chore(deps): update dependency pydantic to v1.10.13 [security]

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
pydantic (changelog)	==1.9.0 -> ==1.10.13

GitHub Vulnerability Alerts

CVE-2024-3772

Regular expression denial of service in Pydantic < 2.4.0, < 1.10.13 allows remote attackers to cause denial of service via a crafted email string.

---

Release Notes

pydantic/pydantic (pydantic)

v1.10.13

Compare Source

• Fix: Add max length check to pydantic.validate_email, #​7673 by @​hramezani
• Docs: Fix pip commands to install v1, #​6930 by @​chbndrhnns

v1.10.12

Compare Source

• Fixes the maxlen property being dropped on deque validation. Happened only if the deque item has been typed. Changes the _validate_sequence_like func, #​6581 by @​maciekglowka

v1.10.11

Compare Source

• Importing create_model in tools.py through relative path instead of absolute path - so that it doesn't import V2 code when copied over to V2 branch, #​6361 by @​SharathHuddar

v1.10.10

Compare Source

• Add Pydantic Json field support to settings management, #​6250 by @​hramezani
• Fixed literal validator errors for unhashable values, #​6188 by @​markus1978
• Fixed bug with generics receiving forward refs, #​6130 by @​mark-todd
• Update install method of FastAPI for internal tests in CI, #​6117 by @​Kludex

v1.10.9

Compare Source

• Fix trailing zeros not ignored in Decimal validation, #​5968 by @​hramezani
• Fix mypy plugin for v1.4.0, #​5928 by @​cdce8p
• Add future and past date hypothesis strategies, #​5850 by @​bschoenmaeckers
• Discourage usage of Cython 3 with Pydantic 1.x, #​5845 by @​lig

v1.10.8

Compare Source

• Fix a bug in Literal usage with typing-extension==4.6.0, #​5826 by @​hramezani
• This solves the (closed) issue #​3849 where aliased fields that use discriminated union fail to validate when the data contains the non-aliased field name, #​5736 by @​benwah
• Update email-validator dependency to >=2.0.0post2, #​5627 by @​adriangb
• update AnyClassMethod for changes in python/typeshed#9771, #​5505 by @​ITProKyle

v1.10.7

Compare Source

• Fix creating schema from model using ConstrainedStr with regex as dict key, #​5223 by @​matejetz
• Address bug in mypy plugin caused by explicit_package_bases=True, #​5191 by @​dmontagu
• Add implicit defaults in the mypy plugin for Field with no default argument, #​5190 by @​dmontagu
• Fix schema generated for Enum values used as Literals in discriminated unions, #​5188 by @​javibookline
• Fix mypy failures caused by the pydantic mypy plugin when users define from_orm in their own classes, #​5187 by @​dmontagu
• Fix InitVar usage with pydantic dataclasses, mypy version 1.1.1 and the custom mypy plugin, #​5162 by @​cdce8p

v1.10.6

Compare Source

• Implement logic to support creating validators from non standard callables by using defaults to identify them and unwrapping functools.partial and functools.partialmethod when checking the signature, #​5126 by @​JensHeinrich
• Fix mypy plugin for v1.1.1, and fix dataclass_transform decorator for pydantic dataclasses, #​5111 by @​cdce8p
• Raise ValidationError, not ConfigError, when a discriminator value is unhashable, #​4773 by @​kurtmckee

v1.10.5

Compare Source

• Fix broken parametrized bases handling with GenericModels with complex sets of models, #​5052 by @​MarkusSintonen
• Invalidate mypy cache if plugin config changes, #​5007 by @​cdce8p
• Fix RecursionError when deep-copying dataclass types wrapped by pydantic, #​4949 by @​mbillingr
• Fix X | Y union syntax breaking GenericModel, #​4146 by @​thenx
• Switch coverage badge to show coverage for this branch/release, #​5060 by @​samuelcolvin

v1.10.4

Compare Source

• Change dependency to typing-extensions>=4.2.0, #​4885 by @​samuelcolvin

v1.10.3

Compare Source

NOTE: v1.10.3 was "yanked" from PyPI due to #​4885 which is fixed in v1.10.4

• fix parsing of custom root models, #​4883 by @​gou177
• fix: use dataclass proxy for frozen or empty dataclasses, #​4878 by @​PrettyWood
• Fix schema and schema_json on models where a model instance is a one of default values, #​4781 by @​Bobronium
• Add Jina AI to sponsors on docs index page, #​4767 by @​samuelcolvin
• fix: support assignment on DataclassProxy, #​4695 by @​PrettyWood
• Add postgresql+psycopg as allowed scheme for PostgreDsn to make it usable with SQLAlchemy 2, #​4689 by @​morian
• Allow dict schemas to have both patternProperties and additionalProperties, #​4641 by @​jparise
• Fixes error passing None for optional lists with unique_items, #​4568 by @​mfulgo
• Fix GenericModel with Callable param raising a TypeError, #​4551 by @​mfulgo
• Fix field regex with StrictStr type annotation, #​4538 by @​sisp
• Correct dataclass_transform keyword argument name from field_descriptors to field_specifiers, #​4500 by @​samuelcolvin
• fix: avoid multiple calls of __post_init__ when dataclasses are inherited, #​4487 by @​PrettyWood
• Reduce the size of binary wheels, #​2276 by @​samuelcolvin

v1.10.2

Compare Source

• Revert Change: Revert percent encoding of URL parts which was originally added in #​4224, #​4470 by @​samuelcolvin
• Prevent long (length > 4_300) strings/bytes as input to int fields, see
  python/cpython#95778 and
  CVE-2020-10735, #​1477 by @​samuelcolvin
• fix: dataclass wrapper was not always called, #​4477 by @​PrettyWood
• Use tomllib on Python 3.11 when parsing mypy configuration, #​4476 by @​hauntsaninja
• Basic fix of GenericModel cache to detect order of arguments in Union models, #​4474 by @​sveinugu
• Fix mypy plugin when using bare types like list and dict as default_factory, #​4457 by @​samuelcolvin

v1.10.1

Compare Source

• Eval type fix in V1 by @​sydney-runkle in https://github.com/pydantic/pydantic/pull/9751
• Add to_lower_camel to __all__ in utils.py by @​sydney-runkle (direct commit)
• Fix mypy v1 plugin for mypy 1.11 release by @​flaeppe in https://github.com/pydantic/pydantic/pull/10139
• Fix discriminator key used when discriminator has alias and .schema(by_alias=False) by @​exs-dwoodward in https://github.com/pydantic/pydantic/pull/10146

v1.10.0

Compare Source

• Refactor the whole pydantic dataclass decorator to really act like its standard lib equivalent.
  It hence keeps __eq__, __hash__, ... and makes comparison with its non-validated version possible.
  It also fixes usage of frozen dataclasses in fields and usage of default_factory in nested dataclasses.
  The support of Config.extra has been added.
  Finally, config customization directly via a dict is now possible, #​2557 by @​PrettyWood
  
  
  BREAKING CHANGES:
  • The compiled boolean (whether pydantic is compiled with cython) has been moved from main.py to version.py
  • Now that Config.extra is supported, dataclass ignores by default extra arguments (like BaseModel)
• Fix PEP487 __set_name__ protocol in BaseModel for PrivateAttrs, #​4407 by @​tlambert03
• Allow for custom parsing of environment variables via parse_env_var in Config, #​4406 by @​acmiyaguchi
• Rename master to main, #​4405 by @​hramezani
• Fix StrictStr does not raise ValidationError when max_length is present in Field, #​4388 by @​hramezani
• Make SecretStr and SecretBytes hashable, #​4387 by @​chbndrhnns
• Fix StrictBytes does not raise ValidationError when max_length is present in Field, #​4380 by @​JeanArhancet
• Add support for bare type, #​4375 by @​hramezani
• Support Python 3.11, including binaries for 3.11 in PyPI, #​4374 by @​samuelcolvin
• Add support for re.Pattern, #​4366 by @​hramezani
• Fix __post_init_post_parse__ is incorrectly passed keyword arguments when no __post_init__ is defined, #​4361 by @​hramezani
• Fix implicitly importing ForwardRef and Callable from pydantic.typing instead of typing and also expose MappingIntStrAny, #​4358 by @​aminalaee
• remove Any types from the dataclass decorator so it can be used with the disallow_any_expr mypy option, #​4356 by @​DetachHead
• moved repo to pydantic/pydantic, #​4348 by @​yezz123
• fix "extra fields not permitted" error when dataclass with Extra.forbid is validated multiple times, #​4343 by @​detachhead
• Add Python 3.9 and 3.10 examples to docs, #​4339 by @​Bobronium
• Discriminated union models now use oneOf instead of anyOf when generating OpenAPI schema definitions, #​4335 by @​MaxwellPayne
• Allow type checkers to infer inner type of Json type. Json[list[str]] will be now inferred as list[str],
  Json[Any] should be used instead of plain Json.
  Runtime behaviour is not changed, #​4332 by @​Bobronium
• Allow empty string aliases by using a alias is not None check, rather than bool(alias), #​4253 by @​sergeytsaplin
• Update ForwardRefs in Field.outer_type_, #​4249 by @​JacobHayes
• The use of __dataclass_transform__ has been replaced by typing_extensions.dataclass_transform, which is the preferred way to mark pydantic models as a dataclass under PEP 681, #​4241 by @​multimeric
• Use parent model's Config when validating nested NamedTuple fields, #​4219 by @​synek
• Update BaseModel.construct to work with aliased Fields, #​4192 by @​kylebamos
• Catch certain raised errors in smart_deepcopy and revert to deepcopy if so, #​4184 by @​coneybeare
• Add Config.anystr_upper and to_upper kwarg to constr and conbytes, #​4165 by @​satheler
• Fix JSON schema for set and frozenset when they include default values, #​4155 by @​aminalaee
• Teach the mypy plugin that methods decorated by @validator are classmethods, #​4102 by @​DMRobertson
• Improve mypy plugin's ability to detect required fields, #​4086 by @​richardxia
• Support fields of type Type[] in schema, #​4051 by @​aminalaee
• Add default value in JSON Schema when const=True, #​4031 by @​aminalaee
• Adds reserved word check to signature generation logic, #​4011 by @​strue36
• Fix Json strategy failure for the complex nested field, #​4005 by @​sergiosim
• Add JSON-compatible float constraint allow_inf_nan, #​3994 by @​tiangolo
• Remove undefined behaviour when env_prefix had characters in common with env_nested_delimiter, #​3975 by @​arsenron
• Support generics model with create_model, #​3945 by @​hot123s
• allow submodels to overwrite extra field info, #​3934 by @​PrettyWood
• Document and test structural pattern matching (PEP 636) on BaseModel, #​3920 by @​irgolic
• Fix incorrect deserialization of python timedelta object to ISO 8601 for negative time deltas.
  Minus was serialized in incorrect place ("P-1DT23H59M59.888735S" instead of correct "-P1DT23H59M59.888735S"), #​3899 by @​07pepa
• Fix validation of discriminated union fields with an alias when passing a model instance, #​3846 by @​chornsby
• Add a CockroachDsn type to validate CockroachDB connection strings. The type
  supports the following schemes: cockroachdb, cockroachdb+psycopg2 and cockroachdb+asyncpg, #​3839 by @​blubber
• Fix MyPy plugin to not override pre-existing __init__ method in models, #​3824 by @​patrick91
• Fix mypy version checking, #​3783 by @​KotlinIsland
• support overwriting dunder attributes of BaseModel instances, #​3777 by @​PrettyWood
• Added ConstrainedDate and condate, #​3740 by @​hottwaj
• Support kw_only in dataclasses, #​3670 by @​detachhead
• Add comparison method for Color class, #​3646 by @​aminalaee
• Drop support for python3.6, associated cleanup, #​3605 by @​samuelcolvin
• created new function to_lower_camel() for "non pascal case" camel case, #​3463 by @​schlerp
• Add checks to default and default_factory arguments in Mypy plugin, #​3430 by @​klaa97
• fix mangling of inspect.signature for BaseModel, #​3413 by @​fix-inspect-signature
• Adds the SecretField abstract class so that all the current and future secret fields like SecretStr and SecretBytes will derive from it, #​3409 by @​expobrain
• Support multi hosts validation in PostgresDsn, #​3337 by @​rglsk
• Fix parsing of very small numeric timedelta values, #​3315 by @​samuelcolvin
• Update SecretsSettingsSource to respect config.case_sensitive, #​3273 by @​JeanArhancet
• Add MongoDB network data source name (DSN) schema, #​3229 by @​snosratiershad
• Add support for multiple dotenv files, #​3222 by @​rekyungmin
• Raise an explicit ConfigError when multiple fields are incorrectly set for a single validator, #​3215 by @​SunsetOrange
• Allow ellipsis on Fields inside Annotated for TypedDicts required, #​3133 by @​ezegomez
• Catch overflow errors in int_validator, #​3112 by @​ojii
• Adds a __rich_repr__ method to Representation class which enables pretty printing with Rich, #​3099 by @​willmcgugan
• Add percent encoding in AnyUrl and descendent types, #​3061 by @​FaresAhmedb
• validate_arguments decorator now supports alias, #​3019 by @​MAD-py
• Avoid __dict__ and __weakref__ attributes in AnyUrl and IP address fields, #​2890 by @​nuno-andre
• Add ability to use Final in a field type annotation, #​2766 by @​uriyyo
• Update requirement to typing_extensions>=4.1.0 to guarantee dataclass_transform is available, #​4424 by @​commonism
• Add Explosion and AWS to main sponsors, #​4413 by @​samuelcolvin
• Update documentation for copy_on_model_validation to reflect recent changes, #​4369 by @​samuelcolvin
• Runtime warning if __slots__ is passed to create_model, __slots__ is then ignored, #​4432 by @​samuelcolvin
• Add type hints to BaseSettings.Config to avoid mypy errors, also correct mypy version compatibility notice in docs, #​4450 by @​samuelcolvin

v1.9.2

Compare Source

Revert Breaking Change: v1.9.1 introduced a breaking change where model fields were
deep copied by default, this release reverts the default behaviour to match v1.9.0 and before,
while also allow deep-copy behaviour via copy_on_model_validation = 'deep'. See #​4092 for more information.

• Allow for shallow copies of model fields, Config.copy_on_model_validation is now a str which must be
  'none', 'deep', or 'shallow' corresponding to not copying, deep copy & shallow copy; default 'shallow',
  #​4093 by @​timkpaine

v1.9.1

Compare Source

Thank you to pydantic's sponsors:
@​tiangolo, @​stellargraph, @​JonasKs, @​grillazz, @​Mazyod, @​kevinalh, @​chdsbd, @​povilasb, @​povilasb, @​jina-ai,
@​mainframeindustries, @​robusta-dev, @​SendCloud, @​rszamszur, @​jodal, @​hardbyte, @​corleyma, @​daddycocoaman,
@​Rehket, @​jokull, @​reillysiemens, @​westonsteimel, @​primer-io, @​koxudaxi, @​browniebroke, @​stradivari96,
@​adriangb, @​kamalgill, @​jqueguiner, @​dev-zero, @​datarootsio, @​RedCarpetUp
for their kind support.

• Limit the size of generics._generic_types_cache and generics._assigned_parameters
  to avoid unlimited increase in memory usage, #​4083 by @​samuelcolvin
• Add Jupyverse and FPS as Jupyter projects using pydantic, #​4082 by @​davidbrochart
• Speedup __isinstancecheck__ on pydantic models when the type is not a model, may also avoid memory "leaks", #​4081 by @​samuelcolvin
• Fix in-place modification of FieldInfo that caused problems with PEP 593 type aliases, #​4067 by @​adriangb
• Add support for autocomplete in VS Code via __dataclass_transform__ when using pydantic.dataclasses.dataclass, #​4006 by @​giuliano-oliveira
• Remove benchmarks from codebase and docs, #​3973 by @​samuelcolvin
• Typing checking with pyright in CI, improve docs on vscode/pylance/pyright, #​3972 by @​samuelcolvin
• Fix nested Python dataclass schema regression, #​3819 by @​himbeles
• Update documentation about lazy evaluation of sources for Settings, #​3806 by @​garyd203
• Prevent subclasses of bytes being converted to bytes, #​3706 by @​samuelcolvin
• Fixed "error checking inheritance of" when using PEP585 and PEP604 type hints, #​3681 by @​aleksul
• Allow self referencing ClassVars in models, #​3679 by @​samuelcolvin
• Breaking Change, see #​4106: Fix issue with self-referencing dataclass, #​3675 by @​uriyyo
• Include non-standard port numbers in rendered URLs, #​3652 by @​dolfinus
• Config.copy_on_model_validation does a deep copy and not a shallow one, #​3641 by @​PrettyWood
• fix: clarify that discriminated unions do not support singletons, #​3636 by @​tommilligan
• Add read_text(encoding='utf-8') for setup.py, #​3625 by @​hswong3i
• Fix JSON Schema generation for Discriminated Unions within lists, #​3608 by @​samuelcolvin

---

Configuration

📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.