Update Mend: high confidence minor and patch dependency updates #23
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
~=3.0.1
->~=3.4.2
~=0.6.0
->~=0.7.1
~=7.3.1
->~=7.4.4
~=2.31.0
->~=2.32.3
~=69.0.3
->~=69.5.1
~=1.16.0
->~=1.17.0
~=0.4.4
->~=0.5.3
~=2.1.0
->~=2.4.0
Release Notes
jawah/charset_normalizer (charset-normalizer)
v3.4.2
Compare Source
Fixed
argparse.FileType
by backporting the target class into the package. (#591)Changed
v3.4.1
Compare Source
Changed
pyproject.toml
instead ofsetup.cfg
using setuptools as the build backend.Added
Removed
build-requirements.txt
as per usingpyproject.toml
native build configuration.bin/integration.py
andbin/serve.py
in favor of downstream integration test (see noxfile).setup.cfg
in favor ofpyproject.toml
metadata configuration.utils.range_scan
function.Fixed
utf_8
instead of preferredutf-8
. (#572)v3.4.0
Compare Source
Added
--no-preemptive
in the CLI to prevent the detector to search for hints.Fixed
v3.3.2
Compare Source
Fixed
Added
v3.3.1
Compare Source
Changed
v3.3.0
Compare Source
Added
python -m charset_normalizer.cli
orpython -m charset_normalizer
encoding.aliases
as they have no alias (#323)Removed
Changed
Fixed
v3.2.0
Compare Source
Changed
from_path
no longer enforcePathLike
as its first argumentAdded
is_binary
that relies on main capabilities, and optimized to detect binariesenable_fallback
argument throughoutfrom_bytes
,from_path
, andfrom_fp
that allow a deeper control over the detection (default True)Fixed
v3.1.0
Compare Source
Added
should_rename_legacy
for legacy functiondetect
and disregard any new arguments without errors (PR #262)Removed
Changed
pytest-dev/pytest (pytest)
v7.4.4
: pytest 7.4.4 (2023-12-31)Compare Source
Bug Fixes
sys.stderr
{.interpreted-text role="data"} andsys.__stderr__
{.interpreted-text role="data"} might already be closed whenfaulthandler
{.interpreted-text role="ref"} is tearing down.__iter__
methods. Now they are treated un-iterable instead.Improved Documentation
--junitxml
with--junit-xml
and--collectonly
with--collect-only
.v7.4.3
: pytest 7.4.3 (2023-10-24)Compare Source
Bug Fixes
#10447: Markers are now considered in the reverse mro order to ensure base class markers are considered first -- this resolves a regression.
#11239: Fixed
:=
in asserts impacting unrelated test cases.#11439: Handled an edge case where :data:
sys.stderr
might already be closed when :ref:faulthandler
is tearing down.v7.4.2
: pytest 7.4.2 (2023-09-07)Compare Source
Bug Fixes
#11237: Fix doctest collection of
functools.cached_property
objects.#11306: Fixed bug using
--importmode=importlib
which would cause package__init__.py
files to be imported more than once in some cases.#11367: Fixed bug where
user_properties
where not being saved in the JUnit XML file if a fixture failed during teardown.#11394: Fixed crash when parsing long command line arguments that might be interpreted as files.
Improved Documentation
v7.4.1
: pytest 7.4.1 (2023-09-02)Compare Source
Bug Fixes
#10337: Fixed bug where fake intermediate modules generated by
--import-mode=importlib
would not include thechild modules as attributes of the parent modules.
#10702: Fixed error assertion handling in
pytest.approx
whenNone
is an expected or received value when comparing dictionaries.#10811: Fixed issue when using
--import-mode=importlib
together with--doctest-modules
that caused modulesto be imported more than once, causing problems with modules that have import side effects.
v7.4.0
Compare Source
pytest 7.4.0 (2023-06-23)
Features
ExceptionInfo.from_exception() <pytest.ExceptionInfo.from_exception>
{.interpreted-text role="func"}, a simpler way to create an~pytest.ExceptionInfo
{.interpreted-text role="class"} from an exception.This can replace
ExceptionInfo.from_exc_info() <pytest.ExceptionInfo.from_exc_info()>
{.interpreted-text role="func"} for most uses.Improvements
#10872: Update test log report annotation to named tuple and fixed inconsistency in docs for
pytest_report_teststatus
{.interpreted-text role="hook"} hook.#10907: When an exception traceback to be displayed is completely filtered out (by mechanisms such as
__tracebackhide__
, internal frames, and similar), now only the exception string and the following message are shown:"All traceback entries are hidden. Pass [--full-trace]{.title-ref} to see hidden and internal frames.".
Previously, the last frame of the traceback was shown, even though it was hidden.
#10940: Improved verbose output (
-vv
) ofskip
andxfail
reasons by performing text wrapping while leaving a clear margin for progress output.Added
TerminalReporter.wrap_write()
as a helper for that.#10991: Added handling of
%f
directive to print microseconds in log format options, such aslog-date-format
.#11005: Added the underlying exception to the cache provider's path creation and write warning messages.
#11013: Added warning when
testpaths
{.interpreted-text role="confval"} is set, but paths are not found by glob. In this case, pytest will fall back to searching from the current directory.#11043: When [--confcutdir]{.title-ref} is not specified, and there is no config file present, the conftest cutoff directory ([--confcutdir]{.title-ref}) is now set to the
rootdir <rootdir>
{.interpreted-text role="ref"}.Previously in such cases, [conftest.py]{.title-ref} files would be probed all the way to the root directory of the filesystem.
If you are badly affected by this change, consider adding an empty config file to your desired cutoff directory, or explicitly set [--confcutdir]{.title-ref}.
#11081: The
norecursedirs
{.interpreted-text role="confval"} check is now performed in apytest_ignore_collect
{.interpreted-text role="hook"} implementation, so plugins can affect it.If after updating to this version you see that your [norecursedirs]{.title-ref} setting is not being respected,
it means that a conftest or a plugin you use has a bad [pytest_ignore_collect]{.title-ref} implementation.
Most likely, your hook returns [False]{.title-ref} for paths it does not want to ignore,
which ends the processing and doesn't allow other plugins, including pytest itself, to ignore the path.
The fix is to return [None]{.title-ref} instead of [False]{.title-ref} for paths your hook doesn't want to ignore.
#8711:
caplog.set_level() <pytest.LogCaptureFixture.set_level>
{.interpreted-text role="func"} andcaplog.at_level() <pytest.LogCaptureFixture.at_level>
{.interpreted-text role="func"}will temporarily enable the requested
level
iflevel
was disabled globally vialogging.disable(LEVEL)
.Bug Fixes
--tb=line
mode wherepytest.fail(pytrace=False)
tests reportNone
.--last-failed
whole-file skipping functionality ("skipped N files") fornon-python test files <non-python tests>
{.interpreted-text role="ref"}.testpaths
{.interpreted-text role="confval"} to be considered for loading initial conftests,even when it was not utilized (e.g. when explicit paths were given on the command line).
Now the
testpaths
are only considered when they are in use.__tracebackhide__ = True
still being shown for chained exceptions (parts after "... the above exception ..." message).--debug
.Improved Documentation
caplog.set_level() <pytest.LogCaptureFixture.set_level>
{.interpreted-text role="func"}.Trivial/Internal Changes
-c
to now include--config-file
to make it clear that this flag applies to the usage of a custom config file.psf/requests (requests)
v2.32.3
Compare Source
Bugfixes
HTTPAdapter. (#6716)
without the
ssl
module. (#6724)v2.32.2
Compare Source
Deprecations
To provide a more stable migration for custom HTTPAdapters impacted
by the CVE changes in 2.32.0, we've renamed
_get_connection
toa new public API,
get_connection_with_tls_context
. Existing customHTTPAdapters will need to migrate their code to use this new API.
get_connection
is considered deprecated in all versions of Requests>=2.32.0.A minimal (2-line) example has been provided in the linked PR to ease
migration, but we strongly urge users to evaluate if their custom adapter
is subject to the same issue described in CVE-2024-35195. (#6710)
v2.32.1
Compare Source
Bugfixes
v2.32.0
Compare Source
Security
verify=False
on the first request from aSession will cause subsequent requests to the same origin to also ignore
cert verification, regardless of the value of
verify
.(GHSA-9wx4-h78v-vm56)
Improvements
verify=True
now reuses a global SSLContext which should improverequest time variance between first and subsequent requests. It should
also minimize certificate load time on Windows systems when using a Python
version built with OpenSSL 3.x. (#6667)
(
chardet
orcharset_normalizer
) when repackaged or vendored.This enables
pip
and other projects to minimize their vendoringsurface area. The
Response.text()
andapparent_encoding
APIswill default to
utf-8
if neither library is present. (#6702)Bugfixes
calculated in the request content-length. (#6589)
/
(path separator) could leadurllib3 to unnecessarily reparse the request URI. (#6644)
Deprecations
Documentation
Packaging
The source files for the projects (formerly
requests
) is now locatedin
src/requests
in the Requests sdist. (#6506)using
hatchling
. This should not impact the average user, but extremely oldversions of packaging utilities may have issues with the new packaging format.
pypa/setuptools (setuptools)
v69.5.1
Compare Source
v69.5.0
Compare Source
v69.4.2
Compare Source
v69.4.1
Compare Source
v69.4.0
Compare Source
v69.3.1
Compare Source
v69.3.0
Compare Source
v69.2.0
Compare Source
v69.1.1
Compare Source
v69.1.0
Compare Source
benjaminp/six (six)
v1.17.0
Compare Source
Pull request #388: Remove
URLopener
andFancyURLopener
classes fromurllib.request
when running on Python 3.14 or greater.Pull request #365, issue #283:
six.moves.UserDict
now points toUserDict.IterableUserDict
instead ofUserDict.UserDict
on Python 2.andialbrecht/sqlparse (sqlparse)
v0.5.3
Compare Source
Bug Fixes
service attack (DOS) due to recursion errors for deeply nested statements.
Brought up and fixed by @living180. Thanks a lot!
v0.5.2
Compare Source
Bug Fixes
v0.5.1
Compare Source
Enhancements
a more compact output by avoiding some line breaks (issue783).
Bug Fixes
whitespace (issue772).
Note: In some cases you might want to add
strip_whitespace=True
where youpreviously used just
strip_comments=True
.strip_comments
did some of thework that
strip_whitespace
should do.within a BEGIN block (issue784).
NULLS LAST (issue532).
v0.5.0
Compare Source
Notable Changes
error for deeply nested statements. Instead of recursion error a generic
SQLParseError is raised. See the security advisory for details:
GHSA-2m57-hf25-phgg
The vulnerability was discovered by @uriyay-jfrog. Thanks for reporting!
Enhancements
Some database backends love statements without semicolon (issue742).
Bug Fixes
by josuc1, thanks for bringing this up!).
Other
urllib3/urllib3 (urllib3)
v2.4.0
Compare Source
==================
Features
#​3522 <https://github.com/urllib3/urllib3/issues/3522>
__)#​3567 <https://github.com/urllib3/urllib3/issues/3567>
__)verify_flags
option tocreate_urllib3_context
with a default ofVERIFY_X509_PARTIAL_CHAIN
andVERIFY_X509_STRICT
for Python 3.13+. (#​3571 <https://github.com/urllib3/urllib3/issues/3571>
__)Bugfixes
#​3555 <https://github.com/urllib3/urllib3/issues/3555>
__)Misc
#​3550 <https://github.com/urllib3/urllib3/issues/3550>
__)multiple.intoto.jsonl
asset from GitHub releases. Attestation of release files since v2.3.0 can be found on PyPI. (#​3566 <https://github.com/urllib3/urllib3/issues/3566>
__)v2.3.0
Compare Source
==================
Features
HTTPResponse.shutdown()
to stop any ongoing or future reads for a specific response. It callsshutdown(SHUT_RD)
on the underlying socket. This feature wassponsored by LaunchDarkly <https://opencollective.com/urllib3/contributions/815307>
. (#​2868 <https://github.com/urllib3/urllib3/issues/2868>
)requests and streaming, and makes it possible to use in Node.js if you launch it as
node --experimental-wasm-stack-switching
. (#​3400 <https://github.com/urllib3/urllib3/issues/3400>
__)proxy_is_tunneling
property toHTTPConnection
andHTTPSConnection
. (#​3285 <https://github.com/urllib3/urllib3/issues/3285>
__)NewConnectionError
andNameResolutionError
. (#​3480 <https://github.com/urllib3/urllib3/issues/3480>
__)Bugfixes
#​3489 <https://github.com/urllib3/urllib3/issues/3489>
__)Deprecations and Removals
#​3492 <https://github.com/urllib3/urllib3/issues/3492>
__)v2.2.3
Compare Source
==================
Features
#​3473 <https://github.com/urllib3/urllib3/issues/3473>
__)Bugfixes
All other methods of supplying a request body already use UTF-8 starting in urllib3 v2.0. (
#​3053 <https://github.com/urllib3/urllib3/issues/3053>
__)#​3252 <https://github.com/urllib3/urllib3/issues/3252>
__)#​3413 <https://github.com/urllib3/urllib3/issues/3413>
__)#​3432 <https://github.com/urllib3/urllib3/issues/3432>
__)HTTPConnection.default_socket_options
. (#​3448 <https://github.com/urllib3/urllib3/issues/3448>
__)HTTP/2 (experimental)
HTTP/2 support is still in early development.
Excluded Transfer-Encoding: chunked from HTTP/2 request body (
#​3425 <https://github.com/urllib3/urllib3/issues/3425>
__)Added version checking for
h2
(https://pypi.org/project/h2/) usage.Now only accepting supported h2 major version 4.x.x. (
#​3290 <https://github.com/urllib3/urllib3/issues/3290>
__)Added a probing mechanism for determining whether a given target origin
supports HTTP/2 via ALPN. (
#​3301 <https://github.com/urllib3/urllib3/issues/3301>
__)Add support for sending a request body with HTTP/2 (
#​3302 <https://github.com/urllib3/urllib3/issues/3302>
__)Deprecations and Removals
_version.py
file has been removed and is now created at build time by hatch-vcs. (#​3412 <https://github.com/urllib3/urllib3/issues/3412>
__)#​3475 <https://github.com/urllib3/urllib3/issues/3475>
__)v2.2.2
Compare Source
==================
Proxy-Authorization
header to the list of headers to strip from requests when redirecting to a different host. As before, different headers can be set viaRetry.remove_headers_on_redirect
.amt
to read methods ofhttp.client.HTTPResponse
as an alternative toNone
. (#​3122 <https://github.com/urllib3/urllib3/issues/3122>
__)typing.Self
. (#​3363 <https://github.com/urllib3/urllib3/issues/3363>
__)v2.2.1
Compare Source
==================
InsecureRequestWarning
was emitted for HTTPS connections when using Emscripten. (#​3331 <https://github.com/urllib3/urllib3/issues/3331>
__)HTTPConnectionPool.urlopen
to stop automatically casting non-proxy headers toHTTPHeaderDict
. This change was premature as it did not apply to proxy headers andHTTPHeaderDict
does not handle byte header values correctly yet. (#​3343 <https://github.com/urllib3/urllib3/issues/3343>
__)InvalidChunkLength
toProtocolError
when response terminates before the chunk length is sent. (#​2860 <https://github.com/urllib3/urllib3/issues/2860>
__)ProtocolError
to be more verbose on incomplete reads with excess content. (#​3261 <https://github.com/urllib3/urllib3/issues/3261>
__)v2.2.0
Compare Source
==================
Emscripten and Pyodide <https://urllib3.readthedocs.io/en/latest/reference/contrib/emscripten.html>
, including streaming support in cross-origin isolated browser environments where threading is enabled. (#​2951 <https://github.com/urllib3/urllib3/issues/2951>
)HTTPResponse.read1()
method. (#​3186 <https://github.com/urllib3/urllib3/issues/3186>
__)#​3284 <https://github.com/urllib3/urllib3/issues/3284>
__)when using proxy. (
#​2244 <https://github.com/urllib3/urllib3/issues/2244>
__)HTTPConnection.proxy_is_verified
andHTTPSConnection.proxy_is_verified
to be always set to a boolean after connecting to a proxy. It could be
None
in some cases previously. (#​3130 <https://github.com/urllib3/urllib3/issues/3130>
__)headers
passed in a request withjson=
would be mutated (#​3203 <https://github.com/urllib3/urllib3/issues/3203>
__)HTTPSConnection.is_verified
to be set toFalse
when connectingfrom a HTTPS proxy to an HTTP target. It was set to
True
previously. (#​3267 <https://github.com/urllib3/urllib3/issues/3267>
__)#​3268 <https://github.com/urllib3/urllib3/issues/3268>
__)#​3325 <https://github.com/urllib3/urllib3/issues/3325>
__)time with the
--integration
pytest flag. (#​3181 <https://github.com/urllib3/urllib3/issues/3181>
__)Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.