Bump the pip group with 5 updates #645

dependabot · 2024-08-01T09:51:01Z

Bumps the pip group with 5 updates:

Package	From	To
aiohttp	`3.9.5`	`3.10.0`
cachetools	`5.3.3`	`5.4.0`
sentry-sdk	`2.8.0`	`2.12.0`
pytest	`8.2.2`	`8.3.2`
pytest-asyncio	`0.23.7`	`0.23.8`

Updates aiohttp from 3.9.5 to 3.10.0

Release notes

Sourced from aiohttp's releases.

3.10.0

Bug fixes

Fixed server response headers for Content-Type and Content-Encoding for static compressed files -- by :user:steverep.

Server will now respond with a Content-Type appropriate for the compressed file (e.g. "application/gzip"), and omit the Content-Encoding header. Users should expect that most clients will no longer decompress such responses by default.

Related issues and pull requests on GitHub: #4462.

Fixed duplicate cookie expiration calls in the CookieJar implementation

Related issues and pull requests on GitHub: #7784.

Adjusted FileResponse to check file existence and access when preparing the response -- by :user:steverep.

The :py:class:~aiohttp.web.FileResponse class was modified to respond with 403 Forbidden or 404 Not Found as appropriate. Previously, it would cause a server error if the path did not exist or could not be accessed. Checks for existence, non-regular files, and permissions were expected to be done in the route handler. For static routes, this now permits a compressed file to exist without its uncompressed variant and still be served. In addition, this changes the response status for files without read permission to 403, and for non-regular files from 404 to 403 for consistency.

Related issues and pull requests on GitHub: #8182.

Fixed AsyncResolver to match ThreadedResolver behavior -- by :user:bdraco.

On system with IPv6 support, the :py:class:~aiohttp.resolver.AsyncResolver would not fallback to providing A records when AAAA records were not available. Additionally, unlike the :py:class:~aiohttp.resolver.ThreadedResolver, the :py:class:~aiohttp.resolver.AsyncResolver did not handle link-local addresses correctly.

... (truncated)

Changelog

Sourced from aiohttp's changelog.

3.10.0 (2024-07-30)

Bug fixes

Fixed server response headers for Content-Type and Content-Encoding for static compressed files -- by :user:steverep.

Server will now respond with a Content-Type appropriate for the compressed file (e.g. "application/gzip"), and omit the Content-Encoding header. Users should expect that most clients will no longer decompress such responses by default.

Related issues and pull requests on GitHub: :issue:4462.

Fixed duplicate cookie expiration calls in the CookieJar implementation

Related issues and pull requests on GitHub: :issue:7784.

Adjusted FileResponse to check file existence and access when preparing the response -- by :user:steverep.

The :py:class:~aiohttp.web.FileResponse class was modified to respond with 403 Forbidden or 404 Not Found as appropriate. Previously, it would cause a server error if the path did not exist or could not be accessed. Checks for existence, non-regular files, and permissions were expected to be done in the route handler. For static routes, this now permits a compressed file to exist without its uncompressed variant and still be served. In addition, this changes the response status for files without read permission to 403, and for non-regular files from 404 to 403 for consistency.

Related issues and pull requests on GitHub: :issue:8182.

Fixed AsyncResolver to match ThreadedResolver behavior -- by :user:bdraco.

On system with IPv6 support, the :py:class:~aiohttp.resolver.AsyncResolver would not fallback to providing A records when AAAA records were not available.

... (truncated)

Commits

7f29851 Release 3.10.0 (attempt 2) (#8552)
fc201e8 Release 3.10.0 (#8550)
305f67a Release 3.10.0rc0 (#8545)
ed8de3a [PR #8541/a561fa99 backport][3.10] Cleanup for #8495 (#8544)
df57b9f [3.10] Handle 403 and 404 issues in FileResponse class (#8538) (#8539)
3baa6de [PR #8535/7108d646 backport][3.10] Small speed up to cookiejar filter_cookies...
5621ecf Bump pytest from 8.3.1 to 8.3.2 (#8536)
9b9cec2 Release 3.10.0b1 (#8533)
088f734 [3.10] Downgrade upload/download artifact to v3 to fix CI (#8532)
948a4c5 Release 3.10.0b0 (#8531)
Additional commits viewable in compare view

Updates cachetools from 5.3.3 to 5.4.0

Changelog

Sourced from cachetools's changelog.

v5.4.0 (2024-07-15)

Add the keys.typedmethodkey decorator.

