Bump the build-python group across 1 directory with 13 updates #145

dependabot · 2024-12-16T07:34:07Z

Bumps the build-python group with 13 updates in the /build/pip directory:

Package	From	To
bleach	`6.1.0`	`6.2.0`
certifi	`2024.8.30`	`2024.12.14`
charset-normalizer	`3.3.2`	`3.4.0`
idna	`3.8`	`3.10`
importlib-metadata	`8.4.0`	`8.5.0`
keyring	`25.3.0`	`25.5.0`
pkginfo	`1.11.1`	`1.12.0`
rich	`13.8.0`	`13.9.4`
setuptools	`74.1.2`	`75.6.0`
six	`1.16.0`	`1.17.0`
twine	`5.1.1`	`6.0.1`
urllib3	`2.2.2`	`2.2.3`
zipp	`3.20.1`	`3.21.0`

Updates bleach from 6.1.0 to 6.2.0

Changelog

Sourced from bleach's changelog.

Version 6.2.0 (October 29th, 2024)

Backwards incompatible changes

Dropped support for Python 3.8. (#737)

Security fixes

None

Bug fixes

Add support for Python 3.13. (#736)

Remove six depdenncy. (#618)

Update known-good versions for tinycss2. (#732)

Fix additional < followed by characters and EOF issues. (#728)

Commits

73871d7 Prep for a 6.2.0 release
156c589 Remove six dependency from html5lib (#618)
5a47907 Drop six as a requirement; add six_shim.py (#618)
6a2ec5c Update known-good versions of tinycss2 (#732)
32efc26 Fix additional < followed by characters and EOF issues (#728)
648a97d Add support for Python 3.13 (#736)
d1e40ed Drop support for Python 3.8 (#737)
4bc1bff Update dev requirements
fcbe8f7 Update dev dependencies
f8fb848 Bump actions/cache from 3 to 4
Additional commits viewable in compare view

Updates certifi from 2024.8.30 to 2024.12.14

Commits

4ba3900 2024.12.14 (#329)
9164660 Bump pypa/gh-action-pypi-publish from 1.12.2 to 1.12.3 (#331)
3dc3651 Bump pypa/gh-action-pypi-publish from 1.11.0 to 1.12.2 (#328)
c5bf18d Bump pypa/gh-action-pypi-publish from 1.10.3 to 1.11.0 (#327)
b908391 Bump actions/setup-python from 5.2.0 to 5.3.0 (#326)
bc26b41 Bump actions/checkout from 4.2.1 to 4.2.2 (#325)
57afc22 Bump actions/upload-artifact from 4.4.1 to 4.4.3 (#323)
a495091 test against 3.13 final
62f8144 Added 3.13 classifier (#322)
94d23a0 Bump pypa/gh-action-pypi-publish from 1.10.2 to 1.10.3 (#321)
Additional commits viewable in compare view

Updates charset-normalizer from 3.3.2 to 3.4.0

Release notes

Sourced from charset-normalizer's releases.

Version 3.4.0

🚀 charset-normalizer is raising awareness around HTTP/2, and HTTP/3!

Did you know that Internet Explorer 11 shipped with an optional HTTP/2 support back in 2013? also libcurl did ship it in 2014[...] All of this while our community is still struggling to make a firm advancement in HTTP clients. Now, many of you use Requests as the defacto http client, now, and for many years now, Requests has been frozen. Being left in a vegetative state and not evolving, this blocked millions of developers from using more advanced features.

We promptly invite Python developers to look at the drop-in replacement for Requests, namely Niquests. It leverage charset-normalizer in a better way! Check it out, you will be positively surprised! Don't wait another decade.

We are thankful to @microsoft and involved parties for funding our work through the Microsoft FOSS Fund program.

3.4.0 (2024-10-08)

Added

Argument --no-preemptive in the CLI to prevent the detector to search for hints.

Support for Python 3.13 (#512)

Fixed

Relax the TypeError exception thrown when trying to compare a CharsetMatch with anything else than a CharsetMatch.

Improved the general reliability of the detector based on user feedbacks. (#520) (#509) (#498) (#407) (#537)

Declared charset in content (preemptive detection) not changed when converting to utf-8 bytes. (#381)

Changelog

Sourced from charset-normalizer's changelog.

3.4.0 (2024-10-08)

Added

Argument --no-preemptive in the CLI to prevent the detector to search for hints.

Support for Python 3.13 (#512)

Fixed

Relax the TypeError exception thrown when trying to compare a CharsetMatch with anything else than a CharsetMatch.

Improved the general reliability of the detector based on user feedbacks. (#520) (#509) (#498) (#407) (#537)

Declared charset in content (preemptive detection) not changed when converting to utf-8 bytes. (#381)

Commits

f3118e3 🔧 change download/upload artifact version to last working version
33e67e8 🔧 set compile-generator in generator_generic_slsa3 action
73dd24c 🔧 add explicit build deps to setuptools
78f1e9b 🔧 attempt to fix cd.yml *3
56ae702 🔧 attempt to fix cd.yml *2
9720055 🔧 attempt to fix cd.yml (macos part)
1e10d06 Update CHANGELOG.md
36c103a 🔖 Release 3.4.0 (#545)
7658dfc ⬆️ Bump github/codeql-action from 3.26.11 to 3.26.12 (#544)
ca2535d ⬆️ Bump github/codeql-action from 3.26.9 to 3.26.11 (#542)
Additional commits viewable in compare view

Updates idna from 3.8 to 3.10

Changelog

Sourced from idna's changelog.

3.10 (2024-09-15) +++++++++++++++++

Reverted to Unicode 15.1.0 data. Unicode 16 has some significant changes to UTS46 processing that will require more work to properly implement.

3.9 (2024-09-13) ++++++++++++++++

Update to Unicode 16.0.0

Deprecate setup.cfg in favour of pyproject.toml

Use ruff for code formatting

Thanks to Waket Zheng for contributions to this release.

Commits

729225d Release v3.10
3eef168 Merge pull request #194 from kjd/revert-unicode-16
ceca619 Revert Unicode 16.0.0 data updates
c43ac75 Merge pull request #191 from kjd/release-3.9
1b8800a Release v3.9
a1fd168 Merge pull request #190 from kjd/unicode-16
7732c61 Merge branch 'master' into unicode-16
4ed183d Refactor membership test
762216b Format with ruff
580ece9 Implement changes to UTS46 algorithm
Additional commits viewable in compare view

Updates importlib-metadata from 8.4.0 to 8.5.0

Changelog

Sourced from importlib-metadata's changelog.

v8.5.0

Features

Deferred import of zipfile.Path (#502)

Deferred import of json (#503)

Rely on zipp overlay for zipfile.Path.

Commits

b34810b Finalize
8c1d1fa Merge pull request #501 from Avasam/Pass-mypy-and-link-issues
afa39e8 Back out changes to tests._path
8b909f9 Merge pull request #503 from danielhollas/defer-json
2a3f50d Add news fragment.
3f78dc1 Add comment to protect the deferred import.
18eb2da Revert "Defer platform import"
58832f2 Merge pull request #502 from danielhollas/defer-zipp
e3ce33b Add news fragment.
d11b67f Add comment to protect the deferred import.
Additional commits viewable in compare view

Updates keyring from 25.3.0 to 25.5.0

Changelog

Sourced from keyring's changelog.

v25.5.0

Features

When parsing keyring_path from the config, the home directory is now expanded from ~. (#696)

Bugfixes

In get_credential, now returns None when the indicated username is not found. (#698)

v25.4.1

Bugfixes

Fixed ValueError for AnonymousCredentials in CLI. (#694)

v25.4.0

Features

Refined type spec and interfaces on credential objects. Introduced AnonymousCredential to model a secret without a username. (#689)

Commits

999a2f9 Finalize
8279fd8 Merge https://github.com/jaraco/skeleton
ccaee76 Merge pull request #699 from JamieBeverley/bugfix/wrong_username
103c535 🧎‍♀️ Genuflect to the types.
5e4b99e Unified the Windows.get_password and .get_credential logic through a new _res...
f33fcfb Restore the indentation on the check, keeping the logic in the only place it'...
2f3f4ec Updated comment to match new behavior.
562c69f 👹 Feed the hobgoblins (delint).
916c039 Add news fragment.
8e2f8b2 Merge pull request #696 from torarvid/torarvid/expanduser
Additional commits viewable in compare view

Updates pkginfo from 1.11.1 to 1.12.0

Updates rich from 13.8.0 to 13.9.4

Release notes

Sourced from rich's releases.

The Faster is Faster release

[13.9.4] - 2024-11-01

Changed

Optimizations to cell_len which may speed up Rich / Textual output Textualize/rich#3546

The irregular expression release

Fix a broken regex that resulted in the slow path being chosen for some operations. This fix should result in notable speedups for some operations, such as wrapping text.

[13.9.3] - 2024-10-22

Fixed

Fixed broken regex that may have resulted in poor performance. Textualize/rich#3535

The Splitting segments Release

A hotfix for highlighting in the table, and a fix for Segment.split_cells

[13.9.2] - 2024-10-04

Fixed

Fixed Table columns not highlighting when added by add_row Textualize/rich#3517

Fixed an issue with Segment.split_cells reported in Textual Textualize/textual#5090

Hotfix for dependency issue

[13.9.1] - 2024-10-01

Fixed

Fixed typing_extensions dependency

The so long Python 3.7 release

This version adds support for fine-grained information in tracebacks. In other words, it will highlight columns in tracebacks (for supported Python versions). Here's an example:

This version also drops support for Python 3.7, which has long since reached its EOL. If you are stuck on Python3.7 for any reason, you will not be able to upgrade to this version, but nothing should break.

See below for other changes in this release.

[13.9.0] - 2024-10-01

Changed

Dropped support for Python3.7 Textualize/rich#3509

Rich will display tracebacks with finely grained error locations on python 3.11+ Textualize/rich#3486

Fixed

... (truncated)

Changelog

Sourced from rich's changelog.

[13.9.4] - 2024-11-01

Changed

Optimizations to cell_len which may speed up Rich / Textual output Textualize/rich#3546

[13.9.3] - 2024-10-22

Fixed

Fixed broken regex that may have resulted in poor performance. Textualize/rich#3535

[13.9.2] - 2024-10-04

Fixed

Fixed Table columns not highlighting when added by add_row Textualize/rich#3517

Fixed an issue with Segment.split_cells reported in Textual Textualize/textual#5090

[13.9.1] - 2024-10-01

Fixed

Fixed typing_extensions dependency

[13.9.0] - 2024-10-01

Changed

Dropped support for Python3.7 Textualize/rich#3509

Rich will display tracebacks with finely grained error locations on python 3.11+ Textualize/rich#3486

Fixed

Fixed issue with Segment._split_cells Textualize/rich#3506

Fix auto detection of terminal size on Windows Textualize/rich#2916

Text.style now respected in Panel title/subtitle Textualize/rich#3509

[13.8.1] - 2024-09-10

Fixed

Added support for Python 3.13 Textualize/rich#3481

Fixed infinite loop when appending Text to same instance Textualize/rich#3480

Commits

43d3b04 Merge pull request #3548 from Textualize/bump1394
e440ff2 bump
12301e3 Merge pull request #3546 from Textualize/faster-cell-len
02f3d14 comment
aaaef27 leaner syntax
6cef0bc leaner cell_len
46150cd sum and map is faster
9e7f363 use sets
afcc5c5 Merge pull request #3535 from Textualize/regex-error
60f3b61 changelog
Additional commits viewable in compare view

Updates setuptools from 74.1.2 to 75.6.0

Changelog

Sourced from setuptools's changelog.

v75.6.0

Features

Preserve original PKG-INFO into METADATA when creating wheel (instead of calling wheel.metadata.pkginfo_to_metadata). This helps to be more compliant with the flow specified in PEP 517. (#4701)

Changed the WindowsSdkVersion, FrameworkVersion32 and FrameworkVersion64 properties of setuptools.msvc.PlatformInfo to return an empty tuple instead of None as a fallthrough case -- by :user:Avasam (#4754)

v75.5.0

Features

Removed support for SETUPTOOLS_DANGEROUSLY_SKIP_PYPROJECT_VALIDATION, as it is deemed prone to errors. (#4746)

v75.4.0

Features

Added support for the environment variable SETUPTOOLS_DANGEROUSLY_SKIP_PYPROJECT_VALIDATION=true, allowing users to bypass the validation of pyproject.toml. This option should be used only as a last resort when resolving dependency issues, as it may lead to improper functioning. Users who enable this setting are responsible for ensuring that pyproject.toml complies with setuptools requirements. (#4611)

.. attention:: This environment variable was removed in a later version of setuptools.

Require Python 3.9 or later. (#4718)

Remove dependency on importlib_resources and the vendored copy of the library. Instead, setuptools consistently rely on stdlib's importlib.resources (available on Python 3.9+). (#4718)

Setuptools' bdist_wheel implementation no longer produces wheels with the m SOABI flag (pymalloc-related). This flag was removed on Python 3.8+ (see :obj:sys.abiflags). (#4718)

Updated vendored packaging version to 24.2. (#4740)

... (truncated)

Commits

bf2ced2 Bump version: 75.5.0 → 75.6.0
8685c80 Empty tuple instead of None for PlatformInfo version properties fallthrough (...
50d671b Rename news fragment
2b471c2 Changed the WindowsSdkVersion, FrameworkVersion32 and ``FrameworkVers...
2c77cd2 Runtime typing fixes for typeshed return type merge (#4753
9a4c8d4 Runtime typing fixes for typeshed return type merge
e622859 Preserve original PKG-INFO contents when creating wheel (instead of calling...
0b5b417 Mark tests that may depend on external network
a4fa01d Add news fragment
089aca9 Ignore coverage in test code
Additional commits viewable in compare view

Updates six from 1.16.0 to 1.17.0

Changelog

Sourced from six's changelog.

1.17.0

Pull request #388: Remove URLopener and FancyURLopener classes from urllib.request when running on Python 3.14 or greater.

Pull request #365, issue #283: six.moves.UserDict now points to UserDict.IterableUserDict instead of UserDict.UserDict on Python 2.

Commits

ebd9b3a six 1.17.0
40d248e Expunge travis.
dd7940e Add PyPI publication workflow. (#390)
8cb688f Update copyright years.
86f89c5 Add a GitHub actions CI workflow. (#389)
06430b9 Make test_getoutput work on Windows.
ceddaf2 Add a changelog for #314.
9a05aab Python 3.14 removed the URLopener and FancyURLopener classes from urllib.req...
c1b416f Fix deprecation warning from setuptools (#382)
02c3bca tkinter.tix was removed from Python 3.13, skip the test (#377)
Additional commits viewable in compare view

Updates twine from 5.1.1 to 6.0.1

Changelog

Sourced from twine's changelog.

Twine 6.0.1 (2024-11-30)

Bugfixes ^^^^^^^^

Fixed a regression where twine check would fail to expand wildcards, e.g. twine check 'dist/*'. ([#1188](https://github.com/pypa/twine/issues/1188) <https://github.com/pypa/twine/issues/1188>_)

Misc ^^^^

[#1184](https://github.com/pypa/twine/issues/1184) <https://github.com/pypa/twine/issues/1184>_

Twine 6.0.0 (2024-11-29)

Bugfixes ^^^^^^^^

Restore support for pkginfo 1.11 ([#1116](https://github.com/pypa/twine/issues/1116) <https://github.com/pypa/twine/issues/1116>_)

Deprecations and Removals ^^^^^^^^^^^^^^^^^^^^^^^^^

Username for PyPI and Test PyPI now defaults to token but no longer overrides a username configured in the environment or supplied on the command line. Workflows still supplying anything other than token for the username when uploading to PyPI or Test PyPI will now fail. Either supply token or do not supply a username at all. ([#1121](https://github.com/pypa/twine/issues/1121) <https://github.com/pypa/twine/issues/1121>_)

Misc ^^^^

[#1024](https://github.com/pypa/twine/issues/1024) <https://github.com/pypa/twine/issues/1024>_

Commits

a723876 Merge pull request #1189 from pypa/release-6.0.1
9a24828 Update changelog for 6.0.1
a017005 Merge pull request #1188 from pypa/ww/fix-twine-check-glob
e98f03b check: fix handling of non-shell-expanded globs
873f33e build(deps): bump pypa/gh-action-pypi-publish from 1.11.0 to 1.12.2 (#1175)
067412e Use brackets for the default value of option arguments (#1149)
f32dc35 Apply ruff/Perflint rule (#1136)
aa58273 Don't require importlib_metadata on Python 3.10+
675565f changelog: record #1184
80cc58c chore: mark 3.13 as explicitly supported
Additional commits viewable in compare view

Updates urllib3 from 2.2.2 to 2.2.3

Release notes

Sourced from urllib3's releases.

2.2.3

🚀 urllib3 is fundraising for HTTP/2 support

urllib3 is raising ~$40,000 USD to release HTTP/2 support and ensure long-term sustainable maintenance of the project after a sharp decline in financial support for 2023. If your company or organization uses Python and would benefit from HTTP/2 support in Requests, pip, cloud SDKs, and thousands of other projects please consider contributing financially to ensure HTTP/2 support is developed sustainably and maintained for the long-haul.

Thank you for your support.

Features

Added support for Python 3.13. (#3473)

Bugfixes

Fixed the default encoding of chunked request bodies to be UTF-8 instead of ISO-8859-1. All other methods of supplying a request body already use UTF-8 starting in urllib3 v2.0. (#3053)

Fixed ResourceWarning on CONNECT with Python < 3.11.4 by backporting python/cpython#103472. (`#3252)

Adjust tolerance for floating-point comparison on Windows to avoid flakiness in CI (#3413)

Fixed a crash where certain standard library hash functions were absent in restricted environments. (#3432)

Fixed mypy error when adding to HTTPConnection.default_socket_options. (#3448)

HTTP/2 (experimental)

HTTP/2 support is still in early development.

Excluded Transfer-Encoding: chunked from HTTP/2 request body (#3425)

Added version checking for h2 (https://pypi.org/project/h2/) usage. Now only accepting supported h2 major version 4.x.x. (#3290)

Added a probing mechanism for determining whether a given target origin supports HTTP/2 via ALPN. (#3301)

Add support for sending a request body with HTTP/2 (#3302)

Full Changelog: urllib3/urllib3@2.2.2...2.2.3

Changelog

Sourced from urllib3's changelog.

2.2.3 (2024-09-12)

Features

Added support for Python 3.13. ([#3473](https://github.com/urllib3/urllib3/issues/3473) <https://github.com/urllib3/urllib3/issues/3473>__)

Bugfixes

Fixed the default encoding of chunked request bodies to be UTF-8 instead of ISO-8859-1. All other methods of supplying a request body already use UTF-8 starting in urllib3 v2.0. ([#3053](https://github.com/urllib3/urllib3/issues/3053) <https://github.com/urllib3/urllib3/issues/3053>__)

Fixed ResourceWarning on CONNECT with Python `__)

Adjust tolerance for floating-point comparison on Windows to avoid flakiness in CI ([#3413](https://github.com/urllib3/urllib3/issues/3413) <https://github.com/urllib3/urllib3/issues/3413>__)

Fixed a crash where certain standard library hash functions were absent in restricted environments. ([#3432](https://github.com/urllib3/urllib3/issues/3432) <https://github.com/urllib3/urllib3/issues/3432>__)

Fixed mypy error when adding to HTTPConnection.default_socket_options. ([#3448](https://github.com/urllib3/urllib3/issues/3448) <https://github.com/urllib3/urllib3/issues/3448>__)

HTTP/2 (experimental)

HTTP/2 support is still in early development.

Excluded Transfer-Encoding: chunked from HTTP/2 request body ([#3425](https://github.com/urllib3/urllib3/issues/3425) <https://github.com/urllib3/urllib3/issues/3425>__)

Added version checking for h2 (https://pypi.org/project/h2/) usage.

Now only accepting supported h2 major version 4.x.x. ([#3290](https://github.com/urllib3/urllib3/issues/3290) <https://github.com/urllib3/urllib3/issues/3290>__)

Added a probing mechanism for determining whether a given target origin supports HTTP/2 via ALPN. ([#3301](https://github.com/urllib3/urllib3/issues/3301) <https://github.com/urllib3/urllib3/issues/3301>__)

Add support for sending a request body with HTTP/2 ([#3302](https://github.com/urllib3/urllib3/issues/3302) <https://github.com/urllib3/urllib3/issues/3302>__)

Deprecations and Removals

Note for downstream distributors: the _version.py file has been removed and is now created at build time by hatch-vcs. ([#3412](https://github.com/urllib3/urllib3/issues/3412) <https://github.com/urllib3/urllib3/issues/3412>__)

Drop support for end-of-life PyPy3.8 and PyPy3.9. ([#3475](https://github.com/urllib3/urllib3/issues/3475) <https://github.com/urllib3/urllib3/issues/3475>__)

Commits

2458bfc Release 2.2.3
9b25db6 Only attempt to publish for upstream
b9adeef Drop support for EOL PyPy3.8 and PyPy3.9
b1d4649 Add explicit support for Python 3.13
cc42860 Bump cryptography from 42.0.4 to 43.0.1 (#3470)
3dae2e9 Bump pypa/gh-action-pypi-publish from 1.9.0 to 1.10.1 (#3469)
1e94feb Revert "Add TLS settings for HTTP/2 (#3456)" (#3466)
aa73abc Bump actions/setup-python from 5.1.0 to 5.2.0 (#3468)
abbfbcb Add 1.26.20 to changelog and make the publish workflow the same (#3464)
d480615 Add TLS settings for HTTP/2 (#3456)
Additional commits viewable in compare view

Updates zipp from 3.20.1 to 3.21.0

Changelog

Sourced from zipp's changelog.

v3.21.0

Features

Improve performances of :meth:zipfile.Path.open for non-reading modes. (1a1928d)

Rely on cached_property to cache values on the instance.

Rely on save_method_args to save method args.

v3.20.2

Bugfixes

Make zipp.compat.overlay.zipfile hashable. (#126)

Commits

45b7f67 Finalize
71ddd8d Skip zipfile.Path.existspython/cpython#126576
9a2705e Merge https://github.com/jaraco/skeleton
5c34e69 Use extend for proper workaround.
ee027f6 Merge https://github.com/jaraco/skeleton
750a189 Require Python 3.9 or later now that Python 3.8 is EOL.
e61a9df Include pyproject.toml in ruff.toml.
db4dfc4jaraco/skeleton#151
62b6678 Bump pre-commit hook for ruff to avoid clashes with pytest-ruff (jaraco/skele...
466f535 Merge pull request #109 from jaraco/feature/functools
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the build-python group with 13 updates in the /build/pip directory: | Package | From | To | | --- | --- | --- | | [bleach](https://github.com/mozilla/bleach) | `6.1.0` | `6.2.0` | | [certifi](https://github.com/certifi/python-certifi) | `2024.8.30` | `2024.12.14` | | [charset-normalizer](https://github.com/Ousret/charset_normalizer) | `3.3.2` | `3.4.0` | | [idna](https://github.com/kjd/idna) | `3.8` | `3.10` | | [importlib-metadata](https://github.com/python/importlib_metadata) | `8.4.0` | `8.5.0` | | [keyring](https://github.com/jaraco/keyring) | `25.3.0` | `25.5.0` | | [pkginfo](https://code.launchpad.net/~tseaver/pkginfo/trunk) | `1.11.1` | `1.12.0` | | [rich](https://github.com/Textualize/rich) | `13.8.0` | `13.9.4` | | [setuptools](https://github.com/pypa/setuptools) | `74.1.2` | `75.6.0` | | [six](https://github.com/benjaminp/six) | `1.16.0` | `1.17.0` | | [twine](https://github.com/pypa/twine) | `5.1.1` | `6.0.1` | | [urllib3](https://github.com/urllib3/urllib3) | `2.2.2` | `2.2.3` | | [zipp](https://github.com/jaraco/zipp) | `3.20.1` | `3.21.0` | Updates `bleach` from 6.1.0 to 6.2.0 - [Changelog](https://github.com/mozilla/bleach/blob/main/CHANGES) - [Commits](mozilla/bleach@v6.1.0...v6.2.0) Updates `certifi` from 2024.8.30 to 2024.12.14 - [Commits](certifi/python-certifi@2024.08.30...2024.12.14) Updates `charset-normalizer` from 3.3.2 to 3.4.0 - [Release notes](https://github.com/Ousret/charset_normalizer/releases) - [Changelog](https://github.com/jawah/charset_normalizer/blob/master/CHANGELOG.md) - [Commits](jawah/charset_normalizer@3.3.2...3.4.0) Updates `idna` from 3.8 to 3.10 - [Release notes](https://github.com/kjd/idna/releases) - [Changelog](https://github.com/kjd/idna/blob/master/HISTORY.rst) - [Commits](kjd/idna@v3.8...v3.10) Updates `importlib-metadata` from 8.4.0 to 8.5.0 - [Release notes](https://github.com/python/importlib_metadata/releases) - [Changelog](https://github.com/python/importlib_metadata/blob/main/NEWS.rst) - [Commits](python/importlib_metadata@v8.4.0...v8.5.0) Updates `keyring` from 25.3.0 to 25.5.0 - [Release notes](https://github.com/jaraco/keyring/releases) - [Changelog](https://github.com/jaraco/keyring/blob/main/NEWS.rst) - [Commits](jaraco/keyring@v25.3.0...v25.5.0) Updates `pkginfo` from 1.11.1 to 1.12.0 Updates `rich` from 13.8.0 to 13.9.4 - [Release notes](https://github.com/Textualize/rich/releases) - [Changelog](https://github.com/Textualize/rich/blob/master/CHANGELOG.md) - [Commits](Textualize/rich@v13.8.0...v13.9.4) Updates `setuptools` from 74.1.2 to 75.6.0 - [Release notes](https://github.com/pypa/setuptools/releases) - [Changelog](https://github.com/pypa/setuptools/blob/main/NEWS.rst) - [Commits](pypa/setuptools@v74.1.2...v75.6.0) Updates `six` from 1.16.0 to 1.17.0 - [Changelog](https://github.com/benjaminp/six/blob/main/CHANGES) - [Commits](benjaminp/six@1.16.0...1.17.0) Updates `twine` from 5.1.1 to 6.0.1 - [Release notes](https://github.com/pypa/twine/releases) - [Changelog](https://github.com/pypa/twine/blob/main/docs/changelog.rst) - [Commits](pypa/twine@v5.1.1...6.0.1) Updates `urllib3` from 2.2.2 to 2.2.3 - [Release notes](https://github.com/urllib3/urllib3/releases) - [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst) - [Commits](urllib3/urllib3@2.2.2...2.2.3) Updates `zipp` from 3.20.1 to 3.21.0 - [Release notes](https://github.com/jaraco/zipp/releases) - [Changelog](https://github.com/jaraco/zipp/blob/main/NEWS.rst) - [Commits](jaraco/zipp@v3.20.1...v3.21.0) --- updated-dependencies: - dependency-name: bleach dependency-type: direct:production update-type: version-update:semver-minor dependency-group: build-python - dependency-name: certifi dependency-type: direct:production update-type: version-update:semver-minor dependency-group: build-python - dependency-name: charset-normalizer dependency-type: direct:production update-type: version-update:semver-minor dependency-group: build-python - dependency-name: idna dependency-type: direct:production update-type: version-update:semver-minor dependency-group: build-python - dependency-name: importlib-metadata dependency-type: direct:production update-type: version-update:semver-minor dependency-group: build-python - dependency-name: keyring dependency-type: direct:production update-type: version-update:semver-minor dependency-group: build-python - dependency-name: pkginfo dependency-type: direct:production update-type: version-update:semver-minor dependency-group: build-python - dependency-name: rich dependency-type: direct:production update-type: version-update:semver-minor dependency-group: build-python - dependency-name: setuptools dependency-type: direct:production update-type: version-update:semver-major dependency-group: build-python - dependency-name: six dependency-type: direct:production update-type: version-update:semver-minor dependency-group: build-python - dependency-name: twine dependency-type: direct:production update-type: version-update:semver-major dependency-group: build-python - dependency-name: urllib3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: build-python - dependency-name: zipp dependency-type: direct:production update-type: version-update:semver-minor dependency-group: build-python ... Signed-off-by: dependabot[bot] <[email protected]>

github-actions · 2024-12-16T08:29:36Z

Benchmark Results

java_maven_parallel.csv

Commit	CPU	Memory	Time
`afc97cb`	33%	172916	0:32.61
`aff43ef`	32%	175516	0:35.05
`5884aa1`	35%	170296	0:31.54
`3856267`	32%	173444	0:34.86

java_simple_serial.csv

Commit	CPU	Memory	Time
`afc97cb`	40%	65936	0:15.87
`aff43ef`	45%	66284	0:14.56
`5884aa1`	53%	67836	0:12.38
`3856267`	35%	63952	0:18.10

java_simple_parallel.csv

Commit	CPU	Memory	Time
`afc97cb`	23%	73892	0:24.89
`aff43ef`	21%	66656	0:24.91
`5884aa1`	24%	74792	0:24.36
`3856267`	19%	65976	0:27.95

java_simple_multithreaded.csv

Commit	CPU	Memory	Time
`afc97cb`	26%	69952	0:13.39
`aff43ef`	40%	64600	0:09.75
`5884aa1`	38%	70512	0:09.70
`3856267`	32%	63964	0:12.07

java_gradle_parallel.csv

Commit	CPU	Memory	Time
`afc97cb`	6%	126520	0:46.25
`aff43ef`	5%	118848	0:48.92
`5884aa1`	5%	107148	0:44.76
`3856267`	6%	110300	0:44.77

java_maven_serial.csv

Commit	CPU	Memory	Time
`afc97cb`	71%	189880	0:17.03
`aff43ef`	72%	186092	0:17.10
`5884aa1`	67%	190804	0:18.02
`3856267`	76%	189980	0:16.44

java_gradle_multithreaded.csv

Commit	CPU	Memory	Time
`afc97cb`	10%	97660	0:22.99
`aff43ef`	9%	121700	0:24.43
`5884aa1`	10%	125920	0:22.82
`3856267`	9%	118696	0:24.04

java_maven_multithreaded.csv

Commit	CPU	Memory	Time
`afc97cb`	60%	173792	0:15.06
`aff43ef`	60%	170756	0:15.91
`5884aa1`	64%	174356	0:13.96
`3856267`	66%	174712	0:13.83

java_gradle_serial.csv

Commit	CPU	Memory	Time
`afc97cb`	9%	122360	0:25.03
`aff43ef`	10%	121088	0:25.37
`5884aa1`	10%	104040	0:24.67
`3856267`	10%	120232	0:25.05

Notes

The results above are generated by running against seed projects in https://github.com/getgauge/gauge-benchmark
These results are not persisted, but on merging to master the benchmark will be rerun.
These benchmark are run in Github Actions' agents, which are virtualized. Results are not to be taken as actual benchmarks.Rather, these are indicative numbers and make sense for comparison.

See Workflow log for more details.

haroon-sheikh · 2025-05-03T17:49:43Z

@dependabot rebase

dependabot · 2025-05-03T17:51:07Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Dec 16, 2024

dependabot bot closed this May 3, 2025

dependabot bot deleted the dependabot/pip/build/pip/build-python-079097c7e5 branch May 3, 2025 17:51

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Bump the build-python group across 1 directory with 13 updates #145

Bump the build-python group across 1 directory with 13 updates #145

Uh oh!

dependabot bot commented on behalf of github Dec 16, 2024 •

edited

Loading

Uh oh!

github-actions bot commented Dec 16, 2024

Uh oh!

haroon-sheikh commented May 3, 2025

Uh oh!

dependabot bot commented on behalf of github May 3, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Bump the build-python group across 1 directory with 13 updates #145

Bump the build-python group across 1 directory with 13 updates #145

Uh oh!

Conversation

dependabot bot commented on behalf of github Dec 16, 2024 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Version 6.2.0 (October 29th, 2024)

Version 3.4.0

🚀 charset-normalizer is raising awareness around HTTP/2, and HTTP/3!

3.4.0 (2024-10-08)

Added

Fixed

3.4.0 (2024-10-08)

Added

Fixed

v8.5.0

Features

v25.5.0

Features

Bugfixes

v25.4.1

Bugfixes

v25.4.0

Features

The Faster is Faster release

[13.9.4] - 2024-11-01

Changed

The irregular expression release

[13.9.3] - 2024-10-22

Fixed

The Splitting segments Release

[13.9.2] - 2024-10-04

Fixed

Hotfix for dependency issue

[13.9.1] - 2024-10-01

Fixed

The so long Python 3.7 release

[13.9.0] - 2024-10-01

Changed

Fixed

[13.9.4] - 2024-11-01

Changed

[13.9.3] - 2024-10-22

Fixed

[13.9.2] - 2024-10-04

Fixed

[13.9.1] - 2024-10-01

Fixed

[13.9.0] - 2024-10-01

Changed

Fixed

[13.8.1] - 2024-09-10

Fixed

v75.6.0

Features

v75.5.0

Features

v75.4.0

Features

1.17.0

Twine 6.0.1 (2024-11-30)

Twine 6.0.0 (2024-11-29)

2.2.3

🚀 urllib3 is fundraising for HTTP/2 support

Features

Bugfixes

HTTP/2 (experimental)

2.2.3 (2024-09-12)

Features

Bugfixes

HTTP/2 (experimental)

Deprecations and Removals

v3.21.0

Features

v3.20.2

Bugfixes

Uh oh!

github-actions bot commented Dec 16, 2024

Benchmark Results

Notes

dependabot bot commented on behalf of github Dec 16, 2024 •

edited

Loading