Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump the all-minor-and-patch-dependency-updates group with 11 updates #219

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Dec 1, 2024

Bumps the all-minor-and-patch-dependency-updates group with 11 updates:

Package From To
pydantic 2.7.4 2.10.2
bandit 1.7.10 1.8.0
setuptools 75.3.0 75.6.0
fastapi 0.115.4 0.115.5
numpy 2.1.2 2.1.3
duckdb 1.1.2 1.1.3
pydantic-settings 2.6.0 2.6.1
uvicorn[standard] 0.32.0 0.32.1
httpx 0.27.2 0.28.0
ruff 0.7.1 0.8.1
sphinx-rtd-theme 3.0.1 3.0.2

Updates pydantic from 2.7.4 to 2.10.2

Release notes

Sourced from pydantic's releases.

v2.10.2 2024-11-26

What's Changed

Fixes

Full Changelog: pydantic/pydantic@v2.10.1...v2.10.2

v2.10.1 2024-11-21

What's Changed

Packaging

Fixes

Full Changelog: pydantic/pydantic@v2.10.0...v2.10.1

v2.10.0 2024-11-20

The code released in v2.10.0 is practically identical to that of v2.10.0b2. See the v2.10 release blog post for the highlights!

What's Changed

Packaging

New Features

... (truncated)

Changelog

Sourced from pydantic's changelog.

v2.10.2 (2024-11-25)

GitHub release

What's Changed

Fixes

v2.10.1 (2024-11-21)

GitHub release

What's Changed

Packaging

Fixes

New Contributors

v2.10.0 (2024-11-20)

The code released in v2.10.0 is practically identical to that of v2.10.0b2.

GitHub release

See the v2.10 release blog post for the highlights!

What's Changed

Packaging

... (truncated)

Commits

Updates bandit from 1.7.10 to 1.8.0

Release notes

Sourced from bandit's releases.

1.8.0

What's Changed

Full Changelog: PyCQA/bandit@1.7.10...1.8.0

Commits

Updates setuptools from 75.3.0 to 75.6.0

Changelog

Sourced from setuptools's changelog.

v75.6.0

Features

  • Preserve original PKG-INFO into METADATA when creating wheel (instead of calling wheel.metadata.pkginfo_to_metadata). This helps to be more compliant with the flow specified in PEP 517. (#4701)
  • Changed the WindowsSdkVersion, FrameworkVersion32 and FrameworkVersion64 properties of setuptools.msvc.PlatformInfo to return an empty tuple instead of None as a fallthrough case -- by :user:Avasam (#4754)

v75.5.0

Features

  • Removed support for SETUPTOOLS_DANGEROUSLY_SKIP_PYPROJECT_VALIDATION, as it is deemed prone to errors. (#4746)

v75.4.0

Features

  • Added support for the environment variable SETUPTOOLS_DANGEROUSLY_SKIP_PYPROJECT_VALIDATION=true, allowing users to bypass the validation of pyproject.toml. This option should be used only as a last resort when resolving dependency issues, as it may lead to improper functioning. Users who enable this setting are responsible for ensuring that pyproject.toml complies with setuptools requirements. (#4611)

    .. attention:: This environment variable was removed in a later version of setuptools.

  • Require Python 3.9 or later. (#4718)

  • Remove dependency on importlib_resources and the vendored copy of the library. Instead, setuptools consistently rely on stdlib's importlib.resources (available on Python 3.9+). (#4718)

  • Setuptools' bdist_wheel implementation no longer produces wheels with the m SOABI flag (pymalloc-related). This flag was removed on Python 3.8+ (see :obj:sys.abiflags). (#4718)

  • Updated vendored packaging version to 24.2. (#4740)

... (truncated)

Commits
  • bf2ced2 Bump version: 75.5.0 → 75.6.0
  • 8685c80 Empty tuple instead of None for PlatformInfo version properties fallthrough (...
  • 50d671b Rename news fragment
  • 2b471c2 Changed the WindowsSdkVersion, FrameworkVersion32 and ``FrameworkVers...
  • 2c77cd2 Runtime typing fixes for typeshed return type merge (#4753
  • 9a4c8d4 Runtime typing fixes for typeshed return type merge
  • e622859 Preserve original PKG-INFO contents when creating wheel (instead of calling...
  • 0b5b417 Mark tests that may depend on external network
  • a4fa01d Add news fragment
  • 089aca9 Ignore coverage in test code
  • Additional commits viewable in compare view

Updates fastapi from 0.115.4 to 0.115.5

Release notes

Sourced from fastapi's releases.

0.115.5

Refactors

Docs

... (truncated)

Commits
  • f057f4a 🔖 Release version 0.115.5
  • c6f021e 📝 Update release notes
  • 91a9293 ♻️ Update internal checks to support Pydantic 2.10 (#12914)
  • f716490 📝 Update release notes
  • c178106 📝 Update includes for docs/en/docs/tutorial/body.md (#12757)
  • 88cc900 📝 Update release notes
  • 20809a1 ⬆ [pre-commit.ci] pre-commit autoupdate (#12907)
  • 5a48c37 📝 Update release notes
  • 13892a3 📝 Update includes in docs/en/docs/advanced/testing-dependencies.md (#12647)
  • 9467000 📝 Update release notes
  • Additional commits viewable in compare view

Updates numpy from 2.1.2 to 2.1.3

Release notes

Sourced from numpy's releases.

2.1.3 (Nov 2, 2024)

NumPy 2.1.3 Release Notes

NumPy 2.1.3 is a maintenance release that fixes bugs and regressions discovered after the 2.1.2 release. This release also adds support for free threaded Python 3.13 on Windows.

The Python versions supported by this release are 3.10-3.13.

Improvements

  • Fixed a number of issues around promotion for string ufuncs with StringDType arguments. Mixing StringDType and the fixed-width DTypes using the string ufuncs should now generate much more uniform results.

    (gh-27636)

Changes

  • numpy.fix now won't perform casting to a floating data-type for integer and boolean data-type input arrays.

    (gh-26766)

Contributors

A total of 15 people contributed to this release. People with a "+" by their names contributed a patch for the first time.

  • Abhishek Kumar +
  • Austin +
  • Benjamin A. Beasley +
  • Charles Harris
  • Christian Lorentzen
  • Marcel Telka +
  • Matti Picus
  • Michael Davidsaver +
  • Nathan Goldbaum
  • Peter Hawkins
  • Raghuveer Devulapalli
  • Ralf Gommers
  • Sebastian Berg
  • dependabot[bot]
  • kp2pml30 +

Pull requests merged

A total of 21 pull requests were merged for this release.

... (truncated)

Commits
  • 98464cc Merge pull request #27690 from charris/prepare-2.1.3
  • cbda85b REL: Prepare for the NumPy 2.1.3 release [wheel build]
  • daa8699 Merge pull request #27672 from charris/backport-27666
  • 614ca19 Merge pull request #27673 from charris/backport-27636
  • e6b02d7 DOC: add release note
  • 54fd729 BUG: substantially simplify and fix issue with justification promoter
  • a90fe7c BUG: fix more issues with string ufunc promotion
  • a121864 BUG: fixes for StringDType/unicode promoters
  • f055fb9 BUG: Fix a reference count leak in npy_find_descr_for_scalar.
  • 5895c02 Merge pull request #27669 from charris/backport-27663
  • Additional commits viewable in compare view

Updates duckdb from 1.1.2 to 1.1.3

Release notes

Sourced from duckdb's releases.

v1.1.3 Bugfix Release

This is a bug fix release for various issues discovered after we released 1.1.2. There are no new major features, just bug fixes. Database files created by DuckDB versions all the way back to v0.9.* can be read by this version.

