Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Bump the poetry-dependencies group with 17 updates #36

Open
wants to merge 1 commit into
base: main
Choose a base branch
from
Open

Bump the poetry-dependencies group with 17 updates #36

wants to merge 1 commit into from

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jan 1, 2025

Bumps the poetry-dependencies group with 17 updates:

Package From To
click 8.1.7 8.1.8
numpy 2.1.3 2.2.1
coverage 7.6.8 7.6.10
mypy 1.13.0 1.14.1
ruff 0.8.1 0.8.4
pytest 8.3.3 8.3.4
anyio 4.6.2.post1 4.7.0
certifi 2024.8.30 2024.12.14
charset-normalizer 3.4.0 3.4.1
identify 2.6.3 2.6.4
ipython 8.30.0 8.31.0
jinja2 3.1.4 3.1.5
ruamel-yaml 0.18.6 0.18.7
starlette 0.41.3 0.45.1
urllib3 2.2.3 2.3.0
uvicorn 0.32.1 0.34.0
watchfiles 1.0.0 1.0.3

Updates click from 8.1.7 to 8.1.8

Release notes

Sourced from click's releases.

8.1.8

This is the Click 8.1.8 fix release, which fixes bugs but does not otherwise change behavior and should not result in breaking changes compared to the latest feature release.

PyPI: https://pypi.org/project/click/8.1.8/ Changes: https://click.palletsprojects.com/en/stable/changes/#version-8-1-8 Milestone https://github.com/pallets/click/milestones/23?closed=1

  • Fix an issue with type hints for click.open_file(). #2717
  • Fix issue where error message for invalid click.Path displays on multiple lines. #2697
  • Fixed issue that prevented a default value of "" from being displayed in the help for an option. #2500
  • The test runner handles stripping color consistently on Windows. #2705
  • Show correct value for flag default when using default_map. #2632
  • Fix click.echo(color=...) passing color to coloroma so it can be forced on Windows. #2606.
  • More robust bash version check, fixing problem on Windows with git-bash. #2638
  • Cache the help option generated by the help_option_names setting to respect its eagerness. #2811
  • Replace uses of os.system with subprocess.Popen. #1476
  • Exceptions generated during a command will use the context's color setting when being displayed. #2193
  • Error message when defining option with invalid name is more descriptive. #2452
  • Refactor code generating default --help option to deduplicate code. #2563
  • Test CLIRunner resets patched _compat.should_strip_ansi. #2732
Changelog

Sourced from click's changelog.

Version 8.1.8

Unreleased

  • Fix an issue with type hints for click.open_file(). :issue:2717
  • Fix issue where error message for invalid click.Path displays on multiple lines. :issue:2697
  • Fixed issue that prevented a default value of "" from being displayed in the help for an option. :issue:2500
  • The test runner handles stripping color consistently on Windows. :issue:2705
  • Show correct value for flag default when using default_map. :issue:2632
  • Fix click.echo(color=...) passing color to coloroma so it can be forced on Windows. :issue:2606.
Commits

Updates numpy from 2.1.3 to 2.2.1

Release notes

Sourced from numpy's releases.

2.2.1 (DEC 21, 2024)

NumPy 2.2.1 Release Notes

NumPy 2.2.1 is a patch release following 2.2.0. It fixes bugs found after the 2.2.0 release and has several maintenance pins to work around upstream changes.

There was some breakage in downstream projects following the 2.2.0 release due to updates to NumPy typing. Because of problems due to MyPy defects, we recommend using basedpyright for type checking, it can be installed from PyPI. The Pylance extension for Visual Studio Code is also based on Pyright. Problems that persist when using basedpyright should be reported as issues on the NumPy github site.

This release supports Python 3.10-3.13.

Contributors

A total of 9 people contributed to this release. People with a "+" by their names contributed a patch for the first time.

  • Charles Harris
  • Joren Hammudoglu
  • Matti Picus
  • Nathan Goldbaum
  • Peter Hawkins
  • Simon Altrogge
  • Thomas A Caswell
  • Warren Weckesser
  • Yang Wang +

Pull requests merged

A total of 12 pull requests were merged for this release.

  • #27935: MAINT: Prepare 2.2.x for further development
  • #27950: TEST: cleanups
  • #27958: BUG: fix use-after-free error in npy_hashtable.cpp (#27955)
  • #27959: BLD: add missing include
  • #27982: BUG:fix compile error libatomic link test to meson.build
  • #27990: TYP: Fix falsely rejected value types in ndarray.__setitem__
  • #27991: MAINT: Don't wrap #include <Python.h> with extern "C"
  • #27993: BUG: Fix segfault in stringdtype lexsort
  • #28006: MAINT: random: Tweak module code in mtrand.pyx to fix a Cython...
  • #28007: BUG: Cython API was missing NPY_UINTP.
  • #28021: CI: pin scipy-doctest to 1.5.1
  • #28044: TYP: allow None in operand sequence of nditer

Checksums

... (truncated)

Commits
  • 7469245 Merge pull request #28047 from charris/prepare-2.2.1
  • acb051e REL: Prepare for the NumPy 2.2.1 release [wheel build]
  • 28a091a Merge pull request #28044 from charris/backport-28039
  • 723605b TST: Add test for allowing None in operand sequence passed to nditer
  • 554739e TYP: allow None in operand sequence of nditer
  • 31bc4c8 Merge pull request #28021 from charris/backport-28020
  • 32f52a3 CI: pin scipy-doctest to 1.5.1 (#28020)
  • 6219aeb Merge pull request #28007 from charris/backport-28005
  • eb7071c Merge pull request #28006 from charris/backport-28003
  • 4f82c32 BUG: Cython API was missing NPY_UINTP.
  • Additional commits viewable in compare view

Updates coverage from 7.6.8 to 7.6.10

Changelog

Sourced from coverage's changelog.

Version 7.6.10 — 2024-12-26

  • Fix: some descriptions of missing branches in HTML and LCOV reports were incorrect when multi-line statements were involved (issue 1874_ and issue 1875_). These are now fixed.

  • Fix: Python 3.14 defers evaluation of annotations <pep649_>_ by moving them into separate code objects. That code is rarely executed, so coverage.py would mark them as missing, as reported in issue 1908_. Now they are ignored by coverage automatically.

  • Fixed an obscure and mysterious problem on PyPy 3.10 seemingly involving mocks, imports, and trace functions: issue 1902_. To be honest, I don't understand the problem or the solution, but git bisect helped find it, and now it's fixed.

  • Docs: re-wrote the :ref:subprocess page to put multiprocessing first and to highlight the correct use of :class:multiprocessing.Pool <python:multiprocessing.pool.Pool>.

.. _issue 1874: nedbat/coveragepy#1874 .. _issue 1875: nedbat/coveragepy#1875 .. _issue 1902: nedbat/coveragepy#1902 .. _issue 1908: nedbat/coveragepy#1908 .. _pep649: https://docs.python.org/3.14/whatsnew/3.14.html#pep-649-deferred-evaluation-of-annotations

.. _changes_7-6-9:

Version 7.6.9 — 2024-12-06

  • Fix: Tomas Uribe fixed <pull 1901_>_ a performance problem in the XML report. Large code bases should produce XML reports much faster now.

.. _pull 1901: nedbat/coveragepy#1901

.. _changes_7-6-8:

Commits
  • f0dcf65 docs: sample HTML for 7.6.10
  • 0f26f35 docs: prep for 7.6.10
  • 81c5e43 docs: rewrite the subprocess page
  • 878410c chore: make doc_upgrade
  • f1d320d chore: make upgrade
  • 67f1440 debug: this condition is never true. really?
  • c85eaba fix: multi-line statements no longer confuse branch target descriptions. #187...
  • 73e58fa refactor: clarify the code that fixes with-statement exits
  • e16c9cc typo: backslask
  • 865fd7f chore: bump the action-dependencies group with 4 updates (#1909)
  • Additional commits viewable in compare view

Updates mypy from 1.13.0 to 1.14.1

Changelog

Sourced from mypy's changelog.

Mypy Release Notes

Next release

Drop Support for Python 3.8

Mypy no longer supports running with Python 3.8, which has reached end-of-life. When running mypy with Python 3.9+, it is still possible to type check code that needs to support Python 3.8 with the --python-version 3.8 argument. Support for this will be dropped in the first half of 2025!

Contributed by Marc Mueller (PR 17492).

Mypyc accelerated mypy wheels for aarch64

Mypy can compile itself to C extension modules using mypyc. This makes mypy 3-5x faster than if mypy is interpreted with pure Python. We now build and upload mypyc accelerated mypy wheels for manylinux_aarch64 to PyPI, making it easy for users on such platforms to realise this speedup.

Contributed by Christian Bundy (PR mypy_mypyc-wheels#76)

--strict-bytes

By default, mypy treats an annotation of bytes as permitting bytearray and memoryview. PEP 688 specified the removal of this special case. Use this flag to disable this behavior. --strict-bytes will be enabled by default in mypy 2.0.

Contributed by Ali Hamdan (PR 18137) and Shantanu Jain (PR 13952).

Improvements to partial type handling in loops

This change results in mypy better modelling control flow within loops and hence detecting several issues it previously did not detect. In some cases, this change may require use of an additional explicit annotation of a variable.

Contributed by Christoph Tyralla (PR 18180).

(Speaking of partial types, another reminder that mypy plans on enabling --local-partial-types by default in mypy 2.0).

Mypy 1.14

We’ve just uploaded mypy 1.14 to the Python Package Index (PyPI). Mypy is a static type checker for Python. This release includes new features and bug fixes. You can install it as follows:

python3 -m pip install -U mypy

... (truncated)

Commits

Updates ruff from 0.8.1 to 0.8.4

Release notes

Sourced from ruff's releases.

0.8.4

Release Notes

Preview features

  • [airflow] Extend AIR302 with additional functions and classes (#15015)
  • [airflow] Implement moved-to-provider-in-3 for modules that has been moved to Airflow providers (AIR303) (#14764)
  • [flake8-use-pathlib] Extend check for invalid path suffix to include the case "." (PTH210) (#14902)
  • [perflint] Fix panic in PERF401 when list variable is after the for loop (#14971)
  • [perflint] Simplify finding the loop target in PERF401 (#15025)
  • [pylint] Preserve original value format (PLR6104) (#14978)
  • [ruff] Avoid false positives for RUF027 for typing context bindings (#15037)
  • [ruff] Check for ambiguous pattern passed to pytest.raises() (RUF043) (#14966)

Rule changes

  • [flake8-bandit] Check S105 for annotated assignment (#15059)
  • [flake8-pyi] More autofixes for redundant-none-literal (PYI061) (#14872)
  • [pydocstyle] Skip leading whitespace for D403 (#14963)
  • [ruff] Skip SQLModel base classes for mutable-class-default (RUF012) (#14949)

Bug

  • [perflint] Parenthesize walrus expressions in autofix for manual-list-comprehension (PERF401) (#15050)

Server

  • Check diagnostic refresh support from client capability which enables dynamic configuration for various editors (#15014)

Contributors

... (truncated)

Changelog

Sourced from ruff's changelog.

0.8.4

Preview features

  • [airflow] Extend AIR302 with additional functions and classes (#15015)
  • [airflow] Implement moved-to-provider-in-3 for modules that has been moved to Airflow providers (AIR303) (#14764)
  • [flake8-use-pathlib] Extend check for invalid path suffix to include the case "." (PTH210) (#14902)
  • [perflint] Fix panic in PERF401 when list variable is after the for loop (#14971)
  • [perflint] Simplify finding the loop target in PERF401 (#15025)
  • [pylint] Preserve original value format (PLR6104) (#14978)
  • [ruff] Avoid false positives for RUF027 for typing context bindings (#15037)
  • [ruff] Check for ambiguous pattern passed to pytest.raises() (RUF043) (#14966)

Rule changes

  • [flake8-bandit] Check S105 for annotated assignment (#15059)
  • [flake8-pyi] More autofixes for redundant-none-literal (PYI061) (#14872)
  • [pydocstyle] Skip leading whitespace for D403 (#14963)
  • [ruff] Skip SQLModel base classes for mutable-class-default (RUF012) (#14949)

Bug

  • [perflint] Parenthesize walrus expressions in autofix for manual-list-comprehension (PERF401) (#15050)

Server

  • Check diagnostic refresh support from client capability which enables dynamic configuration for various editors (#15014)

