Bump the python-dependencies group across 1 directory with 8 updates #10

dependabot · 2024-12-01T12:32:54Z

Bumps the python-dependencies group with 8 updates in the / directory:

Package	From	To
aiohappyeyeballs	`2.4.0`	`2.4.4`
aiohttp	`3.10.5`	`3.11.8`
frozenlist	`1.4.1`	`1.5.0`
idna	`3.8`	`3.10`
import-expression	`2.1.0.post1`	`2.2.1.post1`
orjson	`3.10.7`	`3.10.12`
pycares	`4.4.0`	`4.5.0`
yarl	`1.11.1`	`1.18.0`

Updates aiohappyeyeballs from 2.4.0 to 2.4.4

Release notes

Sourced from aiohappyeyeballs's releases.

v2.4.4 (2024-11-30)

Fix

fix: handle OSError on failure to close socket instead of raising IndexError (#114)

Co-authored-by: pre-commit-ci[bot] <66853113+pre-commit-ci[bot]@users.noreply.github.com> Co-authored-by: J. Nick Koston <[email protected]> (c542f68)

v2.4.3 (2024-09-30)

Fix

fix: rewrite staggered_race to be race safe (#101)

fix: re-raise RuntimeError when uvloop raises RuntimeError during connect (#105) (c8f1fa9)

v2.4.2 (2024-09-27)

Fix

fix: copy staggered from standard lib for python 3.12+ (#95) (c5a4023)

v2.4.1 (2024-09-26)

Fix

fix: avoid passing loop to staggered.staggered_race (#94) (5f80b79)

Changelog

Sourced from aiohappyeyeballs's changelog.

v2.4.4 (2024-11-30)

Fix

Handle oserror on failure to close socket instead of raising indexerror (#114) (c542f68)

v2.4.3 (2024-09-30)

Fix

Rewrite staggered_race to be race safe (#101) (9db617a)

Re-raise runtimeerror when uvloop raises runtimeerror during connect (#105) (c8f1fa9)

v2.4.2 (2024-09-27)

Fix

Copy staggered from standard lib for python 3.12+ (#95) (c5a4023)

v2.4.1 (2024-09-26)

Fix

Avoid passing loop to staggered.staggered_race (#94) (5f80b79)

Commits

3c4f2a6 2.4.4
c542f68 fix: handle OSError on failure to close socket instead of raising IndexError ...
fd90f56 chore(pre-commit.ci): pre-commit autoupdate (#116)
0653807 chore: bump codecov-action to 5.0.3 (#115)
90e01ed chore(pre-commit.ci): pre-commit autoupdate (#113)
31825f2 chore(pre-commit.ci): pre-commit autoupdate (#111)
4c23bca chore: add missing FUNDING.yml (#110)
b5dfff5 chore(pre-commit.ci): pre-commit autoupdate (#108)
5a3b4cb chore: fix docs (#106)
e3519bb 2.4.3
Additional commits viewable in compare view

Updates aiohttp from 3.10.5 to 3.11.8

Release notes

Sourced from aiohttp's releases.

3.11.8

Miscellaneous internal changes

Improved performance of creating :class:aiohttp.ClientResponse objects when there are no cookies -- by :user:bdraco.

Related issues and pull requests on GitHub: #10029.

Improved performance of creating :class:aiohttp.ClientResponse objects -- by :user:bdraco.

Related issues and pull requests on GitHub: #10030.

Improved performances of creating objects during the HTTP request lifecycle -- by :user:bdraco.

Related issues and pull requests on GitHub: #10037.

Improved performance of constructing :class:aiohttp.web.Response with headers -- by :user:bdraco.

Related issues and pull requests on GitHub: #10043.

Improved performance of making requests when there are no auto headers to skip -- by :user:bdraco.

Related issues and pull requests on GitHub: #10049.

Downgraded logging of invalid HTTP method exceptions on the first request to debug level -- by :user:bdraco.

HTTP requests starting with an invalid method are relatively common, especially when connected to the public internet, because browsers or other clients may try to speak SSL to a plain-text server or vice-versa. These exceptions can quickly fill the log with noise when nothing is wrong.

Related issues and pull requests on GitHub:

... (truncated)

Changelog

Sourced from aiohttp's changelog.

3.11.8 (2024-11-27)

Miscellaneous internal changes

Improved performance of creating :class:aiohttp.ClientResponse objects when there are no cookies -- by :user:bdraco.

Related issues and pull requests on GitHub: :issue:10029.

Improved performance of creating :class:aiohttp.ClientResponse objects -- by :user:bdraco.

Related issues and pull requests on GitHub: :issue:10030.

Improved performances of creating objects during the HTTP request lifecycle -- by :user:bdraco.

Related issues and pull requests on GitHub: :issue:10037.

Improved performance of constructing :class:aiohttp.web.Response with headers -- by :user:bdraco.

Related issues and pull requests on GitHub: :issue:10043.

Improved performance of making requests when there are no auto headers to skip -- by :user:bdraco.

Related issues and pull requests on GitHub: :issue:10049.

Downgraded logging of invalid HTTP method exceptions on the first request to debug level -- by :user:bdraco.

HTTP requests starting with an invalid method are relatively common, especially when connected to the public internet, because browsers or other clients may try to speak SSL to a plain-text server or vice-versa. These exceptions can quickly fill the log with noise when nothing is wrong.

... (truncated)

Commits

5ddf720 Release 3.11.8 (#10066)
13152c3 [PR #10055/c11fe96 backport][3.11] Downgrade logging of invalid HTTP methods ...
1b78cae [PR #10059/aac6f741 backport][3.11] Combine executor jobs in FileResponse sen...
a5a6981 [PR #10058/12372d7 backport][3.11] Remove unreachable content length check fo...
7e628f4 [PR #8699/11f0e7f backport][3.11] Reduce code indent in ResponseHandler.data_...
1a6fafe [PR #10037/2e369db backport][3.11] Refactor requests and responses to use cla...
653302e [PR #10049/006fbc37 backport][3.11] Improve client performance when there are...
d411bc5 [PR #10043/5255cec backport][3.11] Avoid constructing headers mulitidict twic...
3dfd7ae Bump pypa/cibuildwheel from 2.21.3 to 2.22.0 (#10042)
65dab0e [PR #10038/6f4e9615 backport][3.11] Small speed up to StreamWriter.__init__...
Additional commits viewable in compare view

Updates frozenlist from 1.4.1 to 1.5.0

Release notes

Sourced from frozenlist's releases.

1.5.0

Bug fixes

An incorrect signature of the __class_getitem__ class method has been fixed, adding a missing class_item argument under Python 3.8 and older.

This change also improves the code coverage of this method that was previously missing -- by :user:webknjaz.

Related issues and pull requests on GitHub: #567, #571.

Improved documentation

Rendered issue, PR, and commit links now lead to frozenlist's repo instead of yarl's repo.

Related issues and pull requests on GitHub: #573.

On the :doc:Contributing docs <contributing/guidelines> page, a link to the Towncrier philosophy has been fixed.

Related issues and pull requests on GitHub: #574.

Packaging updates and notes for downstreams

A name of a temporary building directory now reflects that it's related to frozenlist, not yarl.

Related issues and pull requests on GitHub: #573.

Declared Python 3.13 supported officially in the distribution package metadata.

Related issues and pull requests on GitHub: #595.

... (truncated)

Changelog

Sourced from frozenlist's changelog.

1.5.0 (2024-10-22)

Bug fixes

An incorrect signature of the __class_getitem__ class method has been fixed, adding a missing class_item argument under Python 3.8 and older.

This change also improves the code coverage of this method that was previously missing -- by :user:webknjaz.

Related issues and pull requests on GitHub: :issue:567, :issue:571.

Improved documentation

Rendered issue, PR, and commit links now lead to frozenlist's repo instead of yarl's repo.

Related issues and pull requests on GitHub: :issue:573.

On the :doc:Contributing docs <contributing/guidelines> page, a link to the Towncrier philosophy has been fixed.

Related issues and pull requests on GitHub: :issue:574.

Packaging updates and notes for downstreams

A name of a temporary building directory now reflects that it's related to frozenlist, not yarl.

Related issues and pull requests on GitHub: :issue:573.

Declared Python 3.13 supported officially in the distribution package metadata.

Related issues and pull requests on GitHub:

... (truncated)

Commits

91991e3 Release 1.5.0 (#612)
a0f0c7c [pre-commit.ci] pre-commit autoupdate (#606)
7858bd3 Increase release timeout (#611)
313bebc Adjust linter timeout (#610)
6636000 Add missing FUNDING.yml (#609)
28e79f5 Build(deps): Bump actions/cache from 3 to 4 (#576)
57417ce Build(deps): Bump pypa/cibuildwheel from 2.21.2 to 2.21.3 (#607)
2c242d5 Build(deps): Bump pypa/cibuildwheel from 2.21.0 to 2.21.2 (#604)
b0ddbbf Build(deps): Bump pypa/cibuildwheel from 2.20.0 to 2.21.0 (#600)
826e261 Build(deps): Bump dependabot/fetch-metadata from 1.6.0 to 2.2.0 (#593)
Additional commits viewable in compare view

Updates idna from 3.8 to 3.10

Changelog

Sourced from idna's changelog.

3.10 (2024-09-15) +++++++++++++++++

Reverted to Unicode 15.1.0 data. Unicode 16 has some significant changes to UTS46 processing that will require more work to properly implement.

3.9 (2024-09-13) ++++++++++++++++

Update to Unicode 16.0.0

Deprecate setup.cfg in favour of pyproject.toml

Use ruff for code formatting

Thanks to Waket Zheng for contributions to this release.

Commits

729225d Release v3.10
3eef168 Merge pull request #194 from kjd/revert-unicode-16
ceca619 Revert Unicode 16.0.0 data updates
c43ac75 Merge pull request #191 from kjd/release-3.9
1b8800a Release v3.9
a1fd168 Merge pull request #190 from kjd/unicode-16
7732c61 Merge branch 'master' into unicode-16
4ed183d Refactor membership test
762216b Format with ruff
580ece9 Implement changes to UTS46 algorithm
Additional commits viewable in compare view

Updates import-expression from 2.1.0.post1 to 2.2.1.post1

Commits

90e2ad0 update README
abda04b bump patch version to 2.2.1
847b0d3 support interactive asyncio usage with top-level await (#23)
6697cb8 bump minor version to 2.2.0
8810fb6 remove typing_extensions
a7125ec add -i argument to load file into a repl session
See full diff in compare view

Updates orjson from 3.10.7 to 3.10.12

Release notes

Sourced from orjson's releases.

3.10.12

Changed

Publish PyPI manylinux i686 wheels.

Publish PyPI musllinux i686 and arm7l wheels.

Publish PyPI macOS wheels for Python 3.10 or later built on macOS 15.

Publish PyPI Windows wheels using trusted publishing.

3.10.11

Changed

Improve performance of UUIDs.

Publish PyPI wheels with trusted publishing and PEP 740 attestations.

Include text of licenses for vendored dependencies.

3.10.10

Fixed

Fix int serialization on s390x. This was introduced in 3.10.8.

Changed

Publish aarch64 manylinux_2_17 wheel for 3.13 to PyPI.

3.10.9

Fixed

Fix int serialization on 32-bit Python 3.8, 3.9, 3.10. This was introduced in 3.10.8.

3.10.8

Changed

int serialization no longer chains OverflowError to the the __cause__ attribute of orjson.JSONEncodeError when range exceeded.

Compatibility with CPython 3.14 alpha 1.

Improve performance.

Changelog

Sourced from orjson's changelog.

3.10.12

Changed

Publish PyPI manylinux i686 wheels.

Publish PyPI musllinux i686 and arm7l wheels.

Publish PyPI macOS wheels for Python 3.10 or later built on macOS 15.

Publish PyPI Windows wheels using trusted publishing.

3.10.11

Changed

Improve performance of UUIDs.

Publish PyPI wheels with trusted publishing and PEP 740 attestations.

Include text of licenses for vendored dependencies.

3.10.10

Fixed

Fix int serialization on s390x. This was introduced in 3.10.8.

Changed

Publish aarch64 manylinux_2_17 wheel for 3.13 to PyPI.

3.10.9

Fixed

Fix int serialization on 32-bit Python 3.8, 3.9, 3.10. This was introduced in 3.10.8.

3.10.8

Changed

int serialization no longer chains OverflowError to the the __cause__ attribute of orjson.JSONEncodeError when range exceeded.

Compatibility with CPython 3.14 alpha 1.

Improve performance.

Commits

e5ddb0b 3.10.12
ded52a7 Documentation update, compare against stdlib
f53ec9f win, musl, i686, macOS 15 artifact jobs
8ece0d4 Fix trusted publishing upload, python3.8 manylinux_2_17
2e3d96d 3.10.11
2038206 Trusted publisher and attestations, build misc
f1cbc0a Simplify datetime, uuid serialization
d595cd1 Add license files from pyo3 upstream for vendored crates
4918783 3.10.10
e1f64bf setup-qemu-container, restrict inline_int, cargo update
Additional commits viewable in compare view

Updates pycares from 4.4.0 to 4.5.0

Commits

cde3d47 Fixup CI
6885e0e Fix building sdist
f770a07 Test building release wheels on PRs
1a197b2 chore(ci): fix upload & add more platforms to cibuildwheel (#204)
70443e0 Bump version to 4.5.0
da178fd Add 3.13 support, remove 3.8 (#202)
57a82a0 build(deps): bump actions/download-artifact in /.github/workflows
8964404 Drop distutils
de2ed40 Do not define HAVE_GETSERVBYPORT_R for platforms (#195)
b005f58 Update test_idna_encoding_query_a with new errno to align to new c-ares versi...
Additional commits viewable in compare view

Updates yarl from 1.11.1 to 1.18.0

Release notes

Sourced from yarl's releases.

1.18.0

Features

Added keep_query and keep_fragment flags in the :py:meth:yarl.URL.with_path, :py:meth:yarl.URL.with_name and :py:meth:yarl.URL.with_suffix methods, allowing users to optionally retain the query string and fragment in the resulting URL when replacing the path -- by :user:paul-nameless.

Related issues and pull requests on GitHub: #111, #1421.

Contributor-facing changes

Started running downstream aiohttp tests in CI -- by :user:Cycloctane.

Related issues and pull requests on GitHub: #1415.

Miscellaneous internal changes

Improved performance of converting :class:~yarl.URL to a string -- by :user:bdraco.

Related issues and pull requests on GitHub: #1422.

1.17.2

Bug fixes

Stopped implicitly allowing the use of Cython pre-release versions when building the distribution package -- by :user:ajsanchezsanz and :user:markgreene74.

Related issues and pull requests on GitHub: #1411, #1412.

Fixed a bug causing :attr:~yarl.URL.port to return the default port when the given port was zero -- by :user:gmacon.

Related issues and pull requests on GitHub: #1413.

Features

... (truncated)

Changelog

Sourced from yarl's changelog.

1.18.0

(2024-11-21)

Features

Added keep_query and keep_fragment flags in the :py:meth:yarl.URL.with_path, :py:meth:yarl.URL.with_name and :py:meth:yarl.URL.with_suffix methods, allowing users to optionally retain the query string and fragment in the resulting URL when replacing the path -- by :user:paul-nameless.

Related issues and pull requests on GitHub: :issue:111, :issue:1421.

Contributor-facing changes

Started running downstream aiohttp tests in CI -- by :user:Cycloctane.

Related issues and pull requests on GitHub: :issue:1415.

Miscellaneous internal changes

Improved performance of converting :class:~yarl.URL to a string -- by :user:bdraco.

Related issues and pull requests on GitHub: :issue:1422.

1.17.2

(2024-11-17)

Bug fixes

Stopped implicitly allowing the use of Cython pre-release versions when building the distribution package -- by :user:ajsanchezsanz and :user:markgreene74.

Related issues and pull requests on GitHub:

... (truncated)

Commits

2e8cd0d Release 1.18.0 (#1429)
b7bdfd5 Add aiohttp tests to CI (#1415)
fc08cb8 Allow replacing path without replacing query or fragment (#1421)
2b94725 Revert "Temporarily downgrade codecov-action to 5.0.3 to fix CI" (#1428)
9f99a40 Remove internal _default_port property (#1424)
57d69fe Temporarily downgrade codecov-action to 5.0.3 to fix CI (#1425)
a8d2556 Bump master to 1.18.0.dev0 (#1423)
b07cbb8 Improve performance of converting a URL to a string (#1422)
b31eaa1 Increment version to 1.17.3.dev0 (#1420)
4ab9b12 Release 1.17.2 (#1419)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the python-dependencies group with 8 updates in the / directory: | Package | From | To | | --- | --- | --- | | [aiohappyeyeballs](https://github.com/aio-libs/aiohappyeyeballs) | `2.4.0` | `2.4.4` | | [aiohttp](https://github.com/aio-libs/aiohttp) | `3.10.5` | `3.11.8` | | [frozenlist](https://github.com/aio-libs/frozenlist) | `1.4.1` | `1.5.0` | | [idna](https://github.com/kjd/idna) | `3.8` | `3.10` | | [import-expression](https://github.com/ioistired/import-expression) | `2.1.0.post1` | `2.2.1.post1` | | [orjson](https://github.com/ijl/orjson) | `3.10.7` | `3.10.12` | | [pycares](https://github.com/saghul/pycares) | `4.4.0` | `4.5.0` | | [yarl](https://github.com/aio-libs/yarl) | `1.11.1` | `1.18.0` | Updates `aiohappyeyeballs` from 2.4.0 to 2.4.4 - [Release notes](https://github.com/aio-libs/aiohappyeyeballs/releases) - [Changelog](https://github.com/aio-libs/aiohappyeyeballs/blob/main/CHANGELOG.md) - [Commits](aio-libs/aiohappyeyeballs@v2.4.0...v2.4.4) Updates `aiohttp` from 3.10.5 to 3.11.8 - [Release notes](https://github.com/aio-libs/aiohttp/releases) - [Changelog](https://github.com/aio-libs/aiohttp/blob/master/CHANGES.rst) - [Commits](aio-libs/aiohttp@v3.10.5...v3.11.8) Updates `frozenlist` from 1.4.1 to 1.5.0 - [Release notes](https://github.com/aio-libs/frozenlist/releases) - [Changelog](https://github.com/aio-libs/frozenlist/blob/master/CHANGES.rst) - [Commits](aio-libs/frozenlist@v1.4.1...v1.5.0) Updates `idna` from 3.8 to 3.10 - [Release notes](https://github.com/kjd/idna/releases) - [Changelog](https://github.com/kjd/idna/blob/master/HISTORY.rst) - [Commits](kjd/idna@v3.8...v3.10) Updates `import-expression` from 2.1.0.post1 to 2.2.1.post1 - [Commits](ioistired/import-expression@v2.1.0.post1...v2.2.1.post1) Updates `orjson` from 3.10.7 to 3.10.12 - [Release notes](https://github.com/ijl/orjson/releases) - [Changelog](https://github.com/ijl/orjson/blob/master/CHANGELOG.md) - [Commits](ijl/orjson@3.10.7...3.10.12) Updates `pycares` from 4.4.0 to 4.5.0 - [Release notes](https://github.com/saghul/pycares/releases) - [Changelog](https://github.com/saghul/pycares/blob/master/ChangeLog) - [Commits](saghul/pycares@v4.4.0...v4.5.0) Updates `yarl` from 1.11.1 to 1.18.0 - [Release notes](https://github.com/aio-libs/yarl/releases) - [Changelog](https://github.com/aio-libs/yarl/blob/master/CHANGES.rst) - [Commits](aio-libs/yarl@v1.11.1...v1.18.0) --- updated-dependencies: - dependency-name: aiohappyeyeballs dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python-dependencies - dependency-name: aiohttp dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-dependencies - dependency-name: frozenlist dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-dependencies - dependency-name: idna dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-dependencies - dependency-name: import-expression dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-dependencies - dependency-name: orjson dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python-dependencies - dependency-name: pycares dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-dependencies - dependency-name: yarl dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-dependencies ... Signed-off-by: dependabot[bot] <[email protected]>

dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Dec 1, 2024

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump the python-dependencies group across 1 directory with 8 updates #10

Bump the python-dependencies group across 1 directory with 8 updates #10

dependabot bot commented on behalf of github Dec 1, 2024

Bump the python-dependencies group across 1 directory with 8 updates #10

Are you sure you want to change the base?

Bump the python-dependencies group across 1 directory with 8 updates #10

Conversation

dependabot bot commented on behalf of github Dec 1, 2024

v2.4.4 (2024-11-30)

Fix

v2.4.3 (2024-09-30)

Fix

v2.4.2 (2024-09-27)

Fix

v2.4.1 (2024-09-26)

Fix

v2.4.4 (2024-11-30)

Fix

v2.4.3 (2024-09-30)

Fix

v2.4.2 (2024-09-27)

Fix

v2.4.1 (2024-09-26)

Fix

3.11.8

Miscellaneous internal changes

3.11.8 (2024-11-27)

Miscellaneous internal changes

1.5.0

Bug fixes

Improved documentation

Packaging updates and notes for downstreams

1.5.0 (2024-10-22)

Bug fixes

Improved documentation

Packaging updates and notes for downstreams

3.10.12

Changed

3.10.11

Changed

3.10.10

Fixed

Changed

3.10.9

Fixed

3.10.8

Changed

3.10.12

Changed

3.10.11

Changed

3.10.10

Fixed

Changed

3.10.9

Fixed

3.10.8

Changed

1.18.0

Features

Contributor-facing changes

Miscellaneous internal changes

1.17.2

Bug fixes

Features

1.18.0

Features

Contributor-facing changes

Miscellaneous internal changes

1.17.2

Bug fixes