Bump the python group across 1 directory with 6 updates #1219

dependabot · 2024-12-24T13:43:39Z

Bumps the python group with 6 updates in the / directory:

Package	From	To
click	`8.1.7`	`8.1.8`
pylint	`3.3.2`	`3.3.3`
certifi	`2024.8.30`	`2024.12.14`
jinja2	`3.1.4`	`3.1.5`
mypy	`1.13.0`	`1.14.0`
urllib3	`2.2.3`	`2.3.0`

Updates click from 8.1.7 to 8.1.8

Release notes

Sourced from click's releases.

8.1.8

This is the Click 8.1.8 fix release, which fixes bugs but does not otherwise change behavior and should not result in breaking changes compared to the latest feature release.

PyPI: https://pypi.org/project/click/8.1.8/ Changes: https://click.palletsprojects.com/en/stable/changes/#version-8-1-8 Milestone https://github.com/pallets/click/milestones/23?closed=1

Fix an issue with type hints for click.open_file(). #2717

Fix issue where error message for invalid click.Path displays on multiple lines. #2697

Fixed issue that prevented a default value of "" from being displayed in the help for an option. #2500

The test runner handles stripping color consistently on Windows. #2705

Show correct value for flag default when using default_map. #2632

Fix click.echo(color=...) passing color to coloroma so it can be forced on Windows. #2606.

More robust bash version check, fixing problem on Windows with git-bash. #2638

Cache the help option generated by the help_option_names setting to respect its eagerness. #2811

Replace uses of os.system with subprocess.Popen. #1476

Exceptions generated during a command will use the context's color setting when being displayed. #2193

Error message when defining option with invalid name is more descriptive. #2452

Refactor code generating default --help option to deduplicate code. #2563

Test CLIRunner resets patched _compat.should_strip_ansi. #2732

Changelog

Sourced from click's changelog.

Version 8.1.8

Unreleased

Fix an issue with type hints for click.open_file(). :issue:2717

Fix issue where error message for invalid click.Path displays on multiple lines. :issue:2697

Fixed issue that prevented a default value of "" from being displayed in the help for an option. :issue:2500

The test runner handles stripping color consistently on Windows. :issue:2705

Show correct value for flag default when using default_map. :issue:2632

Fix click.echo(color=...) passing color to coloroma so it can be forced on Windows. :issue:2606.

Commits

934813e release version 8.1.8
c23223b Add links to third-party projects enhancing Click (#2815)
822d4fd Add links to third-party projects
8e7bed0 Break up arguments section (#2586)
3241541 Remove some typing hints.
bed0377 remove test pypi
6534590 update dev dependencies
b1e392e fix typos
fdc6b02 Fix missing reset in isolation function (#2733)
ffd43e9 Fixed missing reset on _compat.should_strip_ansi.
Additional commits viewable in compare view

Updates pylint from 3.3.2 to 3.3.3

Commits

c28580b Bump pylint to 3.3.3, update changelog
1f9b947 Bump astroid from 3.3.5 to 3.3.8 (#10125) (#10155)
96d1303 Bump actions/cache from 4.1.2 to 4.2.0 (#10123) (#10154)
a7202b1 Fix Python 3.12 generic type syntax (#10135) (#10146)
90cb29d [mypy] Use type-setuptools instead of types-pkg-resources (#10120)
9955701 Fix 'use-implicit-booleaness' wrongly emitted for generators. (#10107) (#10109)
See full diff in compare view

Updates certifi from 2024.8.30 to 2024.12.14

Commits

4ba3900 2024.12.14 (#329)
9164660 Bump pypa/gh-action-pypi-publish from 1.12.2 to 1.12.3 (#331)
3dc3651 Bump pypa/gh-action-pypi-publish from 1.11.0 to 1.12.2 (#328)
c5bf18d Bump pypa/gh-action-pypi-publish from 1.10.3 to 1.11.0 (#327)
b908391 Bump actions/setup-python from 5.2.0 to 5.3.0 (#326)
bc26b41 Bump actions/checkout from 4.2.1 to 4.2.2 (#325)
57afc22 Bump actions/upload-artifact from 4.4.1 to 4.4.3 (#323)
a495091 test against 3.13 final
62f8144 Added 3.13 classifier (#322)
94d23a0 Bump pypa/gh-action-pypi-publish from 1.10.2 to 1.10.3 (#321)
Additional commits viewable in compare view

Updates jinja2 from 3.1.4 to 3.1.5

Release notes

Sourced from jinja2's releases.

3.1.5

This is the Jinja 3.1.5 security fix release, which fixes security issues and bugs but does not otherwise change behavior and should not result in breaking changes compared to the latest feature release.

PyPI: https://pypi.org/project/Jinja2/3.1.5/ Changes: https://jinja.palletsprojects.com/changes/#version-3-1-5 Milestone: https://github.com/pallets/jinja/milestone/16?closed=1

The sandboxed environment handles indirect calls to str.format, such as by passing a stored reference to a filter that calls its argument. GHSA-q2x7-8rv6-6q7h

Escape template name before formatting it into error messages, to avoid issues with names that contain f-string syntax. #1792, GHSA-gmj6-6f8f-6699

Sandbox does not allow clear and pop on known mutable sequence types. #2032

Calling sync render for an async template uses asyncio.run. #1952

Avoid unclosed auto_aiter warnings. #1960

Return an aclose-able AsyncGenerator from Template.generate_async. #1960

Avoid leaving root_render_func() unclosed in Template.generate_async. #1960

Avoid leaving async generators unclosed in blocks, includes and extends. #1960

The runtime uses the correct concat function for the current environment when calling block references. #1701

Make |unique async-aware, allowing it to be used after another async-aware filter. #1781

|int filter handles OverflowError from scientific notation. #1921

Make compiling deterministic for tuple unpacking in a {% set ... %} call. #2021

Fix dunder protocol (copy/pickle/etc) interaction with Undefined objects. #2025

Fix copy/pickle support for the internal missing object. #2027

Environment.overlay(enable_async) is applied correctly. #2061

The error message from FileSystemLoader includes the paths that were searched. #1661

PackageLoader shows a clearer error message when the package does not contain the templates directory. #1705

Improve annotations for methods returning copies. #1880

urlize does not add mailto: to values like @a@b. #1870

Tests decorated with @pass_context can be used with the |select filter. #1624

Using set for multiple assignment (a, b = 1, 2) does not fail when the target is a namespace attribute. #1413

Using set in all branches of {% if %}{% elif %}{% else %} blocks does not cause the variable to be considered initially undefined. #1253

Changelog

Sourced from jinja2's changelog.

Version 3.1.5

Released 2024-12-21

The sandboxed environment handles indirect calls to str.format, such as by passing a stored reference to a filter that calls its argument. :ghsa:q2x7-8rv6-6q7h

Escape template name before formatting it into error messages, to avoid issues with names that contain f-string syntax. :issue:1792, :ghsa:gmj6-6f8f-6699

Sandbox does not allow clear and pop on known mutable sequence types. :issue:2032

Calling sync render for an async template uses asyncio.run. :pr:1952

Avoid unclosed auto_aiter warnings. :pr:1960

Return an aclose-able AsyncGenerator from Template.generate_async. :pr:1960

Avoid leaving root_render_func() unclosed in Template.generate_async. :pr:1960

Avoid leaving async generators unclosed in blocks, includes and extends. :pr:1960

The runtime uses the correct concat function for the current environment when calling block references. :issue:1701

Make |unique async-aware, allowing it to be used after another async-aware filter. :issue:1781

|int filter handles OverflowError from scientific notation. :issue:1921

Make compiling deterministic for tuple unpacking in a {% set ... %} call. :issue:2021

Fix dunder protocol (copy/pickle/etc) interaction with Undefined objects. :issue:2025

Fix copy/pickle support for the internal missing object. :issue:2027

Environment.overlay(enable_async) is applied correctly. :pr:2061

The error message from FileSystemLoader includes the paths that were searched. :issue:1661

PackageLoader shows a clearer error message when the package does not contain the templates directory. :issue:1705

Improve annotations for methods returning copies. :pr:1880

urlize does not add mailto: to values like @a@b. :pr:1870

Tests decorated with @pass_context`` can be used with the ``|select`` filter. :issue:1624`

Using set for multiple assignment (a, b = 1, 2) does not fail when the target is a namespace attribute. :issue:1413

Using set in all branches of {% if %}{% elif %}{% else %} blocks does not cause the variable to be considered initially undefined. :issue:1253

Commits

877f6e5 release version 3.1.5
8d58859 remove test pypi
eda8fe8 update dev dependencies
c8fdce1 Fix bug involving calling set on a template parameter within all branches of ...
66587ce Fix bug where set would sometimes fail within if
fbc3a69 Add support for namespaces in tuple parsing (#1664)
b8f4831 more comments about nsref assignment
ee83219 Add support for namespaces in tuple assignment
1d55cdd Triple quotes in docs (#2064)
8a8eafc edit block assignment section
Additional commits viewable in compare view

Updates mypy from 1.13.0 to 1.14.0

Changelog

Sourced from mypy's changelog.

Mypy Release Notes

Next release

...

Mypy 1.14

We’ve just uploaded mypy 1.14 to the Python Package Index (PyPI). Mypy is a static type checker for Python. This release includes new features and bug fixes. You can install it as follows:
python3 -m pip install -U mypy
You can read the full documentation for this release on Read the Docs.

Change to Enum Membership Semantics

As per the updated typing specification for enums, enum members must be left unannotated.
class Pet(Enum):
    CAT = 1  # Member attribute
    DOG = 2  # Member attribute
# New error: Enum members must be left unannotated
WOLF: int = 3
species: str  # Considered a non-member attribute
In particular, the specification change can result in issues in type stubs (.pyi files), since historically it was common to leave the value absent:
# In a type stub (.pyi file)
class Pet(Enum):
# Change in semantics: previously considered members,
# now non-member attributes
CAT: int
DOG: int
# Mypy will now issue a warning if it detects this
# situation in type stubs:
# &gt; Detected enum &quot;Pet&quot; in a type stub with zero
# &gt; members. There is a chance this is due to a recent
# &gt; change in the semantics of enum membership. If so,
# &gt; use `member = value` to mark an enum member,

</tr></table>

... (truncated)

Commits

6f37859 Remove +dev from version for release 1.14
5a6a754 Minor updates to 1.14 changelog (#18310)
9772d48 Update changelog for release 1.14 (#18301)
92473c8 Warn about --follow-untyped-imports (#18249)
e6ce8be PEP 702 (@deprecated): descriptors (#18090)
5082a22 [mypyc] Document optimized bytes ops and additional str ops (#18242)
ee19ea7 [mypyc] Add primitives and specialization for ord() (#18240)
cc45bec [mypyc] Make exception type check in assertRaises test helper precise (#18241)
f51090d Make "deprecated" Note a standard Error, disabled by default (#18192)
242873a Implement flag to allow typechecking of untyped modules (#17712)
Additional commits viewable in compare view

Updates urllib3 from 2.2.3 to 2.3.0

Release notes

Sourced from urllib3's releases.

2.3.0

🚀 urllib3 is fundraising for HTTP/2 support

urllib3 is raising ~$40,000 USD to release HTTP/2 support and ensure long-term sustainable maintenance of the project after a sharp decline in financial support for 2023. If your company or organization uses Python and would benefit from HTTP/2 support in Requests, pip, cloud SDKs, and thousands of other projects please consider contributing financially to ensure HTTP/2 support is developed sustainably and maintained for the long-haul.

Thank you for your support.

Features

Added HTTPResponse.shutdown() to stop any ongoing or future reads for a specific response. It calls shutdown(SHUT_RD) on the underlying socket. This feature was sponsored by LaunchDarkly. (urllib3/urllib3#2868)

Added support for JavaScript Promise Integration on Emscripten. This enables more efficient WebAssembly requests and streaming, and makes it possible to use in Node.js if you launch it as node --experimental-wasm-stack-switching. (urllib3/urllib3#3400)

Added the proxy_is_tunneling property to HTTPConnection and HTTPSConnection. (urllib3/urllib3#3285)

Added pickling support to NewConnectionError and NameResolutionError. (urllib3/urllib3#3480)

Bugfixes

Fixed an issue in debug logs where the HTTP version was rendering as "HTTP/11" instead of "HTTP/1.1". (urllib3/urllib3#3489)

Deprecations and Removals

Removed support for Python 3.8. (urllib3/urllib3#3492)

Full Changelog: urllib3/urllib3@2.2.3...2.3.0

Changelog

Sourced from urllib3's changelog.

2.3.0 (2024-12-22)

Features

Added HTTPResponse.shutdown() to stop any ongoing or future reads for a specific response. It calls shutdown(SHUT_RD) on the underlying socket. This feature was sponsored by LaunchDarkly <https://opencollective.com/urllib3/contributions/815307>. ([#2868](https://github.com/urllib3/urllib3/issues/2868) <https://github.com/urllib3/urllib3/issues/2868>)

Added support for JavaScript Promise Integration on Emscripten. This enables more efficient WebAssembly requests and streaming, and makes it possible to use in Node.js if you launch it as node --experimental-wasm-stack-switching. ([#3400](https://github.com/urllib3/urllib3/issues/3400) <https://github.com/urllib3/urllib3/issues/3400>__)

Added the proxy_is_tunneling property to HTTPConnection and HTTPSConnection. ([#3285](https://github.com/urllib3/urllib3/issues/3285) <https://github.com/urllib3/urllib3/issues/3285>__)

Added pickling support to NewConnectionError and NameResolutionError. ([#3480](https://github.com/urllib3/urllib3/issues/3480) <https://github.com/urllib3/urllib3/issues/3480>__)

Bugfixes

Fixed an issue in debug logs where the HTTP version was rendering as "HTTP/11" instead of "HTTP/1.1". ([#3489](https://github.com/urllib3/urllib3/issues/3489) <https://github.com/urllib3/urllib3/issues/3489>__)

Deprecations and Removals

Removed support for Python 3.8. ([#3492](https://github.com/urllib3/urllib3/issues/3492) <https://github.com/urllib3/urllib3/issues/3492>__)

Commits

2f68c53 Release 2.3.0
f7bcf69 Add HTTPResponse.shutdown() to stop blocking reads (#3527)
e942249 Update .readthedocs.yml addressing a deprecation (#3534)
905549d Upgrade Python pre-commit tools (#3529)
716d834 Fix PyPI publish with Core metadata 2.4 (#3531)
7ab935c Address zizmor issues
181357e Bump Quart to fix CI (#3524)
0e7e0df Start testing with Python 3.14
d67d09b Bump mypy version
20032ec Drop unneeded dependency pins and a warning filter
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the python group with 6 updates in the / directory: | Package | From | To | | --- | --- | --- | | [click](https://github.com/pallets/click) | `8.1.7` | `8.1.8` | | [pylint](https://github.com/pylint-dev/pylint) | `3.3.2` | `3.3.3` | | [certifi](https://github.com/certifi/python-certifi) | `2024.8.30` | `2024.12.14` | | [jinja2](https://github.com/pallets/jinja) | `3.1.4` | `3.1.5` | | [mypy](https://github.com/python/mypy) | `1.13.0` | `1.14.0` | | [urllib3](https://github.com/urllib3/urllib3) | `2.2.3` | `2.3.0` | Updates `click` from 8.1.7 to 8.1.8 - [Release notes](https://github.com/pallets/click/releases) - [Changelog](https://github.com/pallets/click/blob/main/CHANGES.rst) - [Commits](pallets/click@8.1.7...8.1.8) Updates `pylint` from 3.3.2 to 3.3.3 - [Release notes](https://github.com/pylint-dev/pylint/releases) - [Commits](pylint-dev/pylint@v3.3.2...v3.3.3) Updates `certifi` from 2024.8.30 to 2024.12.14 - [Commits](certifi/python-certifi@2024.08.30...2024.12.14) Updates `jinja2` from 3.1.4 to 3.1.5 - [Release notes](https://github.com/pallets/jinja/releases) - [Changelog](https://github.com/pallets/jinja/blob/main/CHANGES.rst) - [Commits](pallets/jinja@3.1.4...3.1.5) Updates `mypy` from 1.13.0 to 1.14.0 - [Changelog](https://github.com/python/mypy/blob/master/CHANGELOG.md) - [Commits](python/mypy@v1.13.0...v1.14.0) Updates `urllib3` from 2.2.3 to 2.3.0 - [Release notes](https://github.com/urllib3/urllib3/releases) - [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst) - [Commits](urllib3/urllib3@2.2.3...2.3.0) --- updated-dependencies: - dependency-name: click dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python - dependency-name: pylint dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python - dependency-name: certifi dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python - dependency-name: jinja2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python - dependency-name: mypy dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python - dependency-name: urllib3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python ... Signed-off-by: dependabot[bot] <[email protected]>

codecov · 2024-12-24T13:44:57Z

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 76.91%. Comparing base (7fc8c61) to head (3d4d3e0).

Additional details and impacted files

@@           Coverage Diff           @@
##           master    #1219   +/-   ##
=======================================
  Coverage   76.91%   76.91%           
=======================================
  Files          20       20           
  Lines        1308     1308           
=======================================
  Hits         1006     1006           
  Misses        302      302

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Dec 24, 2024

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump the python group across 1 directory with 6 updates #1219

Bump the python group across 1 directory with 6 updates #1219

dependabot bot commented on behalf of github Dec 24, 2024 •

edited

Loading

codecov bot commented Dec 24, 2024

Bump the python group across 1 directory with 6 updates #1219

Are you sure you want to change the base?

Bump the python group across 1 directory with 6 updates #1219

Conversation

dependabot bot commented on behalf of github Dec 24, 2024 • edited Loading

8.1.8

Version 8.1.8

3.1.5

Version 3.1.5

Mypy Release Notes

Next release

Mypy 1.14

Change to Enum Membership Semantics

2.3.0

🚀 urllib3 is fundraising for HTTP/2 support

Features

Bugfixes

Deprecations and Removals

2.3.0 (2024-12-22)

Features

Bugfixes

Deprecations and Removals

codecov bot commented Dec 24, 2024

Codecov Report

dependabot bot commented on behalf of github Dec 24, 2024 •

edited

Loading