search

amazon-ion / ion-python

A Python implementation of Amazon Ion.
https://amazon-ion.github.io/ion-docs/
Apache License 2.0
260 stars 51 forks source link

Update python-rapidjson requirement from ~=1.9 to ~=1.17 #356

Closed dependabot[bot] closed 5 months ago

dependabot[bot] commented 5 months ago

Updates the requirements on python-rapidjson to permit the latest version.

Changelog

Sourced from python-rapidjson's changelog.

1.17 (2024-05-18)


* Use `current master`__ version of rapidjson

__ https://github.com/Tencent/rapidjson/compare/5e17dbed34eef33af8f3e734820b5dc547a2a3aa...ab1842a2dae061284c0a62dca1cc6d5e7e37e346



1.16 (2024-02-28)

  • Produce Python 3.8 wheels again, I deactivated it too eagerly, it's in security fixes only mode, not yet reached its end-of-life state

1.15 (2024-02-28)


* Honor the `recursion limit`__ also at parse time, to avoid attacks as described by
  `CVE-2024-27454`__

__ https://docs.python.org/3.12/library/sys.html#sys.setrecursionlimit
__ https://monicz.dev/CVE-2024-27454


1.14 (2023-12-14)

  • Produce binary wheels for macOS/arm64, thanks to timothyjlaurent (PR [#195](https://github.com/python-rapidjson/python-rapidjson/issues/195)__)

    __ python-rapidjson/python-rapidjson#170

1.13 (2023-10-29)


* Fix handling of write_mode in dump functions (problem emerged discussing `issue [#191](https://github.com/python-rapidjson/python-rapidjson/issues/191)`__)

__ python-rapidjson/python-rapidjson#191


1.12 (2023-10-07)

  • Generate wheels on PyPI using final Python 3.12 release, thanks to cibuildwheel 2.16.2__

... (truncated)

Commits
  • e3a2527 Release 1.17
  • 68d30d7 Update CHANGES.rst
  • 5ec7b84 Include the changelog in the documentation
  • 5624040 Rectify URL to previous upgrade of underlying rapidjson
  • 9eef116 Use cibuildwheel 2.18.0
  • e6dbdec Use cibuildwheel 2.17.0
  • aeeeea5 Recompute the benchmarks against latest pysimdjson, orjson and ujson
  • 046dc46 Upgrade underlying rapidjson library to its current master
  • 8b4375c Upgrade development requirements
  • 018fe4a Release 1.16
  • Additional commits viewable in compare view


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
dependabot[bot] commented 5 months ago

Superseded by #357.