Skip to content

Bump the dependencies group in /.config with 6 updates #316

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Merged
merged 1 commit into from
Apr 13, 2025
Merged

Bump the dependencies group in /.config with 6 updates #316

merged 1 commit into from
Apr 13, 2025

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Apr 13, 2025

Bumps the dependencies group in /.config with 6 updates:

Package From To
markdown 3.7 3.8
pillow 11.1.0 11.2.1
ruff 0.11.4 0.11.5
typing-extensions 4.13.1 4.13.2
urllib3 2.3.0 2.4.0
uv 0.6.13 0.6.14

Updates markdown from 3.7 to 3.8

Release notes

Sourced from markdown's releases.

Release 3.8

Changed

  • DRY fix in abbr extension by introducing method create_element (#1483).
  • Clean up test directory by removing some redundant tests and port non-redundant cases to the newer test framework.
  • Improved performance of the raw HTML post-processor (#1510).

Fixed

  • Backslash Unescape IDs set via attr_list on toc (#1493).
  • Ensure md_in_html processes content inside "markdown" blocks as they are parsed outside of "markdown" blocks to keep things more consistent for third-party extensions (#1503).
  • md_in_html handle tags within inline code blocks better (#1075).
  • md_in_html fix handling of one-liner block HTML handling (#1074).
  • Ensure <center> is treated like a block-level element (#1481).
  • Ensure that abbr extension respects AtomicString and does not process perceived abbreviations in these strings (#1512).
  • Ensure smarty extension correctly renders nested closing quotes (#1514).
Changelog

Sourced from markdown's changelog.

title: Changelog toc_depth: 2

Python-Markdown Changelog

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog, and this project adheres to Semantic Versioning. See the Contributing Guide for details.

[3.8.0] - 2025-04-09

Changed

  • DRY fix in abbr extension by introducing method create_element (#1483).
  • Clean up test directory by removing some redundant tests and port non-redundant cases to the newer test framework.
  • Improved performance of the raw HTML post-processor (#1510).

Fixed

  • Backslash Unescape IDs set via attr_list on toc (#1493).
  • Ensure md_in_html processes content inside "markdown" blocks as they are parsed outside of "markdown" blocks to keep things more consistent for third-party extensions (#1503).
  • md_in_html handle tags within inline code blocks better (#1075).
  • md_in_html fix handling of one-liner block HTML handling (#1074).
  • Ensure <center> is treated like a block-level element (#1481).
  • Ensure that abbr extension respects AtomicString and does not process perceived abbreviations in these strings (#1512).
  • Ensure smarty extension correctly renders nested closing quotes (#1514).

[3.7.0] - 2024-08-16

Changed

  • Refactor abbr Extension

    A new AbbrTreeprocessor has been introduced, which replaces the now deprecated AbbrInlineProcessor. Abbreviation processing now happens after Attribute Lists, avoiding a conflict between the two extensions (#1460).

    The AbbrPreprocessor class has been renamed to AbbrBlockprocessor, which better reflects what it is. AbbrPreprocessor has been deprecated.

    A call to Markdown.reset() now clears all previously defined abbreviations.

    Abbreviations are now sorted by length before executing AbbrTreeprocessor to ensure that multi-word abbreviations are implemented even if an abbreviation

... (truncated)

Commits
  • b34e1d0 Bump version to 3.8
  • e6b7163 Update deploy workflow to normalize version
  • bd67d48 Improve changelog validation
  • e912575 Fix incorrect TOC list structure in docs
  • 42d4b43 Fix CI badge in README
  • 1caf028 Optimize raw HTML post-processor (#1510)
  • f6cfc5c Use PEP 639 license expressions in project metadata
  • 9c6e39a Add Python 3.13 and drop Python 3.8
  • 7aae61b Add special case for closing nested quotes
  • 0ad5b0a Abbr should respect AtomicStrings
  • Additional commits viewable in compare view

Updates pillow from 11.1.0 to 11.2.1

Release notes

Sourced from pillow's releases.

