Update all dependencies #77
Open
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
![renovate[bot]](https://avatars.githubusercontent.com/in/2740?s=60&v=4){kind=small}
|
Holding off on this until fakeredis supports this version of redis. See jamesls/fakeredis#329. |
renovate
bot
force-pushed
the
renovate/all
branch
2 times, most recently
from
4f887da
to
7ee6efc
Compare
renovate
bot
force-pushed
the
renovate/all
branch
6 times, most recently
from
16d26db
to
8c966e2
Compare
cunla
approved these changes
Apr 15, 2022
renovate
bot
force-pushed
the
renovate/all
branch
3 times, most recently
from
c0b7635
to
9d2b5f0
Compare
renovate
bot
force-pushed
the
renovate/all
branch
4 times, most recently
from
7dc2411
to
2dc4152
Compare
renovate
bot
force-pushed
the
renovate/all
branch
8 times, most recently
from
8ae3d06
to
52849bb
Compare
renovate
bot
force-pushed
the
renovate/all
branch
4 times, most recently
from
bb139d7
to
135eacb
Compare
renovate
bot
force-pushed
the
renovate/all
branch
12 times, most recently
from
9bae03d
to
b451e7f
Compare
renovate
bot
force-pushed
the
renovate/all
branch
10 times, most recently
from
b61437e
to
82d26ff
Compare
renovate
bot
force-pushed
the
renovate/all
branch
3 times, most recently
from
52072fc
to
ac2ec7e
Compare
renovate
bot
force-pushed
the
renovate/all
branch
3 times, most recently
from
46e3387
to
9f88b70
Compare
renovate
bot
force-pushed
the
renovate/all
branch
from
9f88b70
to
0d40e57
Compare
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
==1.1.0->==1.3.2==0.14.3->==0.17.3==3.1.2->==3.1.4==3.4.1->==3.7==1.4.43->==2.0.36==2.2.2->==3.1.3v3->v4==22.1.0->==24.1.0==3.8.3->==3.10.11==1.8.1->==1.14.0==3.5.2->==3.8.1==1.7.7->==2.3.1==4.0.1->==4.2.0==4.11.1->==4.12.3==22.10.0->==24.10.0==5.0.1->==6.2.0==6.5.0->==7.6.4==1.3.0->==2.2.0==1.10.0->==2.26.1==0.86.0->==0.115.5==0.9.0->==1.0.0==3.8.0->==3.16.1==5.0.4->==7.1.1==20.1.0->==23.0.011.5.0->11.10.0==0.23.0->==0.27.2==5.10.1->==5.13.2==2.1.2->==2.2.0==4.9.1->==5.3.0==0.5.2->==0.8.1==2.1.1->==2.2.6==3.8.1->==3.10.11==0.5.6->==0.5.7==1.0.5->==1.1.1==5.9.1->==7.0.0==4.21.9->==5.28.3==1.10.1->==1.16.0==7.2.0->==8.3.3==0.20.1->==0.24.0==4.0.0->==6.0.0==3.3->==3.4==3.0.2->==3.6.1==0.0.5->==0.0.17==4.3.4->==5.2.0==2.28.1->==2.32.3==1.10.1->==2.18.0==0.19.0->==0.32.0Release Notes
lepture/authlib (Authlib)
v1.3.2: Version 1.3.2Compare Source
quoteclient id and secret.unquotebasic auth header for authorization server.v1.3.1: Version 1.3.1Compare Source
Prevent
OctKeyto import ssh and PEM strings.v1.3.0: Version 1.3.0Compare Source
Bug fixes
Breaking changes
v1.2.1: Version 1.2.1Compare Source
ClientSecretJWT.signmethod, via #552authorize_redirectfor Starlette v0.26.0, via #533has_client_secretmethod and documentation, via #513request_invalidandtoken_revokedremaining occurencesand documentation. #514
grant_typesandresponse_typesdefault values, via #509v1.2.0: Version 1.2.0Compare Source
request.bodytoResourceProtector, #485.flask.ginstead of_app_ctx_stack, #482.headersparameter back toClientSecretJWT, #457.realmparameter in OAuth 1 clients, #339.default_timeoutfor requestsOAuth2SessionandAssertionSession.jwk.loadsandjwk.dumpspgjones/hypercorn (Hypercorn)
v0.17.3Compare Source
v0.17.2Compare Source
v0.17.1Compare Source
v0.17.0Compare Source
ProxyFixMiddleware.
is accepted.
v0.16.0Compare Source
the HTTP/2 rapid reset attack.
proxy.
manage memory leaks in apps.
flushing.
headers on first response byte, erroring if
start_responseisnot called, and switching wsgi.errors to stdout.
race conditions.
v0.15.0Compare Source
found.
failures.
memory leak issues.
is being used.
systems that don't support multiprocessing.
v0.14.4Compare Source
unmaintained toml library.
client-only code).
0.22 is not supported).
machines.
pallets/jinja (Jinja2)
v3.1.4Compare Source
Released 2024-05-05
xmlattrfilter does not allow keys with/solidus,>greater-than sign, or
=equals sign, in addition to disallowing spaces.Regardless of any validation done by Jinja, user input should never be used
as keys to this filter, or must be separately validated first.
:ghsa:
h75v-3vvj-5mfjv3.1.3Compare Source
Released 2024-01-10
empty. :pr:
1858xmlattrfilter does not allow keys with spaces. :ghsa:h5c8-rqwp-cp95{% trans %}blocksmore helpful. :pr:
1918Python-Markdown/markdown (Markdown)
v3.7Compare Source
Changed
Refactor
abbrExtensionA new
AbbrTreeprocessorhas been introduced, which replaces the now deprecatedAbbrInlineProcessor. Abbreviation processing now happens after Attribute Lists,avoiding a conflict between the two extensions (#1460).
The
AbbrPreprocessorclass has been renamed toAbbrBlockprocessor, whichbetter reflects what it is.
AbbrPreprocessorhas been deprecated.A call to
Markdown.reset()now clears all previously defined abbreviations.Abbreviations are now sorted by length before executing
AbbrTreeprocessorto ensure that multi-word abbreviations are implemented even if an abbreviation
exists for one of those component words. (#1465)
Abbreviations without a definition are now ignored. This avoids applying
abbr tags to text without a title value.
Added an optional
glossaryconfiguration option to the abbreviations extension.This provides a simple and efficient way to apply a dictionary of abbreviations
to every page.
Abbreviations can now be disabled by setting their definition to
""or''.This can be useful when using the
glossaryoption.Fixed
v3.6Compare Source
Changed
Refactor TOC Sanitation
striptagsis provided to convert headings to plain text.Unlike, the
markupsafeimplementation, HTML entities are not unescaped.name, richhtml, and unescaped rawdata-toc-labelaresaved to
toc_tokens, allowing users to access the full rich text content ofthe headings directly from
toc_tokens.data-toc-labelis sanitized separate from heading contentbefore being written to
name. This fixes a bug which allowed markup throughin certain circumstances. To access the raw unsanitized data, retrieve the
value from
token['data-toc-label']directly.html.unescapecall is made just prior to callingslugifyso thatslugifyonly operates on Unicode characters. Note thathtml.unescapeisnot run on
name,html, ordata-toc-label.get_nameandstashedHTML2textdefined in thetocextensionare both deprecated. Instead, third party extensions should use some
combination of the new functions
run_postprocessors,render_inner_htmlandstriptags.Fixed
scripts/*.pyin the generated source tarballs (#1430).^) and square brackets (]) but explicitly excludebackslashes (
\) from abbreviations (#1444).attr_list,fenced_code), quoted attribute values arenow allowed to contain curly braces (
}) (#1414).v3.5.2Compare Source
Fixed
convertFile- it accepts only bytes-based buffers.Also remove legacy checks from Python 2 (#1400)
AdmonitionProcessor.content_indentunset(#1404)
InlineProcessorwithAtomicString(#1406).codehilitewith an emptycodetag (#1405).v3.5.1Compare Source
Fixed
trigger quadratic line counting behavior (#1392).
v3.5Compare Source
v3.4.4Compare Source
v3.4.3Compare Source
v3.4.2Compare Source
actions/checkout (actions/checkout)
v4Compare Source
Tinche/aiofiles (aiofiles)
v24.1.0: 24.1.0Compare Source
os.linkconditionally to fix importing on android.#175
aiofiles.os.__all__when running on Windows.aiofiles.os.path.abspathandaiofiles.os.getcwd.#174
#184
v23.2.1: 23.2.1Compare Source
os.statvfsconditionally to fix importing on non-UNIX systems.#171 #172
v23.2.0: 23.2.0Compare Source
23.2.0
#166 #168
aiofiles.tempfile.NamedTemporaryFilenow accepts adelete_on_closeargument, just like the stdlib version.aiofiles.tempfile.NamedTemporaryFileno longer exposes adeleteattribute, just like the stdlib version.aiofiles.os.statvfsandaiofiles.os.path.ismount.#162
#169
v23.1.0Compare Source
aio-libs/aiohttp (aiohttp)
v3.10.11Compare Source
====================
Bug fixes
Authentication provided by a redirect now takes precedence over provided
authwhen making requests with the client -- by :user:PLPeeters.Related issues and pull requests on GitHub:
:issue:
9436.Fixed :py:meth:
WebSocketResponse.close() <aiohttp.web.WebSocketResponse.close>to discard non-close messages within its timeout window after sending close -- by :user:lenard-mosys.Related issues and pull requests on GitHub:
:issue:
9506.Fixed a deadlock that could occur while attempting to get a new connection slot after a timeout -- by :user:
bdraco.The connector was not cancellation-safe.
Related issues and pull requests on GitHub:
:issue:
9670, :issue:9671.Fixed the WebSocket flow control calculation undercounting with multi-byte data -- by :user:
bdraco.Related issues and pull requests on GitHub:
:issue:
9686.Fixed incorrect parsing of chunk extensions with the pure Python parser -- by :user:
bdraco.Related issues and pull requests on GitHub:
:issue:
9851.Fixed system routes polluting the middleware cache -- by :user:
bdraco.Related issues and pull requests on GitHub:
:issue:
9852.Removals and backward incompatible breaking changes
Improved performance of the connector when a connection can be reused -- by :user:
bdraco.If
BaseConnector.connecthas been subclassed and replaced with custom logic, theceil_timeoutmust be added.Related issues and pull requests on GitHub:
:issue:
9600.Miscellaneous internal changes
Improved performance of the client request lifecycle when there are no cookies -- by :user:
bdraco.Related issues and pull requests on GitHub:
:issue:
9470.Improved performance of sending client requests when the writer can finish synchronously -- by :user:
bdraco.Related issues and pull requests on GitHub:
:issue:
9485.Improved performance of serializing HTTP headers -- by :user:
bdraco.Related issues and pull requests on GitHub:
:issue:
9603.Passing
enable_cleanup_closedto :py:class:aiohttp.TCPConnectoris now ignored on Python 3.12.7+ and 3.13.1+ since the underlying bug that caused asyncio to leak SSL connections has been fixed upstream -- by :user:bdraco.Related issues and pull requests on GitHub:
:issue:
9726, :issue:9736.v3.10.10Compare Source
====================
Bug fixes
Fixed error messages from :py:class:
~aiohttp.resolver.AsyncResolverbeing swallowed -- by :user:bdraco.Related issues and pull requests on GitHub:
:issue:
9451, :issue:9455.Features
Added :exc:
aiohttp.ClientConnectorDNSErrorfor differentiating DNS resolution errors from other connector errors -- by :user:mstojcevich.Related issues and pull requests on GitHub:
:issue:
8455.Miscellaneous internal changes
Simplified DNS resolution throttling code to reduce chance of race conditions -- by :user:
bdraco.Related issues and pull requests on GitHub:
:issue:
9454.v3.10.9Compare Source
===================
Bug fixes
Fixed proxy headers being used in the
ConnectionKeyhash when a proxy was not being used -- by :user:bdraco.If default headers are used, they are also used for proxy headers. This could have led to creating connections that were not needed when one was already available.
Related issues and pull requests on GitHub:
:issue:
9368.Widened the type of the
trace_request_ctxparameter of:meth:
ClientSession.request() <aiohttp.ClientSession.request>and friends-- by :user:
layday.Related issues and pull requests on GitHub:
:issue:
9397.Removals and backward incompatible breaking changes
Fixed failure to try next host after single-host connection timeout -- by :user:
brettdh.The default client :class:
aiohttp.ClientTimeoutparams has changed to includeConfiguration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.