Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

fix(deps): update all minor dependencies #2200

Open
wants to merge 1 commit into
base: main
Choose a base branch
from
Open

fix(deps): update all minor dependencies #2200

wants to merge 1 commit into from

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented Jun 22, 2024 •
edited
Loading

This PR contains the following updates:

Package Change Age Adoption Passing Confidence Type Update Pending
PyJWT 2.9.0 -> 2.10.1 age adoption passing confidence dependencies minor
apig-wsgi (changelog) 2.18.0 -> 2.19.0 age adoption passing confidence dependencies minor
cachelib (changelog) 0.12.0 -> 0.13.0 age adoption passing confidence dependencies minor
certifi 2024.8.30 -> 2024.12.14 age adoption passing confidence dependencies minor
click-datetime 0.2 -> 0.4.0 age adoption passing confidence dependencies minor
flask-marshmallow 0.14.0 -> 0.15.0 age adoption passing confidence dependencies minor
locust (source) 2.31.3 -> 2.32.4 age adoption passing confidence test minor
marshmallow (changelog) 3.22.0 -> 3.23.1 age adoption passing confidence dependencies minor 3.23.2
newrelic (source) 10.3.0 -> 10.4.0 age adoption passing confidence dependencies minor
python ~3.10.9 -> ~3.13.0 age adoption passing confidence dependencies minor

Review

  • Updates have been tested and work
  • If updates are AWS related, versions match the infrastructure (e.g. Lambda runtime, database, etc.)

Release Notes

jpadilla/pyjwt (PyJWT)

v2.10.1

Compare Source

v2.10.0

Compare Source

Fixed


- Prevent partial matching of `iss` claim by @&#8203;fabianbadoi in `GHSA-75c5-xw7c-p5pm <https://github.com/jpadilla/pyjwt/security/advisories/GHSA-75c5-xw7c-p5pm>`__
adamchainz/apig-wsgi (apig-wsgi)

v2.19.0

Compare Source

  • Support Python 3.13.

  • Drop Python 3.8 support.

  • Send binary responses if the 'content-encoding' header is set to any value, rather than just 'gzip'.

    Thanks to Zoe Guillen for the report in PR #&#8203;496 <https://github.com/adamchainz/apig-wsgi/pull/496>__.

  • Enable binary support by default for ALB events.

    Thanks to Oliver Ford for the report in Issue #&#8203;513 <https://github.com/adamchainz/apig-wsgi/issues/513>__.

  • Treat the content-type header "application/problem+json" as non binary by default.

    Thanks to Ido Savion in PR #&#8203;503 <https://github.com/adamchainz/apig-wsgi/pull/503>__.

pallets-eco/cachelib (cachelib)

v0.13.0

Compare Source

Released 2024-04-13

  • default hashlib.md5 may not be available in FIPS builds. We
    now do not access it at import time on FileSystemCacheso developers
    have time to change the default.
    hashlib.md5 will be lazy loaded when a new default is not provided
certifi/python-certifi (certifi)

v2024.12.14

Compare Source

locustio/locust (locust)

v2.32.4

Compare Source

Full Changelog

Fixed bugs:

  • Number of requests lower than expected in web UI #​3000
  • Reports download links do not contain web-base-path #​2998
  • Setuptools CVE-2024-6345 #​2995
  • When using exclude-tags to exclude more than two tags, this setting will not take effect #​2994

Merged pull requests:

v2.32.3

Compare Source

Full Changelog

Fixed bugs:

Merged pull requests:

v2.32.2

Compare Source

Full Changelog

Fixed bugs:

  • Requests not ramping up after switching to using pydantic in django project #​2960
  • The locust chart shows that data is still being recorded after the timed run time expires #​2910

Closed issues:

  • Downloading report should provide a meaningful human name #​2931
  • Hard coded path make it impossible to host the UI on a path (instead of the domain root) #​2909

Merged pull requests:

v2.32.1

Compare Source

What's Changed

New Contributors

Full Changelog: locustio/locust@2.32.0...2.32.1

v2.32.0

Compare Source

Full Changelog

Fixed bugs:

  • logfile is erroniously written when there are many workers. #​2927
  • Form field for users, spawn rate, and run time still visible in UI although CustomShape defined without use_common_options. #​2924
  • --html with --process 4 then get ValueError: StatsEntry.use_response_times_cache must be set to True #​2908
  • IPV6 check doesn't work as expected on AWS EKS #​2787

Merged pull requests:

v2.31.8

Compare Source

What's Changed

New Contributors

Full Changelog: locustio/locust@2.31.7...2.31.8

v2.31.7

Compare Source

Full Changelog

Merged pull requests:

v2.31.6

Compare Source

Full Changelog

Fixed bugs:

  • RPS vs Total Running Users #​2895
  • Overwriting weight by config-users may lead to crash #​2852
  • FastHttpSession requests typing for the json argument should support lists #​2842
  • Dockerfile warning #​2811

Closed issues:

  • Cleaning up the build process #​2857
  • Simplify GitHub Actions using install-poetry #​2822

Merged pull requests:

v2.31.5

Compare Source

Full Changelog

Fixed bugs:

  • Pressure testing is over, but RPS and Users still have data #​2870

Merged pull requests:

v2.31.4

Compare Source

Full Changelog

Merged pull requests:

marshmallow-code/marshmallow (marshmallow)

v3.23.1

Compare Source

v3.23.0

Compare Source

newrelic/newrelic-python-agent (newrelic)

v10.4.0

Compare Source

Notes

This release of the Python agent adds support for async PyMongo, Motor, aiomysql, a new AWS account ID configuration setting, linking AWS entities for DynamoDB and Lambda, and fixes a path typing issue in newrelic.initialize().

Install the agent using easy_install/pip/distribute via the Python Package Index or download it directly from the New Relic download site.

New features

  • Add support for async PyMongo

    • Instrumentation support was added for asynchronous PyMongo. Note that this API is currently in beta and may be subject to future breaking changes, which may affect instrumentation.

  • Add support for Motor

    • Instrumentation support was added for motor.

  • Add support for aiomysql

  • Add new AWS account ID configuration setting

    • Some AWS instrumentations are not able to automatically determine the AWS account ID which is used to link the AWS entity in the service map. When cloud.aws.account_id is set, it will be used in certain AWS instrumentations such as DynamoDB to link the DynamoDB AWS entity in the service map.

  • Link AWS entity for DynamoDB

    • Add linking to the AWS entity in the service map for DynamoDB. This linking is done by utilizing the cloud.aws.account_id configuration setting.

  • Link AWS entity for Lambda

    • Add linking to the AWS entity in the service map for Lambda. This linking is done by attaching the ARN to the lambda call's span.

Bug fixes

  • Fix path typing issue in newrelic.initialize()

    • Fixes a bug in newrelic.initialize() where path-like objects were not accepted. This has been corrected to support strings, bytes, or PathLike objects.

Support statement

We recommend updating to the latest agent version as soon as it's available. If you can't upgrade to the latest version, update your agents to a version no more than 90 days old. Read more about keeping agents up to date.

See the New Relic Python agent EOL policy for information about agent releases and support dates.

v10.3.1

Compare Source

Notes

This release of the Python agent fixes a bug in the package version collector that disabled telemetry from being sent to New Relic in certain cases.

Install the agent using easy_install/pip/distribute via the Python Package Index or download it directly from the New Relic download site.

Bug fixes

  • Fix agent crash when uploading package version info

    • Previously, if package versioning was a class property then the function itself was sent with the payload. This would then display the __repr__() of the versioning class in the environment stats. In v10.3.0, this task was tweaked and moved to the harvest cycle that caused a failure during the payload conversion to JSON and disabled the telemetry transmission. This release introduces logic to exclude invalid data types from the module payload.

Support statement

We recommend updating to the latest agent version as soon as it's available. If you can't upgrade to the latest version, update your agents to a version no more than 90 days old. Read more about keeping agents up to date.

See the New Relic Python agent EOL policy for information about agent releases and support dates.

containerbase/python-prebuild (python)

v3.13.1

Compare Source

Bug Fixes
  • deps: update dependency python to v3.13.1

v3.13.0

Compare Source

Bug Fixes
  • deps: update dependency python to v3.13.0

v3.12.8

Compare Source

Bug Fixes
  • deps: update dependency python to v3.12.8

v3.12.7

Compare Source

Bug Fixes
  • deps: update dependency python to v3.12.7

v3.12.6

Compare Source

Bug Fixes
  • deps: update dependency python to v3.12.6

v3.12.5

Compare Source

Bug Fixes
  • deps: update dependency python to v3.12.5

v3.12.4

Compare Source

Bug Fixes
  • deps: update dependency python to v3.12.4

v3.12.3

Compare Source

Bug Fixes
  • deps: update dependency python to v3.12.3

v3.12.2

Compare Source

Bug Fixes
  • deps: update dependency python to v3.12.2

v3.12.1

Compare Source

Bug Fixes
  • deps: update dependency python to v3.12.1

v3.12.0

Compare Source

Bug Fixes
  • deps: update dependency python to v3.12.0

v3.11.11

Compare Source

Bug Fixes
  • deps: update dependency python to v3.11.11

v3.11.10

Compare Source

Bug Fixes
  • deps: update dependency python to v3.11.10

v3.11.9

Compare Source

Bug Fixes
  • deps: update dependency python to v3.11.9

v3.11.8

Compare Source

Bug Fixes
  • deps: update dependency python to v3.11.8

v3.11.7

Compare Source

Bug Fixes
  • deps: update dependency python to v3.11.7

v3.11.6

Compare Source

Bug Fixes
  • deps: update dependency python to v3.11.6

v3.11.5

Compare Source

Bug Fixes
  • deps: update dependency python to v3.11.5

v3.11.4

Compare Source

Bug Fixes
  • deps: update dependency python to v3.11.4

v3.11.3

Compare Source

Bug Fixes
  • deps: update dependency python to v3.11.3

v3.11.2

Compare Source

Bug Fixes
  • deps: update dependency python to v3.11.2

v3.11.1

Compare Source

Bug Fixes
  • deps: update dependency python to v3.11.1

v3.11.0

Compare Source

Bug Fixes
  • deps: update dependency python to v3.11.0

Configuration

📅 Schedule: Branch creation - "every weekend" in timezone America/Montreal, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot added dependencies Pull requests that update a dependency file Renovate labels Jun 22, 2024
@renovate Renovate
Copy link
Contributor Author

renovate bot commented Jun 22, 2024 •
edited
Loading

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

  • any of the package files in this branch needs updating, or
  • the branch becomes conflicted, or
  • you click the rebase/retry checkbox if found above, or
  • you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: poetry.lock
Updating dependencies
Resolving dependencies...

Creating virtualenv notification-api-Nm9E1q_n-py3.13 in /home/ubuntu/.cache/pypoetry/virtualenvs

The current project's supported Python range (>=3.13.0,<3.14.0) is not compatible with some of the required packages Python requirement:
  - notifications-utils requires Python ~3.10.9, so it will not be satisfied for Python >=3.13.0,<3.14.0
  - notifications-utils requires Python ~3.10.9, so it will not be satisfied for Python >=3.13.0,<3.14.0

Because notifications-utils (52.4.1) @ git+https://github.com/cds-snc/notifier-utils.git@task/pre-3.12-recipient-csv-annual-limit-validation requires Python ~3.10.9
 and notifications-utils (52.4.1) @ git+https://github.com/cds-snc/notifier-utils.git@task/pre-3.12-recipient-csv-annual-limit-validation requires Python ~3.10.9, version solving failed.

  • Check your dependencies Python requirement: The Python requirement can be specified via the `python` or `markers` properties
    
    For notifications-utils, a possible solution would be to set the `python` property to "<empty>"
    For notifications-utils, a possible solution would be to set the `python` property to "<empty>"

    https://python-poetry.org/docs/dependency-specification/#python-restricted-dependencies,
    https://python-poetry.org/docs/dependency-specification/#using-environment-markers

@renovate renovate bot force-pushed the renovate/all-minor branch 8 times, most recently from 3a5fdb7 to 6f87d16 Compare June 29, 2024 04:30
@renovate renovate bot force-pushed the renovate/all-minor branch 6 times, most recently from aff1921 to b132358 Compare July 8, 2024 19:28
@renovate renovate bot force-pushed the renovate/all-minor branch 11 times, most recently from 52bbefd to a951f81 Compare July 15, 2024 19:09
@renovate renovate bot force-pushed the renovate/all-minor branch 2 times, most recently from 48d450f to 63cbd0b Compare July 19, 2024 04:01
@renovate renovate bot force-pushed the renovate/all-minor branch 6 times, most recently from 09d80d4 to 717f332 Compare December 4, 2024 14:51
@renovate renovate bot force-pushed the renovate/all-minor branch 17 times, most recently from 68a1c89 to 977ad9a Compare December 11, 2024 18:42
@renovate renovate bot force-pushed the renovate/all-minor branch 5 times, most recently from 1ceb363 to 6949c1e Compare December 18, 2024 19:47
@renovate renovate bot force-pushed the renovate/all-minor branch from 6949c1e to 9cdd66b Compare December 20, 2024 02:46
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
dependencies Pull requests that update a dependency file Renovate
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
0 participants