Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

chore(deps): bump the python-packages group across 1 directory with 4 updates #317

Closed
wants to merge 1 commit into from
Closed

chore(deps): bump the python-packages group across 1 directory with 4 updates #317

wants to merge 1 commit into from

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jul 19, 2024 •
edited
Loading

Bumps the python-packages group with 4 updates in the / directory: importlib-metadata, readme-renderer, setuptools and twine.

Updates importlib-metadata from 7.2.1 to 8.0.0

Changelog

Sourced from importlib-metadata's changelog.

v8.0.0

Deprecations and Removals

  • Message.getitem now raises a KeyError on missing keys. (#371)
  • Removed deprecated support for Distribution subclasses not implementing abstract methods.
Commits
  • f390168 Finalize
  • c3bae1e Merge pull request #491 from python/debt/remove-legacy
  • a970a49 Message.getitem now raises a KeyError on missing keys.
  • 32c14aa Removed deprecated support for Distribution subclasses not implementing abstr...
  • See full diff in compare view

Updates readme-renderer from 43.0 to 44.0

Release notes

Sourced from readme-renderer's releases.

44.0

What's Changed

New Contributors

Full Changelog: pypa/readme_renderer@43.0...44.0

Changelog

Sourced from readme-renderer's changelog.

44.0 (2024-07-08)

  • Drop support for Python 3.8 (#315)
  • Require docutils 0.21.2 and higher (#315)
  • Remove HTML5 <s> tag from the list of allowed HTML tags (#315)
  • Test all supported CPython and PyPy versions in CI (#315)
  • Resolve Node 16 deprecation warnings in CI (#309)
  • Lint specific directories (#312)
  • Build a wheel once for all tox test environments (#308)
  • Lazy open output files, and always close them (#314)
  • Gitpod: Migrate to the Even Better TOML extension (#306)
  • check-manifest: Remove a now-default .gitpod.yml exclusion (#307)
Commits

Updates setuptools from 70.1.1 to 71.0.3

Changelog

Sourced from setuptools's changelog.

v71.0.3

Bugfixes

  • Reset the backports module when enabling vendored packages. (#4476)

v71.0.2

Bugfixes

  • Include all vendored files in the sdist. (#4480)

v71.0.1

Bugfixes

  • Restored package data that went missing in 71.0. This change also incidentally causes tests to be installed once again. (#4475)

v71.0.0

Deprecations and Removals

  • Now setuptools declares its own dependencies in the core extra. Dependencies are still vendored for bootstrapping purposes, but setuptools will prefer installed dependencies if present. The core extra is used for informational purposes and should not be declared in package metadata (e.g. build-requires). Downstream packagers can de-vendor by simply removing the setuptools/_vendor directory. Since Setuptools now prefers installed dependencies, those installing to an environment with old, incompatible dependencies will not work. In that case, either uninstall the incompatible dependencies or upgrade them to satisfy those declared in core. (#2825)

v70.3.0

Features

  • Support for loading distutils from the standard library is now deprecated, including use of SETUPTOOLS_USE_DISTUTILS=stdlib and importing distutils before importing setuptools. (#4137)

Bugfixes

  • pypa/distutils#268

... (truncated)

Commits
  • 6d915ca Bump version: 71.0.2 → 71.0.3
  • fddda37 Merge pull request #4486 from pypa/bugfix/4476-reset-backports
  • 299d276 Reset the backports module when enabling vendored packages.
  • 17b735a Bump version: 71.0.1 → 71.0.2
  • 5a59af4 Merge pull request #4485 from pypa/bugfix/4480-vendored-metadata
  • 65e00b6 Include all vendored files in the sdist.
  • 284e8af Add a failing test covering the missed expectation.
  • ea5ce1a Update changelog to reflect common experience seen in #4478 and #4483.
  • f2a6bb1 Bump version: 71.0.0 → 71.0.1
  • 87afa4b Merge pull request #4479 from pypa/bugfix/4475-all-the-files
  • Additional commits viewable in compare view

Updates twine from 5.1.0 to 5.1.1

Changelog

Sourced from twine's changelog.

Twine 5.1.1 (2024-06-26)

Bugfixes ^^^^^^^^

  • Resolve DeprecationWarnings when extracting twine metadata. ([#1115](https://github.com/pypa/twine/issues/1115) <https://github.com/pypa/twine/issues/1115>_)

  • Fix bug for Repository URLs with auth where the port was lost. When attempting to prevent printing authentication credentials in URLs provided with username and password, we did not properly handle the case where the URL also contains a port (when reconstructing the URL). This is now handled and tested to ensure no regressions. (#fix-repo-urls-with-auth-and-port <https://github.com/pypa/twine/issues/fix-repo-urls-with-auth-and-port>_)

Commits
  • e29791d Prepare for v5.1.1 (#1114)
  • f213ede fix: Retrieve metadata correctly from importlib_metadata (#1115)
  • 6fbf880 Merge pull request #1112 from pypa/bug/1111
  • 3eb9121 Remove extra line from changelog entry
  • 0191f0c Preserve ports when munging repository URLs
  • c588793 Merge pull request #1110 from DimitriPapadopoulos/principle
  • 1fdc197 Fix a couple typos
  • 13b07b6 Merge pull request #1109 from pypa/dependabot/github_actions/actions/checkout...
  • a3e8373 build(deps): bump actions/checkout from 4.1.5 to 4.1.6
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps): bump the python-packages group across 1 directory with 4…
dc2d44b 
… updates

Bumps the python-packages group with 4 updates in the / directory: [importlib-metadata](https://github.com/python/importlib_metadata), [readme-renderer](https://github.com/pypa/readme_renderer), [setuptools](https://github.com/pypa/setuptools) and [twine](https://github.com/pypa/twine).


Updates `importlib-metadata` from 7.2.1 to 8.0.0
- [Release notes](https://github.com/python/importlib_metadata/releases)
- [Changelog](https://github.com/python/importlib_metadata/blob/main/NEWS.rst)
- [Commits](python/importlib_metadata@v7.2.1...v8.0.0)

Updates `readme-renderer` from 43.0 to 44.0
- [Release notes](https://github.com/pypa/readme_renderer/releases)
- [Changelog](https://github.com/pypa/readme_renderer/blob/main/CHANGES.rst)
- [Commits](pypa/readme_renderer@43.0...44.0)

Updates `setuptools` from 70.1.1 to 71.0.3
- [Release notes](https://github.com/pypa/setuptools/releases)
- [Changelog](https://github.com/pypa/setuptools/blob/main/NEWS.rst)
- [Commits](pypa/setuptools@v70.1.1...v71.0.3)

Updates `twine` from 5.1.0 to 5.1.1
- [Release notes](https://github.com/pypa/twine/releases)
- [Changelog](https://github.com/pypa/twine/blob/main/docs/changelog.rst)
- [Commits](pypa/twine@5.1.0...v5.1.1)

---
updated-dependencies:
- dependency-name: importlib-metadata
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: python-packages
- dependency-name: readme-renderer
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: python-packages
- dependency-name: setuptools
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: python-packages
- dependency-name: twine
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-packages
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Jul 19, 2024
@dependabot dependabot bot mentioned this pull request Jul 19, 2024
Closed
@josegonzalez
Copy link
Owner

@dependabot rebase

@dependabot Dependabot
Copy link
Contributor Author

dependabot bot commented on behalf of github Jul 22, 2024

Superseded by #319.

@dependabot dependabot bot closed this Jul 22, 2024
@dependabot dependabot bot deleted the dependabot/pip/python-packages-766df625b1 branch July 22, 2024 02:40
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
dependencies Pull requests that update a dependency file python Pull requests that update Python code
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
1 participant
@josegonzalez