Skip to content

build(deps): bump the minor-and-patch group with 7 updates #607

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Merged
merged 1 commit into from
Jan 13, 2025
Merged

build(deps): bump the minor-and-patch group with 7 updates #607

merged 1 commit into from
Jan 13, 2025

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jan 13, 2025

Bumps the minor-and-patch group with 7 updates:

Package From To
stac-validator 3.4.0 3.5.0
pygments 2.19.0 2.19.1
marshmallow 3.23.3 3.25.1
orjson 3.10.13 3.10.14
ruamel-yaml 0.18.9 0.18.10
setuptools 75.7.0 75.8.0
watchfiles 1.0.3 1.0.4

Updates stac-validator from 3.4.0 to 3.5.0

Release notes

Sourced from stac-validator's releases.

v3.5.0

What's Changed

New Contributors

Full Changelog: stac-utils/stac-validator@v3.4.0...v3.5.0

Changelog

Sourced from stac-validator's changelog.

[v3.5.0] - 2025-01-10

Added

  • Added publish.yml to automatically publish new releases to PyPI #236
  • Configure whether to open URLs when validating assets #238
  • Allow to provide HTTP headers #239

Changed

  • Switched to the referencing library for dynamic JSON schema validation and reference resolution #241
Commits
  • 265ebd6 3.5.0 release (#242)
  • a656fa3 Use referencing library (#241)
  • 7983a81 Merge pull request #239 from vprivat-ads/http_headers
  • 7d333f4 Merge branch 'main' into http_headers
  • c79fadb Merge pull request #240 from vprivat-ads/update-python
  • 61fe54a Test with Python 3.12, 3.13
  • 334acdb Allow to provide HTTP headers
  • 492547b Merge pull request #238 from vprivat-ads/optional-link-href-urlopen
  • 6422e57 Configure whether to open URLs when validating assets
  • 6c2b6ae Merge pull request #236 from stac-utils/publish-pypi
  • Additional commits viewable in compare view

Updates pygments from 2.19.0 to 2.19.1

Release notes

Sourced from pygments's releases.

2.19.1

  • Updated lexers:

    • Ini: Fix quoted string regression introduced in 2.19.0
    • Lua: Fix a regression introduced in 2.19.0
Changelog

Sourced from pygments's changelog.

Version 2.19.1

(released January 6th, 2025)

  • Updated lexers:

    • Ini: Fix quoted string regression introduced in 2.19.0
    • Lua: Fix a regression introduced in 2.19.0
Commits

Updates marshmallow from 3.23.3 to 3.25.1

Changelog

Sourced from marshmallow's changelog.

3.25.1 (2025-01-11)

Bug fixes:

  • Typing: Fix type annotations for Tuple <marshmallow.fields.Tuple>, Boolean <marshmallow.fields.Boolean>, and Pluck <marshmallow.fields.Pluck> constructors (:pr:2756).
  • Typing: Fix overload for marshmallow.class_registry.get_class (:pr:2756).

Documentation:

  • Various documentation improvements (:pr:2746, :pr:2747, :pr:2748, :pr:2749, :pr:2750, :pr:2751).

3.25.0 (2025-01-09)

Features:

  • Typing: Improve type annotations for SchemaMeta.get_declared_fields (:pr:2742).

Bug fixes:

  • Typing: Relax type annotation for Schema.opts to allow subclasses to define their own options classes (:pr:2744).

Other changes:

  • Restore marshmallow.base.SchemaABC for backwards-compatibility (:issue:2743). Note that this class is deprecated and will be removed in marshmallow 4. Use marshmallow.schema.Schema as a base class for type-checking instead.

3.24.2 (2025-01-08)

Changes:

  • Don't override __new__ to avoid breaking usages of inspect.signature with Field <marshmallow.fields.Field> classes. This allows marshmallow-sqlalchemy users to upgrade marshmallow without upgrading to marshmallow-sqlalchemy>=1.1.1.

Documentation:

  • Add top-level API back to docs (:issue:2739). Thanks :user:llucax for reporting.

3.24.1 (2025-01-06)

... (truncated)

Commits

Updates orjson from 3.10.13 to 3.10.14

Release notes

Sourced from orjson's releases.

3.10.14

Changed

  • Specify build system dependency on maturin>=1,<2 again.
  • Allocate memory using PyMem_Malloc() and similar APIs for integration with pymalloc, mimalloc, and tracemalloc.
  • Source distribution does not ship compressed test documents and relevant tests skip if fixtures are not present.
  • Build now depends on Rust 1.82 or later instead of 1.72.
Changelog

Sourced from orjson's changelog.

3.10.14

Changed

  • Specify build system dependency on maturin>=1,<2 again.
  • Allocate memory using PyMem_Malloc() and similar APIs for integration with pymalloc, mimalloc, and tracemalloc.
  • Source distribution does not ship compressed test documents and relevant tests skip if fixtures are not present.
  • Build now depends on Rust 1.82 or later instead of 1.72.
Commits
  • 1534f8c 3.10.14
  • 3964617 Fix CI to use python3.13t interpreter
  • d231af6 alloc using PyMem functions
  • a817c91 ABI compatibility with free-threading builds
  • 0c3ca67 build maintenance, edition 2024 compatibility
  • See full diff in compare view

Updates ruamel-yaml from 0.18.9 to 0.18.10

Updates setuptools from 75.7.0 to 75.8.0

Changelog

Sourced from setuptools's changelog.

v75.8.0

Features

  • Implemented Dynamic field for core metadata (as introduced in PEP 643). The existing implementation is currently experimental and the exact approach may change in future releases. (#4698)
Commits
  • 5c9d980 Bump version: 75.7.0 → 75.8.0
  • 72c4222 Avoid using Any in function
  • 1c61d47 Add news fragments for PEP 643
  • f285d01 Implement PEP 643 (Dynamic field for core metadata) (#4698)
  • a50f6e2 Fix _static.Dict.ior for Python 3.8
  • b055895 Add extra tests for static/dynamic metadata
  • 770b4fc Remove test workaround for unmarked static values from pyproject.toml
  • 8b22d73 Mark values from pyproject.toml as static
  • f699fd8 Fix spelling error
  • 8b4c8a3 Add tests for static 'attr' directive
  • Additional commits viewable in compare view

Updates watchfiles from 1.0.3 to 1.0.4

Release notes

Sourced from watchfiles's releases.

v1.0.4 2025-01-10

What's Changed

New Contributors

Full Changelog: samuelcolvin/watchfiles@v1.0.3...v1.0.4

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
build(deps): bump the minor-and-patch group with 7 updates
ce3441c 
Bumps the minor-and-patch group with 7 updates:

| Package | From | To |
| --- | --- | --- |
| [stac-validator](https://github.com/stac-utils/stac-validator) | `3.4.0` | `3.5.0` |
| [pygments](https://github.com/pygments/pygments) | `2.19.0` | `2.19.1` |
| [marshmallow](https://github.com/marshmallow-code/marshmallow) | `3.23.3` | `3.25.1` |
| [orjson](https://github.com/ijl/orjson) | `3.10.13` | `3.10.14` |
| ruamel-yaml | `0.18.9` | `0.18.10` |
| [setuptools](https://github.com/pypa/setuptools) | `75.7.0` | `75.8.0` |
| [watchfiles](https://github.com/samuelcolvin/watchfiles) | `1.0.3` | `1.0.4` |


Updates `stac-validator` from 3.4.0 to 3.5.0
- [Release notes](https://github.com/stac-utils/stac-validator/releases)
- [Changelog](https://github.com/stac-utils/stac-validator/blob/main/CHANGELOG.md)
- [Commits](stac-utils/stac-validator@v3.4.0...v3.5.0)

Updates `pygments` from 2.19.0 to 2.19.1
- [Release notes](https://github.com/pygments/pygments/releases)
- [Changelog](https://github.com/pygments/pygments/blob/master/CHANGES)
- [Commits](pygments/pygments@2.19.0...2.19.1)

Updates `marshmallow` from 3.23.3 to 3.25.1
- [Changelog](https://github.com/marshmallow-code/marshmallow/blob/dev/CHANGELOG.rst)
- [Commits](marshmallow-code/marshmallow@3.23.3...3.25.1)

Updates `orjson` from 3.10.13 to 3.10.14
- [Release notes](https://github.com/ijl/orjson/releases)
- [Changelog](https://github.com/ijl/orjson/blob/master/CHANGELOG.md)
- [Commits](ijl/orjson@3.10.13...3.10.14)

Updates `ruamel-yaml` from 0.18.9 to 0.18.10

Updates `setuptools` from 75.7.0 to 75.8.0
- [Release notes](https://github.com/pypa/setuptools/releases)
- [Changelog](https://github.com/pypa/setuptools/blob/main/NEWS.rst)
- [Commits](pypa/setuptools@v75.7.0...v75.8.0)

Updates `watchfiles` from 1.0.3 to 1.0.4
- [Release notes](https://github.com/samuelcolvin/watchfiles/releases)
- [Commits](samuelcolvin/watchfiles@v1.0.3...v1.0.4)

---
updated-dependencies:
- dependency-name: stac-validator
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: pygments
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: marshmallow
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: orjson
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: ruamel-yaml
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: setuptools
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: watchfiles
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Jan 13, 2025
@gadomski gadomski merged commit bde0203 into main Jan 13, 2025
8 checks passed
@gadomski gadomski deleted the dependabot/pip/minor-and-patch-80fd6a4dcc branch January 13, 2025 12:27
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@github-actions github-actions[bot] github-actions[bot] approved these changes

Assignees
No one assigned
Labels
dependencies Pull requests that update a dependency file python Pull requests that update Python code
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
1 participant
@gadomski