Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Upgrade: Bump the dependencies group with 5 updates #312

Closed
wants to merge 1 commit into from
Closed

Upgrade: Bump the dependencies group with 5 updates #312

wants to merge 1 commit into from

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Aug 1, 2024 •
edited
Loading

Bumps the dependencies group with 5 updates:

Package From To
aiohttp 3.9.5 3.10.0
botocore 1.34.137 1.34.151
certifi 2024.6.2 2024.7.4
hiredis 2.3.2 3.0.0
sentry-sdk 2.7.1 2.12.0

Updates aiohttp from 3.9.5 to 3.10.0

Release notes

Sourced from aiohttp's releases.

3.10.0

Bug fixes

  • Fixed server response headers for Content-Type and Content-Encoding for static compressed files -- by :user:steverep.

    Server will now respond with a Content-Type appropriate for the compressed file (e.g. "application/gzip"), and omit the Content-Encoding header. Users should expect that most clients will no longer decompress such responses by default.

    Related issues and pull requests on GitHub: #4462.

  • Fixed duplicate cookie expiration calls in the CookieJar implementation

    Related issues and pull requests on GitHub: #7784.

  • Adjusted FileResponse to check file existence and access when preparing the response -- by :user:steverep.

    The :py:class:~aiohttp.web.FileResponse class was modified to respond with 403 Forbidden or 404 Not Found as appropriate. Previously, it would cause a server error if the path did not exist or could not be accessed. Checks for existence, non-regular files, and permissions were expected to be done in the route handler. For static routes, this now permits a compressed file to exist without its uncompressed variant and still be served. In addition, this changes the response status for files without read permission to 403, and for non-regular files from 404 to 403 for consistency.

    Related issues and pull requests on GitHub: #8182.

  • Fixed AsyncResolver to match ThreadedResolver behavior -- by :user:bdraco.

    On system with IPv6 support, the :py:class:~aiohttp.resolver.AsyncResolver would not fallback to providing A records when AAAA records were not available. Additionally, unlike the :py:class:~aiohttp.resolver.ThreadedResolver, the :py:class:~aiohttp.resolver.AsyncResolver did not handle link-local addresses correctly.

... (truncated)

Changelog

Sourced from aiohttp's changelog.

3.10.0 (2024-07-30)

Bug fixes

  • Fixed server response headers for Content-Type and Content-Encoding for static compressed files -- by :user:steverep.

    Server will now respond with a Content-Type appropriate for the compressed file (e.g. "application/gzip"), and omit the Content-Encoding header. Users should expect that most clients will no longer decompress such responses by default.

    Related issues and pull requests on GitHub: :issue:4462.

  • Fixed duplicate cookie expiration calls in the CookieJar implementation

    Related issues and pull requests on GitHub: :issue:7784.

  • Adjusted FileResponse to check file existence and access when preparing the response -- by :user:steverep.

    The :py:class:~aiohttp.web.FileResponse class was modified to respond with 403 Forbidden or 404 Not Found as appropriate. Previously, it would cause a server error if the path did not exist or could not be accessed. Checks for existence, non-regular files, and permissions were expected to be done in the route handler. For static routes, this now permits a compressed file to exist without its uncompressed variant and still be served. In addition, this changes the response status for files without read permission to 403, and for non-regular files from 404 to 403 for consistency.

    Related issues and pull requests on GitHub: :issue:8182.

  • Fixed AsyncResolver to match ThreadedResolver behavior -- by :user:bdraco.

    On system with IPv6 support, the :py:class:~aiohttp.resolver.AsyncResolver would not fallback to providing A records when AAAA records were not available.

... (truncated)

Commits

Updates botocore from 1.34.137 to 1.34.151

Changelog

Sourced from botocore's changelog.

1.34.151

  • api-change:appstream: Added support for Red Hat Enterprise Linux 8 on Amazon AppStream 2.0
  • api-change:autoscaling: Increase the length limit for VPCZoneIdentifier from 2047 to 5000
  • api-change:codepipeline: AWS CodePipeline V2 type pipelines now support stage level conditions to enable development teams to safely release changes that meet quality and compliance requirements.
  • api-change:elasticache: Doc only update for changes to deletion API.
  • api-change:elb: Add v2 smoke tests and smithy smokeTests trait for SDK testing.
  • api-change:events: Add v2 smoke tests and smithy smokeTests trait for SDK testing.
  • api-change:lexv2-models: This release adds new capabilities to the AMAZON.QnAIntent: Custom prompting, Guardrails integration and ExactResponse support for Bedrock Knowledge Base.
  • api-change:logs: Add v2 smoke tests and smithy smokeTests trait for SDK testing.
  • api-change:rolesanywhere: IAM RolesAnywhere now supports custom role session name on the CreateSession. This release adds the acceptRoleSessionName option to a profile to control whether a role session name will be accepted in a session request with a given profile.
  • api-change:tnb: This release adds Network Service Update, through which customers will be able to update their instantiated networks to a new network package. See the documentation for limitations. The release also enhances the Get network operation API to return parameter overrides used during the operation.
  • api-change:workspaces: Removing multi-session as it isn't supported for pools

1.34.150

  • api-change:elasticache: Renaming full service name as it appears in developer documentation.
  • api-change:memorydb: Renaming full service name as it appears in developer documentation.

1.34.149

  • api-change:application-autoscaling: Application Auto Scaling is now more responsive to the changes in demand of your SageMaker Inference endpoints. To get started, create or update a Target Tracking policy based on High Resolution CloudWatch metrics.
  • api-change:application-signals: CloudWatch Application Signals now supports application logs correlation with traces and operational health metrics of applications running on EC2 instances. Users can view the most relevant telemetry to troubleshoot application health anomalies such as spikes in latency, errors, and availability.
  • api-change:bedrock-runtime: Provides ServiceUnavailableException error message
  • api-change:codecommit: CreateRepository API now throws OperationNotAllowedException when the account has been restricted from creating a repository.
  • api-change:datazone: Introduces GetEnvironmentCredentials operation to SDK
  • api-change:ec2: EC2 Fleet now supports using custom identifiers to reference Amazon Machine Images (AMI) in launch requests that are configured to choose from a diversified list of instance types.
  • api-change:ecr: API and documentation updates for Amazon ECR, adding support for creating, updating, describing and deleting ECR Repository Creation Template.
  • api-change:eks: This release adds support for EKS cluster to manage extended support.
  • api-change:elbv2: This release adds support for sharing trust stores across accounts and organizations through integration with AWS Resource Access Manager.
  • api-change:network-firewall: You can now log events that are related to TLS inspection, in addition to the existing alert and flow logging.
  • api-change:outposts: Adding default vCPU information to GetOutpostSupportedInstanceTypes and GetOutpostInstanceTypes responses
  • api-change:stepfunctions: This release adds support to customer managed KMS key encryption in AWS Step Functions.

1.34.148

  • api-change:cleanrooms: Three enhancements to the AWS Clean Rooms: Disallowed Output Columns, Flexible Result Receivers, SQL as a Seed
  • api-change:dynamodb: DynamoDB doc only update for July
  • api-change:iotsitewise: Adds support for creating SiteWise Edge gateways that run on a Siemens Industrial Edge Device.
  • api-change:mediapackagev2: This release adds support for Irdeto DRM encryption in DASH manifests.
  • api-change:medical-imaging: CopyImageSet API adds copying selected instances between image sets, and overriding inconsistent metadata with a force parameter. UpdateImageSetMetadata API enables reverting to prior versions; updates to Study, Series, and SOP Instance UIDs; and updates to private elements, with a force parameter.
  • api-change:pinpoint-sms-voice-v2: Update for rebrand to AWS End User Messaging SMS and Voice.

... (truncated)

Commits

Updates certifi from 2024.6.2 to 2024.7.4

Commits

Updates hiredis from 2.3.2 to 3.0.0

Release notes

Sourced from hiredis's releases.

3.0.0

Changes

Breaking Changes

  • Return Redis sets as Python lists (#189)

🐛 Bug Fixes

  • Return Redis sets as Python lists (#189)

Contributors

We'd like to thank all the contributors who worked on this release!

@​gerzse

2.4.0

Changes

🧰 Maintenance

  • Fix small typo (#192)
  • Quote version for Python setup action in CI (#191)
  • Fix building the wheel for windows (#190)
  • pack: Replace sdsalloc.h with alloc.h (#159)
  • Bump black from 22.3.0 to 24.3.0 (#185)
  • Removing python 3.7 trove (#181)
  • Badge for latest released on Pypi (#182)
  • Sync license in metadata with LICENSE file (#183)

Contributors

We'd like to thank all the contributors who worked on this release!

@​Apteryks, @​ArtemIsmagilov, @​chayim, @​dependabot, @​dependabot[bot], @​gerzse and @​shadchin

Commits

Updates sentry-sdk from 2.7.1 to 2.12.0

Release notes

Sourced from sentry-sdk's releases.

2.12.0

Various fixes & improvements

2.11.0

Various fixes & improvements

... (truncated)

Changelog

Sourced from sentry-sdk's changelog.

2.12.0

Various fixes & improvements

2.11.0

Various fixes & improvements

  • Add disabled_integrations (#3328) by @​sentrivana

    Disabling individual integrations is now much easier. Instead of disabling all automatically enabled integrations and specifying the ones you want to keep, you can now use the new disabled_integrations config option to provide a list of integrations to disable:

    import sentry_sdk
from sentry_sdk.integrations.flask import FlaskIntegration
sentry_sdk.init(
# Do not use the Flask integration even if Flask is installed.
disabled_integrations=[
FlaskIntegration(),
],
)

  • Use operation name as transaction name in Strawberry (#3294) by @​sentrivana

  • WSGI integrations respect SCRIPT_NAME env variable (#2622) by @​sarvaSanjay

  • Make Django DB spans have origin auto.db.django (#3319) by @​antonpirker

  • Sort breadcrumbs by time before sending (#3307) by @​antonpirker

  • Fix KeyError('sentry-monitor-start-timestamp-s') (#3278) by @​Mohsen-Khodabakhshi

... (truncated)

Commits
  • 441c0f7 Updated changelog
  • ab3eb1f release: 2.12.0
  • f8e5d2f Add span data to the transactions trace context (#3374)
  • 0f3e5db ci: Remove Django setuptools pin
  • b658e4b feat(integrations): Add async support for ai_track decorator
  • fc5db4f ref(otel): Remove experimental autoinstrumentation (#3239)
  • 6bb2081 build(deps): bump checkouts/data-schemas from 0feb234 to 6d2c435 (#3369)
  • 2ce6677 tests: Test with Django 5.1 RC (#3370)
  • bd293e5 Expose the scope getters to top level API and use them everywhere (#3357)
  • c9765cd ci: Workaround bug preventing Django test runs (#3371)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Upgrade: Bump the dependencies group with 5 updates
8668149 
Bumps the dependencies group with 5 updates:

| Package | From | To |
| --- | --- | --- |
| [aiohttp](https://github.com/aio-libs/aiohttp) | `3.9.5` | `3.10.0` |
| [botocore](https://github.com/boto/botocore) | `1.34.137` | `1.34.151` |
| [certifi](https://github.com/certifi/python-certifi) | `2024.6.2` | `2024.7.4` |
| [hiredis](https://github.com/redis/hiredis-py) | `2.3.2` | `3.0.0` |
| [sentry-sdk](https://github.com/getsentry/sentry-python) | `2.7.1` | `2.12.0` |


Updates `aiohttp` from 3.9.5 to 3.10.0
- [Release notes](https://github.com/aio-libs/aiohttp/releases)
- [Changelog](https://github.com/aio-libs/aiohttp/blob/master/CHANGES.rst)
- [Commits](aio-libs/aiohttp@v3.9.5...v3.10.0)

Updates `botocore` from 1.34.137 to 1.34.151
- [Changelog](https://github.com/boto/botocore/blob/develop/CHANGELOG.rst)
- [Commits](boto/botocore@1.34.137...1.34.151)

Updates `certifi` from 2024.6.2 to 2024.7.4
- [Commits](certifi/python-certifi@2024.06.02...2024.07.04)

Updates `hiredis` from 2.3.2 to 3.0.0
- [Release notes](https://github.com/redis/hiredis-py/releases)
- [Changelog](https://github.com/redis/hiredis-py/blob/master/CHANGELOG.md)
- [Commits](redis/hiredis-py@v2.3.2...v3.0.0)

Updates `sentry-sdk` from 2.7.1 to 2.12.0
- [Release notes](https://github.com/getsentry/sentry-python/releases)
- [Changelog](https://github.com/getsentry/sentry-python/blob/master/CHANGELOG.md)
- [Commits](getsentry/sentry-python@2.7.1...2.12.0)

---
updated-dependencies:
- dependency-name: aiohttp
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: botocore
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: certifi
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: hiredis
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: sentry-sdk
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Aug 1, 2024
@dependabot Dependabot
Copy link
Contributor Author

dependabot bot commented on behalf of github Sep 1, 2024

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot bot closed this Sep 1, 2024
@dependabot dependabot bot deleted the dependabot/pip/dependencies-300d3dd2a4 branch September 1, 2024 10:03
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
dependencies Pull requests that update a dependency file python Pull requests that update Python code
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
0 participants