gauge-sh / tach

A Python tool to enforce dependencies, using modular architecture 🌎 Open source 🐍 Installable via pip 🔧 Able to be adopted incrementally - ⚡ Implemented with no runtime impact ♾️ Interoperable with your existing systems 🦀 Written in rust
https://gauge.sh
MIT License
1k stars 35 forks source link

Update pydot requirement from ~=2.0 to >=2,<4 #196

Closed dependabot[bot] closed 1 month ago

dependabot[bot] commented 1 month ago

Updates the requirements on pydot to permit the latest version.

Changelog

Sourced from pydot's changelog.

3.0.1 (2024-07-16)

This is a bugfix release to correct a critical error introduced in 3.0.0.

Changed:

  • Fix quoting in Edge.to_string(). (#384)

3.0.0 (2024-07-15)

Removed:

  • Breaking change: support for Python 3.7 dropped totally (#371). It was already dropped, but now it's official.
  • Breaking change (but for nobody): Invalid syntax removed (#377). Removed syntax rules that were never implemented in graphviz's own parser.
  • Attribute sorting removed (#361). Pydot will preserve the original order of attributes as defined.
  • Breaking change: Remove .create_attribute_methods() from classes (#318). Setters and getters for attributes are now added to class definitions by calls to pydot.core.__generate_attribute_methods() immediately after the class is defined, for better compatibility with type-checking and introspection.

Changed:

  • Internal storage and lookup of identifiers (names) improved (#363). Pydot now always stores values as they were originally input, and only performs quoting on output. Previously, when a graph element was created with a name that contained a space or otherwise required quoting, the quotes would be added immediately, making it more difficult to retrieve the element using the .get_*() lookup methods. If a name requiring quotes was later set using .set_name(), no quotes would be added, causing the graph definition to become invalid. (Thanks to @​tusharsadhwani for initially pointing out the name-quoting issues.)
  • Quoting for attribute values fixed (#320). Attribute values containing comma-separated strings will now be quoted correctly.

Added:

  • Keywords can now be used as names or attribute values (#363). Graphviz keywords like "graph" or "subgraph" will now be properly quoted when used as attribute values or as names, where appropriate.
  • Add standard Python logging, using the logger name pydot. For details, see the new section on Troubleshooting in README.md.

2.0.0 (2023-12-30)

Changed:

... (truncated)

Commits


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
dependabot[bot] commented 1 month ago

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.