Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore(api): bump the deps group in /api with 3 updates #1598

Closed
wants to merge 1 commit into from

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Dec 23, 2024

Bumps the deps group in /api with 3 updates: mypy, poetry and tomli.

Updates mypy from 1.13.0 to 1.14.0

Changelog

Sourced from mypy's changelog.

Mypy Release Notes

Next release

...

Mypy 1.14

We’ve just uploaded mypy 1.14 to the Python Package Index (PyPI). Mypy is a static type checker for Python. This release includes new features and bug fixes. You can install it as follows:

python3 -m pip install -U mypy

You can read the full documentation for this release on Read the Docs.

Change to Enum Membership Semantics

As per the updated typing specification for enums, enum members must be left unannotated.

class Pet(Enum):
    CAT = 1  # Member attribute
    DOG = 2  # Member attribute
# New error: Enum members must be left unannotated
WOLF: int = 3
species: str  # Considered a non-member attribute

In particular, the specification change can result in issues in type stubs (.pyi files), since historically it was common to leave the value absent:

# In a type stub (.pyi file)
class Pet(Enum):
# Change in semantics: previously considered members,
# now non-member attributes
CAT: int
DOG: int
# Mypy will now issue a warning if it detects this
# situation in type stubs:
# > Detected enum "Pet" in a type stub with zero
# > members. There is a chance this is due to a recent
# > change in the semantics of enum membership. If so,
# > use `member = value` to mark an enum member,

</tr></table>

... (truncated)

Commits

Updates poetry from 1.8.3 to 1.8.5

Release notes

Sourced from poetry's releases.

1.8.5

Changed

  • Require pkginfo>=1.12 to fix an issue with an unknown metadata version 2.4 (#9888).
  • Do not fail if the unknown metadata version is only a minor version update (#9888).

1.8.4

Added

  • Add official support for Python 3.13 (#9523).

Changed

  • Require virtualenv>=20.26.6 to mitigate potential command injection when running poetry shell in untrusted projects (#9757).

poetry-core (1.9.1)

  • Add 3.13 to the list of available Python versions (#747).
Changelog

Sourced from poetry's changelog.

[1.8.5] - 2024-12-06

Changed

  • Require pkginfo>=1.12 to fix an issue with an unknown metadata version 2.4 (#9888).
  • Do not fail if the unknown metadata version is only a minor version update (#9888).

[1.8.4] - 2024-10-14

Added

  • Add official support for Python 3.13 (#9523).

Changed

  • Require virtualenv>=20.26.6 to mitigate potential command injection when running poetry shell in untrusted projects (#9757).

poetry-core (1.9.1)

  • Add 3.13 to the list of available Python versions (#747).
Commits
  • 19a2f7b release: bump version to 1.8.5
  • 86afaea ci: macos-12 is not available anymore
  • 2562ad3 info: require pkginfo >= 1.12 for METADATA 2.4 support and loosen check for...
  • 6a071c1 release: bump version to 1.8.4
  • 8d2a341 backport release workflow from main branch
  • b8546d7 python 3.13 in workflows (#9523)
  • 0329bca Bump virtualenv to 20.26.6
  • a2d09a1 fix changelog (#9399)
  • See full diff in compare view

Updates tomli from 2.0.2 to 2.2.1

Changelog

Sourced from tomli's changelog.

2.2.1

  • Fixed
    • Don't attempt to compile binary wheels for Python 3.8, 3.9 and 3.10 where cibuildwheel depends on a conflicting Tomli version

2.2.0

  • Added
    • mypyc generated binary wheels for common platforms

2.1.0

  • Deprecated
    • Instantiating TOMLDecodeError with free-form arguments. msg, doc and pos arguments should be given.
  • Added
    • msg, doc, pos, lineno and colno attributes to TOMLDecodeError
Commits
  • 73c3d10 Bump version: 2.2.0 → 2.2.1
  • 7c2368d Don't build wheels for Python versions requiring tomli
  • c48e4e1 Bump version: 2.1.0 → 2.2.0
  • 7604741 Update README
  • 0724e2a Annotate global constants as Final to speed up compiled code
  • 149547d Create binary wheels with mypyc (#242)
  • 443a0c1 pre-commit autoupdate and autofix
  • 48461cf Merge pull request #240 from hukkin/version-2.1.0
  • d6e045b Bump version: 2.0.2 → 2.1.0
  • d1d6a85 Add attributes to TOMLDecodeError. Deprecate free-form __init__ args (#238)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the deps group in /api with 3 updates: [mypy](https://github.com/python/mypy), [poetry](https://github.com/python-poetry/poetry) and [tomli](https://github.com/hukkin/tomli).


Updates `mypy` from 1.13.0 to 1.14.0
- [Changelog](https://github.com/python/mypy/blob/master/CHANGELOG.md)
- [Commits](python/mypy@v1.13.0...v1.14.0)

Updates `poetry` from 1.8.3 to 1.8.5
- [Release notes](https://github.com/python-poetry/poetry/releases)
- [Changelog](https://github.com/python-poetry/poetry/blob/main/CHANGELOG.md)
- [Commits](python-poetry/poetry@1.8.3...1.8.5)

Updates `tomli` from 2.0.2 to 2.2.1
- [Changelog](https://github.com/hukkin/tomli/blob/master/CHANGELOG.md)
- [Commits](hukkin/tomli@2.0.2...2.2.1)

---
updated-dependencies:
- dependency-name: mypy
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: deps
- dependency-name: poetry
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: deps
- dependency-name: tomli
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: deps
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot requested a review from gabrielBusta as a code owner December 23, 2024 07:39
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Dec 23, 2024
@dependabot dependabot bot requested a review from a team December 23, 2024 07:39
Copy link
Contributor Author

dependabot bot commented on behalf of github Dec 30, 2024

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot bot closed this Dec 30, 2024
@dependabot dependabot bot deleted the dependabot/pip/api/deps-6a13510a85 branch December 30, 2024 07:34
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file python Pull requests that update Python code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants