Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Deps: Bump the dependencies group with 3 updates #525

Merged
merged 1 commit into from
Sep 18, 2023
Merged

Deps: Bump the dependencies group with 3 updates #525

merged 1 commit into from
Sep 18, 2023

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Sep 18, 2023

Bumps the dependencies group with 3 updates: coverage, rich and ruff.

Updates coverage from 7.3.0 to 7.3.1

Changelog

Sourced from coverage's changelog.

Version 7.3.1 — 2023-09-06

  • The semantics of stars in file patterns has been clarified in the docs. A leading or trailing star matches any number of path components, like a double star would. This is different than the behavior of a star in the middle of a pattern. This discrepancy was identified by Sviatoslav Sydorenko <starbad_>, who provided patient detailed diagnosis <pull 1650_> and graciously agreed to a pragmatic resolution.

  • The API docs were missing from the last version. They are now restored <apidocs_>_.

.. _apidocs: https://coverage.readthedocs.io/en/latest/api_coverage.html .. _starbad: nedbat/coveragepy#1407 .. _pull 1650: nedbat/coveragepy#1650

.. _changes_7-3-0:

Commits
  • 7ce94f1 docs: sample HTML for 7.3.1
  • ac0021b docs: prep for 7.3.1
  • 508c27f build(docs): have to install ourselves for api docs
  • 6205c9f style: pyupgrade --py38-plus --keep-runtime-typing
  • 3b484e7 style: from __future__ import annotations in every .py file with code
  • 86955f2 test/doc: add more tests of star behavior, and document it.
  • 9d5ae8e test: add regression test for path w/ trailing wildcard
  • f0c18f6 style: use walrus for regexing
  • 6afcdc3 chore: make upgrade
  • c2b238e docs: fury.io badge is lagging, switch to shields.io
  • Additional commits viewable in compare view

Updates rich from 13.5.2 to 13.5.3

Release notes

Sourced from rich's releases.

Markdown fixes

[13.5.3] - 2023-09-17

Fixed

Changelog

Sourced from rich's changelog.

[13.5.3] - 2023-09-17

Fixed

Commits

Updates ruff from 0.0.286 to 0.0.290

Release notes

Sourced from ruff's releases.

v0.0.290

What's Changed

Rules

Settings

Bug Fixes

Preview

What's this section?

New Contributors

Full Changelog: astral-sh/ruff@v0.0.289...v0.0.290

v0.0.289

What's Changed

Bug Fixes

Preview

This release includes a new preview mode which can be used to opt-in to unstable rules and features.

... (truncated)

Changelog

Sourced from ruff's changelog.

Breaking Changes

0.0.288

Remove support for emoji identifiers (#7212)

Previously, Ruff supported the non-standard compliant emoji identifiers e.g. 📦 = 1. We decided to remove this non-standard language extension, and Ruff now reports syntax errors for emoji identifiers in your code, the same as CPython.

Improved GitLab fingerprints (#7203)

GitLab uses fingerprints to identify new, existing, or fixed violations. Previously, Ruff included the violation's position in the fingerprint. Using the location has the downside that changing any code before the violation causes the fingerprint to change, resulting in GitLab reporting one fixed and one new violation even though it is a pre-existing violation.

Ruff now uses a more stable location-agnostic fingerprint to minimize that existing violations incorrectly get marked as fixed and re-reported as new violations.

Expect GitLab to report each pre-existing violation in your project as fixed and a new violation in your Ruff upgrade PR.

0.0.283 / 0.284

The target Python version now defaults to 3.8 instead of 3.10 (#6397)

Previously, when a target Python version was not specified, Ruff would use a default of Python 3.10. However, it is safer to default to an older Python version to avoid assuming the availability of new features. We now default to the oldest supported Python version which is currently Python 3.8.

(We still support Python 3.7 but since it has reached EOL we've decided not to make it the default here.)

Note this change was announced in 0.0.283 but not active until 0.0.284.

0.0.277

.ipynb_checkpoints, .pyenv, .pytest_cache, and .vscode are now excluded by default (#5513)

Ruff maintains a list of default exclusions, which now consists of the following patterns:

  • .bzr
  • .direnv
  • .eggs
  • .git
  • .git-rewrite
  • .hg
  • .ipynb_checkpoints
  • .mypy_cache
  • .nox
  • .pants.d
  • .pyenv
  • .pytest_cache
  • .pytype
  • .ruff_cache
  • .svn
  • .tox
  • .venv

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Deps: Bump the dependencies group with 3 updates
8f6d5bb 
Bumps the dependencies group with 3 updates: [coverage](https://github.com/nedbat/coveragepy), [rich](https://github.com/Textualize/rich) and [ruff](https://github.com/astral-sh/ruff).


Updates `coverage` from 7.3.0 to 7.3.1
- [Release notes](https://github.com/nedbat/coveragepy/releases)
- [Changelog](https://github.com/nedbat/coveragepy/blob/master/CHANGES.rst)
- [Commits](nedbat/coveragepy@7.3.0...7.3.1)

Updates `rich` from 13.5.2 to 13.5.3
- [Release notes](https://github.com/Textualize/rich/releases)
- [Changelog](https://github.com/Textualize/rich/blob/master/CHANGELOG.md)
- [Commits](Textualize/rich@v13.5.2...v13.5.3)

Updates `ruff` from 0.0.286 to 0.0.290
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/BREAKING_CHANGES.md)
- [Commits](astral-sh/ruff@v0.0.286...v0.0.290)

---
updated-dependencies:
- dependency-name: coverage
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: rich
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: ruff
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot requested a review from a team as a code owner September 18, 2023 09:01
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Sep 18, 2023
@greenbonebot greenbonebot enabled auto-merge (squash) September 18, 2023 09:01
@github-actions
Copy link

Conventional Commits Report

Type Number
Dependencies 1

🚀 Conventional commits found.

@greenbonebot greenbonebot merged commit 7bf947d into main Sep 18, 2023
20 checks passed
@greenbonebot greenbonebot deleted the dependabot/pip/dependencies-c9e6609b0a branch September 18, 2023 10:21
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@bjoernricks bjoernricks bjoernricks approved these changes

Assignees
No one assigned
Labels
dependencies Pull requests that update a dependency file python Pull requests that update Python code
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
2 participants
@bjoernricks @greenbonebot