alan-turing-institute / data-safe-haven

https://data-safe-haven.readthedocs.io
BSD 3-Clause "New" or "Revised" License
61 stars 15 forks source link

Bump the production-dependencies group with 5 updates #2276

Closed dependabot[bot] closed 5 days ago

dependabot[bot] commented 1 week ago

Bumps the production-dependencies group with 5 updates:

Package From To
azure-core 1.31.0 1.32.0
pulumi-azure-native 2.68.0 2.69.0
rich 13.9.3 13.9.4
ansible-dev-tools 24.10.0 24.10.1
ruff 0.7.1 0.7.2

Updates azure-core from 1.31.0 to 1.32.0

Release notes

Sourced from azure-core's releases.

azure-core_1.32.0

1.32.0 (2024-10-31)

Features Added

  • Added a default implementation to handle token challenges in BearerTokenCredentialPolicy and AsyncBearerTokenCredentialPolicy.

Bugs Fixed

  • Fixed an issue where the tracing_attributes keyword argument wasn't being handled at the request/method level. #38164

Other Changes

  • Log "x-vss-e2eid" and "x-msedge-ref" headers in HttpLoggingPolicy.
Commits


Updates pulumi-azure-native from 2.68.0 to 2.69.0

Release notes

Sourced from pulumi-azure-native's releases.

v2.69.0

Does the PR have any schema changes?

Looking good! No breaking changes found.

New resources:

  • edge.Site
  • edge.SitesBySubscription

New functions:

  • edge.getSite
  • edge.getSitesBySubscription

What's Changed

Full Changelog: https://github.com/pulumi/pulumi-azure-native/compare/v2.68.0...v2.69.0

Commits


Updates rich from 13.9.3 to 13.9.4

Release notes

Sourced from rich's releases.

The Faster is Faster release

[13.9.4] - 2024-11-01

Changed

Changelog

Sourced from rich's changelog.

[13.9.4] - 2024-11-01

Changed

Commits


Updates ansible-dev-tools from 24.10.0 to 24.10.1

Release notes

Sourced from ansible-dev-tools's releases.

v24.10.1

Enhancements

Bugfixes

Commits
  • 1e39396 Bump the dependencies group in /.config with 11 updates (#448)
  • 0df3da9 Updates for server v2 (#442)
  • b18efe7 Update pre-commit hooks (#443)
  • 1b68590 Refactor server creator class to V1 and update all the references (#441)
  • c30c59b Move the tar file generation (#440)
  • b2bdd76 Further optimize the image building to reduce layers (#432)
  • e1d0682 Bump the dependencies group in /.config with 13 updates (#436)
  • 558372d More permissions for testing pipeline (#435)
  • 5717f03 More permissions for testing pipeline (#434)
  • 93da683 Allow publish of packages from jobs requiring it (#433)
  • Additional commits viewable in compare view


Updates ruff from 0.7.1 to 0.7.2

Release notes

Sourced from ruff's releases.

0.7.2

Release Notes

Preview features

  • Fix formatting of single with-item with trailing comment (#14005)
  • [pyupgrade] Add PEP 646 Unpack conversion to * with fix (UP044) (#13988)

Rule changes

  • Regenerate known_stdlibs.rs with stdlibs 2024.10.25 (#13963)
  • [flake8-no-pep420] Skip namespace package enforcement for PEP 723 scripts (INP001) (#13974)

Server

  • Fix server panic when undoing an edit (#14010)

Bug fixes

  • Fix issues in discovering ruff in pip build environments (#13881)
  • [flake8-type-checking] Fix false positive for singledispatchmethod (TCH003) (#13941)
  • [flake8-type-checking] Treat return type of singledispatch as runtime-required (TCH003) (#13957)

Documentation

  • [flake8-simplify] Include caveats of enabling if-else-block-instead-of-if-exp (SIM108) (#14019)

Install ruff 0.7.2

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://github.com/astral-sh/ruff/releases/download/0.7.2/ruff-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy ByPass -c "irm https://github.com/astral-sh/ruff/releases/download/0.7.2/ruff-installer.ps1 | iex"

Download ruff 0.7.2

File Platform Checksum
ruff-aarch64-apple-darwin.tar.gz Apple Silicon macOS checksum
ruff-x86_64-apple-darwin.tar.gz Intel macOS checksum
ruff-aarch64-pc-windows-msvc.zip ARM64 Windows checksum
ruff-i686-pc-windows-msvc.zip x86 Windows checksum
ruff-x86_64-pc-windows-msvc.zip x64 Windows checksum

... (truncated)

Changelog

Sourced from ruff's changelog.

0.7.2

Preview features

  • Fix formatting of single with-item with trailing comment (#14005)
  • [pyupgrade] Add PEP 646 Unpack conversion to * with fix (UP044) (#13988)

Rule changes

  • Regenerate known_stdlibs.rs with stdlibs 2024.10.25 (#13963)
  • [flake8-no-pep420] Skip namespace package enforcement for PEP 723 scripts (INP001) (#13974)

Server

  • Fix server panic when undoing an edit (#14010)

Bug fixes

  • Fix issues in discovering ruff in pip build environments (#13881)
  • [flake8-type-checking] Fix false positive for singledispatchmethod (TCH003) (#13941)
  • [flake8-type-checking] Treat return type of singledispatch as runtime-required (TCH003) (#13957)

Documentation

  • [flake8-simplify] Include caveats of enabling if-else-block-instead-of-if-exp (SIM108) (#14019)
Commits


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore ` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore ` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore ` will remove the ignore condition of the specified dependency and ignore conditions
github-actions[bot] commented 1 week ago

Coverage report

This PR does not seem to contain any modification to coverable code.

dependabot[bot] commented 1 week ago

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

dependabot[bot] commented 5 days ago

Looks like these dependencies are updatable in another way, so this is no longer needed.