search

openwisp / openwisp-notifications

Notifications module of OpenWISP
https://openwisp.io/docs/dev/notifications/
GNU General Public License v3.0
41 stars 42 forks source link

[deps] Update channels-redis requirement from ~=4.1.0 to ~=4.2.0 #285

Closed dependabot[bot] closed 3 months ago

dependabot[bot] commented 3 months ago

Updates the requirements on channels-redis to permit the latest version.

Changelog

Sourced from channels-redis's changelog.

4.2.0 (2024-01-12)

  • Dropped support for end-of-life Python 3.7.

  • Added support for Python 3.11 and 3.12.

  • Upped the minimum version of redis-py to 4.6.

  • Added CI testing against redis-py versions 4.6, 5, and the development branch.

  • Added CI testing against Channels versions 3, 4, and the development branch.

4.1.0 (2023-03-28)

  • Adjusted the way Redis connections are handled:

    • Connection handling is now shared between the two, core and pub-sub, layers.

    • Both layers now ensure that connections are closed when an event loop shuts down.

      In particular, redis-py 4.x requires that connections are manually closed. In 4.0 that wasn't done by the core layer, which led to warnings for people using async_to_sync(), without closing connections when updating from 3.x.

  • Updated the minimum redis-py version to 4.5.3 because of a security release there. Note that this is not a security issue in channels-redis: installing an earlier version will still use the latest redis-py, but by bumping the dependency we make sure you'll get redis-py too, when you install the update here.

4.0.0 (2022-10-07)

Version 4.0.0 migrates the underlying Redis library from aioredis to redis-py. (aioredis was retired and moved into redis-py, which will host the ongoing development.)

Version 4.0.0 should be compatible with existing Channels 3 projects, as well as Channels 4 projects.

  • Migrated from aioredis to redis-py. Specifying hosts as tuples is no longer supported. If hosts are specified as dicts, only the address key will be taken into account, i.e. a `password`` must be specified inline in the address.

  • Added support for passing kwargs to sentinel connections.

  • Updated dependencies and obsolete code.

... (truncated)

Commits
  • 5948317 Updated change notes and readme for 4.2 release. (#378)
  • dad0b13 Avoid redis 5.x deprecation warning when closing connection (#376)
  • 6c98134 Added redis-py and Channels versions to test matrix (#377)
  • 66187aa chore: Cleanup refs to python 3.7 (#375)
  • 7823759 test: Add python 3.12 and drop 3.7 (#374)
  • 7c4b4b6 Adjusted README hosts example.
  • 1e9b738 use the stable docs for redis, and I hope this is a good example (#370)
  • ba6dfcd Use normalized channels-redis PyPI package name (#363)
  • 513f859 Reenabled Python 3.11 testing. (#362)
  • See full diff in compare view


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)