search

ral-facilities / inventory-management-system-api

Apache License 2.0
0 stars 0 forks source link

Bump the pip group across 1 directory with 6 updates #268

Closed dependabot[bot] closed 5 months ago

dependabot[bot] commented 5 months ago

Bumps the pip group with 6 updates in the / directory:

Package From To
cryptography 42.0.5 42.0.6
fastapi[all] 0.110.2 0.111.0
pymongo 4.6.2 4.7.1
black 24.4.1 24.4.2
pytest 8.1.1 8.2.0
faker 24.11.0 25.0.1

Updates cryptography from 42.0.5 to 42.0.6

Changelog

Sourced from cryptography's changelog.

42.0.6 - 2024-05-04


* Fixed compilation when using LibreSSL 3.9.1.

.. _v42-0-5:

Commits


Updates fastapi[all] from 0.110.2 to 0.111.0

Release notes

Sourced from fastapi[all]'s releases.

0.111.0

Features

Try it out with:

$ pip install --upgrade fastapi

$ fastapi dev main.py


╭────────── FastAPI CLI - Development mode ───────────╮
│                                                     │
│  Serving at: http://127.0.0.1:8000                  │
│                                                     │
│  API docs: http://127.0.0.1:8000/docs               │
│                                                     │
│  Running in development mode, for production use:   │
│                                                     │
│  fastapi run                                        │
│                                                     │
╰─────────────────────────────────────────────────────╯


INFO:     Will watch for changes in these directories: ['/home/user/code/awesomeapp']
INFO:     Uvicorn running on http://127.0.0.1:8000 (Press CTRL+C to quit)
INFO:     Started reloader process [2248755] using WatchFiles
INFO:     Started server process [2248757]
INFO:     Waiting for application startup.
INFO:     Application startup complete.

Refactors

  • 🔧 Add configs and setup for fastapi-slim including optional extras fastapi-slim[standard], and fastapi including by default the same standard extras. PR #11503 by @​tiangolo.

0.110.3

Latest Changes

Docs

  • 📝 Update references to Python version, FastAPI supports all the current versions, no need to make the version explicit. PR #11496 by @​tiangolo.
  • ✏️ Fix typo in fastapi/security/api_key.py. PR #11481 by @​ch33zer.
  • ✏️ Fix typo in security/http.py. PR #11455 by @​omarmoo5.

Translations

  • 🌐 Add Traditional Chinese translation for docs/zh-hant/benchmarks.md. PR #11484 by @​KNChiu.

... (truncated)

Commits
  • 1c3e691 📝 Update release notes
  • ab8f557 📝 Update release notes
  • 67da3bb 🔖 Release version 0.111.0
  • 9ed94e4 📝 Update release notes
  • d71be59 ✨ Add FastAPI CLI, the new fastapi command (#11522)
  • a94ef33 📝 Update release notes
  • ea1f219 🔧 Add configs and setup for fastapi-slim including optional extras `fastapi...
  • 32be95d 🔖 Release version 0.110.3
  • 92b67b1 📝 Update release notes
  • e0a9692 📝 Update release notes
  • Additional commits viewable in compare view


Updates pymongo from 4.6.2 to 4.7.1

Release notes

Sourced from pymongo's releases.

PyMongo 4.7.1

Community release note: https://www.mongodb.com/community/forums/t/pymongo-4-7-1-released/278459

PyMongo 4.7.0

Community notes: https://www.mongodb.com/community/forums/t/pymongo-4-7-0-released/277656

Changelog

Sourced from pymongo's changelog.

Changes in Version 4.7.1

Version 4.7.1 fixes a bug introduced in 4.7.0:

  • Fixed a bug where PyMongo would cause an AttributeError if dns.resolver was imported and referenced after PyMongo was imported.
  • Clarified the behavior of the TOKEN_RESOURCE auth mechanism property for MONGODB-OIDC.

Issues Resolved ...............

See the PyMongo 4.7.1 release notes in JIRA_ for the list of resolved issues in this release.

.. _PyMongo 4.7.1 release notes in JIRA: https://jira.mongodb.org/secure/ReleaseNote.jspa?projectId=10004&version=39680

Changes in Version 4.7

PyMongo 4.7 brings a number of improvements including:

  • Added support for MONGODB-OIDC authentication. The MONGODB-OIDC mechanism authenticates using an OpenID Connect (OIDC) access token. The driver supports OIDC for workload identity, defined as an identity you assign to a software workload (such as an application, service, script, or container) to authenticate and access other services and resources. Please see :doc:examples/authentication for more information.

  • Added support for Python's native logging library <https://docs.python.org/3/howto/logging.html>_, enabling developers to customize the verbosity of log messages for their applications. Please see :doc:examples/logging for more information.

  • Significantly improved the performance of encoding BSON documents to JSON.

  • Added support for named KMS providers for client side field level encryption. Previously supported KMS providers were only: aws, azure, gcp, kmip, and local. The KMS provider is now expanded to support name suffixes (e.g. local:myname). Named KMS providers enables more than one of each KMS provider type to be configured. See the docstring for :class:~pymongo.encryption_options.AutoEncryptionOpts. Note that named KMS providers requires pymongocrypt >=1.9 and libmongocrypt >=1.9.

  • Added the :class:pymongo.hello.Hello.connection_id, :attr:pymongo.monitoring.CommandStartedEvent.server_connection_id, :attr:pymongo.monitoring.CommandSucceededEvent.server_connection_id, and :attr:pymongo.monitoring.CommandFailedEvent.server_connection_id properties.

  • Fixed a bug where inflating a :class:~bson.raw_bson.RawBSONDocument containing a :class:~bson.code.Code would cause an error.

  • :meth:~pymongo.encryption.ClientEncryption.encrypt and :meth:~pymongo.encryption.ClientEncryption.encrypt_expression now allow key_id to be passed in as a :class:uuid.UUID.

  • Fixed a bug where :class:~bson.int64.Int64 instances could not always be encoded by orjson_. The following now works::

    import orjson from bson import json_util

... (truncated)

Commits


Updates black from 24.4.1 to 24.4.2

Release notes

Sourced from black's releases.

24.4.2

This is a bugfix release to fix two regressions in the new f-string parser introduced in 24.4.1.

Parser

  • Fix regression where certain complex f-strings failed to parse (#4332)

Performance

  • Fix bad performance on certain complex string literals (#4331)
Changelog

Sourced from black's changelog.

24.4.2

This is a bugfix release to fix two regressions in the new f-string parser introduced in 24.4.1.

Parser

  • Fix regression where certain complex f-strings failed to parse (#4332)

Performance

  • Fix bad performance on certain complex string literals (#4331)
Commits


Updates pytest from 8.1.1 to 8.2.0

Release notes

Sourced from pytest's releases.

8.2.0

pytest 8.2.0 (2024-04-27)

Deprecations

  • #12069: A deprecation warning is now raised when implementations of one of the following hooks request a deprecated py.path.local parameter instead of the pathlib.Path parameter which replaced it:

    • pytest_ignore_collect{.interpreted-text role="hook"} - the path parameter - use collection_path instead.
    • pytest_collect_file{.interpreted-text role="hook"} - the path parameter - use file_path instead.
    • pytest_pycollect_makemodule{.interpreted-text role="hook"} - the path parameter - use module_path instead.
    • pytest_report_header{.interpreted-text role="hook"} - the startdir parameter - use start_path instead.
    • pytest_report_collectionfinish{.interpreted-text role="hook"} - the startdir parameter - use start_path instead.

    The replacement parameters are available since pytest 7.0.0. The old parameters will be removed in pytest 9.0.0.

    See legacy-path-hooks-deprecated{.interpreted-text role="ref"} for more details.

Features

  • #11871: Added support for reading command line arguments from a file using the prefix character @, like e.g.: pytest @tests.txt. The file must have one argument per line.

    See Read arguments from file <args-from-file>{.interpreted-text role="ref"} for details.

Improvements

  • #11523: pytest.importorskip{.interpreted-text role="func"} will now issue a warning if the module could be found, but raised ImportError{.interpreted-text role="class"} instead of ModuleNotFoundError{.interpreted-text role="class"}.

    The warning can be suppressed by passing exc_type=ImportError to pytest.importorskip{.interpreted-text role="func"}.

    See import-or-skip-import-error{.interpreted-text role="ref"} for details.

  • #11728: For unittest-based tests, exceptions during class cleanup (as raised by functions registered with TestCase.addClassCleanup <unittest.TestCase.addClassCleanup>{.interpreted-text role="meth"}) are now reported instead of silently failing.

  • #11777: Text is no longer truncated in the short test summary info section when -vv is given.

  • #12112: Improved namespace packages detection when consider_namespace_packages{.interpreted-text role="confval"} is enabled, covering more situations (like editable installs).

  • #9502: Added PYTEST_VERSION{.interpreted-text role="envvar"} environment variable which is defined at the start of the pytest session and undefined afterwards. It contains the value of pytest.__version__, and among other things can be used to easily check if code is running from within a pytest run.

Bug Fixes

  • #12065: Fixed a regression in pytest 8.0.0 where test classes containing setup_method and tests using @staticmethod or @classmethod would crash with AttributeError: 'NoneType' object has no attribute 'setup_method'.

    Now the request.instance <pytest.FixtureRequest.instance>{.interpreted-text role="attr"} attribute of tests using @staticmethod and @classmethod is no longer None, but a fresh instance of the class, like in non-static methods.

... (truncated)

Commits
  • 6bd3f31 Tweak changelog for 8.2.0
  • 9b6219b Prepare release version 8.2.0
  • 835765c Merge pull request #12130 from bluetech/fixtures-inline
  • 7e7503c unittest: report class cleanup exceptions (#12250)
  • 882c4da fixtures: inline fail_fixturefunc
  • 2e8fb9f fixtures: extract a _check_fixturedef method
  • acf2971 fixtures: inline _getnextfixturedef into _get_active_fixturedef
  • 3c77aec fixtures: move "request" check early
  • d217d68 fixtures: inline _compute_fixture_value
  • 530be28 fixtures: use early return in _get_active_fixturedef
  • Additional commits viewable in compare view


Updates faker from 24.11.0 to 25.0.1

Release notes

Sourced from faker's releases.

Release v25.0.1

See CHANGELOG.md.

Release v25.0.0

See CHANGELOG.md.

Release v24.14.1

See CHANGELOG.md.

Release v24.14.0

See CHANGELOG.md.

Release v24.13.0

See CHANGELOG.md.

Release v24.12.0

See CHANGELOG.md.

Changelog

Sourced from faker's changelog.

v25.0.1 - 2024-05-02

  • Add type stub file to setup.py.

v25.0.0 - 2024-04-28

v24.14.1 - 2024-04-28

  • Include type stubs in release.

v24.14.0 - 2024-04-25

v24.13.0 - 2024-04-25

v24.12.0 - 2024-04-25

  • Remove offensive word from pl_PL lorem provider. Thanks @​Rey092.
Commits


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore ` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore ` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore ` will remove the ignore condition of the specified dependency and ignore conditions
dependabot[bot] commented 5 months ago

Superseded by #269.