Bump the production-updates group across 1 directory with 7 updates #513
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
![dependabot[bot]](https://avatars.githubusercontent.com/in/29110?s=60&v=4){kind=small}
Bumps the production-updates group with 7 updates in the / directory: | Package | From | To | | --- | --- | --- | | [django](https://github.com/django/django) | `4.2.16` | `4.2.18` | | [boto3](https://github.com/boto/boto3) | `1.35.68` | `1.36.2` | | [tqdm](https://github.com/tqdm/tqdm) | `4.67.0` | `4.67.1` | | [atproto](https://github.com/MarshalX/atproto) | `0.0.55` | `0.0.56` | | [coverage](https://github.com/nedbat/coveragepy) | `7.6.7` | `7.6.10` | | [ipython](https://github.com/ipython/ipython) | `8.29.0` | `8.31.0` | | [setuptools](https://github.com/pypa/setuptools) | `75.6.0` | `75.8.0` | Updates `django` from 4.2.16 to 4.2.18 - [Commits](django/django@4.2.16...4.2.18) Updates `boto3` from 1.35.68 to 1.36.2 - [Release notes](https://github.com/boto/boto3/releases) - [Commits](boto/boto3@1.35.68...1.36.2) Updates `tqdm` from 4.67.0 to 4.67.1 - [Release notes](https://github.com/tqdm/tqdm/releases) - [Commits](tqdm/tqdm@v4.67.0...v4.67.1) Updates `atproto` from 0.0.55 to 0.0.56 - [Release notes](https://github.com/MarshalX/atproto/releases) - [Changelog](https://github.com/MarshalX/atproto/blob/main/CHANGES.md) - [Commits](MarshalX/atproto@v0.0.55...v0.0.56) Updates `coverage` from 7.6.7 to 7.6.10 - [Release notes](https://github.com/nedbat/coveragepy/releases) - [Changelog](https://github.com/nedbat/coveragepy/blob/master/CHANGES.rst) - [Commits](nedbat/coveragepy@7.6.7...7.6.10) Updates `ipython` from 8.29.0 to 8.31.0 - [Release notes](https://github.com/ipython/ipython/releases) - [Commits](ipython/ipython@8.29.0...8.31.0) Updates `setuptools` from 75.6.0 to 75.8.0 - [Release notes](https://github.com/pypa/setuptools/releases) - [Changelog](https://github.com/pypa/setuptools/blob/main/NEWS.rst) - [Commits](pypa/setuptools@v75.6.0...v75.8.0) --- updated-dependencies: - dependency-name: django dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-updates - dependency-name: boto3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-updates - dependency-name: tqdm dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-updates - dependency-name: atproto dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-updates - dependency-name: coverage dependency-type: direct:development update-type: version-update:semver-patch dependency-group: production-updates - dependency-name: ipython dependency-type: direct:development update-type: version-update:semver-minor dependency-group: production-updates - dependency-name: setuptools dependency-type: direct:development update-type: version-update:semver-minor dependency-group: production-updates ... Signed-off-by: dependabot[bot] <[email protected]>
dependabot
bot
added
dependencies
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Bumps the production-updates group with 7 updates in the / directory:
4.2.164.2.181.35.681.36.24.67.04.67.10.0.550.0.567.6.77.6.108.29.08.31.075.6.075.8.0Updates
djangofrom 4.2.16 to 4.2.18Commits
a7b0e50[4.2.x] Bumped version for 4.2.18 release.ad866a1[4.2.x] Fixed CVE-2024-56374 -- Mitigated potential DoS in IPv6 validation.b0d309c[4.2.x] Added stub release notes and release date for 4.2.18.39cf3c6[4.2.x] Cleaned up CVE-2024-53907 and CVE-2024-53908 security archive descrip...0ff19d1[4.2.x] Added CVE-2024-53907 and CVE-2024-53908 to security archive.6c4fc7d[4.2.x] Post-release version bump.1f0356f[4.2.x] Bumped version for 4.2.17 release.7376bcb[4.2.x] Fixed CVE-2024-53908 -- Prevented SQL injections in direct HasKeyLook...790eb05[4.2.x] Fixed CVE-2024-53907 -- Mitigated potential DoS in strip_tags().f663277[4.2.x] Refs CVE-2024-11168 -- Updated vendored _urlsplit() to properly valid...Updates
boto3from 1.35.68 to 1.36.2Commits
2d89f4dMerge branch 'release-1.36.2'3632daeBumping version to 1.36.2f47c6aaAdd changelog entries from botocore9613882Merge branch 'release-1.36.1'1753747Merge branch 'release-1.36.1' into developb0198d1Bumping version to 1.36.1dd793dcAdd changelog entries from botocoree2b2df5Merge branch 'release-1.36.0'2f9e01dMerge branch 'release-1.36.0' into develop80855f0Bumping version to 1.36.0Updates
tqdmfrom 4.67.0 to 4.67.1Release notes
Sourced from tqdm's releases.
Commits
0ed5d7fbump version, merge pull request #1629 from tqdm/fix-guia2d5f1ctests: fix codecov rate limitcac7150tests: bump pytest-asyncio6338f62deps: fix pybuild342b15etests: sync depsc66458dgui: fix matplotlibUpdates
atprotofrom 0.0.55 to 0.0.56Release notes
Sourced from atproto's releases.
Changelog
Sourced from atproto's changelog.
Commits
02f54e2Fix generating and uploading attestations to PyPI (#486)0f0ea2aUpdate lexicons fetched from ed22362 committed 2024-12-05T11:45:28Z (#485)edd7b03Update lexicons fetched from c72145d committed 2024-11-29T18:00:48Z (#481)3f61605Add ability to send aspect ratio with send_image and send_images (#480)e011bb4Fix link to API docs for rate-limits in atproto_client/auth.md (#464)8aafc9aUpdate lexicons fetched from a3ce23c committed 2024-11-23T02:36:55Z (#458)3f4c9c2Update lexicons fetched from 2e7aa21 committed 2024-11-21T17:40:45Z (#452)2116fcbFixclone()andwith_...()methods forAsyncClient(#457)d030829Update lexicons fetched from a4b528e committed 2024-11-18T13:36:39Z (#442)b38b194Fix typo in item ofSessionEvent:'creat'->'create'(#439)Updates
coveragefrom 7.6.7 to 7.6.10Changelog
Sourced from coverage's changelog.
... (truncated)
Commits
f0dcf65docs: sample HTML for 7.6.100f26f35docs: prep for 7.6.1081c5e43docs: rewrite the subprocess page878410cchore: make doc_upgradef1d320dchore: make upgrade67f1440debug: this condition is never true. really?c85eabafix: multi-line statements no longer confuse branch target descriptions. #187...73e58farefactor: clarify the code that fixes with-statement exitse16c9cctypo: backslask865fd7fchore: bump the action-dependencies group with 4 updates (#1909)Updates
ipythonfrom 8.29.0 to 8.31.0Commits
22d6a1crelease 8.31.0d1a77beBackport PR #14626 on branch 8.x (whatsnew 8.31) (#14628)3850badBackport PR #14626: whatsnew 8.31c696eefBackport PR #14601 on branch 8.x (Deprecate inputtransformer since 7.0) (#14603)028f9b3Backport PR #14601: Deprecate inputtransformer since 7.086a74d8Bump codecov/codecov-action from 4 to 5 in the actions group (#14593)9cdf92dFix completion tuple (#14594)1078df7types hintsce148f2fix IPCompleter inside tuples/arrays when jedi is disabled9b18d6cFix typo in whatsnew. (#14599)Updates
setuptoolsfrom 75.6.0 to 75.8.0Changelog
Sourced from setuptools's changelog.
Commits
5c9d980Bump version: 75.7.0 → 75.8.072c4222Avoid using Any in function1c61d47Add news fragments for PEP 643f285d01Implement PEP 643 (Dynamicfield for core metadata) (#4698)a50f6e2Fix _static.Dict.ior for Python 3.8b055895Add extra tests for static/dynamic metadata770b4fcRemove test workaround for unmarked static values from pyproject.toml8b22d73Mark values from pyproject.toml as staticf699fd8Fix spelling error8b4c8a3Add tests for static 'attr' directiveDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions