mcaulifn / solcast

Apache License 2.0
7 stars 2 forks source link

chore(deps): update dependency tox to v4.23.2 #315

Open renovate[bot] opened 2 months ago

renovate[bot] commented 2 months ago

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
tox (changelog) 4.18.0 -> 4.23.2 age adoption passing confidence

Release Notes

tox-dev/tox (tox) ### [`v4.23.2`](https://redirect.github.com/tox-dev/tox/releases/tag/4.23.2) [Compare Source](https://redirect.github.com/tox-dev/tox/compare/4.23.1...4.23.2) #### What's Changed - Support external tox.pytest usage via "test" extra by [@​mbra](https://redirect.github.com/mbra) in [https://github.com/tox-dev/tox/pull/3422](https://redirect.github.com/tox-dev/tox/pull/3422) #### New Contributors - [@​mbra](https://redirect.github.com/mbra) made their first contribution in [https://github.com/tox-dev/tox/pull/3422](https://redirect.github.com/tox-dev/tox/pull/3422) **Full Changelog**: https://github.com/tox-dev/tox/compare/4.23.1...4.23.2 ### [`v4.23.1`](https://redirect.github.com/tox-dev/tox/releases/tag/4.23.1) [Compare Source](https://redirect.github.com/tox-dev/tox/compare/4.23.0...4.23.1) #### What's Changed - Docs: adjusting EOL Python version testing remarks by [@​robsdedude](https://redirect.github.com/robsdedude) in [https://github.com/tox-dev/tox/pull/3417](https://redirect.github.com/tox-dev/tox/pull/3417) - Fix example docs by [@​gaborbernat](https://redirect.github.com/gaborbernat) in [https://github.com/tox-dev/tox/pull/3421](https://redirect.github.com/tox-dev/tox/pull/3421) #### New Contributors - [@​robsdedude](https://redirect.github.com/robsdedude) made their first contribution in [https://github.com/tox-dev/tox/pull/3417](https://redirect.github.com/tox-dev/tox/pull/3417) **Full Changelog**: https://github.com/tox-dev/tox/compare/4.23.0...4.23.1 ### [`v4.23.0`](https://redirect.github.com/tox-dev/tox/releases/tag/4.23.0) [Compare Source](https://redirect.github.com/tox-dev/tox/compare/4.22.0...4.23.0) #### What's Changed - replace tool.pyproject and tool.tox.pyproject with tool.tox in config… by [@​graingert-coef](https://redirect.github.com/graingert-coef) in [https://github.com/tox-dev/tox/pull/3411](https://redirect.github.com/tox-dev/tox/pull/3411) - Add NETRC to the default_pass_env list by [@​chipot](https://redirect.github.com/chipot) in [https://github.com/tox-dev/tox/pull/3410](https://redirect.github.com/tox-dev/tox/pull/3410) #### New Contributors - [@​graingert-coef](https://redirect.github.com/graingert-coef) made their first contribution in [https://github.com/tox-dev/tox/pull/3411](https://redirect.github.com/tox-dev/tox/pull/3411) - [@​chipot](https://redirect.github.com/chipot) made their first contribution in [https://github.com/tox-dev/tox/pull/3410](https://redirect.github.com/tox-dev/tox/pull/3410) **Full Changelog**: https://github.com/tox-dev/tox/compare/4.22.0...4.23.0 ### [`v4.22.0`](https://redirect.github.com/tox-dev/tox/releases/tag/4.22.0) [Compare Source](https://redirect.github.com/tox-dev/tox/compare/4.21.2...4.22.0) #### What's Changed - Fix the fix environment definition by [@​gaborbernat](https://redirect.github.com/gaborbernat) in [https://github.com/tox-dev/tox/pull/3407](https://redirect.github.com/tox-dev/tox/pull/3407) - Expose type checking dependencies into an extra by [@​ssbarnea](https://redirect.github.com/ssbarnea) in [https://github.com/tox-dev/tox/pull/3404](https://redirect.github.com/tox-dev/tox/pull/3404) - Add dependency-groups support (PEP-735) by [@​gaborbernat](https://redirect.github.com/gaborbernat) in [https://github.com/tox-dev/tox/pull/3409](https://redirect.github.com/tox-dev/tox/pull/3409) **Full Changelog**: https://github.com/tox-dev/tox/compare/4.21.2...4.22.0 ### [`v4.21.2`](https://redirect.github.com/tox-dev/tox/releases/tag/4.21.2) [Compare Source](https://redirect.github.com/tox-dev/tox/compare/4.21.1...4.21.2) #### What's Changed - Update sdist rules to include `tox.toml` ([#​3389](https://redirect.github.com/tox-dev/tox/issues/3389)) by [@​mgorny](https://redirect.github.com/mgorny) in [https://github.com/tox-dev/tox/pull/3390](https://redirect.github.com/tox-dev/tox/pull/3390) **Full Changelog**: https://github.com/tox-dev/tox/compare/4.21.1...4.21.2 ### [`v4.21.1`](https://redirect.github.com/tox-dev/tox/releases/tag/4.21.1) [Compare Source](https://redirect.github.com/tox-dev/tox/compare/4.21.0...4.21.1) #### What's Changed - Fix TOML configuration errors by [@​gaborbernat](https://redirect.github.com/gaborbernat) in [https://github.com/tox-dev/tox/pull/3388](https://redirect.github.com/tox-dev/tox/pull/3388) **Full Changelog**: https://github.com/tox-dev/tox/compare/4.21.0...4.21.1 ### [`v4.21.0`](https://redirect.github.com/tox-dev/tox/releases/tag/4.21.0) [Compare Source](https://redirect.github.com/tox-dev/tox/compare/4.20.0...4.21.0) #### What's Changed - Update Loader docs by [@​ziima](https://redirect.github.com/ziima) in [https://github.com/tox-dev/tox/pull/3352](https://redirect.github.com/tox-dev/tox/pull/3352) - True TOML config support by [@​gaborbernat](https://redirect.github.com/gaborbernat) in [https://github.com/tox-dev/tox/pull/3353](https://redirect.github.com/tox-dev/tox/pull/3353) **Full Changelog**: https://github.com/tox-dev/tox/compare/4.20.0...4.21.0 ### [`v4.20.0`](https://redirect.github.com/tox-dev/tox/compare/4.19.0...4.20.0) [Compare Source](https://redirect.github.com/tox-dev/tox/compare/4.19.0...4.20.0) ### [`v4.19.0`](https://redirect.github.com/tox-dev/tox/compare/4.18.1...4.19.0) [Compare Source](https://redirect.github.com/tox-dev/tox/compare/4.18.1...4.19.0) ### [`v4.18.1`](https://redirect.github.com/tox-dev/tox/releases/tag/4.18.1) [Compare Source](https://redirect.github.com/tox-dev/tox/compare/4.18.0...4.18.1) #### What's Changed - Fixup the spec string for sys.executable by [@​hroncok](https://redirect.github.com/hroncok) in [https://github.com/tox-dev/tox/pull/3327](https://redirect.github.com/tox-dev/tox/pull/3327) - Fix issue link in changelog by [@​schlamar](https://redirect.github.com/schlamar) in [https://github.com/tox-dev/tox/pull/3332](https://redirect.github.com/tox-dev/tox/pull/3332) - Properly document the `tox_env_teardown` hook by [@​kemzeb](https://redirect.github.com/kemzeb) in [https://github.com/tox-dev/tox/pull/3333](https://redirect.github.com/tox-dev/tox/pull/3333) - Add 3.13 to CI and bump deps by [@​gaborbernat](https://redirect.github.com/gaborbernat) in [https://github.com/tox-dev/tox/pull/3339](https://redirect.github.com/tox-dev/tox/pull/3339) #### New Contributors - [@​schlamar](https://redirect.github.com/schlamar) made their first contribution in [https://github.com/tox-dev/tox/pull/3332](https://redirect.github.com/tox-dev/tox/pull/3332) - [@​kemzeb](https://redirect.github.com/kemzeb) made their first contribution in [https://github.com/tox-dev/tox/pull/3333](https://redirect.github.com/tox-dev/tox/pull/3333) **Full Changelog**: https://github.com/tox-dev/tox/compare/4.18.0...4.18.1

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.



This PR was generated by Mend Renovate. View the repository job log.

github-actions[bot] commented 2 months ago

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

PackageVersionScoreDetails
pip/cachetools 5.5.0 :green_circle: 7.1
Details
CheckScoreReason
Code-Review:warning: 0Found 1/19 approved changesets -- score normalized to 0
Maintained:green_circle: 99 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 9
CII-Best-Practices:warning: 0no effort to earn an OpenSSF best practices badge detected
License:green_circle: 10license file detected
Signed-Releases:warning: -1no releases found
Dangerous-Workflow:green_circle: 10no dangerous workflow patterns detected
Binary-Artifacts:green_circle: 10no binaries found in the repo
Security-Policy:green_circle: 10security policy file detected
Token-Permissions:green_circle: 10GitHub workflow tokens follow principle of least privilege
Packaging:warning: -1packaging workflow not detected
Pinned-Dependencies:green_circle: 5dependency not pinned by hash detected -- score normalized to 5
Fuzzing:green_circle: 10project is fuzzed
Vulnerabilities:green_circle: 100 existing vulnerabilities detected
Branch-Protection:green_circle: 3branch protection is not maximal on development and all release branches
SAST:warning: 0SAST tool is not run on all commits -- score normalized to 0
pip/filelock 3.16.1 UnknownUnknown
pip/platformdirs 4.3.6 UnknownUnknown
pip/pyproject-api 1.8.0 :green_circle: 5.5
Details
CheckScoreReason
Code-Review:warning: 1Found 1/6 approved changesets -- score normalized to 1
Maintained:green_circle: 1015 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10
CII-Best-Practices:warning: 0no effort to earn an OpenSSF best practices badge detected
License:green_circle: 10license file detected
Signed-Releases:warning: -1no releases found
Dangerous-Workflow:green_circle: 10no dangerous workflow patterns detected
Binary-Artifacts:green_circle: 10no binaries found in the repo
Token-Permissions:warning: 0detected GitHub workflow tokens with excessive permissions
Pinned-Dependencies:warning: 0dependency not pinned by hash detected -- score normalized to 0
Branch-Protection:green_circle: 8branch protection is not maximal on development and all release branches
Security-Policy:warning: 0security policy file not detected
Vulnerabilities:green_circle: 100 existing vulnerabilities detected
Fuzzing:warning: 0project is not fuzzed
Packaging:green_circle: 10packaging workflow detected
SAST:warning: 0SAST tool is not run on all commits -- score normalized to 0
pip/tox 4.23.2 :green_circle: 5.2
Details
CheckScoreReason
Code-Review:warning: 2Found 5/22 approved changesets -- score normalized to 2
Maintained:green_circle: 1030 commit(s) and 18 issue activity found in the last 90 days -- score normalized to 10
CII-Best-Practices:warning: 0no effort to earn an OpenSSF best practices badge detected
License:green_circle: 10license file detected
Signed-Releases:warning: -1no releases found
Token-Permissions:warning: 0detected GitHub workflow tokens with excessive permissions
Dangerous-Workflow:green_circle: 10no dangerous workflow patterns detected
Branch-Protection:green_circle: 4branch protection is not maximal on development and all release branches
Binary-Artifacts:green_circle: 10no binaries found in the repo
Pinned-Dependencies:warning: 0dependency not pinned by hash detected -- score normalized to 0
Security-Policy:warning: 0security policy file not detected
Vulnerabilities:green_circle: 100 existing vulnerabilities detected
Fuzzing:warning: 0project is not fuzzed
Packaging:green_circle: 10packaging workflow detected
SAST:warning: 0SAST tool is not run on all commits -- score normalized to 0
pip/typing-extensions 4.12.2 :green_circle: 7.2
Details
CheckScoreReason
Code-Review:green_circle: 7Found 23/30 approved changesets -- score normalized to 7
Maintained:green_circle: 1018 commit(s) and 10 issue activity found in the last 90 days -- score normalized to 10
CII-Best-Practices:warning: 0no effort to earn an OpenSSF best practices badge detected
License:green_circle: 9license file detected
Signed-Releases:warning: -1no releases found
Branch-Protection:warning: -1internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
Packaging:warning: -1packaging workflow not detected
Token-Permissions:green_circle: 10GitHub workflow tokens follow principle of least privilege
Dangerous-Workflow:green_circle: 10no dangerous workflow patterns detected
Binary-Artifacts:green_circle: 10no binaries found in the repo
Fuzzing:warning: 0project is not fuzzed
Pinned-Dependencies:warning: 0dependency not pinned by hash detected -- score normalized to 0
Vulnerabilities:green_circle: 100 existing vulnerabilities detected
Security-Policy:green_circle: 10security policy file detected
SAST:warning: 0SAST tool is not run on all commits -- score normalized to 0
pip/virtualenv 20.27.0 :green_circle: 6.1
Details
CheckScoreReason
Code-Review:green_circle: 5Found 8/16 approved changesets -- score normalized to 5
Maintained:green_circle: 1029 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10
CII-Best-Practices:warning: 0no effort to earn an OpenSSF best practices badge detected
License:green_circle: 10license file detected
Signed-Releases:warning: -1no releases found
Security-Policy:green_circle: 10security policy file detected
Token-Permissions:warning: 0detected GitHub workflow tokens with excessive permissions
Dangerous-Workflow:green_circle: 10no dangerous workflow patterns detected
Branch-Protection:green_circle: 8branch protection is not maximal on development and all release branches
Binary-Artifacts:green_circle: 6binaries present in source code
Pinned-Dependencies:warning: 0dependency not pinned by hash detected -- score normalized to 0
Vulnerabilities:green_circle: 100 existing vulnerabilities detected
Fuzzing:warning: 0project is not fuzzed
Packaging:green_circle: 10packaging workflow detected
SAST:warning: 0SAST tool is not run on all commits -- score normalized to 0

Scanned Manifest Files

poetry.lock
  • cachetools@5.5.0
  • filelock@3.16.1
  • platformdirs@4.3.6
  • pyproject-api@1.8.0
  • tox@4.23.2
  • typing-extensions@4.12.2
  • virtualenv@20.27.0
  • cachetools@5.4.0
  • filelock@3.15.4
  • platformdirs@4.2.2
  • pyproject-api@1.7.1
  • tox@4.18.0
  • typing-extensions@4.11.0
  • virtualenv@20.26.3
codecov[bot] commented 2 months ago

Codecov Report

All modified and coverable lines are covered by tests :white_check_mark:

Project coverage is 100.00%. Comparing base (81657bd) to head (bd7c7be). Report is 151 commits behind head on main.

Additional details and impacted files [![Impacted file tree graph](https://app.codecov.io/gh/mcaulifn/solcast/pull/315/graphs/tree.svg?width=650&height=150&src=pr&token=04NTIH61T2&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=Nathaniel+McAuliffe)](https://app.codecov.io/gh/mcaulifn/solcast/pull/315?src=pr&el=tree&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=Nathaniel+McAuliffe) ```diff @@ Coverage Diff @@ ## main #315 +/- ## ========================================= Coverage 100.00% 100.00% ========================================= Files 7 7 Lines 126 126 ========================================= Hits 126 126 ``` | [Flag](https://app.codecov.io/gh/mcaulifn/solcast/pull/315/flags?src=pr&el=flags&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=Nathaniel+McAuliffe) | Coverage Δ | | |---|---|---| | [unittests](https://app.codecov.io/gh/mcaulifn/solcast/pull/315/flags?src=pr&el=flag&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=Nathaniel+McAuliffe) | `100.00% <ø> (ø)` | | Flags with carried forward coverage won't be shown. [Click here](https://docs.codecov.io/docs/carryforward-flags?utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=Nathaniel+McAuliffe#carryforward-flags-in-the-pull-request-comment) to find out more. ------ [Continue to review full report in Codecov by Sentry](https://app.codecov.io/gh/mcaulifn/solcast/pull/315?dropdown=coverage&src=pr&el=continue&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=Nathaniel+McAuliffe). > **Legend** - [Click here to learn more](https://docs.codecov.io/docs/codecov-delta?utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=Nathaniel+McAuliffe) > `Δ = absolute (impact)`, `ø = not affected`, `? = missing data` > Powered by [Codecov](https://app.codecov.io/gh/mcaulifn/solcast/pull/315?dropdown=coverage&src=pr&el=footer&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=Nathaniel+McAuliffe). Last update [9c5c96f...bd7c7be](https://app.codecov.io/gh/mcaulifn/solcast/pull/315?dropdown=coverage&src=pr&el=lastupdated&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=Nathaniel+McAuliffe). Read the [comment docs](https://docs.codecov.io/docs/pull-request-comments?utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=Nathaniel+McAuliffe).
codeclimate[bot] commented 2 weeks ago

Code Climate has analyzed commit bd7c7be4 and detected 0 issues on this pull request.

View more on Code Climate.