codicoop / boilerplate_django

Plantilla pels nous projectes web amb Django.
GNU General Public License v3.0
0 stars 0 forks source link

Bump the python-dependencies group with 15 updates #80

Closed dependabot[bot] closed 1 year ago

dependabot[bot] commented 1 year ago

Bumps the python-dependencies group with 15 updates:

Package From To
django 4.2.3 4.2.5
django-environ 0.10.0 0.11.2
psycopg2-binary 2.9.6 2.9.7
tox 4.6.4 4.11.3
django-grappelli 3.0.6 3.0.7
django-constance 2.9.1 3.1.0
django-storages 1.13.2 1.14
boto3 1.28.9 1.28.45
django-post-office 3.7.0 3.7.1
celery 5.3.1 5.3.4
redis 4.6.0 5.0.0
sentry-sdk 1.28.1 1.30.0
black 23.7.0 23.9.1
flake8 6.0.0 6.1.0
pytest 7.4.0 7.4.2

Updates django from 4.2.3 to 4.2.5

Commits
  • b8b2f74 [4.2.x] Bumped version for 4.2.5 release.
  • 9c51b4d [4.2.x] Fixed CVE-2023-41164 -- Fixed potential DoS in django.utils.encoding....
  • acfb427 [4.2.x] Fixed #34803 -- Fixed queryset crash when filtering againts deeply ne...
  • 55a0b9c [4.2.x] Added stub release notes and release date for 4.2.5, 4.1.11, and 3.2.21.
  • 8e8c318 [4.2.x] Avoided counting exceptions in AsyncClient docs.
  • dcb9d7a [4.2.x] Improved formset docs by using a set instead of a list in the custom ...
  • f55b420 [4.2.x] Fixed #34781 -- Updated logging ref docs for django.server's request ...
  • 46b2b08 [4.2.x] Fixed #34779 -- Avoided unnecessary selection of non-nullable m2m fie...
  • d34db66 [4.2.x] Fixed #34773 -- Fixed syncing DEFAULT_FILE_STORAGE/STATICFILES_STORAG...
  • a22aeef [4.2.x] Fixed #15799 -- Doc'd that Storage._open() should raise FileNotFoundE...
  • Additional commits viewable in compare view


Updates django-environ from 0.10.0 to 0.11.2

Release notes

Sourced from django-environ's releases.

v0.11.2

Fixed

  • Revert "Add variable expansion" feature due to #490

v0.11.1

Fixed

  • Revert "Add interpolate argument to avoid resolving proxied values." feature due to #485

v0.11.0

Added

  • Added support for Django 4.2 #456.
  • Added support for secure Elasticsearch connections #463.
  • Added variable expansion #468.
  • Added capability to handle comments after #, after quoted values, like KEY= 'part1 # part2' # comment #475.
  • Added support for interpolate parameter #415.

Changed

  • Used mssql-django as engine for SQL Server #446.
  • Changed handling bool values, stripping whitespace around value #475.
  • Use importlib.util.find_spec to replace pkgutil.find_loader #482.

Removed

  • Removed support of Python 3.5.
Changelog

Sourced from django-environ's changelog.

v0.11.2_ - 1-September-2023

Fixed +++++

  • Revert "Add variable expansion." feature due to [#490](https://github.com/joke2k/django-environ/issues/490) <https://github.com/joke2k/django-environ/issues/490>_.

v0.11.1_ - 30-August-2023

Fixed +++++

  • Revert "Add interpolate argument to avoid resolving proxied values." feature due to [#485](https://github.com/joke2k/django-environ/issues/485) <https://github.com/joke2k/django-environ/issues/485>_.

v0.11.0_ - 30-August-2023

Added +++++

  • Added support for Django 4.2 [#456](https://github.com/joke2k/django-environ/issues/456) <https://github.com/joke2k/django-environ/pull/456>_.
  • Added support for secure Elasticsearch connections [#463](https://github.com/joke2k/django-environ/issues/463) <https://github.com/joke2k/django-environ/pull/463>_.
  • Added variable expansion [#468](https://github.com/joke2k/django-environ/issues/468) <https://github.com/joke2k/django-environ/pull/468>_.
  • Added capability to handle comments after #, after quoted values, like KEY= 'part1 # part2' # comment [#475](https://github.com/joke2k/django-environ/issues/475) <https://github.com/joke2k/django-environ/pull/475>_.
  • Added support for interpolate parameter [#415](https://github.com/joke2k/django-environ/issues/415) <https://github.com/joke2k/django-environ/pull/415>_.

Changed +++++++

  • Used mssql-django as engine for SQL Server [#446](https://github.com/joke2k/django-environ/issues/446) <https://github.com/joke2k/django-environ/pull/446>_.
  • Changed handling bool values, stripping whitespace around value [#475](https://github.com/joke2k/django-environ/issues/475) <https://github.com/joke2k/django-environ/pull/475>_.
  • Use importlib.util.find_spec to replace pkgutil.find_loader [#482](https://github.com/joke2k/django-environ/issues/482) <https://github.com/joke2k/django-environ/pull/482>_.

Removed +++++++

  • Removed support of Python 3.5.
Commits


Updates psycopg2-binary from 2.9.6 to 2.9.7

Changelog

Sourced from psycopg2-binary's changelog.

Current release

What's new in psycopg 2.9.7 ^^^^^^^^^^^^^^^^^^^^^^^^^^^

  • Fix propagation of exceptions raised during module initialization (:ticket:[#1598](https://github.com/psycopg/psycopg2/issues/1598)).
  • Fix building when pg_config returns an empty string (:ticket:[#1599](https://github.com/psycopg/psycopg2/issues/1599)).
  • Wheel package compiled against OpenSSL 1.1.1v.

What's new in psycopg 2.9.6 ^^^^^^^^^^^^^^^^^^^^^^^^^^^

  • Package manylinux 2014 for aarch64 and ppc64le platforms, in order to include libpq 15 in the binary package (:ticket:[#1396](https://github.com/psycopg/psycopg2/issues/1396)).
  • Wheel package compiled against OpenSSL 1.1.1t.

What's new in psycopg 2.9.5 ^^^^^^^^^^^^^^^^^^^^^^^^^^^

  • Add support for Python 3.11.
  • Add support for rowcount in MERGE statements in binary packages (:ticket:[#1497](https://github.com/psycopg/psycopg2/issues/1497)).
  • Wheel package compiled against OpenSSL 1.1.1r and PostgreSQL 15 libpq.

What's new in psycopg 2.9.4 ^^^^^^^^^^^^^^^^^^^^^^^^^^^

  • Fix ~psycopg2.extras.register_composite(), ~psycopg2.extras.register_range() with customized :sql:search_path (:ticket:[#1487](https://github.com/psycopg/psycopg2/issues/1487)).
  • Handle correctly composite types with names or in schemas requiring escape.
  • Find pg_service.conf file in the /etc/postgresql-common directory in binary packages (:ticket:[#1365](https://github.com/psycopg/psycopg2/issues/1365)).
  • ~psycopg2.errorcodes map and ~psycopg2.errors classes updated to PostgreSQL 15.
  • Wheel package compiled against OpenSSL 1.1.1q and PostgreSQL 14.4 libpq.

What's new in psycopg 2.9.3 ^^^^^^^^^^^^^^^^^^^^^^^^^^^

  • Alpine (musl) wheels now available (:ticket:[#1392](https://github.com/psycopg/psycopg2/issues/1392)).
  • macOS arm64 (Apple M1) wheels now available (:ticket:1482).

