Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

build(deps): bump the all group across 2 directories with 5 updates #33

Closed
wants to merge 1 commit into from
Closed

build(deps): bump the all group across 2 directories with 5 updates #33

wants to merge 1 commit into from

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Aug 1, 2024

Bumps the all group with 3 updates in the /bookmarkmgr directory: aiohttp, mypy and jinxed.
Bumps the all group with 2 updates in the /ytm directory: yt-dlp and ytmusicapi.

Updates aiohttp from 3.9.5 to 3.10.0

Release notes

Sourced from aiohttp's releases.

3.10.0

Bug fixes

  • Fixed server response headers for Content-Type and Content-Encoding for static compressed files -- by :user:steverep.

    Server will now respond with a Content-Type appropriate for the compressed file (e.g. "application/gzip"), and omit the Content-Encoding header. Users should expect that most clients will no longer decompress such responses by default.

    Related issues and pull requests on GitHub: #4462.

  • Fixed duplicate cookie expiration calls in the CookieJar implementation

    Related issues and pull requests on GitHub: #7784.

  • Adjusted FileResponse to check file existence and access when preparing the response -- by :user:steverep.

    The :py:class:~aiohttp.web.FileResponse class was modified to respond with 403 Forbidden or 404 Not Found as appropriate. Previously, it would cause a server error if the path did not exist or could not be accessed. Checks for existence, non-regular files, and permissions were expected to be done in the route handler. For static routes, this now permits a compressed file to exist without its uncompressed variant and still be served. In addition, this changes the response status for files without read permission to 403, and for non-regular files from 404 to 403 for consistency.

    Related issues and pull requests on GitHub: #8182.

  • Fixed AsyncResolver to match ThreadedResolver behavior -- by :user:bdraco.

    On system with IPv6 support, the :py:class:~aiohttp.resolver.AsyncResolver would not fallback to providing A records when AAAA records were not available. Additionally, unlike the :py:class:~aiohttp.resolver.ThreadedResolver, the :py:class:~aiohttp.resolver.AsyncResolver did not handle link-local addresses correctly.

... (truncated)

Changelog

Sourced from aiohttp's changelog.

3.10.0 (2024-07-30)

Bug fixes

  • Fixed server response headers for Content-Type and Content-Encoding for static compressed files -- by :user:steverep.

    Server will now respond with a Content-Type appropriate for the compressed file (e.g. "application/gzip"), and omit the Content-Encoding header. Users should expect that most clients will no longer decompress such responses by default.

    Related issues and pull requests on GitHub: :issue:4462.

  • Fixed duplicate cookie expiration calls in the CookieJar implementation

    Related issues and pull requests on GitHub: :issue:7784.

  • Adjusted FileResponse to check file existence and access when preparing the response -- by :user:steverep.

    The :py:class:~aiohttp.web.FileResponse class was modified to respond with 403 Forbidden or 404 Not Found as appropriate. Previously, it would cause a server error if the path did not exist or could not be accessed. Checks for existence, non-regular files, and permissions were expected to be done in the route handler. For static routes, this now permits a compressed file to exist without its uncompressed variant and still be served. In addition, this changes the response status for files without read permission to 403, and for non-regular files from 404 to 403 for consistency.

    Related issues and pull requests on GitHub: :issue:8182.

  • Fixed AsyncResolver to match ThreadedResolver behavior -- by :user:bdraco.

    On system with IPv6 support, the :py:class:~aiohttp.resolver.AsyncResolver would not fallback to providing A records when AAAA records were not available.

... (truncated)

Commits

Updates mypy from 1.10.1 to 1.11.1

Changelog

Sourced from mypy's changelog.

Mypy Release Notes

Next release

Mypy 1.11

We’ve just uploaded mypy 1.11 to the Python Package Index (PyPI). Mypy is a static type checker for Python. This release includes new features, performance improvements and bug fixes. You can install it as follows:

python3 -m pip install -U mypy

You can read the full documentation for this release on Read the Docs.

Support Python 3.12 Syntax for Generics (PEP 695)

Mypy now supports the new type parameter syntax introduced in Python 3.12 (PEP 695). This feature is still experimental and must be enabled with the --enable-incomplete-feature=NewGenericSyntax flag, or with enable_incomplete_feature = NewGenericSyntax in the mypy configuration file. We plan to enable this by default in the next mypy feature release.

This example demonstrates the new syntax:

# Generic function
def f[T](https://github.com/python/mypy/blob/master/x: T) -> T: ...
reveal_type(f(1))  # Revealed type is 'int'
Generic class
class C[T]:
def init(self, x: T) -> None:
self.x = x
c = C('a')
reveal_type(c.x)  # Revealed type is 'str'
Type alias
type A[T] = C[list[T]]

This feature was contributed by Jukka Lehtosalo.

Support for functools.partial

Mypy now type checks uses of functools.partial. Previously mypy would accept arbitrary arguments.

This example will now produce an error:

from functools import partial
</tr></table>

... (truncated)

Commits

Updates jinxed from 1.2.1 to 1.3.0

Release notes

Sourced from jinxed's releases.

1.3.0

  • jinxed.win32.get_term() now checks if ENABLE_VIRTUAL_TERMINAL_INPUT is set for the console and doesn't set it if already enabled
    • Previously it was set without checking
    • Previous versions of Windows did not enable this feature by default, but newer versions do
Commits

Updates yt-dlp from 2024.7.7 to 2024.7.25

Release notes

Sourced from yt-dlp's releases.

yt-dlp 2024.07.25

Installation Discord Donate Documentation Nightly Master

A description of the various files are in the README

Extractor changes

Misc. changes

yt-dlp 2024.07.16

Installation Discord Donate Documentation Nightly Master

A description of the various files are in the README

Core changes

Extractor changes

... (truncated)

Changelog

Sourced from yt-dlp's changelog.

Changelog

2024.07.25

Extractor changes

Misc. changes

2024.07.16

Core changes

Extractor changes

Networking changes

Misc. changes

  • build

... (truncated)

Commits

Updates ytmusicapi from 1.7.3 to 1.8.0

Release notes

Sourced from ytmusicapi's releases.

v1.8.0

⚡ Breaking Changes

✨ Features

🐞 Fixes

Misc

Full Changelog: sigma67/ytmusicapi@1.7.5...1.8.0

v1.7.5

What's Changed

Full Changelog: sigma67/ytmusicapi@1.7.4...1.7.5

v1.7.4

What's Changed

New Contributors

Full Changelog: sigma67/ytmusicapi@1.7.3...1.7.4

Commits
  • a15d90c add get_user_videos (#632)
  • 858995e fix search filters test
  • 0f00260 fix search queries test
  • 6e0fd5e get_podcast: fix edge case when first subtitle is missing
  • 8d6dd11 fix test broken by added podcasts on oasis page
  • a606b70 library uploads: fix broken index after downloads rollout
  • 895ebb0 tests for tracks in collaborative playlists
  • 40ff2b4 get_playlist: fix artists for unnoficial videos (#627)
  • 14417db chore: Update pdm.lock (#614)
  • 2a0a45a re-add thumbnails to get_playlist (#626)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
build(deps): bump the all group across 2 directories with 5 updates
c6a6778 
Bumps the all group with 3 updates in the /bookmarkmgr directory: [aiohttp](https://github.com/aio-libs/aiohttp), [mypy](https://github.com/python/mypy) and [jinxed](https://github.com/Rockhopper-Technologies/jinxed).
Bumps the all group with 2 updates in the /ytm directory: [yt-dlp](https://github.com/yt-dlp/yt-dlp) and [ytmusicapi](https://github.com/sigma67/ytmusicapi).


Updates `aiohttp` from 3.9.5 to 3.10.0
- [Release notes](https://github.com/aio-libs/aiohttp/releases)
- [Changelog](https://github.com/aio-libs/aiohttp/blob/master/CHANGES.rst)
- [Commits](aio-libs/aiohttp@v3.9.5...v3.10.0)

Updates `mypy` from 1.10.1 to 1.11.1
- [Changelog](https://github.com/python/mypy/blob/master/CHANGELOG.md)
- [Commits](python/mypy@v1.10.1...v1.11.1)

Updates `jinxed` from 1.2.1 to 1.3.0
- [Release notes](https://github.com/Rockhopper-Technologies/jinxed/releases)
- [Commits](Rockhopper-Technologies/jinxed@1.2.1...1.3.0)

Updates `yt-dlp` from 2024.7.7 to 2024.7.25
- [Release notes](https://github.com/yt-dlp/yt-dlp/releases)
- [Changelog](https://github.com/yt-dlp/yt-dlp/blob/master/Changelog.md)
- [Commits](yt-dlp/yt-dlp@2024.07.07...2024.07.25)

Updates `ytmusicapi` from 1.7.3 to 1.8.0
- [Release notes](https://github.com/sigma67/ytmusicapi/releases)
- [Commits](sigma67/ytmusicapi@1.7.3...1.8.0)

---
updated-dependencies:
- dependency-name: aiohttp
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: mypy
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: jinxed
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: yt-dlp
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: ytmusicapi
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Aug 1, 2024
@lubo
Copy link
Owner

lubo commented Aug 1, 2024

Closing in favor of #35 and #36.

@lubo lubo closed this Aug 1, 2024
@dependabot Dependabot
Copy link
Contributor Author

dependabot bot commented on behalf of github Aug 1, 2024

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

@dependabot dependabot bot deleted the dependabot/pip/bookmarkmgr/master/all-75c281db94 branch August 1, 2024 21:34
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
dependencies Pull requests that update a dependency file python Pull requests that update Python code
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
1 participant
@lubo