Bump the production-dependencies group across 1 directory with 5 updates #931

dependabot · 2024-08-03T11:35:45Z

Bumps the production-dependencies group with 5 updates in the /config/requirements directory:

Package	From	To
boto3	`1.34.145`	`1.34.153`
botocore	`1.34.145`	`1.34.153`
django-allauth	`0.63.6`	`64.0.0`
pytest	`8.2.2`	`8.3.2`
redis	`5.0.7`	`5.0.8`

Updates boto3 from 1.34.145 to 1.34.153

Commits

1b7dafa Merge branch 'release-1.34.153'
809d4cd Bumping version to 1.34.153
f753c4f Add changelog entries from botocore
ba3d7ce Merge branch 'release-1.34.152'
9489da6 Merge branch 'release-1.34.152' into develop
be5b965 Bumping version to 1.34.152
8723785 Add changelog entries from botocore
64fb912 Merge branch 'release-1.34.151'
533a186 Merge branch 'release-1.34.151' into develop
37f7211 Bumping version to 1.34.151
Additional commits viewable in compare view

Updates botocore from 1.34.145 to 1.34.153

Changelog

Sourced from botocore's changelog.

1.34.153

api-change:cloudwatch: Add v2 smoke tests and smithy smokeTests trait for SDK testing.

api-change:kinesis: Add v2 smoke tests and smithy smokeTests trait for SDK testing.

api-change:resiliencehub: Customers are presented with the grouping recommendations and can determine if the recommendations are accurate and apply to their case. This feature simplifies onboarding by organizing resources into appropriate AppComponents.

api-change:route53: Add v2 smoke tests and smithy smokeTests trait for SDK testing.

api-change:waf-regional: Add v2 smoke tests and smithy smokeTests trait for SDK testing.

1.34.152

api-change:bedrock: API and Documentation for Bedrock Model Copy feature. This feature lets you share and copy a custom model from one region to another or one account to another.

api-change:controlcatalog: AWS Control Tower provides two new public APIs controlcatalog:ListControls and controlcatalog:GetControl under controlcatalog service namespace, which enable customers to programmatically retrieve control metadata of available controls.

api-change:controltower: Updated Control Tower service documentation for controlcatalog control ARN support with existing Control Tower public APIs

api-change:iam: Add v2 smoke tests and smithy smokeTests trait for SDK testing.

api-change:memorydb: Doc only update for changes to deletion API.

api-change:rds: This release adds support for specifying optional MinACU parameter in CreateDBShardGroup and ModifyDBShardGroup API. DBShardGroup response will contain MinACU if specified.

api-change:sagemaker: This release adds support for Amazon EMR Serverless applications in SageMaker Studio for running data processing jobs.

api-change:ssm-quicksetup: This release adds API support for the QuickSetup feature of AWS Systems Manager

api-change:support: Doc only updates to CaseDetails

1.34.151

api-change:appstream: Added support for Red Hat Enterprise Linux 8 on Amazon AppStream 2.0

api-change:autoscaling: Increase the length limit for VPCZoneIdentifier from 2047 to 5000

api-change:codepipeline: AWS CodePipeline V2 type pipelines now support stage level conditions to enable development teams to safely release changes that meet quality and compliance requirements.

api-change:elasticache: Doc only update for changes to deletion API.

api-change:elb: Add v2 smoke tests and smithy smokeTests trait for SDK testing.

api-change:events: Add v2 smoke tests and smithy smokeTests trait for SDK testing.

api-change:lexv2-models: This release adds new capabilities to the AMAZON.QnAIntent: Custom prompting, Guardrails integration and ExactResponse support for Bedrock Knowledge Base.

api-change:logs: Add v2 smoke tests and smithy smokeTests trait for SDK testing.

api-change:rolesanywhere: IAM RolesAnywhere now supports custom role session name on the CreateSession. This release adds the acceptRoleSessionName option to a profile to control whether a role session name will be accepted in a session request with a given profile.

api-change:tnb: This release adds Network Service Update, through which customers will be able to update their instantiated networks to a new network package. See the documentation for limitations. The release also enhances the Get network operation API to return parameter overrides used during the operation.

api-change:workspaces: Removing multi-session as it isn't supported for pools

1.34.150

api-change:elasticache: Renaming full service name as it appears in developer documentation.

api-change:memorydb: Renaming full service name as it appears in developer documentation.

1.34.149

... (truncated)

Commits

dae6c6a Merge branch 'release-1.34.153'
7c016e1 Bumping version to 1.34.153
eeee2ad Update to latest models
19ce2f5 Merge branch 'release-1.34.152'
e5b059e Merge branch 'release-1.34.152' into develop
a452dad Bumping version to 1.34.152
b6821a6 Update to latest models
da3918a Merge branch 'release-1.34.151'
547b208 Merge branch 'release-1.34.151' into develop
3183701 Bumping version to 1.34.151
Additional commits viewable in compare view

Updates django-allauth from 0.63.6 to 64.0.0

Changelog

Sourced from django-allauth's changelog.

64.0.0 (2024-07-31)

Note worthy changes

The 0.x.y version numbers really did not do justice to the state of the project, and we are way past the point where a version 1.0 would be applicable. Additionally, 64 is a nice round number. Therefore, the version numbering is changed from 0.x.y to x.y.z. We will use a loose form of semantic versioning. However, please be aware that feature releases may occasionally include minor documented backwards incompatibilities. Always read the release notes before upgrading.

Added support for WebAuthn based security keys and passkey login. Note that this is currently disabled by default.

Headless: The TOTP URI is now available in the MFA activation response.

Headless: When trying to sign up while a user is already logged in, you now get a 409.

Headless: You can now alter the user data payload by overriding the newly introduced serialize_user() adapter method.

Headless: The token strategy now allows for exposing refresh tokens and any other information you may need (such as e.g. expires_in).

Ensured that email address, given name and family name fields are stored in the SocialAccount instance. This information was not previously saved in Amazon Cognito, Edmodo, and MediaWiki SocialAccount instances.

When multiple third-party accounts of the same provider were connected, the third-party account connections overview did not always provide a clear recognizable distinction between those accounts. Now, the SocialAccount.__str__() has been altered to return the unique username or email address, rather than a non-unique display name.

Backwards incompatible changes

Dropped support for Django 3.2, 4.0 and 4.1 (which all reached end of life). As Django 3.2 was the last to support Python 3.7, support for Python 3.7 is now dropped as well.

Commits

9440c0a chore: Release 64.0.0
0667ff4 chore(i18n): Translated using Weblate (Spanish)
7783955 chore(i18n): Sync .po
9b929bd docs(mfa): WebAuthn
c638d8c docs(ChangeLog): Moved historic release notes
1758bc6 fix(socialaccount): token str mixup at PayPal, Salesforce
3c836f8 fix(amazon): access_token not handed over properly
1bbdc8f docs(ChangeLog): Support for exposing refresh_token
e60d1ab feat(headless): Support for exposing refresh_token
2cc8f19 Revert "fix(socialaccount): is_existing caused repeated db queries"
Additional commits viewable in compare view

Updates pytest from 8.2.2 to 8.3.2

Release notes

Sourced from pytest's releases.

8.3.2

pytest 8.3.2 (2024-07-24)

Bug fixes

#12652: Resolve regression [conda]{.title-ref} environments where no longer being automatically detected.

-- by RonnyPfannschmidt{.interpreted-text role="user"}

8.3.1

pytest 8.3.1 (2024-07-20)

The 8.3.0 release failed to include the change notes and docs for the release. This patch release remedies this. There are no other changes.

8.3.0

pytest 8.3.0 (2024-07-20)

New features

#12231: Added [--xfail-tb]{.title-ref} flag, which turns on traceback output for XFAIL results.

If the [--xfail-tb]{.title-ref} flag is not given, tracebacks for XFAIL results are NOT shown.

The style of traceback for XFAIL is set with [--tb]{.title-ref}, and can be [auto|long|short|line|native|no]{.title-ref}.

Note: Even if you have [--xfail-tb]{.title-ref} set, you won't see them if [--tb=no]{.title-ref}.

Some history:

With pytest 8.0, [-rx]{.title-ref} or [-ra]{.title-ref} would not only turn on summary reports for xfail, but also report the tracebacks for xfail results. This caused issues with some projects that utilize xfail, but don't want to see all of the xfail tracebacks.

This change detaches xfail tracebacks from [-rx]{.title-ref}, and now we turn on xfail tracebacks with [--xfail-tb]{.title-ref}. With this, the default [-rx]{.title-ref}/ [-ra]{.title-ref} behavior is identical to pre-8.0 with respect to xfail tracebacks. While this is a behavior change, it brings default behavior back to pre-8.0.0 behavior, which ultimately was considered the better course of action.

#12281: Added support for keyword matching in marker expressions.

Now tests can be selected by marker keyword arguments. Supported values are int{.interpreted-text role="class"}, (unescaped) str{.interpreted-text role="class"}, bool{.interpreted-text role="class"} & None{.interpreted-text role="data"}.

See marker examples <marker_keyword_expression_example>{.interpreted-text role="ref"} for more information.

-- by lovetheguitar{.interpreted-text role="user"}

#12567: Added --no-fold-skipped command line option.

If this option is set, then skipped tests in short summary are no longer grouped by reason but all tests are printed individually with their nodeid in the same way as other statuses.

-- by pbrezina{.interpreted-text role="user"}

... (truncated)

Commits

bbcec9c Prepare release version 8.3.2
78fe8b6 Merge pull request #12657 from pytest-dev/patchback/backports/8.3.x/6c806b499...
238bad2 Merge pull request #12656 from RonnyPfannschmidt/fix-12652-detect-conda-env
ae6034a Merge pull request #12641 from pytest-dev/patchback/backports/8.3.x/c03989cee...
31337ab Merge pull request #12640 from pytest-dev/update-user
ca3070b Merge pull request #12637 from pytest-dev/release-8.3.1
de98446 Prepare release version 8.3.1
bd0a042 Merge pull request #12636 from pytest-dev/update-release-notes
664325b doc/changelog: update 8.3.0 notes
19d225d Merge pull request #12635 from pytest-dev/release-8.3.0
Additional commits viewable in compare view

Updates redis from 5.0.7 to 5.0.8

Release notes

Sourced from redis's releases.

5.0.8

Changes

Resolve some docs warnings (#3322)

Add missing type hints for retry.py (#3250)

🔥 Breaking Changes

Timeseries insertion filters for close samples (#3228)

🚀 New Features

Hash field expiration commands (#3218)

Support the MAXAGE option for CLIENT KILL (#3187)

Support NOVALUES parameter for HSCAN (#3157)

Document XREAD of last message (+) (#3187)

Support missing/empty values in search (#3231)

Timeseries insertion filters for close samples (#3228)

🧰 Maintenance

Add extra tests for GEO search (#3244)

Test special characters escaping in search (#3276)

🐛 Bug Fixes

Decode search results at field level (#3309)

Commits

6a2a636 Decode search results at field level (#3309)
e7ef54a Fix bug: client side caching causes unexpected disconnections (async version)...
0cd0c5d Format connection errors in the same way everywhere (#3305)
6fedfef Prepare for Redis 7.4 RC2 (#3303)
ed1680f Add details to the asyncio connection error message (#3211)
511fda0 Add missing type hints for retry.py (#3250)
c1a6ff7 Bump rojopolis/spellcheck-github-actions from 0.37.0 to 0.38.0 (#3301)
338cbfd Re-enable Graph tests (#3287)
532bc02 Do not restrict pytest dependencies versions (#3286)
b6a0f96 Add CODECOV token to CI (#3285)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the production-dependencies group with 5 updates in the /config/requirements directory: | Package | From | To | | --- | --- | --- | | [boto3](https://github.com/boto/boto3) | `1.34.145` | `1.34.153` | | [botocore](https://github.com/boto/botocore) | `1.34.145` | `1.34.153` | | [django-allauth](https://github.com/pennersr/django-allauth) | `0.63.6` | `64.0.0` | | [pytest](https://github.com/pytest-dev/pytest) | `8.2.2` | `8.3.2` | | [redis](https://github.com/redis/redis-py) | `5.0.7` | `5.0.8` | Updates `boto3` from 1.34.145 to 1.34.153 - [Release notes](https://github.com/boto/boto3/releases) - [Commits](boto/boto3@1.34.145...1.34.153) Updates `botocore` from 1.34.145 to 1.34.153 - [Changelog](https://github.com/boto/botocore/blob/develop/CHANGELOG.rst) - [Commits](boto/botocore@1.34.145...1.34.153) Updates `django-allauth` from 0.63.6 to 64.0.0 - [Changelog](https://github.com/pennersr/django-allauth/blob/main/ChangeLog.rst) - [Commits](pennersr/django-allauth@0.63.6...64.0.0) Updates `pytest` from 8.2.2 to 8.3.2 - [Release notes](https://github.com/pytest-dev/pytest/releases) - [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst) - [Commits](pytest-dev/pytest@8.2.2...8.3.2) Updates `redis` from 5.0.7 to 5.0.8 - [Release notes](https://github.com/redis/redis-py/releases) - [Changelog](https://github.com/redis/redis-py/blob/master/CHANGES) - [Commits](redis/redis-py@v5.0.7...v5.0.8) --- updated-dependencies: - dependency-name: boto3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: botocore dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: django-allauth dependency-type: direct:production update-type: version-update:semver-major dependency-group: production-dependencies - dependency-name: pytest dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: redis dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies ... Signed-off-by: dependabot[bot] <[email protected]>

dependabot · 2024-08-10T11:30:24Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Aug 3, 2024

dependabot bot closed this Aug 10, 2024

dependabot bot deleted the dependabot/pip/config/requirements/production-dependencies-cbb25065e0 branch August 10, 2024 11:30

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump the production-dependencies group across 1 directory with 5 updates #931

Bump the production-dependencies group across 1 directory with 5 updates #931

dependabot bot commented on behalf of github Aug 3, 2024 •

edited

Loading

dependabot bot commented on behalf of github Aug 10, 2024

Bump the production-dependencies group across 1 directory with 5 updates #931

Bump the production-dependencies group across 1 directory with 5 updates #931

Conversation

dependabot bot commented on behalf of github Aug 3, 2024 • edited Loading

1.34.153

1.34.152

1.34.151

1.34.150

1.34.149

Note worthy changes

Backwards incompatible changes

8.3.2

pytest 8.3.2 (2024-07-24)

Bug fixes

8.3.1

pytest 8.3.1 (2024-07-20)

8.3.0

pytest 8.3.0 (2024-07-20)

New features

5.0.8

Changes

🔥 Breaking Changes

🚀 New Features

🧰 Maintenance

🐛 Bug Fixes

dependabot bot commented on behalf of github Aug 10, 2024

dependabot bot commented on behalf of github Aug 3, 2024 •

edited

Loading