Skip to content

Commit

Permalink
Bump flit from 3.10.0 to 3.10.1 (#39)
Browse files Browse the repository at this point in the history
Summary:
Bumps [flit](https://github.com/pypa/flit) from 3.10.0 to 3.10.1.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/pypa/flit/blob/main/doc/history.rst">flit's changelog</a>.</em></p>
<blockquote>
<h2>Version 3.10.1</h2>
<ul>
<li>The sdist of <code>flit_core</code> now includes the corresponding tests (:ghpull:<code>704</code>).
These were missing in 3.10.</li>
</ul>
<h2>Version 3.10</h2>
<ul>
<li><code>flit publish</code> can now use PyPI tokens stored in keyring (:ghpull:<code>649</code>),
either project tokens with a 'username' like
:samp:<code>pypi_token:project:{project_name}</code> (use the <code>normalised form of the name &lt;https://packaging.python.org/en/latest/specifications/name-normalization/&gt;</code>_)
or user tokens (:samp:<code>pypi_token:user:{username}</code>).</li>
<li>The <code>--python</code> option can now take the path of a virtualenv folder, as an
alternative to a Python executable (:ghpull:<code>667</code>).</li>
<li>Flit will work with current development versions of Pythona again (:ghpull:<code>684</code>).</li>
<li>The <code>flit</code> command line package now requires Python 3.8 or above (:ghpulL:<code>660</code>).
<code>flit_core</code> still works with Python 3.6 or above.</li>
<li>The metadata in packages now has the names of optional dependency groups
(&quot;extras&quot;) normalised, complying with version 2.3 of the metadata standard
(:ghpull:<code>676</code>, :ghpull:<code>697</code>).</li>
<li>The <code>flit</code> command line package now depends on pip (:ghpull:<code>647</code>).</li>
<li>Fix potential substitution of environment variables into passwords read from
<code>.pypirc</code> files (:ghpull:<code>652</code>).</li>
<li>A warning is now shown when building packages which specify the old
<code>flit.buildapi</code> backend, which should be replaced by <code>flit_core.buildapi</code>
(:ghpull:<code>674</code>). It's a good idea to always set a maximum version for the
build requirement, to protect against changes in future major versions of Flit.</li>
<li>Avoid using the deprecated <code>datetime.utcfromtimestamp()</code> (:ghpull:<code>682</code>).</li>
<li>Flit now has a <code>SECURITY.md</code> file in the Github repository (:ghpull:<code>665</code>).</li>
<li>The tests for <code>flit_core</code> are no longer part of the installed package,
reducing the size of the wheels (:ghpull:<code>691</code>).</li>
</ul>
<h2>Version 3.9</h2>
<ul>
<li>New options :option:<code>flit build --use-vcs</code> and :option:<code>flit build --no-use-vcs</code>
to enable &amp; disable including all committed files in the sdist. For now
<code>--use-vcs</code> is the default, but this is likely to change in a future
version, to bring <code>flit build</code> in line with standard build frontends like
<code>python -m build</code> (:ghpull:<code>625</code>).</li>
<li>Sdist file names, and the name of the top-level folder in an sdist, are now
normalised, in accordance with :pep:<code>625</code> (:ghpull:<code>628</code>).</li>
<li>A statically defined version number can now be parsed from files called
<code>version.py</code>, <code>_version.py</code> or <code>__version__.py</code> inside a package, as well
as from <code>__init__.py</code>, so executing code is required in fewer cases
(:ghpull:<code>630</code>).</li>
<li>Fix setting the flag for regular files in zip metadata (:ghpull:<code>639</code>).</li>
<li>The timestamp embedded in the gzip wrapper for sdists now defaults to a fixed</li>
</ul>

</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/pypa/flit/commit/7cc7d330d38d48ef865c07e5086a917278b19050"><code>7cc7d33</code></a> Bump version: 3.10.0 → 3.10.1</li>
<li><a href="https://github.com/pypa/flit/commit/85d00036511cc40593e7be095f9aa270a0fec1db"><code>85d0003</code></a> Add release note for 3.10.1</li>
<li><a href="https://github.com/pypa/flit/commit/ab4048ae04d77802f61273bc6f9f19210ca2c88c"><code>ab4048a</code></a> Merge pull request <a href="https://redirect.github.com/pypa/flit/issues/704">#704</a> from pypa/flit-core-sdist-tests</li>
<li><a href="https://github.com/pypa/flit/commit/f6a09894b97c145cf9c62e97bc67c2ee2cc4e425"><code>f6a0989</code></a> Include tests in flit_core sdist</li>
<li><a href="https://github.com/pypa/flit/commit/2ab70a35d5ff125769f724047afddfda622b842e"><code>2ab70a3</code></a> Merge pull request <a href="https://redirect.github.com/pypa/flit/issues/701">#701</a> from pypa/codecov-token</li>
<li><a href="https://github.com/pypa/flit/commit/7d099660be4570522dbf5fe5a50489ed97ebfaee"><code>7d09966</code></a> Provide token to upload coverage data to codecov</li>
<li>See full diff in <a href="https://github.com/pypa/flit/compare/3.10.0...3.10.1">compare view</a></li>
</ul>
</details>
<br />

[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=flit&package-manager=pip&previous-version=3.10.0&new-version=3.10.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

 ---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `dependabot rebase` will rebase this PR
- `dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `dependabot merge` will merge this PR after your CI passes on it
- `dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `dependabot cancel merge` will cancel a previously requested merge and block automerging
- `dependabot reopen` will reopen this PR if it is closed
- `dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency
- `dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

</details>

Pull Request resolved: #39

Reviewed By: amyreese

Differential Revision: D65442024

Pulled By: itamaro

fbshipit-source-id: b41fec179f278aae69e5fc35029f78b4885d91e9
  • Loading branch information
dependabot[bot] authored and facebook-github-bot committed Nov 5, 2024
1 parent 29641ee commit 8328697
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion pyproject.toml
Original file line number Diff line number Diff line change
Expand Up @@ -33,7 +33,7 @@ dependencies = [
dev = [
"async-timeout==4.0.3",
"coverage==7.6.4",
"flit==3.10.0",
"flit==3.10.1",
]

[project.urls]
Expand Down

0 comments on commit 8328697

Please sign in to comment.