build(deps): Bump yarl from 1.17.1 to 1.18.0

[dependabot[bot]]

Bumps yarl from 1.17.1 to 1.18.0.

Release notes

Sourced from yarl's releases.

1.18.0

Features

• Added keep_query and keep_fragment flags in the :py:meth:yarl.URL.with_path, :py:meth:yarl.URL.with_name and :py:meth:yarl.URL.with_suffix methods, allowing users to optionally retain the query string and fragment in the resulting URL when replacing the path -- by :user:paul-nameless.

  Related issues and pull requests on GitHub: #111, #1421.

Contributor-facing changes

• Started running downstream aiohttp tests in CI -- by :user:Cycloctane.

  Related issues and pull requests on GitHub: #1415.

Miscellaneous internal changes

• Improved performance of converting :class:~yarl.URL to a string -- by :user:bdraco.

  Related issues and pull requests on GitHub: #1422.

---

1.17.2

Bug fixes

• Stopped implicitly allowing the use of Cython pre-release versions when building the distribution package -- by :user:ajsanchezsanz and :user:markgreene74.

  Related issues and pull requests on GitHub: #1411, #1412.

• Fixed a bug causing :attr:~yarl.URL.port to return the default port when the given port was zero -- by :user:gmacon.

  Related issues and pull requests on GitHub: #1413.

Features

... (truncated)

Changelog

Sourced from yarl's changelog.

1.18.0

(2024-11-21)

Features

• Added keep_query and keep_fragment flags in the :py:meth:yarl.URL.with_path, :py:meth:yarl.URL.with_name and :py:meth:yarl.URL.with_suffix methods, allowing users to optionally retain the query string and fragment in the resulting URL when replacing the path -- by :user:paul-nameless.

  Related issues and pull requests on GitHub: :issue:111, :issue:1421.

Contributor-facing changes

• Started running downstream aiohttp tests in CI -- by :user:Cycloctane.

  Related issues and pull requests on GitHub: :issue:1415.

Miscellaneous internal changes

• Improved performance of converting :class:~yarl.URL to a string -- by :user:bdraco.

  Related issues and pull requests on GitHub: :issue:1422.

---

1.17.2

(2024-11-17)

Bug fixes

• Stopped implicitly allowing the use of Cython pre-release versions when building the distribution package -- by :user:ajsanchezsanz and :user:markgreene74.

  Related issues and pull requests on GitHub:

... (truncated)

Commits

• 2e8cd0d Release 1.18.0 (#1429)
• b7bdfd5 Add aiohttp tests to CI (#1415)
• fc08cb8 Allow replacing path without replacing query or fragment (#1421)
• 2b94725 Revert "Temporarily downgrade codecov-action to 5.0.3 to fix CI" (#1428)
• 9f99a40 Remove internal _default_port property (#1424)
• 57d69fe Temporarily downgrade codecov-action to 5.0.3 to fix CI (#1425)
• a8d2556 Bump master to 1.18.0.dev0 (#1423)
• b07cbb8 Improve performance of converting a URL to a string (#1422)
• b31eaa1 Increment version to 1.17.3.dev0 (#1420)
• 4ab9b12 Release 1.17.2 (#1419)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)