sabre-io / Baikal

Baïkal is a Calendar+Contacts server
https://sabre.io/baikal/
GNU General Public License v3.0
2.42k stars 281 forks source link

Update sabre/dav requirement from ~4.5.0 to ~4.6.0 #1230

Closed dependabot[bot] closed 5 months ago

dependabot[bot] commented 6 months ago

Updates the requirements on sabre/dav to permit the latest version.

Release notes

Sourced from sabre/dav's releases.

Release 4.6.0

4.6.0 (2023-12-11)

Changelog

Sourced from sabre/dav's changelog.

4.6.0 (2023-12-11)

4.5.1 (2023-11-23)

4.5.0 (2023-11-14)

4.4.0 (2022-06-27)

4.3.1 (2022-01-20)

4.3.0 (2021-12-14)

4.2.3 (2021-12-09)

4.2.2 (2021-12-09)

4.2.1 (2021-11-30)

4.2.0 (2021-11-17)

  • #1317: Add primary key to schedulingobjects table in pgsql.calendars.sql example (@​perguth)
  • #1335: don't remove lock on dir when deleting a child node (@​tbsmark86)

... (truncated)

Commits
  • 5541453 Merge pull request #1527 from phil-davis/prepare-4.6.0
  • 29d43f6 chore: prepare release 4.6.0
  • 008ed42 Merge pull request #1526 from phil-davis/issue-1041-4.6
  • db80aae Preserve backward-compatibility of client propFind
  • 72548b7 feat: adjust client PROPFIND methods to add types
  • 8a77009 feat: tidy up client PROPFIND code and comments
  • eece860 feat: return PROPFIND properties indexed by status
  • 985e810 feat: return all property-status combinations from PROPFIND
  • eb50dc2 test: adjust testPropFindUnfiltered to show multi-propstat behavior
  • a93bd80 feat: return both properties and status in propFindUnfiltered
  • Additional commits viewable in compare view


You can trigger a rebase of this PR by commenting @dependabot rebase.


Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Note Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

phil-davis commented 6 months ago

@ByteHamster this should be OK to merge - there is nothing really exciting in sabre/dav 4.6.0 that relates to Baikal.

ByteHamster commented 5 months ago

Have you tested this inside Baikal before merging @phil-davis?

phil-davis commented 5 months ago

Have you tested this inside Baikal before merging @phil-davis?

No, sorry. I saw the CI green, but forgot that this repo does not have comprehensive unit or end-to-end tests.

But 4.6 only enhances the dav client that is "bundled" in sabre/dav - no server-side things changed.

ByteHamster commented 5 months ago

Yeah, I still usually test before merging, even if the changes seem small. At least for my other open source projects, dependency updates are one of the most common causes for regressions. I'm super cautious about dependency updates :D