build(deps): bump the python group across 1 directory with 5 updates #288

dependabot · 2025-01-31T14:28:54Z

Bumps the python group with 5 updates in the / directory:

Package	From	To
pydantic	`1.10.19`	`1.10.21`
vcrpy	`6.0.2`	`7.0.0`
twine	`5.1.1`	`6.1.0`
tomli	`2.1.0`	`2.2.1`
ruff	`0.8.0`	`0.9.4`

Updates pydantic from 1.10.19 to 1.10.21

Release notes

Sourced from pydantic's releases.

v1.10.20 2025-01-07

What's Changed

This release provides proper support for Python 3.13, with (Cythonized) wheels published for this version. As a consequence, Cython was updated from 0.29.x to 3.0.x.

General maintenance of CI and build ecosystem by @Viicos in pydantic/pydantic#10847

Update Cython to 3.0.x.

Properly address Python 3.13 deprecation warnings.

Migrate packaging to pyproject.toml, make use of PEP 517 build options.

Use build instead of direct setup.py invocations.

Update various Github Actions versions.

Replace outdated stpmex link in documentation by @jaredenorris in pydantic/pydantic#10997

New Contributors

@jaredenorris made their first contribution in pydantic/pydantic#10997

Full Changelog: pydantic/pydantic@v1.10.19...v1.10.20

Changelog

Sourced from pydantic's changelog.

v1.10.21 (2025-01-10)

Fix compatibility with ForwardRef._evaluate and Python < 3.12.4 by @griels in pydantic/pydantic#11232

v1.10.20 (2025-01-07)

This release provides proper support for Python 3.13, with (Cythonized) wheels published for this version. As a consequence, Cython was updated from 0.29.x to 3.0.x.

General maintenance of CI and build ecosystem by @Viicos in pydantic/pydantic#10847

Update Cython to 3.0.x.

Properly address Python 3.13 deprecation warnings.

Migrate packaging to pyproject.toml, make use of PEP 517 build options.

Use build instead of direct setup.py invocations.

Update various Github Actions versions.

Replace outdated stpmex link in documentation by @jaredenorris in pydantic/pydantic#10997

Commits

0cbba0f Prepare release v1.10.21 (#11238)
c55e231 Fix compatibility with ForwardRef._evaluate and Python < 3.12.4 (#11232)
bfc2243 Prepare release v1.10.20 (#11226)
4a52e6a General maintenance of CI and build ecosystem (#10847)
7c70a4a Fix linting job for v1.10.X-fixes (#11028)
56321fd Replace outdated docs link (#10997)
See full diff in compare view

Updates vcrpy from 6.0.2 to 7.0.0

Release notes

Sourced from vcrpy's releases.

v7.0.0

What's Changed
- Drop support for python 3.8 (major version bump) - thanks @jairhenrique
- Various linting and test fixes - thanks @jairhenrique
- Bugfix for urllib2>=2.3.0 - missing version_string ([#888](https://github.com/kevin1024/vcrpy/issues/888))
- Bugfix for asyncio.run - thanks @alekeik1
New Contributors

@exslim made their first contribution in kevin1024/vcrpy#889

@alekseik1 made their first contribution in kevin1024/vcrpy#886

Changelog

Sourced from vcrpy's changelog.

Changelog

For a full list of triaged issues, bugs and PRs and what release they are targeted for please see the following link.

ROADMAP MILESTONES <https://github.com/kevin1024/vcrpy/milestones>_

All help in providing PRs to close out bug issues is appreciated. Even if that is providing a repo that fully replicates issues. We have very generous contributors that have added these to bug issues which meant another contributor picked up the bug and closed it out.

7.0.0

Drop support for python 3.8 (major version bump) - thanks @jairhenrique

Various linting and test fixes - thanks @jairhenrique

Bugfix for urllib2>=2.3.0 - missing version_string (#888)

Bugfix for asyncio.run - thanks @alekeik1

6.0.2

Ensure body is consumed only once (#846) - thanks @sathieu

Permit urllib3 2.x for non-PyPy Python >=3.10

Fix typos in test commands - thanks @chuckwondo

Several test and workflow improvements - thanks @hartwork and @graingert

6.0.1

Bugfix with to Tornado cassette generator (thanks @graingert)

6.0.0

BREAKING: Fix issue with httpx support (thanks @parkerhancock) in #784. NOTE: You may have to recreate some of your cassettes produced in previous releases due to the binary format being saved incorrectly in previous releases

BREAKING: Drop support for boto (vcrpy still supports boto3, but is dropping the deprecated boto support in this release. (thanks @jairhenrique)

Fix compatibility issue with Python 3.12 (thanks @hartwork)

Drop simplejson (fixes some compatibility issues) (thanks @jairhenrique)

Run CI on Python 3.12 and PyPy 3.9-3.10 (thanks @mgorny)

Various linting and docs improvements (thanks @jairhenrique)

Tornado fixes (thanks @graingert)

5.1.0

Use ruff for linting (instead of current flake8/isort/pyflakes) - thanks @jairhenrique

Enable rule B (flake8-bugbear) on ruff - thanks @jairhenrique

Configure read the docs V2 - thanks @jairhenrique

Fix typo in docs - thanks @quasimik

Make json.loads of Python >=3.6 decode bytes by itself - thanks @hartwork

Fix body matcher for chunked requests (fixes #734) - thanks @hartwork

Fix query param filter for aiohttp (fixes #517) - thanks @hartwork and @salomvary

Remove unnecessary dependency on six. - thanks @charettes

build(deps): update sphinx requirement from <7 to <8 - thanks @jairhenrique

Add action to validate docs - thanks @jairhenrique

Add editorconfig file - thanks @jairhenrique

Drop iscoroutinefunction fallback function for unsupported python thanks @jairhenrique

5.0.0

BREAKING CHANGE: Drop support for Python 3.7. 3.7 is EOL as of 6/27/23 Thanks @jairhenrique

BREAKING CHANGE: Custom Cassette persisters no longer catch ValueError. If you have implemented a custom persister (has anyone implemented a custom persister? Let us know!) then you will need to throw a CassetteNotFoundError when unable to find a cassette. See #681 for discussion and reason for this change. Thanks @amosjyng for the PR and the review from @hartwork

4.4.0

HUGE thanks to @hartwork for all the work done on this release!

Bring vcr/unittest in to vcrpy as a full feature of vcr instead of a separate library. Big thanks to @hartwork for doing this and to @agriffis for originally creating the library

Make decompression robust towards already decompressed input (thanks @hartwork)

... (truncated)

Commits

3278619 Release v7.0.0
3fb62e0 fix: correctly handle asyncio.run when loop exists
8197865 build(deps): update sphinx requirement from <8 to <9
be651bd pre-commit: Autoupdate
a6698ed Fix aiohttp tests
48d0a2e Fixed missing version_string attribute when used with urllib3>=2.3.0
5b858b1 Fix lint
c8d99a9 Fix ruff configuration
ce27c63 Merge pull request #736 from kevin1024/drop-python38
ab8944d Drop python 3.8 support
Additional commits viewable in compare view

Updates twine from 5.1.1 to 6.1.0

Changelog

Sourced from twine's changelog.

Twine 6.1.0 (2025-01-17)

Features ^^^^^^^^

Twine now has preliminary built-in support for Trusted Publishing <https://docs.pypi.org/trusted-publishers/>_ as an authentication mechanism. ([#1194](https://github.com/pypa/twine/issues/1194) <https://github.com/pypa/twine/pull/1194>_)

Deprecations and Removals ^^^^^^^^^^^^^^^^^^^^^^^^^

Remove support for egg and wininst distribution types. These are not accepted by PyPI and not produced by any modern build-backends. ([#1195](https://github.com/pypa/twine/issues/1195) <https://github.com/pypa/twine/issues/1195>_)

Twine no longer supports .tar.bz2 source distributions. ([#1200](https://github.com/pypa/twine/issues/1200) <https://github.com/pypa/twine/pull/1200>_)

Misc ^^^^

packaging is used instead of pkginfo for parsing and validating metadata. This aligns metadata validation to the one performed by PyPI. packaging version 24.0 or later is required. Support for metadata version 2.4 requires packaging 24.2 or later. pkginfo is not a dependency anymore. ([#1180](https://github.com/pypa/twine/issues/1180) <https://github.com/pypa/twine/issues/1180>_)

Use "source" instead of None as pyversion for sdist uploads. This is what PyPI (and most likely other package indexes) expects. ([#1191](https://github.com/pypa/twine/issues/1191) <https://github.com/pypa/twine/issues/1191>_)

Twine 6.0.1 (2024-11-30)

Bugfixes ^^^^^^^^

Fixed a regression where twine check would fail to expand wildcards, e.g. twine check 'dist/*'. ([#1188](https://github.com/pypa/twine/issues/1188) <https://github.com/pypa/twine/issues/1188>_)

Misc ^^^^

[#1184](https://github.com/pypa/twine/issues/1184) <https://github.com/pypa/twine/issues/1184>_

... (truncated)

Commits

aa3a910 Update changelog for 6.1.0 (#1214)
4406034 Merge pull request #1208 from dnicolodi/rm-setuptools
2ca55db Simplify generation of test packages used in test_check
bffd296 Move build_archive() from test_sdist to common helpers module
fd0646e Merge pull request #1206 from dnicolodi/rm-binary-blobs-part1
ab4ec8c Merge pull request #1211 from pypa/dependabot/github_actions/actions/upload-a...
b562f74 build(deps): bump actions/upload-artifact from 4.5.0 to 4.6.0
b2832de Remove tests/fixtures/twine-1.5.0.zip
970851d Remove tests/alt-fixtures/twine-1.5.0-py2.py3-none-any.whl
2386ca5 build(deps): bump actions/upload-artifact from 4.4.3 to 4.5.0 (#1205)
Additional commits viewable in compare view

Updates tomli from 2.1.0 to 2.2.1

Changelog

Sourced from tomli's changelog.

2.2.1

Fixed

Don't attempt to compile binary wheels for Python 3.8, 3.9 and 3.10 where cibuildwheel depends on a conflicting Tomli version

2.2.0

Added

mypyc generated binary wheels for common platforms

Commits

73c3d10 Bump version: 2.2.0 → 2.2.1
7c2368d Don't build wheels for Python versions requiring tomli
c48e4e1 Bump version: 2.1.0 → 2.2.0
7604741 Update README
0724e2a Annotate global constants as Final to speed up compiled code
149547d Create binary wheels with mypyc (#242)
443a0c1 pre-commit autoupdate and autofix
48461cf Merge pull request #240 from hukkin/version-2.1.0
See full diff in compare view

Updates ruff from 0.8.0 to 0.9.4

Release notes

Sourced from ruff's releases.

0.9.4

Release Notes

Preview features

[airflow] Extend airflow context parameter check for BaseOperator.execute (AIR302) (#15713)

[airflow] Update AIR302 to check for deprecated context keys (#15144)

[flake8-bandit] Permit suspicious imports within stub files (S4) (#15822)

[pylint] Do not trigger PLR6201 on empty collections (#15732)

[refurb] Do not emit diagnostic when loop variables are used outside loop body (FURB122) (#15757)

[ruff] Add support for more re patterns (RUF055) (#15764)

[ruff] Check for shadowed map before suggesting fix (RUF058) (#15790)

[ruff] Do not emit diagnostic when all arguments to zip() are variadic (RUF058) (#15744)

[ruff] Parenthesize fix when argument spans multiple lines for unnecessary-round (RUF057) (#15703)

Rule changes

Preserve quote style in generated code (#15726, #15778, #15794)

[flake8-bugbear] Exempt NewType calls where the original type is immutable (B008) (#15765)

[pylint] Honor banned top-level imports by TID253 in PLC0415. (#15628)

[pyupgrade] Ignore is_typeddict and TypedDict for deprecated-import (UP035) (#15800)

CLI

Fix formatter warning message for flake8-quotes option (#15788)

Implement tab autocomplete for ruff config (#15603)

Bug fixes

[flake8-comprehensions] Do not emit unnecessary-map diagnostic when lambda has different arity (C417) (#15802)

[flake8-comprehensions] Parenthesize sorted when needed for unnecessary-call-around-sorted (C413) (#15825)

[pyupgrade] Handle end-of-line comments for quoted-annotation (UP037) (#15824)

Documentation

Add missing config docstrings (#15803)

Add references to trio.run_process and anyio.run_process (#15761)

Use uv init --lib in tutorial (#15718)

Contributors

@AlexWaygood

@Garrett-R

@InSyncWithFoo

@JelleZijlstra

@Lee-W

@MichaReiser

@charliermarsh

@dcreager

@dhruvmanila

@dylwil3

... (truncated)

Changelog

Sourced from ruff's changelog.

0.9.4

Preview features

[airflow] Extend airflow context parameter check for BaseOperator.execute (AIR302) (#15713)

[airflow] Update AIR302 to check for deprecated context keys (#15144)

[flake8-bandit] Permit suspicious imports within stub files (S4) (#15822)

[pylint] Do not trigger PLR6201 on empty collections (#15732)

[refurb] Do not emit diagnostic when loop variables are used outside loop body (FURB122) (#15757)

[ruff] Add support for more re patterns (RUF055) (#15764)

[ruff] Check for shadowed map before suggesting fix (RUF058) (#15790)

[ruff] Do not emit diagnostic when all arguments to zip() are variadic (RUF058) (#15744)

[ruff] Parenthesize fix when argument spans multiple lines for unnecessary-round (RUF057) (#15703)

Rule changes

Preserve quote style in generated code (#15726, #15778, #15794)

[flake8-bugbear] Exempt NewType calls where the original type is immutable (B008) (#15765)

[pylint] Honor banned top-level imports by TID253 in PLC0415. (#15628)

[pyupgrade] Ignore is_typeddict and TypedDict for deprecated-import (UP035) (#15800)

CLI

Fix formatter warning message for flake8-quotes option (#15788)

Implement tab autocomplete for ruff config (#15603)

Bug fixes

[flake8-comprehensions] Do not emit unnecessary-map diagnostic when lambda has different arity (C417) (#15802)

[flake8-comprehensions] Parenthesize sorted when needed for unnecessary-call-around-sorted (C413) (#15825)

[pyupgrade] Handle end-of-line comments for quoted-annotation (UP037) (#15824)

Documentation

Add missing config docstrings (#15803)

Add references to trio.run_process and anyio.run_process (#15761)

Use uv init --lib in tutorial (#15718)

0.9.3

Preview features

[airflow] Argument fail_stop in DAG has been renamed as fail_fast (AIR302) (#15633)

[airflow] Extend AIR303 with more symbols (#15611)

[flake8-bandit] Report all references to suspicious functions (S3) (#15541)

[flake8-pytest-style] Do not emit diagnostics for empty for loops (PT012, PT031) (#15542)

[flake8-simplify] Avoid double negations (SIM103) (#15562)

[pyflakes] Fix infinite loop with unused local import in __init__.py (F401) (#15517)

[pylint] Do not report methods with only one EM101-compatible raise (PLR6301) (#15507)

[pylint] Implement redefined-slots-in-subclass (W0244) (#9640)

... (truncated)

Commits

854ab03 Bump version to 0.9.4 (#15831)
b0b8b06 Remove semicolon after TypeScript interface definition (#15827)
451f251 [red-knot] Clarify behavior when redeclaring base class attributes (#15826)
13cf3e6 [flake8-comprehensions] Parenthesize sorted when needed for `unnecessary-...
56f956a [pyupgrade] Handle end-of-line comments for quoted-annotation (UP037) (...
7a10a40 [flake8-bandit] Permit suspicious imports within stub files (S4) (#15822)
3125332 [red-knot] Format mdtest snippets with the latest version of black (#15819)
15d886a [red-knot] Consider all definitions after terminal statements unreachable (#1...
e1c9d10 [flake8-comprehensions] Do not emit unnecessary-map diagnostic when lambd...
23c9884 Preserve quotes in generated f-strings (#15794)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the python group with 5 updates in the / directory: | Package | From | To | | --- | --- | --- | | [pydantic](https://github.com/pydantic/pydantic) | `1.10.19` | `1.10.21` | | [vcrpy](https://github.com/kevin1024/vcrpy) | `6.0.2` | `7.0.0` | | [twine](https://github.com/pypa/twine) | `5.1.1` | `6.1.0` | | [tomli](https://github.com/hukkin/tomli) | `2.1.0` | `2.2.1` | | [ruff](https://github.com/astral-sh/ruff) | `0.8.0` | `0.9.4` | Updates `pydantic` from 1.10.19 to 1.10.21 - [Release notes](https://github.com/pydantic/pydantic/releases) - [Changelog](https://github.com/pydantic/pydantic/blob/v1.10.21/HISTORY.md) - [Commits](pydantic/pydantic@v1.10.19...v1.10.21) Updates `vcrpy` from 6.0.2 to 7.0.0 - [Release notes](https://github.com/kevin1024/vcrpy/releases) - [Changelog](https://github.com/kevin1024/vcrpy/blob/master/docs/changelog.rst) - [Commits](kevin1024/vcrpy@v6.0.2...v7.0.0) Updates `twine` from 5.1.1 to 6.1.0 - [Release notes](https://github.com/pypa/twine/releases) - [Changelog](https://github.com/pypa/twine/blob/main/docs/changelog.rst) - [Commits](pypa/twine@v5.1.1...6.1.0) Updates `tomli` from 2.1.0 to 2.2.1 - [Changelog](https://github.com/hukkin/tomli/blob/master/CHANGELOG.md) - [Commits](hukkin/tomli@2.1.0...2.2.1) Updates `ruff` from 0.8.0 to 0.9.4 - [Release notes](https://github.com/astral-sh/ruff/releases) - [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md) - [Commits](astral-sh/ruff@0.8.0...0.9.4) --- updated-dependencies: - dependency-name: pydantic dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python - dependency-name: vcrpy dependency-type: direct:development update-type: version-update:semver-major dependency-group: python - dependency-name: twine dependency-type: direct:development update-type: version-update:semver-major dependency-group: python - dependency-name: tomli dependency-type: direct:development update-type: version-update:semver-minor dependency-group: python - dependency-name: ruff dependency-type: direct:development update-type: version-update:semver-minor dependency-group: python ... Signed-off-by: dependabot[bot] <[email protected]>

dependabot · 2025-02-07T15:02:54Z

Superseded by #289.

dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Jan 31, 2025

dependabot bot mentioned this pull request Jan 31, 2025

build(deps): bump the python group across 1 directory with 5 updates #287

Closed

dependabot bot closed this Feb 7, 2025

dependabot bot deleted the dependabot/pip/development/python-2d3cd78066 branch February 7, 2025 15:02

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

build(deps): bump the python group across 1 directory with 5 updates #288

build(deps): bump the python group across 1 directory with 5 updates #288

dependabot bot commented on behalf of github Jan 31, 2025 •

edited

Loading

dependabot bot commented on behalf of github Feb 7, 2025

build(deps): bump the python group across 1 directory with 5 updates #288

build(deps): bump the python group across 1 directory with 5 updates #288

Conversation

dependabot bot commented on behalf of github Jan 31, 2025 • edited Loading

v1.10.20 2025-01-07

What's Changed

New Contributors

v1.10.21 (2025-01-10)

v1.10.20 (2025-01-07)

v7.0.0

What's Changed

New Contributors

Changelog

Twine 6.1.0 (2025-01-17)

Twine 6.0.1 (2024-11-30)

2.2.1

2.2.0

0.9.4

Release Notes

Preview features

Rule changes

CLI

Bug fixes

Documentation

Contributors

0.9.4

Preview features

Rule changes

CLI

Bug fixes

Documentation

0.9.3

Preview features

dependabot bot commented on behalf of github Feb 7, 2025

dependabot bot commented on behalf of github Jan 31, 2025 •

edited

Loading