Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore(deps): bump the dependencies group across 1 directory with 10 updates #934

Closed
wants to merge 1 commit into from

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Sep 30, 2024

Bumps the dependencies group with 10 updates in the / directory:

Package From To
aiohttp 3.10.5 3.10.8
django 5.1 5.1.1
django-anymail 11.1 12.0
django-simpleui 2024.4.1 2024.8.28
ipython 8.26.0 8.27.0
redis 5.0.8 5.1.0
sentry-sdk 2.13.0 2.14.0
uwsgi 2.0.26 2.0.27
djlint 1.34.1 1.35.2
ruff 0.6.2 0.6.8

Updates aiohttp from 3.10.5 to 3.10.8

Release notes

Sourced from aiohttp's releases.

3.10.8

Bug fixes

  • Fixed cancellation leaking upwards on timeout -- by :user:bdraco.

    Related issues and pull requests on GitHub: #9326.


3.10.7

Bug fixes

  • Fixed assembling the :class:~yarl.URL for web requests when the host contains a non-default port or IPv6 address -- by :user:bdraco.

    Related issues and pull requests on GitHub: #9309.

Miscellaneous internal changes

  • Improved performance of determining if a URL is absolute -- by :user:bdraco.

    The property :attr:~yarl.URL.absolute is more performant than the method URL.is_absolute() and preferred when newer versions of yarl are used.

    Related issues and pull requests on GitHub: #9171.

  • Replaced code that can now be handled by yarl -- by :user:bdraco.

    Related issues and pull requests on GitHub: #9301.

... (truncated)

Changelog

Sourced from aiohttp's changelog.

3.10.8 (2024-09-28)

Bug fixes

  • Fixed cancellation leaking upwards on timeout -- by :user:bdraco.

    Related issues and pull requests on GitHub: :issue:9326.


3.10.7 (2024-09-27)

Bug fixes

  • Fixed assembling the :class:~yarl.URL for web requests when the host contains a non-default port or IPv6 address -- by :user:bdraco.

    Related issues and pull requests on GitHub: :issue:9309.

Miscellaneous internal changes

  • Improved performance of determining if a URL is absolute -- by :user:bdraco.

    The property :attr:~yarl.URL.absolute is more performant than the method URL.is_absolute() and preferred when newer versions of yarl are used.

    Related issues and pull requests on GitHub: :issue:9171.

  • Replaced code that can now be handled by yarl -- by :user:bdraco.

    Related issues and pull requests on GitHub:

... (truncated)

Commits

Updates django from 5.1 to 5.1.1

Commits
  • 1e1d791 [5.1.x] Bumped version for 5.1.1 release.
  • 3c733c7 [5.1.x] Fixed CVE-2024-45231 -- Avoided server error on password reset when e...
  • 022ab0a [5.1.x] Fixed CVE-2024-45230 -- Mitigated potential DoS in urlize and urlizet...
  • 6203965 [5.1.x] Fixed #35716 -- Fixed VariableDoesNotExist when rendering admin field...
  • 26c0667 [5.1.x] Fixed #35688 -- Restored timezone and role setters to be PostgreSQL D...
  • fcb71a7 [5.1.x] Removed outdated note about lack of subquery support in MySQL.
  • 9b09a4f [5.1.x] Fixed typos in docs/howto/initial-data.txt.
  • 9a461ca [5.1.x] Fixed #35666 -- Documented stacklevel usage and testing, and adjusted...
  • dd58edc [5.1.x] Refs #35405 -- Adjusted deprecation warning stacklevel in FieldCacheM...
  • 8f5d2c3 [5.1.x] Refs #35326 -- Adjusted deprecation warning stacklevel in FileSystemS...
  • Additional commits viewable in compare view

Updates django-anymail from 11.1 to 12.0

Release notes

Sourced from django-anymail's releases.

v12.0

Changelog

Changelog

Sourced from django-anymail's changelog.

v12.0

2024-09-09

Breaking changes


* Require **Django 4.0 or later** and Python 3.8 or later.

Features


* **Resend:** Add support for ``send_at``.

Fixes


* **Unisender Go:** Fix several problems in Anymail's Unisender Go status tracking
  webhook. Rework signature checking to fix false validation errors (particularly
  on "clicked" and "opened" events). Properly handle "use single event" webhook
  option. Correctly verify WEBHOOK_SECRET when set. Provide Unisender Go's
  ``delivery_status`` code and unsubscribe form ``comment`` in Anymail's
  ``event.description``. Treat soft bounces as "deferred" rather than "bounced".
  (Thanks to `@MikeVL`_ for fixing the signature validation problem.)

Other
  • Mandrill (docs): Explain how cc and bcc handling depends on
    Mandrill's "preserve recipients" option. (Thanks to @dgilmanAIDENTIFIED_
    for reporting the issue.)

  • Postal (docs): Update links to Postal's new documentation site.
    (Thanks to @jmduke_.)
    </code></pre>
    </blockquote>
    </details>
    <details>
    <summary>Commits</summary>

<ul>
<li><a href="https://github.com/anymail/django-anymail/commit/35383c7140289e82b39ada5980077898aa07d18d&quot;&gt;&lt;code&gt;35383c7&lt;/code&gt;&lt;/a> Release 12.0</li>
<li><a href="https://github.com/anymail/django-anymail/commit/063fb08a588de7432107c640e9030b457ded7df7&quot;&gt;&lt;code&gt;063fb08&lt;/code&gt;&lt;/a> Amazon SES: add webhook extension points; close webhook boto3 clients</li>
<li><a href="https://github.com/anymail/django-anymail/commit/1da9011f50e9e3c178d7958a1ff21f8b73b2f797&quot;&gt;&lt;code&gt;1da9011&lt;/code&gt;&lt;/a> CI/CD: use Python 3.12 by default</li>
<li><a href="https://github.com/anymail/django-anymail/commit/0e020b21e2d1b8804ad85b98c0d9ba3d4a67cb77&quot;&gt;&lt;code&gt;0e020b2&lt;/code&gt;&lt;/a> Docs: update tooling</li>
<li><a href="https://github.com/anymail/django-anymail/commit/2324cb48a365605b1a500acebdc635b958555804&quot;&gt;&lt;code&gt;2324cb4&lt;/code&gt;&lt;/a> Drop Python 3.7</li>
<li><a href="https://github.com/anymail/django-anymail/commit/e4331d224955a7df8b09063f639304d58163660a&quot;&gt;&lt;code&gt;e4331d2&lt;/code&gt;&lt;/a> Unisender Go: Fix status tracking webhook and tests.</li>
<li><a href="https://github.com/anymail/django-anymail/commit/2f2a888f610ec37577ecbcad92959ef89fa0fe16&quot;&gt;&lt;code&gt;2f2a888&lt;/code&gt;&lt;/a> Resend: add support for send_at</li>
<li><a href="https://github.com/anymail/django-anymail/commit/af6eaea5657ff2a0d51f36f742c61b1785b9b63e&quot;&gt;&lt;code&gt;af6eaea&lt;/code&gt;&lt;/a> Docs: Note Mandrill's cc/bcc handling depends on preserve_recipients</li>
<li><a href="https://github.com/anymail/django-anymail/commit/03f5fb7641c3c13eba7b3dd471f768c4b39fbbe4&quot;&gt;&lt;code&gt;03f5fb7&lt;/code&gt;&lt;/a> Docs: Update outdated Postal links</li>
<li><a href="https://github.com/anymail/django-anymail/commit/397dcf5f8a6dcbdf84c0e769919a531559c3658e&quot;&gt;&lt;code&gt;397dcf5&lt;/code&gt;&lt;/a> Docs: prep for upcoming RTD build changes</li>
<li>Additional commits viewable in <a href="https://github.com/anymail/django-anymail/compare/v11.1...v12.0&quot;&gt;compare view</a></li>
</ul>
</details>

<br />

Updates django-simpleui from 2024.4.1 to 2024.8.28

Release notes

Sourced from django-simpleui's releases.

2024.8.28

Optimize ui

Commits

Updates ipython from 8.26.0 to 8.27.0

Commits
  • 82690a0 release 8.27.0
  • 7af1c01 Whats new 8.27 (#14508)
  • ef9d41e Whats new 8.27
  • 5c8bc51 Fix completion in indented lines dropping prefix when jedi is disabled (#14474)
  • 6bde8f6 Don't force matplotlib backend names to be lowercase (#14475)
  • d5762c1 Fix showing SystemExit exception raise inside except handler (#14503)
  • 82eba44 Fix some tests on Python 3.13 RC1 (#14504)
  • 2e34c77 Autoformat with darker
  • 44bffab Relax string checks in test_pinfo_docstring_dynamic
  • 7ea81cd Fix test_decorator_skip_with_breakpoint() on Python 3.13
  • Additional commits viewable in compare view

Updates redis from 5.0.8 to 5.1.0

Release notes

Sourced from redis's releases.

5.1.0

Changes

🚀 New Features

How to start with Client-side caching?

  1. Install redis-py 5.1.0
  2. Use the following code snippet:
r = Redis(protocol=3, cache_config=CacheConfig())

cache = r.get_cache()
r.set("foo", "bar")

get key from redis and save in local cache

print(r.get("foo"))

get key from local cache

print(cache.get(CacheKey(command="GET", redis_keys=("foo",))).cache_value)

change key in redis (cause invalidation)

r.set("foo", "barbar")

Retrieves a new value from server and cache it

print(r.get("foo"))

Make sure that new value was cached

print(cache.get(CacheKey(command="GET", redis_keys=("foo",))).cache_value)

Check documentation to get more examples

🔥 Breaking Changes

  • Timeseries insertion filters for close samples (#3228)
  • Enhanced classes string representation (#3001)
  • Partial clean up of Python 3.7 compatibility (#2928)
  • Handle RESP3 sets as Python lists (#3324)

🐛 Bug Fixes

  • Handle RESP3 sets as Python lists (#3324)
  • Prevent async ClusterPipeline instances from becoming "false-y" (#3068)
  • Add hostname field to _parse_node_line (#3343)
  • More docs fixes (#3326)
  • Delete the first-defined (and thus "duplicate") Script class (#3333)
  • Catch a known DeprecationWarning when calling .close() (#3335)
  • Add missed redismod at test_commands.py (#3369)

🧰 Maintenance

  • Update README.md - mentioning redis 7.4 support (#3375)
  • Update PyPy 3.8 to 3.10 in CI (#3370)
  • Updated commands from docker-compose to docker compose (#3352)

... (truncated)

Commits

Updates sentry-sdk from 2.13.0 to 2.14.0

Release notes

Sourced from sentry-sdk's releases.

2.14.0

Various fixes & improvements

Changelog

Sourced from sentry-sdk's changelog.

2.14.0

Various fixes & improvements

Commits
  • 1e73ce9 Updated changelog
  • 3d0edfd release: 2.14.0
  • 6814df9 tests: Remove broken bottle tests (#3505)
  • 0934e04 Fixed config for old coverage versions (#3504)
  • 9fc3bd2 Fix AWS Lambda tests (#3495)
  • e99873d Better test coverage reports (#3498)
  • 0fb9606 feat(celery): Add wrapper for Celery().send_task to support behavior as `Ta...
  • 16d05f4 fix(django): SentryWrappingMiddleware.init fails if super() is object
  • 9df2b21 feat(strawberry): Support Strawberry 0.239.2 (#3491)
  • cd15bff ref: Remove obsolete object as superclass (#3480)
  • Additional commits viewable in compare view

Updates uwsgi from 2.0.26 to 2.0.27

Updates djlint from 1.34.1 to 1.35.2

Release notes

Sourced from djlint's releases.

v1.35.2

  • Unpin dependencies upper bounds.
  • Use min(cpu_count, files_count, 4) workers. Use a thread instead of a process if only one worker will be used. This gives the best performance and low resource usage.
  • Refactor the code.
  • Fix max attribute length with longer regex custom html tags (#884)
  • Fix Jinja formatting issues (#715)
  • Fix: not detecting tabs as a valid seperation between tags (#813)
  • Fix: Add ignore for sms links (#815)
  • Fix: Allow attributes on (#830)

v1.34.2

1.34.2 (2024-08-28)

Bug Fixes

  • max attribute length with longer regex custom html tags (#884) (a8e3835)
Changelog

Sourced from djlint's changelog.

[1.35.2] - 2024-08-29

  • Fix npm publishing

[1.35.1] - 2024-08-29

  • Fix npm publishing

[1.35.0] - 2024-08-29

  • Unpin dependencies upper bounds.
  • Use min(cpu_count, files_count, 4) workers. Use a thread instead of a process if only one worker will be used. This gives the best performance and low resource usage.
  • Refactor the code.
  • Fix max attribute length with longer regex custom html tags (#884)
  • Fix Jinja formatting issues (#715)
  • Fix: not detecting tabs as a valid seperation between tags (#813)
  • Fix: Add ignore for sms links (#815)
  • Fix: Allow attributes on (#830)
Commits

Updates ruff from 0.6.2 to 0.6.8

Release notes

Sourced from ruff's releases.

0.6.8

Release Notes

Preview features

  • Remove unnecessary parentheses around match case clauses (#13510)
  • Parenthesize overlong if guards in match..case clauses (#13513)
  • Detect basic wildcard imports in ruff analyze graph (#13486)
  • [pylint] Implement boolean-chained-comparison (R1716) (#13435)

Rule changes

  • [lake8-simplify] Detect SIM910 when using variadic keyword arguments, i.e., **kwargs (#13503)
  • [pyupgrade] Avoid false negatives with non-reference shadowed bindings of loop variables (UP028) (#13504)

Bug fixes

  • Detect tuples bound to variadic positional arguments i.e. *args (#13512)
  • Exit gracefully on broken pipe errors (#13485)
  • Avoid panic when analyze graph hits broken pipe (#13484)

Performance

  • Reuse BTreeSets in module resolver (#13440)
  • Skip traversal for non-compound statements (#13441)

Contributors

Install ruff 0.6.8

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://github.com/astral-sh/ruff/releases/download/0.6.8/ruff-installer.sh | sh

Install prebuilt binaries via powershell script

... (truncated)

Changelog

Sourced from ruff's changelog.

0.6.8

Preview features

  • Remove unnecessary parentheses around match case clauses (#13510)
  • Parenthesize overlong if guards in match..case clauses (#13513)
  • Detect basic wildcard imports in ruff analyze graph (#13486)
  • [pylint] Implement boolean-chained-comparison (R1716) (#13435)

Rule changes

  • [lake8-simplify] Detect SIM910 when using variadic keyword arguments, i.e., **kwargs (#13503)
  • [pyupgrade] Avoid false negatives with non-reference shadowed bindings of loop variables (UP028) (#13504)

Bug fixes

  • Detect tuples bound to variadic positional arguments i.e. *args (#13512)
  • Exit gracefully on broken pipe errors (#13485)
  • Avoid panic when analyze graph hits broken pipe (#13484)

Performance

  • Reuse BTreeSets in module resolver (#13440)
  • Skip traversal for non-compound statements (#13441)

0.6.7

Preview features

  • Add Python version support to ruff analyze CLI (#13426)
  • Add exclude support to ruff analyze (#13425)
  • Fix parentheses around return type annotations (#13381)

Rule changes

  • [pycodestyle] Fix: Don't autofix if the first line ends in a question mark? (D400) (#13399)

Bug fixes

  • Respect lint.exclude in ruff check --add-noqa (#13427)

Performance

  • Avoid tracking module resolver files in Salsa (#13437)
  • Use forget for module resolver database (#13438)

0.6.6

Preview features

... (truncated)

Commits
  • ae39ce5 Bump version to 0.6.8 (#13522)
  • ff2d214 Don't skip over imports and other nodes containing nested statements in impor...
  • 9442cd8 Parenthesize match..case if guards (#13513)
  • 8012707 Align formatting of patterns in match-cases with expression formatting in cla...
  • d7ffe46 Disable the typeset plugin (#13517)
  • 7c83af4 red-knot: Implement the not operator for all Type variants (#13432)
  • bbb044e Detect tuples bound to variadic positional arguments i.e. *args (#13512)
  • 4810652 Avoid UP028 false negatives with non-reference shadowed bindings of loop vari...
  • 11f06e0 Detect SIM910 when using variadic keyword arguments, i.e., **kwargs (#13503)
  • f27a8b8 [internal] ComparableExpr (f)strings and bytes made invariant under concate...
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…pdates

Bumps the dependencies group with 10 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [aiohttp](https://github.com/aio-libs/aiohttp) | `3.10.5` | `3.10.8` |
| [django](https://github.com/django/django) | `5.1` | `5.1.1` |
| [django-anymail](https://github.com/anymail/django-anymail) | `11.1` | `12.0` |
| [django-simpleui](https://github.com/newpanjing/simpleui) | `2024.4.1` | `2024.8.28` |
| [ipython](https://github.com/ipython/ipython) | `8.26.0` | `8.27.0` |
| [redis](https://github.com/redis/redis-py) | `5.0.8` | `5.1.0` |
| [sentry-sdk](https://github.com/getsentry/sentry-python) | `2.13.0` | `2.14.0` |
| [uwsgi](https://uwsgi-docs.readthedocs.io/en/latest/) | `2.0.26` | `2.0.27` |
| [djlint](https://github.com/djlint/djLint) | `1.34.1` | `1.35.2` |
| [ruff](https://github.com/astral-sh/ruff) | `0.6.2` | `0.6.8` |



Updates `aiohttp` from 3.10.5 to 3.10.8
- [Release notes](https://github.com/aio-libs/aiohttp/releases)
- [Changelog](https://github.com/aio-libs/aiohttp/blob/master/CHANGES.rst)
- [Commits](aio-libs/aiohttp@v3.10.5...v3.10.8)

Updates `django` from 5.1 to 5.1.1
- [Commits](django/django@5.1...5.1.1)

Updates `django-anymail` from 11.1 to 12.0
- [Release notes](https://github.com/anymail/django-anymail/releases)
- [Changelog](https://github.com/anymail/django-anymail/blob/main/CHANGELOG.rst)
- [Commits](anymail/django-anymail@v11.1...v12.0)

Updates `django-simpleui` from 2024.4.1 to 2024.8.28
- [Release notes](https://github.com/newpanjing/simpleui/releases)
- [Commits](https://github.com/newpanjing/simpleui/commits/2024.8.28)

Updates `ipython` from 8.26.0 to 8.27.0
- [Release notes](https://github.com/ipython/ipython/releases)
- [Commits](ipython/ipython@8.26.0...8.27.0)

Updates `redis` from 5.0.8 to 5.1.0
- [Release notes](https://github.com/redis/redis-py/releases)
- [Changelog](https://github.com/redis/redis-py/blob/master/CHANGES)
- [Commits](redis/redis-py@v5.0.8...v5.1.0)

Updates `sentry-sdk` from 2.13.0 to 2.14.0
- [Release notes](https://github.com/getsentry/sentry-python/releases)
- [Changelog](https://github.com/getsentry/sentry-python/blob/master/CHANGELOG.md)
- [Commits](getsentry/sentry-python@2.13.0...2.14.0)

Updates `uwsgi` from 2.0.26 to 2.0.27

Updates `djlint` from 1.34.1 to 1.35.2
- [Release notes](https://github.com/djlint/djLint/releases)
- [Changelog](https://github.com/djlint/djLint/blob/master/CHANGELOG.md)
- [Commits](djlint/djLint@v1.34.1...v1.35.2)

Updates `ruff` from 0.6.2 to 0.6.8
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.6.2...0.6.8)

---
updated-dependencies:
- dependency-name: aiohttp
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: django
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: django-anymail
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: django-simpleui
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: ipython
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: redis
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: sentry-sdk
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: uwsgi
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: djlint
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: ruff
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Sep 30, 2024
Copy link
Contributor Author

dependabot bot commented on behalf of github Oct 7, 2024

Superseded by #935.

@dependabot dependabot bot closed this Oct 7, 2024
@dependabot dependabot bot deleted the dependabot/pip/dependencies-b4fb41a2f4 branch October 7, 2024 15:12
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants