Bump the python-packages group with 3 updates #523
Closed
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
![dependabot[bot]](https://avatars.githubusercontent.com/in/29110?s=60&v=4){kind=small}
Bumps the python-packages group with 3 updates: [packaging](https://github.com/pypa/packaging), [websockets](https://github.com/python-websockets/websockets) and [zipp](https://github.com/jaraco/zipp). Updates `packaging` from 24.1 to 24.2 - [Release notes](https://github.com/pypa/packaging/releases) - [Changelog](https://github.com/pypa/packaging/blob/main/CHANGELOG.rst) - [Commits](pypa/packaging@24.1...24.2) Updates `websockets` from 13.1 to 14.0 - [Release notes](https://github.com/python-websockets/websockets/releases) - [Commits](python-websockets/websockets@13.1...14.0) Updates `zipp` from 3.20.2 to 3.21.0 - [Release notes](https://github.com/jaraco/zipp/releases) - [Changelog](https://github.com/jaraco/zipp/blob/main/NEWS.rst) - [Commits](jaraco/zipp@v3.20.2...v3.21.0) --- updated-dependencies: - dependency-name: packaging dependency-type: indirect update-type: version-update:semver-minor dependency-group: python-packages - dependency-name: websockets dependency-type: indirect update-type: version-update:semver-major dependency-group: python-packages - dependency-name: zipp dependency-type: indirect update-type: version-update:semver-minor dependency-group: python-packages ... Signed-off-by: dependabot[bot] <[email protected]>
dependabot
bot
added
dependencies
Dependency ReviewThe following issues were found:
Snapshot WarningsEnsure that dependencies are being submitted on PR branches and consider enabling retry-on-snapshot-warnings. See the documentation for more information and troubleshooting advice. License Issuespoetry.lock
Allowed Licenses: 0BSD, AGPL-3.0-or-later, Apache-2.0, BlueOak-1.0.0, BSD-2-Clause, BSD-3-Clause-Clear, BSD-3-Clause, BSL-1.0, CAL-1.0, CC-BY-3.0, CC-BY-4.0, CC-BY-SA-4.0, CC0-1.0, EPL-2.0, GPL-2.0-only, GPL-2.0-or-later, GPL-2.0, GPL-3.0-or-later, ISC, LGPL-2.0-only, LGPL-2.0-or-later, LGPL-2.1-only, LGPL-2.1-or-later, LGPL-2.1, LGPL-3.0-only, LGPL-3.0, LGPL-3.0-or-later, MIT, MPL-1.1, MPL-2.0, OFL-1.1, PSF-2.0, Python-2.0, Python-2.0.1, Unicode-DFS-2016, Unlicense OpenSSF Scorecard
Scanned Files
|
|
Looks like these dependencies are updatable in another way, so this is no longer needed. |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Bumps the python-packages group with 3 updates: packaging, websockets and zipp.
Updates
packagingfrom 24.1 to 24.2Release notes
Sourced from packaging's releases.
Changelog
Sourced from packaging's changelog.
Commits
d8e3b31Bump for release2de393dUpdate changelog for release9c66f5cRemove extraneous quotes in f-strings by using!r(#848)4dc334cUpgrade to latest mypy (#853)d1a9f93Bump the github-actions group with 4 updates (#852)029f415PEP 639: Implement License-Expression and License-File (#828)6c338a8Use !r formatter for error messages with filenames. (#844)28e7da7Add a comment as to whyMetadata.nameisn't normalized (#842)ce0d79cMention updating changelog in release process (#841)ac5bdf3Update the changelog to reflect 24.1 changes (#840)Updates
websocketsfrom 13.1 to 14.0Release notes
Sourced from websockets's releases.
Commits
f0d20aaRelease version 14.0.178c884Complete and polish changelog for 14.0.c57bcb7Standardize links to RFC.5f34e27Fix remaining instances of shortcut imports.9b3595dRemove stack traces from INFO and WARNING logs.0a5a79cClean up prefixes of debug log messages.76f6f57Factor out backport of assertNoLogs.cdeb882Don't log an error when process_request returns a response.810bdebReport size correctly in PayloadTooBig.e44d795Bump pypa/cibuildwheel from 2.20.0 to 2.21.3Updates
zippfrom 3.20.2 to 3.21.0Changelog
Sourced from zipp's changelog.
Commits
45b7f67Finalize71ddd8dSkipzipfile.Path.existspython/cpython#1265769a2705eMerge https://github.com/jaraco/skeleton5c34e69Use extend for proper workaround.ee027f6Merge https://github.com/jaraco/skeleton750a189Require Python 3.9 or later now that Python 3.8 is EOL.e61a9dfInclude pyproject.toml in ruff.toml.db4dfc4jaraco/skeleton#15162b6678Bump pre-commit hook for ruff to avoid clashes with pytest-ruff (jaraco/skele...466f535Merge pull request #109 from jaraco/feature/functoolsDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions