chore(deps): bump the github-actions group with 6 updates #1722

dependabot · 2024-08-23T15:07:21Z

Bumps the github-actions group with 6 updates:

Package	From	To
mkdocs-material	`9.5.32`	`9.5.33`
mkdocs-git-revision-date-localized-plugin	`1.2.6`	`1.2.7`
ruff	`0.6.1`	`0.6.2`
semgrep	`1.84.1`	`1.85.0`
pytest-asyncio	`0.23.8`	`0.24.0`
fastapi	`0.112.0`	`0.112.1`

Updates mkdocs-material from 9.5.32 to 9.5.33

Release notes

Sourced from mkdocs-material's releases.

mkdocs-material-9.5.33

Fixed #7453: Incorrect position of tooltip when sorting table

Changelog

Sourced from mkdocs-material's changelog.

mkdocs-material-9.5.33 (2024-08-23)

Fixed #7453: Incorrect position of tooltip when sorting table

mkdocs-material-9.5.32 (2024-08-19)

Fixed RXSS vulnerability via deep link in search results

Added support for fetching latest release from GitLab

mkdocs-material-9.5.31+insiders-4.53.12 (2024-08-02)

Fixed #7410: Instant previews jump on content tabs with anchor links

Fixed #7408: Instant previews jump on content tabs

mkdocs-material-9.5.31 (2024-08-02)

Fixed #7405: DockerHub missing images > 9.5.27 due to change in Alpine/APK

mkdocs-material-9.5.30 (2024-07-23)

Fixed #7380: Navigation icons disappearing on hover in Safari

Fixed #7367: Blog readtime computation includes SVG text content

mkdocs-material-9.5.29 (2024-07-14)

Updated Galician translations

Fixed #7362: Annotations in figure captions rendering incorrectly

mkdocs-material-9.5.28 (2024-07-02)

Fixed #7313: Improved tooltips mounted in sidebar when feature is disabled

mkdocs-material-9.5.27 (2024-06-16)

Updated Estonian translations

mkdocs-material-9.5.26 (2024-06-06)

Fixed #7232: Tab switches on scroll when linking tabs (9.5.19 regression)

Fixed #7230: Blog author avatar broken when referring to local file

mkdocs-material-9.5.25+insiders-4.53.11 (2024-05-27)

Fixed projects plugin crashing when serving before building subprojects

mkdocs-material-9.5.25 (2024-05-27)

Fixed #7209: Tags plugin crashing on numeric tags

mkdocs-material-9.5.24+insiders-4.53.10 (2024-05-20)

... (truncated)

Commits

a91ee70 Prepare 9.5.33 release
4104faf Updated dependencies
8ee7137 Updated premium sponsors
e1c1bad Updated blog post
2445537 Removed pyodide_macros plugin's schema (#7468)
47f7f63 Added plugins to "external-community" in plugins.json (#7465)
42ab11f Added edit_uri_template to docs/schema.json (#7466)
e5c9575 Fixed invalid tooltip position in tables when using table sort
7a770dc Updated blog post
See full diff in compare view

Updates mkdocs-git-revision-date-localized-plugin from 1.2.6 to 1.2.7

Release notes

Sourced from mkdocs-git-revision-date-localized-plugin's releases.

revision-date-localized v1.2.7

What's Changed

fixed a timeago display bug by @ketikai in timvink/mkdocs-git-revision-date-localized-plugin#141

fix: Gitlab doc link by @ethrgeist in timvink/mkdocs-git-revision-date-localized-plugin#137

New Contributors

@ethrgeist made their first contribution in timvink/mkdocs-git-revision-date-localized-plugin#137

@ketikai made their first contribution in timvink/mkdocs-git-revision-date-localized-plugin#141

Full Changelog: timvink/mkdocs-git-revision-date-localized-plugin@v1.2.6...v1.2.7

Commits

50c2736 update gh actions
b227ce8 bump to v1.2.7
10fee7e Merge pull request #141 from ketikai/master
b5beb20 fix(timeago): fixed a timeago display bug
66b952c Update README.md to be more clear on CI systems
5482924 Merge pull request #137 from ethrgeist/fix/gitlab-git-depth-link
94afa22 fix: Gitlab doc link
See full diff in compare view

Updates ruff from 0.6.1 to 0.6.2

Release notes

Sourced from ruff's releases.

0.6.2

Release Notes

Preview features

[flake8-simplify] Extend open-file-with-context-handler to work with other standard-library IO modules (SIM115) (#12959)

[ruff] Avoid unused-async for functions with FastAPI route decorator (RUF029) (#12938)

[ruff] Ignore fstring-missing-syntax (RUF027) for fastAPI paths (#12939)

[ruff] Implement check for Decimal called with a float literal (RUF032) (#12909)

Rule changes

[flake8-bugbear] Update diagnostic message when expression is at the end of function (B015) (#12944)

[flake8-pyi] Skip type annotations in string-or-bytes-too-long (PYI053) (#13002)

[flake8-type-checking] Always recognise relative imports as first-party (#12994)

[flake8-unused-arguments] Ignore unused arguments on stub functions (ARG001) (#12966)

[pylint] Ignore augmented assignment for self-cls-assignment (PLW0642) (#12957)

Server

Show full context in error log messages (#13029)

Bug fixes

[pep8-naming] Don't flag from imports following conventional import names (N817) (#12946)

[pylint] - Allow __new__ methods to have cls as their first argument even if decorated with @staticmethod for bad-staticmethod-argument (PLW0211) (#12958)

Documentation

Add hyperfine installation instructions; update hyperfine code samples (#13034)

Expand note to use Ruff with other language server in Kate (#12806)

Update example for PT001 as per the new default behavior (#13019)

[perflint] Improve docs for try-except-in-loop (PERF203) (#12947)

[pydocstyle] Add reference to lint.pydocstyle.ignore-decorators setting to rule docs (#12996)

Contributors

@AlexWaygood

@FinchPowers

@InSyncWithFoo

@MichaReiser

@Skylion007

@TomerBin

@carljm

@charliermarsh

@dhruvmanila

@diceroll123

@dsal3389

@dylwil3

@kbaskett248

@lengau

... (truncated)

Changelog

Sourced from ruff's changelog.

0.6.2

Preview features

[flake8-simplify] Extend open-file-with-context-handler to work with other standard-library IO modules (SIM115) (#12959)

[ruff] Avoid unused-async for functions with FastAPI route decorator (RUF029) (#12938)

[ruff] Ignore fstring-missing-syntax (RUF027) for fastAPI paths (#12939)

[ruff] Implement check for Decimal called with a float literal (RUF032) (#12909)

Rule changes

[flake8-bugbear] Update diagnostic message when expression is at the end of function (B015) (#12944)

[flake8-pyi] Skip type annotations in string-or-bytes-too-long (PYI053) (#13002)

[flake8-type-checking] Always recognise relative imports as first-party (#12994)

[flake8-unused-arguments] Ignore unused arguments on stub functions (ARG001) (#12966)

[pylint] Ignore augmented assignment for self-cls-assignment (PLW0642) (#12957)

Server

Show full context in error log messages (#13029)

Bug fixes

[pep8-naming] Don't flag from imports following conventional import names (N817) (#12946)

[pylint] - Allow __new__ methods to have cls as their first argument even if decorated with @staticmethod for bad-staticmethod-argument (PLW0211) (#12958)

Documentation

Add hyperfine installation instructions; update hyperfine code samples (#13034)

Expand note to use Ruff with other language server in Kate (#12806)

Update example for PT001 as per the new default behavior (#13019)

[perflint] Improve docs for try-except-in-loop (PERF203) (#12947)

[pydocstyle] Add reference to lint.pydocstyle.ignore-decorators setting to rule docs (#12996)

Commits

02c4373 Bump version to 0.6.2 (#13056)
d37e2e5 [flake8-simplify] Extend open-file-with-context-handler to work with other ...
d1d0678 [red-knot] Remove notebook support from the server (#13040)
93f9023 Add hyperfine installation instructions; update hyperfine code samples (#...
8144a11 [red-knot] Add definition for with items (#12920)
dce87c2 Eagerly validate typeshed versions (#12786)
f873d2a Revert "Use the system allocator for codspeed benchmarks" (#13035)
ecd9e6a [red-knot] Improve the unresolved-import check (#13007)
785c399 Use ZIP file size metadata to allocate string (#13032)
a35cdbb Fix various panicks when linting black/src (#13033)
Additional commits viewable in compare view

Updates semgrep from 1.84.1 to 1.85.0

Release notes

Sourced from semgrep's releases.

Release v1.85.0

1.85.0 - 2024-08-15

Added

Semgrep now recognizes files ending with the extention .tfvars as terraform files (saf-1481)

Changed

The use of --debug will not generate anymore profiling information. Use --time instead. (debug)

Updated link to the Supply Chain findings page on Semgrep AppSec Platform to filter to the specific repository and ref the findings are detected on. (secw-2395)

Fixed
Fixed an error with julia list comprehentions where the pattern:
[$A for $B in $C]
would match
[x for y in z]
However we would only get one binding [$A/x]

Behavior after fix: we get three bindings [$A/x,$B/y,$C/z] (saf-1480)

Changelog

Sourced from semgrep's changelog.

1.85.0 - 2024-08-15

Added

Semgrep now recognizes files ending with the extention .tfvars as terraform files (saf-1481)

Changed

The use of --debug will not generate anymore profiling information. Use --time instead. (debug)

Updated link to the Supply Chain findings page on Semgrep AppSec Platform to filter to the specific repository and ref the findings are detected on. (secw-2395)

Fixed
Fixed an error with julia list comprehentions where the pattern:
[$A for $B in $C]
would match
[x for y in z]
However we would only get one binding [$A/x]

Behavior after fix: we get three bindings [$A/x,$B/y,$C/z] (saf-1480)

Commits

2490e33 chore: Bump version to 1.85.0
cf04235 Read event name from env var in managed scanning (semgrep/semgrep-proprietary...
1ad70b2 Do not profile rules anymore when using --debug (semgrep/semgrep-proprietary#...
98de3d1 fix(julia): [... for ... in ...] comprehension metavariable bindings (semgr...
6d0885esemgrep/semgrep-proprietary#2008
1bc14ffsemgrep/semgrep-proprietary#2012
caf2b87 feat: add the number of bytes of a file to traces (semgrep/semgrep-proprietar...
26a3540 feat(interfaces): process files w/extension .tfvars as terraform files (sem...
b013879semgrep/semgrep-proprietary#2009
0e8fd31semgrep/semgrep-proprietary#2005
Additional commits viewable in compare view

Updates pytest-asyncio from 0.23.8 to 0.24.0

Release notes

Sourced from pytest-asyncio's releases.

pytest-asyncio 0.24.0

0.24.0 (2024-08-22)

BREAKING: Updated minimum supported pytest version to v8.2.0

Adds an optional loop_scope keyword argument to pytest.mark.asyncio. This argument controls which event loop is used to run the marked async test. #706, #871

Deprecates the optional scope keyword argument to pytest.mark.asyncio for API consistency with pytest_asyncio.fixture. Users are encouraged to use the loop_scope keyword argument, which does exactly the same.

Raises an error when passing scope or loop_scope as a positional argument to @pytest.mark.asyncio. #812

Fixes a bug that caused module-scoped async fixtures to fail when reused in other modules #862 #668

pytest-asyncio 0.24.0a1

0.24.0 (UNRELEASED)

BREAKING: Updated minimum supported pytest version to v8.2.0

Adds an optional loop_scope keyword argument to pytest.mark.asyncio. This argument controls which event loop is used to run the marked async test. #706, #871

Deprecates the optional scope keyword argument to pytest.mark.asyncio for API consistency with pytest_asyncio.fixture. Users are encouraged to use the loop_scope keyword argument, which does exactly the same.

Raises an error when passing scope or loop_scope as a positional argument to @pytest.mark.asyncio. #812

Fixes a bug that caused module-scoped async fixtures to fail when reused in other modules #862 #668

pytest-asyncio 0.24.0a0

0.24.0 (UNRELEASED)

Adds an optional loop_scope keyword argument to pytest.mark.asyncio. This argument controls which event loop is used to run the marked async test. #706, #871

Deprecates the optional scope keyword argument to pytest.mark.asyncio for API consistency with pytest_asyncio.fixture. Users are encouraged to use the loop_scope keyword argument, which does exactly the same.

Raises an error when passing scope or loop_scope as a positional argument to @pytest.mark.asyncio. #812

Commits

fb5422f docs: Set release date for v0.24 in changelog.
6dc7f58 docs: Add migration guides for pytest-asyncio v0.21 and v0.23.
1bfc181 Wire Sphinx builds into the RTD config via tox
f03cf13 Build(deps): Bump hypothesis in /dependencies/default
69540bf Build(deps): Bump attrs from 24.1.0 to 24.2.0 in /dependencies/default
b0ccfc5 Build(deps): Bump hypothesis in /dependencies/default
574f1db Build(deps): Bump babel from 2.15.0 to 2.16.0 in /dependencies/docs
ae30dac Update .readthedocs.yaml to install pytest-asyncio
972a704 Derive project version using importlib
d587a52 [pre-commit.ci] pre-commit autoupdate
Additional commits viewable in compare view

Updates fastapi from 0.112.0 to 0.112.1

Release notes

Sourced from fastapi's releases.

0.112.1

Upgrades

⬆️ Allow Starlette 0.38.x, update the pin to >=0.37.2,<0.39.0. PR #11876 by @musicinmybrain.

Docs

📝 Update docs section about "Don't Translate these Pages". PR #12022 by @tiangolo.

📝 Add documentation for non-translated pages and scripts to verify them. PR #12020 by @tiangolo.

📝 Update docs about discussions questions. PR #11985 by @tiangolo.

Translations

🌐 Add Portuguese translation for docs/pt/docs/tutorial/bigger-applications.md. PR #11971 by @marcelomarkus.

🌐 Add Portuguese translation for docs/pt/docs/advanced/testing-websockets.md. PR #11994 by @ceb10n.

🌐 Add Portuguese translation for docs/pt/docs/advanced/testing-dependencies.md. PR #11995 by @ceb10n.

🌐 Add Portuguese translation for docs/pt/docs/advanced/using-request-directly.md. PR #11956 by @ceb10n.

🌐 Add French translation for docs/fr/docs/tutorial/body-multiple-params.md. PR #11796 by @pe-brian.

🌐 Update Chinese translation for docs/zh/docs/tutorial/query-params.md. PR #11557 by @caomingpei.

🌐 Update typo in Chinese translation for docs/zh/docs/advanced/testing-dependencies.md. PR #11944 by @bestony.

🌐 Add Portuguese translation for docs/pt/docs/advanced/sub-applications.md and docs/pt/docs/advanced/behind-a-proxy.md. PR #11856 by @marcelomarkus.

🌐 Add Portuguese translation for docs/pt/docs/tutorial/cors.md and docs/pt/docs/tutorial/middleware.md. PR #11916 by @wesinalves.

🌐 Add French translation for docs/fr/docs/tutorial/path-params-numeric-validations.md. PR #11788 by @pe-brian.

Internal

⬆ Bump pypa/gh-action-pypi-publish from 1.8.14 to 1.9.0. PR #11727 by @dependabot[bot].

🔧 Add changelog URL to pyproject.toml, shows in PyPI. PR #11152 by @Pierre-VF.

👷 Do not sync labels as it overrides manually added labels. PR #12024 by @tiangolo.

👷🏻 Update Labeler GitHub Actions. PR #12019 by @tiangolo.

🔧 Update configs for MkDocs for languages and social cards. PR #12016 by @tiangolo.

👷 Update permissions and config for labeler GitHub Action. PR #12008 by @tiangolo.

👷🏻 Add GitHub Action label-checker. PR #12005 by @tiangolo.

👷 Add label checker GitHub Action. PR #12004 by @tiangolo.

👷 Update GitHub Action add-to-project. PR #12002 by @tiangolo.

🔧 Update labeler GitHub Action. PR #12001 by @tiangolo.

👷 Add GitHub Action labeler. PR #12000 by @tiangolo.

👷 Add GitHub Action add-to-project. PR #11999 by @tiangolo.

📝 Update admonitions in docs missing. PR #11998 by @tiangolo.

🔨 Update docs.py script to enable dirty reload conditionally. PR #11986 by @tiangolo.

🔧 Update MkDocs instant previews. PR #11982 by @tiangolo.

🐛 Fix deploy docs previews script to handle mkdocs.yml files. PR #11984 by @tiangolo.

💡 Add comment about custom Termynal line-height. PR #11976 by @tiangolo.

👷 Add alls-green for test-redistribute. PR #11974 by @tiangolo.

👷 Update docs-previews to handle no docs changes. PR #11975 by @tiangolo.

🔨 Refactor script deploy_docs_status.py to account for deploy URLs with or without trailing slash. PR #11965 by @tiangolo.

🔒️ Update permissions for deploy-docs action. PR #11964 by @tiangolo.

👷🏻 Add deploy docs status and preview links to PRs. PR #11961 by @tiangolo.

🔧 Update docs setup with latest configs and plugins. PR #11953 by @tiangolo.

🔇 Ignore warning from attrs in Trio. PR #11949 by @tiangolo.

Commits

4f937c0 🔖 Release version 0.112.1
94be8ff 📝 Update release notes
285a54c ⬆ Bump pypa/gh-action-pypi-publish from 1.8.14 to 1.9.0 (#11727)
b7c80cb 📝 Update release notes
0d92b42 🔧 Add changelog URL to pyproject.toml, shows in PyPI (#11152)
2f5ed4f 📝 Update release notes
2c98017 👷 Do not sync labels as it overrides manually added labels (#12024)
fc91078 📝 Update release notes
5fd9ab9 ⬆️ Allow Starlette 0.38.x, update the pin to >=0.37.2,<0.39.0 (#11876)
84d69bb 📝 Update release notes
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the github-actions group with 6 updates: | Package | From | To | | --- | --- | --- | | [mkdocs-material](https://github.com/squidfunk/mkdocs-material) | `9.5.32` | `9.5.33` | | [mkdocs-git-revision-date-localized-plugin](https://github.com/timvink/mkdocs-git-revision-date-localized-plugin) | `1.2.6` | `1.2.7` | | [ruff](https://github.com/astral-sh/ruff) | `0.6.1` | `0.6.2` | | [semgrep](https://github.com/returntocorp/semgrep) | `1.84.1` | `1.85.0` | | [pytest-asyncio](https://github.com/pytest-dev/pytest-asyncio) | `0.23.8` | `0.24.0` | | [fastapi](https://github.com/fastapi/fastapi) | `0.112.0` | `0.112.1` | Updates `mkdocs-material` from 9.5.32 to 9.5.33 - [Release notes](https://github.com/squidfunk/mkdocs-material/releases) - [Changelog](https://github.com/squidfunk/mkdocs-material/blob/master/CHANGELOG) - [Commits](squidfunk/mkdocs-material@9.5.32...9.5.33) Updates `mkdocs-git-revision-date-localized-plugin` from 1.2.6 to 1.2.7 - [Release notes](https://github.com/timvink/mkdocs-git-revision-date-localized-plugin/releases) - [Commits](timvink/mkdocs-git-revision-date-localized-plugin@v1.2.6...v1.2.7) Updates `ruff` from 0.6.1 to 0.6.2 - [Release notes](https://github.com/astral-sh/ruff/releases) - [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md) - [Commits](astral-sh/ruff@0.6.1...0.6.2) Updates `semgrep` from 1.84.1 to 1.85.0 - [Release notes](https://github.com/returntocorp/semgrep/releases) - [Changelog](https://github.com/semgrep/semgrep/blob/develop/CHANGELOG.md) - [Commits](semgrep/semgrep@v1.84.1...v1.85.0) Updates `pytest-asyncio` from 0.23.8 to 0.24.0 - [Release notes](https://github.com/pytest-dev/pytest-asyncio/releases) - [Commits](pytest-dev/pytest-asyncio@v0.23.8...v0.24.0) Updates `fastapi` from 0.112.0 to 0.112.1 - [Release notes](https://github.com/fastapi/fastapi/releases) - [Commits](fastapi/fastapi@0.112.0...0.112.1) --- updated-dependencies: - dependency-name: mkdocs-material dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: mkdocs-git-revision-date-localized-plugin dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: ruff dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: semgrep dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: pytest-asyncio dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: fastapi dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions ... Signed-off-by: dependabot[bot] <[email protected]>

dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Aug 23, 2024

Lancetnik approved these changes Aug 23, 2024

View reviewed changes

Lancetnik enabled auto-merge August 23, 2024 15:47

Lancetnik added this pull request to the merge queue Aug 23, 2024

Merged via the queue into main with commit ff448a8 Aug 23, 2024
27 checks passed

Lancetnik deleted the dependabot/pip/github-actions-43024039c6 branch August 23, 2024 16:09

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): bump the github-actions group with 6 updates #1722

chore(deps): bump the github-actions group with 6 updates #1722

dependabot bot commented on behalf of github Aug 23, 2024

chore(deps): bump the github-actions group with 6 updates #1722

chore(deps): bump the github-actions group with 6 updates #1722

Conversation

dependabot bot commented on behalf of github Aug 23, 2024

mkdocs-material-9.5.33

revision-date-localized v1.2.7

What's Changed

New Contributors

0.6.2

Release Notes

Preview features

Rule changes

Server

Bug fixes

Documentation

Contributors

0.6.2

Preview features

Rule changes

Server

Bug fixes

Documentation

Release v1.85.0

1.85.0 - 2024-08-15

Added

Changed

Fixed

1.85.0 - 2024-08-15

Added

Changed

Fixed

pytest-asyncio 0.24.0

0.24.0 (2024-08-22)

pytest-asyncio 0.24.0a1

0.24.0 (UNRELEASED)

pytest-asyncio 0.24.0a0

0.24.0 (UNRELEASED)

0.112.1

Upgrades

Docs

Translations

Internal