ekino / docker-buildbox

Docker images for GitLab CI's jobs
https://hub.docker.com/search/?q=ekino%2Fci-&type=image
55 stars 65 forks source link

chore(deps): bump pipenv from 2024.0.3 to 2024.1.0 in /dind #1463

Closed dependabot[bot] closed 2 weeks ago

dependabot[bot] commented 2 weeks ago

Bumps pipenv from 2024.0.3 to 2024.1.0.

Release notes

Sourced from pipenv's releases.

Release v2024.1.0

What's Changed

Full Changelog: https://github.com/pypa/pipenv/compare/v2024.0.3...v2024.1.0

Changelog

Sourced from pipenv's changelog.

2024.1.0 (2024-09-29)

Pipenv 2024.1.0 (2024-09-29)

Features & Improvements

  • Upgrade from pip==24.0 to pip==24.1.2. [#6253](https://github.com/pypa/pipenv/issues/6253) <https://github.com/pypa/pipenv/issues/6253>_

Bug Fixes

  • Fixes regression in lock file generation that caused environment variable references (e.g., ${GIT_PASSWORD}) in VCS URLs to be stripped out. This restores the ability to use credential placeholders in version control system URLs. [#6256](https://github.com/pypa/pipenv/issues/6256) <https://github.com/pypa/pipenv/issues/6256>_
Commits
  • 2b9c78a Release v2024.1.0
  • 3a16980 Bumped version to 2024.1.0.
  • 9d7dc56 don't try to bump to dev version during pypi publish.
  • 89fd265 Merge pull request #6262 from pypa/fix-ci-vcs
  • 2651f99 Fix tests for windows and leave behavior for mac/linux
  • cbcd06c Fix test on windows
  • d9e6dfe Merge pull request #6260 from pypa/fix-get-pipenv
  • 7d22200 ruff: ignore get-pipenv.py
  • e1866a9 Update get-pipenv.py
  • fa08ff5 Make this code path more safe to prevent stack trace/regression.
  • Additional commits viewable in compare view


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)