Skip to content

Bump the python-requirements group across 1 directory with 32 updates #72

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
wants to merge 1 commit into
base: main
Choose a base branch
from
Open

Bump the python-requirements group across 1 directory with 32 updates #72

wants to merge 1 commit into from

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Apr 7, 2025

Bumps the python-requirements group with 32 updates in the / directory:

Package From To
aiohappyeyeballs 2.4.4 2.6.1
aiohttp 3.11.10 3.11.16
anyio 4.7.0 4.9.0
attrs 24.3.0 25.3.0
azure-core 1.32.0 1.33.0
azure-identity 1.19.0 1.21.0
certifi 2024.12.14 2025.1.31
charset-normalizer 3.4.0 3.4.1
click 8.1.7 8.1.8
cryptography 44.0.0 44.0.2
h2 4.1.0 4.2.0
hpack 4.0.0 4.1.0
hyperframe 6.0.1 6.1.0
jinja2 3.1.5 3.1.6
jiter 0.8.2 0.9.0
msal 1.31.1 1.32.0
msal-extensions 1.2.0 1.3.1
multidict 6.1.0 6.3.2
openai 1.57.4 1.70.0
portalocker 2.10.1 3.1.1
propcache 0.2.1 0.3.1
pydantic 2.10.3 2.11.2
pydantic-core 2.27.1 2.33.1
python-dotenv 1.0.1 1.1.0
typing-extensions 4.12.2 4.13.1
urllib3 2.2.3 2.3.0
watchfiles 1.0.3 1.0.4
websockets 14.1 15.0.1
yarl 1.18.3 1.19.0
msgraph-beta-sdk 1.14.0 1.19.0
msgraph-sdk 1.14.0 1.19.0
rich 13.9.4 14.0.0

Updates aiohappyeyeballs from 2.4.4 to 2.6.1

Release notes

Sourced from aiohappyeyeballs's releases.

v2.6.1 (2025-03-12)

Bug Fixes

  • Resolve TypeError on import for Python < 3.9.2 (#151, 2042c82)

Detailed Changes: v2.6.0...v2.6.1

v2.6.0 (2025-03-11)

Features

Creates an api_reference.rst file to expose the existing documentation for the few functions that have docstrings, as well as add documentation for AddrInfoType and SocketFactoryType. Now, these can be properly pointed to by other projects' documentation.

Detailed Changes: v2.5.0...v2.6.0

v2.5.0 (2025-03-06)

Features

  • Add callback for users to customize socket creation (#147, 8e1bc6a)

Co-authored-by: Kieren

Detailed Changes: v2.4.8...v2.5.0

v2.4.8 (2025-03-04)

Bug Fixes

  • Close runner up sockets in the event there are multiple winners (#143, 476a05b)

The first attempt to fix this was to use the cpython staggered race updates in #142 but there is still a race there where there can be multiple winners. Instead we now accept that we will not be able to cancel all coros in time and there will always be a risk of multiple winners. We store all sockets in a set that were not already cleaned up and we close all but the first winner after the staggered race finishes.

Detailed Changes: v2.4.7...v2.4.8

v2.4.7 (2025-03-04)

Bug Fixes

... (truncated)

Changelog

Sourced from aiohappyeyeballs's changelog.

v2.6.1 (2025-03-12)

Bug fixes

  • Resolve typeerror on import for python < 3.9.2 (#151) (2042c82)

v2.6.0 (2025-03-11)

Features

v2.5.0 (2025-03-06)

Features

  • Add callback for users to customize socket creation (#147) (8e1bc6a)

v2.4.8 (2025-03-04)

Bug fixes

  • Close runner up sockets in the event there are multiple winners (#143) (476a05b)

v2.4.7 (2025-03-04)

Bug fixes

v2.4.6 (2025-02-07)

Bug fixes

  • Ensure all timers are cancelled when after staggered race finishes (#136) (f75891d)

v2.4.5 (2025-02-07)

Bug fixes

  • Keep classifiers in project to avoid automatic enrichment (#134) (99edb20)
  • Move classifiers to prevent recalculation by poetry (#131) (66e1c90)
Commits

Updates aiohttp from 3.11.10 to 3.11.16

Release notes

Sourced from aiohttp's releases.

3.11.16

Bug fixes

  • Replaced deprecated asyncio.iscoroutinefunction with its counterpart from inspect -- by :user:layday.

    Related issues and pull requests on GitHub: #10634.

  • Fixed :class:multidict.CIMultiDict being mutated when passed to :class:aiohttp.web.Response -- by :user:bdraco.

    Related issues and pull requests on GitHub: #10672.

3.11.15

Bug fixes

  • Reverted explicitly closing sockets if an exception is raised during create_connection -- by :user:bdraco.

    This change originally appeared in aiohttp 3.11.13

    Related issues and pull requests on GitHub: #10464, #10617, #10656.

Miscellaneous internal changes

  • Improved performance of WebSocket buffer handling -- by :user:bdraco.

    Related issues and pull requests on GitHub: #10601.

... (truncated)

Changelog

Sourced from aiohttp's changelog.

3.11.16 (2025-04-01)

Bug fixes

  • Replaced deprecated asyncio.iscoroutinefunction with its counterpart from inspect -- by :user:layday.

    Related issues and pull requests on GitHub: :issue:10634.

  • Fixed :class:multidict.CIMultiDict being mutated when passed to :class:aiohttp.web.Response -- by :user:bdraco.

    Related issues and pull requests on GitHub: :issue:10672.

3.11.15 (2025-03-31)

Bug fixes

  • Reverted explicitly closing sockets if an exception is raised during create_connection -- by :user:bdraco.

    This change originally appeared in aiohttp 3.11.13

    Related issues and pull requests on GitHub: :issue:10464, :issue:10617, :issue:10656.

Miscellaneous internal changes

  • Improved performance of WebSocket buffer handling -- by :user:bdraco.

... (truncated)

Commits
  • c723b3c Release 3.11.16 (#10679)
  • 6a3d835 [PR #10675/048ef4c backport][3.11] Remove useless nonlocal statements in test...
  • be15472 [PR #10672/35c979b backport][3.11] Fix headers being mutated if passed to web...
  • b65000d Replace deprecated asyncio.iscoroutinefunction with its counterpart… (#10663)
  • 2082fba Increment version to 3.11.16.dev0 (#10661)
  • d2d3621 Release 3.11.15 (#10659)
  • 7f7d681 [PR #10656/06db052e backport][3.11] Revert: Close the socket if there's a fai...
  • b93993d [PR #10644/8c4e60b0 backport][3.11] Add benchmarks for streaming API (#10645)
  • bc813e6 [PR #10601/f7cac7e6 backport][3.11] Reduce WebSocket buffer slicing overhead ...
  • 34cb977 [PR #10638/caa5792a backport][3.11] Convert format calls to f-strings in WebS...
  • Additional commits viewable in compare view

Updates anyio from 4.7.0 to 4.9.0

Release notes

Sourced from anyio's releases.

4.9.0

  • Added async support for temporary file handling (#344; PR by @​11kkw)
  • Added 4 new fixtures for the AnyIO pytest plugin:
    • free_tcp_port_factory: session scoped fixture returning a callable that generates unused TCP port numbers
    • free_udp_port_factory: session scoped fixture returning a callable that generates unused UDP port numbers
    • free_tcp_port: function scoped fixture that invokes the free_tcp_port_factory fixture to generate a free TCP port number
    • free_udp_port: function scoped fixture that invokes the free_udp_port_factory fixture to generate a free UDP port number
  • Added stdin argument to anyio.run_process() akin to what anyio.open_process(), asyncio.create_subprocess(), trio.run_process(), and subprocess.run() already accept (PR by @​jmehnle)
  • Added the info property to anyio.Path on Python 3.14
  • Changed anyio.getaddrinfo() to ignore (invalid) IPv6 name resolution results when IPv6 support is disabled in Python
  • Changed EndOfStream raised from MemoryObjectReceiveStream.receive() to leave out the AttributeError from the exception chain which was merely an implementation detail and caused some confusion
  • Fixed traceback formatting growing quadratically with level of TaskGroup nesting on asyncio due to exception chaining when raising ExceptionGroups in TaskGroup.__aexit__ (#863; PR by @​tapetersen)
  • Fixed anyio.Path.iterdir() making a blocking call in Python 3.13 (#873; PR by @​cbornet and @​agronholm)
  • Fixed connect_tcp() producing cyclic references in tracebacks when raising exceptions (#809; PR by @​graingert)
  • Fixed anyio.to_thread.run_sync() needlessly holding on to references of the context, function, arguments and others until the next work item on asyncio (PR by @​Wankupi)

4.8.0

  • Added experimental support for running functions in subinterpreters on Python 3.13 and later
  • Added support for the copy(), copy_into(), move() and move_into() methods in anyio.Path, available in Python 3.14
  • Changed TaskGroup on asyncio to always spawn tasks non-eagerly, even if using a task factory created via asyncio.create_eager_task_factory(), to preserve expected Trio-like task scheduling semantics (PR by @​agronholm and @​graingert)
  • Configure SO_RCVBUF, SO_SNDBUF and TCP_NODELAY on the selector thread waker socket pair (this should improve the performance of wait_readable() and wait_writable() when using the ProactorEventLoop) (#836; PR by @​graingert)
  • Fixed AssertionError when using nest-asyncio (#840)
  • Fixed return type annotation of various context managers' __exit__ method (#847; PR by @​Enegg)
Changelog

Sourced from anyio's changelog.

Version history

This library adheres to Semantic Versioning 2.0 <http://semver.org/>_.

UNRELEASED

  • Added the ability to specify the thread name in start_blocking_portal() ([#818](https://github.com/agronholm/anyio/issues/818) <https://github.com/agronholm/anyio/issues/818>_; PR by @​davidbrochart)

4.9.0

  • Added async support for temporary file handling ([#344](https://github.com/agronholm/anyio/issues/344) <https://github.com/agronholm/anyio/issues/344>_; PR by @​11kkw)

  • Added 4 new fixtures for the AnyIO pytest plugin:

    • free_tcp_port_factory: session scoped fixture returning a callable that generates unused TCP port numbers
    • free_udp_port_factory: session scoped fixture returning a callable that generates unused UDP port numbers
    • free_tcp_port: function scoped fixture that invokes the free_tcp_port_factory fixture to generate a free TCP port number
    • free_udp_port: function scoped fixture that invokes the free_udp_port_factory fixture to generate a free UDP port number

  • Added stdin argument to anyio.run_process() akin to what anyio.open_process(), asyncio.create_subprocess_…(), trio.run_process(), and subprocess.run() already accept (PR by @​jmehnle)

  • Added the info property to anyio.Path on Python 3.14

  • Changed anyio.getaddrinfo() to ignore (invalid) IPv6 name resolution results when IPv6 support is disabled in Python

  • Changed EndOfStream raised from MemoryObjectReceiveStream.receive() to leave out the AttributeError from the exception chain which was merely an implementation detail and caused some confusion

  • Fixed traceback formatting growing quadratically with level of TaskGroup nesting on asyncio due to exception chaining when raising ExceptionGroups in TaskGroup.__aexit__ ([#863](https://github.com/agronholm/anyio/issues/863) <https://github.com/agronholm/anyio/issues/863>_; PR by @​tapetersen)

  • Fixed anyio.Path.iterdir() making a blocking call in Python 3.13 ([#873](https://github.com/agronholm/anyio/issues/873) <https://github.com/agronholm/anyio/issues/873>_; PR by @​cbornet and @​agronholm)

  • Fixed connect_tcp() producing cyclic references in tracebacks when raising exceptions ([#809](https://github.com/agronholm/anyio/issues/809) <https://github.com/agronholm/anyio/pull/809>_; PR by @​graingert)

  • Fixed anyio.to_thread.run_sync() needlessly holding on to references of the context, function, arguments and others until the next work item on asyncio (PR by @​Wankupi)

4.8.0

  • Added experimental support for running functions in subinterpreters on Python 3.13 and later

... (truncated)

Commits
  • a6e9ebb Bumped up the version
  • 9b9520d Fixed cyclic references in to_thread.run_sync() on asyncio (#887)
  • 1f04d6b Added a note about asyncio cancellation semantics
  • e14b172 Upgraded to a newer Sphinx version
  • 7e13c49 Avoid refcycles in tracebacks from happy eyeballs exceptions (#809)
  • d134da7 Raise EndOfStream from None in MemoryObjectReceiveStream.receive() (#889)
  • 2840e06 Added cheaper implementation for no_other_refs() on Python 3.14 (#886)
  • 31ce0a5 Added fixtures for generating bindable TCP/UDP ports (#856)
  • cd85e47 Test on PyPy 3.11 on CI (#876)
  • d228020 Detect blocking calls in coroutines using BlockBuster (#875)
  • Additional commits viewable in compare view

Updates attrs from 24.3.0 to 25.3.0

Commits

Updates azure-core from 1.32.0 to 1.33.0

Release notes

Sourced from azure-core's releases.

azure-core_1.33.0

1.33.0 (2025-04-03)

Features Added

  • Added native OpenTelemetry tracing to Azure Core which enables users to use OpenTelemetry to trace Azure SDK operations without needing to install a plugin. #39563
    • To enable native OpenTelemetry tracing, users need to:
      1. Have opentelemetry-api installed.
      2. Ensure that settings.tracing_implementation is not set.
      3. Ensure that settings.tracing_enabled is set to True.
    • If setting.tracing_implementation is set, the tracing plugin will be used instead of the native tracing.
    • If settings.tracing_enabled is set to False, tracing will be disabled.
    • The OpenTelemetryTracer class was added to the azure.core.tracing.opentelemetry module. This is a wrapper around the OpenTelemetry tracer that is used to create spans for Azure SDK operations.
    • Added a get_tracer method to the new azure.core.instrumentation module. This method returns an instance of the OpenTelemetryTracer class if OpenTelemetry is available.
    • A TracingOptions TypedDict class was added to define the options that SDK users can use to configure tracing per-operation. These options include the ability to enable or disable tracing and set additional attributes on spans.
      • Example usage: client.method(tracing_options={"enabled": True, "attributes": {"foo": "bar"}})
    • The DistributedTracingPolicy and distributed_trace/distributed_trace_async decorators now uses the OpenTelemetry tracer if it is available and native tracing is enabled.
      • SDK clients can define an _instrumentation_config class variable to configure the OpenTelemetry tracer used in method span creation. Possible configuration options are library_name, library_version, schema_url, and attributes.
      • DistributedTracingPolicy now accepts a instrumentation_config keyword argument to configure the OpenTelemetry tracer used in HTTP span creation.

Breaking Changes

  • Removed automatic tracing enablement for the OpenTelemetry plugin if opentelemetry was imported. To enable tracing with the plugin, please import azure.core.settings.settings and set settings.tracing_implementation to "opentelemetry". #39563
  • In DistributedTracingPolicy, the default span name is now just the HTTP method (e.g., "GET", "POST") and no longer includes the URL path. This change was made to converge with the OpenTelemetry HTTP semantic conventions. The full URL is still included in the span attributes.
  • Renamed span attributes in DistributedTracingPolicy:
    • "x-ms-client-request-id" is now "az.client_request_id"
    • "x-ms-request-id" is now "az.service_request_id"

Bugs Fixed

  • Fixed an issue where the traceparent header was not being set correctly in the DistributedTracingPolicy. The traceparent header will now set based on the context of the HTTP client span. #40074

Other Changes

  • Added opentelemetry-api as an optional dependency for tracing. This can be installed with pip install azure-core[tracing]. #39563
Commits

Updates azure-identity from 1.19.0 to 1.21.0

Release notes

Sourced from azure-identity's releases.

azure-identity_1.21.0

1.21.0 (2025-03-11)

Other Changes

  • Updated the asynchronous CertificateCredential to use the PS256 algorithm with PSS padding for certificate authentication in non-ADFS tenants. (#39761)
  • Deprecated UsernamePasswordCredential, as it doesn't support multifactor authentication (MFA). MFA will soon be enforced on all Microsoft Entra tenants. For more details, see Planning for mandatory MFA. (#39785)

azure-identity_1.20.0

1.20.0 (2025-02-11)

Features Added

  • Added subscription parameter to AzureCliCredential to specify the subscription to use when authenticating with the Azure CLI. (#37994)

Bugs Fixed

  • A bug in the error handling for AzureCliCredentials and AzureDeveloperCliCredential which would result in the unexpected error 'NoneType' object has no attribute 'startswith' has been fixed (#39176)

Other Changes

  • AzureCliCredential and AzureDeveloperCliCredential will now call their corresponding executables directly instead of going through the shell. (#38606)
Commits

Updates certifi from 2024.12.14 to 2025.1.31

Commits

Updates charset-normalizer from 3.4.0 to 3.4.1

Release notes

Sourced from charset-normalizer's releases.

Version 3.4.1

🚀 We're still raising awareness around HTTP/2, and HTTP/3!

Did you know that Internet Explorer 11 shipped with an optional HTTP/2 support back in 2013? also libcurl did ship it in 2014[...] Using Requests today is the rough equivalent of using EOL Windows 8! We promptly invite Python developers to look at the first drop-in replacement for Requests, namely Niquests. Ship with native WebSocket, SSE, Happy Eyeballs, DNS over HTTPS, and so on[...] All of this while remaining compatible with all Requests prior plug-ins / add-ons.

It leverages charset-normalizer in a better way! Check it out, you will gain up to being 3X faster and get a real/respectable support with it.

3.4.1 (2024-12-24)

Changed

  • Project metadata are now stored using pyproject.toml instead of setup.cfg using setuptools as the build backend.
  • Enforce annotation delayed loading for a simpler and consistent types in the project.
  • Optional mypyc compilation upgraded to version 1.14 for Python >= 3.8

Added

  • pre-commit configuration.
  • noxfile.

Removed

  • build-requirements.txt as per using pyproject.toml native build configuration.
  • bin/integration.py and bin/serve.py in favor of downstream integration test (see noxfile).
  • setup.cfg in favor of pyproject.toml metadata configuration.
  • Unused utils.range_scan function.

Fixed

  • Converting content to Unicode bytes may insert utf_8 instead of preferred utf-8. (#572)
  • Deprecation warning "'count' is passed as positional argument" when converting to Unicode bytes on Python 3.13+
Changelog

Sourced from charset-normalizer's changelog.

3.4.1 (2024-12-24)

Changed

  • Project metadata are now stored using pyproject.toml instead of setup.cfg using setuptools as the build backend.
  • Enforce annotation delayed loading for a simpler and consistent types in the project.
  • Optional mypyc compilation upgraded to version 1.14 for Python >= 3.8

Added

  • pre-commit configuration.
  • noxfile.

Removed

  • build-requirements.txt as per using pyproject.toml native build configuration.
  • bin/integration.py and bin/serve.py in favor of downstream integration test (see noxfile).
  • setup.cfg in favor of pyproject.toml metadata configuration.
  • Unused utils.range_scan function.

Fixed

  • Converting content to Unicode bytes may insert utf_8 instead of preferred utf-8. (#572)
  • Deprecation warning "'count' is passed as positional argument" when converting to Unicode bytes on Python 3.13+
Commits
  • ffdf7f5 🔧 fix long description content-type inferred as rst instead of md
  • c7197b7 📝 fix changelog entries (#582)
  • c390e1f Merge pull request #581 from jawah/refresh-part-2
  • f9d6b8c 🔒 add CODEOWNERS
  • 7ce1ef1 🔧 use ubuntu-22.04 for cibuildwheel in continuous deployment workflow
  • deed205 🔧 update LICENSE copyright
  • f11f571 🔧 include noxfile in sdist
  • 1ec7c06 🔧 update changelog
  • 14b4649 🐛 output(...) replace declarative mark using non iana compliant encoding ...
  • 1b06bc0 Merge branch 'refresh-part-2' of github.com:jawah/charset_normalizer into ref...
  • Additional commits viewable in compare view

Updates click from 8.1.7 to 8.1.8

Release notes

Sourced from click's releases.

8.1.8

This is the Click 8.1.8 fix release, which fixes bugs but does not otherwise change behavior and should not result in breaking changes compared to the latest feature release.

PyPI: https://pypi.org/project/click/8.1.8/ Changes: https://click.palletsprojects.com/en/stable/changes/#version-8-1-8 Milestone https://github.com/pallets/click/milestones/23?closed=1

  • Fix an issue with type hints for click.open_file(). #2717
  • Fix issue where error message for invalid click.Path displays on multiple lines. #2697
  • Fixed issue that prevented a default value of "" from being displayed in the help for an option. #2500
  • The test runner handles stripping color consistently on Windows. #2705
  • Show correct value for flag default when using default_map. #2632
  • Fix click.echo(color=...) passing color to coloroma so it can be forced on Windows. #2606.
  • More robust bash version check, fixing problem on Windows with git-bash. #2638
  • Cache the help option generated by the help_option_names setting to respect its eagerness. #2811
  • Replace uses of os.system with subprocess.Popen. #1476
  • Exceptions generated during a command will use the context's color setting when being displayed. #2193
  • Error message when defining option with invalid name is more descriptive. #2452
  • Refactor code generating default --help option to deduplicate code. #2563
  • Test CLIRunner resets patched _compat.should_strip_ansi. #2732
Changelog

Sourced from click's changelog.

Version 8.1.8

Unreleased

  • Fix an issue with type hints for click.open_file(). :issue:2717
  • Fix issue where error message for invalid click.Path displays on multiple lines. :issue:2697
  • Fixed issue that prevented a default value of "" from being displayed in the help for an option. :issue:2500
  • The test runner handles stripping color consistently on Windows. :issue:2705
  • Show correct value for flag default when using default_map. :issue:2632
  • Fix click.echo(color=...) passing color to coloroma so it can be forced on Windows. :issue:2606.
Commits

Updates cryptography from 44.0.0 to 44.0.2

Changelog

Sourced from cryptography's changelog.

44.0.2 - 2025-03-01


* We now build wheels for PyPy 3.11.

.. _v44-0-1:


44.0.1 - 2025-02-11

  • Updated Windows, macOS, and Linux wheels to be compiled with OpenSSL 3.4.1.
  • We now build armv7l manylinux wheels and publish them to PyPI.
  • We now build manylinux_2_34 wheels and publish them to PyPI.

.. _v44-0-0:

Commits

Updates h2 from 4.1.0 to 4.2.0

Changelog

Sourced from h2's changelog.

4.2.0 (2025-02-01)

API Changes (Backward Incompatible)

  • Support for Python 3.6 has been removed.
  • Support for Python 3.7 has been removed.
  • Support for Python 3.8 has been removed.
  • Remove mistakenly set max_inbound_frame_size attribute on H2Stream.

API Changes (Backward Compatible)

  • Support for Python 3.11 has been added.
  • Support for Python 3.12 has been added.
  • Support for Python 3.13 has been added.
  • Add an ability to send outbound cookies separately to improve headers compression.
  • Updated packaging and testing infrastructure.

Bugfixes

  • Fix repr() checks for Python 3.11
  • Fix asyncio / wsgi examples.
  • Clarify docs on using curl with http2.
Commits

Updates hpack from 4.0.0 to 4.1.0

Changelog

Sourced from hpack's changelog.

4.1.0 (2025-01-22)

API Changes (Backward Incompatible)

  • Support for Python 3.6 has been removed.
  • Support for Python 3.7 has been removed.
  • Support for Python 3.8 has been removed.
  • Renamed InvalidTableIndex exception to InvalidTableIndexError.

API Changes (Backward Compatible)

  • Support for Python 3.9 has been added.
  • Support for Python 3.10 has been added.
  • Support for Python 3.11 has been added.
  • Support for Python 3.12 has been added.
  • Support for Python 3.13 has been added.
  • Optimized bytes encoding of headers.
  • Updated packaging and testing infrastructure.
  • Code cleanup and linting.
  • Added type hints.
Commits

Updates hyperframe from 6.0.1 to 6.1.0

Changelog

Sourced from hyperframe's changelog.

6.1.0 (2025-01-22)

API Changes (Backward Incompatible)

  • Support for Python 3.6 has been removed.
  • Support for Python 3.7 has been removed.
  • Support for Python 3.8 has been removed.

API Changes (Backward Compatible)

  • Support for Python 3.10 has been added.
  • Support for Python 3.11 has been added.
  • Support for Python 3.12 has been added.
  • Support for Python 3.13 has been added.
  • Updated packaging and testing infrastructure.
  • Code cleanup and linting.
  • Improved type hints.
Commits

Updates jinja2 from 3.1.5 to 3.1.6

Release notes

Sourced from jinja2's releases.

3.1.6

This is the Jinja 3.1.6 security release, which fixes security issues but does not otherwise change behavior and should not result in breaking changes compared to the latest feature release.

PyPI: https://pypi.org/project/Jinja2/3.1.6/ Changes: https://jinja.palletsprojects.com/en/stable/changes/#version-3-1-6

  • The |attr filter does not bypass the environment's attribute lookup, allowing the sandbox to apply its checks. GHSA-cpwx-vrp4-4pq7
Description has been truncated

@dependabot
Bump the python-requirements group across 1 directory with 32 updates
8231c88 
Bumps the python-requirements group with 32 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [aiohappyeyeballs](https://github.com/aio-libs/aiohappyeyeballs) | `2.4.4` | `2.6.1` |
| [aiohttp](https://github.com/aio-libs/aiohttp) | `3.11.10` | `3.11.16` |
| [anyio](https://github.com/agronholm/anyio) | `4.7.0` | `4.9.0` |
| [attrs](https://github.com/sponsors/hynek) | `24.3.0` | `25.3.0` |
| [azure-core](https://github.com/Azure/azure-sdk-for-python) | `1.32.0` | `1.33.0` |
| [azure-identity](https://github.com/Azure/azure-sdk-for-python) | `1.19.0` | `1.21.0` |
| [certifi](https://github.com/certifi/python-certifi) | `2024.12.14` | `2025.1.31` |
| [charset-normalizer](https://github.com/jawah/charset_normalizer) | `3.4.0` | `3.4.1` |
| [click](https://github.com/pallets/click) | `8.1.7` | `8.1.8` |
| [cryptography](https://github.com/pyca/cryptography) | `44.0.0` | `44.0.2` |
| [h2](https://github.com/python-hyper/h2) | `4.1.0` | `4.2.0` |
| [hpack](https://github.com/python-hyper/hpack) | `4.0.0` | `4.1.0` |
| [hyperframe](https://github.com/python-hyper/hyperframe) | `6.0.1` | `6.1.0` |
| [jinja2](https://github.com/pallets/jinja) | `3.1.5` | `3.1.6` |
| [jiter](https://github.com/pydantic/jiter) | `0.8.2` | `0.9.0` |
| [msal](https://github.com/AzureAD/microsoft-authentication-library-for-python) | `1.31.1` | `1.32.0` |
| [msal-extensions](https://github.com/AzureAD/microsoft-authentication-extensions-for-python) | `1.2.0` | `1.3.1` |
| [multidict](https://github.com/aio-libs/multidict) | `6.1.0` | `6.3.2` |
| [openai](https://github.com/openai/openai-python) | `1.57.4` | `1.70.0` |
| [portalocker](https://github.com/wolph/portalocker) | `2.10.1` | `3.1.1` |
| [propcache](https://github.com/aio-libs/propcache) | `0.2.1` | `0.3.1` |
| [pydantic](https://github.com/pydantic/pydantic) | `2.10.3` | `2.11.2` |
| [pydantic-core](https://github.com/pydantic/pydantic-core) | `2.27.1` | `2.33.1` |
| [python-dotenv](https://github.com/theskumar/python-dotenv) | `1.0.1` | `1.1.0` |
| [typing-extensions](https://github.com/python/typing_extensions) | `4.12.2` | `4.13.1` |
| [urllib3](https://github.com/urllib3/urllib3) | `2.2.3` | `2.3.0` |
| [watchfiles](https://github.com/samuelcolvin/watchfiles) | `1.0.3` | `1.0.4` |
| [websockets](https://github.com/python-websockets/websockets) | `14.1` | `15.0.1` |
| [yarl](https://github.com/aio-libs/yarl) | `1.18.3` | `1.19.0` |
| [msgraph-beta-sdk](https://github.com/microsoftgraph/msgraph-beta-sdk-python) | `1.14.0` | `1.19.0` |
| [msgraph-sdk](https://github.com/microsoftgraph/msgraph-sdk-python) | `1.14.0` | `1.19.0` |
| [rich](https://github.com/Textualize/rich) | `13.9.4` | `14.0.0` |



Updates `aiohappyeyeballs` from 2.4.4 to 2.6.1
- [Release notes](https://github.com/aio-libs/aiohappyeyeballs/releases)
- [Changelog](https://github.com/aio-libs/aiohappyeyeballs/blob/main/CHANGELOG.md)
- [Commits](aio-libs/aiohappyeyeballs@v2.4.4...v2.6.1)

Updates `aiohttp` from 3.11.10 to 3.11.16
- [Release notes](https://github.com/aio-libs/aiohttp/releases)
- [Changelog](https://github.com/aio-libs/aiohttp/blob/master/CHANGES.rst)
- [Commits](aio-libs/aiohttp@v3.11.10...v3.11.16)

Updates `anyio` from 4.7.0 to 4.9.0
- [Release notes](https://github.com/agronholm/anyio/releases)
- [Changelog](https://github.com/agronholm/anyio/blob/master/docs/versionhistory.rst)
- [Commits](agronholm/anyio@4.7.0...4.9.0)

Updates `attrs` from 24.3.0 to 25.3.0
- [Commits](https://github.com/sponsors/hynek/commits)

Updates `azure-core` from 1.32.0 to 1.33.0
- [Release notes](https://github.com/Azure/azure-sdk-for-python/releases)
- [Changelog](https://github.com/Azure/azure-sdk-for-python/blob/main/doc/esrp_release.md)
- [Commits](Azure/azure-sdk-for-python@azure-core_1.32.0...azure-core_1.33.0)

Updates `azure-identity` from 1.19.0 to 1.21.0
- [Release notes](https://github.com/Azure/azure-sdk-for-python/releases)
- [Changelog](https://github.com/Azure/azure-sdk-for-python/blob/main/doc/esrp_release.md)
- [Commits](Azure/azure-sdk-for-python@azure-identity_1.19.0...azure-identity_1.21.0)

Updates `certifi` from 2024.12.14 to 2025.1.31
- [Commits](certifi/python-certifi@2024.12.14...2025.01.31)

Updates `charset-normalizer` from 3.4.0 to 3.4.1
- [Release notes](https://github.com/jawah/charset_normalizer/releases)
- [Changelog](https://github.com/jawah/charset_normalizer/blob/master/CHANGELOG.md)
- [Commits](jawah/charset_normalizer@3.4.0...3.4.1)

Updates `click` from 8.1.7 to 8.1.8
- [Release notes](https://github.com/pallets/click/releases)
- [Changelog](https://github.com/pallets/click/blob/main/CHANGES.rst)
- [Commits](pallets/click@8.1.7...8.1.8)

Updates `cryptography` from 44.0.0 to 44.0.2
- [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst)
- [Commits](pyca/cryptography@44.0.0...44.0.2)

Updates `h2` from 4.1.0 to 4.2.0
- [Changelog](https://github.com/python-hyper/h2/blob/master/CHANGELOG.rst)
- [Commits](python-hyper/h2@v4.1.0...v4.2.0)

Updates `hpack` from 4.0.0 to 4.1.0
- [Changelog](https://github.com/python-hyper/hpack/blob/master/CHANGELOG.rst)
- [Commits](python-hyper/hpack@v4.0.0...v4.1.0)

Updates `hyperframe` from 6.0.1 to 6.1.0
- [Changelog](https://github.com/python-hyper/hyperframe/blob/master/CHANGELOG.rst)
- [Commits](python-hyper/hyperframe@v6.0.1...v6.1.0)

Updates `jinja2` from 3.1.5 to 3.1.6
- [Release notes](https://github.com/pallets/jinja/releases)
- [Changelog](https://github.com/pallets/jinja/blob/main/CHANGES.rst)
- [Commits](pallets/jinja@3.1.5...3.1.6)

Updates `jiter` from 0.8.2 to 0.9.0
- [Release notes](https://github.com/pydantic/jiter/releases)
- [Commits](pydantic/jiter@v0.8.2...v0.9.0)

Updates `msal` from 1.31.1 to 1.32.0
- [Release notes](https://github.com/AzureAD/microsoft-authentication-library-for-python/releases)
- [Commits](AzureAD/microsoft-authentication-library-for-python@1.31.1...1.32.0)

Updates `msal-extensions` from 1.2.0 to 1.3.1
- [Release notes](https://github.com/AzureAD/microsoft-authentication-extensions-for-python/releases)
- [Commits](AzureAD/microsoft-authentication-extensions-for-python@1.2.0...1.3.1)

Updates `multidict` from 6.1.0 to 6.3.2
- [Release notes](https://github.com/aio-libs/multidict/releases)
- [Changelog](https://github.com/aio-libs/multidict/blob/master/CHANGES.rst)
- [Commits](aio-libs/multidict@v6.1.0...v6.3.2)

Updates `openai` from 1.57.4 to 1.70.0
- [Release notes](https://github.com/openai/openai-python/releases)
- [Changelog](https://github.com/openai/openai-python/blob/main/CHANGELOG.md)
- [Commits](openai/openai-python@v1.57.4...v1.70.0)

Updates `portalocker` from 2.10.1 to 3.1.1
- [Release notes](https://github.com/wolph/portalocker/releases)
- [Changelog](https://github.com/wolph/portalocker/blob/develop/CHANGELOG.rst)
- [Commits](wolph/portalocker@v2.10.1...v3.1.1)

Updates `propcache` from 0.2.1 to 0.3.1
- [Release notes](https://github.com/aio-libs/propcache/releases)
- [Changelog](https://github.com/aio-libs/propcache/blob/master/CHANGES.rst)
- [Commits](aio-libs/propcache@v0.2.1...v0.3.1)

Updates `pydantic` from 2.10.3 to 2.11.2
- [Release notes](https://github.com/pydantic/pydantic/releases)
- [Changelog](https://github.com/pydantic/pydantic/blob/main/HISTORY.md)
- [Commits](pydantic/pydantic@v2.10.3...v2.11.2)

Updates `pydantic-core` from 2.27.1 to 2.33.1
- [Release notes](https://github.com/pydantic/pydantic-core/releases)
- [Commits](pydantic/pydantic-core@v2.27.1...v2.33.1)

Updates `python-dotenv` from 1.0.1 to 1.1.0
- [Release notes](https://github.com/theskumar/python-dotenv/releases)
- [Changelog](https://github.com/theskumar/python-dotenv/blob/main/CHANGELOG.md)
- [Commits](theskumar/python-dotenv@v1.0.1...v1.1.0)

Updates `typing-extensions` from 4.12.2 to 4.13.1
- [Release notes](https://github.com/python/typing_extensions/releases)
- [Changelog](https://github.com/python/typing_extensions/blob/main/CHANGELOG.md)
- [Commits](python/typing_extensions@4.12.2...4.13.1)

Updates `urllib3` from 2.2.3 to 2.3.0
- [Release notes](https://github.com/urllib3/urllib3/releases)
- [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst)
- [Commits](urllib3/urllib3@2.2.3...2.3.0)

Updates `watchfiles` from 1.0.3 to 1.0.4
- [Release notes](https://github.com/samuelcolvin/watchfiles/releases)
- [Commits](samuelcolvin/watchfiles@v1.0.3...v1.0.4)

Updates `websockets` from 14.1 to 15.0.1
- [Release notes](https://github.com/python-websockets/websockets/releases)
- [Commits](python-websockets/websockets@14.1...15.0.1)

Updates `yarl` from 1.18.3 to 1.19.0
- [Release notes](https://github.com/aio-libs/yarl/releases)
- [Changelog](https://github.com/aio-libs/yarl/blob/master/CHANGES.rst)
- [Commits](aio-libs/yarl@v1.18.3...v1.19.0)

Updates `msgraph-beta-sdk` from 1.14.0 to 1.19.0
- [Release notes](https://github.com/microsoftgraph/msgraph-beta-sdk-python/releases)
- [Changelog](https://github.com/microsoftgraph/msgraph-beta-sdk-python/blob/main/CHANGELOG.md)
- [Commits](microsoftgraph/msgraph-beta-sdk-python@v1.14.0...v1.19.0)

Updates `msgraph-sdk` from 1.14.0 to 1.19.0
- [Release notes](https://github.com/microsoftgraph/msgraph-sdk-python/releases)
- [Changelog](https://github.com/microsoftgraph/msgraph-sdk-python/blob/main/CHANGELOG.md)
- [Commits](microsoftgraph/msgraph-sdk-python@v1.14.0...v1.19.0)

Updates `rich` from 13.9.4 to 14.0.0
- [Release notes](https://github.com/Textualize/rich/releases)
- [Changelog](https://github.com/Textualize/rich/blob/master/CHANGELOG.md)
- [Commits](Textualize/rich@v13.9.4...v14.0.0)

---
updated-dependencies:
- dependency-name: aiohappyeyeballs
  dependency-version: 2.6.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-requirements
- dependency-name: aiohttp
  dependency-version: 3.11.16
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-requirements
- dependency-name: anyio
  dependency-version: 4.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-requirements
- dependency-name: attrs
  dependency-version: 25.3.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: python-requirements
- dependency-name: azure-core
  dependency-version: 1.33.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-requirements
- dependency-name: azure-identity
  dependency-version: 1.21.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-requirements
- dependency-name: certifi
  dependency-version: 2025.1.31
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: python-requirements
- dependency-name: charset-normalizer
  dependency-version: 3.4.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-requirements
- dependency-name: click
  dependency-version: 8.1.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-requirements
- dependency-name: cryptography
  dependency-version: 44.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-requirements
- dependency-name: h2
  dependency-version: 4.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-requirements
- dependency-name: hpack
  dependency-version: 4.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-requirements
- dependency-name: hyperframe
  dependency-version: 6.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-requirements
- dependency-name: jinja2
  dependency-version: 3.1.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-requirements
- dependency-name: jiter
  dependency-version: 0.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-requirements
- dependency-name: msal
  dependency-version: 1.32.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-requirements
- dependency-name: msal-extensions
  dependency-version: 1.3.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-requirements
- dependency-name: multidict
  dependency-version: 6.3.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-requirements
- dependency-name: openai
  dependency-version: 1.70.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-requirements
- dependency-name: portalocker
  dependency-version: 3.1.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: python-requirements
- dependency-name: propcache
  dependency-version: 0.3.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-requirements
- dependency-name: pydantic
  dependency-version: 2.11.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-requirements
- dependency-name: pydantic-core
  dependency-version: 2.33.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-requirements
- dependency-name: python-dotenv
  dependency-version: 1.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-requirements
- dependency-name: typing-extensions
  dependency-version: 4.13.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-requirements
- dependency-name: urllib3
  dependency-version: 2.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-requirements
- dependency-name: watchfiles
  dependency-version: 1.0.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-requirements
- dependency-name: websockets
  dependency-version: 15.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: python-requirements
- dependency-name: yarl
  dependency-version: 1.19.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-requirements
- dependency-name: msgraph-beta-sdk
  dependency-version: 1.19.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-requirements
- dependency-name: msgraph-sdk
  dependency-version: 1.19.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-requirements
- dependency-name: rich
  dependency-version: 14.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: python-requirements
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Apr 7, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
dependencies Pull requests that update a dependency file python Pull requests that update Python code
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
0 participants