codicoop / boilerplate_django

Plantilla pels nous projectes web amb Django.
GNU General Public License v3.0
0 stars 0 forks source link

Bump the python-dependencies group with 16 updates #81

Closed dependabot[bot] closed 1 year ago

dependabot[bot] commented 1 year ago

Bumps the python-dependencies group with 16 updates:

Package From To
django 4.2.3 4.2.5
django-environ 0.10.0 0.11.2
psycopg2-binary 2.9.6 2.9.7
tox 4.6.4 4.11.3
django-grappelli 3.0.6 3.0.7
django-constance 2.9.1 3.1.0
django-storages 1.13.2 1.14
boto3 1.28.9 1.28.50
django-post-office 3.7.0 3.7.1
celery 5.3.1 5.3.4
redis 4.6.0 5.0.0
sentry-sdk 1.28.1 1.31.0
black 23.7.0 23.9.1
flake8 6.0.0 6.1.0
flake8-bugbear 23.7.10 23.9.16
pytest 7.4.0 7.4.2

Updates django from 4.2.3 to 4.2.5

Commits
  • b8b2f74 [4.2.x] Bumped version for 4.2.5 release.
  • 9c51b4d [4.2.x] Fixed CVE-2023-41164 -- Fixed potential DoS in django.utils.encoding....
  • acfb427 [4.2.x] Fixed #34803 -- Fixed queryset crash when filtering againts deeply ne...
  • 55a0b9c [4.2.x] Added stub release notes and release date for 4.2.5, 4.1.11, and 3.2.21.
  • 8e8c318 [4.2.x] Avoided counting exceptions in AsyncClient docs.
  • dcb9d7a [4.2.x] Improved formset docs by using a set instead of a list in the custom ...
  • f55b420 [4.2.x] Fixed #34781 -- Updated logging ref docs for django.server's request ...
  • 46b2b08 [4.2.x] Fixed #34779 -- Avoided unnecessary selection of non-nullable m2m fie...
  • d34db66 [4.2.x] Fixed #34773 -- Fixed syncing DEFAULT_FILE_STORAGE/STATICFILES_STORAG...
  • a22aeef [4.2.x] Fixed #15799 -- Doc'd that Storage._open() should raise FileNotFoundE...
  • Additional commits viewable in compare view


Updates django-environ from 0.10.0 to 0.11.2

Release notes

Sourced from django-environ's releases.

v0.11.2

Fixed

  • Revert "Add variable expansion" feature due to #490

v0.11.1

Fixed

  • Revert "Add interpolate argument to avoid resolving proxied values." feature due to #485

v0.11.0

Added

  • Added support for Django 4.2 #456.
  • Added support for secure Elasticsearch connections #463.
  • Added variable expansion #468.
  • Added capability to handle comments after #, after quoted values, like KEY= 'part1 # part2' # comment #475.
  • Added support for interpolate parameter #415.

Changed

  • Used mssql-django as engine for SQL Server #446.
  • Changed handling bool values, stripping whitespace around value #475.
  • Use importlib.util.find_spec to replace pkgutil.find_loader #482.

Removed

  • Removed support of Python 3.5.
Changelog

Sourced from django-environ's changelog.

v0.11.2_ - 1-September-2023

Fixed +++++

  • Revert "Add variable expansion." feature due to [#490](https://github.com/joke2k/django-environ/issues/490) <https://github.com/joke2k/django-environ/issues/490>_.

v0.11.1_ - 30-August-2023

Fixed +++++

  • Revert "Add interpolate argument to avoid resolving proxied values." feature due to [#485](https://github.com/joke2k/django-environ/issues/485) <https://github.com/joke2k/django-environ/issues/485>_.

v0.11.0_ - 30-August-2023

Added +++++

  • Added support for Django 4.2 [#456](https://github.com/joke2k/django-environ/issues/456) <https://github.com/joke2k/django-environ/pull/456>_.
  • Added support for secure Elasticsearch connections [#463](https://github.com/joke2k/django-environ/issues/463) <https://github.com/joke2k/django-environ/pull/463>_.
  • Added variable expansion [#468](https://github.com/joke2k/django-environ/issues/468) <https://github.com/joke2k/django-environ/pull/468>_.
  • Added capability to handle comments after #, after quoted values, like KEY= 'part1 # part2' # comment [#475](https://github.com/joke2k/django-environ/issues/475) <https://github.com/joke2k/django-environ/pull/475>_.
  • Added support for interpolate parameter [#415](https://github.com/joke2k/django-environ/issues/415) <https://github.com/joke2k/django-environ/pull/415>_.

Changed +++++++

  • Used mssql-django as engine for SQL Server [#446](https://github.com/joke2k/django-environ/issues/446) <https://github.com/joke2k/django-environ/pull/446>_.
  • Changed handling bool values, stripping whitespace around value [#475](https://github.com/joke2k/django-environ/issues/475) <https://github.com/joke2k/django-environ/pull/475>_.
  • Use importlib.util.find_spec to replace pkgutil.find_loader [#482](https://github.com/joke2k/django-environ/issues/482) <https://github.com/joke2k/django-environ/pull/482>_.

Removed +++++++

  • Removed support of Python 3.5.
Commits


Updates psycopg2-binary from 2.9.6 to 2.9.7

Changelog

Sourced from psycopg2-binary's changelog.

Current release

What's new in psycopg 2.9.7 ^^^^^^^^^^^^^^^^^^^^^^^^^^^

  • Fix propagation of exceptions raised during module initialization (:ticket:[#1598](https://github.com/psycopg/psycopg2/issues/1598)).
  • Fix building when pg_config returns an empty string (:ticket:[#1599](https://github.com/psycopg/psycopg2/issues/1599)).
  • Wheel package compiled against OpenSSL 1.1.1v.

What's new in psycopg 2.9.6 ^^^^^^^^^^^^^^^^^^^^^^^^^^^

  • Package manylinux 2014 for aarch64 and ppc64le platforms, in order to include libpq 15 in the binary package (:ticket:[#1396](https://github.com/psycopg/psycopg2/issues/1396)).
  • Wheel package compiled against OpenSSL 1.1.1t.

What's new in psycopg 2.9.5 ^^^^^^^^^^^^^^^^^^^^^^^^^^^

  • Add support for Python 3.11.
  • Add support for rowcount in MERGE statements in binary packages (:ticket:[#1497](https://github.com/psycopg/psycopg2/issues/1497)).
  • Wheel package compiled against OpenSSL 1.1.1r and PostgreSQL 15 libpq.

What's new in psycopg 2.9.4 ^^^^^^^^^^^^^^^^^^^^^^^^^^^

  • Fix ~psycopg2.extras.register_composite(), ~psycopg2.extras.register_range() with customized :sql:search_path (:ticket:[#1487](https://github.com/psycopg/psycopg2/issues/1487)).
  • Handle correctly composite types with names or in schemas requiring escape.
  • Find pg_service.conf file in the /etc/postgresql-common directory in binary packages (:ticket:[#1365](https://github.com/psycopg/psycopg2/issues/1365)).
  • ~psycopg2.errorcodes map and ~psycopg2.errors classes updated to PostgreSQL 15.
  • Wheel package compiled against OpenSSL 1.1.1q and PostgreSQL 14.4 libpq.

What's new in psycopg 2.9.3 ^^^^^^^^^^^^^^^^^^^^^^^^^^^

  • Alpine (musl) wheels now available (:ticket:[#1392](https://github.com/psycopg/psycopg2/issues/1392)).
  • macOS arm64 (Apple M1) wheels now available (:ticket:1482).

... (truncated)

Commits
  • 3eee3e3 ci: fix passing env vars to build scripts
  • 1e0086b chore: bump version to 2.9.7
  • 4fe28d6 Merge branch 'dev/init-failure'
  • 14e06d8 docs: mention module init errors fix in news file
  • 959339c Return NULL on failed module initialization
  • fb77bdc Merge branch 'dev/fix-meson-build'
  • ef7053c docs: add pg_config improvement to news file
  • ea71fbc setup.py: handle more corner cases for pg_config
  • 0c5b5f4 chore: bump cibuildwheel version to 2.14.1
  • 20fcfd6 chore: upgrade libpq and openssl versions used in packaging
  • Additional commits viewable in compare view


Updates tox from 4.6.4 to 4.11.3

Release notes

Sourced from tox's releases.

4.11.3

What's Changed

New Contributors

Full Changelog: https://github.com/tox-dev/tox/compare/4.11.2...4.11.3

4.11.2

What's Changed

New Contributors

Full Changelog: https://github.com/tox-dev/tox/compare/4.11.1...4.11.2

4.11.1

What's Changed

Full Changelog: https://github.com/tox-dev/tox/compare/4.11.0...4.11.1

4.11.0

What's Changed

New Contributors

Full Changelog: https://github.com/tox-dev/tox/compare/4.10.0...4.11.0

4.10.0

What's Changed

... (truncated)

Changelog

Sourced from tox's changelog.

v4.11.3 (2023-09-08)

Bugfixes - 4.11.3

- Handle ``FileNotFoundError`` when the ``base_python`` interpreter doesn't exist (:issue:`3105`)

Improved Documentation - 4.11.3

  • Explain how plugins are registered and discovered - by :user:hashar. (:issue:3116)

v4.11.2 (2023-09-07)

Bugfixes - 4.11.2

- Fix bug in ``config.rst`` by removing stray colons left over from (:issue:`3111`) - by :user:`posita`. (:issue:`3118`)
- Provide example to make CLI help more helpful for ``-x`/``--override`` - by :user:`posita`. (:issue:`3119`)

Improved Documentation - 4.11.2

  • Fix typos discovered by codespell - by :user:cclauss. (:issue:3113)

v4.11.1 (2023-09-01)

Bugfixes - 4.11.1

- Allow passing in multiple overrides using the ``;`` character and fix ``,`` being used as splitting values -
  by :user:`gaborbernat`. (:issue:`3112`)

v4.11.0 (2023-08-29)

Features - 4.11.0

  • Add support for setting build backend config_settings in the configuration file - by :user:gaborbernat. (:issue:3090)

v4.10.0 (2023-08-21)

Features - 4.10.0

- Change accepted environment name rule: must be made up of factors defined in configuration or match regex
  ``(pypy|py|cython|)((\d(\.\d+(\.\d+)?)?)|\d+)?``. If an environment name does not match this fail, and if a close match
  found suggest that to the user. (:issue:`3099`)
</tr></table> 

... (truncated)

Commits


Updates django-grappelli from 3.0.6 to 3.0.7

Changelog

Sourced from django-grappelli's changelog.

3.0.7 (August 15th 2023)

  • Updated jQueryUI to 1.13.2.
  • Added readthedocs yaml file.
Commits


Updates django-constance from 2.9.1 to 3.1.0

Changelog

Sourced from django-constance's changelog.

v3.1.0 (2023/08/21)


* Add support for using a subdirectory of `MEDIA_ROOT` for file fields
  • Remove pypy from tox tests

v3.0.0 (2023/07/27)

  • Refactor database backend Backward incompatible changes: remove 'constance.backends.database' from INSTALLED_APPS

  • Dropped support for python < 3.7 and django < 3.2

  • Example app now supports django 4.1

  • Add support for django 4.2

  • Forward the request when saving the admin changelist form

Commits
  • bc9707d Bump version 3.1.0
  • 6a5052e Adding support for using a subdirectory of MEDIA_ROOT for file fields (#475)
  • 554dac0 remove pypy from tox tests (#524)
  • 8317070 Bump version 3.0.0
  • 796f0fa Merge pull request #518 from browniebroke/feat/django-4.2
  • d65b916 Add official support for Django 4.2
  • 9cbd512 Fix formatting in changes.rst
  • 0047a78 Fix constance management command without admin installed (#506)
  • 92e595e [pre-commit.ci] pre-commit autoupdate (#516)
  • 5ab48e1 505-race-condition-caused-by-when-constance-registers-django-checks (#514)
  • Additional commits viewable in compare view


Updates django-storages from 1.13.2 to 1.14

Changelog

Sourced from django-storages's changelog.

1.14 (2023-09-04)


General

  • Breaking: Drop support for Django 4.0 ([#1235](https://github.com/jschneier/django-storages/issues/1235)_)
  • Breaking: The long deprecated & removed (from Django) (modified|created|accessed)_time methods have been removed from the various storages, please replace with the get_(modified|created|accessed)_time methods
  • Add support for saving pathlib.PurePath names ([#1278](https://github.com/jschneier/django-storages/issues/1278)_)
  • Add support for Django 4.2 ([#1236](https://github.com/jschneier/django-storages/issues/1236)_)

Azure

  • Set account_(name|key) from connection_string if not provided ([#1225](https://github.com/jschneier/django-storages/issues/1225)_)

Dropbox

  • Deprecated: The name DropboxStorage.location has been deprecated, please rename to DropboxStorage.root_path, a future version will remove support for the old name. ([#1251](https://github.com/jschneier/django-storages/issues/1251)_)
  • Storage and related names with a captialized B have been changed to no longer have one e.g DropboxStorage has now replaced DropBoxStorage. Aliases have been added so no change is necessary at this time. A future version might deprecate the old names. ([#1250](https://github.com/jschneier/django-storages/issues/1250)_)
  • DropboxStorage now conforms to the BaseStorage interface ([#1251](https://github.com/jschneier/django-storages/issues/1251)_)
  • Fix name mangling when saving with certain complex root paths ([#1279](https://github.com/jschneier/django-storages/issues/1279)_)

FTP

  • Use setting BASE_URL if it is defined ([#1238](https://github.com/jschneier/django-storages/issues/1238)_)

Google Cloud

  • Breaking: Support for the deprecated GS_CACHE_CONTROL has been removed. Please set the cache_control parameter of GS_OBJECT_PARAMETERS instead. ([#1220](https://github.com/jschneier/django-storages/issues/1220)_)

Libcloud

  • Reading a file that does not exist will now raise FileNotFoundError ([#1191](https://github.com/jschneier/django-storages/issues/1191)_)

SFTP

  • Add closing context manager for standalone usage to ensure connections are cleaned up ([#1253](https://github.com/jschneier/django-storages/issues/1253)_)

S3

... (truncated)

Commits


Updates boto3 from 1.28.9 to 1.28.50

Changelog

Sourced from boto3's changelog.

1.28.50

  • api-change:discovery: [botocore] Add sensitive protection for customer information
  • api-change:macie2: [botocore] This release changes the default managedDataIdentifierSelector setting for new classification jobs to RECOMMENDED. By default, new classification jobs now use the recommended set of managed data identifiers.
  • api-change:workmail: [botocore] This release includes four new APIs UpdateUser, UpdateGroup, ListGroupsForEntity and DescribeEntity, along with RemoteUsers and some enhancements to existing APIs.

1.28.49

  • api-change:appstream: [botocore] This release introduces app block builder, allowing customers to provision a resource to package applications into an app block
  • api-change:connect: [botocore] New rule type (OnMetricDataUpdate) has been added
  • api-change:datasync: [botocore] Documentation-only updates for AWS DataSync.
  • api-change:sagemaker: [botocore] This release introduces Skip Model Validation for Model Packages

1.28.48

  • api-change:appstream: [botocore] This release introduces multi-session fleets, allowing customers to provision more than one user session on a single fleet instance.
  • api-change:cloudformation: [botocore] Documentation updates for AWS CloudFormation
  • api-change:entityresolution: [botocore] Changed "ResolutionTechniques" and "MappedInputFields" in workflow and schema mapping operations to be required fields.
  • api-change:lookoutequipment: [botocore] This release adds APIs for the new scheduled retraining feature.

1.28.47

  • api-change:cloud9: [botocore] Update to include information on Ubuntu 18 deprecation.
  • api-change:drs: [botocore] Updated existing APIs and added new ones to support using AWS Elastic Disaster Recovery post-launch actions. Added support for new regions.
  • api-change:firehose: [botocore] DocumentIdOptions has been added for the Amazon OpenSearch destination.
  • api-change:guardduty: [botocore] Add managementType field to ListCoverage API response.
  • api-change:internetmonitor: [botocore] This release updates the Amazon CloudWatch Internet Monitor API domain name.
  • api-change:ivs-realtime: [botocore] Doc only update that changes description for ParticipantToken.
  • api-change:simspaceweaver: [botocore] Edited the introductory text for the API reference.
  • api-change:xray: [botocore] Add StartTime field in GetTraceSummaries API response for each TraceSummary.

1.28.46

  • api-change:ec2: [botocore] This release adds support for restricting public sharing of AMIs through AMI Block Public Access
  • api-change:events: [botocore] Update events client to latest version
  • api-change:kendra: [botocore] Amazon Kendra now supports confidence score buckets for retrieved passage results using the Retrieve API.

1.28.45

... (truncated)

Commits
  • 4e58ac3 Merge branch 'release-1.28.50'
  • 26aa088 Bumping version to 1.28.50
  • 1641d20 Add changelog entries from botocore
  • 5fa4b01 Merge branch 'release-1.28.49'
  • e35bc70 Merge branch 'release-1.28.49' into develop
  • fda1d1e Bumping version to 1.28.49
  • c7a44e0 Add changelog entries from botocore
  • 48f0d7f Merge pull request #3855 from tim-finnigan/minor-grammar-fix
  • 30fa6e2 Merge branch 'release-1.28.48'
  • 2d1b157 Merge branch 'release-1.28.48' into develop
  • Additional commits viewable in compare view


Updates django-post-office from 3.7.0 to 3.7.1

Release notes

Sourced from django-post-office's releases.

v3.7.1

  • Optimized a queryset in get_queued() that doesn't use indexes in Postgres. Thanks @​marsha97!
  • Removed date_hierarchy option which causes admin to load slowly on DBs with a large number of emails. Thanks @​selwin!
  • Optimized cleanup_expired_mails() so that deletes emails in smaller batches. Thanks @​marsha97!
Changelog

Sourced from django-post-office's changelog.

Version 3.7.1 (2023-08-08)

  • Optimized a queryset in get_queued() that doesn't use indexes in Postgres. Thanks @​marsha97!
  • Removed date_hierarchy option which causes admin to load slowly on DBs with a large number of emails. Thanks @​selwin!
  • Optimized cleanup_expired_mails() so that deletes emails in smaller batches. Thanks @​marsha97!
Commits


Updates celery from 5.3.1 to 5.3.4

Release notes

Sourced from celery's releases.

v5.3.4

Notice Regarding v5.3.2 and v5.3.3

Versions 5.3.2 and 5.3.3 were identified to contain breaking changes and have been yanked to maintain codebase stability. We appreciate the community's timely feedback on these versions and apologize for any inconvenience caused.

What's Changed

... (truncated)

Changelog

Sourced from celery's changelog.

5.3.4

:release-date: 2023-09-03 10:10 P.M GMT+2 :release-by: Tomer Nosrati

.. warning:: This version has reverted the breaking changes introduced in 5.3.2 and 5.3.3:

  • Revert "store children with database backend" (#8475)

  • Revert "Fix eager tasks does not populate name field" (#8476)

  • Bugfix: Removed unecessary stamping code from _chord.run() (#8339)

  • User guide fix (hotfix for #1755) (#8342)

  • store children with database backend (#8338)

  • Stamping bugfix with group/chord header errback linking (#8347)

  • Use argsrepr and kwargsrepr in LOG_RECEIVED (#8301)

  • Fixing minor typo in code example in calling.rst (#8366)

  • add documents for timeout settings (#8373)

  • fix: copyright year (#8380)

  • setup.py: enable include_package_data (#8379)

  • Fix eager tasks does not populate name field (#8383)

  • Update test.txt dependencies (#8389)

  • Update auth.txt deps (#8392)

  • Fix backend.get_task_meta ignores the result_extended config parameter in mongodb backend (#8391)

  • Support preload options for shell and purge commands (#8374)

  • Implement safer ArangoDB queries (#8351)

  • integration test: cleanup worker after test case (#8361)

  • Added "Tomer Nosrati" to CONTRIBUTORS.txt (#8400)

  • Update README.rst (#8404)

  • Update README.rst (#8408)

  • fix(canvas): add group index when unrolling tasks (#8427)

  • fix(beat): debug statement should only log AsyncResult.id if it exists (#8428)

  • Lint fixes & pre-commit autoupdate (#8414)

  • Update auth.txt (#8435)

  • Update mypy on test.txt (#8438)

  • added missing kwargs arguments in some cli cmd (#8049)

  • Fix #8431: Set format_date to False when calling _get_result_meta on mongo backend (#8432)

  • Docs: rewrite out-of-date code (#8441)

  • Limit redis client to 4.x since 5.x fails the test suite (#8442)

  • Limit tox to < 4.9 (#8443)

  • Fixed issue: Flags broker_connection_retry_on_startup & broker_connection_retry aren’t reliable (#8446)

  • doc update from #7651 (#8451)

  • Remove tox version limit (#8464)

  • Fixed AttributeError: 'str' object has no attribute (#8463)

  • Upgraded Kombu from 5.3.1 -> 5.3.2 (#8468)

  • Document need for CELERY_ prefix on CLI env vars (#8469)

  • Use string value for CELERY_SKIP_CHECKS envvar (#8462)

  • Revert "store children with database backend" (#8475)

  • Revert "Fix eager tasks does not populate name field" (#8476)

... (truncated)

Commits


Updates redis from 4.6.0 to 5.0.0

Release notes

Sourced from redis's releases.

5.0.0

What's new?

Triggers and Functions support

Triggers and Functions allow you to execute server-side functions triggered when key values are modified or created in Redis, a stream entry arrival, or explicitly calling them. Simply put, you can replace Lua scripts with easy-to-develop JavaScript or TypeScript code. Move your business logic closer to the data to ensure a lower latency, and forget about updating dependent key values manually in your code. Try it for yourself with Quick start

Full Redis 7.2 and RESP3 support

Python 3.7 End-of-Life

Python 3.7 has reached its end-of-life (EOL) as of June 2023. This means that starting from this date, Python 3.7 will no longer receive any updates, including security patches, bug fixes, or improvements. If you continue to use Python 3.7 post-EOL, you may expose your projects and systems to potential security vulnerabilities. We ended its support in this version and strongly recommend migrating to Python 3.10.

🐛 Bug Fixes

  • Fix timeout retrying on pipeline execution (#2812)
  • Fix socket garbage collection (#2859)

🧰 Maintenance

  • Updating client license to clear, MIT (#2884)
  • Add py.typed in accordance with PEP-561 (#2738)
  • Dependabot label change (#2880)
  • Fix type hints in SearchCommands (#2817)
  • Add sync modules (except search) tests to cluster CI (#2850)
  • Fix a duplicate word in CONTRIBUTING.md (#2848)
  • Fixing doc builds (#2869)
  • Change cluster docker to edge and enable debug command (
dependabot[bot] commented 1 year ago

Superseded by #82.