Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

build(deps): bump the deps group across 1 directory with 2 updates #42

Merged
merged 1 commit into from
Jan 8, 2025

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jan 8, 2025

Bumps the deps group with 2 updates in the / directory: pyhanko and ruff.

Updates pyhanko from 0.25.1 to 0.25.3

Release notes

Sourced from pyhanko's releases.

pyHanko 0.25.3 beta

The release artifacts have been published to PyPI. Documentation is available on ReadTheDocs.

Change log

The release notes for the 0.25.3 release are available on the Release History page

pyHanko 0.25.2 beta

The release artifacts have been published to PyPI. Documentation is available on ReadTheDocs.

Change log

The release notes for the 0.25.2 release are available on the Release History page

Changelog

Sourced from pyhanko's changelog.


Release history


.. _release-0.25.3:

Release date: 2024-11-17

Dependency changes

  • Workflow dependency bumps
  • Set aiohttp upper bound to 3.12
  • Bump pyhanko-certvalidator to 0.26.5
  • Bump certomancer to 0.12.3

Note: these changes make pyHanko compatible with the (unreleased) API change in asn1crypto [#230](https://github.com/MatthiasValvekens/pyHanko/issues/230) <https://github.com/wbond/asn1crypto/issues/230>_, which is nevertheless already being shipped in some distros.

.. _release-0.25.2:

Release date: 2024-11-11

Dependency changes

  • Bump minimal cryptography version to 43.0.3.
  • Update uharfbuzz upper bound to 0.42.0.
  • Add Python 3.13 to the package metadata & include it in CI.
  • Some test dependencies bumped.

Bugs fixed

  • Properly propagate strict=False in post-signing instructions.

.. _release-0.25.1:

Release date: 2024-07-18

Bugs fixed

  • Align usage of SHAKE256 OIDs with Ed448 with RFC 8419

... (truncated)

Commits
  • b053e71 0.25.3 release
  • 4d3bb32 Ensure live-test installs certomancer with web-api
  • 6933488 Bump pyhanko-certvalidator and certomancer
  • c999c82 Merge pull request #491 from MatthiasValvekens/dependabot/pip/aiohttp-gte-3.9...
  • afee983 Update aiohttp requirement from <3.11,>=3.9 to >=3.9,<3.12
  • 848dc8c Merge pull request #449 from MatthiasValvekens/dependabot/github_actions/sigs...
  • b38c343 Bump sigstore/gh-action-sigstore-python from 2.1.1 to 3.0.0
  • 71e119a Bump version number
  • f6c3471 0.25.2 release
  • fc500a0 Merge pull request #487 from MatthiasValvekens/feature/strict-flag-post-signing
  • Additional commits viewable in compare view

Updates ruff from 0.8.1 to 0.8.6

Release notes

Sourced from ruff's releases.

0.8.6

Release Notes

Preview features

  • [format]: Preserve multiline implicit concatenated strings in docstring positions (#15126)
  • [ruff] Add rule to detect empty literal in deque call (RUF025) (#15104)
  • [ruff] Avoid reporting when ndigits is possibly negative (RUF057) (#15234)

Rule changes

  • [flake8-todos] remove issue code length restriction (TD003) (#15175)
  • [pyflakes] Ignore errors in @no_type_check string annotations (F722, F821) (#15215)

CLI

  • Show errors for attempted fixes only when passed --verbose (#15237)

Bug fixes

  • [ruff] Avoid syntax error when removing int over multiple lines (RUF046) (#15230)
  • [pyupgrade] Revert "Add all PEP-585 names to UP006 rule" (#15250)

Contributors

Install ruff 0.8.6

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://github.com/astral-sh/ruff/releases/download/0.8.6/ruff-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy ByPass -c "irm https://github.com/astral-sh/ruff/releases/download/0.8.6/ruff-installer.ps1 | iex"

... (truncated)

Changelog

Sourced from ruff's changelog.

0.8.6

Preview features

  • [format]: Preserve multiline implicit concatenated strings in docstring positions (#15126)
  • [ruff] Add rule to detect empty literal in deque call (RUF025) (#15104)
  • [ruff] Avoid reporting when ndigits is possibly negative (RUF057) (#15234)

Rule changes

  • [flake8-todos] remove issue code length restriction (TD003) (#15175)
  • [pyflakes] Ignore errors in @no_type_check string annotations (F722, F821) (#15215)

CLI

  • Show errors for attempted fixes only when passed --verbose (#15237)

Bug fixes

  • [ruff] Avoid syntax error when removing int over multiple lines (RUF046) (#15230)
  • [pyupgrade] Revert "Add all PEP-585 names to UP006 rule" (#15250)

0.8.5

Preview features

  • [airflow] Extend names moved from core to provider (AIR303) (#15145, #15159, #15196, #15216)
  • [airflow] Extend rule to check class attributes, methods, arguments (AIR302) (#15054, #15083)
  • [fastapi] Update FAST002 to check keyword-only arguments (#15119)
  • [flake8-type-checking] Disable TC006 and TC007 in stub files (#15179)
  • [pylint] Detect nested methods correctly (PLW1641) (#15032)
  • [ruff] Detect more strict-integer expressions (RUF046) (#14833)
  • [ruff] Implement falsy-dict-get-fallback (RUF056) (#15160)
  • [ruff] Implement unnecessary-round (RUF057) (#14828)

Rule changes

  • Visit PEP 764 inline TypedDict keys as non-type-expressions (#15073)
  • [flake8-comprehensions] Skip C416 if comprehension contains unpacking (#14909)
  • [flake8-pie] Allow cast(SomeType, ...) (PIE796) (#15141)
  • [flake8-simplify] More precise inference for dictionaries (SIM300) (#15164)
  • [flake8-use-pathlib] Catch redundant joins in PTH201 and avoid syntax errors (#15177)
  • [pycodestyle] Preserve original value format (E731) (#15097)
  • [pydocstyle] Split on first whitespace character (D403) (#15082)
  • [pyupgrade] Add all PEP-585 names to UP006 rule (#5454)

Configuration

  • [flake8-type-checking] Improve flexibility of runtime-evaluated-decorators (#15204)
  • [pydocstyle] Add setting to ignore missing documentation for *args and **kwargs parameters (D417) (#15210)

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the deps group with 2 updates in the / directory: [pyhanko](https://github.com/MatthiasValvekens/pyHanko) and [ruff](https://github.com/astral-sh/ruff).


Updates `pyhanko` from 0.25.1 to 0.25.3
- [Release notes](https://github.com/MatthiasValvekens/pyHanko/releases)
- [Changelog](https://github.com/MatthiasValvekens/pyHanko/blob/master/docs/changelog.rst)
- [Commits](MatthiasValvekens/pyHanko@v0.25.1...v0.25.3)

Updates `ruff` from 0.8.1 to 0.8.6
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.8.1...0.8.6)

---
updated-dependencies:
- dependency-name: pyhanko
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: deps
- dependency-name: ruff
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: deps
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Jan 8, 2025
@benjamin-awd benjamin-awd merged commit 29ad646 into main Jan 8, 2025
2 checks passed
@dependabot dependabot bot deleted the dependabot/pip/deps-3fddbf6be3 branch January 8, 2025 14:05
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file python Pull requests that update Python code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant