Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore(deps): update all minor dependencies #125

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented May 6, 2023

Mend Renovate

This PR contains the following updates:

Package Change Age Adoption Passing Confidence Type Update Pending
flake8 (changelog) 6.0.0 -> 6.1.0 age adoption passing confidence test minor
freezegun (changelog) 1.2.2 -> 1.5.1 age adoption passing confidence test minor
mypy (source, changelog) 1.0.1 -> 1.10.0 age adoption passing confidence test minor
notifications-utils 52.1.5 -> 52.2.4 age adoption passing confidence dependencies minor
pycryptodome (source, changelog) 3.18.0 -> 3.20.0 age adoption passing confidence dependencies minor
pytest (changelog) 7.2.0 -> 7.4.4 age adoption passing confidence test minor
pytest-mock (changelog) 3.10.0 -> 3.14.0 age adoption passing confidence test minor
python ~3.10.9 -> ~3.12.0 age adoption passing confidence dependencies minor
requests (source, changelog) 2.31.0 -> 2.32.3 age adoption passing confidence dependencies minor
requests-mock (source) 1.10.0 -> 1.12.1 age adoption passing confidence test minor
types-requests (changelog) 2.28.11 -> 2.32.0.20240523 age adoption passing confidence test minor 2.32.0.20240602

Review

  • Updates have been tested and work
  • If updates are AWS related, versions match the infrastructure (e.g. Lambda runtime, database, etc.)

Release Notes

pycqa/flake8 (flake8)

v6.1.0

Compare Source

spulec/freezegun (freezegun)

v1.5.1

Compare Source

  • Fix the typing of the tick() method, and improve it's behaviour.

v1.5.0

Compare Source

  • The default ignore list now contains the queue-package
  • Added a missing move_to-function when calling freeze_time(tick=True)
  • Fixes a rounding error in time.time_ns()
  • Fixed a bug where the default ignore list could not be empty (configure(default_ignore_list=[]))
  • All tick() methods now return the new datetime (instead of None)
  • Type improvements

v1.4.0

Compare Source

  • asyncio-support from 1.3.x introduced quite a few bugs, so that functionality is now hidden behind a flag:
    with freeze_time('1970-01-02', real_asyncio=True):

v1.3.1

Compare Source

  • Fixed the release number in the build

v1.3.0

Compare Source

  • Fixed asyncio support to avoid await asyncio.sleep(1) hanging forever.

  • Added support for Python 3.12

python/mypy (mypy)

v1.10.0

Compare Source

v1.9.0

Compare Source

v1.8.0

Compare Source

v1.7.1

Compare Source

v1.7.0

Compare Source

v1.6.1

Compare Source

v1.6.0

Compare Source

v1.5.1

Compare Source

v1.5.0

Compare Source

v1.4.1

Compare Source

v1.4.0

Compare Source

v1.3.0

Compare Source

v1.2.0

Compare Source

v1.1.1

Compare Source

Monday, 6 March 2023

We’ve just uploaded mypy 1.1.1 to the Python Package Index (PyPI). Mypy is a static type checker for Python. This release includes new features, performance improvements and bug fixes. You can install it as follows:

python3 -m pip install -U mypy

You can read the full documentation for this release on Read the Docs.

Support for `dataclass_transform``

This release adds full support for the dataclass_transform decorator defined in PEP 681. This allows decorators, base classes, and metaclasses that generate a __init__ method or other methods based on the properties of that class (similar to dataclasses) to have those methods recognized by mypy.

This was contributed by Wesley Collin Wright.

Dedicated Error Code for Method Assignments

Mypy can’t safely check all assignments to methods (a form of monkey patching), so mypy generates an error by default. To make it easier to ignore this error, mypy now uses the new error code method-assign for this. By disabling this error code in a file or globally, mypy will no longer complain about assignments to methods if the signatures are compatible.

Mypy also supports the old error code assignment for these assignments to prevent a backward compatibility break. More generally, we can use this mechanism in the future if we wish to split or rename another existing error code without causing backward compatibility issues.

This was contributed by Ivan Levkivskyi (PR 14570).

Fixes to Crashes
  • Fix a crash on walrus in comprehension at class scope (Ivan Levkivskyi, PR 14556)
  • Fix crash related to value-constrained TypeVar (Shantanu, PR 14642)
Fixes to Cache Corruption
  • Fix generic TypedDict/NamedTuple caching (Ivan Levkivskyi, PR 14675)
Mypyc Fixes and Improvements
  • Raise "non-trait base must be first..." error less frequently (Richard Si, PR 14468)
  • Generate faster code for bool comparisons and arithmetic (Jukka Lehtosalo, PR 14489)
  • Optimize _(a)enter__/_(a)exit__ for native classes (Jared Hance, PR 14530)
  • Detect if attribute definition conflicts with base class/trait (Jukka Lehtosalo, PR 14535)
  • Support __(r)divmod__ dunders (Richard Si, PR 14613)
  • Support __pow__, __rpow__, and __ipow__ dunders (Richard Si, PR 14616)
  • Fix crash on star unpacking to underscore (Ivan Levkivskyi, PR 14624)
  • Fix iterating over a union of dicts (Richard Si, PR 14713)
Fixes to Detecting Undefined Names (used-before-def)
  • Correctly handle walrus operator (Stas Ilinskiy, PR 14646)
  • Handle walrus declaration in match subject correctly (Stas Ilinskiy, PR 14665)
Stubgen Improvements

Stubgen is a tool for automatically generating draft stubs for libraries.

  • Allow aliases below the top level (Chad Dombrova, PR 14388)
  • Fix crash with PEP 604 union in type variable bound (Shantanu, PR 14557)
  • Preserve PEP 604 unions in generated .pyi files (hamdanal, PR 14601)
Stubtest Improvements

Stubtest is a tool for testing that stubs conform to the implementations.

  • Update message format so that it’s easier to go to error location (Avasam, PR 14437)
  • Handle name-mangling edge cases better (Alex Waygood, PR 14596)
Changes to Error Reporting and Messages
  • Add new TypedDict error code typeddict-unknown-key (JoaquimEsteves, PR 14225)
  • Give arguments a more reasonable location in error messages (Max Murin, PR 14562)
  • In error messages, quote just the module's name (Ilya Konstantinov, PR 14567)
  • Improve misleading message about Enum() (Rodrigo Silva, PR 14590)
  • Suggest importing from typing_extensions if definition is not in typing (Shantanu, PR 14591)
  • Consistently use type-abstract error code (Ivan Levkivskyi, PR 14619)
  • Consistently use literal-required error code for TypedDicts (Ivan Levkivskyi, PR 14621)
  • Adjust inconsistent dataclasses plugin error messages (Wesley Collin Wright, PR 14637)
  • Consolidate literal bool argument error messages (Wesley Collin Wright, PR 14693)
Other Fixes and Improvements
  • Check that type guards accept a positional argument (EXPLOSION, PR 14238)
  • Fix bug with in operator used with a union of Container and Iterable (Max Murin, PR 14384)
  • Support protocol inference for type[T] via metaclass (Ivan Levkivskyi, PR 14554)
  • Allow overlapping comparisons between bytes-like types (Shantanu, PR 14658)
  • Fix mypy daemon documentation link in README (Ivan Levkivskyi, PR 14644)
Typeshed Updates

Typeshed is now modular and distributed as separate PyPI packages for everything except the standard library stubs. Please see git log for full list of typeshed changes.

Acknowledgements

Thanks to all mypy contributors who contributed to this release:

  • Alex Waygood
  • Avasam
  • Chad Dombrova
  • dosisod
  • EXPLOSION
  • hamdanal
  • Ilya Konstantinov
  • Ivan Levkivskyi
  • Jared Hance
  • JoaquimEsteves
  • Jukka Lehtosalo
  • Marc Mueller
  • Max Murin
  • Michael Lee
  • Michael R. Crusoe
  • Richard Si
  • Rodrigo Silva
  • Shantanu
  • Stas Ilinskiy
  • Wesley Collin Wright
  • Yilei "Dolee" Yang
  • Yurii Karabas

We’d also like to thank our employer, Dropbox, for funding the mypy core team.

Posted by Max Murin

cds-snc/notifier-utils (notifications-utils)

v52.2.4

Compare Source

v52.2.3

Compare Source

v52.2.2

Compare Source

v52.2.1

Compare Source

v52.2.0

Compare Source

v52.1.10

Compare Source

v52.1.9

Compare Source

v52.1.8

Compare Source

v52.1.6

Compare Source

Legrandin/pycryptodome (pycryptodome)

v3.20.0: v3.20.0 - Amiens

Compare Source

New features

  • Added support for TurboSHAKE128 and TurboSHAKE256.
  • Added method Crypto.Hash.new() to generate a hash
    object given a hash name.
  • Added support for AES-GCM encryption of PBES2 and PKCS#8
    containers.
  • Added support for SHA-2 and SHA-3 algorithms in PBKDF2
    when creating PBES2 and PKCS#8 containers.
  • Export of RSA keys accepts the prot_params dictionary
    as parameter to control the number of iterations for PBKDF2
    and scrypt.
  • C unit tests also run on non-x86 architectures.

Resolved issues

  • GH#787: Fixed autodetect logic for GCC 14 in combination with LTO.

v3.19.1: - Zeil

Compare Source

Resolved issues

  • Fixed a side-channel leakage with OAEP decryption that could be
    exploited to carry out a Manger attack. Thanks to Hubert Kario.

v3.19.0: - Ulm

Compare Source

New features

  • The update() methods of TupleHash128 and TupleHash256 objects
    can now hash multiple items (byte strings) at once.
    Thanks to Sylvain Pelissier.
  • Added support for ECDH, with Crypto.Protocol.DH.

Resolved issues

  • GH#754: due to a bug in cffi, do not use it on Windows with Python 3.12+.
pytest-dev/pytest (pytest)

v7.4.4

Compare Source

v7.4.3: pytest 7.4.3 (2023-10-24)

Compare Source

Bug Fixes

  • #​10447: Markers are now considered in the reverse mro order to ensure base class markers are considered first -- this resolves a regression.

  • #​11239: Fixed := in asserts impacting unrelated test cases.

  • #​11439: Handled an edge case where :data:sys.stderr might already be closed when :ref:faulthandler is tearing down.

v7.4.2: pytest 7.4.2 (2023-09-07)

Compare Source

Bug Fixes
  • #​11237: Fix doctest collection of functools.cached_property objects.

  • #​11306: Fixed bug using --importmode=importlib which would cause package __init__.py files to be imported more than once in some cases.

  • #​11367: Fixed bug where user_properties where not being saved in the JUnit XML file if a fixture failed during teardown.

  • #​11394: Fixed crash when parsing long command line arguments that might be interpreted as files.

Improved Documentation
  • #​11391: Improved disclaimer on pytest plugin reference page to better indicate this is an automated, non-curated listing.

v7.4.1: pytest 7.4.1 (2023-09-02)

Compare Source

Bug Fixes

  • #​10337: Fixed bug where fake intermediate modules generated by --import-mode=importlib would not include the
    child modules as attributes of the parent modules.

  • #​10702: Fixed error assertion handling in pytest.approx when None is an expected or received value when comparing dictionaries.

  • #​10811: Fixed issue when using --import-mode=importlib together with --doctest-modules that caused modules
    to be imported more than once, causing problems with modules that have import side effects.

v7.4.0

Compare Source

pytest 7.4.0 (2023-06-23)

Features

  • #​10901: Added ExceptionInfo.from_exception() <pytest.ExceptionInfo.from_exception>{.interpreted-text role="func"}, a simpler way to create an ~pytest.ExceptionInfo{.interpreted-text role="class"} from an exception.
    This can replace ExceptionInfo.from_exc_info() <pytest.ExceptionInfo.from_exc_info()>{.interpreted-text role="func"} for most uses.

Improvements

  • #​10872: Update test log report annotation to named tuple and fixed inconsistency in docs for pytest_report_teststatus{.interpreted-text role="hook"} hook.

  • #​10907: When an exception traceback to be displayed is completely filtered out (by mechanisms such as __tracebackhide__, internal frames, and similar), now only the exception string and the following message are shown:

    "All traceback entries are hidden. Pass [--full-trace]{.title-ref} to see hidden and internal frames.".

    Previously, the last frame of the traceback was shown, even though it was hidden.

  • #​10940: Improved verbose output (-vv) of skip and xfail reasons by performing text wrapping while leaving a clear margin for progress output.

    Added TerminalReporter.wrap_write() as a helper for that.

  • #​10991: Added handling of %f directive to print microseconds in log format options, such as log-date-format.

  • #​11005: Added the underlying exception to the cache provider's path creation and write warning messages.

  • #​11013: Added warning when testpaths{.interpreted-text role="confval"} is set, but paths are not found by glob. In this case, pytest will fall back to searching from the current directory.

  • #​11043: When [--confcutdir]{.title-ref} is not specified, and there is no config file present, the conftest cutoff directory ([--confcutdir]{.title-ref}) is now set to the rootdir <rootdir>{.interpreted-text role="ref"}.
    Previously in such cases, [conftest.py]{.title-ref} files would be probed all the way to the root directory of the filesystem.
    If you are badly affected by this change, consider adding an empty config file to your desired cutoff directory, or explicitly set [--confcutdir]{.title-ref}.

  • #​11081: The norecursedirs{.interpreted-text role="confval"} check is now performed in a pytest_ignore_collect{.interpreted-text role="hook"} implementation, so plugins can affect it.

    If after updating to this version you see that your [norecursedirs]{.title-ref} setting is not being respected,
    it means that a conftest or a plugin you use has a bad [pytest_ignore_collect]{.title-ref} implementation.
    Most likely, your hook returns [False]{.title-ref} for paths it does not want to ignore,
    which ends the processing and doesn't allow other plugins, including pytest itself, to ignore the path.
    The fix is to return [None]{.title-ref} instead of [False]{.title-ref} for paths your hook doesn't want to ignore.

  • #​8711: caplog.set_level() <pytest.LogCaptureFixture.set_level>{.interpreted-text role="func"} and caplog.at_level() <pytest.LogCaptureFixture.at_level>{.interpreted-text role="func"}
    will temporarily enable the requested level if level was disabled globally via
    logging.disable(LEVEL).

Bug Fixes

  • #​10831: Terminal Reporting: Fixed bug when running in --tb=line mode where pytest.fail(pytrace=False) tests report None.
  • #​11068: Fixed the --last-failed whole-file skipping functionality ("skipped N files") for non-python test files <non-python tests>{.interpreted-text role="ref"}.
  • #​11104: Fixed a regression in pytest 7.3.2 which caused to testpaths{.interpreted-text role="confval"} to be considered for loading initial conftests,
    even when it was not utilized (e.g. when explicit paths were given on the command line).
    Now the testpaths are only considered when they are in use.
  • #​1904: Fixed traceback entries hidden with __tracebackhide__ = True still being shown for chained exceptions (parts after "... the above exception ..." message).
  • #​7781: Fix writing non-encodable text to log file when using --debug.

Improved Documentation

  • #​9146: Improved documentation for caplog.set_level() <pytest.LogCaptureFixture.set_level>{.interpreted-text role="func"}.

Trivial/Internal Changes

  • #​11031: Enhanced the CLI flag for -c to now include --config-file to make it clear that this flag applies to the usage of a custom config file.

v7.3.2

Compare Source

pytest 7.3.2 (2023-06-10)

Bug Fixes

  • #​10169: Fix bug where very long option names could cause pytest to break with OSError: [Errno 36] File name too long on some systems.
  • #​10894: Support for Python 3.12 (beta at the time of writing).
  • #​10987: testpaths{.interpreted-text role="confval"} is now honored to load root conftests.
  • #​10999: The [monkeypatch]{.title-ref} [setitem]{.title-ref}/[delitem]{.title-ref} type annotations now allow [TypedDict]{.title-ref} arguments.
  • #​11028: Fixed bug in assertion rewriting where a variable assigned with the walrus operator could not be used later in a function call.
  • #​11054: Fixed --last-failed's "(skipped N files)" functionality for files inside of packages (directories with [__init__.py]{.title-ref} files).

v7.3.1

Compare Source

pytest 7.3.1 (2023-04-14)

Improvements

  • #​10875: Python 3.12 support: fixed RuntimeError: TestResult has no addDuration method when running unittest tests.
  • #​10890: Python 3.12 support: fixed shutil.rmtree(onerror=...) deprecation warning when using tmp_path{.interpreted-text role="fixture"}.

Bug Fixes

  • #​10896: Fixed performance regression related to tmp_path{.interpreted-text role="fixture"} and the new tmp_path_retention_policy{.interpreted-text role="confval"} option.
  • #​10903: Fix crash INTERNALERROR IndexError: list index out of range which happens when displaying an exception where all entries are hidden.
    This reverts the change "Correctly handle __tracebackhide__ for chained exceptions." introduced in version 7.3.0.

v7.3.0

Compare Source

pytest 7.3.0 (2023-04-08)

Features

  • #​10525: Test methods decorated with @classmethod can now be discovered as tests, following the same rules as normal methods. This fills the gap that static methods were discoverable as tests but not class methods.
  • #​10755: console_output_style{.interpreted-text role="confval"} now supports progress-even-when-capture-no to force the use of the progress output even when capture is disabled. This is useful in large test suites where capture may have significant performance impact.
  • #​7431: --log-disable CLI option added to disable individual loggers.
  • #​8141: Added tmp_path_retention_count{.interpreted-text role="confval"} and tmp_path_retention_policy{.interpreted-text role="confval"} configuration options to control how directories created by the tmp_path{.interpreted-text role="fixture"} fixture are kept.

Improvements

  • #​10226: If multiple errors are raised in teardown, we now re-raise an ExceptionGroup of them instead of discarding all but the last.
  • #​10658: Allow -p arguments to include spaces (eg: -p no:logging instead of
    -pno:logging). Mostly useful in the addopts section of the configuration
    file.
  • #​10710: Added start and stop timestamps to TestReport objects.
  • #​10727: Split the report header for rootdir, config file and testpaths so each has its own line.
  • #​10840: pytest should no longer crash on AST with pathological position attributes, for example testing AST produced by [Hylang <https://github.com/hylang/hy>\__]{.title-ref}.
  • #​6267: The full output of a test is no longer truncated if the truncation message would be longer than
    the hidden text. The line number shown has also been fixed.

Bug Fixes

  • #​10743: The assertion rewriting mechanism now works correctly when assertion expressions contain the walrus operator.
  • #​10765: Fixed tmp_path{.interpreted-text role="fixture"} fixture always raising OSError{.interpreted-text role="class"} on emscripten platform due to missing os.getuid{.interpreted-text role="func"}.
  • #​1904: Correctly handle __tracebackhide__ for chained exceptions.

Improved Documentation

  • #​10782: Fixed the minimal example in goodpractices{.interpreted-text role="ref"}: pip install -e . requires a version entry in pyproject.toml to run successfully.

Trivial/Internal Changes

  • #​10669: pytest no longer depends on the [attrs]{.title-ref} package (don't worry, nice diffs for attrs classes are still supported).

v7.2.2

Compare Source

pytest 7.2.2 (2023-03-03)

Bug Fixes

  • #​10533: Fixed pytest.approx{.interpreted-text role="func"} handling of dictionaries containing one or more values of [0.0]{.title-ref}.
  • #​10592: Fixed crash if [--cache-show]{.title-ref} and [--help]{.title-ref} are passed at the same time.
  • #​10597: Fixed bug where a fixture method named teardown would be called as part of nose teardown stage.
  • #​10626: Fixed crash if --fixtures and --help are passed at the same time.
  • #​10660: Fixed :pypytest.raises{.interpreted-text role="func"} to return a 'ContextManager' so that type-checkers could narrow
    pytest.raises(...) if ... else nullcontext() down to 'ContextManager' rather than 'object'.

Improved Documentation

  • #​10690: Added [CI]{.title-ref} and [BUILD_NUMBER]{.title-ref} environment variables to the documentation.
  • #​10721: Fixed entry-points declaration in the documentation example using Hatch.
  • #​10753: Changed wording of the module level skip to be very explicit
    about not collecting tests and not executing the rest of the module.

v7.2.1

Compare Source

pytest 7.2.1 (2023-01-13)

Bug Fixes

  • #​10452: Fix 'importlib.abc.TraversableResources' deprecation warning in Python 3.12.
  • #​10457: If a test is skipped from inside a fixture, the test summary now shows the test location instead of the fixture location.
  • #​10506: Fix bug where sometimes pytest would use the file system root directory as rootdir <rootdir>{.interpreted-text role="ref"} on Windows.
  • #​10607: Fix a race condition when creating junitxml reports, which could occur when multiple instances of pytest execute in parallel.
  • #​10641: Fix a race condition when creating or updating the stepwise plugin's cache, which could occur when multiple xdist worker nodes try to simultaneously update the stepwise plugin's cache.
pytest-dev/pytest-mock (pytest-mock)

v3.14.0

Compare Source

  • #&#8203;415 <https://github.com/pytest-dev/pytest-mock/pull/415>_: MockType and AsyncMockType can be imported from pytest_mock for type annotation purposes.

  • #&#8203;420 <https://github.com/pytest-dev/pytest-mock/issues/420>_: Fixed a regression which would cause mocker.patch.object to not being properly cleared between tests.

v3.13.0

Compare Source

  • #&#8203;417 <https://github.com/pytest-dev/pytest-mock/pull/417>_: spy now has spy_return_list, which is a list containing all the values returned by the spied function.
  • pytest-mock now requires pytest>=6.2.5.
  • #&#8203;410 <https://github.com/pytest-dev/pytest-mock/pull/410>: pytest-mock's setup.py file is removed.
    If you relied on this file, e.g. to install pytest using setup.py install,
    please see Why you shouldn't invoke setup.py directly <https://blog.ganssle.io/articles/2021/10/setup-py-deprecated.html#summary>
    for alternatives.

v3.12.0

Compare Source

  • Added support for Python 3.12.
  • Dropped support for EOL Python 3.7.
  • mocker.resetall() now also resets mocks created by mocker.create_autospec (#390_).

.. _#390:https://github.com/pytest-dev/pytest-mock/pull/3900

v3.11.1

Compare Source

(This release source code is identical to 3.11.0 except a small internal fix to deployment/CI)

  • Fixed introspection for failed assert_has_calls (#365_).

  • Updated type annotations for mocker.patch and mocker.spy (#364_).

.. _#365:https://github.com/pytest-dev/pytest-mock/pull/3655
.. _#364https://github.com/pytest-dev/pytest-mock/pull/36464

v3.11.0

Compare Source

  • Fixed introspection for failed assert_has_calls (#365_).

  • Updated type annotations for mocker.patch and mocker.spy (#364_).

.. _#365:https://github.com/pytest-dev/pytest-mock/pull/3655
.. _#364https://github.com/pytest-dev/pytest-mock/pull/36464

containerbase/python-prebuild (python)

v3.12.3

Compare Source

Bug Fixes
  • deps: update dependency python to v3.12.3

v3.12.2

Compare Source

Bug Fixes
  • deps: update dependency python to v3.12.2

v3.12.1

Compare Source

Bug Fixes
  • deps: update dependency python to v3.12.1

v3.12.0

Compare Source

Bug Fixes
  • deps: update dependency python to v3.12.0

v3.11.9

Compare Source

Bug Fixes
  • deps: update dependency python to v3.11.9

v3.11.8

Compare Source

Bug Fixes
  • deps: update dependency python to v3.11.8

v3.11.7

Compare Source

Bug Fixes
  • deps: update dependency python to v3.11.7

v3.11.6

Compare Source

Bug Fixes
  • deps: update dependency python to v3.11.6

v3.11.5

Compare Source

Bug Fixes
  • deps: update dependency python to v3.11.5

v3.11.4

Compare Source

Bug Fixes
  • deps: update dependency python to v3.11.4

v3.11.3

Compare Source

Bug Fixes
  • deps: update dependency python to v3.11.3

v3.11.2

Compare Source

Bug Fixes
  • deps: update dependency python to v3.11.2

v3.11.1

Compare Source

Bug Fixes
  • deps: update dependency python to v3.11.1

v3.11.0

Compare Source

Bug Fixes
  • deps: update dependency python to v3.11.0
psf/requests (requests)

v2.32.3

Compare Source

Bugfixes

  • Fixed bug breaking the ability to specify custom SSLContexts in sub-classes of
    HTTPAdapter. (#​6716)
  • Fixed issue where Requests started failing to run on Python versions compiled
    without the ssl module. (#​6724)

v2.32.2

Compare Source

Deprecations

  • To provide a more stable migration for custom HTTPAdapters impacted
    by the CVE changes in 2.32.0, we've renamed _get_connection to
    a new public API, get_connection_with_tls_context. Existing custom
    HTTPAdapters will need to migrate their code to use this new API.
    get_connection is considered deprecated in all versions of Requests>=2.32.0.

    A minimal (2-line) example has been provided in the linked PR to ease
    migration, but we strongly urge users to evaluate if their custom adapter
    is subject to the same issue described in CVE-2024-35195. (#​6710)

v2.32.1

Compare Source

Bugfixes

  • Add missing test certs to the sdist distributed on PyPI.

v2.32.0

Compare Source

Security

  • Fixed an issue where setting verify=False on the first request from a
    Session will cause subsequent requests to the same origin to also ignore
    cert verification, regardless of the value of verify.
    (GHSA-9wx4-h78v-vm56)

Improvements

  • verify=True now reuses a global SSLContext which should improve
    request time variance between first and subsequent requests. It should
    also minimize certificate load time on Windows systems when using a Python
    version built with OpenSSL 3.x. (#​6667)
  • Requests now supports optional use of character detection
    (chardet or charset_normalizer) when repackaged or vendored.
    This enables pip and other projects to minimize their vendoring
    surface area. The Response.text() and apparent_encoding APIs
    will default to utf-8 if neither library is present. (#​6702)

Bugfixes

  • Fixed bug in length detection where emoji length was incorrectly
    calculated in the request content-length. (#​6589)
  • Fixed deserialization bug in JSONDecodeError. (#​6629)
  • Fixed bug where an extra leading / (path separator) could lead
    urllib3 to unnecessarily reparse the request URI. (#​6644)

Deprecations

  • Requests has officially added support for CPython 3.12 (#​6503)
  • Requests has officially added support for PyPy 3.9 and 3.10 (#​6641)
  • Requests has officially dropped support for CPython 3.7 (#​6642)
  • Requests has officially dropped support for PyPy 3.7 and 3.8 (#​6641)

Documentation

  • Various typo fixes and doc improvements.

Packaging

  • Requests has started adopting some modern packaging practices.
    The source files for the projects (formerly requests) is now located
    in src/requests in the Requests sdist. (#​6506)
  • Starting in Requests 2.33.0, Requests will migrate to a PEP 517 build system
    using hatchling. This should not impact the average user, but extremely old
    versions of packaging utilities may have issues with the new packaging format.
jamielennox/requests-mock (requests-mock)

v1.12.1

Compare Source

Set python_requires to >3 to prevent installation in python2 deployments.

Full Changelog: jamielennox/requests-mock@1.12.0...1.12.1

v1.12.0

Compare Source

What's Changed

New Contributors

Full Changelog: jamielennox/requests-mock@1.11.0...1.12.0

v1.11.0

Compare Source

What's Changed

New Contributors

Full Changelog: jamielennox/requests-mock@1.10.0...1.11.0


Configuration

📅 Schedule: Branch creation - "every weekend" in timezone America/Montreal, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate. View repository job log here.

@renovate renovate bot force-pushed the renovate/all-minor branch 4 times, most recently from b7b8352 to de6262f Compare May 12, 2023 14:48
@renovate renovate bot force-pushed the renovate/all-minor branch 3 times, most recently from df2c9bc to aa57981 Compare May 17, 2023 16:25
@renovate renovate bot force-pushed the renovate/all-minor branch 2 times, most recently from c1140ae to c700a5d Compare May 30, 2023 12:01
@renovate renovate bot force-pushed the renovate/all-minor branch 2 times, most recently from 76c5735 to aff965a Compare June 8, 2023 19:42
@renovate renovate bot force-pushed the renovate/all-minor branch 7 times, most recently from 6645a79 to 5fb8673 Compare June 17, 2023 21:39
@renovate renovate bot force-pushed the renovate/all-minor branch 9 times, most recently from 18d8c25 to 926f2e6 Compare June 27, 2023 17:13
@renovate renovate bot force-pushed the renovate/all-minor branch 2 times, most recently from fe52895 to a4084df Compare March 7, 2024 15:16
@renovate renovate bot force-pushed the renovate/all-minor branch 5 times, most recently from a150af3 to 7ef030a Compare March 18, 2024 02:29
@renovate renovate bot force-pushed the renovate/all-minor branch 2 times, most recently from 1eeb192 to 9e95344 Compare March 25, 2024 15:33
@renovate renovate bot force-pushed the renovate/all-minor branch 3 times, most recently from 14b7547 to e31e260 Compare March 29, 2024 00:16
@renovate renovate bot force-pushed the renovate/all-minor branch 3 times, most recently from 1844df4 to 0ecd030 Compare April 10, 2024 05:39
@renovate renovate bot force-pushed the renovate/all-minor branch 3 times, most recently from 9dc2b1c to 2de28f4 Compare May 1, 2024 15:03
@renovate renovate bot force-pushed the renovate/all-minor branch 3 times, most recently from 4614e51 to ca98fcc Compare May 8, 2024 19:31
Copy link
Contributor Author

renovate bot commented May 18, 2024

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

  • any of the package files in this branch needs updating, or
  • the branch becomes conflicted, or
  • you click the rebase/retry checkbox if found above, or
  • you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: poetry.lock
Updating dependencies
Resolving dependencies...

Creating virtualenv notification-document-download-api-Kw75zxb3-py3.12 in /home/ubuntu/.cache/pypoetry/virtualenvs

The current project's supported Python range (>=3.12.0,<3.13.0) is not compatible with some of the required packages Python requirement:
  - notifications-utils requires Python ~3.10.9, so it will not be satisfied for Python >=3.12.0,<3.13.0

Because notification-document-download-api depends on notifications-utils (52.2.4) @ git+https://github.com/cds-snc/notifier-utils.git@52.2.4 which requires Python ~3.10.9, version solving failed.

  • Check your dependencies Python requirement: The Python requirement can be specified via the `python` or `markers` properties
    
    For notifications-utils, a possible solution would be to set the `python` property to "<empty>"

    https://python-poetry.org/docs/dependency-specification/#python-restricted-dependencies,
    https://python-poetry.org/docs/dependency-specification/#using-environment-markers

@renovate renovate bot force-pushed the renovate/all-minor branch 3 times, most recently from e4f122f to 4ef8c71 Compare May 28, 2024 18:41
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

0 participants