search

OWASP / cornucopia

The source files and tools needed to build the OWASP Cornucopia decks in various languages
https://cornucopia.owasp.org
Other
41 stars 19 forks source link

Bump pipenv from 2024.0.2 to 2024.1.0 #807

Closed dependabot[bot] closed 6 days ago

dependabot[bot] commented 6 days ago

Bumps pipenv from 2024.0.2 to 2024.1.0.

Release notes

Sourced from pipenv's releases.

Release v2024.1.0

What's Changed

Full Changelog: https://github.com/pypa/pipenv/compare/v2024.0.3...v2024.1.0

Release v2024.0.3

What's Changed

New Contributors

Full Changelog: https://github.com/pypa/pipenv/compare/v2024.0.2...v2024.0.3

Changelog

Sourced from pipenv's changelog.

2024.1.0 (2024-09-29)

Pipenv 2024.1.0 (2024-09-29)

Features & Improvements

  • Upgrade from pip==24.0 to pip==24.1.2. [#6253](https://github.com/pypa/pipenv/issues/6253) <https://github.com/pypa/pipenv/issues/6253>_

Bug Fixes

  • Fixes regression in lock file generation that caused environment variable references (e.g., ${GIT_PASSWORD}) in VCS URLs to be stripped out. This restores the ability to use credential placeholders in version control system URLs. [#6256](https://github.com/pypa/pipenv/issues/6256) <https://github.com/pypa/pipenv/issues/6256>_ 2024.0.3 (2024-09-22) ===================== Pipenv 2024.0.3 (2024-09-22) ============================

Bug Fixes

  • Disable ResourceWarning warning for temporary files that are cleaned on program exit. [#6151](https://github.com/pypa/pipenv/issues/6151) <https://github.com/pypa/pipenv/issues/6151>_
  • Fixed package sorting when installing a package with extras. [#6171](https://github.com/pypa/pipenv/issues/6171) <https://github.com/pypa/pipenv/issues/6171>_
  • Fixed pipenv uninstall --all failing when the virtual environment no longer exists. [#6185](https://github.com/pypa/pipenv/issues/6185) <https://github.com/pypa/pipenv/issues/6185>_
  • Fix issue where installing a vcs dependency using pipenv CLI yielded the wrong Pipfile entry such that it could not lock. [#6242](https://github.com/pypa/pipenv/issues/6242) <https://github.com/pypa/pipenv/issues/6242>_
  • Fix report that pipenv requires packaging>=22 on some systems by setting it as a dependency. [#6243](https://github.com/pypa/pipenv/issues/6243) <https://github.com/pypa/pipenv/issues/6243>_
Commits
  • 2b9c78a Release v2024.1.0
  • 3a16980 Bumped version to 2024.1.0.
  • 9d7dc56 don't try to bump to dev version during pypi publish.
  • 89fd265 Merge pull request #6262 from pypa/fix-ci-vcs
  • 2651f99 Fix tests for windows and leave behavior for mac/linux
  • cbcd06c Fix test on windows
  • d9e6dfe Merge pull request #6260 from pypa/fix-get-pipenv
  • 7d22200 ruff: ignore get-pipenv.py
  • e1866a9 Update get-pipenv.py
  • fa08ff5 Make this code path more safe to prevent stack trace/regression.
  • Additional commits viewable in compare view


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
dependabot[bot] commented 6 days ago

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.