Bump the python-packages group with 5 updates #3329

dependabot · 2024-10-01T16:12:18Z

Bumps the python-packages group with 5 updates:

Package	From	To
mkdocs-material	`9.5.34`	`9.5.39`
build	`1.2.1`	`1.2.2`
pytest	`8.3.2`	`8.3.3`
ruff	`0.6.3`	`0.6.8`
uvicorn	`0.30.6`	`0.31.0`

Updates mkdocs-material from 9.5.34 to 9.5.39

Release notes

Sourced from mkdocs-material's releases.

mkdocs-material-9.5.39

Fixed #7226: not staying on page when using mike's canonical versioning

Thanks go to @ilyagr for their contributions

mkdocs-material-9.5.38

Added Albanian translations

Thanks go to @gerardkraja for their contributions

mkdocs-material-9.5.37

Added 4th and 5th level ordered list styles

Fixed #7548: Tags have no spacing in search

mkdocs-material-9.5.36

Fixed #7544: Social cards incorrectly rendering HTML entities

Fixed #7542: Improved support for setting custom list styles

mkdocs-material-9.5.35

Fixed #7498: Search not showing for Vietnamese language

Changelog

Sourced from mkdocs-material's changelog.

mkdocs-material-9.5.39+insiders-4.53.14 (2024-09-29)

Fixed #7567: Empty headlines when using typeset plugin with anchorlinks

mkdocs-material-9.5.39 (2024-09-29)

Fixed #7226: not staying on page when using mike's canonical versioning

mkdocs-material-9.5.38 (2024-09-26)

Added Albanian translations

mkdocs-material-9.5.37 (2024-09-25)

Added 4th and 5th level ordered list styles

Fixed #7548: Tags have no spacing in search

mkdocs-material-9.5.36 (2024-09-21)

Fixed #7544: Social cards incorrectly rendering HTML entities

Fixed #7542: Improved support for setting custom list styles

mkdocs-material-9.5.35 (2024-09-18)

Fixed #7498: Search not showing for Vietnamese language

mkdocs-material-9.5.34+insiders-4.53.13 (2024-09-14)

Fixed #7520: Social plugin errors for generated files (MkDocs 1.6+)

mkdocs-material-9.5.34 (2024-08-31)

Updated Mermaid.js to version 11 (latest)

mkdocs-material-9.5.33 (2024-08-23)

Fixed #7453: Incorrect position of tooltip when sorting table

mkdocs-material-9.5.32 (2024-08-19)

Fixed RXSS vulnerability via deep link in search results

Added support for fetching latest release from GitLab

mkdocs-material-9.5.31+insiders-4.53.12 (2024-08-02)

Fixed #7410: Instant previews jump on content tabs with anchor links

Fixed #7408: Instant previews jump on content tabs

mkdocs-material-9.5.31 (2024-08-02)

... (truncated)

Commits

70db88f Prepare 9.5.39 release
187705e Updated dependencies
56fdb28 Adjusted code copy button documentation
aeb9492 Fixed stay no page functionality when using mike's canonical versioning (#7559)
50a15be Updated link to step-by-step guide on YouTube
117250a Prepare 9.5.38 release
74ca234 Added Albanian translations
84ddbba Prepare 9.5.37 release
fd98413 Documentation (#7557)
573d23d Updated dependencies
Additional commits viewable in compare view

Updates build from 1.2.1 to 1.2.2

Release notes

Sourced from build's releases.

Version 1.2.2

What's Changed

Add editable to builder.get_requries_for_build's static types (PR #764, fixes issue #763)

Include artifact attestations in our release (PR #782)

Fix typing compatibility with typed pyproject-hooks (PR #788)

Mark more tests with network (PR #808)

Add more intersphinx links to docs (PR #804)

Make uv optional for tests (PR #807 and #813)

New Contributors

@carlwgeorge made their first contribution in pypa/build#808

@edgarrmondragon made their first contribution in pypa/build#804

Full Changelog: pypa/build@1.2.1...1.2.2

Changelog

Sourced from build's changelog.

1.2.2 (2024-09-06)

Add editable to builder.get_requries_for_build's static types (PR :pr:764, fixes issue :issue:763)

Include artifact attestations in our release (PR :pr:782)

Fix typing compatibility with typed pyproject-hooks (PR :pr:788)

Mark more tests with network (PR :pr:808)

Add more intersphinx links to docs (PR :pr:804)

Make uv optional for tests (PR :pr:807 and :pr:813)

Commits

3b0b5d0 docs: changelog for 1.2.2 (#812)
b44a886 docs: more info in README
8e19948 build(deps): bump actions/attest-build-provenance in the actions group (#814)
b90956c tests: add module case to uv detection (#813)
e79f1b3 ci: remove bot comments from generated release notes (#810)
f6da25a pre-commit: bump repositories (#801)
9a52c50 tests: optional uv (#807)
553b700 docs: Add a few intersphinx links to the Python Packaging User Guide (#804)
336efcb build(deps): bump actions/attest-build-provenance in the actions group (#802)
73b7213 tests: mark more network tests (#808)
Additional commits viewable in compare view

Updates pytest from 8.3.2 to 8.3.3

Release notes

Sourced from pytest's releases.

8.3.3

pytest 8.3.3 (2024-09-09)

Bug fixes

#12446: Avoid calling @property (and other instance descriptors) during fixture discovery -- by asottile{.interpreted-text role="user"}

#12659: Fixed the issue of not displaying assertion failure differences when using the parameter --import-mode=importlib in pytest>=8.1.

#12667: Fixed a regression where type change in [ExceptionInfo.errisinstance]{.title-ref} caused [mypy]{.title-ref} to fail.

#12744: Fixed typing compatibility with Python 3.9 or less -- replaced [typing.Self]{.title-ref} with [typing_extensions.Self]{.title-ref} -- by Avasam{.interpreted-text role="user"}

#12745: Fixed an issue with backslashes being incorrectly converted in nodeid paths on Windows, ensuring consistent path handling across environments.

#6682: Fixed bug where the verbosity levels where not being respected when printing the "msg" part of failed assertion (as in assert condition, msg).

#9422: Fix bug where disabling the terminal plugin via -p no:terminal would cause crashes related to missing the verbose option.

-- by GTowers1{.interpreted-text role="user"}

Improved documentation

#12663: Clarify that the [pytest_deselected]{.title-ref} hook should be called from [pytest_collection_modifyitems]{.title-ref} hook implementations when items are deselected.

#12678: Remove erroneous quotes from [tmp_path_retention_policy]{.title-ref} example in docs.

Miscellaneous internal changes

#12769: Fix typos discovered by codespell and add codespell to pre-commit hooks.

Commits

d0f136f build(deps): Bump pypa/gh-action-pypi-publish from 1.10.0 to 1.10.1 (#12790)
972f307 Prepare release version 8.3.3
0dabdcf Include co-authors in release announcement (#12795) (#12797)
a9910a4 Do not discover properties when iterating fixtures (#12781) (#12788)
0f10b6b Fix issue with slashes being turned into backslashes on Windows (#12760) (#12...
300d13d Merge pull request #12785 from pytest-dev/patchback/backports/8.3.x/57cccf7f4...
e5d32c7 Merge pull request #12784 from svenevs/fix/docs-example-parametrize-minor-typo
bc913d1 Streamline checks for verbose option (#12706) (#12778)
01cfcc9 Fix typos and introduce codespell pre-commit hook (#12769) (#12774)
4873394 doc: Remove past training (#12772) (#12773)
Additional commits viewable in compare view

Updates ruff from 0.6.3 to 0.6.8

Release notes

Sourced from ruff's releases.

0.6.8

Release Notes

Preview features

Remove unnecessary parentheses around match case clauses (#13510)

Parenthesize overlong if guards in match..case clauses (#13513)

Detect basic wildcard imports in ruff analyze graph (#13486)

[pylint] Implement boolean-chained-comparison (R1716) (#13435)

Rule changes

[lake8-simplify] Detect SIM910 when using variadic keyword arguments, i.e., **kwargs (#13503)

[pyupgrade] Avoid false negatives with non-reference shadowed bindings of loop variables (UP028) (#13504)

Bug fixes

Detect tuples bound to variadic positional arguments i.e. *args (#13512)

Exit gracefully on broken pipe errors (#13485)

Avoid panic when analyze graph hits broken pipe (#13484)

Performance

Reuse BTreeSets in module resolver (#13440)

Skip traversal for non-compound statements (#13441)

Contributors

@MichaReiser

@TomerBin

@charliermarsh

@diceroll123

@dylwil3

@haarisr

@renovate

@sbrugman

@vincevannoort

@zanieb

Install ruff 0.6.8

Install prebuilt binaries via shell script
curl --proto '=https' --tlsv1.2 -LsSf https://github.com/astral-sh/ruff/releases/download/0.6.8/ruff-installer.sh | sh
Install prebuilt binaries via powershell script

... (truncated)

Changelog

Sourced from ruff's changelog.

0.6.8

Preview features

Remove unnecessary parentheses around match case clauses (#13510)

Parenthesize overlong if guards in match..case clauses (#13513)

Detect basic wildcard imports in ruff analyze graph (#13486)

[pylint] Implement boolean-chained-comparison (R1716) (#13435)

Rule changes

[lake8-simplify] Detect SIM910 when using variadic keyword arguments, i.e., **kwargs (#13503)

[pyupgrade] Avoid false negatives with non-reference shadowed bindings of loop variables (UP028) (#13504)

Bug fixes

Detect tuples bound to variadic positional arguments i.e. *args (#13512)

Exit gracefully on broken pipe errors (#13485)

Avoid panic when analyze graph hits broken pipe (#13484)

Performance

Reuse BTreeSets in module resolver (#13440)

Skip traversal for non-compound statements (#13441)

0.6.7

Preview features

Add Python version support to ruff analyze CLI (#13426)

Add exclude support to ruff analyze (#13425)

Fix parentheses around return type annotations (#13381)

Rule changes

[pycodestyle] Fix: Don't autofix if the first line ends in a question mark? (D400) (#13399)

Bug fixes

Respect lint.exclude in ruff check --add-noqa (#13427)

Performance

Avoid tracking module resolver files in Salsa (#13437)

Use forget for module resolver database (#13438)

0.6.6

Preview features

... (truncated)

Commits

ae39ce5 Bump version to 0.6.8 (#13522)
ff2d214 Don't skip over imports and other nodes containing nested statements in impor...
9442cd8 Parenthesize match..case if guards (#13513)
8012707 Align formatting of patterns in match-cases with expression formatting in cla...
d7ffe46 Disable the typeset plugin (#13517)
7c83af4 red-knot: Implement the not operator for all Type variants (#13432)
bbb044e Detect tuples bound to variadic positional arguments i.e. *args (#13512)
4810652 Avoid UP028 false negatives with non-reference shadowed bindings of loop vari...
11f06e0 Detect SIM910 when using variadic keyword arguments, i.e., **kwargs (#13503)
f27a8b8 [internal] ComparableExpr (f)strings and bytes made invariant under concate...
Additional commits viewable in compare view

Updates uvicorn from 0.30.6 to 0.31.0

Release notes

Sourced from uvicorn's releases.

Version 0.31.0

Added

Improve ProxyHeadersMiddleware (#2468) and (#2231):

Fix the host for requests from clients running on the proxy server itself.

Fallback to host that was already set for empty x-forwarded-for headers.

Also allow specifying IP Networks as trusted hosts. This greatly simplifies deployments on docker swarm/Kubernetes, where the reverse proxy might have a dynamic IP.

This includes support for IPv6 Address/Networks.

Full Changelog: encode/uvicorn@0.30.6...0.31.0

Changelog

Sourced from uvicorn's changelog.

0.31.0 (2024-09-27)

Added

Improve ProxyHeadersMiddleware (#2468) and (#2231):

Fix the host for requests from clients running on the proxy server itself.

Fallback to host that was already set for empty x-forwarded-for headers.

Also allow to specify IP Networks as trusted hosts. This greatly simplifies deployments on docker swarm/kubernetes, where the reverse proxy might have a dynamic IP.

This includes support for IPv6 Address/Networks.

Commits

a507532 Version 0.31.0 (#2469)
84dd2c4 Improve ProxyHeadersMiddleware (#2468)
3d26ab4 Bump cryptography from 42.0.8 to 43.0.1 (#2453)
47304d9 Add tests and requirements.txt to sdist (#2438)
1cb0c32 Add missing init files in the test suite (#2432)
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the python-packages group with 5 updates: | Package | From | To | | --- | --- | --- | | [mkdocs-material](https://github.com/squidfunk/mkdocs-material) | `9.5.34` | `9.5.39` | | [build](https://github.com/pypa/build) | `1.2.1` | `1.2.2` | | [pytest](https://github.com/pytest-dev/pytest) | `8.3.2` | `8.3.3` | | [ruff](https://github.com/astral-sh/ruff) | `0.6.3` | `0.6.8` | | [uvicorn](https://github.com/encode/uvicorn) | `0.30.6` | `0.31.0` | Updates `mkdocs-material` from 9.5.34 to 9.5.39 - [Release notes](https://github.com/squidfunk/mkdocs-material/releases) - [Changelog](https://github.com/squidfunk/mkdocs-material/blob/master/CHANGELOG) - [Commits](squidfunk/mkdocs-material@9.5.34...9.5.39) Updates `build` from 1.2.1 to 1.2.2 - [Release notes](https://github.com/pypa/build/releases) - [Changelog](https://github.com/pypa/build/blob/main/CHANGELOG.rst) - [Commits](pypa/build@1.2.1...1.2.2) Updates `pytest` from 8.3.2 to 8.3.3 - [Release notes](https://github.com/pytest-dev/pytest/releases) - [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst) - [Commits](pytest-dev/pytest@8.3.2...8.3.3) Updates `ruff` from 0.6.3 to 0.6.8 - [Release notes](https://github.com/astral-sh/ruff/releases) - [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md) - [Commits](astral-sh/ruff@0.6.3...0.6.8) Updates `uvicorn` from 0.30.6 to 0.31.0 - [Release notes](https://github.com/encode/uvicorn/releases) - [Changelog](https://github.com/encode/uvicorn/blob/master/CHANGELOG.md) - [Commits](encode/uvicorn@0.30.6...0.31.0) --- updated-dependencies: - dependency-name: mkdocs-material dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python-packages - dependency-name: build dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python-packages - dependency-name: pytest dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python-packages - dependency-name: ruff dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python-packages - dependency-name: uvicorn dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-packages ... Signed-off-by: dependabot[bot] <[email protected]>

dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Oct 1, 2024

tomchristie approved these changes Oct 1, 2024

View reviewed changes

tomchristie merged commit 1bf1fc0 into master Oct 1, 2024
5 checks passed

tomchristie deleted the dependabot/pip/python-packages-c96782f5c4 branch October 1, 2024 17:05

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump the python-packages group with 5 updates #3329

Bump the python-packages group with 5 updates #3329

dependabot bot commented on behalf of github Oct 1, 2024

Bump the python-packages group with 5 updates #3329

Bump the python-packages group with 5 updates #3329

Conversation

dependabot bot commented on behalf of github Oct 1, 2024

mkdocs-material-9.5.39

mkdocs-material-9.5.38

mkdocs-material-9.5.37

mkdocs-material-9.5.36

mkdocs-material-9.5.35

Version 1.2.2

What's Changed

New Contributors

1.2.2 (2024-09-06)

8.3.3

pytest 8.3.3 (2024-09-09)

Bug fixes

Improved documentation

Miscellaneous internal changes

0.6.8

Release Notes

Preview features

Rule changes

Bug fixes

Performance

Contributors

Install ruff 0.6.8

Install prebuilt binaries via shell script

Install prebuilt binaries via powershell script

0.6.8

Preview features

Rule changes

Bug fixes

Performance

0.6.7

Preview features

Rule changes

Bug fixes

Performance

0.6.6

Preview features

Version 0.31.0

Added

0.31.0 (2024-09-27)

Added