Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

chore(api): bump the deps group across 1 directory with 6 updates #1577

Merged
merged 1 commit into from
Nov 28, 2024
Merged

chore(api): bump the deps group across 1 directory with 6 updates #1577

merged 1 commit into from
Nov 28, 2024

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Nov 25, 2024

Bumps the deps group with 6 updates in the /api directory:

Package From To
sentry-sdk 2.18.0 2.19.0
aiohttp 3.10.10 3.11.7
aioresponses 0.7.6 0.7.7
coverage 7.6.4 7.6.8
poetry 1.8.3 1.8.4
tomli 2.0.2 2.1.0

Updates sentry-sdk from 2.18.0 to 2.19.0

Release notes

Sourced from sentry-sdk's releases.

2.19.0

Various fixes & improvements

Changelog

Sourced from sentry-sdk's changelog.

2.19.0

Various fixes & improvements

Commits

Updates aiohttp from 3.10.10 to 3.11.7

Release notes

Sourced from aiohttp's releases.

3.11.7

Bug fixes

  • Fixed the HTTP client not considering the connector's force_close value when setting the Connection header -- by :user:bdraco.

    Related issues and pull requests on GitHub: #10003.

Miscellaneous internal changes

  • Improved performance of serializing HTTP headers -- by :user:bdraco.

    Related issues and pull requests on GitHub: #10014.

3.11.6

Bug fixes

  • Restored the force_close method to the ResponseHandler -- by :user:bdraco.

    Related issues and pull requests on GitHub: #9997.

3.11.5

Bug fixes

  • Fixed the ANY method not appearing in :meth:~aiohttp.web.UrlDispatcher.routes -- by :user:bdraco.

    Related issues and pull requests on GitHub:

... (truncated)

Changelog

Sourced from aiohttp's changelog.

3.11.7 (2024-11-21)

Bug fixes

  • Fixed the HTTP client not considering the connector's force_close value when setting the Connection header -- by :user:bdraco.

    Related issues and pull requests on GitHub: :issue:10003.

Miscellaneous internal changes

  • Improved performance of serializing HTTP headers -- by :user:bdraco.

    Related issues and pull requests on GitHub: :issue:10014.

3.11.6 (2024-11-19)

Bug fixes

  • Restored the force_close method to the ResponseHandler -- by :user:bdraco.

    Related issues and pull requests on GitHub: :issue:9997.

3.11.5 (2024-11-19)

... (truncated)

Commits
  • bf04a1b Release 3.11.7 (#10019)
  • ed15e88 [PR #10014/50d23aee backport][3.11] Improve performance of serializing header...
  • 5bcf07d [PR #9961/c984a44b backport][3.11] Disable Python 3.14 builds (#10012)
  • c82c58a [PR #10003/78d1be5 backport][3.11] Fix client connection header not reflectin...
  • 496f649 [PR #10004/a334eef7 backport][3.11] Avoid building skip_headers in `ClientS...
  • d030c05 Increment version to 3.11.7.dev0 (#10002)
  • ff9602d Release 3.11.6 (#10000)
  • b7e3b30 [PR #9997/8c36b51 backport][3.11] Restore the force_close method to the `...
  • 81c33ec [PR #9991/7bbbd126 backport][3.11] Increase allowed benchmark run time to 7 m...
  • 25b49dc Increment version to 3.11.6.dev0 (#9993)
  • Additional commits viewable in compare view

Updates aioresponses from 0.7.6 to 0.7.7

Commits
  • 03ecf38 fix: invalid rst code
  • 827d4c2 Merge pull request #262 from bdraco/3110_compat
  • e909123 Fix compat with aiohttp 3.11.0+
  • b83af20 Merge pull request #233 from outp1/master
  • 64a4190 Merge pull request #251 from chs2/feat/callable-raise-for-status
  • bd79310 Merge pull request #256 from DanielNoord/patch-1
  • cee22fc Update __version__ to latest released version
  • bb940b4 Merge pull request #254 from gaby/packaging
  • 3e89430 Add packaging to requirements.txt
  • 91019b4 feat: support raise_for_status as callable
  • Additional commits viewable in compare view

Updates coverage from 7.6.4 to 7.6.8

Changelog

Sourced from coverage's changelog.

