Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Bump pipenv from 2023.11.15 to 2023.11.17 (#653)
Bumps [pipenv](https://github.com/pypa/pipenv) from 2023.11.15 to 2023.11.17. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/pypa/pipenv/releases">pipenv's releases</a>.</em></p> <blockquote> <h2>Release v2023.11.17</h2> <h2>What's Changed</h2> <ul> <li>Vendor latest tomlkit by <a href="https://github.com/deivid-rodriguez"><code>@deivid-rodriguez</code></a> in <a href="https://redirect.github.com/pypa/pipenv/pull/6024">pypa/pipenv#6024</a></li> <li>Chore: Resolve CI deprecation warnings by <a href="https://github.com/stumpylog"><code>@stumpylog</code></a> in <a href="https://redirect.github.com/pypa/pipenv/pull/6025">pypa/pipenv#6025</a></li> <li>Fix the issue(<a href="https://redirect.github.com/pypa/pipenv/issues/6022">#6022</a>): Add additional installation method in README by <a href="https://github.com/y-vectorfield"><code>@y-vectorfield</code></a> in <a href="https://redirect.github.com/pypa/pipenv/pull/6023">pypa/pipenv#6023</a></li> <li>Make <code>project.get_default_index()</code> populate a default name by <a href="https://github.com/deivid-rodriguez"><code>@deivid-rodriguez</code></a> in <a href="https://redirect.github.com/pypa/pipenv/pull/6021">pypa/pipenv#6021</a></li> <li>Drop markupsafe - way too late for that by <a href="https://github.com/oz123"><code>@oz123</code></a> in <a href="https://redirect.github.com/pypa/pipenv/pull/6033">pypa/pipenv#6033</a></li> <li>Fix for the safety test failure in the CI by <a href="https://github.com/matteius"><code>@matteius</code></a> in <a href="https://redirect.github.com/pypa/pipenv/pull/6038">pypa/pipenv#6038</a></li> <li>Add markers to Pipfile when parsing requirements.txt by <a href="https://github.com/geonik-code"><code>@geonik-code</code></a> in <a href="https://redirect.github.com/pypa/pipenv/pull/6008">pypa/pipenv#6008</a></li> <li>Fixed a bug with locking packages with non canonical names by <a href="https://github.com/mangin"><code>@mangin</code></a> in <a href="https://redirect.github.com/pypa/pipenv/pull/6057">pypa/pipenv#6057</a></li> <li>Bump jinja2 from 3.1.2 to 3.1.3 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://redirect.github.com/pypa/pipenv/pull/6059">pypa/pipenv#6059</a></li> <li>Vendor bump pipdeptree by <a href="https://github.com/oz123"><code>@oz123</code></a> in <a href="https://redirect.github.com/pypa/pipenv/pull/6055">pypa/pipenv#6055</a></li> <li>updated readme by <a href="https://github.com/Suprithvarma1"><code>@Suprithvarma1</code></a> in <a href="https://redirect.github.com/pypa/pipenv/pull/6049">pypa/pipenv#6049</a></li> <li>Update release script to enforce semver going forward in 2024 by <a href="https://github.com/matteius"><code>@matteius</code></a> in <a href="https://redirect.github.com/pypa/pipenv/pull/6052">pypa/pipenv#6052</a></li> <li>Vendoring in pip-23.3.2 by <a href="https://github.com/matteius"><code>@matteius</code></a> in <a href="https://redirect.github.com/pypa/pipenv/pull/6064">pypa/pipenv#6064</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/deivid-rodriguez"><code>@deivid-rodriguez</code></a> made their first contribution in <a href="https://redirect.github.com/pypa/pipenv/pull/6024">pypa/pipenv#6024</a></li> <li><a href="https://github.com/stumpylog"><code>@stumpylog</code></a> made their first contribution in <a href="https://redirect.github.com/pypa/pipenv/pull/6025">pypa/pipenv#6025</a></li> <li><a href="https://github.com/geonik-code"><code>@geonik-code</code></a> made their first contribution in <a href="https://redirect.github.com/pypa/pipenv/pull/6008">pypa/pipenv#6008</a></li> <li><a href="https://github.com/mangin"><code>@mangin</code></a> made their first contribution in <a href="https://redirect.github.com/pypa/pipenv/pull/6057">pypa/pipenv#6057</a></li> <li><a href="https://github.com/Suprithvarma1"><code>@Suprithvarma1</code></a> made their first contribution in <a href="https://redirect.github.com/pypa/pipenv/pull/6049">pypa/pipenv#6049</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/pypa/pipenv/compare/v2023.11.15...v2023.11.17">https://github.com/pypa/pipenv/compare/v2023.11.15...v2023.11.17</a></p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/pypa/pipenv/blob/main/CHANGELOG.md">pipenv's changelog</a>.</em></p> <blockquote> <h1>2023.11.17 (2024-01-21)</h1> <h1>Pipenv 2023.11.17 (2024-01-21)</h1> <h2>Bug Fixes</h2> <ul> <li>Add markers to Pipfile when parsing requirements.txt <code>[#6008](pypa/pipenv#6008) <https://github.com/pypa/pipenv/issues/6008></code>_</li> <li>Fix KeyError when using a source without a name in Pipfile <code>[#6021](pypa/pipenv#6021) <https://github.com/pypa/pipenv/issues/6021></code>_</li> <li>Fix a bug with locking projects that contains packages with non canonical names from private indexes <code>[#6056](pypa/pipenv#6056) <https://github.com/pypa/pipenv/issues/6056></code>_</li> </ul> <h2>Vendored Libraries</h2> <ul> <li>Update vendored tomlkit to <code>0.12.3</code> <code>[#6024](pypa/pipenv#6024) <https://github.com/pypa/pipenv/issues/6024></code>_</li> <li>Bump version of pipdeptree to 0.13.2 <code>[#6055](pypa/pipenv#6055) <https://github.com/pypa/pipenv/issues/6055></code>_</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/pypa/pipenv/commit/7a640f21266efac7c530c772ebabf08ee0a7e1f1"><code>7a640f2</code></a> Release v2023.11.17</li> <li><a href="https://github.com/pypa/pipenv/commit/d202fac429fb9f9959767ce7ae48d88c307e23cd"><code>d202fac</code></a> Bumped version to 2023.11.17.</li> <li><a href="https://github.com/pypa/pipenv/commit/542554e4e84da228fa42aed34c60747c2b051fff"><code>542554e</code></a> upgrade sphinx due to release script bug</li> <li><a href="https://github.com/pypa/pipenv/commit/624ec01ef385cf36a84938d2a097e1819a01cbb9"><code>624ec01</code></a> Vendoring in pip-23.3.2 (<a href="https://redirect.github.com/pypa/pipenv/issues/6064">#6064</a>)</li> <li><a href="https://github.com/pypa/pipenv/commit/0379507abb315a3da7dcee05a274b8e535d6b060"><code>0379507</code></a> Update release script to enforce semver going forward in 2024 (<a href="https://redirect.github.com/pypa/pipenv/issues/6052">#6052</a>)</li> <li><a href="https://github.com/pypa/pipenv/commit/eaca109fb39a934d240abdce6c2330c75047ae91"><code>eaca109</code></a> Merge pull request <a href="https://redirect.github.com/pypa/pipenv/issues/6049">#6049</a> from Suprithvarma1/pipit</li> <li><a href="https://github.com/pypa/pipenv/commit/9217384411824cdc1857532bd42c251f1a4060ba"><code>9217384</code></a> Merge pull request <a href="https://redirect.github.com/pypa/pipenv/issues/6055">#6055</a> from pypa/vendor-bump-pipdeptree</li> <li><a href="https://github.com/pypa/pipenv/commit/cdaaa3084809ed48a7e7f684838d25f77978a1a0"><code>cdaaa30</code></a> Bump jinja2 from 3.1.2 to 3.1.3</li> <li><a href="https://github.com/pypa/pipenv/commit/463d9c8999caa75ec13d5187073d3cbf39345d97"><code>463d9c8</code></a> built index mapping using canonical package names instead of raw package names</li> <li><a href="https://github.com/pypa/pipenv/commit/dc261212c845d3f5e33b472ba11008b07cb8ea19"><code>dc26121</code></a> fixed a bug with locking packages with uncanonical names</li> <li>Additional commits viewable in <a href="https://github.com/pypa/pipenv/compare/v2023.11.15...v2023.11.17">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
- Loading branch information