search

port-labs / ocean

🌊 Ocean 🌊 is an innovative solution developed by Port to seamlessly integrate various third-party systems with our developer portal product, empowering engineers to effortlessly prioritize key features and streamline the integration process.
https://ocean.getport.io
Apache License 2.0
104 stars 33 forks source link

Bump the pip group across 25 directories with 8 updates #815

Closed dependabot[bot] closed 4 weeks ago

dependabot[bot] commented 1 month ago

Bumps the pip group with 4 updates in the /integrations/argocd directory: certifi, fastapi, requests and urllib3. Bumps the pip group with 4 updates in the /integrations/aws directory: black, certifi, fastapi and urllib3. Bumps the pip group with 5 updates in the /integrations/azure directory:

Package From To
certifi 2024.2.2 2024.7.4
fastapi 0.110.3 0.111.1
requests 2.32.0 2.32.3
urllib3 1.26.18 1.26.19
azure-identity 1.15.0 1.16.1

Bumps the pip group with 4 updates in the /integrations/azure-devops directory: certifi, fastapi, requests and urllib3. Bumps the pip group with 6 updates in the /integrations/datadog directory:

Package From To
black 23.12.1 24.3.0
certifi 2024.2.2 2024.7.4
fastapi 0.100.1 0.109.1
idna 3.6 3.7
requests 2.31.0 2.32.2
urllib3 1.26.18 1.26.19

Bumps the pip group with 4 updates in the /integrations/dynatrace directory: certifi, fastapi, requests and urllib3. Bumps the pip group with 4 updates in the /integrations/firehydrant directory: certifi, fastapi, requests and urllib3. Bumps the pip group with 4 updates in the /integrations/gcp directory: certifi, fastapi, requests and urllib3. Bumps the pip group with 4 updates in the /integrations/gitlab directory: certifi, fastapi, requests and urllib3. Bumps the pip group with 4 updates in the /integrations/jenkins directory: certifi, fastapi, requests and urllib3. Bumps the pip group with 4 updates in the /integrations/jira directory: certifi, fastapi, requests and urllib3. Bumps the pip group with 4 updates in the /integrations/kafka directory: certifi, fastapi, requests and urllib3. Bumps the pip group with 4 updates in the /integrations/kubecost directory: certifi, fastapi, requests and urllib3. Bumps the pip group with 4 updates in the /integrations/launchdarkly directory: certifi, fastapi, requests and urllib3. Bumps the pip group with 4 updates in the /integrations/linear directory: certifi, fastapi, requests and urllib3. Bumps the pip group with 4 updates in the /integrations/newrelic directory: certifi, fastapi, requests and urllib3. Bumps the pip group with 4 updates in the /integrations/opencost directory: certifi, fastapi, requests and urllib3. Bumps the pip group with 4 updates in the /integrations/opsgenie directory: certifi, fastapi, requests and urllib3. Bumps the pip group with 4 updates in the /integrations/pagerduty directory: certifi, fastapi, requests and urllib3. Bumps the pip group with 4 updates in the /integrations/sentry directory: certifi, fastapi, requests and urllib3. Bumps the pip group with 4 updates in the /integrations/servicenow directory: certifi, fastapi, requests and urllib3. Bumps the pip group with 4 updates in the /integrations/snyk directory: certifi, fastapi, requests and urllib3. Bumps the pip group with 4 updates in the /integrations/statuspage directory: black, certifi, fastapi and urllib3. Bumps the pip group with 4 updates in the /integrations/terraform-cloud directory: certifi, fastapi, requests and urllib3. Bumps the pip group with 4 updates in the /integrations/wiz directory: certifi, fastapi, requests and urllib3.

Updates certifi from 2024.2.2 to 2024.7.4

Commits


Updates fastapi from 0.110.3 to 0.111.1

Release notes

Sourced from fastapi's releases.

0.111.1

Upgrades

  • ➖ Remove orjson and ujson from default dependencies. PR #11842 by @​tiangolo.
    • These dependencies are still installed when you install with pip install "fastapi[all]". But they not included in pip install fastapi.
  • 📝 Restored Swagger-UI links to use the latest version possible. PR #11459 by @​UltimateLobster.

Docs

Translations

... (truncated)

Commits


Updates requests from 2.32.0 to 2.32.3

Release notes

Sourced from requests's releases.

v2.32.3

2.32.3 (2024-05-29)

Bugfixes

  • Fixed bug breaking the ability to specify custom SSLContexts in sub-classes of HTTPAdapter. (#6716)
  • Fixed issue where Requests started failing to run on Python versions compiled without the ssl module. (#6724)

v2.32.2

2.32.2 (2024-05-21)

Deprecations

  • To provide a more stable migration for custom HTTPAdapters impacted by the CVE changes in 2.32.0, we've renamed _get_connection to a new public API, get_connection_with_tls_context. Existing custom HTTPAdapters will need to migrate their code to use this new API. get_connection is considered deprecated in all versions of Requests>=2.32.0.

    A minimal (2-line) example has been provided in the linked PR to ease migration, but we strongly urge users to evaluate if their custom adapter is subject to the same issue described in CVE-2024-35195. (#6710)

v2.32.1

2.32.1 (2024-05-20)

Bugfixes

  • Add missing test certs to the sdist distributed on PyPI.
Changelog

Sourced from requests's changelog.

2.32.3 (2024-05-29)

Bugfixes

  • Fixed bug breaking the ability to specify custom SSLContexts in sub-classes of HTTPAdapter. (#6716)
  • Fixed issue where Requests started failing to run on Python versions compiled without the ssl module. (#6724)

2.32.2 (2024-05-21)

Deprecations

  • To provide a more stable migration for custom HTTPAdapters impacted by the CVE changes in 2.32.0, we've renamed _get_connection to a new public API, get_connection_with_tls_context. Existing custom HTTPAdapters will need to migrate their code to use this new API. get_connection is considered deprecated in all versions of Requests>=2.32.0.

    A minimal (2-line) example has been provided in the linked PR to ease migration, but we strongly urge users to evaluate if their custom adapter is subject to the same issue described in CVE-2024-35195. (#6710)

2.32.1 (2024-05-20)

Bugfixes

  • Add missing test certs to the sdist distributed on PyPI.
Commits
  • 0e322af v2.32.3
  • e188799 Don't create default SSLContext if ssl module isn't present (#6724)
  • 145b539 Merge pull request #6716 from sigmavirus24/bug/6715
  • b1d73dd Don't use default SSLContext with custom poolmanager kwargs
  • 6badbac Update HISTORY.md
  • a62a2d3 Allow for overriding of specific pool key params
  • 88dce9d v2.32.2
  • c98e4d1 Merge pull request #6710 from nateprewitt/api_rename
  • 92075b3 Add deprecation warning
  • aa1461b Move _get_connection to get_connection_with_tls_context
  • Additional commits viewable in compare view


Updates urllib3 from 1.26.18 to 1.26.19

Release notes

Sourced from urllib3's releases.

1.26.19

🚀 urllib3 is fundraising for HTTP/2 support

urllib3 is raising ~$40,000 USD to release HTTP/2 support and ensure long-term sustainable maintenance of the project after a sharp decline in financial support for 2023. If your company or organization uses Python and would benefit from HTTP/2 support in Requests, pip, cloud SDKs, and thousands of other projects please consider contributing financially to ensure HTTP/2 support is developed sustainably and maintained for the long-haul.

Thank you for your support.

Changes

  • Added the Proxy-Authorization header to the list of headers to strip from requests when redirecting to a different host. As before, different headers can be set via Retry.remove_headers_on_redirect.

Full Changelog: https://github.com/urllib3/urllib3/compare/1.26.18...1.26.19

Note that due to an issue with our release automation, no multiple.intoto.jsonl file is available for this release.

Changelog

Sourced from urllib3's changelog.

1.26.19 (2024-06-17)

  • Added the Proxy-Authorization header to the list of headers to strip from requests when redirecting to a different host. As before, different headers can be set via Retry.remove_headers_on_redirect.
  • Fixed handling of OpenSSL 3.2.0 new error message for misconfiguring an HTTP proxy as HTTPS. ([#3405](https://github.com/urllib3/urllib3/issues/3405) <https://github.com/urllib3/urllib3/issues/3405>__)
Commits


Updates black from 23.12.1 to 24.3.0

Release notes

Sourced from black's releases.

24.3.0

Highlights

This release is a milestone: it fixes Black's first CVE security vulnerability. If you run Black on untrusted input, or if you habitually put thousands of leading tab characters in your docstrings, you are strongly encouraged to upgrade immediately to fix CVE-2024-21503.

This release also fixes a bug in Black's AST safety check that allowed Black to make incorrect changes to certain f-strings that are valid in Python 3.12 and higher.

Stable style

  • Don't move comments along with delimiters, which could cause crashes (#4248)
  • Strengthen AST safety check to catch more unsafe changes to strings. Previous versions of Black would incorrectly format the contents of certain unusual f-strings containing nested strings with the same quote type. Now, Black will crash on such strings until support for the new f-string syntax is implemented. (#4270)
  • Fix a bug where line-ranges exceeding the last code line would not work as expected (#4273)

Performance

  • Fix catastrophic performance on docstrings that contain large numbers of leading tab characters. This fixes CVE-2024-21503. (#4278)

Documentation

  • Note what happens when --check is used with --quiet (#4236)

24.2.0

Stable style

  • Fixed a bug where comments where mistakenly removed along with redundant parentheses (#4218)

Preview style

  • Move the hug_parens_with_braces_and_square_brackets feature to the unstable style due to an outstanding crash and proposed formatting tweaks (#4198)
  • Fixed a bug where base expressions caused inconsistent formatting of ** in tenary expression (#4154)
  • Checking for newline before adding one on docstring that is almost at the line limit (#4185)
  • Remove redundant parentheses in case statement if guards (#4214).

Configuration

... (truncated)

Changelog

Sourced from black's changelog.

24.3.0

Highlights

This release is a milestone: it fixes Black's first CVE security vulnerability. If you run Black on untrusted input, or if you habitually put thousands of leading tab characters in your docstrings, you are strongly encouraged to upgrade immediately to fix CVE-2024-21503.

This release also fixes a bug in Black's AST safety check that allowed Black to make incorrect changes to certain f-strings that are valid in Python 3.12 and higher.

Stable style

  • Don't move comments along with delimiters, which could cause crashes (#4248)
  • Strengthen AST safety check to catch more unsafe changes to strings. Previous versions of Black would incorrectly format the contents of certain unusual f-strings containing nested strings with the same quote type. Now, Black will crash on such strings until support for the new f-string syntax is implemented. (#4270)
  • Fix a bug where line-ranges exceeding the last code line would not work as expected (#4273)

Performance

  • Fix catastrophic performance on docstrings that contain large numbers of leading tab characters. This fixes CVE-2024-21503. (#4278)

Documentation

  • Note what happens when --check is used with --quiet (#4236)

24.2.0

Stable style

  • Fixed a bug where comments where mistakenly removed along with redundant parentheses (#4218)

Preview style

  • Move the hug_parens_with_braces_and_square_brackets feature to the unstable style due to an outstanding crash and proposed formatting tweaks (#4198)
  • Fixed a bug where base expressions caused inconsistent formatting of ** in tenary expression (#4154)
  • Checking for newline before adding one on docstring that is almost at the line limit (#4185)
  • Remove redundant parentheses in case statement if guards (#4214).

... (truncated)

Commits


Updates certifi from 2024.6.2 to 2024.7.4

Commits


Updates fastapi from 0.110.3 to 0.111.1

Release notes

Sourced from fastapi's releases.

0.111.1

Upgrades

  • ➖ Remove orjson and ujson from default dependencies. PR #11842 by @​tiangolo.
    • These dependencies are still installed when you install with pip install "fastapi[all]". But they not included in pip install fastapi.
  • 📝 Restored Swagger-UI links to use the latest version possible. PR #11459 by @​UltimateLobster.

Docs

Translations

... (truncated)

Commits


Updates urllib3 from 2.2.1 to 2.2.2

Release notes

Sourced from urllib3's releases.

1.26.19

🚀 urllib3 is fundraising for HTTP/2 support

urllib3 is raising ~$40,000 USD to release HTTP/2 support and ensure long-term sustainable maintenance of the project after a sharp decline in financial support for 2023. If your company or organization uses Python and would benefit from HTTP/2 support in Requests, pip, cloud SDKs, and thousands of other projects please consider contributing financially to ensure HTTP/2 support is developed sustainably and maintained for the long-haul.

Thank you for your support.

Changes

  • Added the Proxy-Authorization header to the list of headers to strip from requests when redirecting to a different host. As before, different headers can be set via Retry.remove_headers_on_redirect.

Full Changelog: https://github.com/urllib3/urllib3/compare/1.26.18...1.26.19

Note that due to an issue with our release automation, no multiple.intoto.jsonl file is available for this release.

Changelog

Sourced from urllib3's changelog.

1.26.19 (2024-06-17)

  • Added the Proxy-Authorization header to the list of headers to strip from requests when redirecting to a different host. As before, different headers can be set via Retry.remove_headers_on_redirect.
  • Fixed handling of OpenSSL 3.2.0 new error message for misconfiguring an HTTP proxy as HTTPS. ([#3405](https://github.com/urllib3/urllib3/issues/3405) <https://github.com/urllib3/urllib3/issues/3405>__)
Commits


Updates certifi from 2024.2.2 to 2024.7.4

Commits


Updates fastapi from 0.110.3 to 0.111.1

Release notes

Sourced from fastapi's releases.

0.111.1

Upgrades

  • ➖ Remove orjson and ujson from default dependencies. PR #11842 by @​tiangolo.
    • These dependencies are still installed when you install with pip install "fastapi[all]". But they not included in pip install fastapi.
  • 📝 Restored Swagger-UI links to use the latest version possible. PR #11459 by @​UltimateLobster.

Docs

dependabot[bot] commented 4 weeks ago

Looks like these dependencies are updatable in another way, so this is no longer needed.