Version 7.6.8 — 2024-11-23

  • Fix: the LCOV report code assumed that a branch line that took no branches meant that the entire line was unexecuted. This isn't true in a few cases: the line might always raise an exception, or might have been optimized away. Fixes issue 1896_.

  • Fix: similarly, the HTML report will now explain that a line that jumps to none of its expected destinations must have always raised an exception. Previously, it would say something nonsensical like, "line 4 didn't jump to line 5 because line 4 was never true, and it didn't jump to line 7 because line 4 was always true." This was also shown in issue 1896_.

.. _issue 1896: nedbat/coveragepy#1896

.. _changes_7-6-7:

Version 7.6.7 — 2024-11-15

  • Fix: ugh, the other assert from 7.6.5 can also be encountered in the wild, so it's been restored to a conditional. Sorry for the churn.

.. _changes_7-6-6:

Version 7.6.6 — 2024-11-15

  • One of the new asserts from 7.6.5 caused problems in real projects, as reported in issue 1891_. The assert has been removed.

.. _issue 1891: nedbat/coveragepy#1891

.. _changes_7-6-5:

Version 7.6.5 — 2024-11-14

  • Fix: fine-tuned the exact Python version (3.12.6) when exiting from with statements changed how they traced. This affected whether people saw the fix for issue 1880_.

  • Fix: isolate our code more from mocking in the os module that in rare cases can cause bizarre behavior <pytest-cov-666_>_.

  • Refactor: some code unreachable code paths in parser.py were changed to

... (truncated)

Commits
  • 6134266 docs: sample HTML for 7.6.8
  • 041f963 docs: prep for 7.6.8
  • 7fe48b6 build: don't search generated report files
  • f219144 docs: start changelog entries with capital letters
  • d1a916a fix: a line that branches nowhere must always raise an exception
  • 2ace7a2 fix: don't assume 'no branches' means 'not executed' #1896
  • 3ed5915 style: all of ci should use underscores
  • 0db86f2 build: automate updating readthedocs
  • 2a89551 chore: make upgrade (not sure why files became absolute)
  • ba9c157 chore: make doc_upgrade
  • Additional commits viewable in compare view

Updates poetry from 1.8.3 to 1.8.4

Release notes

Sourced from poetry's releases.

1.8.4

Added

  • Add official support for Python 3.13 (#9523).

Changed

  • Require virtualenv>=20.26.6 to mitigate potential command injection when running poetry shell in untrusted projects (#9757).

poetry-core (1.9.1)

  • Add 3.13 to the list of available Python versions (#747).
Changelog

Sourced from poetry's changelog.

[1.8.4] - 2024-10-14

Added

  • Add official support for Python 3.13 (#9523).

Changed

  • Require virtualenv>=20.26.6 to mitigate potential command injection when running poetry shell in untrusted projects (#9757).

poetry-core (1.9.1)

  • Add 3.13 to the list of available Python versions (#747).
Commits

Updates tomli from 2.0.2 to 2.1.0

Changelog

Sourced from tomli's changelog.

2.1.0

  • Deprecated
    • Instantiating TOMLDecodeError with free-form arguments. msg, doc and pos arguments should be given.
  • Added
    • msg, doc, pos, lineno and colno attributes to TOMLDecodeError
Commits
  • d6e045b Bump version: 2.0.2 → 2.1.0
  • d1d6a85 Add attributes to TOMLDecodeError. Deprecate free-form __init__ args (#238)
  • 59ed9ef Add a comment about implicit lru_cache bound
  • 9d25b3f Test against Python 3.13 final (#237)
  • f57fb66 Add test coverage for text mode error (#231)
  • 4be816b Convert tox config to native TOML
  • e2f8d2d Merge pull request #233 from hukkin/version-2.0.2
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(api): bump the deps group across 1 directory with 6 updates
286cbc8 
Bumps the deps group with 6 updates in the /api directory:

| Package | From | To |
| --- | --- | --- |
| [sentry-sdk](https://github.com/getsentry/sentry-python) | `2.18.0` | `2.19.0` |
| [aiohttp](https://github.com/aio-libs/aiohttp) | `3.10.10` | `3.11.7` |
| [aioresponses](https://github.com/pnuckowski/aioresponses) | `0.7.6` | `0.7.7` |
| [coverage](https://github.com/nedbat/coveragepy) | `7.6.4` | `7.6.8` |
| [poetry](https://github.com/python-poetry/poetry) | `1.8.3` | `1.8.4` |
| [tomli](https://github.com/hukkin/tomli) | `2.0.2` | `2.1.0` |



Updates `sentry-sdk` from 2.18.0 to 2.19.0
- [Release notes](https://github.com/getsentry/sentry-python/releases)
- [Changelog](https://github.com/getsentry/sentry-python/blob/master/CHANGELOG.md)
- [Commits](getsentry/sentry-python@2.18.0...2.19.0)

Updates `aiohttp` from 3.10.10 to 3.11.7
- [Release notes](https://github.com/aio-libs/aiohttp/releases)
- [Changelog](https://github.com/aio-libs/aiohttp/blob/master/CHANGES.rst)
- [Commits](aio-libs/aiohttp@v3.10.10...v3.11.7)

Updates `aioresponses` from 0.7.6 to 0.7.7
- [Release notes](https://github.com/pnuckowski/aioresponses/releases)
- [Commits](pnuckowski/aioresponses@0.7.6...0.7.7)

Updates `coverage` from 7.6.4 to 7.6.8
- [Release notes](https://github.com/nedbat/coveragepy/releases)
- [Changelog](https://github.com/nedbat/coveragepy/blob/master/CHANGES.rst)
- [Commits](nedbat/coveragepy@7.6.4...7.6.8)

Updates `poetry` from 1.8.3 to 1.8.4
- [Release notes](https://github.com/python-poetry/poetry/releases)
- [Changelog](https://github.com/python-poetry/poetry/blob/main/CHANGELOG.md)
- [Commits](python-poetry/poetry@1.8.3...1.8.4)

Updates `tomli` from 2.0.2 to 2.1.0
- [Changelog](https://github.com/hukkin/tomli/blob/master/CHANGELOG.md)
- [Commits](hukkin/tomli@2.0.2...2.1.0)

---
updated-dependencies:
- dependency-name: sentry-sdk
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: deps
- dependency-name: aiohttp
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: deps
- dependency-name: aioresponses
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: deps
- dependency-name: coverage
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: deps
- dependency-name: poetry
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: deps
- dependency-name: tomli
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot requested a review from gabrielBusta as a code owner November 25, 2024 07:55
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Nov 25, 2024
@dependabot dependabot bot requested a review from a team November 25, 2024 07:55
@bhearsum
Copy link
Contributor

Dependabot seems immensely broken. It claims to be updating poetry, but it's actually removing it?

@ahal
Copy link
Contributor

ahal commented Nov 28, 2024

The fact that poetry was in poetry.lock in the first place also seems immensely broken. We definitely don't want poetry in there, so I'd be inclined to land this patch regardless of what dependabot is reporting.

bhearsum
bhearsum approved these changes Nov 28, 2024
View reviewed changes
Copy link
Contributor

@bhearsum bhearsum left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

poetry and its dependencies are getting removed for reasons I don't fully understand. This has happened before though, and hasn't caused issues, and I don't have the energy to debug it at the moment.

@bhearsum bhearsum merged commit 2daf49a into main Nov 28, 2024
6 checks passed
@bhearsum bhearsum deleted the dependabot/pip/api/deps-e37849f8d9 branch November 28, 2024 15:38
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@bhearsum bhearsum bhearsum approved these changes

@gabrielBusta gabrielBusta Awaiting requested review from gabrielBusta gabrielBusta is a code owner

Assignees
No one assigned
Labels
dependencies Pull requests that update a dependency file python Pull requests that update Python code
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
2 participants
@bhearsum @ahal