search

CycloneDX / cyclonedx-python-lib

Python implementation of OWASP CycloneDX
https://cyclonedx.org/
Apache License 2.0
70 stars 40 forks source link

chore(deps-dev): update tomli requirement from 2.0.2 to 2.1.0 #739

Closed dependabot[bot] closed 2 days ago

dependabot[bot] commented 3 days ago

Updates the requirements on tomli to permit the latest version.

Changelog

Sourced from tomli's changelog.

2.1.0

  • Deprecated
    • Instantiating TOMLDecodeError with free-form arguments. msg, doc and pos arguments should be given.
  • Added
    • msg, doc, pos, lineno and colno attributes to TOMLDecodeError

2.0.2

  • Removed
    • Python 3.7 support
  • Improved
    • Make loads raise TypeError not AttributeError on bad input types that do not have the replace attribute. Improve error message when bytes is received.
  • Type annotations
    • Type annotate load input as typing.IO[bytes] (previously typing.BinaryIO).

2.0.1

  • Improved
    • Make bundling easier by using relative imports internally and adding license and copyright notice to source files.
    • Make error messages more uniform
    • Raise a friendly TypeError for wrong file mode
    • Allow parse_float to return objects having the append attr
    • Eagerly raise an error if parse_float returns an illegal type
  • Packaging
    • Move from pytest testing framework to unittest and remove python-dateutil test dependency. Tests now only require Python interpreter.

1.2.3

  • Fixed
    • Backport: Allow lower case "t" and "z" in datetimes

2.0.0

  • Removed
    • Python 3.6 support
    • Support for text file objects as load input. Use binary file objects instead.
    • First argument of load and loads can no longer be passed by keyword.
  • Fixed
    • Allow lower case "t" and "z" in datetimes
  • Improved
    • Raise an error when dotted keys define values outside the "current table". Technically speaking TOML v1.0.0 does allow such assignments but that isn't intended by specification writers, and will change in a future specification version (see the pull request).

1.2.2

... (truncated)

Commits
  • d6e045b Bump version: 2.0.2 → 2.1.0
  • d1d6a85 Add attributes to TOMLDecodeError. Deprecate free-form __init__ args (#238)
  • 59ed9ef Add a comment about implicit lru_cache bound
  • 9d25b3f Test against Python 3.13 final (#237)
  • f57fb66 Add test coverage for text mode error (#231)
  • 4be816b Convert tox config to native TOML
  • e2f8d2d Merge pull request #233 from hukkin/version-2.0.2
  • See full diff in compare view


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)