Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump the python-root group across 1 directory with 7 updates #1159

Closed
wants to merge 1 commit into from

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Sep 2, 2024

Bumps the python-root group with 7 updates in the / directory:

Package From To
flake8 3.8.4 7.1.1
isort 5.7.0 5.13.2
build 0.3.0 1.2.1
twine 3.3.0 5.1.1
wheel 0.38.1 0.44.0
setuptools 70.0.0 74.0.0
protobuf 3.20.2 5.28.0

Updates flake8 from 3.8.4 to 7.1.1

Commits

Updates isort from 5.7.0 to 5.13.2

Release notes

Sourced from isort's releases.

5.13.2

Changes

🪲 Fixes

5.13.1

Changes

  • Fix integration tests (#2208) @​bp72
  • Added a fix for normalizing imports from more than one level of parent modules (issue/2152) (#2191) @​bp72

🪲 Fixes

5.13.0

Changes

🔥 Removals and Deprecations

📦 Dependencies

... (truncated)

Changelog

Sourced from isort's changelog.

5.13.2 December 13 2023

5.13.1 December 11 2023

5.13.0 December 9 2023

5.12.0 January 28 2023

  • Removed support for Python 3.7
  • Fixed incompatiblity with latest poetry version
  • Added support for directory limitations within built in git hook

5.11.5 January 30 2023 [hotfix]

  • Fixed incompatiblity with latest poetry version

5.11.4 December 21 2022

  • Fixed #2038 (again): stop installing documentation files to top-level site-packages (#2057) @​mgorny

... (truncated)

Commits
  • c655831 Merge pull request #2214 from PyCQA/version/5.13.2
  • b4335b4 Prepare version 5.13.2
  • c36e43c Merge pull request #2184 from bp72/issue/2154
  • e38702f Merge pull request #2213 from davidculley/confine-precommit-to-stages
  • ee8d87f Add fix for the error found by hypothesis
  • 5849ec2 Apply the bracket fix from issue 471 only for use_parentheses=True
  • df0e119 confine pre-commit to stages
  • 9255bca Merge pull request #2212 from PyCQA/bugfix/#2211-colors-extra
  • 5336d7d Fix colors extras
  • 643d9c4 Merge pull request #2210 from PyCQA/version/5.13.1
  • Additional commits viewable in compare view

Updates build from 0.3.0 to 1.2.1

Release notes

Sourced from build's releases.

Version 1.2.1

What's Changed

  • Avoid error when terminal width is undetectable on Python < 3.11 (PR #761)

Full Changelog: pypa/build@1.2.0...1.2.1

Version 1.2.0

What's Changed

  • Add --installer option, supporting pip and uv. Added uv extra. (PR #751)
  • Improve console output and provide -v for dependency installation (PR #749)
  • Avoid compiling unused bytecode when using pip (PR #752)
  • Dropped support for Python 3.7 (PR #743)

Full Changelog: pypa/build@1.1.1...1.2.0

Version 1.1.1

What's Changed

  • Fixed invoking outer pip from user site packages (PR #746, fixes issue #745)
  • Corrected the minimum pip version required to use an outer pip (PR #746, fixes issue #745)

Full Changelog: pypa/build@v1.1.0...1.1.1

Version 1.1.0

What's Changed

  • Use external pip if available instead of installing, speeds up environment setup with virtualenv slightly and venv significantly. (PR #736)
  • Stopped injecting wheel as a build dependency automatically, in the case of missing pyproject.toml -- by @​webknjaz. (PR #716)
  • Use importlib_metadata on Python <3.10.2 for bugfixes not present in those CPython standard libraries (not required when bootstrapping) -- by @​GianlucaFicarelli. (PR #693, fixes issue #692)

New Contributors

Full Changelog: pypa/build@1.0.3...v1.1.0

Version 1.0.3

What's Changed

... (truncated)

Changelog

Sourced from build's changelog.

1.2.1 (2024-03-28)

  • Avoid error when terminal width is undetectable on Python < 3.11 (PR :pr:761)

1.2.0 (2024-03-27)

  • Add --installer option, supporting pip and uv. Added uv extra. (PR :pr:751)
  • Improve console output and provide -v for dependency installation (PR :pr:749)
  • Avoid compiling unused bytecode when using pip (PR :pr:752)
  • Dropped support for Python 3.7 (PR :pr:743)

1.1.1 (2024-02-29)

  • Fixed invoking outer pip from user site packages (PR :pr:746, fixes issue :issue:745)
  • Corrected the minimum pip version required to use an outer pip (PR :pr:746, fixes issue :issue:745)

1.1.0 (2024-02-29)

  • Use external pip if available instead of installing, speeds up environment setup with virtualenv slightly and venv significantly. (PR :pr:736)
  • Stopped injecting wheel as a build dependency automatically, in the case of missing pyproject.toml -- by :user:webknjaz. (PR :pr:716)
  • Use importlib_metadata on Python <3.10.2 for bugfixes not present in those CPython standard libraries (not required when bootstrapping) -- by :user:GianlucaFicarelli. (PR :pr:693, fixes issue :issue:692)

1.0.3 (2023-09-06)

  • Avoid CPython 3.8.17, 3.9.17, 3.10.12, and 3.11.4 tarfile symlink bug triggered by adding data_filter in 1.0.0. (PR :pr:675, fixes issue :issue:674)

... (truncated)

Commits

Updates twine from 3.3.0 to 5.1.1

Release notes

Sourced from twine's releases.

Release v5.1.1

No release notes provided.

5.1.0

No release notes provided.

5.0.0

No release notes provided.

4.0.2

https://pypi.org/project/twine/4.0.2/

Changelog

4.0.1

https://pypi.org/project/twine/4.0.1/

Changelog

4.0.0

https://pypi.org/project/twine/4.0.0/

Changelog

3.8.0

https://pypi.org/project/twine/3.8.0/

Changelog

3.7.1

https://pypi.org/project/twine/3.7.1/

Changelog

3.7.0

https://pypi.org/project/twine/3.7.0/

Changelog

3.6.0

https://pypi.org/project/twine/3.6.0/

Changelog

3.5.0

https://pypi.org/project/twine/3.5.0/

Changelog

3.4.2

... (truncated)

Changelog

Sourced from twine's changelog.

Twine 5.1.1 (2024-06-26)

Bugfixes ^^^^^^^^

  • Resolve DeprecationWarnings when extracting twine metadata. ([#1115](https://github.com/pypa/twine/issues/1115) <https://github.com/pypa/twine/issues/1115>_)

  • Fix bug for Repository URLs with auth where the port was lost. When attempting to prevent printing authentication credentials in URLs provided with username and password, we did not properly handle the case where the URL also contains a port (when reconstructing the URL). This is now handled and tested to ensure no regressions. (#fix-repo-urls-with-auth-and-port <https://github.com/pypa/twine/issues/fix-repo-urls-with-auth-and-port>_)

Twine 5.1.0 (2024-05-15)

Features ^^^^^^^^

  • Add the experimental --attestations flag. ([#1095](https://github.com/pypa/twine/issues/1095) <https://github.com/pypa/twine/issues/1095>_)

Twine 5.1.0 (2024-05-15)

Misc ^^^^

  • [#1104](https://github.com/pypa/twine/issues/1104) <https://github.com/pypa/twine/issues/1104>_

Twine 5.0.0 (2024-02-10)

Bugfixes ^^^^^^^^

  • Use email.message instead of cgi as cgi has been deprecated ([#969](https://github.com/pypa/twine/issues/969) <https://github.com/pypa/twine/issues/969>_)

Features ^^^^^^^^

  • Remove support for usernames other than __token__ when uploading to PyPI and TestPyPI ([#1040](https://github.com/pypa/twine/issues/1040) <https://github.com/pypa/twine/issues/1040>_)

Misc ^^^^

  • [#931](https://github.com/pypa/twine/issues/931) <https://github.com/pypa/twine/issues/931>, [#991](https://github.com/pypa/twine/issues/991) <https://github.com/pypa/twine/issues/991>, [#1028](https://github.com/pypa/twine/issues/1028) <https://github.com/pypa/twine/issues/1028>_

... (truncated)

Commits
  • e29791d Prepare for v5.1.1 (#1114)
  • f213ede fix: Retrieve metadata correctly from importlib_metadata (#1115)
  • 6fbf880 Merge pull request #1112 from pypa/bug/1111
  • 3eb9121 Remove extra line from changelog entry
  • 0191f0c Preserve ports when munging repository URLs
  • c588793 Merge pull request #1110 from DimitriPapadopoulos/principle
  • 1fdc197 Fix a couple typos
  • 13b07b6 Merge pull request #1109 from pypa/dependabot/github_actions/actions/checkout...
  • a3e8373 build(deps): bump actions/checkout from 4.1.5 to 4.1.6
  • e9f70cf Merge pull request #1108 from pypa/fix-release-workflow
  • Additional commits viewable in compare view

Updates wheel from 0.38.1 to 0.44.0

Release notes

Sourced from wheel's releases.

0.44.0

  • Canonicalized requirements in METADATA file (PR by Wim Jeantine-Glenn)
  • Deprecated the bdist_wheel module, as the code was migrated to setuptools itself

0.43.0

  • Dropped support for Python 3.7
  • Updated vendored packaging to 24.0

0.42.0

  • Allowed removing build tag with wheel tags --build ""
  • Fixed wheel pack and wheel tags writing updated WHEEL fields after a blank line, causing other tools to ignore them
  • Fixed wheel pack and wheel tags writing WHEEL with CRLF line endings or a mix of CRLF and LF
  • Fixed wheel pack --build-number "" not removing build tag from WHEEL (above changes by Benjamin Gilbert)

0.41.3

  • Updated vendored packaging to 23.2
  • Fixed ABI tag generation for CPython 3.13a1 on Windows (PR by Sam Gross)
Changelog

Sourced from wheel's changelog.

Release Notes

0.44.0 (2024-08-04)

  • Canonicalized requirements in METADATA file (PR by Wim Jeantine-Glenn)
  • Deprecated the bdist_wheel module, as the code was migrated to setuptools itself

0.43.0 (2024-03-11)

  • Dropped support for Python 3.7
  • Updated vendored packaging to 24.0

0.42.0 (2023-11-26)

  • Allowed removing build tag with wheel tags --build ""
  • Fixed wheel pack and wheel tags writing updated WHEEL fields after a blank line, causing other tools to ignore them
  • Fixed wheel pack and wheel tags writing WHEEL with CRLF line endings or a mix of CRLF and LF
  • Fixed wheel pack --build-number "" not removing build tag from WHEEL (above changes by Benjamin Gilbert)

0.41.3 (2023-10-30)

  • Updated vendored packaging to 23.2
  • Fixed ABI tag generation for CPython 3.13a1 on Windows (PR by Sam Gross)

0.41.2 (2023-08-22)

  • Fixed platform tag detection for GraalPy and 32-bit python running on an aarch64 kernel (PR by Matthieu Darbois)
  • Fixed wheel tags to not list directories in RECORD files (PR by Mike Taves)
  • Fixed ABI tag generation for GraalPy (PR by Michael Simacek)

0.41.1 (2023-08-05)

  • Fixed naming of the data_dir directory in the presence of local version segment given via egg_info.tag_build (PR by Anderson Bravalheri)
  • Fixed version specifiers in Requires-Dist being wrapped in parentheses

0.41.0 (2023-07-22)

  • Added full support of the build tag syntax to wheel tags (you can now set a build tag like 123mytag)
  • Fixed warning on Python 3.12 about onerror deprecation. (PR by Henry Schreiner)
  • Support testing on Python 3.12 betas (PR by Ewout ter Hoeven)

... (truncated)

Commits
  • 7bb46d7 Created a new release
  • 0add7d6 Deprecated bdist_wheel and updated the README (#631)
  • 46c2389 chore: make sure local ruff runs don't touch vendored (#618)
  • 78b9ea9 Updated Cirrus CI config to use FreeBSD 14
  • 3d3916a [pre-commit.ci] pre-commit autoupdate (#627)
  • 1e00742 Revert "Apply new ruff/pyupgrade rule UP032 (#617)"
  • 16206e6 Apply new ruff/pyupgrade rule UP032 (#617)
  • 0b7771e Updated pre-commit modules and applied ruff fixes
  • bd8ab85 Extended the ruff rule list and applied fixes
  • 376373b Allow bdist_wheel working without ctypes (#613)
  • Additional commits viewable in compare view

Updates setuptools from 70.0.0 to 74.0.0

Changelog

Sourced from setuptools's changelog.

v74.0.0

Features

  • Changed the type of error raised by setuptools.command.easy_install.CommandSpec.from_param on unsupported argument from AttributeError to TypeError -- by :user:Avasam (#4548)
  • Added detection of ARM64 variant of MSVC -- by :user:saschanaz (#4553)
  • Made setuptools.package_index.Credential a typing.NamedTuple -- by :user:Avasam (#4585)
  • Reraise error from setuptools.command.easy_install.auto_chmod instead of nonsensical TypeError: 'Exception' object is not subscriptable -- by :user:Avasam (#4593)
  • Fully typed all collection attributes in pkg_resources -- by :user:Avasam (#4598)
  • Automatically exclude .tox|.nox|.venv directories from sdist. (#4603)

Deprecations and Removals

Misc

v73.0.1

Bugfixes

  • Remove abc.ABCMeta metaclass from abstract classes. pypa/setuptools#4503 <https://github.com/pypa/setuptools/pull/4503>_ had an unintended consequence of causing potential TypeError: metaclass conflict: the metaclass of a derived class must be a (non-strict) subclass of the metaclasses of all its bases -- by :user:Avasam (#4579)

v73.0.0

Features

  • Mark abstract base classes and methods with abc.ABC and abc.abstractmethod -- by :user:Avasam (#4503)
  • Changed the order of type checks in setuptools.command.easy_install.CommandSpec.from_param to support any collections.abc.Iterable of str param -- by :user:Avasam (#4505)

Bugfixes

  • Prevent an error in bdist_wheel if compression is set to a str (even if valid) after finalizing options but before running the command. -- by :user:Avasam (#4383)

... (truncated)

Commits
  • 98ad794 Bump version: 73.0.1 → 74.0.0
  • b4fb917 Merge pull request #4600 from pypa/debt/msvc-monkey
  • 18a44d8 Add news fragment.
  • 5f8215d Merge pull request #4548 from Avasam/from_param-TypeError
  • 6928048 Merge branch 'main' into debt/msvc-monkey
  • 11a6b59 Merge pull request #4606 from pypa/distutils-58fe058e4
  • 903604b Reraise sensible errors from auto_chmod (#4593)
  • 8ec5b5a Add missing news fragment for PR 4603
  • e90dfd5 Exclude top-level .tox|.nox|.venv from sdist (#4603)
  • ef2957a Reraise sensible errors from auto_chmod
  • Additional commits viewable in compare view

Updates protobuf from 3.20.2 to 5.28.0

Release notes

Sourced from protobuf's releases.

Protocol Buffers v3.20.3

Java

  • Refactoring java full runtime to reuse sub-message builders and prepare to migrate parsing logic from parse constructor to builder.
  • Move proto wireformat parsing functionality from the private "parsing constructor" to the Builder class.
  • Change the Lite runtime to prefer merging from the wireformat into mutable messages rather than building up a new immutable object before merging. This way results in fewer allocations and copy operations.
  • Make message-type extensions merge from wire-format instead of building up instances and merging afterwards. This has much better performance.
  • Fix TextFormat parser to build up recurring (but supposedly not repeated) sub-messages directly from text rather than building a new sub-message and merging the fully formed message into the existing field.
  • This release addresses a Security Advisory for Java users
Commits
  • 439c42c Updating version.json and repo version numbers to: 28.0
  • c9454f4 Remove --copt="-Werror" from .bazelrc (#18005)
  • f5a1b17 Move -Werror to our test/dev bazelrc files. (#17938)
  • 0c9e14a Merge pull request #17917 from thomasvl/patch_objc_to_28
  • 6a6ebe4 Merge pull request #17919 from protocolbuffers/28.x-202408221734
  • 09ba2bb Updating version.json and repo version numbers to: 28.0-dev
  • e340f52 Updating version.json and repo version numbers to: 28.0-rc3
  • b276420 [ObjC] Issue stderr warnings for deprecated generation options.
  • 13f850d Merge pull request #17913 from protocolbuffers/cp-compat-upgrade
  • 6bf01c5 Binary compatibility shims for GeneratedMessageV3, SingleFieldBuilderV3, Repe...
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the python-root group with 7 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [flake8](https://github.com/pycqa/flake8) | `3.8.4` | `7.1.1` |
| [isort](https://github.com/pycqa/isort) | `5.7.0` | `5.13.2` |
| [build](https://github.com/pypa/build) | `0.3.0` | `1.2.1` |
| [twine](https://github.com/pypa/twine) | `3.3.0` | `5.1.1` |
| [wheel](https://github.com/pypa/wheel) | `0.38.1` | `0.44.0` |
| [setuptools](https://github.com/pypa/setuptools) | `70.0.0` | `74.0.0` |
| [protobuf](https://github.com/protocolbuffers/protobuf) | `3.20.2` | `5.28.0` |



Updates `flake8` from 3.8.4 to 7.1.1
- [Commits](PyCQA/flake8@3.8.4...7.1.1)

Updates `isort` from 5.7.0 to 5.13.2
- [Release notes](https://github.com/pycqa/isort/releases)
- [Changelog](https://github.com/PyCQA/isort/blob/main/CHANGELOG.md)
- [Commits](PyCQA/isort@5.7.0...5.13.2)

Updates `build` from 0.3.0 to 1.2.1
- [Release notes](https://github.com/pypa/build/releases)
- [Changelog](https://github.com/pypa/build/blob/main/CHANGELOG.rst)
- [Commits](pypa/build@0.3.0...1.2.1)

Updates `twine` from 3.3.0 to 5.1.1
- [Release notes](https://github.com/pypa/twine/releases)
- [Changelog](https://github.com/pypa/twine/blob/main/docs/changelog.rst)
- [Commits](pypa/twine@3.3.0...v5.1.1)

Updates `wheel` from 0.38.1 to 0.44.0
- [Release notes](https://github.com/pypa/wheel/releases)
- [Changelog](https://github.com/pypa/wheel/blob/main/docs/news.rst)
- [Commits](pypa/wheel@0.38.1...0.44.0)

Updates `setuptools` from 70.0.0 to 74.0.0
- [Release notes](https://github.com/pypa/setuptools/releases)
- [Changelog](https://github.com/pypa/setuptools/blob/main/NEWS.rst)
- [Commits](pypa/setuptools@v70.0.0...v74.0.0)

Updates `protobuf` from 3.20.2 to 5.28.0
- [Release notes](https://github.com/protocolbuffers/protobuf/releases)
- [Changelog](https://github.com/protocolbuffers/protobuf/blob/main/protobuf_release.bzl)
- [Commits](protocolbuffers/protobuf@v3.20.2...v5.28.0)

---
updated-dependencies:
- dependency-name: flake8
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: python-root
- dependency-name: isort
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-root
- dependency-name: build
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: python-root
- dependency-name: twine
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: python-root
- dependency-name: wheel
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-root
- dependency-name: setuptools
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: python-root
- dependency-name: protobuf
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: python-root
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added Dependencies Updates a dependency Python Python language support labels Sep 2, 2024
Copy link
Contributor Author

dependabot bot commented on behalf of github Sep 9, 2024

Superseded by #1160.

@dependabot dependabot bot closed this Sep 9, 2024
@dependabot dependabot bot deleted the dependabot/pip/python-root-52a8e5083e branch September 9, 2024 11:27
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Dependencies Updates a dependency Python Python language support
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants