Update all dependencies #77
Open
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
![renovate[bot]](https://avatars.githubusercontent.com/in/2740?s=60&v=4){kind=small}
|
Holding off on this until fakeredis supports this version of redis. See jamesls/fakeredis#329. |
renovate
bot
force-pushed
the
renovate/all
branch
2 times, most recently
from
4f887da to
7ee6efc
Compare
renovate
bot
force-pushed
the
renovate/all
branch
6 times, most recently
from
16d26db to
8c966e2
Compare
cunla
approved these changes
Apr 15, 2022
renovate
bot
force-pushed
the
renovate/all
branch
3 times, most recently
from
c0b7635 to
9d2b5f0
Compare
renovate
bot
force-pushed
the
renovate/all
branch
4 times, most recently
from
7dc2411 to
2dc4152
Compare
renovate
bot
force-pushed
the
renovate/all
branch
8 times, most recently
from
8ae3d06 to
52849bb
Compare
renovate
bot
force-pushed
the
renovate/all
branch
4 times, most recently
from
bb139d7 to
135eacb
Compare
renovate
bot
force-pushed
the
renovate/all
branch
4 times, most recently
from
46458aa to
5b451d6
Compare
renovate
bot
force-pushed
the
renovate/all
branch
3 times, most recently
from
da9bcf8 to
81e8281
Compare
renovate
bot
force-pushed
the
renovate/all
branch
7 times, most recently
from
9d6548a to
a74ddd1
Compare
renovate
bot
force-pushed
the
renovate/all
branch
3 times, most recently
from
7e73cda to
087a798
Compare
renovate
bot
force-pushed
the
renovate/all
branch
7 times, most recently
from
8f9979e to
eeac85d
Compare
renovate
bot
force-pushed
the
renovate/all
branch
4 times, most recently
from
8a1f243 to
939e1ca
Compare
renovate
bot
force-pushed
the
renovate/all
branch
from
939e1ca to
d2db8d2
Compare
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
==1.1.0->==1.4.1==0.14.3->==0.17.3==3.1.2->==3.1.5==3.4.1->==3.7==1.4.43->==2.0.38==2.2.2->==3.1.3v3->v4==22.1.0->==24.1.0==3.8.3->==3.11.12==1.8.1->==1.14.1==3.5.2->==3.8.1==1.7.7->==2.3.1==4.0.1->==4.2.1==4.11.1->==4.13.3==22.10.0->==25.1.0==5.0.1->==6.2.0==6.5.0->==7.6.10==1.3.0->==2.2.0==1.10.0->==2.26.2==0.86.0->==0.115.8==0.9.0->==1.0.0==3.8.0->==3.17.0==5.0.4->==7.1.1==20.1.0->==23.0.011.5.0->11.11.1==0.23.0->==0.28.1==5.10.1->==6.0.0==2.1.2->==2.2.0==4.9.1->==5.3.0==0.5.2->==0.8.1==2.1.1->==2.2.7==3.8.1->==3.10.15==0.5.6->==0.5.7==1.0.5->==1.1.1==5.9.1->==7.0.2==4.21.9->==5.29.3==1.10.1->==1.17.0==7.2.0->==8.3.4==0.20.1->==0.25.3==4.0.0->==6.0.0==3.3->==3.5==3.0.2->==3.6.1==0.0.5->==0.0.20==4.3.4->==5.2.1==2.28.1->==2.32.3==1.10.1->==2.20.0==0.19.0->==0.34.0Release Notes
lepture/authlib (Authlib)
v1.4.1: Version 1.4.1Compare Source
v1.4.0Compare Source
v1.3.2: Version 1.3.2Compare Source
quoteclient id and secret.unquotebasic auth header for authorization server.v1.3.1: Version 1.3.1Compare Source
Prevent
OctKeyto import ssh and PEM strings.v1.3.0: Version 1.3.0Compare Source
Bug fixes
Breaking changes
v1.2.1: Version 1.2.1Compare Source
ClientSecretJWT.signmethod, via #552authorize_redirectfor Starlette v0.26.0, via #533has_client_secretmethod and documentation, via #513request_invalidandtoken_revokedremaining occurencesand documentation. #514
grant_typesandresponse_typesdefault values, via #509v1.2.0: Version 1.2.0Compare Source
request.bodytoResourceProtector, #485.flask.ginstead of_app_ctx_stack, #482.headersparameter back toClientSecretJWT, #457.realmparameter in OAuth 1 clients, #339.default_timeoutfor requestsOAuth2SessionandAssertionSession.jwk.loadsandjwk.dumpspgjones/hypercorn (Hypercorn)
v0.17.3Compare Source
v0.17.2Compare Source
v0.17.1Compare Source
v0.17.0Compare Source
ProxyFixMiddleware.
is accepted.
v0.16.0Compare Source
the HTTP/2 rapid reset attack.
proxy.
manage memory leaks in apps.
flushing.
headers on first response byte, erroring if
start_responseisnot called, and switching wsgi.errors to stdout.
race conditions.
v0.15.0Compare Source
found.
failures.
memory leak issues.
is being used.
systems that don't support multiprocessing.
v0.14.4Compare Source
unmaintained toml library.
client-only code).
0.22 is not supported).
machines.
pallets/jinja (Jinja2)
v3.1.5Compare Source
Unreleased
renderfor an async template usesasyncio.run.:pr:
1952auto_aiterwarnings. :pr:1960aclose-ableAsyncGeneratorfromTemplate.generate_async. :pr:1960root_render_func()unclosed inTemplate.generate_async. :pr:1960:pr:
1960v3.1.4Compare Source
Released 2024-05-05
xmlattrfilter does not allow keys with/solidus,>greater-than sign, or
=equals sign, in addition to disallowing spaces.Regardless of any validation done by Jinja, user input should never be used
as keys to this filter, or must be separately validated first.
:ghsa:
h75v-3vvj-5mfjv3.1.3Compare Source
Released 2024-01-10
empty. :pr:
1858xmlattrfilter does not allow keys with spaces. :ghsa:h5c8-rqwp-cp95{% trans %}blocksmore helpful. :pr:
1918Python-Markdown/markdown (Markdown)
v3.7Compare Source
Changed
Refactor
abbrExtensionA new
AbbrTreeprocessorhas been introduced, which replaces the now deprecatedAbbrInlineProcessor. Abbreviation processing now happens after Attribute Lists,avoiding a conflict between the two extensions (#1460).
The
AbbrPreprocessorclass has been renamed toAbbrBlockprocessor, whichbetter reflects what it is.
AbbrPreprocessorhas been deprecated.A call to
Markdown.reset()now clears all previously defined abbreviations.Abbreviations are now sorted by length before executing
AbbrTreeprocessorto ensure that multi-word abbreviations are implemented even if an abbreviation
exists for one of those component words. (#1465)
Abbreviations without a definition are now ignored. This avoids applying
abbr tags to text without a title value.
Added an optional
glossaryconfiguration option to the abbreviations extension.This provides a simple and efficient way to apply a dictionary of abbreviations
to every page.
Abbreviations can now be disabled by setting their definition to
""or''.This can be useful when using the
glossaryoption.Fixed
v3.6Compare Source
Changed
Refactor TOC Sanitation
striptagsis provided to convert headings to plain text.Unlike, the
markupsafeimplementation, HTML entities are not unescaped.name, richhtml, and unescaped rawdata-toc-labelaresaved to
toc_tokens, allowing users to access the full rich text content ofthe headings directly from
toc_tokens.data-toc-labelis sanitized separate from heading contentbefore being written to
name. This fixes a bug which allowed markup throughin certain circumstances. To access the raw unsanitized data, retrieve the
value from
token['data-toc-label']directly.html.unescapecall is made just prior to callingslugifyso thatslugifyonly operates on Unicode characters. Note thathtml.unescapeisnot run on
name,html, ordata-toc-label.get_nameandstashedHTML2textdefined in thetocextensionare both deprecated. Instead, third party extensions should use some
combination of the new functions
run_postprocessors,render_inner_htmlandstriptags.Fixed
scripts/*.pyin the generated source tarballs (#1430).^) and square brackets (]) but explicitly excludebackslashes (
\) from abbreviations (#1444).attr_list,fenced_code), quoted attribute values arenow allowed to contain curly braces (
}) (#1414).v3.5.2Compare Source
Fixed
convertFile- it accepts only bytes-based buffers.Also remove legacy checks from Python 2 (#1400)
AdmonitionProcessor.content_indentunset(#1404)
InlineProcessorwithAtomicString(#1406).codehilitewith an emptycodetag (#1405).v3.5.1Compare Source
Fixed
trigger quadratic line counting behavior (#1392).
v3.5Compare Source
v3.4.4Compare Source
v3.4.3Compare Source
v3.4.2Compare Source
actions/checkout (actions/checkout)
v4Compare Source
Tinche/aiofiles (aiofiles)
v24.1.0: 24.1.0Compare Source
os.linkconditionally to fix importing on android.#175
aiofiles.os.__all__when running on Windows.aiofiles.os.path.abspathandaiofiles.os.getcwd.#174
#184
v23.2.1: 23.2.1Compare Source
os.statvfsconditionally to fix importing on non-UNIX systems.#171 #172
v23.2.0: 23.2.0Compare Source
23.2.0
#166 #168
aiofiles.tempfile.NamedTemporaryFilenow accepts adelete_on_closeargument, just like the stdlib version.aiofiles.tempfile.NamedTemporaryFileno longer exposes adeleteattribute, just like the stdlib version.aiofiles.os.statvfsandaiofiles.os.path.ismount.#162
#169
v23.1.0Compare Source
aio-libs/aiohttp (aiohttp)
v3.11.12: 3.11.12Compare Source
Bug fixes
MultipartForm.decode()now follows RFC1341 7.2.1 with aCRLFafter the boundary-- by :user:
imnotjames.Related issues and pull requests on GitHub:
#10270.
Restored the missing
total_bytesattribute toEmptyStreamReader-- by :user:bdraco.Related issues and pull requests on GitHub:
#10387.
Features
Updated :py:func:
~aiohttp.requestto make it accept_RequestOptionskwargs.-- by :user:
Cycloctane.Related issues and pull requests on GitHub:
#10300.
Improved logging of HTTP protocol errors to include the remote address -- by :user:
bdraco.Related issues and pull requests on GitHub:
#10332.
Improved documentation
Added
aiohttp-openmetricsto list of third-party libraries -- by :user:jelmer.Related issues and pull requests on GitHub:
#10304.
Packaging updates and notes for downstreams
Added missing files to the source distribution to fix
Makefiletargets.Added a
cythonize-nodepstarget to run Cython without invoking pip to install dependencies.Related issues and pull requests on GitHub:
#10366.
Started building armv7l musllinux wheels -- by :user:
bdraco.Related issues and pull requests on GitHub:
#10404.
Contributor-facing changes
The CI/CD workflow has been updated to use
upload-artifactv4 anddownload-artifactv4 GitHub Actions -- by :user:silamon.Related issues and pull requests on GitHub:
#10281.
Miscellaneous internal changes
Restored support for zero copy writes when using Python 3.12 versions 3.12.9 and later or Python 3.13.2+ -- by :user:
bdraco.Zero copy writes were previously disabled due to :cve:
2024-12254which is resolved in these Python versions.Related issues and pull requests on GitHub:
#10137.
v3.11.11Compare Source
====================
Bug fixes
Updated :py:meth:
~aiohttp.ClientSession.requestto reuse thequote_cookiesetting fromClientSession._cookie_jarwhen processing cookies parameter.-- by :user:
Cycloctane.Related issues and pull requests on GitHub:
:issue:
10093.Fixed type of
SSLContextfor some static type checkers (e.g. pyright).Related issues and pull requests on GitHub:
:issue:
10099.Updated :meth:
aiohttp.web.StreamResponse.writeannotation to also allow :class:bytearrayand :class:memoryviewas inputs -- by :user:cdce8p.*Related issues and pull reque
Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.