google / osv.dev

Open source vulnerability DB and triage service.
https://osv.dev
Apache License 2.0
1.54k stars 188 forks source link

chore(deps): lock file maintenance tools #2697

Closed renovate-bot closed 1 month ago

renovate-bot commented 1 month ago

This PR contains the following updates:

Package Type Update Change Age Adoption Passing Confidence
lockFileMaintenance All locks refreshed
pylint (changelog) dev-dependencies minor 3.2.7 -> 3.3.1 age adoption passing confidence
aiohttp dependencies patch 3.10.6 -> 3.10.8 age adoption passing confidence
google.golang.org/api require minor v0.197.0 -> v0.199.0 age adoption passing confidence

🔧 This Pull Request updates lock files to use the latest dependency versions.


Release Notes

pylint-dev/pylint (pylint) ### [`v3.3.1`](https://redirect.github.com/pylint-dev/pylint/releases/tag/v3.3.1) [Compare Source](https://redirect.github.com/pylint-dev/pylint/compare/v3.3.0...v3.3.1) ## What's new in Pylint 3.3.1? Release date: 2024-09-24 ## False Positives Fixed - Fix regression causing some f-strings to not be inferred as strings. Closes [#​9947](https://redirect.github.com/pylint-dev/pylint/issues/9947) ### [`v3.3.0`](https://redirect.github.com/pylint-dev/pylint/releases/tag/v3.3.0) [Compare Source](https://redirect.github.com/pylint-dev/pylint/compare/v3.2.7...v3.3.0) Release date: 2024-09-20 ## Changes requiring user actions - We migrated `symilar` to argparse, from getopt, so the error and help output changed (for the better). We exit with 2 instead of sometime 1, sometime 2. The error output is not captured by the runner anymore. It's not possible to use a value for the boolean options anymore (`--ignore-comments 1` should become `--ignore-comments`). Refs [#​9731](https://redirect.github.com/pylint-dev/pylint/issues/9731) ## New Features - Add new `declare-non-slot` error which reports when a class has a `__slots__` member and a type hint on the class is not present in `__slots__`. Refs [#​9499](https://redirect.github.com/pylint-dev/pylint/issues/9499) ## New Checks - Added `too-many-positional-arguments` to allow distinguishing the configuration for too many total arguments (with keyword-only params specified after `*`) from the configuration for too many positional-or-keyword or positional-only arguments. As part of evaluating whether this check makes sense for your project, ensure you adjust the value of `--max-positional-arguments`. Closes [#​9099](https://redirect.github.com/pylint-dev/pylint/issues/9099) - Add `using-exception-groups-in-unsupported-version` and `using-generic-type-syntax-in-unsupported-version` for uses of Python 3.11+ or 3.12+ features on lower supported versions provided with `--py-version`. Closes [#​9791](https://redirect.github.com/pylint-dev/pylint/issues/9791) - Add `using-assignment-expression-in-unsupported-version` for uses of `:=` (walrus operator) on Python versions below 3.8 provided with `--py-version`. Closes [#​9820](https://redirect.github.com/pylint-dev/pylint/issues/9820) - Add `using-positional-only-args-in-unsupported-version` for uses of positional-only args on Python versions below 3.8 provided with `--py-version`. Closes [#​9823](https://redirect.github.com/pylint-dev/pylint/issues/9823) - Add `unnecessary-default-type-args` to the `typing` extension to detect the use of unnecessary default type args for `typing.Generator` and `typing.AsyncGenerator`. Refs [#​9938](https://redirect.github.com/pylint-dev/pylint/issues/9938) ## False Negatives Fixed - Fix computation of never-returning function: `Never` is handled in addition to `NoReturn`, and priority is given to the explicit `--never-returning-functions` option. Closes [#​7565](https://redirect.github.com/pylint-dev/pylint/issues/7565). - Fix a false negative for `await-outside-async` when await is inside Lambda. Refs [#​9653](https://redirect.github.com/pylint-dev/pylint/issues/9653) - Fix a false negative for `duplicate-argument-name` by including `positional-only`, `*args` and `**kwargs` arguments in the check. Closes [#​9669](https://redirect.github.com/pylint-dev/pylint/issues/9669) - Fix false negative for `multiple-statements` when multiple statements are present on `else` and `finally` lines of `try`. Refs [#​9759](https://redirect.github.com/pylint-dev/pylint/issues/9759) - Fix false negatives when `isinstance` does not have exactly two arguments. pylint now emits a `too-many-function-args` or `no-value-for-parameter` appropriately for `isinstance` calls. Closes [#​9847](https://redirect.github.com/pylint-dev/pylint/issues/9847) ## Other Bug Fixes - `--enable` with `--disable=all` now produces an error, when an unknown msg code is used. Internal `pylint` messages are no longer affected by `--disable=all`. Closes [#​9403](https://redirect.github.com/pylint-dev/pylint/issues/9403) - Impossible to compile regexes for paths in the configuration or argument given to pylint won't crash anymore but raise an argparse error and display the error message from `re.compile` instead. Closes [#​9680](https://redirect.github.com/pylint-dev/pylint/issues/9680) - Fix a bug where a `tox.ini` file with pylint configuration was ignored and it exists in the current directory. `.cfg` and `.ini` files containing a `Pylint` configuration may now use a section named `[pylint]`. This enhancement impacts the scenario where these file types are used as defaults when they are present and have not been explicitly referred to, using the `--rcfile` option. Closes [#​9727](https://redirect.github.com/pylint-dev/pylint/issues/9727) - Improve file discovery for directories that are not python packages. Closes [#​9764](https://redirect.github.com/pylint-dev/pylint/issues/9764) ## Other Changes - Remove support for launching pylint with Python 3.8. Code that supports Python 3.8 can still be linted with the `--py-version=3.8` setting. Refs [#​9774](https://redirect.github.com/pylint-dev/pylint/issues/9774) - Add support for Python 3.13. Refs [#​9852](https://redirect.github.com/pylint-dev/pylint/issues/9852) ## Internal Changes - All variables, classes, functions and file names containing the word 'similar', when it was, in fact, referring to 'symilar' (the standalone program for the duplicate-code check) were renamed to 'symilar'. Closes [#​9734](https://redirect.github.com/pylint-dev/pylint/issues/9734) - Remove old-style classes (Python 2) code and remove check for new-style class since everything is new-style in Python 3. Updated doc for exception checker to remove reference to new style class. Refs [#​9925](https://redirect.github.com/pylint-dev/pylint/issues/9925)
aio-libs/aiohttp (aiohttp) ### [`v3.10.8`](https://redirect.github.com/aio-libs/aiohttp/blob/HEAD/CHANGES.rst#3108-2024-09-28) [Compare Source](https://redirect.github.com/aio-libs/aiohttp/compare/v3.10.7...v3.10.8) \=================== ## Bug fixes - Fixed cancellation leaking upwards on timeout -- by :user:`bdraco`. *Related issues and pull requests on GitHub:* :issue:`9326`. *** ### [`v3.10.7`](https://redirect.github.com/aio-libs/aiohttp/blob/HEAD/CHANGES.rst#3107-2024-09-27) [Compare Source](https://redirect.github.com/aio-libs/aiohttp/compare/v3.10.6...v3.10.7) \=================== ## Bug fixes - Fixed assembling the :class:`~yarl.URL` for web requests when the host contains a non-default port or IPv6 address -- by :user:`bdraco`. *Related issues and pull requests on GitHub:* :issue:`9309`. ## Miscellaneous internal changes - Improved performance of determining if a URL is absolute -- by :user:`bdraco`. The property :attr:`~yarl.URL.absolute` is more performant than the method `URL.is_absolute()` and preferred when newer versions of yarl are used. *Related issues and pull requests on GitHub:* :issue:`9171`. - Replaced code that can now be handled by `yarl` -- by :user:`bdraco`. *Related issues and pull requests on GitHub:* :issue:`9301`. ***
googleapis/google-api-go-client (google.golang.org/api) ### [`v0.199.0`](https://redirect.github.com/googleapis/google-api-go-client/releases/tag/v0.199.0) [Compare Source](https://redirect.github.com/googleapis/google-api-go-client/compare/v0.198.0...v0.199.0) ##### Features - **all:** Auto-regenerate discovery clients ([#​2791](https://redirect.github.com/googleapis/google-api-go-client/issues/2791)) ([bd9630a](https://redirect.github.com/googleapis/google-api-go-client/commit/bd9630ab6fc22bc2bf7108d72457f914c69a4b14)) - **all:** Auto-regenerate discovery clients ([#​2793](https://redirect.github.com/googleapis/google-api-go-client/issues/2793)) ([ac7c6de](https://redirect.github.com/googleapis/google-api-go-client/commit/ac7c6de55a590ab4b9bcb9f0c184bf8829574c3f)) - **all:** Auto-regenerate discovery clients ([#​2794](https://redirect.github.com/googleapis/google-api-go-client/issues/2794)) ([d0e0dc3](https://redirect.github.com/googleapis/google-api-go-client/commit/d0e0dc31cd30ec9b5e71541ad905236401b56d96)) - **all:** Auto-regenerate discovery clients ([#​2796](https://redirect.github.com/googleapis/google-api-go-client/issues/2796)) ([34102ae](https://redirect.github.com/googleapis/google-api-go-client/commit/34102ae8645c5ec2b9e04e821d3910b6b30abd5b)) - **all:** Auto-regenerate discovery clients ([#​2797](https://redirect.github.com/googleapis/google-api-go-client/issues/2797)) ([21926ca](https://redirect.github.com/googleapis/google-api-go-client/commit/21926caa29a1141e7ed78abe78d7559a595e721d)) - **all:** Auto-regenerate discovery clients ([#​2799](https://redirect.github.com/googleapis/google-api-go-client/issues/2799)) ([9ce4b50](https://redirect.github.com/googleapis/google-api-go-client/commit/9ce4b506f2a90a591da35bb1d12251f9ee45ee84)) ### [`v0.198.0`](https://redirect.github.com/googleapis/google-api-go-client/releases/tag/v0.198.0) [Compare Source](https://redirect.github.com/googleapis/google-api-go-client/compare/v0.197.0...v0.198.0) ##### Features - **all:** Auto-regenerate discovery clients ([#​2780](https://redirect.github.com/googleapis/google-api-go-client/issues/2780)) ([3c2f8ce](https://redirect.github.com/googleapis/google-api-go-client/commit/3c2f8ceed16459df46581c51793c8db52ff3277a)) - **all:** Auto-regenerate discovery clients ([#​2782](https://redirect.github.com/googleapis/google-api-go-client/issues/2782)) ([5a4dc60](https://redirect.github.com/googleapis/google-api-go-client/commit/5a4dc604e76b8cebb3275d3a5b706b8fa0c265b7)) - **all:** Auto-regenerate discovery clients ([#​2783](https://redirect.github.com/googleapis/google-api-go-client/issues/2783)) ([923816f](https://redirect.github.com/googleapis/google-api-go-client/commit/923816f92366360e67eceace16422d0b9c019982)) - **all:** Auto-regenerate discovery clients ([#​2784](https://redirect.github.com/googleapis/google-api-go-client/issues/2784)) ([786e8a8](https://redirect.github.com/googleapis/google-api-go-client/commit/786e8a8491515b4add373ccd6ba15cf46caadc1f)) - **all:** Auto-regenerate discovery clients ([#​2786](https://redirect.github.com/googleapis/google-api-go-client/issues/2786)) ([65d7953](https://redirect.github.com/googleapis/google-api-go-client/commit/65d7953dca7b4221c4b359f155bb790d9e0b450b)) - **all:** Auto-regenerate discovery clients ([#​2788](https://redirect.github.com/googleapis/google-api-go-client/issues/2788)) ([d27a832](https://redirect.github.com/googleapis/google-api-go-client/commit/d27a83225d99bd8bb57149dbd5b8c42c397dc6dd)) - **all:** Auto-regenerate discovery clients ([#​2789](https://redirect.github.com/googleapis/google-api-go-client/issues/2789)) ([c16dd63](https://redirect.github.com/googleapis/google-api-go-client/commit/c16dd63d7d928ecf95d94ccf19f59529d7c5ca46))

Configuration

📅 Schedule: Branch creation - "before 6am on wednesday" in timezone Australia/Sydney, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

â™» Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.



This PR was generated by Mend Renovate. View the repository job log.

forking-renovate[bot] commented 1 month ago

ℹ Artifact update notice

File name: tools/datastore-remover/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

Details:

Package Change
cloud.google.com/go/auth v0.9.3 -> v0.9.5
cloud.google.com/go/compute/metadata v0.5.0 -> v0.5.2
google.golang.org/grpc v1.66.1 -> v1.67.0