chore(deps): update dependency attrs to v24

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
attrs (changelog)	==23.2.0 -> ==24.2.0

---

Release Notes

python-attrs/attrs (attrs)

v24.2.0

Compare Source

Deprecations

• Given the amount of warnings raised in the broader ecosystem, we've decided to only soft-deprecate the hash argument to @define / @attr.s.
  Please don't use it in new code, but we don't intend to remove it anymore.
  #​1330

Changes

• attrs.converters.pipe() (and its syntactic sugar of passing a list for attrs.field()'s / attr.ib()'s converter argument) works again when passing attrs.setters.convert to on_setattr (which is default for attrs.define).
  #​1328
• Restored support for PEP 649 / 749-implementing Pythons -- currently 3.14-dev.
  #​1329

v24.1.0

Compare Source

Backwards-incompatible Changes

• attrs.evolve() doesn't accept the inst argument as a keyword argument anymore.
  Pass it as the first positional argument instead.
  #​1264

• attrs.validators.provides() has been removed.
  The removed code is available as a gist for convenient copy and pasting.
  #​1265

• All packaging metadata except from __version__ and __version_info__ has been removed from the attr and attrs modules (for example, attrs.__url__).

  Please use importlib.metadata or importlib-metadata instead.
  #​1268

• The generated __eq__ methods have been sped up significantly by generating a chain of attribute comparisons instead of constructing and comparing tuples.
  This change arguably makes the behavior more correct,
  but changes it if an attribute compares equal by identity but not value, like float('nan').
  #​1310

Deprecations

• The repr_ns argument to attr.s is now deprecated.
  It was a workaround for nested classes in Python 2 and is pointless in Python 3.
  #​1263
• The hash argument to @attr.s, @attrs.define, and make_class() is now deprecated in favor of unsafe_hash, as defined by PEP 681.
  #​1323

Changes

• Allow original slotted functools.cached_property classes to be cleaned by garbage collection.
  Allow super() calls in slotted cached properties.
  #​1221

• Our type stubs now use modern type notation and are organized such that VS Code's quick-fix prefers the attrs namespace.
  #​1234

• Preserve AttributeError raised by properties of slotted classes with functools.cached_properties.
  #​1253

• It is now possible to wrap a converter into an attrs.Converter and get the current instance and/or the current field definition passed into the converter callable.

  Note that this is not supported by any type checker, yet.
  #​1267

• attrs.make_class() now populates the __annotations__ dict of the generated class, so that attrs.resolve_types() can resolve them.
  #​1285

• Added the attrs.validators.or_() validator.
  #​1303

• The combination of a __attrs_pre_init__ that takes arguments, a kw-only field, and a default on that field does not crash anymore.
  #​1319

• attrs.validators.in_() now transforms certain unhashable options to tuples to keep the field hashable.

  This allows fields that use this validator to be used with, for example, attrs.filters.include().
  #​1320

• If a class has an inherited method called __attrs_init_subclass__, it is now called once the class is done assembling.

  This is a replacement for Python's __init_subclass__ and useful for registering classes, and similar.
  #​1321

---

Configuration

📅 Schedule: Branch creation - "every 3 months on the first day of the month" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

🦙 MegaLinter status: ✅ SUCCESS

Descriptor	Linter	Files	Fixed	Errors	Elapsed time
✅ ACTION	actionlint	5		0	0.03s
✅ BASH	bash-exec	2		0	0.03s
✅ BASH	shellcheck	2		0	0.03s
✅ BASH	shfmt	2		0	0.04s
✅ DOCKERFILE	hadolint	2		0	0.21s
✅ JSON	jsonlint	16		0	0.28s
✅ JSON	npm-package-json-lint	yes		no	0.55s
✅ JSON	prettier	16		0	1.85s
✅ MARKDOWN	markdownlint	3		0	0.68s
✅ PYTHON	bandit	31		0	1.36s
✅ PYTHON	black	31		0	2.32s
✅ PYTHON	flake8	31		0	1.05s
✅ PYTHON	isort	31		0	0.52s
✅ PYTHON	mypy	31		0	10.46s
✅ PYTHON	pyright	31		0	9.98s
✅ PYTHON	ruff	31		0	0.05s
✅ REPOSITORY	checkov	yes		no	15.14s
✅ REPOSITORY	gitleaks	yes		no	0.17s
✅ REPOSITORY	git_diff	yes		no	0.01s
✅ REPOSITORY	grype	yes		no	18.01s
✅ REPOSITORY	kics	yes		no	31.37s
✅ REPOSITORY	secretlint	yes		no	0.97s
✅ REPOSITORY	syft	yes		no	0.69s
✅ REPOSITORY	trivy	yes		no	11.33s
✅ REPOSITORY	trivy-sbom	yes		no	2.34s
✅ REPOSITORY	trufflehog	yes		no	5.69s
✅ YAML	prettier	15		0	1.0s
✅ YAML	yamllint	15		0	0.59s

See detailed report in MegaLinter reports

You could have same capabilities but better runtime performances if you request a new MegaLinter flavor.

• Click here to request the new flavor

MegaLinter is graciously provided by

[github-actions]

Trivy image scan report

ghcr.io/miracum/ahd2fhir:pr-190 (debian 12.6)

24 known vulnerabilities found (MEDIUM: 9 LOW: 4 CRITICAL: 7 HIGH: 4)

Show detailed table of vulnerabilities

Package	ID	Severity	Installed Version	Fixed Version
libexpat1	CVE-2024-45490	CRITICAL	2.5.0-1	2.5.0-1+deb12u1
libexpat1	CVE-2024-45491	CRITICAL	2.5.0-1	2.5.0-1+deb12u1
libexpat1	CVE-2024-45492	CRITICAL	2.5.0-1	2.5.0-1+deb12u1
libgssapi-krb5-2	CVE-2024-37371	CRITICAL	1.20.1-2+deb12u1	1.20.1-2+deb12u2
libgssapi-krb5-2	CVE-2024-37370	HIGH	1.20.1-2+deb12u1	1.20.1-2+deb12u2
libk5crypto3	CVE-2024-37371	CRITICAL	1.20.1-2+deb12u1	1.20.1-2+deb12u2
libk5crypto3	CVE-2024-37370	HIGH	1.20.1-2+deb12u1	1.20.1-2+deb12u2
libkrb5-3	CVE-2024-37371	CRITICAL	1.20.1-2+deb12u1	1.20.1-2+deb12u2
libkrb5-3	CVE-2024-37370	HIGH	1.20.1-2+deb12u1	1.20.1-2+deb12u2
libkrb5support0	CVE-2024-37371	CRITICAL	1.20.1-2+deb12u1	1.20.1-2+deb12u2
libkrb5support0	CVE-2024-37370	HIGH	1.20.1-2+deb12u1	1.20.1-2+deb12u2
libpython3.11-minimal	CVE-2024-0397	MEDIUM	3.11.2-6+deb12u2	3.11.2-6+deb12u3
libpython3.11-minimal	CVE-2024-8088	MEDIUM	3.11.2-6+deb12u2	3.11.2-6+deb12u3
libpython3.11-minimal	CVE-2024-4032	LOW	3.11.2-6+deb12u2	3.11.2-6+deb12u3
libpython3.11-stdlib	CVE-2024-0397	MEDIUM	3.11.2-6+deb12u2	3.11.2-6+deb12u3
libpython3.11-stdlib	CVE-2024-8088	MEDIUM	3.11.2-6+deb12u2	3.11.2-6+deb12u3
libpython3.11-stdlib	CVE-2024-4032	LOW	3.11.2-6+deb12u2	3.11.2-6+deb12u3
libssl3	CVE-2024-4603	MEDIUM	3.0.13-1~deb12u1	3.0.14-1~deb12u1
libssl3	CVE-2024-4741	MEDIUM	3.0.13-1~deb12u1	3.0.14-1~deb12u1
libssl3	CVE-2024-6119	MEDIUM	3.0.13-1~deb12u1	3.0.14-1~deb12u2
libssl3	CVE-2024-2511	LOW	3.0.13-1~deb12u1	3.0.14-1~deb12u1
python3.11-minimal	CVE-2024-0397	MEDIUM	3.11.2-6+deb12u2	3.11.2-6+deb12u3
python3.11-minimal	CVE-2024-8088	MEDIUM	3.11.2-6+deb12u2	3.11.2-6+deb12u3
python3.11-minimal	CVE-2024-4032	LOW	3.11.2-6+deb12u2	3.11.2-6+deb12u3

No Misconfigurations found

Python

1 known vulnerabilities found (LOW: 0 CRITICAL: 0 HIGH: 1 MEDIUM: 0)

Show detailed table of vulnerabilities

Package	ID	Severity	Installed Version	Fixed Version
setuptools	CVE-2024-6345	HIGH	65.5.1	70.0.0

No Misconfigurations found

[miracum-bot]

🎉 This PR is included in version 4.0.2 🎉

The release is available on GitHub release

Your semantic-release bot 📦🚀