Bump the python-dependencies group across 1 directory with 9 updates #905
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
![dependabot[bot]](https://avatars.githubusercontent.com/in/29110?s=60&v=4){kind=small}
Bumps the python-dependencies group with 9 updates in the / directory: | Package | From | To | | --- | --- | --- | | [django](https://github.com/django/django) | `5.0.7` | `5.1` | | [gunicorn](https://github.com/benoitc/gunicorn) | `22.0.0` | `23.0.0` | | [lxml](https://github.com/lxml/lxml) | `5.2.2` | `5.3.0` | | [markdown](https://github.com/Python-Markdown/markdown) | `3.6` | `3.7` | | [werkzeug](https://github.com/pallets/werkzeug) | `3.0.3` | `3.0.4` | | [black](https://github.com/psf/black) | `24.4.2` | `24.8.0` | | [mypy](https://github.com/python/mypy) | `1.11.0` | `1.11.2` | | [pylint](https://github.com/pylint-dev/pylint) | `3.2.6` | `3.2.7` | | [djlint](https://github.com/djlint/djLint) | `1.34.1` | `1.35.2` | Updates `django` from 5.0.7 to 5.1 - [Commits](django/django@5.0.7...5.1) Updates `gunicorn` from 22.0.0 to 23.0.0 - [Release notes](https://github.com/benoitc/gunicorn/releases) - [Commits](benoitc/gunicorn@22.0.0...23.0.0) Updates `lxml` from 5.2.2 to 5.3.0 - [Release notes](https://github.com/lxml/lxml/releases) - [Changelog](https://github.com/lxml/lxml/blob/master/CHANGES.txt) - [Commits](lxml/lxml@lxml-5.2.2...lxml-5.3.0) Updates `markdown` from 3.6 to 3.7 - [Release notes](https://github.com/Python-Markdown/markdown/releases) - [Changelog](https://github.com/Python-Markdown/markdown/blob/master/docs/changelog.md) - [Commits](Python-Markdown/markdown@3.6...3.7) Updates `werkzeug` from 3.0.3 to 3.0.4 - [Release notes](https://github.com/pallets/werkzeug/releases) - [Changelog](https://github.com/pallets/werkzeug/blob/main/CHANGES.rst) - [Commits](pallets/werkzeug@3.0.3...3.0.4) Updates `black` from 24.4.2 to 24.8.0 - [Release notes](https://github.com/psf/black/releases) - [Changelog](https://github.com/psf/black/blob/main/CHANGES.md) - [Commits](psf/black@24.4.2...24.8.0) Updates `mypy` from 1.11.0 to 1.11.2 - [Changelog](https://github.com/python/mypy/blob/master/CHANGELOG.md) - [Commits](python/mypy@v1.11...v1.11.2) Updates `pylint` from 3.2.6 to 3.2.7 - [Release notes](https://github.com/pylint-dev/pylint/releases) - [Commits](pylint-dev/pylint@v3.2.6...v3.2.7) Updates `djlint` from 1.34.1 to 1.35.2 - [Release notes](https://github.com/djlint/djLint/releases) - [Changelog](https://github.com/djlint/djLint/blob/master/CHANGELOG.md) - [Commits](djlint/djLint@v1.34.1...v1.35.2) --- updated-dependencies: - dependency-name: django dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-dependencies - dependency-name: gunicorn dependency-type: direct:production update-type: version-update:semver-major dependency-group: python-dependencies - dependency-name: lxml dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-dependencies - dependency-name: markdown dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-dependencies - dependency-name: werkzeug dependency-type: direct:development update-type: version-update:semver-patch dependency-group: python-dependencies - dependency-name: black dependency-type: direct:development update-type: version-update:semver-minor dependency-group: python-dependencies - dependency-name: mypy dependency-type: direct:development update-type: version-update:semver-patch dependency-group: python-dependencies - dependency-name: pylint dependency-type: direct:development update-type: version-update:semver-patch dependency-group: python-dependencies - dependency-name: djlint dependency-type: direct:development update-type: version-update:semver-minor dependency-group: python-dependencies ... Signed-off-by: dependabot[bot] <[email protected]>
dependabot
bot
added
dependencies
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Bumps the python-dependencies group with 9 updates in the / directory:
5.0.75.122.0.023.0.05.2.25.3.03.63.73.0.33.0.424.4.224.8.01.11.01.11.23.2.63.2.71.34.11.35.2Updates
djangofrom 5.0.7 to 5.1Commits
373cb30[5.1.x] Bumped version for 5.1 release.8baab82[5.1.x] Finalized release notes for Django 5.1.d5ad743[5.1.x] Fixed i18n.tests.TranslationTests.test_plural to use correct French t...380c6e6[5.1.x] Updated translations from Transifex.d787e44[5.1.x] Added CVE-2024-41989, CVE-2024-41990, CVE-2024-41991, and CVE-2024-42...e2583fb[5.1.x] Fixed CVE-2024-42005 -- Mitigated QuerySet.values() SQL injection att...bd807c0[5.1.x] Fixed CVE-2024-41991 -- Prevented potential ReDoS in django.utils.htm...0c1a890[5.1.x] Fixed CVE-2024-41990 -- Mitigated potential DoS in urlize and urlizet...0504af6[5.1.x] Fixed CVE-2024-41989 -- Prevented excessive memory consumption in flo...2ba4f4b[5.1.x] Fixed #35657 -- Made FileField handle db_default values.Updates
gunicornfrom 22.0.0 to 23.0.0Release notes
Sourced from gunicorn's releases.
Commits
411986dfix doc334392eMerge pull request #2559 from laggardkernel/bugfix/reexec-enve75c353Merge pull request #3189 from pajod/patch-py369357b28keep document user in access_log_format setting79fdef0bump to 23.0.03acd9fbMerge pull request #2620 from talkerbox/improve-access-log-format-docs3f56d76Merge pull request #3192 from pajod/patch-allowed-script-name256d474docs: revert duped directiveffa48b5test: default change was intentional52538cadocs: recommend SCRIPT_NAME=/subfolderUpdates
lxmlfrom 5.2.2 to 5.3.0Changelog
Sourced from lxml's changelog.
Commits
475f4abUpdate release date.e356a1eBuild: Add some debug output.8345680Build: Retry library downloads on failures.2fe6c90CI: Test oldest officially supported library versions again (the slightly new...00335a1Build: Improve download regexes.f3da47dPrepare release of lxml 5.3.0.3119703Add missing global name to "all" in lxml.etree.9de6180Build: Upgrade cibuildwheel version also for the matrix setup.54e36cbBuild: Upgrade libxslt to latest (1.1.42).d4f56eeBuild: Slightly increase the oldest libxslt version that we test against to w...Updates
markdownfrom 3.6 to 3.7Release notes
Sourced from markdown's releases.
Changelog
Sourced from markdown's changelog.
Commits
da03cd6Bump version to 3.7bd836a1Update griffe_extensions to support Griffe v 1.0.33359faAbbr Extension: Definition Sorting and Glossary storageec8c305RefactorabbrExtension993b57bFixed links to source code on GitHub from the documentationUpdates
werkzeugfrom 3.0.3 to 3.0.4Release notes
Sourced from werkzeug's releases.
Changelog
Sourced from werkzeug's changelog.
Commits
b933ccbrelease version 3.0.4c09de73debugger works on urls with query string (#2942)1d1d987debugger works on urls with query string32a77a0treat SSLEOFError as dropped connection (#2941)cf18d03treat SSLEOFError as dropped connectiona1db120synchronize failed pin entry (#2940)6504819synchronize failed pin entry7abec4bimprove parse_options_header performance (#2939)3a893d2improve parse_options_header performance3a52597restore invalid bytes behavior for form parser (#2938)Updates
blackfrom 24.4.2 to 24.8.0Release notes
Sourced from black's releases.
Changelog
Sourced from black's changelog.
Commits
b965c2aPrepare release 24.8.0 (#4426)9ccf279Documentfind_project_rootignoringpyproject.tomlwithout[tool.black]...14b6e61fix: Enhace black efficiently to skip directories listed in .gitignore (#4415)b1c4dd9fix: respect braces better in f-string parsing (#4422)4b4ae43Fix incorrect linenos on fstring tokens with escaped newlines (#4423)7fa1fafdocs: fix the installation command of extra for blackd (#4413)8827accBump sphinx from 7.3.7 to 7.4.0 in /docs (#4404)b0da11dBump furo from 2024.5.6 to 2024.7.18 in /docs (#4409)721dff5fix: avoid formatting backslash strings inside f-strings (#4401)7e2afc9Updateactions/checkoutto v4 to stop node deprecation warnings (#4379)Updates
mypyfrom 1.11.0 to 1.11.2Commits
789f02cBump version to 1.11.2917cc75An alternative fix for a union-like literal string (#17639)7d805b3Unwrap TypedDict item types before storing (#17640)32675ddRevert "Fix Literal strings containing pipe characters" (#17638)778542bRevert "FixRawExpressionType.acceptcrash with--cache-fine-grained" (#1...14ab742Bump version to 1.11.2+dev570b90aBump version to 1.11b3a102eFixRawExpressionType.acceptcrash with--cache-fine-grained(#17588)aec04c7Fix PEP 604 isinstance caching (#17563)cb44e4dFixtyping.TypeAliasTypebeing undefined on python < 3.12 (#17558)Updates
pylintfrom 3.2.6 to 3.2.7Commits
a98215bBump pylint to 3.2.7, update changelog1deaffaFix to maintain order of package paths (#9887) (#9897)b4c2951[Backport maintenance/3.2.x] Fix a crash inundefined-loop-variablewith `e...f1925f4Fix crash in refactoring checker when calling bound lambda (#9867)7d1626cFix a false positiveunreachableforNoReturncoroutine functions (#9844)...Updates
djlintfrom 1.34.1 to 1.35.2Release notes
Sourced from djlint's releases.
Changelog
Sourced from djlint's changelog.
Commits
ca948cfv1.35.2e0d7623Fix npm publishing5c62c54v1.35.1bac74baFix npm publishing6e7e4edFix publishingbd3c4faDisable trusted publishingedd1525v1.35.07ba9d6bAdd noqa to filec4add03Remove unused script19f5a67Check file amount when calculating worker countDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions