pycontribs / mk

mk ease contributing to any open source repository by exposing most common actions you can run. Inspired by make, tox and other cool tools!
https://mk.readthedocs.io/
MIT License
95 stars 11 forks source link

Bump the dependencies group in /.config with 21 updates #203

Closed dependabot[bot] closed 5 months ago

dependabot[bot] commented 5 months ago

Bumps the dependencies group in /.config with 21 updates:

Package From To
build 1.1.1 1.2.1
coverage 7.4.3 7.4.4
docutils 0.20.1 0.21.1
filelock 3.13.1 3.13.4
gitpython 3.1.42 3.1.43
idna 3.6 3.7
importlib-metadata 7.0.2 7.1.0
jaraco-classes 3.3.1 3.4.0
keyring 24.3.1 25.1.0
markdown 3.5.2 3.6
mkdocs-material 9.5.13 9.5.17
nh3 0.2.15 0.2.17
packaging 23.2 24.0
pillow 10.2.0 10.3.0
pipdeptree 2.16.1 2.18.1
pycparser 2.21 2.22
pytest-plus 0.6.1 0.7.0
tox 4.14.1 4.14.2
typer 0.9.0 0.12.3
typing-extensions 4.10.0 4.11.0
zipp 3.17.0 3.18.1

Updates build from 1.1.1 to 1.2.1

Release notes

Sourced from build's releases.

Version 1.2.1

What's Changed

  • Avoid error when terminal width is undetectable on Python < 3.11 (PR #761)

Full Changelog: https://github.com/pypa/build/compare/1.2.0...1.2.1

Version 1.2.0

What's Changed

  • Add --installer option, supporting pip and uv. Added uv extra. (PR #751)
  • Improve console output and provide -v for dependency installation (PR #749)
  • Avoid compiling unused bytecode when using pip (PR #752)
  • Dropped support for Python 3.7 (PR #743)

Full Changelog: https://github.com/pypa/build/compare/1.1.1...1.2.0

Changelog

Sourced from build's changelog.

1.2.1 (2024-03-28)

  • Avoid error when terminal width is undetectable on Python < 3.11 (PR :pr:761)

1.2.0 (2024-03-27)

  • Add --installer option, supporting pip and uv. Added uv extra. (PR :pr:751)
  • Improve console output and provide -v for dependency installation (PR :pr:749)
  • Avoid compiling unused bytecode when using pip (PR :pr:752)
  • Dropped support for Python 3.7 (PR :pr:743)
Commits


Updates coverage from 7.4.3 to 7.4.4

Changelog

Sourced from coverage's changelog.

Version 7.4.4 — 2024-03-14

  • Fix: in some cases, even with [run] relative_files=True, a data file could be created with absolute path names. When combined with other relative data files, it was random whether the absolute file names would be made relative or not. If they weren't, then a file would be listed twice in reports, as detailed in issue 1752_. This is now fixed: absolute file names are always made relative when combining. Thanks to Bruno Rodrigues dos Santos for support.

  • Fix: the last case of a match/case statement had an incorrect message if the branch was missed. It said the pattern never matched, when actually the branch is missed if the last case always matched.

  • Fix: clicking a line number in the HTML report now positions more accurately.

  • Fix: the report:format setting was defined as a boolean, but should be a string. Thanks, Tanaydin Sirin <pull 1754_>_. It is also now documented on the :ref:configuration page <config_report_format>.

.. _issue 1752: nedbat/coveragepy#1752 .. _pull 1754: nedbat/coveragepy#1754

.. _changes_7-4-3:

Commits
  • bc5e2d7 docs: sample HTML for 7.4.4
  • 9b0008b docs: prep for 7.4.4
  • a536161 docs: thanks, Bruno Rodrigues dos Santos
  • e06e4f9 chore: make doc_upgrade
  • f30818e chore: make upgrade
  • 1b19799 fix: ensure absolute paths are relative when combined #1752
  • 1ef020d build: more cheats for convenient URLs
  • 3d57a07 docs: document the report:format setting
  • 8e30221 fix: correct the type of report:format in config.py (#1754)
  • 6289be8 refactor: use dataclasses, no namedtuple
  • Additional commits viewable in compare view


Updates docutils from 0.20.1 to 0.21.1

Updates filelock from 3.13.1 to 3.13.4

Release notes

Sourced from filelock's releases.

3.13.4

What's Changed

Full Changelog: https://github.com/tox-dev/filelock/compare/3.13.3...3.13.4

3.13.3

What's Changed

Full Changelog: https://github.com/tox-dev/filelock/compare/3.13.2...3.13.3

3.13.2

What's Changed

New Contributors

Full Changelog: https://github.com/tox-dev/filelock/compare/3.13.1...3.13.2

Commits
  • 000a3fa Raise error on incompatible singleton timeout and mode args (#320)
  • 312fb4e [pre-commit.ci] pre-commit autoupdate (#321)
  • f50a337 [pre-commit.ci] pre-commit autoupdate (#319)
  • 3f6df70 Make singleton class instance dict unique per subclass (#318)
  • 9a64375 [BugFix] fix permission denied error when lock file is placed in /tmp (#317)
  • e2f121b Update index.rst to improve the demo usage (#314)
  • a46ea71 [pre-commit.ci] pre-commit autoupdate (#312)
  • 766e12d [pre-commit.ci] pre-commit autoupdate (#311)
  • f641eb6 Bump pypa/gh-action-pypi-publish from 1.8.12 to 1.8.14 (#310)
  • 9048580 Bump pypa/gh-action-pypi-publish from 1.8.11 to 1.8.12 (#308)
  • Additional commits viewable in compare view


Updates gitpython from 3.1.42 to 3.1.43

Release notes

Sourced from gitpython's releases.

3.1.43

Particularly Important Changes

These are likely to affect you, please do take a careful look.

Other Changes

New Contributors

Full Changelog: https://github.com/gitpython-developers/GitPython/compare/3.1.42...3.1.43

Commits
  • 5364053 bump version to 3.1.43
  • 4e626bd Merge pull request #1886 from EliahKagan/deprecation-warnings
  • f6060df Add GitMeta alias
  • 8327b45 Test GitMeta alias
  • f92f4c3 Clarify security risk in USE_SHELL doc and warnings
  • c7675d2 update security policy, to use GitHub instead of email
  • cf2576e Make/use test.deprecation.lib; abandon idea to filter by module
  • 7cd3aa9 Make test.performance.lib docstring more specific
  • b51b080 Explain the approach in test.deprecation to static checking
  • bdabb21 Expand USE_SHELL docstring; clarify a test usage
  • Additional commits viewable in compare view


Updates idna from 3.6 to 3.7

Release notes

Sourced from idna's releases.

v3.7

What's Changed

  • Fix issue where specially crafted inputs to encode() could take exceptionally long amount of time to process. [CVE-2024-3651]

Thanks to Guido Vranken for reporting the issue.

Full Changelog: https://github.com/kjd/idna/compare/v3.6...v3.7

Changelog

Sourced from idna's changelog.

3.7 (2024-04-11) ++++++++++++++++

  • Fix issue where specially crafted inputs to encode() could take exceptionally long amount of time to process. [CVE-2024-3651]

Thanks to Guido Vranken for reporting the issue.

Commits
  • 1d365e1 Release v3.7
  • c1b3154 Merge pull request #172 from kjd/optimize-contextj
  • 0394ec7 Merge branch 'master' into optimize-contextj
  • cd58a23 Merge pull request #152 from elliotwutingfeng/dev
  • 5beb28b More efficient resolution of joiner contexts
  • 1b12148 Update ossf/scorecard-action to v2.3.1
  • d516b87 Update Github actions/checkout to v4
  • c095c75 Merge branch 'master' into dev
  • 60a0a4c Fix typo in GitHub Actions workflow key
  • 5918a0e Merge branch 'master' into dev
  • Additional commits viewable in compare view


Updates importlib-metadata from 7.0.2 to 7.1.0

Changelog

Sourced from importlib-metadata's changelog.

v7.1.0

Features

  • python/cpython#114664

Bugfixes

  • Make MetadataPathFinder.find_distributions a classmethod for consistency with CPython. Closes #484. (#484)
  • Allow MetadataPathFinder.invalidate_caches to be called as a classmethod.
Commits
  • f5d6b5f Finalize
  • 2ef3b5f Merge commit '1711b2c198'
  • 1711b2c Need to include names from test.support for py312 compat.
  • 47b14ac Make MetadataPathFinder.find_distributions a classmethod for consistency with...
  • adc4b12 Ensure tests do not leak references in sys.modules.
  • 07d894d Copy backport of isolated_modules from importlib_resources.
  • e30a16d Consolidated test support logic in jaraco.test.cpython.
  • 41ca039 Moved compatibility tests to the compat package, as they're not included in C...
  • 5950f43 Remove legacy logic for Python 3.7.
  • ffa719b Moved compatibility module to compat package.
  • Additional commits viewable in compare view


Updates jaraco-classes from 3.3.1 to 3.4.0

Changelog

Sourced from jaraco-classes's changelog.

v3.4.0

Features

  • Better type hints for NonDataProperty. (#13)
Commits


Updates keyring from 24.3.1 to 25.1.0

Changelog

Sourced from keyring's changelog.

v25.1.0

Features

  • Replace ExceptionRaisedContext with ExceptionTrap.

v25.0.1

Bugfixes

  • When completion is unavailable, exit with non-zero status and emit message to stderr. (#671)

v25.0.0

Deprecations and Removals

  • Removed check for config in XDG_DATA_HOME on Linux systems. (#99)
  • In platform config support, remove support for Windows XP, now 10 years sunset.
Commits


Updates markdown from 3.5.2 to 3.6

Release notes

Sourced from markdown's releases.

Release 3.6

Changed

Refactor TOC Sanitation

  • All postprocessors are now run on heading content.
  • Footnote references are now stripped from heading content. Fixes #660.
  • A more robust striptags is provided to convert headings to plain text. Unlike, the markupsafe implementation, HTML entities are not unescaped.
  • The plain text name, rich html, and unescaped raw data-toc-label are saved to toc_tokens, allowing users to access the full rich text content of the headings directly from toc_tokens.
  • The value of data-toc-label is sanitized separate from heading content before being written to name. This fixes a bug which allowed markup through in certain circumstances. To access the raw unsanitized data, retrieve the value from token['data-toc-label'] directly.
  • An html.unescape call is made just prior to calling slugify so that slugify only operates on Unicode characters. Note that html.unescape is not run on name, html, or data-toc-label.
  • The functions get_name and stashedHTML2text defined in the toc extension are both deprecated. Instead, third party extensions should use some combination of the new functions run_postprocessors, render_inner_html and striptags.

Fixed

  • Include scripts/*.py in the generated source tarballs (#1430).
  • Ensure lines after heading in loose list are properly detabbed (#1443).
  • Give smarty tree processor higher priority than toc (#1440).
  • Permit carets (^) and square brackets (]) but explicitly exclude backslashes (\) from abbreviations (#1444).
  • In attribute lists (attr_list, fenced_code), quoted attribute values are now allowed to contain curly braces (}) (#1414).
Changelog

Sourced from markdown's changelog.

[3.6] -- 2024-03-14

Changed

Refactor TOC Sanitation

  • All postprocessors are now run on heading content.
  • Footnote references are now stripped from heading content. Fixes #660.
  • A more robust striptags is provided to convert headings to plain text. Unlike, the markupsafe implementation, HTML entities are not unescaped.
  • The plain text name, rich html, and unescaped raw data-toc-label are saved to toc_tokens, allowing users to access the full rich text content of the headings directly from toc_tokens.
  • The value of data-toc-label is sanitized separate from heading content before being written to name. This fixes a bug which allowed markup through in certain circumstances. To access the raw unsanitized data, retrieve the value from token['data-toc-label'] directly.
  • An html.unescape call is made just prior to calling slugify so that slugify only operates on Unicode characters. Note that html.unescape is not run on name, html, or data-toc-label.
  • The functions get_name and stashedHTML2text defined in the toc extension are both deprecated. Instead, third party extensions should use some combination of the new functions run_postprocessors, render_inner_html and striptags.

Fixed

  • Include scripts/*.py in the generated source tarballs (#1430).
  • Ensure lines after heading in loose list are properly detabbed (#1443).
  • Give smarty tree processor higher priority than toc (#1440).
  • Permit carets (^) and square brackets (]) but explicitly exclude backslashes (\) from abbreviations (#1444).
  • In attribute lists (attr_list, fenced_code), quoted attribute values are now allowed to contain curly braces (}) (#1414).
Commits
  • e524b8f Bump version to 3.6
  • 3d8afc6 Allow attr_list quoted values to contain curly braces
  • 9edba85 Refactor abbr escaping
  • e4ab4a6 Refactor TOC sanitation
  • a18765c Explicitly omit carot and backslash from abbr
  • 421f1e8 Give smarty tree processor higher priority than toc
  • c334a3e Ensure lines after heading in loose list are properly detabbed
  • ea92856 Update the license template so GitHub can detect it
  • a2effd6 Disable mkdocstrings show_symbol_type_toc option to work around searching iss...
  • 91f9a12 Restore Attribute symbol type in mkdocstrings template
  • Additional commits viewable in compare view


Updates mkdocs-material from 9.5.13 to 9.5.17

Release notes

Sourced from mkdocs-material's releases.

mkdocs-material-9.5.17

  • Updated Serbian translations
  • Fixed #7003: Confusing keyboard interaction for palette toggle
  • Fixed #7001: Blog posts now show time by default (9.5.16 regression)
  • Fixed edge case in backport of social plugin font loading logic

Thanks to @​stcksmsh for their contributions.

mkdocs-material-9.5.16

  • Updated Russian translations
  • Improved error handling and reporting in social plugin
  • Improved error handling and reporting in privacy plugin
  • Fixed blog plugin not allowing to use time in format strings
  • Fixed #6983: Social plugin crashes because of Google Fonts API change

Thanks to @​kamilkrzyskow, @​Guts, @​szg-alex-payne and @​natakazakova for their contributions

mkdocs-material-9.5.15

  • Reverted fix for transparent iframes (9.5.14)
  • Fixed #6929: Interference of social plugin and auto dark mode
  • Fixed #6938: Giscus shows dark background in light mode (9.5.14 regression)

mkdocs-material-9.5.14

  • Added support for hiding versions from selector when using mike
  • Added init system to improve signal handling in Docker image
  • Fixed edge cases in exclusion logic of info plugin
  • Fixed inability to reset pipeline in search plugin
  • Fixed syntax error in Finnish translations
  • Fixed #6917: UTF-8 encoding problems in blog plugin on Windows
  • Fixed #6889: Transparent iframes get background color

Thanks to @​kamilkrzyskow, @​yubiuser and @​todeveni for their contributions

Changelog

Sourced from mkdocs-material's changelog.

mkdocs-material-9.5.17+insiders-4.53.6 (2024-04-05)

  • Ensure working directory is set for projects when using projects plugin
  • Fixed #6970: Incorrect relative paths in git submodules with projects plugin

mkdocs-material-9.5.17+insiders-4.53.5 (2024-04-02)

  • Fixed social plugin crashing when no colors are specified in palettes

mkdocs-material-9.5.17 (2024-04-02)

  • Updated Serbian translations
  • Fixed #7003: Confusing keyboard interaction for palette toggle
  • Fixed #7001: Blog posts now show time by default (9.5.16 regression)
  • Fixed edge case in backport of social plugin font loading logic

mkdocs-material-9.5.16+insiders-4.53.4 (2024-03-31)

  • Fixed #6973: Escaping issue in tags extra files deprecation helper

mkdocs-material-9.5.16 (2024-03-31)

  • Updated Russian translations
  • Improved error handling and reporting in social plugin
  • Improved error handling and reporting in privacy plugin
  • Fixed blog plugin not allowing to use time in format strings
  • Fixed #6983: Social plugin crashes because of Google Fonts API change

mkdocs-material-9.5.15+insiders-4.53.3 (2024-03-23)

  • Added support for font variants in social plugin
  • Improved resilience of font resolution in social plugin
  • Fixed tag listing sometimes not being auto-populated
  • Fixed tag listing scope not being correctly resolved
  • Fixed #6941: Meta plugin adding duplicate entries
  • Fixed #6928: Social plugin crashes for some fonts

mkdocs-material-9.5.15 (2024-03-23)

  • Reverted fix for transparent iframes (9.5.14)
  • Fixed #6929: Interference of social plugin and auto dark mode
  • Fixed #6938: Giscus shows dark background in light mode (9.5.14 regression)

mkdocs-material-9.5.14+insiders-4.53.2 (2024-03-18)

  • Fixed abort on first non-matching configuration in preview extension
  • Fixed #6914: Meta files take precedence over front matter

mkdocs-material-9.5.14 (2024-03-18)

... (truncated)

Commits
  • 570161a Prepare 9.5.17 release
  • 78e93ac Improved keyboard interactions for palette toggle
  • a3655e8 Updated Serbian translations
  • 1041766 Fixed time sneaking into default post format string
  • e741f80 Documentation
  • 7e13ae6 Fix typos
  • 7d6d8d7 Updated slugify documentation
  • e71f00b Fixed backporting of social plugin font loading logic
  • 8956524 Updated Insiders changelog
  • 0db4e66 Updated changelog
  • Additional commits viewable in compare view


Updates nh3 from 0.2.15 to 0.2.17

Release notes

Sourced from nh3's releases.

v0.2.17

What's Changed

New Contributors

Full Changelog: https://github.com/messense/nh3/compare/v0.2.15...v0.2.17

Commits


Updates packaging from 23.2 to 24.0

Release notes

Sourced from packaging's releases.

24.0

What's Changed

New Contributors

Full Changelog: https://github.com/pypa/packaging/compare/23.2...24.0

Changelog

Sourced from packaging's changelog.

24.0 - 2024-03-10


* Do specifier matching correctly when the specifier contains an epoch number
  and has more components than the version (:issue:`683`)
* Support the experimental ``--disable-gil`` builds in packaging.tags
  (:issue:`727`)
* BREAKING: Make optional ``metadata.Metadata`` attributes default to ``None`` (:issue:`733`)
* Fix errors when trying to access the ``description_content_type``, ``keywords``,
  and ``requires_python`` attributes on ``metadata.Metadata`` when those values
  have not been provided (:issue:`733`)
* Fix a bug preventing the use of the built in ``ExceptionGroup`` on versions of
  Python that support it (:issue:`725`)
Commits


Updates pillow from 10.2.0 to 10.3.0

Release notes

Sourced from

dependabot[bot] commented 5 months ago

The following labels could not be found: dependabot-deps-updates.

dependabot[bot] commented 5 months ago

Looks like these dependencies are updatable in another way, so this is no longer needed.