Bump the python-packages group across 1 directory with 11 updates #91

dependabot · 2024-11-11T01:05:46Z

Bumps the python-packages group with 11 updates in the / directory:

Package	From	To
cryptography	`42.0.7`	`43.0.3`
fastapi[all]	`0.111.0`	`0.115.4`
psycopg2	`2.9.9`	`2.9.10`
pyjwt	`2.8.0`	`2.9.0`
sqlalchemy	`2.0.30`	`2.0.36`
uvicorn	`0.30.1`	`0.32.0`
ruff	`0.4.8`	`0.7.3`
mypy	`1.10.0`	`1.13.0`
types-requests	`2.32.0.20240602`	`2.32.0.20241016`
pytest	`8.2.1`	`8.3.3`
pytest-cov	`5.0.0`	`6.0.0`

Updates cryptography from 42.0.7 to 43.0.3

Changelog

Sourced from cryptography's changelog.

43.0.3 - 2024-10-18
* Fixed release metadata for ``cryptography-vectors``
.. _v43-0-2:
43.0.2 - 2024-10-18
Fixed compilation when using LibreSSL 4.0.0.

.. _v43-0-1:

43.0.1 - 2024-09-03
* Updated Windows, macOS, and Linux wheels to be compiled with OpenSSL 3.3.2.
.. _v43-0-0:
43.0.0 - 2024-07-20
BACKWARDS INCOMPATIBLE: Support for OpenSSL less than 1.1.1e has been removed. Users on older version of OpenSSL will need to upgrade.

BACKWARDS INCOMPATIBLE: Dropped support for LibreSSL < 3.8.

Updated Windows, macOS, and Linux wheels to be compiled with OpenSSL 3.3.1.

Updated the minimum supported Rust version (MSRV) to 1.65.0, from 1.63.0.

:func:~cryptography.hazmat.primitives.asymmetric.rsa.generate_private_key now enforces a minimum RSA key size of 1024-bit. Note that 1024-bit is still considered insecure, users should generally use a key size of 2048-bits.

:func:~cryptography.hazmat.primitives.serialization.pkcs7.serialize_certificates now emits ASN.1 that more closely follows the recommendations in :rfc:2315.

Added new :doc:/hazmat/decrepit/index module which contains outdated and insecure cryptographic primitives. :class:~cryptography.hazmat.primitives.ciphers.algorithms.CAST5, :class:~cryptography.hazmat.primitives.ciphers.algorithms.SEED, :class:~cryptography.hazmat.primitives.ciphers.algorithms.IDEA, and :class:~cryptography.hazmat.primitives.ciphers.algorithms.Blowfish, which were deprecated in 37.0.0, have been added to this module. They will be removed from the cipher module in 45.0.0.

Moved :class:~cryptography.hazmat.primitives.ciphers.algorithms.TripleDES and :class:~cryptography.hazmat.primitives.ciphers.algorithms.ARC4 into :doc:/hazmat/decrepit/index and deprecated them in the cipher module. They will be removed from the cipher module in 48.0.0.

Added support for deterministic :class:~cryptography.hazmat.primitives.asymmetric.ec.ECDSA (:rfc:6979)

Added support for client certificate verification to the :mod:X.509 path validation <cryptography.x509.verification> APIs in the

... (truncated)

Commits

c2afb4f Backport metadata fix for vectors (#11797)
9a3cdb5 43.0.2 release: fix libressl 4.0.0 (#11796)
a773387 bump for 43.0.1 (#11533)
0393fef Backport setuptools version ban (#11526)
6687bab Bump openssl from 0.10.65 to 0.10.66 in /src/rust (#11320) (#11324)
ebf14f2 bump for 43.0.0 and update changelog (#11311)
42788a0 Fix exchange with keys that had Q automatically computed (#11309)
2dbdfb8 don't assign unused name (#11310)
ccc66e6 Bump openssl from 0.10.64 to 0.10.65 in /src/rust (#11308)
4310c87 Bump sphinxcontrib-qthelp from 1.0.7 to 1.0.8 (#11307)
Additional commits viewable in compare view

Updates fastapi[all] from 0.111.0 to 0.115.4

Release notes

Sourced from fastapi[all]'s releases.

0.115.4

Refactors

♻️ Update logic to import and check python-multipart for compatibility with newer version. PR #12627 by @tiangolo.

Docs

📝 Update includes in docs/fr/docs/tutorial/body.md. PR #12596 by @kantandane.

📝 Update includes in docs/fr/docs/tutorial/debugging.md. PR #12595 by @kantandane.

📝 Update includes in docs/fr/docs/tutorial/query-params-str-validations.md. PR #12591 by @kantandane.

📝 Update includes in docs/fr/docs/tutorial/query-params.md. PR #12589 by @kantandane.

📝 Update includes in docs/en/tutorial/body-fields.md. PR #12588 by @lucaromagnoli.

📝 Update includes in docs/de/docs/tutorial/response-status-code.md. PR #12585 by @abejaranoh.

📝 Update includes in docs/en/docs/tutorial/body.md. PR #12586 by @lucaromagnoli.

📝 Update includes in docs/en/docs/advanced/behind-a-proxy.md. PR #12583 by @imjuanleonard.

📝 Update includes syntax for docs/pl/docs/tutorial/first-steps.md. PR #12584 by @sebkozlo.

📝 Update includes in docs/en/docs/advanced/middleware.md. PR #12582 by @montanarograziano.

📝 Update includes in docs/en/docs/advanced/additional-status-codes.md. PR #12577 by @krishnamadhavan.

📝 Update includes in docs/en/docs/advanced/advanced-dependencies.md. PR #12578 by @krishnamadhavan.

📝 Update includes in docs/en/docs/advanced/additional-responses.md. PR #12576 by @krishnamadhavan.

📝 Update includes in docs/en/docs/tutorial/static-files.md. PR #12575 by @lucaromagnoli.

📝 Update includes in docs/en/docs/advanced/async-tests.md. PR #12568 by @krishnamadhavan.

📝 Update includes in docs/pt/docs/advanced/behind-a-proxy.md. PR #12563 by @asmioglou.

📝 Update includes in docs/de/docs/advanced/security/http-basic-auth.md. PR #12561 by @Nimitha-jagadeesha.

📝 Update includes in docs/en/docs/tutorial/background-tasks.md. PR #12559 by @FarhanAliRaza.

📝 Update includes in docs/fr/docs/python-types.md. PR #12558 by @Ismailtlem.

📝 Update includes in docs/en/docs/how-to/graphql.md. PR #12564 by @philipokiokio.

📝 Update includes in docs/en/docs/how-to/extending-openapi.md. PR #12562 by @philipokiokio.

📝 Update includes for docs/en/docs/how-to/configure-swagger-ui.md. PR #12556 by @tiangolo.

📝 Update includes for docs/en/docs/how-to/separate-openapi-schemas.md. PR #12555 by @tiangolo.

📝 Update includes for docs/en/docs/advanced/security/http-basic-auth.md. PR #12553 by @tiangolo.

📝 Update includes in docs/en/docs/tutorial/first-steps.md. PR #12552 by @tiangolo.

📝 Update includes in docs/en/docs/python-types.md. PR #12551 by @tiangolo.

📝 Fix link in OAuth2 docs. PR #12550 by @tiangolo.

📝 Add External Link: FastAPI do Zero. PR #12533 by @rennerocha.

📝 Fix minor typos. PR #12516 by @kkirsche.

🌐 Fix rendering issue in translations. PR #12509 by @alejsdev.

Translations

📝 Update includes in docs/de/docs/advanced/async-tests.md. PR #12567 by @imjuanleonard.

🌐 Add Portuguese translation for docs/pt/docs/tutorial/sql-databases.md. PR #12530 by @ilacftemp.

🌐 Add Korean translation for docs/ko/docs/benchmarks.md. PR #12540 by @Limsunoh.

🌐 Add Portuguese translation for docs/pt/docs/how-to/separate-openapi-schemas.md. PR #12518 by @ilacftemp.

🌐 Update Traditional Chinese translation for docs/zh-hant/docs/deployment/index.md. PR #12521 by @codingjenny.

🌐 Update Traditional Chinese translation for docs/zh-hant/docs/deployment/cloud.md. PR #12522 by @codingjenny.

🌐 Update Traditional Chinese translation for docs/zh-hant/docs/how-to/index.md. PR #12523 by @codingjenny.

🌐 Update Traditional Chinese translation for docs/zh-hant/docs/tutorial/index.md. PR #12524 by @codingjenny.

🌐 Add Traditional Chinese translation for docs/zh-hant/docs/how-to/index.md. PR #12468 by @codingjenny.

🌐 Add Traditional Chinese translation for docs/zh-hant/docs/tutorial/index.md. PR #12466 by @codingjenny.

... (truncated)

Commits

31887b1 🔖 Release version 0.115.4
b270ff1 📝 Update release notes
b31cbbf ♻️ Update logic to import and check python-multipart for compatibility with...
aee7674 📝 Update release notes
4e6b1ac 📝 Update includes in docs/fr/docs/tutorial/body.md (#12596)
9b1e5f2 📝 Update release notes
60aba02 📝 Update includes in docs/fr/docs/tutorial/debugging.md (#12595)
2a4cf17 📝 Update release notes
453f559 📝 Update includes in docs/fr/docs/tutorial/query-params-str-validations.md ...
af269cd 📝 Update release notes
Additional commits viewable in compare view

Updates psycopg2 from 2.9.9 to 2.9.10

Changelog

Sourced from psycopg2's changelog.

Current release

What's new in psycopg 2.9.10 ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

Add support for Python 3.13.

Receive notifications on commit (:ticket:[#1728](https://github.com/psycopg/psycopg2/issues/1728)).

~psycopg2.errorcodes map and ~psycopg2.errors classes updated to PostgreSQL 17.

Drop support for Python 3.7.

What's new in psycopg 2.9.9 ^^^^^^^^^^^^^^^^^^^^^^^^^^^

Add support for Python 3.12.

Drop support for Python 3.6.

What's new in psycopg 2.9.8 ^^^^^^^^^^^^^^^^^^^^^^^^^^^

Wheel package bundled with PostgreSQL 16 libpq in order to add support for recent features, such as sslcertmode.

What's new in psycopg 2.9.7 ^^^^^^^^^^^^^^^^^^^^^^^^^^^

Fix propagation of exceptions raised during module initialization (:ticket:[#1598](https://github.com/psycopg/psycopg2/issues/1598)).

Fix building when pg_config returns an empty string (:ticket:[#1599](https://github.com/psycopg/psycopg2/issues/1599)).

Wheel package bundled with OpenSSL 1.1.1v.

What's new in psycopg 2.9.6 ^^^^^^^^^^^^^^^^^^^^^^^^^^^

Package manylinux 2014 for aarch64 and ppc64le platforms, in order to include libpq 15 in the binary package (:ticket:[#1396](https://github.com/psycopg/psycopg2/issues/1396)).

Wheel package bundled with OpenSSL 1.1.1t.

What's new in psycopg 2.9.5 ^^^^^^^^^^^^^^^^^^^^^^^^^^^

Add support for Python 3.11.

Add support for rowcount in MERGE statements in binary packages (:ticket:[#1497](https://github.com/psycopg/psycopg2/issues/1497)).

... (truncated)

Commits

See full diff in compare view

Updates pyjwt from 2.8.0 to 2.9.0

Release notes

Sourced from pyjwt's releases.

2.9.0

What's Changed

[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci in jpadilla/pyjwt#905

[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci in jpadilla/pyjwt#909

Add support for Python 3.12 by @hugovk in jpadilla/pyjwt#910

[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci in jpadilla/pyjwt#911

Fix an unnecessary str concat by @sirosen in jpadilla/pyjwt#904

Update jwt-api to accept either a string or list of strings for issuer validation by @mattpollak in jpadilla/pyjwt#913

Bump actions/checkout from 3 to 4 by @dependabot in jpadilla/pyjwt#916

[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci in jpadilla/pyjwt#917

[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci in jpadilla/pyjwt#922

[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci in jpadilla/pyjwt#926

Bump actions/setup-python from 4 to 5 by @dependabot in jpadilla/pyjwt#931

Bump hynek/build-and-inspect-python-package from 1 to 2 by @dependabot in jpadilla/pyjwt#935

docs/api: document strict_aud on decode_complete by @woodruffw in jpadilla/pyjwt#923

chore: fix docs step by @jpadilla in jpadilla/pyjwt#950

[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci in jpadilla/pyjwt#953

Add coverage and improve performance of is_ssh_key by @bdraco in jpadilla/pyjwt#940

Decode with PyJWK by @luhn in jpadilla/pyjwt#886

Remove an unused variable from an example code block by @kenkoooo in jpadilla/pyjwt#958

Handle load_pem_public_key ValueError by @CollinEMac in jpadilla/pyjwt#952

[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci in jpadilla/pyjwt#960

Raise exception when required cryptography dependency is missing by @tobloef in jpadilla/pyjwt#963

[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci in jpadilla/pyjwt#965

Add 2.9.0 changelog. Fixes #949 by @benvdh in jpadilla/pyjwt#967

New Contributors

@mattpollak made their first contribution in jpadilla/pyjwt#913

@bdraco made their first contribution in jpadilla/pyjwt#940

@luhn made their first contribution in jpadilla/pyjwt#886

@kenkoooo made their first contribution in jpadilla/pyjwt#958

@CollinEMac made their first contribution in jpadilla/pyjwt#952

@tobloef made their first contribution in jpadilla/pyjwt#963

@benvdh made their first contribution in jpadilla/pyjwt#967

Full Changelog: jpadilla/pyjwt@2.8.0...2.9.0

Changelog

Sourced from pyjwt's changelog.

`v2.9.0 <https://github.com/jpadilla/pyjwt/compare/2.8.0...2.9.0>`__

Changed


- Drop support for Python 3.7 (EOL) by @hugovk in `[#910](https://github.com/jpadilla/pyjwt/issues/910) <https://github.com/jpadilla/pyjwt/pull/910>`__
- Allow JWT issuer claim validation to accept a list of strings too by @mattpollak in `[#913](https://github.com/jpadilla/pyjwt/issues/913) <https://github.com/jpadilla/pyjwt/pull/913>`__
Fixed

- Fix unnecessary string concatenation by @sirosen in `[#904](https://github.com/jpadilla/pyjwt/issues/904) &lt;https://github.com/jpadilla/pyjwt/pull/904&gt;`__
- Fix docs for ``jwt.decode_complete`` to include ``strict_aud`` option by @woodruffw in `[#923](https://github.com/jpadilla/pyjwt/issues/923) &lt;https://github.com/jpadilla/pyjwt/pull/923&gt;`__
- Fix docs step by @jpadilla in `[#950](https://github.com/jpadilla/pyjwt/issues/950) &lt;https://github.com/jpadilla/pyjwt/pull/950&gt;`__
- Fix: Remove an unused variable from example code block by @kenkoooo in `[#958](https://github.com/jpadilla/pyjwt/issues/958) &lt;https://github.com/jpadilla/pyjwt/pull/958&gt;`__
Added



Add support for Python 3.12 by @hugovk in [#910](https://github.com/jpadilla/pyjwt/issues/910) &lt;https://github.com/jpadilla/pyjwt/pull/910&gt;__
Improve performance of is_ssh_key + add unit test by @bdraco in [#940](https://github.com/jpadilla/pyjwt/issues/940) &lt;https://github.com/jpadilla/pyjwt/pull/940&gt;__
Allow jwt.decode() to accept a PyJWK object by @luhn in [#886](https://github.com/jpadilla/pyjwt/issues/886) &lt;https://github.com/jpadilla/pyjwt/pull/886&gt;__
Make algorithm_name attribute available on PyJWK by @luhn in [#886](https://github.com/jpadilla/pyjwt/issues/886) &lt;https://github.com/jpadilla/pyjwt/pull/886&gt;__
Raise InvalidKeyError on invalid PEM keys to be compatible with cryptography 42.x.x by @CollinEMac in [#952](https://github.com/jpadilla/pyjwt/issues/952) &lt;https://github.com/jpadilla/pyjwt/pull/952&gt;__
Raise an exception when required cryptography dependency is missing by @tobloef in &lt;https://github.com/jpadilla/pyjwt/pull/963&gt;__

Commits

868cf4a Add 2.9.0 changelog. Fixes #949 (#967)
304a3df [pre-commit.ci] pre-commit autoupdate (#965)
527fec2 Raise exception when required cryptography dependency is missing (#963)
18a50be [pre-commit.ci] pre-commit autoupdate (#960)
4703f87 Handle load_pem_public_key ValueError (#952)
9dc732f Update usage.rst (#958)
ab8176a Decode with PyJWK (#886)
c0a071d chore: update actions/download-artifact
2afbe32 Add coverage and improve performance of is_ssh_key (#940)
97345a7 [pre-commit.ci] pre-commit autoupdate (#953)
Additional commits viewable in compare view

Updates sqlalchemy from 2.0.30 to 2.0.36

Release notes

Sourced from sqlalchemy's releases.

2.0.36

Released: October 15, 2024

orm

[orm] [usecase] Added new parameter _orm.mapped_column.hash to ORM constructs such as _orm.mapped_column(), _orm.relationship(), etc., which is interpreted for ORM Native Dataclasses in the same way as other dataclass-specific field parameters.

References: #11923

[orm] [bug] Fixed bug in ORM bulk update/delete where using RETURNING with bulk update/delete in combination with populate_existing would fail to accommodate the populate_existing option.

References: #11912

[orm] [bug] Continuing from #11912, columns marked with mapped_column.onupdate, mapped_column.server_onupdate, or Computed are now refreshed in ORM instances when running an ORM enabled UPDATE with WHERE criteria, even if the statement does not use RETURNING or populate_existing.

References: #11917

[orm] [bug] Fixed regression caused by fixes to joined eager loading in #11449 released in 2.0.31, where a particular joinedload case could not be asserted correctly. We now have an example of that case so the assertion has been repaired to allow for it.

References: #11965

[orm] [bug] Improved the error message emitted when trying to map as dataclass a class while also manually providing the __table__ attribute. This usage is currently not supported.

References: #11973

[orm] [bug] Refined the check which the ORM lazy loader uses to detect "this would be loading by primary key and the primary key is NULL, skip loading" to take into account the current setting for the orm.Mapper.allow_partial_pks parameter. If this parameter is False, then a composite PK value that has partial NULL elements should also be skipped. This can apply to some composite overlapping foreign key configurations.

... (truncated)

Commits

See full diff in compare view

Updates uvicorn from 0.30.1 to 0.32.0

Release notes

Sourced from uvicorn's releases.

Version 0.32.0

Added

Officially support Python 3.13 (#2482)

Warn when max_request_limit is exceeded (#2430)

Full Changelog: encode/uvicorn@0.31.1...0.32.0

Version 0.31.1

Fixed

Support WebSockets 0.13.1 #2471

Restore support for [*] in trusted hosts #2480

Add PathLike[str] type hint for ssl_keyfile #2481

Full Changelog: encode/uvicorn@0.31.0...0.31.1

Version 0.31.0

Added

Improve ProxyHeadersMiddleware (#2468) and (#2231):

Fix the host for requests from clients running on the proxy server itself.

Fallback to host that was already set for empty x-forwarded-for headers.

Also allow specifying IP Networks as trusted hosts. This greatly simplifies deployments on docker swarm/Kubernetes, where the reverse proxy might have a dynamic IP.

This includes support for IPv6 Address/Networks.

Full Changelog: encode/uvicorn@0.30.6...0.31.0

Version 0.30.6

Fixed

Don't warn when upgrade is not WebSocket and depedencies are installed (#2360)

Full Changelog: encode/uvicorn@0.30.5...0.30.6

Version 0.30.5

Fixed

Don't close connection before receiving body on H11 (#2408)

... (truncated)

Changelog

Sourced from uvicorn's changelog.

0.32.0 (2024-10-15)

Added

Officially support Python 3.13 (#2482)

Warn when max_request_limit is exceeded (#2430)

0.31.1 (2024-10-09)

Fixed

Support WebSockets 0.13.1 (#2471)

Restore support for [*] in trusted hosts (#2480)

Add PathLike[str] type hint for ssl_keyfile (#2481)

0.31.0 (2024-09-27)

Added

Improve ProxyHeadersMiddleware (#2468) and (#2231):

Fix the host for requests from clients running on the proxy server itself.

Fallback to host that was already set for empty x-forwarded-for headers.

Also allow to specify IP Networks as trusted hosts. This greatly simplifies deployments on docker swarm/kubernetes, where the reverse proxy might have a dynamic IP.

This includes support for IPv6 Address/Networks.

0.30.6 (2024-08-13)

Fixed

Don't warn when upgrade is not WebSocket and depedencies are installed (#2360)

0.30.5 (2024-08-02)

Fixed

Don't close connection before receiving body on H11 (#2408)

0.30.4 (2024-07-31)

Fixed

Close connection when h11 sets client state to MUST_CLOSE (#2375)

0.30.3 (2024-07-20)

Fixed

Suppress KeyboardInterrupt from CLI and programmatic usage (#2384)

... (truncated)

Commits

fe39100 Version 0.32.0 (#2485)
967a2dc Support Python 3.13 (#2482)
079f07a feat(server): log warning when max request limit is exceeded (#2430)
137f88e Version 0.31.1 (#2483)
27d976a Add PathLike[str] type hint for ssl_keyfile (#2481)
1ddd250 Bump the python-packages group with 10 updates (#2478)
108b1c9 docs: fix configuration option for trusting forwarded IPs (#2479)
a1783d8 Add support for [*] in trusted hosts (#2480)
6ffaaf7 Update link to Hypercorn project (#2474)
c7668ce Upgrade websockets to 0.13.1 (#2471)
Additional commits viewable in compare view

Updates ruff from 0.4.8 to 0.7.3

Release notes

Sourced from ruff's releases.

0.7.3

Release Notes

Preview features

Formatter: Disallow single-line implicit concatenated strings (#13928)

[flake8-pyi] Include all Python file types for PYI006 and PYI066 (#14059)

[flake8-simplify] Implement split-of-static-string (SIM905) (#14008)

[refurb] Implement subclass-builtin (FURB189) (#14105)

[ruff] Improve diagnostic messages and docs (RUF031, RUF032, RUF034) (#14068)

Rule changes

Detect items that hash to same value in duplicate sets (B033, PLC0208) (#14064)

[eradicate] Better detection of IntelliJ language injection comments (ERA001) (#14094)

[flake8-pyi] Add autofix for docstring-in-stub (PYI021) (#14150)

[flake8-pyi] Update duplicate-literal-member (PYI062) to alawys provide an autofix (#14188)

[pyflakes] Detect items that hash to same value in duplicate dictionaries (F601) (#14065)

[ruff] Fix false positive for decorators (RUF028) (#14061)

Bug fixes

Avoid parsing joint rule codes as distinct codes in # noqa (#12809)

[eradicate] ignore # language= in commented-out-code rule (ERA001) (#14069)

[flake8-bugbear] - do not run mutable-argument-default on stubs (B006) (#14058)

[flake8-builtins] Skip lambda expressions in builtin-argument-shadowing (A002) (#14144)

[flake8-comprehension] Also remove trailing comma while fixing C409 and C419 (#14097)

[flake8-simplify] Allow open without context manager in return statement (SIM115) (#14066)

[pylint] Respect hash-equivalent literals in iteration-over-set (PLC0208) (#14063)

[pylint] Update known dunder methods for Python 3.13 (PLW3201) (#14146)

[pyupgrade] - ignore kwarg unpacking for UP044 (#14053)

[refurb] Parse more exotic decimal strings in verbose-decimal-constructor (FURB157) (#14098)

Documentation

Add links to missing related options within rule documentations (#13971)

Add rule short code to mkdocs tags to allow searching via rule codes (#14040)

Install ruff 0.7.3

Install prebuilt binaries via shell script
curl --proto '=https' --tlsv1.2 -LsSf https://github.com/astral-sh/ruff/releases/download/0.7.3/ruff-installer.sh | sh
Install prebuilt binaries via powershell script
powershell -ExecutionPolicy ByPass -c "irm https://github.com/astral-sh/ruff/releases/download/0.7.3/ruff-installer.ps1 | iex"
</tr></table> 

... (truncated)

Changelog

Sourced from ruff's changelog.

0.7.3

Preview features

Formatter: Disallow single-line implicit concatenated strings (#13928)

[flake8-pyi] Include all Python file types for PYI006 and PYI066 (#14059)

[flake8-simplify] Implement split-of-static-string (SIM905) (#14008)

[refurb] Implement subclass-builtin (FURB189) (#14105)

[ruff] Improve diagnostic messages and docs (RUF031, RUF032, RUF034) (#14068)

Rule changes

Detect items that hash to same value in duplicate sets (B033, PLC0208) (#14064)

[eradicate] Better detection of IntelliJ language injection comments (ERA001) (#14094)

[flake8-pyi] Add autofix for docstring-in-stub (PYI021) (#14150)

[flake8-pyi] Update duplicate-literal-member (PYI062) to alawys provide an autofix (#14188)

[pyflakes] Detect items that hash to same value in duplicate dictionaries (F601) (#14065)

[ruff] Fix false positive for decorators (RUF028) (#14061)

Bug fixes

Avoid parsing joint rule codes as distinct codes in # noqa (#12809)

[eradicate] ignore # language= in commented-out-code rule (ERA001) (#14069)

[flake8-bugbear] - do not run mutable-argument-default on stubs (B006) (#14058)

[flake8-builtins] Skip lambda expressions in builtin-argument-shadowing (A002) (#14144)

[flake8-comprehension] Also remove trailing comma while fixing C409 and C419 (#14097)

[flake8-simplify] Allow open without context manager in return statement (SIM115) (#14066)

[pylint] Respect hash-equivalent literals in iteration-over-set (PLC0208) (#14063)

[pylint] Update known dunder methods for Python 3.13 (PLW3201) (#14146)

[pyupgrade] - ignore kwarg unpacking for UP044 (#14053)

[refurb] Parse more exotic decimal strings in verbose-decimal-constructor (FURB157) (#14098)

Documentation

Add links to missing related options within rule documentations (#13971)

Add rule short code to mkdocs tags to allow searching via rule codes (#14040)

0.7.2

Preview features

Fix formatting of single with-item with trailing comment (#14005)

[pyupgrade] Add PEP 646 Unpack conversion to * with fix (UP044) (#13988)

Rule changes

Regenerate known_stdlibs.rs with stdlibs 2024.10.25 (#13963)

[flake8-no-pep420] Skip namespace package enforcement for PEP 723 scripts (INP001) (#13974)

Server

... (truncated)

Commits

fbf140a Bump version to 0.7.3 (#14197)
670f958 [red-knot] Fix intersection simplification for ~Any/~Unknown (#14195)
fed35a2 [red-knot] Fix is_assignable_to for unions (#14196)
d1ef418 Docs: tweak rules documentation (#14180)
272d24b [flake8-pyi] Add a fix for duplicate-literal-member (#14188)
2624249 [red-knot] Minor: fix Literal[True] <: int (#14177)
4b08d17 [red-knot] Add a new Type::KnownInstanceType variant (#14155)
5b6169b [red-knot] Minor fix in intersection type comment (#14176)
2040e93 [flake8-logging-format] Fix invalid formatting value in docs of `logging-ex...
794eb88 [flake8-bandit] Typo in docs suspicious-pickle-import (S403) (#14175)
Additional commits viewable in compare view

Updates mypy from 1.10.0 to 1.13.0

Changelog

Sourced from mypy's changelog.

Mypy Release Notes

Next release

Change to enum membership semantics

As per the updated typing specification for enums, enum members must be left unannotated.
class Pet(Enum):
    CAT = 1  # Member attribute
    DOG = 2  # Member attribute
    WOLF: int = 3  # New error: Enum members must be left unannotated
species: str  # Considered a non-member attribute
In particular, the specification change can result in issues in type stubs (.pyi files), since historically it was common to leave the value absent:
# In a type stub (.pyi file)
class Pet(Enum):
# Change in semantics: previously considered members, now non-member attributes
CAT: int
DOG: int
# Mypy will now issue a warning if it detects this situation in type stubs:
# &gt; Detected enum &quot;Pet&quot; in a type stub with zero members.
# &gt; There is a chance this is due to a recent change in the semantics of enum membership.
# &gt; If so, use `member = value` to mark an enum member, instead of `member: type`

class Pet(Enum):
# As per the specification, you should now do one of the following:
DOG = 1  # Member attribute with value 1 and known type
WOLF = cast(int, ...)  # Member attribute with unknown value but known type
LION = ...  # Member attribute with unknown value and unknown type
Contributed by Terence Honles in PR 17207 and Shantanu Jain in PR 18068.

Mypy 1.13

We’ve just uploaded mypy 1.13 to the Python Package Index (PyPI). Mypy is a static type checker for Python. You can install it as follows:
python3 -m pip install -U mypy

... (truncated)

Commits

eb31034 Bump version to 1.13.0
2eeb588 Update changelog for 1.12.1 (#17999)
bc0386b Changelog for 1.13 (#18000)
5c4d2db Add faster-cache extra, test in CI (#17978)
854ad18 Make is_sub_path faster (#17962)
50aa4ca Speed up stubs suggestions (#17965)
7c27808 Use orjson instead of json, when available (#17955)
2cd2406 Use fast path in modulefinder more often (#17950)
e20aaee Let mypyc optimise os.path.join (#17949)
159974c Use sha1 for hashing (#17953)
Additional commits viewable in compare view

Updates types-requests from 2.32.0.20240602 to 2.32.0.20241016

Commits

See full diff in compare view

Updates pytest from 8.2.1 to 8.3.3

Release notes

Sourced from pytest's releases.

8.3.3

pytest 8.3.3 (2024-09-09)

Bug fixes

#12446: Avoid calling @property (and other instance descriptors) during fixture discovery -- by asottile{.interpreted-text role="user"}

#12659: Fixed the issue of not displaying assertion failure differences when using the parameter --import-mode=importlib in pytest>=8.1.

#12667: Fixed a regression where type change in [ExceptionInfo.errisinstance]{.title-ref} caused [mypy]{.title-ref} to fail.

#12744: Fixed typing compatibility with Python 3.9 or less -- replaced [typing.Self]{.title-ref} with [typing_extensions.Self]{.title-ref} -- by Avasam{.interpreted-text role="user"}

#12745: Fixed an issue with backslashes being incorrectly converted in nodeid paths on Windows, ensuring consistent path handling across environments.

#6682: Fixed bug where the verbosity levels where not being respected when printing the "msg" part of failed assertion (as in assert condition, msg).

#9422: Fix bug where disabling the terminal plugin via -p no:terminal would cause crashes related to missing the verbose option.

-- by GTowers1{.interpreted-text role="user"}

Improved documentation

#12663: Clarify that the [pytest_deselected]{.title-ref} hook should be called from [pytest_collection_modifyitems]{.title-ref} hook implementations when items are deselected.

#12678: Remove erroneous quotes from [tmp_path_retention_policy]{.title-ref} example in docs.

Miscellaneous internal changes

#12769: Fix typos discovered by codespell and add codespell to pre-commit hooks.

8.3.2

pytest 8.3.2 (2024-...
Description has been truncated

Bumps the python-packages group with 11 updates in the / directory: | Package | From | To | | --- | --- | --- | | [cryptography](https://github.com/pyca/cryptography) | `42.0.7` | `43.0.3` | | [fastapi[all]](https://github.com/fastapi/fastapi) | `0.111.0` | `0.115.4` | | [psycopg2](https://github.com/psycopg/psycopg2) | `2.9.9` | `2.9.10` | | [pyjwt](https://github.com/jpadilla/pyjwt) | `2.8.0` | `2.9.0` | | [sqlalchemy](https://github.com/sqlalchemy/sqlalchemy) | `2.0.30` | `2.0.36` | | [uvicorn](https://github.com/encode/uvicorn) | `0.30.1` | `0.32.0` | | [ruff](https://github.com/astral-sh/ruff) | `0.4.8` | `0.7.3` | | [mypy](https://github.com/python/mypy) | `1.10.0` | `1.13.0` | | [types-requests](https://github.com/python/typeshed) | `2.32.0.20240602` | `2.32.0.20241016` | | [pytest](https://github.com/pytest-dev/pytest) | `8.2.1` | `8.3.3` | | [pytest-cov](https://github.com/pytest-dev/pytest-cov) | `5.0.0` | `6.0.0` | Updates `cryptography` from 42.0.7 to 43.0.3 - [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst) - [Commits](pyca/cryptography@42.0.7...43.0.3) Updates `fastapi[all]` from 0.111.0 to 0.115.4 - [Release notes](https://github.com/fastapi/fastapi/releases) - [Commits](fastapi/fastapi@0.111.0...0.115.4) Updates `psycopg2` from 2.9.9 to 2.9.10 - [Changelog](https://github.com/psycopg/psycopg2/blob/master/NEWS) - [Commits](https://github.com/psycopg/psycopg2/commits) Updates `pyjwt` from 2.8.0 to 2.9.0 - [Release notes](https://github.com/jpadilla/pyjwt/releases) - [Changelog](https://github.com/jpadilla/pyjwt/blob/master/CHANGELOG.rst) - [Commits](jpadilla/pyjwt@2.8.0...2.9.0) Updates `sqlalchemy` from 2.0.30 to 2.0.36 - [Release notes](https://github.com/sqlalchemy/sqlalchemy/releases) - [Changelog](https://github.com/sqlalchemy/sqlalchemy/blob/main/CHANGES.rst) - [Commits](https://github.com/sqlalchemy/sqlalchemy/commits) Updates `uvicorn` from 0.30.1 to 0.32.0 - [Release notes](https://github.com/encode/uvicorn/releases) - [Changelog](https://github.com/encode/uvicorn/blob/master/CHANGELOG.md) - [Commits](encode/uvicorn@0.30.1...0.32.0) Updates `ruff` from 0.4.8 to 0.7.3 - [Release notes](https://github.com/astral-sh/ruff/releases) - [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md) - [Commits](astral-sh/ruff@v0.4.8...0.7.3) Updates `mypy` from 1.10.0 to 1.13.0 - [Changelog](https://github.com/python/mypy/blob/master/CHANGELOG.md) - [Commits](python/mypy@v1.10.0...v1.13.0) Updates `types-requests` from 2.32.0.20240602 to 2.32.0.20241016 - [Commits](https://github.com/python/typeshed/commits) Updates `pytest` from 8.2.1 to 8.3.3 - [Release notes](https://github.com/pytest-dev/pytest/releases) - [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst) - [Commits](pytest-dev/pytest@8.2.1...8.3.3) Updates `pytest-cov` from 5.0.0 to 6.0.0 - [Changelog](https://github.com/pytest-dev/pytest-cov/blob/master/CHANGELOG.rst) - [Commits](pytest-dev/pytest-cov@v5.0.0...v6.0.0) --- updated-dependencies: - dependency-name: cryptography dependency-type: direct:production update-type: version-update:semver-major dependency-group: python-packages - dependency-name: fastapi[all] dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-packages - dependency-name: psycopg2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python-packages - dependency-name: pyjwt dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-packages - dependency-name: sqlalchemy dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python-packages - dependency-name: uvicorn dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-packages - dependency-name: ruff dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-packages - dependency-name: mypy dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-packages - dependency-name: types-requests dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python-packages - dependency-name: pytest dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-packages - dependency-name: pytest-cov dependency-type: direct:production update-type: version-update:semver-major dependency-group: python-packages ... Signed-off-by: dependabot[bot] <[email protected]>

dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Nov 11, 2024

dependabot bot mentioned this pull request Nov 11, 2024

Bump the python-packages group across 1 directory with 11 updates #89

Closed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump the python-packages group across 1 directory with 11 updates #91

Bump the python-packages group across 1 directory with 11 updates #91

dependabot bot commented on behalf of github Nov 11, 2024

Bump the python-packages group across 1 directory with 11 updates #91

Are you sure you want to change the base?

Bump the python-packages group across 1 directory with 11 updates #91

Conversation

dependabot bot commented on behalf of github Nov 11, 2024

0.115.4

Refactors

Docs

Translations

Current release

2.9.0

What's Changed

New Contributors

v2.9.0 <https://github.com/jpadilla/pyjwt/compare/2.8.0...2.9.0>__

2.0.36

orm

Version 0.32.0

Added

Version 0.31.1

Fixed

Version 0.31.0

Added

Version 0.30.6

Fixed

Version 0.30.5

Fixed

0.32.0 (2024-10-15)

Added

0.31.1 (2024-10-09)

Fixed

0.31.0 (2024-09-27)

Added

0.30.6 (2024-08-13)

Fixed

0.30.5 (2024-08-02)

Fixed

0.30.4 (2024-07-31)

Fixed

0.30.3 (2024-07-20)

Fixed

0.7.3

Release Notes

Preview features

Rule changes

Bug fixes

Documentation

Install ruff 0.7.3

Install prebuilt binaries via shell script

Install prebuilt binaries via powershell script

0.7.3

Preview features

Rule changes

Bug fixes

Documentation

0.7.2

Preview features

Rule changes

Server

Mypy Release Notes

Next release

Change to enum membership semantics

Mypy 1.13

8.3.3

pytest 8.3.3 (2024-09-09)

Bug fixes

Improved documentation

Miscellaneous internal changes

8.3.2

pytest 8.3.2 (2024-... Description has been truncated

`v2.9.0 <https://github.com/jpadilla/pyjwt/compare/2.8.0...2.9.0>`__

pytest 8.3.2 (2024-...
Description has been truncated