Bump the dependencies group in /.config with 6 updates

[dependabot]

Bumps the dependencies group in /.config with 6 updates:

Package	From	To
black	24.3.0	24.4.0
execnet	2.1.0	2.1.1
filelock	3.13.3	3.13.4
idna	3.6	3.7
pipdeptree	2.17.0	2.18.1
ruff	0.3.5	0.3.7

Updates black from 24.3.0 to 24.4.0

Release notes

Sourced from black's releases.

24.4.0

Stable style

• Fix unwanted crashes caused by AST equivalency check (#4290)

Preview style

• if guards in case blocks are now wrapped in parentheses when the line is too long. (#4269)
• Stop moving multiline strings to a new line unless inside brackets (#4289)

Integrations

• Add a new option use_pyproject to the GitHub Action psf/black. This will read the Black version from pyproject.toml. (#4294)

Changelog

Sourced from black's changelog.

24.4.0

Stable style

• Fix unwanted crashes caused by AST equivalency check (#4290)

Preview style

• if guards in case blocks are now wrapped in parentheses when the line is too long. (#4269)
• Stop moving multiline strings to a new line unless inside brackets (#4289)

Integrations

• Add a new option use_pyproject to the GitHub Action psf/black. This will read the Black version from pyproject.toml. (#4294)

Commits

• 8fe6270 Prepare release 24.4.0 (#4307)
• 6b25e7c Bump peter-evans/find-comment from 3.0.0 to 3.1.0 (#4304)
• 07fe1ca docs: remove repetitive word (#4303)
• 3383f53 GitHub Action: Allow reading version from pyproject.toml (#4294)
• c8f1a55 [pre-commit.ci] pre-commit autoupdate (#4297)
• 836acad Improve AST safety check (#4290)
• 13bd092 fix: Stop moving multiline strings to a new line unless inside brackets (#4289)
• c9d2635 Remove mocking from tests (#4287)
• bf11956 Fix two logging calls in the test helper (#4286)
• 97993f9 Bump pypa/cibuildwheel from 2.16.5 to 2.17.0 (#4283)
• Additional commits viewable in compare view

Updates execnet from 2.1.0 to 2.1.1

Changelog

Sourced from execnet's changelog.

2.1.1 (2024-04-08)

• [#267](https://github.com/pytest-dev/execnet/issues/267) <https://github.com/pytest-dev/execnet/issue/267>__ Fixed regression in 2.1.0 where the strconfig argument to load/loads is ignored.

Commits

• e1332b1 Update CHANGELOG for 2.1.1
• 8481612 Merge pull request #268 from bluetech/fix-strconfig-ignored
• d08b7e7 gateway_base: fix load(strconfig) getting ignored
• d0fc2c2 Merge pull request #265 from pytest-dev/release-2.1.0
• See full diff in compare view

Updates filelock from 3.13.3 to 3.13.4

Release notes

Sourced from filelock's releases.

3.13.4

What's Changed

• Raise error on incompatible singleton timeout and mode args by @​nefrob in tox-dev/filelock#320

Full Changelog: tox-dev/filelock@3.13.3...3.13.4

Commits

• 000a3fa Raise error on incompatible singleton timeout and mode args (#320)
• 312fb4e [pre-commit.ci] pre-commit autoupdate (#321)
• See full diff in compare view

Updates idna from 3.6 to 3.7

Release notes

Sourced from idna's releases.

v3.7

What's Changed

• Fix issue where specially crafted inputs to encode() could take exceptionally long amount of time to process. [CVE-2024-3651]

Thanks to Guido Vranken for reporting the issue.

Full Changelog: kjd/idna@v3.6...v3.7

Changelog

Sourced from idna's changelog.

3.7 (2024-04-11) ++++++++++++++++

• Fix issue where specially crafted inputs to encode() could take exceptionally long amount of time to process. [CVE-2024-3651]

Thanks to Guido Vranken for reporting the issue.

Commits

• 1d365e1 Release v3.7
• c1b3154 Merge pull request #172 from kjd/optimize-contextj
• 0394ec7 Merge branch 'master' into optimize-contextj
• cd58a23 Merge pull request #152 from elliotwutingfeng/dev
• 5beb28b More efficient resolution of joiner contexts
• 1b12148 Update ossf/scorecard-action to v2.3.1
• d516b87 Update Github actions/checkout to v4
• c095c75 Merge branch 'master' into dev
• 60a0a4c Fix typo in GitHub Actions workflow key
• 5918a0e Merge branch 'master' into dev
• Additional commits viewable in compare view

Updates pipdeptree from 2.17.0 to 2.18.1

Release notes

Sourced from pipdeptree's releases.

2.18.1

What's Changed

• Modify tests to ensure $PYTHONPATH is given to the custom interpreter by @​kemzeb in tox-dev/pipdeptree#353
• Fix test_console failure finding pipdeptree in other environments by @​xiacunshun in tox-dev/pipdeptree#351

Full Changelog: tox-dev/pipdeptree@2.18.0...2.18.1

2.18.0

What's Changed

• Handle invalid requirement strings when using importlib.metadata by @​kemzeb in tox-dev/pipdeptree#345
• refactor the non_host part for not injecting to custom env by @​xiacunshun in tox-dev/pipdeptree#346

Full Changelog: tox-dev/pipdeptree@2.17.0...2.18.0

Commits

• 6d4d4a7 Fix test_console failure finding pipdeptree in other environments (#351)
• bf5a865 Modify tests to ensure $PYTHONPATH is given to the custom interpreter (#353)
• 25cbb6f refactor the non_host part for not injecting to custom env (#346)
• 268dee8 [pre-commit.ci] pre-commit autoupdate (#347)
• 7a6e0ff Handle invalid requirement strings when using importlib.metadata (#345)
• See full diff in compare view

Updates ruff from 0.3.5 to 0.3.7

Release notes

Sourced from ruff's releases.

v0.3.7

Changes

Preview features

• [flake8-bugbear] Implement loop-iterator-mutation (B909) (#9578)
• [pylint] Implement rule to prefer augmented assignment (PLR6104) (#9932)

Bug fixes

• Avoid TOCTOU errors in cache initialization (#10884)
• [pylint] Recode nan-comparison rule to W0177 (#10894)
• [pylint] Reverse min-max logic in if-stmt-min-max (#10890)

Contributors

• @​carljm
• @​charliermarsh
• @​lshi18
• @​mimre25

v0.3.6

Changes

Preview features

• [pylint] Implement bad-staticmethod-argument (PLW0211) (#10781)
• [pylint] Implement if-stmt-min-max (PLR1730, PLR1731) (#10002)
• [pyupgrade] Replace str,Enum multiple inheritance with StrEnum UP042 (#10713)
• [refurb] Implement if-expr-instead-of-or-operator (FURB110) (#10687)
• [refurb] Implement int-on-sliced-str (FURB166) (#10650)
• [refurb] Implement write-whole-file (FURB103) (#10802)
• [refurb] Support itemgetter in reimplemented-operator (FURB118) (#10526)
• [flake8_comprehensions] Add sum/min/max to unnecessary comprehension check (C419) (#10759)

Rule changes

• [pydocstyle] Require capitalizing docstrings where the first sentence is a single word (D403) (#10776)
• [pycodestyle] Ignore annotated lambdas in class scopes (E731) (#10720)
• [flake8-pyi] Various improvements to PYI034 (#10807)
• [flake8-slots] Flag subclasses of call-based typing.NamedTuples as well as subclasses of collections.namedtuple() (SLOT002) (#10808)
• [pyflakes] Allow forward references in class bases in stub files (F821) (#10779)
• [pygrep-hooks] Improve blanket-noqa error message (PGH004) (#10851)

CLI

• Support FORCE_COLOR env var (#10839)

Configuration

• Support negated patterns in [extend-]per-file-ignores (#10852)

... (truncated)

Changelog

Sourced from ruff's changelog.

0.3.7

Preview features

• [flake8-bugbear] Implement loop-iterator-mutation (B909) (#9578)
• [pylint] Implement rule to prefer augmented assignment (PLR6104) (#9932)

Bug fixes

• Avoid TOCTOU errors in cache initialization (#10884)
• [pylint] Recode nan-comparison rule to W0177 (#10894)
• [pylint] Reverse min-max logic in if-stmt-min-max (#10890)

0.3.6

Preview features

• [pylint] Implement bad-staticmethod-argument (PLW0211) (#10781)
• [pylint] Implement if-stmt-min-max (PLR1730, PLR1731) (#10002)
• [pyupgrade] Replace str,Enum multiple inheritance with StrEnum UP042 (#10713)
• [refurb] Implement if-expr-instead-of-or-operator (FURB110) (#10687)
• [refurb] Implement int-on-sliced-str (FURB166) (#10650)
• [refurb] Implement write-whole-file (FURB103) (#10802)
• [refurb] Support itemgetter in reimplemented-operator (FURB118) (#10526)
• [flake8_comprehensions] Add sum/min/max to unnecessary comprehension check (C419) (#10759)

Rule changes

• [pydocstyle] Require capitalizing docstrings where the first sentence is a single word (D403) (#10776)
• [pycodestyle] Ignore annotated lambdas in class scopes (E731) (#10720)
• [flake8-pyi] Various improvements to PYI034 (#10807)
• [flake8-slots] Flag subclasses of call-based typing.NamedTuples as well as subclasses of collections.namedtuple() (SLOT002) (#10808)
• [pyflakes] Allow forward references in class bases in stub files (F821) (#10779)
• [pygrep-hooks] Improve blanket-noqa error message (PGH004) (#10851)

CLI

• Support FORCE_COLOR env var (#10839)

Configuration

• Support negated patterns in [extend-]per-file-ignores (#10852)

Bug fixes

• [flake8-import-conventions] Accept non-aliased (but correct) import in unconventional-import-alias (ICN001) (#10729)
• [flake8-quotes] Add semantic model flag when inside f-string replacement field (#10766)
• [pep8-naming] Recursively resolve TypeDicts for N815 violations (#10719)
• [flake8-quotes] Respect Q00* ignores in flake8-quotes rules (#10728)
• [flake8-simplify] Show negated condition in needless-bool diagnostics (SIM103) (#10854)

... (truncated)

Commits

• 2e37cf6 Bump version to v0.3.7 (#10895)
• a9e4393 [pylint] Implement rule to prefer augmented assignment (PLR6104) (#9932)
• 312f434 [pylint] Recode nan-comparison rule to W0177 (#10894)
• 563daa8 Fix docs and add overlap test for negated per-file-ignores (#10863)
• 7ae15c6 Fix comment copy/paste typo in newtype_index (#10892)
• 03899dc [flake8-bugbear] Implement loop-iterator-mutation (B909) (#9578)
• 25f5a8b Struct not tuple for compiled per-file ignores (#10864)
• e7d1d43 [pylint] Reverse min-max logic in if-stmt-min-max (#10890)
• 9b9098c Downgrade ESLint to v8 (#10888)
• 0cc154c Avoid TOCTOU errors in cache initialization (#10884)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

The following labels could not be found: dependabot-deps-updates.