Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Apr 1, 2024

Bumps the all group with 8 updates:

Package From To
black 23.7.0 24.3.0
codespell 2.2.5 2.2.6
isort 5.12.0 5.13.2
pre-commit 3.3.3 3.7.0
pylint 2.17.5 3.1.0
pytest 7.4.0 8.1.1
pytest-cov 4.1.0 5.0.0
pytest-xdist[psutil] 3.3.1 3.5.0

Updates black from 23.7.0 to 24.3.0

Release notes

Sourced from black's releases.

24.3.0

Highlights

This release is a milestone: it fixes Black's first CVE security vulnerability. If you run Black on untrusted input, or if you habitually put thousands of leading tab characters in your docstrings, you are strongly encouraged to upgrade immediately to fix CVE-2024-21503.

This release also fixes a bug in Black's AST safety check that allowed Black to make incorrect changes to certain f-strings that are valid in Python 3.12 and higher.

Stable style

  • Don't move comments along with delimiters, which could cause crashes (#4248)
  • Strengthen AST safety check to catch more unsafe changes to strings. Previous versions of Black would incorrectly format the contents of certain unusual f-strings containing nested strings with the same quote type. Now, Black will crash on such strings until support for the new f-string syntax is implemented. (#4270)
  • Fix a bug where line-ranges exceeding the last code line would not work as expected (#4273)

Performance

  • Fix catastrophic performance on docstrings that contain large numbers of leading tab characters. This fixes CVE-2024-21503. (#4278)

Documentation

  • Note what happens when --check is used with --quiet (#4236)

24.2.0

Stable style

  • Fixed a bug where comments where mistakenly removed along with redundant parentheses (#4218)

Preview style

  • Move the hug_parens_with_braces_and_square_brackets feature to the unstable style due to an outstanding crash and proposed formatting tweaks (#4198)
  • Fixed a bug where base expressions caused inconsistent formatting of ** in tenary expression (#4154)
  • Checking for newline before adding one on docstring that is almost at the line limit (#4185)
  • Remove redundant parentheses in case statement if guards (#4214).

Configuration

... (truncated)

Changelog

Sourced from black's changelog.

24.3.0

Highlights

This release is a milestone: it fixes Black's first CVE security vulnerability. If you run Black on untrusted input, or if you habitually put thousands of leading tab characters in your docstrings, you are strongly encouraged to upgrade immediately to fix CVE-2024-21503.

This release also fixes a bug in Black's AST safety check that allowed Black to make incorrect changes to certain f-strings that are valid in Python 3.12 and higher.

Stable style

  • Don't move comments along with delimiters, which could cause crashes (#4248)
  • Strengthen AST safety check to catch more unsafe changes to strings. Previous versions of Black would incorrectly format the contents of certain unusual f-strings containing nested strings with the same quote type. Now, Black will crash on such strings until support for the new f-string syntax is implemented. (#4270)
  • Fix a bug where line-ranges exceeding the last code line would not work as expected (#4273)

Performance

  • Fix catastrophic performance on docstrings that contain large numbers of leading tab characters. This fixes CVE-2024-21503. (#4278)

Documentation

  • Note what happens when --check is used with --quiet (#4236)

24.2.0

Stable style

  • Fixed a bug where comments where mistakenly removed along with redundant parentheses (#4218)

Preview style

  • Move the hug_parens_with_braces_and_square_brackets feature to the unstable style due to an outstanding crash and proposed formatting tweaks (#4198)
  • Fixed a bug where base expressions caused inconsistent formatting of ** in tenary expression (#4154)
  • Checking for newline before adding one on docstring that is almost at the line limit (#4185)
  • Remove redundant parentheses in case statement if guards (#4214).

... (truncated)

Commits

Updates codespell from 2.2.5 to 2.2.6

Release notes

Sourced from codespell's releases.

v2.2.6

What's Changed

... (truncated)

Commits

Updates isort from 5.12.0 to 5.13.2

Release notes

Sourced from isort's releases.

5.13.2

Changes

🪲 Fixes

5.13.1

Changes

  • Fix integration tests (#2208) @​bp72
  • Added a fix for normalizing imports from more than one level of parent modules (issue/2152) (#2191) @​bp72

🪲 Fixes

5.13.0

Changes

🔥 Removals and Deprecations

📦 Dependencies

... (truncated)

Changelog

Sourced from isort's changelog.

5.13.2 December 13 2023

5.13.1 December 11 2023

5.13.0 December 9 2023

Commits
  • c655831 Merge pull request #2214 from PyCQA/version/5.13.2
  • b4335b4 Prepare version 5.13.2
  • c36e43c Merge pull request #2184 from bp72/issue/2154
  • e38702f Merge pull request #2213 from davidculley/confine-precommit-to-stages
  • ee8d87f Add fix for the error found by hypothesis
  • 5849ec2 Apply the bracket fix from issue 471 only for use_parentheses=True
  • df0e119 confine pre-commit to stages
  • 9255bca Merge pull request #2212 from PyCQA/bugfix/#2211-colors-extra
  • 5336d7d Fix colors extras
  • 643d9c4 Merge pull request #2210 from PyCQA/version/5.13.1
  • Additional commits viewable in compare view

Updates pre-commit from 3.3.3 to 3.7.0

Release notes

Sourced from pre-commit's releases.

pre-commit v3.7.0

Features

  • Use a tty for docker and docker_image hooks when --color is specified.

Fixes

Updating

  • The per-hook behaviour of fail_fast was fixed. If you want the pre-3.7.0 behaviour, add fail_fast: true to all hooks before the last fail_fast hook.

pre-commit v3.6.2

Fixes

pre-commit v3.6.1

Fixes

pre-commit v3.6.0

Features

  • Check minimum_pre_commit_version first when parsing configs.

Fixes

Updating

pre-commit v3.5.0

Features

... (truncated)

Changelog

Sourced from pre-commit's changelog.

3.7.0 - 2024-03-24

Features

  • Use a tty for docker and docker_image hooks when --color is specified.

Fixes

Updating

  • The per-hook behaviour of fail_fast was fixed. If you want the pre-3.7.0 behaviour, add fail_fast: true to all hooks before the last fail_fast hook.

3.6.2 - 2024-02-18

Fixes

3.6.1 - 2024-02-10

Fixes

3.6.0 - 2023-12-09

Features

  • Check minimum_pre_commit_version first when parsing configs.

Fixes

Updating

  • Drop support for python<3.9.

... (truncated)

Commits
  • 7b4667e v3.7.0
  • d46c8fc Merge pull request #3168 from pre-commit/fix-fail-fast
  • fc62215 fix per-hook fail_fast to not fail on previous failures
  • 716da1e Merge pull request #3155 from pre-commit/pre-commit-ci-update-config
  • 0939c11 [pre-commit.ci] pre-commit autoupdate
  • 3bdf9fb Merge pull request #3150 from pre-commit/pre-commit-ci-update-config
  • 75b3e52 [pre-commit.ci] pre-commit autoupdate
  • 5e11c26 Merge pull request #3122 from glehmann/docker-tty
  • e580096 give docker a tty output when expecting color
  • 7b868c3 Merge pull request #3132 from pre-commit/pre-commit-ci-update-config
  • Additional commits viewable in compare view

Updates pylint from 2.17.5 to 3.1.0

Commits
  • 053c2c3 Bump pylint to 3.1.0, update changelog
  • c954636 Upgrade release documentation, and contributors.txt
  • 7300ed2 Discover .pyi files (#9241)
  • 9dbf3df Merge maintenance 3.0.x into main following 3.0.4 release (#9459)
  • 28e89b0 Remove changelog fragments pertaining to 3.0.4
  • 4332ea1 Merge branch 'maintenance/3.0.x' into main following 3.0.4 release
  • 8115381 Bump pylint to 3.0.4, update changelog (#9458)
  • 4bf3524 [false-negative] Fix for consider-using-min/max-builtin (#9127)
  • 8c24b1e [pre-commit.ci] pre-commit autoupdate (#9448)
  • f499686 Update astroid version to 3.1.0 (#9457)
  • Additional commits viewable in compare view

Updates pytest from 7.4.0 to 8.1.1

Release notes

Sourced from pytest's releases.

8.1.1

pytest 8.1.1 (2024-03-08)

::: {.note} ::: {.title} Note :::

This release is not a usual bug fix release -- it contains features and improvements, being a follow up to 8.1.0, which has been yanked from PyPI. :::

Features

  • #11475: Added the new consider_namespace_packages{.interpreted-text role="confval"} configuration option, defaulting to False.

    If set to True, pytest will attempt to identify modules that are part of namespace packages when importing modules.

  • #11653: Added the new verbosity_test_cases{.interpreted-text role="confval"} configuration option for fine-grained control of test execution verbosity. See Fine-grained verbosity <pytest.fine_grained_verbosity>{.interpreted-text role="ref"} for more details.

Improvements

  • #10865: pytest.warns{.interpreted-text role="func"} now validates that warnings.warn{.interpreted-text role="func"} was called with a [str]{.title-ref} or a [Warning]{.title-ref}. Currently in Python it is possible to use other types, however this causes an exception when warnings.filterwarnings{.interpreted-text role="func"} is used to filter those warnings (see [CPython #103577](python/cpython#103577) for a discussion). While this can be considered a bug in CPython, we decided to put guards in pytest as the error message produced without this check in place is confusing.

  • #11311: When using --override-ini for paths in invocations without a configuration file defined, the current working directory is used as the relative directory.

    Previoulsy this would raise an AssertionError{.interpreted-text role="class"}.

  • #11475: --import-mode=importlib <import-mode-importlib>{.interpreted-text role="ref"} now tries to import modules using the standard import mechanism (but still without changing :pysys.path{.interpreted-text role="data"}), falling back to importing modules directly only if that fails.

    This means that installed packages will be imported under their canonical name if possible first, for example app.core.models, instead of having the module name always be derived from their path (for example .env310.lib.site_packages.app.core.models).

  • #11801: Added the iter_parents() <_pytest.nodes.Node.iter_parents>{.interpreted-text role="func"} helper method on nodes. It is similar to listchain <_pytest.nodes.Node.listchain>{.interpreted-text role="func"}, but goes from bottom to top, and returns an iterator, not a list.

  • #11850: Added support for sys.last_exc{.interpreted-text role="data"} for post-mortem debugging on Python>=3.12.

  • #11962: In case no other suitable candidates for configuration file are found, a pyproject.toml (even without a [tool.pytest.ini_options] table) will be considered as the configuration file and define the rootdir.

  • #11978: Add --log-file-mode option to the logging plugin, enabling appending to log-files. This option accepts either "w" or "a" and defaults to "w".

    Previously, the mode was hard-coded to be "w" which truncates the file before logging.

... (truncated)

Commits
  • 81653ee Adjust changelog manually for 8.1.1
  • e60b4b9 Prepare release version 8.1.1
  • 15fbe57 [8.1.x] Revert legacy path removals (#12093)
  • 86c3aab [8.1.x] Do not import duplicated modules with --importmode=importlib (#12077)
  • 5b82b0c [8.1.x] Yank version 8.1.0 (#12076)
  • 0a53681 Merge pull request #12054 from pytest-dev/release-8.1.0
  • b9a167f Prepare release version 8.1.0
  • 00043f7 Merge pull request #12038 from bluetech/fixtures-rm-arg2index
  • f4e1025 Merge pull request #12048 from bluetech/fixture-teardown-excgroup
  • 43492f5 Merge pull request #12051 from jakkdl/test_debugging_pythonbreakpoint
  • Additional commits viewable in compare view

Updates pytest-cov from 4.1.0 to 5.0.0

Changelog

Sourced from pytest-cov's changelog.

5.0.0 (2024-03-24)

  • Removed support for xdist rsync (now deprecated). Contributed by Matthias Reichenbach in [#623](https://github.com/pytest-dev/pytest-cov/issues/623) <https://github.com/pytest-dev/pytest-cov/pull/623>_.
  • Switched docs theme to Furo.
  • Various legacy Python cleanup and CI improvements. Contributed by Christian Clauss and Hugo van Kemenade in [#630](https://github.com/pytest-dev/pytest-cov/issues/630) <https://github.com/pytest-dev/pytest-cov/pull/630>, [#631](https://github.com/pytest-dev/pytest-cov/issues/631) <https://github.com/pytest-dev/pytest-cov/pull/631>, [#632](https://github.com/pytest-dev/pytest-cov/issues/632) <https://github.com/pytest-dev/pytest-cov/pull/632>_ and [#633](https://github.com/pytest-dev/pytest-cov/issues/633) <https://github.com/pytest-dev/pytest-cov/pull/633>_.
  • Added a pyproject.toml example in the docs. Contributed by Dawn James in [#626](https://github.com/pytest-dev/pytest-cov/issues/626) <https://github.com/pytest-dev/pytest-cov/pull/626>_.
  • Modernized project's pre-commit hooks to use ruff. Initial POC contributed by Christian Clauss in [#584](https://github.com/pytest-dev/pytest-cov/issues/584) <https://github.com/pytest-dev/pytest-cov/pull/584>_.
Commits
  • 5295ce0 Bump version: 4.1.0 → 5.0.0
  • 1181b06 Update changelog.
  • 9757222 Fix a minor grammar error (#636)
  • 9f5cd81 Cleanup releasing instructions. Closes #616.
  • 93b5047 Add test for pyproject.toml loading without explicit --cov-config. Ref #508.
  • ff50860 docs: add config instructions for pyproject.toml.
  • 4a5a4b5 Keep GitHub Actions up to date with GitHub's Dependabot
  • 1d7f559 Fix or remove URLs that are causing docs tests to fail
  • 6a5af8e Update changelog.
  • d9fe8df Switch to furo. Closes #618.
  • Additional commits viewable in compare view

Updates pytest-xdist[psutil] from 3.3.1 to 3.5.0

Changelog

Sourced from pytest-xdist[psutil]'s changelog.

pytest-xdist 3.5.0 (2023-11-21)

Features

  • [#632](https://github.com/pytest-dev/pytest-xdist/issues/632) <https://github.com/pytest-dev/pytest-xdist/issues/632>_: --dist=loadscope now sorts scopes by number of tests to assign largest scopes early -- in many cases this should improve overall test session running time, as there is less chance of a large scope being left to be processed near the end of the session, leaving other workers idle.

pytest-xdist 3.4.0 (2023-11-11)

Features

  • [#963](https://github.com/pytest-dev/pytest-xdist/issues/963) <https://github.com/pytest-dev/pytest-xdist/issues/963>_: Wait for workers to finish reporting when test run stops early.

    This makes sure that the results of in-progress tests are displayed. Previously these reports were being discarded, losing information about the test run.

  • [#965](https://github.com/pytest-dev/pytest-xdist/issues/965) <https://github.com/pytest-dev/pytest-xdist/issues/965>_: Added support for Python 3.12.

Commits
  • 95b309e Release 3.5.0
  • 3fe877b LoadScope scheduler: Sort scopes by number of tests to assign biggest scopes ...
  • f36ea25 Create GitHub release after deploy (#973)
  • d81f575 Merge pull request #969 from pytest-dev/pre-commit-ci-update-config
  • 1d26164 [pre-commit.ci] pre-commit autoupdate
  • 5f43575 Merge pull request #966 from pytest-dev/release-3.4.0
  • a6b5611 Update CHANGELOG
  • 64f9388 Add support for Python 3.12
  • 230ba6a Properly wait for workers when test run terminates early (#963)
  • 93ca202 fix typo index -> instead
  • Additional commits viewa...

    Description has been truncated

Bumps the all group with 8 updates:

| Package | From | To |
| --- | --- | --- |
| [black](https://github.com/psf/black) | `23.7.0` | `24.3.0` |
| [codespell](https://github.com/codespell-project/codespell) | `2.2.5` | `2.2.6` |
| [isort](https://github.com/pycqa/isort) | `5.12.0` | `5.13.2` |
| [pre-commit](https://github.com/pre-commit/pre-commit) | `3.3.3` | `3.7.0` |
| [pylint](https://github.com/pylint-dev/pylint) | `2.17.5` | `3.1.0` |
| [pytest](https://github.com/pytest-dev/pytest) | `7.4.0` | `8.1.1` |
| [pytest-cov](https://github.com/pytest-dev/pytest-cov) | `4.1.0` | `5.0.0` |
| [pytest-xdist[psutil]](https://github.com/pytest-dev/pytest-xdist) | `3.3.1` | `3.5.0` |


Updates `black` from 23.7.0 to 24.3.0
- [Release notes](https://github.com/psf/black/releases)
- [Changelog](https://github.com/psf/black/blob/main/CHANGES.md)
- [Commits](psf/black@23.7.0...24.3.0)

Updates `codespell` from 2.2.5 to 2.2.6
- [Release notes](https://github.com/codespell-project/codespell/releases)
- [Commits](codespell-project/codespell@v2.2.5...v2.2.6)

Updates `isort` from 5.12.0 to 5.13.2
- [Release notes](https://github.com/pycqa/isort/releases)
- [Changelog](https://github.com/PyCQA/isort/blob/main/CHANGELOG.md)
- [Commits](PyCQA/isort@5.12.0...5.13.2)

Updates `pre-commit` from 3.3.3 to 3.7.0
- [Release notes](https://github.com/pre-commit/pre-commit/releases)
- [Changelog](https://github.com/pre-commit/pre-commit/blob/main/CHANGELOG.md)
- [Commits](pre-commit/pre-commit@v3.3.3...v3.7.0)

Updates `pylint` from 2.17.5 to 3.1.0
- [Release notes](https://github.com/pylint-dev/pylint/releases)
- [Commits](pylint-dev/pylint@v2.17.5...v3.1.0)

Updates `pytest` from 7.4.0 to 8.1.1
- [Release notes](https://github.com/pytest-dev/pytest/releases)
- [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst)
- [Commits](pytest-dev/pytest@7.4.0...8.1.1)

Updates `pytest-cov` from 4.1.0 to 5.0.0
- [Changelog](https://github.com/pytest-dev/pytest-cov/blob/master/CHANGELOG.rst)
- [Commits](pytest-dev/pytest-cov@v4.1.0...v5.0.0)

Updates `pytest-xdist[psutil]` from 3.3.1 to 3.5.0
- [Release notes](https://github.com/pytest-dev/pytest-xdist/releases)
- [Changelog](https://github.com/pytest-dev/pytest-xdist/blob/master/CHANGELOG.rst)
- [Commits](pytest-dev/pytest-xdist@v3.3.1...v3.5.0)

---
updated-dependencies:
- dependency-name: black
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: all
- dependency-name: codespell
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: isort
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: pre-commit
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: pylint
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: all
- dependency-name: pytest
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: all
- dependency-name: pytest-cov
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: all
- dependency-name: pytest-xdist[psutil]
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Apr 1, 2024
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github May 1, 2024

Superseded by #25.

@dependabot dependabot bot closed this May 1, 2024
@dependabot dependabot bot deleted the dependabot/pip/all-6c3c9c4624 branch May 1, 2024 13:26
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Pull requests that update Python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant