Bump the build-python group across 1 directory with 10 updates #130
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
![dependabot[bot]](https://avatars.githubusercontent.com/in/29110?s=60&v=4){kind=small}
Bumps the build-python group with 10 updates in the /build/pip directory: | Package | From | To | | --- | --- | --- | | [bleach](https://github.com/mozilla/bleach) | `6.1.0` | `6.2.0` | | [charset-normalizer](https://github.com/Ousret/charset_normalizer) | `3.3.2` | `3.4.0` | | [idna](https://github.com/kjd/idna) | `3.8` | `3.10` | | [importlib-metadata](https://github.com/python/importlib_metadata) | `8.4.0` | `8.5.0` | | [keyring](https://github.com/jaraco/keyring) | `25.3.0` | `25.5.0` | | [pkginfo](https://code.launchpad.net/~tseaver/pkginfo/trunk) | `1.11.1` | `1.11.2` | | [rich](https://github.com/Textualize/rich) | `13.8.0` | `13.9.4` | | [setuptools](https://github.com/pypa/setuptools) | `74.1.2` | `75.3.0` | | [urllib3](https://github.com/urllib3/urllib3) | `2.2.2` | `2.2.3` | | [zipp](https://github.com/jaraco/zipp) | `3.20.1` | `3.20.2` | Updates `bleach` from 6.1.0 to 6.2.0 - [Changelog](https://github.com/mozilla/bleach/blob/main/CHANGES) - [Commits](mozilla/bleach@v6.1.0...v6.2.0) Updates `charset-normalizer` from 3.3.2 to 3.4.0 - [Release notes](https://github.com/Ousret/charset_normalizer/releases) - [Changelog](https://github.com/jawah/charset_normalizer/blob/master/CHANGELOG.md) - [Commits](jawah/charset_normalizer@3.3.2...3.4.0) Updates `idna` from 3.8 to 3.10 - [Release notes](https://github.com/kjd/idna/releases) - [Changelog](https://github.com/kjd/idna/blob/master/HISTORY.rst) - [Commits](kjd/idna@v3.8...v3.10) Updates `importlib-metadata` from 8.4.0 to 8.5.0 - [Release notes](https://github.com/python/importlib_metadata/releases) - [Changelog](https://github.com/python/importlib_metadata/blob/main/NEWS.rst) - [Commits](python/importlib_metadata@v8.4.0...v8.5.0) Updates `keyring` from 25.3.0 to 25.5.0 - [Release notes](https://github.com/jaraco/keyring/releases) - [Changelog](https://github.com/jaraco/keyring/blob/main/NEWS.rst) - [Commits](jaraco/keyring@v25.3.0...v25.5.0) Updates `pkginfo` from 1.11.1 to 1.11.2 Updates `rich` from 13.8.0 to 13.9.4 - [Release notes](https://github.com/Textualize/rich/releases) - [Changelog](https://github.com/Textualize/rich/blob/master/CHANGELOG.md) - [Commits](Textualize/rich@v13.8.0...v13.9.4) Updates `setuptools` from 74.1.2 to 75.3.0 - [Release notes](https://github.com/pypa/setuptools/releases) - [Changelog](https://github.com/pypa/setuptools/blob/main/NEWS.rst) - [Commits](pypa/setuptools@v74.1.2...v75.3.0) Updates `urllib3` from 2.2.2 to 2.2.3 - [Release notes](https://github.com/urllib3/urllib3/releases) - [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst) - [Commits](urllib3/urllib3@2.2.2...2.2.3) Updates `zipp` from 3.20.1 to 3.20.2 - [Release notes](https://github.com/jaraco/zipp/releases) - [Changelog](https://github.com/jaraco/zipp/blob/main/NEWS.rst) - [Commits](jaraco/zipp@v3.20.1...v3.20.2) --- updated-dependencies: - dependency-name: bleach dependency-type: direct:production update-type: version-update:semver-minor dependency-group: build-python - dependency-name: charset-normalizer dependency-type: direct:production update-type: version-update:semver-minor dependency-group: build-python - dependency-name: idna dependency-type: direct:production update-type: version-update:semver-minor dependency-group: build-python - dependency-name: importlib-metadata dependency-type: direct:production update-type: version-update:semver-minor dependency-group: build-python - dependency-name: keyring dependency-type: direct:production update-type: version-update:semver-minor dependency-group: build-python - dependency-name: pkginfo dependency-type: direct:production update-type: version-update:semver-patch dependency-group: build-python - dependency-name: rich dependency-type: direct:production update-type: version-update:semver-minor dependency-group: build-python - dependency-name: setuptools dependency-type: direct:production update-type: version-update:semver-major dependency-group: build-python - dependency-name: urllib3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: build-python - dependency-name: zipp dependency-type: direct:production update-type: version-update:semver-patch dependency-group: build-python ... Signed-off-by: dependabot[bot] <[email protected]>
dependabot
bot
added
dependencies
Benchmark Results
Notes
See Workflow log for more details. |
|
Superseded by #135. |
dependabot
bot
deleted the
dependabot/pip/build/pip/build-python-f7c49c6108
branch
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Bumps the build-python group with 10 updates in the /build/pip directory:
6.1.06.2.03.3.23.4.03.83.108.4.08.5.025.3.025.5.01.11.11.11.213.8.013.9.474.1.275.3.02.2.22.2.33.20.13.20.2Updates
bleachfrom 6.1.0 to 6.2.0Changelog
Sourced from bleach's changelog.
Commits
73871d7Prep for a 6.2.0 release156c589Remove six dependency from html5lib (#618)5a47907Drop six as a requirement; add six_shim.py (#618)6a2ec5cUpdate known-good versions of tinycss2 (#732)32efc26Fix additional < followed by characters and EOF issues (#728)648a97dAdd support for Python 3.13 (#736)d1e40edDrop support for Python 3.8 (#737)4bc1bffUpdate dev requirementsfcbe8f7Update dev dependenciesf8fb848Bump actions/cache from 3 to 4Updates
charset-normalizerfrom 3.3.2 to 3.4.0Release notes
Sourced from charset-normalizer's releases.
Changelog
Sourced from charset-normalizer's changelog.
Commits
f3118e3🔧 change download/upload artifact version to last working version33e67e8🔧 set compile-generator in generator_generic_slsa3 action73dd24c🔧 add explicit build deps to setuptools78f1e9b🔧 attempt to fix cd.yml *356ae702🔧 attempt to fix cd.yml *29720055🔧 attempt to fix cd.yml (macos part)1e10d06Update CHANGELOG.md36c103a🔖 Release 3.4.0 (#545)7658dfc⬆️ Bump github/codeql-action from 3.26.11 to 3.26.12 (#544)ca2535d⬆️ Bump github/codeql-action from 3.26.9 to 3.26.11 (#542)Updates
idnafrom 3.8 to 3.10Changelog
Sourced from idna's changelog.
Commits
729225dRelease v3.103eef168Merge pull request #194 from kjd/revert-unicode-16ceca619Revert Unicode 16.0.0 data updatesc43ac75Merge pull request #191 from kjd/release-3.91b8800aRelease v3.9a1fd168Merge pull request #190 from kjd/unicode-167732c61Merge branch 'master' into unicode-164ed183dRefactor membership test762216bFormat with ruff580ece9Implement changes to UTS46 algorithmUpdates
importlib-metadatafrom 8.4.0 to 8.5.0Changelog
Sourced from importlib-metadata's changelog.
Commits
b34810bFinalize8c1d1faMerge pull request #501 from Avasam/Pass-mypy-and-link-issuesafa39e8Back out changes to tests._path8b909f9Merge pull request #503 from danielhollas/defer-json2a3f50dAdd news fragment.3f78dc1Add comment to protect the deferred import.18eb2daRevert "Defer platform import"58832f2Merge pull request #502 from danielhollas/defer-zippe3ce33bAdd news fragment.d11b67fAdd comment to protect the deferred import.Updates
keyringfrom 25.3.0 to 25.5.0Changelog
Sourced from keyring's changelog.
Commits
999a2f9Finalize8279fd8Merge https://github.com/jaraco/skeletonccaee76Merge pull request #699 from JamieBeverley/bugfix/wrong_username103c535🧎♀️ Genuflect to the types.5e4b99eUnified the Windows.get_password and .get_credential logic through a new _res...f33fcfbRestore the indentation on the check, keeping the logic in the only place it'...2f3f4ecUpdated comment to match new behavior.562c69f👹 Feed the hobgoblins (delint).916c039Add news fragment.8e2f8b2Merge pull request #696 from torarvid/torarvid/expanduserUpdates
pkginfofrom 1.11.1 to 1.11.2Updates
richfrom 13.8.0 to 13.9.4Release notes
Sourced from rich's releases.
... (truncated)
Changelog
Sourced from rich's changelog.
Commits
43d3b04Merge pull request #3548 from Textualize/bump1394e440ff2bump12301e3Merge pull request #3546 from Textualize/faster-cell-len02f3d14commentaaaef27leaner syntax6cef0bcleaner cell_len46150cdsum and map is faster9e7f363use setsafcc5c5Merge pull request #3535 from Textualize/regex-error60f3b61changelogUpdates
setuptoolsfrom 74.1.2 to 75.3.0Changelog
Sourced from setuptools's changelog.
... (truncated)
Commits
d8da7dfBump version: 75.2.0 → 75.3.0a21c7faFix grammar in news fragmenta9a79e7Fix wheel ABI tag for debug Python 3.13 on Windows (#4676)0bc3248Merge simple type annotations from typeshed (#4504)1155ca8Fix wheel ABI tag for debug Python 3.13 on Windows1ca55c9Workaround for clash betweenruffinpre-commithook andpytest-ruff(#...c498d16Satisfy ruff linter - automatic fix1f92af5Sync pre-commit-hook with version of ruff that gets automatically pulled in t...a39336bRuff: enable all pyflakes and perf rules (#4556)e5f16a2bump jaraco.test to py.typed version 5.5 in test extra (#4651)Updates
urllib3from 2.2.2 to 2.2.3Release notes
Sourced from urllib3's releases.
Changelog
Sourced from urllib3's changelog.
Commits
2458bfcRelease 2.2.39b25db6Only attempt to publish for upstreamb9adeefDrop support for EOL PyPy3.8 and PyPy3.9b1d4649Add explicit support for Python 3.13cc42860Bump cryptography from 42.0.4 to 43.0.1 (#3470)3dae2e9Bump pypa/gh-action-pypi-publish from 1.9.0 to 1.10.1 (#3469)1e94febRevert "Add TLS settings for HTTP/2 (#3456)" (#3466)aa73abcBump actions/setup-python from 5.1.0 to 5.2.0 (#3468)abbfbcbAdd 1.26.20 to changelog and make the publish workflow the same (#3464)d480615Add TLS settings for HTTP/2 (#3456)Updates
zippfrom 3.20.1 to 3.20.2Changelog
Sourced from zipp's changelog.
Commits
a575660Make no assertions about the number. It could be negative.0b3a1b9Finalizea4c7961Make zipp.compat.overlay.zipfile hashable.d66007aMerge https://github.com/jaraco/skeleton3fe8c5bjaraco/skeleton#14681b766cFix an incompatibility (and source of merge conflicts) with projects using Ru...b8a63caMerge pull request #125 from saschanaz/patch-10b95ec7Suppress F8215d2fa66Merge https://github.com/jaraco/skeletona675458Allow the workflow to be triggered manually.Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions