Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

pyup: Scheduled weekly dependency update for week 43 #6334

Merged
merged 11 commits into from Oct 29, 2019

Conversation

@pyup-bot
Copy link
Contributor

pyup-bot commented Oct 28, 2019

Update pip from 19.2.3 to 19.3.1.

Changelog

19.3.1

===================

Features
--------

- Document Python 3.8 support. (`7219 <https://github.com/pypa/pip/issues/7219>`_)

Bug Fixes
---------

- Fix bug that prevented installation of PEP 517 packages without ``setup.py``. (`6606 <https://github.com/pypa/pip/issues/6606>`_)

19.3

=================

Deprecations and Removals
-------------------------

- Remove undocumented support for un-prefixed URL requirements pointing
to SVN repositories. Users relying on this can get the original behavior
by prefixing their URL with ``svn+`` (which is backwards-compatible). (`7037 <https://github.com/pypa/pip/issues/7037>`_)
- Remove the deprecated ``--venv`` option from ``pip config``. (`7163 <https://github.com/pypa/pip/issues/7163>`_)

Features
--------

- Print a better error message when ``--no-binary`` or ``--only-binary`` is given
an argument starting with ``-``. (`3191 <https://github.com/pypa/pip/issues/3191>`_)
- Make ``pip show`` warn about packages not found. (`6858 <https://github.com/pypa/pip/issues/6858>`_)
- Support including a port number in ``--trusted-host`` for both HTTP and HTTPS. (`6886 <https://github.com/pypa/pip/issues/6886>`_)
- Redact single-part login credentials from URLs in log messages. (`6891 <https://github.com/pypa/pip/issues/6891>`_)
- Implement manylinux2014 platform tag support.  manylinux2014 is the successor
to manylinux2010.  It allows carefully compiled binary wheels to be installed
on compatible Linux platforms.  The manylinux2014 platform tag definition can
be found in `PEP599 <https://www.python.org/dev/peps/pep-0599/>`_. (`7102 <https://github.com/pypa/pip/issues/7102>`_)

Bug Fixes
---------

- Abort installation if any archive contains a file which would be placed
outside the extraction location. (`3907 <https://github.com/pypa/pip/issues/3907>`_)
- pip's CLI completion code no longer prints a Traceback if it is interrupted. (`3942 <https://github.com/pypa/pip/issues/3942>`_)
- Correct inconsistency related to the ``hg+file`` scheme. (`4358 <https://github.com/pypa/pip/issues/4358>`_)
- Fix ``rmtree_errorhandler`` to skip non-existing directories. (`4910 <https://github.com/pypa/pip/issues/4910>`_)
- Ignore errors copying socket files for local source installs (in Python 3). (`5306 <https://github.com/pypa/pip/issues/5306>`_)
- Fix requirement line parser to correctly handle PEP 440 requirements with a URL
pointing to an archive file. (`6202 <https://github.com/pypa/pip/issues/6202>`_)
- The ``pip-wheel-metadata`` directory does not need to persist between invocations of pip, use a temporary directory instead of the current ``setup.py`` directory. (`6213 <https://github.com/pypa/pip/issues/6213>`_)
- Fix ``--trusted-host`` processing under HTTPS to trust any port number used
with the host. (`6705 <https://github.com/pypa/pip/issues/6705>`_)
- Switch to new ``distlib`` wheel script template. This should be functionally
equivalent for end users. (`6763 <https://github.com/pypa/pip/issues/6763>`_)
- Skip copying .tox and .nox directories to temporary build directories (`6770 <https://github.com/pypa/pip/issues/6770>`_)
- Fix handling of tokens (single part credentials) in URLs. (`6795 <https://github.com/pypa/pip/issues/6795>`_)
- Fix a regression that caused ``~`` expansion not to occur in ``--find-links``
paths. (`6804 <https://github.com/pypa/pip/issues/6804>`_)
- Fix bypassed pip upgrade warning on Windows. (`6841 <https://github.com/pypa/pip/issues/6841>`_)
- Fix 'm' flag erroneously being appended to ABI tag in Python 3.8 on platforms that do not provide SOABI (`6885 <https://github.com/pypa/pip/issues/6885>`_)
- Hide security-sensitive strings like passwords in log messages related to
version control system (aka VCS) command invocations. (`6890 <https://github.com/pypa/pip/issues/6890>`_)
- Correctly uninstall symlinks that were installed in a virtualenv,
by tools such as ``flit install --symlink``. (`6892 <https://github.com/pypa/pip/issues/6892>`_)
- Don't fail installation using pip.exe on Windows when pip wouldn't be upgraded. (`6924 <https://github.com/pypa/pip/issues/6924>`_)
- Use canonical distribution names when computing ``Required-By`` in ``pip show``. (`6947 <https://github.com/pypa/pip/issues/6947>`_)
- Don't use hardlinks for locking selfcheck state file. (`6954 <https://github.com/pypa/pip/issues/6954>`_)
- Ignore "require_virtualenv" in ``pip config`` (`6991 <https://github.com/pypa/pip/issues/6991>`_)
- Fix ``pip freeze`` not showing correct entry for mercurial packages that use subdirectories. (`7071 <https://github.com/pypa/pip/issues/7071>`_)
- Fix a crash when ``sys.stdin`` is set to ``None``, such as on AWS Lambda. (`7118 <https://github.com/pypa/pip/issues/7118>`_, `7119 <https://github.com/pypa/pip/issues/7119>`_)

Vendored Libraries
------------------

- Upgrade certifi to 2019.9.11
- Add contextlib2 0.6.0 as a vendored dependency.
- Remove Lockfile as a vendored dependency.
- Upgrade msgpack to 0.6.2
- Upgrade packaging to 19.2
- Upgrade pep517 to 0.7.0
- Upgrade pyparsing to 2.4.2
- Upgrade pytoml to 0.1.21
- Upgrade setuptools to 41.4.0
- Upgrade urllib3 to 1.25.6

Improved Documentation
----------------------

- Document caveats for UNC paths in uninstall and add .pth unit tests. (`6516 <https://github.com/pypa/pip/issues/6516>`_)
- Add architectural overview documentation. (`6637 <https://github.com/pypa/pip/issues/6637>`_)
- Document that ``--ignore-installed`` is dangerous. (`6794 <https://github.com/pypa/pip/issues/6794>`_)
Links

Update virtualenv from 16.7.5 to 16.7.7.

Changelog

16.7.7

--------------------

Bugfixes
^^^^^^^^

- * fix virtualenv creation when ``--no-pip`` argument used. (`1430 <https://github.com/pypa/virtualenv/issues/1430>`_)
- upgrade bundled pip from ``19.3`` to ``19.3.1`` (`1433 <https://github.com/pypa/virtualenv/issues/1433>`_)

16.7.6

--------------------

Bugfixes
^^^^^^^^

- fix to support for Python 3 on MacOS 10.15 provided by Xcode (`1402 <https://github.com/pypa/virtualenv/issues/1402>`_)
- bump bundled pip from ``19.2.3`` to ``19.3`` and setuptools from ``41.2.0`` to ``41.4.0`` (`1428 <https://github.com/pypa/virtualenv/issues/1428>`_)
Links

Update django-extensions from 2.2.3 to 2.2.5.

Changelog

2.2.5

-----

Changes:
- Improvement: travis, add Python 3.8
- Improvement: setup.py, update classifiers

2.2.4

-----

Changes:
- Improvement: RandomCharField, Support unique_together
- Improvement: export_emails, add settings for overriding queryset fields, order_by and the full_name function
Links

Update GitPython from 3.0.3 to 3.0.4.

Changelog

3.0.4

=============================================

see the following for details:
https://github.com/gitpython-developers/gitpython/milestone/31?closed=1
Links

Update orjson from 2.0.7 to 2.1.0.

Changelog

2.1.0

Added

- `orjson.dumps()` serializes `dataclasses.dataclass` instances if
`option=orjson.OPT_SERIALIZE_DATACLASS` is specified.
- `orjson.dumps()` accepts `orjson.OPT_UTC_Z` to serialize UTC as "Z" instead
of "+00:00".
- `orjson.dumps()` accepts `orjson.OPT_OMIT_MICROSECONDS` to not serialize
the `microseconds` attribute of `datetime.datetime` and `datetime.time`
instances.
- `orjson.loads()` accepts `bytearray`.

Changed

- Drop support for Python 3.5.
- Publish `manylinux2010` wheels instead of `manylinux1`.

2.0.11

Changed

- Publish Python 3.8 wheel for Linux.

2.0.10

Changed

- Performance improvements and lower memory usage in deserialization
by creating only one `str` object for repeated map keys.

2.0.9

Changed

- Minor performance improvements.

Fixed

- Fix inaccurate zero padding in serialization of microseconds on
`datetime.time` objects.

2.0.8

Fixed

- Fix inaccurate zero padding in serialization of microseconds on
`datetime.datetime` objects.
Links

Update django-crispy-forms from 1.7.2 to 1.8.0.

The bot wasn't able to find a changelog for this release. Got an idea?

Links

Update pillow from 6.2.0 to 6.2.1.

Changelog

6.2.1

------------------

- This is the last Pillow release to support Python 2.7 3642

- Add support for Python 3.8 4141
[hugovk]
Links

Update pytest from 5.2.1 to 5.2.2.

Changelog

5.2.2

=========================

Bug Fixes
---------

- `5206 <https://github.com/pytest-dev/pytest/issues/5206>`_: Fix ``--nf`` to not forget about known nodeids with partial test selection.


- `5906 <https://github.com/pytest-dev/pytest/issues/5906>`_: Fix crash with ``KeyboardInterrupt`` during ``--setup-show``.


- `5946 <https://github.com/pytest-dev/pytest/issues/5946>`_: Fixed issue when parametrizing fixtures with numpy arrays (and possibly other sequence-like types).


- `6044 <https://github.com/pytest-dev/pytest/issues/6044>`_: Properly ignore ``FileNotFoundError`` exceptions when trying to remove old temporary directories,
for instance when multiple processes try to remove the same directory (common with ``pytest-xdist``
for example).
Links

Update pytest-django from 3.5.1 to 3.6.0.

Changelog

3.6.0

------------------

Features
^^^^^^^^

* Rename test databases when running parallel Tox (678, 680)

Bugfixes
^^^^^^^^

* Django unittests: restore "debug" function (769, 771)

Misc
^^^^

* Improve/harden internal tests / infrastructure.
Links

Update pytest-mock from 1.11.1 to 1.11.2.

Changelog

1.11.2

-------------------

* The *pytest introspection follows* message is no longer shown
if there is no pytest introspection (`154`_).
Thanks `The-Compiler`_ for the report.

* ``mocker`` now raises a ``TypeError`` when used as a context-manager.
Thanks `binarymason`_ for the PR (`165`_).

.. _154: https://github.com/pytest-dev/pytest-mock/issues/154
.. _165: https://github.com/pytest-dev/pytest-mock/pull/165
.. _binarymason: https://github.com/binarymason
Links
@stsewd
stsewd approved these changes Oct 28, 2019
@@ -64,7 +64,7 @@ git+https://github.com/elastic/elasticsearch-dsl-py@97e3f756a8cacd1c863d3ced3d17
# ImportError: cannot import name 'Document'
django-elasticsearch-dsl==0.5.1 # pyup: ignore
selectolax==0.2.1
orjson==2.0.7
orjson==2.1.0

This comment has been minimized.

Copy link
@stsewd

stsewd Oct 28, 2019

Member

Command "python setup.py egg_info" failed with error code 1 in /tmp/pip-install-ilw45mqk/orjson/

That's from travis

This comment has been minimized.

Copy link
@humitos

humitos Oct 29, 2019

Member

I ignored this upgrade and triggered a new test on travis. Let's see if it pass. We can investigate later how to fix this if needed.

It makes TravisCI to fail and none of the tests are ran.
@humitos humitos merged commit 3634827 into master Oct 29, 2019
3 checks passed
3 checks passed
continuous-documentation/read-the-docs Read the Docs build succeeded!
Details
continuous-integration/travis-ci/pr The Travis CI build passed
Details
pyup.io/safety-ci No dependencies with known security vulnerabilities.
Details
@humitos humitos deleted the pyup/scheduled-update-2019-10-28 branch Oct 29, 2019
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
3 participants
You can’t perform that action at this time.