fix(deps) Update all non-major dependencies

This PR contains the following updates:

Package	Change	Type	Update
Flask (changelog)	`2.2.5` -> `2.3.3`	dependencies	minor
Flask-SQLAlchemy (changelog)	`3.0.5` -> `3.1.1`	dev-dependencies	minor
asottile/pyupgrade	`v3.11.0` -> `v3.13.0`	repository	minor
black (changelog)	`23.3.0` -> `23.9.1`	dev-dependencies	minor
boto3	`1.28.49` -> `1.28.53`	dev-dependencies	patch
coverage	`7.2.7` -> `7.3.1`	dev-dependencies	minor
elasticsearch	`8.9.0` -> `8.10.0`	dev-dependencies	minor
isort (source, changelog)	`5.11.5` -> `5.12.0`	dev-dependencies	minor
mypy (source, changelog)	`1.4.1` -> `1.5.1`	dev-dependencies	minor
semantic-release	`21.1.1` -> `21.1.2`	devDependencies	patch
tox (changelog)	`4.8.0` -> `4.11.3`	dev-dependencies	minor

Note: The pre-commit manager in Renovate is not supported by the pre-commit maintainers or community. Please do not report any problems there, instead create a Discussion in the Renovate repository if you have any questions.

Release Notes

asottile/pyupgrade (asottile/pyupgrade)

### [`v3.13.0`](https://togithub.com/asottile/pyupgrade/compare/v3.12.0...v3.13.0) [Compare Source](https://togithub.com/asottile/pyupgrade/compare/v3.12.0...v3.13.0) ### [`v3.12.0`](https://togithub.com/asottile/pyupgrade/compare/v3.11.2...v3.12.0) [Compare Source](https://togithub.com/asottile/pyupgrade/compare/v3.11.2...v3.12.0) ### [`v3.11.2`](https://togithub.com/asottile/pyupgrade/compare/v3.11.1...v3.11.2) [Compare Source](https://togithub.com/asottile/pyupgrade/compare/v3.11.1...v3.11.2) ### [`v3.11.1`](https://togithub.com/asottile/pyupgrade/compare/v3.11.0...v3.11.1) [Compare Source](https://togithub.com/asottile/pyupgrade/compare/v3.11.0...v3.11.1)

psf/black (black)

### [`v23.9.1`](https://togithub.com/psf/black/blob/HEAD/CHANGES.md#2391) [Compare Source](https://togithub.com/psf/black/compare/23.9.0...23.9.1) Due to various issues, the previous release (23.9.0) did not include compiled mypyc wheels, which make Black significantly faster. These issues have now been fixed, and this release should come with compiled wheels once again. There will be no wheels for Python 3.12 due to a bug in mypyc. We will provide 3.12 wheels in a future release as soon as the mypyc bug is fixed. ##### Packaging - Upgrade to mypy 1.5.1 ([#3864](https://togithub.com/psf/black/issues/3864)) ##### Performance - Store raw tuples instead of NamedTuples in Black's cache, improving performance and decreasing the size of the cache ([#3877](https://togithub.com/psf/black/issues/3877)) ### [`v23.9.0`](https://togithub.com/psf/black/blob/HEAD/CHANGES.md#2390) [Compare Source](https://togithub.com/psf/black/compare/23.7.0...23.9.0) ##### Preview style - More concise formatting for dummy implementations ([#3796](https://togithub.com/psf/black/issues/3796)) - In stub files, add a blank line between a statement with a body (e.g an `if sys.version_info > (3, x):`) and a function definition on the same level ([#3862](https://togithub.com/psf/black/issues/3862)) - Fix a bug whereby spaces were removed from walrus operators within subscript([#3823](https://togithub.com/psf/black/issues/3823)) ##### Configuration - Black now applies exclusion and ignore logic before resolving symlinks ([#3846](https://togithub.com/psf/black/issues/3846)) ##### Performance - Avoid importing `IPython` if notebook cells do not contain magics ([#3782](https://togithub.com/psf/black/issues/3782)) - Improve caching by comparing file hashes as fallback for mtime and size ([#3821](https://togithub.com/psf/black/issues/3821)) ##### *Blackd* - Fix an issue in `blackd` with single character input ([#3558](https://togithub.com/psf/black/issues/3558)) ##### Integrations - Black now has an [official pre-commit mirror](https://togithub.com/psf/black-pre-commit-mirror). Swapping `https://github.com/psf/black` to `https://github.com/psf/black-pre-commit-mirror` in your `.pre-commit-config.yaml` will make Black about 2x faster ([#3828](https://togithub.com/psf/black/issues/3828)) - The `.black.env` folder specified by `ENV_PATH` will now be removed on the completion of the GitHub Action ([#3759](https://togithub.com/psf/black/issues/3759)) ### [`v23.7.0`](https://togithub.com/psf/black/blob/HEAD/CHANGES.md#2370) [Compare Source](https://togithub.com/psf/black/compare/23.3.0...23.7.0) ##### Highlights - Runtime support for Python 3.7 has been removed. Formatting 3.7 code will still be supported until further notice ([#3765](https://togithub.com/psf/black/issues/3765)) ##### Stable style - Fix a bug where an illegal trailing comma was added to return type annotations using PEP 604 unions ([#3735](https://togithub.com/psf/black/issues/3735)) - Fix several bugs and crashes where comments in stub files were removed or mishandled under some circumstances ([#3745](https://togithub.com/psf/black/issues/3745)) - Fix a crash with multi-line magic comments like `type: ignore` within parentheses ([#3740](https://togithub.com/psf/black/issues/3740)) - Fix error in AST validation when *Black* removes trailing whitespace in a type comment ([#3773](https://togithub.com/psf/black/issues/3773)) ##### Preview style - Implicitly concatenated strings used as function args are no longer wrapped inside parentheses ([#3640](https://togithub.com/psf/black/issues/3640)) - Remove blank lines between a class definition and its docstring ([#3692](https://togithub.com/psf/black/issues/3692)) ##### Configuration - The `--workers` argument to *Black* can now be specified via the `BLACK_NUM_WORKERS` environment variable ([#3743](https://togithub.com/psf/black/issues/3743)) - `.pytest_cache`, `.ruff_cache` and `.vscode` are now excluded by default ([#3691](https://togithub.com/psf/black/issues/3691)) - Fix *Black* not honouring `pyproject.toml` settings when running `--stdin-filename` and the `pyproject.toml` found isn't in the current working directory ([#3719](https://togithub.com/psf/black/issues/3719)) - *Black* will now error if `exclude` and `extend-exclude` have invalid data types in `pyproject.toml`, instead of silently doing the wrong thing ([#3764](https://togithub.com/psf/black/issues/3764)) ##### Packaging - Upgrade mypyc from 0.991 to 1.3 ([#3697](https://togithub.com/psf/black/issues/3697)) - Remove patching of Click that mitigated errors on Python 3.6 with `LANG=C` ([#3768](https://togithub.com/psf/black/issues/3768)) ##### Parser - Add support for the new PEP 695 syntax in Python 3.12 ([#3703](https://togithub.com/psf/black/issues/3703)) ##### Performance - Speed up *Black* significantly when the cache is full ([#3751](https://togithub.com/psf/black/issues/3751)) - Avoid importing `IPython` in a case where we wouldn't need it ([#3748](https://togithub.com/psf/black/issues/3748)) ##### Output - Use aware UTC datetimes internally, avoids deprecation warning on Python 3.12 ([#3728](https://togithub.com/psf/black/issues/3728)) - Change verbose logging to exactly mirror *Black*'s logic for source discovery ([#3749](https://togithub.com/psf/black/issues/3749)) ##### *Blackd* - The `blackd` argument parser now shows the default values for options in their help text ([#3712](https://togithub.com/psf/black/issues/3712)) ##### Integrations - Black is now tested with [`PYTHONWARNDEFAULTENCODING = 1`](https://docs.python.org/3/library/io.html#io-encoding-warning) ([#3763](https://togithub.com/psf/black/issues/3763)) - Update GitHub Action to display black output in the job summary ([#3688](https://togithub.com/psf/black/issues/3688)) ##### Documentation - Add a CITATION.cff file to the root of the repository, containing metadata on how to cite this software ([#3723](https://togithub.com/psf/black/issues/3723)) - Update the *classes* and *exceptions* documentation in Developer reference to match the latest code base ([#3755](https://togithub.com/psf/black/issues/3755))

boto/boto3 (boto3)

### [`v1.28.53`](https://togithub.com/boto/boto3/blob/HEAD/CHANGELOG.rst#12853) [Compare Source](https://togithub.com/boto/boto3/compare/1.28.52...1.28.53) \======= - api-change:`braket`: \[`botocore`] This release adds support to view the device queue depth (the number of queued quantum tasks and hybrid jobs on a device) and queue position for a quantum task and hybrid job. - api-change:`dms`: \[`botocore`] new vendors for DMS CSF: MongoDB, MariaDB, DocumentDb and Redshift - api-change:`ec2`: \[`botocore`] EC2 M2 Pro Mac instances are powered by Apple M2 Pro Mac Mini computers featuring 12 core CPU, 19 core GPU, 32 GiB of memory, and 16 core Apple Neural Engine and uniquely enabled by the AWS Nitro System through high-speed Thunderbolt connections. - api-change:`efs`: \[`botocore`] Update efs client to latest version - api-change:`guardduty`: \[`botocore`] Add `EKS_CLUSTER_NAME` to filter and sort key. - api-change:`mediaconvert`: \[`botocore`] This release supports the creation of of audio-only tracks in CMAF output groups. ### [`v1.28.52`](https://togithub.com/boto/boto3/blob/HEAD/CHANGELOG.rst#12852) [Compare Source](https://togithub.com/boto/boto3/compare/1.28.51...1.28.52) \======= - api-change:`appconfig`: \[`botocore`] Enabling boto3 paginators for list APIs and adding documentation around ServiceQuotaExceededException errors - api-change:`apprunner`: \[`botocore`] This release adds improvements for managing App Runner auto scaling configuration resources. New APIs: UpdateDefaultAutoScalingConfiguration and ListServicesForAutoScalingConfiguration. Updated API: DeleteAutoScalingConfiguration. - api-change:`codeartifact`: \[`botocore`] Add support for the Swift package format. - api-change:`kinesisvideo`: \[`botocore`] Updated DescribeMediaStorageConfiguration, StartEdgeConfigurationUpdate, ImageGenerationConfiguration$SamplingInterval, and UpdateMediaStorageConfiguration to match AWS Docs. - api-change:`logs`: \[`botocore`] Add ClientToken to QueryDefinition CFN Handler in CWL - api-change:`s3`: \[`botocore`] Fix an issue where the SDK can fail to unmarshall response due to NumberFormatException - api-change:`servicediscovery`: \[`botocore`] Adds a new DiscoverInstancesRevision API and also adds InstanceRevision field to the DiscoverInstances API response. - api-change:`sso-oidc`: \[`botocore`] Update FIPS endpoints in aws-us-gov. ### [`v1.28.51`](https://togithub.com/boto/boto3/blob/HEAD/CHANGELOG.rst#12851) [Compare Source](https://togithub.com/boto/boto3/compare/1.28.50...1.28.51) \======= - api-change:`ec2`: \[`botocore`] This release adds support for C7i, and R7a instance types. - api-change:`outposts`: \[`botocore`] This release adds the InstanceFamilies field to the ListAssets response. - api-change:`sagemaker`: \[`botocore`] This release adds support for one-time model monitoring schedules that are executed immediately without delay, explicit data analysis windows for model monitoring schedules and exclude features attributes to remove features from model monitor analysis. ### [`v1.28.50`](https://togithub.com/boto/boto3/blob/HEAD/CHANGELOG.rst#12850) [Compare Source](https://togithub.com/boto/boto3/compare/1.28.49...1.28.50) \======= - api-change:`discovery`: \[`botocore`] Add sensitive protection for customer information - api-change:`macie2`: \[`botocore`] This release changes the default managedDataIdentifierSelector setting for new classification jobs to RECOMMENDED. By default, new classification jobs now use the recommended set of managed data identifiers. - api-change:`workmail`: \[`botocore`] This release includes four new APIs UpdateUser, UpdateGroup, ListGroupsForEntity and DescribeEntity, along with RemoteUsers and some enhancements to existing APIs.

nedbat/coveragepy (coverage)

### [`v7.3.1`](https://togithub.com/nedbat/coveragepy/blob/HEAD/CHANGES.rst#Version-731--2023-09-06) [Compare Source](https://togithub.com/nedbat/coveragepy/compare/7.3.0...7.3.1) - The semantics of stars in file patterns has been clarified in the docs. A leading or trailing star matches any number of path components, like a double star would. This is different than the behavior of a star in the middle of a pattern. This discrepancy was `identified by Sviatoslav Sydorenko `*, who `provided patient detailed diagnosis `* and graciously agreed to a pragmatic resolution. - The API docs were missing from the last version. They are now `restored `\_. .. \_apidocs: https://coverage.readthedocs.io/en/latest/api_coverage.html .. \_starbad[https://github.com/nedbat/coveragepy/issues/1407#issuecomment-1631085209](https://togithub.com/nedbat/coveragepy/issues/1407#issuecomment-1631085209)09 .. \_pull 165[https://github.com/nedbat/coveragepy/pull/1650](https://togithub.com/nedbat/coveragepy/pull/1650)650 .. \_changes\_7-3-0: ### [`v7.3.0`](https://togithub.com/nedbat/coveragepy/blob/HEAD/CHANGES.rst#Version-730--2023-08-12) [Compare Source](https://togithub.com/nedbat/coveragepy/compare/7.2.7...7.3.0) - Added a :meth:`.Coverage.collect` context manager to start and stop coverage data collection. - Dropped support for Python 3.7. - Fix: in unusual circumstances, SQLite cannot be set to asynchronous mode. Coverage.py would fail with the error `Safety level may not be changed inside a transaction.` This is now avoided, closing `issue 1646`\_. Thanks to Michael Bell for the detailed bug report. - Docs: examples of configuration files now include separate examples for the different syntaxes: .coveragerc, pyproject.toml, setup.cfg, and tox.ini. - Fix: added `nosemgrep` comments to our JavaScript code so that semgrep-based SAST security checks won't raise false alarms about security problems that aren't problems. - Added a CITATION.cff file, thanks to `Ken Schackart `\_. .. \_pull 1641:[https://github.com/nedbat/coveragepy/pull/1641](https://togithub.com/nedbat/coveragepy/pull/1641)1 .. \_issue 1646[https://github.com/nedbat/coveragepy/issues/1646](https://togithub.com/nedbat/coveragepy/issues/1646)46 .. \_changes\_7-2-7:

elastic/elasticsearch-py (elasticsearch)

### [`v8.10.0`](https://togithub.com/elastic/elasticsearch-py/releases/tag/v8.10.0): 8.10.0 [Compare Source](https://togithub.com/elastic/elasticsearch-py/compare/v8.9.0...v8.10.0) - Add the [Query rules APIs](https://www.elastic.co/guide/en/elasticsearch/reference/8.10/query-rules-apis.html) - Add the [Synonyms APIs](https://www.elastic.co/guide/en/elasticsearch/reference/8.10/synonyms-apis.html)

pycqa/isort (isort)

### [`v5.12.0`](https://togithub.com/pycqa/isort/blob/HEAD/CHANGELOG.md#5120-January-28-2023) [Compare Source](https://togithub.com/pycqa/isort/compare/5.11.5...5.12.0) - Removed support for Python 3.7 - Fixed incompatiblity with latest poetry version - Added support for directory limitations within built in git hook

python/mypy (mypy)

### [`v1.5.1`](https://togithub.com/python/mypy/compare/v1.5.0...v1.5.1) [Compare Source](https://togithub.com/python/mypy/compare/v1.5.0...v1.5.1) ### [`v1.5.0`](https://togithub.com/python/mypy/compare/v1.4.1...v1.5.0) [Compare Source](https://togithub.com/python/mypy/compare/v1.4.1...v1.5.0)

semantic-release/semantic-release (semantic-release)

### [`v21.1.2`](https://togithub.com/semantic-release/semantic-release/releases/tag/v21.1.2) [Compare Source](https://togithub.com/semantic-release/semantic-release/compare/v21.1.1...v21.1.2) ##### Bug Fixes - **deps:** update dependency aggregate-error to v5 ([#2956](https://togithub.com/semantic-release/semantic-release/issues/2956)) ([1017e1a](https://togithub.com/semantic-release/semantic-release/commit/1017e1aac2d12736fb3027a8693aca228b0717d1))

tox-dev/tox (tox)

### [`v4.11.3`](https://togithub.com/tox-dev/tox/releases/tag/4.11.3) [Compare Source](https://togithub.com/tox-dev/tox/compare/4.11.2...4.11.3) #### What's Changed - docs(plugin): explain plugin registration by [@hashar](https://togithub.com/hashar) in [https://github.com/tox-dev/tox/pull/3116](https://togithub.com/tox-dev/tox/pull/3116) - Fix error caused by a bad `base_python` path by [@Tbruno25](https://togithub.com/Tbruno25) in [https://github.com/tox-dev/tox/pull/3122](https://togithub.com/tox-dev/tox/pull/3122) #### New Contributors - [@hashar](https://togithub.com/hashar) made their first contribution in [https://github.com/tox-dev/tox/pull/3116](https://togithub.com/tox-dev/tox/pull/3116) **Full Changelog**: https://github.com/tox-dev/tox/compare/4.11.2...4.11.3 ### [`v4.11.2`](https://togithub.com/tox-dev/tox/releases/tag/4.11.2) [Compare Source](https://togithub.com/tox-dev/tox/compare/4.11.1...4.11.2) #### What's Changed - Fix typos discovered by codespell by [@cclauss](https://togithub.com/cclauss) in [https://github.com/tox-dev/tox/pull/3113](https://togithub.com/tox-dev/tox/pull/3113) - Bump actions/checkout from 3 to 4 by [@dependabot](https://togithub.com/dependabot) in [https://github.com/tox-dev/tox/pull/3114](https://togithub.com/tox-dev/tox/pull/3114) - Providing example to make CLI help more helpful for -x,--override by [@posita](https://togithub.com/posita) in [https://github.com/tox-dev/tox/pull/3119](https://togithub.com/tox-dev/tox/pull/3119) - Remove stray colons in `config.rst` left over from [#3111](https://togithub.com/tox-dev/tox/issues/3111) by [@posita](https://togithub.com/posita) in [https://github.com/tox-dev/tox/pull/3120](https://togithub.com/tox-dev/tox/pull/3120) #### New Contributors - [@cclauss](https://togithub.com/cclauss) made their first contribution in [https://github.com/tox-dev/tox/pull/3113](https://togithub.com/tox-dev/tox/pull/3113) - [@posita](https://togithub.com/posita) made their first contribution in [https://github.com/tox-dev/tox/pull/3119](https://togithub.com/tox-dev/tox/pull/3119) **Full Changelog**: https://github.com/tox-dev/tox/compare/4.11.1...4.11.2 ### [`v4.11.1`](https://togithub.com/tox-dev/tox/releases/tag/4.11.1) [Compare Source](https://togithub.com/tox-dev/tox/compare/4.11.0...4.11.1) #### What's Changed - Tests: Don't assume Python 3.10 is always installed, use current Python version by [@hroncok](https://togithub.com/hroncok) in [https://github.com/tox-dev/tox/pull/3108](https://togithub.com/tox-dev/tox/pull/3108) - Set the --parallel default to "auto", not CPU count by [@paravoid](https://togithub.com/paravoid) in [https://github.com/tox-dev/tox/pull/3109](https://togithub.com/tox-dev/tox/pull/3109) - Fix , being used as value parser for env var configs by [@gaborbernat](https://togithub.com/gaborbernat) in [https://github.com/tox-dev/tox/pull/3111](https://togithub.com/tox-dev/tox/pull/3111) **Full Changelog**: https://github.com/tox-dev/tox/compare/4.11.0...4.11.1 ### [`v4.11.0`](https://togithub.com/tox-dev/tox/releases/tag/4.11.0) [Compare Source](https://togithub.com/tox-dev/tox/compare/4.10.0...4.11.0) #### What's Changed - \[pre-commit.ci] pre-commit autoupdate by [@pre-commit-ci](https://togithub.com/pre-commit-ci) in [https://github.com/tox-dev/tox/pull/3102](https://togithub.com/tox-dev/tox/pull/3102) - Fix type checker and bump tools by [@gaborbernat](https://togithub.com/gaborbernat) in [https://github.com/tox-dev/tox/pull/3107](https://togithub.com/tox-dev/tox/pull/3107) - Add config_settings support for build backend calls by [@nschloe](https://togithub.com/nschloe) in [https://github.com/tox-dev/tox/pull/3090](https://togithub.com/tox-dev/tox/pull/3090) #### New Contributors - [@nschloe](https://togithub.com/nschloe) made their first contribution in [https://github.com/tox-dev/tox/pull/3090](https://togithub.com/tox-dev/tox/pull/3090) **Full Changelog**: https://github.com/tox-dev/tox/compare/4.10.0...4.11.0 ### [`v4.10.0`](https://togithub.com/tox-dev/tox/releases/tag/4.10.0) [Compare Source](https://togithub.com/tox-dev/tox/compare/4.9.0...4.10.0) #### What's Changed - Set basepython for docs env in alignment to Read the Docs default by [@jugmac00](https://togithub.com/jugmac00) in [https://github.com/tox-dev/tox/pull/3097](https://togithub.com/tox-dev/tox/pull/3097) - Document release process by [@jugmac00](https://togithub.com/jugmac00) in [https://github.com/tox-dev/tox/pull/3094](https://togithub.com/tox-dev/tox/pull/3094) - Replace undefined settings with overrides when appending by [@stefanor](https://togithub.com/stefanor) in [https://github.com/tox-dev/tox/pull/3101](https://togithub.com/tox-dev/tox/pull/3101) - Accept environments with defined factors or of python selector form - suggest closest by [@BeyondEvil](https://togithub.com/BeyondEvil) in [https://github.com/tox-dev/tox/pull/3099](https://togithub.com/tox-dev/tox/pull/3099) #### New Contributors - [@BeyondEvil](https://togithub.com/BeyondEvil) made their first contribution in [https://github.com/tox-dev/tox/pull/3099](https://togithub.com/tox-dev/tox/pull/3099) **Full Changelog**: https://github.com/tox-dev/tox/compare/4.9.0...4.10.0 ### [`v4.9.0`](https://togithub.com/tox-dev/tox/releases/tag/4.9.0) [Compare Source](https://togithub.com/tox-dev/tox/compare/4.8.0...4.9.0) #### What's Changed - Disallow command line environments which are not explicitly specified in the config file by [@tjsmart](https://togithub.com/tjsmart) in [https://github.com/tox-dev/tox/pull/3089](https://togithub.com/tox-dev/tox/pull/3089) - \[pre-commit.ci] pre-commit autoupdate by [@pre-commit-ci](https://togithub.com/pre-commit-ci) in [https://github.com/tox-dev/tox/pull/3091](https://togithub.com/tox-dev/tox/pull/3091) #### New Contributors - [@tjsmart](https://togithub.com/tjsmart) made their first contribution in [https://github.com/tox-dev/tox/pull/3089](https://togithub.com/tox-dev/tox/pull/3089) **Full Changelog**: https://github.com/tox-dev/tox/compare/4.8.0...4.9.0

Configuration

📅 Schedule: Branch creation - "before 10pm on Sunday" in timezone America/Chicago, Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

[ ] If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate. View repository job log here.

christopherpickering / flask-session2

fix(deps) Update all non-major dependencies #85

Release Notes

Configuration

Codecov Report