fix(deps) Update all non-major dependencies

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
@semantic-release/npm	`11.0.0` -> `11.0.1`
Flask (changelog)	`2.2.5` -> `2.3.3`
Flask-SQLAlchemy (changelog)	`3.0.5` -> `3.1.1`
black (changelog)	`23.3.0` -> `23.10.1`
coverage	`7.2.7` -> `7.3.2`
isort (source, changelog)	`5.11.5` -> `5.12.0`
mypy (source, changelog)	`1.4.1` -> `1.6.1`
tox (changelog)	`4.8.0` -> `4.11.3`

Release Notes

semantic-release/npm (@semantic-release/npm)

### [`v11.0.1`](https://togithub.com/semantic-release/npm/releases/tag/v11.0.1) [Compare Source](https://togithub.com/semantic-release/npm/compare/v11.0.0...v11.0.1) ##### Bug Fixes - **deps:** update dependency read-pkg to v9 ([#703](https://togithub.com/semantic-release/npm/issues/703)) ([6e84013](https://togithub.com/semantic-release/npm/commit/6e84013a7c18a35322808e6085301d100064d639))

psf/black (black)

### [`v23.10.1`](https://togithub.com/psf/black/blob/HEAD/CHANGES.md#23101) [Compare Source](https://togithub.com/psf/black/compare/23.10.0...23.10.1) ##### Highlights - Maintenance release to get a fix out for GitHub Action edge case ([#3957](https://togithub.com/psf/black/issues/3957)) ##### Preview style - Fix merging implicit multiline strings that have inline comments ([#3956](https://togithub.com/psf/black/issues/3956)) - Allow empty first line after block open before a comment or compound statement ([#3967](https://togithub.com/psf/black/issues/3967)) ##### Packaging - Change Dockerfile to hatch + compile black ([#3965](https://togithub.com/psf/black/issues/3965)) ##### Integrations - The summary output for GitHub workflows is now suppressible using the `summary` parameter. ([#3958](https://togithub.com/psf/black/issues/3958)) - Fix the action failing when Black check doesn't pass ([#3957](https://togithub.com/psf/black/issues/3957)) ##### Documentation - It is known Windows documentation CI is broken [https://github.com/psf/black/issues/3968](https://togithub.com/psf/black/issues/3968)3968 ### [`v23.10.0`](https://togithub.com/psf/black/blob/HEAD/CHANGES.md#23100) [Compare Source](https://togithub.com/psf/black/compare/23.9.1...23.10.0) ##### Stable style - Fix comments getting removed from inside parenthesized strings ([#3909](https://togithub.com/psf/black/issues/3909)) ##### Preview style - Fix long lines with power operators getting split before the line length ([#3942](https://togithub.com/psf/black/issues/3942)) - Long type hints are now wrapped in parentheses and properly indented when split across multiple lines ([#3899](https://togithub.com/psf/black/issues/3899)) - Magic trailing commas are now respected in return types. ([#3916](https://togithub.com/psf/black/issues/3916)) - Require one empty line after module-level docstrings. ([#3932](https://togithub.com/psf/black/issues/3932)) - Treat raw triple-quoted strings as docstrings ([#3947](https://togithub.com/psf/black/issues/3947)) ##### Configuration - Fix cache versioning logic when `BLACK_CACHE_DIR` is set ([#3937](https://togithub.com/psf/black/issues/3937)) ##### Parser - Fix bug where attributes named `type` were not acccepted inside `match` statements ([#3950](https://togithub.com/psf/black/issues/3950)) - Add support for PEP 695 type aliases containing lambdas and other unusual expressions ([#3949](https://togithub.com/psf/black/issues/3949)) ##### Output - Black no longer attempts to provide special errors for attempting to format Python 2 code ([#3933](https://togithub.com/psf/black/issues/3933)) - Black will more consistently print stacktraces on internal errors in verbose mode ([#3938](https://togithub.com/psf/black/issues/3938)) ##### Integrations - The action output displayed in the job summary is now wrapped in Markdown ([#3914](https://togithub.com/psf/black/issues/3914)) ### [`v23.9.1`](https://togithub.com/psf/black/blob/HEAD/CHANGES.md#2391) [Compare Source](https://togithub.com/psf/black/compare/23.9.0...23.9.1) Due to various issues, the previous release (23.9.0) did not include compiled mypyc wheels, which make Black significantly faster. These issues have now been fixed, and this release should come with compiled wheels once again. There will be no wheels for Python 3.12 due to a bug in mypyc. We will provide 3.12 wheels in a future release as soon as the mypyc bug is fixed. ##### Packaging - Upgrade to mypy 1.5.1 ([#3864](https://togithub.com/psf/black/issues/3864)) ##### Performance - Store raw tuples instead of NamedTuples in Black's cache, improving performance and decreasing the size of the cache ([#3877](https://togithub.com/psf/black/issues/3877)) ### [`v23.9.0`](https://togithub.com/psf/black/blob/HEAD/CHANGES.md#2390) [Compare Source](https://togithub.com/psf/black/compare/23.7.0...23.9.0) ##### Preview style - More concise formatting for dummy implementations ([#3796](https://togithub.com/psf/black/issues/3796)) - In stub files, add a blank line between a statement with a body (e.g an `if sys.version_info > (3, x):`) and a function definition on the same level ([#3862](https://togithub.com/psf/black/issues/3862)) - Fix a bug whereby spaces were removed from walrus operators within subscript([#3823](https://togithub.com/psf/black/issues/3823)) ##### Configuration - Black now applies exclusion and ignore logic before resolving symlinks ([#3846](https://togithub.com/psf/black/issues/3846)) ##### Performance - Avoid importing `IPython` if notebook cells do not contain magics ([#3782](https://togithub.com/psf/black/issues/3782)) - Improve caching by comparing file hashes as fallback for mtime and size ([#3821](https://togithub.com/psf/black/issues/3821)) ##### *Blackd* - Fix an issue in `blackd` with single character input ([#3558](https://togithub.com/psf/black/issues/3558)) ##### Integrations - Black now has an [official pre-commit mirror](https://togithub.com/psf/black-pre-commit-mirror). Swapping `https://github.com/psf/black` to `https://github.com/psf/black-pre-commit-mirror` in your `.pre-commit-config.yaml` will make Black about 2x faster ([#3828](https://togithub.com/psf/black/issues/3828)) - The `.black.env` folder specified by `ENV_PATH` will now be removed on the completion of the GitHub Action ([#3759](https://togithub.com/psf/black/issues/3759)) ### [`v23.7.0`](https://togithub.com/psf/black/blob/HEAD/CHANGES.md#2370) [Compare Source](https://togithub.com/psf/black/compare/23.3.0...23.7.0) ##### Highlights - Runtime support for Python 3.7 has been removed. Formatting 3.7 code will still be supported until further notice ([#3765](https://togithub.com/psf/black/issues/3765)) ##### Stable style - Fix a bug where an illegal trailing comma was added to return type annotations using PEP 604 unions ([#3735](https://togithub.com/psf/black/issues/3735)) - Fix several bugs and crashes where comments in stub files were removed or mishandled under some circumstances ([#3745](https://togithub.com/psf/black/issues/3745)) - Fix a crash with multi-line magic comments like `type: ignore` within parentheses ([#3740](https://togithub.com/psf/black/issues/3740)) - Fix error in AST validation when *Black* removes trailing whitespace in a type comment ([#3773](https://togithub.com/psf/black/issues/3773)) ##### Preview style - Implicitly concatenated strings used as function args are no longer wrapped inside parentheses ([#3640](https://togithub.com/psf/black/issues/3640)) - Remove blank lines between a class definition and its docstring ([#3692](https://togithub.com/psf/black/issues/3692)) ##### Configuration - The `--workers` argument to *Black* can now be specified via the `BLACK_NUM_WORKERS` environment variable ([#3743](https://togithub.com/psf/black/issues/3743)) - `.pytest_cache`, `.ruff_cache` and `.vscode` are now excluded by default ([#3691](https://togithub.com/psf/black/issues/3691)) - Fix *Black* not honouring `pyproject.toml` settings when running `--stdin-filename` and the `pyproject.toml` found isn't in the current working directory ([#3719](https://togithub.com/psf/black/issues/3719)) - *Black* will now error if `exclude` and `extend-exclude` have invalid data types in `pyproject.toml`, instead of silently doing the wrong thing ([#3764](https://togithub.com/psf/black/issues/3764)) ##### Packaging - Upgrade mypyc from 0.991 to 1.3 ([#3697](https://togithub.com/psf/black/issues/3697)) - Remove patching of Click that mitigated errors on Python 3.6 with `LANG=C` ([#3768](https://togithub.com/psf/black/issues/3768)) ##### Parser - Add support for the new PEP 695 syntax in Python 3.12 ([#3703](https://togithub.com/psf/black/issues/3703)) ##### Performance - Speed up *Black* significantly when the cache is full ([#3751](https://togithub.com/psf/black/issues/3751)) - Avoid importing `IPython` in a case where we wouldn't need it ([#3748](https://togithub.com/psf/black/issues/3748)) ##### Output - Use aware UTC datetimes internally, avoids deprecation warning on Python 3.12 ([#3728](https://togithub.com/psf/black/issues/3728)) - Change verbose logging to exactly mirror *Black*'s logic for source discovery ([#3749](https://togithub.com/psf/black/issues/3749)) ##### *Blackd* - The `blackd` argument parser now shows the default values for options in their help text ([#3712](https://togithub.com/psf/black/issues/3712)) ##### Integrations - Black is now tested with [`PYTHONWARNDEFAULTENCODING = 1`](https://docs.python.org/3/library/io.html#io-encoding-warning) ([#3763](https://togithub.com/psf/black/issues/3763)) - Update GitHub Action to display black output in the job summary ([#3688](https://togithub.com/psf/black/issues/3688)) ##### Documentation - Add a CITATION.cff file to the root of the repository, containing metadata on how to cite this software ([#3723](https://togithub.com/psf/black/issues/3723)) - Update the *classes* and *exceptions* documentation in Developer reference to match the latest code base ([#3755](https://togithub.com/psf/black/issues/3755))

nedbat/coveragepy (coverage)

### [`v7.3.2`](https://togithub.com/nedbat/coveragepy/blob/HEAD/CHANGES.rst#Version-732--2023-10-02) [Compare Source](https://togithub.com/nedbat/coveragepy/compare/7.3.1...7.3.2) - The `coverage lcov` command ignored the `[report] exclude_lines` and `[report] exclude_also` settings (`issue 1684`*). This is now fixed, thanks `Jacqueline Lee `*. - Sometimes SQLite will create journal files alongside the coverage.py database files. These are ephemeral, but could be mistakenly included when combining data files. Now they are always ignored, fixing `issue 1605`\_. Thanks to Brad Smith for suggesting fixes and providing detailed debugging. - On Python 3.12+, we now disable SQLite writing journal files, which should be a little faster. - The new 3.12 soft keyword `type` is properly bolded in HTML reports. - Removed the "fullcoverage" feature used by CPython to measure the coverage of early-imported standard library modules. CPython `stopped using it <88054_>`\_ in 2021, and it stopped working completely in Python 3.13. .. \_issue 1605:[https://github.com/nedbat/coveragepy/issues/1605](https://togithub.com/nedbat/coveragepy/issues/1605)5 .. \_issue 1684[https://github.com/nedbat/coveragepy/issues/1684](https://togithub.com/nedbat/coveragepy/issues/1684)84 .. \_pull 168[https://github.com/nedbat/coveragepy/pull/1685](https://togithub.com/nedbat/coveragepy/pull/1685)685 .. \_880[https://github.com/python/cpython/issues/88054](https://togithub.com/python/cpython/issues/88054)8054 .. \_changes\_7-3-1: ### [`v7.3.1`](https://togithub.com/nedbat/coveragepy/blob/HEAD/CHANGES.rst#Version-731--2023-09-06) [Compare Source](https://togithub.com/nedbat/coveragepy/compare/7.3.0...7.3.1) - The semantics of stars in file patterns has been clarified in the docs. A leading or trailing star matches any number of path components, like a double star would. This is different than the behavior of a star in the middle of a pattern. This discrepancy was `identified by Sviatoslav Sydorenko `*, who `provided patient detailed diagnosis `* and graciously agreed to a pragmatic resolution. - The API docs were missing from the last version. They are now `restored `\_. .. \_apidocs: https://coverage.readthedocs.io/en/latest/api_coverage.html .. \_starbad[https://github.com/nedbat/coveragepy/issues/1407#issuecomment-1631085209](https://togithub.com/nedbat/coveragepy/issues/1407#issuecomment-1631085209)09 .. \_pull 165[https://github.com/nedbat/coveragepy/pull/1650](https://togithub.com/nedbat/coveragepy/pull/1650)650 .. \_changes\_7-3-0: ### [`v7.3.0`](https://togithub.com/nedbat/coveragepy/blob/HEAD/CHANGES.rst#Version-730--2023-08-12) [Compare Source](https://togithub.com/nedbat/coveragepy/compare/7.2.7...7.3.0) - Added a :meth:`.Coverage.collect` context manager to start and stop coverage data collection. - Dropped support for Python 3.7. - Fix: in unusual circumstances, SQLite cannot be set to asynchronous mode. Coverage.py would fail with the error `Safety level may not be changed inside a transaction.` This is now avoided, closing `issue 1646`\_. Thanks to Michael Bell for the detailed bug report. - Docs: examples of configuration files now include separate examples for the different syntaxes: .coveragerc, pyproject.toml, setup.cfg, and tox.ini. - Fix: added `nosemgrep` comments to our JavaScript code so that semgrep-based SAST security checks won't raise false alarms about security problems that aren't problems. - Added a CITATION.cff file, thanks to `Ken Schackart `\_. .. \_pull 1641:[https://github.com/nedbat/coveragepy/pull/1641](https://togithub.com/nedbat/coveragepy/pull/1641)1 .. \_issue 1646[https://github.com/nedbat/coveragepy/issues/1646](https://togithub.com/nedbat/coveragepy/issues/1646)46 .. \_changes\_7-2-7:

pycqa/isort (isort)

### [`v5.12.0`](https://togithub.com/pycqa/isort/blob/HEAD/CHANGELOG.md#5120-January-28-2023) [Compare Source](https://togithub.com/pycqa/isort/compare/5.11.5...5.12.0) - Removed support for Python 3.7 - Fixed incompatiblity with latest poetry version - Added support for directory limitations within built in git hook

python/mypy (mypy)

### [`v1.6.1`](https://togithub.com/python/mypy/compare/v1.6.0...v1.6.1) [Compare Source](https://togithub.com/python/mypy/compare/v1.6.0...v1.6.1) ### [`v1.6.0`](https://togithub.com/python/mypy/compare/v1.5.1...v1.6.0) [Compare Source](https://togithub.com/python/mypy/compare/v1.5.1...v1.6.0) ### [`v1.5.1`](https://togithub.com/python/mypy/compare/v1.5.0...v1.5.1) [Compare Source](https://togithub.com/python/mypy/compare/v1.5.0...v1.5.1) ### [`v1.5.0`](https://togithub.com/python/mypy/compare/v1.4.1...v1.5.0) [Compare Source](https://togithub.com/python/mypy/compare/v1.4.1...v1.5.0)

tox-dev/tox (tox)

### [`v4.11.3`](https://togithub.com/tox-dev/tox/releases/tag/4.11.3) [Compare Source](https://togithub.com/tox-dev/tox/compare/4.11.2...4.11.3) #### What's Changed - docs(plugin): explain plugin registration by [@hashar](https://togithub.com/hashar) in [https://github.com/tox-dev/tox/pull/3116](https://togithub.com/tox-dev/tox/pull/3116) - Fix error caused by a bad `base_python` path by [@Tbruno25](https://togithub.com/Tbruno25) in [https://github.com/tox-dev/tox/pull/3122](https://togithub.com/tox-dev/tox/pull/3122) #### New Contributors - [@hashar](https://togithub.com/hashar) made their first contribution in [https://github.com/tox-dev/tox/pull/3116](https://togithub.com/tox-dev/tox/pull/3116) **Full Changelog**: https://github.com/tox-dev/tox/compare/4.11.2...4.11.3 ### [`v4.11.2`](https://togithub.com/tox-dev/tox/releases/tag/4.11.2) [Compare Source](https://togithub.com/tox-dev/tox/compare/4.11.1...4.11.2) #### What's Changed - Fix typos discovered by codespell by [@cclauss](https://togithub.com/cclauss) in [https://github.com/tox-dev/tox/pull/3113](https://togithub.com/tox-dev/tox/pull/3113) - Bump actions/checkout from 3 to 4 by [@dependabot](https://togithub.com/dependabot) in [https://github.com/tox-dev/tox/pull/3114](https://togithub.com/tox-dev/tox/pull/3114) - Providing example to make CLI help more helpful for -x,--override by [@posita](https://togithub.com/posita) in [https://github.com/tox-dev/tox/pull/3119](https://togithub.com/tox-dev/tox/pull/3119) - Remove stray colons in `config.rst` left over from [#3111](https://togithub.com/tox-dev/tox/issues/3111) by [@posita](https://togithub.com/posita) in [https://github.com/tox-dev/tox/pull/3120](https://togithub.com/tox-dev/tox/pull/3120) #### New Contributors - [@cclauss](https://togithub.com/cclauss) made their first contribution in [https://github.com/tox-dev/tox/pull/3113](https://togithub.com/tox-dev/tox/pull/3113) - [@posita](https://togithub.com/posita) made their first contribution in [https://github.com/tox-dev/tox/pull/3119](https://togithub.com/tox-dev/tox/pull/3119) **Full Changelog**: https://github.com/tox-dev/tox/compare/4.11.1...4.11.2 ### [`v4.11.1`](https://togithub.com/tox-dev/tox/releases/tag/4.11.1) [Compare Source](https://togithub.com/tox-dev/tox/compare/4.11.0...4.11.1) #### What's Changed - Tests: Don't assume Python 3.10 is always installed, use current Python version by [@hroncok](https://togithub.com/hroncok) in [https://github.com/tox-dev/tox/pull/3108](https://togithub.com/tox-dev/tox/pull/3108) - Set the --parallel default to "auto", not CPU count by [@paravoid](https://togithub.com/paravoid) in [https://github.com/tox-dev/tox/pull/3109](https://togithub.com/tox-dev/tox/pull/3109) - Fix , being used as value parser for env var configs by [@gaborbernat](https://togithub.com/gaborbernat) in [https://github.com/tox-dev/tox/pull/3111](https://togithub.com/tox-dev/tox/pull/3111) **Full Changelog**: https://github.com/tox-dev/tox/compare/4.11.0...4.11.1 ### [`v4.11.0`](https://togithub.com/tox-dev/tox/releases/tag/4.11.0) [Compare Source](https://togithub.com/tox-dev/tox/compare/4.10.0...4.11.0) #### What's Changed - \[pre-commit.ci] pre-commit autoupdate by [@pre-commit-ci](https://togithub.com/pre-commit-ci) in [https://github.com/tox-dev/tox/pull/3102](https://togithub.com/tox-dev/tox/pull/3102) - Fix type checker and bump tools by [@gaborbernat](https://togithub.com/gaborbernat) in [https://github.com/tox-dev/tox/pull/3107](https://togithub.com/tox-dev/tox/pull/3107) - Add config_settings support for build backend calls by [@nschloe](https://togithub.com/nschloe) in [https://github.com/tox-dev/tox/pull/3090](https://togithub.com/tox-dev/tox/pull/3090) #### New Contributors - [@nschloe](https://togithub.com/nschloe) made their first contribution in [https://github.com/tox-dev/tox/pull/3090](https://togithub.com/tox-dev/tox/pull/3090) **Full Changelog**: https://github.com/tox-dev/tox/compare/4.10.0...4.11.0 ### [`v4.10.0`](https://togithub.com/tox-dev/tox/releases/tag/4.10.0) [Compare Source](https://togithub.com/tox-dev/tox/compare/4.9.0...4.10.0) #### What's Changed - Set basepython for docs env in alignment to Read the Docs default by [@jugmac00](https://togithub.com/jugmac00) in [https://github.com/tox-dev/tox/pull/3097](https://togithub.com/tox-dev/tox/pull/3097) - Document release process by [@jugmac00](https://togithub.com/jugmac00) in [https://github.com/tox-dev/tox/pull/3094](https://togithub.com/tox-dev/tox/pull/3094) - Replace undefined settings with overrides when appending by [@stefanor](https://togithub.com/stefanor) in [https://github.com/tox-dev/tox/pull/3101](https://togithub.com/tox-dev/tox/pull/3101) - Accept environments with defined factors or of python selector form - suggest closest by [@BeyondEvil](https://togithub.com/BeyondEvil) in [https://github.com/tox-dev/tox/pull/3099](https://togithub.com/tox-dev/tox/pull/3099) #### New Contributors - [@BeyondEvil](https://togithub.com/BeyondEvil) made their first contribution in [https://github.com/tox-dev/tox/pull/3099](https://togithub.com/tox-dev/tox/pull/3099) **Full Changelog**: https://github.com/tox-dev/tox/compare/4.9.0...4.10.0 ### [`v4.9.0`](https://togithub.com/tox-dev/tox/releases/tag/4.9.0) [Compare Source](https://togithub.com/tox-dev/tox/compare/4.8.0...4.9.0) #### What's Changed - Disallow command line environments which are not explicitly specified in the config file by [@tjsmart](https://togithub.com/tjsmart) in [https://github.com/tox-dev/tox/pull/3089](https://togithub.com/tox-dev/tox/pull/3089) - \[pre-commit.ci] pre-commit autoupdate by [@pre-commit-ci](https://togithub.com/pre-commit-ci) in [https://github.com/tox-dev/tox/pull/3091](https://togithub.com/tox-dev/tox/pull/3091) #### New Contributors - [@tjsmart](https://togithub.com/tjsmart) made their first contribution in [https://github.com/tox-dev/tox/pull/3089](https://togithub.com/tox-dev/tox/pull/3089) **Full Changelog**: https://github.com/tox-dev/tox/compare/4.8.0...4.9.0

Configuration

📅 Schedule: Branch creation - "before 10pm on Sunday" in timezone America/Chicago, Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

[ ] If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate. View repository job log here.

christopherpickering / flask-session2

fix(deps) Update all non-major dependencies #98

Release Notes

Configuration

Codecov Report