IceflowRE / unidown

Universal Downloader - update, manage, download.
GNU General Public License v3.0
0 stars 2 forks source link

Bump twine from 1.14.0 to 3.0.0 #164

Closed dependabot-preview[bot] closed 4 years ago

dependabot-preview[bot] commented 4 years ago

Bumps twine from 1.14.0 to 3.0.0.

Changelog *Sourced from [twine's changelog](https://github.com/pypa/twine/blob/master/docs/changelog.rst).* > orphan > > : > > Changelog > ========= > > - 3.0.0 <2019-11-18> > - 336: When a client certificate is indicated, all password processing is disabled. > - 524: Twine now unconditionally requires the keyring library and no longer supports uninstalling `keyring` as a means to disable that functionality. Instead, use `keyring --disable` keyring functionality if necessary. > - 518 Add Python 3.8 to classifiers. > - 332 More robust handling of server response in `--skip-existing` > - 2.0.0 <2019-09-24> > - 437 Twine now requires Python 3.6 or later. Use pip 9 or pin to "twine<2" to install twine on older Python versions. > - 491 Require requests 2.20 or later to avoid reported security vulnerabilities in earlier releases. > - 1.15.0 <2019-09-17> > - 488 Improved output on `check` command: Prints a message when there are no distributions given to check. Improved handling of errors in a distribution's markup, avoiding messages flowing through to the next distribution's errors. > - 1.14.0 <2019-09-06> > - 456 Better error handling and gpg2 fallback if gpg not available. > - 341 Fail more gracefully when encountering bad metadata > - 459 Show Warehouse URL after uploading a package > - 310 Now provide a more meaningful error on redirect during upload. > - 1.13.0 <2019-02-13> > - 452 major Restore prompts while retaining support for suppressing prompts. > - 447 major Avoid requests-toolbelt to 0.9.0 to prevent attempting to use openssl when it isn't available. > - 427 Add disable\_progress\_bar option to disable tqdm. > - 426 Allow defining an empty username and password in .pypirc. > - 441 major Only install pyblake2 if needed. > - 444 major Use io.StringIO instead of StringIO. > - 436 major Use modern Python language features. > - 439 Refactor tox env and travis config. > - 435 major Specify python\_requires in setup.py > - 432 major Use https URLs everywhere. > - 428 major Fix --skip-existing for Nexus Repos. > - 419 Support keyring.get\_credential. > - 418 Support keyring.get\_username\_and\_password. > - 421 major Remove unnecessary usage of readme\_render.markdown. > - 416 Add Python 3.7 to classifiers. > - 412 major Don't crash if there's no package description. > - 408 major Fix keyring support. > - 1.12.1 <2018-09-24> > - 404 Fix regression with upload exit code > - 1.12.0 <2018-09-24> > - 395 major Add `twine check` command to check long description > - 392 major Drop support for Python 3.3 > - 363 Empower `--skip-existing` for Artifactory repositories > - 367 major Avoid MD5 when Python is compiled in FIPS mode > - 1.11.0 <2018-03-19> > - 269 major Avoid uploading to PyPI when given alternate repository URL, and require `http://` or `https://` in `repository_url`. > - 277 Add instructions on how to use keyring. > ... (truncated)
Commits - [`315c5a3`](https://github.com/pypa/twine/commit/315c5a3b254ed6a49cca11559a7ac430da2a6cd2) Merge pull request [#538](https://github-redirect.dependabot.com/pypa/twine/issues/538) from pypa/release/3.0 - [`83d6bbc`](https://github.com/pypa/twine/commit/83d6bbc9ad2b72a241b379df223413d92692a843) Remove comments and just accept that redundant code is the future. - [`b59256e`](https://github.com/pypa/twine/commit/b59256e230f57359aaa71f996a73ae50da70ee32) Fixup auth ([#542](https://github-redirect.dependabot.com/pypa/twine/issues/542)) - [`e7ef3e1`](https://github.com/pypa/twine/commit/e7ef3e197b8980a8f995c769c15357e63696d427) Include microsecond in post-release tag to avoid conflicts when parallel CI r... - [`dfc89d7`](https://github.com/pypa/twine/commit/dfc89d74686bf83afcd69be9feb1baeb85900eb2) Merge pull request [#541](https://github-redirect.dependabot.com/pypa/twine/issues/541) from pypa/feature/test-pypiserver - [`085b06f`](https://github.com/pypa/twine/commit/085b06f6b137cb512b497020db414e1b851832ba) Merge branch 'master' into feature/test-pypiserver - [`94415ac`](https://github.com/pypa/twine/commit/94415ac999674471f942fb9a494a80941bda57c6) Merge pull request [#540](https://github-redirect.dependabot.com/pypa/twine/issues/540) from pypa/feature/test-pypi - [`0c8d92f`](https://github.com/pypa/twine/commit/0c8d92f89e6f2f877af753eda17aef34b26e5911) Add integration tests for pypiserver - [`07a7100`](https://github.com/pypa/twine/commit/07a7100736e6cc67bce8a0885dd8ee2b5af77d41) Add integration test for TestPyPI - [`0df7053`](https://github.com/pypa/twine/commit/0df70535b74f0eb8dacab9c48b8cfeac08dbc923) Remove twine and tox from docs tests requirements. Fixes [#539](https://github-redirect.dependabot.com/pypa/twine/issues/539). - Additional commits viewable in [compare view](https://github.com/pypa/twine/compare/1.14.0...3.0.0)


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) - `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language - `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language - `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language - `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language - `@dependabot badge me` will comment on this PR with code to add a "Dependabot enabled" badge to your readme Additionally, you can set the following in your Dependabot [dashboard](https://app.dependabot.com): - Update frequency (including time of day and day of week) - Pull request limits (per update run and/or open at any time) - Automerge options (never/patch/minor, and dev/runtime dependencies) - Out-of-range updates (receive only lockfile updates, if desired) - Security updates (receive only security updates, if desired)
dependabot-preview[bot] commented 4 years ago

Superseded by #167.