svthalia / concrexit

Thalia Website built on Django.
https://thalia.nu
Other
23 stars 11 forks source link

Bump the patch-updates group with 3 updates #3653

Closed dependabot[bot] closed 2 months ago

dependabot[bot] commented 3 months ago

Bumps the patch-updates group with 3 updates: django, boto3 and coverage.

Updates django from 5.0.2 to 5.0.3

Commits
  • 4b64d72 [5.0.x] Bumped version for 5.0.3 release.
  • 3394fc6 [5.0.x] Fixed CVE-2024-27351 -- Prevented potential ReDoS in Truncator.words().
  • 80761c3 [5.0.x] Fixed #35198 -- Fixed facet filters crash on querysets with no primar...
  • 24de811 [5.0.x] Fixed typo in docs/ref/contrib/admin/index.txt.
  • bf7fedc [5.0.x] Removed #django-geo IRC channel in docs.
  • a8de04f [5.0.x] Refs #34964 -- Doc'd that Q expression order is preserved.
  • b1f2833 [5.0.x] Added release date for 5.0.3, 4.2.11, and 3.2.25.
  • 5d9be66 [5.0.x] Removed distracting note from tutorial 4.
  • 69e5b13 [5.0.x] Fixed #35238 -- Fixed database serialization crash when base managers...
  • e72fdc8 [5.0.x] Fixed #35153 -- Added note about locale name notation to FORMAT_MODUL...
  • Additional commits viewable in compare view


Updates boto3 from 1.34.44 to 1.34.74

Changelog

Sourced from boto3's changelog.

1.34.74

  • api-change:b2bi: [botocore] Supporting new EDI X12 transaction sets for X12 versions 4010, 4030, and 5010.
  • api-change:codebuild: [botocore] Add new fleet status code for Reserved Capacity.
  • api-change:codeconnections: [botocore] Duplicating the CodeStar Connections service into the new, rebranded AWS CodeConnections service.
  • api-change:internetmonitor: [botocore] This release adds support to allow customers to track cross account monitors through ListMonitor, GetMonitor, ListHealthEvents, GetHealthEvent, StartQuery APIs.
  • api-change:iotwireless: [botocore] Add support for retrieving key historical and live metrics for LoRaWAN devices and gateways
  • api-change:marketplace-catalog: [botocore] This release enhances the ListEntities API to support ResaleAuthorizationId filter and sort for OfferEntity in the request and the addition of a ResaleAuthorizationId field in the response of OfferSummary.
  • api-change:neptune-graph: [botocore] Add the new API Start-Import-Task for Amazon Neptune Analytics.
  • api-change:sagemaker: [botocore] This release adds support for custom images for the CodeEditor App on SageMaker Studio

1.34.73

  • api-change:codecatalyst: [botocore] This release adds support for understanding pending changes to subscriptions by including two new response parameters for the GetSubscription API for Amazon CodeCatalyst.
  • api-change:compute-optimizer: [botocore] This release enables AWS Compute Optimizer to analyze and generate recommendations with a new customization preference, Memory Utilization.
  • api-change:ec2: [botocore] Amazon EC2 C7gd, M7gd and R7gd metal instances with up to 3.8 TB of local NVMe-based SSD block-level storage have up to 45% improved real-time NVMe storage performance than comparable Graviton2-based instances.
  • api-change:eks: [botocore] Add multiple customer error code to handle customer caused failure when managing EKS node groups
  • api-change:guardduty: [botocore] Add EC2 support for GuardDuty Runtime Monitoring auto management.
  • api-change:neptune-graph: [botocore] Update ImportTaskCancelled waiter to evaluate task state correctly and minor documentation changes.
  • api-change:oam: [botocore] This release adds support for sharing AWS::InternetMonitor::Monitor resources.
  • api-change:quicksight: [botocore] Amazon QuickSight: Adds support for setting up VPC Endpoint restrictions for accessing QuickSight Website.

1.34.72

  • api-change:batch: [botocore] This feature allows AWS Batch to support configuration of imagePullSecrets and allowPrivilegeEscalation for jobs running on EKS
  • api-change:bedrock-agent: [botocore] This changes introduces metadata documents statistics and also updates the documentation for bedrock agent.
  • api-change:bedrock-agent-runtime: [botocore] This release introduces filtering support on Retrieve and RetrieveAndGenerate APIs.
  • api-change:elasticache: [botocore] Added minimum capacity to Amazon ElastiCache Serverless. This feature allows customer to ensure minimum capacity even without current load
  • api-change:secretsmanager: [botocore] Documentation updates for Secrets Manager

1.34.71

  • api-change:bedrock-agent-runtime: [botocore] This release adds support to customize prompts sent through the RetrieveAndGenerate API in Agents for Amazon Bedrock.
  • api-change:ce: [botocore] Adds support for backfill of cost allocation tags, with new StartCostAllocationTagBackfill and ListCostAllocationTagBackfillHistory API.
  • api-change:ec2: [botocore] Documentation updates for Elastic Compute Cloud (EC2).
  • api-change:ecs: [botocore] This is a documentation update for Amazon ECS.
  • api-change:finspace: [botocore] Add new operation delete-kx-cluster-node and add status parameter to list-kx-cluster-node operation.

1.34.70

  • api-change:codebuild: [botocore] Supporting GitLab and GitLab Self Managed as source types in AWS CodeBuild.

... (truncated)

Commits
  • 419b25e Merge branch 'release-1.34.74'
  • f695484 Bumping version to 1.34.74
  • b94799a Add changelog entries from botocore
  • ae9e251 Merge branch 'release-1.34.73'
  • 07a49d6 Merge branch 'release-1.34.73' into develop
  • 7e51f58 Bumping version to 1.34.73
  • 32f4131 Add changelog entries from botocore
  • a286cf9 Merge branch 'release-1.34.72'
  • ea416ec Merge branch 'release-1.34.72' into develop
  • c03bfb8 Bumping version to 1.34.72
  • Additional commits viewable in compare view


Updates coverage from 7.4.3 to 7.4.4

Changelog

Sourced from coverage's changelog.

Version 7.4.4 — 2024-03-14

  • Fix: in some cases, even with [run] relative_files=True, a data file could be created with absolute path names. When combined with other relative data files, it was random whether the absolute file names would be made relative or not. If they weren't, then a file would be listed twice in reports, as detailed in issue 1752_. This is now fixed: absolute file names are always made relative when combining. Thanks to Bruno Rodrigues dos Santos for support.

  • Fix: the last case of a match/case statement had an incorrect message if the branch was missed. It said the pattern never matched, when actually the branch is missed if the last case always matched.

  • Fix: clicking a line number in the HTML report now positions more accurately.

  • Fix: the report:format setting was defined as a boolean, but should be a string. Thanks, Tanaydin Sirin <pull 1754_>_. It is also now documented on the :ref:configuration page <config_report_format>.

.. _issue 1752: nedbat/coveragepy#1752 .. _pull 1754: nedbat/coveragepy#1754

.. _changes_7-4-3:

Commits
  • bc5e2d7 docs: sample HTML for 7.4.4
  • 9b0008b docs: prep for 7.4.4
  • a536161 docs: thanks, Bruno Rodrigues dos Santos
  • e06e4f9 chore: make doc_upgrade
  • f30818e chore: make upgrade
  • 1b19799 fix: ensure absolute paths are relative when combined #1752
  • 1ef020d build: more cheats for convenient URLs
  • 3d57a07 docs: document the report:format setting
  • 8e30221 fix: correct the type of report:format in config.py (#1754)
  • 6289be8 refactor: use dataclasses, no namedtuple
  • Additional commits viewable in compare view


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore ` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore ` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore ` will remove the ignore condition of the specified dependency and ignore conditions
dependabot[bot] commented 2 months ago

Superseded by #3656.