Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore(deps): Bump the pipenv group in /services/datalad with 9 updates #3039

Merged
merged 1 commit into from
May 2, 2024

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github May 1, 2024

Bumps the pipenv group in /services/datalad with 9 updates:

Package From To
redis 5.0.3 5.0.4
gunicorn 21.2.0 22.0.0
elastic-apm 6.21.4.post8347027212 6.22.0
boto3 1.34.74 1.34.95
datalad 0.19.6 1.0.2
pytest 8.1.1 8.2.0
coverage 7.4.4 7.5.0
pytest-xdist 3.5.0 3.6.1
exceptiongroup 1.2.0 1.2.1

Updates redis from 5.0.3 to 5.0.4

Release notes

Sourced from redis's releases.

5.0.4

Changes

🐛 Bug Fixes

Commits

Updates gunicorn from 21.2.0 to 22.0.0

Release notes

Sourced from gunicorn's releases.

Gunicorn 22.0 has been released

Gunicorn 22.0.0 has been released. This version fix the numerous security vulnerabilities. You're invited to upgrade asap your own installation.

Changes:

22.0.0 - 2024-04-17
===================
  • use utime to notify workers liveness
  • migrate setup to pyproject.toml
  • fix numerous security vulnerabilities in HTTP parser (closing some request smuggling vectors)
  • parsing additional requests is no longer attempted past unsupported request framing
  • on HTTP versions < 1.1 support for chunked transfer is refused (only used in exploits)
  • requests conflicting configured or passed SCRIPT_NAME now produce a verbose error
  • Trailer fields are no longer inspected for headers indicating secure scheme
  • support Python 3.12

** Breaking changes **

  • minimum version is Python 3.7
  • the limitations on valid characters in the HTTP method have been bounded to Internet Standards
  • requests specifying unsupported transfer coding (order) are refused by default (rare)
  • HTTP methods are no longer casefolded by default (IANA method registry contains none affected)
  • HTTP methods containing the number sign (#) are no longer accepted by default (rare)
  • HTTP versions < 1.0 or >= 2.0 are no longer accepted by default (rare, only HTTP/1.1 is supported)
  • HTTP versions consisting of multiple digits or containing a prefix/suffix are no longer accepted
  • HTTP header field names Gunicorn cannot safely map to variables are silently dropped, as in other software
  • HTTP headers with empty field name are refused by default (no legitimate use cases, used in exploits)
  • requests with both Transfer-Encoding and Content-Length are refused by default (such a message might indicate an attempt to perform request smuggling)
  • empty transfer codings are no longer permitted (reportedly seen with really old & broken proxies)

** SECURITY **

  • fix CVE-2024-1135
  1. Documentation is available there: https://docs.gunicorn.org/en/stable/news.html
  2. Packages: https://pypi.org/project/gunicorn/
Commits
  • f63d59e bump to 22.0
  • 4ac81e0 Merge pull request #3175 from e-kwsm/typo
  • 401cecf Merge pull request #3179 from dhdaines/exclude-eventlet-0360
  • 0243ec3 fix(deps): exclude eventlet 0.36.0
  • 628a0bc chore: fix typos
  • 88fc4a4 Merge pull request #3131 from pajod/patch-py12-rebased
  • deae2fc CI: back off the agressive timeout
  • f470382 docs: promise 3.12 compat
  • 5e30bfa add changelog to project.urls (updated for PEP621)
  • 481c3f9 remove setup.cfg - overridden by pyproject.toml
  • Additional commits viewable in compare view

Updates elastic-apm from 6.21.4.post8347027212 to 6.22.0

Release notes

Sourced from elastic-apm's releases.

v6.22.0

Elastic APM Python agent

Features

  • Add ability to override default JSON serialization #2018

Full Changelog: elastic/apm-agent-python@v6.21.4...v6.22.0

Changelog

Sourced from elastic-apm's changelog.

