Skip to content

Navigation Menu

Sign in
Sign up

[bot] python: Bump the python-deps group in /python3 with 3 updates - #39

Open
dependabot[bot] wants to merge 1 commit into
main from
dependabot-pip-python3-python-deps-5d9bb33205
Open

[bot] python: Bump the python-deps group in /python3 with 3 updates #39
dependabot[bot] wants to merge 1 commit into
main from
dependabot-pip-python3-python-deps-5d9bb33205

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Apr 8, 2024
edited
Loading

Copy link
Copy Markdown

Bumps the python-deps group in /python3 with 3 updates: flask, flask-httpauth and psycopg2-binary.

Updates flask from 3.0.0 to 3.0.3

Release notes

Sourced from flask's releases.

3.0.3

This is a fix release for the 3.0.x feature branch.

PyPI: https://pypi.org/project/Flask/3.0.3/ Changes: https://flask.palletsprojects.com/en/3.0.x/changes/#version-3-0-3 Milestone: https://github.com/pallets/flask/milestone/35?closed=1

  • The default hashlib.sha1 may not be available in FIPS builds. Don't access it at import time so the developer has time to change the default. #5448
  • Don't initialize the cli attribute in the sansio scaffold, but rather in the Flask concrete class. #5270

3.0.2

This is a fix release for the 3.0.x feature release branch. It fixes bugs but does not otherwise change behavior and should not result in breaking changes.

3.0.1

This is a fix release for the 3.0.x feature release branch.

Fixes an issue where using other JSON providers, such as flask-orjson, previously caused loaded session data to have an incorrect format in some cases.

Changelog

Sourced from flask's changelog.

Version 3.0.3

Released 2024年04月07日

  • The default hashlib.sha1 may not be available in FIPS builds. Don't access it at import time so the developer has time to change the default. :issue:5448
  • Don't initialize the cli attribute in the sansio scaffold, but rather in the Flask concrete class. :pr:5270

Version 3.0.2

Released 2024年02月03日

  • Correct type for jinja_loader property. :issue:5388
  • Fix error with --extra-files and --exclude-patterns CLI options. :issue:5391

Version 3.0.1

Released 2024年01月18日

  • Correct type for path argument to send_file. :issue:5230
  • Fix a typo in an error message for the flask run --key option. :pr:5344
  • Session data is untagged without relying on the built-in json.loads object_hook. This allows other JSON providers that don't implement that. :issue:5381
  • Address more type findings when using mypy strict mode. :pr:5383
Commits

Updates flask-httpauth from 4.7.0 to 4.8.0

Release notes

Sourced from flask-httpauth's releases.

Release 4.8.0

See CHANGE.LOG for release notes.

Changelog

Sourced from flask-httpauth's changelog.

Flask-HTTPAuth change log

Release 4.8.0 - 2023年04月27日

  • Changes to handle breaking changes in Flask/Werkzeug 2.3 #160 (commit)
  • Remove Python 3.6 and 3.7 from builds, add Python 3.11 (commit)
  • Replace itsdangerous with pyjwt in examples #157 (commit)
  • Better documentation for the get_user_roles callback argument #152 (commit) (thanks Taranjeet Singh!)

Release 4.7.0 - 2022年05月29日

  • Fallback to latin-1 encoding for credentials when utf-8 fails #151 (commit)
  • Documentation updates (commit)

Release 4.6.0 - 2022年04月21日

  • Add MD5-Sess algorithm for Digest auth (commit)
  • Add qop=auth option for Digest auth (commit) (thanks Edward!)
  • Add Python 3.10 and PyPy 3.8 to build (commit)

Release 4.5.0 - 2021年10月25日

  • Support for Flask 2 async views (commit)
  • Do not read the request body #138 (commit)
  • Remove unused flask.g import in token authentication example #137 (commit) (thanks Jonas Sandström!)
  • Fixed documentation typo #127 (commit) (thanks Reggie V!)

Release 4.4.0 - 2021年05月13日

  • Replace safe_str_cmp with hmac.compare_digest to avoid a deprecation warning from Werkzeug #126 (commit) (thanks Federico Martinez!)
  • Drop Python 2 support (commit)

Release 4.3.0 - 2021年05月01日

  • Support token auth with custom header in MultiAuth class #125 (commit)
  • Catch UnicodeDecodeError when passing malformed data in authorization header #122 (commit) (thanks Bastian Raschke!)
  • Fixes typo #116 (commit) (thanks Renato Oliveira!)
  • Move builds to GitHub actions (commit)

Release 4.2.0 - 2020年11月16日

  • Allow error response to return a 200 status code #114 (commit)
  • Add optional argument to MultiAuth class #115 (commit) (thanks pryankster and Michael Wright!)
  • Remove python 3.5 and add python 3.9 to build (commit)

Release 4.1.0 - 2020年06月04日

  • Basic authentication with custom scheme (commit)

Release 4.0.0 - 2020年04月26日

... (truncated)

Commits
  • 4d01283 Release 4.8.0
  • 7654839 Support for breaking changes in Flask/Werkzeug 2.3 (Fixes #160)
  • 15498a3 Upgrade GitHub actions #nolog
  • 04399bd Remove Python 3.6 from builds, add Python 3.11
  • 60552cc update tox.ini #nolog
  • 6f708b0 Replace itsdangerous with pyjwt in examples (Fixes #157)
  • 03ff944 Better documentation for the get_user_roles callback argument (#152)
  • f2b70b2 Version 4.7.1.dev0
  • See full diff in compare view

Updates psycopg2-binary from 2.9.8 to 2.9.9

Changelog

Sourced from psycopg2-binary's changelog.

Current release

What's new in psycopg 2.9.9 ^^^^^^^^^^^^^^^^^^^^^^^^^^^

  • Add support for Python 3.12.
  • Drop support for Python 3.6.

What's new in psycopg 2.9.8 ^^^^^^^^^^^^^^^^^^^^^^^^^^^

  • Wheel package bundled with PostgreSQL 16 libpq in order to add support for recent features, such as sslcertmode.

What's new in psycopg 2.9.7 ^^^^^^^^^^^^^^^^^^^^^^^^^^^

  • Fix propagation of exceptions raised during module initialization (:ticket:[#1598](https://github.com/psycopg/psycopg2/issues/1598)).
  • Fix building when pg_config returns an empty string (:ticket:[#1599](https://github.com/psycopg/psycopg2/issues/1599)).
  • Wheel package bundled with OpenSSL 1.1.1v.

What's new in psycopg 2.9.6 ^^^^^^^^^^^^^^^^^^^^^^^^^^^

  • Package manylinux 2014 for aarch64 and ppc64le platforms, in order to include libpq 15 in the binary package (:ticket:[#1396](https://github.com/psycopg/psycopg2/issues/1396)).
  • Wheel package bundled with OpenSSL 1.1.1t.

What's new in psycopg 2.9.5 ^^^^^^^^^^^^^^^^^^^^^^^^^^^

  • Add support for Python 3.11.
  • Add support for rowcount in MERGE statements in binary packages (:ticket:[#1497](https://github.com/psycopg/psycopg2/issues/1497)).
  • Wheel package bundled with OpenSSL 1.1.1r and PostgreSQL 15 libpq.

What's new in psycopg 2.9.4 ^^^^^^^^^^^^^^^^^^^^^^^^^^^

  • Fix ~psycopg2.extras.register_composite(), ~psycopg2.extras.register_range() with customized :sql:search_path (:ticket:[#1487](https://github.com/psycopg/psycopg2/issues/1487)).
  • Handle correctly composite types with names or in schemas requiring escape.

... (truncated)

Commits
  • ad5bee7 chore: bump version number to 2.9.9
  • 37d1de1 chore: add support for Python 3.12
  • abf2723 chore: drop support for Python 3.6
  • 2da65a7 chore: drop leftover Python 2.7 import aliases from setup.py
  • 3fa60fd chore: bump doc requirement complained by dependabot
  • 1c1484e ci: better interaction with scaleway build server
  • c81cec6 chore: bump to next dev release
  • 7fe8cb7 chore: bump docs requirements dependabot complains about
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the python-deps group in /python3 with 3 updates: [flask](https://github.com/pallets/flask), [flask-httpauth](https://github.com/miguelgrinberg/flask-httpauth) and [psycopg2-binary](https://github.com/psycopg/psycopg2).
Updates `flask` from 3.0.0 to 3.0.3
- [Release notes](https://github.com/pallets/flask/releases)
- [Changelog](https://github.com/pallets/flask/blob/main/CHANGES.rst)
- [Commits](pallets/flask@3.0.0...3.0.3)
Updates `flask-httpauth` from 4.7.0 to 4.8.0
- [Release notes](https://github.com/miguelgrinberg/flask-httpauth/releases)
- [Changelog](https://github.com/miguelgrinberg/Flask-HTTPAuth/blob/main/CHANGES.md)
- [Commits](miguelgrinberg/Flask-HTTPAuth@v4.7.0...v4.8.0)
Updates `psycopg2-binary` from 2.9.8 to 2.9.9
- [Changelog](https://github.com/psycopg/psycopg2/blob/master/NEWS)
- [Commits](psycopg/psycopg2@2.9.8...2.9.9)
---
updated-dependencies:
- dependency-name: flask
 dependency-type: direct:production
 update-type: version-update:semver-patch
 dependency-group: python-deps
- dependency-name: flask-httpauth
 dependency-type: direct:production
 update-type: version-update:semver-minor
 dependency-group: python-deps
- dependency-name: psycopg2-binary
 dependency-type: direct:production
 update-type: version-update:semver-patch
 dependency-group: python-deps
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Apr 8, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python Pull requests that update Python code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants

AltStyle によって変換されたページ (->オリジナル) /