Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Bump flit from 3.10.0 to 3.10.1 (#39)
Summary: Bumps [flit](https://github.com/pypa/flit) from 3.10.0 to 3.10.1. <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/pypa/flit/blob/main/doc/history.rst">flit's changelog</a>.</em></p> <blockquote> <h2>Version 3.10.1</h2> <ul> <li>The sdist of <code>flit_core</code> now includes the corresponding tests (:ghpull:<code>704</code>). These were missing in 3.10.</li> </ul> <h2>Version 3.10</h2> <ul> <li><code>flit publish</code> can now use PyPI tokens stored in keyring (:ghpull:<code>649</code>), either project tokens with a 'username' like :samp:<code>pypi_token:project:{project_name}</code> (use the <code>normalised form of the name <https://packaging.python.org/en/latest/specifications/name-normalization/></code>_) or user tokens (:samp:<code>pypi_token:user:{username}</code>).</li> <li>The <code>--python</code> option can now take the path of a virtualenv folder, as an alternative to a Python executable (:ghpull:<code>667</code>).</li> <li>Flit will work with current development versions of Pythona again (:ghpull:<code>684</code>).</li> <li>The <code>flit</code> command line package now requires Python 3.8 or above (:ghpulL:<code>660</code>). <code>flit_core</code> still works with Python 3.6 or above.</li> <li>The metadata in packages now has the names of optional dependency groups ("extras") normalised, complying with version 2.3 of the metadata standard (:ghpull:<code>676</code>, :ghpull:<code>697</code>).</li> <li>The <code>flit</code> command line package now depends on pip (:ghpull:<code>647</code>).</li> <li>Fix potential substitution of environment variables into passwords read from <code>.pypirc</code> files (:ghpull:<code>652</code>).</li> <li>A warning is now shown when building packages which specify the old <code>flit.buildapi</code> backend, which should be replaced by <code>flit_core.buildapi</code> (:ghpull:<code>674</code>). It's a good idea to always set a maximum version for the build requirement, to protect against changes in future major versions of Flit.</li> <li>Avoid using the deprecated <code>datetime.utcfromtimestamp()</code> (:ghpull:<code>682</code>).</li> <li>Flit now has a <code>SECURITY.md</code> file in the Github repository (:ghpull:<code>665</code>).</li> <li>The tests for <code>flit_core</code> are no longer part of the installed package, reducing the size of the wheels (:ghpull:<code>691</code>).</li> </ul> <h2>Version 3.9</h2> <ul> <li>New options :option:<code>flit build --use-vcs</code> and :option:<code>flit build --no-use-vcs</code> to enable & disable including all committed files in the sdist. For now <code>--use-vcs</code> is the default, but this is likely to change in a future version, to bring <code>flit build</code> in line with standard build frontends like <code>python -m build</code> (:ghpull:<code>625</code>).</li> <li>Sdist file names, and the name of the top-level folder in an sdist, are now normalised, in accordance with :pep:<code>625</code> (:ghpull:<code>628</code>).</li> <li>A statically defined version number can now be parsed from files called <code>version.py</code>, <code>_version.py</code> or <code>__version__.py</code> inside a package, as well as from <code>__init__.py</code>, so executing code is required in fewer cases (:ghpull:<code>630</code>).</li> <li>Fix setting the flag for regular files in zip metadata (:ghpull:<code>639</code>).</li> <li>The timestamp embedded in the gzip wrapper for sdists now defaults to a fixed</li> </ul> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/pypa/flit/commit/7cc7d330d38d48ef865c07e5086a917278b19050"><code>7cc7d33</code></a> Bump version: 3.10.0 → 3.10.1</li> <li><a href="https://github.com/pypa/flit/commit/85d00036511cc40593e7be095f9aa270a0fec1db"><code>85d0003</code></a> Add release note for 3.10.1</li> <li><a href="https://github.com/pypa/flit/commit/ab4048ae04d77802f61273bc6f9f19210ca2c88c"><code>ab4048a</code></a> Merge pull request <a href="https://redirect.github.com/pypa/flit/issues/704">#704</a> from pypa/flit-core-sdist-tests</li> <li><a href="https://github.com/pypa/flit/commit/f6a09894b97c145cf9c62e97bc67c2ee2cc4e425"><code>f6a0989</code></a> Include tests in flit_core sdist</li> <li><a href="https://github.com/pypa/flit/commit/2ab70a35d5ff125769f724047afddfda622b842e"><code>2ab70a3</code></a> Merge pull request <a href="https://redirect.github.com/pypa/flit/issues/701">#701</a> from pypa/codecov-token</li> <li><a href="https://github.com/pypa/flit/commit/7d099660be4570522dbf5fe5a50489ed97ebfaee"><code>7d09966</code></a> Provide token to upload coverage data to codecov</li> <li>See full diff in <a href="https://github.com/pypa/flit/compare/3.10.0...3.10.1">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=flit&package-manager=pip&previous-version=3.10.0&new-version=3.10.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `dependabot rebase` will rebase this PR - `dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `dependabot merge` will merge this PR after your CI passes on it - `dependabot squash and merge` will squash and merge this PR after your CI passes on it - `dependabot cancel merge` will cancel a previously requested merge and block automerging - `dependabot reopen` will reopen this PR if it is closed - `dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Pull Request resolved: #39 Reviewed By: amyreese Differential Revision: D65442024 Pulled By: itamaro fbshipit-source-id: b41fec179f278aae69e5fc35029f78b4885d91e9
- Loading branch information