Bump the python-requirements group across 1 directory with 72 updates

[dependabot]

Bumps the python-requirements group with 72 updates in the / directory:

Package	From	To
aiohttp	3.9.1	3.9.5
anyio	3.7.1	4.3.0
asgiref	3.7.2	3.8.1
attrs	23.1.0	23.2.0
azure-core	1.29.5	1.30.1
azure-identity	1.15.0	1.16.0
azure-monitor-opentelemetry	1.1.1	1.4.2
azure-monitor-opentelemetry-exporter	1.0.0b19	1.0.0b25
azure-storage-blob	12.19.0	12.20.0
blinker	1.7.0	1.8.2
certifi	2023.11.17	2024.2.2
cryptography	41.0.7	42.0.7
distro	1.8.0	1.9.0
fixedint	0.1.6	0.2.0
flask	3.0.0	3.0.3
frozenlist	1.4.0	1.4.1
httpcore	1.0.2	1.0.5
httpx	0.25.2	0.27.0
hypercorn	0.15.0	0.16.0
idna	3.6	3.7
importlib-metadata	6.11.0	7.1.0
itsdangerous	2.1.2	2.2.0
jinja2	3.1.2	3.1.4
markupsafe	2.1.3	2.1.5
msal	1.26.0	1.28.0
msal-extensions	1.0.0	1.1.0
multidict	6.0.4	6.0.5
numpy	1.26.2	1.26.4
openai[datalib]	1.3.7	1.30.1
opentelemetry-api	1.21.0	1.24.0
opentelemetry-instrumentation	0.42b0	0.45b0
opentelemetry-instrumentation-aiohttp-client	0.42b0	0.45b0
opentelemetry-instrumentation-asgi	0.42b0	0.45b0
opentelemetry-instrumentation-dbapi	0.42b0	0.45b0
opentelemetry-instrumentation-django	0.42b0	0.45b0
opentelemetry-instrumentation-fastapi	0.42b0	0.45b0
opentelemetry-instrumentation-flask	0.42b0	0.45b0
opentelemetry-instrumentation-httpx	0.42b0	0.45b0
opentelemetry-instrumentation-psycopg2	0.42b0	0.45b0
opentelemetry-instrumentation-requests	0.42b0	0.45b0
opentelemetry-instrumentation-urllib	0.42b0	0.45b0
opentelemetry-instrumentation-urllib3	0.42b0	0.45b0
opentelemetry-instrumentation-wsgi	0.42b0	0.45b0
opentelemetry-resource-detector-azure	0.1.0	0.1.5
opentelemetry-sdk	1.21.0	1.24.0
opentelemetry-semantic-conventions	0.42b0	0.45b0
opentelemetry-util-http	0.42b0	0.45b0
packaging	23.2	24.0
pandas	2.1.3	2.2.2
pandas-stubs	2.1.1.230928	2.2.2.240514
pycparser	2.21	2.22
pydantic	2.5.2	2.7.1
pydantic-core	2.14.5	2.18.2
python-dateutil	2.8.2	2.9.0.post0
pytz	2023.3.post1	2024.1
quart	0.19.4	0.19.6
regex	2023.10.3	2024.5.15
requests-oauthlib	1.3.1	2.0.0
sniffio	1.3.0	1.3.1
tiktoken	0.5.2	0.7.0
tqdm	4.66.1	4.66.4
types-pytz	2023.3.1.1	2024.1.0.20240417
typing-extensions	4.8.0	4.11.0
tzdata	2023.3	2024.1
urllib3	2.1.0	2.2.1
uvicorn	0.24.0.post1	0.29.0
werkzeug	3.0.1	3.0.3
zipp	3.17.0	3.18.2
azure-ai-formrecognizer	3.3.2	3.3.3
azure-storage-file-datalake	12.14.0	12.15.0
pypdf	3.17.1	4.2.0
tenacity	8.2.3	8.3.0

Updates aiohttp from 3.9.1 to 3.9.5

Release notes

Sourced from aiohttp's releases.

3.9.5

Bug fixes

• Fixed "Unclosed client session" when initialization of :py:class:~aiohttp.ClientSession fails -- by :user:NewGlad.

  Related issues and pull requests on GitHub: #8253.

• Fixed regression (from :pr:8280) with adding Content-Disposition to the form-data part after appending to writer -- by :user:Dreamsorcerer/:user:Olegt0rr.

  Related issues and pull requests on GitHub: #8332.

• Added default Content-Disposition in multipart/form-data responses to avoid broken form-data responses -- by :user:Dreamsorcerer.

  Related issues and pull requests on GitHub: #8335.

---

3.9.4

Bug fixes

• The asynchronous internals now set the underlying causes when assigning exceptions to the future objects -- by :user:webknjaz.

  Related issues and pull requests on GitHub: #8089.

• Treated values of Accept-Encoding header as case-insensitive when checking for gzip files -- by :user:steverep.

... (truncated)

Changelog

Sourced from aiohttp's changelog.

3.9.5 (2024-04-16)

Bug fixes

• Fixed "Unclosed client session" when initialization of :py:class:~aiohttp.ClientSession fails -- by :user:NewGlad.

  Related issues and pull requests on GitHub: :issue:8253.

• Fixed regression (from :pr:8280) with adding Content-Disposition to the form-data part after appending to writer -- by :user:Dreamsorcerer/:user:Olegt0rr.

  Related issues and pull requests on GitHub: :issue:8332.

• Added default Content-Disposition in multipart/form-data responses to avoid broken form-data responses -- by :user:Dreamsorcerer.

  Related issues and pull requests on GitHub: :issue:8335.

---

3.9.4 (2024-04-11)

Bug fixes

• The asynchronous internals now set the underlying causes when assigning exceptions to the future objects -- by :user:webknjaz.

  Related issues and pull requests on GitHub: :issue:8089.

... (truncated)

Commits

• b844d42 Release v3.9.5 (#8340)
• 0415a4c Patchback/backports/3.9/5fd29467fb63efdfae1ace280cec36b1f8139567/pr 8290 (#8311)
• f21c6f2 [PR #8335/5a6949da backport][3.9] Add Content-Disposition automatically (#8336)
• 7eecdff [PR #8332/482e6cdf backport][3.9] Add set_content_disposition test (#8333)
• 82fbe64 [PR #8324/4a8fd08b backport][3.9] Add missing changelogs (#8330)
• 01df7ec Bump version
• 7917ae2 Merge 3.1
• b3397c7 Release v3.9.4 (#8201)
• a7e240a [PR #8320/9ba9a4e5 backport][3.9] Fix Python parser to mark responses without...
• 2833552 Escape filenames and paths in HTML when generating index pages (#8317) (#8319)
• Additional commits viewable in compare view

Updates anyio from 3.7.1 to 4.3.0

Release notes

Sourced from anyio's releases.

4.3.0

• Added support for the Python 3.12 walk_up keyword argument in anyio.Path.relative_to() (PR by Colin Taylor)

• Fixed passing total_tokens to anyio.CapacityLimiter() as a keyword argument not working on the trio backend (#515)

• Fixed Process.aclose() not performing the minimum level of necessary cleanup when cancelled. Previously:

  • Cancellation of Process.aclose() could leak an orphan process
  • Cancellation of run_process() could very briefly leak an orphan process.
  • Cancellation of Process.aclose() or run_process() on Trio could leave standard streams unclosed

  (PR by Ganden Schaffner)

• Fixed Process.stdin.aclose(), Process.stdout.aclose(), and Process.stderr.aclose() not including a checkpoint on asyncio (PR by Ganden Schaffner)

• Fixed documentation on how to provide your own typed attributes

4.2.0

• Add support for byte-based paths in connect_unix, create_unix_listeners, create_unix_datagram_socket, and create_connected_unix_datagram_socket. (PR by Lura Skye)

• Enabled the Event and CapacityLimiter classes to be instantiated outside an event loop thread

• Broadly improved/fixed the type annotations. Among other things, many functions and methods that take variadic positional arguments now make use of PEP 646 TypeVarTuple to allow the positional arguments to be validated by static type checkers. These changes affected numerous methods and functions, including:

  • anyio.run()
  • TaskGroup.start_soon()
  • anyio.from_thread.run()
  • anyio.from_thread.run_sync()
  • anyio.to_thread.run_sync()
  • anyio.to_process.run_sync()
  • BlockingPortal.call()
  • BlockingPortal.start_task_soon()
  • BlockingPortal.start_task()

  (also resolves #560)

• Fixed various type annotations of anyio.Path to match Typeshed:

  • anyio.Path.__lt__()
  • anyio.Path.__le__()
  • anyio.Path.__gt__()
  • anyio.Path.__ge__()
  • anyio.Path.__truediv__()
  • anyio.Path.__rtruediv__()
  • anyio.Path.hardlink_to()
  • anyio.Path.samefile()
  • anyio.Path.symlink_to()
  • anyio.Path.with_segments()

  (PR by Ganden Schaffner)

... (truncated)

Changelog

Sourced from anyio's changelog.

Version history

This library adheres to Semantic Versioning 2.0 <http://semver.org/>_.

UNRELEASED

• Fixed a race condition that caused crashes when multiple event loops of the same backend were running in separate threads and simultaneously attempted to use AnyIO for their first time ([#425](https://github.com/agronholm/anyio/issues/425) <https://github.com/agronholm/anyio/issues/425>_; PR by David Jiricek and Ganden Schaffner)
• Added the BlockingPortalProvider class to aid with constructing synchronous counterparts to asynchronous interfaces that would otherwise require multiple blocking portals
• Added __slots__ to AsyncResource so that child classes can use __slots__ ([#733](https://github.com/agronholm/anyio/issues/733) <https://github.com/agronholm/anyio/pull/733>_; PR by Justin Su)
• Fixed erroneous RuntimeError: called 'started' twice on the same task status when cancelling a task in a TaskGroup created with the start() method before the first checkpoint is reached after calling task_status.started() ([#706](https://github.com/agronholm/anyio/issues/706) <https://github.com/agronholm/anyio/issues/706>_; PR by Dominik Schwabe)
• Fixed cancellation delivery on asyncio incrementing the wrong cancel scope's cancellation counter when cascading a cancel operation to a child scope, thus failing to uncancel the host task ([#716](https://github.com/agronholm/anyio/issues/716) <https://github.com/agronholm/anyio/issues/716>_)
• Fixed erroneous TypedAttributeLookupError if a typed attribute getter raises KeyError
• Fixed the asyncio backend not respecting the PYTHONASYNCIODEBUG environment variable when setting the debug flag in anyio.run()
• Fixed SocketStream.receive() not detecting EOF on asyncio if there is also data in the read buffer ([#701](https://github.com/agronholm/anyio/issues/701) <https://github.com/agronholm/anyio/issues/701>_)
• Emit a ResourceWarning for MemoryObjectReceiveStream and MemoryObjectSendStream that were garbage collected without being closed (PR by Andrey Kazantcev)
• Fixed MemoryObjectSendStream.send() not raising BrokenResourceError when the last corresponding MemoryObjectReceiveStream is closed while waiting to send a falsey item ([#731](https://github.com/agronholm/anyio/issues/731) <https://github.com/agronholm/anyio/issues/731>_; PR by Ganden Schaffner)

4.3.0

• Added support for the Python 3.12 walk_up keyword argument in anyio.Path.relative_to() (PR by Colin Taylor)

• Fixed passing total_tokens to anyio.CapacityLimiter() as a keyword argument not working on the trio backend ([#515](https://github.com/agronholm/anyio/issues/515) <https://github.com/agronholm/anyio/issues/515>_)

• Fixed Process.aclose() not performing the minimum level of necessary cleanup when cancelled. Previously:

  • Cancellation of Process.aclose() could leak an orphan process
  • Cancellation of run_process() could very briefly leak an orphan process.
  • Cancellation of Process.aclose() or run_process() on Trio could leave

... (truncated)

Commits

• 437a7e3 Bumped up the version
• 1ce32e5 Updated the upload/download artifact actions
• d39c837 [pre-commit.ci] pre-commit autoupdate (#690)
• ba48ea8 Added the network marker to some tests that need DNS (#687)
• 5426f7b Remove conditionals and workarounds for Python interpreter versions 3.7 and o...
• 7565f31 [pre-commit.ci] pre-commit autoupdate (#684)
• 137de70 Fixed documentation on providing custom typed attributes (#683)
• 8b8806c Fixed typo (#681)
• 1e60219 Fixed run_process() and open_process().__aexit__ leaking an orphan proces...
• 3f14df8 [pre-commit.ci] pre-commit autoupdate (#676)
• Additional commits viewable in compare view

Updates asgiref from 3.7.2 to 3.8.1

Changelog

Sourced from asgiref's changelog.

3.8.1 (2024-03-22)

• Fixes a regression in 3.8.0 affecting nested task cancellation inside sync_to_async.

3.8.0 (2024-03-20)

• Adds support for Python 3.12.

• Drops support for (end-of-life) Python 3.7.

• Fixes task cancellation propagation to subtasks when using synchronous Django middleware.

• Allows nesting sync_to_async via asyncio.wait_for.

• Corrects WSGI adapter handling of root path.

• Handles case where "client" is None in WsgiToAsgi adapter.

Commits

• e38d3c3 Releasing 3.8.1
• 8769434 Raise exception if exec_coro is done.
• 852344e Add tox.ini to MANIFEST.in
• f710647 Fix a rST problem in the pathsend extension documentation
• 4c28385 Releasing 3.8.0
• 4209b6c Correct WSGI adapter handling of root path.
• 8cf847a Update error-on-send text in main spec
• 8108512 Move variable initialization in AsyncToSync from init to call (#440)
• 6f02daa Clarify send error behaviour more clearly
• 0503c2c Fix task cancellation propagation to subtasks when using sync middleware (#435)
• Additional commits viewable in compare view

Updates attrs from 23.1.0 to 23.2.0

Commits

• See full diff in compare view

Updates azure-core from 1.29.5 to 1.30.1

Commits

• b2a421e port retry-after fix into corehttp (#34536)
• 3d314d8 update release date (#34521)
• 3b099aa move core perf files to azure-core folder (#34441)
• 4694379 [Corehttp] Prepare changelog (#34439)
• 3faad9c accept float "retry-after" (#34253)
• c6876ec [corehttp] use typeguard for HTTPPolicy/SansIOHTTPPolicy check not isinstance...
• 9cda4c0 [corehttp] Misc updates (#34394)
• 143d2ff [Corehttp] Add code snippets to docstrings (#33207)
• 1b2c59c [OTel Plugin] Improve live test coverage (#34323)
• 3bc2067 [OTel plugin] Add new schema version (#34089)
• Additional commits viewable in compare view

Updates azure-identity from 1.15.0 to 1.16.0

Release notes

Sourced from azure-identity's releases.

azure-identity_1.16.0

1.16.0 (2024-04-09)

Other Changes

• For IMDS requests in ManagedIdentityCredential, the retry backoff factor was reduced from 2 to 0.8 in order to avoid excessive retry delays and improve responsiveness. Users can customize this setting with the retry_backoff_factor parameter: ManagedIdentityCredential(retry_backoff_factor=2). (#35070)

Commits

• 95c5f2a Update release dates (#35091)
• c58bfa7 [Identity] Adjust IMDS retry backoff (#35070)
• 6680ffc [Identity] Update broker docs (#35032)
• 1ade699 [Identity] Update live test config (#35019)
• 66efa24 Update Authorization Code client_secret kwarg usage (#34862)
• 6f79b4d Fix WAM default account code sample (#35007)
• 4348985 Update default broker account sample (#35003)
• 0527e86 [skip ci] Delete azure-devtools and deps/references
• fcaa29d Update Azure AD and docs.microsoft.com links (#34913)
• 9ea120e rename use_operating_system_account to use_default_broker_account (#34833)
• Additional commits viewable in compare view

Updates azure-monitor-opentelemetry from 1.1.1 to 1.4.2

Release notes

Sourced from azure-monitor-opentelemetry's releases.

azure-monitor-opentelemetry_1.4.2

1.4.2 (2024-05-20)

Features Added

• Add diagnostics for sdk detection and backoff (#35610)

azure-monitor-opentelemetry_1.4.1

1.4.1 (2024-04-25)

Features Added

• Enable sampling for attach (#35218)

azure-monitor-opentelemetry_1.4.0

1.4.0 (2024-04-09)

Features Added

• Adding diagnostic warning when distro detects RP attach (#34971)
• Added resource parameter (#34900)

Other Changes

• Updated FastAPI sample (#34738)
• Refactored constants and utils (#35066)

Commits

• a517bad Distro release 1.4.2 (#35619)
• 2ef297b Add diagnostics for sdk detection (#35610)
• f501bee [Monitor Distro] Update fastapi dev dependency (#35580)
• 62d3e2d [Monitor] Enable sovereign cloud testing (#35209)
• d2e868c Update live metrics to use typespec generated swagger (#34840)
• 587da6f Increment package version after release of azure-monitor-opentelemetry-export...
• 9bd5b87 Increment package version after release of azure-monitor-opentelemetry (#35388)
• 64193d4 Distro 1.4.1 (#35256)
• d5c3578 [Monitor Query] Typing updates (#35180)
• 9f5b369 [Monitor Ingestion] Typing and linting fixes (#35193)
• Additional commits viewable in compare view

Updates azure-monitor-opentelemetry-exporter from 1.0.0b19 to 1.0.0b25

Release notes

Sourced from azure-monitor-opentelemetry-exporter's releases.

azure-monitor-opentelemetry-exporter_1.0.0b25

1.0.0b25 (2024-04-19)

Features Added

• Enable sampling for attach (#35218)

azure-monitor-opentelemetry-exporter_1.0.0b24

1.0.0b24 (2024-04-05)

Features Added

• Add live metrics collection of requests/dependencies/exceptions (#34673)
• Add live metrics collection of cpu time/process memory (#34735)
• Add live metrics collection feature detection to statsbeat (#34752)

Breaking Changes

• Rename Statbeat environments variables to use APPLICATIONINSIGHTS_* (#34742)

Bugs Fixed

• Reduce vm metadata service timeout to 200ms (#35039)

Other Changes

• Updated FastAPI sample (#34738)
• Set up branching logic for attach function (#35066)

Commits

• 68f2fbc Exporter 1.0.0b25 (#35255)
• 0ea4200 Enable sampler for attach (#35218)
• 11a45aa Increment package version after release of azure-monitor-opentelemetry (#35127)
• c7bef72 Document role requirement for multi-resource metrics queries (#35121)
• 3519fdf Distro 1.4.0 (#35076)
• d625542 Increment package version after release of azure-monitor-opentelemetry-export...
• d51635b Resource param (#34900)
• 85b34b7 changelog (#35088)
• 6dbbc92 Refactor constants (#35066)
• 394dc9a Adding diagnostic log for distro + attach (#34971)
• Additional commits viewable in compare view

Updates azure-storage-blob from 12.19.0 to 12.20.0

Release notes

Sourced from azure-storage-blob's releases.

azure-storage-blob_12.20.0

12.20.0 (2024-05-07)

Features Added

• Stable release of features from 12.20.0b1

azure-storage-blob_12.20.0b1

12.20.0b1 (2024-04-16)

This version and all future versions will require Python 3.8+. Python 3.7 is no longer supported.

Features Added

• Added support for service version 2024-05-04.
• The services parameter has been added to the generate_account_sas API, which enables the ability to generate SAS tokens to be used with multiple services. By default, the SAS token service scope will default to the current service.

Bugs Fixed

• Bumped dependency of typing-extensions to >=4.6.0 to avoid potential TypeError with typing.TypeVar on Python 3.12.
• Fixed an issue where authentication errors could raise AttributeError instead of ClientAuthenticationError when using async OAuth credentials.
• Fixed a typing issue which incorrectly typed the readinto API. The correct input type is IO[bytes].
• Fixed a typo in the initialization of completion_time for the CopyProperties model.
• Fixed a couple of issues with upload_blob when using Iterators/Generators as the data input.

Other Changes

• Passing prefix to the following ContainerClient APIs now raises a ValueError: list_blobs, list_blobs_names, and walk_blobs. This change was made to avoid confusion for filtering results. The name_starts_with parameter is the correct parameter to pass for filtering.

Commits

• c4fb0f9 [Storage] Add changelog entries for STG93 GA Release (#35522)
• a61a8e2 [CI] Test updates for central sanitizers (#35385)
• 4e51ac6 [Storage] Fix metadata typehint in file-share (#35505)
• 8e6ed95 [Storage] Add concat function to crc64 extension (#35441)
• 91813fc [Storage] [STG93 GA] APIView Feedback (#35331)
• e7d7ccd [Storage] Updated credentials formatting in docstrings and disabled `docstr...
• 47fb430 [Storage] [Blob Changefeed] Fixed next pylint errors in blob changefeed (#35270)
• 9138c95 [Storage] [Datalake] Fixed next pylint errors in datalake storage (#35167)
• aa08980 Update storage tests (#35239)
• 34246af Bump (#35232)
• Additional commits viewable in compare view

Updates blinker from 1.7.0 to 1.8.2

Release notes

Sourced from blinker's releases.

1.8.2

This is the Blinker 1.8.2 fix release, which fixes bugs but does not otherwise change behavior and should not result in breaking changes.

PyPI: https://pypi.org/project/blinker/1.8.2/ Changes: https://blinker.readthedocs.io/en/latest/#version-1-8-2

• Simplify type for _async_wrapper and _sync_wrapper arguments. #156

1.8.1

This is the Blinker 1.8.1 fix release, which fixes bugs but does not otherwise change behavior and should not result in breaking changes.

PyPI: https://pypi.org/project/blinker/1.8.1/ Changes: https://blinker.readthedocs.io/en/latest/#version-1-8-1

• Restore identity handling for str and int senders. #148
• Fix deprecated blinker.base.WeakNamespace import. #149
• Fix deprecated blinker.base.receiver_connected import. #153
• Use types from collections.abc instead of typing. #150
• Fully specify exported types as reported by pyright. #152

1.8.0

This is the Blinker 1.8.0 feature release, which may include new features, remove previously deprecated code, or add new deprecations. The 1.8.x line is now the supported fix branch, support has ended for the 1.7.x line. We encourage everyone to upgrade, and to use a tool such as pip-tools to pin all dependencies and control upgrades. Test with warnings treated as errors to be able to adapt to deprecation warnings early.

PyPI: https://pypi.org/project/blinker/1.8.0/ Changes: https://blinker.readthedocs.io/en/latest/#version-1-8-0

• Deprecate the __version__ attribute. Use feature detection, or importlib.metadata.version("blinker"), instead. #128
• Specify that the deprecated temporarily_connected_to will be removed in the next version.
• Show a deprecation warning for the deprecated global receiver_connected signal and specify that it will be removed in the next version.
• Show a deprecation warning for the deprecated WeakNamespace and specify that it will be removed in the next version.
• Greatly simplify how the library uses weakrefs. This is a significant change internally but should not affect any public API. #144
• Expose the namespace used by signal() as default_namespace. #145

Changelog

Sourced from blinker's changelog.

Version 1.8.2

Released 2024-05-06

• Simplify type for _async_wrapper and _sync_wrapper arguments. :pr:156

Version 1.8.1

Released 2024-04-28

• Restore identity handling for str and int senders. :pr:148
• Fix deprecated blinker.base.WeakNamespace import. :pr:149
• Fix deprecated blinker.base.receiver_connected import. :pr:153
• Use types from collections.abc instead of typing. :pr:150
• Fully specify exported types as reported by pyright. :pr:152

Version 1.8.0

Released 2024-04-27

• Deprecate the __version__ attribute. Use feature detection, or importlib.metadata.version("blinker"), instead. :issue:128
• Specify that the deprecated temporarily_connected_to will be removed in the next version.
• Show a deprecation warning for the deprecated global receiver_connected signal and specify that it will be removed in the next version.
• Show a deprecation warning for the deprecated WeakNamespace and specify that it will be removed in the next version.
• Greatly simplify how the library uses weakrefs. This is a significant change internally but should not affect any public API. :pr:144
• Expose the namespace used by signal() as default_namespace. :pr:145

Commits

• 0a6be69 release version 1.8.2
• 952a97b Merge pull request #156 from pallets-eco/wrapper-type
• 6c15fa8 simplify type for wrapper arguments
• 76dcca4 Merge pull request #155 from pallets-eco/dependabot/pip/requirements/python-r...
• 7ab94c1 Bump the python-requirements group in /requirements with 3 updates
• 9779aa1 Merge pull request #154 from pallets-eco/release-1.8.1
• 26f65bd release version 1.8.1
• 793f8be Merge pull request #153 from pallets-eco/deprecated-import
• 4313260 fix deprecated receiver_connected import
• d15107c Merge pull request #152 from pallets-eco/pyright-export
• Additional commits viewable in compare view

Updates certifi from 2023.11.17 to 2024.2.2

Commits

• 45eb611 2024.02.02 (#266)
• 83f4f04 fix leaking certificate issue (#265)
• bbf2208 Bump actions/upload-artifact from 4.2.0 to 4.3.0 (#264)
• 9e837a5 Bump actions/upload-artifact from 4.1.0 to 4.2.0 (#262)
• 05d071b Bump actions/upload-artifact from 4.0.0 to 4.1.0 (#261)
• 2a3088a Bump actions/download-artifact from 4.1.0 to 4.1.1 (#260)
• d4ca66e Bump actions/upload-artifact from 3.1.3 to 4.0.0 (#258)
• 5d15663 Bump actions/download-artifact from 3.0.2 to 4.1.0 (#257)
• d66ef9d Bump actions/setup-python from 4.7.1 to 5.0.0 (#256)
• 8f0d412 Bump pypa/gh-action-pypi-publish from 1.8.10 to 1.8.11 (#255)
• Additional commits viewable in compare view

Updates cryptography from 41.0.7 to 42.0.7

Changelog

Sourced from cryptography's changelog.

42.0.7 - 2024-05-06

* Restored Windows 7 compatibility for our pre-built wheels. Note that we do
  not test on Windows 7 and wheels for our next release will not support it.
  Microsoft no longer provides support for Windows 7 and users are encouraged
  to upgrade.
.. _v42-0-6:
42.0.6 - 2024-05-04

• Fixed compilation when using LibreSSL 3.9.1.

.. _v42-0-5:

42.0.5 - 2024-02-23

* Limit the number of name constraint checks that will be performed in
  :mod:`X.509 path validation <cryptography.x509.verification>` to protect
  against denial of service attacks.
* Upgrade ``pyo3`` version, which fixes building on PowerPC.
.. _v42-0-4:
42.0.4 - 2024-02-20

• Fixed a null-pointer-dereference and segfault that could occur when creating a PKCS#12 bundle. Credit to Alexander-Programming for reporting the issue. CVE-2024-26130
• Fixed ASN.1 encoding for PKCS7/SMIME signed messages. The fields SMIMECapabilities and SignatureAlgorithmIdentifier should now be correctly encoded according to the definitions in :rfc:2633 :rfc:3370.

.. _v42-0-3:

42.0.3 - 2024-02-15

* Fixed an initialization issue that caused key loading failures for some
  users.
.. _v42-0-2:
42.0.2 - 2024-01-30

... (truncated)

Commits

• 0cc7fc3 Prepare for 42.0.7 release (#10949)
• cfad004 Prepare backports for 42.0.6 release (#10929)
• 33833f0 Release 42.0.5 (#10470)
• 4be53bf Added a budget for NC checks to protect against DoS (#10467) (#10468)
• 8e9de30 Bump pyo3 from 0.20.2 to 0.20.3 in /src/rust (#10462) (#10465)
• fe18470 Bump for 42.0.4 release (#10445)
• aaa2dd0 Fix ASN.1 issues in PKCS#7 and S/MIME signing (#10373) (#10442)
• 7a4d012 Fixes #10422 -- don't crash when a PKCS#12 key and cert don't match (#10423) ...
• df314bb backport actions m1 switch to 42.0.x (#10415)
• c49a7a5 changelog and version bump for 42.0.3 (#10396)
• Additional commits viewable in compare view

Updates distro from 1.8.0 to 1.9.0

Release notes

Sourced from distro's releases.

v1.9.0

ENHANCEMENTS:

• Refactor distro.info() method to return an InfoDict [#360]
• Ignore the file /etc/board-release [#353]
• Ignore the file /etc/ec2_version [#359]

RELEASE:

• Run Python 3.6 on Ubuntu 20.04 for CI and bump isort [#355]

TESTS:

• Test on modern versions of CPython and PyPy and macOS [#362]
• Add support for ALT Linux Server 10.1 distribution [#354]
• Add Debian Testing to the tests [#356]
• Update ArchLinux resource for tests [#352]

Changelog

Sourced from distro's changelog.

1.9.0 (2023.12.19)

ENHANCEMENTS:

• Refactor distro.info() method to return an InfoDict [#360]
• Ignore the file '/etc/board-release' [#353]
• Ignore the file '/etc/ec2_version' [#359]

RELEASE:

• Run Python 3.6 on Ubuntu 20.04 for CI and bump isort [#355]

TESTS:

• Test on modern versions of CPython and PyPy and macOS [#362]
• Add support for ALT Linux Server 10.1 distribution [#354]
• Add Debian Testing to the tests [#356]
• Update archlinux resource for tests [#352]

Commits

• 8d88a2d Optimize some repo metastuff and prepare v1.9.0 (#364)
• 95ffcb6 Actions(deps): Bump actions/setup-python from 4 to 5 (#363)
• 6a487e9 Test on modern versions of CPython and PyPy and macOS (#362)

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.