Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump cbor2 from 5.1.2 to 5.2.0 #8639

Closed
wants to merge 1 commit into from

Conversation

dependabot-preview[bot]
Copy link
Contributor

@dependabot-preview dependabot-preview bot commented Oct 1, 2020

Bumps cbor2 from 5.1.2 to 5.2.0.

Release notes

Sourced from cbor2's releases.

5.2.0

Last release in the 5.x series as we will be removing support for Python 2.7 to 3.5

Changelog

Sourced from cbor2's changelog.

Version history

This library adheres to Semantic Versioning.

5.2.0 (2020-09-30)

  • Final version tested with Python 2.7 and 3.5
  • README: Announce deprecation of Python 2.7, 3.5
  • README: More detail and examples
  • Bugfix: Fix segfault on loading huge arrays with C-backend (Sekenre)
  • Build system: Allow packagers to force C-backend building or disable using env var (jameshilliard)
  • Feature: cbor2.tool Command line diagnostic tool (Sekenre)
  • Feature: Ignore semantic tag used for file magic 55799 AKA "Self-Described CBOR" (kalcutter)

5.1.2 (2020-07-21)

  • Bugfix: Refcount bug in C lib causing intermittent segfaults on shutdown (tdryer)

5.1.1 (2020-07-03)

  • Build system: Making C lib optional if it fails to compile (chiefnoah)
  • Build system: Better Glibc version detection (Sekenre and JayH5)
  • Tests: Positive and negative bignums (kalcutter)
  • Bugfix: Fractional seconds parsing in datetimes (kalcutter)

5.1.0 (2020-03-18)

  • Minor API change CBORSimpleValue is now a subclass of namedtuple and allows all numeric comparisons. This brings functional parity between C and Python modules.
  • Fixes for C-module on big-endian systems including floating point decoding, smallint encoding, and boolean argument handling. Tested on s390x and MIPS32.
  • Increase version requred of setuptools during install due to unicode errors.

5.0.1 (2020-01-21)

  • Fix deprecation warning on python 3.7, 3.8 (mariano54)
  • Minor documentation tweaks

5.0.0 (2020-01-20)

  • BACKWARD INCOMPATIBLE CBOR does not have a bare DATE type, encoding dates as datetimes is disabled by default (PR by Changaco)
  • BACKWARD INCOMPATIBLE ~CBORDecoder.set_shareable only takes the instance to share, not the shareable's index
  • BACKWARD INCOMPATIBLE CBORError now descends from Exception rather than ValueError; however, subordinate exceptions now descend from ValueError (where appropriate) so most users should notice no difference
  • BACKWARD INCOMPATIBLE CBORDecoder can now raise CBORDecodeEOF which descends from EOFError supporting streaming applications
  • Optional Pure C implementation by waveform80 that functions identically to the pure Python implementation with further contributions from: toravir, jonashoechst, Changaco
  • Drop Python 3.3 and 3.4 support from the build process; they should still work if built from source but are no longer officially supported
  • Added support for encoding and decoding ipaddress.IPv4Address, ipaddress.IPv6Address, ipaddress.IPv4Network, and ipaddress.IPv6Network (semantic tags 260 and 261)

4.2.0 (2020-01-10)

  • BROKEN BUILD Removed
Commits
  • 0024f14 Announce 3.5 deprecation at the same time
  • 423aef9 Documentation and versionhistory updates
  • 4e1e762 Updated the format of LICENSE.txt
  • 788e863 Support decoding self-describe CBOR tag
  • d92b4ba Fix readme inclusion in sphinx doc
  • d4976a4 Add deprecation notice to all documents and setup.py
  • 9d4a6c8 Fix readme ref in document index
  • 938a046 Add a security note
  • fcee12e Move command line usage to README for clarity
  • 95f8b10 Fix formatting
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  • @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
  • @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
  • @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
  • @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language
  • @dependabot badge me will comment on this PR with code to add a "Dependabot enabled" badge to your readme

Additionally, you can set the following in your Dependabot dashboard:

  • Update frequency (including time of day and day of week)
  • Pull request limits (per update run and/or open at any time)
  • Automerge options (never/patch/minor, and dev/runtime dependencies)
  • Out-of-range updates (receive only lockfile updates, if desired)
  • Security updates (receive only security updates, if desired)

Bumps [cbor2](https://github.com/agronholm/cbor2) from 5.1.2 to 5.2.0.
- [Release notes](https://github.com/agronholm/cbor2/releases)
- [Changelog](https://github.com/agronholm/cbor2/blob/master/docs/versionhistory.rst)
- [Commits](agronholm/cbor2@5.1.2...5.2.0)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
@dependabot-preview dependabot-preview bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Oct 1, 2020
@github-actions github-actions bot mentioned this pull request Oct 12, 2020
@dependabot-preview
Copy link
Contributor Author

Looks like cbor2 is up-to-date now, so this is no longer needed.

@dependabot-preview dependabot-preview bot deleted the dependabot/pip/cbor2-5.2.0 branch October 12, 2020 18:20
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file python Pull requests that update Python code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

0 participants