What's Changed

... (truncated)

Commits

Updates pydantic-settings from 2.6.0 to 2.6.1

Release notes

Sourced from pydantic-settings's releases.

v2.6.1

What's Changed

New Contributors

Full Changelog: pydantic/pydantic-settings@v2.6.0...v2.6.1

Commits

Updates uvicorn[standard] from 0.32.0 to 0.32.1

Release notes

Sourced from uvicorn[standard]'s releases.

Version 0.32.1

What's Changed


Full Changelog: encode/uvicorn@0.32.0...0.32.1

Changelog

Sourced from uvicorn[standard]'s changelog.

0.32.1 (2024-11-20)

Fixed

  • Drop ASGI spec version to 2.3 on HTTP scope #2513
  • Enable httptools lenient data on httptools >= 0.6.3 #2488
Commits

Updates httpx from 0.27.2 to 0.28.0

Release notes

Sourced from httpx's releases.

Version 0.28.0

0.28.0 (28th November, 2024)

The 0.28 release includes a limited set of deprecations.

Deprecations:

We are working towards a simplified SSL configuration API.

For users of the standard verify=True or verify=False cases, or verify=<ssl_context> case this should require no changes. The following cases have been deprecated...

  • The verify argument as a string argument is now deprecated and will raise warnings.
  • The cert argument is now deprecated and will raise warnings.

Our revised SSL documentation covers how to implement the same behaviour with a more constrained API.

The following changes are also included:

  • The deprecated proxies argument has now been removed.
  • The deprecated app argument has now been removed.
  • JSON request bodies use a compact representation. (#3363)
  • Review URL percent escape sets, based on WHATWG spec. (#3371, #3373)
  • Ensure certifi and httpcore are only imported if required. (#3377)
  • Treat socks5h as a valid proxy scheme. (#3178)
  • Cleanup Request() method signature in line with client.request() and httpx.request(). (#3378)
Changelog

Sourced from httpx's changelog.

0.28.0 (28th November, 2024)

The 0.28 release includes a limited set of deprecations.

Deprecations:

We are working towards a simplified SSL configuration API.

For users of the standard verify=True or verify=False cases, or verify=<ssl_context> case this should require no changes. The following cases have been deprecated...

  • The verify argument as a string argument is now deprecated and will raise warnings.
  • The cert argument is now deprecated and will raise warnings.

Our revised SSL documentation covers how to implement the same behaviour with a more constrained API.

The following changes are also included:

  • The deprecated proxies argument has now been removed.
  • The deprecated app argument has now been removed.
  • JSON request bodies use a compact representation. (

Bumps the all-minor-and-patch-dependency-updates group with 11 updates:

| Package | From | To |
| --- | --- | --- |
| [pydantic](https://github.com/pydantic/pydantic) | `2.7.4` | `2.10.2` |
| [bandit](https://github.com/PyCQA/bandit) | `1.7.10` | `1.8.0` |
| [setuptools](https://github.com/pypa/setuptools) | `75.3.0` | `75.6.0` |
| [fastapi](https://github.com/fastapi/fastapi) | `0.115.4` | `0.115.5` |
| [numpy](https://github.com/numpy/numpy) | `2.1.2` | `2.1.3` |
| [duckdb](https://github.com/duckdb/duckdb) | `1.1.2` | `1.1.3` |
| [pydantic-settings](https://github.com/pydantic/pydantic-settings) | `2.6.0` | `2.6.1` |
| [uvicorn[standard]](https://github.com/encode/uvicorn) | `0.32.0` | `0.32.1` |
| [httpx](https://github.com/encode/httpx) | `0.27.2` | `0.28.0` |
| [ruff](https://github.com/astral-sh/ruff) | `0.7.1` | `0.8.1` |
| [sphinx-rtd-theme](https://github.com/readthedocs/sphinx_rtd_theme) | `3.0.1` | `3.0.2` |


Updates `pydantic` from 2.7.4 to 2.10.2
- [Release notes](https://github.com/pydantic/pydantic/releases)
- [Changelog](https://github.com/pydantic/pydantic/blob/main/HISTORY.md)
- [Commits](pydantic/pydantic@v2.7.4...v2.10.2)

Updates `bandit` from 1.7.10 to 1.8.0
- [Release notes](https://github.com/PyCQA/bandit/releases)
- [Commits](PyCQA/bandit@1.7.10...1.8.0)

Updates `setuptools` from 75.3.0 to 75.6.0
- [Release notes](https://github.com/pypa/setuptools/releases)
- [Changelog](https://github.com/pypa/setuptools/blob/main/NEWS.rst)
- [Commits](pypa/setuptools@v75.3.0...v75.6.0)

Updates `fastapi` from 0.115.4 to 0.115.5
- [Release notes](https://github.com/fastapi/fastapi/releases)
- [Commits](fastapi/fastapi@0.115.4...0.115.5)

Updates `numpy` from 2.1.2 to 2.1.3
- [Release notes](https://github.com/numpy/numpy/releases)
- [Changelog](https://github.com/numpy/numpy/blob/main/doc/RELEASE_WALKTHROUGH.rst)
- [Commits](numpy/numpy@v2.1.2...v2.1.3)

Updates `duckdb` from 1.1.2 to 1.1.3
- [Release notes](https://github.com/duckdb/duckdb/releases)
- [Changelog](https://github.com/duckdb/duckdb/blob/main/tools/release-pip.py)
- [Commits](duckdb/duckdb@v1.1.2...v1.1.3)

Updates `pydantic-settings` from 2.6.0 to 2.6.1
- [Release notes](https://github.com/pydantic/pydantic-settings/releases)
- [Commits](pydantic/pydantic-settings@v2.6.0...v2.6.1)

Updates `uvicorn[standard]` from 0.32.0 to 0.32.1
- [Release notes](https://github.com/encode/uvicorn/releases)
- [Changelog](https://github.com/encode/uvicorn/blob/master/CHANGELOG.md)
- [Commits](encode/uvicorn@0.32.0...0.32.1)

Updates `httpx` from 0.27.2 to 0.28.0
- [Release notes](https://github.com/encode/httpx/releases)
- [Changelog](https://github.com/encode/httpx/blob/master/CHANGELOG.md)
- [Commits](encode/httpx@0.27.2...0.28.0)

Updates `ruff` from 0.7.1 to 0.8.1
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.7.1...0.8.1)

Updates `sphinx-rtd-theme` from 3.0.1 to 3.0.2
- [Changelog](https://github.com/readthedocs/sphinx_rtd_theme/blob/master/docs/changelog.rst)
- [Commits](readthedocs/sphinx_rtd_theme@3.0.1...3.0.2)

---
updated-dependencies:
- dependency-name: pydantic
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-minor-and-patch-dependency-updates
- dependency-name: bandit
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-minor-and-patch-dependency-updates
- dependency-name: setuptools
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-minor-and-patch-dependency-updates
- dependency-name: fastapi
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-minor-and-patch-dependency-updates
- dependency-name: numpy
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-minor-and-patch-dependency-updates
- dependency-name: duckdb
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-minor-and-patch-dependency-updates
- dependency-name: pydantic-settings
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-minor-and-patch-dependency-updates
- dependency-name: uvicorn[standard]
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-minor-and-patch-dependency-updates
- dependency-name: httpx
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-minor-and-patch-dependency-updates
- dependency-name: ruff
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-minor-and-patch-dependency-updates
- dependency-name: sphinx-rtd-theme
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-minor-and-patch-dependency-updates
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot requested a review from a team as a code owner December 1, 2024 03:04
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Dec 1, 2024
@amitschang
Copy link
Member

we can't bump pydantic now, due to #213. Should prob exclude it from the group temporarily, so we can get the other stuff in

amitschang added a commit that referenced this pull request Dec 9, 2024
Copy link
Contributor Author

dependabot bot commented on behalf of github Dec 9, 2024

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot bot closed this Dec 9, 2024
@dependabot dependabot bot deleted the dependabot/pip/all-minor-and-patch-dependency-updates-47c694cae6 branch December 9, 2024 15:46
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file python Pull requests that update Python code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant