sillsdev / TheCombine

This is a tool for supporting the rapid word collection workshop and post workshop clean-up
https://sillsdev.github.io/TheCombine/
MIT License
17 stars 13 forks source link

Bump pymongo from 4.7.2 to 4.8.0 in /maintenance #3210

Closed dependabot[bot] closed 2 days ago

dependabot[bot] commented 4 days ago

Bumps pymongo from 4.7.2 to 4.8.0.

Release notes

Sourced from pymongo's releases.

PyMongo 4.8.0

Changes in Version 4.8.0

PyMongo 4.8 brings a number of improvements including:

  • The handshake metadata for "os.name" on Windows has been simplified to "Windows" to improve import time.
  • The repr of bson.binary.Binary is now redacted when the subtype is SENSITIVE_SUBTYPE(8).
  • Secure Software Development Life Cycle automation for release process. GitHub Releases now include a Software Bill of Materials, and signature files corresponding to the distribution files released on PyPI.
  • Fixed a bug in change streams where both startAtOperationTime and resumeToken could be added to a retry attempt, which caused the retry to fail.
  • Fallback to stdlib ssl module when pyopenssl import fails with AttributeError.
  • Improved performance of MongoClient operations, especially when many operations are being run concurrently.

Unavoidable breaking changes

  • Since we are now using hatch as our build backend, we no longer have a usable setup.py file and require installation using pip. Attempts to invoke the setup.py file will raise an exception. Additionally, pip >= 21.3 is now required for editable installs.

Issues Resolved

See the PyMongo 4.8 release notes in JIRA for the list of resolved issues in this release.


Full Changelog: https://github.com/mongodb/mongo-python-driver/compare/4.7.1...4.8.0

PyMongo 4.7.3

Community notes: https://www.mongodb.com/community/forums/t/pymongo-4-7-3-released/283508

Changelog

Sourced from pymongo's changelog.

Changes in Version 4.8.0

.. warning:: PyMongo 4.8 drops support for Python 3.7 and PyPy 3.8: Python 3.8+ or PyPy 3.9+ is now required.

PyMongo 4.8 brings a number of improvements including:

  • The handshake metadata for "os.name" on Windows has been simplified to "Windows" to improve import time.
  • The repr of bson.binary.Binary is now redacted when the subtype is SENSITIVE_SUBTYPE(8).
  • Secure Software Development Life Cycle automation for release process. GitHub Releases now include a Software Bill of Materials, and signature files corresponding to the distribution files released on PyPI.
  • Fixed a bug in change streams where both startAtOperationTime and resumeToken could be added to a retry attempt, which caused the retry to fail.
  • Fallback to stdlib ssl module when pyopenssl import fails with AttributeError.
  • Improved performance of MongoClient operations, especially when many operations are being run concurrently.

Unavoidable breaking changes ............................

  • Since we are now using hatch as our build backend, we no longer have a usable setup.py file and require installation using pip. Attempts to invoke the setup.py file will raise an exception. Additionally, pip >= 21.3 is now required for editable installs.

Issues Resolved ...............

See the PyMongo 4.8 release notes in JIRA_ for the list of resolved issues in this release.

.. _PyMongo 4.8 release notes in JIRA: https://jira.mongodb.org/secure/ReleaseNote.jspa?projectId=10004&version=37057

Changes in Version 4.7.3

Version 4.7.3 has further fixes for lazily loading modules.

  • Use deferred imports instead of importlib lazy module loading.
  • Improve import time on Windows.
  • Reduce verbosity of "Waiting for suitable server to become available" log message from info to debug.

Issues Resolved ...............

See the PyMongo 4.7.3 release notes in JIRA_ for the list of resolved issues in this release.

.. _PyMongo 4.7.3 release notes in JIRA: https://jira.mongodb.org/secure/ReleaseNote.jspa?projectId=10004&version=39865

Commits
  • d504d14 BUMP 4.8.0
  • ab9e748 PYTHON-4515 Improve 4.8 changelog (#1713)
  • 2fdf707 PYTHON-4507 [v4.8] pip>=21.3 is required for editable installs (#1711)
  • 5139adb PYTHON-4515 [v4.8] Update changelog for 4.8 (#1710)
  • b3c55ff BUMP 4.8.0.dev1
  • 113b9da BUMP 4.8.0b0
  • 585411a PYTHON-4388 [v4.8] Fix security events handling in release workflow again (#1...
  • f1f4938 PYTHON-4388 [v4.8] Fix permissions in release workflow (#1708)
  • a0d232b PYTHON-4499 [v4.8] Log pymongo.connection at DEBUG without EventListeners (#1...
  • 14ed482 PYTHON-4388 [v4.8] Fix dist handling in SSDLC workflow (#1706)
  • Additional commits viewable in compare view


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

This change is Reviewable

github-actions[bot] commented 4 days ago

⚠️ Commit Message Format Issues ⚠️

commit 1cbc44ad73: 3: B1 Line exceeds max length (84>80): "Bumps pymongo from 4.7.2 to 4.8.0." 5: B1 Line exceeds max length (91>80): "- Changelog" 6: B1 Line exceeds max length (81>80): "- Commits"

codecov[bot] commented 4 days ago

Codecov Report

All modified and coverable lines are covered by tests :white_check_mark:

Project coverage is 75.12%. Comparing base (565a7f7) to head (1cbc44a).

Additional details and impacted files ```diff @@ Coverage Diff @@ ## master #3210 +/- ## ========================================== + Coverage 75.08% 75.12% +0.03% ========================================== Files 275 275 Lines 10431 10431 Branches 1237 1237 ========================================== + Hits 7832 7836 +4 + Misses 2239 2236 -3 + Partials 360 359 -1 ``` | [Flag](https://app.codecov.io/gh/sillsdev/TheCombine/pull/3210/flags?src=pr&el=flags&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=sillsdev) | Coverage Δ | | |---|---|---| | [backend](https://app.codecov.io/gh/sillsdev/TheCombine/pull/3210/flags?src=pr&el=flag&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=sillsdev) | `84.14% <ø> (+0.08%)` | :arrow_up: | | [frontend](https://app.codecov.io/gh/sillsdev/TheCombine/pull/3210/flags?src=pr&el=flag&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=sillsdev) | `67.05% <ø> (ø)` | | Flags with carried forward coverage won't be shown. [Click here](https://docs.codecov.io/docs/carryforward-flags?utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=sillsdev#carryforward-flags-in-the-pull-request-comment) to find out more.

:umbrella: View full report in Codecov by Sentry.
:loudspeaker: Have feedback on the report? Share it here.

dependabot[bot] commented 2 days ago

Looks like pymongo is up-to-date now, so this is no longer needed.