Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump the actions group with 11 updates #4207

Merged
merged 4 commits into from
Mar 26, 2025
Merged

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Mar 25, 2025

Bumps the actions group with 11 updates:

Package From To
lru-dict 1.2.0 1.3.0
marko 1.0.2 2.1.2
pycryptodome 3.21.0 3.22.0
ruamel-yaml 0.17.21 0.18.10
setuptools 75.8.0 78.0.2
codespell 2.4.0 2.4.1
flake8 5.0.4 7.1.2
mypy 0.981 1.15.0
filelock 3.17.0 3.18.0
pathos 0.3.0 0.3.3
mkdocs-material 9.1.5 9.6.9

Updates lru-dict from 1.2.0 to 1.3.0

Commits

Updates marko from 1.0.2 to 2.1.2

Release notes

Sourced from marko's releases.

v2.1.2

Changed

  • Update the GFM spec to the latest master branch.
  • Update the CommonMark spec to 0.31.2.

v2.1.1

Fixed

  • Reference link will not render if the reference definition doesn't end with newline.

v2.1.0

Changed

  • Drop support of Python 3.7.

v2.0.3

Fixed

  • Add pretty representation for the AST for debugging purpose. An extra group repr is added for more readable output.
  • Make a dummy Document element if the element to render is not a Document instance.

Full Changelog: frostming/marko@v2.0.2...v2.0.3

v2.0.2

Fixed

  • Rewrite the parsing logic of GFM tables.
  • Fixed the dispatching among different renderers for render methods in extensions. Now the GFM renderer supports MarkdownRenderer.

Full Changelog: frostming/marko@v2.0.1...v2.0.2

2.0.1

Fixed

  • Preserve link references when rendering document as Markdown.

Documentation

  • Fix the sidebar warning in shibuya theme.

v2.0.0

Note This major release contains breaking changes to the internal APIs. Read the below for details. If you are extending Marko, please pay attention. Otherwise, the usage remains unchanged.

Changed

  • Avoid saving to global variables during parsing. There can be multiple parsers running in parallel.

... (truncated)

Changelog

Sourced from marko's changelog.

v2.1.2(2024-06-21)

Changed

  • Update the GFM spec to the latest master branch.
  • Update the CommonMark spec to 0.31.2.

v2.1.1(2024-06-19)

Fixed

  • Reference link will not render if the reference definition doesn't end with newline.

v2.1.0(2024-06-13)

Changed

  • Drop support of Python 3.7.

v2.0.3(2024-02-22)

  • Add pretty representation for the AST for debugging purpose. An extra group repr is added for more readable output.
  • Make a dummy Document element if the element to render is not a Document instance.

v2.0.2(2023-11-16)

Fixed

  • Rewrite the parsing logic of GFM tables.
  • Fixed the dispatching among different renderers for render methods in extensions. Now the GFM renderer supports MarkdownRenderer.

v2.0.1(2023-10-23)

Fixed

  • Preserve link references when rendering document as Markdown.

Documentation

  • Fix the sidebar warning in shibuya theme.

v2.0.0(2023-06-12)

Changed

  • Avoid saving to global variables during parsing. There can be multiple parsers running in parallel.
  • Now the children attribute for block elements should be a list of child elements.
  • Move the HTML content of HTMLBlock from children to body attribute.
  • Fixed some built-in extensions that modify class attributes.
  • Add a helper class to create extensions, instead of using arbitrary objects to hold partial properties.

... (truncated)

Commits

Updates pycryptodome from 3.21.0 to 3.22.0

Release notes

Sourced from pycryptodome's releases.

v3.22.0 - Caen

New features

  • Added support for HPKE (RFC 9180).

Resolved issues

  • GH#812: CCM ciphers will now fail before encrypting (or decrypting) data beyond the limit imposed by the nonce length.
  • GH#846: fix infinite loop with RC4 for data larger than 4GB.
  • GH#852: handle correctly invalid PEM files with less than 3 lines.

Other changes

  • Remove support for Python 3.6.
Changelog

Sourced from pycryptodome's changelog.

3.22.0 (16 March 2025) ++++++++++++++++++++++++++

New features

  • Added support for HPKE (RFC 9180).

Resolved issues

  • GH#812: CCM ciphers will now fail before encrypting (or decrypting) data beyond the limit imposed by the nonce length.
  • GH#846: fix infinite loop with RC4 for data larger than 4GB.
  • GH#852: handle correctly invalid PEM files with less than 3 lines.

Other changes

  • Remove support for Python 3.6.
Commits
  • e1f06ed Include OS and package type in the wheels archive
  • 208d281 Bump version
  • f277db8 Fix typing info
  • 75dc6e0 Fix GH#812: CCM will now fail before en/decrypting too much data
  • eac9de8 Fix GH#852: a PEM file must have at least 3 lines
  • 46bf040 Clarify how ChaCha20.seek() can be used to seek to blocks
  • fd3c7f2 Some clarifications for SecretSharing
  • 967938f Update Changelog
  • f979abf GH#846: fix infinite loop with RC4 for data larger than 4GB
  • 291400c Stress that passwords should not be used as PSK
  • Additional commits viewable in compare view

Updates ruamel-yaml from 0.17.21 to 0.18.10

Updates setuptools from 75.8.0 to 78.0.2

Changelog

Sourced from setuptools's changelog.

v78.0.2

Bugfixes

  • Postponed removals of deprecated dash-separated and uppercase fields in setup.cfg. All packages with deprecated configurations are advised to move before 2026. (#4911)

v78.0.1

Misc

v78.0.0

Bugfixes

  • Reverted distutils changes that broke the monkey patching of command classes. (#4902)

Deprecations and Removals

  • Setuptools no longer accepts options containing uppercase or dash characters in setup.cfg. Please ensure to write the options in setup.cfg using the :wiki:lower_snake_case <Snake_case> convention (e.g. Name => name, install-requires => install_requires). This is a follow-up on deprecations introduced in v54.1.0 <https://setuptools.pypa.io/en/latest/history.html#v54-1-0>_ (see #1608) and v54.1.1 <https://setuptools.pypa.io/en/latest/history.html#v54-1-1>_ (see #2592).

    .. note:: This change does not affect configurations in pyproject.toml (which uses the :wiki:lower-kebab-case <Letter_case#Kebab_case> convention following the precedent set in :pep:517/:pep:518). (#4870)

Misc

v77.0.3

... (truncated)

Commits
  • 3c88de1 Bump version: 78.0.1 → 78.0.2
  • a219451 Revert removals introduced in v78.0.0 (#4911)
  • d4326dd Allow PyPy to fail on CI.
  • 92e22dd Manually remove file to try to stop flaky tests on PyPy
  • caa48ab Add news fragment
  • 4e9b8ca Revert removals introduced in v78.0.0
  • 5450f57 Bump version: 78.0.0 → 78.0.1
  • f3d0b10 Temporarily remove requests from integration tests (#4909)
  • 54b4c79 Add news fragment
  • e771c64 Temporarily remove 'requests' from integration tests
  • Additional commits viewable in compare view

Updates codespell from 2.4.0 to 2.4.1

Release notes

Sourced from codespell's releases.

v2.4.1

What's Changed

New Contributors

Full Changelog: codespell-project/codespell@v2.4.0...v2.4.1

Commits

Updates flake8 from 5.0.4 to 7.1.2

Commits
  • fffee8b Release 7.1.2
  • 19001f7 Merge pull request #1966 from PyCQA/limit-procs-to-file-count
  • f35737a avoid starting unnecessary processes when file count is limited
  • cf1542c Release 7.1.1
  • 939ea3d Merge pull request #1949 from stephenfin/issue-1948
  • bdcd5c2 Handle escaped braces in f-strings
  • 2a811cc Merge pull request #1946 from Viicos/patch-1
  • 10314ad Fix wording of plugins documentation
  • 65a38c4 Release 7.1.0
  • 34c97e0 Merge pull request #1939 from PyCQA/new-pycodestyle
  • Additional commits viewable in compare view

Updates mypy from 0.981 to 1.15.0

Changelog

Sourced from mypy's changelog.

Mypy Release Notes

Next Release

Different Property Getter and Setter Types

Mypy now supports using different types for property getter and setter.

class A:
    value: int
@property
def f(self) -&gt; int:
    return self.value
@f.setter
def f(self, x: str | int) -&gt; None:
    try:
        self.value = int(x)
    except ValueError:
        raise Exception(f&quot;'{x}' is not a valid value for 'f'&quot;)

Contributed by Ivan Levkivskyi (PR 18510)

Selectively Disable Deprecated Warnings

It's now possible to selectively disable warnings generated from warnings.deprecated using the --deprecated-calls-exclude option.

# mypy --enable-error-code deprecated
#      --deprecated-calls-exclude=foo.A
import foo
foo.A().func()  # OK, the deprecated warning is ignored
file foo.py
from typing_extensions import deprecated
class A:
@​deprecated("Use A.func2 instead")
def func(self): pass

Contributed by Marc Mueller (PR 18641)

Mypy 1.15

We’ve just uploaded mypy 1.15 to the Python Package Index (PyPI).

... (truncated)

Commits
  • 9397454 remove +dev from version ahead of final release
  • 686b591 remove "unreleased" from 1.15 changelog entry
  • cb4b243 Various small updates to 1.15 changelog (#18599)
  • 1a26502 Prepare changelog for 1.15 release (#18583)
  • d4515e4 Fix a few PR links in the changelog (#18586)
  • f83b643 Add object self-type to tuple test fixture (#18592)
  • ebc2cb8 Prevent crash on generic NamedTuple with unresolved typevar bound (#18585)
  • 63c251e empty commit to trigger wheel rebuild
  • c30573e Fix literal context for ternary expressions (for real) (#18545)
  • 23d862d Fix isinstance with explicit (non generic) type alias (#18512)
  • Additional commits viewable in compare view

Updates filelock from 3.17.0 to 3.18.0

Release notes

Sourced from filelock's releases.

3.18.0

What's Changed

New Contributors

Full Changelog: tox-dev/filelock@3.17.0...3.18.0

Commits

Updates pathos from 0.3.0 to 0.3.3

Release notes

Sourced from pathos's releases.

pathos-0.3.1

pathos 0.3.1 Release Notes

pathos provides a few basic tools to make parallel and distributed computing more accessable to the end user. The goal of pathos is to enable the user to extend their own code to parallel and distributed computing with minimal refactoring.

pathos installs with pip: $ pip install pathos

pathos requires: - python or pypy, >=3.7 - dill, >=0.3.7 - pox, >=0.3.3 - ppft, >=1.7.6.7 - multiprocess, >=0.70.15

pathos is licensed under 3-clause BSD:

>>> import pathos
>>> print (pathos.license())

To cite pathos:

>>> import pathos
>>> print (pathos.citation())

What's Changed

New Contributors

Full Changelog: uqfoundation/pathos@pathos-0.3.0...pathos-0.3.1

Commits

Updates mkdocs-material from 9.1.5 to 9.6.9

Release notes

Sourced from mkdocs-material's releases.

mkdocs-material-9.6.9

  • Updated Serbo-Croatian translations
  • Fixed #8086: Custom SVG icons containing hashes break rendering
  • Fixed #8067: Drawer has gap on right side in Firefox on some OSs

mkdocs-material-9.6.8

  • Added Welsh translations
  • Fixed #8076: Privacy plugin crashes if HTTP download fails

mkdocs-material-9.6.7

  • Fixed #8056: Error in backrefs implementation (9.6.6 regression)
  • Fixed #8054: Unescaped quotes in ARIA labels of table of contents

mkdocs-material-9.6.6

  • Fixed #8040: Privacy plugin not replacing exteral assets (9.6.5 regression)
  • Fixed #8031: Replace unmaintained regex package in search plugin

mkdocs-material-9.6.5

  • Fixed #8016: Tags listing not showing when when file name has spaces
  • Fixed #8012: Privacy plugin crashes if HTTP download fails

mkdocs-material-9.6.4

  • Fixed #7985: Blog content sometimes not stretching to full width
  • Fixed #7978: Navigation rendering bug in Safari 18.3

mkdocs-material-9.6.3

  • Fixed rendering of arrow heads in Mermaid.js class diagrams
  • Fixed #7960: Tags plugin crashes on numeric metadata titles

mkdocs-material-9.6.2

  • Fixed #7955: Excessively long words don't break on narrow screens
  • Fixed #7947: Scope setting interferes with outdated version banner

mkdocs-material-9.6.1

  • Fixed #7943: Tags plugin crashing due to merge error

mkdocs-material-9.6.0

  • Added meta plugin
  • Rewrite of the tags plugin
  • Added support for allow lists in tags plugin
  • Added support for and custom sorting in tags plugin
  • Added support for related links in blog plugin
  • Added support for custom index pages in blog plugin
  • Added support for navigation subtitles
  • Fixed #7924: Anchors might require two clicks when using instant navigation

mkdocs-material-9.5.50

  • Fixed #7913: Social plugin renders attribute lists in page title

mkdocs-material-9.5.49

... (truncated)

Changelog

Sourced from mkdocs-material's changelog.

mkdocs-material-9.6.9 (2025-03-17)

  • Updated Serbo-Croatian translations
  • Fixed #8086: Custom SVG icons containing hashes break rendering
  • Fixed #8067: Drawer has gap on right side in Firefox on some OSs

mkdocs-material-9.6.8+insiders-4.53.16 (2025-03-13)

  • Fixed #8019: Tooltips have precedence over instant previews

mkdocs-material-9.6.8 (2025-03-13)

  • Added Welsh translations
  • Fixed #8076: Privacy plugin crashes if HTTP download fails

mkdocs-material-9.6.7 (2025-03-03)

  • Fixed #8056: Error in backrefs implementation (9.6.6 regression)
  • Fixed #8054: Unescaped quotes in ARIA labels of table of contents

mkdocs-material-9.6.6 (2025-03-01)

  • Fixed #8040: Privacy plugin not replacing exteral assets (9.6.5 regression)
  • Fixed #8031: Replace unmaintained regex package in search plugin

mkdocs-material-9.6.5 (2025-02-20)

  • Fixed #8016: Tags listing not showing when when file name has spaces
  • Fixed #8012: Privacy plugin crashes if HTTP download fails

mkdocs-material-9.6.4 (2025-02-12)

  • Fixed #7985: Blog content sometimes not stretching to full width
  • Fixed #7978: Navigation rendering bug in Safari 18.3

mkdocs-material-9.6.3 (2025-02-07)

  • Fixed rendering of arrow heads in Mermaid.js class diagrams
  • Fixed #7960: Tags plugin crashes on numeric metadata titles

mkdocs-material-9.6.2 (2025-02-03)

  • Fixed #7955: Excessively long words don't break on narrow screens
  • Fixed #7947: Scope setting interferes with outdated version banner

mkdocs-material-9.6.1 (2025-01-31)

  • Fixed #7943: Tags plugin crashing due to merge error

mkdocs-material-9.6.0 (2025-01-31)

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the actions group with 11 updates:

| Package | From | To |
| --- | --- | --- |
| [lru-dict](https://github.com/amitdev/lru-dict) | `1.2.0` | `1.3.0` |
| [marko](https://github.com/frostming/marko) | `1.0.2` | `2.1.2` |
| [pycryptodome](https://github.com/Legrandin/pycryptodome) | `3.21.0` | `3.22.0` |
| ruamel-yaml | `0.17.21` | `0.18.10` |
| [setuptools](https://github.com/pypa/setuptools) | `75.8.0` | `78.0.2` |
| [codespell](https://github.com/codespell-project/codespell) | `2.4.0` | `2.4.1` |
| [flake8](https://github.com/pycqa/flake8) | `5.0.4` | `7.1.2` |
| [mypy](https://github.com/python/mypy) | `0.981` | `1.15.0` |
| [filelock](https://github.com/tox-dev/py-filelock) | `3.17.0` | `3.18.0` |
| [pathos](https://github.com/uqfoundation/pathos) | `0.3.0` | `0.3.3` |
| [mkdocs-material](https://github.com/squidfunk/mkdocs-material) | `9.1.5` | `9.6.9` |


Updates `lru-dict` from 1.2.0 to 1.3.0
- [Release notes](https://github.com/amitdev/lru-dict/releases)
- [Commits](amitdev/lru-dict@v1.2.0...v1.3.0)

Updates `marko` from 1.0.2 to 2.1.2
- [Release notes](https://github.com/frostming/marko/releases)
- [Changelog](https://github.com/frostming/marko/blob/master/CHANGELOG.md)
- [Commits](frostming/marko@v1.0.2...v2.1.2)

Updates `pycryptodome` from 3.21.0 to 3.22.0
- [Release notes](https://github.com/Legrandin/pycryptodome/releases)
- [Changelog](https://github.com/Legrandin/pycryptodome/blob/master/Changelog.rst)
- [Commits](Legrandin/pycryptodome@v3.21.0...v3.22.0)

Updates `ruamel-yaml` from 0.17.21 to 0.18.10

Updates `setuptools` from 75.8.0 to 78.0.2
- [Release notes](https://github.com/pypa/setuptools/releases)
- [Changelog](https://github.com/pypa/setuptools/blob/main/NEWS.rst)
- [Commits](pypa/setuptools@v75.8.0...v78.0.2)

Updates `codespell` from 2.4.0 to 2.4.1
- [Release notes](https://github.com/codespell-project/codespell/releases)
- [Commits](codespell-project/codespell@v2.4.0...v2.4.1)

Updates `flake8` from 5.0.4 to 7.1.2
- [Commits](PyCQA/flake8@5.0.4...7.1.2)

Updates `mypy` from 0.981 to 1.15.0
- [Changelog](https://github.com/python/mypy/blob/master/CHANGELOG.md)
- [Commits](python/mypy@v0.981...v1.15.0)

Updates `filelock` from 3.17.0 to 3.18.0
- [Release notes](https://github.com/tox-dev/py-filelock/releases)
- [Changelog](https://github.com/tox-dev/filelock/blob/main/docs/changelog.rst)
- [Commits](tox-dev/filelock@3.17.0...3.18.0)

Updates `pathos` from 0.3.0 to 0.3.3
- [Release notes](https://github.com/uqfoundation/pathos/releases)
- [Commits](uqfoundation/pathos@pathos-0.3.0...0.3.3)

Updates `mkdocs-material` from 9.1.5 to 9.6.9
- [Release notes](https://github.com/squidfunk/mkdocs-material/releases)
- [Changelog](https://github.com/squidfunk/mkdocs-material/blob/master/CHANGELOG)
- [Commits](squidfunk/mkdocs-material@9.1.5...9.6.9)

---
updated-dependencies:
- dependency-name: lru-dict
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
- dependency-name: marko
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
- dependency-name: pycryptodome
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
- dependency-name: ruamel-yaml
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
- dependency-name: setuptools
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
- dependency-name: codespell
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions
- dependency-name: flake8
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
- dependency-name: mypy
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
- dependency-name: filelock
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
- dependency-name: pathos
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions
- dependency-name: mkdocs-material
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Mar 25, 2025
@GabrielAstieres
Copy link
Contributor

@jtraglia I'm in a favor of closing this PR, let's have this run once the update we are building on the makefile and linting is merged to avoid unnecessary conflicts. Does that sound ok?

@jtraglia jtraglia merged commit 9d2d02a into dev Mar 26, 2025
13 checks passed
@dependabot dependabot bot deleted the dependabot/pip/actions-802de1d562 branch March 26, 2025 17:58
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file python Pull requests that update python code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants