Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump the python-root group with 7 updates #1042

Closed
wants to merge 1 commit into from

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Dec 18, 2023

Bumps the python-root group with 7 updates:

Package From To
flake8 3.8.4 6.1.0
isort 5.7.0 5.13.2
build 0.3.0 1.0.3
twine 3.3.0 4.0.2
wheel 0.38.1 0.42.0
setuptools 65.5.1 69.0.2
protobuf 3.20.2 4.25.1

Updates flake8 from 3.8.4 to 6.1.0

Commits

Updates isort from 5.7.0 to 5.13.2

Release notes

Sourced from isort's releases.

5.13.2

Changes

🪲 Fixes

5.13.1

Changes

  • Fix integration tests (#2208) @​bp72
  • Added a fix for normalizing imports from more than one level of parent modules (issue/2152) (#2191) @​bp72

🪲 Fixes

5.13.0

Changes

🔥 Removals and Deprecations

📦 Dependencies

... (truncated)

Changelog

Sourced from isort's changelog.

5.13.2 December 13 2023

5.13.1 December 11 2023

5.13.0 December 9 2023

5.12.0 January 28 2023

  • Removed support for Python 3.7
  • Fixed incompatiblity with latest poetry version
  • Added support for directory limitations within built in git hook

5.11.5 January 30 2023 [hotfix]

  • Fixed incompatiblity with latest poetry version

5.11.4 December 21 2022

  • Fixed #2038 (again): stop installing documentation files to top-level site-packages (#2057) @​mgorny

... (truncated)

Commits
  • c655831 Merge pull request #2214 from PyCQA/version/5.13.2
  • b4335b4 Prepare version 5.13.2
  • c36e43c Merge pull request #2184 from bp72/issue/2154
  • e38702f Merge pull request #2213 from davidculley/confine-precommit-to-stages
  • ee8d87f Add fix for the error found by hypothesis
  • 5849ec2 Apply the bracket fix from issue 471 only for use_parentheses=True
  • df0e119 confine pre-commit to stages
  • 9255bca Merge pull request #2212 from PyCQA/bugfix/#2211-colors-extra
  • 5336d7d Fix colors extras
  • 643d9c4 Merge pull request #2210 from PyCQA/version/5.13.1
  • Additional commits viewable in compare view

Updates build from 0.3.0 to 1.0.3

Release notes

Sourced from build's releases.

Version 1.0.3

What's Changed

New Contributors

Full Changelog: pypa/build@1.0.0...1.0.3

Version 1.0.0

What's Changed

... (truncated)

Changelog

Sourced from build's changelog.

1.0.3 (2023-09-06)

  • Avoid CPython 3.8.17, 3.9.17, 3.10.12, and 3.11.4 tarfile symlink bug triggered by adding data_filter in 1.0.0. (PR :pr:675, fixes issue :issue:674)

1.0.0 (2023-09-01)

  • Removed the toml library fallback; toml can no longer be used as a substitute for tomli (PR :pr:567)
  • Added runner parameter to util.project_wheel_metadata (PR :pr:566, fixes issue :issue:553)
  • Modified ProjectBuilder constructor signature, added alternative ProjectBuilder.from_env constructor, redefined env.IsolatedEnv interface, and exposed env.DefaultIsolatedEnv, replacing env.IsolatedEnvBuilder. The aim has been to shift responsibility for modifying the environment from the project builder to the IsolatedEnv entirely and to ensure that the builder will be initialised from an IsolatedEnv in a consistent manner. Mutating the project builder is no longer supported. (PR :pr:537)
  • virtualenv is no longer imported when using -n, for faster builds (PR :pr:636, fixes issue :issue:510)
  • The SDist now contains the repository contents, including tests. Flit-core 3.8+ required. (PR :pr:657, :pr:661, fixes issue :issue:656)
  • The minimum version of importlib-metadata has been increased to 4.6 and Python 3.10 due to a bug in the standard library version with URL requirements in extras. This is still not required for 3.8 when bootstrapping (as long as you don't have URL requirements in extras). (PR :pr:631, fixes issue :issue:630)
  • Docs now built with Sphinx 7 (PR :pr:660)
  • Tests now contain a network marker (PR :pr:649, fixes issue :issue:648)
  • Config-settings are now passed to get_requires* hooks, fixing a long standing bug. If this affects your setuptools build, you can use -C--build-option=<cmd> -C--build-option=<option> to workaround an issue with Setuptools not allowing unrecognised build options when running this hook. (PR :pr:627, fixes issue :issue:[#264](https://github.com/pypa/build/issues/264))
  • Test on Python 3.12 betas/RCs (PR :pr:624)
  • Filter out malicious files when extracting tar archives when Python supports it (PR :pr:609)
  • Specify encoding, fixing issues when PYTHONWARNDEFAULTENCODING is set.

... (truncated)

Commits
  • 38d1a68 chore: bump to 1.0.3
  • 17cefaf tox: format file
  • c48f4ca chore: release 1.0.1
  • 4b61b8e Apply suggestions from code review
  • d6138f5 fix: avoid bug in various patch releases of Python
  • eada811 build(deps): bump actions/checkout from 3 to 4 (#673)
  • 955e697 pre-commit: bump repositories (#672)
  • f51c089 changelog: fix issue reference
  • 1fff01e style: ignore W005, since we are build
  • 06e0481 ci: build and test SDist/wheels
  • Additional commits viewable in compare view

Updates twine from 3.3.0 to 4.0.2

Release notes

Sourced from twine's releases.

4.0.2

https://pypi.org/project/twine/4.0.2/

Changelog

4.0.1

https://pypi.org/project/twine/4.0.1/

Changelog

4.0.0

https://pypi.org/project/twine/4.0.0/

Changelog

3.8.0

https://pypi.org/project/twine/3.8.0/

Changelog

3.7.1

https://pypi.org/project/twine/3.7.1/

Changelog

3.7.0

https://pypi.org/project/twine/3.7.0/

Changelog

3.6.0

https://pypi.org/project/twine/3.6.0/

Changelog

3.5.0

https://pypi.org/project/twine/3.5.0/

Changelog

3.4.2

https://pypi.org/project/twine/3.4.2/

Changelog

Changelog

Sourced from twine's changelog.

Twine 4.0.2 (2022-11-30)

Bugfixes ^^^^^^^^

  • Remove deprecated function to fix twine check with pkginfo 1.9.0. ([#941](https://github.com/pypa/twine/issues/941) <https://github.com/pypa/twine/issues/941>_)

Twine 4.0.1 (2022-06-01)

Bugfixes ^^^^^^^^

  • Improve logging when keyring fails. ([#890](https://github.com/pypa/twine/issues/890) <https://github.com/pypa/twine/issues/890>_)
  • Reconfgure root logger to show all log messages. ([#896](https://github.com/pypa/twine/issues/896) <https://github.com/pypa/twine/issues/896>_)

Twine 4.0.0 (2022-03-31)

Features ^^^^^^^^

  • Drop support for Python 3.6. ([#869](https://github.com/pypa/twine/issues/869) <https://github.com/pypa/twine/issues/869>_)
  • Use Rich to add color to upload output. ([#851](https://github.com/pypa/twine/issues/851) <https://github.com/pypa/twine/issues/851>_)
  • Use Rich to add color to check output. ([#874](https://github.com/pypa/twine/issues/874) <https://github.com/pypa/twine/issues/874>_)
  • Use Rich instead of tqdm for upload progress bar. ([#877](https://github.com/pypa/twine/issues/877) <https://github.com/pypa/twine/issues/877>_)

Bugfixes ^^^^^^^^

  • Remove Twine's dependencies from the User-Agent header when uploading. ([#871](https://github.com/pypa/twine/issues/871) <https://github.com/pypa/twine/issues/871>_)
  • Improve detection of disabled BLAKE2 hashing due to FIPS mode. ([#879](https://github.com/pypa/twine/issues/879) <https://github.com/pypa/twine/issues/879>_)
  • Restore warning for missing long_description. ([#887](https://github.com/pypa/twine/issues/887) <https://github.com/pypa/twine/issues/887>_)

Twine 3.8.0 (2022-02-02)

Features ^^^^^^^^

  • Add --verbose logging for querying keyring credentials. ([#849](https://github.com/pypa/twine/issues/849) <https://github.com/pypa/twine/issues/849>_)
  • Log all upload responses with --verbose. ([#859](https://github.com/pypa/twine/issues/859) <https://github.com/pypa/twine/issues/859>_)
  • Show more helpful error message for invalid metadata. ([#861](https://github.com/pypa/twine/issues/861) <https://github.com/pypa/twine/issues/861>_)

... (truncated)

Commits

Updates wheel from 0.38.1 to 0.42.0

Release notes

Sourced from wheel's releases.

0.42.0

  • Allowed removing build tag with wheel tags --build ""
  • Fixed wheel pack and wheel tags writing updated WHEEL fields after a blank line, causing other tools to ignore them
  • Fixed wheel pack and wheel tags writing WHEEL with CRLF line endings or a mix of CRLF and LF
  • Fixed wheel pack --build-number "" not removing build tag from WHEEL (above changes by Benjamin Gilbert)

0.41.3

  • Updated vendored packaging to 23.2
  • Fixed ABI tag generation for CPython 3.13a1 on Windows (PR by Sam Gross)
Changelog

Sourced from wheel's changelog.

Release Notes

0.42.0 (2023-11-26)

  • Allowed removing build tag with wheel tags --build ""
  • Fixed wheel pack and wheel tags writing updated WHEEL fields after a blank line, causing other tools to ignore them
  • Fixed wheel pack and wheel tags writing WHEEL with CRLF line endings or a mix of CRLF and LF
  • Fixed wheel pack --build-number "" not removing build tag from WHEEL (above changes by Benjamin Gilbert)

0.41.3 (2023-10-30)

  • Updated vendored packaging to 23.2
  • Fixed ABI tag generation for CPython 3.13a1 on Windows (PR by Sam Gross)

0.41.2 (2023-08-22)

  • Fixed platform tag detection for GraalPy and 32-bit python running on an aarch64 kernel (PR by Matthieu Darbois)
  • Fixed wheel tags to not list directories in RECORD files (PR by Mike Taves)
  • Fixed ABI tag generation for GraalPy (PR by Michael Simacek)

0.41.1 (2023-08-05)

  • Fixed naming of the data_dir directory in the presence of local version segment given via egg_info.tag_build (PR by Anderson Bravalheri)
  • Fixed version specifiers in Requires-Dist being wrapped in parentheses

0.41.0 (2023-07-22)

  • Added full support of the build tag syntax to wheel tags (you can now set a build tag like 123mytag)
  • Fixed warning on Python 3.12 about onerror deprecation. (PR by Henry Schreiner)
  • Support testing on Python 3.12 betas (PR by Ewout ter Hoeven)

0.40.0 (2023-03-14)

  • Added a wheel tags command to modify tags on an existing wheel (PR by Henry Schreiner)
  • Updated vendored packaging to 23.0
  • wheel unpack now preserves the executable attribute of extracted files
  • Fixed spaces in platform names not being converted to underscores (PR by David Tucker)
  • Fixed RECORD files in generated wheels missing the regular file attribute
  • Fixed DeprecationWarning about the use of the deprecated pkg_resources API (PR by Thomas Grainger)
  • Wheel now uses flit-core as a build backend (PR by Henry Schreiner)

... (truncated)

Commits
  • 63a09bb Created a new release
  • f4b8e48 Several fixes to WHEEL metadata handling (#588)
  • 11e5732 [pre-commit.ci] pre-commit autoupdate (#586)
  • fe6bb82 [pre-commit.ci] pre-commit autoupdate (#584)
  • b90a4bc [pre-commit.ci] pre-commit autoupdate (#581)
  • 56de2eb Added a link to the GitHub repository to pyproject.toml (#563)
  • a899f1c Fixed parameter for release-notes
  • 254ba46 Created a new release
  • 6f33736 Updated actions and added GitHub release automation
  • 83b77e5 Replaced black with ruff-format
  • Additional commits viewable in compare view

Updates setuptools from 65.5.1 to 69.0.2

Changelog

Sourced from setuptools's changelog.

v69.0.2

Bugfixes

  • Added missing estimated date for removing setuptools.dep_util (deprecated in v69.0.0). (#4131)

v69.0.1

Bugfixes

  • Fixed imports of setuptools.dep_util.newer_group. A deprecation warning is issued instead of a hard failure. (#4126)

v69.0.0

Features

  • Include type information (py.typed, *.pyi) by default (#3136) -- by :user:Danie-1, EXPERIMENTAL. (#3136)
  • Exported distutils.dep_util and setuptools.dep_util through setuptools.modified -- by :user:Avasam (#4069)
  • Merged with pypa/distutils@7a04cbda0fc714.

Bugfixes

  • Replaced hardcoded numeric values with :obj:dis.opmap, fixing problem with 3.13.0a1. (#4094)

Deprecations and Removals

  • Configuring project version and egg_info.tag_* in such a way that results in invalid version strings (according to :pep:440) is no longer permitted. (#4066)
  • Removed deprecated egg_base option from dist_info. Note that the dist_info command is considered internal to the way setuptools build backend works and not intended for public usage. (#4066)
  • The parsing of the deprecated metadata.license_file and metadata.requires fields in setup.cfg is no longer supported. Users are expected to move to metadata.license_files and

... (truncated)

Commits
  • 4f6449f Bump version: 69.0.1 → 69.0.2
  • a4298d1 Add missing estimated date for removing setuptools.dep_util (#4132)
  • 1495738 Add news fragment
  • c836172 Improve warning visibility with due date and reference url
  • d148d9e Bump version: 69.0.0 → 69.0.1
  • 28775f3 Allow imports of setuptools.dep_util.newer_group with deprecation warning (#4...
  • 7d90e9f Add newsfragment
  • e1f8783 Allow imports of setuptools.dep_util.newer_group with deprecation warning
  • 536d4a8 Bump version: 68.2.2 → 69.0.0
  • b8992ad Mark flaky test on PyPy with xfail (#4124)
  • Additional commits viewable in compare view

Updates protobuf from 3.20.2 to 4.25.1

Release notes

Sourced from protobuf's releases.

Protocol Buffers v3.20.3

Java

  • Refactoring java full runtime to reuse sub-message builders and prepare to migrate parsing logic from parse constructor to builder.
  • Move proto wireformat parsing functionality from the private "parsing constructor" to the Builder class.
  • Change the Lite runtime to prefer merging from the wireformat into mutable messages rather than building up a new immutable object before merging. This way results in fewer allocations and copy operations.
  • Make message-type extensions merge from wire-format instead of building up instances and merging afterwards. This has much better performance.
  • Fix TextFormat parser to build up recurring (but supposedly not repeated) sub-messages directly from text rather than building a new sub-message and merging the fully formed message into the existing field.
  • This release addresses a Security Advisory for Java users
Commits
  • 7f94235 Updating version.json and repo version numbers to: 25.1
  • e4b00c7 Add support for extensions in CRuby, JRuby, and FFI Ruby (#14703) (#14756)
  • 2495d4f Add support for options in CRuby, JRuby and FFI (#14594) (#14739)
  • a29f47d Bump mac PHP version to 8.2 to fix non-hermetic breakages. (#14741)
  • f36432a Merge pull request #14674 from anandolee/25.x
  • 74f5cf4 Raise warnings for python syntax usages
  • edb1afd Move python/BUILD to python/BUILD.bazel (#14658)
  • 666689e Merge pull request #14620 from protocolbuffers/win2019-25.x
  • 1577c30 Error on staleness failure
  • 1155c80 Update cc_file_list_aspect to handle targets with missing hdrs/textual_hdrs
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the python-root group with 7 updates:

| Package | From | To |
| --- | --- | --- |
| [flake8](https://github.com/pycqa/flake8) | `3.8.4` | `6.1.0` |
| [isort](https://github.com/pycqa/isort) | `5.7.0` | `5.13.2` |
| [build](https://github.com/pypa/build) | `0.3.0` | `1.0.3` |
| [twine](https://github.com/pypa/twine) | `3.3.0` | `4.0.2` |
| [wheel](https://github.com/pypa/wheel) | `0.38.1` | `0.42.0` |
| [setuptools](https://github.com/pypa/setuptools) | `65.5.1` | `69.0.2` |
| [protobuf](https://github.com/protocolbuffers/protobuf) | `3.20.2` | `4.25.1` |


Updates `flake8` from 3.8.4 to 6.1.0
- [Commits](PyCQA/flake8@3.8.4...6.1.0)

Updates `isort` from 5.7.0 to 5.13.2
- [Release notes](https://github.com/pycqa/isort/releases)
- [Changelog](https://github.com/PyCQA/isort/blob/main/CHANGELOG.md)
- [Commits](PyCQA/isort@5.7.0...5.13.2)

Updates `build` from 0.3.0 to 1.0.3
- [Release notes](https://github.com/pypa/build/releases)
- [Changelog](https://github.com/pypa/build/blob/main/CHANGELOG.rst)
- [Commits](pypa/build@0.3.0...1.0.3)

Updates `twine` from 3.3.0 to 4.0.2
- [Release notes](https://github.com/pypa/twine/releases)
- [Changelog](https://github.com/pypa/twine/blob/main/docs/changelog.rst)
- [Commits](pypa/twine@3.3.0...4.0.2)

Updates `wheel` from 0.38.1 to 0.42.0
- [Release notes](https://github.com/pypa/wheel/releases)
- [Changelog](https://github.com/pypa/wheel/blob/main/docs/news.rst)
- [Commits](pypa/wheel@0.38.1...0.42.0)

Updates `setuptools` from 65.5.1 to 69.0.2
- [Release notes](https://github.com/pypa/setuptools/releases)
- [Changelog](https://github.com/pypa/setuptools/blob/main/NEWS.rst)
- [Commits](pypa/setuptools@v65.5.1...v69.0.2)

Updates `protobuf` from 3.20.2 to 4.25.1
- [Release notes](https://github.com/protocolbuffers/protobuf/releases)
- [Changelog](https://github.com/protocolbuffers/protobuf/blob/main/protobuf_release.bzl)
- [Commits](protocolbuffers/protobuf@v3.20.2...v4.25.1)

---
updated-dependencies:
- dependency-name: flake8
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: python-root
- dependency-name: isort
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-root
- dependency-name: build
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: python-root
- dependency-name: twine
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: python-root
- dependency-name: wheel
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-root
- dependency-name: setuptools
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: python-root
- dependency-name: protobuf
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: python-root
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added Dependencies Updates a dependency Python Python language support labels Dec 18, 2023
Copy link
Contributor Author

dependabot bot commented on behalf of github Dec 25, 2023

Superseded by #1043.

@dependabot dependabot bot closed this Dec 25, 2023
@dependabot dependabot bot deleted the dependabot/pip/python-root-64a0b5997b branch December 25, 2023 11:13
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Dependencies Updates a dependency Python Python language support
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants