natbat / pillarpointstewards

Website for pillarpointstewards.com
Apache License 2.0
7 stars 0 forks source link

Bump the python-packages group across 1 directory with 5 updates #301

Closed dependabot[bot] closed 1 month ago

dependabot[bot] commented 1 month ago

Bumps the python-packages group with 5 updates in the / directory:

Package From To
boto3 1.34.131 1.34.162
django-htmx 1.18.0 1.19.0
exceptiongroup 1.2.1 1.2.2
gunicorn 22.0.0 23.0.0
sentry-sdk 2.6.0 2.13.0

Updates boto3 from 1.34.131 to 1.34.162

Commits
  • 59518e4 Merge branch 'release-1.34.162'
  • add8a63 Bumping version to 1.34.162
  • 2ec9480 Add changelog entries from botocore
  • 2f927ce Merge branch 'release-1.34.161'
  • 8268877 Merge branch 'release-1.34.161' into develop
  • c36a3f2 Bumping version to 1.34.161
  • d4b6006 Add changelog entries from botocore
  • 7eb51bd Merge branch 'release-1.34.160'
  • 27dcf72 Merge branch 'release-1.34.160' into develop
  • edc8a5c Bumping version to 1.34.160
  • Additional commits viewable in compare view


Updates django-htmx from 1.18.0 to 1.19.0

Changelog

Sourced from django-htmx's changelog.

1.19.0 (2024-08-05)

  • Add :func:django_htmx.http.replace_url() for setting the HX-Replace-URL header.

    Thanks to Bogumil Schube in PR [#396](https://github.com/adamchainz/django-htmx/issues/396) <https://github.com/adamchainz/django-htmx/pull/396>__.

  • Add select parameter to :class:.HttpResponseLocation.

    Thanks to Nikola Anović in PR [#462](https://github.com/adamchainz/django-htmx/issues/462) <https://github.com/adamchainz/django-htmx/pull/462>__.

  • Add documentation notes under :class:.HtmxMiddleware, covering setting the Vary header for caching and type hinting request.htmx.

Commits


Updates exceptiongroup from 1.2.1 to 1.2.2

Release notes

Sourced from exceptiongroup's releases.

1.2.2

  • Removed an assert in exceptiongroup._formatting that caused compatibility issues with Sentry (#123)
Changelog

Sourced from exceptiongroup's changelog.

Version history

This library adheres to Semantic Versioning 2.0 <http://semver.org/>_.

1.2.2

  • Removed an assert in exceptiongroup._formatting that caused compatibility issues with Sentry ([#123](https://github.com/agronholm/exceptiongroup/issues/123) <https://github.com/agronholm/exceptiongroup/issues/123>_)

1.2.1

  • Updated the copying of __notes__ to match CPython behavior (PR by CF Bolz-Tereick)
  • Corrected the type annotation of the exception handler callback to accept a BaseExceptionGroup instead of BaseException
  • Fixed type errors on Python < 3.10 and the type annotation of suppress() (PR by John Litborn)

1.2.0

  • Added special monkeypatching if Apport <https://github.com/canonical/apport>_ has overridden sys.excepthook so it will format exception groups correctly (PR by John Litborn)
  • Added a backport of contextlib.suppress() from Python 3.12.1 which also handles suppressing exceptions inside exception groups
  • Fixed bare raise in a handler reraising the original naked exception rather than an exception group which is what is raised when you do a raise in an except* handler

1.1.3

  • catch() now raises a TypeError if passed an async exception handler instead of just giving a RuntimeWarning about the coroutine never being awaited. (#66, PR by John Litborn)
  • Fixed plain raise statement in an exception handler callback to work like a raise in an except* block
  • Fixed new exception group not being chained to the original exception when raising an exception group from exceptions raised in handler callbacks
  • Fixed type annotations of the derive(), subgroup() and split() methods to match the ones in typeshed

1.1.2

  • Changed handling of exceptions in exception group handler callbacks to not wrap a single exception in an exception group, as per CPython issue 103590 <https://github.com/python/cpython/issues/103590>_

1.1.1

  • Worked around

... (truncated)

Commits
  • 2399d54 Added the release version
  • bec9651 Removed problematic assert that caused compatibility issues
  • f3f0ff6 Updated Ruff configuration
  • bb43ee0 Fixed formatting tests failing on Python 3.13
  • eb8fbbc [pre-commit.ci] pre-commit autoupdate (#129)
  • 6ff8300 [pre-commit.ci] pre-commit autoupdate (#128)
  • 761933f [pre-commit.ci] pre-commit autoupdate (#127)
  • 1b43294 [pre-commit.ci] pre-commit autoupdate (#125)
  • dd87018 [pre-commit.ci] pre-commit autoupdate (#124)
  • 54d8b8d [pre-commit.ci] pre-commit autoupdate (#121)
  • Additional commits viewable in compare view


Updates gunicorn from 22.0.0 to 23.0.0

Release notes

Sourced from gunicorn's releases.

23.0.0

Gunicorn 23.0.0 has been released. This version improve HTTP 1.1. support and which improve safety

You're invited to upgrade asap your own installation.

23.0.0 - 2024-08-10

  • minor docs fixes (:pr:3217, :pr:3089, :pr:3167)
  • worker_class parameter accepts a class (:pr:3079)
  • fix deadlock if request terminated during chunked parsing (:pr:2688)
  • permit receiving Transfer-Encodings: compress, deflate, gzip (:pr:3261)
  • permit Transfer-Encoding headers specifying multiple encodings. note: no parameters, still (:pr:3261)
  • sdist generation now explicitly excludes sphinx build folder (:pr:3257)
  • decode bytes-typed status (as can be passed by gevent) as utf-8 instead of raising TypeError (:pr:2336)
  • raise correct Exception when encounting invalid chunked requests (:pr:3258)
  • the SCRIPT_NAME and PATH_INFO headers, when received from allowed forwarders, are no longer restricted for containing an underscore (:pr:3192)
  • include IPv6 loopback address [::1] in default for :ref:forwarded-allow-ips and :ref:proxy-allow-ips (:pr:3192)

** NOTE **

  • The SCRIPT_NAME change mitigates a regression that appeared first in the 22.0.0 release
  • Review your :ref:forwarded-allow-ips setting if you are still not seeing the SCRIPT_NAME transmitted
  • Review your :ref:forwarder-headers setting if you are missing headers after upgrading from a version prior to 22.0.0

** Breaking changes **

  • refuse requests where the uri field is empty (:pr:3255)
  • refuse requests with invalid CR/LR/NUL in heade field values (:pr:3253)
  • remove temporary --tolerate-dangerous-framing switch from 22.0 (:pr:3260)
  • If any of the breaking changes affect you, be aware that now refused requests can post a security problem, especially so in setups involving request pipe-lining and/or proxies.

Fix CVE-2024-1135

Commits
  • 411986d fix doc
  • 334392e Merge pull request #2559 from laggardkernel/bugfix/reexec-env
  • e75c353 Merge pull request #3189 from pajod/patch-py36
  • 9357b28 keep document user in access_log_format setting
  • 79fdef0 bump to 23.0.0
  • 3acd9fb Merge pull request #2620 from talkerbox/improve-access-log-format-docs
  • 3f56d76 Merge pull request #3192 from pajod/patch-allowed-script-name
  • 256d474 docs: revert duped directive
  • ffa48b5 test: default change was intentional
  • 52538ca docs: recommend SCRIPT_NAME=/subfolder
  • Additional commits viewable in compare view


Updates sentry-sdk from 2.6.0 to 2.13.0

Release notes

Sourced from sentry-sdk's releases.

2.13.0

Various fixes & improvements

  • New integration: Ray (#2400) (#2444) by @​glowskir

    Usage: (add the RayIntegration to your sentry_sdk.init() call and make sure it is called in the worker processes)

    import ray
    

    import sentry_sdk from sentry_sdk.integrations.ray import RayIntegration

    def init_sentry(): sentry_sdk.init( dsn="...", traces_sample_rate=1.0, integrations=[RayIntegration()], )

    init_sentry()

    ray.init( runtime_env=dict(worker_process_setup_hook=init_sentry), )

    For more information, see the documentation for the Ray integration.

  • New integration: Litestar (#2413) (#3358) by @​KellyWalker

    Usage: (add the LitestarIntegration to your sentry_sdk.init())

    from litestar import Litestar, get
    

    import sentry_sdk from sentry_sdk.integrations.litestar import LitestarIntegration

    sentry_sdk.init( dsn="...", traces_sample_rate=1.0, integrations=[LitestarIntegration()], )

    @​get("/") async def index() -> str: return "Hello, world!"

    app = Litestar(...)

    For more information, see the documentation for the Litestar integration.

... (truncated)

Changelog

Sourced from sentry-sdk's changelog.

2.13.0

Various fixes & improvements

  • New integration: Ray (#2400) (#2444) by @​glowskir

    Usage: (add the RayIntegration to your sentry_sdk.init() call and make sure it is called in the worker processes)

    import ray
    

    import sentry_sdk from sentry_sdk.integrations.ray import RayIntegration

    def init_sentry(): sentry_sdk.init( dsn="...", traces_sample_rate=1.0, integrations=[RayIntegration()], )

    init_sentry()

    ray.init( runtime_env=dict(worker_process_setup_hook=init_sentry), )

    For more information, see the documentation for the Ray integration.

  • New integration: Litestar (#2413) (#3358) by @​KellyWalker

    Usage: (add the LitestarIntegration to your sentry_sdk.init())

    from litestar import Litestar, get
    

    import sentry_sdk from sentry_sdk.integrations.litestar import LitestarIntegration

    sentry_sdk.init( dsn="...", traces_sample_rate=1.0, integrations=[LitestarIntegration()], )

    @​get("/") async def index() -> str: return "Hello, world!"

    app = Litestar(...)

    For more information, see the documentation for the Litestar integration.

... (truncated)

Commits


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore ` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore ` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore ` will remove the ignore condition of the specified dependency and ignore conditions
dependabot[bot] commented 1 month ago

Superseded by #302.