Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

pyup: Scheduled weekly dependency update for week 30 #8374

Closed
wants to merge 17 commits into from

Conversation

pyup-bot
Copy link
Collaborator

Update pip from 21.1.3 to 21.2.1.

Changelog

21.2.1

===================



Process
-------

- The source distribution re-installation feature removal has been delayed to 21.3.

21.2

=================



Process
-------

- ``pip freeze``, ``pip list``, and ``pip show`` no longer normalize underscore
(``_``) in distribution names to dash (``-``). This is a side effect of the
migration to ``importlib.metadata``, since the underscore-dash normalization
behavior is non-standard and specific to setuptools. This should not affect
other parts of pip (for example, when feeding the ``pip freeze`` result back
into ``pip install``) since pip internally performs standard PEP 503
normalization independently to setuptools.

Deprecations and Removals
-------------------------

- Git version parsing is now done with regular expression to prepare for the
pending upstream removal of non-PEP-440 version parsing logic. (`10117 <https://github.com/pypa/pip/issues/10117>`_)
- Re-enable the "Value for ... does not match" location warnings to field a new
round of feedback for the ``distutils``-``sysconfig`` transition. (`10151 <https://github.com/pypa/pip/issues/10151>`_)
- Remove deprecated ``--find-links`` option in ``pip freeze`` (`9069 <https://github.com/pypa/pip/issues/9069>`_)

Features
--------

- New resolver: Loosen URL comparison logic when checking for direct URL reference
equivalency. The logic includes the following notable characteristics:

* The authentication part of the URL is explicitly ignored.
* Most of the fragment part, including ``egg=``, is explicitly ignored. Only
 ``subdirectory=`` and hash values (e.g. ``sha256=``) are kept.
* The query part of the URL is parsed to allow ordering differences. (`10002 <https://github.com/pypa/pip/issues/10002>`_)
- Support TOML v1.0.0 syntax in ``pyproject.toml``. (`10034 <https://github.com/pypa/pip/issues/10034>`_)
- Added a warning message for errors caused due to Long Paths being disabled on Windows. (`10045 <https://github.com/pypa/pip/issues/10045>`_)
- Change the encoding of log file from default text encoding to UTF-8. (`10071 <https://github.com/pypa/pip/issues/10071>`_)
- Log the resolved commit SHA when installing a package from a Git repository. (`10149 <https://github.com/pypa/pip/issues/10149>`_)
- Add a warning when passing an invalid requirement to ``pip uninstall``. (`4958 <https://github.com/pypa/pip/issues/4958>`_)
- Add new subcommand ``pip index`` used to interact with indexes, and implement
``pip index version`` to list available versions of a package. (`7975 <https://github.com/pypa/pip/issues/7975>`_)
- When pip is asked to uninstall a project without the dist-info/RECORD file
it will no longer traceback with FileNotFoundError,
but it will provide a better error message instead, such as::

   ERROR: Cannot uninstall foobar 0.1, RECORD file not found. You might be able to recover from this via: 'pip install --force-reinstall --no-deps foobar==0.1'.

When dist-info/INSTALLER is present and contains some useful information, the info is included in the error message instead::

   ERROR: Cannot uninstall foobar 0.1, RECORD file not found. Hint: The package was installed by rpm. (`8954 <https://github.com/pypa/pip/issues/8954>`_)
- Add an additional level of verbosity. ``--verbose`` (and the shorthand ``-v``) now
contains significantly less output, and users that need complete full debug-level output
should pass it twice (``--verbose --verbose`` or ``-vv``). (`9450 <https://github.com/pypa/pip/issues/9450>`_)
- New resolver: The order of dependencies resolution has been tweaked to traverse
the dependency graph in a more breadth-first approach. (`9455 <https://github.com/pypa/pip/issues/9455>`_)
- Make "yes" the default choice in ``pip uninstall``'s prompt. (`9686 <https://github.com/pypa/pip/issues/9686>`_)
- Add a special error message when users forget the ``-r`` flag when installing. (`9915 <https://github.com/pypa/pip/issues/9915>`_)
- New resolver: A distribution's ``Requires-Python`` metadata is now checked
before its Python dependencies. This makes the resolver fail quicker when
there's an interpreter version conflict. (`9925 <https://github.com/pypa/pip/issues/9925>`_)
- Suppress "not on PATH" warning when ``--prefix`` is given. (`9931 <https://github.com/pypa/pip/issues/9931>`_)
- Include ``rustc`` version in pip's ``User-Agent``, when the system has ``rustc``. (`9987 <https://github.com/pypa/pip/issues/9987>`_)

Bug Fixes
---------

- Update vendored six to 1.16.0 and urllib3 to 1.26.5 (`10043 <https://github.com/pypa/pip/issues/10043>`_)
- Correctly allow PEP 517 projects to be detected without warnings in ``pip freeze``. (`10080 <https://github.com/pypa/pip/issues/10080>`_)
- Strip leading slash from a ``file://`` URL built from an path with the Windows
drive notation. This fixes bugs where the ``file://`` URL cannot be correctly
used as requirement, constraint, or index URLs on Windows. (`10115 <https://github.com/pypa/pip/issues/10115>`_)
- New resolver: URL comparison logic now treats ``file://localhost/`` and
``file:///`` as equivalent to conform to RFC 8089. (`10162 <https://github.com/pypa/pip/issues/10162>`_)
- Prefer credentials from the URL over the previously-obtained credentials from URLs of the same domain, so it is possible to use different credentials on the same index server for different ``--extra-index-url`` options. (`3931 <https://github.com/pypa/pip/issues/3931>`_)
- Fix extraction of files with utf-8 encoded paths from tars. (`7667 <https://github.com/pypa/pip/issues/7667>`_)
- Skip distutils configuration parsing on encoding errors. (`8931 <https://github.com/pypa/pip/issues/8931>`_)
- New resolver: Detect an unnamed requirement is user-specified (by building its
metadata for the project name) so it can be correctly ordered in the resolver. (`9204 <https://github.com/pypa/pip/issues/9204>`_)
- Fix :ref:`pip freeze` to output packages :ref:`installed from git <vcs support>`
in the correct ``git+protocol://git.example.com/MyProjectegg=MyProject`` format
rather than the old and no longer supported ``git+git`` format. (`9822 <https://github.com/pypa/pip/issues/9822>`_)
- Fix warnings about install scheme selection for Python framework builds
distributed by Apple's Command Line Tools. (`9844 <https://github.com/pypa/pip/issues/9844>`_)
- Relax interpreter detection to quelch a location mismatch warning where PyPy
is deliberately breaking backwards compatibility. (`9845 <https://github.com/pypa/pip/issues/9845>`_)

Vendored Libraries
------------------

- Upgrade certifi to 2021.05.30.
- Upgrade idna to 3.2.
- Upgrade packaging to 21.0
- Upgrade requests to 2.26.0.
- Upgrade resolvelib to 0.7.1.
- Upgrade urllib3 to 1.26.6.


.. note

 You should *NOT* be adding new change log entries to this file, this
 file is managed by towncrier. You *may* edit previous change logs to
 fix problems like typo corrections or such.

 To add a new change log entry, please see
     https://pip.pypa.io/en/latest/development/contributing/#news-entries

.. towncrier release notes start
Links

Update virtualenv from 20.4.7 to 20.6.0.

Changelog

20.6.0

~~~~~~~~~~~~~~~~~
- Support Python interpreters without ``distutils`` (fallback to ``syconfig`` in these cases) - by :user:`gaborbernat`. (`1910 <https://github.com/pypa/virtualenv/issues/1910>`_)

20.5.0

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
- Drop python ``3.4`` support as it has been over 2 years since EOL - by :user:`gaborbernat`. (`2141 <https://github.com/pypa/virtualenv/issues/2141>`_)
Links

Update Sphinx from 4.0.2 to 4.1.2.

Changelog

4.1.2

=====================================

Incompatible changes
--------------------

* 9435: linkcheck: Disable checking automatically generated anchors on
github.com (ex. anchors in reST/Markdown documents)

Bugs fixed
----------

* 9489: autodoc: Custom types using ``typing.NewType`` are not displayed well
with the HEAD of 3.10
* 9490: autodoc: Some objects under ``typing`` module are not displayed well
with the HEAD of 3.10
* 9436, 9471: autodoc: crashed if ``autodoc_class_signature = "separated"``
* 9456: html search: html_copy_source can't control the search summaries
* 9435: linkcheck: Failed to check anchors in github.com

4.1.1

=====================================

Dependencies
------------

* 9434: sphinxcontrib-htmlhelp-2.0.0 or above
* 9434: sphinxcontrib-serializinghtml-1.1.5 or above

Bugs fixed
----------

* 9438: html: HTML logo or Favicon specified as file not being found on output

4.1.0

=====================================

Dependencies
------------

* Support jinja2-3.0

Deprecated
----------

* The ``app`` argument of ``sphinx.environment.BuildEnvironment`` becomes
required
* ``sphinx.application.Sphinx.html_theme``
* ``sphinx.ext.autosummary._app``
* ``sphinx.util.docstrings.extract_metadata()``

Features added
--------------

* 8107: autodoc: Add ``class-doc-from`` option to :rst:dir:`autoclass`
directive to control the content of the specific class like
:confval:`autoclass_content`
* 8588: autodoc: :confval:`autodoc_type_aliases` now supports dotted name. It
allows you to define an alias for a class with module name like
``foo.bar.BazClass``
* 9175: autodoc: Special member is not documented in the module
* 9195: autodoc: The arguments of ``typing.Literal`` are wrongly rendered
* 9185: autodoc: :confval:`autodoc_typehints` allows ``'both'`` setting to
allow typehints to be included both in the signature and description
* 4257: autodoc: Add :confval:`autodoc_class_signature` to separate the class
entry and the definition of ``__init__()`` method
* 8061, 9218: autodoc: Support variable comment for alias classes
* 3014: autodoc: Add :event:`autodoc-process-bases` to modify the base classes
of the class definitions
* 9272: autodoc: Render enum values for the default argument value better
* 9384: autodoc: ``autodoc_typehints='none'`` now erases typehints for
variables, attributes and properties
* 3257: autosummary: Support instance attributes for classes
* 9358: html: Add "heading" role to the toctree items
* 9225: html: Add span tag to the return typehint of method/function
* 9129: html search: Show search summaries when html_copy_source = False
* 9307: html search: Prevent corrections and completions in search field
* 9120: html theme: Eliminate prompt characters of code-block from copyable
text
* 9176: i18n: Emit a debug message if message catalog file not found under
:confval:`locale_dirs`
* 9414: LaTeX: Add xeCJKVerbAddon to default fvset config for Chinese documents
* 9016: linkcheck: Support checking anchors on github.com
* 9016: linkcheck: Add a new event :event:`linkcheck-process-uri` to modify
URIs before checking hyperlinks
* 6525: linkcheck: Add :confval:`linkcheck_allowed_redirects` to mark
hyperlinks that are redirected to expected URLs as "working"
* 1874: py domain: Support union types using ``|`` in info-field-list
* 9268: py domain: :confval:`python_use_unqualified_type_names` supports type
field in info-field-list
* 9097: Optimize the parallel build
* 9131: Add :confval:`nitpick_ignore_regex` to ignore nitpicky warnings using
regular expressions
* 9174: Add ``Sphinx.set_html_assets_policy`` to tell extensions to include
HTML assets in all the pages. Extensions can check this via
``Sphinx.registry.html_assets_policy``
* C++, add support for

- ``inline`` variables,
- ``consteval`` functions,
- ``constinit`` variables,
- ``char8_t``,
- ``explicit(<constant expression>)`` specifier,
- digit separators in literals, and
- constraints in placeholder type specifiers, aka. adjective syntax
 (e.g., ``Sortable auto &v``).

* C, add support for digit separators in literals.
* 9166: LaTeX: support containers in LaTeX output


Bugs fixed
----------

* 8872: autodoc: stacked singledispatches are wrongly rendered
* 8597: autodoc: a docsting having metadata only should be treated as
undocumented
* 9185: autodoc: typehints for overloaded functions and methods are inaccurate
* 9250: autodoc: The inherited method not having docstring is wrongly parsed
* 9283: autodoc: autoattribute directive failed to generate document for an
attribute not having any comment
* 9364: autodoc: single element tuple on the default argument value is wrongly
rendered
* 9362: autodoc: AttributeError is raised on processing a subclass of Tuple[()]
* 9404: autodoc: TypeError is raised on processing dict-like object (not a
class) via autoclass directive
* 9317: html: Pushing left key causes visiting the next page at the first page
* 9381: html: URL for html_favicon and html_log does not work
* 9270: html theme : pyramid theme generates incorrect logo links
* 9217: manpage: The name of manpage directory that is generated by
:confval:`man_make_section_directory` is not correct
* 9350: manpage: Fix font isn't reset after keyword at the top of samp role
* 9306: Linkcheck reports broken link when remote server closes the connection
on HEAD request
* 9280: py domain: "exceptions" module is not displayed
* 9418: py domain: a Callable annotation with no parameters
(e.g. ``Callable[[], None])`` will be rendered with a bracket missing
(``Callable[], None]``)
* 9319: quickstart: Make sphinx-quickstart exit when conf.py already exists
* 9387: xml: XML Builder ignores custom visitors
* 9224: ``:param:`` and ``:type:`` fields does not support a type containing
whitespace (ex. ``Dict[str, str]``)
* 8945: when transforming typed fields, call the specified role instead of
making an single xref. For C and C++, use the ``expr`` role for typed fields.

4.0.3

=====================================

Features added
--------------

* C, add C23 keywords ``_Decimal32``, ``_Decimal64``, and ``_Decimal128``.
* 9354: C, add :confval:`c_extra_keywords` to allow user-defined keywords
during parsing.
* Revert the removal of ``sphinx.util:force_decode()`` to become some 3rd party
extensions available again during 5.0

Bugs fixed
----------

* 9330: changeset domain: :rst:dir:`versionchanged` with contents being a list
will cause error during pdf build
* 9313: LaTeX: complex table with merged cells broken since 4.0
* 9305: LaTeX: backslash may cause Improper discretionary list pdf build error
with Japanese engines
* 9354: C, remove special macro names from the keyword list.
See also :confval:`c_extra_keywords`.
* 9322: KeyError is raised on PropagateDescDomain transform
Links

Update requests from 2.25.1 to 2.26.0.

Changelog

2.26.0

-------------------

**Improvements**

- Requests now supports Brotli compression, if either the `brotli` or
`brotlicffi` package is installed. (5783)

- `Session.send` now correctly resolves proxy configurations from both
the Session and Request. Behavior now matches `Session.request`. (5681)

**Bugfixes**

- Fixed a race condition in zip extraction when using Requests in parallel
from zip archive. (5707)

**Dependencies**

- Instead of `chardet`, use the MIT-licensed `charset_normalizer` for Python3
to remove license ambiguity for projects bundling requests. If `chardet`
is already installed on your machine it will be used instead of `charset_normalizer`
to keep backwards compatibility. (5797)

You can also install `chardet` while installing requests by
specifying `[use_chardet_on_py3]` extra as follows:

 shell
 pip install "requests[use_chardet_on_py3]"
 

Python2 still depends upon the `chardet` module.

- Requests now supports `idna` 3.x on Python 3. `idna` 2.x will continue to
be used on Python 2 installations. (5711)

**Deprecations**

- The `requests[security]` extra has been converted to a no-op install.
PyOpenSSL is no longer the recommended secure option for Requests. (5867)

- Requests has officially dropped support for Python 3.5. (5867)
Links

Update GitPython from 3.1.18 to 3.1.19.

The bot wasn't able to find a changelog for this release. Got an idea?

Links

Update elasticsearch from 7.13.2 to 7.13.4.

The bot wasn't able to find a changelog for this release. Got an idea?

Links

Update elasticsearch-dsl from 7.3.0 to 7.4.0.

Changelog

7.4.0

------------------

* Added the ``ConstantKeyword``, ``RankFeatures`` field types (`1456`_, `1465`_)
* Added the ``ScriptScore`` query type (`1464`_)
* Added ``UpdateByQueryResponse.success()`` method (`1463`_)
* Added ``return_doc_meta`` parameter to ``Document.save()`` and ``Document.update()`` for
accessing the complete API response (`1466`_)
* Added support for ``calendar_interval`` and ``fixed_interval`` to ``DateHistogramFacet`` (`1467`_)
* Added ``Document.exists()`` method (`1447`_, contributed by `dem4ply`_)
* Added support for the ``year`` interval to ``DateHistogramFacet`` (`1502`_, contributed by `nrsimha`_)
* Fixed issue where ``to_dict()`` should be called recursively on ``Search.extras`` and ``**kwargs`` (`1458`_)
* Fixed inverse of an empty ``Bool`` query should be ``MatchNone`` (`1459`_)
* Fixed issue between ``retry_on_conflict`` and optimistic concurrency control within ``Document.update()`` (`1461`_, contributed by `armando1793`_)

.. _dem4ply: https://github.com/dem4ply
.. _nrsimha: https://github.com/nrsimha
.. _armando1793: https://github.com/armando1793
.. _1447: https://github.com/elastic/elasticsearch-dsl-py/pull/1447
.. _1456: https://github.com/elastic/elasticsearch-dsl-py/pull/1456
.. _1458: https://github.com/elastic/elasticsearch-dsl-py/pull/1458
.. _1459: https://github.com/elastic/elasticsearch-dsl-py/pull/1459
.. _1461: https://github.com/elastic/elasticsearch-dsl-py/pull/1461
.. _1463: https://github.com/elastic/elasticsearch-dsl-py/pull/1463
.. _1464: https://github.com/elastic/elasticsearch-dsl-py/pull/1464
.. _1465: https://github.com/elastic/elasticsearch-dsl-py/pull/1465
.. _1466: https://github.com/elastic/elasticsearch-dsl-py/pull/1466
.. _1467: https://github.com/elastic/elasticsearch-dsl-py/pull/1467
.. _1502: https://github.com/elastic/elasticsearch-dsl-py/pull/1502
Links

Update selectolax from 0.2.12 to 0.2.13.

Changelog

0.2.13

--------------

Released

- Don't throw exception when encoding text as UTF-8 bytes fails (`40`_).
- Fix Node.attrs.items() causes (`39`_).

.. _40: https://github.com/rushter/selectolax/issues/40
.. _39: https://github.com/rushter/selectolax/issues/39
Links

Update python-dateutil from 2.8.1 to 2.8.2.

Changelog

2.8.2

==========================

Data updates
------------

- Updated tzdata version to 2021a. (gh pr 1128)


Bugfixes
--------

- Fixed a bug in the parser where non-``ValueError`` exceptions would be raised
during exception handling; this would happen, for example, if an
``IllegalMonthError`` was raised in ``dateutil`` code. Fixed by Mark Bailey.
(gh issue 981, pr 987).
- Fixed the custom ``repr`` for ``dateutil.parser.ParserError``, which was not
defined due to an indentation error. (gh issue 991, gh pr 993)
- Fixed a bug that caused ``b'`` prefixes to appear in parse_isodate exception
messages. Reported and fixed by Paul Brown (pawl) (gh pr 1122)
- Make ``isoparse`` raise when trying to parse times with inconsistent use of
`:` separator. Reported and fixed by mariocj89 (gh pr 1125).
- Fixed ``tz.gettz()`` not returning local time when passed an empty string.
Reported by labrys (gh issues 925, 926). Fixed by ffe4 (gh pr 1024)


Documentation changes
---------------------

- Rearranged parser documentation into "Functions", "Classes" and "Warnings and
Exceptions" categories. (gh issue 992, pr 994).
- Updated ``parser.parse`` documentation to reflect the switch from
``ValueError`` to ``ParserError``. (gh issue 992, pr 994).
- Fixed methods in the ``rrule`` module not being displayed in the docs. (gh pr
1025)
- Changed some relative links in the exercise documentation to refer to the
document locations in the input tree, rather than the generated HTML files in
the HTML output tree (which presumably will not exist in non-HTML output
formats). (gh pr 1078).


Misc
----

- Moved ``test_imports.py``, ``test_internals.py`` and ``test_utils.py`` to
pytest.  Reported and fixed by jpurviance (gh pr 978)
- Added project_urls for documentation and source. Patch by andriyor (gh pr
975).
- Simplified handling of bytes and bytearray in ``_parser._timelex``. Reported
and fixed by frenzymadness (gh issue 1060).
- Changed the tests against the upstream tz database to always generate fat
binaries, since until GH-590 and GH-1059 are resolved, "slim" zic binaries
will cause problems in many zones, causing the tests to fail. This also
updates ``zoneinfo.rebuild`` to always generate fat binaries. (gh pr 1076).
- Moved sdist and wheel generation to use `python-build`. Reported and fixed by
mariocj89 (gh pr 1133).
Links

Update stripe from 2.58.0 to 2.60.0.

Changelog

2.60.0

* [728](https://github.com/stripe/stripe-python/pull/728) API Updates
* Add support for `list_computed_upfront_line_items` method on resource `Quote`

2.59.0

* [727](https://github.com/stripe/stripe-python/pull/727) [#725](https://github.com/stripe/stripe-python/pull/725) Add support for new `Quote` API.
Links

Update regex from 2021.7.1 to 2021.7.6.

The bot wasn't able to find a changelog for this release. Got an idea?

Links

Update django-taggit from 1.4.0 to 1.5.1.

Changelog

1.5.1

~~~~~~~~~~~~~~~~~~

* Fix compiled Ukranian translation (which would cause a failure on load for this locale).
* Update compiled Danish translation.

1.5.0

~~~~~~~~~~~~~~~~~~

* Vendor in the `django-taggit-serializer` project (under `taggit.serializers`).
* Add Arabic translation.
* Add Ukranian translation.
Links

Update pillow from 8.3.0 to 8.3.1.

Changelog

8.3.1

------------------

- Catch OSError when checking if fp is sys.stdout 5585
[radarhere]

- Handle removing orientation from alternate types of EXIF data 5584
[radarhere]

- Make Image.__array__ take optional dtype argument 5572
[t-vi, radarhere]
Links

Update pdbpp from 0.10.2 to 0.10.3.

Changelog

0.10.3

=================================

Minor bugfix release, moving Continuous Integration from Travis/AppVeyor to
GitHub Actions, based on changes on master, but without the (more invasive)
(test) fixes for Windows.

- Fixes

- Fix hideframe decorator for Python 3.8+ (263)
- Fix hidden_frames discrepancy with IPython (426)

- Misc

- ci: move to GitHub Actions (444, 445)
- ci: use .coveragerc (304)
- qa/flake8 fixes
- test fix for newer PyPy3
Links

Update tox from 3.23.1 to 3.24.0.

Changelog

3.24.0

Bugfixes
^^^^^^^^

- ``--devenv`` no longer modifies the directory in which the ``.tox`` environment is provisioned - by :user:`isaac-ped`
`2065 <https://github.com/tox-dev/tox/issues/2065>`_
- Fix show config when the package names are not in canonical form - by :user:`gaborbernat`.
`2103 <https://github.com/tox-dev/tox/issues/2103>`_


Documentation
^^^^^^^^^^^^^

- Extended environment variables section - by :user:`majiang`
`2036 <https://github.com/tox-dev/tox/issues/2036>`_


Miscellaneous
^^^^^^^^^^^^^

- ``tox`` no longer shows deprecation warnings for ``distutils.sysconfig`` on
Python 3.10 - by :user:`9999years`
`2100 <https://github.com/tox-dev/tox/issues/2100>`_
Links

@astrojuanlu
Copy link
Contributor

Careful with pip: pypa/pip#10201 (comment)

@astrojuanlu
Copy link
Contributor

Also, Sphinx 4.1.2 was just released hours ago. For now there is 1 regression sphinx-doc/sphinx#9504

@humitos
Copy link
Member

humitos commented Jul 27, 2021

This version of pip is only used for our own application, not for the builds. So, I don't think it's a problem. In any case, we could ignore it on pyup if we think it's better.

Re Sphinx version: probably the same. If our documentation is building and tests are passing I'd say it's safe to merge.

Note that all the tests are failing because of a conflict with the migrations.

@pyup-bot
Copy link
Collaborator Author

pyup-bot commented Aug 9, 2021

Closing this in favor of #8401

@pyup-bot pyup-bot closed this Aug 9, 2021
@humitos humitos deleted the pyup/scheduled-update-2021-07-26 branch August 9, 2021 19:59
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

3 participants