811)
  • 74e2177 chore(roll): roll Playwright to 1.52.0 (omitting glob changes) (#2823)
  • 68d96cb build(deps): bump flake8 from 7.1.2 to 7.2.0 (#2806)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the python group in /tests with 3 updates: [charset-normalizer](https://github.com/jawah/charset_normalizer), [cryptography](https://github.com/pyca/cryptography) and [playwright](https://github.com/microsoft/playwright-python).


Updates `charset-normalizer` from 3.4.1 to 3.4.2
- [Release notes](https://github.com/jawah/charset_normalizer/releases)
- [Changelog](https://github.com/jawah/charset_normalizer/blob/master/CHANGELOG.md)
- [Commits](jawah/charset_normalizer@3.4.1...3.4.2)

Updates `cryptography` from 44.0.2 to 44.0.3
- [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst)
- [Commits](pyca/cryptography@44.0.2...44.0.3)

Updates `playwright` from 1.51.0 to 1.52.0
- [Release notes](https://github.com/microsoft/playwright-python/releases)
- [Commits](microsoft/playwright-python@v1.51.0...v1.52.0)

---
updated-dependencies:
- dependency-name: charset-normalizer
  dependency-version: 3.4.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python
- dependency-name: cryptography
  dependency-version: 44.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python
- dependency-name: playwright
  dependency-version: 1.52.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Venktesh Shivam Patel <ve.patel@f5.com>
@nginx-bot nginx-bot requested a review from a team as a code owner May 7, 2025 15:29
@nginx-bot nginx-bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels May 7, 2025
@github-actions github-actions bot removed the dependencies Pull requests that update a dependency file label May 7, 2025
@vepatel vepatel changed the title [cherry-pick] chore(deps): bump the python group in /tests with 3 updates chore(deps): bump the python group in /tests with 3 updates May 7, 2025
@vepatel vepatel enabled auto-merge (squash) May 7, 2025 15:42
@vepatel vepatel merged commit 991ddd6 into release-5.0 May 7, 2025
72 checks passed
@vepatel vepatel deleted the cherry-pick-release-5.0-a9048818f6fc2d0f86db1d336a521bd39c90b835 branch May 7, 2025 15:55
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

python Pull requests that update Python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants