Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Bump the pip group in /src with 17 updates #3648

Closed
wants to merge 1 commit into from
Closed

Bump the pip group in /src with 17 updates #3648

wants to merge 1 commit into from

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Aug 2, 2024 •
edited
Loading

Bumps the pip group in /src with 17 updates:

Package From To
ipywidgets 7.7.1 8.1.3
notebook 6.5.6 6.5.7
pymongo 4.7.3 4.8.0
scikit-learn 1.5.0 1.5.1
cryptography 42.0.8 43.0.0
jsonschema 4.16.0 4.23.0
markdown 3.4.1 3.6
markupsafe 2.1.4 2.1.5
pycurl 7.45.1 7.45.3
pyopenssl 24.1.0 24.2.1
setuptools 71.1.0 72.1.0
terminado 0.18.0 0.18.1
ete3 3.1.2 3.1.3
coverage 7.5.3 7.6.0
pytest 8.2.2 8.3.2
pytest-recording 0.13.1 0.13.2
ruff 0.5.5 0.5.6

Updates ipywidgets from 7.7.1 to 8.1.3

Release notes

Sourced from ipywidgets's releases.

8.1.3

Bug fixes

Documentation

New Contributors

Full Changelog: jupyter-widgets/ipywidgets@8.1.2...8.1.3

Release 8.1.2

What's Changed

Full Changelog: jupyter-widgets/ipywidgets@8.1.1...8.1.2

Release 8.1.1

What's Changed

Bug fixed

Docs

New Contributors

Full Changelog: jupyter-widgets/ipywidgets@8.1.0...8.1.1

Release 8.1.0

Improvements

Documentation

... (truncated)

Commits
  • 06ed868 Merge pull request #3793 from ferdnyc/mappings-work-again
  • 31259ca Merge pull request #3801 from warrickball/patch-2
  • dd250bf Handle Notebook 7 in dev install script
  • a1282ec Fix link to "Output widget examples"
  • b6b3051 Revert "Add note on removal of mapping types in documentation"
  • 5a2773e fix some sphinx warnings
  • 6f6156c docs: Overhaul docs toolchain (#3673)
  • 09bf0cf Merge pull request #3611 from jtpio/custom-widget-tutorial
  • ec2b8d8 Use the %pip magic
  • fb27948 Typo fix
  • Additional commits viewable in compare view

Updates notebook from 6.5.6 to 6.5.7

Release notes

Sourced from notebook's releases.

v6.5.7

6.5.7

(Full Changelog)

Maintenance and upkeep improvements

Contributors to this release

(GitHub contributors page for this release)

@​brichet | @​d5423197 | @​github-actions | @​jtpio | @​krassowski | @​minrk | @​RRosio | @​Zsailer

Changelog

Sourced from notebook's changelog.

6.5.7

(Full Changelog)

Maintenance and upkeep improvements

Contributors to this release

(GitHub contributors page for this release)

@​brichet | @​d5423197 | @​github-actions | @​jtpio | @​krassowski | @​minrk | @​RRosio | @​Zsailer

Commits

Updates pymongo from 4.7.3 to 4.8.0

Release notes

Sourced from pymongo's releases.

PyMongo 4.8.0

Changes in Version 4.8.0

PyMongo 4.8 brings a number of improvements including:

  • The handshake metadata for "os.name" on Windows has been simplified to "Windows" to improve import time.
  • The repr of bson.binary.Binary is now redacted when the subtype is SENSITIVE_SUBTYPE(8).
  • Secure Software Development Life Cycle automation for release process. GitHub Releases now include a Software Bill of Materials, and signature files corresponding to the distribution files released on PyPI.
  • Fixed a bug in change streams where both startAtOperationTime and resumeToken could be added to a retry attempt, which caused the retry to fail.
  • Fallback to stdlib ssl module when pyopenssl import fails with AttributeError.
  • Improved performance of MongoClient operations, especially when many operations are being run concurrently.

Unavoidable breaking changes

  • Since we are now using hatch as our build backend, we no longer have a usable setup.py file and require installation using pip. Attempts to invoke the setup.py file will raise an exception. Additionally, pip >= 21.3 is now required for editable installs.

Issues Resolved

See the PyMongo 4.8 release notes in JIRA for the list of resolved issues in this release.

Full Changelog: mongodb/mongo-python-driver@4.7.1...4.8.0

Changelog

Sourced from pymongo's changelog.

Changes in Version 4.8.0

.. warning:: PyMongo 4.8 drops support for Python 3.7 and PyPy 3.8: Python 3.8+ or PyPy 3.9+ is now required.

PyMongo 4.8 brings a number of improvements including:

  • The handshake metadata for "os.name" on Windows has been simplified to "Windows" to improve import time.
  • The repr of bson.binary.Binary is now redacted when the subtype is SENSITIVE_SUBTYPE(8).
  • Secure Software Development Life Cycle automation for release process. GitHub Releases now include a Software Bill of Materials, and signature files corresponding to the distribution files released on PyPI.
  • Fixed a bug in change streams where both startAtOperationTime and resumeToken could be added to a retry attempt, which caused the retry to fail.
  • Fallback to stdlib ssl module when pyopenssl import fails with AttributeError.
  • Improved performance of MongoClient operations, especially when many operations are being run concurrently.

Unavoidable breaking changes ............................

  • Since we are now using hatch as our build backend, we no longer have a usable setup.py file and require installation using pip. Attempts to invoke the setup.py file will raise an exception. Additionally, pip >= 21.3 is now required for editable installs.

Issues Resolved ...............

See the PyMongo 4.8 release notes in JIRA_ for the list of resolved issues in this release.

.. _PyMongo 4.8 release notes in JIRA: https://jira.mongodb.org/secure/ReleaseNote.jspa?projectId=10004&version=37057

Commits
  • d504d14 BUMP 4.8.0
  • ab9e748 PYTHON-4515 Improve 4.8 changelog (#1713)
  • 2fdf707 PYTHON-4507 [v4.8] pip>=21.3 is required for editable installs (#1711)
  • 5139adb PYTHON-4515 [v4.8] Update changelog for 4.8 (#1710)
  • b3c55ff BUMP 4.8.0.dev1
  • 113b9da BUMP 4.8.0b0
  • 585411a PYTHON-4388 [v4.8] Fix security events handling in release workflow again (#1...
  • f1f4938 PYTHON-4388 [v4.8] Fix permissions in release workflow (#1708)
  • a0d232b PYTHON-4499 [v4.8] Log pymongo.connection at DEBUG without EventListeners (#1...
  • 14ed482 PYTHON-4388 [v4.8] Fix dist handling in SSDLC workflow (#1706)
  • Additional commits viewable in compare view

Updates scikit-learn from 1.5.0 to 1.5.1

Release notes

Sourced from scikit-learn's releases.

Scikit-learn 1.5.1

We're happy to announce the 1.5.1 release.

This release contains fixes for a few regressions introduced in 1.5.

You can see the changelog here: https://scikit-learn.org/stable/whats_new/v1.5.html#version-1-5-1

You can upgrade with pip as usual:

pip install -U scikit-learn

The conda-forge builds can be installed using:

conda install -c conda-forge scikit-learn

Thanks to everyone who contributed to this release !

Commits
  • 70fdc84 Bump version [cd build]
  • b0ec847 DOC Add missing PR number in changelog entry (#29384)
  • 8179b8f DOC Set 1.5.1 release month (#29377)
  • 851c0d6 FIX: accuracy and zero_loss support for multilabel with Array API (#29336)
  • 99d8a32 FIX zero_one_loss breaks with multilabel and Array API (#29269)
  • 059070b ENH Add Array API compatibility to cosine_similarity (#29014)
  • ada571f Fix a regression in GridSearchCV for parameter grids that have arrays of diff...
  • fb26476 🔒 🤖 CI Update lock files for cirrus-arm CI build(s) 🔒 🤖...
  • 5a74cc0 Fix performance regression in ColumnTransformer (#29330)
  • c3d69b2 MAINT Pin the ruff version on CI linters (#29359)
  • Additional commits viewable in compare view

Updates cryptography from 42.0.8 to 43.0.0

Changelog

Sourced from cryptography's changelog.

43.0.0 - 2024-07-20


* **BACKWARDS INCOMPATIBLE:** Support for OpenSSL less than 1.1.1e has been
  removed.  Users on older version of OpenSSL will need to upgrade.
* **BACKWARDS INCOMPATIBLE:** Dropped support for LibreSSL < 3.8.
* Updated Windows, macOS, and Linux wheels to be compiled with OpenSSL 3.3.1.
* Updated the minimum supported Rust version (MSRV) to 1.65.0, from 1.63.0.
* :func:`~cryptography.hazmat.primitives.asymmetric.rsa.generate_private_key`
  now enforces a minimum RSA key size of 1024-bit. Note that 1024-bit is still
  considered insecure, users should generally use a key size of 2048-bits.
* :func:`~cryptography.hazmat.primitives.serialization.pkcs7.serialize_certificates`
  now emits ASN.1 that more closely follows the recommendations in :rfc:`2315`.
* Added new :doc:`/hazmat/decrepit/index` module which contains outdated and
  insecure cryptographic primitives.
  :class:`~cryptography.hazmat.primitives.ciphers.algorithms.CAST5`,
  :class:`~cryptography.hazmat.primitives.ciphers.algorithms.SEED`,
  :class:`~cryptography.hazmat.primitives.ciphers.algorithms.IDEA`, and
  :class:`~cryptography.hazmat.primitives.ciphers.algorithms.Blowfish`, which were
  deprecated in 37.0.0, have been added to this module. They will be removed
  from the ``cipher`` module in 45.0.0.
* Moved :class:`~cryptography.hazmat.primitives.ciphers.algorithms.TripleDES`
  and :class:`~cryptography.hazmat.primitives.ciphers.algorithms.ARC4` into
  :doc:`/hazmat/decrepit/index` and deprecated them in the ``cipher`` module.
  They will be removed from the ``cipher`` module in 48.0.0.
* Added support for deterministic
  :class:`~cryptography.hazmat.primitives.asymmetric.ec.ECDSA` (:rfc:`6979`)
* Added support for client certificate verification to the
  :mod:`X.509 path validation <cryptography.x509.verification>` APIs in the
  form of :class:`~cryptography.x509.verification.ClientVerifier`,
  :class:`~cryptography.x509.verification.VerifiedClient`, and
  ``PolicyBuilder``
  :meth:`~cryptography.x509.verification.PolicyBuilder.build_client_verifier`.
* Added Certificate
  :attr:`~cryptography.x509.Certificate.public_key_algorithm_oid`
  and Certificate Signing Request
  :attr:`~cryptography.x509.CertificateSigningRequest.public_key_algorithm_oid`
  to determine the :class:`~cryptography.hazmat._oid.PublicKeyAlgorithmOID`
  Object Identifier of the public key found inside the certificate.
* Added :attr:`~cryptography.x509.InvalidityDate.invalidity_date_utc`, a
  timezone-aware alternative to the naïve ``datetime`` attribute
  :attr:`~cryptography.x509.InvalidityDate.invalidity_date`.
* Added support for parsing empty DN string in
  :meth:`~cryptography.x509.Name.from_rfc4514_string`.
* Added the following properties that return timezone-aware ``datetime`` objects:
  :meth:`~cryptography.x509.ocsp.OCSPResponse.produced_at_utc`,
  :meth:`~cryptography.x509.ocsp.OCSPResponse.revocation_time_utc`,
  :meth:`~cryptography.x509.ocsp.OCSPResponse.this_update_utc`,
  :meth:`~cryptography.x509.ocsp.OCSPResponse.next_update_utc`,
  :meth:`~cryptography.x509.ocsp.OCSPSingleResponse.revocation_time_utc`,
</tr></table>

... (truncated)

Commits

Updates jsonschema from 4.16.0 to 4.23.0

Release notes

Sourced from jsonschema's releases.

v4.23.0

What's Changed

New Contributors

Full Changelog: python-jsonschema/jsonschema@v4.22.0...v4.23.0

v4.22.0

What's Changed

  • Improve best_match (and thereby error messages from jsonschema.validate) in cases where there are multiple sibling errors from applying anyOf / allOf -- i.e. when multiple elements of a JSON array have errors, we now do prefer showing errors from earlier elements rather than simply showing an error for the full array (#1250).
  • (Micro-)optimize equality checks when comparing for JSON Schema equality by first checking for object identity, as == would.

New Contributors

Full Changelog: python-jsonschema/jsonschema@v4.21.1...v4.22.0

v4.21.1

  • Slightly speed up the contains keyword by removing some unnecessary validator (re-)creation.

Full Changelog: python-jsonschema/jsonschema@v4.21.0...v4.21.1

v4.21.0

What's Changed

  • Fix the behavior of enum in the presence of 0 or 1 to properly consider True and False unequal (#1208).
  • Special case the error message for {min,max}{Items,Length,Properties} when they're checking for emptiness rather than true length.

New Contributors

Full Changelog: python-jsonschema/jsonschema@v4.20.0...v4.21.0

v4.20.0

  • Properly consider items (and properties) to be evaluated by unevaluatedItems (resp. unevaluatedProperties) when behind a $dynamicRef as specified by the 2020 and 2019 specifications.
  • jsonschema.exceptions.ErrorTree.__setitem__ is now deprecated. More broadly, in general users of jsonschema should never be mutating objects owned by the library.

Full Changelog: python-jsonschema/jsonschema@v4.19.2...v4.20.0

... (truncated)

Changelog

Sourced from jsonschema's changelog.

v4.23.0

  • Do not reorder dictionaries (schemas, instances) that are printed as part of validation errors.
  • Declare support for Py3.13

v4.22.0

  • Improve best_match (and thereby error messages from jsonschema.validate) in cases where there are multiple sibling errors from applying anyOf / allOf -- i.e. when multiple elements of a JSON array have errors, we now do prefer showing errors from earlier elements rather than simply showing an error for the full array (#1250).
  • (Micro-)optimize equality checks when comparing for JSON Schema equality by first checking for object identity, as == would.

v4.21.1

  • Slightly speed up the contains keyword by removing some unnecessary validator (re-)creation.

v4.21.0

  • Fix the behavior of enum in the presence of 0 or 1 to properly consider True and False unequal (#1208).
  • Special case the error message for {min,max}{Items,Length,Properties} when they're checking for emptiness rather than true length.

v4.20.0

  • Properly consider items (and properties) to be evaluated by unevaluatedItems (resp. unevaluatedProperties) when behind a $dynamicRef as specified by the 2020 and 2019 specifications.
  • jsonschema.exceptions.ErrorTree.__setitem__ is now deprecated. More broadly, in general users of jsonschema should never be mutating objects owned by the library.

v4.19.2

  • Fix the error message for additional items when used with heterogeneous arrays.
  • Don't leak the additionalItems keyword into JSON Schema draft 2020-12, where it was replaced by items.

v4.19.1

  • Single label hostnames are now properly considered valid according to the hostname format. This is the behavior specified by the relevant RFC (1123). IDN hostname behavior was already correct.

v4.19.0

  • Importing the Validator protocol directly from the package root is deprecated. Import it from jsonschema.protocols.Validator instead.
  • Automatic retrieval of remote references (which is still deprecated) now properly succeeds even if the retrieved resource does not declare which version of JSON Schema it uses. Such resources are assumed to be 2020-12 schemas.

... (truncated)

Commits
  • cfe8a40 Document the other change, and call this 4.23.0.
  • 25127a1 Merge pull request #1282 from rominf/rominf-python3.13
  • 40410c4 Declare support for 3.13
  • 3a44b4b Merge pull request #1276 from python-jsonschema/pre-commit-ci-update-config
  • 6a00e35 [pre-commit.ci] pre-commit autoupdate
  • 84fee43 Merge pull request #1273 from python-jsonschema/pre-commit-ci-update-config
  • a90d6e2 [pre-commit.ci] pre-commit autoupdate
  • c3a8641 Merge pull request #1272 from python-jsonschema/pre-commit-ci-update-config
  • deb5398 [pre-commit.ci] pre-commit autoupdate
  • 7fd28c3 Update the (ancient draft3) color format for newer webcolors.
  • Additional commits viewable in compare view

Updates markdown from 3.4.1 to 3.6

Release notes

Sourced from markdown's releases.

Release 3.6

Changed

Refactor TOC Sanitation

  • All postprocessors are now run on heading content.
  • Footnote references are now stripped from heading content. Fixes #660.
  • A more robust striptags is provided to convert headings to plain text. Unlike, the markupsafe implementation, HTML entities are not unescaped.
  • The plain text name, rich html, and unescaped raw data-toc-label are saved to toc_tokens, allowing users to access the full rich text content of the headings directly from toc_tokens.
  • The value of data-toc-label is sanitized separate from heading content before being written to name. This fixes a bug which allowed markup through in certain circumstances. To access the raw unsanitized data, retrieve the value from token['data-toc-label'] directly.
  • An html.unescape call is made just prior to calling slugify so that slugify only operates on Unicode characters. Note that html.unescape is not run on name, html, or data-toc-label.
  • The functions get_name and stashedHTML2text defined in the toc extension are both deprecated. Instead, third party extensions should use some combination of the new functions run_postprocessors, render_inner_html and striptags.

Fixed

  • Include scripts/*.py in the generated source tarballs (#1430).
  • Ensure lines after heading in loose list are properly detabbed (#1443).
  • Give smarty tree processor higher priority than toc (#1440).
  • Permit carets (^) and square brackets (]) but explicitly exclude backslashes (\) from abbreviations (#1444).
  • In attribute lists (attr_list, fenced_code), quoted attribute values are now allowed to contain curly braces (}) (#1414).

Release 3.5.2

Fixed

  • Fix type annotations for convertFile - it accepts only bytes-based buffers. Also remove legacy checks from Python 2 (#1400)
  • Remove legacy import needed only in Python 2 (#1403)
  • Fix typo that left the attribute AdmonitionProcessor.content_indent unset (#1404)
  • Fix edge-case crash in InlineProcessor with AtomicString (#1406).
  • Fix edge-case crash in codehilite with an empty code tag (#1405).
  • Improve and expand type annotations in the code base (#1401).
  • Fix handling of bogus comments (#1425).

Release 3.5.1

Fixed

... (truncated)

Changelog

Sourced from markdown's changelog.

[3.6] -- 2024-03-14

Changed

Refactor TOC Sanitation

  • All postprocessors are now run on heading content.
  • Footnote references are now stripped from heading content. Fixes #660.
  • A more robust striptags is provided to convert headings to plain text. Unlike, the markupsafe implementation, HTML entities are not unescaped.
  • The plain text name, rich html, and unescaped raw data-toc-label are saved to toc_tokens, allowing users to access the full rich text content of the headings directly from toc_tokens.
  • The value of data-toc-label is sanitized separate from heading content before being written to name. This fixes a bug which allowed markup through in certain circumstances. To access the raw unsanitized data, retrieve the value from token['data-toc-label'] directly.
  • An html.unescape call is made just prior to calling slugify so that slugify only operates on Unicode characters. Note that html.unescape is not run on name, html, or data-toc-label.
  • The functions get_name and stashedHTML2text defined in the toc extension are both deprecated. Instead, third party extensions should use some combination of the new functions run_postprocessors, render_inner_html and striptags.

Fixed

  • Include scripts/*.py in the generated source tarballs (#1430).
  • Ensure lines after heading in loose list are properly detabbed (#1443).
  • Give smarty tree processor higher priority than toc (#1440).
  • Permit carets (^) and square brackets (]) but explicitly exclude backslashes (\) from abbreviations (#1444).
  • In attribute lists (attr_list, fenced_code), quoted attribute values are now allowed to contain curly braces (}) (#1414).

[3.5.2] -- 2024-01-10

Fixed

  • Fix type annotations for convertFile - it accepts only bytes-based buffers. Also remove legacy checks from Python 2 (#1400)
  • Remove legacy import needed only in Python 2 (#1403)
  • Fix typo that left the attribute AdmonitionProcessor.content_indent unset (#1404)
  • Fix edge-case crash in InlineProcessor with AtomicString (#1406).
  • Fix edge-case crash in codehilite with an empty code tag (#1405).
  • Improve and expand type annotations in the code base (#1401).
  • Fix handling of bogus comments (#1425).

[3.5.1] -- 2023-10-31

... (truncated)

Commits
  • e524b8f Bump version to 3.6
  • 3d8afc6 Allow attr_list quoted values to contain curly braces
  • 9edba85 Refactor abbr escaping
  • e4ab4a6 Refactor TOC sanitation
  • a18765c Explicitly omit carot and backslash from abbr
  • 421f1e8 Give smarty tree processor higher priority than toc
  • c334a3e Ensure lines after heading in loose list are properly detabbed
  • ea92856 Update the license template so GitHub can detect it
  • a2effd6 Disable mkdocstrings show_symbol_type_toc option to work around searching iss...
  • 91f9a12 Restore Attribute symbol type in mkdocstrings template
  • Additional commits viewable in compare view

Updates markupsafe from 2.1.4 to 2.1.5

Release notes

Sourced from markupsafe's releases.

2.1.5

This is a fix release for the 2.1.x feature release branch. It fixes bugs but does not otherwise change behavior and should not result in breaking changes.

Fixes a regression in striptags behavior from 2.14. Spaces are now collapsed correctly.

Changelog

Sourced from markupsafe's changelog.

Version 2.1.5

Released 2024-02-02

  • Fix striptags not collapsing spaces. :issue:417
Commits

Updates pycurl from 7.45.1 to 7.45.3

Changelog

Sourced from pycurl's changelog.

Version 7.45.3 [requires libcurl-7.19.0 or better] - 2024-02-17

    * Add CURLOPT_REQUEST_TARGET option (patch by Marcel Brouwers).
    * Add missing 2nd parameters to METH_NOARGS functions
      (patch by Scott Talbert).
    * Add CURLOPT_AWS_SIGV4 option (patch by Scott Talbert).
    * Add consistent names for newer Curl version constants
      (patch by Scott Talbert).
    * Only run HTTP version 3 option constant test if curl supported
      (patch by Scott Talbert).
    * Expose COMPILE_SSL_LIB in Python and use for test filtering
      (patch by Scott Talbert).
    * Filter tests based on *compile* libcurl version not runtime version
      (patch by Scott Talbert).
    * Use print function in callbacks documentation
      (patch by Scott Talbert).
    * Add missing shebang to tests/ext/test-suite.sh
      (patch by Scott Talbert).
    * Officially declare support for Python 3.12
      (patch by Scott Talbert).
    * Fix curl_multi_info_read flow that loses messages
      (patch by Dom Sekotill).
    * Support using environment variables for setup on Windows
      (patch by Scott Talbert).
    * Add support for Schannel SSL backend (patch by Scott Talbert)
    * Skip HTTP2 tests based on a curl support check
      (patch by Scott Talbert).
    * Fix fake-curl tests so they work when run out of tree
      (patch by Scott Talbert).
    * xfail test_easy_pause_unpause unconditionally
      (patch by Scott Talbert).
    * Provide generic error strings in pycurl.error objects
      (patch by Scott Talbert).
    * Change URLs to new curl mailing list (patch by Michael C).
    * Add missing HTTPS proxy options (patch by Jean Hominal).
    * Add support for setting CURLOPT_SSLCERT_BLOB
      (patch by Vesa Jääskeläinen).
    * Add support for setting rest of CURLOPTTYPE_BLOB fields
      (patch by Vesa Jääskeläinen).
    * Build wheels on Linux/macOS/Windows (patch by Scott Talbert).

Version 7.45.2 [requires libcurl-7.19.0 or better] - 2022-12-16

    * Python 3.9 compatibility for Py_TRASHCAN_SAFE_BEGIN
      (patch by Scott Talbert).
    * Add support for CURL_HTTP_VERSION_3 (patch by Scott Talbert).
    * Add CURLOPT_TLS13_CIPHERS and CURLOPT_PROXY_TLS13_CIPHERS options
      (patch by Scott Talbert).

... (truncated)

Commits

Updates pyopenssl from 24.1.0 to 24.2.1

Changelog

Sourced from pyopenssl's changelog.

24.2.1 (2024-07-20)

Backward-incompatible changes: ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

Deprecations: ^^^^^^^^^^^^^

Changes: ^^^^^^^^

  • Fixed changelog to remove sphinx specific restructured text strings.

24.2.0 (2024-07-20)

Backward-incompatible changes: ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

Deprecations: ^^^^^^^^^^^^^

  • Deprecated OpenSSL.crypto.X509Req, OpenSSL.crypto.load_certificate_request, OpenSSL.crypto.dump_certificate_request. Instead, cryptography.x509.CertificateSigningRequest, cryptography.x509.CertificateSigningRequestBuilder, cryptography.x509.load_der_x509_csr, or cryptography.x509.load_pem_x509_csr should be used.

Changes: ^^^^^^^^

  • Added type hints for the SSL module. [#1308](https://github.com/pyca/pyopenssl/issues/1308) <https://github.com/pyca/pyopenssl/pull/1308>_.
  • Changed OpenSSL.crypto.PKey.from_cryptography_key to accept public and private EC, ED25519, ED448 keys. [#1310](https://github.com/pyca/pyopenssl/issues/1310) <https://github.com/pyca/pyopenssl/pull/1310>_.
Commits

Updates setuptools from 71.1.0 to 72.1.0

Changelog

Sourced from setuptools's changelog.

v72.1.0

Features

  • Restore the tests command and deprecate access to the module. (#4519) (#4520)

v72.0.0

Deprecations and Removals

  • The test command has been removed. Users relying on 'setup.py test' will need to migrate to another test runner or pin setuptools before this version. (#931)
Commits
  • 441799f Bump version: 72.0.0 → 72.1.0
  • 59aff44 Merge pull request #4522 from pypa/feature/graceful-drop-tests
  • c437aaa Restore the tests command and deprecate access to the module.
  • a6726b9 Add celery and requests to the packages that test integration. Ref #4520
  • 5e1b3c4 Bump version: 71.1.0 → 72.0.0
  • 4c0b9f3 Merge pull request #4458 from pypa/debt/remove-test-command
  • be8e3a0 Merge pull request #4507 from pypa/docs/4483-install-core-extra
  • 99d2c72 Add documentation clarifying how to reliably install setuptools with its depe...
  • 63c89f9 👹 Feed the hobgoblins (delint).
  • c405ac1 Merge branch 'main' into debt/remove-test-command
  • See full diff in compare view

Updates terminado from 0.18.0 to 0.18.1

Release notes

Sourced from terminado's releases.

v0.18.1

0.18.1

(Full Changelog)

Maintenance and upkeep improvements

Contributors to t...

Description has been truncated

@dependabot
Bump the pip group in /src with 17 updates
e64cfec 
Bumps the pip group in /src with 17 updates:

| Package | From | To |
| --- | --- | --- |
| [ipywidgets](https://github.com/jupyter-widgets/ipywidgets) | `7.7.1` | `8.1.3` |
| [notebook](https://github.com/jupyter/notebook) | `6.5.6` | `6.5.7` |
| [pymongo](https://github.com/mongodb/mongo-python-driver) | `4.7.3` | `4.8.0` |
| [scikit-learn](https://github.com/scikit-learn/scikit-learn) | `1.5.0` | `1.5.1` |
| [cryptography](https://github.com/pyca/cryptography) | `42.0.8` | `43.0.0` |
| [jsonschema](https://github.com/python-jsonschema/jsonschema) | `4.16.0` | `4.23.0` |
| [markdown](https://github.com/Python-Markdown/markdown) | `3.4.1` | `3.6` |
| [markupsafe](https://github.com/pallets/markupsafe) | `2.1.4` | `2.1.5` |
| [pycurl](https://github.com/pycurl/pycurl) | `7.45.1` | `7.45.3` |
| [pyopenssl](https://github.com/pyca/pyopenssl) | `24.1.0` | `24.2.1` |
| [setuptools](https://github.com/pypa/setuptools) | `71.1.0` | `72.1.0` |
| [terminado](https://github.com/jupyter/terminado) | `0.18.0` | `0.18.1` |
| [ete3](https://github.com/etetoolkit/ete) | `3.1.2` | `3.1.3` |
| [coverage](https://github.com/nedbat/coveragepy) | `7.5.3` | `7.6.0` |
| [pytest](https://github.com/pytest-dev/pytest) | `8.2.2` | `8.3.2` |
| [pytest-recording](https://github.com/kiwicom/pytest-recording) | `0.13.1` | `0.13.2` |
| [ruff](https://github.com/astral-sh/ruff) | `0.5.5` | `0.5.6` |


Updates `ipywidgets` from 7.7.1 to 8.1.3
- [Release notes](https://github.com/jupyter-widgets/ipywidgets/releases)
- [Commits](jupyter-widgets/ipywidgets@7.7.1...8.1.3)

Updates `notebook` from 6.5.6 to 6.5.7
- [Release notes](https://github.com/jupyter/notebook/releases)
- [Changelog](https://github.com/jupyter/notebook/blob/v6.5.7/CHANGELOG.md)
- [Commits](jupyter/notebook@v6.5.6...v6.5.7)

Updates `pymongo` from 4.7.3 to 4.8.0
- [Release notes](https://github.com/mongodb/mongo-python-driver/releases)
- [Changelog](https://github.com/mongodb/mongo-python-driver/blob/master/doc/changelog.rst)
- [Commits](mongodb/mongo-python-driver@4.7.3...4.8.0)

Updates `scikit-learn` from 1.5.0 to 1.5.1
- [Release notes](https://github.com/scikit-learn/scikit-learn/releases)
- [Commits](scikit-learn/scikit-learn@1.5.0...1.5.1)

Updates `cryptography` from 42.0.8 to 43.0.0
- [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst)
- [Commits](pyca/cryptography@42.0.8...43.0.0)

Updates `jsonschema` from 4.16.0 to 4.23.0
- [Release notes](https://github.com/python-jsonschema/jsonschema/releases)
- [Changelog](https://github.com/python-jsonschema/jsonschema/blob/main/CHANGELOG.rst)
- [Commits](python-jsonschema/jsonschema@v4.16.0...v4.23.0)

Updates `markdown` from 3.4.1 to 3.6
- [Release notes](https://github.com/Python-Markdown/markdown/releases)
- [Changelog](https://github.com/Python-Markdown/markdown/blob/master/docs/changelog.md)
- [Commits](Python-Markdown/markdown@3.4.1...3.6)

Updates `markupsafe` from 2.1.4 to 2.1.5
- [Release notes](https://github.com/pallets/markupsafe/releases)
- [Changelog](https://github.com/pallets/markupsafe/blob/main/CHANGES.rst)
- [Commits](pallets/markupsafe@2.1.4...2.1.5)

Updates `pycurl` from 7.45.1 to 7.45.3
- [Changelog](https://github.com/pycurl/pycurl/blob/master/ChangeLog)
- [Commits](https://github.com/pycurl/pycurl/commits)

Updates `pyopenssl` from 24.1.0 to 24.2.1
- [Changelog](https://github.com/pyca/pyopenssl/blob/main/CHANGELOG.rst)
- [Commits](pyca/pyopenssl@24.1.0...24.2.1)

Updates `setuptools` from 71.1.0 to 72.1.0
- [Release notes](https://github.com/pypa/setuptools/releases)
- [Changelog](https://github.com/pypa/setuptools/blob/main/NEWS.rst)
- [Commits](pypa/setuptools@v71.1.0...v72.1.0)

Updates `terminado` from 0.18.0 to 0.18.1
- [Release notes](https://github.com/jupyter/terminado/releases)
- [Changelog](https://github.com/jupyter/terminado/blob/main/CHANGELOG.md)
- [Commits](jupyter/terminado@v0.18.0...v0.18.1)

Updates `ete3` from 3.1.2 to 3.1.3
- [Release notes](https://github.com/etetoolkit/ete/releases)
- [Commits](etetoolkit/ete@3.1.2...3.1.3)

Updates `coverage` from 7.5.3 to 7.6.0
- [Release notes](https://github.com/nedbat/coveragepy/releases)
- [Changelog](https://github.com/nedbat/coveragepy/blob/master/CHANGES.rst)
- [Commits](nedbat/coveragepy@7.5.3...7.6.0)

Updates `pytest` from 8.2.2 to 8.3.2
- [Release notes](https://github.com/pytest-dev/pytest/releases)
- [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst)
- [Commits](pytest-dev/pytest@8.2.2...8.3.2)

Updates `pytest-recording` from 0.13.1 to 0.13.2
- [Release notes](https://github.com/kiwicom/pytest-recording/releases)
- [Changelog](https://github.com/kiwicom/pytest-recording/blob/master/docs/changelog.rst)
- [Commits](kiwicom/pytest-recording@v0.13.1...v0.13.2)

Updates `ruff` from 0.5.5 to 0.5.6
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.5.5...0.5.6)

---
updated-dependencies:
- dependency-name: ipywidgets
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: pip
- dependency-name: notebook
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: pip
- dependency-name: pymongo
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pip
- dependency-name: scikit-learn
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: pip
- dependency-name: cryptography
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: pip
- dependency-name: jsonschema
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pip
- dependency-name: markdown
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pip
- dependency-name: markupsafe
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: pip
- dependency-name: pycurl
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: pip
- dependency-name: pyopenssl
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pip
- dependency-name: setuptools
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: pip
- dependency-name: terminado
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: pip
- dependency-name: ete3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: pip
- dependency-name: coverage
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: pip
- dependency-name: pytest
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: pip
- dependency-name: pytest-recording
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: pip
- dependency-name: ruff
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: pip
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Aug 2, 2024
This was referenced Aug 2, 2024
Closed
Closed
Closed
Closed
Closed
Closed
Closed
Closed
Closed
Closed
Closed
Closed
@sonarqubecloud SonarQubeCloud
Copy link

sonarqubecloud bot commented Aug 2, 2024

Quality Gate Passed Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarCloud

@dependabot Dependabot
Copy link
Contributor Author

dependabot bot commented on behalf of github Sep 1, 2024

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot bot closed this Sep 1, 2024
@dependabot dependabot bot deleted the dependabot/pip/src/pip-a9985f6c92 branch September 1, 2024 18:11
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
dependencies Pull requests that update a dependency file python Pull requests that update Python code
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
0 participants