chore(deps): bump the pip group across 1 directory with 6 updates #2005

dependabot · 2024-12-23T11:15:06Z

Bumps the pip group with 6 updates in the / directory:

Package	From	To
mkdocs-material	`9.5.48`	`9.5.49`
mypy	`1.13.0`	`1.14.0`
ruff	`0.8.2`	`0.8.4`
semgrep	`1.99.0`	`1.101.0`
coverage[toml]	`7.6.1`	`7.6.9`
pytest-asyncio	`0.24.0`	`0.25.0`

Updates mkdocs-material from 9.5.48 to 9.5.49

Release notes

Sourced from mkdocs-material's releases.

mkdocs-material-9.5.49

Adjusted title color in dark mode for all supported Mermaid.js diagrams

Fixed #7803: Privacy plugin crashes on generated files

Fixed #7781: Mermaid.js flow chart title not visible in dark mode

Changelog

Sourced from mkdocs-material's changelog.

mkdocs-material-9.5.49 (2024-12-16)

Adjusted title color in dark mode for all supported Mermaid.js diagrams

Fixed #7803: Privacy plugin crashes on generated files

Fixed #7781: Mermaid.js flow chart title not visible in dark mode

mkdocs-material-9.5.48 (2024-12-08)

Fixed #7774: Disabling social cards doesn't work

mkdocs-material-9.5.47 (2024-12-01)

Fixed #7750: Numeric tags break search

Fixed #7748: Blog plugin breaks when using future drafts (9.5.45 regression)

mkdocs-material-9.5.46 (2024-11-25)

Added support for removing preload hints in privacy plugin

Fixed #7734: Code blocks in h5 headlines are uppercased

Fixed #7725: Blog plugin crashing on missing timezone (9.5.45 regression)

mkdocs-material-9.5.45 (2024-11-20)

Reduced size of Docker image through multi-stage build

Fixed #7708: Blog plugin crashing on YAML dates with timezones

mkdocs-material-9.5.44 (2024-11-05)

Fixed #7672: Font CSS 404's when using privacy plugin (9.5.43 regression)

mkdocs-material-9.5.43 (2024-10-31)

Added support for external images in SVGs in privacy plugin

Fixed #7651: Privacy plugin doesn't handle quoted URLs in CSS

mkdocs-material-9.5.42 (2024-10-20)

Fixed #7625: Invalid encoding of boolean attributes in privacy plugin

Fixed #7624: Crash when disabling privacy plugin (9.5.41 regression)

mkdocs-material-9.5.41 (2024-10-15)

Fixed #7619: Improved tooltip on logo disappears after instant navigation

Fixed #7616: Race condition in built-in privacy plugin when inlining assets

Fixed #7615: Comments and "Was this page helpful?" visible when printing

mkdocs-material-9.5.40 (2024-10-10)

Updated Latvian translations

Fixed #7597: Social cards not using site name on home page

... (truncated)

Commits

f947bbe Prepare 9.5.49 release
968fbe1 Fixed privacy plugin interop with generated files
c97270c Updated dependencies
7fb3a39 Documentation (#7794)
1ee1115 Updated dependencies
b368cee Fixed diagram title not switching color in dark mode
0f97a8d Documentation (#7784)
See full diff in compare view

Updates mypy from 1.13.0 to 1.14.0

Changelog

Sourced from mypy's changelog.

Mypy Release Notes

Next release

...

Mypy 1.14

We’ve just uploaded mypy 1.14 to the Python Package Index (PyPI). Mypy is a static type checker for Python. This release includes new features and bug fixes. You can install it as follows:
python3 -m pip install -U mypy
You can read the full documentation for this release on Read the Docs.

Change to Enum Membership Semantics

As per the updated typing specification for enums, enum members must be left unannotated.
class Pet(Enum):
    CAT = 1  # Member attribute
    DOG = 2  # Member attribute
# New error: Enum members must be left unannotated
WOLF: int = 3
species: str  # Considered a non-member attribute
In particular, the specification change can result in issues in type stubs (.pyi files), since historically it was common to leave the value absent:
# In a type stub (.pyi file)
class Pet(Enum):
# Change in semantics: previously considered members,
# now non-member attributes
CAT: int
DOG: int
# Mypy will now issue a warning if it detects this
# situation in type stubs:
# &gt; Detected enum &quot;Pet&quot; in a type stub with zero
# &gt; members. There is a chance this is due to a recent
# &gt; change in the semantics of enum membership. If so,
# &gt; use `member = value` to mark an enum member,

</tr></table>

... (truncated)

Commits

6f37859 Remove +dev from version for release 1.14
5a6a754 Minor updates to 1.14 changelog (#18310)
9772d48 Update changelog for release 1.14 (#18301)
92473c8 Warn about --follow-untyped-imports (#18249)
e6ce8be PEP 702 (@deprecated): descriptors (#18090)
5082a22 [mypyc] Document optimized bytes ops and additional str ops (#18242)
ee19ea7 [mypyc] Add primitives and specialization for ord() (#18240)
cc45bec [mypyc] Make exception type check in assertRaises test helper precise (#18241)
f51090d Make "deprecated" Note a standard Error, disabled by default (#18192)
242873a Implement flag to allow typechecking of untyped modules (#17712)
Additional commits viewable in compare view

Updates ruff from 0.8.2 to 0.8.4

Release notes

Sourced from ruff's releases.

0.8.4

Release Notes

Preview features

[airflow] Extend AIR302 with additional functions and classes (#15015)

[airflow] Implement moved-to-provider-in-3 for modules that has been moved to Airflow providers (AIR303) (#14764)

[flake8-use-pathlib] Extend check for invalid path suffix to include the case "." (PTH210) (#14902)

[perflint] Fix panic in PERF401 when list variable is after the for loop (#14971)

[perflint] Simplify finding the loop target in PERF401 (#15025)

[pylint] Preserve original value format (PLR6104) (#14978)

[ruff] Avoid false positives for RUF027 for typing context bindings (#15037)

[ruff] Check for ambiguous pattern passed to pytest.raises() (RUF043) (#14966)

Rule changes

[flake8-bandit] Check S105 for annotated assignment (#15059)

[flake8-pyi] More autofixes for redundant-none-literal (PYI061) (#14872)

[pydocstyle] Skip leading whitespace for D403 (#14963)

[ruff] Skip SQLModel base classes for mutable-class-default (RUF012) (#14949)

Bug

[perflint] Parenthesize walrus expressions in autofix for manual-list-comprehension (PERF401) (#15050)

Server

Check diagnostic refresh support from client capability which enables dynamic configuration for various editors (#15014)

Contributors

@AlexWaygood

@Daverball

@DimitriPapadopoulos

@InSyncWithFoo

@Lee-W

@MichaReiser

@TheBits

@cake-monotone

@carljm

@dcreager

@dhruvmanila

@dylwil3

@github-actions

@kiran-4444

@krishnan-chandra

@rchen152

@renovate

@sharkdp

@tarasmatsyk

@w0nder1ng

... (truncated)

Changelog

Sourced from ruff's changelog.

0.8.4

Preview features

[airflow] Extend AIR302 with additional functions and classes (#15015)

[airflow] Implement moved-to-provider-in-3 for modules that has been moved to Airflow providers (AIR303) (#14764)

[flake8-use-pathlib] Extend check for invalid path suffix to include the case "." (PTH210) (#14902)

[perflint] Fix panic in PERF401 when list variable is after the for loop (#14971)

[perflint] Simplify finding the loop target in PERF401 (#15025)

[pylint] Preserve original value format (PLR6104) (#14978)

[ruff] Avoid false positives for RUF027 for typing context bindings (#15037)

[ruff] Check for ambiguous pattern passed to pytest.raises() (RUF043) (#14966)

Rule changes

[flake8-bandit] Check S105 for annotated assignment (#15059)

[flake8-pyi] More autofixes for redundant-none-literal (PYI061) (#14872)

[pydocstyle] Skip leading whitespace for D403 (#14963)

[ruff] Skip SQLModel base classes for mutable-class-default (RUF012) (#14949)

Bug

[perflint] Parenthesize walrus expressions in autofix for manual-list-comprehension (PERF401) (#15050)

Server

Check diagnostic refresh support from client capability which enables dynamic configuration for various editors (#15014)

0.8.3

Preview features

Fix fstring formatting removing overlong implicit concatenated string in expression part (#14811)

[airflow] Add fix to remove deprecated keyword arguments (AIR302) (#14887)

[airflow]: Extend rule to include deprecated names for Airflow 3.0 (AIR302) (#14765 and #14804)

[flake8-bugbear] Improve error messages for except* (B025, B029, B030, B904) (#14815)

[flake8-bugbear] itertools.batched() without explicit strict (B911) (#14408)

[flake8-use-pathlib] Dotless suffix passed to Path.with_suffix() (PTH210) (#14779)

[pylint] Include parentheses and multiple comparators in check for boolean-chained-comparison (PLR1716) (#14781)

[ruff] Do not simplify round() calls (RUF046) (#14832)

[ruff] Don't emit used-dummy-variable on function parameters (RUF052) (#14818)

[ruff] Implement if-key-in-dict-del (RUF051) (#14553)

[ruff] Mark autofix for RUF052 as always unsafe (#14824)

[ruff] Teach autofix for used-dummy-variable about TypeVars etc. (RUF052) (#14819)

Rule changes

[flake8-bugbear] Offer unsafe autofix for no-explicit-stacklevel (B028) (#14829)

[flake8-pyi] Skip all type definitions in string-or-bytes-too-long (PYI053) (#14797)

[pyupgrade] Do not report when a UTF-8 comment is followed by a non-UTF-8 one (UP009) (#14728)

... (truncated)

Commits

3bb0dac Bump version to 0.8.4 (#15064)
40cba5d [red-knot] Cleanup various todo_type!() messages (#15063)
596d80c [perflint] Parenthesize walrus expressions in autofix for `manual-list-comp...
d8b9a36 Disable actionlint hook by default when running pre-commit locally (#15061)
85e71ba [flake8-bandit] Check S105 for annotated assignment (#15059)
2802cbd Don't special-case class instances in unary expression inference (#15045)
ed2bce6 [red-knot] Report invalid exceptions (#15042)
f0012df Fix typos in RUF043.py (#15044)
0fc4e8f Introduce InferContext (#14956)
ac81c72 [ruff] Ambiguous pattern passed to pytest.raises() (RUF043) (#14966)
Additional commits viewable in compare view

Updates semgrep from 1.99.0 to 1.101.0

Release notes

Sourced from semgrep's releases.

Release v1.101.0

1.101.0 - 2024-12-18

Added

Improved pnpm-lock.yaml parsing. (gh-2663)

Changed

Re-ordered some terminal output of semgrep ci to allow semgrep-app to block scans based on specific findings (SECW-2740)
A few fields in the JSON output (e.g., "fingerprint", "metavars") require now the user to be logged in to see them. See https://semgrep.dev/docs/semgrep-appsec-platform/json-and-sarif#json for more information. (json)
We're renaming semgrep OSS to Semgrep Community Edition. See https://semgrep.dev/blog/2024/important-updates-to-semgrep-oss/ for more information. (rename)
A few fields in the SARIF output (e.g., "fingerprints") require now the user to be logged in to see them. See https://semgrep.dev/docs/semgrep-appsec-platform/json-and-sarif#sarif for more information. (sarif)

Fixed

pro: Improved inter-file tracking of tainted global variables. (code-7054)

Python (pro-only): Taint now correctly tracks through calls to class methods within a class, via the cls parameter.

So for instance, we would be able to determine a source-to-sink vulnerability in the following code snippet:

class A:
  def foo(self, x):
    sink(x)
@classmethod

def bar(cls):

cls.foo(source)
</code></pre>
</li>
<li>
<p>pro: Fixed bug when generating inter-procedural taint traces, that it could
cause a call-step to be missing in the trace. (saf-1783)</p>
</li>
<li>
<p>Restored the &quot;rules&quot; field in the SARIF output, even when logged out. (saf-1794)</p>
</li>
</ul>
<h2>Release v1.100.0</h2>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/semgrep/semgrep/blob/develop/CHANGELOG.md&quot;&gt;semgrep's changelog</a>.</em></p>

<blockquote>

<h2><a href="https://github.com/semgrep/semgrep/releases/tag/v1.101.0&quot;&gt;1.101.0&lt;/a> - 2024-12-18</h2>

<h3>Added</h3>

<ul>

<li>Improved pnpm-lock.yaml parsing. (<a href="https://redirect.github.com/returntocorp/semgrep/issues/2663&quot;&gt;gh-2663&lt;/a&gt;)&lt;/li>

</ul>

<h3>Changed</h3>

<ul>

<li>Re-ordered some terminal output of <code>semgrep ci</code> to allow semgrep-app to block scans based on specific findings (SECW-2740)</li>

<li>A few fields in the JSON output (e.g., &quot;fingerprint&quot;, &quot;metavars&quot;) require now

the user to be logged in to see them.

See <a href="https://semgrep.dev/docs/semgrep-appsec-platform/json-and-sarif#json&quot;&gt;https://semgrep.dev/docs/semgrep-appsec-platform/json-and-sarif#json&lt;/a>

for more information. (json)</li>

<li>We're renaming semgrep OSS to Semgrep Community Edition.

See <a href="https://semgrep.dev/blog/2024/important-updates-to-semgrep-oss/&quot;&gt;https://semgrep.dev/blog/2024/important-updates-to-semgrep-oss/&lt;/a>

for more information. (rename)</li>

<li>A few fields in the SARIF output (e.g., &quot;fingerprints&quot;) require now

the user to be logged in to see them.

See <a href="https://semgrep.dev/docs/semgrep-appsec-platform/json-and-sarif#sarif&quot;&gt;https://semgrep.dev/docs/semgrep-appsec-platform/json-and-sarif#sarif&lt;/a>

for more information. (sarif)</li>

</ul>

<h3>Fixed</h3>

<ul>

<li>

<p>pro: Improved inter-file tracking of tainted global variables. (code-7054)</p>

</li>

<li>

<p>Python (pro-only): Taint now correctly tracks through calls to class methods

within a class, via the <code>cls</code> parameter.</p>

<p>So for instance, we would be able to determine a source-to-sink

vulnerability in the following code snippet:</p>

<pre><code>class A:

def foo(self, x):

sink(x)
@classmethod

def bar(cls):

cls.foo(source)
&lt;/code&gt;&lt;/pre&gt;
&lt;/li&gt;
&lt;li&gt;
&lt;p&gt;pro: Fixed bug when generating inter-procedural taint traces, that it could
cause a call-step to be missing in the trace. (saf-1783)&lt;/p&gt;
&lt;/li&gt;
&lt;li&gt;
&lt;p&gt;Restored the &amp;quot;rules&amp;quot; field in the SARIF output, even when logged out. (saf-1794)&lt;/p&gt;
&lt;/li&gt;
&lt;/ul&gt;
&lt;h2&gt;&lt;a href=&quot;https://github.com/semgrep/semgrep/releases/tag/v1.100.0&quot;&gt;1.100.0&lt;/a&gt; - 2024-12-12&lt;/h2&gt;
&lt;!-- raw HTML omitted --&gt;
&lt;/blockquote&gt;
&lt;p&gt;... (truncated)&lt;/p&gt;
&lt;/details&gt;
&lt;details&gt;
&lt;summary&gt;Commits&lt;/summary&gt;

&lt;ul&gt;
&lt;li&gt;&lt;a href=&quot;https://github.com/semgrep/semgrep/commit/da1124acb54b20c57ba454b49cb7ea65be7bac00&quot;&gt;&lt;code&gt;da1124a&lt;/code&gt;&lt;/a&gt; chore: release version 1.101.0&lt;/li&gt;
&lt;li&gt;&lt;a href=&quot;https://github.com/semgrep/semgrep/commit/611bdbd15026dfdd38fa30b93889925fa50e444e&quot;&gt;&lt;code&gt;611bdbd&lt;/code&gt;&lt;/a&gt;&lt;code&gt;semgrep/semgrep-proprietary#2800&lt;/code&gt;&lt;/li&gt;
&lt;li&gt;&lt;a href=&quot;https://github.com/semgrep/semgrep/commit/c04cd3859d74839950e7f4bce522b76871123533&quot;&gt;&lt;code&gt;c04cd38&lt;/code&gt;&lt;/a&gt; SARIF: restore the &amp;quot;rules&amp;quot; field even when logged out (semgrep/semgrep-propri...&lt;/li&gt;
&lt;li&gt;&lt;a href=&quot;https://github.com/semgrep/semgrep/commit/ac656ed70771e53ac85ca89d8d02331427f4d0e3&quot;&gt;&lt;code&gt;ac656ed&lt;/code&gt;&lt;/a&gt; osemgrep: Remove use of Fmt for Xxx_report.ml and consolidate in Text_reports...&lt;/li&gt;
&lt;li&gt;&lt;a href=&quot;https://github.com/semgrep/semgrep/commit/9dc60c18cdba6eb6925b240456f93363fc3bfe54&quot;&gt;&lt;code&gt;9dc60c1&lt;/code&gt;&lt;/a&gt;&lt;code&gt;semgrep/semgrep-proprietary#2&lt;/code&gt;&lt;/li&gt;
&lt;li&gt;&lt;a href=&quot;https://github.com/semgrep/semgrep/commit/bfd1c717c66602912bc0c1d5dd4d6d8946531df8&quot;&gt;&lt;code&gt;bfd1c71&lt;/code&gt;&lt;/a&gt;&lt;code&gt;semgrep/semgrep-proprietary#2745&lt;/code&gt;&lt;/li&gt;
&lt;li&gt;&lt;a href=&quot;https://github.com/semgrep/semgrep/commit/eeb85e609c7382f6b09230c048500d3fb2eba18d&quot;&gt;&lt;code&gt;eeb85e6&lt;/code&gt;&lt;/a&gt; feat: Reorder output of &lt;code&gt;semgrep ci&lt;/code&gt; to allow the app to mark specific findin...&lt;/li&gt;
&lt;li&gt;&lt;a href=&quot;https://github.com/semgrep/semgrep/commit/f74a69d9b124baf7c7745747605d2199a8c8a9c1&quot;&gt;&lt;code&gt;f74a69d&lt;/code&gt;&lt;/a&gt; tainting: Fix missing call-steps in taint traces (semgrep/semgrep-proprietary...&lt;/li&gt;
&lt;li&gt;&lt;a href=&quot;https://github.com/semgrep/semgrep/commit/81a65de263260978efd9c75dfeac13d333587666&quot;&gt;&lt;code&gt;81a65de&lt;/code&gt;&lt;/a&gt; Add changelog entries for the gated loggedin fields (semgrep/semgrep-propriet...&lt;/li&gt;
&lt;li&gt;&lt;a href=&quot;https://github.com/semgrep/semgrep/commit/dc6f9b2971283110066b9703beabaed2f0936bc8&quot;&gt;&lt;code&gt;dc6f9b2&lt;/code&gt;&lt;/a&gt;&lt;code&gt;semgrep/semgrep-proprietary#2756&lt;/code&gt;&lt;/li&gt;
&lt;li&gt;Additional commits viewable in &lt;a href=&quot;https://github.com/returntocorp/semgrep/compare/v1.99.0...v1.101.0&quot;&gt;compare view&lt;/a&gt;&lt;/li&gt;
&lt;/ul&gt;
&lt;/details&gt;

&lt;br /&gt;
</code></pre>

Updates `coverage[toml]` from 7.6.1 to 7.6.9
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/nedbat/coveragepy/releases">coverage[toml]'s releases</a>.</em></p>
<blockquote>
<h2>7.6.9</h2>
<h2>Version 7.6.9 — 2024-12-06</h2>
<ul>
<li>Fix: <a href="https://redirect.github.com/nedbat/coveragepy/pull/1901">Tomas Uribe fixed</a> a performance problem in the XML report. Large code bases should produce XML reports much faster now.</li>
</ul>
<p>:arrow_right:  PyPI page: <a href="https://pypi.org/project/coverage/7.6.9">coverage 7.6.9</a>.
:arrow_right:  To install: <code>python3 -m pip install coverage==7.6.9</code></p>
<h2>7.6.8</h2>
<h2>Version 7.6.8 — 2024-11-23</h2>
<ul>
<li>Fix: the LCOV report code assumed that a branch line that took no branches meant that the entire line was unexecuted. This isn’t true in a few cases: the line might always raise an exception, or might have been optimized away. Fixes <a href="https://redirect.github.com/nedbat/coveragepy/issues/1896">issue 1896</a>.</li>
<li>Fix: similarly, the HTML report will now explain that a line that jumps to none of its expected destinations must have always raised an exception. Previously, it would say something nonsensical like, “line 4 didn’t jump to line 5 because line 4 was never true, and it didn’t jump to line 7 because line 4 was always true.” This was also shown in <a href="https://redirect.github.com/nedbat/coveragepy/issues/1896">issue 1896</a>.</li>
</ul>
<p>:arrow_right:  PyPI page: <a href="https://pypi.org/project/coverage/7.6.8">coverage 7.6.8</a>.
:arrow_right:  To install: <code>python3 -m pip install coverage==7.6.8</code></p>
<h2>7.6.7</h2>
<h2>Version 7.6.7 — 2024-11-15</h2>
<ul>
<li>Fix: ugh, the other assert from 7.6.5 can also be encountered in the wild, so it’s been restored to a conditional. Sorry for the churn.</li>
</ul>
<p>:arrow_right:  PyPI page: <a href="https://pypi.org/project/coverage/7.6.7">coverage 7.6.7</a>.
:arrow_right:  To install: <code>python3 -m pip install coverage==7.6.7</code></p>
<h2>7.6.6</h2>
<h2>Version 7.6.6 — 2024-11-15</h2>
<ul>
<li>One of the new asserts from 7.6.5 caused problems in real projects, as reported in <a href="https://redirect.github.com/nedbat/coveragepy/issues/1891">issue 1891</a>. The assert has been removed.</li>
</ul>
<p>:arrow_right:  PyPI page: <a href="https://pypi.org/project/coverage/7.6.6">coverage 7.6.6</a>.
:arrow_right:  To install: <code>python3 -m pip install coverage==7.6.6</code></p>
<h2>7.6.5</h2>
<h2>Version 7.6.5 — 2024-11-14</h2>
<ul>
<li>Fix: fine-tuned the exact Python version (3.12.6) when exiting from <code>with</code> statements changed how they traced. This affected whether people saw the fix for <a href="https://redirect.github.com/nedbat/coveragepy/issues/1880">issue 1880</a>.</li>
<li>Fix: isolate our code more from mocking in the os module that in rare cases can cause <a href="https://redirect.github.com/pytest-dev/pytest-cov/issues/666">bizarre behavior</a>.</li>
<li>Refactor: some code unreachable code paths in parser.py were changed to asserts. If you encounter any of these, please let me know!</li>
</ul>
<p>:arrow_right:  PyPI page: <a href="https://pypi.org/project/coverage/7.6.5">coverage 7.6.5</a>.
:arrow_right:  To install: <code>python3 -m pip install coverage==7.6.5</code></p>
<h2>7.6.4</h2>
<h2>Version 7.6.4 — 2024-10-20</h2>
<ul>
<li>Fix: multi-line <code>with</code> statements could cause contained branches to be incorrectly marked as missing (<a href="https://redirect.github.com/nedbat/coveragepy/issues/1880">issue 1880</a>). This is now fixed.</li>
</ul>
<p>:arrow_right:  PyPI page: <a href="https://pypi.org/project/coverage/7.6.4">coverage 7.6.4</a>.
:arrow_right:  To install: <code>python3 -m pip install coverage==7.6.4</code></p>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/nedbat/coveragepy/blob/master/CHANGES.rst">coverage[toml]'s changelog</a>.</em></p>
<blockquote>
<h2>Version 7.6.9 — 2024-12-06</h2>
<ul>
<li>Fix: <code>Tomas Uribe fixed &lt;pull 1901_&gt;</code>_ a performance problem in the XML
report.  Large code bases should produce XML reports much faster now.</li>
</ul>
<p>.. _pull 1901: <a href="https://redirect.github.com/nedbat/coveragepy/pull/1901">nedbat/coveragepy#1901</a></p>
<p>.. _changes_7-6-8:</p>
<h2>Version 7.6.8 — 2024-11-23</h2>
<ul>
<li>
<p>Fix: the LCOV report code assumed that a branch line that took no branches
meant that the entire line was unexecuted.  This isn't true in a few cases:
the line might always raise an exception, or might have been optimized away.
Fixes <code>issue 1896</code>_.</p>
</li>
<li>
<p>Fix: similarly, the HTML report will now explain that a line that jumps to
none of its expected destinations must have always raised an exception.
Previously, it would say something nonsensical like, &quot;line 4 didn't jump to
line 5 because line 4 was never true, and it didn't jump to line 7 because
line 4 was always true.&quot;  This was also shown in <code>issue 1896</code>_.</p>
</li>
</ul>
<p>.. _issue 1896: <a href="https://redirect.github.com/nedbat/coveragepy/issues/1896">nedbat/coveragepy#1896</a></p>
<p>.. _changes_7-6-7:</p>
<h2>Version 7.6.7 — 2024-11-15</h2>
<ul>
<li>Fix: ugh, the other assert from 7.6.5 can also be encountered in the wild,
so it's been restored to a conditional.  Sorry for the churn.</li>
</ul>
<p>.. _changes_7-6-6:</p>
<h2>Version 7.6.6 — 2024-11-15</h2>
<ul>
<li>One of the new asserts from 7.6.5 caused problems in real projects, as
reported in <code>issue 1891</code>_.  The assert has been removed.</li>
</ul>
<p>.. _issue 1891: <a href="https://redirect.github.com/nedbat/coveragepy/issues/1891">nedbat/coveragepy#1891</a></p>
<p>.. _changes_7-6-5:</p>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/nedbat/coveragepy/commit/daac76dde1681d968f37095cacc551b464888753"><code>daac76d</code></a> docs: sample HTML for 7.6.9</li>
<li><a href="https://github.com/nedbat/coveragepy/commit/f7d7e42705083b8c124fcc8be64da555095adfc7"><code>f7d7e42</code></a> docs: prep for 7.6.9</li>
<li><a href="https://github.com/nedbat/coveragepy/commit/8fe3b2bad5de5e750c104ad2ddb251a0500dd146"><code>8fe3b2b</code></a> docs: thanks, Tomas Uribe for <a href="https://redirect.github.com/nedbat/coveragepy/issues/1901">#1901</a></li>
<li><a href="https://github.com/nedbat/coveragepy/commit/346cfc03885571fd448f8218a8b9f12836c2fcb2"><code>346cfc0</code></a> fix: use set instead of list for arcs_executed, fixes poor performance (<a href="https://redirect.github.com/nedbat/coveragepy/issues/1901">#1901</a>)</li>
<li><a href="https://github.com/nedbat/coveragepy/commit/484678e8d7c3b07e455e4c5bbce6f4a5bd03a9b4"><code>484678e</code></a> fix: COVERAGE_ONE_CORE should mean ctrace if possible</li>
<li><a href="https://github.com/nedbat/coveragepy/commit/37451ed089cb4c5d25e2fe6c13485407d01be176"><code>37451ed</code></a> chore: make upgrade doc_upgrade</li>
<li><a href="https://github.com/nedbat/coveragepy/commit/bd23445b181387b9c646d6dbf096b624bbc5953b"><code>bd23445</code></a> chore: bump the action-dependencies group with 2 updates (<a href="https://redirect.github.com/nedbat/coveragepy/issues/1899">#1899</a>)</li>
<li><a href="https://github.com/nedbat/coveragepy/commit/01cf50c7d9131af2de9aea1e3573bdff1dc48110"><code>01cf50c</code></a> test: add a test to satisfy a condition in results.py</li>
<li><a href="https://github.com/nedbat/coveragepy/commit/74d3c50af1563b6cbd9ab1ef580267dc55982922"><code>74d3c50</code></a> chore: make upgrade</li>
<li><a href="https://github.com/nedbat/coveragepy/commit/f3b269cc5d5f1683aba34f57c7d5b991c5dd3743"><code>f3b269c</code></a> build: only comment once on an issue mentioned twice</li>
<li>Additional commits viewable in <a href="https://github.com/nedbat/coveragepy/compare/7.6.1...7.6.9">compare view</a></li>
</ul>
</details>
<br />

Updates `pytest-asyncio` from 0.24.0 to 0.25.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/pytest-dev/pytest-asyncio/releases">pytest-asyncio's releases</a>.</em></p>
<blockquote>
<h2>pytest-asyncio 0.25.0</h2>
<h1>0.25.0 (2024-12-13)</h1>
<ul>
<li>Deprecated: Added warning when asyncio test requests async <code>@pytest.fixture</code> in strict mode. This will become an error in a future version of flake8-asyncio. <a href="https://redirect.github.com/pytest-dev/pytest-asyncio/pull/979">#979</a></li>
<li>Updates the error message about <em>pytest.mark.asyncio</em>'s <em>scope</em> keyword argument to say <em>loop_scope</em> instead. <a href="https://redirect.github.com/pytest-dev/pytest-asyncio/pull/1004">#1004</a></li>
<li>Verbose log displays correct parameter name: asyncio_default_fixture_loop_scope <a href="https://redirect.github.com/pytest-dev/pytest-asyncio/pull/990">#990</a></li>
<li>Propagates <em>contextvars</em> set in async fixtures to other fixtures and tests on Python 3.11 and above. <a href="https://redirect.github.com/pytest-dev/pytest-asyncio/pull/1008">#1008</a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/pytest-dev/pytest-asyncio/commit/b24de088dbb92de2cedc506bcc4adb522a72bf7c"><code>b24de08</code></a> build: Prepare release of v0.25.0</li>
<li><a href="https://github.com/pytest-dev/pytest-asyncio/commit/9fd64da493b5278938ade7e1d73ee4a18543325a"><code>9fd64da</code></a> changelog += <code>asyncio_default_fixture_loop_scope</code></li>
<li><a href="https://github.com/pytest-dev/pytest-asyncio/commit/f15b9c2469cacf7b2f2684b4abc2c121dd1defab"><code>f15b9c2</code></a> Add release note for <a href="https://redirect.github.com/pytest-dev/pytest-asyncio/issues/1008">#1008</a></li>
<li><a href="https://github.com/pytest-dev/pytest-asyncio/commit/0184cbab4766417aa662f8c7309bd9b8eb13d2ba"><code>0184cba</code></a> Refactor tests to use Pytester</li>
<li><a href="https://github.com/pytest-dev/pytest-asyncio/commit/97c682f48c60b60c07e977e6cd74e844d43ccd68"><code>97c682f</code></a> Copy context variables from non-generator fixtures</li>
<li><a href="https://github.com/pytest-dev/pytest-asyncio/commit/62ab185208b5c6d497c2618aae1bb96d6f3472f4"><code>62ab185</code></a> Improve contextvars test coverage</li>
<li><a href="https://github.com/pytest-dev/pytest-asyncio/commit/3004bb76050593463819bb809249af76542e54ba"><code>3004bb7</code></a> Simplify contextvars support</li>
<li><a href="https://github.com/pytest-dev/pytest-asyncio/commit/746c11462e1c14f41146e9217ea43df99dc982c2"><code>746c114</code></a> Maintain contextvars.Context in fixtures and tests</li>
<li><a href="https://github.com/pytest-dev/pytest-asyncio/commit/ebbd602687c46e34089963e4a06183e5f9774db0"><code>ebbd602</code></a> docs: describe when UsageError is raised for loop_scope=&quot;class&quot; marker</li>
<li><a href="https://github.com/pytest-dev/pytest-asyncio/commit/c4c1b482de0472d91b40ba0c07935d704c483bce"><code>c4c1b48</code></a> Build(deps): Bump hypothesis in /dependencies/default</li>
<li>Additional commits viewable in <a href="https://github.com/pytest-dev/pytest-asyncio/compare/v0.24.0...v0.25.0">compare view</a></li>
</ul>
</details>
<br />


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions


</details>

Bumps the pip group with 6 updates in the / directory: | Package | From | To | | --- | --- | --- | | [mkdocs-material](https://github.com/squidfunk/mkdocs-material) | `9.5.48` | `9.5.49` | | [mypy](https://github.com/python/mypy) | `1.13.0` | `1.14.0` | | [ruff](https://github.com/astral-sh/ruff) | `0.8.2` | `0.8.4` | | [semgrep](https://github.com/returntocorp/semgrep) | `1.99.0` | `1.101.0` | | [coverage[toml]](https://github.com/nedbat/coveragepy) | `7.6.1` | `7.6.9` | | [pytest-asyncio](https://github.com/pytest-dev/pytest-asyncio) | `0.24.0` | `0.25.0` | Updates `mkdocs-material` from 9.5.48 to 9.5.49 - [Release notes](https://github.com/squidfunk/mkdocs-material/releases) - [Changelog](https://github.com/squidfunk/mkdocs-material/blob/master/CHANGELOG) - [Commits](squidfunk/mkdocs-material@9.5.48...9.5.49) Updates `mypy` from 1.13.0 to 1.14.0 - [Changelog](https://github.com/python/mypy/blob/master/CHANGELOG.md) - [Commits](python/mypy@v1.13.0...v1.14.0) Updates `ruff` from 0.8.2 to 0.8.4 - [Release notes](https://github.com/astral-sh/ruff/releases) - [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md) - [Commits](astral-sh/ruff@0.8.2...0.8.4) Updates `semgrep` from 1.99.0 to 1.101.0 - [Release notes](https://github.com/returntocorp/semgrep/releases) - [Changelog](https://github.com/semgrep/semgrep/blob/develop/CHANGELOG.md) - [Commits](semgrep/semgrep@v1.99.0...v1.101.0) Updates `coverage[toml]` from 7.6.1 to 7.6.9 - [Release notes](https://github.com/nedbat/coveragepy/releases) - [Changelog](https://github.com/nedbat/coveragepy/blob/master/CHANGES.rst) - [Commits](nedbat/coveragepy@7.6.1...7.6.9) Updates `pytest-asyncio` from 0.24.0 to 0.25.0 - [Release notes](https://github.com/pytest-dev/pytest-asyncio/releases) - [Commits](pytest-dev/pytest-asyncio@v0.24.0...v0.25.0) --- updated-dependencies: - dependency-name: mkdocs-material dependency-type: direct:production update-type: version-update:semver-patch dependency-group: pip - dependency-name: mypy dependency-type: direct:production update-type: version-update:semver-minor dependency-group: pip - dependency-name: ruff dependency-type: direct:production update-type: version-update:semver-patch dependency-group: pip - dependency-name: semgrep dependency-type: direct:production update-type: version-update:semver-minor dependency-group: pip - dependency-name: coverage[toml] dependency-type: direct:production update-type: version-update:semver-patch dependency-group: pip - dependency-name: pytest-asyncio dependency-type: direct:production update-type: version-update:semver-minor dependency-group: pip ... Signed-off-by: dependabot[bot] <[email protected]>

…rtai#2005) * chore(deps): bump the pip group across 1 directory with 6 updates Bumps the pip group with 6 updates in the / directory: | Package | From | To | | --- | --- | --- | | [mkdocs-material](https://github.com/squidfunk/mkdocs-material) | `9.5.48` | `9.5.49` | | [mypy](https://github.com/python/mypy) | `1.13.0` | `1.14.0` | | [ruff](https://github.com/astral-sh/ruff) | `0.8.2` | `0.8.4` | | [semgrep](https://github.com/returntocorp/semgrep) | `1.99.0` | `1.101.0` | | [coverage[toml]](https://github.com/nedbat/coveragepy) | `7.6.1` | `7.6.9` | | [pytest-asyncio](https://github.com/pytest-dev/pytest-asyncio) | `0.24.0` | `0.25.0` | Updates `mkdocs-material` from 9.5.48 to 9.5.49 - [Release notes](https://github.com/squidfunk/mkdocs-material/releases) - [Changelog](https://github.com/squidfunk/mkdocs-material/blob/master/CHANGELOG) - [Commits](squidfunk/mkdocs-material@9.5.48...9.5.49) Updates `mypy` from 1.13.0 to 1.14.0 - [Changelog](https://github.com/python/mypy/blob/master/CHANGELOG.md) - [Commits](python/mypy@v1.13.0...v1.14.0) Updates `ruff` from 0.8.2 to 0.8.4 - [Release notes](https://github.com/astral-sh/ruff/releases) - [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md) - [Commits](astral-sh/ruff@0.8.2...0.8.4) Updates `semgrep` from 1.99.0 to 1.101.0 - [Release notes](https://github.com/returntocorp/semgrep/releases) - [Changelog](https://github.com/semgrep/semgrep/blob/develop/CHANGELOG.md) - [Commits](semgrep/semgrep@v1.99.0...v1.101.0) Updates `coverage[toml]` from 7.6.1 to 7.6.9 - [Release notes](https://github.com/nedbat/coveragepy/releases) - [Changelog](https://github.com/nedbat/coveragepy/blob/master/CHANGES.rst) - [Commits](nedbat/coveragepy@7.6.1...7.6.9) Updates `pytest-asyncio` from 0.24.0 to 0.25.0 - [Release notes](https://github.com/pytest-dev/pytest-asyncio/releases) - [Commits](pytest-dev/pytest-asyncio@v0.24.0...v0.25.0) --- updated-dependencies: - dependency-name: mkdocs-material dependency-type: direct:production update-type: version-update:semver-patch dependency-group: pip - dependency-name: mypy dependency-type: direct:production update-type: version-update:semver-minor dependency-group: pip - dependency-name: ruff dependency-type: direct:production update-type: version-update:semver-patch dependency-group: pip - dependency-name: semgrep dependency-type: direct:production update-type: version-update:semver-minor dependency-group: pip - dependency-name: coverage[toml] dependency-type: direct:production update-type: version-update:semver-patch dependency-group: pip - dependency-name: pytest-asyncio dependency-type: direct:production update-type: version-update:semver-minor dependency-group: pip ... Signed-off-by: dependabot[bot] <[email protected]> * Update pyproject.toml * Update pyproject.toml --------- Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Pastukhov Nikita <[email protected]>

dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Dec 23, 2024

davorrunje enabled auto-merge December 23, 2024 11:15

davorrunje previously approved these changes Dec 23, 2024

View reviewed changes

Lancetnik dismissed davorrunje’s stale review via 2dcec50 December 28, 2024 16:45

Update pyproject.toml

2dcec50

davorrunje previously approved these changes Dec 28, 2024

View reviewed changes

Lancetnik dismissed davorrunje’s stale review via a65678b December 28, 2024 16:47

Update pyproject.toml

a65678b

davorrunje approved these changes Dec 28, 2024

View reviewed changes

davorrunje added this pull request to the merge queue Dec 28, 2024

Merged via the queue into main with commit bc4c7ed Dec 28, 2024
31 checks passed

davorrunje deleted the dependabot/pip/pip-3013b90fae branch December 28, 2024 17:09

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): bump the pip group across 1 directory with 6 updates #2005

chore(deps): bump the pip group across 1 directory with 6 updates #2005

dependabot bot commented on behalf of github Dec 23, 2024

chore(deps): bump the pip group across 1 directory with 6 updates #2005

chore(deps): bump the pip group across 1 directory with 6 updates #2005

Conversation

dependabot bot commented on behalf of github Dec 23, 2024

mkdocs-material-9.5.49

Mypy Release Notes

Next release

Mypy 1.14

Change to Enum Membership Semantics

0.8.4

Release Notes

Preview features

Rule changes

Bug

Server

Contributors

0.8.4

Preview features

Rule changes

Bug

Server

0.8.3

Preview features

Rule changes

Release v1.101.0

1.101.0 - 2024-12-18

Added

Changed

Fixed