Naila / Naila.py

Naila Bot written in discord.py
GNU Affero General Public License v3.0
11 stars 4 forks source link

Bump spotipy from 2.18.0 to 2.24.0 #233

Open dependabot[bot] opened 3 months ago

dependabot[bot] commented 3 months ago

Bumps spotipy from 2.18.0 to 2.24.0.

Release notes

Sourced from spotipy's releases.

2.24: Audiobooks support

Added

  • Added MemcacheCacheHandler, a cache handler that stores the token info using pymemcache.
  • Added support for audiobook endpoints: get_audiobook, get_audiobooks, and get_audiobook_chapters.
  • Added integration tests for audiobook endpoints.
  • Added update field to current_user_follow_playlist.

Changed

  • Fixed error obfuscation when Spotify class is being inherited and an error is raised in the Child's __init__
  • Replaced artist_albums(album_type=...) with artist_albums(include_groups=...) due to an API change.
  • Updated _regex_spotify_url to ignore /intl-<countrycode> in Spotify links
  • Improved README, docs and examples

Fixed

  • Readthedocs build
  • Split test_current_user_save_and_save_tracks unit test

Full Changelog: https://github.com/spotipy-dev/spotipy/compare/2.23.0...2.24.0

2.23: Misc. updates

Added

Fixed

2.22.1: CVE-2023-23608

Fixed

Changed

  • Modified docstring for deprecated playlist_add_items() to accept "only URIs or URLs", with intended fix for IDs in v3.
    • The bug still exists for developers dealing with episodes IDs rather than just track IDs. However it is recommended to use the new playlist_add_tracks() or playlist_add_episodes() if dealing with episodes or simply to avoid confusion. See spotipy-dev/spotipy#919 by @​oliveraw for context

2.22: Get queue endpoint

Added

  • Integration tests via GHA (non-user endpoints)
  • Unit tests for new releases, passing limit parameter with minimum and maximum values of 1 and 50
  • Unit tests for categories, omitting country code to test global releases
  • Added CODE_OF_CONDUCT.md

Fixed

... (truncated)

Changelog

Sourced from spotipy's changelog.

[2.24.0] - 2024-05-30

Added

  • Added MemcacheCacheHandler, a cache handler that stores the token info using pymemcache.
  • Added support for audiobook endpoints: get_audiobook, get_audiobooks, and get_audiobook_chapters.
  • Added integration tests for audiobook endpoints.
  • Added update field to current_user_follow_playlist.

Changed

  • Fixed error obfuscation when Spotify class is being inherited and an error is raised in the Child's __init__
  • Replaced artist_albums(album_type=...) with artist_albums(include_groups=...) due to an API change.
  • Updated _regex_spotify_url to ignore /intl-<countrycode> in Spotify links
  • Improved README, docs and examples

Fixed

  • Readthedocs build
  • Split test_current_user_save_and_usave_tracks unit test

Removed

  • Drop support for EOL Python 3.7

[2.23.0] - 2023-04-07

Added

  • Added optional encoder_cls argument to CacheFileHandler, which overwrite default encoder for token before writing to disk
  • Integration tests for searching multiple types in multiple markets (non-user endpoints)
  • Publish to PyPI action

Fixed

  • Fixed the regex for matching playlist URIs with the format spotify:user:USERNAME:playlist:PLAYLISTID.
  • search_markets now factors the counts of all types in the total rather than just the first type (#534)

[2.22.1] - 2023-01-23

Added

  • Add alternative module installation instruction to README
  • Added Comment to README - Getting Started for user to add URI to app in Spotify Developer Dashboard.
  • Added playlist_add_tracks.py to example folder

Changed

  • Modified docstring for playlist_add_items() to accept "only URIs or URLs", with intended deprecation for IDs in v3

Fixed

  • Path traversal vulnerability that may lead to type confusion in URI handling code
  • Update contributing.md

... (truncated)

Commits


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)