pyup: Scheduled weekly dependency update for week 18

[pyup-bot]

Update pip from 21.0.1 to 21.1.1.

Changelog

21.1.1

===================

Deprecations and Removals
-------------------------

- Temporarily set the new "Value for ... does not match" location warnings level
to *DEBUG*, to hide them from casual users. This prepares pip 21.1 for CPython
inclusion, while pip maintainers digest the first intake of location mismatch
issues for the ``distutils``-``sysconfig`` trasition. (`9912 <https://github.com/pypa/pip/issues/9912>`_)

Bug Fixes
---------

- This change fixes a bug on Python <=3.6.1 with a Typing feature added in 3.6.2 (`9831 <https://github.com/pypa/pip/issues/9831>`_)
- Fix compatibility between distutils and sysconfig when the project name is unknown outside of a virtual environment. (`9838 <https://github.com/pypa/pip/issues/9838>`_)
- Fix Python 3.6 compatibility when a PEP 517 build requirement itself needs to be
built in an isolated environment. (`9878 <https://github.com/pypa/pip/issues/9878>`_)

21.1

=================

Process
-------

- Start installation scheme migration from ``distutils`` to ``sysconfig``. A
warning is implemented to detect differences between the two implementations to
encourage user reports, so we can avoid breakages before they happen.

Features
--------

- Add the ability for the new resolver to process URL constraints. (`8253 <https://github.com/pypa/pip/issues/8253>`_)
- Add a feature ``--use-feature=in-tree-build`` to build local projects in-place
when installing. This is expected to become the default behavior in pip 21.3;
see `Installing from local packages <https://pip.pypa.io/en/stable/user_guide/#installing-from-local-packages>`_
for more information. (`9091 <https://github.com/pypa/pip/issues/9091>`_)
- Bring back the "(from versions: ...)" message, that was shown on resolution failures. (`9139 <https://github.com/pypa/pip/issues/9139>`_)
- Add support for editable installs for project with only setup.cfg files. (`9547 <https://github.com/pypa/pip/issues/9547>`_)
- Improve performance when picking the best file from indexes during ``pip install``. (`9748 <https://github.com/pypa/pip/issues/9748>`_)
- Warn instead of erroring out when doing a PEP 517 build in presence of
``--build-option``. Warn when doing a PEP 517 build in presence of
``--global-option``. (`9774 <https://github.com/pypa/pip/issues/9774>`_)

Bug Fixes
---------

- Fixed ``--target`` to work with ``--editable`` installs. (`4390 <https://github.com/pypa/pip/issues/4390>`_)
- Add a warning, discouraging the usage of pip as root, outside a virtual environment. (`6409 <https://github.com/pypa/pip/issues/6409>`_)
- Ignore ``.dist-info`` directories if the stem is not a valid Python distribution
name, so they don't show up in e.g. ``pip freeze``. (`7269 <https://github.com/pypa/pip/issues/7269>`_)
- Only query the keyring for URLs that actually trigger error 401.
This prevents an unnecessary keyring unlock prompt on every pip install
invocation (even with default index URL which is not password protected). (`8090 <https://github.com/pypa/pip/issues/8090>`_)
- Prevent packages already-installed alongside with pip to be injected into an
isolated build environment during build-time dependency population. (`8214 <https://github.com/pypa/pip/issues/8214>`_)
- Fix ``pip freeze`` permission denied error in order to display an understandable error message and offer solutions. (`8418 <https://github.com/pypa/pip/issues/8418>`_)
- Correctly uninstall script files (from setuptools' ``scripts`` argument), when installed with ``--user``. (`8733 <https://github.com/pypa/pip/issues/8733>`_)
- New resolver: When a requirement is requested both via a direct URL
(``req  URL``) and via version specifier with extras (``req[extra]``), the
resolver will now be able to use the URL to correctly resolve the requirement
with extras. (`8785 <https://github.com/pypa/pip/issues/8785>`_)
- New resolver: Show relevant entries from user-supplied constraint files in the
error message to improve debuggability. (`9300 <https://github.com/pypa/pip/issues/9300>`_)
- Avoid parsing version to make the version check more robust against lousily
debundled downstream distributions. (`9348 <https://github.com/pypa/pip/issues/9348>`_)
- ``--user`` is no longer suggested incorrectly when pip fails with a permission
error in a virtual environment. (`9409 <https://github.com/pypa/pip/issues/9409>`_)
- Fix incorrect reporting on ``Requires-Python`` conflicts. (`9541 <https://github.com/pypa/pip/issues/9541>`_)
- Make wheel compatibility tag preferences more important than the build tag (`9565 <https://github.com/pypa/pip/issues/9565>`_)
- Fix pip to work with warnings converted to errors. (`9779 <https://github.com/pypa/pip/issues/9779>`_)
- **SECURITY**: Stop splitting on unicode separators in git references,
which could be maliciously used to install a different revision on the
repository. (`9827 <https://github.com/pypa/pip/issues/9827>`_)

Vendored Libraries
------------------

- Update urllib3 to 1.26.4 to fix CVE-2021-28363
- Remove contextlib2.
- Upgrade idna to 3.1
- Upgrade pep517 to 0.10.0
- Upgrade vendored resolvelib to 0.7.0.
- Upgrade tenacity to 7.0.0

Improved Documentation
----------------------

- Update "setuptools extras" link to match upstream. (`4822829F-6A45-4202-87BA-A80482DF6D4E <https://github.com/pypa/pip/issues/4822829F-6A45-4202-87BA-A80482DF6D4E>`_)
- Improve SSL Certificate Verification docs and ``--cert`` help text. (`6720 <https://github.com/pypa/pip/issues/6720>`_)
- Add a section in the documentation to suggest solutions to the ``pip freeze`` permission denied issue. (`8418 <https://github.com/pypa/pip/issues/8418>`_)
- Add warning about ``--extra-index-url`` and dependency confusion (`9647 <https://github.com/pypa/pip/issues/9647>`_)
- Describe ``--upgrade-strategy`` and direct requirements explicitly; add a brief
example. (`9692 <https://github.com/pypa/pip/issues/9692>`_)

Links

• PyPI: https://pypi.org/project/pip
• Changelog: https://pyup.io/changelogs/pip/
• Homepage: https://pip.pypa.io/

Update virtualenv from 20.4.3 to 20.4.4.

Changelog

20.4.4

~~~~~~~~~~~~~~~~~
- Built in discovery class is always preferred over plugin supplied classes. (`2087 <https://github.com/pypa/virtualenv/issues/2087>`_)
- Upgrade embeded setuptools to ``56.0.0`` by :user:`gaborbernat`. (`2094 <https://github.com/pypa/virtualenv/issues/2094>`_)

Links

• PyPI: https://pypi.org/project/virtualenv
• Changelog: https://pyup.io/changelogs/virtualenv/
• Homepage: https://virtualenv.pypa.io/

Update django-extensions from 3.1.2 to 3.1.3.

Changelog

3.1.3

-----

Changes:
- Fix: Django 3.2, Run tests against Django 3.2
- Fix: Django 3.2, Handle warnings for default_app_config (1654)
- Fix: sqldiff, Fix for missing field/index in model case

Links

• PyPI: https://pypi.org/project/django-extensions
• Changelog: https://pyup.io/changelogs/django-extensions/
• Repo: http://github.com/django-extensions/django-extensions

Update drf-flex-fields from 0.8.9 to 0.9.0.

Changelog

0.9.0

- Allows fully qualified import strings for lazy serializer classes.

Links

• PyPI: https://pypi.org/project/drf-flex-fields
• Changelog: https://pyup.io/changelogs/drf-flex-fields/
• Repo: https://github.com/rsinger86/drf-flex-fields

Update Pygments from 2.8.1 to 2.9.0.

Changelog

2.9.0

-------------
(released May 3rd, 2021)

- Added lexers:

* APDL, gcode (1714)
* Kuin (1300)
* NestedText (1578)
* OMG IDL (1595)
* TEAL (1671)
* ThingsDB (1295)
* WebAssembly (1416, 1564)

- Updated lexers:

* AMDGPU (1717, 1775)
* APL (1747)
* C/C++: Improve namespace handling (1722, 1561, 1719, 1746)
* Chapel (1743)
* Coq (1721)
* Cython (853)
* Groovy (1765)
* JavaScript (1741)
* Julia (1715)
* Octave: Allow multiline and block-percent comments (1726)
* PowerShell: Improve lexing of ``:`` (1682, 1758)
* PromQL (1783)
* Python: Improve float parsing (1768, 1740)
* Rust (1061)
* Scala: Rewrite to support Scala3 (1694, 1035, 1121)
* Swift (1767)
* Terraform: Support 0.14 syntax (1756)
* Velocity: Detect multi-line patterns (1776)

- Add Pango formatter (1727)
- Autopygmentize uses ``file`` first instead of ``pygments -N`` (1786)
- Fix links (1716)
- Fix issue with LaTeX formatter and ``minted`` (1734, 1735, 1736, 1737)
- Improve alias order (1780)
- Improve line number colors (1779, 1778)
- Fix CTag related issue (1724)
- Recognize ``.leex`` as Elixir templates

- Updated `filename` handling in HTML formatter if `linenos='table'` (1757)

* Previously the filename would be emitted within the `<td>` holding the
 code, but outside the `<pre>`. This would invariably break the alignment
 with line numbers.
* Now if `filename` is specified, a separate `<tr>` is emitted before the
 table content which contains a single `<th>` with `colspan=2` so it
 spans both the line number and code columns. The filename is still
 within `<span class="filename">...</span>` so any existing styles
 should still apply, although the CSS path may need to change.
* For an example of the new output format see
 `table_cls_step_1_start_1_special_0_noanchor_filename.html`
 in the `tests/html_linenos_expected_output/` directory.
* For more details and discussion see the issue
 https://github.com/pygments/pygments/issues/1757

- Added styles:

* Gruvbox light+dark (1763)

Links

• PyPI: https://pypi.org/project/pygments
• Changelog: https://pyup.io/changelogs/pygments/
• Homepage: https://pygments.org/

Update GitPython from 3.1.14 to 3.1.15.

The bot wasn't able to find a changelog for this release. Got an idea?

Links

• PyPI: https://pypi.org/project/gitpython
• Repo: https://github.com/gitpython-developers/GitPython
• Docs: https://pythonhosted.org/GitPython/

Update elasticsearch from 7.12.0 to 7.12.1.

The bot wasn't able to find a changelog for this release. Got an idea?

Links

• PyPI: https://pypi.org/project/elasticsearch
• Changelog: https://pyup.io/changelogs/elasticsearch/
• Repo: https://github.com/elastic/elasticsearch-py

Update nltk from 3.6.1 to 3.6.2.

Changelog

3.6.2

Ruben Cartuyvels, Rob Malouf, Dalton Pearson, Danny Sepler

Links

• PyPI: https://pypi.org/project/nltk
• Changelog: https://pyup.io/changelogs/nltk/
• Homepage: http://nltk.org/

Update watchdog from 2.0.2 to 2.0.3.

Changelog

2.0.3

~~~~~

2021-04-22 • `full history <https://github.com/gorakhargosh/watchdog/compare/v2.0.2...v2.0.3>`__

- [mac] Use ``logger.debug()`` instead of ``logger.info()`` (`774 <https://github.com/gorakhargosh/watchdog/pull/774>`_)
- Updated documentation links (`777 <https://github.com/gorakhargosh/watchdog/pull/777>`_)
- Thanks to our beloved contributors: globau, imba-tjd, BoboTiG

Links

• PyPI: https://pypi.org/project/watchdog
• Changelog: https://pyup.io/changelogs/watchdog/
• Repo: https://github.com/gorakhargosh/watchdog
• Docs: https://pythonhosted.org/watchdog/

Update pytest-mock from 3.5.1 to 3.6.0.

Changelog

3.6.0

------------------

* pytest-mock no longer supports Python 3.5.

* Correct type annotations for ``mocker.patch.object`` to also include the string form.
Thanks `plannigan`_ for the PR (`235`_).

* ``reset_all`` now supports ``return_value`` and ``side_effect`` keyword arguments. Thanks `alex-marty`_ for the PR (`214`_).

.. _alex-marty: https://github.com/alex-marty
.. _plannigan: https://github.com/plannigan
.. _214: https://github.com/pytest-dev/pytest-mock/pull/214
.. _235: https://github.com/pytest-dev/pytest-mock/pull/235

Links

• PyPI: https://pypi.org/project/pytest-mock
• Changelog: https://pyup.io/changelogs/pytest-mock/
• Repo: https://github.com/pytest-dev/pytest-mock/

Update requests-mock from 1.8.0 to 1.9.2.

Changelog

1.9.1

Bug Fix on 1.9.0 release: 

* Added py.typed file required to make type annotations work.

1.9.0

A number of small improvements: 

* Feature: Adds type hints for python 3. 94 
* Fixes Bug: Handle whitespace encoding in URL. 158 
* Fixes Bug: Allow subclassing the mocker object. 160

Links

• PyPI: https://pypi.org/project/requests-mock
• Changelog: https://pyup.io/changelogs/requests-mock/
• Docs: https://requests-mock.readthedocs.io/

[humitos]

We can merge it after today's deploy. If we skip it, we can merge it anyways.

[stsewd]

We can merge it after today's deploy. If we skip it, we can merge it anyways.

Already merged it 😆 I thought we were skipping deploy for this week.