search

greenbone / gvm-tools

Remote control your Greenbone Community Edition or Greenbone Enterprise Appliance
https://greenbone.github.io/gvm-tools/
GNU General Public License v3.0
168 stars 90 forks source link

Deps: Bump the python-packages group with 9 updates #1139

Closed dependabot[bot] closed 2 months ago

dependabot[bot] commented 2 months ago

Bumps the python-packages group with 9 updates:

Package From To
idna 3.8 3.10
importlib-metadata 8.4.0 8.5.0
mdit-py-plugins 0.4.1 0.4.2
paramiko 3.4.1 3.5.0
platformdirs 4.3.2 4.3.3
rich 13.8.0 13.8.1
ruff 0.6.4 0.6.5
urllib3 2.2.2 2.2.3
zipp 3.20.1 3.20.2

Updates idna from 3.8 to 3.10

Changelog

Sourced from idna's changelog.

3.10 (2024-09-15) +++++++++++++++++

  • Reverted to Unicode 15.1.0 data. Unicode 16 has some significant changes to UTS46 processing that will require more work to properly implement.

3.9 (2024-09-13) ++++++++++++++++

  • Update to Unicode 16.0.0
  • Deprecate setup.cfg in favour of pyproject.toml
  • Use ruff for code formatting

Thanks to Waket Zheng for contributions to this release.

Commits


Updates importlib-metadata from 8.4.0 to 8.5.0

Changelog

Sourced from importlib-metadata's changelog.

v8.5.0

Features

  • Deferred import of zipfile.Path (#502)
  • Deferred import of json (#503)
  • Rely on zipp overlay for zipfile.Path.
Commits
  • b34810b Finalize
  • 8c1d1fa Merge pull request #501 from Avasam/Pass-mypy-and-link-issues
  • afa39e8 Back out changes to tests._path
  • 8b909f9 Merge pull request #503 from danielhollas/defer-json
  • 2a3f50d Add news fragment.
  • 3f78dc1 Add comment to protect the deferred import.
  • 18eb2da Revert "Defer platform import"
  • 58832f2 Merge pull request #502 from danielhollas/defer-zipp
  • e3ce33b Add news fragment.
  • d11b67f Add comment to protect the deferred import.
  • Additional commits viewable in compare view


Updates mdit-py-plugins from 0.4.1 to 0.4.2

Release notes

Sourced from mdit-py-plugins's releases.

v0.4.2

What's Changed

New Contributors

Full Changelog: https://github.com/executablebooks/mdit-py-plugins/compare/v0.4.1...v0.4.2

Changelog

Sourced from mdit-py-plugins's changelog.

0.4.2 - 2024-09-09

  • 👌 Improve parsing of nested amsmath

    The previous logic was problematic for amsmath blocks nested in other blocs (such as blockquotes)

    The new parsing code now principally follows the logic in markdown_it/rules_block/fence.py (see also https://spec.commonmark.org/0.30/#fenced-code-blocks), except that:

    1. it allows for a closing tag on the same line as the opening tag, and
    2. it does not allow for an opening tag without closing tag (i.e. no auto-closing)

  • ✨ Add allowed option for inline/block attributes

    The allowed option accepts a list of allowed attribute names. If not None, any attributes not in this list will be removed and placed in the token's meta under the key "insecure_attrs".

Commits


Updates paramiko from 3.4.1 to 3.5.0

Commits


Updates platformdirs from 4.3.2 to 4.3.3

Release notes

Sourced from platformdirs's releases.

4.3.3

What's Changed

New Contributors

Full Changelog: https://github.com/tox-dev/platformdirs/compare/4.3.2...4.3.3

Commits


Updates rich from 13.8.0 to 13.8.1

Release notes

Sourced from rich's releases.

The Python 3.13 release

[13.8.1] - 2024-09-10

Fixed

Changelog

Sourced from rich's changelog.

[13.8.1] - 2024-09-10

Fixed

Commits


Updates ruff from 0.6.4 to 0.6.5

Release notes

Sourced from ruff's releases.

0.6.5

Release Notes

Preview features

  • [pydoclint] Ignore DOC201 when function name is "new" (#13300)
  • [refurb] Implement slice-to-remove-prefix-or-suffix (FURB188) (#13256)

Rule changes

  • [eradicate] Ignore script-comments with multiple end-tags (ERA001) (#13283)
  • [pyflakes] Improve error message for UndefinedName when a builtin was added in a newer version than specified in Ruff config (F821) (#13293)

Server

  • Add support for extensionless Python files for server (#13326)
  • Fix configuration inheritance for configurations specified in the LSP settings (#13285)

Bug fixes

  • [ruff] Handle unary operators in decimal-from-float-literal (RUF032) (#13275)

CLI

  • Only include rules with diagnostics in SARIF metadata (#13268)

Playground

  • Add "Copy as pyproject.toml/ruff.toml" and "Paste from TOML" (#13328)
  • Fix errors not shown for restored snippet on page load (#13262)

Contributors

Install ruff 0.6.5

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://github.com/astral-sh/ruff/releases/download/0.6.5/ruff-installer.sh | sh
</tr></table>

... (truncated)

Changelog

Sourced from ruff's changelog.

0.6.5

Preview features

  • [pydoclint] Ignore DOC201 when function name is "new" (#13300)
  • [refurb] Implement slice-to-remove-prefix-or-suffix (FURB188) (#13256)

Rule changes

  • [eradicate] Ignore script-comments with multiple end-tags (ERA001) (#13283)
  • [pyflakes] Improve error message for UndefinedName when a builtin was added in a newer version than specified in Ruff config (F821) (#13293)

Server

  • Add support for extensionless Python files for server (#13326)
  • Fix configuration inheritance for configurations specified in the LSP settings (#13285)

Bug fixes

  • [ruff] Handle unary operators in decimal-from-float-literal (RUF032) (#13275)

CLI

  • Only include rules with diagnostics in SARIF metadata (#13268)

Playground

  • Add "Copy as pyproject.toml/ruff.toml" and "Paste from TOML" (#13328)
  • Fix errors not shown for restored snippet on page load (#13262)
Commits
  • 8558126 Bump version to 0.6.5 (#13346)
  • 9bd9981 Create insta snapshot for SARIF output (#13345)
  • 21bfab9 Playground: Add Copy as pyproject.toml/ruff.toml and paste from TOML (#13328)
  • 43a5922 [red-knot] add BitSet::is_empty and BitSet::union (#13333)
  • 175d067 [red-knot] add initial Type::is_equivalent_to and Type::is_assignable_to (#13...
  • 4dc2c25 [red-knot] Fix type inference for except* definitions (#13320)
  • b72d49b Add support for extensionless Python files for server (#13326)
  • eded78a [pyupgrade] Fix broken doc link and clarify that deprecated aliases were re...
  • a7b8cc0 [red-knot] Fix .to_instance() for union types (#13319)
  • b93d0ab [red-knot] Add control flow for for loops (#13318)
  • Additional commits viewable in compare view


Updates urllib3 from 2.2.2 to 2.2.3

Release notes

Sourced from urllib3's releases.

2.2.3

🚀 urllib3 is fundraising for HTTP/2 support

urllib3 is raising ~$40,000 USD to release HTTP/2 support and ensure long-term sustainable maintenance of the project after a sharp decline in financial support for 2023. If your company or organization uses Python and would benefit from HTTP/2 support in Requests, pip, cloud SDKs, and thousands of other projects please consider contributing financially to ensure HTTP/2 support is developed sustainably and maintained for the long-haul.

Thank you for your support.

Features

  • Added support for Python 3.13. (#3473)

Bugfixes

  • Fixed the default encoding of chunked request bodies to be UTF-8 instead of ISO-8859-1. All other methods of supplying a request body already use UTF-8 starting in urllib3 v2.0. (#3053)
  • Fixed ResourceWarning on CONNECT with Python < 3.11.4 by backporting python/cpython#103472. (`#3252)
  • Adjust tolerance for floating-point comparison on Windows to avoid flakiness in CI (#3413)
  • Fixed a crash where certain standard library hash functions were absent in restricted environments. (#3432)
  • Fixed mypy error when adding to HTTPConnection.default_socket_options. (#3448)

HTTP/2 (experimental)

HTTP/2 support is still in early development.

  • Excluded Transfer-Encoding: chunked from HTTP/2 request body (#3425)
  • Added version checking for h2 (https://pypi.org/project/h2/) usage. Now only accepting supported h2 major version 4.x.x. (#3290)
  • Added a probing mechanism for determining whether a given target origin supports HTTP/2 via ALPN. (#3301)
  • Add support for sending a request body with HTTP/2 (#3302)

Full Changelog: https://github.com/urllib3/urllib3/compare/2.2.2...2.2.3

Changelog

Sourced from urllib3's changelog.

2.2.3 (2024-09-12)

Features

  • Added support for Python 3.13. ([#3473](https://github.com/urllib3/urllib3/issues/3473) <https://github.com/urllib3/urllib3/issues/3473>__)

Bugfixes

  • Fixed the default encoding of chunked request bodies to be UTF-8 instead of ISO-8859-1. All other methods of supplying a request body already use UTF-8 starting in urllib3 v2.0. ([#3053](https://github.com/urllib3/urllib3/issues/3053) <https://github.com/urllib3/urllib3/issues/3053>__)
  • Fixed ResourceWarning on CONNECT with Python `__)
  • Adjust tolerance for floating-point comparison on Windows to avoid flakiness in CI ([#3413](https://github.com/urllib3/urllib3/issues/3413) <https://github.com/urllib3/urllib3/issues/3413>__)
  • Fixed a crash where certain standard library hash functions were absent in restricted environments. ([#3432](https://github.com/urllib3/urllib3/issues/3432) <https://github.com/urllib3/urllib3/issues/3432>__)
  • Fixed mypy error when adding to HTTPConnection.default_socket_options. ([#3448](https://github.com/urllib3/urllib3/issues/3448) <https://github.com/urllib3/urllib3/issues/3448>__)

HTTP/2 (experimental)

HTTP/2 support is still in early development.

  • Excluded Transfer-Encoding: chunked from HTTP/2 request body ([#3425](https://github.com/urllib3/urllib3/issues/3425) <https://github.com/urllib3/urllib3/issues/3425>__)

  • Added version checking for h2 (https://pypi.org/project/h2/) usage.

    Now only accepting supported h2 major version 4.x.x. ([#3290](https://github.com/urllib3/urllib3/issues/3290) <https://github.com/urllib3/urllib3/issues/3290>__)

  • Added a probing mechanism for determining whether a given target origin supports HTTP/2 via ALPN. ([#3301](https://github.com/urllib3/urllib3/issues/3301) <https://github.com/urllib3/urllib3/issues/3301>__)

  • Add support for sending a request body with HTTP/2 ([#3302](https://github.com/urllib3/urllib3/issues/3302) <https://github.com/urllib3/urllib3/issues/3302>__)

Deprecations and Removals

  • Note for downstream distributors: the _version.py file has been removed and is now created at build time by hatch-vcs. ([#3412](https://github.com/urllib3/urllib3/issues/3412) <https://github.com/urllib3/urllib3/issues/3412>__)
  • Drop support for end-of-life PyPy3.8 and PyPy3.9. ([#3475](https://github.com/urllib3/urllib3/issues/3475) <https://github.com/urllib3/urllib3/issues/3475>__)
Commits


Updates zipp from 3.20.1 to 3.20.2

Changelog

Sourced from zipp's changelog.

v3.20.2

Bugfixes

  • Make zipp.compat.overlay.zipfile hashable. (#126)
Commits


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore ` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore ` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore ` will remove the ignore condition of the specified dependency and ignore conditions
github-actions[bot] commented 2 months ago

Conventional Commits Report

Type Number
Dependencies 1

:rocket: Conventional commits found.