fix(deps) Update all non-major dependencies

This PR contains the following updates:

Package	Change	Type	Update	Pending
@semantic-release/github	`9.0.4` -> `9.0.5`	devDependencies	patch	`9.0.6`
Flask (changelog)	`2.2.5` -> `2.3.3`	dependencies	minor
Flask-SQLAlchemy (changelog)	`3.0.5` -> `3.1.1`	dev-dependencies	minor
asottile/pyupgrade	`v3.10.1` -> `v3.11.0`	repository	minor
black (changelog)	`23.3.0` -> `23.9.1`	dev-dependencies	minor
boto3	`1.28.44` -> `1.28.49`	dev-dependencies	patch
coverage	`7.2.7` -> `7.3.1`	dev-dependencies	minor
google-cloud-firestore	`2.11.1` -> `2.12.0`	dev-dependencies	minor
isort (source, changelog)	`5.11.5` -> `5.12.0`	dev-dependencies	minor
mypy (source, changelog)	`1.4.1` -> `1.5.1`	dev-dependencies	minor
tox (changelog)	`4.8.0` -> `4.11.3`	dev-dependencies	minor

Note: The pre-commit manager in Renovate is not supported by the pre-commit maintainers or community. Please do not report any problems there, instead create a Discussion in the Renovate repository if you have any questions.

Release Notes

semantic-release/github (@semantic-release/github)

### [`v9.0.5`](https://togithub.com/semantic-release/github/releases/tag/v9.0.5) [Compare Source](https://togithub.com/semantic-release/github/compare/v9.0.4...v9.0.5) ##### Bug Fixes - define retry limit in retry config ([#693](https://togithub.com/semantic-release/github/issues/693)) ([5ad0486](https://togithub.com/semantic-release/github/commit/5ad0486de55c2edfb653fde4735e623fab139148))

asottile/pyupgrade (asottile/pyupgrade)

### [`v3.11.0`](https://togithub.com/asottile/pyupgrade/compare/v3.10.1...v3.11.0) [Compare Source](https://togithub.com/asottile/pyupgrade/compare/v3.10.1...v3.11.0)

psf/black (black)

### [`v23.9.1`](https://togithub.com/psf/black/blob/HEAD/CHANGES.md#2391) [Compare Source](https://togithub.com/psf/black/compare/23.9.0...23.9.1) Due to various issues, the previous release (23.9.0) did not include compiled mypyc wheels, which make Black significantly faster. These issues have now been fixed, and this release should come with compiled wheels once again. There will be no wheels for Python 3.12 due to a bug in mypyc. We will provide 3.12 wheels in a future release as soon as the mypyc bug is fixed. ##### Packaging - Upgrade to mypy 1.5.1 ([#3864](https://togithub.com/psf/black/issues/3864)) ##### Performance - Store raw tuples instead of NamedTuples in Black's cache, improving performance and decreasing the size of the cache ([#3877](https://togithub.com/psf/black/issues/3877)) ### [`v23.9.0`](https://togithub.com/psf/black/blob/HEAD/CHANGES.md#2390) [Compare Source](https://togithub.com/psf/black/compare/23.7.0...23.9.0) ##### Preview style - More concise formatting for dummy implementations ([#3796](https://togithub.com/psf/black/issues/3796)) - In stub files, add a blank line between a statement with a body (e.g an `if sys.version_info > (3, x):`) and a function definition on the same level ([#3862](https://togithub.com/psf/black/issues/3862)) - Fix a bug whereby spaces were removed from walrus operators within subscript([#3823](https://togithub.com/psf/black/issues/3823)) ##### Configuration - Black now applies exclusion and ignore logic before resolving symlinks ([#3846](https://togithub.com/psf/black/issues/3846)) ##### Performance - Avoid importing `IPython` if notebook cells do not contain magics ([#3782](https://togithub.com/psf/black/issues/3782)) - Improve caching by comparing file hashes as fallback for mtime and size ([#3821](https://togithub.com/psf/black/issues/3821)) ##### *Blackd* - Fix an issue in `blackd` with single character input ([#3558](https://togithub.com/psf/black/issues/3558)) ##### Integrations - Black now has an [official pre-commit mirror](https://togithub.com/psf/black-pre-commit-mirror). Swapping `https://github.com/psf/black` to `https://github.com/psf/black-pre-commit-mirror` in your `.pre-commit-config.yaml` will make Black about 2x faster ([#3828](https://togithub.com/psf/black/issues/3828)) - The `.black.env` folder specified by `ENV_PATH` will now be removed on the completion of the GitHub Action ([#3759](https://togithub.com/psf/black/issues/3759)) ### [`v23.7.0`](https://togithub.com/psf/black/blob/HEAD/CHANGES.md#2370) [Compare Source](https://togithub.com/psf/black/compare/23.3.0...23.7.0) ##### Highlights - Runtime support for Python 3.7 has been removed. Formatting 3.7 code will still be supported until further notice ([#3765](https://togithub.com/psf/black/issues/3765)) ##### Stable style - Fix a bug where an illegal trailing comma was added to return type annotations using PEP 604 unions ([#3735](https://togithub.com/psf/black/issues/3735)) - Fix several bugs and crashes where comments in stub files were removed or mishandled under some circumstances ([#3745](https://togithub.com/psf/black/issues/3745)) - Fix a crash with multi-line magic comments like `type: ignore` within parentheses ([#3740](https://togithub.com/psf/black/issues/3740)) - Fix error in AST validation when *Black* removes trailing whitespace in a type comment ([#3773](https://togithub.com/psf/black/issues/3773)) ##### Preview style - Implicitly concatenated strings used as function args are no longer wrapped inside parentheses ([#3640](https://togithub.com/psf/black/issues/3640)) - Remove blank lines between a class definition and its docstring ([#3692](https://togithub.com/psf/black/issues/3692)) ##### Configuration - The `--workers` argument to *Black* can now be specified via the `BLACK_NUM_WORKERS` environment variable ([#3743](https://togithub.com/psf/black/issues/3743)) - `.pytest_cache`, `.ruff_cache` and `.vscode` are now excluded by default ([#3691](https://togithub.com/psf/black/issues/3691)) - Fix *Black* not honouring `pyproject.toml` settings when running `--stdin-filename` and the `pyproject.toml` found isn't in the current working directory ([#3719](https://togithub.com/psf/black/issues/3719)) - *Black* will now error if `exclude` and `extend-exclude` have invalid data types in `pyproject.toml`, instead of silently doing the wrong thing ([#3764](https://togithub.com/psf/black/issues/3764)) ##### Packaging - Upgrade mypyc from 0.991 to 1.3 ([#3697](https://togithub.com/psf/black/issues/3697)) - Remove patching of Click that mitigated errors on Python 3.6 with `LANG=C` ([#3768](https://togithub.com/psf/black/issues/3768)) ##### Parser - Add support for the new PEP 695 syntax in Python 3.12 ([#3703](https://togithub.com/psf/black/issues/3703)) ##### Performance - Speed up *Black* significantly when the cache is full ([#3751](https://togithub.com/psf/black/issues/3751)) - Avoid importing `IPython` in a case where we wouldn't need it ([#3748](https://togithub.com/psf/black/issues/3748)) ##### Output - Use aware UTC datetimes internally, avoids deprecation warning on Python 3.12 ([#3728](https://togithub.com/psf/black/issues/3728)) - Change verbose logging to exactly mirror *Black*'s logic for source discovery ([#3749](https://togithub.com/psf/black/issues/3749)) ##### *Blackd* - The `blackd` argument parser now shows the default values for options in their help text ([#3712](https://togithub.com/psf/black/issues/3712)) ##### Integrations - Black is now tested with [`PYTHONWARNDEFAULTENCODING = 1`](https://docs.python.org/3/library/io.html#io-encoding-warning) ([#3763](https://togithub.com/psf/black/issues/3763)) - Update GitHub Action to display black output in the job summary ([#3688](https://togithub.com/psf/black/issues/3688)) ##### Documentation - Add a CITATION.cff file to the root of the repository, containing metadata on how to cite this software ([#3723](https://togithub.com/psf/black/issues/3723)) - Update the *classes* and *exceptions* documentation in Developer reference to match the latest code base ([#3755](https://togithub.com/psf/black/issues/3755))

boto/boto3 (boto3)

### [`v1.28.49`](https://togithub.com/boto/boto3/blob/HEAD/CHANGELOG.rst#12849) [Compare Source](https://togithub.com/boto/boto3/compare/1.28.48...1.28.49) \======= - api-change:`appstream`: \[`botocore`] This release introduces app block builder, allowing customers to provision a resource to package applications into an app block - api-change:`connect`: \[`botocore`] New rule type (OnMetricDataUpdate) has been added - api-change:`datasync`: \[`botocore`] Documentation-only updates for AWS DataSync. - api-change:`sagemaker`: \[`botocore`] This release introduces Skip Model Validation for Model Packages ### [`v1.28.48`](https://togithub.com/boto/boto3/blob/HEAD/CHANGELOG.rst#12848) [Compare Source](https://togithub.com/boto/boto3/compare/1.28.47...1.28.48) \======= - api-change:`appstream`: \[`botocore`] This release introduces multi-session fleets, allowing customers to provision more than one user session on a single fleet instance. - api-change:`cloudformation`: \[`botocore`] Documentation updates for AWS CloudFormation - api-change:`entityresolution`: \[`botocore`] Changed "ResolutionTechniques" and "MappedInputFields" in workflow and schema mapping operations to be required fields. - api-change:`lookoutequipment`: \[`botocore`] This release adds APIs for the new scheduled retraining feature. ### [`v1.28.47`](https://togithub.com/boto/boto3/blob/HEAD/CHANGELOG.rst#12847) [Compare Source](https://togithub.com/boto/boto3/compare/1.28.46...1.28.47) \======= - api-change:`cloud9`: \[`botocore`] Update to include information on Ubuntu 18 deprecation. - api-change:`drs`: \[`botocore`] Updated existing APIs and added new ones to support using AWS Elastic Disaster Recovery post-launch actions. Added support for new regions. - api-change:`firehose`: \[`botocore`] DocumentIdOptions has been added for the Amazon OpenSearch destination. - api-change:`guardduty`: \[`botocore`] Add `managementType` field to ListCoverage API response. - api-change:`internetmonitor`: \[`botocore`] This release updates the Amazon CloudWatch Internet Monitor API domain name. - api-change:`ivs-realtime`: \[`botocore`] Doc only update that changes description for ParticipantToken. - api-change:`simspaceweaver`: \[`botocore`] Edited the introductory text for the API reference. - api-change:`xray`: \[`botocore`] Add StartTime field in GetTraceSummaries API response for each TraceSummary. ### [`v1.28.46`](https://togithub.com/boto/boto3/blob/HEAD/CHANGELOG.rst#12846) [Compare Source](https://togithub.com/boto/boto3/compare/1.28.45...1.28.46) \======= - api-change:`ec2`: \[`botocore`] This release adds support for restricting public sharing of AMIs through AMI Block Public Access - api-change:`events`: \[`botocore`] Update events client to latest version - api-change:`kendra`: \[`botocore`] Amazon Kendra now supports confidence score buckets for retrieved passage results using the Retrieve API. ### [`v1.28.45`](https://togithub.com/boto/boto3/blob/HEAD/CHANGELOG.rst#12845) [Compare Source](https://togithub.com/boto/boto3/compare/1.28.44...1.28.45) \======= - api-change:`ecr`: \[`botocore`] This release will have ValidationException be thrown from ECR LifecyclePolicy APIs in regions LifecyclePolicy is not supported, this includes existing Amazon Dedicated Cloud (ADC) regions. This release will also change Tag: TagValue and Tag: TagKey to required. - api-change:`medialive`: \[`botocore`] AWS Elemental Link now supports attaching a Link UHD device to a MediaConnect flow. - api-change:`quicksight`: \[`botocore`] This release launches new updates to QuickSight KPI visuals - support for sparklines, new templated layout and new targets for conditional formatting rules.

nedbat/coveragepy (coverage)

### [`v7.3.1`](https://togithub.com/nedbat/coveragepy/blob/HEAD/CHANGES.rst#Version-731--2023-09-06) [Compare Source](https://togithub.com/nedbat/coveragepy/compare/7.3.0...7.3.1) - The semantics of stars in file patterns has been clarified in the docs. A leading or trailing star matches any number of path components, like a double star would. This is different than the behavior of a star in the middle of a pattern. This discrepancy was `identified by Sviatoslav Sydorenko `*, who `provided patient detailed diagnosis `* and graciously agreed to a pragmatic resolution. - The API docs were missing from the last version. They are now `restored `\_. .. \_apidocs: https://coverage.readthedocs.io/en/latest/api_coverage.html .. \_starbad[https://github.com/nedbat/coveragepy/issues/1407#issuecomment-1631085209](https://togithub.com/nedbat/coveragepy/issues/1407#issuecomment-1631085209)09 .. \_pull 165[https://github.com/nedbat/coveragepy/pull/1650](https://togithub.com/nedbat/coveragepy/pull/1650)650 .. \_changes\_7-3-0: ### [`v7.3.0`](https://togithub.com/nedbat/coveragepy/blob/HEAD/CHANGES.rst#Version-730--2023-08-12) [Compare Source](https://togithub.com/nedbat/coveragepy/compare/7.2.7...7.3.0) - Added a :meth:`.Coverage.collect` context manager to start and stop coverage data collection. - Dropped support for Python 3.7. - Fix: in unusual circumstances, SQLite cannot be set to asynchronous mode. Coverage.py would fail with the error `Safety level may not be changed inside a transaction.` This is now avoided, closing `issue 1646`\_. Thanks to Michael Bell for the detailed bug report. - Docs: examples of configuration files now include separate examples for the different syntaxes: .coveragerc, pyproject.toml, setup.cfg, and tox.ini. - Fix: added `nosemgrep` comments to our JavaScript code so that semgrep-based SAST security checks won't raise false alarms about security problems that aren't problems. - Added a CITATION.cff file, thanks to `Ken Schackart `\_. .. \_pull 1641:[https://github.com/nedbat/coveragepy/pull/1641](https://togithub.com/nedbat/coveragepy/pull/1641)1 .. \_issue 1646[https://github.com/nedbat/coveragepy/issues/1646](https://togithub.com/nedbat/coveragepy/issues/1646)46 .. \_changes\_7-2-7:

googleapis/python-firestore (google-cloud-firestore)

### [`v2.12.0`](https://togithub.com/googleapis/python-firestore/blob/HEAD/CHANGELOG.md#2120-2023-08-07) [Compare Source](https://togithub.com/googleapis/python-firestore/compare/v2.11.1...v2.12.0) ##### Features - Add ApiScope and COLLECTION_RECURSIVE query_scope for Firestore index ([#718](https://togithub.com/googleapis/python-firestore/issues/718)) ([d8de142](https://togithub.com/googleapis/python-firestore/commit/d8de142b52ed0a7f9e299309173cc72b20184e5c)) - Add bloom filter related proto fields ([#710](https://togithub.com/googleapis/python-firestore/issues/710)) ([26ac1cf](https://togithub.com/googleapis/python-firestore/commit/26ac1cfd7450866e6f567169c4662410a4d11e5b)) - Add CreateDatabase API ([#724](https://togithub.com/googleapis/python-firestore/issues/724)) ([64e4404](https://togithub.com/googleapis/python-firestore/commit/64e44042869cbe2b48316f7baba537a6379992eb)) - Multi db test parametrization ([#717](https://togithub.com/googleapis/python-firestore/issues/717)) ([91fc8bb](https://togithub.com/googleapis/python-firestore/commit/91fc8bbcc239366b954eb32d19f41f44a404fd99)) - Publish proto definitions for SUM/AVG in Firestore ([#746](https://togithub.com/googleapis/python-firestore/issues/746)) ([ccadec5](https://togithub.com/googleapis/python-firestore/commit/ccadec5eba81c20618a94c0e4a23f07dfb7c1ea7)) ##### Bug Fixes - Add async context manager return types ([#732](https://togithub.com/googleapis/python-firestore/issues/732)) ([2d42731](https://togithub.com/googleapis/python-firestore/commit/2d42731996586fd63e9b8453b0eb627d3e23a310)) ##### Documentation - Minor formatting and grammar ([eb4fe8e](https://togithub.com/googleapis/python-firestore/commit/eb4fe8e5a13681ca1ae0909e941b9c28d216b887))

pycqa/isort (isort)

### [`v5.12.0`](https://togithub.com/pycqa/isort/blob/HEAD/CHANGELOG.md#5120-January-28-2023) [Compare Source](https://togithub.com/pycqa/isort/compare/5.11.5...5.12.0) - Removed support for Python 3.7 - Fixed incompatiblity with latest poetry version - Added support for directory limitations within built in git hook

python/mypy (mypy)

### [`v1.5.1`](https://togithub.com/python/mypy/compare/v1.5.0...v1.5.1) [Compare Source](https://togithub.com/python/mypy/compare/v1.5.0...v1.5.1) ### [`v1.5.0`](https://togithub.com/python/mypy/compare/v1.4.1...v1.5.0) [Compare Source](https://togithub.com/python/mypy/compare/v1.4.1...v1.5.0)

tox-dev/tox (tox)

### [`v4.11.3`](https://togithub.com/tox-dev/tox/releases/tag/4.11.3) [Compare Source](https://togithub.com/tox-dev/tox/compare/4.11.2...4.11.3) #### What's Changed - docs(plugin): explain plugin registration by [@hashar](https://togithub.com/hashar) in [https://github.com/tox-dev/tox/pull/3116](https://togithub.com/tox-dev/tox/pull/3116) - Fix error caused by a bad `base_python` path by [@Tbruno25](https://togithub.com/Tbruno25) in [https://github.com/tox-dev/tox/pull/3122](https://togithub.com/tox-dev/tox/pull/3122) #### New Contributors - [@hashar](https://togithub.com/hashar) made their first contribution in [https://github.com/tox-dev/tox/pull/3116](https://togithub.com/tox-dev/tox/pull/3116) **Full Changelog**: https://github.com/tox-dev/tox/compare/4.11.2...4.11.3 ### [`v4.11.2`](https://togithub.com/tox-dev/tox/releases/tag/4.11.2) [Compare Source](https://togithub.com/tox-dev/tox/compare/4.11.1...4.11.2) #### What's Changed - Fix typos discovered by codespell by [@cclauss](https://togithub.com/cclauss) in [https://github.com/tox-dev/tox/pull/3113](https://togithub.com/tox-dev/tox/pull/3113) - Bump actions/checkout from 3 to 4 by [@dependabot](https://togithub.com/dependabot) in [https://github.com/tox-dev/tox/pull/3114](https://togithub.com/tox-dev/tox/pull/3114) - Providing example to make CLI help more helpful for -x,--override by [@posita](https://togithub.com/posita) in [https://github.com/tox-dev/tox/pull/3119](https://togithub.com/tox-dev/tox/pull/3119) - Remove stray colons in `config.rst` left over from [#3111](https://togithub.com/tox-dev/tox/issues/3111) by [@posita](https://togithub.com/posita) in [https://github.com/tox-dev/tox/pull/3120](https://togithub.com/tox-dev/tox/pull/3120) #### New Contributors - [@cclauss](https://togithub.com/cclauss) made their first contribution in [https://github.com/tox-dev/tox/pull/3113](https://togithub.com/tox-dev/tox/pull/3113) - [@posita](https://togithub.com/posita) made their first contribution in [https://github.com/tox-dev/tox/pull/3119](https://togithub.com/tox-dev/tox/pull/3119) **Full Changelog**: https://github.com/tox-dev/tox/compare/4.11.1...4.11.2 ### [`v4.11.1`](https://togithub.com/tox-dev/tox/releases/tag/4.11.1) [Compare Source](https://togithub.com/tox-dev/tox/compare/4.11.0...4.11.1) #### What's Changed - Tests: Don't assume Python 3.10 is always installed, use current Python version by [@hroncok](https://togithub.com/hroncok) in [https://github.com/tox-dev/tox/pull/3108](https://togithub.com/tox-dev/tox/pull/3108) - Set the --parallel default to "auto", not CPU count by [@paravoid](https://togithub.com/paravoid) in [https://github.com/tox-dev/tox/pull/3109](https://togithub.com/tox-dev/tox/pull/3109) - Fix , being used as value parser for env var configs by [@gaborbernat](https://togithub.com/gaborbernat) in [https://github.com/tox-dev/tox/pull/3111](https://togithub.com/tox-dev/tox/pull/3111) **Full Changelog**: https://github.com/tox-dev/tox/compare/4.11.0...4.11.1 ### [`v4.11.0`](https://togithub.com/tox-dev/tox/releases/tag/4.11.0) [Compare Source](https://togithub.com/tox-dev/tox/compare/4.10.0...4.11.0) #### What's Changed - \[pre-commit.ci] pre-commit autoupdate by [@pre-commit-ci](https://togithub.com/pre-commit-ci) in [https://github.com/tox-dev/tox/pull/3102](https://togithub.com/tox-dev/tox/pull/3102) - Fix type checker and bump tools by [@gaborbernat](https://togithub.com/gaborbernat) in [https://github.com/tox-dev/tox/pull/3107](https://togithub.com/tox-dev/tox/pull/3107) - Add config_settings support for build backend calls by [@nschloe](https://togithub.com/nschloe) in [https://github.com/tox-dev/tox/pull/3090](https://togithub.com/tox-dev/tox/pull/3090) #### New Contributors - [@nschloe](https://togithub.com/nschloe) made their first contribution in [https://github.com/tox-dev/tox/pull/3090](https://togithub.com/tox-dev/tox/pull/3090) **Full Changelog**: https://github.com/tox-dev/tox/compare/4.10.0...4.11.0 ### [`v4.10.0`](https://togithub.com/tox-dev/tox/releases/tag/4.10.0) [Compare Source](https://togithub.com/tox-dev/tox/compare/4.9.0...4.10.0) #### What's Changed - Set basepython for docs env in alignment to Read the Docs default by [@jugmac00](https://togithub.com/jugmac00) in [https://github.com/tox-dev/tox/pull/3097](https://togithub.com/tox-dev/tox/pull/3097) - Document release process by [@jugmac00](https://togithub.com/jugmac00) in [https://github.com/tox-dev/tox/pull/3094](https://togithub.com/tox-dev/tox/pull/3094) - Replace undefined settings with overrides when appending by [@stefanor](https://togithub.com/stefanor) in [https://github.com/tox-dev/tox/pull/3101](https://togithub.com/tox-dev/tox/pull/3101) - Accept environments with defined factors or of python selector form - suggest closest by [@BeyondEvil](https://togithub.com/BeyondEvil) in [https://github.com/tox-dev/tox/pull/3099](https://togithub.com/tox-dev/tox/pull/3099) #### New Contributors - [@BeyondEvil](https://togithub.com/BeyondEvil) made their first contribution in [https://github.com/tox-dev/tox/pull/3099](https://togithub.com/tox-dev/tox/pull/3099) **Full Changelog**: https://github.com/tox-dev/tox/compare/4.9.0...4.10.0 ### [`v4.9.0`](https://togithub.com/tox-dev/tox/releases/tag/4.9.0) [Compare Source](https://togithub.com/tox-dev/tox/compare/4.8.0...4.9.0) #### What's Changed - Disallow command line environments which are not explicitly specified in the config file by [@tjsmart](https://togithub.com/tjsmart) in [https://github.com/tox-dev/tox/pull/3089](https://togithub.com/tox-dev/tox/pull/3089) - \[pre-commit.ci] pre-commit autoupdate by [@pre-commit-ci](https://togithub.com/pre-commit-ci) in [https://github.com/tox-dev/tox/pull/3091](https://togithub.com/tox-dev/tox/pull/3091) #### New Contributors - [@tjsmart](https://togithub.com/tjsmart) made their first contribution in [https://github.com/tox-dev/tox/pull/3089](https://togithub.com/tox-dev/tox/pull/3089) **Full Changelog**: https://github.com/tox-dev/tox/compare/4.8.0...4.9.0

Configuration

📅 Schedule: Branch creation - "before 10pm on Sunday" in timezone America/Chicago, Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

[ ] If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate. View repository job log here.

christopherpickering / flask-session2

fix(deps) Update all non-major dependencies #83

Release Notes

Configuration

Codecov Report