Yelp / detect-secrets

An enterprise friendly way of detecting and preventing secrets in code.
Apache License 2.0
3.62k stars 450 forks source link

Bump importlib-metadata from 4.8.1 to 6.1.0 #667

Closed dependabot[bot] closed 1 year ago

dependabot[bot] commented 1 year ago

Bumps importlib-metadata from 4.8.1 to 6.1.0.

Changelog

Sourced from importlib-metadata's changelog.

v6.1.0

  • #428: packages_distributions now honors packages and modules with Python modules that not .py sources (e.g. .pyc, .so).

v6.0.1

  • #434: Expand protocol for PackageMetadata.get_all to match the upstream implementation of email.message.Message.get_all in python/typeshed#9620.

v6.0.0

  • #419: Declared Distribution as an abstract class, enforcing definition of abstract methods in instantiated subclasses. It's no longer possible to instantiate a Distribution or any subclasses unless they define the abstract methods.

    Please comment in the issue if this change breaks any projects. This change will likely be rolled back if it causes significant disruption.

v5.2.0

  • #371: Deprecated expectation that PackageMetadata.__getitem__ will return None for missing keys. In the future, it will raise a KeyError.

v5.1.0

  • #415: Instrument SimplePath with generic support.

v5.0.0

  • #97, #284, #300: Removed compatibility shims for deprecated entry point interfaces.

v4.13.0

  • #396: Added compatibility for PathDistributions originating from Python 3.8 and 3.9.

... (truncated)

Commits
  • 66e8e9b Merge pull request #432 from FFY00/gh-428
  • df7824b Restore logic for parts.
  • 6610368 Extract variable for optional names.
  • a3c066d Remove long-line comment.
  • 56aee03 Add missing modules to packages_distributions
  • b944c37 Merge pull request #435 from FFY00/fix-mypy
  • a046b04 Extend the workaround to satisfy docstring of typing._overload_dummy.
  • ac0949a Update changelog.
  • 51b89b0 👹 Feed the hobgoblins (delint).
  • fb364de Add comment to link rationale for existence.
  • Additional commits viewable in compare view


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
dependabot[bot] commented 1 year ago

Superseded by #682.