... (truncated)

Commits
  • 3eee3e3 ci: fix passing env vars to build scripts
  • 1e0086b chore: bump version to 2.9.7
  • 4fe28d6 Merge branch 'dev/init-failure'
  • 14e06d8 docs: mention module init errors fix in news file
  • 959339c Return NULL on failed module initialization
  • fb77bdc Merge branch 'dev/fix-meson-build'
  • ef7053c docs: add pg_config improvement to news file
  • ea71fbc setup.py: handle more corner cases for pg_config
  • 0c5b5f4 chore: bump cibuildwheel version to 2.14.1
  • 20fcfd6 chore: upgrade libpq and openssl versions used in packaging
  • Additional commits viewable in compare view


Updates tox from 4.6.4 to 4.11.3

Release notes

Sourced from tox's releases.

4.11.3

What's Changed

New Contributors

Full Changelog: https://github.com/tox-dev/tox/compare/4.11.2...4.11.3

4.11.2

What's Changed

New Contributors

Full Changelog: https://github.com/tox-dev/tox/compare/4.11.1...4.11.2

4.11.1

What's Changed

Full Changelog: https://github.com/tox-dev/tox/compare/4.11.0...4.11.1

4.11.0

What's Changed

New Contributors

Full Changelog: https://github.com/tox-dev/tox/compare/4.10.0...4.11.0

4.10.0

What's Changed

... (truncated)

Changelog

Sourced from tox's changelog.

v4.11.3 (2023-09-08)

Bugfixes - 4.11.3

- Handle ``FileNotFoundError`` when the ``base_python`` interpreter doesn't exist (:issue:`3105`)

Improved Documentation - 4.11.3

  • Explain how plugins are registered and discovered - by :user:hashar. (:issue:3116)

v4.11.2 (2023-09-07)

Bugfixes - 4.11.2

- Fix bug in ``config.rst`` by removing stray colons left over from (:issue:`3111`) - by :user:`posita`. (:issue:`3118`)
- Provide example to make CLI help more helpful for ``-x`/``--override`` - by :user:`posita`. (:issue:`3119`)

Improved Documentation - 4.11.2

  • Fix typos discovered by codespell - by :user:cclauss. (:issue:3113)

v4.11.1 (2023-09-01)

Bugfixes - 4.11.1

- Allow passing in multiple overrides using the ``;`` character and fix ``,`` being used as splitting values -
  by :user:`gaborbernat`. (:issue:`3112`)

v4.11.0 (2023-08-29)

Features - 4.11.0

  • Add support for setting build backend config_settings in the configuration file - by :user:gaborbernat. (:issue:3090)

v4.10.0 (2023-08-21)

Features - 4.10.0

- Change accepted environment name rule: must be made up of factors defined in configuration or match regex
  ``(pypy|py|cython|)((\d(\.\d+(\.\d+)?)?)|\d+)?``. If an environment name does not match this fail, and if a close match
  found suggest that to the user. (:issue:`3099`)
</tr></table> 

... (truncated)

Commits


Updates django-grappelli from 3.0.6 to 3.0.7

Changelog

Sourced from django-grappelli's changelog.

3.0.7 (August 15th 2023)

  • Updated jQueryUI to 1.13.2.
  • Added readthedocs yaml file.
Commits


Updates django-constance from 2.9.1 to 3.1.0

Changelog

Sourced from django-constance's changelog.

v3.1.0 (2023/08/21)


* Add support for using a subdirectory of `MEDIA_ROOT` for file fields
  • Remove pypy from tox tests

v3.0.0 (2023/07/27)

  • Refactor database backend Backward incompatible changes: remove 'constance.backends.database' from INSTALLED_APPS

  • Dropped support for python < 3.7 and django < 3.2

  • Example app now supports django 4.1

  • Add support for django 4.2

  • Forward the request when saving the admin changelist form

Commits
  • bc9707d Bump version 3.1.0
  • 6a5052e Adding support for using a subdirectory of MEDIA_ROOT for file fields (#475)
  • 554dac0 remove pypy from tox tests (#524)
  • 8317070 Bump version 3.0.0
  • 796f0fa Merge pull request #518 from browniebroke/feat/django-4.2
  • d65b916 Add official support for Django 4.2
  • 9cbd512 Fix formatting in changes.rst
  • 0047a78 Fix constance management command without admin installed (#506)
  • 92e595e [pre-commit.ci] pre-commit autoupdate (#516)
  • 5ab48e1 505-race-condition-caused-by-when-constance-registers-django-checks (#514)
  • Additional commits viewable in compare view


Updates django-storages from 1.13.2 to 1.14

Changelog

Sourced from django-storages's changelog.

1.14 (2023-09-04)


General

  • Breaking: Drop support for Django 4.0 ([#1235](https://github.com/jschneier/django-storages/issues/1235)_)
  • Breaking: The long deprecated & removed (from Django) (modified|created|accessed)_time methods have been removed from the various storages, please replace with the get_(modified|created|accessed)_time methods
  • Add support for saving pathlib.PurePath names ([#1278](https://github.com/jschneier/django-storages/issues/1278)_)
  • Add support for Django 4.2 ([#1236](https://github.com/jschneier/django-storages/issues/1236)_)

Azure

  • Set account_(name|key) from connection_string if not provided ([#1225](https://github.com/jschneier/django-storages/issues/1225)_)

Dropbox

  • Deprecated: The name DropboxStorage.location has been deprecated, please rename to DropboxStorage.root_path, a future version will remove support for the old name. ([#1251](https://github.com/jschneier/django-storages/issues/1251)_)
  • Storage and related names with a captialized B have been changed to no longer have one e.g DropboxStorage has now replaced DropBoxStorage. Aliases have been added so no change is necessary at this time. A future version might deprecate the old names. ([#1250](https://github.com/jschneier/django-storages/issues/1250)_)
  • DropboxStorage now conforms to the BaseStorage interface ([#1251](https://github.com/jschneier/django-storages/issues/1251)_)
  • Fix name mangling when saving with certain complex root paths ([#1279](https://github.com/jschneier/django-storages/issues/1279)_)

FTP

  • Use setting BASE_URL if it is defined ([#1238](https://github.com/jschneier/django-storages/issues/1238)_)

Google Cloud

  • Breaking: Support for the deprecated GS_CACHE_CONTROL has been removed. Please set the cache_control parameter of GS_OBJECT_PARAMETERS instead. ([#1220](https://github.com/jschneier/django-storages/issues/1220)_)

Libcloud

  • Reading a file that does not exist will now raise FileNotFoundError ([#1191](https://github.com/jschneier/django-storages/issues/1191)_)

SFTP

  • Add closing context manager for standalone usage to ensure connections are cleaned up ([#1253](https://github.com/jschneier/django-storages/issues/1253)_)

S3

... (truncated)

Commits


Updates boto3 from 1.28.9 to 1.28.45

Changelog

Sourced from boto3's changelog.

1.28.45

  • api-change:ecr: [botocore] This release will have ValidationException be thrown from ECR LifecyclePolicy APIs in regions LifecyclePolicy is not supported, this includes existing Amazon Dedicated Cloud (ADC) regions. This release will also change Tag: TagValue and Tag: TagKey to required.
  • api-change:medialive: [botocore] AWS Elemental Link now supports attaching a Link UHD device to a MediaConnect flow.
  • api-change:quicksight: [botocore] This release launches new updates to QuickSight KPI visuals - support for sparklines, new templated layout and new targets for conditional formatting rules.

1.28.44

  • api-change:fsx: [botocore] Amazon FSx documentation fixes
  • api-change:sagemaker: [botocore] Autopilot APIs will now support holiday featurization for Timeseries models. The models will now hold holiday metadata and should be able to accommodate holiday effect during inference.
  • api-change:sso-admin: [botocore] Content updates to IAM Identity Center API for China Regions.
  • api-change:workspaces: [botocore] A new field "ErrorDetails" will be added to the output of "DescribeWorkspaceImages" API call. This field provides in-depth details about the error occurred during image import process. These details include the possible causes of the errors and troubleshooting information.

1.28.43

  • api-change:neptunedata: [botocore] Minor changes to send unsigned requests to Neptune clusters
  • api-change:securityhub: [botocore] Documentation updates for AWS Security Hub
  • api-change:simspaceweaver: [botocore] BucketName and ObjectKey are now required for the S3Location data type. BucketName is now required for the S3Destination data type.

1.28.42

  • api-change:appflow: [botocore] Adding OAuth2.0 support for servicenow connector.
  • api-change:ec2: [botocore] This release adds 'outpost' location type to the DescribeInstanceTypeOfferings API, allowing customers that have been allowlisted for outpost to query their offerings in the API.
  • api-change:elbv2: [botocore] Update elbv2 client to latest version
  • api-change:medialive: [botocore] Adds advanced Output Locking options for Epoch Locking: Custom Epoch and Jam Sync Time
  • api-change:wafv2: [botocore] The targeted protection level of the Bot Control managed rule group now provides optional, machine-learning analysis of traffic statistics to detect some bot-related activity. You can enable or disable the machine learning functionality through the API.

1.28.41

  • api-change:billingconductor: [botocore] This release adds support for line item filtering in for the custom line item resource.
  • api-change:cloud9: [botocore] Added support for Ubuntu 22.04 that was not picked up in a previous Trebuchet request. Doc-only update.
  • api-change:compute-optimizer: [botocore] This release adds support to provide recommendations for G4dn and P3 instances that use NVIDIA GPUs.
  • api-change:ec2: [botocore] Introducing Amazon EC2 C7gd, M7gd, and R7gd Instances with up to 3.8 TB of local NVMe-based SSD block-level storage. These instances are powered by AWS Graviton3 processors, delivering up to 25% better performance over Graviton2-based instances.
  • api-change:ecs: [botocore] Documentation only update for Amazon ECS.
  • api-change:events: [botocore] Update events client to latest version
  • api-change:rds: [botocore] Add support for feature integration with AWS Backup.
  • api-change:sagemaker: [botocore] SageMaker Neo now supports data input shape derivation for Pytorch 2.0 and XGBoost compilation job for cloud instance targets. You can skip DataInputConfig field during compilation job creation. You can also access derived information from model in DescribeCompilationJob response.
  • api-change:vpc-lattice: [botocore] This release adds Lambda event structure version config support for LAMBDA target groups. It also adds newline support for auth policies.

1.28.40

... (truncated)

Commits
  • abdf901 Merge branch 'release-1.28.45'
  • caa76a2 Bumping version to 1.28.45
  • 2d86a31 Add changelog entries from botocore
  • 903a3cf Merge branch 'release-1.28.44'
  • e47aef3 Merge branch 'release-1.28.44' into develop
  • f531e7e Bumping version to 1.28.44
  • 3a7ae20 Add changelog entries from botocore
  • 28c42e3 Merge branch 'release-1.28.43'
  • a0d8ad1 Merge branch 'release-1.28.43' into develop
  • 28e4404 Bumping version to 1.28.43
  • Additional commits viewable in compare view


Updates django-post-office from 3.7.0 to 3.7.1

Release notes

Sourced from django-post-office's releases.

v3.7.1

  • Optimized a queryset in get_queued() that doesn't use indexes in Postgres. Thanks @​marsha97!
  • Removed date_hierarchy option which causes admin to load slowly on DBs with a large number of emails. Thanks @​selwin!
  • Optimized cleanup_expired_mails() so that deletes emails in smaller batches. Thanks @​marsha97!
Changelog

Sourced from django-post-office's changelog.

Version 3.7.1 (2023-08-08)

  • Optimized a queryset in get_queued() that doesn't use indexes in Postgres. Thanks @​marsha97!
  • Removed date_hierarchy option which causes admin to load slowly on DBs with a large number of emails. Thanks @​selwin!
  • Optimized cleanup_expired_mails() so that deletes emails in smaller batches. Thanks @​marsha97!
Commits


Updates celery from 5.3.1 to 5.3.4

Release notes

Sourced from celery's releases.

v5.3.4

Notice Regarding v5.3.2 and v5.3.3

Versions 5.3.2 and 5.3.3 were identified to contain breaking changes and have been yanked to maintain codebase stability. We appreciate the community's timely feedback on these versions and apologize for any inconvenience caused.

What's Changed

... (truncated)

Changelog

Sourced from celery's changelog.

5.3.4

:release-date: 2023-09-03 10:10 P.M GMT+2 :release-by: Tomer Nosrati

.. warning:: This version has reverted the breaking changes introduced in 5.3.2 and 5.3.3:

  • Revert "store children with database backend" (#8475)

  • Revert "Fix eager tasks does not populate name field" (#8476)

  • Bugfix: Removed unecessary stamping code from _chord.run() (#8339)

  • User guide fix (hotfix for #1755) (#8342)

  • store children with database backend (#8338)

  • Stamping bugfix with group/chord header errback linking (#8347)

  • Use argsrepr and kwargsrepr in LOG_RECEIVED (#8301)

  • Fixing minor typo in code example in calling.rst (#8366)

  • add documents for timeout settings (#8373)

  • fix: copyright year (#8380)

  • setup.py: enable include_package_data (#8379)

  • Fix eager tasks does not populate name field (#8383)

  • Update test.txt dependencies (#8389)

  • Update auth.txt deps (#8392)

  • Fix backend.get_task_meta ignores the result_extended config parameter in mongodb backend (#8391)

  • Support preload options for shell and purge commands (#8374)

  • Implement safer ArangoDB queries (#8351)

  • integration test: cleanup worker after test case (#8361)

  • Added "Tomer Nosrati" to CONTRIBUTORS.txt (#8400)

  • Update README.rst (#8404)

  • Update README.rst (#8408)

  • fix(canvas): add group index when unrolling tasks (#8427)

  • fix(beat): debug statement should only log AsyncResult.id if it exists (#8428)

  • Lint fixes & pre-commit autoupdate (#8414)

  • Update auth.txt (#8435)

  • Update mypy on test.txt (#8438)

  • added missing kwargs arguments in some cli cmd (#8049)

  • Fix #8431: Set format_date to False when calling _get_result_meta on mongo backend (#8432)

  • Docs: rewrite out-of-date code (#8441)

  • Limit redis client to 4.x since 5.x fails the test suite (#8442)

  • Limit tox to < 4.9 (#8443)

  • Fixed issue: Flags broker_connection_retry_on_startup & broker_connection_retry aren’t reliable (#8446)

  • doc update from #7651 (#8451)

  • Remove tox version limit (#8464)

  • Fixed AttributeError: 'str' object has no attribute (#8463)

  • Upgraded Kombu from 5.3.1 -> 5.3.2 (#8468)

  • Document need for CELERY_ prefix on CLI env vars (#8469)

  • Use string value for CELERY_SKIP_CHECKS envvar (#8462)

  • Revert "store children with database backend" (#8475)

  • Revert "Fix eager tasks does not populate name field" (#8476)

... (truncated)

Commits


Updates redis from 4.6.0 to 5.0.0

Release notes

Sourced from redis's releases.

5.0.0

What's new?

Triggers and Functions support

Triggers and Functions allow you to execute server-side functions triggered when key values are modified or created in Redis, a stream entry arrival, or explicitly calling them. Simply put, you can replace Lua scripts with easy-to-develop JavaScript or TypeScript code. Move your business logic closer to the data to ensure a lower latency, and forget about updating dependent key values manually in your code. Try it for yourself with Quick start

Full Redis 7.2 and RESP3 support

Python 3.7 End-of-Life

Python 3.7 has reached its end-of-life (EOL) as of June 2023. This means that starting from this date, Python 3.7 will no longer receive any updates, including security patches, bug fixes, or improvements. If you continue to use Python 3.7 post-EOL, you may expose your projects and systems to potential security vulnerabilities. We ended its support in this version and strongly recommend migrating to Python 3.10.

🐛 Bug Fixes

  • Fix timeout retrying on pipeline execution (#2812)
  • Fix socket garbage collection (
    dependabot[bot] commented 1 year ago

    Looks like these dependencies are updatable in another way, so this is no longer needed.