search

alan-turing-institute / data-safe-haven

https://data-safe-haven.readthedocs.io
BSD 3-Clause "New" or "Revised" License
61 stars 15 forks source link

Bump the production-dependencies group with 10 updates #2235

Closed dependabot[bot] closed 1 month ago

dependabot[bot] commented 1 month ago

Bumps the production-dependencies group with 10 updates:

Package From To
azure-identity 1.18.0 1.19.0
azure-storage-file-share 12.18.0 12.19.0
pulumi-azure-native 2.64.3 2.66.0
pulumi-azuread 5.53.4 6.0.0
pulumi 3.135.1 3.136.1
sphinx 8.0.2 8.1.3
ansible 10.4.0 10.5.0
black 24.8.0 24.10.0
pandas-stubs 2.2.2.240909 2.2.3.241009
coverage 7.6.1 7.6.3

Updates azure-identity from 1.18.0 to 1.19.0

Release notes

Sourced from azure-identity's releases.

azure-identity_1.19.0

1.19.0 (2024-10-08)

Bugs Fixed

  • Fixed the request sent in AzurePipelinesCredential so it doesn't result in a redirect response when an invalid system access token is provided. (#37510)

Other Changes

  • Deprecated AzureAuthorityHosts.AZURE_GERMANY
Commits


Updates azure-storage-file-share from 12.18.0 to 12.19.0

Release notes

Sourced from azure-storage-file-share's releases.

azure-storage-file-share_12.19.0

12.19.0 (2024-10-08)

Features Added

  • Updated type hints across the entire package and enabled MyPy to run during CI. Some public types may have been adjusted if they were previously erroneous or incomplete.
Commits


Updates pulumi-azure-native from 2.64.3 to 2.66.0

Release notes

Sourced from pulumi-azure-native's releases.

v2.66.0

Does the PR have any schema changes?

Found 2 breaking changes:

Types

  • 🟢 "azure-native:hybridconnectivity:AwsCloudProfileResponse": required: "accountId" property has changed to Required
  • 🟢 "azure-native:hybridconnectivity:PublicCloudConnectorPropertiesResponse": required: "hostType" property has changed to Required

New resources:

  • devcenter.ProjectPolicy

New functions:

  • devcenter.getProjectPolicy

Full Changelog: https://github.com/pulumi/pulumi-azure-native/compare/v2.65.1...v2.66.0

v2.65.1

Does the PR have any schema changes?

Looking good! No breaking changes found. No new resources/functions.

What's Changed

Full Changelog: https://github.com/pulumi/pulumi-azure-native/compare/v2.65.0...v2.65.1

v2.65.0

Does the PR have any schema changes?

Looking good! No breaking changes found.

New resources:

  • azurearcdata.SqlServerEsuLicense
  • azurearcdata.SqlServerLicense
  • containerinstance.NGroup

New functions:

... (truncated)

Commits
  • f06a15c Automated SDK generation @ azure-rest-api-specs 63c41aa20e38fe6d2ddd1a367b4fe...
  • d9ae509 Bugfix: remove accidental commit of test code in Diff (#3633)
  • 350d0cb Bump to latest spec and update IoTOperations exclusions (#3628)
  • See full diff in compare view


Updates pulumi-azuread from 5.53.4 to 6.0.0

Release notes

Sourced from pulumi-azuread's releases.

v6.0.0

Azure AD Pulumi Provider Version 6

Migration guide

endDateRelative deprecated

The property endDateRelative has deprecated in favor of endDate. The new endDate property should be used when creating new resources as changing the start or end date for these resources will require re-creation. The endDateRelative properties will be removed in the next major version of the provider.

List of affected resources:

  • azuread.ApplicationCertificate
  • azuread.ApplicationPassword
  • azuread.ServicePrincipalCertificate
  • azuread.ServicePrincipalPassword

Removed Properties

For the azuread.Application: resource, theapplicationId property has been removed in favor of clientId. This was previously deprecated and will not cause replacement.

The applicationObjectId properties were previously deprecated to be replaced by the applicationId. Replace applicationObjectId with applicationId in your code at the point of upgrading. This will not cause replacement of the existing resource. The following resources are affected:

Schema changes

Found 28 breaking changes:

Resources

  • 🟡 "azuread:index/application:Application": properties: "applicationId" missing output "applicationId"
  • "azuread:index/applicationCertificate:ApplicationCertificate":
    • 🟡 inputs: "applicationObjectId" missing
    • 🟡 properties: "applicationObjectId" missing output "applicationObjectId"
    • 🟢 required inputs: "applicationId" input has changed to Required
  • "azuread:index/applicationFederatedIdentityCredential:ApplicationFederatedIdentityCredential":
    • 🟡 inputs: "applicationObjectId" missing
    • 🟡 properties: "applicationObjectId" missing output "applicationObjectId"
    • 🟢 required inputs: "applicationId" input has changed to Required
  • "azuread:index/applicationPassword:ApplicationPassword":
    • 🟡 inputs: "applicationObjectId" missing
    • 🟡 properties: "applicationObjectId" missing output "applicationObjectId"
    • 🟢 required inputs: "applicationId" input has changed to Required
  • "azuread:index/applicationPreAuthorized:ApplicationPreAuthorized":
    • inputs:
      • 🟡 "applicationObjectId" missing
      • 🟡 "authorizedAppId" missing
    • properties:
      • 🟡 "applicationObjectId" missing output "applicationObjectId"
      • 🟡 "authorizedAppId" missing output "authorizedAppId"

... (truncated)

Commits


Updates pulumi from 3.135.1 to 3.136.1

Release notes

Sourced from pulumi's releases.

v3.136.1

3.136.1 (2024-10-08)

Miscellaneous

  • [sdkgen/{nodejs,python}] Bump minimum required SDK version to v3.136.0 #17501

v3.136.0

3.136.0 (2024-10-07)

Features

  • [cli/engine] Allow cancelling operations with SIGTERM #17467

  • [cli/state] Introduce the state repair command #17445

Bug Fixes

  • [cli/display] Hide --show-secrets with --save-plan #17444

  • [sdk/nodejs] Maintain secretness and input dependencies of output invokes #17479

  • [sdk/python] Send plain values to the engine in output invokes and keep track of input dependencies and secrets #17460

  • [sdk/python] Handle nested structures properly when unwrapping secrets from invoke inputs #17482

  • [sdk/python] Significantly reduce the number of debug log calls #17489

  • [sdk/python] Target Python 3.8 for linting SDK #17495

Miscellaneous

  • [sdk/nodejs] Exclude tests from the nodejs npm package #17488

  • [sdk/python] Update python grpcio to 1.66.2 #17487

Changelog

Sourced from pulumi's changelog.

3.136.1 (2024-10-08)

Miscellaneous

  • [sdkgen/{nodejs,python}] Bump minimum required SDK version to v3.136.0 #17501

3.136.0 (2024-10-07)

Features

  • [cli/engine] Allow cancelling operations with SIGTERM #17467

  • [cli/state] Introduce the state repair command #17445

Bug Fixes

  • [cli/display] Hide --show-secrets with --save-plan #17444

  • [sdk/nodejs] Maintain secretness and input dependencies of output invokes #17479

  • [sdk/python] Send plain values to the engine in output invokes and keep track of input dependencies and secrets #17460

  • [sdk/python] Handle nested structures properly when unwrapping secrets from invoke inputs #17482

  • [sdk/python] Significantly reduce the number of debug log calls #17489

  • [sdk/python] Target Python 3.8 for linting SDK #17495

Miscellaneous

  • [sdk/nodejs] Exclude tests from the nodejs npm package #17488

  • [sdk/python] Update python grpcio to 1.66.2 #17487

Commits
  • 08dd376 Add docs on how to run language conformance tests (#17498)
  • e9bb24c [sdkgen/python-nodejs] Bump minimum required SDK version to v3.136.0 (#17501)
  • ac7e4b0 Changelog and go.mod updates for v3.136.0 (#17504)
  • 76990f0 Freeze v3.136.0 (#17491)
  • 6315637 always run multiple stacks concurrently test locally (#17502)
  • 3d2b7de Allow cancelling operations with SIGTERM (#17467)
  • 7865389 Hide pulumi preview's --show-secrets with --save-plan (#17444)
  • bd76b17 Prepare for v3.136.0 (#17490)
  • cc59acd run in local workspace when no PULUMI_ACCESS_TOKEN is set (#17393)
  • 2e73bff [sdk/python] Handle nested structures properly when unwrapping secrets from i...
  • Additional commits viewable in compare view


Updates sphinx from 8.0.2 to 8.1.3

Release notes

Sourced from sphinx's releases.

Sphinx 8.1.3

Changelog: https://www.sphinx-doc.org/en/master/changes.html

Bugs fixed

  • #13013: Restore support for cut_lines() with no object type. Patch by Adam Turner.

Sphinx 8.1.2

Changelog: https://www.sphinx-doc.org/en/master/changes.html

Bugs fixed

  • #13012: Expose sphinx.errors.ExtensionError in sphinx.util for backwards compatibility. This will be removed in Sphinx 9, as exposing the exception in sphinx.util was never intentional. ExtensionError has been part of sphinx.errors since Sphinx 0.9. Patch by Adam Turner.

Sphinx 8.1.1

Changelog: https://www.sphinx-doc.org/en/master/changes.html

Bugs fixed

  • #13006: Use the preferred https://www.cve.org/ URL for the :cve: role. Patch by Hugo van Kemenade.
  • #13007: LaTeX: Improve resiliency when the required fontawesome or fontawesome5 packages are not installed. Patch by Jean-François B.

Sphinx 8.1.0

Changelog: https://www.sphinx-doc.org/en/master/changes.html

Dependencies

  • #12756: Add lower-bounds to the sphinxcontrib-* dependencies. Patch by Adam Turner.
  • #12833: Update the LaTeX parskip package from 2001 to 2018. Patch by Jean-François B.

Incompatible changes

  • #12763: Remove unused internal class sphinx.util.Tee. Patch by Adam Turner.
  • #12822: LaTeX: for Unicode engines, the fvset default is changed to '\\fvset{fontsize=auto}' from '\\fvset{fontsize=\\small}'. Code-blocks are unchanged as FreeMono is now loaded with Scale=0.9. An adjustment to existing projects is needed only if they used a custom fontpkg configuration and did not set fvset.

... (truncated)

Changelog

Sourced from sphinx's changelog.

Release 8.1.3 (in development)

Bugs fixed

  • #13013: Restore support for :func:!cut_lines with no object type. Patch by Adam Turner.

Release 8.1.2 (released Oct 12, 2024)

Bugs fixed

  • #13012: Expose :exc:sphinx.errors.ExtensionError in sphinx.util for backwards compatibility. This will be removed in Sphinx 9, as exposing the exception in sphinx.util was never intentional. :exc:!ExtensionError has been part of sphinx.errors since Sphinx 0.9. Patch by Adam Turner.

Release 8.1.1 (released Oct 11, 2024)

Bugs fixed

  • #13006: Use the preferred https://www.cve.org/ URL for the :rst:role::cve: <cve> role. Patch by Hugo van Kemenade.
  • #13007: LaTeX: Improve resiliency when the required fontawesome or fontawesome5 packages are not installed. Patch by Jean-François B.

Release 8.1.0 (released Oct 10, 2024)

Dependencies

  • #12756: Add lower-bounds to the sphinxcontrib-* dependencies. Patch by Adam Turner.
  • #12833: Update the LaTeX parskip package from 2001 to 2018. Patch by Jean-François B.

Incompatible changes

  • #12763: Remove unused internal class sphinx.util.Tee.

... (truncated)

Commits


Updates ansible from 10.4.0 to 10.5.0

Commits
  • 1fb809b Ansible 10.5.0: Dependencies, changelog and porting guide (#472)
  • c28c357 Remove constraints. (#471)
  • f6d931b Restrict ansible.posix to < 1.6.0. (#469)
  • 50d2580 Add missing removals. (#466)
  • 4548580 Automatically generate collection deprecation changelog entries from metadata...
  • 695352a Schedule sensu.sensu_go for removal in Ansible 12 (#464)
  • f42db38 Add instructions for EOL releases. (#461)
  • 88b689f Remove deprecated collection ngine_io.exoscale (#462)
  • d927799 Fix Ansible 11 changelog and porting guide.
  • 642dfb2 Ansible 11.0.0a1: Dependencies, changelog and porting guide (#460)
  • Additional commits viewable in compare view


Updates black from 24.8.0 to 24.10.0

Release notes

Sourced from black's releases.

24.10.0

Highlights

  • Black is now officially tested with Python 3.13 and provides Python 3.13 mypyc-compiled wheels. (#4436) (#4449)
  • Black will issue an error when used with Python 3.12.5, due to an upstream memory safety issue in Python 3.12.5 that can cause Black's AST safety checks to fail. Please use Python 3.12.6 or Python 3.12.4 instead. (#4447)
  • Black no longer supports running with Python 3.8 (#4452)

Stable style

  • Fix crashes involving comments in parenthesised return types or X | Y style unions. (#4453)
  • Fix skipping Jupyter cells with unknown %% magic (#4462)

Preview style

  • Fix type annotation spacing between * and more complex type variable tuple (i.e. def fn(*args: *tuple[*Ts, T]) -> None: pass) (#4440)

Caching

  • Fix bug where the cache was shared between runs with and without --unstable (#4466)

Packaging

  • Upgrade version of mypyc used to 1.12 beta (#4450) (#4449)
  • blackd now requires a newer version of aiohttp. (#4451)

Output

  • Added Python target version information on parse error (#4378)
  • Add information about Black version to internal error messages (#4457)
Changelog

Sourced from black's changelog.