Deprecate MRUCache class.

Deprecate @func.mru_cache decorator.

Update CI environment.

Commits

990665b Release v5.4.0.
ebff841 Fix #256: Deprecate MRUCache class.
f9021d5 Fix #256: Deprecate @mru_cache decorator.
f461c73 Merge remote-tracking branch 'origin/dependabot/github_actions/codecov/codeco...
a56d38e Merge remote-tracking branch 'origin/dependabot/github_actions/actions/checko...
7354593 Bump actions/checkout from 4.1.6 to 4.1.7
1a4bd04 Bump codecov/codecov-action from 4.4.1 to 4.5.0
e669b99 Add the keys.typedmethodkey decorator
fbf0b7e Bump actions/checkout from 4.1.4 to 4.1.6
226028d Bump codecov/codecov-action from 4.3.1 to 4.4.1
Additional commits viewable in compare view

Updates sentry-sdk from 2.8.0 to 2.12.0

Release notes

Sourced from sentry-sdk's releases.

2.12.0

Various fixes & improvements

API: Expose the scope getters to top level API and use them everywhere (#3357) by @sl0thentr0py

API: push_scope deprecation warning (#3355) (#3355) by @szokeasaurusrex

API: Replace push_scope (#3353, #3354) by @szokeasaurusrex

API: Deprecate, avoid, or stop using configure_scope (#3348, #3349, #3350, #3351) by @szokeasaurusrex

OTel: Remove experimental autoinstrumentation (#3239) by @sentrivana

Graphene: Add span for grapqhl operation (#2788) by @czyber

AI: Add async support for ai_track decorator (#3376) by @czyber

CI: Workaround bug preventing Django test runs (#3371) by @szokeasaurusrex

CI: Remove Django setuptools pin (#3378) by @szokeasaurusrex

Tests: Test with Django 5.1 RC (#3370) by @sentrivana

Broaden add_attachment type (#3342) by @szokeasaurusrex

Add span data to the transactions trace context (#3374) by @antonpirker

Gracefully fail attachment path not found case (#3337) by @sl0thentr0py

Document attachment parameters (#3342) by @szokeasaurusrex

Bump checkouts/data-schemas from 0feb234 to 6d2c435 (#3369) by @dependabot

Bump checkouts/data-schemas from 88273a9 to 0feb234 (#3252) by @dependabot

2.11.0

Various fixes & improvements
Add disabled_integrations (#3328) by @sentrivana

Disabling individual integrations is now much easier. Instead of disabling all automatically enabled integrations and specifying the ones you want to keep, you can now use the new disabled_integrations config option to provide a list of integrations to disable:
import sentry_sdk
from sentry_sdk.integrations.flask import FlaskIntegration
sentry_sdk.init(
# Do not use the Flask integration even if Flask is installed.
disabled_integrations=[
FlaskIntegration(),
],
)
Use operation name as transaction name in Strawberry (#3294) by @sentrivana

WSGI integrations respect SCRIPT_NAME env variable (#2622) by @sarvaSanjay

Make Django DB spans have origin auto.db.django (#3319) by @antonpirker

Sort breadcrumbs by time before sending (#3307) by @antonpirker

Fix KeyError('sentry-monitor-start-timestamp-s') (#3278) by @Mohsen-Khodabakhshi

Set MongoDB tags directly on span data (#3290) by @0Calories

Lower logger level for some messages (#3305) by @sentrivana and @antonpirker

Emit deprecation warnings from Hub API (#3280) by @szokeasaurusrex

Clarify that instrumenter is internal-only (#3299) by @szokeasaurusrex

Support Django 5.1 (#3207) by @sentrivana

Remove apparently unnecessary if (#3298) by @szokeasaurusrex

... (truncated)

Changelog

Sourced from sentry-sdk's changelog.

2.12.0

Various fixes & improvements

API: Expose the scope getters to top level API and use them everywhere (#3357) by @sl0thentr0py

API: push_scope deprecation warning (#3355) (#3355) by @szokeasaurusrex

API: Replace push_scope (#3353, #3354) by @szokeasaurusrex

API: Deprecate, avoid, or stop using configure_scope (#3348, #3349, #3350, #3351) by @szokeasaurusrex

OTel: Remove experimental autoinstrumentation (#3239) by @sentrivana

Graphene: Add span for grapqhl operation (#2788) by @czyber

AI: Add async support for ai_track decorator (#3376) by @czyber

CI: Workaround bug preventing Django test runs (#3371) by @szokeasaurusrex

CI: Remove Django setuptools pin (#3378) by @szokeasaurusrex

Tests: Test with Django 5.1 RC (#3370) by @sentrivana

Broaden add_attachment type (#3342) by @szokeasaurusrex

Add span data to the transactions trace context (#3374) by @antonpirker

Gracefully fail attachment path not found case (#3337) by @sl0thentr0py

Document attachment parameters (#3342) by @szokeasaurusrex

Bump checkouts/data-schemas from 0feb234 to 6d2c435 (#3369) by @dependabot

Bump checkouts/data-schemas from 88273a9 to 0feb234 (#3252) by @dependabot

2.11.0

Various fixes & improvements
Add disabled_integrations (#3328) by @sentrivana

Disabling individual integrations is now much easier. Instead of disabling all automatically enabled integrations and specifying the ones you want to keep, you can now use the new disabled_integrations config option to provide a list of integrations to disable:
import sentry_sdk
from sentry_sdk.integrations.flask import FlaskIntegration
sentry_sdk.init(
# Do not use the Flask integration even if Flask is installed.
disabled_integrations=[
FlaskIntegration(),
],
)
Use operation name as transaction name in Strawberry (#3294) by @sentrivana

WSGI integrations respect SCRIPT_NAME env variable (#2622) by @sarvaSanjay

Make Django DB spans have origin auto.db.django (#3319) by @antonpirker

Sort breadcrumbs by time before sending (#3307) by @antonpirker

Fix KeyError('sentry-monitor-start-timestamp-s') (#3278) by @Mohsen-Khodabakhshi

... (truncated)

Commits

441c0f7 Updated changelog
ab3eb1f release: 2.12.0
f8e5d2f Add span data to the transactions trace context (#3374)
0f3e5db ci: Remove Django setuptools pin
b658e4b feat(integrations): Add async support for ai_track decorator
fc5db4f ref(otel): Remove experimental autoinstrumentation (#3239)
6bb2081 build(deps): bump checkouts/data-schemas from 0feb234 to 6d2c435 (#3369)
2ce6677 tests: Test with Django 5.1 RC (#3370)
bd293e5 Expose the scope getters to top level API and use them everywhere (#3357)
c9765cd ci: Workaround bug preventing Django test runs (#3371)
Additional commits viewable in compare view

Updates pytest from 8.2.2 to 8.3.2

Release notes

Sourced from pytest's releases.

8.3.2

pytest 8.3.2 (2024-07-24)

Bug fixes

#12652: Resolve regression [conda]{.title-ref} environments where no longer being automatically detected.

-- by RonnyPfannschmidt{.interpreted-text role="user"}

8.3.1

pytest 8.3.1 (2024-07-20)

The 8.3.0 release failed to include the change notes and docs for the release. This patch release remedies this. There are no other changes.

8.3.0

pytest 8.3.0 (2024-07-20)

New features

#12231: Added [--xfail-tb]{.title-ref} flag, which turns on traceback output for XFAIL results.

If the [--xfail-tb]{.title-ref} flag is not given, tracebacks for XFAIL results are NOT shown.

The style of traceback for XFAIL is set with [--tb]{.title-ref}, and can be [auto|long|short|line|native|no]{.title-ref}.

Note: Even if you have [--xfail-tb]{.title-ref} set, you won't see them if [--tb=no]{.title-ref}.

Some history:

With pytest 8.0, [-rx]{.title-ref} or [-ra]{.title-ref} would not only turn on summary reports for xfail, but also report the tracebacks for xfail results. This caused issues with some projects that utilize xfail, but don't want to see all of the xfail tracebacks.

This change detaches xfail tracebacks from [-rx]{.title-ref}, and now we turn on xfail tracebacks with [--xfail-tb]{.title-ref}. With this, the default [-rx]{.title-ref}/ [-ra]{.title-ref} behavior is identical to pre-8.0 with respect to xfail tracebacks. While this is a behavior change, it brings default behavior back to pre-8.0.0 behavior, which ultimately was considered the better course of action.

#12281: Added support for keyword matching in marker expressions.

Now tests can be selected by marker keyword arguments. Supported values are int{.interpreted-text role="class"}, (unescaped) str{.interpreted-text role="class"}, bool{.interpreted-text role="class"} & None{.interpreted-text role="data"}.

See marker examples <marker_keyword_expression_example>{.interpreted-text role="ref"} for more information.

-- by lovetheguitar{.interpreted-text role="user"}

#12567: Added --no-fold-skipped command line option.

If this option is set, then skipped tests in short summary are no longer grouped by reason but all tests are printed individually with their nodeid in the same way as other statuses.

-- by pbrezina{.interpreted-text role="user"}

... (truncated)

Commits

bbcec9c Prepare release version 8.3.2
78fe8b6 Merge pull request #12657 from pytest-dev/patchback/backports/8.3.x/6c806b499...
238bad2 Merge pull request #12656 from RonnyPfannschmidt/fix-12652-detect-conda-env
ae6034a Merge pull request #12641 from pytest-dev/patchback/backports/8.3.x/c03989cee...
31337ab Merge pull request #12640 from pytest-dev/update-user
ca3070b Merge pull request #12637 from pytest-dev/release-8.3.1
de98446 Prepare release version 8.3.1
bd0a042 Merge pull request #12636 from pytest-dev/update-release-notes
664325b doc/changelog: update 8.3.0 notes
19d225d Merge pull request #12635 from pytest-dev/release-8.3.0
Additional commits viewable in compare view

Updates pytest-asyncio from 0.23.7 to 0.23.8

Release notes

Sourced from pytest-asyncio's releases.

pytest-asyncio 0.23.8

0.23.8 (2024-07-17)

Fixes a bug that caused duplicate markers in async tests #813

Known issues

As of v0.23, pytest-asyncio attaches an asyncio event loop to each item of the test suite (i.e. session, packages, modules, classes, functions) and allows tests to be run in those loops when marked accordingly. Pytest-asyncio currently assumes that async fixture scope is correlated with the new event loop scope. This prevents fixtures from being evaluated independently from the event loop scope and breaks some existing test suites (see #706). For example, a test suite may require all fixtures and tests to run in the same event loop, but have async fixtures that are set up and torn down for each module. If you're affected by this issue, please continue using the v0.21 release, until it is resolved.

Commits

4be86a5 docs: Prepare release of v0.23.8.
74b3a0a Build(deps): Bump exceptiongroup in /dependencies/default
b0009ca [build] Declare support for Python 3.13.
c747c7d Build(deps): Bump coverage from 7.5.4 to 7.6.0 in /dependencies/default
5c40a1c Build(deps): Bump hypothesis in /dependencies/default
b735e8a build: Remove development dependency on Docker.
91171b4 ci: Test with CPython 3.13.
d572138 Build(deps): Bump hypothesis in /dependencies/default
a89e4d7 Build(deps): Bump certifi in /dependencies/docs
b646cc1 [fix] Fixed a bug that causes markers to be duplicated for async test functions.
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the pip group with 5 updates: | Package | From | To | | --- | --- | --- | | [aiohttp](https://github.com/aio-libs/aiohttp) | `3.9.5` | `3.10.0` | | [cachetools](https://github.com/tkem/cachetools) | `5.3.3` | `5.4.0` | | [sentry-sdk](https://github.com/getsentry/sentry-python) | `2.8.0` | `2.12.0` | | [pytest](https://github.com/pytest-dev/pytest) | `8.2.2` | `8.3.2` | | [pytest-asyncio](https://github.com/pytest-dev/pytest-asyncio) | `0.23.7` | `0.23.8` | Updates `aiohttp` from 3.9.5 to 3.10.0 - [Release notes](https://github.com/aio-libs/aiohttp/releases) - [Changelog](https://github.com/aio-libs/aiohttp/blob/master/CHANGES.rst) - [Commits](aio-libs/aiohttp@v3.9.5...v3.10.0) Updates `cachetools` from 5.3.3 to 5.4.0 - [Changelog](https://github.com/tkem/cachetools/blob/master/CHANGELOG.rst) - [Commits](tkem/cachetools@v5.3.3...v5.4.0) Updates `sentry-sdk` from 2.8.0 to 2.12.0 - [Release notes](https://github.com/getsentry/sentry-python/releases) - [Changelog](https://github.com/getsentry/sentry-python/blob/master/CHANGELOG.md) - [Commits](getsentry/sentry-python@2.8.0...2.12.0) Updates `pytest` from 8.2.2 to 8.3.2 - [Release notes](https://github.com/pytest-dev/pytest/releases) - [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst) - [Commits](pytest-dev/pytest@8.2.2...8.3.2) Updates `pytest-asyncio` from 0.23.7 to 0.23.8 - [Release notes](https://github.com/pytest-dev/pytest-asyncio/releases) - [Commits](pytest-dev/pytest-asyncio@v0.23.7...v0.23.8) --- updated-dependencies: - dependency-name: aiohttp dependency-type: direct:production update-type: version-update:semver-minor dependency-group: pip - dependency-name: cachetools dependency-type: direct:production update-type: version-update:semver-minor dependency-group: pip - dependency-name: sentry-sdk dependency-type: direct:production update-type: version-update:semver-minor dependency-group: pip - dependency-name: pytest dependency-type: direct:development update-type: version-update:semver-minor dependency-group: pip - dependency-name: pytest-asyncio dependency-type: direct:development update-type: version-update:semver-patch dependency-group: pip ... Signed-off-by: dependabot[bot] <support@github.com>

codecov · 2024-08-01T09:55:29Z

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 100.00%. Comparing base (8c3a73e) to head (ab45e0c).

@@            Coverage Diff            @@
##              main      #645   +/-   ##
=========================================
  Coverage   100.00%   100.00%           
=========================================
  Files           18        18           
  Lines         2149      2149           
  Branches       245       245           
=========================================
  Hits          2149      2149

Flag	Coverage Δ
Python_3.10.14	`100.00% <ø> (ø)`
Python_3.11.9	`100.00% <ø> (ø)`
Python_3.12.4	`100.00% <ø> (ø)`
Python_3.13.0-beta.3	`?`
Python_3.13.0-beta.4	`100.00% <ø> (?)`
Python_3.8.18	`100.00% <ø> (ø)`
Python_3.9.19	`100.00% <ø> (ø)`

Flags with carried forward coverage won't be shown. Click here to find out more.

dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Aug 1, 2024

dependabot bot assigned ezio-melotti Aug 1, 2024

AA-Turner approved these changes Aug 1, 2024

View reviewed changes

ezio-melotti approved these changes Aug 1, 2024

View reviewed changes

ezio-melotti merged commit 4595b91 into main Aug 1, 2024
16 checks passed

ezio-melotti deleted the dependabot/pip/pip-2ae1602024 branch August 1, 2024 10:22

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump the pip group with 5 updates #645

Bump the pip group with 5 updates #645

dependabot bot commented on behalf of github Aug 1, 2024

codecov bot commented Aug 1, 2024 •

edited

Loading

Bump the pip group with 5 updates #645

Bump the pip group with 5 updates #645

Conversation

dependabot bot commented on behalf of github Aug 1, 2024

3.10.0

Bug fixes

3.10.0 (2024-07-30)

Bug fixes

v5.4.0 (2024-07-15)

2.12.0

Various fixes & improvements

2.11.0

Various fixes & improvements

2.12.0

Various fixes & improvements

2.11.0

Various fixes & improvements

8.3.2

pytest 8.3.2 (2024-07-24)

Bug fixes

8.3.1

pytest 8.3.1 (2024-07-20)

8.3.0

pytest 8.3.0 (2024-07-20)

New features

pytest-asyncio 0.23.8

0.23.8 (2024-07-17)

Known issues

codecov bot commented Aug 1, 2024 • edited Loading

Codecov Report

codecov bot commented Aug 1, 2024 •

edited

Loading