Skip to content
This repository has been archived by the owner on Jun 27, 2023. It is now read-only.

Bump pip from 20.2.3 to 20.2.4 in /.github/workflows #202

Merged

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Oct 19, 2020

Bumps pip from 20.2.3 to 20.2.4.

Changelog

Sourced from pip's changelog.

20.2.4 (2020-10-16)

Deprecations and Removals

  • Document that certain removals can be fast tracked. ([#8417](https://github.com/pypa/pip/issues/8417) <https://github.com/pypa/pip/issues/8417>_)
  • Document that Python versions are generally supported until PyPI usage falls below 5%. ([#8927](https://github.com/pypa/pip/issues/8927) <https://github.com/pypa/pip/issues/8927>_)

Features

  • New resolver: Avoid accessing indexes when the installed candidate is preferred and considered good enough. ([#8023](https://github.com/pypa/pip/issues/8023) <https://github.com/pypa/pip/issues/8023>_)
  • Improve error message friendliness when an environment has packages with corrupted metadata. ([#8676](https://github.com/pypa/pip/issues/8676) <https://github.com/pypa/pip/issues/8676>_)
  • Cache package listings on index packages so they are guarenteed to stay stable during a pip command session. This also improves performance when a index page is accessed multiple times during the command session. ([#8905](https://github.com/pypa/pip/issues/8905) <https://github.com/pypa/pip/issues/8905>_)
  • New resolver: Tweak resolution logic to improve user experience when user-supplied requirements conflict. ([#8924](https://github.com/pypa/pip/issues/8924) <https://github.com/pypa/pip/issues/8924>_)

Bug Fixes

  • New resolver: Correctly respect Requires-Python metadata to reject incompatible packages in --no-deps mode. ([#8758](https://github.com/pypa/pip/issues/8758) <https://github.com/pypa/pip/issues/8758>_)
  • New resolver: Pick up hash declarations in constraints files and use them to filter available distributions. ([#8792](https://github.com/pypa/pip/issues/8792) <https://github.com/pypa/pip/issues/8792>_)
  • New resolver: If a package appears multiple times in user specification with different --hash options, only hashes that present in all specifications should be allowed. ([#8839](https://github.com/pypa/pip/issues/8839) <https://github.com/pypa/pip/issues/8839>_)

Improved Documentation

  • Add ux documentation ([#8807](https://github.com/pypa/pip/issues/8807) <https://github.com/pypa/pip/issues/8807>_)
Commits
  • 57dd580 Bump for release
  • 6a8956d Merge pull request #8932 from uranusjr/new-resolver-lazy-sequence
  • 4aec7e8 Merge pull request #8758 from uranusjr/new-resolver-requires-python-when-no-deps
  • 0a637fa Merge pull request #8942 from brainwane/docs-8661
  • c8533f0 Merge pull request #8933 from brainwane/put-key-links-on-front-page
  • 74f48cf Merge pull request #8927 from hugovk/document-python-support-policy
  • ff5a9b5 Merge pull request #8926 from uranusjr/dont-crash-on-check
  • ae4d271 Merge pull request #8924 from uranusjr/new-resolver-try-user-requested-combin...
  • 314de5a Merge pull request #8912 from uranusjr/cache-found-candidates
  • e7e62d8 Merge pull request #8873 from hugovk/docs-3-months-deprecation
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [pip](https://github.com/pypa/pip) from 20.2.3 to 20.2.4.
- [Release notes](https://github.com/pypa/pip/releases)
- [Changelog](https://github.com/pypa/pip/blob/master/NEWS.rst)
- [Commits](pypa/pip@20.2.3...20.2.4)

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Oct 19, 2020
@github-actions github-actions bot merged commit 7354d82 into master Oct 19, 2020
@dependabot dependabot bot deleted the dependabot/pip/dot-github/workflows/pip-20.2.4 branch October 19, 2020 05:46
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
dependencies Pull requests that update a dependency file python Pull requests that update Python code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants