Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Deps: Bump the dependencies group in /download-artifact with 5 updates #870

Merged
merged 1 commit into from
Oct 4, 2023
Merged

Deps: Bump the dependencies group in /download-artifact with 5 updates #870

merged 1 commit into from
Oct 4, 2023

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Oct 2, 2023

Bumps the dependencies group in /download-artifact with 5 updates:

Package From To
pontos 23.9.0 23.9.2
astroid 2.15.7 3.0.0
packaging 23.1 23.2
platformdirs 3.10.0 3.11.0
rich 13.5.3 13.6.0

Updates pontos from 23.9.0 to 23.9.2

Release notes

Sourced from pontos's releases.

pontos 23.9.2

23.9.2 - 2023-09-28

Added

  • Add simple GitHub script to show and update repo topics c2a9948
  • Add GitHub API for updating repository topics c9328eb
  • Add GitHub API for getting repository topics cf5f21e

Changed

  • Update java version command with config file (#886) fd7af60

pontos 23.9.1

23.9.1 - 2023-09-27

Added

  • Add repo model property for enabled dependabot security updates a31ae3c

Changed

  • Improve error message when a model value can't be set c3d18b8
  • Group PRs from Dependabot (#879) 36fdead

Bug Fixes

  • Mark repo model properties for security and analysis as optional 0ad99e9

Dependencies

Commits
  • 1bdd114 Automatic release to 23.9.2
  • fd7af60 Change: Update java version command with config file (#886)
  • c2a9948 Add: Add simple GitHub script to show and update repo topics
  • c9328eb Add: Add GitHub API for updating repository topics
  • cf5f21e Add: Add GitHub API for getting repository topics
  • 167ef3a Automatic adjustments after release
  • 96b297a Automatic release to 23.9.1
  • c3d18b8 Change: Improve error message when a model value can't be set
  • a31ae3c Add: Add repo model property for enabled dependabot security updates
  • 0ad99e9 Fix: Mark repo model properties for security and analysis as optional
  • Additional commits viewable in compare view

Updates astroid from 2.15.7 to 3.0.0

Changelog

Sourced from astroid's changelog.

What's New in astroid 3.0.0?

Release date: 2023-09-25

  • Add support for Python 3.12, including PEP 695 type parameter syntax.

    Closes #2201

  • Remove support for Python 3.7.

    Refs #2137

  • Use the global inference cache when inferring, even without an explicit InferenceContext. This is a significant performance improvement given how often methods default to None for the context argument. (Linting astroid itself now takes ~5% less time on Python 3.12; other projects requiring more complex inference calculations will see greater speedups.)

    Refs #529

  • Following a deprecation period starting in astroid 2.7.0, the astroid.node_classes and astroid.scoped_nodes modules have been removed in favor of astroid.nodes.node_classes and astroid.nodes.scoped_nodes.

    Closes #1072

  • Following a deprecation period starting in astroid 2.12.0, the astroid.mixins module has been removed in favor of astroid.nodes._base_nodes (private).

    Refs #1633

  • Return all existing arguments when calling Arguments.arguments(). This also means find_argname will now use the whole list of arguments for its search.

    Closes #2213

  • Exclude class attributes from the __members__ container of an Enum class when they are nodes.AnnAssign nodes with no assigned value.

    Refs pylint-dev/pylint#7402

  • Remove @cached and @cachedproperty decorator (just use @cached_property from the stdlib).

    Closes #1780 Refs #2140

  • Remove the inference module. Node inference methods are now in the module defining the node, rather than being associated to the node afterward.

    Closes #679

... (truncated)

Commits
  • 2891daf Bump astroid to 3.0.0, update changelog
  • d637bdf Revert "Add boilerplate for documenting an upgrade guide (#1873)"
  • 5c8a248 Merge maintenance/2.15.x following 2.15.8 release
  • c633af2 Bump astroid to 2.15.8, update changelog
  • 584b1fd False positive unsubscriptable-object (#2307) (#2309)
  • 1f0f2f8 False positive unsubscriptable-object (#2307)
  • 2380f6f Merge pull request #2308 from pylint-dev/pre-commit-ci-update-config
  • 7581348 [pre-commit.ci] pre-commit autoupdate
  • 1113d49 Merge pull request #2306 from pylint-dev/dependabot/github_actions/actions/ch...
  • 9c0e642 Bump actions/checkout from 4.0.0 to 4.1.0
  • Additional commits viewable in compare view

Updates packaging from 23.1 to 23.2

Release notes

Sourced from packaging's releases.

23.2

What's Changed

New Contributors

Full Changelog: pypa/packaging@23.1...23.2

Changelog

Sourced from packaging's changelog.

23.2 - 2023-10-01


* Document calendar-based versioning scheme (:issue:`716`)
* Enforce that the entire marker string is parsed (:issue:`687`)
* Requirement parsing no longer automatically validates the URL (:issue:`120`)
* Canonicalize names for requirements comparison (:issue:`644`)
* Introduce ``metadata.Metadata`` (along with ``metadata.ExceptionGroup`` and ``metadata.InvalidMetadata``; :issue:`570`)
* Introduce the ``validate`` keyword parameter to ``utils.validate_name()`` (:issue:`570`)
* Introduce ``utils.is_normalized_name()`` (:issue:`570`)
* Make ``utils.parse_sdist_filename()`` and ``utils.parse_wheel_filename()``
  raise ``InvalidSdistFilename`` and ``InvalidWheelFilename``, respectively,
  when the version component of the name is invalid
Commits
  • b3a5d7d Bump for release
  • d7ce40d Fix code blocks in CHANGELOG.md (#724)
  • 524b701 parse_{sdist,wheel}_filename: don't raise InvalidVersion (#721)
  • b509bef Typing annotations fixed (#723)
  • 0206c39 Bump pip version to avoid known vulnerabilities (#720)
  • 7023537 fix: Update copyright date for docs (#713)
  • 39786bb Document use of calendar-based versioning scheme (#717)
  • c1346df fix: Detect when a platform is 32-bit more accurately (#711)
  • 7e68d82 Correct rST syntax in CHANGELOG.rst (#709)
  • 61e6efb Support enriched metadata in packaging.metadata (#686)
  • Additional commits viewable in compare view

Updates platformdirs from 3.10.0 to 3.11.0

Release notes

Sourced from platformdirs's releases.

3.11.0

What's Changed

New Contributors

Full Changelog: tox-dev/platformdirs@3.10.0...3.11.0

Commits

Updates rich from 13.5.3 to 13.6.0

Release notes

Sourced from rich's releases.

The Python 3.12 release

Mostly a meta update in readiness for the release of Python3.12

[13.6.0] - 2023-09-30

Added

  • Added Python 3.12 to classifiers.
Changelog

Sourced from rich's changelog.

[13.6.0] - 2023-09-30

Added

  • Added Python 3.12 to classifiers.
Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Deps: Bump the dependencies group in /download-artifact with 5 updates
706589e 
Bumps the dependencies group in /download-artifact with 5 updates:

| Package | From | To |
| --- | --- | --- |
| [pontos](https://github.com/greenbone/pontos) | `23.9.0` | `23.9.2` |
| [astroid](https://github.com/pylint-dev/astroid) | `2.15.7` | `3.0.0` |
| [packaging](https://github.com/pypa/packaging) | `23.1` | `23.2` |
| [platformdirs](https://github.com/platformdirs/platformdirs) | `3.10.0` | `3.11.0` |
| [rich](https://github.com/Textualize/rich) | `13.5.3` | `13.6.0` |


Updates `pontos` from 23.9.0 to 23.9.2
- [Release notes](https://github.com/greenbone/pontos/releases)
- [Commits](greenbone/pontos@v23.9.0...v23.9.2)

Updates `astroid` from 2.15.7 to 3.0.0
- [Release notes](https://github.com/pylint-dev/astroid/releases)
- [Changelog](https://github.com/pylint-dev/astroid/blob/main/ChangeLog)
- [Commits](pylint-dev/astroid@v2.15.7...v3.0.0)

Updates `packaging` from 23.1 to 23.2
- [Release notes](https://github.com/pypa/packaging/releases)
- [Changelog](https://github.com/pypa/packaging/blob/main/CHANGELOG.rst)
- [Commits](pypa/packaging@23.1...23.2)

Updates `platformdirs` from 3.10.0 to 3.11.0
- [Release notes](https://github.com/platformdirs/platformdirs/releases)
- [Changelog](https://github.com/platformdirs/platformdirs/blob/main/CHANGES.rst)
- [Commits](tox-dev/platformdirs@3.10.0...3.11.0)

Updates `rich` from 13.5.3 to 13.6.0
- [Release notes](https://github.com/Textualize/rich/releases)
- [Changelog](https://github.com/Textualize/rich/blob/master/CHANGELOG.md)
- [Commits](Textualize/rich@v13.5.3...v13.6.0)

---
updated-dependencies:
- dependency-name: pontos
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: astroid
  dependency-type: indirect
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: packaging
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: platformdirs
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: rich
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot requested a review from a team as a code owner October 2, 2023 16:02
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Oct 2, 2023
@greenbonebot greenbonebot enabled auto-merge (squash) October 2, 2023 16:02
@github-actions
Copy link

github-actions bot commented Oct 2, 2023

Conventional Commits Report

Type Number
Dependencies 1

🚀 Conventional commits found.

@greenbonebot greenbonebot merged commit 7aa6c51 into main Oct 4, 2023
@greenbonebot greenbonebot deleted the dependabot/pip/download-artifact/dependencies-7d5120cb17 branch October 4, 2023 06:37
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@bjoernricks bjoernricks bjoernricks approved these changes

Assignees
No one assigned
Labels
dependencies Pull requests that update a dependency file python Pull requests that update Python code
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
2 participants
@bjoernricks @greenbonebot