11.2.1

https://pillow.readthedocs.io/en/stable/releasenotes/11.2.1.html

Deprecations

Documentation

Dependencies

... (truncated)

Changelog

Sourced from pillow's changelog.

Changelog (Pillow)

Commits

Updates ruff from 0.11.4 to 0.11.5

Release notes

Sourced from ruff's releases.

0.11.5

Release Notes

Preview features

  • [airflow] Add missing AIR302 attribute check (#17115)
  • [airflow] Expand module path check to individual symbols (AIR302) (#17278)
  • [airflow] Extract AIR312 from AIR302 rules (AIR302, AIR312) (#17152)
  • [airflow] Update oudated AIR301, AIR302 rules (#17123)
  • [syntax-errors] Async comprehension in sync comprehension (#17177)
  • [syntax-errors] Check annotations in annotated assignments (#17283)
  • [syntax-errors] Extend annotation checks to await (#17282)

Bug fixes

  • [flake8-pie] Avoid false positive for multiple assignment with auto() (PIE796) (#17274)

Rule changes

  • [ruff] Fix RUF100 to detect unused file-level noqa directives with specific codes (#17042) (#17061)
  • [flake8-pytest-style] Avoid false positive for legacy form of pytest.raises (PT011) (#17231)

Documentation

  • Fix formatting of "See Style Guide" link (#17272)

Contributors

Install ruff 0.11.5

Install prebuilt binaries via shell script

... (truncated)

Changelog

Sourced from ruff's changelog.

0.11.5

Preview features

  • [airflow] Add missing AIR302 attribute check (#17115)
  • [airflow] Expand module path check to individual symbols (AIR302) (#17278)
  • [airflow] Extract AIR312 from AIR302 rules (AIR302, AIR312) (#17152)
  • [airflow] Update oudated AIR301, AIR302 rules (#17123)
  • [syntax-errors] Async comprehension in sync comprehension (#17177)
  • [syntax-errors] Check annotations in annotated assignments (#17283)
  • [syntax-errors] Extend annotation checks to await (#17282)

Bug fixes

  • [flake8-pie] Avoid false positive for multiple assignment with auto() (PIE796) (#17274)

Rule changes

  • [ruff] Fix RUF100 to detect unused file-level noqa directives with specific codes (#17042) (#17061)
  • [flake8-pytest-style] Avoid false positive for legacy form of pytest.raises (PT011) (#17231)

Documentation

  • Fix formatting of "See Style Guide" link (#17272)
Commits

Updates typing-extensions from 4.13.1 to 4.13.2

Release notes

Sourced from typing-extensions's releases.

4.13.2

  • Fix TypeError when taking the union of typing_extensions.TypeAliasType and a typing.TypeAliasType on Python 3.12 and 3.13. Patch by Joren Hammudoglu.
  • Backport from CPython PR #132160 to avoid having user arguments shadowed in generated __new__ by @typing_extensions.deprecated. Patch by Victorien Plot.
Changelog

Sourced from typing-extensions's changelog.

Release 4.13.2 (April 10, 2025)

  • Fix TypeError when taking the union of typing_extensions.TypeAliasType and a typing.TypeAliasType on Python 3.12 and 3.13. Patch by Joren Hammudoglu.
  • Backport from CPython PR #132160 to avoid having user arguments shadowed in generated __new__ by @typing_extensions.deprecated. Patch by Victorien Plot.
Commits

Updates urllib3 from 2.3.0 to 2.4.0

Release notes

Sourced from urllib3's releases.

2.4.0

🚀 urllib3 is fundraising for HTTP/2 support

urllib3 is raising ~$40,000 USD to release HTTP/2 support and ensure long-term sustainable maintenance of the project after a sharp decline in financial support. If your company or organization uses Python and would benefit from HTTP/2 support in Requests, pip, cloud SDKs, and thousands of other projects please consider contributing financially to ensure HTTP/2 support is developed sustainably and maintained for the long-haul.

Thank you for your support.

Features

  • Applied PEP 639 by specifying the license fields in pyproject.toml. (#3522)
  • Updated exceptions to save and restore more properties during the pickle/serialization process. (#3567)
  • Added verify_flags option to create_urllib3_context with a default of VERIFY_X509_PARTIAL_CHAIN and VERIFY_X509_STRICT for Python 3.13+. (#3571)

Bugfixes

  • Fixed a bug with partial reads of streaming data in Emscripten. (#3555)

Misc

  • Switched to uv for installing development dependecies. (#3550)
  • Removed the multiple.intoto.jsonl asset from GitHub releases. Attestation of release files since v2.3.0 can be found on PyPI. (#3566)
Changelog

Sourced from urllib3's changelog.

2.4.0 (2025-04-10)

Features

  • Applied PEP 639 by specifying the license fields in pyproject.toml. ([#3522](https://github.com/urllib3/urllib3/issues/3522) <https://github.com/urllib3/urllib3/issues/3522>__)
  • Updated exceptions to save and restore more properties during the pickle/serialization process. ([#3567](https://github.com/urllib3/urllib3/issues/3567) <https://github.com/urllib3/urllib3/issues/3567>__)
  • Added verify_flags option to create_urllib3_context with a default of VERIFY_X509_PARTIAL_CHAIN and VERIFY_X509_STRICT for Python 3.13+. ([#3571](https://github.com/urllib3/urllib3/issues/3571) <https://github.com/urllib3/urllib3/issues/3571>__)

Bugfixes

  • Fixed a bug with partial reads of streaming data in Emscripten. ([#3555](https://github.com/urllib3/urllib3/issues/3555) <https://github.com/urllib3/urllib3/issues/3555>__)

Misc

  • Switched to uv for installing development dependecies. ([#3550](https://github.com/urllib3/urllib3/issues/3550) <https://github.com/urllib3/urllib3/issues/3550>__)
  • Removed the multiple.intoto.jsonl asset from GitHub releases. Attestation of release files since v2.3.0 can be found on PyPI. ([#3566](https://github.com/urllib3/urllib3/issues/3566) <https://github.com/urllib3/urllib3/issues/3566>__)
Commits

Updates uv from 0.6.13 to 0.6.14

Release notes

Sourced from uv's releases.

0.6.14

Release Notes

Python versions

The following Python versions have been added:

  • CPython 3.13.3
  • CPython 3.12.10
  • CPython 3.11.12
  • CPython 3.10.17
  • CPython 3.9.22

See the python-build-standalone release notes for more details.

Enhancements

  • Add uv-build and uv_build aliases to uv init --build-backend (#12776)
  • Emit dedicated error message for Conda environment.yml files (#12669)

Preview features

  • Build backend: Check module dir exists for sdist build (#12779)
  • Build backend: Fix sdist with long directories (#12764)

Performance

  • Avoid querying GitHub on repeated install invocations (#12767)

Bug fixes

  • Error when tool.uv.sources is set in system-level configuration file (#12757)
  • Split workspace members onto their own lines in uv init (#12756)

Documentation

  • Add lockfile note about PEP 751 (#12732)
  • Extend the reference documentation for uv pip sync (#12683)
  • Fix mismatched pip interface header / nav titles (#12640)

uv 0.6.14

Install uv 0.6.14

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://github.com/astral-sh/uv/releases/download/0.6.14/uv-installer.sh | sh

... (truncated)

Changelog

Sourced from uv's changelog.

0.6.14

Python versions

The following Python versions have been added:

  • CPython 3.13.3
  • CPython 3.12.10
  • CPython 3.11.12
  • CPython 3.10.17
  • CPython 3.9.22

See the python-build-standalone release notes for more details.

Enhancements

  • Add uv-build and uv_build aliases to uv init --build-backend (#12776)
  • Emit dedicated error message for Conda environment.yml files (#12669)

Preview features

  • Build backend: Check module dir exists for sdist build (#12779)
  • Build backend: Fix sdist with long directories (#12764)

Performance

  • Avoid querying GitHub on repeated install invocations (#12767)

Bug fixes

  • Error when tool.uv.sources is set in system-level configuration file (#12757)
  • Split workspace members onto their own lines in uv init (#12756)

Documentation

  • Add lockfile note about PEP 751 (#12732)
  • Extend the reference documentation for uv pip sync (#12683)
  • Fix mismatched pip interface header / nav titles (#12640)
Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the dependencies group in /.config with 6 updates
0378703 
Bumps the dependencies group in /.config with 6 updates:

| Package | From | To |
| --- | --- | --- |
| [markdown](https://github.com/Python-Markdown/markdown) | `3.7` | `3.8` |
| [pillow](https://github.com/python-pillow/Pillow) | `11.1.0` | `11.2.1` |
| [ruff](https://github.com/astral-sh/ruff) | `0.11.4` | `0.11.5` |
| [typing-extensions](https://github.com/python/typing_extensions) | `4.13.1` | `4.13.2` |
| [urllib3](https://github.com/urllib3/urllib3) | `2.3.0` | `2.4.0` |
| [uv](https://github.com/astral-sh/uv) | `0.6.13` | `0.6.14` |


Updates `markdown` from 3.7 to 3.8
- [Release notes](https://github.com/Python-Markdown/markdown/releases)
- [Changelog](https://github.com/Python-Markdown/markdown/blob/master/docs/changelog.md)
- [Commits](Python-Markdown/markdown@3.7...3.8)

Updates `pillow` from 11.1.0 to 11.2.1
- [Release notes](https://github.com/python-pillow/Pillow/releases)
- [Changelog](https://github.com/python-pillow/Pillow/blob/main/CHANGES.rst)
- [Commits](python-pillow/Pillow@11.1.0...11.2.1)

Updates `ruff` from 0.11.4 to 0.11.5
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.11.4...0.11.5)

Updates `typing-extensions` from 4.13.1 to 4.13.2
- [Release notes](https://github.com/python/typing_extensions/releases)
- [Changelog](https://github.com/python/typing_extensions/blob/main/CHANGELOG.md)
- [Commits](python/typing_extensions@4.13.1...4.13.2)

Updates `urllib3` from 2.3.0 to 2.4.0
- [Release notes](https://github.com/urllib3/urllib3/releases)
- [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst)
- [Commits](urllib3/urllib3@2.3.0...2.4.0)

Updates `uv` from 0.6.13 to 0.6.14
- [Release notes](https://github.com/astral-sh/uv/releases)
- [Changelog](https://github.com/astral-sh/uv/blob/main/CHANGELOG.md)
- [Commits](astral-sh/uv@0.6.13...0.6.14)

---
updated-dependencies:
- dependency-name: markdown
  dependency-version: '3.8'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: pillow
  dependency-version: 11.2.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: ruff
  dependency-version: 0.11.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: typing-extensions
  dependency-version: 4.13.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: urllib3
  dependency-version: 2.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: uv
  dependency-version: 0.6.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot requested a review from a team as a code owner April 13, 2025 05:55
@abhikdps abhikdps removed the minor label Apr 13, 2025
@ansibuddy ansibuddy enabled auto-merge (squash) April 13, 2025 07:37
@ansibuddy ansibuddy merged commit 436586f into main Apr 13, 2025
21 of 22 checks passed
@ansibuddy ansibuddy deleted the dependabot/pip/dot-config/dependencies-ef91570896 branch April 13, 2025 07:37
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@ansibuddy ansibuddy ansibuddy approved these changes

Assignees
No one assigned
Labels
dependabot-deps-updates dependencies skip-changelog
Projects
🧰 devtools project board
Archived in project
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
2 participants
@ansibuddy @abhikdps