Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

⬆️ Bump the python-dependencies group across 1 directory with 4 updates #439

Merged

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jan 16, 2025

Bumps the python-dependencies group with 4 updates in the /shifter directory: django, psycopg, psycopg-binary and ruff.

Updates django from 5.1.4 to 5.1.5

Commits
  • 3d3d7f5 [5.1.x] Bumped version for 5.1.5 release.
  • 4806731 [5.1.x] Fixed CVE-2024-56374 -- Mitigated potential DoS in IPv6 validation.
  • d6749de [5.1.x] Made cosmetic edits to 5.1.5 release notes.
  • b325864 [5.1.x] Fixed #36077 -- Corrected docs on pk value where Model.save() execute...
  • 8d81c47 [5.1.x] Fixed #35999 -- Removed #django IRC channel references where appropri...
  • 6b9d5ac [5.1.x] Strengthened wording on supported Python versions in FAQ.
  • 0966cc7 [5.1.x] Added stub release notes and release date for 5.1.5, 5.0.11, and 4.2.18.
  • 638547b [5.1.x] Fixed typo in tutorial 5.
  • 2ee6ca6 [5.1.x] Fixed #34856 -- Fixed references to index_together in historical migr...
  • 85c3550 [5.1.x] Refs #27236 -- Removed references to index_together from ModelState.f...
  • Additional commits viewable in compare view

Updates psycopg from 3.2.3 to 3.2.4

Changelog

Sourced from psycopg's changelog.

.. currentmodule:: psycopg

.. index:: single: Release notes single: News

psycopg release notes

Future releases

Python 3.3.0 (unreleased) ^^^^^^^^^^^^^^^^^^^^^^^^^

  • Drop support for Python 3.8.

Current release

Psycopg 3.2.4 ^^^^^^^^^^^^^

  • Don't lose notifies received whilst the ~Connection.notifies() iterator is not running (:ticket:[#962](https://github.com/psycopg/psycopg/issues/962)).
  • Make sure that the notifies callback is called during the use of the ~Connection.notifies() generator (:ticket:[#972](https://github.com/psycopg/psycopg/issues/972)).
  • Raise the correct error returned by the database (such as !AdminShutdown or !IdleInTransactionSessionTimeout) instead of a generic OperationalError when a server error causes a client disconnection (:ticket:[#988](https://github.com/psycopg/psycopg/issues/988)).
  • Build macOS dependencies from sources instead using the Homebrew versions in order to avoid problems with MACOSX_DEPLOYMENT_TARGET (:ticket:[#858](https://github.com/psycopg/psycopg/issues/858)).
  • Bump libpq to 17.2 in Linux and macOS binary packages.
  • Bump libpq to 16.4 in Windows binary packages, using the vcpkg library__ (:ticket:[#966](https://github.com/psycopg/psycopg/issues/966)).

.. __: https://vcpkg.io/en/package/libpq

Psycopg 3.2.3 ^^^^^^^^^^^^^

  • Release binary packages including PostgreSQL 17 libpq (:ticket:[#852](https://github.com/psycopg/psycopg/issues/852)).

Psycopg 3.2.2 ^^^^^^^^^^^^^

... (truncated)

Commits
  • c2c4ba2 chore: bump psycopg package version to 3.2.4
  • d959f8d docs: mention the binary packages changes in news file
  • 730c23c chore(binary): bump libpq to 17.2
  • 5f9d196 chore(binary): bump OpenSSL to 3.4.0
  • e9188ed Merge branch 'build-libpq-macos-3.2' into maint-3.2
  • e19a258 ci(binary): less verbose libpq build
  • 89f3f82 ci(macos): drop Python 3.8 build on macOS arm64
  • bdba767 ci(macos): build libpq instead of using Homebrew libraries
  • 06ae213 refactor: don't keep the notifiers backlog handler in the connection state
  • 0f7005b Merge branch 'fix-clobbered-error-on-disconnect-3.2' into maint-3.2
  • Additional commits viewable in compare view

Updates psycopg-binary from 3.2.3 to 3.2.4

Changelog

Sourced from psycopg-binary's changelog.

.. currentmodule:: psycopg

.. index:: single: Release notes single: News

psycopg release notes

Future releases

Python 3.3.0 (unreleased) ^^^^^^^^^^^^^^^^^^^^^^^^^

  • Drop support for Python 3.8.

Current release

Psycopg 3.2.4 ^^^^^^^^^^^^^

  • Don't lose notifies received whilst the ~Connection.notifies() iterator is not running (:ticket:[#962](https://github.com/psycopg/psycopg/issues/962)).
  • Make sure that the notifies callback is called during the use of the ~Connection.notifies() generator (:ticket:[#972](https://github.com/psycopg/psycopg/issues/972)).
  • Raise the correct error returned by the database (such as !AdminShutdown or !IdleInTransactionSessionTimeout) instead of a generic OperationalError when a server error causes a client disconnection (:ticket:[#988](https://github.com/psycopg/psycopg/issues/988)).
  • Build macOS dependencies from sources instead using the Homebrew versions in order to avoid problems with MACOSX_DEPLOYMENT_TARGET (:ticket:[#858](https://github.com/psycopg/psycopg/issues/858)).
  • Bump libpq to 17.2 in Linux and macOS binary packages.
  • Bump libpq to 16.4 in Windows binary packages, using the vcpkg library__ (:ticket:[#966](https://github.com/psycopg/psycopg/issues/966)).

.. __: https://vcpkg.io/en/package/libpq

Psycopg 3.2.3 ^^^^^^^^^^^^^

  • Release binary packages including PostgreSQL 17 libpq (:ticket:[#852](https://github.com/psycopg/psycopg/issues/852)).

Psycopg 3.2.2 ^^^^^^^^^^^^^

... (truncated)

Commits
  • c2c4ba2 chore: bump psycopg package version to 3.2.4
  • d959f8d docs: mention the binary packages changes in news file
  • 730c23c chore(binary): bump libpq to 17.2
  • 5f9d196 chore(binary): bump OpenSSL to 3.4.0
  • e9188ed Merge branch 'build-libpq-macos-3.2' into maint-3.2
  • e19a258 ci(binary): less verbose libpq build
  • 89f3f82 ci(macos): drop Python 3.8 build on macOS arm64
  • bdba767 ci(macos): build libpq instead of using Homebrew libraries
  • 06ae213 refactor: don't keep the notifiers backlog handler in the connection state
  • 0f7005b Merge branch 'fix-clobbered-error-on-disconnect-3.2' into maint-3.2
  • Additional commits viewable in compare view

Updates ruff from 0.9.1 to 0.9.2

Release notes

Sourced from ruff's releases.

0.9.2

Release Notes

Preview features

  • [airflow] Fix typo "security_managr" to "security_manager" (AIR303) (#15463)
  • [airflow] extend and fix AIR302 rules (#15525)
  • [fastapi] Handle parameters with Depends correctly (FAST003) (#15364)
  • [flake8-pytest-style] Implement pytest.warns diagnostics (PT029, PT030, PT031) (#15444)
  • [flake8-pytest-style] Test function parameters with default arguments (PT028) (#15449)
  • [flake8-type-checking] Avoid false positives for | in TC008 (#15201)

Rule changes

  • [flake8-todos] Allow VSCode GitHub PR extension style links in missing-todo-link (TD003) (#15519)
  • [pyflakes] Show syntax error message for F722 (#15523)

Formatter

  • Fix curly bracket spacing around f-string expressions containing curly braces (#15471)
  • Fix joining of f-strings with different quotes when using quote style Preserve (#15524)

Server

  • Avoid indexing the same workspace multiple times (#15495)
  • Display context for ruff.configuration errors (#15452)

Configuration

  • Remove flatten to improve deserialization error messages (#15414)

Bug fixes

  • Parse triple-quoted string annotations as if parenthesized (#15387)
  • [fastapi] Update Annotated fixes (FAST002) (#15462)
  • [flake8-bandit] Check for builtins instead of builtin (S102, PTH123) (#15443)
  • [flake8-pathlib] Fix --select for os-path-dirname (PTH120) (#15446)
  • [ruff] Fix false positive on global keyword (RUF052) (#15235)

Install ruff 0.9.2

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://github.com/astral-sh/ruff/releases/download/0.9.2/ruff-installer.sh | sh

Install prebuilt binaries via powershell script

</tr></table> 

... (truncated)

Changelog

Sourced from ruff's changelog.

0.9.2

Preview features

  • [airflow] Fix typo "security_managr" to "security_manager" (AIR303) (#15463)
  • [airflow] extend and fix AIR302 rules (#15525)
  • [fastapi] Handle parameters with Depends correctly (FAST003) (#15364)
  • [flake8-pytest-style] Implement pytest.warns diagnostics (PT029, PT030, PT031) (#15444)
  • [flake8-pytest-style] Test function parameters with default arguments (PT028) (#15449)
  • [flake8-type-checking] Avoid false positives for | in TC008 (#15201)

Rule changes

  • [flake8-todos] Allow VSCode GitHub PR extension style links in missing-todo-link (TD003) (#15519)
  • [pyflakes] Show syntax error message for F722 (#15523)

Formatter

  • Fix curly bracket spacing around f-string expressions containing curly braces (#15471)
  • Fix joining of f-strings with different quotes when using quote style Preserve (#15524)

Server

  • Avoid indexing the same workspace multiple times (#15495)
  • Display context for ruff.configuration errors (#15452)

Configuration

  • Remove flatten to improve deserialization error messages (#15414)

Bug fixes

  • Parse triple-quoted string annotations as if parenthesized (#15387)
  • [fastapi] Update Annotated fixes (FAST002) (#15462)
  • [flake8-bandit] Check for builtins instead of builtin (S102, PTH123) (#15443)
  • [flake8-pathlib] Fix --select for os-path-dirname (PTH120) (#15446)
  • [ruff] Fix false positive on global keyword (RUF052) (#15235)
Commits
  • 0a39348 Include build binaries
  • 027f800 Comment out non-npm-publish jobs
  • 425870d Upload npm publish logs when failed
  • c20255a Bump version to 0.9.2 (#15529)
  • 4203658 Fix joining of f-strings with different quotes when using quote style `Preser...
  • fc9dd63 [airflow] extend and fix AIR302 rules (#15525)
  • 79e52c7 [pyflakes] Show syntax error message for F722 (#15523)
  • cf4ab7c Parse triple quoted string annotations as if parenthesized (#15387)
  • d2656e8 [flake8-todos] Allow VSCode GitHub PR extension style links in `missing-tod...
  • c53ee60 Typeshed-sync workflow: add appropriate labels, link directly to failing run ...
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the python-dependencies group with 4 updates in the /shifter directory: [django](https://github.com/django/django), [psycopg](https://github.com/psycopg/psycopg), [psycopg-binary](https://github.com/psycopg/psycopg) and [ruff](https://github.com/astral-sh/ruff).


Updates `django` from 5.1.4 to 5.1.5
- [Commits](django/django@5.1.4...5.1.5)

Updates `psycopg` from 3.2.3 to 3.2.4
- [Changelog](https://github.com/psycopg/psycopg/blob/master/docs/news.rst)
- [Commits](psycopg/psycopg@3.2.3...3.2.4)

Updates `psycopg-binary` from 3.2.3 to 3.2.4
- [Changelog](https://github.com/psycopg/psycopg/blob/master/docs/news.rst)
- [Commits](psycopg/psycopg@3.2.3...3.2.4)

Updates `ruff` from 0.9.1 to 0.9.2
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.9.1...0.9.2)

---
updated-dependencies:
- dependency-name: django
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: psycopg
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: psycopg-binary
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: ruff
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added backend Issues/PRs that mostly affect the backend dependencies Pull requests that update a dependency file labels Jan 16, 2025
@dependabot dependabot bot requested a review from TobySuch January 16, 2025 19:45
@TobySuch TobySuch merged commit 6075bfa into main Jan 17, 2025
2 checks passed
@dependabot dependabot bot deleted the dependabot/pip/shifter/python-dependencies-2d4883d05c branch January 17, 2025 21:56
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
backend Issues/PRs that mostly affect the backend dependencies Pull requests that update a dependency file
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant