Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump the pip group across 1 directory with 12 updates #48

Closed
wants to merge 1 commit into from

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Oct 16, 2024

Bumps the pip group with 12 updates in the / directory:

Package From To
anyio 4.6.0 4.6.2.post1
boto3 1.35.35 1.35.41
botocore 1.35.35 1.35.41
fastapi 0.115.0 0.115.2
httptools 0.6.1 0.6.2
markupsafe 3.0.0 3.0.1
pillow 10.4.0 11.0.0
pydantic-core 2.23.4 2.24.2
s3transfer 0.10.2 0.10.3
starlette 0.38.6 0.41.0
uvicorn 0.31.0 0.32.0
uvloop 0.20.0 0.21.0

Updates anyio from 4.6.0 to 4.6.2.post1

Release notes

Sourced from anyio's releases.

4.6.2

  • Fixed regression caused by (#807) that prevented the use of parametrized async fixtures

4.6.1

This release contains all the changes from both v4.5.1 and v4.6.0, plus:

  • Fixed TaskGroup and CancelScope producing cyclic references in tracebacks when raising exceptions (#806) (PR by @​graingert)
Commits
  • c484425 Bumped up the version
  • fb81dfe Fixed a regression in the pytest plugin that broke parametrized async fixtures
  • 445e59e Bumped up the version
  • 64f570e Fixed tox configuration
  • 5abc9ec Updated Path documentation and made is_junction() conditional (#800)
  • ede2029 Fixed TypeError when TLS handshake fails with truststore SSLContext (#801)
  • 163f10c Fixed cyclic garbage that keeps traceback frames alive in task group exceptio...
  • 0614b4f Migrated to native TOML configuration for Tox
  • 012a60c Made test_start_task_soon_cancel_immediately() less flaky
  • 65ef48a Rebind instance method fixtures to the same instance as the test (#807)
  • Additional commits viewable in compare view

Updates boto3 from 1.35.35 to 1.35.41

Commits
  • 9d30ff5 Merge branch 'release-1.35.41'
  • 280ccea Bumping version to 1.35.41
  • 86ae349 Add changelog entries from botocore
  • 8c407d1 Merge branch 'release-1.35.40'
  • ecab54d Merge branch 'release-1.35.40' into develop
  • cc0487e Bumping version to 1.35.40
  • b1f3f73 Add changelog entries from botocore
  • f2b18d3 Merge branch 'release-1.35.39' into develop
  • 9dd723f Merge branch 'release-1.35.39'
  • dff7abc Bumping version to 1.35.39
  • Additional commits viewable in compare view

Updates botocore from 1.35.35 to 1.35.41

Commits
  • 60a882d Merge branch 'release-1.35.41'
  • 2899f95 Bumping version to 1.35.41
  • 68b7a4f Update endpoints model
  • a5351de Update to latest models
  • 41d910f Merge branch 'release-1.35.40'
  • 131f207 Merge branch 'release-1.35.40' into develop
  • de00677 Bumping version to 1.35.40
  • d7b78f0 Update endpoints model
  • 1b6d6fa Update to latest models
  • 35ed03b Merge branch 'release-1.35.39'
  • Additional commits viewable in compare view

Updates fastapi from 0.115.0 to 0.115.2

Release notes

Sourced from fastapi's releases.

0.115.2

Upgrades

0.115.1

Fixes

Refactors

  • ♻️ Update type annotations for improved python-multipart. PR #12407 by @​tiangolo.

Docs

Translations

Internal

... (truncated)

Commits

Updates httptools from 0.6.1 to 0.6.2

Release notes

Sourced from httptools's releases.

v0.6.2

Fixes

Commits

Updates markupsafe from 3.0.0 to 3.0.1

Release notes

Sourced from markupsafe's releases.

3.0.1

This is the MarkupSafe 3.0.1 fix release, which fixes bugs but does not otherwise change behavior and should not result in breaking changes.

PyPI: https://pypi.org/project/MarkupSafe/3.0.1/ Changes: https://markupsafe.palletsprojects.com/page/changes/#version-3-0-1 (pending a fix to the docs build) Milestone: https://github.com/pallets/markupsafe/milestone/13?closed=1

  • Address compiler warnings that became errors in GCC 14. #466
  • Fix compatibility with proxy objects. #467
Changelog

Sourced from markupsafe's changelog.

Version 3.0.1

Released 2024-10-08

  • Address compiler warnings that became errors in GCC 14. :issue:466
  • Fix compatibility with proxy objects. :issue:467
Commits

Updates pillow from 10.4.0 to 11.0.0

Release notes

Sourced from pillow's releases.

11.0.0

https://pillow.readthedocs.io/en/stable/releasenotes/11.0.0.html

Changes

... (truncated)

Changelog

Sourced from pillow's changelog.

11.0.0 (2024-10-15)

  • Update licence to MIT-CMU #8460 [hugovk]

  • Conditionally define ImageCms type hint to avoid requiring core #8197 [radarhere]

  • Support writing LONG8 offsets in AppendingTiffWriter #8417 [radarhere]

  • Use ImageFile.MAXBLOCK when saving TIFF images #8461 [radarhere]

  • Do not close provided file handles with libtiff when saving #8458 [radarhere]

  • Support ImageFilter.BuiltinFilter for I;16* images #8438 [radarhere]

  • Use ImagingCore.ptr instead of ImagingCore.id #8341 [homm, radarhere, hugovk]

  • Updated EPS mode when opening images without transparency #8281 [Yay295, radarhere]

  • Use transparency when combining P frames from APNGs #8443 [radarhere]

  • Support all resampling filters when resizing I;16* images #8422 [radarhere]

  • Free memory on early return #8413 [radarhere]

  • Cast int before potentially exceeding INT_MAX #8402 [radarhere]

  • Check image value before use #8400 [radarhere]

  • Improved copying imagequant libraries #8420 [radarhere]

  • Use Capsule for WebP saving #8386 [homm, radarhere]

  • Fixed writing multiple StripOffsets to TIFF #8317 [Yay295, radarhere]

... (truncated)

Commits

Updates pydantic-core from 2.23.4 to 2.24.2

Release notes

Sourced from pydantic-core's releases.

v2.24.2 2024-10-15

What's Changed

Full Changelog: pydantic/pydantic-core@v2.24.1...v2.24.2

v2.24.1 2024-10-11

What's Changed

Packaging

Fixes

Changes

Full Changelog: pydantic/pydantic-core@v2.24.0...v2.24.1

v2.24.0 2024-09-20

What's Changed

Features

Fixes

New Contributors

Full Changelog: pydantic/pydantic-core@v2.23.4...v2.24.0

Commits

Updates s3transfer from 0.10.2 to 0.10.3

Changelog

Sourced from s3transfer's changelog.

0.10.3

  • enhancement:Python: Added provisional Python 3.13 support to s3transfer
Commits

Updates starlette from 0.38.6 to 0.41.0

Release notes

Sourced from starlette's releases.

Version 0.41.0

Added

Version 0.40.0

This release fixes a Denial of service (DoS) via multipart/form-data requests.

You can view the full security advisory: GHSA-f96h-pmfr-66vw

Fixed

  • Add max_part_size to MultiPartParser to limit the size of parts in multipart/form-data requests fd038f3.

Version 0.39.2

Fixed

  • Allow use of request.url_for when only "app" scope is available #2672.
  • Fix internal type hints to support python-multipart==0.0.12 #2708.

Full Changelog: encode/starlette@0.39.1...0.39.2

Version 0.39.1

Fixed

  • Avoid regex re-compilation in responses.py and schemas.py #2700.
  • Improve performance of get_route_path by removing regular expression usage #2701.
  • Consider FileResponse.chunk_size when handling multiple ranges #2703.
  • Use token_hex for generating multipart boundary strings #2702.

Full Changelog: encode/starlette@0.39.0...0.39.1

Version 0.39.0

Added

  • Add support for HTTP Range to FileResponse #2697

Full Changelog: encode/starlette@0.38.6...0.39.0

Changelog

Sourced from starlette's changelog.

0.41.0 (October 15, 2024)

Added

  • Allow to raise HTTPException before websocket.accept() #2725.

0.40.0 (October 15, 2024)

This release fixes a Denial of service (DoS) via multipart/form-data requests.

You can view the full security advisory: GHSA-f96h-pmfr-66vw

Fixed

  • Add max_part_size to MultiPartParser to limit the size of parts in multipart/form-data requests fd038f3.

0.39.2 (September 29, 2024)

Fixed

  • Allow use of request.url_for when only "app" scope is available #2672.
  • Fix internal type hints to support python-multipart==0.0.12 #2708.

0.39.1 (September 25, 2024)

Fixed

  • Avoid regex re-compilation in responses.py and schemas.py #2700.
  • Improve performance of get_route_path by removing regular expression usage #2701.
  • Consider FileResponse.chunk_size when handling multiple ranges #2703.
  • Use token_hex for generating multipart boundary strings #2702.

0.39.0 (September 23, 2024)

Added

Commits

Updates uvicorn from 0.31.0 to 0.32.0

Release notes

Sourced from uvicorn's releases.

Version 0.32.0

Added

  • Officially support Python 3.13 (#2482)
  • Warn when max_request_limit is exceeded (#2430)

Full Changelog: encode/uvicorn@0.31.1...0.32.0

Version 0.31.1

Fixed

  • Support WebSockets 0.13.1 #2471
  • Restore support for [*] in trusted hosts #2480
  • Add PathLike[str] type hint for ssl_keyfile #2481

Full Changelog: encode/uvicorn@0.31.0...0.31.1

Changelog

Sourced from uvicorn's changelog.

0.32.0 (2024-10-15)

Added

  • Officially support Python 3.13 (#2482)
  • Warn when max_request_limit is exceeded (#2430)

0.31.1 (2024-10-09)

Fixed

  • Support WebSockets 0.13.1 (#2471)
  • Restore support for [*] in trusted hosts (#2480)
  • Add PathLike[str] type hint for ssl_keyfile (#2481)
Commits

Updates uvloop from 0.20.0 to 0.21.0

Release notes

Sourced from uvloop's releases.

v0.21.0

Changes

  • Add cleanup_socket param on create_unix_server() (#623) (by @​fantix in d6114d2)

Fixes

v0.21.0beta1

No release notes provided.

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the pip group with 12 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [anyio](https://github.com/agronholm/anyio) | `4.6.0` | `4.6.2.post1` |
| [boto3](https://github.com/boto/boto3) | `1.35.35` | `1.35.41` |
| [botocore](https://github.com/boto/botocore) | `1.35.35` | `1.35.41` |
| [fastapi](https://github.com/fastapi/fastapi) | `0.115.0` | `0.115.2` |
| [httptools](https://github.com/MagicStack/httptools) | `0.6.1` | `0.6.2` |
| [markupsafe](https://github.com/pallets/markupsafe) | `3.0.0` | `3.0.1` |
| [pillow](https://github.com/python-pillow/Pillow) | `10.4.0` | `11.0.0` |
| [pydantic-core](https://github.com/pydantic/pydantic-core) | `2.23.4` | `2.24.2` |
| [s3transfer](https://github.com/boto/s3transfer) | `0.10.2` | `0.10.3` |
| [starlette](https://github.com/encode/starlette) | `0.38.6` | `0.41.0` |
| [uvicorn](https://github.com/encode/uvicorn) | `0.31.0` | `0.32.0` |
| [uvloop](https://github.com/MagicStack/uvloop) | `0.20.0` | `0.21.0` |



Updates `anyio` from 4.6.0 to 4.6.2.post1
- [Release notes](https://github.com/agronholm/anyio/releases)
- [Changelog](https://github.com/agronholm/anyio/blob/master/docs/versionhistory.rst)
- [Commits](agronholm/anyio@4.6.0...4.6.2.post1)

Updates `boto3` from 1.35.35 to 1.35.41
- [Release notes](https://github.com/boto/boto3/releases)
- [Commits](boto/boto3@1.35.35...1.35.41)

Updates `botocore` from 1.35.35 to 1.35.41
- [Commits](boto/botocore@1.35.35...1.35.41)

Updates `fastapi` from 0.115.0 to 0.115.2
- [Release notes](https://github.com/fastapi/fastapi/releases)
- [Commits](fastapi/fastapi@0.115.0...0.115.2)

Updates `httptools` from 0.6.1 to 0.6.2
- [Release notes](https://github.com/MagicStack/httptools/releases)
- [Commits](MagicStack/httptools@v0.6.1...v0.6.2)

Updates `markupsafe` from 3.0.0 to 3.0.1
- [Release notes](https://github.com/pallets/markupsafe/releases)
- [Changelog](https://github.com/pallets/markupsafe/blob/main/CHANGES.rst)
- [Commits](pallets/markupsafe@3.0.0...3.0.1)

Updates `pillow` from 10.4.0 to 11.0.0
- [Release notes](https://github.com/python-pillow/Pillow/releases)
- [Changelog](https://github.com/python-pillow/Pillow/blob/main/CHANGES.rst)
- [Commits](python-pillow/Pillow@10.4.0...11.0.0)

Updates `pydantic-core` from 2.23.4 to 2.24.2
- [Release notes](https://github.com/pydantic/pydantic-core/releases)
- [Commits](pydantic/pydantic-core@v2.23.4...v2.24.2)

Updates `s3transfer` from 0.10.2 to 0.10.3
- [Changelog](https://github.com/boto/s3transfer/blob/develop/CHANGELOG.rst)
- [Commits](boto/s3transfer@0.10.2...0.10.3)

Updates `starlette` from 0.38.6 to 0.41.0
- [Release notes](https://github.com/encode/starlette/releases)
- [Changelog](https://github.com/encode/starlette/blob/master/docs/release-notes.md)
- [Commits](encode/starlette@0.38.6...0.41.0)

Updates `uvicorn` from 0.31.0 to 0.32.0
- [Release notes](https://github.com/encode/uvicorn/releases)
- [Changelog](https://github.com/encode/uvicorn/blob/master/CHANGELOG.md)
- [Commits](encode/uvicorn@0.31.0...0.32.0)

Updates `uvloop` from 0.20.0 to 0.21.0
- [Release notes](https://github.com/MagicStack/uvloop/releases)
- [Commits](MagicStack/uvloop@v0.20.0...v0.21.0)

---
updated-dependencies:
- dependency-name: anyio
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: pip
- dependency-name: boto3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: pip
- dependency-name: botocore
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: pip
- dependency-name: fastapi
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: pip
- dependency-name: httptools
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: pip
- dependency-name: markupsafe
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: pip
- dependency-name: pillow
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: pip
- dependency-name: pydantic-core
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pip
- dependency-name: s3transfer
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: pip
- dependency-name: starlette
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pip
- dependency-name: uvicorn
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pip
- dependency-name: uvloop
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pip
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Oct 16, 2024
Copy link
Contributor Author

dependabot bot commented on behalf of github Oct 21, 2024

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot bot closed this Oct 21, 2024
@dependabot dependabot bot deleted the dependabot/pip/pip-dd1229d7bc branch October 21, 2024 23:22
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file python Pull requests that update Python code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants