Bump the python-requirements group with 51 updates

[dependabot]

Bumps the python-requirements group with 51 updates:

Package	From	To
aiohttp	3.9.1	3.9.3
anyio	3.7.1	4.2.0
attrs	23.1.0	23.2.0
azure-core	1.29.5	1.30.0
azure-monitor-opentelemetry	1.1.1	1.2.0
azure-monitor-opentelemetry-exporter	1.0.0b19	1.0.0b21
certifi	2023.11.17	2024.2.2
cryptography	41.0.7	42.0.2
distro	1.8.0	1.9.0
fixedint	0.1.6	0.2.0
flask	3.0.0	3.0.2
frozenlist	1.4.0	1.4.1
httpx	0.25.2	0.26.0
hypercorn	0.15.0	0.16.0
importlib-metadata	6.11.0	7.0.1
jinja2	3.1.2	3.1.3
markupsafe	2.1.3	2.1.5
msal-extensions	1.0.0	1.1.0
multidict	6.0.4	6.0.5
numpy	1.26.2	1.26.3
openai[datalib]	1.3.7	1.11.1
opentelemetry-api	1.21.0	1.22.0
opentelemetry-instrumentation	0.42b0	0.43b0
opentelemetry-instrumentation-aiohttp-client	0.42b0	0.43b0
opentelemetry-instrumentation-asgi	0.42b0	0.43b0
opentelemetry-instrumentation-dbapi	0.42b0	0.43b0
opentelemetry-instrumentation-django	0.42b0	0.43b0
opentelemetry-instrumentation-fastapi	0.42b0	0.43b0
opentelemetry-instrumentation-flask	0.42b0	0.43b0
opentelemetry-instrumentation-httpx	0.42b0	0.43b0
opentelemetry-instrumentation-psycopg2	0.42b0	0.43b0
opentelemetry-instrumentation-requests	0.42b0	0.43b0
opentelemetry-instrumentation-urllib	0.42b0	0.43b0
opentelemetry-instrumentation-urllib3	0.42b0	0.43b0
opentelemetry-instrumentation-wsgi	0.42b0	0.43b0
opentelemetry-resource-detector-azure	0.1.0	0.1.3
opentelemetry-sdk	1.21.0	1.22.0
opentelemetry-semantic-conventions	0.42b0	0.43b0
opentelemetry-util-http	0.42b0	0.43b0
pandas	2.1.3	2.2.0
pandas-stubs	2.1.1.230928	2.1.4.231227
pydantic	2.5.2	2.6.0
pydantic-core	2.14.5	2.16.2
pytz	2023.3.post1	2024.1
regex	2023.10.3	2023.12.25
types-pytz	2023.3.1.1	2024.1.0.20240203
typing-extensions	4.8.0	4.9.0
tzdata	2023.3	2023.4
urllib3	2.1.0	2.2.0
uvicorn	0.24.0.post1	0.27.0.post1
pypdf	3.17.1	4.0.1

Updates aiohttp from 3.9.1 to 3.9.3

Release notes

Sourced from aiohttp's releases.

3.9.3

Bug fixes

• Fixed backwards compatibility breakage (in 3.9.2) of ssl parameter when set outside of ClientSession (e.g. directly in TCPConnector) -- by :user:Dreamsorcerer.

  Related issues and pull requests on GitHub: #8097, #8098.

Miscellaneous internal changes

• Improved test suite handling of paths and temp files to consistently use pathlib and pytest fixtures.

  Related issues and pull requests on GitHub: #3957.

---

3.9.2

Bug fixes

• Fixed server-side websocket connection leak.

  Related issues and pull requests on GitHub: #7978.

• Fixed web.FileResponse doing blocking I/O in the event loop.

  Related issues and pull requests on GitHub: #8012.

• Fixed double compress when compression enabled and compressed file exists in server file responses.

... (truncated)

Changelog

Sourced from aiohttp's changelog.

3.9.3 (2024-01-29)

Bug fixes

• Fixed backwards compatibility breakage (in 3.9.2) of ssl parameter when set outside of ClientSession (e.g. directly in TCPConnector) -- by :user:Dreamsorcerer.

  Related issues and pull requests on GitHub: :issue:8097, :issue:8098.

Miscellaneous internal changes

• Improved test suite handling of paths and temp files to consistently use pathlib and pytest fixtures.

  Related issues and pull requests on GitHub: :issue:3957.

---

3.9.2 (2024-01-28)

Bug fixes

• Fixed server-side websocket connection leak.

  Related issues and pull requests on GitHub: :issue:7978.

• Fixed web.FileResponse doing blocking I/O in the event loop.

  Related issues and pull requests on GitHub: :issue:8012.

... (truncated)

Commits

• bf4edce Release v3.9.3 (#8102)
• 5637e8f [PR #8098/aca206fc backport][3.9] Fix backwards compatibility with ssl (#8101)
• 33f49e8 Bump pypa/cibuildwheel from 2.16.2 to 2.16.4 (#8092)
• 5ff4b3c Update version
• 94462ee [PR #3957/79fe2045 backport][3.9] Improve test suite handling of paths, temp ...
• 24a6d64 Release v3.9.2 (#8082)
• 9118a58 [PR #8079/1c335944 backport][3.9] Validate static paths (#8080)
• 435ad46 [PR #3955/8960063e backport][3.9] Replace all tmpdir fixtures with tmp_path (...
• d33bc21 Improve validation in HTTP parser (#8074) (#8078)
• 0d945d1 [PR #7916/822fbc74 backport][3.9] Add more information to contributing page (...
• Additional commits viewable in compare view

Updates anyio from 3.7.1 to 4.2.0

Release notes

Sourced from anyio's releases.

4.2.0

• Add support for byte-based paths in connect_unix, create_unix_listeners, create_unix_datagram_socket, and create_connected_unix_datagram_socket. (PR by Lura Skye)

• Enabled the Event and CapacityLimiter classes to be instantiated outside an event loop thread

• Broadly improved/fixed the type annotations. Among other things, many functions and methods that take variadic positional arguments now make use of PEP 646 TypeVarTuple to allow the positional arguments to be validated by static type checkers. These changes affected numerous methods and functions, including:

  • anyio.run()
  • TaskGroup.start_soon()
  • anyio.from_thread.run()
  • anyio.from_thread.run_sync()
  • anyio.to_thread.run_sync()
  • anyio.to_process.run_sync()
  • BlockingPortal.call()
  • BlockingPortal.start_task_soon()
  • BlockingPortal.start_task()

  (also resolves #560)

• Fixed various type annotations of anyio.Path to match Typeshed:

  • anyio.Path.__lt__()
  • anyio.Path.__le__()
  • anyio.Path.__gt__()
  • anyio.Path.__ge__()
  • anyio.Path.__truediv__()
  • anyio.Path.__rtruediv__()
  • anyio.Path.hardlink_to()
  • anyio.Path.samefile()
  • anyio.Path.symlink_to()
  • anyio.Path.with_segments()

  (PR by Ganden Schaffner)

• Fixed adjusting the total number of tokens in a CapacityLimiter on asyncio failing to wake up tasks waiting to acquire the limiter in certain edge cases (fixed with help from Egor Blagov)

• Fixed loop_factory and use_uvloop options not being used on the asyncio backend (#643)

• Fixed cancellation propagating on asyncio from a task group to child tasks if the task hosting the task group is in a shielded cancel scope (#642)

4.1.0

• Adapted to API changes made in Trio v0.23:
  • Call trio.to_thread.run_sync() using the abandon_on_cancel keyword argument instead of cancellable
  • Removed a checkpoint when exiting a task group
  • Renamed the cancellable argument in anyio.to_thread.run_sync() to abandon_on_cancel (and deprecated the old parameter name)
  • Bumped minimum version of Trio to v0.23
• Added support for voluntary thread cancellation via anyio.from_thread.check_cancelled()
• Bumped minimum version of trio to v0.23
• Exposed the ResourceGuard class in the public API (#627)
• Fixed RuntimeError: Runner is closed when running higher-scoped async generator fixtures in some cases (#619)

... (truncated)

Changelog

Sourced from anyio's changelog.

Version history

This library adheres to Semantic Versioning 2.0 <http://semver.org/>_.

UNRELEASED

• Added support for the Python 3.12 walk_up keyword argument in anyio.Path.relative_to() (PR by Colin Taylor)

• Fixed passing total_tokens to anyio.CapacityLimiter() as a keyword argument not working on the trio backend ([#515](https://github.com/agronholm/anyio/issues/515) <https://github.com/agronholm/anyio/issues/515>_)

• Fixed Process.aclose() not performing the minimum level of necessary cleanup when cancelled. Previously:

  • Cancellation of Process.aclose() could leak an orphan process
  • Cancellation of run_process() could very briefly leak an orphan process.
  • Cancellation of Process.aclose() or run_process() on Trio could leave standard streams unclosed

  (PR by Ganden Schaffner)

• Fixed Process.stdin.aclose(), Process.stdout.aclose(), and Process.stderr.aclose() not including a checkpoint on asyncio (PR by Ganden Schaffner)

• Fixed documentation on how to provide your own typed attributes

4.2.0

• Add support for byte-based paths in connect_unix, create_unix_listeners, create_unix_datagram_socket, and create_connected_unix_datagram_socket. (PR by Lura Skye)

• Enabled the Event and CapacityLimiter classes to be instantiated outside an event loop thread

• Broadly improved/fixed the type annotations. Among other things, many functions and methods that take variadic positional arguments now make use of PEP 646 TypeVarTuple to allow the positional arguments to be validated by static type checkers. These changes affected numerous methods and functions, including:

  • anyio.run()
  • TaskGroup.start_soon()
  • anyio.from_thread.run()
  • anyio.from_thread.run_sync()
  • anyio.to_thread.run_sync()
  • anyio.to_process.run_sync()
  • BlockingPortal.call()
  • BlockingPortal.start_task_soon()
  • BlockingPortal.start_task()

  (also resolves [#560](https://github.com/agronholm/anyio/issues/560) <https://github.com/agronholm/anyio/issues/560>_)

• Fixed various type annotations of anyio.Path to match Typeshed:

... (truncated)

Commits

• f757314 Bumped up the version
• fe31dd5 Added Litestar to the downstream test suite
• b7be190 Updated GitHub actions
• 45b9ece Rearranged the changelog
• 0b66994 Fix more Path typing that doesn't match Typeshed (#653)
• e5fadb3 Added mention of anyio.from_thread.run_sync() to the changelog
• 89795b9 Used TypeVarTuple and ParamSpec in several places (#652)
• 3a4ec47 Removed the pyright version pin
• 28516e2 Enabled Event and CapacityLimiter to be instantiated outside an event loop (#...
• 44ca5ea Fixed cancellation propagation when task group host is in a shielded scope (#...
• Additional commits viewable in compare view

Updates attrs from 23.1.0 to 23.2.0

Commits

• See full diff in compare view

Updates azure-core from 1.29.5 to 1.30.0

Release notes

Sourced from azure-core's releases.

azure-core_1.30.0

1.30.0 (2024-02-01)

Features Added

• Support tuple input for file values to azure.core.rest.HttpRequest #33948
• Support tuple input to files with duplicate field names azure.core.rest.HttpRequest #34021

azure-core_1.29.7

1.29.7 (2024-01-18)

Other Changes

• Removed dependency on anyio. #33282

azure-core_1.29.6

1.29.6 (2023-12-14)

Bugs Fixed

• Adjusted AsyncBearerTokenCredentialPolicy to work properly with trio concurrency mechanisms. (#33307)

Other Changes

• Added dependency on anyio >=3.0,<5.0
• Bumped minimum dependency on requests to 2.21.0.

Commits

• 2134805 [corehttp] add support for multipart file tuples and for simultaneous data an...
• 0cd91bf update changelog (#34053)
• d717767 NO_CI enable strict_sphinx where libraries are passing already
• 9a67986 [rest] allow files to accept a tuple with duplicate field names (#34021)
• 8999812 [Corehttp] Fix next-pylint errors (#33876)
• 7bf7f3d support tuples for files (#33948)
• 1889be7 Increment package version after release of azure-core (#33903)
• fee8bcf Update samples (#33815)
• 3862c65 update release date (#33887)
• e588964 [Core] Update async auth policy lock logic (#33282)
• Additional commits viewable in compare view

Updates azure-monitor-opentelemetry from 1.1.1 to 1.2.0

Commits

• 47b9c12 [OTel Distro] Reenable CI (#33913)
• 57f22c8 Distro release 1.2.0 (#33870)
• 1f60f54 Upgrade Resource Detector version in Distro (#33866)
• d249cc6 [Monitor Query] Regen with latest swagger (#33752)
• 2219c7d NO_CI mypy required deadline
• 7001c2d azure-monitor-opentelemetry-exporter release 1.0.0b21 (#33865)
• 6483576 Upgrade exporter to OTel 1.21 (#33864)
• cc29b41 Fix siteName casing (#33808)
• 3b1d8be [Monitor] Improve typing in Ingestion and Query (#33718)
• 92f5634 [Monitor] Enable strict sphinx checks (#33719)
• Additional commits viewable in compare view

Updates azure-monitor-opentelemetry-exporter from 1.0.0b19 to 1.0.0b21

Release notes

Sourced from azure-monitor-opentelemetry-exporter's releases.

azure-monitor-opentelemetry-exporter_1.0.0b20

1.0.0b20 (2024-01-04)

Other Changes

• Store global instance of StatsbeatMetric (#33432)
• Shutdown statsbeat on customer getting 400 error code (#33489)
• Track custom events extension in feature statsbeat (#33667)
• Readme examples are updated with correct imports (#33691)

Commits

• 7001c2d azure-monitor-opentelemetry-exporter release 1.0.0b21 (#33865)
• 6483576 Upgrade exporter to OTel 1.21 (#33864)
• cc29b41 Fix siteName casing (#33808)
• 3b1d8be [Monitor] Improve typing in Ingestion and Query (#33718)
• 92f5634 [Monitor] Enable strict sphinx checks (#33719)
• ded240a stats (#33768)
• 7b7cdbc Implement distro detection for statsbeat feature (#33761)
• 9386241 Fix sphinx issues for azure-monitor-opentelemetry and exporter (#33716)
• 9c5bfa1 Create Resource only once for tracing, logging, and metrics (#33698)
• f59768c Increment package version after release of azure-monitor-opentelemetry-export...
• Additional commits viewable in compare view

Updates certifi from 2023.11.17 to 2024.2.2

Commits

• 45eb611 2024.02.02 (#266)
• 83f4f04 fix leaking certificate issue (#265)
• bbf2208 Bump actions/upload-artifact from 4.2.0 to 4.3.0 (#264)
• 9e837a5 Bump actions/upload-artifact from 4.1.0 to 4.2.0 (#262)
• 05d071b Bump actions/upload-artifact from 4.0.0 to 4.1.0 (#261)
• 2a3088a Bump actions/download-artifact from 4.1.0 to 4.1.1 (#260)
• d4ca66e Bump actions/upload-artifact from 3.1.3 to 4.0.0 (#258)
• 5d15663 Bump actions/download-artifact from 3.0.2 to 4.1.0 (#257)
• d66ef9d Bump actions/setup-python from 4.7.1 to 5.0.0 (#256)
• 8f0d412 Bump pypa/gh-action-pypi-publish from 1.8.10 to 1.8.11 (#255)
• Additional commits viewable in compare view

Updates cryptography from 41.0.7 to 42.0.2

Changelog

Sourced from cryptography's changelog.

42.0.2 - 2024-01-30

* Updated Windows, macOS, and Linux wheels to be compiled with OpenSSL 3.2.1.
* Fixed an issue that prevented the use of Python buffer protocol objects in
  ``sign`` and ``verify`` methods on asymmetric keys.
* Fixed an issue with incorrect keyword-argument naming with ``EllipticCurvePrivateKey``
  :meth:`~cryptography.hazmat.primitives.asymmetric.ec.EllipticCurvePrivateKey.exchange`,
  ``X25519PrivateKey``
  :meth:`~cryptography.hazmat.primitives.asymmetric.x25519.X25519PrivateKey.exchange`,
  ``X448PrivateKey``
  :meth:`~cryptography.hazmat.primitives.asymmetric.x448.X448PrivateKey.exchange`,
  and ``DHPrivateKey``
  :meth:`~cryptography.hazmat.primitives.asymmetric.dh.DHPrivateKey.exchange`.
.. _v42-0-1:
42.0.1 - 2024-01-24

• Fixed an issue with incorrect keyword-argument naming with EllipticCurvePrivateKey :meth:~cryptography.hazmat.primitives.asymmetric.ec.EllipticCurvePrivateKey.sign.
• Resolved compatibility issue with loading certain RSA public keys in :func:~cryptography.hazmat.primitives.serialization.load_pem_public_key.

.. _v42-0-0:

42.0.0 - 2024-01-22

* **BACKWARDS INCOMPATIBLE:** Dropped support for LibreSSL < 3.7.
* **BACKWARDS INCOMPATIBLE:** Loading a PKCS7 with no content field using
  :func:`~cryptography.hazmat.primitives.serialization.pkcs7.load_pem_pkcs7_certificates`
  or
  :func:`~cryptography.hazmat.primitives.serialization.pkcs7.load_der_pkcs7_certificates`
  will now raise a ``ValueError`` rather than return an empty list.
* Parsing SSH certificates no longer permits malformed critical options with
  values, as documented in the 41.0.2 release notes.
* Updated Windows, macOS, and Linux wheels to be compiled with OpenSSL 3.2.0.
* Updated the minimum supported Rust version (MSRV) to 1.63.0, from 1.56.0.
* We now publish both ``py37`` and ``py39`` ``abi3`` wheels. This should
  resolve some errors relating to initializing a module multiple times per
  process.
* Support :class:`~cryptography.hazmat.primitives.asymmetric.padding.PSS` for
  X.509 certificate signing requests and certificate revocation lists with the
  keyword-only argument ``rsa_padding`` on the ``sign`` methods for
  :class:`~cryptography.x509.CertificateSigningRequestBuilder` and
  :class:`~cryptography.x509.CertificateRevocationListBuilder`.
* Added support for obtaining X.509 certificate signing request signature
  algorithm parameters (including PSS) via
</tr></table> 

... (truncated)

Commits

• 2202123 changelog and version bump 42.0.2 (#10268)
• f7032bd bump openssl in CI (#10298) (#10299)
• 002e886 Fixes #10294 -- correct accidental change to exchange kwarg (#10295) (#10296)
• 92fa9f2 support bytes-like consistently across our asym sign/verify APIs (#10260) (#1...
• 6478f7e explicitly support bytes-like for signature/data in RSA sign/verify (#10259) ...
• 4bb8596 fix the release script (#10233) (#10254)
• 337437d 42.0.1 bump (#10252)
• 56255de allow SPKI RSA keys to be parsed even if they have an incorrect delimiter (#1...
• 12f038b fixes #10237 -- correct EC sign parameter name (#10239) (#10240)
• 4e64baf 42.0.0 version bump (#10232)
• Additional commits viewable in compare view

Updates distro from 1.8.0 to 1.9.0

Release notes

Sourced from distro's releases.

v1.9.0

ENHANCEMENTS:

• Refactor distro.info() method to return an InfoDict [#360]
• Ignore the file /etc/board-release [#353]
• Ignore the file /etc/ec2_version [#359]

RELEASE:

• Run Python 3.6 on Ubuntu 20.04 for CI and bump isort [#355]

TESTS:

• Test on modern versions of CPython and PyPy and macOS [#362]
• Add support for ALT Linux Server 10.1 distribution [#354]
• Add Debian Testing to the tests [#356]
• Update ArchLinux resource for tests [#352]

Changelog

Sourced from distro's changelog.

1.9.0 (2023.12.19)

ENHANCEMENTS:

• Refactor distro.info() method to return an InfoDict [#360]
• Ignore the file '/etc/board-release' [#353]
• Ignore the file '/etc/ec2_version' [#359]

RELEASE:

• Run Python 3.6 on Ubuntu 20.04 for CI and bump isort [#355]

TESTS:

• Test on modern versions of CPython and PyPy and macOS [#362]
• Add support for ALT Linux Server 10.1 distribution [#354]
• Add Debian Testing to the tests [#356]
• Update archlinux resource for tests [#352]

Commits

• 8d88a2d Optimize some repo metastuff and prepare v1.9.0 (#364)
• 95ffcb6 Actions(deps): Bump actions/setup-python from 4 to 5 (#363)
• 6a487e9 Test on modern versions of CPython and PyPy and macOS (#362)
• 6ce9eb6 Actions(deps): Bump actions/checkout from 3 to 4 (#361)
• 2804e55 Refactor distro.info() method to return an InfoDict (#360)
• c443f12 Ignore the file '/etc/ec2_version'
• 59e6e07 Add Debian Testing to the tests (#356)
• 5fc214c Ignore the file '/etc/board-release' (#353)
• 40ecdd9 Add support for ALT Linux Server 10.1 distribution (#354)
• 16ae9cb Run Python 3.6 on Ubuntu 20.04 for CI and bump isort (#355)
• Additional commits viewable in compare view

Updates fixedint from 0.1.6 to 0.2.0

Changelog

Sourced from fixedint's changelog.

v0.2.0, 2020-09-16: Add type hints (GH #4) Removed the broken MutableFixedInt.itruediv Added base argument to FixedInt constructor

Commits

• c6f9439 Version bump to v0.2.0
• 035bdca Add py.typed and .pyi files to setup.py
• b25aadc Documentation updates
• 418c239 Add type hints. Fixes #4.
• d2dbd20 Remove MutableFixedInt.itruediv (doesn't make sense), add base argument t...
• See full diff in compare view

Updates flask from 3.0.0 to 3.0.2

Release notes

Sourced from flask's releases.

3.0.2

This is a fix release for the 3.0.x feature release branch. It fixes bugs but does not otherwise change behavior and should not result in breaking changes.

• Changes: https://flask.palletsprojects.com/en/3.0.x/changes/#version-3.0.2
• Milestone: https://github.com/pallets/flask/milestone/34?closed=1
• PyPI: https://pypi.org/project/Flask/3.0.2/

3.0.1

This is a fix release for the 3.0.x feature release branch.

Fixes an issue where using other JSON providers, such as flask-orjson, previously caused loaded session data to have an incorrect format in some cases.

• Changes: https://flask.palletsprojects.com/en/3.0.x/changes/#version-3-0-1
• Milestone: https://github.com/pallets/flask/milestone/32?closed=1
• PyPI: https://pypi.org/project/Flask/3.0.1/

Changelog

Sourced from flask's changelog.

Version 3.0.2

Released 2024-02-03

• Correct type for jinja_loader property. :issue:5388
• Fix error with --extra-files and --exclude-patterns CLI options. :issue:5391

Version 3.0.1

Released 2024-01-18

• Correct type for path argument to send_file. :issue:5230
• Fix a typo in an error message for the flask run --key option. :pr:5344
• Session data is untagged without relying on the built-in json.loads object_hook. This allows other JSON providers that don't implement that. :issue:5381
• Address more type findings when using mypy strict mode. :pr:5383

Commits

• d203059 release version 3.0.2
• d7209a9 fix super call in list comprehension (#5393)
• 1af8f95 fix super call in list comprehension
• 3435d2f Fix jinja_loader typehint (#5389)
• ecc057d fix jinja_loader annotation
• 3207af8 start version 3.0.2
• 233be7a release version 3.0.1 (#5386)
• f622b1c release version 3.0.1
• 5fcc999 fix create release action
• da3a0dd fix slsa generator version
• Additional commits viewable in compare view

Updates frozenlist from 1.4.0 to 1.4.1

Release notes

Sourced from frozenlist's releases.

1.4.1

Packaging updates and notes for downstreams

• Declared Python 3.12 and PyPy 3.8-3.10 supported officially in the distribution package metadata.

  Related issues and pull requests on GitHub: #553.

• Replaced the packaging is replaced from an old-fashioned :file:setup.py to an in-tree :pep:517 build backend -- by :user:webknjaz.

  Whenever the end-users or downstream packagers need to build frozenlist from source (a Git checkout or an sdist), they may pass a config_settings flag pure-python. If this flag is not set, a C-extension will be built and included into the distribution.

  Here is how this can be done with pip:

  .. code-block:: console

  $ python3 -m pip install . --config-settings=pure-python=
  

  This will also work with -e | --editable.

  The same can be achieved via pypa/build:

  .. code-block:: console

  $ python3 -m build --config-setting=pure-python=
  

  Adding -w | --wheel can force pypa/build produce a wheel from source directly, as opposed to building an sdist and then building from it.

  Related issues and pull requests on GitHub: #560.

Contributor-facing changes

• It is now possible to request line tracing in Cython builds using the with-cython-tracing :pep:517 config setting -- :user:webknjaz.

  This can be used in CI and development environment to measure coverage on Cython modules, but is not normally useful to the end-users or

... (truncated)

Changelog

Sourced from frozenlist's changelog.

1.4.1 (2023-12-15)

Packaging updates and notes for downstreams

• Declared Python 3.12 and PyPy 3.8-3.10 supported officially in the distribution package metadata.

  Related issues and pull requests on GitHub: :issue:553.

• Replaced the packaging is replaced from an old-fashioned :file:setup.py to an in-tree :pep:517 build backend -- by :user:webknjaz.

  Whenever the end-users or downstream packagers need to build frozenlist from source (a Git checkout or an sdist), they may pass a config_settings flag pure-python. If this flag is not set, a C-extension will be built and included into the distribution.

  Here is how this can be done with pip:

  .. code-block:: console

  $ python3 -m pip install . --config-settings=pure-python=
  

  This will also work with -e | --editable.

  The same can be achieved via pypa/build:

  .. code-block:: console

  $ python3 -m build --config-setting=pure-python=
  

  Adding -w | --wheel can force pypa/build produce a wheel from source directly, as opposed to building an sdist and then building from it.

  Related issues and pull requests on GitHub: :issue:560.

Contributor-facing changes

• It is now possible to request line tracing in Cython builds using the with-cython-tracing :pep:517 config setting -- :user:webknjaz.

... (truncated)

Commits

• 457b28e ⇪📦 Bump to v1.4.1
• 4998859 📝 Mark "dev" as a known word
• 3d740da ⇪📦 Bump to v1.4.1.dev0
• d92751c 🧪 Cache pre-commit.com virtualenvs @ CI
• 7394415 🧪🐛 List explicit MyPy coverage.xml paths @ CI
• a26ba84 🧪 Update codecov action input to plural files
• e12ecf6 🧪 Upload MyPy coverage to Codecov
• 59b9a74 🐛🧪 Fix the operator in test_lt
• 01720b2 🧪 Keep building macosx_x86_64 wheels for tests
• d9f5e0c 🧪💅 Add a reusable project name var to CI/CD
• Additional commits viewable in compare view

Updates httpx from 0.25.2 to 0.26.0

Release notes

Sourced from httpx's releases.

Version 0.26.0

0.26.0 (20th December, 2023)

Added

• The proxy argument was added. You should use the proxy argument instead of the deprecated proxies, or use mounts= for more complex configurations. (#2879)

Deprecated

• The proxies argument is now deprecated. It will still continue to work, but it will be removed in the future. (#2879)

Fixed

• Fix cases of double escaping of URL path components. Allow / as a safe character in the query portion. (#2990)
• Handle NO_PROXY envvar cases when a fully qualified URL is supplied as the value. (#2741)
• Allow URLs where username or password contains unescaped '@'. (#2986)
• Ensure ASGI raw_path does not include URL query component. (#2999)
• Ensure Response.iter_text() cannot yield empty strings. (#2998)

Changelog

Sourced from httpx's changelog.

0.26.0 (20th December, 2023)

Added

• The proxy argument was added. You should use the proxy argument instead of the deprecated proxies, or use mounts= for more complex configurations. (#2879)

Deprecated

• The proxies argument is now deprecated. It will still continue to work, but it will be removed in the future. (#2879)

Fixed

• Fix cases of double escaping of URL path components. Allow / as a safe character in the query portion. (#2990)
• Handle NO_PROXY envvar cases when a fully qualified URL is supplied as the value. (#2741)
• Allow URLs where username or password contains unescaped '@'. (#2986)
• Ensure ASGI raw_path does not include URL query component. (#2999)
• Ensure Response.iter_text() cannot yield empty strings. (#2998)

Commits

• 08eff92 Version 0.26.0 (#3009)
• b4b27ff Remove unused curio check (#3010)
• a11fc38 Cleanup URL percent-encoding behavior. (#2990)
• 3b9060e Fix environment proxies (#2741)
• 2318fd8 Enabling ruff C416 (#3001)
• 2c51edd Update CHANGELOG.md (#3000)
• 1e11096 Fixed iter_text adding an empty string (#2998)
• 90538a3 Ensure that ASGI 'raw_path' does not include query component of URL. (#2999)
• f8981f3 Add the 'proxy' parameter and deprecate 'proxies'. (#2879)
• b471f01 Allow URLs where username or password contains unescaped '@'. (#2986)
• Additional commits viewable in compare view

Updates hypercorn from 0.15.0 to 0.16.0

Changelog

Sourced from hypercorn's changelog.

0.16.0 2024-01-01

• Add a max keep alive requests configuration option, this mitigates the HTTP/2 rapid reset attack.
• Return subprocess exit code if non-zero.
• Add ProxyFix middleware to make it easier to run Hypercorn behind a proxy.
• Support restarting workers after max requests to make it easier to manage memory leaks in apps.
• Bugfix ensure the idle task is stopped on error.
• Bugfix revert autoreload error because reausing old sockets.
• Bugfix send the hinted error from h11 on RemoteProtocolErrors.
• Bugfix handle asyncio.CancelledError when socket is closed without flushing.
• Bugfix improve WSGI compliance by closing iterators, only sending headers on first response byte, erroring if start_response is not called, and switching wsgi.errors to stdout.
• Don't error on LocalProtoclErrors for ws streams to better cope with race conditions.

Commits

• f8e4e5d Bump and release 0.16.0
• 0bb4fb9 Don't error on LocalProtoclErrors for ws streams
• 7c39c68 Support restarting workers after max requests
• c0468e5 Remove old warning

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.