search

ral-facilities / inventory-management-system-api

Apache License 2.0
1 stars 0 forks source link

Bump the pip group across 1 directory with 10 updates #375

Closed dependabot[bot] closed 2 months ago

dependabot[bot] commented 2 months ago

Bumps the pip group with 10 updates in the / directory:

Package From To
cryptography 42.0.8 43.0.1
fastapi[all] 0.111.0 0.114.2
pyjwt 2.8.0 2.9.0
uvicorn 0.30.1 0.30.6
pylint 3.2.5 3.2.7
black 24.4.2 24.8.0
pytest 8.2.2 8.3.3
pytest-asyncio 0.23.7 0.24.0
pytest-env 1.1.3 1.1.4
faker 26.0.0 28.4.1

Updates cryptography from 42.0.8 to 43.0.1

Changelog

Sourced from cryptography's changelog.

43.0.1 - 2024-09-03


* Updated Windows, macOS, and Linux wheels to be compiled with OpenSSL 3.3.2.

.. _v43-0-0:


43.0.0 - 2024-07-20

  • BACKWARDS INCOMPATIBLE: Support for OpenSSL less than 1.1.1e has been removed. Users on older version of OpenSSL will need to upgrade.
  • BACKWARDS INCOMPATIBLE: Dropped support for LibreSSL < 3.8.
  • Updated Windows, macOS, and Linux wheels to be compiled with OpenSSL 3.3.1.
  • Updated the minimum supported Rust version (MSRV) to 1.65.0, from 1.63.0.
  • :func:~cryptography.hazmat.primitives.asymmetric.rsa.generate_private_key now enforces a minimum RSA key size of 1024-bit. Note that 1024-bit is still considered insecure, users should generally use a key size of 2048-bits.
  • :func:~cryptography.hazmat.primitives.serialization.pkcs7.serialize_certificates now emits ASN.1 that more closely follows the recommendations in :rfc:2315.
  • Added new :doc:/hazmat/decrepit/index module which contains outdated and insecure cryptographic primitives. :class:~cryptography.hazmat.primitives.ciphers.algorithms.CAST5, :class:~cryptography.hazmat.primitives.ciphers.algorithms.SEED, :class:~cryptography.hazmat.primitives.ciphers.algorithms.IDEA, and :class:~cryptography.hazmat.primitives.ciphers.algorithms.Blowfish, which were deprecated in 37.0.0, have been added to this module. They will be removed from the cipher module in 45.0.0.
  • Moved :class:~cryptography.hazmat.primitives.ciphers.algorithms.TripleDES and :class:~cryptography.hazmat.primitives.ciphers.algorithms.ARC4 into :doc:/hazmat/decrepit/index and deprecated them in the cipher module. They will be removed from the cipher module in 48.0.0.
  • Added support for deterministic :class:~cryptography.hazmat.primitives.asymmetric.ec.ECDSA (:rfc:6979)
  • Added support for client certificate verification to the :mod:X.509 path validation <cryptography.x509.verification> APIs in the form of :class:~cryptography.x509.verification.ClientVerifier, :class:~cryptography.x509.verification.VerifiedClient, and PolicyBuilder :meth:~cryptography.x509.verification.PolicyBuilder.build_client_verifier.
  • Added Certificate :attr:~cryptography.x509.Certificate.public_key_algorithm_oid and Certificate Signing Request :attr:~cryptography.x509.CertificateSigningRequest.public_key_algorithm_oid to determine the :class:~cryptography.hazmat._oid.PublicKeyAlgorithmOID Object Identifier of the public key found inside the certificate.
  • Added :attr:~cryptography.x509.InvalidityDate.invalidity_date_utc, a timezone-aware alternative to the naïve datetime attribute :attr:~cryptography.x509.InvalidityDate.invalidity_date.
  • Added support for parsing empty DN string in

... (truncated)

Commits


Updates fastapi[all] from 0.111.0 to 0.114.2

Release notes

Sourced from fastapi[all]'s releases.

0.114.2

Fixes

Translations

  • 🌐 Add Portuguese translation for docs/pt/docs/tutorial/request-form-models.md. PR #12175 by @​ceb10n.
  • 🌐 Add Chinese translation for docs/zh/docs/project-generation.md. PR #12170 by @​waketzheng.
  • 🌐 Add Dutch translation for docs/nl/docs/python-types.md. PR #12158 by @​maxscheijen.

Internal

0.114.1

Refactors

  • ⚡️ Improve performance in request body parsing with a cache for internal model fields. PR #12184 by @​tiangolo.

Docs

  • 📝 Remove duplicate line in docs for docs/en/docs/environment-variables.md. PR #12169 by @​prometek.

Translations

Internal

0.114.0

You can restrict form fields to only include those declared in a Pydantic model and forbid any extra field sent in the request using Pydantic's model_config = {"extra": "forbid"}:

from typing import Annotated

from fastapi import FastAPI, Form
from pydantic import BaseModel


app = FastAPI()
</tr></table>

... (truncated)

Commits
  • 2ada161 🔖 Release version 0.114.2
  • 3a5fd71 📝 Update release notes
  • 88d4f2c 🐛 Fix form field regression (#12194)
  • 0fc6e34 📝 Update release notes
  • 2a43511 💡 Add comments with instructions for Playwright screenshot scripts (#12193)
  • ed66d70 📝 Update release notes
  • e50faca 🌐 Add Portuguese translation for `docs/pt/docs/tutorial/request-form-models.m...
  • 93e50e3 📝 Update release notes
  • 4a94fe3 🌐 Add Chinese translation for docs/zh/docs/project-generation.md (#12170)
  • 492943f 📝 Update release notes
  • Additional commits viewable in compare view


Updates pyjwt from 2.8.0 to 2.9.0

Release notes

Sourced from pyjwt's releases.

2.9.0

What's Changed

New Contributors

Full Changelog: https://github.com/jpadilla/pyjwt/compare/2.8.0...2.9.0

Changelog

Sourced from pyjwt's changelog.

v2.9.0 <https://github.com/jpadilla/pyjwt/compare/2.8.0...2.9.0>__

Changed


- Drop support for Python 3.7 (EOL) by @hugovk in `[#910](https://github.com/jpadilla/pyjwt/issues/910) <https://github.com/jpadilla/pyjwt/pull/910>`__
- Allow JWT issuer claim validation to accept a list of strings too by @mattpollak in `[#913](https://github.com/jpadilla/pyjwt/issues/913) <https://github.com/jpadilla/pyjwt/pull/913>`__

Fixed



- Fix unnecessary string concatenation by @sirosen in `[#904](https://github.com/jpadilla/pyjwt/issues/904) &lt;https://github.com/jpadilla/pyjwt/pull/904&gt;`__
- Fix docs for ``jwt.decode_complete`` to include ``strict_aud`` option by @woodruffw in `[#923](https://github.com/jpadilla/pyjwt/issues/923) &lt;https://github.com/jpadilla/pyjwt/pull/923&gt;`__
- Fix docs step by @jpadilla in `[#950](https://github.com/jpadilla/pyjwt/issues/950) &lt;https://github.com/jpadilla/pyjwt/pull/950&gt;`__
- Fix: Remove an unused variable from example code block by @kenkoooo in `[#958](https://github.com/jpadilla/pyjwt/issues/958) &lt;https://github.com/jpadilla/pyjwt/pull/958&gt;`__

Added



    

  • Add support for Python 3.12 by @​hugovk in [#910](https://github.com/jpadilla/pyjwt/issues/910) &lt;https://github.com/jpadilla/pyjwt/pull/910&gt;__
    • 

  • Improve performance of is_ssh_key + add unit test by @​bdraco in [#940](https://github.com/jpadilla/pyjwt/issues/940) &lt;https://github.com/jpadilla/pyjwt/pull/940&gt;__
    • 

  • Allow jwt.decode() to accept a PyJWK object by @​luhn in [#886](https://github.com/jpadilla/pyjwt/issues/886) &lt;https://github.com/jpadilla/pyjwt/pull/886&gt;__
    • 

  • Make algorithm_name attribute available on PyJWK by @​luhn in [#886](https://github.com/jpadilla/pyjwt/issues/886) &lt;https://github.com/jpadilla/pyjwt/pull/886&gt;__
    • 

  • Raise InvalidKeyError on invalid PEM keys to be compatible with cryptography 42.x.x by @​CollinEMac in [#952](https://github.com/jpadilla/pyjwt/issues/952) &lt;https://github.com/jpadilla/pyjwt/pull/952&gt;__
    • 

  • Raise an exception when required cryptography dependency is missing by @​tobloef in &lt;https://github.com/jpadilla/pyjwt/pull/963&gt;__
Commits


Updates uvicorn from 0.30.1 to 0.30.6

Release notes

Sourced from uvicorn's releases.

Version 0.30.6

Fixed

  • Don't warn when upgrade is not WebSocket and depedencies are installed (#2360)

Full Changelog: https://github.com/encode/uvicorn/compare/0.30.5...0.30.6

Version 0.30.5

Fixed

  • Don't close connection before receiving body on H11 (#2408)

Full Changelog: https://github.com/encode/uvicorn/compare/0.30.4...0.30.5

Version 0.30.4

Fixed

  • Close connection when h11 sets client state to MUST_CLOSE #2375

Full Changelog: https://github.com/encode/uvicorn/compare/0.30.3...0.30.4

Version 0.30.3

Fixed

  • Suppress KeyboardInterrupt from CLI and programmatic usage (#2384)
  • ClientDisconnect inherits from OSError instead of IOError (#2393)

Full Changelog: https://github.com/encode/uvicorn/compare/0.30.2...0.30.3

Version 0.30.2

Added

Fixed

  • Iterate subprocesses in-place on the process manager (#2373)

Full Changelog: https://github.com/encode/uvicorn/compare/0.30.1...0.30.2

Changelog

Sourced from uvicorn's changelog.

0.30.6 (2024-08-13)

Fixed

  • Don't warn when upgrade is not WebSocket and depedencies are installed (#2360)

0.30.5 (2024-08-02)

Fixed

  • Don't close connection before receiving body on H11 (#2408)

0.30.4 (2024-07-31)

Fixed

  • Close connection when h11 sets client state to MUST_CLOSE (#2375)

0.30.3 (2024-07-20)

Fixed

  • Suppress KeyboardInterrupt from CLI and programmatic usage (#2384)
  • ClientDisconnect inherits from OSError instead of IOError (#2393)

0.30.2 (2024-07-20)

Added

Fixed

  • Iterate subprocesses in-place on the process manager (#2373)
Commits


Updates pylint from 3.2.5 to 3.2.7

Commits


Updates black from 24.4.2 to 24.8.0

Release notes

Sourced from black's releases.

24.8.0

Stable style

  • Fix crash when # fmt: off is used before a closing parenthesis or bracket. (#4363)

Packaging

  • Packaging metadata updated: docs are explictly linked, the issue tracker is now also linked. This improves the PyPI listing for Black. (#4345)

Parser

  • Fix regression where Black failed to parse a multiline f-string containing another multiline string (#4339)
  • Fix regression where Black failed to parse an escaped single quote inside an f-string (#4401)
  • Fix bug with Black incorrectly parsing empty lines with a backslash (#4343)
  • Fix bugs with Black's tokenizer not handling \{ inside f-strings very well (#4422)
  • Fix incorrect line numbers in the tokenizer for certain tokens within f-strings (#4423)

Performance

  • Improve performance when a large directory is listed in .gitignore (#4415)

Blackd

  • Fix blackd (and all extras installs) for docker container (#4357)
Changelog

Sourced from black's changelog.

24.8.0

Stable style

  • Fix crash when # fmt: off is used before a closing parenthesis or bracket. (#4363)

Packaging

  • Packaging metadata updated: docs are explictly linked, the issue tracker is now also linked. This improves the PyPI listing for Black. (#4345)

Parser

  • Fix regression where Black failed to parse a multiline f-string containing another multiline string (#4339)
  • Fix regression where Black failed to parse an escaped single quote inside an f-string (#4401)
  • Fix bug with Black incorrectly parsing empty lines with a backslash (#4343)
  • Fix bugs with Black's tokenizer not handling \{ inside f-strings very well (#4422)
  • Fix incorrect line numbers in the tokenizer for certain tokens within f-strings (#4423)

Performance

  • Improve performance when a large directory is listed in .gitignore (#4415)

Blackd

  • Fix blackd (and all extras installs) for docker container (#4357)
Commits
  • b965c2a Prepare release 24.8.0 (#4426)
  • 9ccf279 Document find_project_root ignoring pyproject.toml without [tool.black]...
  • 14b6e61 fix: Enhace black efficiently to skip directories listed in .gitignore (#4415)
  • b1c4dd9 fix: respect braces better in f-string parsing (#4422)
  • 4b4ae43 Fix incorrect linenos on fstring tokens with escaped newlines (#4423)
  • 7fa1faf docs: fix the installation command of extra for blackd (#4413)
  • 8827acc Bump sphinx from 7.3.7 to 7.4.0 in /docs (#4404)
  • b0da11d Bump furo from 2024.5.6 to 2024.7.18 in /docs (#4409)
  • 721dff5 fix: avoid formatting backslash strings inside f-strings (#4401)
  • 7e2afc9 Update actions/checkout to v4 to stop node deprecation warnings (#4379)
  • Additional commits viewable in compare view


Updates pytest from 8.2.2 to 8.3.3

Release notes

Sourced from pytest's releases.

8.3.3

pytest 8.3.3 (2024-09-09)

Bug fixes

  • #12446: Avoid calling @property (and other instance descriptors) during fixture discovery -- by asottile{.interpreted-text role="user"}

  • #12659: Fixed the issue of not displaying assertion failure differences when using the parameter --import-mode=importlib in pytest>=8.1.

  • #12667: Fixed a regression where type change in [ExceptionInfo.errisinstance]{.title-ref} caused [mypy]{.title-ref} to fail.

  • #12744: Fixed typing compatibility with Python 3.9 or less -- replaced [typing.Self]{.title-ref} with [typing_extensions.Self]{.title-ref} -- by Avasam{.interpreted-text role="user"}

  • #12745: Fixed an issue with backslashes being incorrectly converted in nodeid paths on Windows, ensuring consistent path handling across environments.

  • #6682: Fixed bug where the verbosity levels where not being respected when printing the "msg" part of failed assertion (as in assert condition, msg).

  • #9422: Fix bug where disabling the terminal plugin via -p no:terminal would cause crashes related to missing the verbose option.

    -- by GTowers1{.interpreted-text role="user"}

Improved documentation

  • #12663: Clarify that the [pytest_deselected]{.title-ref} hook should be called from [pytest_collection_modifyitems]{.title-ref} hook implementations when items are deselected.
  • #12678: Remove erroneous quotes from [tmp_path_retention_policy]{.title-ref} example in docs.

Miscellaneous internal changes

  • #12769: Fix typos discovered by codespell and add codespell to pre-commit hooks.

8.3.2

pytest 8.3.2 (2024-07-24)

Bug fixes

  • #12652: Resolve regression [conda]{.title-ref} environments where no longer being automatically detected.

    -- by RonnyPfannschmidt{.interpreted-text role="user"}

8.3.1

pytest 8.3.1 (2024-07-20)

The 8.3.0 release failed to include the change notes and docs for the release. This patch release remedies this. There are no other changes.

... (truncated)

Commits


Updates pytest-asyncio from 0.23.7 to 0.24.0

Release notes

Sourced from pytest-asyncio's releases.

pytest-asyncio 0.24.0

0.24.0 (2024-08-22)

  • BREAKING: Updated minimum supported pytest version to v8.2.0
  • Adds an optional loop_scope keyword argument to pytest.mark.asyncio. This argument controls which event loop is used to run the marked async test. #706, #871
  • Deprecates the optional scope keyword argument to pytest.mark.asyncio for API consistency with pytest_asyncio.fixture. Users are encouraged to use the loop_scope keyword argument, which does exactly the same.
  • Raises an error when passing scope or loop_scope as a positional argument to @pytest.mark.asyncio. #812
  • Fixes a bug that caused module-scoped async fixtures to fail when reused in other modules #862 #668

pytest-asyncio 0.24.0a1

0.24.0 (UNRELEASED)

  • BREAKING: Updated minimum supported pytest version to v8.2.0
  • Adds an optional loop_scope keyword argument to pytest.mark.asyncio. This argument controls which event loop is used to run the marked async test. #706, #871
  • Deprecates the optional scope keyword argument to pytest.mark.asyncio for API consistency with pytest_asyncio.fixture. Users are encouraged to use the loop_scope keyword argument, which does exactly the same.
  • Raises an error when passing scope or loop_scope as a positional argument to @pytest.mark.asyncio. #812
  • Fixes a bug that caused module-scoped async fixtures to fail when reused in other modules #862 #668

pytest-asyncio 0.24.0a0

0.24.0 (UNRELEASED)

  • Adds an optional loop_scope keyword argument to pytest.mark.asyncio. This argument controls which event loop is used to run the marked async test. #706, #871
  • Deprecates the optional scope keyword argument to pytest.mark.asyncio for API consistency with pytest_asyncio.fixture. Users are encouraged to use the loop_scope keyword argument, which does exactly the same.
  • Raises an error when passing scope or loop_scope as a positional argument to @pytest.mark.asyncio. #812

pytest-asyncio 0.23.8

0.23.8 (2024-07-17)

  • Fixes a bug that caused duplicate markers in async tests #813

Known issues

As of v0.23, pytest-asyncio attaches an asyncio event loop to each item of the test suite (i.e. session, packages, modules, classes, functions) and allows tests to be run in those loops when marked accordingly. Pytest-asyncio currently assumes that async fixture scope is correlated with the new event loop scope. This prevents fixtures from being evaluated independently from the event loop scope and breaks some existing test suites (see #706). For example, a test suite may require all fixtures and tests to run in the same event loop, but have async fixtures that are set up and torn down for each module. If you're affected by this issue, please continue using the v0.21 release, until it is resolved.

Commits
  • fb5422f docs: Set release date for v0.24 in changelog.
  • 6dc7f58 docs: Add migration guides for pytest-asyncio v0.21 and v0.23.
  • 1bfc181 Wire Sphinx builds into the RTD config via tox
  • f03cf13 Build(deps): Bump hypothesis in /dependencies/default
  • 69540bf Build(deps): Bump attrs from 24.1.0 to 24.2.0 in /dependencies/default
  • b0ccfc5 Build(deps): Bump hypothesis in /dependencies/default
  • 574f1db Build(deps): Bump babel from 2.15.0 to 2.16.0 in /dependencies/docs
  • ae30dac Update .readthedocs.yaml to install pytest-asyncio
  • 972a704 Derive project version using importlib
  • d587a52 [pre-commit.ci] pre-commit autoupdate
  • Additional commits viewable in compare view


Updates pytest-env from 1.1.3 to 1.1.4

Release notes

Sourced from pytest-env's releases.

1.1.4

Full Changelog: https://github.com/pytest-dev/pytest-env/compare/1.1.3...1.1.4

Commits
  • 4d5015b Bump tools and dependencies and support 3.13
  • e95bd81 Bump tools and dependencies and support 3.13
  • 880f318 [pre-commit.ci] pre-commit autoupdate (#96)
  • da9b992 Bump pypa/gh-action-pypi-publish from 1.9.0 to 1.10.1 (#98)
  • b398758 [pre-commit.ci] pre-commit autoupdate (#95)
  • edf092e [pre-commit.ci] pre-commit autoupdate (#94)
  • 476f5e2 [pre-commit.ci] pre-commit autoupdate (#93)
  • 8413e95 [pre-commit.ci] pre-commit autoupdate (#92)
  • 7af6ff8 [pre-commit.ci] pre-commit autoupdate (#91)
  • 66a96b1 Bump pypa/gh-action-pypi-publish from 1.8.14 to 1.9.0 (#90)
  • Additional commits viewable in compare view


Updates faker from 26.0.0 to 28.4.1

Release notes

Sourced from faker's releases.

Release v28.4.1

See CHANGELOG.md.

Release v28.4.0

See CHANGELOG.md.

Release v28.3.0

See CHANGELOG.md.

Release v28.2.0

See CHANGELOG.md.

Release v28.1.0

See CHANGELOG.md.

Release v28.0.0

See CHANGELOG.md.

Release v27.4.0

See CHANGELOG.md.

Release v27.3.0

See CHANGELOG.md.

Release v27.2.0

See CHANGELOG.md.

Release v27.1.0

See CHANGELOG.md.

Release v27.0.0

See CHANGELOG.md.

Release v26.3.0

See CHANGELOG.md.

Release v26.2.0

See CHANGELOG.md.

Release v26.1.0

See CHANGELOG.md.

Changelog

Sourced from faker's changelog.

v28.4.1 - 2024-09-04

  • Fix issue where Faker does not properly convert min/max float values to Decimal. Thanks @​bdjellabaldebaran.

v28.4.0 - 2024-09-04

v28.3.0 - 2024-09-04

v28.2.0 - 2024-09-04

v28.1.0 - 2024-08-30

  • Fix Incorrect City Spelling in uk_UA locale. Thanks @​ch4zzy.

v28.0.0 - 2024-08-23

  • Fix pydecimal handling of positive keyword. Thanks @​tahzeer.

v27.4.0 - 2024-08-21

v27.3.0 - 2024-08-21

v27.2.0 - 2024-08-21

v27.1.0 - 2024-08-21

v27.0.0 - 2024-08-12

  • Re-introduce part_of_speech argument to words() method.

v26.3.0 - 2024-08-08

  • Extend ro_RO company localization with prefixes. Thanks @​DDSNA.

v26.2.0 - 2024-08-06

... (truncated)

Commits
  • 4240ef8 Bump version: 28.4.0 → 28.4.1
  • 935a89a :pencil: Update CHANGELOG.md
  • cd6e847 Fix issue where Faker does not properly convert min/max value to decimal (#2101)
  • 3a75ddb Bump version: 28.3.0 → 28.4.0
  • dependabot[bot] commented 2 months ago

    This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

    To ignore these dependencies, configure ignore rules in dependabot.yml

codecov[bot] commented 2 months ago

Codecov Report

All modified and coverable lines are covered by tests :white_check_mark:

Project coverage is 97.86%. Comparing base (efed0c5) to head (b8f2ecb). Report is 3 commits behind head on develop.

Additional details and impacted files ```diff @@ Coverage Diff @@ ## develop #375 +/- ## ======================================== Coverage 97.86% 97.86% ======================================== Files 41 41 Lines 1502 1502 ======================================== Hits 1470 1470 Misses 32 32 ```

:umbrella: View full report in Codecov by Sentry.
:loudspeaker: Have feedback on the report? Share it here.