Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump the dependencies group with 4 updates #5079

Merged
merged 1 commit into from
Dec 2, 2024

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Dec 2, 2024

Bumps the dependencies group with 4 updates: cryptography, matplotlib, pyarrow and selenium.

Updates cryptography from 43.0.3 to 44.0.0

Changelog

Sourced from cryptography's changelog.

44.0.0 - 2024-11-27


* **BACKWARDS INCOMPATIBLE:** Dropped support for LibreSSL < 3.9.
* Deprecated Python 3.7 support. Python 3.7 is no longer supported by the
  Python core team. Support for Python 3.7 will be removed in a future
  ``cryptography`` release.
* Updated Windows, macOS, and Linux wheels to be compiled with OpenSSL 3.4.0.
* macOS wheels are now built against the macOS 10.13 SDK. Users on older
  versions of macOS should upgrade, or they will need to build
  ``cryptography`` themselves.
* Enforce the :rfc:`5280` requirement that extended key usage extensions must
  not be empty.
* Added support for timestamp extraction to the
  :class:`~cryptography.fernet.MultiFernet` class.
* Relax the Authority Key Identifier requirements on root CA certificates
  during X.509 verification to allow fields permitted by :rfc:`5280` but
  forbidden by the CA/Browser BRs.
* Added support for :class:`~cryptography.hazmat.primitives.kdf.argon2.Argon2id`
  when using OpenSSL 3.2.0+.
* Added support for the :class:`~cryptography.x509.Admissions` certificate extension.
* Added basic support for PKCS7 decryption (including S/MIME 3.2) via
  :func:`~cryptography.hazmat.primitives.serialization.pkcs7.pkcs7_decrypt_der`,
  :func:`~cryptography.hazmat.primitives.serialization.pkcs7.pkcs7_decrypt_pem`, and
  :func:`~cryptography.hazmat.primitives.serialization.pkcs7.pkcs7_decrypt_smime`.

.. _v43-0-3:

Commits

Updates matplotlib from 3.9.2 to 3.9.3

Release notes

Sourced from matplotlib's releases.

REL: 3.9.3

This is the third bugfix release of the 3.9.x series.

This release contains several bug-fixes and adjustments:

  • Fix axline with extremely small slopes
  • Fix axline with non-linear axis scales
  • Fix minimumSizeHint with Qt backend
  • Fix config directory usage when it's behind a symlink
  • Fix draggable legend when blitting is enabled
  • Fix high CPU utilization in the macosx backend
  • Fix multiple hatch edgecolors passed to contourf
  • Improve compatibility with pytest 8.2.0
Commits
  • 3ac0aea REL: 3.9.3
  • 3f7adbd Merge branch 'v3.9.2-doc' into v3.9.x
  • 4ca8d68 DOC: Create release notes for 3.9.3
  • 0cabfe2 Merge pull request #29195 from meeseeksmachine/auto-backport-of-pr-29191-on-v...
  • 562d458 Backport PR #29191: ci: Simplify 3.13t test setup
  • 0586854 Merge pull request #29176 from meeseeksmachine/auto-backport-of-pr-29148-on-v...
  • 84f2ae2 Merge pull request #29178 from meeseeksmachine/auto-backport-of-pr-29163-on-v...
  • dd57772 Backport PR #29163: ci: Remove outdated pkg-config package on macOS
  • c4bfd54 Backport PR #29148: Don't fail on equal-but-differently-named cmaps in qt fig...
  • d71ff49 Backport PR #29153: Bump codecov/codecov-action from 4 to 5 in the actions gr...
  • Additional commits viewable in compare view

Updates pyarrow from 18.0.0 to 18.1.0

Release notes

Sourced from pyarrow's releases.

Apache Arrow 18.1.0

Release Notes URL: https://arrow.apache.org/release/18.1.0.html

Apache Arrow 18.1.0 RC2

Release Notes: Release Candidate: 18.1.0 RC2

Apache Arrow 18.1.0 RC1

Release Notes: Release Candidate: 18.1.0 RC1

Apache Arrow 18.1.0 RC0

Release Notes: Release Candidate: 18.1.0 RC0

Commits
  • 6a0414b MINOR: [Release] Update versions for 18.1.0
  • e4aee0c MINOR: [Release] Update .deb/.rpm changelogs for 18.1.0
  • 6199e5e MINOR: [Release] Update .deb package names for 18.1.0
  • d944b8b MINOR: [Release] Update CHANGELOG.md for 18.1.0
  • ac81eed GH-44455: [C++] Update vendored date to 3.0.3 (#44482)
  • 90bfa2c GH-44432: [Swift] Use flatbuffers v24.3.7 (#44433)
  • 0d69542 MINOR: [Java] Bump org.cyclonedx:cyclonedx-maven-plugin from 2.8.2 to 2.9.0 i...
  • 602e447 MINOR: [Java] Bump logback.version from 1.5.8 to 1.5.10 in /java (#44403)
  • 67c4d5e MINOR: [Java] Bump checker.framework.version from 3.48.0 to 3.48.1 in /java (...
  • 363acb0 MINOR: [C#] Bump Grpc.Tools from 2.66.0 to 2.67.0 in /csharp (#44400)
  • Additional commits viewable in compare view

Updates selenium from 4.26.1 to 4.27.1

Release notes

Sourced from selenium's releases.

Selenium 4.27.0

Detailed Changelogs by Component

Java     |     Python     |     DotNet     |     Ruby     |     JavaScript     |     IEDriver

What's Changed

... (truncated)

Commits

You can trigger a rebase of this PR by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the dependencies group with 4 updates: [cryptography](https://github.com/pyca/cryptography), [matplotlib](https://github.com/matplotlib/matplotlib), [pyarrow](https://github.com/apache/arrow) and [selenium](https://github.com/SeleniumHQ/Selenium).


Updates `cryptography` from 43.0.3 to 44.0.0
- [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst)
- [Commits](pyca/cryptography@43.0.3...44.0.0)

Updates `matplotlib` from 3.9.2 to 3.9.3
- [Release notes](https://github.com/matplotlib/matplotlib/releases)
- [Commits](matplotlib/matplotlib@v3.9.2...v3.9.3)

Updates `pyarrow` from 18.0.0 to 18.1.0
- [Release notes](https://github.com/apache/arrow/releases)
- [Commits](apache/arrow@apache-arrow-18.0.0...apache-arrow-18.1.0)

Updates `selenium` from 4.26.1 to 4.27.1
- [Release notes](https://github.com/SeleniumHQ/Selenium/releases)
- [Commits](https://github.com/SeleniumHQ/Selenium/commits)

---
updated-dependencies:
- dependency-name: cryptography
  dependency-type: indirect
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: matplotlib
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: pyarrow
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: selenium
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Dec 2, 2024
@evansd evansd merged commit dd40b28 into main Dec 2, 2024
5 checks passed
@evansd evansd deleted the dependabot/pip/dependencies-2cdfecdf8c branch December 2, 2024 10:11
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file python Pull requests that update Python code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant