Bump the pip group across 1 directory with 12 updates #10
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
![dependabot[bot]](https://avatars.githubusercontent.com/in/29110?s=60&v=4){kind=small}
Bumps the pip group with 12 updates in the / directory: | Package | From | To | | --- | --- | --- | | [django](https://github.com/django/django) | `4.2.5` | `4.2.15` | | [setuptools](https://github.com/pypa/setuptools) | `68.2.2` | `70.0.0` | | [black](https://github.com/psf/black) | `23.9.1` | `24.3.0` | | [aiohttp](https://github.com/aio-libs/aiohttp) | `3.8.5` | `3.10.2` | | [certifi](https://github.com/certifi/python-certifi) | `2023.7.22` | `2024.7.4` | | [idna](https://github.com/kjd/idna) | `3.4` | `3.7` | | [jinja2](https://github.com/pallets/jinja) | `3.1.2` | `3.1.4` | | [requests](https://github.com/psf/requests) | `2.31.0` | `2.32.2` | | [sqlparse](https://github.com/andialbrecht/sqlparse) | `0.4.4` | `0.5.0` | | [tqdm](https://github.com/tqdm/tqdm) | `4.66.1` | `4.66.3` | | [urllib3](https://github.com/urllib3/urllib3) | `1.26.16` | `1.26.19` | | [zipp](https://github.com/jaraco/zipp) | `3.16.2` | `3.19.1` | Updates `django` from 4.2.5 to 4.2.15 - [Commits](django/django@4.2.5...4.2.15) Updates `setuptools` from 68.2.2 to 70.0.0 - [Release notes](https://github.com/pypa/setuptools/releases) - [Changelog](https://github.com/pypa/setuptools/blob/main/NEWS.rst) - [Commits](pypa/setuptools@v68.2.2...v70.0.0) Updates `black` from 23.9.1 to 24.3.0 - [Release notes](https://github.com/psf/black/releases) - [Changelog](https://github.com/psf/black/blob/main/CHANGES.md) - [Commits](psf/black@23.9.1...24.3.0) Updates `aiohttp` from 3.8.5 to 3.10.2 - [Release notes](https://github.com/aio-libs/aiohttp/releases) - [Changelog](https://github.com/aio-libs/aiohttp/blob/master/CHANGES.rst) - [Commits](aio-libs/aiohttp@v3.8.5...v3.10.2) Updates `certifi` from 2023.7.22 to 2024.7.4 - [Commits](certifi/python-certifi@2023.07.22...2024.07.04) Updates `idna` from 3.4 to 3.7 - [Release notes](https://github.com/kjd/idna/releases) - [Changelog](https://github.com/kjd/idna/blob/master/HISTORY.rst) - [Commits](kjd/idna@v3.4...v3.7) Updates `jinja2` from 3.1.2 to 3.1.4 - [Release notes](https://github.com/pallets/jinja/releases) - [Changelog](https://github.com/pallets/jinja/blob/main/CHANGES.rst) - [Commits](pallets/jinja@3.1.2...3.1.4) Updates `requests` from 2.31.0 to 2.32.2 - [Release notes](https://github.com/psf/requests/releases) - [Changelog](https://github.com/psf/requests/blob/main/HISTORY.md) - [Commits](psf/requests@v2.31.0...v2.32.2) Updates `sqlparse` from 0.4.4 to 0.5.0 - [Changelog](https://github.com/andialbrecht/sqlparse/blob/master/CHANGELOG) - [Commits](andialbrecht/sqlparse@0.4.4...0.5.0) Updates `tqdm` from 4.66.1 to 4.66.3 - [Release notes](https://github.com/tqdm/tqdm/releases) - [Commits](tqdm/tqdm@v4.66.1...v4.66.3) Updates `urllib3` from 1.26.16 to 1.26.19 - [Release notes](https://github.com/urllib3/urllib3/releases) - [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst) - [Commits](urllib3/urllib3@1.26.16...1.26.19) Updates `zipp` from 3.16.2 to 3.19.1 - [Release notes](https://github.com/jaraco/zipp/releases) - [Changelog](https://github.com/jaraco/zipp/blob/main/NEWS.rst) - [Commits](jaraco/zipp@v3.16.2...v3.19.1) --- updated-dependencies: - dependency-name: django dependency-type: direct:production dependency-group: pip - dependency-name: setuptools dependency-type: direct:production dependency-group: pip - dependency-name: black dependency-type: direct:development dependency-group: pip - dependency-name: aiohttp dependency-type: indirect dependency-group: pip - dependency-name: certifi dependency-type: indirect dependency-group: pip - dependency-name: idna dependency-type: indirect dependency-group: pip - dependency-name: jinja2 dependency-type: indirect dependency-group: pip - dependency-name: requests dependency-type: indirect dependency-group: pip - dependency-name: sqlparse dependency-type: indirect dependency-group: pip - dependency-name: tqdm dependency-type: indirect dependency-group: pip - dependency-name: urllib3 dependency-type: indirect dependency-group: pip - dependency-name: zipp dependency-type: indirect dependency-group: pip ... Signed-off-by: dependabot[bot] <[email protected]>
|
This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests. To ignore these dependencies, configure ignore rules in dependabot.yml |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Rebasing might not happen immediately, so don't worry if this takes some time.
Note: if you make any changes to this PR yourself, they will take precedence over the rebase.
Bumps the pip group with 12 updates in the / directory:
4.2.54.2.1568.2.270.0.023.9.124.3.03.8.53.10.22023.7.222024.7.43.43.73.1.23.1.42.31.02.32.20.4.40.5.04.66.14.66.31.26.161.26.193.16.23.19.1Updates
djangofrom 4.2.5 to 4.2.15Commits
4d32ebc[4.2.x] Bumped version for 4.2.15 release.f4af67b[4.2.x] Fixed CVE-2024-42005 -- Mitigated QuerySet.values() SQL injection att...efea1ef[4.2.x] Fixed CVE-2024-41991 -- Prevented potential ReDoS in django.utils.htm...d0a82e2[4.2.x] Fixed CVE-2024-41990 -- Mitigated potential DoS in urlize and urlizet...fc76660[4.2.x] Fixed CVE-2024-41989 -- Prevented excessive memory consumption in flo...7b1a76f[4.2.x] Added stub release notes and release date for 4.2.15.96a3497[4.2.x] Fixed #35627 -- Raised a LookupError rather than an unhandled ValueEr...c5d196a[4.2.x] Fixed auth_tests and file_storage tests on Python 3.8.8e59e33[4.2.x] Added CVE-2024-38875, CVE-2024-39329, CVE-2024-39330, and CVE-2024-39...72f6c7d[4.2.x] Post-release version bump.Updates
setuptoolsfrom 68.2.2 to 70.0.0Changelog
Sourced from setuptools's changelog.
... (truncated)
Commits
5cbf12aWorkaround for release error in v709c1bcc3Bump version: 69.5.1 → 70.0.04dc0c31Remove deprecatedsetuptools.dep_util(#4360)6c1ef57Remove xfail now that test passes. Ref #4371.d14fa01Add all site-packages dirs when creating simulated environment for test_edita...6b7f7a1Preventbinfolders to be taken as extern packages when vendoring (#4370)69141f6Add doctest for vendorised bin folder2a53cc1Prevent 'bin' folders to be taken as extern packages7208628Replace call to deprecatedvalidate_pyprojectcommand (#4363)96d681aRemove call to deprecated validate_pyproject commandUpdates
blackfrom 23.9.1 to 24.3.0Release notes
Sourced from black's releases.
... (truncated)
Changelog
Sourced from black's changelog.
... (truncated)
Commits
552baf8Prepare release 24.3.0 (#4279)f000936Fix catastrophic performance in lines_with_leading_tabs_expanded() (#4278)7b5a657Fix --line-ranges behavior when ranges are at EOF (#4273)1abcffcUse regex where we ignore case on windows (#4252)719e674Fix 4227: Improve documentation for --quiet --check (#4236)e5510afupdate plugin url for Thonny (#4259)6af7d11Fix AST safety check false negative (#4270)f03ee11Ensureblib2to3.pygramis initialized before use (#4224)e4bfedbfix: Don't move comments while splitting delimiters (#4248)d0287e1Make trailing comma logic more concise (#4202)Updates
aiohttpfrom 3.8.5 to 3.10.2Release notes
Sourced from aiohttp's releases.
... (truncated)
Changelog
Sourced from aiohttp's changelog.
... (truncated)
Commits
491106eRelease 3.10.2 (#8655)ce2e975[PR #8652/b0536ae6 backport][3.10] Do not follow symlinks for compressed file...6a77806[PR #8636/51d872e backport][3.10] Remove Request.wait_for_disconnection() met...1f92213[PR #8642/e4942771 backport][3.10] Fix response to circular symlinks with Pyt...2ef14a6[PR #8641/0a88bab backport][3.10] Fix WebSocket ping tasks being prematurely ...68e8496[PR #8608/c4acabc backport][3.10] Fix timer handle churn in websocket heartbe...72f41aa[PR #8632/b2691f2 backport][3.10] Fix connecting to npipe://, tcp://, and uni...bf83dbe[PR #8634/c7293e19 backport][3.10] Backport #8620 as improvements to various ...4815765[PR #8597/c99a1e27 backport][3.10] Fix reading of body when ignoring an upgra...266608d[PR #8611/1fcef940 backport][3.10] Fix handler waiting on shutdown (#8627)Updates
certififrom 2023.7.22 to 2024.7.4Commits
bd815382024.07.04 (#295)06a2cbfBump peter-evans/create-pull-request from 6.0.5 to 6.1.0 (#294)13bba02Bump actions/checkout from 4.1.6 to 4.1.7 (#293)e8abcd0Bump pypa/gh-action-pypi-publish from 1.8.14 to 1.9.0 (#292)124f4ad2024.06.02 (#291)c2196ce--- (#290)fefdeecBump actions/checkout from 4.1.4 to 4.1.5 (#289)3c5fb15Bump actions/download-artifact from 4.1.6 to 4.1.7 (#286)4a9569aBump actions/checkout from 4.1.2 to 4.1.4 (#287)1fc8086Bump peter-evans/create-pull-request from 6.0.4 to 6.0.5 (#288)Updates
idnafrom 3.4 to 3.7Release notes
Sourced from idna's releases.
Changelog
Sourced from idna's changelog.
Commits
1d365e1Release v3.7c1b3154Merge pull request #172 from kjd/optimize-contextj0394ec7Merge branch 'master' into optimize-contextjcd58a23Merge pull request #152 from elliotwutingfeng/dev5beb28bMore efficient resolution of joiner contexts1b12148Update ossf/scorecard-action to v2.3.1d516b87Update Github actions/checkout to v4c095c75Merge branch 'master' into dev60a0a4cFix typo in GitHub Actions workflow key5918a0eMerge branch 'master' into devUpdates
jinja2from 3.1.2 to 3.1.4Release notes
Sourced from jinja2's releases.
Changelog
Sourced from jinja2's changelog.
Commits
dd4a8b5release version 3.1.40668239Merge pull request from GHSA-h75v-3vvj-5mfjd655030disallow invalid characters in keys to xmlattr filtera7863baadd ghsa linksb5c98e7start version 3.1.4da3a9f0update project files (#1968)0ee5eb4satisfy formatter, linter, and strict mypy20477c6update project files (#5457)e491223update pyyaml dev dependency36f9885fix pr linkUpdates
requestsfrom 2.31.0 to 2.32.2Release notes
Sourced from requests's releases.
... (truncated)
Changelog
Sourced from requests's changelog.
... (truncated)
Commits
88dce9dv2.32.2c98e4d1Merge pull request #6710 from nateprewitt/api_rename92075b3Add deprecation warningaa1461bMove _get_connection to get_connection_with_tls_context970e8cev2.32.1d6ebc4av2.32.09a40d12Avoid reloading root certificates to improve concurrent performance (#6667)0c030f7Merge pull request #6702 from nateprewitt/no_char_detection555b870Allow character detection dependencies to be optional in post-packaging stepsd6dded3Merge pull request #6700 from franekmagiera/update-redirect-to-invalid-uri-testUpdates
sqlparsefrom 0.4.4 to 0.5.0Changelog
Sourced from sqlparse's changelog.
Commits
ddbd0ecBump version.29f2e0aRaise recursion limit for tests.b4a39d9Raise SQLParseError instead of RecursionError.f1bcf2fUpdate AUHTORS and Changelog.e03b74eFix Function.get_parameters(), add Funtion.get_window()617b8f6Add OVER clause, and group it into Function (fixes #701)d8f8147Update AUHTORS and Changelog.012c9f1Optimize sqlparse.utils.imt().46971e5Fix parsing of PRIMARY KEY (fixes #740).fc4b0beCode cleanup.Updates
tqdmfrom 4.66.1 to 4.66.3Release notes
Sourced from tqdm's releases.
Commits
4e613f8Merge pull request from GHSA-g7vv-2v7x-gj9pb53348ccli: eval safetycc372d0bump version, merge pull request #1549 from tqdm/devele9f0c05use PyPI trusted publishing7323d5bslight makefile clean5306125tests: bump pre-commit4a6fd4ffix datetime.utcfromtimestamp py3.12 warning (#1519)6f13759tests: fix macos notebook indentation3abcd2atests: fix asva4d15c8tests: fix pandas warningsUpdates
urllib3from 1.26.16 to 1.26.19Release notes
Sourced from urllib3's releases.
Changelog
Sourced from urllib3's changelog.
Commits
d9d85c8Release 1.26.198528b63[1.26] Fix downstream tests (#3409)40b6d16Merge pull request from GHSA-34jh-p97f-mpxf29cfd02Fix handling of OpenSSL 3.2.0 new error message "record layer failure" (#3405)b600643[1.26] Bump RECENT_DATE (#3404)7e2d389[1.26] Fix running CPython 2.7 tests in CI (#3137)9c2c230Release 1.26.18 (#3159)b594c5cMerge pull request from GHSA-g4mx-q9vg-27p4944f0eb[1.26] Use vendored six in urllib3.contrib.securetransportc9016bfRelease 1.26.17Updates
zippfrom 3.16.2 to 3.19.1Changelog
Sourced from zipp's changelog.
... (truncated)
Commits
6d1cb72Finalizefd604bdMerge pull request #120 from jaraco/bugfix/119-malformed-pathsc18417eAdd news fragment.58115d2Employ SanitizedNames in CompleteDirs. Fixes broken test.564fcc1Add SanitizedNames mixin.79a309fAdd some assertions about malformed paths.2d015c2Merge https://github.com/jaraco/skeletona595a0fRename extras to align with core metadata spec.608f90aFinalize3a22d72Merge pull request #118 from jaraco/feature/is-symlinkDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditionsYou can disable automated security fix PRs for this repo from the Security Alerts page.