Bump the python-requirements group with 65 updates

[dependabot]

Bumps the python-requirements group with 65 updates:

Package	From	To
aiohttp	3.9.1	3.9.3
anyio	3.7.1	4.3.0
asgiref	3.7.2	3.8.1
attrs	23.1.0	23.2.0
azure-core	1.29.5	1.30.1
azure-monitor-opentelemetry	1.1.1	1.3.0
azure-monitor-opentelemetry-exporter	1.0.0b19	1.0.0b24
azure-storage-blob	12.19.0	12.19.1
certifi	2023.11.17	2024.2.2
cryptography	41.0.7	42.0.5
distro	1.8.0	1.9.0
fixedint	0.1.6	0.2.0
flask	3.0.0	3.0.3
frozenlist	1.4.0	1.4.1
httpcore	1.0.2	1.0.5
httpx	0.25.2	0.27.0
hypercorn	0.15.0	0.16.0
importlib-metadata	6.11.0	7.1.0
jinja2	3.1.2	3.1.3
markupsafe	2.1.3	2.1.5
msal	1.26.0	1.28.0
msal-extensions	1.0.0	1.1.0
multidict	6.0.4	6.0.5
numpy	1.26.2	1.26.4
openai[datalib]	1.3.7	1.16.2
opentelemetry-api	1.21.0	1.24.0
opentelemetry-instrumentation	0.42b0	0.45b0
opentelemetry-instrumentation-aiohttp-client	0.42b0	0.45b0
opentelemetry-instrumentation-asgi	0.42b0	0.45b0
opentelemetry-instrumentation-dbapi	0.42b0	0.45b0
opentelemetry-instrumentation-django	0.42b0	0.45b0
opentelemetry-instrumentation-fastapi	0.42b0	0.45b0
opentelemetry-instrumentation-flask	0.42b0	0.45b0
opentelemetry-instrumentation-httpx	0.42b0	0.45b0
opentelemetry-instrumentation-psycopg2	0.42b0	0.45b0
opentelemetry-instrumentation-requests	0.42b0	0.45b0
opentelemetry-instrumentation-urllib	0.42b0	0.45b0
opentelemetry-instrumentation-urllib3	0.42b0	0.45b0
opentelemetry-instrumentation-wsgi	0.42b0	0.45b0
opentelemetry-resource-detector-azure	0.1.0	0.1.4
opentelemetry-sdk	1.21.0	1.24.0
opentelemetry-semantic-conventions	0.42b0	0.45b0
opentelemetry-util-http	0.42b0	0.45b0
packaging	23.2	24.0
pandas	2.1.3	2.2.1
pandas-stubs	2.1.1.230928	2.2.1.240316
pycparser	2.21	2.22
pydantic	2.5.2	2.6.4
pydantic-core	2.14.5	2.18.0
python-dateutil	2.8.2	2.9.0.post0
pytz	2023.3.post1	2024.1
quart	0.19.4	0.19.5
regex	2023.10.3	2023.12.25
requests-oauthlib	1.3.1	2.0.0
sniffio	1.3.0	1.3.1
tiktoken	0.5.2	0.6.0
tqdm	4.66.1	4.66.2
types-pytz	2023.3.1.1	2024.1.0.20240203
typing-extensions	4.8.0	4.11.0
tzdata	2023.3	2024.1
urllib3	2.1.0	2.2.1
uvicorn	0.24.0.post1	0.29.0
werkzeug	3.0.1	3.0.2
zipp	3.17.0	3.18.1
pypdf	3.17.1	4.2.0

Updates aiohttp from 3.9.1 to 3.9.3

Release notes

Sourced from aiohttp's releases.

3.9.3

Bug fixes

• Fixed backwards compatibility breakage (in 3.9.2) of ssl parameter when set outside of ClientSession (e.g. directly in TCPConnector) -- by :user:Dreamsorcerer.

  Related issues and pull requests on GitHub: #8097, #8098.

Miscellaneous internal changes

• Improved test suite handling of paths and temp files to consistently use pathlib and pytest fixtures.

  Related issues and pull requests on GitHub: #3957.

---

3.9.2

Bug fixes

• Fixed server-side websocket connection leak.

  Related issues and pull requests on GitHub: #7978.

• Fixed web.FileResponse doing blocking I/O in the event loop.

  Related issues and pull requests on GitHub: #8012.

• Fixed double compress when compression enabled and compressed file exists in server file responses.

... (truncated)

Changelog

Sourced from aiohttp's changelog.

3.9.3 (2024-01-29)

Bug fixes

• Fixed backwards compatibility breakage (in 3.9.2) of ssl parameter when set outside of ClientSession (e.g. directly in TCPConnector) -- by :user:Dreamsorcerer.

  Related issues and pull requests on GitHub: :issue:8097, :issue:8098.

Miscellaneous internal changes

• Improved test suite handling of paths and temp files to consistently use pathlib and pytest fixtures.

  Related issues and pull requests on GitHub: :issue:3957.

---

3.9.2 (2024-01-28)

Bug fixes

• Fixed server-side websocket connection leak.

  Related issues and pull requests on GitHub: :issue:7978.

• Fixed web.FileResponse doing blocking I/O in the event loop.

  Related issues and pull requests on GitHub: :issue:8012.

... (truncated)

Commits

• bf4edce Release v3.9.3 (#8102)
• 5637e8f [PR #8098/aca206fc backport][3.9] Fix backwards compatibility with ssl (#8101)
• 33f49e8 Bump pypa/cibuildwheel from 2.16.2 to 2.16.4 (#8092)
• 5ff4b3c Update version
• 94462ee [PR #3957/79fe2045 backport][3.9] Improve test suite handling of paths, temp ...
• 24a6d64 Release v3.9.2 (#8082)
• 9118a58 [PR #8079/1c335944 backport][3.9] Validate static paths (#8080)
• 435ad46 [PR #3955/8960063e backport][3.9] Replace all tmpdir fixtures with tmp_path (...
• d33bc21 Improve validation in HTTP parser (#8074) (#8078)
• 0d945d1 [PR #7916/822fbc74 backport][3.9] Add more information to contributing page (...
• Additional commits viewable in compare view

Updates anyio from 3.7.1 to 4.3.0

Release notes

Sourced from anyio's releases.

4.3.0

• Added support for the Python 3.12 walk_up keyword argument in anyio.Path.relative_to() (PR by Colin Taylor)

• Fixed passing total_tokens to anyio.CapacityLimiter() as a keyword argument not working on the trio backend (#515)

• Fixed Process.aclose() not performing the minimum level of necessary cleanup when cancelled. Previously:

  • Cancellation of Process.aclose() could leak an orphan process
  • Cancellation of run_process() could very briefly leak an orphan process.
  • Cancellation of Process.aclose() or run_process() on Trio could leave standard streams unclosed

  (PR by Ganden Schaffner)

• Fixed Process.stdin.aclose(), Process.stdout.aclose(), and Process.stderr.aclose() not including a checkpoint on asyncio (PR by Ganden Schaffner)

• Fixed documentation on how to provide your own typed attributes

4.2.0

• Add support for byte-based paths in connect_unix, create_unix_listeners, create_unix_datagram_socket, and create_connected_unix_datagram_socket. (PR by Lura Skye)

• Enabled the Event and CapacityLimiter classes to be instantiated outside an event loop thread

• Broadly improved/fixed the type annotations. Among other things, many functions and methods that take variadic positional arguments now make use of PEP 646 TypeVarTuple to allow the positional arguments to be validated by static type checkers. These changes affected numerous methods and functions, including:

  • anyio.run()
  • TaskGroup.start_soon()
  • anyio.from_thread.run()
  • anyio.from_thread.run_sync()
  • anyio.to_thread.run_sync()
  • anyio.to_process.run_sync()
  • BlockingPortal.call()
  • BlockingPortal.start_task_soon()
  • BlockingPortal.start_task()

  (also resolves #560)

• Fixed various type annotations of anyio.Path to match Typeshed:

  • anyio.Path.__lt__()
  • anyio.Path.__le__()
  • anyio.Path.__gt__()
  • anyio.Path.__ge__()
  • anyio.Path.__truediv__()
  • anyio.Path.__rtruediv__()
  • anyio.Path.hardlink_to()
  • anyio.Path.samefile()
  • anyio.Path.symlink_to()
  • anyio.Path.with_segments()

  (PR by Ganden Schaffner)

... (truncated)

Changelog

Sourced from anyio's changelog.

Version history

This library adheres to Semantic Versioning 2.0 <http://semver.org/>_.

UNRELEASED

• Added the BlockingPortalProvider class to aid with constructing synchronous counterparts to asynchronous interfaces that would otherwise require multiple blocking portals
• Fixed erroneous RuntimeError: called 'started' twice on the same task status when cancelling a task in a TaskGroup created with the start() method before the first checkpoint is reached after calling task_status.started() ([#706](https://github.com/agronholm/anyio/issues/706) <https://github.com/agronholm/anyio/issues/706>_; PR by Dominik Schwabe)
• Fixed erroneous TypedAttributeLookupError if a typed attribute getter raises KeyError
• Fixed the asyncio backend not respecting the PYTHONASYNCIODEBUG environment variable when setting the debug flag in anyio.run()
• Fixed SocketStream.receive() not detecting EOF on asyncio if there is also data in the read buffer ([#701](https://github.com/agronholm/anyio/issues/701) <https://github.com/agronholm/anyio/issues/701>_)

4.3.0

• Added support for the Python 3.12 walk_up keyword argument in anyio.Path.relative_to() (PR by Colin Taylor)

• Fixed passing total_tokens to anyio.CapacityLimiter() as a keyword argument not working on the trio backend ([#515](https://github.com/agronholm/anyio/issues/515) <https://github.com/agronholm/anyio/issues/515>_)

• Fixed Process.aclose() not performing the minimum level of necessary cleanup when cancelled. Previously:

  • Cancellation of Process.aclose() could leak an orphan process
  • Cancellation of run_process() could very briefly leak an orphan process.
  • Cancellation of Process.aclose() or run_process() on Trio could leave standard streams unclosed

  (PR by Ganden Schaffner)

• Fixed Process.stdin.aclose(), Process.stdout.aclose(), and Process.stderr.aclose() not including a checkpoint on asyncio (PR by Ganden Schaffner)

• Fixed documentation on how to provide your own typed attributes

4.2.0

• Add support for byte-based paths in connect_unix, create_unix_listeners, create_unix_datagram_socket, and create_connected_unix_datagram_socket. (PR by Lura Skye)
• Enabled the Event and CapacityLimiter classes to be instantiated outside an event loop thread
• Broadly improved/fixed the type annotations. Among other things, many functions and

... (truncated)

Commits

• 437a7e3 Bumped up the version
• 1ce32e5 Updated the upload/download artifact actions
• d39c837 [pre-commit.ci] pre-commit autoupdate (#690)
• ba48ea8 Added the network marker to some tests that need DNS (#687)
• 5426f7b Remove conditionals and workarounds for Python interpreter versions 3.7 and o...
• 7565f31 [pre-commit.ci] pre-commit autoupdate (#684)
• 137de70 Fixed documentation on providing custom typed attributes (#683)
• 8b8806c Fixed typo (#681)
• 1e60219 Fixed run_process() and open_process().__aexit__ leaking an orphan proces...
• 3f14df8 [pre-commit.ci] pre-commit autoupdate (#676)
• Additional commits viewable in compare view

Updates asgiref from 3.7.2 to 3.8.1

Changelog

Sourced from asgiref's changelog.

3.8.1 (2024-03-22)

• Fixes a regression in 3.8.0 affecting nested task cancellation inside sync_to_async.

3.8.0 (2024-03-20)

• Adds support for Python 3.12.

• Drops support for (end-of-life) Python 3.7.

• Fixes task cancellation propagation to subtasks when using synchronous Django middleware.

• Allows nesting sync_to_async via asyncio.wait_for.

• Corrects WSGI adapter handling of root path.

• Handles case where "client" is None in WsgiToAsgi adapter.

Commits

• e38d3c3 Releasing 3.8.1
• 8769434 Raise exception if exec_coro is done.
• 852344e Add tox.ini to MANIFEST.in
• f710647 Fix a rST problem in the pathsend extension documentation
• 4c28385 Releasing 3.8.0
• 4209b6c Correct WSGI adapter handling of root path.
• 8cf847a Update error-on-send text in main spec
• 8108512 Move variable initialization in AsyncToSync from init to call (#440)
• 6f02daa Clarify send error behaviour more clearly
• 0503c2c Fix task cancellation propagation to subtasks when using sync middleware (#435)
• Additional commits viewable in compare view

Updates attrs from 23.1.0 to 23.2.0

Commits

• See full diff in compare view

Updates azure-core from 1.29.5 to 1.30.1

Release notes

Sourced from azure-core's releases.

azure-core_1.30.1

1.30.1 (2024-02-29)

Other Changes

• Accept float for retry_after header. #34203

Commits

• b2a421e port retry-after fix into corehttp (#34536)
• 3d314d8 update release date (#34521)
• 3b099aa move core perf files to azure-core folder (#34441)
• 4694379 [Corehttp] Prepare changelog (#34439)
• 3faad9c accept float "retry-after" (#34253)
• c6876ec [corehttp] use typeguard for HTTPPolicy/SansIOHTTPPolicy check not isinstance...
• 9cda4c0 [corehttp] Misc updates (#34394)
• 143d2ff [Corehttp] Add code snippets to docstrings (#33207)
• 1b2c59c [OTel Plugin] Improve live test coverage (#34323)
• 3bc2067 [OTel plugin] Add new schema version (#34089)
• Additional commits viewable in compare view

Updates azure-monitor-opentelemetry from 1.1.1 to 1.3.0

Release notes

Sourced from azure-monitor-opentelemetry's releases.

azure-monitor-opentelemetry_1.3.0

1.3.0 (2024-02-29)

Features Added

• Add custom span processors configuration option (#34326)

Other Changes

• Update configure_azure_monitor signature and Django sample (#33834)
• Remove support for Python 3.7 (#34252)

Commits

• b299960 Azure Monitor Distro release 1.3.0 (#34537)
• c66e236 Increment package version after release of azure-monitor-opentelemetry-export...
• 6452024 Exporter release 1.0.0b23 (#34512)
• a242171 Update exporter/distro README (#34462)
• 2ceab7c Add metrics namespace opt-in (#34463)
• d91f4aa Implement quickpulse exporting functionality (#34141)
• 56c346a Add aks to statsbeat and prefix (#34427)
• 757f877 Add application.ver to Part A fields for exporter (#34401)
• d3dcf0d Update SDK Version Prefix (#34226)
• 46ab212 [Opentelemetry] Fix link to renamed sample (#34357)
• Additional commits viewable in compare view

Updates azure-monitor-opentelemetry-exporter from 1.0.0b19 to 1.0.0b24

Release notes

Sourced from azure-monitor-opentelemetry-exporter's releases.

azure-monitor-opentelemetry-exporter_1.0.0b24

1.0.0b24 (2024-04-05)

Features Added

• Add live metrics collection of requests/dependencies/exceptions (#34673)
• Add live metrics collection of cpu time/process memory (#34735)
• Add live metrics collection feature detection to statsbeat (#34752)

Breaking Changes

• Rename Statbeat environments variables to use APPLICATIONINSIGHTS_* (#34742)

Bugs Fixed

• Reduce vm metadata service timeout to 200ms (#35039)

Other Changes

• Updated FastAPI sample (#34738)
• Set up branching logic for attach function (#35066)

azure-monitor-opentelemetry-exporter_1.0.0b23

1.0.0b23 (2024-02-28)

Features Added

• Add device.* to part A fields (#34229)
• Add live metrics exporting functionality (#34141)
• Add application.ver to part A fields (#34401)
• Add APPLICATIONINSIGHTS_METRIC_NAMESPACE_OPT_IN (#34463)

Other Changes

• Add attachType character to sdkVersion prefix (#34226)
• Add AKS scenarios to statsbeat metric and sdkVersion prefix (#34427)

Commits

• 85b34b7 changelog (#35088)
• 6dbbc92 Refactor constants (#35066)
• 394dc9a Adding diagnostic log for distro + attach (#34971)
• 78dac20 Change meta data service timeout to 200ms (#35039)
• d0a759e Update README.md (#35004)
• 4ed19c3 Increment package version after release of azure-monitor-query (#35000)
• ab6b74f [Monitor Query] Prepare GA release (#34993)
• ccaf592 [Monitor Query] Update filter docstrings (#34974)
• 65a743b [Monitor-Query] Docstring tweaks (#34972)
• 0527e86 [skip ci] Delete azure-devtools and deps/references
• Additional commits viewable in compare view

Updates azure-storage-blob from 12.19.0 to 12.19.1

Release notes

Sourced from azure-storage-blob's releases.

azure-storage-blob_12.19.1

12.19.1 (2024-03-04)

Bugs Fixed

• Fixed an issue where under rare circumstances, full downloads of sparse Page Blobs could result in the downloaded content containing up to one "chunk" of extra \x00 at the end due to an optimization error.

Commits

• 18e691a [Storage] Prepare hotfix release (#34608)
• See full diff in compare view

Updates certifi from 2023.11.17 to 2024.2.2

Commits

• 45eb611 2024.02.02 (#266)
• 83f4f04 fix leaking certificate issue (#265)
• bbf2208 Bump actions/upload-artifact from 4.2.0 to 4.3.0 (#264)
• 9e837a5 Bump actions/upload-artifact from 4.1.0 to 4.2.0 (#262)
• 05d071b Bump actions/upload-artifact from 4.0.0 to 4.1.0 (#261)
• 2a3088a Bump actions/download-artifact from 4.1.0 to 4.1.1 (#260)
• d4ca66e Bump actions/upload-artifact from 3.1.3 to 4.0.0 (#258)
• 5d15663 Bump actions/download-artifact from 3.0.2 to 4.1.0 (#257)
• d66ef9d Bump actions/setup-python from 4.7.1 to 5.0.0 (#256)
• 8f0d412 Bump pypa/gh-action-pypi-publish from 1.8.10 to 1.8.11 (#255)
• Additional commits viewable in compare view

Updates cryptography from 41.0.7 to 42.0.5

Changelog

Sourced from cryptography's changelog.

42.0.5 - 2024-02-23

* Limit the number of name constraint checks that will be performed in
  :mod:`X.509 path validation <cryptography.x509.verification>` to protect
  against denial of service attacks.
* Upgrade ``pyo3`` version, which fixes building on PowerPC.
.. _v42-0-4:
42.0.4 - 2024-02-20

• Fixed a null-pointer-dereference and segfault that could occur when creating a PKCS#12 bundle. Credit to Alexander-Programming for reporting the issue. CVE-2024-26130
• Fixed ASN.1 encoding for PKCS7/SMIME signed messages. The fields SMIMECapabilities and SignatureAlgorithmIdentifier should now be correctly encoded according to the definitions in :rfc:2633 :rfc:3370.

.. _v42-0-3:

42.0.3 - 2024-02-15

* Fixed an initialization issue that caused key loading failures for some
  users.
.. _v42-0-2:
42.0.2 - 2024-01-30

• Updated Windows, macOS, and Linux wheels to be compiled with OpenSSL 3.2.1.
• Fixed an issue that prevented the use of Python buffer protocol objects in sign and verify methods on asymmetric keys.
• Fixed an issue with incorrect keyword-argument naming with EllipticCurvePrivateKey :meth:~cryptography.hazmat.primitives.asymmetric.ec.EllipticCurvePrivateKey.exchange, X25519PrivateKey :meth:~cryptography.hazmat.primitives.asymmetric.x25519.X25519PrivateKey.exchange, X448PrivateKey :meth:~cryptography.hazmat.primitives.asymmetric.x448.X448PrivateKey.exchange, and DHPrivateKey :meth:~cryptography.hazmat.primitives.asymmetric.dh.DHPrivateKey.exchange.

.. _v42-0-1:

42.0.1 - 2024-01-24

</tr></table> 

... (truncated)

Commits

• 33833f0 Release 42.0.5 (#10470)
• 4be53bf Added a budget for NC checks to protect against DoS (#10467) (#10468)
• 8e9de30 Bump pyo3 from 0.20.2 to 0.20.3 in /src/rust (#10462) (#10465)
• fe18470 Bump for 42.0.4 release (#10445)
• aaa2dd0 Fix ASN.1 issues in PKCS#7 and S/MIME signing (#10373) (#10442)
• 7a4d012 Fixes #10422 -- don't crash when a PKCS#12 key and cert don't match (#10423) ...
• df314bb backport actions m1 switch to 42.0.x (#10415)
• c49a7a5 changelog and version bump for 42.0.3 (#10396)
• 396bcf6 fix provider loading take two (#10390) (#10395)
• 0e0e46f backport: initialize openssl's legacy provider in rust (#10323) (#10333)
• Additional commits viewable in compare view

Updates distro from 1.8.0 to 1.9.0

Release notes

Sourced from distro's releases.

v1.9.0

ENHANCEMENTS:

• Refactor distro.info() method to return an InfoDict [#360]
• Ignore the file /etc/board-release [#353]
• Ignore the file /etc/ec2_version [#359]

RELEASE:

• Run Python 3.6 on Ubuntu 20.04 for CI and bump isort [#355]

TESTS:

• Test on modern versions of CPython and PyPy and macOS [#362]
• Add support for ALT Linux Server 10.1 distribution [#354]
• Add Debian Testing to the tests [#356]
• Update ArchLinux resource for tests [#352]

Changelog

Sourced from distro's changelog.

1.9.0 (2023.12.19)

ENHANCEMENTS:

• Refactor distro.info() method to return an InfoDict [#360]
• Ignore the file '/etc/board-release' [#353]
• Ignore the file '/etc/ec2_version' [#359]

RELEASE:

• Run Python 3.6 on Ubuntu 20.04 for CI and bump isort [#355]

TESTS:

• Test on modern versions of CPython and PyPy and macOS [#362]
• Add support for ALT Linux Server 10.1 distribution [#354]
• Add Debian Testing to the tests [#356]
• Update archlinux resource for tests [#352]

Commits

• 8d88a2d Optimize some repo metastuff and prepare v1.9.0 (#364)
• 95ffcb6 Actions(deps): Bump actions/setup-python from 4 to 5 (#363)
• 6a487e9 Test on modern versions of CPython and PyPy and macOS (#362)
• 6ce9eb6 Actions(deps): Bump actions/checkout from 3 to 4 (#361)
• 2804e55 Refactor distro.info() method to return an InfoDict (#360)
• c443f12 Ignore the file '/etc/ec2_version'
• 59e6e07 Add Debian Testing to the tests (#356)
• 5fc214c Ignore the file '/etc/board-release' (#353)
• 40ecdd9 Add support for ALT Linux Server 10.1 distribution (#354)
• 16ae9cb Run Python 3.6 on Ubuntu 20.04 for CI and bump isort (#355)
• Additional commits viewable in compare view

Updates fixedint from 0.1.6 to 0.2.0

Changelog

Sourced from fixedint's changelog.

v0.2.0, 2020-09-16: Add type hints (GH #4) Removed the broken MutableFixedInt.itruediv Added base argument to FixedInt constructor

Commits

• c6f9439 Version bump to v0.2.0
• 035bdca Add py.typed and .pyi files to setup.py
• b25aadc Documentation updates
• 418c239 Add type hints. Fixes #4.
• d2dbd20 Remove MutableFixedInt.itruediv (doesn't make sense), add base argument t...
• See full diff in compare view

Updates flask from 3.0.0 to 3.0.3

Release notes

Sourced from flask's releases.

3.0.3

This is a fix release for the 3.0.x feature branch.

PyPI: https://pypi.org/project/Flask/3.0.3/ Changes: https://flask.palletsprojects.com/en/3.0.x/changes/#version-3-0-3 Milestone: https://github.com/pallets/flask/milestone/35?closed=1

• The default hashlib.sha1 may not be available in FIPS builds. Don't access it at import time so the developer has time to change the default. #5448
• Don't initialize the cli attribute in the sansio scaffold, but rather in the Flask concrete class. #5270

3.0.2

This is a fix release for the 3.0.x feature release branch. It fixes bugs but does not otherwise change behavior and should not result in breaking changes.

• Changes: https://flask.palletsprojects.com/en/3.0.x/changes/#version-3.0.2
• Milestone: https://github.com/pallets/flask/milestone/34?closed=1
• PyPI: https://pypi.org/project/Flask/3.0.2/

3.0.1

This is a fix release for the 3.0.x feature release branch.

Fixes an issue where using other JSON providers, such as flask-orjson, previously caused loaded session data to have an incorrect format in some cases.

• Changes: https://flask.palletsprojects.com/en/3.0.x/changes/#version-3-0-1
• Milestone: https://github.com/pallets/flask/milestone/32?closed=1
• PyPI: https://pypi.org/project/Flask/3.0.1/

Changelog

Sourced from flask's changelog.

Version 3.0.3

Released 2024-04-07

• The default hashlib.sha1 may not be available in FIPS builds. Don't access it at import time so the developer has time to change the default. :issue:5448
• Don't initialize the cli attribute in the sansio scaffold, but rather in the Flask concrete class. :pr:5270

Version 3.0.2

Released 2024-02-03

• Correct type for jinja_loader property. :issue:5388
• Fix error with --extra-files and --exclude-patterns CLI options. :issue:5391

Version 3.0.1

Released 2024-01-18

• Correct type for path argument to send_file. :issue:5230
• Fix a typo in an error message for the flask run --key option. :pr:5344
• Session data is untagged without relying on the built-in json.loads object_hook. This allows other JSON providers that don't implement that. :issue:5381
• Address more type findings when using mypy strict mode. :pr:5383

Commits

• c12a5d8 release version 3.0.3
• 5e22cc9 Don't set the cli attribute in the sansio scaffold (#5270)
• 5fdce4c Don't set the cli attribute in the sansio scaffold
• adb7dd9 don't access app.logger when configuring app.logger
• b739390 support FIPS builds without SHA-1 (#5460)
• db46111 access sha1 lazily
• 7320e31 start version 3.0.3
• 87d5f5b update project files (#5457)
• d5e321b release version 3.0.2 (#5403)
• d203059 release version 3.0.2
• Additional commits viewable in compare view

Updates frozenlist from 1.4.0 to 1.4.1

Release notes

Sourced from frozenlist's releases.

1.4.1

Packaging updates and notes for downstreams

• Declared Python 3.12 and PyPy 3.8-3.10 supported officially in the distribution package metadata.

  Related issues and pull requests on GitHub: #553.

• Replaced the packaging is replaced from an old-fashioned :file:setup.py to an in-tree :pep:517 build backend -- by :user:webknjaz.

  Whenever the end-users or downstream packagers need to build frozenlist from source (a Git checkout or an sdist), they may pass a config_settings flag pure-python. If this flag is not set, a C-extension will be built and included into the distribution.

  Here is how this can be done with pip:

  .. code-block:: console

  $ python3 -m pip install . --config-settings=pure-python=
  

  This will also work with -e | --editable.

  The same can be achieved via pypa/build:

  .. code-block:: console

  $ python3 -m build --config-setting=pure-python=
  

  Adding -w | --wheel can force pypa/build produce a wheel from source directly, as opposed to building an sdist and then building from it.

  Related issues and pull requests on GitHub: #560.

Contributor-facing changes

• It is now possible to request line tracing in Cython builds using the with-cython-tracing :pep:517 config setting -- :user:webknjaz.

  This can be used in CI and development environment to measure coverage on Cython modules, but is not normally useful to the end-users or

... (truncated)

Changelog

Sourced from frozenlist's changelog.

1.4.1 (2023-12-15)

Packaging updates and notes for downstreams

• Declared Python 3.12 and PyPy 3.8-3.10 supported officially in the distribution package metadata.

  Related issues and pull requests on GitHub: :issue:553.

• Replaced the packaging is replaced from an old-fashioned :file:setup.py to an in-tree :pep:517 build backend -- by :user:webknjaz.

  Whenever the end-users or downstream packagers need to build frozenlist from source (a Git checkout or an sdist), they may pass a config_settings flag pure-python. If this flag is not set, a C-extension will be built and included into the distribution.

  Here is how this can be done with pip:

  .. code-block:: console

  $ python3 -m pip install . --config-settings=pure-python=
  

  This will also work with -e | --editable.

  The same can be achieved via pypa/build:

  .. code-block:: console

  $ python3 -m build --config-setting=pure-python=
  

  Adding -w | --wheel can force pypa/build produce a wheel from source directly, as opposed to building an sdist and then building from it.

  Related issues and pull requests on GitHub: :issue:560.

Contributor-facing changes

• It is now possible to request line tracing in Cython builds using the with-cython-tracing :pep:517 config setting -- :user:webknjaz.

... (truncated)

Commits

• 457b28e ⇪📦 Bump to v1.4.1
• 4998859 📝 Mark "dev" as a known word
• 3d740da ⇪📦 Bump to v1.4.1.dev0
• d92751c 🧪 Cache pre-commit.com virtualenvs @ CI
• 7394415 🧪🐛 List explicit MyPy coverage.xml paths @ CI
• a26ba84 🧪 Update codecov action input to plural files
• e12ecf6 🧪 Upload MyPy coverage to Codecov
• 59b9a74 🐛🧪 Fix the operator in test_lt
• 01720b2 🧪 Keep building macosx_x86_64 wheels for tests
• d9f5e0c 🧪💅 Add a reusable project name var to CI/CD
• Additional commits viewable in compare view

Updates httpcore from 1.0.2 to 1.0.5

Release notes

Sourced from httpcore's releases.

Version 1.0.5

1.0.5 (March 27th, 2024)

• Handle EndOfStream for anyio backend. (encode/httpcore#899)
• Allow trio 0.25.* series in package dependancies. ...

  Description has been truncated

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.