⬆️(project) upgrade python dependencies #36
+20
−20
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
![renovate[bot]](https://avatars.githubusercontent.com/in/2740?s=60&v=4){kind=small}
renovate
bot
force-pushed
the
renovate/python-dependencies
branch
4 times, most recently
from
4aab368 to
f0b25e5
Compare
renovate
bot
force-pushed
the
renovate/python-dependencies
branch
3 times, most recently
from
0d0140d to
37fa4cd
Compare
renovate
bot
force-pushed
the
renovate/python-dependencies
branch
4 times, most recently
from
c6b78ab to
409bf77
Compare
renovate
bot
force-pushed
the
renovate/python-dependencies
branch
5 times, most recently
from
05ff8d4 to
7fd92d1
Compare
renovate
bot
force-pushed
the
renovate/python-dependencies
branch
4 times, most recently
from
532a93e to
aa1155d
Compare
renovate
bot
force-pushed
the
renovate/python-dependencies
branch
3 times, most recently
from
3b904cc to
960b19e
Compare
renovate
bot
force-pushed
the
renovate/python-dependencies
branch
from
960b19e to
2ec0a62
Compare
renovate
bot
force-pushed
the
renovate/python-dependencies
branch
2 times, most recently
from
b96e65d to
26024be
Compare
renovate
bot
force-pushed
the
renovate/python-dependencies
branch
3 times, most recently
from
37fee4d to
c2e666b
Compare
renovate
bot
force-pushed
the
renovate/python-dependencies
branch
2 times, most recently
from
0d195a9 to
e2ccab3
Compare
renovate
bot
force-pushed
the
renovate/python-dependencies
branch
2 times, most recently
from
4d574ed to
5519fb0
Compare
renovate
bot
force-pushed
the
renovate/python-dependencies
branch
3 times, most recently
from
39b648e to
a3dc4d7
Compare
renovate
bot
force-pushed
the
renovate/python-dependencies
branch
3 times, most recently
from
a29acb6 to
509e444
Compare
renovate
bot
force-pushed
the
renovate/python-dependencies
branch
5 times, most recently
from
3b57ffc to
2ab48b3
Compare
renovate
bot
force-pushed
the
renovate/python-dependencies
branch
3 times, most recently
from
93d4851 to
aeaf454
Compare
renovate
bot
force-pushed
the
renovate/python-dependencies
branch
3 times, most recently
from
97d3f98 to
85bcff5
Compare
renovate
bot
force-pushed
the
renovate/python-dependencies
branch
from
85bcff5 to
1796503
Compare
renovate
bot
force-pushed
the
renovate/python-dependencies
branch
3 times, most recently
from
0ae495c to
77e2ca3
Compare
renovate
bot
force-pushed
the
renovate/python-dependencies
branch
from
77e2ca3 to
7e1bc1f
Compare
renovate
bot
force-pushed
the
renovate/python-dependencies
branch
2 times, most recently
from
3af8826 to
862a9cd
Compare
| datasource | package | from | to | | ---------- | ------------- | ------- | ------ | | pypi | bandit | 1.7.10 | 1.8.6 | | pypi | black | 24.10.0 | 25.1.0 | | pypi | cryptography | 43.0.3 | 45.0.6 | | pypi | factory-boy | 3.3.1 | 3.3.3 | | pypi | flake8 | 7.1.1 | 7.3.0 | | pypi | ipython | 8.28.0 | 9.4.0 | | pypi | isort | 5.13.2 | 6.0.1 | | pypi | pyopenssl | 24.2.1 | 25.1.0 | | pypi | pycodestyle | 2.12.1 | 2.14.0 | | pypi | pylint | 3.3.1 | 3.3.7 | | pypi | pytest | 8.2.0 | 8.4.1 | | pypi | pytest-cov | 5.0.0 | 6.2.1 | | pypi | pytest-django | 4.9.0 | 4.11.1 | | pypi | pytest-mock | 3.14.0 | 3.14.1 | | pypi | redis | 5.3.1 | 6.4.0 | | pypi | signxml | 4.0.2 | 4.1.0 | | pypi | uvicorn | 0.32.0 | 0.35.0 | | pypi | websockets | 13.1 | 15.0.1 | | pypi | wheel | 0.44.0 | 0.45.1 | | pypi | whitenoise | 6.7.0 | 6.9.0 |
renovate
bot
force-pushed
the
renovate/python-dependencies
branch
from
862a9cd to
9f1ee31
Compare
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
==1.7.10->==1.8.6==24.10.0->==25.1.0==43.0.3->==45.0.6==3.3.1->==3.3.3==7.1.1->==7.3.0==8.28.0->==9.4.0==5.13.2->==6.0.1==24.2.1->==25.1.0==2.12.1->==2.14.0==3.3.1->==3.3.7==8.2.0->==8.4.1==5.0.0->==6.2.1==4.9.0->==4.11.1==3.14.0->==3.14.1>=5.0.0,<6->>=6.4,<7==4.0.2->==4.1.0==0.32.0->==0.35.0>=13,<14->>=15,<16==0.44.0->==0.45.1==6.7.0->==6.9.0Release Notes
PyCQA/bandit (bandit)
v1.8.6Compare Source
What's Changed
New Contributors
Full Changelog: PyCQA/bandit@1.8.5...1.8.6
v1.8.5Compare Source
What's Changed
Full Changelog: PyCQA/bandit@1.8.4...1.8.5
v1.8.3Compare Source
What's Changed
New Contributors
Full Changelog: PyCQA/bandit@1.8.2...1.8.3
v1.8.2Compare Source
What's Changed
Full Changelog: PyCQA/bandit@1.8.1...1.8.2
v1.8.1Compare Source
What's Changed
New Contributors
Full Changelog: PyCQA/bandit@1.8.0...1.8.1
v1.8.0Compare Source
What's Changed
Full Changelog: PyCQA/bandit@1.7.10...1.8.0
psf/black (black)
v25.1.0Compare Source
Highlights
This release introduces the new 2025 stable style (#4558), stabilizing the following
changes:
# fmt: skipcomments is no longer normalized (#4146)(#4154)
*and more complex type variable tuple (#4440)The following changes were not in any previous release:
over multiple lines first instead of type parameter definitions (#4553)
Stable style
empty lines (#4484)
withstatements containing tuple generators/unpacking(#4538)
Preview style
(#4498)
string_processingandwrap_long_dict_values_in_parensfrom removingparentheses around long dictionary values (#4377)
wrap_long_dict_values_in_parensfrom the unstable to preview style (#4561)Packaging
License-Expressionmetadata field, seePEP 639. (#4479)
Performance
is_fstring_startfunction in Black's tokenizer (#4541)Integrations
--stdin-filenameset to a force excluded path, stdin won't beformatted. (#4539)
pyca/cryptography (cryptography)
v45.0.6Compare Source
v45.0.5Compare Source
v45.0.4Compare Source
v45.0.3Compare Source
v45.0.2Compare Source
v45.0.1Compare Source
v45.0.0Compare Source
v44.0.3Compare Source
v44.0.2Compare Source
v44.0.1Compare Source
v44.0.0Compare Source
FactoryBoy/factory_boy (factory_boy)
v3.3.3Compare Source
v3.3.2Compare Source
pycqa/flake8 (flake8)
v7.3.0Compare Source
v7.2.0Compare Source
v7.1.2Compare Source
ipython/ipython (ipython)
v9.4.0Compare Source
v9.3.0Compare Source
v9.2.0Compare Source
v9.1.0Compare Source
v9.0.2Compare Source
v9.0.1Compare Source
v9.0.0Compare Source
v8.37.0Compare Source
v8.36.0Compare Source
v8.35.0Compare Source
v8.34.0Compare Source
v8.33.0Compare Source
v8.32.0Compare Source
v8.31.0Compare Source
v8.30.0Compare Source
v8.29.0Compare Source
PyCQA/isort (isort)
v6.0.1Compare Source
Changes
🪲 Fixes
👷 Continuous Integration
v6.0.0Compare Source
Changes
💥 Breaking Changes
🚀 Features
asimports (#2340) @DanielNoordpre-commit autoupdate(#2321) @kurtmckee🪲 Fixes
--diffto be used with--jobs(#2302) @mnakamawemakehas 80 chars hard limit, not 79 (#2241) @sobolevnmain(#2320) @DanielNoordsort_reexportscode mangling (#2283) @Helveg👷 Continuous Integration
actions/cache@v2usage (#2322) @kurtmckeepre-commit(#2296) @matthewhughes934📦 Dependencies
poetryto2.0.1(#2341) @DanielNoordpyca/pyopenssl (pyOpenSSL)
v25.1.0Compare Source
Backward-incompatible changes:
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
Deprecations:
^^^^^^^^^^^^^
OpenSSL.SSL.Contextafter ithas been used to create an
OpenSSL.SSL.Connectionwill emit a warning. Ina future release, this will raise an exception.
Changes:
^^^^^^^^
cryptographymaximum version has been increased to 45.0.x.v25.0.0Compare Source
Backward-incompatible changes:
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
Deprecations:
^^^^^^^^^^^^^
Changes:
^^^^^^^^
Context.set_alpn_select_callback,Context.set_session_cache_mode,Context.set_options,Context.set_mode,X509.subject_name_hash, andX509Store.load_locations.warnings.deprecated.mypywill emit deprecation notices for them when used with--enable-error-code deprecated.v24.3.0Compare Source
Backward-incompatible changes:
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
OpenSSL.crypto.CRL,OpenSSL.crypto.Revoked,OpenSSL.crypto.dump_crl, andOpenSSL.crypto.load_crl.cryptography.x509's CRL functionality should be used instead.OpenSSL.crypto.signandOpenSSL.crypto.verify.cryptography.hazmat.primitives.asymmetric's signature APIs should be used instead.Deprecations:
^^^^^^^^^^^^^
OpenSSL.rand- callers should useos.urandom()instead.add_extensionsandget_extensionsonOpenSSL.crypto.X509ReqandOpenSSL.crypto.X509. These should have been deprecated at the same timeX509Extensionwas. Users should use pyca/cryptography's X.509 APIs instead.OpenSSL.crypto.get_elliptic_curvesandOpenSSL.crypto.get_elliptic_curve, as well as passing the reult of them toOpenSSL.SSL.Context.set_tmp_ecdh, users should instead pass curves fromcryptography.X509objects toOpenSSL.SSL.Context.use_certificate,OpenSSL.SSL.Connection.use_certificate,OpenSSL.SSL.Context.add_extra_chain_cert, andOpenSSL.SSL.Context.add_client_ca, users should instead passcryptography.x509.Certificateinstances. This is in preparation for deprecating pyOpenSSL'sX509entirely.PKeyobjects toOpenSSL.SSL.Context.use_privatekeyandOpenSSL.SSL.Connection.use_privatekey, users should instead passcryptographypriate key instances. This is in preparation for deprecating pyOpenSSL'sPKeyentirely.Changes:
^^^^^^^^
cryptographymaximum version has been increased to 44.0.x.OpenSSL.SSL.Connection.get_certificate,OpenSSL.SSL.Connection.get_peer_certificate,OpenSSL.SSL.Connection.get_peer_cert_chain, andOpenSSL.SSL.Connection.get_verified_chainnow take anas_cryptographykeyword-argument. WhenTrueis passed thencryptography.x509.Certificateare returned, instead ofOpenSSL.crypto.X509. In the future, passingFalse(the default) will be deprecated.pylint-dev/pylint (pylint)
v3.3.7Compare Source
What's new in Pylint 3.3.7?
Release date: 2025-05-04
False Positives Fixed
Comparisons between two calls to
type()won't raise anunidiomatic-typecheckwarning anymore, consistent with the behavior applied only for==previously.Closes #10161
Other Bug Fixes
Fixed a crash when importing a class decorator that did not exist with the same name as a class attribute after the class definition.
Closes #10105
Fix a crash caused by malformed format strings when using
.formatwith keyword arguments.Closes #10282
Using a slice as a class decorator now raises a
not-callablemessage instead of crashing. A lot of checks that dealt with decorators (too many to list) are now shortcut if the decorator can't immediately be inferred to a function or class definition.Closes #10334
Other Changes
The algorithm used for
no-membersuggestions is now more efficient and cuts thecalculation when the distance score is already above the threshold.
Refs #10277
v3.3.6Compare Source
What's new in Pylint 3.3.6?
Release date: 2025-03-20
False Positives Fixed
Fix a false positive for
used-before-assignmentwhen an inner function's return typeannotation is a class defined at module scope.
Closes #9391
v3.3.5Compare Source
What's new in Pylint 3.3.5?
Release date: 2025-03-09
False Positives Fixed
Fix false positives for
use-implicit-booleaness-not-comparison,use-implicit-booleaness-not-comparison-to-stringand
use-implicit-booleaness-not-comparison-to-zerowhen chained comparisons are checked.Closes #10065
Fix a false positive for
invalid-getnewargs-ex-returnedwhen the tuple or dict has been assigned to a name.Closes #10208
Remove
getoptandoptparsefrom the list of deprecated modules.Closes #10211
Other Bug Fixes
Fixed conditional import x.y causing false positive possibly-used-before-assignment.
Closes #10081
Fix a crash when something besides a class is found in an except handler.
Closes #10106
Fixed raising invalid-name when using camelCase for private methods with two leading underscores.
Closes #10189
Other Changes
Upload release assets to PyPI via Trusted Publishing.
Closes #10256
v3.3.4Compare Source
Other Bug Fixes
Fixes "skipped files" count calculation; the previous method was displaying an arbitrary number.
Closes #10073
Fixes a crash that occurred when pylint was run in a container on a host with cgroupsv2 and restrictions on CPU usage.
Closes #10103
Relaxed the requirements for isort so pylint can benefit from isort 6.
Closes #10203
v3.3.3Compare Source
What's new in Pylint 3.3.3?
Release date: 2024-12-23
False Positives Fixed
Fix false positives for
undefined-variablefor classes using Python 3.12generic type syntax.
Closes #9335
Fix a false positive for
use-implicit-booleaness-not-len. No lint should be emitted forgenerators (
lenis not defined for generators).Refs #10100
Other Bug Fixes
Fix
Unable to import 'collections.abc' (import-error)on Python 3.13.1.Closes #10112
v3.3.2Compare Source
False Positives Fixed
Fix a false positive for
potential-index-errorwhen an indexed iterablecontains a starred element that evaluates to more than one item.
Closes #10076
Other Bug Fixes
Fixes the issue with --source-root option not working when the source files are in a subdirectory of the source root (e.g. when using a /src layout).
Closes #10026
pytest-dev/pytest (pytest)
v8.4.1Compare Source
pytest 8.4.1 (2025-06-17)
Bug fixes
#13461: Corrected
_pytest.terminal.TerminalReporter.isattyto supportbeing called as a method. Before it was just a boolean which could
break correct code when using
-o log_cli=true).#13477: Reintroduced
pytest.PytestReturnNotNoneWarning{.interpreted-text role="class"} which was removed by accident in pytest [8.4]{.title-ref}.This warning is raised when a test functions returns a value other than
None, which is often a mistake made by beginners.See
return-not-none{.interpreted-text role="ref"} for more information.#13497: Fixed compatibility with
Twisted 25+.Improved documentation
faulthandlernot working on Windows.v8.4.0Compare Source
pytest 8.4.0 (2025-06-02)
Removals and backward incompatible breaking changes
#11372: Async tests will now fail, instead of warning+skipping, if you don't have any suitable plugin installed.
#12346: Tests will now fail, instead of raising a warning, if they return any value other than None.
#12874: We dropped support for Python 3.8 following its end of life (2024-10-07).
#12960: Test functions containing a yield now cause an explicit error. They have not been run since pytest 4.0, and were previously marked as an expected failure and deprecation warning.
See
the docs <yield tests deprecated>{.interpreted-text role="ref"} for more information.Deprecations (removal in next major release)
autouse=True. For guidance on how to work around this warning seesync-test-async-fixture{.interpreted-text role="ref"}.New features
#11538: Added
pytest.RaisesGroup{.interpreted-text role="class"} as an equivalent topytest.raises{.interpreted-text role="func"} for expectingExceptionGroup{.interpreted-text role="exc"}. Also addspytest.RaisesExc{.interpreted-text role="class"} which is now the logic behindpytest.raises{.interpreted-text role="func"} and used as parameter topytest.RaisesGroup{.interpreted-text role="class"}.RaisesGroupincludes the ability to specify multiple different expected exceptions, the structure of nested exception groups, and flags for emulatingexcept* <except_star>{.interpreted-text role="ref"}. Seeassert-matching-exception-groups{.interpreted-text role="ref"} and docstrings for more information.#12081: Added
capteesys{.interpreted-text role="fixture"} to capture AND pass output to next handler set by--capture=.#12504:
pytest.mark.xfail{.interpreted-text role="func"} now acceptspytest.RaisesGroup{.interpreted-text role="class"} for theraisesparameter when you expect an exception group. You can also pass apytest.RaisesExc{.interpreted-text role="class"} if you e.g. want to make use of thecheckparameter.#12713: New [--force-short-summary]{.title-ref} option to force condensed summary output regardless of verbosity level.
This lets users still see condensed summary output of failures for quick reference in log files from job outputs, being especially useful if non-condensed output is very verbose.
#12749: pytest traditionally collects classes/functions in the test module namespace even if they are imported from another file.
For example:
contents of src/domain.py
contents of tests/test_testament.py
#12765: Thresholds to trigger snippet truncation can now be set with
truncation_limit_lines{.interpreted-text role="confval"} andtruncation_limit_chars{.interpreted-text role="confval"}.See
truncation-params{.interpreted-text role="ref"} for more information.#13125:
console_output_style{.interpreted-text role="confval"} now supportstimesto show execution time of each test.#13192:
pytest.raises{.interpreted-text role="func"} will now raise a warning when passing an empty string tomatch, as this will match against any value. Usematch="^$"if you want to check that an exception has no message.#13192:
pytest.raises{.interpreted-text role="func"} will now print a helpful string diff if matching fails and the match parameter has^and$and is otherwise escaped.#13192: You can now pass
with pytest.raises(check=fn): <pytest.raises>{.interpreted-text role="func"}, wherefnis a function which takes a raised exception and returns a boolean. Theraisesfails if no exception was raised (as usual), passes if an exception is raised andfnreturnsTrue(as well asmatchand the type matching, if specified, which are checked before), and propagates the exception iffnreturnsFalse(which likely also fails the test).#13228:
hidden-param{.interpreted-text role="ref"} can now be used inidofpytest.param{.interpreted-text role="func"} or inidsofMetafunc.parametrize <pytest.Metafunc.parametrize>{.interpreted-text role="py:func"}.It hides the parameter set from the test name.
#13253: New flag:
--disable-plugin-autoload <disable_plugin_autoload>{.interpreted-text role="ref"} which works as an alternative toPYTEST_DISABLE_PLUGIN_AUTOLOAD{.interpreted-text role="envvar"} when setting environment variables is inconvenient; and allows setting it in config files withaddopts{.interpreted-text role="confval"}.Improvements in existing functionality
#10224: pytest's
shortandlongtraceback styles (how-to-modifying-python-tb-printing{.interpreted-text role="ref"})now have partial
657{.interpreted-text role="pep"} support and will show specific code segments in thetraceback.
-- by
ammaraskar{.interpreted-text role="user"}#11118: Now
pythonpath{.interpreted-text role="confval"} configures [$PYTHONPATH]{.title-ref} earlier than before during the initialization process, which now also affects plugins loaded via the [-p]{.title-ref} command-line option.-- by
millerdev{.interpreted-text role="user"}#11381: The
typeparameter of theparser.addinimethod now accepts ["int"]{.title-ref} and"float"parameters, facilitating the parsing of configuration values in the configuration file.Example:
The [pytest.ini]{.title-ref} file:
Configuration
📅 Schedule: Branch creation - "before 7am on monday" (UTC), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.