chore: Bump the python-backend-dependencies group across 1 directory with 14 updates #111

dependabot · 2024-11-01T00:10:31Z

Bumps the python-backend-dependencies group with 14 updates in the /backend directory:

Package	From	To
babel	`2.15.0`	`2.16.0`
billiard	`4.2.0`	`4.2.1`
falcon	`3.1.3`	`4.0.1`
gunicorn	`22.0.0`	`23.0.0`
kombu	`5.3.7`	`5.4.2`
oslo-config	`9.5.0`	`9.6.0`
oslo-i18n	`6.3.0`	`6.4.0`
pbr	`6.0.0`	`6.1.0`
psycopg2	`2.9.9`	`2.9.10`
python-mimeparse	`1.6.0`	`2.0.0`
pytz	`2024.1`	`2024.2`
pyyaml	`6.0.1`	`6.0.2`
sqlalchemy	`2.0.31`	`2.0.36`
stevedore	`5.2.0`	`5.3.0`

Updates babel from 2.15.0 to 2.16.0

Release notes

Sourced from babel's releases.

Version 2.16.0

The changelog below is auto-generated by GitHub.

Please see CHANGELOG.rst for additional details.

What's Changed

Upgrade GitHub Actions versions to avoid deprecation warnings by @akx in python-babel/babel#1080

Replace deprecated ast.Str with ast.Constant by @tomasr8 in python-babel/babel#1083

Fix #1094 by @john-psina in python-babel/babel#1095

CI fixes by @akx in python-babel/babel#1097

Upgrade to CLDR 45 by @tomasr8 in python-babel/babel#1077

Make pgettext search plurals when translation is not found by @tomasr8 in python-babel/babel#1085

Fix for #832 by @Edwin18 in python-babel/babel#1052

Support list format fallbacks by @akx in python-babel/babel#1099

Improve Codecov configuration by @akx in python-babel/babel#1103

Avoid crashing on importing localtime when TZ is malformed by @akx in python-babel/babel#1100

Allow parsing .po files that have an extant but empty Language header by @akx in python-babel/babel#1101

Add a mention to the docs that format_skeleton(..., fuzzy=True) may raise by @tomasr8 in python-babel/babel#1106

Allow falling back to modifier-less locale data by @akx in python-babel/babel#1104

Allow use of importlib.metadata for finding entrypoints by @akx in python-babel/babel#1102

Test on Python 3.13 beta releases by @akx in python-babel/babel#1107

Normalize package name to lower-case in setup.py by @akx in python-babel/babel#1110

Do not allow substituting alternates or drafts in derived locales by @akx in python-babel/babel#1113

Two hyperlinks (to CLDR) and some typos by @buhtz in python-babel/babel#1115

Initial support for reading mapping configuration as TOML by @akx in python-babel/babel#1108

Prepare for 2.16.0 release by @akx in python-babel/babel#1116

New Contributors

@tomasr8 made their first contribution in python-babel/babel#1083

@john-psina made their first contribution in python-babel/babel#1095

@Edwin18 made their first contribution in python-babel/babel#1052

@buhtz made their first contribution in python-babel/babel#1115

Full Changelog: python-babel/babel@v2.15.0...v2.16.0

Changelog

Sourced from babel's changelog.

Version 2.16.0

Features

* CLDR: Upgrade to CLDR 45 by @tomasr8 in :gh:`1077` * Lists: Support list format fallbacks by @akx in :gh:`1099` * Messages: Initial support for reading mapping configuration as TOML by @akx in :gh:`1108`

Bugfixes

CLDR: Do not allow substituting alternates or drafts in derived locales by @akx in :gh:1113
Core: Allow falling back to modifier-less locale data by @akx in :gh:1104
Core: Allow use of importlib.metadata for finding entrypoints by @akx in :gh:1102
Dates: Avoid crashing on importing localtime when TZ is malformed by @akx in :gh:1100
Messages: Allow parsing .po files that have an extant but empty Language header by @akx in :gh:1101
Messages: Fix --ignore-dirs being incorrectly read (#1094) by @john-psina and @Edwin18 in :gh:1052 and :gh:1095
Messages: Make pgettext search plurals when translation is not found by @tomasr8 in :gh:1085

Infrastructure


* Replace deprecated `ast.Str` with `ast.Constant` by @tomasr8 in :gh:`1083`
* CI fixes by @akx in :gh:`1080`, :gh:`1097`, :gh:`1103`, :gh:`1107`
* Test on Python 3.13 beta releases by @akx in
* Normalize package name to lower-case in setup.py by @akx in :gh:`1110`
Documentation

* Add a mention to the docs that `format_skeleton(..., fuzzy=True)` may raise by @tomasr8 in :gh:`1106`
* Two hyperlinks (to CLDR) and some typos by @buhtz in :gh:`1115`
</code></pre>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>

<li><a href="https://github.com/python-babel/babel/commit/cf7d22369cf40a8218cff1d3dc823eefa174aee0&quot;&gt;&lt;code&gt;cf7d223&lt;/code&gt;&lt;/a> Prepare for 2.16.0 release (<a href="https://redirect.github.com/python-babel/babel/issues/1116&quot;&gt;#1116&lt;/a&gt;)&lt;/li>

