Bump the all-pip-packages group across 1 directory with 6 updates #378

dependabot · 2024-12-01T05:38:16Z

Bumps the all-pip-packages group with 6 updates in the / directory:

Package	From	To
pygithub	`2.4.0`	`2.5.0`
werkzeug	`3.0.6`	`3.1.3`
setuptools	`75.3.0`	`75.6.0`
wheel	`0.44.0`	`0.45.1`
boto3	`1.35.50`	`1.35.71`
pytest-cov	`5.0.0`	`6.0.0`

Updates pygithub from 2.4.0 to 2.5.0

Release notes

Sourced from pygithub's releases.

v2.5.0

Breaking Changes

Parameters of method github.Requester.Requester.graphql_named_mutation have been renamed:

Parameter variables renamed to mutation_input

Parameter output renamed to output_schema

Default value of parameter output has been removed

New features

Rework GraphQL mutations @EnricoMi (#3046)

Make pagination work with GraphQL response data @EnricoMi (#3047)

Add RepositoryDiscussion powered by GraphQL API @EnricoMi (#3048)

Add Repository.get_discussion() to get a single Discussion @tiangolo (#3072)

Improvements

Adds List organization memberships for the authenticated user @eduramirezh (#3040)

Add actor property to WorkflowRun @gbhand (#2764)

Make requester a public attribute @minrk (#3056)

Bug Fixes

Fix requesting urls containing parameters with parameters dict @EnricoMi (#2929)

PullRequest.delete_branch: fix the remaining pull requests check @fetsko (#3063)

Maintenance

Remove stale bot @EnricoMi (510c1402)

Upgrade Github actions @EnricoMi (#3075)

Add top issues dashboard action @EnricoMi (#3049)

Make tests pass some more years @bmwiedemann (#3045)

Run top issues workflow only in PyGithub repo @EnricoMi (0d395d4e)

Replace pre-commit action in order to pin pre-commit @minrk (#3059)

Changelog

Sourced from pygithub's changelog.

Version 2.5.0 (November 06, 2024)

Breaking Changes ^^^^^^^^^^^^^^^^

Parameters of method github.Requester.Requester.graphql_named_mutation have been renamed:

Parameter variables renamed to mutation_input

Parameter output renamed to output_schema

Default value of parameter output has been removed

New features ^^^^^^^^^^^^

Rework GraphQL mutations (#3046) (27222251)

Make pagination work with GraphQL response data (#3047) (cd30e379)

Add RepositoryDiscussion powered by GraphQL API (#3048) (29359f3c)

Add Repository.get_discussion() to get a single Discussion (#3072) (44120b1e)

Improvements ^^^^^^^^^^^^

Adds List organization memberships for the authenticated user (#3040) (cf443955)

Add actor property to WorkflowRun (#2764) (612ba68e)

Make requester a public attribute (#3056) (c44ec523)

Bug Fixes ^^^^^^^^^

Fix requesting urls containing parameters with parameters dict (#2929) (e1d67ada)

PullRequest.delete_branch: fix the remaining pull requests check (#3063) (72fa6278)

Maintenance ^^^^^^^^^^^

Remove stale bot (510c1402)

Upgrade Github actions (#3075) (323e2828)

Add top issues dashboard action (#3049) (c91f26a7)

Make tests pass some more years (#3045) (352c55aa)

Run top issues workflow only in PyGithub repo (0d395d4e)

Replace pre-commit Github action in order to pin pre-commit version (#3059) (1a05b43d)

Commits

19ddb9f Release v2.5.0 (#3079)
44120b1 Add support for Repository.get_discussion() to get a single Discussion (#3072)
323e282 Upgrade Github actions (#3075)
29359f3 Add RepositoryDiscussion powered by GraphQL API (#3048)
cd30e37 Make pagination work with GraphQL response data (#3047)
2722225 Rework GraphQL mutations (#3046)
72fa627 PullRequest.delete_branch: fix the remaining pull requests check (#3063)
352c55a Make tests pass some more years (#3045)
cf44395 Adds List organization memberships for the authenticated user (#3040)
612ba68 Add actor property to WorkflowRun (#2764)
Additional commits viewable in compare view

Updates werkzeug from 3.0.6 to 3.1.3

Release notes

Sourced from werkzeug's releases.

3.1.3

This is the Werkzeug 3.1.3 fix release, which fixes bugs but does not otherwise change behavior and should not result in breaking changes vs 3.1.0.

PyPI: https://pypi.org/project/Werkzeug/3.1.3/ Changes: https://werkzeug.palletsprojects.com/en/stable/changes/#version-3-1-3 Milestone: https://github.com/pallets/werkzeug/milestone/41?closed=1

Initial data passed to MultiDict and similar interfaces only accepts list, tuple, or set when passing multiple values. It had been changed to accept any Collection, but this matched types that should be treated as single values, such as bytes. #2994

When the Host header is not set and Request.host falls back to the WSGI SERVER_NAME value, if that value is an IPv6 address it is wrapped in [] to match the Host header. #2993

3.1.2

This is the Werkzeug 3.1.2 fix release, which fixes bugs but does not otherwise change behavior and should not result in breaking changes vs 3.1.0.

PyPI: https://pypi.org/project/Werkzeug/3.1.2/ Changes: https://werkzeug.palletsprojects.com/en/stable/changes/#version-3-1-2 Milestone: https://github.com/pallets/werkzeug/milestone/40?closed=1

Improve type annotation for TypeConversionDict.get to allow the type parameter to be a callable. #2988

Headers does not inherit from MutableMapping, as it is does not exactly match that interface. #2989

3.1.1

This is the Werkzeug 3.1.1 fix release, which fixes bugs but does not otherwise change behavior and should not result in breaking changes vs 3.1.0.

PyPI: https://pypi.org/project/Werkzeug/3.1.1/ Changes: https://werkzeug.palletsprojects.com/en/stable/changes/#version-3-1-1 Milestone: https://github.com/pallets/werkzeug/milestone/38?closed=1

Fix an issue that caused str(Request.headers) to always appear empty. #2985

3.1.0

This is the Werkzeug 3.1.0 feature release. A feature release may include new features, remove previously deprecated code, add new deprecations, or introduce potentially breaking changes. We encourage everyone to upgrade, and to use a tool such as pip-tools to pin all dependencies and control upgrades. Test with warnings treated as errors to be able to adapt to deprecation warnings early.

PyPI: https://pypi.org/project/Werkzeug/3.1.0/ Changes: https://werkzeug.palletsprojects.com/en/stable/changes/#version-3-1-0 Milestone: https://github.com/pallets/werkzeug/milestone/34?closed=1

Drop support for Python 3.8. #2966

Remove previously deprecated code. #2967

Request.max_form_memory_size defaults to 500kB instead of unlimited. Non-file form fields over this size will cause a RequestEntityTooLarge error. #2964

OrderedMultiDict and ImmutableOrderedMultiDict are deprecated. Use MultiDict and ImmutableMultiDict instead. #2968

Behavior of properties on request.cache_control and response.cache_control has been significantly adjusted.

Dict values are always str | None. Setting properties will convert the value to a string. Setting a property to False is equivalent to setting it to None. Getting typed properties will return None if conversion raises ValueError, rather than the string. #2980

max_age is None if present without a value, rather than -1. #2980

no_cache is a boolean for requests, it is True instead of "*" when present. It remains a string for responses. #2980

max_stale is True if present without a value, rather than "*". #2980

no_transform is a boolean. Previously it was mistakenly always None. #2881

min_fresh is None if present without a value, rather than "*". #2881

private is True if present without a value, rather than "*". #2980

Added the must_understand property. #2881

Added the stale_while_revalidate, and stale_if_error properties. #2948

... (truncated)

Changelog

Sourced from werkzeug's changelog.

Version 3.1.3

Released 2024-11-08

Initial data passed to MultiDict and similar interfaces only accepts list, tuple, or set when passing multiple values. It had been changed to accept any Collection, but this matched types that should be treated as single values, such as bytes. :issue:2994

When the Host header is not set and Request.host falls back to the WSGI SERVER_NAME value, if that value is an IPv6 address it is wrapped in [] to match the Host header. :issue:2993

Version 3.1.2

Released 2024-11-04

Improve type annotation for TypeConversionDict.get to allow the type parameter to be a callable. :issue:2988

Headers does not inherit from MutableMapping, as it is does not exactly match that interface. :issue:2989

Version 3.1.1

Released 2024-11-01

Fix an issue that caused str(Request.headers) to always appear empty. :issue:2985

Version 3.1.0

Released 2024-10-31

Drop support for Python 3.8. :pr:2966

Remove previously deprecated code. :pr:2967

Request.max_form_memory_size defaults to 500kB instead of unlimited. Non-file form fields over this size will cause a RequestEntityTooLarge error. :issue:2964

OrderedMultiDict and ImmutableOrderedMultiDict are deprecated. Use MultiDict and ImmutableMultiDict instead. :issue:2968

Behavior of properties on request.cache_control and response.cache_control has been significantly adjusted.

Dict values are always str | None. Setting properties will convert

... (truncated)

Commits

6389612 release version 3.1.3
ba15683 wrap IPv6 SERVER_NAME in [] (#2997)
d99f72d wrap IPv6 SERVER_NAME in []
ea93b54 restrict containers accepted by multi (#2995)
598bb1d restrict containers accepted by multi
1a1728e start version 3.1.3
4fd7073 release version 3.1.2 (#2992)
4764684 release version 3.1.2
1803db6 Headers is not MutableMapping (#2991)
ac87bf8 Headers is not MutableMapping
Additional commits viewable in compare view

Updates setuptools from 75.3.0 to 75.6.0

Changelog

Sourced from setuptools's changelog.

v75.6.0

Features

Preserve original PKG-INFO into METADATA when creating wheel (instead of calling wheel.metadata.pkginfo_to_metadata). This helps to be more compliant with the flow specified in PEP 517. (#4701)

Changed the WindowsSdkVersion, FrameworkVersion32 and FrameworkVersion64 properties of setuptools.msvc.PlatformInfo to return an empty tuple instead of None as a fallthrough case -- by :user:Avasam (#4754)

v75.5.0

Features

Removed support for SETUPTOOLS_DANGEROUSLY_SKIP_PYPROJECT_VALIDATION, as it is deemed prone to errors. (#4746)

v75.4.0

Features

Added support for the environment variable SETUPTOOLS_DANGEROUSLY_SKIP_PYPROJECT_VALIDATION=true, allowing users to bypass the validation of pyproject.toml. This option should be used only as a last resort when resolving dependency issues, as it may lead to improper functioning. Users who enable this setting are responsible for ensuring that pyproject.toml complies with setuptools requirements. (#4611)

.. attention:: This environment variable was removed in a later version of setuptools.

Require Python 3.9 or later. (#4718)

Remove dependency on importlib_resources and the vendored copy of the library. Instead, setuptools consistently rely on stdlib's importlib.resources (available on Python 3.9+). (#4718)

Setuptools' bdist_wheel implementation no longer produces wheels with the m SOABI flag (pymalloc-related). This flag was removed on Python 3.8+ (see :obj:sys.abiflags). (#4718)

Updated vendored packaging version to 24.2. (#4740)

... (truncated)

Commits

bf2ced2 Bump version: 75.5.0 → 75.6.0
8685c80 Empty tuple instead of None for PlatformInfo version properties fallthrough (...
50d671b Rename news fragment
2b471c2 Changed the WindowsSdkVersion, FrameworkVersion32 and ``FrameworkVers...
2c77cd2 Runtime typing fixes for typeshed return type merge (#4753
9a4c8d4 Runtime typing fixes for typeshed return type merge
e622859 Preserve original PKG-INFO contents when creating wheel (instead of calling...
0b5b417 Mark tests that may depend on external network
a4fa01d Add news fragment
089aca9 Ignore coverage in test code
Additional commits viewable in compare view

Updates wheel from 0.44.0 to 0.45.1

Release notes

Sourced from wheel's releases.

0.45.1

Fixed pure Python wheels converted from eggs and wininst files having the ABI tag in the file name

0.45.0

Refactored the convert command to not need setuptools to be installed

Don't configure setuptools logging unless running bdist_wheel

Added a redirection from wheel.bdist_wheel.bdist_wheel to setuptools.command.bdist_wheel.bdist_wheel to improve compatibility with setuptools' latest fixes.

Projects are still advised to migrate away from the deprecated module and import the setuptools' implementation explicitly. (PR by @abravalheri)

Changelog

Sourced from wheel's changelog.

Release Notes

0.45.1 (2024-11-23)

Fixed pure Python wheels converted from eggs and wininst files having the ABI tag in the file name

0.45.0 (2024-11-08)

Refactored the convert command to not need setuptools to be installed

Don't configure setuptools logging unless running bdist_wheel

Added a redirection from wheel.bdist_wheel.bdist_wheel to setuptools.command.bdist_wheel.bdist_wheel to improve compatibility with setuptools' latest fixes.

Projects are still advised to migrate away from the deprecated module and import the setuptools' implementation explicitly. (PR by @abravalheri)

0.44.0 (2024-08-04)

Canonicalized requirements in METADATA file (PR by Wim Jeantine-Glenn)

Deprecated the bdist_wheel module, as the code was migrated to setuptools itself

0.43.0 (2024-03-11)

Dropped support for Python 3.7

Updated vendored packaging to 24.0

0.42.0 (2023-11-26)

Allowed removing build tag with wheel tags --build ""

Fixed wheel pack and wheel tags writing updated WHEEL fields after a blank line, causing other tools to ignore them

Fixed wheel pack and wheel tags writing WHEEL with CRLF line endings or a mix of CRLF and LF

Fixed wheel pack --build-number "" not removing build tag from WHEEL (above changes by Benjamin Gilbert)

0.41.3 (2023-10-30)

Updated vendored packaging to 23.2

Fixed ABI tag generation for CPython 3.13a1 on Windows (PR by Sam Gross)

0.41.2 (2023-08-22)

Fixed platform tag detection for GraalPy and 32-bit python running on an aarch64 kernel (PR by Matthieu Darbois)

Fixed wheel tags to not list directories in RECORD files

... (truncated)

Commits

7855525 Created a new release
d343391 Fixed wrong wheel file names in converted pure-Python eggs/wininsts
d78f0e3 Created a new release
f064c69 Added license files for vendored packaging
68387af Only configure setuptools logging if bdist_wheel is imported (#641)
c81f5c9 Refactored the wheel convert command to not require setuptools (#640)
e43464d Adjusted target Python versions in GitHub CI
e9894e7 Tweaked pytest settings to make the tracebacks easier to read
baf6bf8 Removed Cirrus CI configuration
28c1ba1 Improved compatibility with future versions of setuptools (#638)
Additional commits viewable in compare view

Updates boto3 from 1.35.50 to 1.35.71

Commits

57997d9 Merge branch 'release-1.35.71'
ab26d01 Bumping version to 1.35.71
d00e0ba Add changelog entries from botocore
aad0b17 Merge branch 'release-1.35.70'
e2a8522 Merge branch 'release-1.35.70' into develop
b51f07a Bumping version to 1.35.70
9eafcc1 Add changelog entries from botocore
d640e7a Merge branch 'release-1.35.69'
2614099 Merge branch 'release-1.35.69' into develop
92b7380 Bumping version to 1.35.69
Additional commits viewable in compare view

Updates pytest-cov from 5.0.0 to 6.0.0

Changelog

Sourced from pytest-cov's changelog.

6.0.0 (2024-10-29)

Updated various documentation inaccuracies, especially on subprocess handling.

Changed fail under checks to use the precision set in the coverage configuration. Now it will perform the check just like coverage report would.

Added a --cov-precision cli option that can override the value set in your coverage configuration.

Dropped support for now EOL Python 3.8.

Commits

9540437 Bump version: 5.0.0 → 6.0.0
9f81754 Further trim down envs and drop Python 3.8.
b12b5ec Update conf.
23f4b27 Update changelog.
291a04f Bump test deps and trim config.
08f1101 Add --cov-precision option. Close #655.
76fe2a7 Move the warnings/errors in a place that doesn't import anything.
a9ea7b7 Implement error/warning for the bad dynamic_context being set in config.
c299e01 Add explicit suffixing to make it easier to see the identify the sources/usag...
c87e546 Add reproducer for weird xdist dynamic_context interaction. Ref #604.
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the all-pip-packages group with 6 updates in the / directory: | Package | From | To | | --- | --- | --- | | [pygithub](https://github.com/pygithub/pygithub) | `2.4.0` | `2.5.0` | | [werkzeug](https://github.com/pallets/werkzeug) | `3.0.6` | `3.1.3` | | [setuptools](https://github.com/pypa/setuptools) | `75.3.0` | `75.6.0` | | [wheel](https://github.com/pypa/wheel) | `0.44.0` | `0.45.1` | | [boto3](https://github.com/boto/boto3) | `1.35.50` | `1.35.71` | | [pytest-cov](https://github.com/pytest-dev/pytest-cov) | `5.0.0` | `6.0.0` | Updates `pygithub` from 2.4.0 to 2.5.0 - [Release notes](https://github.com/pygithub/pygithub/releases) - [Changelog](https://github.com/PyGithub/PyGithub/blob/main/doc/changes.rst) - [Commits](PyGithub/PyGithub@v2.4.0...v2.5.0) Updates `werkzeug` from 3.0.6 to 3.1.3 - [Release notes](https://github.com/pallets/werkzeug/releases) - [Changelog](https://github.com/pallets/werkzeug/blob/main/CHANGES.rst) - [Commits](pallets/werkzeug@3.0.6...3.1.3) Updates `setuptools` from 75.3.0 to 75.6.0 - [Release notes](https://github.com/pypa/setuptools/releases) - [Changelog](https://github.com/pypa/setuptools/blob/main/NEWS.rst) - [Commits](pypa/setuptools@v75.3.0...v75.6.0) Updates `wheel` from 0.44.0 to 0.45.1 - [Release notes](https://github.com/pypa/wheel/releases) - [Changelog](https://github.com/pypa/wheel/blob/main/docs/news.rst) - [Commits](pypa/wheel@0.44.0...0.45.1) Updates `boto3` from 1.35.50 to 1.35.71 - [Release notes](https://github.com/boto/boto3/releases) - [Commits](boto/boto3@1.35.50...1.35.71) Updates `pytest-cov` from 5.0.0 to 6.0.0 - [Changelog](https://github.com/pytest-dev/pytest-cov/blob/master/CHANGELOG.rst) - [Commits](pytest-dev/pytest-cov@v5.0.0...v6.0.0) --- updated-dependencies: - dependency-name: pygithub dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-pip-packages - dependency-name: werkzeug dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-pip-packages - dependency-name: setuptools dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-pip-packages - dependency-name: wheel dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-pip-packages - dependency-name: boto3 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: all-pip-packages - dependency-name: pytest-cov dependency-type: direct:development update-type: version-update:semver-major dependency-group: all-pip-packages ... Signed-off-by: dependabot[bot] <[email protected]>

dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Dec 1, 2024

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump the all-pip-packages group across 1 directory with 6 updates #378

Bump the all-pip-packages group across 1 directory with 6 updates #378

dependabot bot commented on behalf of github Dec 1, 2024

Bump the all-pip-packages group across 1 directory with 6 updates #378

Are you sure you want to change the base?

Bump the all-pip-packages group across 1 directory with 6 updates #378

Conversation

dependabot bot commented on behalf of github Dec 1, 2024

v2.5.0

Breaking Changes

New features

Improvements

Bug Fixes

Maintenance

Version 2.5.0 (November 06, 2024)

3.1.3

3.1.2

3.1.1

3.1.0

Version 3.1.3

Version 3.1.2

Version 3.1.1

Version 3.1.0

v75.6.0

Features

v75.5.0

Features

v75.4.0

Features

0.45.1

0.45.0

Release Notes

6.0.0 (2024-10-29)