Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

build(deps): bump the deps group with 12 updates #350

Merged
merged 1 commit into from
Apr 15, 2024
Merged

build(deps): bump the deps group with 12 updates #350

merged 1 commit into from
Apr 15, 2024

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Apr 15, 2024

Bumps the deps group with 12 updates:

Package From To
pydantic 2.6.3 2.7.0
typing-extensions 4.10.0 4.11.0
ydb 3.8.0 3.10.0
motor 3.3.2 3.4.0
altair 5.2.0 5.3.0
pytelegrambotapi 4.16.1 4.17.0
opentelemetry-exporter-otlp 1.23.0 1.24.0
black 24.3.0 24.4.0
idna 3.6 3.7
sqlparse 0.4.4 0.5.0
locust 2.24.0 2.25.0
streamlit 1.32.2 1.33.0

Updates pydantic from 2.6.3 to 2.7.0

Release notes

Sourced from pydantic's releases.

v2.7.0 (2024-04-11)

The code released in v2.7.0 is practically identical to that of v2.7.0b1.

What's Changed

Packaging

New Features

Finalized in v2.7.0, rather than v2.7.0b1:

  • Add support for field level number to str coercion option by @​NeevCohen in #9137
  • Update warnings parameter for serialization utilities to allow raising a warning by @​Lance-Drane in #9166

Changes

Performance

... (truncated)

Changelog

Sourced from pydantic's changelog.

v2.7.0 (2024-04-11)

GitHub release

The code released in v2.7.0 is practically identical to that of v2.7.0b1.

What's Changed

Packaging

New Features

Finalized in v2.7.0, rather than v2.7.0b1:

  • Add support for field level number to str coercion option by @​NeevCohen in #9137
  • Update warnings parameter for serialization utilities to allow raising a warning by @​Lance-Drane in #9166

Changes

Performance

... (truncated)

Commits

Updates typing-extensions from 4.10.0 to 4.11.0

Release notes

Sourced from typing-extensions's releases.

4.11.0

Release 4.11.0 (April 5, 2024)

This feature release provides improvements to various recently added features, most importantly type parameter defaults (PEP 696).

There are no changes since 4.11.0rc1.

Changes since 4.10.0:

  • Fix tests on Python 3.13.0a5. Patch by Jelle Zijlstra.
  • Fix the runtime behavior of type parameters with defaults (PEP 696). Patch by Nadir Chowdhury.
  • Fix minor discrepancy between error messages produced by typing and typing_extensions on Python 3.10. Patch by Jelle Zijlstra.
  • When include_extra=False, get_type_hints() now strips ReadOnly from the annotation.

4.11.0rc1

  • Fix tests on Python 3.13.0a5. Patch by Jelle Zijlstra.
  • Fix the runtime behavior of type parameters with defaults (PEP 696). Patch by Nadir Chowdhury.
  • Fix minor discrepancy between error messages produced by typing and typing_extensions on Python 3.10. Patch by Jelle Zijlstra.
  • When include_extra=False, get_type_hints() now strips ReadOnly from the annotation.
Changelog

Sourced from typing-extensions's changelog.

Release 4.11.0 (April 5, 2024)

This feature release provides improvements to various recently added features, most importantly type parameter defaults (PEP 696).

There are no changes since 4.11.0rc1.

Release 4.11.0rc1 (March 24, 2024)

  • Fix tests on Python 3.13.0a5. Patch by Jelle Zijlstra.
  • Fix the runtime behavior of type parameters with defaults (PEP 696). Patch by Nadir Chowdhury.
  • Fix minor discrepancy between error messages produced by typing and typing_extensions on Python 3.10. Patch by Jelle Zijlstra.
  • When include_extra=False, get_type_hints() now strips ReadOnly from the annotation.
Commits

Updates ydb from 3.8.0 to 3.10.0

Release notes

Sourced from ydb's releases.

3.10.0

  • Added is_column_store to SchemeEntryType and SchemeEntry classes

Full Changelog: 3.9.1...3.10.0

3.9.1 (revoked)

  • Relaxed requirements for pyjwt version from exactly 2.8.0 to >= 2.0

Full Changelog: 3.9.0...3.9.1

3.9.0 (revoked)

  • Supported nebius jwt credentials

Full Changelog: 3.8.1...3.9.0

3.8.1

  • Fixed to handle deadline on topic stream in async driver

Full Changelog: 3.8.0...3.8.1

Changelog

Sourced from ydb's changelog.

3.10.0

  • Added is_column_store to SchemeEntryType and SchemeEntry classes

3.9.1

yanked bad api release

3.9.0

yanked bad api release

3.8.1

  • Fixed to handle deadline on topic stream in async driver.
Commits
  • f9a03ac Release: 3.10.0
  • 7f1d5ad Update CHANGELOG.md
  • 94e3c6f Merge pull request #414 use COLUMN_STORE in scheme client in python sdk from ...
  • 99f449f use COLUMN_STORE in scheme client in python sdk
  • 9aad87a Merge pull request #413 Some docstring editing from krokoziabla/main
  • d78b5a9 Some docstring editing
  • ce138f8 Merge pull request #412 added topic basic example
  • dc52058 Merge branch 'refs/heads/main' into basic-example
  • 569adf9 added topic basic example
  • 4c40e2e Update CHANGELOG.md
  • Additional commits viewable in compare view

Updates motor from 3.3.2 to 3.4.0

Release notes

Sourced from motor's releases.

Motor 3.4.0

Community post: https://www.mongodb.com/community/forums/t/motor-3-4-0-release/272987

Changelog

Sourced from motor's changelog.

Motor 3.4.0

  • Type hint bug fixes and improvements. Added typings to classes in motor_tornado and motor_asyncio.
Commits
  • 19eeb29 BUMP 3.4.0
  • 72e8655 MOTOR-1286 Update Changelog for 3.4.0 (#273)
  • 0f1a6cd [Motor-1175] Document Network Compression (#271)
  • 7bcea04 MOTOR-1279 Improve Motor Typing (#269)
  • f4832d9 MOTOR-1284 Fix Cryptography Install on PyPy3.8 (#270)
  • 2d35987 [MOTOR-1269] Exclude Synchro test TestUnifiedInterruptInUsePoolClear (#268)
  • 1414d0f MOTOR-1282 Stop using filemd5 in docs example for db.command (#267)
  • 9d00dd2 MOTOR-1277 Limit when pull request-specific tasks are run (#266)
  • 228e76a MOTOR-1271 Use GitHub App to Auto Assign Reviewer (#265)
  • e8a6d6d MOTOR-1257 key_id can be passed as UUID with pymongo>=4.7 (#264)
  • Additional commits viewable in compare view

Updates altair from 5.2.0 to 5.3.0

Release notes

Sourced from altair's releases.

Version 5.3.0

The Vega Project is happy to announce the release of version 5.3.0 of the Vega-Altair Python visualization library. This release has been 4 months in the making and includes enhancements, fixes, and documentation improvements from 11 contributors.

What's Changed

Enhancements

  • Add integration of VegaFusion and JupyterChart to enable scaling many interactive Vega-Altair charts to millions of rows. See VegaFusion Data Transformer for more information. Here is an example of histogram cross filtering with a 1 million row dataset.

    vegafusion_widget.mov

  • Add "browser" renderer to support displaying Vega-Altair charts in an external web browser. See Browser Renderer for more information (#3379).

    browser_renderer.mov

  • Support opening charts in the Vega editor with chart.open_editor() (#3358)

    open_editor.mov

Bug Fixes

  • Fix error when embed_options are None (#3376)
  • Fix type hints for libraries such as Polars where Altair uses the dataframe interchange protocol (#3297)
  • Fix anywidget deprecation warning (#3364)
  • Fix handling of Date32 columns in arrow tables and Polars DataFrames (#3377)

Backward-Incompatible Changes

  • Changed hash function from md5 to a truncated sha256 non-cryptograhic hash (#3291)
  • Updated chart.show() method to invoke the active renderer rather than depend on altair_saver (Which was never updated for use with Altair 5) (#3379).

... (truncated)

Commits
  • 4a2e7f1 chore: bump version to 5.3.0
  • 86c5411 docs: Fix numpy tooltip images example
  • 439c253 chore: Update releasing instructions
  • 51aa57f chore: Add templates for PRs and automated release notes (#3381)
  • d5b0736 feature: Add browser renderer to open charts in external browser and update c...
  • d09b7de docs: Remove release notes and fully capture them in GitHub Releases (#3380)
  • 2786dd3 Catch RuntimeError along with ImportError in pyarrow_available (#3387)
  • e20cdef perf: Improve performance of Chart.from_dict (#3383)
  • c7c4149 fix: Handle Date32 columns in Arrow tables and Polars DataFrames (#3377)
  • b1b9dba fix: Don't error when embed_options are None (#3376)
  • Additional commits viewable in compare view

Updates pytelegrambotapi from 4.16.1 to 4.17.0

Commits

Updates opentelemetry-exporter-otlp from 1.23.0 to 1.24.0

Changelog

Sourced from opentelemetry-exporter-otlp's changelog.

Version 1.24.0/0.45b0 (2024-03-28)

  • Make create_gauge non-abstract method (#3817)
  • Make tracer.start_as_current_span() decorator work with async functions (#3633)
  • Fix python 3.12 deprecation warning (#3751)
  • bump mypy to 0.982 (#3776)
  • Add support for OTEL_SDK_DISABLED environment variable (#3648)
  • Fix ValueError message for PeriodicExportingMetricsReader (#3769)
  • Use BaseException instead of Exception in record_exception (#3354)
  • Make span.record_exception more robust (#3778)
  • Fix license field in pyproject.toml files (#3803)
Commits
  • 01d1d4b [release/v1.24.x-0.45bx] Prepare release 1.24.0/0.45b0 (#3819)
  • 694445f Fix license field in pyproject.toml files (#3803)
  • d6321d6 Remove [test] package from opentelemetry-exporter-zipkin (#3774)
  • 82308f5 Remove [test] package from opentelemetry-exporter-otlp (#3756)
  • 947472b Remove [test] package from opentelemetry-exporter-otlp-proto-common (#3738)
  • 7401bc0 Remove [test] package from opentelemetry-exporter-zipkin-json (#3739)
  • d001e74 Remove [test] package from opentelemetry-exporter-prometheus (#3753)
  • 7f662c1 Remove [test] package from opentelemetry-exporter-zipkin-proto-http (#3754)
  • 473156b Remove [test] package from opentelemetry-exporter-opencensus (#3755)
  • 6af918b Remove [test] package from opentelemetry-exporter-otlp-proto-http (#3742)
  • Additional commits viewable in compare view

Updates black from 24.3.0 to 24.4.0

Release notes

Sourced from black's releases.

24.4.0

Stable style

  • Fix unwanted crashes caused by AST equivalency check (#4290)

Preview style

  • if guards in case blocks are now wrapped in parentheses when the line is too long. (#4269)
  • Stop moving multiline strings to a new line unless inside brackets (#4289)

Integrations

  • Add a new option use_pyproject to the GitHub Action psf/black. This will read the Black version from pyproject.toml. (#4294)
Changelog

Sourced from black's changelog.

24.4.0

Stable style

  • Fix unwanted crashes caused by AST equivalency check (#4290)

Preview style

  • if guards in case blocks are now wrapped in parentheses when the line is too long. (#4269)
  • Stop moving multiline strings to a new line unless inside brackets (#4289)

Integrations

  • Add a new option use_pyproject to the GitHub Action psf/black. This will read the Black version from pyproject.toml. (#4294)
Commits

Updates idna from 3.6 to 3.7

Release notes

Sourced from idna's releases.

v3.7

What's Changed

  • Fix issue where specially crafted inputs to encode() could take exceptionally long amount of time to process. [CVE-2024-3651]

Thanks to Guido Vranken for reporting the issue.

Full Changelog: kjd/idna@v3.6...v3.7

Changelog

Sourced from idna's changelog.

3.7 (2024-04-11) ++++++++++++++++

  • Fix issue where specially crafted inputs to encode() could take exceptionally long amount of time to process. [CVE-2024-3651]

Thanks to Guido Vranken for reporting the issue.

Commits
  • 1d365e1 Release v3.7
  • c1b3154 Merge pull request #172 from kjd/optimize-contextj
  • 0394ec7 Merge branch 'master' into optimize-contextj
  • cd58a23 Merge pull request #152 from elliotwutingfeng/dev
  • 5beb28b More efficient resolution of joiner contexts
  • 1b12148 Update ossf/scorecard-action to v2.3.1
  • d516b87 Update Github actions/checkout to v4
  • c095c75 Merge branch 'master' into dev
  • 60a0a4c Fix typo in GitHub Actions workflow key
  • 5918a0e Merge branch 'master' into dev
  • Additional commits viewable in compare view

Updates sqlparse from 0.4.4 to 0.5.0

Changelog

Sourced from sqlparse's changelog.

Release 0.5.0 (Apr 13, 2024)

Notable Changes

  • Drop support for Python 3.5, 3.6, and 3.7.
  • Python 3.12 is now supported (pr725, by hugovk).
  • IMPORTANT: Fixes a potential denial of service attack (DOS) due to recursion error for deeply nested statements. Instead of recursion error a generic SQLParseError is raised. See the security advisory for details: GHSA-2m57-hf25-phgg The vulnerability was discovered by @​uriyay-jfrog. Thanks for reporting!

Enhancements:

  • Splitting statements now allows to remove the semicolon at the end. Some database backends love statements without semicolon (issue742).
  • Support TypedLiterals in get_parameters (pr649, by Khrol).
  • Improve splitting of Transact SQL when using GO keyword (issue762).
  • Support for some JSON operators (issue682).
  • Improve formatting of statements containing JSON operators (issue542).
  • Support for BigQuery and Snowflake keywords (pr699, by griffatrasgo).
  • Support parsing of OVER clause (issue701, pr768 by r33s3n6).

Bug Fixes

  • Ignore dunder attributes when creating Tokens (issue672).
  • Allow operators to precede dollar-quoted strings (issue763).
  • Fix parsing of nested order clauses (issue745, pr746 by john-bodley).
  • Thread-safe initialization of Lexer class (issue730).
  • Classify TRUNCATE as DDL and GRANT/REVOKE as DCL keywords (based on pr719 by josuc1, thanks for bringing this up!).
  • Fix parsing of PRIMARY KEY (issue740).

Other

  • Optimize performance of matching function (pr799, by admachainz).
Commits
  • ddbd0ec Bump version.
  • 29f2e0a Raise recursion limit for tests.
  • b4a39d9 Raise SQLParseError instead of RecursionError.
  • f1bcf2f Update AUHTORS and Changelog.
  • e03b74e Fix Function.get_parameters(), add Funtion.get_window()
  • 617b8f6 Add OVER clause, and group it into Function (fixes #701)
  • d8f8147 Update AUHTORS and Changelog.
  • 012c9f1 Optimize sqlparse.utils.imt().
  • 46971e5 Fix parsing of PRIMARY KEY (fixes #740).
  • fc4b0be Code cleanup.
  • Additional commits viewable in compare view

Updates locust from 2.24.0 to 2.25.0

Release notes

Sourced from locust's releases.

2.25.0

What's Changed

New Contributors

Full Changelog: locustio/locust@2.24.1...2.25.0

2.24.1

What's Changed

New Contributors

Full Changelog: locustio/locust@2.24.0...2.24.1

Changelog

Sourced from locust's changelog.

2.25.0 (2024-04-14)

Full Changelog

Fixed bugs:

  • Wrong distribution of virtual users by user classes #2662
  • Monkey patching error #2661
  • cannot specify task of UserClass when locust run on distributed mode #2657
  • [ModernUI] HTML entities are incorrectly escaped in generated report #2635
  • Bug / Feature request: Time intensive custom_messages functions trigger heartbeat timeout #2608

Closed issues:

  • Add an UI extension exemple that display proxy cache hit/miss #2644

Merged pull requests:

2.24.1 (2024-03-20)

Full Changelog

Fixed b...

Description has been truncated

@dependabot
build(deps): bump the deps group with 12 updates
d90ea4a 
Bumps the deps group with 12 updates:

| Package | From | To |
| --- | --- | --- |
| [pydantic](https://github.com/pydantic/pydantic) | `2.6.3` | `2.7.0` |
| [typing-extensions](https://github.com/python/typing_extensions) | `4.10.0` | `4.11.0` |
| [ydb](https://github.com/ydb-platform/ydb-python-sdk) | `3.8.0` | `3.10.0` |
| [motor](https://github.com/mongodb/motor) | `3.3.2` | `3.4.0` |
| [altair](https://github.com/altair-viz/altair) | `5.2.0` | `5.3.0` |
| [pytelegrambotapi](https://github.com/eternnoir/pyTelegramBotAPI) | `4.16.1` | `4.17.0` |
| [opentelemetry-exporter-otlp](https://github.com/open-telemetry/opentelemetry-python) | `1.23.0` | `1.24.0` |
| [black](https://github.com/psf/black) | `24.3.0` | `24.4.0` |
| [idna](https://github.com/kjd/idna) | `3.6` | `3.7` |
| [sqlparse](https://github.com/andialbrecht/sqlparse) | `0.4.4` | `0.5.0` |
| [locust](https://github.com/locustio/locust) | `2.24.0` | `2.25.0` |
| [streamlit](https://github.com/streamlit/streamlit) | `1.32.2` | `1.33.0` |


Updates `pydantic` from 2.6.3 to 2.7.0
- [Release notes](https://github.com/pydantic/pydantic/releases)
- [Changelog](https://github.com/pydantic/pydantic/blob/main/HISTORY.md)
- [Commits](pydantic/pydantic@v2.6.3...v2.7.0)

Updates `typing-extensions` from 4.10.0 to 4.11.0
- [Release notes](https://github.com/python/typing_extensions/releases)
- [Changelog](https://github.com/python/typing_extensions/blob/main/CHANGELOG.md)
- [Commits](python/typing_extensions@4.10.0...4.11.0)

Updates `ydb` from 3.8.0 to 3.10.0
- [Release notes](https://github.com/ydb-platform/ydb-python-sdk/releases)
- [Changelog](https://github.com/ydb-platform/ydb-python-sdk/blob/main/CHANGELOG.md)
- [Commits](ydb-platform/ydb-python-sdk@3.8.0...3.10.0)

Updates `motor` from 3.3.2 to 3.4.0
- [Release notes](https://github.com/mongodb/motor/releases)
- [Changelog](https://github.com/mongodb/motor/blob/master/doc/changelog.rst)
- [Commits](mongodb/motor@3.3.2...3.4.0)

Updates `altair` from 5.2.0 to 5.3.0
- [Release notes](https://github.com/altair-viz/altair/releases)
- [Commits](vega/altair@v5.2.0...v5.3.0)

Updates `pytelegrambotapi` from 4.16.1 to 4.17.0
- [Release notes](https://github.com/eternnoir/pyTelegramBotAPI/releases)
- [Commits](https://github.com/eternnoir/pyTelegramBotAPI/commits/4.17.0)

Updates `opentelemetry-exporter-otlp` from 1.23.0 to 1.24.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-python/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-python/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-python@v1.23.0...v1.24.0)

Updates `black` from 24.3.0 to 24.4.0
- [Release notes](https://github.com/psf/black/releases)
- [Changelog](https://github.com/psf/black/blob/main/CHANGES.md)
- [Commits](psf/black@24.3.0...24.4.0)

Updates `idna` from 3.6 to 3.7
- [Release notes](https://github.com/kjd/idna/releases)
- [Changelog](https://github.com/kjd/idna/blob/master/HISTORY.rst)
- [Commits](kjd/idna@v3.6...v3.7)

Updates `sqlparse` from 0.4.4 to 0.5.0
- [Changelog](https://github.com/andialbrecht/sqlparse/blob/master/CHANGELOG)
- [Commits](andialbrecht/sqlparse@0.4.4...0.5.0)

Updates `locust` from 2.24.0 to 2.25.0
- [Release notes](https://github.com/locustio/locust/releases)
- [Changelog](https://github.com/locustio/locust/blob/master/CHANGELOG.md)
- [Commits](locustio/locust@2.24.0...2.25.0)

Updates `streamlit` from 1.32.2 to 1.33.0
- [Release notes](https://github.com/streamlit/streamlit/releases)
- [Commits](streamlit/streamlit@1.32.2...1.33.0)

---
updated-dependencies:
- dependency-name: pydantic
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: deps
- dependency-name: typing-extensions
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: deps
- dependency-name: ydb
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: deps
- dependency-name: motor
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: deps
- dependency-name: altair
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: deps
- dependency-name: pytelegrambotapi
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: deps
- dependency-name: opentelemetry-exporter-otlp
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: deps
- dependency-name: black
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: deps
- dependency-name: idna
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: deps
- dependency-name: sqlparse
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: deps
- dependency-name: locust
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: deps
- dependency-name: streamlit
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: deps
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added the dependencies Updating dependencies label Apr 15, 2024
@RLKRo RLKRo merged commit 7d40565 into dev Apr 15, 2024
18 checks passed
@dependabot dependabot bot deleted the dependabot/pip/dev/deps-d271ff536f branch April 15, 2024 23:03
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@RLKRo RLKRo RLKRo approved these changes

Assignees
No one assigned
Labels
dependencies Updating dependencies
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
1 participant
@RLKRo