Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Bump the pip group across 1 directory with 15 updates #55

Merged
merged 2 commits into from
Oct 22, 2024
Merged

Bump the pip group across 1 directory with 15 updates #55

merged 2 commits into from
Oct 22, 2024

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Oct 21, 2024

Bumps the pip group with 15 updates in the / directory:

Package From To
anyio 4.6.0 4.6.2.post1
boto3 1.35.35 1.35.45
botocore 1.35.35 1.35.45
cryptography 43.0.1 43.0.3
fastapi 0.115.0 0.115.2
httptools 0.6.1 0.6.4
markupsafe 3.0.0 3.0.2
orjson 3.10.7 3.10.9
pillow 10.4.0 11.0.0
pydantic-settings 2.5.2 2.6.0
pydantic-core 2.23.4 2.24.2
s3transfer 0.10.2 0.10.3
starlette 0.38.6 0.41.0
uvicorn 0.31.0 0.32.0
uvloop 0.20.0 0.21.0

Updates anyio from 4.6.0 to 4.6.2.post1

Release notes

Sourced from anyio's releases.

4.6.2

  • Fixed regression caused by (#807) that prevented the use of parametrized async fixtures

4.6.1

This release contains all the changes from both v4.5.1 and v4.6.0, plus:

  • Fixed TaskGroup and CancelScope producing cyclic references in tracebacks when raising exceptions (#806) (PR by @​graingert)
Commits
  • c484425 Bumped up the version
  • fb81dfe Fixed a regression in the pytest plugin that broke parametrized async fixtures
  • 445e59e Bumped up the version
  • 64f570e Fixed tox configuration
  • 5abc9ec Updated Path documentation and made is_junction() conditional (#800)
  • ede2029 Fixed TypeError when TLS handshake fails with truststore SSLContext (#801)
  • 163f10c Fixed cyclic garbage that keeps traceback frames alive in task group exceptio...
  • 0614b4f Migrated to native TOML configuration for Tox
  • 012a60c Made test_start_task_soon_cancel_immediately() less flaky
  • 65ef48a Rebind instance method fixtures to the same instance as the test (#807)
  • Additional commits viewable in compare view

Updates boto3 from 1.35.35 to 1.35.45

Commits
  • 59cba2a Merge branch 'release-1.35.45'
  • 81cf608 Bumping version to 1.35.45
  • 976dad2 Add changelog entries from botocore
  • 1631e47 Merge branch 'release-1.35.44'
  • 15c3dbc Merge branch 'release-1.35.44' into develop
  • b209875 Bumping version to 1.35.44
  • 27e92f9 Add changelog entries from botocore
  • b5395f4 Merge branch 'release-1.35.43' into develop
  • 3664a8d Merge branch 'release-1.35.43'
  • aab8f82 Bumping version to 1.35.43
  • Additional commits viewable in compare view

Updates botocore from 1.35.35 to 1.35.45

Commits
  • c87e507 Merge branch 'release-1.35.45'
  • 38b3e6d Bumping version to 1.35.45
  • 4ee8f0c Update to latest models
  • d64e956 S3 200 errors implementation (#3276)
  • b90e353 Fix flakey test by allowing arbitrary warnings during capture (#3282)
  • feac226 Merge branch 'release-1.35.44'
  • 3cf5573 Merge branch 'release-1.35.44' into develop
  • 21214db Bumping version to 1.35.44
  • b1180a9 Update to latest models
  • ad6979d Merge branch 'release-1.35.43'
  • Additional commits viewable in compare view

Updates cryptography from 43.0.1 to 43.0.3

Changelog

Sourced from cryptography's changelog.

43.0.3 - 2024-10-18


* Fixed release metadata for ``cryptography-vectors``

.. _v43-0-2:


43.0.2 - 2024-10-18

  • Fixed compilation when using LibreSSL 4.0.0.

.. _v43-0-1:

Commits

Updates fastapi from 0.115.0 to 0.115.2

Release notes

Sourced from fastapi's releases.

0.115.2

Upgrades

0.115.1

Fixes

Refactors

  • ♻️ Update type annotations for improved python-multipart. PR #12407 by @​tiangolo.

Docs

Translations

Internal

... (truncated)

Commits

Updates httptools from 0.6.1 to 0.6.4

Release notes

Sourced from httptools's releases.

v0.6.4

Fixes

  • Include Cython source files in sdist (by @​mgorny in 2287a95a for #115)

v0.6.3

Fixes

v0.6.2

Fixes

Commits

Updates markupsafe from 3.0.0 to 3.0.2

Release notes

Sourced from markupsafe's releases.

3.0.2

This is the MarkupSafe 3.0.2 fix release, which fixes bugs but does not otherwise change behavior and should not result in breaking changes.

PyPI: https://pypi.org/project/MarkupSafe/3.0.2/ Changes: https://markupsafe.palletsprojects.com/page/changes/#version-3-0-2 Milestone: https://github.com/pallets/markupsafe/milestone/14?closed=1

  • Fix compatibility when __str__ returns a str subclass. #472
  • Build requires setuptools >= 70.1. #475

3.0.1

This is the MarkupSafe 3.0.1 fix release, which fixes bugs but does not otherwise change behavior and should not result in breaking changes.

PyPI: https://pypi.org/project/MarkupSafe/3.0.1/ Changes: https://markupsafe.palletsprojects.com/page/changes/#version-3-0-1 Milestone: https://github.com/pallets/markupsafe/milestone/13?closed=1

  • Address compiler warnings that became errors in GCC 14. #466
  • Fix compatibility with proxy objects. #467
Changelog

Sourced from markupsafe's changelog.

Version 3.0.2

Released 2024-10-18

  • Fix compatibility when __str__ returns a str subclass. :issue:472
  • Build requires setuptools >= 70.1. :issue:475

Version 3.0.1

Released 2024-10-08

  • Address compiler warnings that became errors in GCC 14. :issue:466
  • Fix compatibility with proxy objects. :issue:467
Commits

Updates orjson from 3.10.7 to 3.10.9

Release notes

Sourced from orjson's releases.

3.10.9

Fixed

  • Fix int serialization on 32-bit Python 3.8, 3.9, 3.10. This was introduced in 3.10.8.

3.10.8

Changed

  • int serialization no longer chains OverflowError to the the __cause__ attribute of orjson.JSONEncodeError when range exceeded.
  • Compatibility with CPython 3.14 alpha 1.
  • Improve performance.
Changelog

Sourced from orjson's changelog.

3.10.9

Fixed

  • Fix int serialization on 32-bit Python 3.8, 3.9, 3.10. This was introduced in 3.10.8.

3.10.8

Changed

  • int serialization no longer chains OverflowError to the the __cause__ attribute of orjson.JSONEncodeError when range exceeded.
  • Compatibility with CPython 3.14 alpha 1.
  • Improve performance.
Commits

Updates pillow from 10.4.0 to 11.0.0

Release notes

Sourced from pillow's releases.

11.0.0

https://pillow.readthedocs.io/en/stable/releasenotes/11.0.0.html

Changes

... (truncated)

Changelog

Sourced from pillow's changelog.

11.0.0 (2024-10-15)

  • Update licence to MIT-CMU #8460 [hugovk]

  • Conditionally define ImageCms type hint to avoid requiring core #8197 [radarhere]

  • Support writing LONG8 offsets in AppendingTiffWriter #8417 [radarhere]

  • Use ImageFile.MAXBLOCK when saving TIFF images #8461 [radarhere]

  • Do not close provided file handles with libtiff when saving #8458 [radarhere]

  • Support ImageFilter.BuiltinFilter for I;16* images #8438 [radarhere]

  • Use ImagingCore.ptr instead of ImagingCore.id #8341 [homm, radarhere, hugovk]

  • Updated EPS mode when opening images without transparency #8281 [Yay295, radarhere]

  • Use transparency when combining P frames from APNGs #8443 [radarhere]

  • Support all resampling filters when resizing I;16* images #8422 [radarhere]

  • Free memory on early return #8413 [radarhere]

  • Cast int before potentially exceeding INT_MAX #8402 [radarhere]

  • Check image value before use #8400 [radarhere]

  • Improved copying imagequant libraries #8420 [radarhere]

  • Use Capsule for WebP saving #8386 [homm, radarhere]

  • Fixed writing multiple StripOffsets to TIFF #8317 [Yay295, radarhere]

... (truncated)

Commits

Updates pydantic-settings from 2.5.2 to 2.6.0

Release notes

Sourced from pydantic-settings's releases.

v2.6.0

What's Changed

New Contributors

Full Changelog: pydantic/pydantic-settings@v2.5.2...v2.6.0

Commits
  • eeea989 Prepare release 2.6.0 (#444)
  • a72fa73 Fix bug in dotenv source when there is env with and without prefix (#440)
  • d2e498a Add support for suppressing fields from CLI help. (#436)
  • 0d605d0 Update nested model partial update docs example. (#433)
  • 8f7653c Put tests for non-default sources in separate files (#429)
  • f3a25f2 Fix a regression in dotenv optional nested field (#423)
  • 76ba2c6 Fix context not passed to field validators bug (#417)
  • 84cab2b Add CLI App Support (#389)
  • fdd666b Fix nested model AliasChoices in validation alias (#411)
  • 9b73e92 Add cli_flag_prefix_char config option. (#418)
  • Additional commits viewable in compare view

Updates pydantic-core from 2.23.4 to 2.24.2

Release notes

Sourced from pydantic-core's releases.

v2.24.2 2024-10-15

What's Changed

Full Changelog: pydantic/pydantic-core@v2.24.1...v2.24.2

v2.24.1 2024-10-11

What's Changed

Packaging

Fixes

Changes

Full Changelog: pydantic/pydantic-core@v2.24.0...v2.24.1

v2.24.0 2024-09-20

What's Changed

Features

Fixes

New Contributors

Full Changelog: pydantic/pydantic-core@v2.23.4...v2.24.0

Commits

Updates s3transfer from 0.10.2 to 0.10.3

Changelog

Sourced from s3transfer's changelog.

0.10.3

  • enhancement:Python: Added provisional Python 3.13 support to s3transfer
Commits

Updates starlette from 0.38.6 to 0.41.0

Release notes

Sourced from starlette's releases.

Version 0.41.0

Added

Version 0.40.0

This release fixes a Denial of service (DoS) via multipart/form-data requests.

You can view the full security advisory: GHSA-f96h-pmfr-66vw

Fixed

  • Add max_part_size to MultiPartParser to limit the size of parts in multipart/form-data requests fd038f3.

Version 0.39.2

Fixed

  • Allow use of request.url_for when only "app" scope is available #2672.
  • Fix internal type hints to support python-multipart==0.0.12 #2708.

Full Changelog: encode/starlette@0.39.1...0.39.2

Version 0.39.1

Fixed

  • Avoid regex re-compilation in responses.py and schemas.py #2700.
  • Improve performance of get_route_path by removing regular expression usage #2701.
  • Consider FileResponse.chunk_size when handling multiple ranges #2703.
  • Use token_hex for generating multipart boundary strings #2702.

Full Changelog: encode/starlette@0.39.0...0.39.1

Version 0.39.0

Added

  • Add support for HTTP Range to FileResponse #2697

Full Changelog: encode/starlette@0.38.6...0.39.0

Changelog

Sourced from starlette's changelog.

0.41.0 (October 15, 2024)

Added

  • Allow to raise HTTPException before websocket.accept() #2725.

0.40.0 (October 15, 2024)

This release fixes a Denial of service (DoS) via multipart/form-data requests.

You can view the full security advisory: GHSA-f96h-pmfr-66vw

Fixed

  • Add max_part_size to MultiPartParser to limit the size of parts in multipart/form-data requests fd038f3.

0.39.2 (September 29, 2024)

Fixed

  • Allow use of request.url_for when only "app" scope is available #2672.
  • Fix internal type hints to support python-multipart==0.0.12 #2708.

0.39.1 (September 25, 2024)

Fixed

  • Avoid regex re-compilation in responses.py and schemas.py #2700.
  • Improve performance of get_route_path by removing regular expression usage #2701.
  • Consider FileResponse.chunk_size when handling multiple ranges #2703.
  • Use token_hexDescription has been truncated

@dependabot
Bump the pip group across 1 directory with 15 updates
99a7d0d 
Bumps the pip group with 15 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [anyio](https://github.com/agronholm/anyio) | `4.6.0` | `4.6.2.post1` |
| [boto3](https://github.com/boto/boto3) | `1.35.35` | `1.35.45` |
| [botocore](https://github.com/boto/botocore) | `1.35.35` | `1.35.45` |
| [cryptography](https://github.com/pyca/cryptography) | `43.0.1` | `43.0.3` |
| [fastapi](https://github.com/fastapi/fastapi) | `0.115.0` | `0.115.2` |
| [httptools](https://github.com/MagicStack/httptools) | `0.6.1` | `0.6.4` |
| [markupsafe](https://github.com/pallets/markupsafe) | `3.0.0` | `3.0.2` |
| [orjson](https://github.com/ijl/orjson) | `3.10.7` | `3.10.9` |
| [pillow](https://github.com/python-pillow/Pillow) | `10.4.0` | `11.0.0` |
| [pydantic-settings](https://github.com/pydantic/pydantic-settings) | `2.5.2` | `2.6.0` |
| [pydantic-core](https://github.com/pydantic/pydantic-core) | `2.23.4` | `2.24.2` |
| [s3transfer](https://github.com/boto/s3transfer) | `0.10.2` | `0.10.3` |
| [starlette](https://github.com/encode/starlette) | `0.38.6` | `0.41.0` |
| [uvicorn](https://github.com/encode/uvicorn) | `0.31.0` | `0.32.0` |
| [uvloop](https://github.com/MagicStack/uvloop) | `0.20.0` | `0.21.0` |



Updates `anyio` from 4.6.0 to 4.6.2.post1
- [Release notes](https://github.com/agronholm/anyio/releases)
- [Changelog](https://github.com/agronholm/anyio/blob/master/docs/versionhistory.rst)
- [Commits](agronholm/anyio@4.6.0...4.6.2.post1)

Updates `boto3` from 1.35.35 to 1.35.45
- [Release notes](https://github.com/boto/boto3/releases)
- [Commits](boto/boto3@1.35.35...1.35.45)

Updates `botocore` from 1.35.35 to 1.35.45
- [Commits](boto/botocore@1.35.35...1.35.45)

Updates `cryptography` from 43.0.1 to 43.0.3
- [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst)
- [Commits](pyca/cryptography@43.0.1...43.0.3)

Updates `fastapi` from 0.115.0 to 0.115.2
- [Release notes](https://github.com/fastapi/fastapi/releases)
- [Commits](fastapi/fastapi@0.115.0...0.115.2)

Updates `httptools` from 0.6.1 to 0.6.4
- [Release notes](https://github.com/MagicStack/httptools/releases)
- [Commits](MagicStack/httptools@v0.6.1...v0.6.4)

Updates `markupsafe` from 3.0.0 to 3.0.2
- [Release notes](https://github.com/pallets/markupsafe/releases)
- [Changelog](https://github.com/pallets/markupsafe/blob/main/CHANGES.rst)
- [Commits](pallets/markupsafe@3.0.0...3.0.2)

Updates `orjson` from 3.10.7 to 3.10.9
- [Release notes](https://github.com/ijl/orjson/releases)
- [Changelog](https://github.com/ijl/orjson/blob/master/CHANGELOG.md)
- [Commits](ijl/orjson@3.10.7...3.10.9)

Updates `pillow` from 10.4.0 to 11.0.0
- [Release notes](https://github.com/python-pillow/Pillow/releases)
- [Changelog](https://github.com/python-pillow/Pillow/blob/main/CHANGES.rst)
- [Commits](python-pillow/Pillow@10.4.0...11.0.0)

Updates `pydantic-settings` from 2.5.2 to 2.6.0
- [Release notes](https://github.com/pydantic/pydantic-settings/releases)
- [Commits](pydantic/pydantic-settings@v2.5.2...v2.6.0)

Updates `pydantic-core` from 2.23.4 to 2.24.2
- [Release notes](https://github.com/pydantic/pydantic-core/releases)
- [Commits](pydantic/pydantic-core@v2.23.4...v2.24.2)

Updates `s3transfer` from 0.10.2 to 0.10.3
- [Changelog](https://github.com/boto/s3transfer/blob/develop/CHANGELOG.rst)
- [Commits](boto/s3transfer@0.10.2...0.10.3)

Updates `starlette` from 0.38.6 to 0.41.0
- [Release notes](https://github.com/encode/starlette/releases)
- [Changelog](https://github.com/encode/starlette/blob/master/docs/release-notes.md)
- [Commits](encode/starlette@0.38.6...0.41.0)

Updates `uvicorn` from 0.31.0 to 0.32.0
- [Release notes](https://github.com/encode/uvicorn/releases)
- [Changelog](https://github.com/encode/uvicorn/blob/master/CHANGELOG.md)
- [Commits](encode/uvicorn@0.31.0...0.32.0)

Updates `uvloop` from 0.20.0 to 0.21.0
- [Release notes](https://github.com/MagicStack/uvloop/releases)
- [Commits](MagicStack/uvloop@v0.20.0...v0.21.0)

---
updated-dependencies:
- dependency-name: anyio
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: pip
- dependency-name: boto3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: pip
- dependency-name: botocore
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: pip
- dependency-name: cryptography
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: pip
- dependency-name: fastapi
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: pip
- dependency-name: httptools
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: pip
- dependency-name: markupsafe
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: pip
- dependency-name: orjson
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: pip
- dependency-name: pillow
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: pip
- dependency-name: pydantic-settings
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pip
- dependency-name: pydantic-core
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pip
- dependency-name: s3transfer
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: pip
- dependency-name: starlette
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pip
- dependency-name: uvicorn
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pip
- dependency-name: uvloop
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pip
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Oct 21, 2024
@codecov-commenter
Copy link

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 98.70%. Comparing base (b369b97) to head (9640430).
Report is 13 commits behind head on develop.

Additional details and impacted files 
@@           Coverage Diff            @@
##           develop      #55   +/-   ##
========================================
  Coverage    98.70%   98.70%           
========================================
  Files           19       19           
  Lines          310      310           
========================================
  Hits           306      306           
  Misses           4        4

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

@joelvdavies joelvdavies merged commit d6cbbec into develop Oct 22, 2024
3 checks passed
@joelvdavies joelvdavies deleted the dependabot/pip/pip-9c14a5dfdd branch October 22, 2024 14:13
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@joelvdavies joelvdavies joelvdavies approved these changes

Assignees
No one assigned
Labels
dependencies Pull requests that update a dependency file python Pull requests that update Python code
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
2 participants
@codecov-commenter @joelvdavies