0.8.3

Preview features

  • Fix fstring formatting removing overlong implicit concatenated string in expression part (#14811)
  • [airflow] Add fix to remove deprecated keyword arguments (AIR302) (#14887)
  • [airflow]: Extend rule to include deprecated names for Airflow 3.0 (AIR302) (#14765 and #14804)
  • [flake8-bugbear] Improve error messages for except* (B025, B029, B030, B904) (#14815)
  • [flake8-bugbear] itertools.batched() without explicit strict (B911) (#14408)
  • [flake8-use-pathlib] Dotless suffix passed to Path.with_suffix() (PTH210) (#14779)
  • [pylint] Include parentheses and multiple comparators in check for boolean-chained-comparison (PLR1716) (#14781)
  • [ruff] Do not simplify round() calls (RUF046) (#14832)
  • [ruff] Don't emit used-dummy-variable on function parameters (RUF052) (#14818)
  • [ruff] Implement if-key-in-dict-del (RUF051) (#14553)
  • [ruff] Mark autofix for RUF052 as always unsafe (#14824)
  • [ruff] Teach autofix for used-dummy-variable about TypeVars etc. (RUF052) (#14819)

Rule changes

  • [flake8-bugbear] Offer unsafe autofix for no-explicit-stacklevel (B028) (#14829)
  • [flake8-pyi] Skip all type definitions in string-or-bytes-too-long (PYI053) (#14797)
  • [pyupgrade] Do not report when a UTF-8 comment is followed by a non-UTF-8 one (UP009) (#14728)

... (truncated)

Commits
  • 3bb0dac Bump version to 0.8.4 (#15064)
  • 40cba5d [red-knot] Cleanup various todo_type!() messages (#15063)
  • 596d80c [perflint] Parenthesize walrus expressions in autofix for `manual-list-comp...
  • d8b9a36 Disable actionlint hook by default when running pre-commit locally (#15061)
  • 85e71ba [flake8-bandit] Check S105 for annotated assignment (#15059)
  • 2802cbd Don't special-case class instances in unary expression inference (#15045)
  • ed2bce6 [red-knot] Report invalid exceptions (#15042)
  • f0012df Fix typos in RUF043.py (#15044)
  • 0fc4e8f Introduce InferContext (#14956)
  • ac81c72 [ruff] Ambiguous pattern passed to pytest.raises() (RUF043) (#14966)
  • Additional commits viewable in compare view

Updates pytest from 8.3.3 to 8.3.4

Release notes

Sourced from pytest's releases.

8.3.4

pytest 8.3.4 (2024-12-01)

Bug fixes

  • #12592: Fixed KeyError{.interpreted-text role="class"} crash when using --import-mode=importlib in a directory layout where a directory contains a child directory with the same name.

  • #12818: Assertion rewriting now preserves the source ranges of the original instructions, making it play well with tools that deal with the AST, like executing.

  • #12849: ANSI escape codes for colored output now handled correctly in pytest.fail{.interpreted-text role="func"} with [pytrace=False]{.title-ref}.

  • #9353: pytest.approx{.interpreted-text role="func"} now uses strict equality when given booleans.

Improved documentation

  • #10558: Fix ambiguous docstring of pytest.Config.getoption{.interpreted-text role="func"}.

  • #10829: Improve documentation on the current handling of the --basetemp option and its lack of retention functionality (temporary directory location and retention{.interpreted-text role="ref"}).

  • #12866: Improved cross-references concerning the recwarn{.interpreted-text role="fixture"} fixture.

  • #12966: Clarify filterwarnings{.interpreted-text role="ref"} docs on filter precedence/order when using multiple @pytest.mark.filterwarnings <pytest.mark.filterwarnings ref>{.interpreted-text role="ref"} marks.

Contributor-facing changes

  • #12497: Fixed two failing pdb-related tests on Python 3.13.
Commits
  • 53f8b4e Update pypa/gh-action-pypi-publish to v1.12.2
  • 98dff36 Prepare release version 8.3.4
  • 1b474e2 approx: use exact comparison for bool (#13013)
  • b541721 docs: Fix wrong statement about sys.modules with importlib import mode (#1298...
  • 16cb87b pytest.fail: fix ANSI escape codes for colored output (#12959) (#12990)
  • be6bc81 Issue #12966 Clarify filterwarnings docs on precedence when using multiple ma...
  • 7aeb72b Improve docs on basetemp and retention (#12912) (#12928)
  • c875841 Merge pull request #12917 from pytest-dev/patchback/backports/8.3.x/ded1f44e5...
  • 6502816 Merge pull request #12913 from jakkdl/dontfailonbadpath
  • 52135b0 Merge pull request #12885 from The-Compiler/pdb-py311 (#12887)
  • Additional commits viewable in compare view

Updates anyio from 4.6.2.post1 to 4.7.0

Release notes

Sourced from anyio's releases.

4.7.0

  • Updated TaskGroup to work with asyncio's eager task factories (#764)
  • Added the wait_readable() and wait_writable() functions which will accept an object with a .fileno() method or an integer handle, and deprecated their now obsolete versions (wait_socket_readable() and wait_socket_writable()) (PR by @​davidbrochart)
  • Changed EventAdapter (an Event with no bound async backend) to allow set() to work even before an async backend is bound to it (#819)
  • Added support for wait_readable() and wait_writable() on ProactorEventLoop (used on asyncio + Windows by default)
  • Fixed a misleading ValueError in the context of DNS failures (#815; PR by @​graingert)
  • Fixed the return type annotations of readinto() and readinto1() methods in the anyio.AsyncFile class (#825)
  • Fixed TaskInfo.has_pending_cancellation() on asyncio returning false positives in cleanup code on Python >= 3.11 (#832; PR by @​gschaffner)
  • Fixed cancelled cancel scopes on asyncio calling asyncio.Task.uncancel when propagating a CancelledError on exit to a cancelled parent scope (#790; PR by @​gschaffner)
Changelog

Sourced from anyio's changelog.

Version history

This library adheres to Semantic Versioning 2.0 <http://semver.org/>_.

UNRELEASED

  • Configure SO_RCVBUF, SO_SNDBUF and TCP_NODELAY on the selector thread waker socket pair. This should improve the performance of wait_readable() and wait_writable() when using the ProactorEventLoop ([#836](https://github.com/agronholm/anyio/issues/836) <https://github.com/agronholm/anyio/pull/836>_; PR by @​graingert)
  • Fixed AssertionError when using nest-asyncio ([#840](https://github.com/agronholm/anyio/issues/840) <https://github.com/agronholm/anyio/issues/840>_)

4.7.0

  • Updated TaskGroup to work with asyncio's eager task factories ([#764](https://github.com/agronholm/anyio/issues/764) <https://github.com/agronholm/anyio/issues/764>_)
  • Added the wait_readable() and wait_writable() functions which will accept an object with a .fileno() method or an integer handle, and deprecated their now obsolete versions (wait_socket_readable() and wait_socket_writable()) (PR by @​davidbrochart)
  • Changed EventAdapter (an Event with no bound async backend) to allow set() to work even before an async backend is bound to it ([#819](https://github.com/agronholm/anyio/issues/819) <https://github.com/agronholm/anyio/issues/819>_)
  • Added support for wait_readable() and wait_writable() on ProactorEventLoop (used on asyncio + Windows by default)
  • Fixed a misleading ValueError in the context of DNS failures ([#815](https://github.com/agronholm/anyio/issues/815) <https://github.com/agronholm/anyio/issues/815>_; PR by @​graingert)
  • Fixed the return type annotations of readinto() and readinto1() methods in the anyio.AsyncFile class ([#825](https://github.com/agronholm/anyio/issues/825) <https://github.com/agronholm/anyio/issues/825>_)
  • Fixed TaskInfo.has_pending_cancellation() on asyncio returning false positives in cleanup code on Python >= 3.11 ([#832](https://github.com/agronholm/anyio/issues/832) <https://github.com/agronholm/anyio/issues/832>_; PR by @​gschaffner)
  • Fixed cancelled cancel scopes on asyncio calling asyncio.Task.uncancel when propagating a CancelledError on exit to a cancelled parent scope ([#790](https://github.com/agronholm/anyio/issues/790) <https://github.com/agronholm/anyio/pull/790>_; PR by @​gschaffner)

4.6.2

  • Fixed regression caused by ([#807](https://github.com/agronholm/anyio/issues/807) <https://github.com/agronholm/anyio/pull/807>_) that prevented the use of parametrized async fixtures

4.6.1

This release contains all the changes from both v4.5.1 and v4.6.0, plus:

  • Fixed TaskGroup and CancelScope producing cyclic references in tracebacks when raising exceptions ([#806](https://github.com/agronholm/anyio/issues/806) <https://github.com/agronholm/anyio/pull/806>_)

... (truncated)

