Upgrade: Bump the regression group in /regression_runner with 6 updates

[dependabot]

Bumps the regression group in /regression_runner with 6 updates:

Package	From	To
aiohttp	3.8.5	3.8.6
async-timeout	4.0.2	4.0.3
chardet	5.1.0	5.2.0
click	8.1.6	8.1.7
coverage	7.2.7	7.3.2
typing-extensions	4.7.1	4.8.0

Updates aiohttp from 3.8.5 to 3.8.6

Release notes

Sourced from aiohttp's releases.

3.8.6

Security bugfixes

• Upgraded the vendored copy of llhttp_ to v9.1.3 -- by :user:Dreamsorcerer

  Thanks to :user:kenballus for reporting this, see GHSA-pjjw-qhg8-p2p9.

  .. _llhttp: https://llhttp.org

  (#7647)

• Updated Python parser to comply with RFCs 9110/9112 -- by :user:Dreamorcerer

  Thanks to :user:kenballus for reporting this, see GHSA-gfw2-4jvh-wgfg.

  (#7663)

Deprecation

• Added fallback_charset_resolver parameter in ClientSession to allow a user-supplied character set detection function.

  Character set detection will no longer be included in 3.9 as a default. If this feature is needed, please use fallback_charset_resolver <https://docs.aiohttp.org/en/stable/client_advanced.html#character-set-detection>_.

  (#7561)

Features

• Enabled lenient response parsing for more flexible parsing in the client (this should resolve some regressions when dealing with badly formatted HTTP responses). -- by :user:Dreamsorcerer

  (#7490)

Bugfixes

• Fixed PermissionError when .netrc is unreadable due to permissions.

  (#7237)

... (truncated)

Changelog

Sourced from aiohttp's changelog.

3.8.6 (2023-10-07)

Security bugfixes

• Upgraded the vendored copy of llhttp_ to v9.1.3 -- by :user:Dreamsorcerer

  Thanks to :user:kenballus for reporting this, see GHSA-pjjw-qhg8-p2p9.

  .. _llhttp: https://llhttp.org

  [#7647](https://github.com/aio-libs/aiohttp/issues/7647) <https://github.com/aio-libs/aiohttp/issues/7647>_

• Updated Python parser to comply with RFCs 9110/9112 -- by :user:Dreamorcerer

  Thanks to :user:kenballus for reporting this, see GHSA-gfw2-4jvh-wgfg.

  [#7663](https://github.com/aio-libs/aiohttp/issues/7663) <https://github.com/aio-libs/aiohttp/issues/7663>_

Deprecation

• Added fallback_charset_resolver parameter in ClientSession to allow a user-supplied character set detection function.

  Character set detection will no longer be included in 3.9 as a default. If this feature is needed, please use fallback_charset_resolver <https://docs.aiohttp.org/en/stable/client_advanced.html#character-set-detection>_.

  [#7561](https://github.com/aio-libs/aiohttp/issues/7561) <https://github.com/aio-libs/aiohttp/issues/7561>_

Features

• Enabled lenient response parsing for more flexible parsing in the client (this should resolve some regressions when dealing with badly formatted HTTP responses). -- by :user:Dreamsorcerer

  [#7490](https://github.com/aio-libs/aiohttp/issues/7490) <https://github.com/aio-libs/aiohttp/issues/7490>_

Bugfixes

• Fixed PermissionError when .netrc is unreadable due to permissions.

... (truncated)

Commits

• 996de26 Release v3.8.6 (#7668)
• 8c128d4 [PR #7651/45f98b7d backport][3.8] Fix BadStatusLine message (#7666)
• 89b7df1 Allow lax response parsing on Py parser (#7663) (#7664)
• d5c12ba [PR #7661/85713a48 backport][3.8] Update Python parser for RFCs 9110/9112 (#7...
• 8a3977a [PR #7272/b2a7983a backport][3.8] Fix Read The Docs config (#7650)
• bcc416e [PR #7647/1303350e backport][3.8] Upgrade to llhttp 9.1.3 (#7648)
• b30c0cd Remove chardet/charset-normalizer. (#7589)
• 5946c74 CookieJar - return 'best-match' and not LIFO (#7577) (#7588)
• 8c4ec62 [PR #7518/8bd42e74 backport][3.8] Fix GunicornWebWorker max_requests_jitter n...
• a0d234d Use lenient headers for response parser (#7490) (#7492)
• Additional commits viewable in compare view

Updates async-timeout from 4.0.2 to 4.0.3

Release notes

Sourced from async-timeout's releases.

4.0.3

• Fixed compatibility with asyncio.timeout() on Python 3.11+.
• Added support for Python 3.11.
• Dropped support for Python 3.6.

Changelog

Sourced from async-timeout's changelog.

4.0.3 (2023-08-10)

• Fixed compatibility with asyncio.timeout() on Python 3.11+.
• Added support for Python 3.11.
• Dropped support for Python 3.6.

Commits

• a489744 Release 4.0.3 (#364)
• 5e3a4f0 Bump docutils from 0.19 to 0.20.1 (#369)
• 6a5964b Bump pytest-cov from 4.0.0 to 4.1.0 (#365)
• fcbeb65 Bump mypy from 1.2.0 to 1.4.1 (#368)
• 5eeffae Bump pytest from 7.3.1 to 7.4.0 (#366)
• 8ec8cc0 Bump pytest-asyncio from 0.21.0 to 0.21.1 (#367)
• 7290654 Bump pytest-asyncio from 0.20.3 to 0.21.0 (#354)
• 9f07afa Mention import at least once in the readme (#361)
• e1c8827 Bump pytest from 7.2.1 to 7.3.1 (#360)
• 211a9bf Bump mypy from 0.991 to 1.2.0 (#358)
• Additional commits viewable in compare view

Updates chardet from 5.1.0 to 5.2.0

Release notes

Sourced from chardet's releases.

chardet 5.2.0

Adds support for running chardet CLI via python -m chardet (0e9b7bc20366163efcc221281201baff4100fe19, @​dan-blanchard)

Commits

• 78250d9 Bump version to 5.2.0
• 0e9b7bc Add main module to support python -m chardet
• 0649ffe Bump version to 5.2.0dev0
• See full diff in compare view

Updates click from 8.1.6 to 8.1.7

Release notes

Sourced from click's releases.

8.1.7

This is a fix release for the 8.1.x feature branch.

• Changes: https://click.palletsprojects.com/en/8.1.x/changes/#version-8-1-7
• Milestone: https://github.com/pallets/click/milestone/22?closed=1

Changelog

Sourced from click's changelog.

Version 8.1.7

Released 2023-08-17

• Fix issue with regex flags in shell completion. :issue:2581
• Bash version detection issues a warning instead of an error. :issue:2574
• Fix issue with completion script for Fish shell. :issue:2567

Commits

• 874ca2b release version 8.1.7
• 6e1f6d3 completion(fish): add back ; as line endings in fish script (#2570)
• a955c77 update fish enabling script
• 3c1529e add back semicolons in fish script
• a260ca6 Replace bash shell completion version error with warning (#2576)
• d9db70c bash version support shows warning instead of error
• 22b9b1c Fix incorrect passing of flags to re.sub (#2581)
• d69d210 fix flake8 finding
• af2da1e Fix incorrect passing of flags to re.sub
• bb6a872 start version 8.1.7
• Additional commits viewable in compare view

Updates coverage from 7.2.7 to 7.3.2

Changelog

Sourced from coverage's changelog.

Version 7.3.2 — 2023-10-02

• The coverage lcov command ignored the [report] exclude_lines and [report] exclude_also settings (issue 1684). This is now fixed, thanks Jacqueline Lee <pull 1685_>.

• Sometimes SQLite will create journal files alongside the coverage.py database files. These are ephemeral, but could be mistakenly included when combining data files. Now they are always ignored, fixing issue 1605_. Thanks to Brad Smith for suggesting fixes and providing detailed debugging.

• On Python 3.12+, we now disable SQLite writing journal files, which should be a little faster.

• The new 3.12 soft keyword type is properly bolded in HTML reports.

• Removed the "fullcoverage" feature used by CPython to measure the coverage of early-imported standard library modules. CPython stopped using it <88054_>_ in 2021, and it stopped working completely in Python 3.13.

.. _issue 1605: nedbat/coveragepy#1605 .. _issue 1684: nedbat/coveragepy#1684 .. _pull 1685: nedbat/coveragepy#1685 .. _88054: python/cpython#88054

.. _changes_7-3-1:

Version 7.3.1 — 2023-09-06

• The semantics of stars in file patterns has been clarified in the docs. A leading or trailing star matches any number of path components, like a double star would. This is different than the behavior of a star in the middle of a pattern. This discrepancy was identified by Sviatoslav Sydorenko <starbad_>, who provided patient detailed diagnosis <pull 1650_> and graciously agreed to a pragmatic resolution.

• The API docs were missing from the last version. They are now restored <apidocs_>_.

.. _apidocs: https://coverage.readthedocs.io/en/latest/api_coverage.html .. _starbad: nedbat/coveragepy#1407 .. _pull 1650: nedbat/coveragepy#1650

.. _changes_7-3-0:

Version 7.3.0 — 2023-08-12

... (truncated)

Commits

• a316513 build: fix the pypy wheel arguments
• 7ec2c62 docs: sample HTML for 7.3.2
• ffd954f docs: prep for 7.3.2
• 1ea3907 refactor: don't access frame structs directly
• 7b8dec9 feat!: remove fullcoverage, it doesn't work in 3.13
• 1040bce refactor: remove unused interned strings
• 9ab9e0c fix: 3.12 soft keyword type is bolded in HTML
• 8624ce9 fix: really turn off SQLite journal files on 3.12+
• 604aafa chore: make upgrade
• 7c25ba0 fix: don't combine journal files. #1605
• Additional commits viewable in compare view

Updates typing-extensions from 4.7.1 to 4.8.0

Release notes

Sourced from typing-extensions's releases.

4.8.0

Changes since 4.7.1:

• Add typing_extensions.Doc, as proposed by PEP 727. Patch by Sebastián Ramírez.
• Drop support for Python 3.7 (including PyPy-3.7). Patch by Alex Waygood.
• Fix bug where get_original_bases() would return incorrect results when called on a concrete subclass of a generic class. Patch by Alex Waygood (backporting python/cpython#107584, by James Hilton-Balfe).
• Fix bug where ParamSpec(default=...) would raise a TypeError on Python versions <3.11. Patch by James Hilton-Balfe

No changes since 4.8.0rc1.

4.8.0rc1

• Add typing_extensions.Doc, as proposed by PEP 727. Patch by Sebastián Ramírez.
• Drop support for Python 3.7 (including PyPy-3.7). Patch by Alex Waygood.
• Fix bug where get_original_bases() would return incorrect results when called on a concrete subclass of a generic class. Patch by Alex Waygood (backporting python/cpython#107584, by James Hilton-Balfe).
• Fix bug where ParamSpec(default=...) would raise a TypeError on Python versions <3.11. Patch by James Hilton-Balfe

Changelog

Sourced from typing-extensions's changelog.

Release 4.8.0 (September 17, 2023)

No changes since 4.8.0rc1.

Release 4.8.0rc1 (September 7, 2023)

• Add typing_extensions.Doc, as proposed by PEP 727. Patch by Sebastián Ramírez.
• Drop support for Python 3.7 (including PyPy-3.7). Patch by Alex Waygood.
• Fix bug where get_original_bases() would return incorrect results when called on a concrete subclass of a generic class. Patch by Alex Waygood (backporting python/cpython#107584, by James Hilton-Balfe).
• Fix bug where ParamSpec(default=...) would raise a TypeError on Python versions <3.11. Patch by James Hilton-Balfe

Commits

• c17c499 Prepare release 4.8.0 (#283)
• df9e322 Run tests on py312 for more third-party projects (#281)
• 7e29499 Release 4.8.0rc1 (#280)
• ca2a739 Add Doc from PEP 727: https://peps.python.org/pep-0727/ (#277)
• 13c9484 Fix ParamSpec ellipsis default for <3.10 (#279)
• 4705e74 Improve documentation (#278)
• 99fa708 Backport CPython PR 107584 (#275)
• 688fbd2 Revert "Skip running cattrs tests on PyPy (#272)" (#273)
• 8dfa0a5 Skip running cattrs tests on PyPy (#272)
• 7bb3f3f Fix third-party workflow (#269)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.