paulscherrerinstitute / alphafold-on-fire

GNU General Public License v3.0
1 stars 3 forks source link

Bump fastapi from 0.109.0 to 0.110.0 in /backend #525

Closed dependabot[bot] closed 8 months ago

dependabot[bot] commented 9 months ago

Bumps fastapi from 0.109.0 to 0.110.0.

Release notes

Sourced from fastapi's releases.

0.110.0

Breaking Changes

  • 🐛 Fix unhandled growing memory for internal server errors, refactor dependencies with yield and except to require raising again as in regular Python. PR #11191 by @​tiangolo.
    • This is a breaking change (and only slightly) if you used dependencies with yield, used except in those dependencies, and didn't raise again.
    • This was reported internally by @​rushilsrivastava as a memory leak when the server had unhandled exceptions that would produce internal server errors, the memory allocated before that point would not be released.
    • Read the new docs: Dependencies with yield and except.

In short, if you had dependencies that looked like:

def my_dep():
    try:
        yield
    except SomeException:
        pass

Now you need to make sure you raise again after except, just as you would in regular Python:

def my_dep():
    try:
        yield
    except SomeException:
        raise

Docs

Translations

  • 🌐 Add German translation for docs/de/docs/reference/background.md. PR #10820 by @​nilslindemann.
  • 🌐 Add German translation for docs/de/docs/reference/templating.md. PR #10842 by @​nilslindemann.
  • 🌐 Add German translation for docs/de/docs/external-links.md. PR #10852 by @​nilslindemann.
  • 🌐 Update Turkish translation for docs/tr/docs/tutorial/query-params.md. PR #11162 by @​hasansezertasan.
  • 🌐 Add German translation for docs/de/docs/reference/encoders.md. PR #10840 by @​nilslindemann.
  • 🌐 Add German translation for docs/de/docs/reference/responses.md. PR #10825 by @​nilslindemann.
  • 🌐 Add German translation for docs/de/docs/reference/request.md. PR #10821 by @​nilslindemann.
  • 🌐 Add Turkish translation for docs/tr/docs/tutorial/query-params.md. PR #11078 by @​emrhnsyts.
  • 🌐 Add German translation for docs/de/docs/reference/fastapi.md. PR #10813 by @​nilslindemann.
  • 🌐 Add German translation for docs/de/docs/newsletter.md. PR #10853 by @​nilslindemann.
  • 🌐 Add Traditional Chinese translation for docs/zh-hant/docs/learn/index.md. PR #11142 by @​hsuanchi.
  • 🌐 Add Korean translation for /docs/ko/docs/tutorial/dependencies/global-dependencies.md. PR #11123 by @​riroan.
  • 🌐 Add Korean translation for /docs/ko/docs/tutorial/dependencies/dependencies-in-path-operation-decorators.md. PR #11124 by @​riroan.
  • 🌐 Add Korean translation for /docs/ko/docs/tutorial/schema-extra-example.md. PR #11121 by @​KaniKim.
  • 🌐 Add Korean translation for /docs/ko/docs/tutorial/body-fields.md. PR #11112 by @​KaniKim.

... (truncated)

Commits
  • e40747f 🔖 Release version 0.110.0
  • 32b56a8 📝 Update release notes
  • b6b0f2a 📝 Update release notes
  • bf771bd 🐛 Fix unhandled growing memory for internal server errors, refactor dependenc...
  • 6336604 📝 Update release notes
  • cb93874 📝 Update release notes
  • 9210e6a 🌐 Add German translation for docs/de/docs/reference/background.md (#10820)
  • dec45c5 🌐 Add German translation for docs/de/docs/reference/templating.md (#10842)
  • 5da35ff 📝 Update release notes
  • 626b066 🌐 Add German translation for docs/de/docs/external-links.md (#10852)
  • Additional commits viewable in compare view


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
codecov[bot] commented 9 months ago

Codecov Report

All modified and coverable lines are covered by tests :white_check_mark:

Project coverage is 100.00%. Comparing base (de3ef77) to head (66709a0).

Additional details and impacted files ```diff @@ Coverage Diff @@ ## main #525 +/- ## ========================================= Coverage 100.00% 100.00% ========================================= Files 7 7 Lines 105 105 ========================================= Hits 105 105 ``` | [Flag](https://app.codecov.io/gh/paulscherrerinstitute/alphafold-on-fire/pull/525/flags?src=pr&el=flags&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=paulscherrerinstitute) | Coverage Δ | | |---|---|---| | [backend](https://app.codecov.io/gh/paulscherrerinstitute/alphafold-on-fire/pull/525/flags?src=pr&el=flag&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=paulscherrerinstitute) | `100.00% <ø> (ø)` | | Flags with carried forward coverage won't be shown. [Click here](https://docs.codecov.io/docs/carryforward-flags?utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=paulscherrerinstitute#carryforward-flags-in-the-pull-request-comment) to find out more.

:umbrella: View full report in Codecov by Sentry.
:loudspeaker: Have feedback on the report? Share it here.

github-actions[bot] commented 9 months ago

Overview

Image reference psisharedsharedchncr001.azurecr.io/alphafold:edge psisharedsharedchncr001.azurecr.io/alphafold:pr-525
- digest 35cc0232bf90 ca74022c96e0
- provenance https://github.com/paulscherrerinstitute/alphafold-on-fire/commit/de3ef7709d4a18edecd940fd654063e7e3e5b6a6 https://github.com/paulscherrerinstitute/alphafold-on-fire/commit/66709a0e0a2a58a48f6b4a0f100802c0f4f4d84c
- vulnerabilities critical: 0 high: 6 medium: 4 low: 0 unspecified: 1 critical: 0 high: 4 medium: 2 low: 0
- platform linux/amd64 linux/amd64
- size 59 MB 67 MB (+8.4 MB)
- packages 110 110
Base Image python:3.10-alpine
also known as:
3.10-alpine3.19
3.10.13-alpine
3.10.13-alpine3.19
python:3.10-alpine
also known as:
3.10-alpine3.19
3.10.13-alpine
3.10.13-alpine3.19
- vulnerabilities critical: 0 high: 1 medium: 4 low: 0 unspecified: 1 critical: 0 high: 1 medium: 2 low: 0
Environment Variables (4 changes) > * `±` 4 changed > * _6 unchanged_ ```diff GPG_KEY=A035C8C19219BA821ECEA86B64E628F8D684696D LANG=C.UTF-8 PATH=/usr/local/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin -PYTHON_GET_PIP_SHA256=7cfd4bdc4d475ea971f1c0710a5953bcc704d171f83c797b9529d9974502fcc6 +PYTHON_GET_PIP_SHA256=dfe9fd5c28dc98b5ac17979a953ea550cec37ae1b47a5116007395bfacff2ab9 -PYTHON_GET_PIP_URL=https://github.com/pypa/get-pip/raw/049c52c665e8c5fd1751f942316e0a5c777d304f/public/get-pip.py +PYTHON_GET_PIP_URL=https://github.com/pypa/get-pip/raw/dbf0c85f76fb6e1ab42aa672ffca6f0a675d9ee4/public/get-pip.py PYTHON_PIP_VERSION=23.0.1 PYTHON_SETUPTOOLS_VERSION=65.5.1 PYTHON_VERSION=3.10.13 -RELEASE_ID=de3ef7709d4a18edecd940fd654063e7e3e5b6a6 +RELEASE_ID=66709a0e0a2a58a48f6b4a0f100802c0f4f4d84c -VERSION=edge +VERSION=pr-525 ```
Labels (3 changes) > * `±` 3 changed > * _5 unchanged_ ```diff -org.opencontainers.image.created=2024-01-25T08:16:19.691Z +org.opencontainers.image.created=2024-02-26T14:45:28.789Z org.opencontainers.image.description= org.opencontainers.image.licenses=GPL-3.0 -org.opencontainers.image.revision=de3ef7709d4a18edecd940fd654063e7e3e5b6a6 +org.opencontainers.image.revision=66709a0e0a2a58a48f6b4a0f100802c0f4f4d84c org.opencontainers.image.source=https://github.com/paulscherrerinstitute/alphafold-on-fire org.opencontainers.image.title=alphafold-on-fire org.opencontainers.image.url=https://github.com/paulscherrerinstitute/alphafold-on-fire -org.opencontainers.image.version=edge +org.opencontainers.image.version=pr-525 ```
Packages and Vulnerabilities (9 package changes and 4 vulnerability changes) > * :infinity: 9 packages changed > * 101 packages unchanged > * :heavy_check_mark: 4 vulnerabilities removed
Changes for packages of type apk (6 changes)
Package Version
psisharedsharedchncr001.azurecr.io/alphafold:edge
Version
psisharedsharedchncr001.azurecr.io/alphafold:pr-525
:infinity: .python-rundeps 20231209.013648 20240127.073042
:infinity: libcrypto3 3.1.4-r2 3.1.4-r5
:infinity: libssl3 3.1.4-r2 3.1.4-r5
:infinity: openssl 3.1.4-r2 3.1.4-r5
critical: 0 high: 0 medium: 2 low: 0 unspecified: 1
Removed vulnerabilities (3):
  • medium : CVE--2023--6129
  • medium : CVE--2024--0727
  • unspecified : CVE--2023--6237
:infinity: tzdata 2023c-r1 2023d-r0
:infinity: zlib 1.3-r2 1.3.1-r0
Changes for packages of type pypi (3 changes)
Package Version
psisharedsharedchncr001.azurecr.io/alphafold:edge
Version
psisharedsharedchncr001.azurecr.io/alphafold:pr-525
:infinity: fastapi 0.109.0 0.110.0
critical: 0 high: 1 medium: 0 low: 0
Removed vulnerabilities (1):
  • high : CVE--2024--24762
:infinity: pip 23.3.2 24.0
:infinity: starlette 0.35.1 0.36.3
critical: 0 high: 1 medium: 0 low: 0
Removed vulnerabilities (1):
  • high : CVE--2024--24762
dependabot[bot] commented 8 months ago

Superseded by #549.