Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Bump the pip group across 1 directory with 9 updates #20

Closed
wants to merge 1 commit into from
Closed

Bump the pip group across 1 directory with 9 updates #20

wants to merge 1 commit into from

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Sep 30, 2024 •
edited
Loading

Bumps the pip group with 9 updates in the / directory:

Package From To
pylint 3.2.7 3.3.1
anyio 4.5.0 4.6.0
boto3 1.35.22 1.35.29
botocore 1.35.22 1.35.29
pydantic-core 2.23.4 2.24.0
python-multipart 0.0.9 0.0.12
starlette 0.38.5 0.39.2
uvicorn 0.30.6 0.31.0
websockets 13.0.1 13.1

Updates pylint from 3.2.7 to 3.3.1

Commits

Updates anyio from 4.5.0 to 4.6.0

Release notes

Sourced from anyio's releases.

4.6.0

  • Dropped support for Python 3.8 (as #698 cannot be resolved without cancel message support)
  • Fixed 100% CPU use on asyncio while waiting for an exiting task group to finish while said task group is within a cancelled cancel scope (#695)
  • Fixed cancel scopes on asyncio not propagating CancelledError on exit when the enclosing cancel scope has been effectively cancelled (#698)
  • Fixed asyncio task groups not yielding control to the event loop at exit if there were no child tasks to wait on
  • Fixed inconsistent task uncancellation with asyncio cancel scopes belonging to a task group when said task group has child tasks running
Changelog

Sourced from anyio's changelog.

Version history

This library adheres to Semantic Versioning 2.0 <http://semver.org/>_.

4.6.0

  • Dropped support for Python 3.8 (as [#698](https://github.com/agronholm/anyio/issues/698) <https://github.com/agronholm/anyio/issues/698>_ cannot be resolved without cancel message support)
  • Fixed 100% CPU use on asyncio while waiting for an exiting task group to finish while said task group is within a cancelled cancel scope ([#695](https://github.com/agronholm/anyio/issues/695) <https://github.com/agronholm/anyio/issues/695>_)
  • Fixed cancel scopes on asyncio not propagating CancelledError on exit when the enclosing cancel scope has been effectively cancelled ([#698](https://github.com/agronholm/anyio/issues/698) <https://github.com/agronholm/anyio/issues/698>_)
  • Fixed asyncio task groups not yielding control to the event loop at exit if there were no child tasks to wait on
  • Fixed inconsistent task uncancellation with asyncio cancel scopes belonging to a task group when said task group has child tasks running

4.5.0

  • Improved the performance of anyio.Lock and anyio.Semaphore on asyncio (even up to 50 %)
  • Added the fast_acquire parameter to anyio.Lock and anyio.Semaphore to further boost performance at the expense of safety (acquire() will not yield control back if there is no contention)
  • Added support for the from_uri(), full_match(), parser methods/properties in anyio.Path, newly added in Python 3.13 ([#737](https://github.com/agronholm/anyio/issues/737) <https://github.com/agronholm/anyio/issues/737>_)
  • Added support for more keyword arguments for run_process() and open_process(): startupinfo, creationflags, pass_fds, user, group, extra_groups and umask ([#742](https://github.com/agronholm/anyio/issues/742) <https://github.com/agronholm/anyio/issues/742>_)
  • Improved the type annotations and support for PathLike in run_process() and open_process() to allow for path-like arguments, just like subprocess.Popen
  • Changed the ResourceWarning from an unclosed memory object stream to include its address for easier identification
  • Changed start_blocking_portal() to always use daemonic threads, to accommodate the "loitering event loop" use case
  • Bumped the minimum version of Trio to v0.26.1
  • Fixed __repr__() of MemoryObjectItemReceiver, when item is not defined ([#767](https://github.com/agronholm/anyio/issues/767) <https://github.com/agronholm/anyio/pull/767>_; PR by @​Danipulok)
  • Fixed to_process.run_sync() failing to initialize if __main__.__file__ pointed to a file in a nonexistent directory ([#696](https://github.com/agronholm/anyio/issues/696) <https://github.com/agronholm/anyio/issues/696>_)
  • Fixed AssertionError: feed_data after feed_eof on asyncio when a subprocess is closed early, before its output has been read ([#490](https://github.com/agronholm/anyio/issues/490) <https://github.com/agronholm/anyio/issues/490>_)

... (truncated)

Commits

Updates boto3 from 1.35.22 to 1.35.29

Commits
  • f1cff14 Merge branch 'release-1.35.29'
  • b84190a Bumping version to 1.35.29
  • 03ce91f Add changelog entries from botocore
  • 8307fac Merge branch 'release-1.35.28'
  • 485d673 Merge branch 'release-1.35.28' into develop
  • 4709d04 Bumping version to 1.35.28
  • 02fc8c8 Add changelog entries from botocore
  • ddc499b Merge pull request #4264 from ashishdhingra/user/ashdhin/IssueTemplateRegress...
  • 7b8a011 chore: Modified bug issue template to add checkbox to report potential regres...
  • 5dc18b0 Merge branch 'release-1.35.27'
  • Additional commits viewable in compare view

Updates botocore from 1.35.22 to 1.35.29

Changelog

Sourced from botocore's changelog.

1.35.29

  • api-change:customer-profiles: Introduces optional RoleArn parameter for PutIntegration request and includes RoleArn in the response of PutIntegration, GetIntegration and ListIntegrations
  • api-change:quicksight: Adding personalization in QuickSight data stories. Admins can enable or disable personalization through QuickSight settings.
  • api-change:securityhub: Documentation updates for AWS Security Hub
  • api-change:sesv2: This release adds support for engagement tracking over Https using custom domains.

1.35.28

  • api-change:chatbot: Return State and StateReason fields for Chatbot Channel Configurations.
  • api-change:lambda: Reverting Lambda resource-based policy and block public access APIs.
  • api-change:organizations: Add support for policy operations on the CHATBOT_POLICY policy type.
  • api-change:pcs: AWS PCS API documentation - Edited the description of the iamInstanceProfileArn parameter of the CreateComputeNodeGroup and UpdateComputeNodeGroup actions; edited the description of the SlurmCustomSetting data type to list the supported parameters for clusters and compute node groups.
  • api-change:rds-data: Documentation update for RDS Data API to reflect support for Aurora MySQL Serverless v2 and Provisioned DB clusters.
  • api-change:sagemaker: Adding TagPropagation attribute to Sagemaker API

1.35.27

  • api-change:cloudtrail: Doc-only update for CloudTrail network activity events release (in preview)
  • api-change:ec2: Updates to documentation for the transit gateway security group referencing feature.
  • api-change:fsx: Doc-only update to address Lustre S3 hard-coded names.
  • api-change:worklink: The worklink client has been removed following the deprecation of the service.

1.35.26

  • api-change:bedrock: Add support for Cross Region Inference in Bedrock Model Evaluations.
  • api-change:budgets: Releasing minor partitional endpoint updates
  • api-change:kinesis: This release includes support to add tags when creating a stream
  • api-change:pinpoint-sms-voice-v2: AWS End User Messaging SMS-Voice V2 has added support for resource policies. Use the three new APIs to create, view, edit, and delete resource policies.
  • api-change:sagemaker: Adding HiddenInstanceTypes and HiddenSageMakerImageVersionAliases attribute to SageMaker API

1.35.25

  • api-change:apigateway: Documentation updates for Amazon API Gateway
  • api-change:athena: List/Get/Update/Delete/CreateDataCatalog now integrate with AWS Glue connections. Users can create a Glue connection through Athena or use a Glue connection to define their Athena federated parameters.
  • api-change:bedrock-agent: Amazon Bedrock Prompt Flows and Prompt Management now supports using inference profiles to increase throughput and improve resilience.
  • api-change:ec2: Amazon EC2 G6e instances powered by NVIDIA L40S Tensor Core GPUs are the most cost-efficient GPU instances for deploying generative AI models and the highest performance GPU instances for spatial computing workloads.
  • api-change:emr-serverless: This release adds support for job concurrency and queuing configuration at Application level.
  • api-change:glue: Added AthenaProperties parameter to Glue Connections, allowing Athena to store service specific properties on Glue Connections.
  • api-change:rds: Support ComputeRedundancy parameter in ModifyDBShardGroup API. Add DBShardGroupArn in DBShardGroup API response. Remove InvalidMaxAcuFault from CreateDBShardGroup and ModifyDBShardGroup API. Both API will throw InvalidParameterValueException for invalid ACU configuration.
  • api-change:resource-explorer-2: AWS Resource Explorer released ListResources feature which allows customers to list all indexed AWS resources within a view.

... (truncated)

Commits
  • 892c64b Merge branch 'release-1.35.29'
  • 7c6966c Bumping version to 1.35.29
  • 61e47ca Update endpoints model
  • 41c8c54 Update to latest models
  • 69b94ee Merge branch 'release-1.35.28'
  • e811910 Merge branch 'release-1.35.28' into develop
  • 51e5f1c Bumping version to 1.35.28
  • 845c85c Update endpoints model
  • 27088b2 Update to latest models
  • f54eb24 Merge pull request #3250 from ashishdhingra/user/ashdhin/IssueTemplateRegress...
  • Additional commits viewable in compare view

Updates pydantic-core from 2.23.4 to 2.24.0

Release notes

Sourced from pydantic-core's releases.

v2.24.0 2024-09-20

What's Changed

Features

Fixes

New Contributors

Full Changelog: pydantic/pydantic-core@v2.23.4...v2.24.0

Commits
  • 31a5156 Prep for v2.24.0 (#1458)
  • f3f436e Add support for unpacked TypedDict to type hint variadic keyword arguments ...
  • 8c1a0da Support wider variety of enum validation cases (#1456)
  • e0b4c94 feat: add 'millisecond' option to ser_json_timedelta config parameter (#1427)
  • bc0c97a Do not require padding when decoding base64 bytes (#1448)
  • See full diff in compare view

Updates python-multipart from 0.0.9 to 0.0.12

Release notes

Sourced from python-multipart's releases.

Version 0.0.12

What's Changed

Full Changelog: Kludex/python-multipart@0.0.11...0.0.12

Version 0.0.11

What's Changed

Full Changelog: Kludex/python-multipart@0.0.10...0.0.11

Version 0.0.10

What's Changed

New Contributors

Full Changelog: Kludex/python-multipart@0.0.9...0.0.10

Changelog

Sourced from python-multipart's changelog.

0.0.12 (2024-09-29)

  • Improve error message when boundary character does not match #124.
  • Add mypy strict typing #140.
  • Enforce 100% coverage #159.

0.0.11 (2024-09-28)

  • Improve performance, especially in data with many CR-LF #137.
  • Handle invalid CRLF in header name #141.

0.0.10 (2024-09-21)

  • Support on_header_begin #103.
  • Improve type hints on FormParser #104.
  • Fix OnFileCallback type #106.
  • Improve type hints #110.
  • Improve type hints on File #111.
  • Add type hint to helper functions #112.
  • Minor fix for Field.repr #114.
  • Fix use of chunk_size parameter #136.
  • Allow digits and valid token chars in headers #134.
  • Fix headers being carried between parts #135.
Commits

Updates starlette from 0.38.5 to 0.39.2

Release notes

Sourced from starlette's releases.

Version 0.39.2

Fixed

  • Allow use of request.url_for when only "app" scope is available #2672.
  • Fix internal type hints to support python-multipart==0.0.12 #2708.

Full Changelog: encode/starlette@0.39.1...0.39.2

Version 0.39.1

Fixed

  • Avoid regex re-compilation in responses.py and schemas.py #2700.
  • Improve performance of get_route_path by removing regular expression usage #2701.
  • Consider FileResponse.chunk_size when handling multiple ranges #2703.
  • Use token_hex for generating multipart boundary strings #2702.

Full Changelog: encode/starlette@0.39.0...0.39.1

Version 0.39.0

Added

  • Add support for HTTP Range to FileResponse #2697

Full Changelog: encode/starlette@0.38.6...0.39.0

Version 0.38.6

Fixed

  • Close unclosed MemoryObjectReceiveStream in TestClient #2693.

Full Changelog: encode/starlette@0.38.5...0.38.6

Changelog

Sourced from starlette's changelog.

0.39.2 (September 29, 2024)

Fixed

  • Allow use of request.url_for when only "app" scope is available #2672.
  • Fix internal type hints to support python-multipart==0.0.12 #2708.

0.39.1 (September 25, 2024)

Fixed

  • Avoid regex re-compilation in responses.py and schemas.py #2700.
  • Improve performance of get_route_path by removing regular expression usage #2701.
  • Consider FileResponse.chunk_size when handling multiple ranges #2703.
  • Use token_hex for generating multipart boundary strings #2702.

0.39.0 (September 23, 2024)

Added

0.38.6 (September 22, 2024)

Fixed

  • Close unclosed MemoryObjectReceiveStream in TestClient #2693.
Commits

Updates uvicorn from 0.30.6 to 0.31.0

Release notes

Sourced from uvicorn's releases.

Version 0.31.0

Added

Improve ProxyHeadersMiddleware (#2468) and (#2231):

  • Fix the host for requests from clients running on the proxy server itself.
  • Fallback to host that was already set for empty x-forwarded-for headers.
  • Also allow specifying IP Networks as trusted hosts. This greatly simplifies deployments on docker swarm/Kubernetes, where the reverse proxy might have a dynamic IP.
    • This includes support for IPv6 Address/Networks.

Full Changelog: encode/uvicorn@0.30.6...0.31.0

Changelog

Sourced from uvicorn's changelog.

0.31.0 (2024-09-27)

Added

Improve ProxyHeadersMiddleware (#2468) and (#2231):

  • Fix the host for requests from clients running on the proxy server itself.
  • Fallback to host that was already set for empty x-forwarded-for headers.
  • Also allow to specify IP Networks as trusted hosts. This greatly simplifies deployments on docker swarm/kubernetes, where the reverse proxy might have a dynamic IP.
    • This includes support for IPv6 Address/Networks.
Commits

Updates websockets from 13.0.1 to 13.1

Release notes

Sourced from websockets's releases.

13.1

See https://websockets.readthedocs.io/en/stable/project/changelog.html for details.

Commits
  • 4d229bf Release version 13.1.
  • 0afccc9 Clarify comment.
  • 3640923 Wait until state is CLOSED to acces close_exc.
  • 20739e0 Improve exception handling during handshake.
  • 206624a Standard spelling on "an HTTP".
  • 98f236f Run handler only when opening handshake succeeds.
  • d19ed26 Run spellcheck.
  • 070ff1a Add dedicated ConcurrencyError exception.
  • f9cea9c Improve isolation of tests of sync implementation.
  • 14d9d40 Fix typo in convenience imports.
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the pip group across 1 directory with 9 updates
7d56ff1 
Bumps the pip group with 9 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [pylint](https://github.com/pylint-dev/pylint) | `3.2.7` | `3.3.1` |
| [anyio](https://github.com/agronholm/anyio) | `4.5.0` | `4.6.0` |
| [boto3](https://github.com/boto/boto3) | `1.35.22` | `1.35.29` |
| [botocore](https://github.com/boto/botocore) | `1.35.22` | `1.35.29` |
| [pydantic-core](https://github.com/pydantic/pydantic-core) | `2.23.4` | `2.24.0` |
| [python-multipart](https://github.com/Kludex/python-multipart) | `0.0.9` | `0.0.12` |
| [starlette](https://github.com/encode/starlette) | `0.38.5` | `0.39.2` |
| [uvicorn](https://github.com/encode/uvicorn) | `0.30.6` | `0.31.0` |
| [websockets](https://github.com/python-websockets/websockets) | `13.0.1` | `13.1` |



Updates `pylint` from 3.2.7 to 3.3.1
- [Release notes](https://github.com/pylint-dev/pylint/releases)
- [Commits](pylint-dev/pylint@v3.2.7...v3.3.1)

Updates `anyio` from 4.5.0 to 4.6.0
- [Release notes](https://github.com/agronholm/anyio/releases)
- [Changelog](https://github.com/agronholm/anyio/blob/master/docs/versionhistory.rst)
- [Commits](agronholm/anyio@4.5.0...4.6.0)

Updates `boto3` from 1.35.22 to 1.35.29
- [Release notes](https://github.com/boto/boto3/releases)
- [Commits](boto/boto3@1.35.22...1.35.29)

Updates `botocore` from 1.35.22 to 1.35.29
- [Changelog](https://github.com/boto/botocore/blob/develop/CHANGELOG.rst)
- [Commits](boto/botocore@1.35.22...1.35.29)

Updates `pydantic-core` from 2.23.4 to 2.24.0
- [Release notes](https://github.com/pydantic/pydantic-core/releases)
- [Commits](pydantic/pydantic-core@v2.23.4...v2.24.0)

Updates `python-multipart` from 0.0.9 to 0.0.12
- [Release notes](https://github.com/Kludex/python-multipart/releases)
- [Changelog](https://github.com/Kludex/python-multipart/blob/master/CHANGELOG.md)
- [Commits](Kludex/python-multipart@0.0.9...0.0.12)

Updates `starlette` from 0.38.5 to 0.39.2
- [Release notes](https://github.com/encode/starlette/releases)
- [Changelog](https://github.com/encode/starlette/blob/master/docs/release-notes.md)
- [Commits](encode/starlette@0.38.5...0.39.2)

Updates `uvicorn` from 0.30.6 to 0.31.0
- [Release notes](https://github.com/encode/uvicorn/releases)
- [Changelog](https://github.com/encode/uvicorn/blob/master/CHANGELOG.md)
- [Commits](encode/uvicorn@0.30.6...0.31.0)

Updates `websockets` from 13.0.1 to 13.1
- [Release notes](https://github.com/python-websockets/websockets/releases)
- [Commits](python-websockets/websockets@13.0.1...13.1)

---
updated-dependencies:
- dependency-name: pylint
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pip
- dependency-name: anyio
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pip
- dependency-name: boto3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: pip
- dependency-name: botocore
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: pip
- dependency-name: pydantic-core
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pip
- dependency-name: python-multipart
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: pip
- dependency-name: starlette
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pip
- dependency-name: uvicorn
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pip
- dependency-name: websockets
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pip
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Sep 30, 2024
@joelvdavies
Copy link
Collaborator

@dependabot rebase

@dependabot Dependabot
Copy link
Contributor Author

dependabot bot commented on behalf of github Oct 2, 2024

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot bot closed this Oct 2, 2024
@dependabot dependabot bot deleted the dependabot/pip/pip-f8f42d4e5e branch October 2, 2024 08:30
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
dependencies Pull requests that update a dependency file python Pull requests that update Python code
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
1 participant
@joelvdavies