24.10.0

Highlights

  • Black is now officially tested with Python 3.13 and provides Python 3.13 mypyc-compiled wheels. (#4436) (#4449)
  • Black will issue an error when used with Python 3.12.5, due to an upstream memory safety issue in Python 3.12.5 that can cause Black's AST safety checks to fail. Please use Python 3.12.6 or Python 3.12.4 instead. (#4447)
  • Black no longer supports running with Python 3.8 (#4452)

Stable style

  • Fix crashes involving comments in parenthesised return types or X | Y style unions. (#4453)
  • Fix skipping Jupyter cells with unknown %% magic (#4462)

Preview style

  • Fix type annotation spacing between * and more complex type variable tuple (i.e. def fn(*args: *tuple[*Ts, T]) -> None: pass) (#4440)

Caching

  • Fix bug where the cache was shared between runs with and without --unstable (#4466)

Packaging

  • Upgrade version of mypyc used to 1.12 beta (#4450) (#4449)
  • blackd now requires a newer version of aiohttp. (#4451)

Output

  • Added Python target version information on parse error (#4378)
  • Add information about Black version to internal error messages (#4457)
Commits


Updates pandas-stubs from 2.2.2.240909 to 2.2.3.241009

Commits


Updates coverage from 7.6.1 to 7.6.3

Changelog

Sourced from coverage's changelog.

Version 7.6.3 — 2024-10-13

  • Fix: nested context managers could incorrectly be analyzed to flag a missing branch on the last context manager, as described in issue 1876_. This is now fixed.

  • Fix: the missing branch message about not exiting a module had an extra "didn't," as described in issue 1873_. This is now fixed.

.. _issue 1873: nedbat/coveragepy#1873 .. _issue 1876: nedbat/coveragepy#1876

.. _changes_7-6-2:

Version 7.6.2 — 2024-10-09

  • Dropped support for Python 3.8 and PyPy 3.8.

  • Fix: a final wildcard match/case clause assigning to a name (case _ as value) was incorrectly marked as a missing branch. This is now fixed, closing issue 1860_.

  • Fewer things are considered branches now. Lambdas, comprehensions, and generator expressions are no longer marked as missing branches if they don't complete execution. Closes issue 1852_.

  • Fix: the HTML report didn't properly show multi-line f-strings that end with a backslash continuation. This is now fixed, closing issue 1836, thanks to LiuYinCarl and Marco Ricci <pull 1838_>.

  • Fix: the LCOV report now has correct line numbers (fixing issue 1846) and better branch descriptions for BRDA records (fixing issue 1850). There are other changes to lcov also, including a new configuration option :ref:line_checksums <config_lcov_line_checksums> to control whether line checksums are included in the lcov report. The default is false. To keep checksums set it to true. All this work is thanks to Zack Weinberg (pull 1849_ and pull 1851_).

  • Fixed the docs for multi-line regex exclusions, closing issue 1863_.

  • Fixed a potential crash in the C tracer, closing issue 1835, thanks to Jan Kühle <pull 1843_>.

.. _issue 1835: nedbat/coveragepy#1835 .. _issue 1836: nedbat/coveragepy#1836 .. _pull 1838: nedbat/coveragepy#1838 .. _pull 1843: nedbat/coveragepy#1843

... (truncated)

Commits
  • 342a4cb docs: sample HTML for 7.6.3
  • df03796 docs: prep for 7.6.3
  • 378c321 fix: nested context managers shouldn't cause a phantom missing branch #1876
  • c8902ed build: pypy 3.9 doesn't seem to be available nightly
  • c59a77b docs(build): put a header on the GitHub releases
  • 65ac395 docs: fix a link in the changes
  • 2d3e72c docs: add coverage-simple-excludes to the docs
  • 474a363 fix: didn't-ectomy. #1873
  • 5229fc3 docs: mention 1852 is fixed
  • 6a4506f build(docs): upgrade doc dependencies
  • Additional commits viewable in compare view


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore ` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore ` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore ` will remove the ignore condition of the specified dependency and ignore conditions
github-actions[bot] commented 1 month ago

Coverage report

This PR does not seem to contain any modification to coverable code.

dependabot[bot] commented 1 month ago

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml