ericmjl / nxviz

Visualization Package for NetworkX
https://ericmjl.github.io/nxviz
MIT License
457 stars 87 forks source link

Scheduled weekly dependency update for week 01 #644

Closed pyup-bot closed 3 years ago

pyup-bot commented 3 years ago

Update pytest from 6.1.1 to 6.2.1.

The bot wasn't able to find a changelog for this release. Got an idea?

Links - PyPI: https://pypi.org/project/pytest - Homepage: https://docs.pytest.org/en/latest/

Update hypothesis from 5.37.1 to 5.46.0.

The bot wasn't able to find a changelog for this release. Got an idea?

Links - PyPI: https://pypi.org/project/hypothesis - Repo: https://github.com/HypothesisWorks/hypothesis/tree/master/hypothesis-python

Update cryptography from 3.1.1 to 3.3.1.

Changelog ### 3.3 ``` ~~~~~~~~~~~~~~~~ * **BACKWARDS INCOMPATIBLE:** Support for Python 3.5 has been removed due to low usage and maintenance burden. * **BACKWARDS INCOMPATIBLE:** The :class:`~cryptography.hazmat.primitives.ciphers.modes.GCM` and :class:`~cryptography.hazmat.primitives.ciphers.aead.AESGCM` now require 64-bit to 1024-bit (8 byte to 128 byte) initialization vectors. This change is to conform with an upcoming OpenSSL release that will no longer support sizes outside this window. * **BACKWARDS INCOMPATIBLE:** When deserializing asymmetric keys we now raise ``ValueError`` rather than ``UnsupportedAlgorithm`` when an unsupported cipher is used. This change is to conform with an upcoming OpenSSL release that will no longer distinguish between error types. * **BACKWARDS INCOMPATIBLE:** We no longer allow loading of finite field Diffie-Hellman parameters of less than 512 bits in length. This change is to conform with an upcoming OpenSSL release that no longer supports smaller sizes. These keys were already wildly insecure and should not have been used in any application outside of testing. * Updated Windows, macOS, and ``manylinux`` wheels to be compiled with OpenSSL 1.1.1i. * Python 2 support is deprecated in ``cryptography``. This is the last release that will support Python 2. * Added the :meth:`~cryptography.hazmat.primitives.asymmetric.rsa.RSAPublicKey.recover_data_from_signature` function to :class:`~cryptography.hazmat.primitives.asymmetric.rsa.RSAPublicKey` for recovering the signed data from an RSA signature. .. _v3-2-1: ``` ### 3.2.1 ``` ~~~~~~~~~~~~~~~~~~ * Disable blinding on RSA public keys to address an error with some versions of OpenSSL. .. _v3-2: ``` ### 3.2 ``` ~~~~~~~~~~~~~~~~ * **SECURITY ISSUE:** Attempted to make RSA PKCS1v1.5 decryption more constant time, to protect against Bleichenbacher vulnerabilities. Due to limitations imposed by our API, we cannot completely mitigate this vulnerability and a future release will contain a new API which is designed to be resilient to these for contexts where it is required. Credit to **Hubert Kario** for reporting the issue. *CVE-2020-25659* * Support for OpenSSL 1.0.2 has been removed. Users on older version of OpenSSL will need to upgrade. * Added basic support for PKCS7 signing (including SMIME) via :class:`~cryptography.hazmat.primitives.serialization.pkcs7.PKCS7SignatureBuilder`. .. _v3-1-1: ```
Links - PyPI: https://pypi.org/project/cryptography - Changelog: https://pyup.io/changelogs/cryptography/ - Repo: https://github.com/pyca/cryptography

Update pandas from 1.1.3 to 1.2.0.

The bot wasn't able to find a changelog for this release. Got an idea?

Links - PyPI: https://pypi.org/project/pandas - Homepage: https://pandas.pydata.org

Update matplotlib from 3.3.2 to 3.3.3.

Changelog ### 3.3.3 ``` This is the third bugfix release of the 3.3.x series. This release contains several critical bug-fixes: * Fix calls to `Axis.grid` with argument `visible=True`. * Fix fully masked `imshow`. * Fix inconsistent color mapping in scatter for 3D plots. * Fix notebook/nbAgg figures when used with ipywidgets in the same cell. * Fix notebook/nbAgg/WebAgg on older (e.g., Firefox ESR) browsers. * Fix pcolormesh with `datetime` coordinates. * Fix performance regression with `datetime`s. * Fix singular ticks with small log ranges. * Fix timers/animations on wx and notebook backends. * Remove certifi as a hard runtime dependency. ```
Links - PyPI: https://pypi.org/project/matplotlib - Changelog: https://pyup.io/changelogs/matplotlib/ - Homepage: https://matplotlib.org

Update setuptools from 50.3.0 to 51.1.1.

Changelog ### 51.1.1 ``` ------- Misc ^^^^ * 2525: Avoid hitting network during test_virtualenv.test_test_command. ``` ### 51.1.0 ``` ------- Changes ^^^^^^^ * 2486: Project adopts jaraco/skeleton for shared package maintenance. Misc ^^^^ * 2477: Restore inclusion of rst files in sdist. * 2484: Setuptools has replaced the master branch with the main branch. * 2485: Fixed failing test when pip 20.3+ is present. -- by :user:`yan12125` * 2487: Fix tests with pytest 6.2 -- by :user:`yan12125` ``` ### 51.0.0 ``` ------- Breaking Changes ^^^^^^^^^^^^^^^^ * 2435: Require Python 3.6 or later. Documentation changes ^^^^^^^^^^^^^^^^^^^^^ * 2430: Fixed inconsistent RST title nesting levels caused by 2399 -- by :user:`webknjaz` * 2430: Fixed a typo in Sphinx docs that made docs dev section disappear as a result of PR 2426 -- by :user:`webknjaz` Misc ^^^^ * 2471: Removed the tests that guarantee that the vendored dependencies can be built by distutils. ``` ### 50.3.2 ``` ------- Documentation changes ^^^^^^^^^^^^^^^^^^^^^ * 2394: Extended towncrier news template to include change note categories. This allows to see what types of changes a given version introduces -- by :user:`webknjaz` * 2427: Started enforcing strict syntax and reference validation in the Sphinx docs -- by :user:`webknjaz` * 2428: Removed redundant Sphinx ``Makefile`` support -- by :user:`webknjaz` Misc ^^^^ * 2401: Enabled test results reporting in AppVeyor CI -- by :user:`webknjaz` * 2420: Replace Python 3.9.0 beta with 3.9.0 final on GitHub Actions. * 2421: Python 3.9 Trove classifier got added to the dist metadata -- by :user:`webknjaz` ``` ### 50.3.1 ``` ------- Documentation changes ^^^^^^^^^^^^^^^^^^^^^ * 2093: Finalized doc revamp. * 2097: doc: simplify index and group deprecated files * 2102: doc overhaul step 2: break main doc into multiple sections * 2111: doc overhaul step 3: update userguide * 2395: Added a ``:user:`` role to Sphinx config -- by :user:`webknjaz` * 2395: Added an illustrative explanation about the change notes to fragments dir -- by :user:`webknjaz` Misc ^^^^ * 2379: Travis CI test suite now tests against PPC64. * 2413: Suppress EOF errors (and other exceptions) when importing lib2to3. ```
Links - PyPI: https://pypi.org/project/setuptools - Changelog: https://pyup.io/changelogs/setuptools/ - Repo: https://github.com/pypa/setuptools

Update numpy from 1.19.2 to 1.19.4.

The bot wasn't able to find a changelog for this release. Got an idea?

Links - PyPI: https://pypi.org/project/numpy - Homepage: https://www.numpy.org

Update seaborn from 0.11.0 to 0.11.1.

Changelog ### 0.11.1 ``` This a bug fix release and is a recommended upgrade for all users on v0.11.0. Complete release notes are available on the [seaborn website](http://seaborn.pydata.org/whatsnew.htmlv0-11-1-december-2020). ```
Links - PyPI: https://pypi.org/project/seaborn - Changelog: https://pyup.io/changelogs/seaborn/ - Repo: https://github.com/mwaskom/seaborn/ - Homepage: https://seaborn.pydata.org

Update more-itertools from 8.5.0 to 8.6.0.

Changelog ### 8.6.0 ``` See the [changelog](https://github.com/more-itertools/more-itertools/blob/4d2e1db8eced66fa797832b2b2d720b4f6ae6483/docs/versions.rst860) for details. ```
Links - PyPI: https://pypi.org/project/more-itertools - Changelog: https://pyup.io/changelogs/more-itertools/ - Repo: https://github.com/more-itertools/more-itertools - Docs: https://pythonhosted.org/more-itertools/