Commits
  • c967f5c Bumped up the version
  • f47ac5e Rearranged changelog entries
  • f316ce5 Allowed Event to be set before it's bound to an async backend (#835)
  • 93a5746 Fixed asyncio.Task.cancelling issues (#790)
  • 39cf394 Avoid exposing extra variables key and value in anyio.abc (#833)
  • a2150f5 Fixed design issues in PR template (#834)
  • 0f80611 Added support for wait_readable() and wait_writable() on ProactorEventLoop (#...
  • 97d5fe6 Made asyncio TaskGroup work with eager task factories (#822)
  • 44405f4 Updated downstream test workflows and their target Python versions
  • 93c0cd6 Replaced mentions to run_sync_in_process with to_process.run_sync (#829)
  • Additional commits viewable in compare view

Updates certifi from 2024.8.30 to 2024.12.14

Commits
  • 4ba3900 2024.12.14 (#329)
  • 9164660 Bump pypa/gh-action-pypi-publish from 1.12.2 to 1.12.3 (#331)
  • 3dc3651 Bump pypa/gh-action-pypi-publish from 1.11.0 to 1.12.2 (#328)
  • c5bf18d Bump pypa/gh-action-pypi-publish from 1.10.3 to 1.11.0 (#327)
  • b908391 Bump actions/setup-python from 5.2.0 to 5.3.0 (#326)
  • bc26b41 Bump actions/checkout from 4.2.1 to 4.2.2 (#325)
  • 57afc22 Bump actions/upload-artifact from 4.4.1 to 4.4.3 (#323)
  • a495091 test against 3.13 final
  • 62f8144 Added 3.13 classifier (#322)
  • 94d23a0 Bump pypa/gh-action-pypi-publish from 1.10.2 to 1.10.3 (#321)
  • Additional commits viewable in compare view

Updates charset-normalizer from 3.4.0 to 3.4.1

Release notes

Sourced from charset-normalizer's releases.

Version 3.4.1

🚀 We're still raising awareness around HTTP/2, and HTTP/3!

Did you know that Internet Explorer 11 shipped with an optional HTTP/2 support back in 2013? also libcurl did ship it in 2014[...] Using Requests today is the rough equivalent of using EOL Windows 8! We promptly invite Python developers to look at the first drop-in replacement for Requests, namely Niquests. Ship with native WebSocket, SSE, Happy Eyeballs, DNS over HTTPS, and so on[...] All of this while remaining compatible with all Requests prior plug-ins / add-ons.

It leverages charset-normalizer in a better way! Check it out, you will gain up to being 3X faster and get a real/respectable support with it.

3.4.1 (2024-12-24)

Changed

  • Project metadata are now stored using pyproject.toml instead of setup.cfg using setuptools as the build backend.
  • Enforce annotation delayed loading for a simpler and consistent types in the project.
  • Optional mypyc compilation upgraded to version 1.14 for Python >= 3.8

Added

  • pre-commit configuration.
  • noxfile.

Removed

  • build-requirements.txt as per using pyproject.toml native build configuration.
  • bin/integration.py and bin/serve.py in favor of downstream integration test (see noxfile).
  • setup.cfg in favor of pyproject.toml metadata configuration.
  • Unused utils.range_scan function.

Fixed

  • Converting content to Unicode bytes may insert utf_8 instead of preferred utf-8. (#572)
  • Deprecation warning "'count' is passed as positional argument" when converting to Unicode bytes on Python 3.13+
Changelog

Sourced from charset-normalizer's changelog.

3.4.1 (2024-12-24)

Changed

  • Project metadata are now stored using pyproject.toml instead of setup.cfg using setuptools as the build backend.
  • Enforce annotation delayed loading for a simpler and consistent types in the project.
  • Optional mypyc compilation upgraded to version 1.14 for Python >= 3.8

Added

  • pre-commit configuration.
  • noxfile.

Removed

  • build-requirements.txt as per using pyproject.toml native build configuration.
  • bin/integration.py and bin/serve.py in favor of downstream integration test (see noxfile).
  • setup.cfg in favor of pyproject.toml metadata configuration.
  • Unused utils.range_scan function.

Fixed

  • Converting content to Unicode bytes may insert utf_8 instead of preferred utf-8. (#572)
  • Deprecation warning "'count' is passed as positional argument" when converting to Unicode bytes on Python 3.13+
Commits
  • ffdf7f5 🔧 fix long description content-type inferred as rst instead of md
  • c7197b7 📝 fix changelog entries (#582)
  • c390e1f Merge pull request #581 from jawah/refresh-part-2
  • f9d6b8c 🔒 add CODEOWNERS
  • 7ce1ef1 🔧 use ubuntu-22.04 for cibuildwheel in continuous deployment workflow
  • deed205 🔧 update LICENSE copyright
  • f11f571 🔧 include noxfile in sdist
  • 1ec7c06 🔧 update changelog
  • 14b4649 🐛 output(...) replace declarative mark using non iana compliant encoding ...
  • 1b06bc0 Merge branch 'refresh-part-2' of github.com:jawah/charset_normalizer into ref...
  • Additional commits viewable in compare view

Updates identify from 2.6.3 to 2.6.4

Commits

Updates ipython from 8.30.0 to 8.31.0

Commits

Updates jinja2 from 3.1.4 to 3.1.5

Release notes

Sourced from jinja2's releases.

3.1.5

This is the Jinja 3.1.5 security fix release, which fixes security issues and bugs but does not otherwise change behavior and should not result in breaking changes compared to the latest feature release.

PyPI: https://pypi.org/project/Jinja2/3.1.5/ Changes: https://jinja.palletsprojects.com/changes/#version-3-1-5 Milestone: https://github.com/pallets/jinja/milestone/16?closed=1

  • The sandboxed environment handles indirect calls to str.format, such as by passing a stored reference to a filter that calls its argument. GHSA-q2x7-8rv6-6q7h
  • Escape template name before formatting it into error messages, to avoid issues with names that contain f-string syntax. #1792, GHSA-gmj6-6f8f-6699
  • Sandbox does not allow clear and pop on known mutable sequence types. #2032
  • Calling sync render for an async template uses <...

    Description has been truncated

@dependabot
Bump the poetry-dependencies group with 17 updates
30fca07 
Bumps the poetry-dependencies group with 17 updates:

| Package | From | To |
| --- | --- | --- |
| [click](https://github.com/pallets/click) | `8.1.7` | `8.1.8` |
| [numpy](https://github.com/numpy/numpy) | `2.1.3` | `2.2.1` |
| [coverage](https://github.com/nedbat/coveragepy) | `7.6.8` | `7.6.10` |
| [mypy](https://github.com/python/mypy) | `1.13.0` | `1.14.1` |
| [ruff](https://github.com/astral-sh/ruff) | `0.8.1` | `0.8.4` |
| [pytest](https://github.com/pytest-dev/pytest) | `8.3.3` | `8.3.4` |
| [anyio](https://github.com/agronholm/anyio) | `4.6.2.post1` | `4.7.0` |
| [certifi](https://github.com/certifi/python-certifi) | `2024.8.30` | `2024.12.14` |
| [charset-normalizer](https://github.com/jawah/charset_normalizer) | `3.4.0` | `3.4.1` |
| [identify](https://github.com/pre-commit/identify) | `2.6.3` | `2.6.4` |
| [ipython](https://github.com/ipython/ipython) | `8.30.0` | `8.31.0` |
| [jinja2](https://github.com/pallets/jinja) | `3.1.4` | `3.1.5` |
| ruamel-yaml | `0.18.6` | `0.18.7` |
| [starlette](https://github.com/encode/starlette) | `0.41.3` | `0.45.1` |
| [urllib3](https://github.com/urllib3/urllib3) | `2.2.3` | `2.3.0` |
| [uvicorn](https://github.com/encode/uvicorn) | `0.32.1` | `0.34.0` |
| [watchfiles](https://github.com/samuelcolvin/watchfiles) | `1.0.0` | `1.0.3` |


Updates `click` from 8.1.7 to 8.1.8
- [Release notes](https://github.com/pallets/click/releases)
- [Changelog](https://github.com/pallets/click/blob/main/CHANGES.rst)
- [Commits](pallets/click@8.1.7...8.1.8)

Updates `numpy` from 2.1.3 to 2.2.1
- [Release notes](https://github.com/numpy/numpy/releases)
- [Changelog](https://github.com/numpy/numpy/blob/main/doc/RELEASE_WALKTHROUGH.rst)
- [Commits](numpy/numpy@v2.1.3...v2.2.1)