<li><a href="https://github.com/python-babel/babel/commit/d26a669826d6c963dfdc21ae09e8cd5659fc95e2&quot;&gt;&lt;code&gt;d26a669&lt;/code&gt;&lt;/a> Initial support for reading mapping configuration as TOML (<a href="https://redirect.github.com/python-babel/babel/issues/1108&quot;&gt;#1108&lt;/a&gt;)&lt;/li>

<li><a href="https://github.com/python-babel/babel/commit/34ed517de44cf3c3002f3b69713b1693d329646d&quot;&gt;&lt;code&gt;34ed517&lt;/code&gt;&lt;/a> Two hyperlinks (to CLDR) and some typos (<a href="https://redirect.github.com/python-babel/babel/issues/1115&quot;&gt;#1115&lt;/a&gt;)&lt;/li>

<li><a href="https://github.com/python-babel/babel/commit/b4ba84382f3ce7bdf0e5a68e7108a21f4e8e7926&quot;&gt;&lt;code&gt;b4ba843&lt;/code&gt;&lt;/a> Do not allow substituting alternates or drafts in derived locales (<a href="https://redirect.github.com/python-babel/babel/issues/1113&quot;&gt;#1113&lt;/a&gt;)&lt;/li>

<li><a href="https://github.com/python-babel/babel/commit/d3346ee33b13f50af582e31ae5c337aa409dda11&quot;&gt;&lt;code&gt;d3346ee&lt;/code&gt;&lt;/a> Normalize package name to lower-case in setup.py (<a href="https://redirect.github.com/python-babel/babel/issues/1110&quot;&gt;#1110&lt;/a&gt;)&lt;/li>

<li><a href="https://github.com/python-babel/babel/commit/a32f15ecec23d5d5049100fd8e65606be7ad12a1&quot;&gt;&lt;code&gt;a32f15e&lt;/code&gt;&lt;/a> Test on Python 3.13 beta releases (<a href="https://redirect.github.com/python-babel/babel/issues/1107&quot;&gt;#1107&lt;/a&gt;)&lt;/li>

<li><a href="https://github.com/python-babel/babel/commit/4d3fd0e0198185cd023f4d3cd1495bda211867f4&quot;&gt;&lt;code&gt;4d3fd0e&lt;/code&gt;&lt;/a> Allow use of importlib.metadata for finding entrypoints (<a href="https://redirect.github.com/python-babel/babel/issues/1102&quot;&gt;#1102&lt;/a&gt;)&lt;/li>

<li><a href="https://github.com/python-babel/babel/commit/42d793cb4408a296e5618e1bce8d176fc588ce57&quot;&gt;&lt;code&gt;42d793c&lt;/code&gt;&lt;/a> Allow falling back to modifier-less locale data when modified data is missing...</li>

<li><a href="https://github.com/python-babel/babel/commit/32f41c22d589d7f187448be477affe1cfbcbc59d&quot;&gt;&lt;code&gt;32f41c2&lt;/code&gt;&lt;/a> Improve docs for <code>format_skeleton</code> (<a href="https://redirect.github.com/python-babel/babel/issues/1106&quot;&gt;#1106&lt;/a&gt;)&lt;/li>

<li><a href="https://github.com/python-babel/babel/commit/2ebc47e63211df8b7636ed8e74bb99ac5bd36c25&quot;&gt;&lt;code&gt;2ebc47e&lt;/code&gt;&lt;/a> Allow parsing .po files that have an extant but empty Language header (<a href="https://redirect.github.com/python-babel/babel/issues/1101&quot;&gt;#1101&lt;/a&gt;)&lt;/li>

<li>Additional commits viewable in <a href="https://github.com/python-babel/babel/compare/v2.15.0...v2.16.0&quot;&gt;compare view</a></li>

</ul>

</details>
<br />


Updates billiard from 4.2.0 to 4.2.1

Release notes
Sourced from billiard's releases.

v4.2.1
What's Changed

Remove SIGUSR2 from TERMSIGS_DEAULT by @0x2b3bfa0 in celery/billiard#398
Add on_ready_counter to Worker.reduce. by @Androidown in celery/billiard#400
Adapt for logging lock internal changes in Python3.13 by @musicinmybrain in celery/billiard#404
blacksmith.sh: Migrate workflows to Blacksmith by @blacksmith-sh in celery/billiard#410
Prepare for release: v4.2.1 by @Nusnus in celery/billiard#411

New Contributors

@0x2b3bfa0 made their first contribution in celery/billiard#398
@Androidown made their first contribution in celery/billiard#400
@musicinmybrain made their first contribution in celery/billiard#404
@blacksmith-sh made their first contribution in celery/billiard#410
@Nusnus made their first contribution in celery/billiard#411

Full Changelog: https://github.com/celery/billiard/compare/v4.2.0...v4.2.1



Changelog
Sourced from billiard's changelog.

4.2.1 - 2024-09-21

Remove SIGUSR2 from TERMSIGS_DEAULT
Add on_ready_counter to Worker.reduce.
Adapt for logging lock internal changes in Python3.13
blacksmith.sh: Migrate workflows to blacksmith
Prepare for release: v4.2.1




Commits

366ac5f Prepare for release: v4.2.1 (#411)
1884c73 Migrate workflows to Blacksmith (#410)
81cc942 Adapt for logging lock internal changes in Python3.13
8bffa2c add on_ready_counter to reduction
8619ad0 Remove SIGUSR2 from TERMSIGS_DEAULT
See full diff in compare view




Updates falcon from 3.1.3 to 4.0.1

Release notes
Sourced from falcon's releases.

4.0.1
Falcon 4.0.1 is a minor point release addressing a Python distribution issue in Falcon 4.0.0.
Fixed
Installing Falcon 4.0.0 unexpectedly copies many unintended directories from the source tree to the venv’s site-packages. This issue has been rectified, and our CI has been extended with new tests (that verify what is actually installed from the distribution) to make sure this regression does not resurface. (#2384)
4.0.0
We are happy to present Falcon 4.0, a new major version of the framework that brings a couple of commonly requested features including support for matching multiple path segments (using PathConverter), and a fully typed codebase. (Please read more about typing in the notes on RtD.)
:snake: Falcon 4.0.0 on PyPI
:books: Changelog on RtD
The timeframe for Falcon 4.0 was challenging due to the need to balance our high standards with the CPython 3.13 timeline. We aimed to deliver the main development branch in this release, without resorting to another compatibility micro update (as we did with Falcon 3.1.1-3.1.3). Following community feedback, we also want to improve our overall release schedule by shipping smaller increments more often. To support this goal, we have made several tooling and testing improvements: the build process for binary wheels has been simplified using cibuildwheel, and our test suite now only requires pytest as a hard dependency. Additionally, you can run pytest against our tests from any directory. We hope that these changes should also benefit packaging Falcon in Linux distributions.
As with every SemVer major release, we have removed a number of previously deprecated functions, classes, compatibility shims, as well as made other potentially breaking changes that we could not risk in a minor version. If you have been paying attention the deprecation warnings from the 3.x series, the impact should be minimal, but please do take a look at the list of breaking changes on RtD.
This release would not have been possible without the numerous contributions from our community. This release alone comprises a number of pull requests submitted by a group of 30 talented individuals. What is more, we were particularly impressed by the high-quality discussions and code submissions during our EuroPython 2024 Sprint. Some notable sprint contributions include CHIPS support, and a new WebSocket Tutorial, among others. In fact, according to the statistics on GitHub, we are thrilled to report that the total number of Falcon contributors has now exceeded 200. We find it fascinating that our framework has become a collaborative effort involving so many individuals, and would like to thank everyone who has made this release possible!
4.0.0rc1
We are almost ready to release Falcon 4.0!
:snake: 4.0.0rc1 on PyPI
:books: Changelog on RtD
We would greatly appreciate it if you could help us with the final round of testing on your apps (pip install falcon==4.0.0rc1),
and let us know if you run into any issues!
Thank You!
4.0.0b4
Falcon 4.0.0b4 is hopefully the final beta release of Falcon 4.0. Compared to 4.0.0b3, we have made the timezone-aware datetime breaking changes more consistent, and documented the scope clearer.
:snake: 4.0.0b4 on PyPI
:books: Changelog on RtD
Please test this beta release with your apps (pip install falcon==4.0.0b4), and let us know if you run into any issues!
Thank You!
4.0.0b3
This is the third beta release of Falcon 4.0; it is almost identical to 4.0.0b2 with the exception of one multipart form parsing bug that has been fixed (falconry/falcon#2364).
:snake: 4.0.0b3 on PyPI
:books: Changelog on RtD
Please test this beta release with your apps (pip install falcon==4.0.0b3), and let us know if you run into any issues!
Thank You!
4.0.0b2
This is the second beta release of Falcon 4.0, where we made minor CI tweaks, and brought back the unintentionally removed, blocked resp.body property (it raises an instance of specialized AttributeError instead of a silent failure, making it much easier for the developer to track down this breaking change).


... (truncated)


Changelog
Sourced from falcon's changelog.

Changelog for Falcon 4.0.1
Summary
This is a minor point release to take care of a couple of bugs that we did
not catch for 4.0.0.
.. towncrier release notes start
Contributors to this Release
Many thanks to those who contributed to this bugfix release:

Otherwise, ensure the summary has been brought up to date; be sure to highlight
key changes in this release.
Next, update the contributors and render towncrier fragments by running:
$ tox -e changelog_release
</code></pre>
<p>Note that if the previous release was made on a branch, the tool may get
confused, and try to scan too many commits, which will unfortunately get
rate-limited (and fail) unless you provide a GitHub auth token.</p>
<p>The workaround is to make sure you have already aggregated the list of
contributors in the prior commits leading to the release, and only run the
towncrier tool:</p>
<pre lang="sh"><code>$ tools/towncrier_draft.py
</code></pre>
<p>Examine the updated RST as well as the rendered HTML docs and make any
adjustments as needed. On OS X it's as simple as:</p>
<pre lang="sh"><code>$ open docs/_build/html/changes/index.html
</code></pre>
<p>Or on Linux:</p>
<pre lang="sh"><code>&lt;/tr&gt;&lt;/table&gt; 
</code></pre>
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>

<li><a href="https://github.com/falconry/falcon/commit/1ef41db2ea17eb0015962c3f22668796de27dcd1&quot;&gt;&lt;code&gt;1ef41db&lt;/code&gt;&lt;/a> chore: prepare 4.0.1</li>

<li><a href="https://github.com/falconry/falcon/commit/a44f137e24ae0344e289aa02072b7628f1d2153e&quot;&gt;&lt;code&gt;a44f137&lt;/code&gt;&lt;/a> fix(dist): only detect <code>falcon*</code> as packages (<a href="https://redirect.github.com/falconry/falcon/issues/2385&quot;&gt;#2385&lt;/a&gt;)&lt;/li>

<li><a href="https://github.com/falconry/falcon/commit/d872d92cde0c5fb1ffb75080cbfc41f2219552b1&quot;&gt;&lt;code&gt;d872d92&lt;/code&gt;&lt;/a> chore: open 4.0.1 bugfix branch</li>

<li><a href="https://github.com/falconry/falcon/commit/53512207659097c348980f7ed16a9632be0b6127&quot;&gt;&lt;code&gt;5351220&lt;/code&gt;&lt;/a> docs(changes): prepare 4.0.0 stable (<a href="https://redirect.github.com/falconry/falcon/issues/2378&quot;&gt;#2378&lt;/a&gt;)&lt;/li>

<li><a href="https://github.com/falconry/falcon/commit/61c1047db2ef02556da9c28cc42c813b52db3aa9&quot;&gt;&lt;code&gt;61c1047&lt;/code&gt;&lt;/a> docs(changes): prepare Falcon <code>4.0.0rc1</code> (<a href="https://redirect.github.com/falconry/falcon/issues/2374&quot;&gt;#2374&lt;/a&gt;)&lt;/li>

<li><a href="https://github.com/falconry/falcon/commit/9debc9e29a033d13c628c6cd81a4d31c2e87f793&quot;&gt;&lt;code&gt;9debc9e&lt;/code&gt;&lt;/a> chore: prepare <code>4.0.0b4</code> (<a href="https://redirect.github.com/falconry/falcon/issues/2369&quot;&gt;#2369&lt;/a&gt;)&lt;/li>

<li><a href="https://github.com/falconry/falcon/commit/872a45e50ec07b6ca3f24688ff059126a88fbbaf&quot;&gt;&lt;code&gt;872a45e&lt;/code&gt;&lt;/a> docs(http_date_to_dt): describe the scope of timezone-aware date changes (<a href="https://redirect.github.com/falconry/falcon/issues/2368&quot;&gt;#2368&lt;/a&gt;)&lt;/li>

<li><a href="https://github.com/falconry/falcon/commit/2556dbe9e07d21162f0d565ea1928dcf1a4bf158&quot;&gt;&lt;code&gt;2556dbe&lt;/code&gt;&lt;/a> chore: prepare <code>4.0.0b3</code> (<a href="https://redirect.github.com/falconry/falcon/issues/2367&quot;&gt;#2367&lt;/a&gt;)&lt;/li>

<li><a href="https://github.com/falconry/falcon/commit/db33c9c3dd5a45a2ec8a10ec3e19dc416ffd1e02&quot;&gt;&lt;code&gt;db33c9c&lt;/code&gt;&lt;/a> fix(multipart): do not require CRLF after the closing delimiter (<a href="https://redirect.github.com/falconry/falcon/issues/2366&quot;&gt;#2366&lt;/a&gt;)&lt;/li>

<li><a href="https://github.com/falconry/falcon/commit/06fdf2885d70149803dbc47324ae8c951b7e58b3&quot;&gt;&lt;code&gt;06fdf28&lt;/code&gt;&lt;/a> chore: prepare <code>4.0.0b2</code> (<a href="https://redirect.github.com/falconry/falcon/issues/2362&quot;&gt;#2362&lt;/a&gt;)&lt;/li>

<li>Additional commits viewable in <a href="https://github.com/falconry/falcon/compare/3.1.3...4.0.1&quot;&gt;compare view</a></li>

</ul>

</details>
<br />


Updates gunicorn from 22.0.0 to 23.0.0

Release notes
Sourced from gunicorn's releases.

23.0.0
Gunicorn 23.0.0 has been released. This version improve HTTP 1.1. support and  which improve safety
You're invited to upgrade asap your own installation.
23.0.0 - 2024-08-10

minor docs fixes (:pr:3217, :pr:3089, :pr:3167)
worker_class parameter accepts a class (:pr:3079)
fix deadlock if request terminated during chunked parsing (:pr:2688)
permit receiving Transfer-Encodings: compress, deflate, gzip (:pr:3261)
permit Transfer-Encoding headers specifying multiple encodings. note: no parameters, still (:pr:3261)
sdist generation now explicitly excludes sphinx build folder (:pr:3257)
decode bytes-typed status (as can be passed by gevent) as utf-8 instead of raising TypeError (:pr:2336)
raise correct Exception when encounting invalid chunked requests (:pr:3258)
the SCRIPT_NAME and PATH_INFO headers, when received from allowed forwarders, are no longer restricted for containing an underscore (:pr:3192)
include IPv6 loopback address [::1] in default for :ref:forwarded-allow-ips and :ref:proxy-allow-ips (:pr:3192)

** NOTE **

The SCRIPT_NAME change mitigates a regression that appeared first in the 22.0.0 release
Review your :ref:forwarded-allow-ips setting if you are still not seeing the SCRIPT_NAME transmitted
Review your :ref:forwarder-headers setting if you are missing headers after upgrading from a version prior to 22.0.0

** Breaking changes **

refuse requests where the uri field is empty (:pr:3255)
refuse requests with invalid CR/LR/NUL in heade field values (:pr:3253)
remove temporary --tolerate-dangerous-framing switch from 22.0 (:pr:3260)
If any of the breaking changes affect you, be aware that now refused requests can post a security problem, especially so in setups involving request pipe-lining and/or proxies.

Fix CVE-2024-1135



Commits

411986d fix doc
334392e Merge pull request #2559 from laggardkernel/bugfix/reexec-env
e75c353 Merge pull request #3189 from pajod/patch-py36
9357b28 keep document user in access_log_format setting
79fdef0 bump to 23.0.0
3acd9fb Merge pull request #2620 from talkerbox/improve-access-log-format-docs
3f56d76 Merge pull request #3192 from pajod/patch-allowed-script-name
256d474 docs: revert duped directive
ffa48b5 test: default change was intentional
52538ca docs: recommend SCRIPT_NAME=/subfolder
Additional commits viewable in compare view




Updates kombu from 5.3.7 to 5.4.2

Release notes
Sourced from kombu's releases.

v5.4.2
What's Changed
Fixed issue with SQS #2113

tzdata is required for machines without IANA database by @woutdenolf in celery/kombu#2107
blacksmith.sh: Migrate workflows to Blacksmith by @blacksmith-sh in celery/kombu#2112
Revert "Validate SQS SSL certs by default" by @Nusnus in celery/kombu#2114
Update pymongo to 4.9 by @pyup-bot in celery/kombu#2115
Bump pymongo from 4.9 to 4.9.1 by @dependabot in celery/kombu#2118
Prepare for release: v5.4.2 by @Nusnus in celery/kombu#2119

New Contributors

@blacksmith-sh made their first contribution in celery/kombu#2112

Full Changelog: https://github.com/celery/kombu/compare/v5.4.1...v5.4.2
v5.4.1
What's Changed

Update mypy to 1.11.2 by @pyup-bot in celery/kombu#2101
SQS: Fixes #2091 queue_delete() method doesn't actually delete the queue by @ivanprjcts in celery/kombu#2099
Validate SQS SSL certs by default by @poundifdef in celery/kombu#2094
Resolving TypeError, during version unpacking  by @couzhei in celery/kombu#2098
Revert: allow users to disable broker heartbeats by not providing a timeout (#2097, #2016) by @FrankK-1234 in celery/kombu#2104
Update msgpack to 1.1.0 by @pyup-bot in celery/kombu#2105
Update pytest to 8.3.3 by @pyup-bot in celery/kombu#2108
Prepare for release: v5.4.1 by @Nusnus in celery/kombu#2109

New Contributors

@ivanprjcts made their first contribution in celery/kombu#2099
@poundifdef made their first contribution in celery/kombu#2094
@couzhei made their first contribution in celery/kombu#2098

Full Changelog: https://github.com/celery/kombu/compare/v5.4.0...v5.4.1
v5.4.0
We want to add a special thanks to contribution celery/kombu#2007 by @awmackowiak for fixing the Redis reconnection bug. Restoring Redis stability has been an essential improvement - thank you!
The rest of the changes are listed below.
What's Changed

fix: Fanout exchange messages mixed across virtual databases in Redis sentinel by @huyenvu2101 in celery/kombu#1986
Pin pymongo to latest version 4.7.2 by @pyup-bot in celery/kombu#1994
enable/fix test_etcd.py (resolves #2001) by @FrankK-1234 in celery/kombu#2002
Limit requests<2.32.0 due to docker-py issue 3256 by @Nusnus in celery/kombu#2011
enhance: allow users to disable broker heartbeats  by @smart-programmer in celery/kombu#1998
enhance: allow uses to disable broker heartbeats by not providing a timeout (#1997,#1998) by @FrankK-1234 in celery/kombu#2016
chore(typing): annotate utils/debug.py by @stegayet in celery/kombu#1714
ConnectionPool can't be used after .resize(..., reset=True) (resolves #2018) by @FrankK-1234 in celery/kombu#2024
Fix Redis connections after reconnect - consumer starts consuming the tasks after crash. by @awmackowiak in celery/kombu#2007



... (truncated)


Changelog
Sourced from kombu's changelog.

5.4.2
:release-date: 19 Sep, 2024
:release-by: Tomer Nosrati
Fixed issue with SQS #2113

tzdata is required for machines without IANA database (#2107)
blacksmith.sh: Migrate workflows to Blacksmith (#2112)
Revert "Validate SQS SSL certs by default" (#2114)
Update pymongo to 4.9 (#2115)
Bump pymongo from 4.9 to 4.9.1 (#2118)
Prepare for release: v5.4.2 (#2119)

.. _version-5.4.1:
5.4.1
:release-date: 11 Sep, 2024
:release-by: Tomer Nosrati

Update mypy to 1.11.2 (#2101)
SQS: Fixes #2091 queue_delete() method doesn't actually delete the queue (#2099)
Validate SQS SSL certs by default (#2094)
Resolving TypeError, during version unpacking (#2098)
Revert: allow users to disable broker heartbeats by not providing a timeout (#2097, #2016) (#2104)
Update msgpack to 1.1.0 (#2105)
Update pytest to 8.3.3 (#2108)
Prepare for release: v5.4.1 (#2109)

.. _version-5.4.0:
5.4.0
:release-date: 6 August, 2024
:release-by: Tomer Nosrati
We want to add a special thanks to contribution [#2007](https://github.com/celery/kombu/issues/2007) <https://github.com/celery/kombu/pull/2007>_ by
@awmackowiak for fixing the Redis reconnection bug. Restoring Redis stability has been an essential improvement - thank you!
The rest of the changes are listed below.
Changes

fix: Fanout exchange messages mixed across virtual databases in Redis sentinel (#1986)
Pin pymongo to latest version 4.7.2 (#1994)
enable/fix test_etcd.py (resolves #2001) (#2002)
Limit requests<2.32.0 due to docker-py issue 3256 (#2011)
enhance: allow users to disable broker heartbeats (#1998)
enhance: allow uses to disable broker heartbeats by not providing a timeout (#1997, #1998) (#2016)



... (truncated)


Commits

8957e55 Prepare for release: v5.4.2 (#2119)
4ee6933 Bump pymongo from 4.9 to 4.9.1 (#2118)
952b4dc Update pymongo from 4.8.0 to 4.9
a626f1f Revert "Validate SSL certs by default (#2094)" (#2114)
4d7946e Migrate workflows to Blacksmith (#2112)
f560753 tzdata is required for machines without IANA database (#2107)
5c9db06 Prepare for release: v5.4.1 (#2109)
26ea9cd Update pytest from 8.3.2 to 8.3.3 (#2108)
8295d28 Update msgpack from 1.0.8 to 1.1.0
33490ad Revert: allow users to disable broker heartbeats by not providing a timeout (...
Additional commits viewable in compare view




Updates oslo-config from 9.5.0 to 9.6.0
Updates oslo-i18n from 6.3.0 to 6.4.0
Updates pbr from 6.0.0 to 6.1.0
Updates psycopg2 from 2.9.9 to 2.9.10

Changelog
Sourced from psycopg2's changelog.

Current release
What's new in psycopg 2.9.10
^^^^^^^^^^^^^^^^^^^^^^^^^^^^

Add support for Python 3.13.
Receive notifications on commit (:ticket:[#1728](https://github.com/psycopg/psycopg2/issues/1728)).
~psycopg2.errorcodes map and ~psycopg2.errors classes updated to
PostgreSQL 17.
Drop support for Python 3.7.

What's new in psycopg 2.9.9
^^^^^^^^^^^^^^^^^^^^^^^^^^^

Add support for Python 3.12.
Drop support for Python 3.6.

What's new in psycopg 2.9.8
^^^^^^^^^^^^^^^^^^^^^^^^^^^

Wheel package bundled with PostgreSQL 16 libpq in order to add support for
recent features, such as sslcertmode.

What's new in psycopg 2.9.7
^^^^^^^^^^^^^^^^^^^^^^^^^^^

Fix propagation of exceptions raised during module initialization
(:ticket:[#1598](https://github.com/psycopg/psycopg2/issues/1598)).
Fix building when pg_config returns an empty string (:ticket:[#1599](https://github.com/psycopg/psycopg2/issues/1599)).
Wheel package bundled with OpenSSL 1.1.1v.

What's new in psycopg 2.9.6
^^^^^^^^^^^^^^^^^^^^^^^^^^^

Package manylinux 2014 for aarch64 and ppc64le platforms, in order to
include libpq 15 in the binary package (:ticket:[#1396](https://github.com/psycopg/psycopg2/issues/1396)).
Wheel package bundled with OpenSSL 1.1.1t.

What's new in psycopg 2.9.5
^^^^^^^^^^^^^^^^^^^^^^^^^^^

Add support for Python 3.11.
Add support for rowcount in MERGE statements in binary packages
(:ticket:[#1497](https://github.com/psycopg/psycopg2/issues/1497)).



... (truncated)


Commits

See full diff in compare view




Updates python-mimeparse from 1.6.0 to 2.0.0

Release notes
Sourced from python-mimeparse's releases.

v2.0.0
Python-MimeParse v2.0
It has been a long time coming since the last release; the project has even been transferred to a different maintainer team during this period.
python-mimeparse brings support for CPython 3.13 (by addressing the removal of the cgi module), and drops support for Python 3.7. Also included are packaging, tooling, and CI improvements. python-mimeparse is otherwise a stable and mature project that hopefully does not need much active development.
You can install the new release from PyPI:
pip install python-mimeparse==2.0.0

Please open an issue if you run into any problems!
v2.0.0rc1
Python-MimeParse v2.0 (release candidate)
It has been a long time coming since the last release; the project has even been transferred to a different maintainer team during this period.
python-mimeparse brings support for CPython 3.13 (by addressing the removal of the cgi module), and drops support for Python 3.7. Also included are packaging, tooling, and CI improvements. python-mimeparse is otherwise a stable and mature project that hopefully does not need much active development.
Try this release candidate out from PyPI:
pip install python-mimeparse==2.0.0rc1

Please open an issue if you run into any problems before the final release!



Commits

3dc9383 chore: prepare 2.0 stable (#51)
de7d4de chore: tag rc1
57bf140 chore: modernize setup even more (leave only pyproject.toml) (#49)
77e46f0 chore: run pyupgrade --py38-plus, remove mentions of lower python versions (#47)
5427072 chore(cgi): include parse_header() from the deprecated cgi module (#46)
fa7dd33 chore: modernize setup (#43)
8c4c3ce chore: include flake8 in the default tox envs (#44)
1222900 chore: add github actions (#42)
cf605c0 Update classifiers (#32)
16c2000 Add license to the setup.py (#35)
Additional commits viewable in compare view




Updates pytz from 2024.1 to 2024.2

Commits

3944f75 Bump version numbers to 2024.2 / 2024b
640c9bd IANA 2024b
382ca0c Squashed 'tz/' changes from 380c07cef..923e54bae
96a1e88 Stop testing unavailable and EOL Python 3.5
68186b6 Add support for Python 3.13
e994058 Run other jobs if one fails
2326f9f Bump GitHub Actions
See full diff in compare view




Updates pyyaml from 6.0.1 to 6.0.2

Release notes
Sourced from pyyaml's releases.

6.0.2
What's Changed

Support for Cython 3.x and Python 3.13.

Full Changelog: https://github.com/yaml/pyyaml/compare/6.0.1...6.0.2
6.0.2rc1

Support for extension build with Cython 3.x
Support for Python 3.13
Added PyPI wheels for musllinux on aarch64




Changelog
Sourced from pyyaml's changelog.

6.0.2 (2024-08-06)

yaml/pyyaml#808 -- Support for Cython 3.x and Python 3.13




Commits

41309b0 Release 6.0.2 (#819)
dd9f0e1 6.0.2rc1 (#809)
f5527a2 disable CI trigger on PR edits
b4d80a7 Python 3.12 + musllinux_1_1_x86_64 wheel support
See full diff in compare view




Updates sqlalchemy from 2.0.31 to 2.0.36

Release notes
Sourced from sqlalchemy's releases.

2.0.36
Released: October 15, 2024
orm


[orm] [usecase] Added new parameter _orm.mapped_column.hash to ORM constructs
such as _orm.mapped_column(), _orm.relationship(), etc.,
which is interpreted for ORM Native Dataclasses in the same way as other
dataclass-specific field parameters.
References: #11923


[orm] [bug] Fixed bug in ORM bulk update/delete where using RETURNING with bulk
update/delete in combination with populate_existing would fail to
accommodate the populate_existing option.
References: #11912


[orm] [bug] Continuing from #11912, columns marked with
mapped_column.onupdate,
mapped_column.server_onupdate, or Computed are now
refreshed in ORM instances when running an ORM enabled UPDATE with WHERE
criteria, even if the statement does not use RETURNING or
populate_existing.
References: #11917


[orm] [bug] Fixed regression caused by fixes to joined eager loading in #11449
released in 2.0.31, where a particular joinedload case could not be
asserted correctly.   We now have an example of that case so the assertion
has been repaired to allow for it.
References: #11965


[orm] [bug] Improved the error message emitted when trying to map as dataclass a class
while also manually providing the __table__ attribute.
This usage is currently not supported.
References: #11973


[orm] [bug] Refined the check which the ORM lazy loader uses to detect "this would be
loading by primary key and the primary key is NULL, skip loading" to take
into account the current setting for the
orm.Mapper.allow_partial_pks parameter. If this parameter is
False, then a composite PK value that has partial NULL elements should
also be skipped.   This can apply to some composite overlapping foreign key
configurations.




... (truncated)


Commits

See full diff in compare view




Updates stevedore from 5.2.0 to 5.3.0
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options


You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…with 14 updates Bumps the python-backend-dependencies group with 14 updates in the /backend directory: | Package | From | To | | --- | --- | --- | | [babel](https://github.com/python-babel/babel) | `2.15.0` | `2.16.0` | | [billiard](https://github.com/celery/billiard) | `4.2.0` | `4.2.1` | | [falcon](https://github.com/falconry/falcon) | `3.1.3` | `4.0.1` | | [gunicorn](https://github.com/benoitc/gunicorn) | `22.0.0` | `23.0.0` | | [kombu](https://github.com/celery/kombu) | `5.3.7` | `5.4.2` | | [oslo-config](https://docs.openstack.org/oslo.config/latest/) | `9.5.0` | `9.6.0` | | [oslo-i18n](https://docs.openstack.org/oslo.i18n/latest) | `6.3.0` | `6.4.0` | | [pbr](https://docs.openstack.org/pbr/latest/) | `6.0.0` | `6.1.0` | | [psycopg2](https://github.com/psycopg/psycopg2) | `2.9.9` | `2.9.10` | | [python-mimeparse](https://github.com/falconry/python-mimeparse) | `1.6.0` | `2.0.0` | | [pytz](https://github.com/stub42/pytz) | `2024.1` | `2024.2` | | [pyyaml](https://github.com/yaml/pyyaml) | `6.0.1` | `6.0.2` | | [sqlalchemy](https://github.com/sqlalchemy/sqlalchemy) | `2.0.31` | `2.0.36` | | [stevedore](https://docs.openstack.org/stevedore/latest/) | `5.2.0` | `5.3.0` | Updates `babel` from 2.15.0 to 2.16.0 - [Release notes](https://github.com/python-babel/babel/releases) - [Changelog](https://github.com/python-babel/babel/blob/master/CHANGES.rst) - [Commits](python-babel/babel@v2.15.0...v2.16.0) Updates `billiard` from 4.2.0 to 4.2.1 - [Release notes](https://github.com/celery/billiard/releases) - [Changelog](https://github.com/celery/billiard/blob/main/CHANGES.txt) - [Commits](celery/billiard@v4.2.0...v4.2.1) Updates `falcon` from 3.1.3 to 4.0.1 - [Release notes](https://github.com/falconry/falcon/releases) - [Changelog](https://github.com/falconry/falcon/blob/master/RELEASE.md) - [Commits](falconry/falcon@3.1.3...4.0.1) Updates `gunicorn` from 22.0.0 to 23.0.0 - [Release notes](https://github.com/benoitc/gunicorn/releases) - [Commits](benoitc/gunicorn@22.0.0...23.0.0) Updates `kombu` from 5.3.7 to 5.4.2 - [Release notes](https://github.com/celery/kombu/releases) - [Changelog](https://github.com/celery/kombu/blob/main/Changelog.rst) - [Commits](celery/kombu@v5.3.7...v5.4.2) Updates `oslo-config` from 9.5.0 to 9.6.0 Updates `oslo-i18n` from 6.3.0 to 6.4.0 Updates `pbr` from 6.0.0 to 6.1.0 Updates `psycopg2` from 2.9.9 to 2.9.10 - [Changelog](https://github.com/psycopg/psycopg2/blob/master/NEWS) - [Commits](https://github.com/psycopg/psycopg2/commits) Updates `python-mimeparse` from 1.6.0 to 2.0.0 - [Release notes](https://github.com/falconry/python-mimeparse/releases) - [Commits](falconry/python-mimeparse@1.6.0...2.0.0) Updates `pytz` from 2024.1 to 2024.2 - [Release notes](https://github.com/stub42/pytz/releases) - [Commits](stub42/pytz@release_2024.1...release_2024.2) Updates `pyyaml` from 6.0.1 to 6.0.2 - [Release notes](https://github.com/yaml/pyyaml/releases) - [Changelog](https://github.com/yaml/pyyaml/blob/main/CHANGES) - [Commits](yaml/pyyaml@6.0.1...6.0.2) Updates `sqlalchemy` from 2.0.31 to 2.0.36 - [Release notes](https://github.com/sqlalchemy/sqlalchemy/releases) - [Changelog](https://github.com/sqlalchemy/sqlalchemy/blob/main/CHANGES.rst) - [Commits](https://github.com/sqlalchemy/sqlalchemy/commits) Updates `stevedore` from 5.2.0 to 5.3.0 --- updated-dependencies: - dependency-name: babel dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-backend-dependencies - dependency-name: billiard dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python-backend-dependencies - dependency-name: falcon dependency-type: direct:production update-type: version-update:semver-major dependency-group: python-backend-dependencies - dependency-name: gunicorn dependency-type: direct:production update-type: version-update:semver-major dependency-group: python-backend-dependencies - dependency-name: kombu dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-backend-dependencies - dependency-name: oslo-config dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-backend-dependencies - dependency-name: oslo-i18n dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-backend-dependencies - dependency-name: pbr dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-backend-dependencies - dependency-name: psycopg2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python-backend-dependencies - dependency-name: python-mimeparse dependency-type: direct:production update-type: version-update:semver-major dependency-group: python-backend-dependencies - dependency-name: pytz dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-backend-dependencies - dependency-name: pyyaml dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python-backend-dependencies - dependency-name: sqlalchemy dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python-backend-dependencies - dependency-name: stevedore dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-backend-dependencies ... Signed-off-by: dependabot[bot] <[email protected]>

dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Nov 1, 2024

dependabot bot requested a review from a team November 1, 2024 00:10

chore: Bump the python-backend-dependencies group across 1 directory with 14 updates #111

Are you sure you want to change the base?

chore: Bump the python-backend-dependencies group across 1 directory with 14 updates #111

Conversation

dependabot bot commented on behalf of github Nov 1, 2024

Version 2.16.0

What's Changed

New Contributors

Version 2.16.0

v4.2.1

What's Changed

New Contributors

4.2.1 - 2024-09-21

4.0.1

Fixed

4.0.0

4.0.0rc1

4.0.0b4

4.0.0b3

4.0.0b2

Changelog for Falcon 4.0.1

Summary

Contributors to this Release

23.0.0

23.0.0 - 2024-08-10

v5.4.2

What's Changed

New Contributors

v5.4.1

What's Changed

New Contributors

v5.4.0

What's Changed

5.4.2

5.4.1

5.4.0

Changes

Current release

v2.0.0

Python-MimeParse v2.0

v2.0.0rc1

Python-MimeParse v2.0 (release candidate)

6.0.2

What's Changed

6.0.2rc1

2.0.36

orm