emissary-ingress / emissary

open source Kubernetes-native API gateway for microservices built on the Envoy Proxy
https://www.getambassador.io
Apache License 2.0
4.32k stars 684 forks source link

build(deps): bump orjson from 3.9.10 to 3.10.1 in /python #5632

Closed dependabot[bot] closed 2 months ago

dependabot[bot] commented 2 months ago

Bumps orjson from 3.9.10 to 3.10.1.

Release notes

Sourced from orjson's releases.

3.10.1

Fixed

  • Serializing numpy.ndarray with non-native endianness raises orjson.JSONEncodeError.

Changed

  • Improve performance of serializing.

3.10.0

Changed

  • Support serializing numpy.float16 (numpy.half).
  • sdist uses metadata 2.3 instead of 2.1.
  • Improve Windows PyPI builds.

3.9.15

Fixed

  • Implement recursion limit of 1024 on orjson.loads().
  • Use byte-exact read on str formatting SIMD path to avoid crash.

3.9.14

Fixed

  • Fix crash serializing str introduced in 3.9.11.

Changed

  • Build now depends on Rust 1.72 or later.

3.9.13

Fixed

  • Serialization str escape uses only 128-bit SIMD.
  • Fix compatibility with CPython 3.13 alpha 3.

Changed

  • Publish musllinux_1_2 instead of musllinux_1_1 wheels.
  • Serialization uses small integer optimization in CPython 3.12 or later.

3.9.12

Fixed

  • Minimal musllinux_1_1 build due to sporadic CI failure.

Changed

... (truncated)

Changelog

Sourced from orjson's changelog.

3.10.1 - 2024-04-15

Fixed

  • Serializing numpy.ndarray with non-native endianness raises orjson.JSONEncodeError.

Changed

  • Improve performance of serializing.

3.10.0 - 2024-03-27

Changed

  • Support serializing numpy.float16 (numpy.half).
  • sdist uses metadata 2.3 instead of 2.1.
  • Improve Windows PyPI builds.

3.9.15 - 2024-02-23

Fixed

  • Implement recursion limit of 1024 on orjson.loads().
  • Use byte-exact read on str formatting SIMD path to avoid crash.

3.9.14 - 2024-02-14

Fixed

  • Fix crash serializing str introduced in 3.9.11.

Changed

  • Build now depends on Rust 1.72 or later.

3.9.13 - 2024-02-03

Fixed

  • Serialization str escape uses only 128-bit SIMD.
  • Fix compatibility with CPython 3.13 alpha 3.

Changed

  • Publish musllinux_1_2 instead of musllinux_1_1 wheels.

... (truncated)

Commits
  • 632345a 3.10.1
  • 0c1091c dict key, val stalled cycles opt
  • 58a73f3 format_escaped_str() more unified LUT implementation
  • 6d22801 numpy serialization rejects non-native endianness
  • b6b21b0 manylinux_2_17, macos_universal2 CI
  • 79202e3 Fix upload-artifact, download-artifact workflow
  • 11c7de8 3.10.0
  • 1fc3ed8 Support numpy.float16
  • 56c1a03 cargo update, build misc
  • a348f59 3.9.15
  • Additional commits viewable in compare view


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
dependabot[bot] commented 2 months ago

Superseded by #5662.