Updates `coverage` from 7.6.8 to 7.6.10
- [Release notes](https://github.com/nedbat/coveragepy/releases)
- [Changelog](https://github.com/nedbat/coveragepy/blob/master/CHANGES.rst)
- [Commits](nedbat/coveragepy@7.6.8...7.6.10)

Updates `mypy` from 1.13.0 to 1.14.1
- [Changelog](https://github.com/python/mypy/blob/master/CHANGELOG.md)
- [Commits](python/mypy@v1.13.0...v1.14.1)

Updates `ruff` from 0.8.1 to 0.8.4
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.8.1...0.8.4)

Updates `pytest` from 8.3.3 to 8.3.4
- [Release notes](https://github.com/pytest-dev/pytest/releases)
- [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst)
- [Commits](pytest-dev/pytest@8.3.3...8.3.4)

Updates `anyio` from 4.6.2.post1 to 4.7.0
- [Release notes](https://github.com/agronholm/anyio/releases)
- [Changelog](https://github.com/agronholm/anyio/blob/master/docs/versionhistory.rst)
- [Commits](agronholm/anyio@4.6.2.post1...4.7.0)

Updates `certifi` from 2024.8.30 to 2024.12.14
- [Commits](certifi/python-certifi@2024.08.30...2024.12.14)

Updates `charset-normalizer` from 3.4.0 to 3.4.1
- [Release notes](https://github.com/jawah/charset_normalizer/releases)
- [Changelog](https://github.com/jawah/charset_normalizer/blob/master/CHANGELOG.md)
- [Commits](jawah/charset_normalizer@3.4.0...3.4.1)

Updates `identify` from 2.6.3 to 2.6.4
- [Commits](pre-commit/identify@v2.6.3...v2.6.4)

Updates `ipython` from 8.30.0 to 8.31.0
- [Release notes](https://github.com/ipython/ipython/releases)
- [Commits](ipython/ipython@8.30.0...8.31.0)

Updates `jinja2` from 3.1.4 to 3.1.5
- [Release notes](https://github.com/pallets/jinja/releases)
- [Changelog](https://github.com/pallets/jinja/blob/main/CHANGES.rst)
- [Commits](pallets/jinja@3.1.4...3.1.5)

Updates `ruamel-yaml` from 0.18.6 to 0.18.7

Updates `starlette` from 0.41.3 to 0.45.1
- [Release notes](https://github.com/encode/starlette/releases)
- [Changelog](https://github.com/encode/starlette/blob/master/docs/release-notes.md)
- [Commits](encode/starlette@0.41.3...0.45.1)

Updates `urllib3` from 2.2.3 to 2.3.0
- [Release notes](https://github.com/urllib3/urllib3/releases)
- [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst)
- [Commits](urllib3/urllib3@2.2.3...2.3.0)

Updates `uvicorn` from 0.32.1 to 0.34.0
- [Release notes](https://github.com/encode/uvicorn/releases)
- [Changelog](https://github.com/encode/uvicorn/blob/master/CHANGELOG.md)
- [Commits](encode/uvicorn@0.32.1...0.34.0)

Updates `watchfiles` from 1.0.0 to 1.0.3
- [Release notes](https://github.com/samuelcolvin/watchfiles/releases)
- [Commits](samuelcolvin/watchfiles@v1.0.0...v1.0.3)

---
updated-dependencies:
- dependency-name: click
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: poetry-dependencies
- dependency-name: numpy
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: poetry-dependencies
- dependency-name: coverage
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: poetry-dependencies
- dependency-name: mypy
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: poetry-dependencies
- dependency-name: ruff
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: poetry-dependencies
- dependency-name: pytest
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: poetry-dependencies
- dependency-name: anyio
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: poetry-dependencies
- dependency-name: certifi
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: poetry-dependencies
- dependency-name: charset-normalizer
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: poetry-dependencies
- dependency-name: identify
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: poetry-dependencies
- dependency-name: ipython
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: poetry-dependencies
- dependency-name: jinja2
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: poetry-dependencies
- dependency-name: ruamel-yaml
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: poetry-dependencies
- dependency-name: starlette
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: poetry-dependencies
- dependency-name: urllib3
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: poetry-dependencies
- dependency-name: uvicorn
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: poetry-dependencies
- dependency-name: watchfiles
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: poetry-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Jan 1, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
dependencies Pull requests that update a dependency file python Pull requests that update Python code
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
0 participants