==== 6.22.0 - 2024-04-03

[float] ===== Features

  • Add ability to override default JSON serialization {pull}2018#2018

[[release-notes-6.21.4]] ==== 6.21.4 - 2024-03-19

[float] ===== Bug fixes

  • Fix urllib3 2.0.1+ crash with many args {pull}2002#2002

[[release-notes-6.21.3]] ==== 6.21.3 - 2024-03-08

[float] ===== Bug fixes

  • Fix artifacts download in CI workflows {pull}1996#1996

[[release-notes-6.21.2]] ==== 6.21.2 - 2024-03-07

[float] ===== Bug fixes

  • Fix artifacts upload in CI build-distribution workflow {pull}1993#1993

[[release-notes-6.21.1]] ==== 6.21.1 - 2024-03-07

[float] ===== Bug fixes

  • Fix CI release workflow {pull}1990#1990

[[release-notes-6.21.0]] ==== 6.21.0 - 2024-03-06

[float] ===== Bug fixes

  • Fix starlette middleware setup without client argument {pull}1952#1952
  • Fix blocking of gRPC stream-to-stream requests {pull}1967#1967
  • Always take into account body reading time for starlette requests {pull}1970#1970
  • Make urllib3 transport tests more robust against local env {pull}1969#1969
  • Clarify starlette integration documentation {pull}1956#1956

... (truncated)

Commits

Updates boto3 from 1.34.74 to 1.34.95

Changelog

Sourced from boto3's changelog.

1.34.95

  • api-change:chime-sdk-voice: [botocore] Due to changes made by the Amazon Alexa service, GetSipMediaApplicationAlexaSkillConfiguration and PutSipMediaApplicationAlexaSkillConfiguration APIs are no longer available for use. For more information, refer to the Alexa Smart Properties page.
  • api-change:codeartifact: [botocore] Add support for the Ruby package format.
  • api-change:fms: [botocore] AWS Firewall Manager now supports the network firewall service stream exception policy feature for accounts within your organization.
  • api-change:omics: [botocore] Add support for workflow sharing and dynamic run storage
  • api-change:opensearch: [botocore] This release enables customers to create Route53 A and AAAA alias record types to point custom endpoint domain to OpenSearch domain's dualstack search endpoint.
  • api-change:pinpoint-sms-voice-v2: [botocore] Amazon Pinpoint has added two new features Multimedia services (MMS) and protect configurations. Use the three new MMS APIs to send media messages to a mobile phone which includes image, audio, text, or video files. Use the ten new protect configurations APIs to block messages to specific countries.
  • api-change:qbusiness: [botocore] This is a general availability (GA) release of Amazon Q Business. Q Business enables employees in an enterprise to get comprehensive answers to complex questions and take actions through a unified, intuitive web-based chat experience - using an enterprise's existing content, data, and systems.
  • api-change:quicksight: [botocore] New Q embedding supporting Generative Q&A
  • api-change:route53resolver: [botocore] Release of FirewallDomainRedirectionAction parameter on the Route 53 DNS Firewall Rule. This allows customers to configure a DNS Firewall rule to inspect all the domains in the DNS redirection chain (default) , such as CNAME, ALIAS, DNAME, etc., or just the first domain and trust the rest.
  • api-change:sagemaker: [botocore] Amazon SageMaker Training now supports the use of attribute-based access control (ABAC) roles for training job execution roles. Amazon SageMaker Inference now supports G6 instance types.
  • api-change:signer: [botocore] Documentation updates for AWS Signer. Adds cross-account signing constraint and definitions for cross-account actions.

1.34.94

  • api-change:amplify: [botocore] Updating max results limit for listing any resources (Job, Artifacts, Branch, BackendResources, DomainAssociation) to 50 with the exception of list apps that where max results can be up to 100.
  • api-change:connectcases: [botocore] This feature releases DeleteField, DeletedLayout, and DeleteTemplate API's
  • api-change:inspector2: [botocore] Update Inspector2 to include new Agentless API parameters.
  • api-change:timestream-query: [botocore] This change allows users to update and describe account settings associated with their accounts.
  • api-change:transcribe: [botocore] This update provides error messaging for generative call summarization in Transcribe Call Analytics
  • api-change:trustedadvisor: [botocore] This release adds the BatchUpdateRecommendationResourceExclusion API to support batch updates of Recommendation Resource exclusion statuses and introduces a new exclusion status filter to the ListRecommendationResources and ListOrganizationRecommendationResources APIs.

1.34.93

  • api-change:codepipeline: [botocore] Add ability to manually and automatically roll back a pipeline stage to a previously successful execution.
  • api-change:cognito-idp: [botocore] Add LimitExceededException to SignUp errors
  • api-change:connectcampaigns: [botocore] This release adds support for specifying if Answering Machine should wait for prompt sound.
  • api-change:marketplace-entitlement: [botocore] Releasing minor endpoint updates.
  • api-change:oam: [botocore] This release introduces support for Source Accounts to define which Metrics and Logs to share with the Monitoring Account
  • api-change:rds: [botocore] SupportsLimitlessDatabase field added to describe-db-engine-versions to indicate whether the DB engine version supports Aurora Limitless Database.
  • api-change:support: [botocore] Releasing minor endpoint updates.

1.34.92

  • api-change:appsync: [botocore] UpdateGraphQLAPI documentation update and datasource introspection secret arn update
  • api-change:fms: [botocore] AWS Firewall Manager adds support for network ACL policies to manage Amazon Virtual Private Cloud (VPC) network access control lists (ACLs) for accounts in your organization.
  • api-change:ivs: [botocore] Bug Fix: IVS does not support arns with the svs prefix
  • api-change:ivs-realtime: [botocore] Bug Fix: IVS Real Time does not support ARNs using the svs prefix.
  • api-change:rds: [botocore] Updates Amazon RDS documentation for setting local time zones for RDS for Db2 DB instances.
  • api-change:stepfunctions: [botocore] Add new ValidateStateMachineDefinition operation, which performs syntax checking on the definition of a Amazon States Language (ASL) state machine.

... (truncated)

Commits
  • dc49ed5 Merge branch 'release-1.34.95'
  • ded69f6 Bumping version to 1.34.95
  • 9f4321d Add changelog entries from botocore
  • f474951 Merge branch 'release-1.34.94'
  • 32dabda Merge branch 'release-1.34.94' into develop
  • 5a5954d Bumping version to 1.34.94
  • 8b3a8f6 Add changelog entries from botocore
  • 98b2562 Merge branch 'release-1.34.93'
  • 9d2623a Merge branch 'release-1.34.93' into develop
  • b7f2abe Bumping version to 1.34.93
  • Additional commits viewable in compare view

Updates datalad from 0.19.6 to 1.0.2

Release notes

Sourced from datalad's releases.

1.0.2

🧪 Tests

1.0.1

🏠 Internal

  • The main entrypoint for annex remotes now also runs the standard extension load hook. This enables extensions to alter annex remote implementation behavior in the same way than other DataLad components. (by @​mih)

1.0.0

💥 Breaking Changes

🚀 Enhancements and New Features

Changelog

Sourced from datalad's changelog.

1.0.2 (2024-04-19)

🧪 Tests

1.0.1 (2024-04-17)

🏠 Internal

  • The main entrypoint for annex remotes now also runs the standard extension load hook. This enables extensions to alter annex remote implementation behavior in the same way than other DataLad components. (by @​mih)

1.0.0 (2024-04-06)

💥 Breaking Changes

🚀 Enhancements and New Features

Commits
  • 429c8cf [skip ci] Update docs/source/changelog.rst and CITATION.cff
  • 7591366 [skip ci] Update CHANGELOG
  • 8639b90 Merge pull request #7581 from christian-monch/fix-test-force-checkdatapresent
  • 73fa6d5 [release-action] Autogenerate changelog snippet for PR 7581
  • 250386f relax condition in test_force_checkdatapresent
  • 84b2bd5 [skip ci] Update docs/source/changelog.rst and CITATION.cff
  • f8c5578 [skip ci] Update CHANGELOG
  • f82beab Merge pull request #7580 from mih/remote-extension
  • 3b902e1 Load extensions in annex remote entrypoint
  • b50f5d3 [skip ci] Update docs/source/changelog.rst and CITATION.cff
  • Additional commits viewable in compare view

Updates pytest from 8.1.1 to 8.2.0

Release notes

Sourced from pytest's releases.

8.2.0

pytest 8.2.0 (2024-04-27)

Deprecations

  • #12069: A deprecation warning is now raised when implementations of one of the following hooks request a deprecated py.path.local parameter instead of the pathlib.Path parameter which replaced it:

    • pytest_ignore_collect{.interpreted-text role="hook"} - the path parameter - use collection_path instead.
    • pytest_collect_file{.interpreted-text role="hook"} - the path parameter - use file_path instead.
    • pytest_pycollect_makemodule{.interpreted-text role="hook"} - the path parameter - use module_path instead.
    • pytest_report_header{.interpreted-text role="hook"} - the startdir parameter - use start_path instead.
    • pytest_report_collectionfinish{.interpreted-text role="hook"} - the startdir parameter - use start_path instead.

    The replacement parameters are available since pytest 7.0.0. The old parameters will be removed in pytest 9.0.0.

    See legacy-path-hooks-deprecated{.interpreted-text role="ref"} for more details.

Features

  • #11871: Added support for reading command line arguments from a file using the prefix character @, like e.g.: pytest @tests.txt. The file must have one argument per line.

    See Read arguments from file <args-from-file>{.interpreted-text role="ref"} for details.

Improvements

  • #11523: pytest.importorskip{.interpreted-text role="func"} will now issue a warning if the module could be found, but raised ImportError{.interpreted-text role="class"} instead of ModuleNotFoundError{.interpreted-text role="class"}.

    The warning can be suppressed by passing exc_type=ImportError to pytest.importorskip{.interpreted-text role="func"}.

    See import-or-skip-import-error{.interpreted-text role="ref"} for details.

  • #11728: For unittest-based tests, exceptions during class cleanup (as raised by functions registered with TestCase.addClassCleanup <unittest.TestCase.addClassCleanup>{.interpreted-text role="meth"}) are now reported instead of silently failing.

  • #11777: Text is no longer truncated in the short test summary info section when -vv is given.

  • #12112: Improved namespace packages detection when consider_namespace_packages{.interpreted-text role="confval"} is enabled, covering more situations (like editable installs).

  • #9502: Added PYTEST_VERSION{.interpreted-text role="envvar"} environment variable which is defined at the start of the pytest session and undefined afterwards. It contains the value of pytest.__version__, and among other things can be used to easily check if code is running from within a pytest run.

Bug Fixes

  • #12065: Fixed a regression in pytest 8.0.0 where test classes containing setup_method and tests using @staticmethod or @classmethod would crash with AttributeError: 'NoneType' object has no attribute 'setup_method'.

    Now the request.instance <pytest.FixtureRequest.instance>{.interpreted-text role="attr"} attribute of tests using @staticmethod and @classmethod is no longer None, but a fresh instance of the class, like in non-static methods.

... (truncated)

Commits
  • 6bd3f31 Tweak changelog for 8.2.0
  • 9b6219b Prepare release version 8.2.0
  • 835765c Merge pull request #12130 from bluetech/fixtures-inline
  • 7e7503c unittest: report class cleanup exceptions (#12250)
  • 882c4da fixtures: inline fail_fixturefunc
  • 2e8fb9f fixtures: extract a _check_fixturedef method
  • acf2971 fixtures: inline _getnextfixturedef into _get_active_fixturedef
  • 3c77aec fixtures: move "request" check early
  • d217d68 fixtures: inline _compute_fixture_value
  • 530be28 fixtures: use early return in _get_active_fixturedef
  • Additional commits viewable in compare view

Updates coverage from 7.4.4 to 7.5.0

Changelog

Sourced from coverage's changelog.

Version 7.5.0 — 2024-04-23

  • Added initial support for function and class reporting in the HTML report. There are now three index pages which link to each other: files, functions, and classes. Other reports don't yet have this information, but it will be added in the future where it makes sense. Feedback gladly accepted! Finishes issue 780_.

  • Other HTML report improvements:

    • There is now a "hide covered" checkbox to filter out 100% files, finishing issue 1384_.

    • The index page is always sorted by one of its columns, with clearer indications of the sorting.

    • The "previous file" shortcut key didn't work on the index page, but now it does, fixing issue 1765_.

  • The debug output showing which configuration files were tried now shows absolute paths to help diagnose problems where settings aren't taking effect, and is renamed from "attempted_config_files" to the more logical "config_files_attempted."

  • Python 3.13.0a6 is supported.

.. _issue 780: nedbat/coveragepy#780 .. _issue 1384: nedbat/coveragepy#1384 .. _issue 1765: nedbat/coveragepy#1765

.. _changes_7-4-4:

Commits
  • 5f4e034 docs: sample HTML for 7.5.0
  • ed97cfb docs: prep for 7.5.0
  • 41e01d3 build: use macos 13 for 3.8 and 3.9 while GitHub rolls out macos 14
  • 583f0c0 test: add a test for skipping covered functions
  • b115ed3 refactor: keep Analysis private
  • 40a052e docs: document CodeRegion and its plugin methods
  • 2ff9933 docs: remove comment that now explains nothing.
  • a6ba1c8 fix: html report pages fully validate
  • 74c87a8 fix: previous page shortcut works in index page. #1765
  • e016967 feat: main index page links to other index pages
  • Additional commits viewable in compare view

Updates pytest-xdist from 3.5.0 to 3.6.1

Changelog

Sourced from pytest-xdist's changelog.

pytest-xdist 3.6.1 (2024-04-28)

Bug Fixes

  • [#1071](https://github.com/pytest-dev/pytest-xdist/issues/1071) <https://github.com/pytest-dev/pytest-xdist/issues/1071>_: Add backward compatibility for deadlock issue with the execnet new main_thread_only "execmodel" triggered when pytest-cov accesses rinfo.

pytest-xdist 3.6.0 (2024-04-19)

This release was YANKED due to a regression fixed in 3.6.1.

Features

  • [#1027](https://github.com/pytest-dev/pytest-xdist/issues/1027) <https://github.com/pytest-dev/pytest-xdist/pull/1027>_:pytest-xdist workers now always execute the tests in the main thread. Previously some tests might end up executing in a separate thread other than main in the workers, due to some internal execnet`` details. This can cause problems specially with async frameworks where the event loop is running in the ``main`` thread (for example #620 pytest-dev/pytest-xdist#620`__).

Bug Fixes

  • [#1024](https://github.com/pytest-dev/pytest-xdist/issues/1024) <https://github.com/pytest-dev/pytest-xdist/issues/1024>_: Added proper handling of shouldstop (such as set by --max-fail) and shouldfail conditions in workers. Previously, a worker might have continued executing further tests before the controller could terminate the session.

  • [#1028](https://github.com/pytest-dev/pytest-xdist/issues/1028) <https://github.com/pytest-dev/pytest-xdist/issues/1028>_: Fixed compatibility issue between looponfail and editable installs.

  • [#620](https://github.com/pytest-dev/pytest-xdist/issues/620) <https://github.com/pytest-dev/pytest-xdist/issues/620>_: Use the new main_thread_only execnet "execmodel" so that code which expects to only run in the main thread will now work as expected.

  • [#937](https://github.com/pytest-dev/pytest-xdist/issues/937) <https://github.com/pytest-dev/pytest-xdist/issues/937>_: Fixed a bug where plugin would raise an incompatibility error with --pdb despite using -n0.

Removals

  • [#1053](https://github.com/pytest-dev/pytest-xdist/issues/1053) <https://github.com/pytest-dev/pytest-xdist/issues/1053>_: Dropped support for Python 3.7.

  • [#1057](https://github.com/pytest-dev/pytest-xdist/issues/1057) <https://github.com/pytest-dev/pytest-xdist/issues/1057>_: pytest>=7.0.0 is now required.

    execnet>=2.1.0 is now required.

Trivial Changes

  • [#1020](https://github.com/pytest-dev/pytest-xdist/issues/1020) <https://github.com/pytest-dev/pytest-xdist/issues/1020>_: pytest-xdist's setup.py file is removed.

    If you relied on this file, e.g. to install pytest using setup.py install, please see Why you shouldn't invoke setup.py directly <https://blog.ganssle.io/articles/2021/10/setup-py-deprecated.html#summary>_ for alternatives.

... (truncated)

Commits
  • 4dd2978 Release 3.6.1
  • b397288 Merge pull request #1072 from zmedico/gateway-cache-rinfo
  • 12b3cce Cache execnet gateway rinfo during WorkerController setup
  • c93a106 build(deps): bump hynek/build-and-inspect-python-package (#1066)
  • 52e2022 [pre-commit.ci] pre-commit autoupdate (#1073)
  • 699f939 Merge pull request #1070 from pytest-dev/release-3.6.0
  • 80bc0b8 Release 3.6.0
  • 20e3ac7 Use execnet main_thread_only execmodel (#1027)
  • 0a4238f Merge pull request #1067 from pytest-dev/pre-commit-ci-update-config
  • 0686279 [pre-commit.ci] pre-commit autoupdate
  • Additional commits viewable in compare view

Updates exceptiongroup from 1.2.0 to 1.2.1

Release notes

Sourced from exceptiongroup's releases.

1.2.1

  • Updated the copying of __notes__ to match CPython behavior (PR by CF Bolz-Tereick)
  • Corrected the type annotation of the exception handler callback to accept a BaseExceptionGroup instead of BaseException
  • Fixed type errors on Python < 3.10 and the type annotation of suppress() (PR by John Litborn)
Changelog

Sourced from exceptiongroup's changelog.

Version history

This library adheres to Semantic Versioning 2.0 <http://semver.org/>_.

1.2.1

  • Updated the copying of __notes__ to match CPython behavior (PR by CF Bolz-Tereick)
  • Corrected the type annotation of the exception handler callback to accept a BaseExceptionGroup instead of BaseException
  • Fixed type errors on Python < 3.10 and the type annotation of suppress() (PR by John Litborn)

1.2.0

  • Added special monkeypatching if Apport <https://github.com/canonical/apport>_ has overridden sys.excepthook so it will format exception groups correctly (PR by John Litborn)
  • Added a backport of contextlib.suppress() from Python 3.12.1 which also handles suppressing exceptions inside exception groups
  • Fixed bare raise in a handler reraising the original naked exception rather than an exception group which is what is raised when you do a raise in an except* handler

1.1.3

  • catch() now raises a TypeError if passed an async exception handler instead of just giving a RuntimeWarning about the coroutine never being awaited. (#66, PR by John Litborn)
  • Fixed plain raise statement in an exception handler callback to work like a raise in an except* block
  • Fixed new exception group not being chained to the original exception when raising an exception group from exceptions raised in handler callbacks
  • Fixed type annotations of the derive(), subgroup() and split() methods to match the ones in typeshed

1.1.2

  • Changed handling of exceptions in exception group handler callbacks to not wrap a single exception in an exception group, as per CPython issue 103590 <https://github.com/python/cpython/issues/103590>_

1.1.1

  • Worked around CPython issue [#98778](https://github.com/agronholm/exceptiongroup/issues/98778) <https://github.com/python/cpython/issues/98778>_, urllib.error.HTTPError(..., fp=None) raises KeyError on unknown attribute access, on affected Python versions. (PR by Zac Hatfield-Dodds)

1.1.0

... (truncated)

Commits
  • b91b7a3 Added the release version
  • 521f02f Fixed type errors, added type tests (#118)
  • 4639b1e Fixed test failure on Python 3.12.3
  • 684b79a Have tox install the package in editable mode
  • 9ebe9f5 Updated GitHub actions
  • e57b07f [pre-commit.ci] pre-commit autoupdate (#115)
  • 8d2f627 [pre-commit.ci] pre-commit autoupdate (#113)
  • ee53e9f BaseExceptionGroup.derive should not copy notes (#112)
  • 2f23259 Corrected the type annotation for the exception handler callback (#109)
  • 0c89199 [pre-commit.ci] pre-commit autoupdate (#110)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the pipenv group in /services/datalad with 9 updates:

| Package | From | To |
| --- | --- | --- |
| [redis](https://github.com/redis/redis-py) | `5.0.3` | `5.0.4` |
| [gunicorn](https://github.com/benoitc/gunicorn) | `21.2.0` | `22.0.0` |
| [elastic-apm](https://github.com/elastic/apm-agent-python) | `6.21.4.post8347027212` | `6.22.0` |
| [boto3](https://github.com/boto/boto3) | `1.34.74` | `1.34.95` |
| [datalad](https://github.com/datalad/datalad) | `0.19.6` | `1.0.2` |
| [pytest](https://github.com/pytest-dev/pytest) | `8.1.1` | `8.2.0` |
| [coverage](https://github.com/nedbat/coveragepy) | `7.4.4` | `7.5.0` |
| [pytest-xdist](https://github.com/pytest-dev/pytest-xdist) | `3.5.0` | `3.6.1` |
| [exceptiongroup](https://github.com/agronholm/exceptiongroup) | `1.2.0` | `1.2.1` |


Updates `redis` from 5.0.3 to 5.0.4
- [Release notes](https://github.com/redis/redis-py/releases)
- [Changelog](https://github.com/redis/redis-py/blob/master/CHANGES)
- [Commits](redis/redis-py@v5.0.3...v5.0.4)

Updates `gunicorn` from 21.2.0 to 22.0.0
- [Release notes](https://github.com/benoitc/gunicorn/releases)
- [Commits](benoitc/gunicorn@21.2.0...22.0.0)

Updates `elastic-apm` from 6.21.4.post8347027212 to 6.22.0
- [Release notes](https://github.com/elastic/apm-agent-python/releases)
- [Changelog](https://github.com/elastic/apm-agent-python/blob/main/CHANGELOG.asciidoc)
- [Commits](https://github.com/elastic/apm-agent-python/commits/v6.22.0)

Updates `boto3` from 1.34.74 to 1.34.95
- [Release notes](https://github.com/boto/boto3/releases)
- [Changelog](https://github.com/boto/boto3/blob/develop/CHANGELOG.rst)
- [Commits](boto/boto3@1.34.74...1.34.95)

Updates `datalad` from 0.19.6 to 1.0.2
- [Release notes](https://github.com/datalad/datalad/releases)
- [Changelog](https://github.com/datalad/datalad/blob/maint/CHANGELOG.md)
- [Commits](datalad/datalad@0.19.6...1.0.2)

Updates `pytest` from 8.1.1 to 8.2.0
- [Release notes](https://github.com/pytest-dev/pytest/releases)
- [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst)
- [Commits](pytest-dev/pytest@8.1.1...8.2.0)

Updates `coverage` from 7.4.4 to 7.5.0
- [Release notes](https://github.com/nedbat/coveragepy/releases)
- [Changelog](https://github.com/nedbat/coveragepy/blob/master/CHANGES.rst)
- [Commits](nedbat/coveragepy@7.4.4...7.5.0)

Updates `pytest-xdist` from 3.5.0 to 3.6.1
- [Release notes](https://github.com/pytest-dev/pytest-xdist/releases)
- [Changelog](https://github.com/pytest-dev/pytest-xdist/blob/master/CHANGELOG.rst)
- [Commits](pytest-dev/pytest-xdist@v3.5.0...v3.6.1)

Updates `exceptiongroup` from 1.2.0 to 1.2.1
- [Release notes](https://github.com/agronholm/exceptiongroup/releases)
- [Changelog](https://github.com/agronholm/exceptiongroup/blob/main/CHANGES.rst)
- [Commits](agronholm/exceptiongroup@1.2.0...1.2.1)

---
updated-dependencies:
- dependency-name: redis
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: pipenv
- dependency-name: gunicorn
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: pipenv
- dependency-name: elastic-apm
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pipenv
- dependency-name: boto3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: pipenv
- dependency-name: datalad
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: pipenv
- dependency-name: pytest
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: pipenv
- dependency-name: coverage
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: pipenv
- dependency-name: pytest-xdist
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: pipenv
- dependency-name: exceptiongroup
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: pipenv
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels May 1, 2024
Copy link

codecov bot commented May 1, 2024

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 42.50%. Comparing base (059e3b5) to head (48664f5).

Additional details and impacted files
@@           Coverage Diff           @@
##           master    #3039   +/-   ##
=======================================
  Coverage   42.50%   42.50%           
=======================================
  Files         600      600           
  Lines       37906    37906           
  Branches     1111     1111           
=======================================
  Hits        16112    16112           
  Misses      21578    21578           
  Partials      216      216           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

@nellh nellh merged commit 2df8f21 into master May 2, 2024
11 checks passed
@nellh nellh deleted the dependabot/pip/services/datalad/pipenv-6e2ea0a252 branch May 2, 2024 16:56
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file python Pull requests that update Python code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant