search

fortysix2ahead / tracs

Command line application for managing GPS tracks
BSD 3-Clause "New" or "Revised" License
0 stars 1 forks source link

Update bottle requirement from ~=0.12.25 to ~=0.13.1 #330

Closed dependabot[bot] closed 2 months ago

dependabot[bot] commented 2 months ago

Updates the requirements on bottle to permit the latest version.

Release notes

Sourced from bottle's releases.

0.13.1

Full Changelog: https://github.com/bottlepy/bottle/compare/0.13.0...0.13.1

Changelog

Sourced from bottle's changelog.

.. highlight:: python .. currentmodule:: bottle

============= Release Notes

Release 0.14 (in development)

.. rubric:: Removed APIs (deprecated since 0.13)

  • Removed the RouteReset exception and associated logic.

Release 0.13

.. warning:: This release contains breaking changers, please read the notes below

.. rubric:: Dropped support for Python versions that reached their end-of-life.

Bottle up to 0.12 supported an absurd range of Python versions (2.5 to 3.12) and keeping support for Python versions as ancient as 2.5 required a ton of workarounds and compromises, but served no real purpose. If you need support for older Python versions, you can stay on bottle 0.12. The updated list of tested and supported python releases is as follows:

  • Python 2 >= 2.7.3
  • Python 3 >= 3.8

Support for Python 2.5 was marked as deprecated since 0.12. We decided to go a step further and also remove support for 2.6 and 3.1 to 3.7 even if it was never deprecated explicitly in bottle. This means that this release is not backwards compatible in Python <2.7.3 or <3.8 environments. Maintainers for distributions or systems that still use these old python versions should not update to Bottle 0.13 and stick with 0.12 instead.

.. rubric:: Stabilized APIs

  • The documented API of the :class:ConfigDict class is now considered stable and ready to use.

.. rubric:: Deprecated APIs

  • The old route syntax (/hello/:name) is deprecated in favor of the more readable and flexible /hello/<name> syntax.
  • :meth:Bottle.mount now recognizes Bottle instance and will warn about parameters that are not compatible with the new mounting behavior. The old behavior (mount applications as WSGI callable) still works and is used as a fallback automatically.
  • The undocumented :func:local_property helper is now deprecated.
  • The server adapter for google app engine is not useful anymore and marked as deprecated.
  • Bottle uses pickle to store arbitrary objects into signed cookies. This is safe, as long as the signature key remains a secret. Unfortunately, people tend to push code with signature keys to github all the time, so we decided to remove pickle-support from bottle. Signed cookies will now issue a deprecation warning if the value is not a string, and support for non-string values will be removed in 0.14. The global :func:cookie_encode, :func:cookie_decode and :func:is_cookie_encoded are now also deprecated. If you are using this feature, think about using json to serialize your objects before storing them into cookies, or switch to a session system that stores data server-side instead of client-side.

.. rubric:: Removed APIs (deprecated since 0.12)

... (truncated)

Commits
  • a52ac34 Release of 0.13.1
  • d6c47ab fix: Bottle.setattr breaks data descriptors
  • 8e3a76f Added DeprecationWarning warning for Python 2
  • eb2cd2b Release of 0.13.0
  • 157d844 test: Fixed deprecation warning in mako tests
  • f16a6d0 docs: Removed more outdated links
  • dee9a17 docs: Fix broken links
  • ee61a68 Fix #1350: Serve compressed files as is in static_file()
  • 90d749b fix: Avoid ImportWarning when using _ImportRedirect
  • 0213798 docs: Fixed lots of sphinx warnings
  • Additional commits viewable in compare view


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)