Bump the minor-patch group across 1 directory with 7 updates

[dependabot]

Bumps the minor-patch group with 7 updates in the / directory:

Package	From	To
bcrypt	4.2.0	4.2.1
newrelic	10.2.0	10.3.0
playwright	1.48.0	1.49.0
pyramid-tm	2.5	2.6
ruff	0.7.3	0.8.0
waitress	3.0.1	3.0.2
sphinx-rtd-theme	3.0.1	3.0.2

Updates bcrypt from 4.2.0 to 4.2.1

Commits

• 735609d Bump version for 4.2.1 (#914)
• 137ae46 Bump bcrypt from 0.15.1 to 0.16.0 in /src/_bcrypt (#912)
• 50bce3f Fix warnings from pyo3 0.23 (#911)
• 8ea3ef8 Bump pyo3 from 0.22.6 to 0.23.1 in /src/_bcrypt (#909)
• f7149da Bump libc from 0.2.162 to 0.2.164 in /src/_bcrypt (#910)
• 037b2e1 Bump cpufeatures from 0.2.14 to 0.2.15 in /src/_bcrypt (#908)
• b01dbfd Bump libc from 0.2.161 to 0.2.162 in /src/_bcrypt (#907)
• f865b08 Bump pypa/gh-action-pypi-publish from 1.12.0 to 1.12.2 (#906)
• 6a4419e Bump pyo3 from 0.22.5 to 0.22.6 in /src/_bcrypt (#905)
• b08bdb7 Bump pypa/gh-action-pypi-publish from 1.11.0 to 1.12.0 (#904)
• Additional commits viewable in compare view

Updates newrelic from 10.2.0 to 10.3.0

Release notes

Sourced from newrelic's releases.

v10.3.0

https://docs.newrelic.com/docs/release-notes/agent-release-notes/python-release-notes/python-agent-100300/

Commits

• 6b8fb08 Merge pull request #1240 from newrelic/feature-log-event-labels
• a4b352b Fix exception in logger message
• b7df4ae Expand tests for global custom attributes
• fc0d784 Update tests/agent_features/test_log_events.py
• 10043ec Merge branch 'main' into feature-log-event-labels
• a5d0de3 Package capture harvest (#1228)
• e27ff10 Merge branch 'main' into feature-log-event-labels
• dacf155 httpx HTTP/2 Testing (#1245)
• 4334b5e Merge pull request #1251 from newrelic/feature-daphne-http2-testing
• 55abebb Fix flake8 lint issues
• Additional commits viewable in compare view

Updates playwright from 1.48.0 to 1.49.0

Release notes

Sourced from playwright's releases.

v1.49.0

Aria snapshots

New assertion expect(locator).toMatchAriaSnapshot() verifies page structure by comparing to an expected accessibility tree, represented as YAML.

page.goto("https://playwright.dev")
expect(page.locator('body')).to_match_aria_snapshot('''
  - banner:
    - heading /Playwright enables reliable/ [level=1]
    - link "Get started"
    - link "Star microsoft/playwright on GitHub"
  - main:
    - img "Browsers (Chromium, Firefox, WebKit)"
    - heading "Any browser • Any platform • One API"
''')

You can generate this assertion with Test Generator or by calling locator.ariaSnapshot().

Learn more in the aria snapshots guide.

Tracing groups

New method tracing.group() allows you to visually group actions in the trace viewer.

# All actions between group and group_end
# will be shown in the trace viewer as a group.
page.context.tracing.group("Open Playwright.dev > API")
page.goto("https://playwright.dev/")
page.get_by_role("link", name="API").click()
page.context.tracing.group_end()

Breaking: chrome and msedge channels switch to new headless mode

This change affects you if you're using one of the following channels in your playwright.config.ts:

• chrome, chrome-dev, chrome-beta, or chrome-canary
• msedge, msedge-dev, msedge-beta, or msedge-canary

After updating to Playwright v1.49, run your test suite. If it still passes, you're good to go. If not, you will probably need to update your snapshots, and adapt some of your test code around PDF viewers and extensions. See [issue #33566](microsoft/playwright#33566) for more details.

Try new Chromium headless

You can opt into the new headless mode by using 'chromium' channel. As official Chrome documentation puts it:

New Headless on the other hand is the real Chrome browser, and is thus more authentic, reliable, and offers more features. This makes it more suitable for high-accuracy end-to-end web app testing or browser extension testing.

See [issue #33566](microsoft/playwright#33566) for the list of possible breakages you could encounter and more details on Chromium headless. Please file an issue if you see any problems after opting in.

... (truncated)

Commits

• ebf26a6 devops: make wheels smaller (use deflate zip compression) (#2662)
• f45782e chore: roll to v1.49.0 (#2660)
• 569d7c0 fix(select): handle empty values and labels in select options (#2661)
• c4df71c build(deps): bump setuptools from 75.4.0 to 75.5.0 (#2654)
• 923da5c build(deps): bump the actions group with 3 updates (#2657)
• f2ba767 devops: update GitHub Action workflows
• 1452881 fix(tracing): apiName determination with event listeners (#2651)
• c2dc664 devops: do not pin pytest-playwright for examples (#2647)
• 4fd5de0 chore: convert setup.py to build (#2642)
• 1e1122c build(deps): bump wheel from 0.42.0 to 0.45.0 (#2638)
• Additional commits viewable in compare view

Updates pyramid-tm from 2.5 to 2.6

Changelog

Sourced from pyramid-tm's changelog.

2.6 (2024-11-14) ^^^^^^^^^^^^^^^^

• Drop support for Python 3.7, and 3.8.

• Add support for Python 3.11, 3.12, and 3.13.

• rename "master" to "main"

• Fix retrying transactions with pyramid_retry when using veto and a datamanger marks the exception as retryable.

Commits

• dfe9d80 cleanup setuptools warnings
• d353430 prep 2.6
• 7826d5e Merge pull request #85 from zagy/main
• 1475400 add readthedocs.yaml
• 8780a93 Merge pull request #87 from Pylons/dependabot/github_actions/actions/checkout-4
• 253ec30 Bump actions/checkout from 2 to 4
• 499803e Merge branch 'main' into zagy/main
• 51ba53b Merge pull request #86 from Pylons/add-py313
• 57bc602 fix tox to use allowlist_externals for docs
• b395d80 fix coverage
• Additional commits viewable in compare view

Updates ruff from 0.7.3 to 0.8.0

Release notes

Sourced from ruff's releases.

0.8.0

Release Notes

Check out the blog post for a migration guide and overview of the changes!

Breaking changes

See also, the "Remapped rules" section which may result in disabled rules.

• Default to Python 3.9

  Ruff now defaults to Python 3.9 instead of 3.8 if no explicit Python version is configured using ruff.target-version or project.requires-python (#13896)

• Changed location of pydoclint diagnostics

  pydoclint diagnostics now point to the first-line of the problematic docstring. Previously, this was not the case.

  If you've opted into these preview rules but have them suppressed using noqa comments in some places, this change may mean that you need to move the noqa suppression comments. Most users should be unaffected by this change.

• Use XDG (i.e. ~/.local/bin) instead of the Cargo home directory in the standalone installer

  Previously, Ruff's installer used $CARGO_HOME or ~/.cargo/bin for its target install directory. Now, Ruff will be installed into $XDG_BIN_HOME, $XDG_DATA_HOME/../bin, or ~/.local/bin (in that order).

  This change is only relevant to users of the standalone Ruff installer (using the shell or PowerShell script). If you installed Ruff using uv or pip, you should be unaffected.

• Changes to the line width calculation

  Ruff now uses a new version of the unicode-width Rust crate to calculate the line width. In very rare cases, this may lead to lines containing Unicode characters being reformatted, or being considered too long when they were not before (E501).

Removed Rules

The following deprecated rules have been removed:

• missing-type-self (ANN101)
• missing-type-cls (ANN102)
• syntax-error (E999)
• pytest-missing-fixture-name-underscore (PT004)
• pytest-incorrect-fixture-name-underscore (PT005)
• unpacked-list-comprehension (UP027)

Remapped rules

The following rules have been remapped to new rule codes:

• flake8-type-checking: TCH to TC

Stabilization

... (truncated)

Changelog

Sourced from ruff's changelog.

0.8.0

Check out the blog post for a migration guide and overview of the changes!

Breaking changes

See also, the "Remapped rules" section which may result in disabled rules.

• Default to Python 3.9

  Ruff now defaults to Python 3.9 instead of 3.8 if no explicit Python version is configured using ruff.target-version or project.requires-python (#13896)

• Changed location of pydoclint diagnostics

  pydoclint diagnostics now point to the first-line of the problematic docstring. Previously, this was not the case.

  If you've opted into these preview rules but have them suppressed using noqa comments in some places, this change may mean that you need to move the noqa suppression comments. Most users should be unaffected by this change.

• Use XDG (i.e. ~/.local/bin) instead of the Cargo home directory in the standalone installer

  Previously, Ruff's installer used $CARGO_HOME or ~/.cargo/bin for its target install directory. Now, Ruff will be installed into $XDG_BIN_HOME, $XDG_DATA_HOME/../bin, or ~/.local/bin (in that order).

  This change is only relevant to users of the standalone Ruff installer (using the shell or PowerShell script). If you installed Ruff using uv or pip, you should be unaffected.

• Changes to the line width calculation

  Ruff now uses a new version of the unicode-width Rust crate to calculate the line width. In very rare cases, this may lead to lines containing Unicode characters being reformatted, or being considered too long when they were not before (E501).

Removed Rules

The following deprecated rules have been removed:

• missing-type-self (ANN101)
• missing-type-cls (ANN102)
• syntax-error (E999)
• pytest-missing-fixture-name-underscore (PT004)
• pytest-incorrect-fixture-name-underscore (PT005)
• unpacked-list-comprehension (UP027)

Remapped rules

The following rules have been remapped to new rule codes:

• flake8-type-checking: TCH to TC

Stabilization

... (truncated)

Commits

• a90e404 [red-knot] PEP 695 type aliases (#14357)
• 8358ad8 Ruff 0.8 release (#14486)
• 2b8b1ef Improve docs for some pycodestyle rules (#14517)
• 2efa3fb [flake8-import-conventions] Syntax check aliases supplied in configuration ...
• b9da430 doc(B024): #14455 add annotated but unassgined class variables (#14502)
• 87043a2 Limit type size assertion to 64bit (#14514)
• f684b6f [red-knot] Fix: Infer type for typing.Union[..] tuple expression (#14510)
• 47f39ed [red-knot] Meta data for Type::Todo (#14500)
• aecdb8c [red-knot] support typing.Union in type annotations (#14499)
• 3c52d2d Improve the performance of the formatter instability check job (#14471)
• Additional commits viewable in compare view

Updates waitress from 3.0.1 to 3.0.2

Release notes

Sourced from waitress's releases.

v3.0.2

3.0.2 (2024-11-16)

Security

• When using Waitress to process trusted proxy headers, Waitress will now update the headers to drop any untrusted values, thereby making sure that WSGI apps only get trusted and validated values that Waitress itself used to update the environ. See Pylons/waitress#452 and Pylons/waitress#451

Changelog

Sourced from waitress's changelog.

3.0.2 (2024-11-16)

Security

- When using Waitress to process trusted proxy headers, Waitress will now
  update the headers to drop any untrusted values, thereby making sure that
  WSGI apps only get trusted and validated values that Waitress itself used to
  update the environ. See https://github.com/Pylons/waitress/pull/452 and
  https://github.com/Pylons/waitress/issues/451

Commits

• b11ae72 Prep for 3.0.2
• 38ffad0 Merge pull request #450 from Pylons/445-amend-drop-py38
• 0e7bf65 Remove hack to register atexit handler
• 0e82766 Add concurrency grouping to cancel in progress runs upon push
• 135c4bf Split Python versions note into two under separate headings
• 23ac524 Merge pull request #446 from kgaughan/resolve-name
• a20fe86 Merge pull request #447 from kgaughan/modern-assertions
• d005ec2 Merge pull request #448 from kgaughan/trivial-cleanup
• 291d9cb Merge pull request #452 from simonk52/drop-untrusted-proxy-values
• da38a20 Sign CONTRIBUTORS.txt
• Additional commits viewable in compare view

Updates sphinx-rtd-theme from 3.0.1 to 3.0.2

Changelog

Sourced from sphinx-rtd-theme's changelog.

3.0.2

• Show current translation when the flyout is attached
• Fix JavaScript issue that didn't allow users to disable selectors

.. _release-3.0.1:

Commits

• 5f03347 Release 3.0.2
• 17c0685 Attached flyout: show the current translation (#1629)
• 5db7796 Allow disabling selectors (#1626)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions