Skip to content

Bump the python-root group across 1 directory with 8 updates #1217

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Closed
dependabot wants to merge 1 commit into from
Closed

Bump the python-root group across 1 directory with 8 updates #1217

dependabot wants to merge 1 commit into from

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jan 6, 2025 •
edited
Loading

Bumps the python-root group with 8 updates in the / directory:

Package From To
flake8 3.8.4 7.1.1
isort 5.7.0 5.13.2
build 0.3.0 1.2.2.post1
twine 3.3.0 6.0.1
wheel 0.38.1 0.45.1
setuptools 70.0.0 75.7.0
protobuf 5.27.0 5.29.2
jinja2 3.1.4 3.1.5

Updates flake8 from 3.8.4 to 7.1.1

Commits

Updates isort from 5.7.0 to 5.13.2

Release notes

Sourced from isort's releases.

5.13.2

Changes

🪲 Fixes

5.13.1

Changes

  • Fix integration tests (#2208) @​bp72
  • Added a fix for normalizing imports from more than one level of parent modules (issue/2152) (#2191) @​bp72

🪲 Fixes

5.13.0

Changes

🔥 Removals and Deprecations

📦 Dependencies

... (truncated)

Changelog

Sourced from isort's changelog.

5.13.2 December 13 2023

5.13.1 December 11 2023

5.13.0 December 9 2023

5.12.0 January 28 2023

  • Removed support for Python 3.7
  • Fixed incompatiblity with latest poetry version
  • Added support for directory limitations within built in git hook

5.11.5 January 30 2023 [hotfix]

  • Fixed incompatiblity with latest poetry version

5.11.4 December 21 2022

  • Fixed #2038 (again): stop installing documentation files to top-level site-packages (#2057) @​mgorny

... (truncated)

Commits
  • c655831 Merge pull request #2214 from PyCQA/version/5.13.2
  • b4335b4 Prepare version 5.13.2
  • c36e43c Merge pull request #2184 from bp72/issue/2154
  • e38702f Merge pull request #2213 from davidculley/confine-precommit-to-stages
  • ee8d87f Add fix for the error found by hypothesis
  • 5849ec2 Apply the bracket fix from issue 471 only for use_parentheses=True
  • df0e119 confine pre-commit to stages
  • 9255bca Merge pull request #2212 from PyCQA/bugfix/#2211-colors-extra
  • 5336d7d Fix colors extras
  • 643d9c4 Merge pull request #2210 from PyCQA/version/5.13.1
  • Additional commits viewable in compare view

Updates build from 0.3.0 to 1.2.2.post1

Release notes

Sourced from build's releases.

1.2.2.post1

This release only makes metadata (Python 3.13 classifier), docs, and test suite changes.

What's Changed

New Contributors

Full Changelog: pypa/build@1.2.2...1.2.2.post1

Version 1.2.2

What's Changed

  • Add editable to builder.get_requries_for_build's static types (PR #764, fixes issue #763)
  • Include artifact attestations in our release (PR #782)
  • Fix typing compatibility with typed pyproject-hooks (PR #788)
  • Mark more tests with network (PR #808)
  • Add more intersphinx links to docs (PR #804)
  • Make uv optional for tests (PR #807 and #813)

New Contributors

Full Changelog: pypa/build@1.2.1...1.2.2

Version 1.2.1

What's Changed

  • Avoid error when terminal width is undetectable on Python < 3.11 (PR #761)

... (truncated)

Changelog

Sourced from build's changelog.

+++++++++ Changelog +++++++++

1.2.2 (2024-09-06)

  • Add editable to builder.get_requries_for_build's static types (PR :pr:764, fixes issue :issue:763)
  • Include artifact attestations in our release (PR :pr:782)
  • Fix typing compatibility with typed pyproject-hooks (PR :pr:788)
  • Mark more tests with network (PR :pr:808)
  • Add more intersphinx links to docs (PR :pr:804)
  • Make uv optional for tests (PR :pr:807 and :pr:813)

1.2.1 (2024-03-28)

  • Avoid error when terminal width is undetectable on Python < 3.11 (PR :pr:761)

1.2.0 (2024-03-27)

  • Add --installer option, supporting pip and uv. Added uv extra. (PR :pr:751)
  • Improve console output and provide -v for dependency installation (PR :pr:749)
  • Avoid compiling unused bytecode when using pip (PR :pr:752)
  • Dropped support for Python 3.7 (PR :pr:743)

1.1.1 (2024-02-29)

  • Fixed invoking outer pip from user site packages (PR :pr:746, fixes issue :issue:745)
  • Corrected the minimum pip version required to use an outer pip (PR :pr:746, fixes issue :issue:745)

1.1.0 (2024-02-29)

... (truncated)

Commits

Updates twine from 3.3.0 to 6.0.1

Release notes

Sourced from twine's releases.

6.0.1

No release notes provided.

6.0.0

No release notes provided.

Release v5.1.1

No release notes provided.

5.1.0

No release notes provided.

5.0.0

No release notes provided.

4.0.2

https://pypi.org/project/twine/4.0.2/

Changelog

4.0.1

https://pypi.org/project/twine/4.0.1/

Changelog

4.0.0

https://pypi.org/project/twine/4.0.0/

Changelog

3.8.0

https://pypi.org/project/twine/3.8.0/

Changelog

3.7.1

https://pypi.org/project/twine/3.7.1/

Changelog

3.7.0

https://pypi.org/project/twine/3.7.0/

Changelog

3.6.0

https://pypi.org/project/twine/3.6.0/

Changelog

... (truncated)

Changelog

Sourced from twine's changelog.

Twine 6.0.1 (2024-11-30)

Bugfixes ^^^^^^^^

  • Fixed a regression where twine check would fail to expand wildcards, e.g. twine check 'dist/*'. ([#1188](https://github.com/pypa/twine/issues/1188) <https://github.com/pypa/twine/issues/1188>_)

Misc ^^^^

  • [#1184](https://github.com/pypa/twine/issues/1184) <https://github.com/pypa/twine/issues/1184>_

Twine 6.0.0 (2024-11-29)

Bugfixes ^^^^^^^^

  • Restore support for pkginfo 1.11 ([#1116](https://github.com/pypa/twine/issues/1116) <https://github.com/pypa/twine/issues/1116>_)

Deprecations and Removals ^^^^^^^^^^^^^^^^^^^^^^^^^

  • Username for PyPI and Test PyPI now defaults to token but no longer overrides a username configured in the environment or supplied on the command line. Workflows still supplying anything other than token for the username when uploading to PyPI or Test PyPI will now fail. Either supply token or do not supply a username at all. ([#1121](https://github.com/pypa/twine/issues/1121) <https://github.com/pypa/twine/issues/1121>_)

Misc ^^^^

  • [#1024](https://github.com/pypa/twine/issues/1024) <https://github.com/pypa/twine/issues/1024>_

Twine 5.1.1 (2024-06-26)

Bugfixes ^^^^^^^^

  • Resolve DeprecationWarnings when extracting twine metadata. ([#1115](https://github.com/pypa/twine/issues/1115) <https://github.com/pypa/twine/issues/1115>_)

  • Fix bug for Repository URLs with auth where the port was lost. When attempting to prevent printing authentication credentials in URLs provided with username and password, we did not properly handle the case where the URL also contains a port (when reconstructing the URL). This is now handled and tested to ensure no regressions. (#fix-repo-urls-with-auth-and-port <https://github.com/pypa/twine/issues/fix-repo-urls-with-auth-and-port>_)

... (truncated)

Commits
  • a723876 Merge pull request #1189 from pypa/release-6.0.1
  • 9a24828 Update changelog for 6.0.1
  • a017005 Merge pull request #1188 from pypa/ww/fix-twine-check-glob
  • e98f03b check: fix handling of non-shell-expanded globs
  • 873f33e build(deps): bump pypa/gh-action-pypi-publish from 1.11.0 to 1.12.2 (#1175)
  • 067412e Use brackets for the default value of option arguments (#1149)
  • f32dc35 Apply ruff/Perflint rule (#1136)
  • aa58273 Don't require importlib_metadata on Python 3.10+
  • 675565f changelog: record #1184
  • 80cc58c chore: mark 3.13 as explicitly supported
  • Additional commits viewable in compare view

Updates wheel from 0.38.1 to 0.45.1

Release notes

Sourced from wheel's releases.

0.45.1

  • Fixed pure Python wheels converted from eggs and wininst files having the ABI tag in the file name

0.45.0

  • Refactored the convert command to not need setuptools to be installed

  • Don't configure setuptools logging unless running bdist_wheel

  • Added a redirection from wheel.bdist_wheel.bdist_wheel to setuptools.command.bdist_wheel.bdist_wheel to improve compatibility with setuptools' latest fixes.

    Projects are still advised to migrate away from the deprecated module and import the setuptools' implementation explicitly. (PR by @​abravalheri)

0.44.0

  • Canonicalized requirements in METADATA file (PR by Wim Jeantine-Glenn)
  • Deprecated the bdist_wheel module, as the code was migrated to setuptools itself

0.43.0

  • Dropped support for Python 3.7
  • Updated vendored packaging to 24.0

0.42.0

  • Allowed removing build tag with wheel tags --build ""
  • Fixed wheel pack and wheel tags writing updated WHEEL fields after a blank line, causing other tools to ignore them
  • Fixed wheel pack and wheel tags writing WHEEL with CRLF line endings or a mix of CRLF and LF
  • Fixed wheel pack --build-number "" not removing build tag from WHEEL (above changes by Benjamin Gilbert)

0.41.3

  • Updated vendored packaging to 23.2
  • Fixed ABI tag generation for CPython 3.13a1 on Windows (PR by Sam Gross)
Changelog

Sourced from wheel's changelog.

Release Notes

UNRELEASED

  • Fixed an exception when calling the convert command with an empty description field

0.45.1 (2024-11-23)

  • Fixed pure Python wheels converted from eggs and wininst files having the ABI tag in the file name

0.45.0 (2024-11-08)

  • Refactored the convert command to not need setuptools to be installed

  • Don't configure setuptools logging unless running bdist_wheel

  • Added a redirection from wheel.bdist_wheel.bdist_wheel to setuptools.command.bdist_wheel.bdist_wheel to improve compatibility with setuptools' latest fixes.

    Projects are still advised to migrate away from the deprecated module and import the setuptools' implementation explicitly. (PR by @​abravalheri)

0.44.0 (2024-08-04)

  • Canonicalized requirements in METADATA file (PR by Wim Jeantine-Glenn)
  • Deprecated the bdist_wheel module, as the code was migrated to setuptools itself

0.43.0 (2024-03-11)

  • Dropped support for Python 3.7
  • Updated vendored packaging to 24.0

0.42.0 (2023-11-26)

  • Allowed removing build tag with wheel tags --build ""
  • Fixed wheel pack and wheel tags writing updated WHEEL fields after a blank line, causing other tools to ignore them
  • Fixed wheel pack and wheel tags writing WHEEL with CRLF line endings or a mix of CRLF and LF
  • Fixed wheel pack --build-number "" not removing build tag from WHEEL (above changes by Benjamin Gilbert)

0.41.3 (2023-10-30)

  • Updated vendored packaging to 23.2
  • Fixed ABI tag generation for CPython 3.13a1 on Windows (PR by Sam Gross)

... (truncated)

Commits
  • 7855525 Created a new release
  • d343391 Fixed wrong wheel file names in converted pure-Python eggs/wininsts
  • d78f0e3 Created a new release
  • f064c69 Added license files for vendored packaging
  • 68387af Only configure setuptools logging if bdist_wheel is imported (#641)
  • c81f5c9 Refactored the wheel convert command to not require setuptools (#640)
  • e43464d Adjusted target Python versions in GitHub CI
  • e9894e7 Tweaked pytest settings to make the tracebacks easier to read
  • baf6bf8 Removed Cirrus CI configuration
  • 28c1ba1 Improved compatibility with future versions of setuptools (#638)
  • Additional commits viewable in compare view

Updates setuptools from 70.0.0 to 75.7.0

Changelog

Sourced from setuptools's changelog.

v75.7.0

Features

v75.6.0

Features

  • Preserve original PKG-INFO into METADATA when creating wheel (instead of calling wheel.metadata.pkginfo_to_metadata). This helps to be more compliant with the flow specified in PEP 517. (#4701)
  • Changed the WindowsSdkVersion, FrameworkVersion32 and FrameworkVersion64 properties of setuptools.msvc.PlatformInfo to return an empty tuple instead of None as a fallthrough case -- by :user:Avasam (#4754)

v75.5.0

Features

  • Removed support for SETUPTOOLS_DANGEROUSLY_SKIP_PYPROJECT_VALIDATION, as it is deemed prone to errors. (#4746)

v75.4.0

Features

  • Added support for the environment variable SETUPTOOLS_DANGEROUSLY_SKIP_PYPROJECT_VALIDATION=true, allowing users to bypass the validation of pyproject.toml. This option should be used only as a last resort when resolving dependency issues, as it may lead to improper functioning. Users who enable this setting are responsible for ensuring that pyproject.toml complies with setuptools requirements. (#4611)

    .. attention:: This environment variable was removed in a later version of setuptools.

  • Require Python 3.9 or later. (#4718)

... (truncated)

Commits

Updates protobuf from 5.27.0 to 5.29.2

Commits
  • 2330983 Updating version.json and repo version numbers to: 29.2
  • 1772657 Automated rollback of commit 23aada230b2478c7a07fe7612489eb8e79b9c379. (#19692)
  • 8b9d76c Export environment variables so bazelisk picks them up (#19690)
  • a1c9b6a Pin staleness check to Bazel 7 (#19689)
  • 3649f87 Remove unused / invalid C++ lazy repeated field code from OSS. (#19682)
  • 3a7bb4a Remove CMake downgrade workaround from Windows CI tests (#19630)
  • d7d3da6 Merge pull request #19506 from protocolbuffers/29.x-202412032207
  • a3e9db8 Updating version.json and repo version numbers to: 29.2-dev
  • 796e49f Updating version.json and repo version numbers to: 29.1
  • ba6da44 Rename maven to protobuf_maven in MODULE.bazel (#18641) (#19477)
  • Additional commits viewable in compare view

Updates jinja2 from 3.1.4 to 3.1.5

Release notes

Sourced from jinja2's releases.

3.1.5

This is the Jinja 3.1.5 security fix release, which fixes security issues and bugs but does not otherwise change behavior and should not result in breaking changes compared to the latest feature release.

PyPI: https://pypi.org/project/Jinja2/3.1.5/ Changes: https://jinja.palletsprojects.com/changes/#version-3-1-5 Milestone: https://github.com/pallets/jinja/milestone/16?closed=1

  • The sandboxed environment handles indirect calls to str.format, such as by passing a stored reference to a filter that calls its argument. GHSA-q2x7-8rv6-6q7h
  • Escape template name before formatting it into error messages, to avoid issues with names that contain f-string syntax. #1792, GHSA-gmj6-6f8f-6699
  • Sandbox does not allow clear and pop on known mutable sequence types. #2032
  • Calling sync render for an async template uses asyncio.run. #1952
  • Avoid unclosed auto_aiter warnings. #1960
  • Return an aclose-able AsyncGenerator from Template.generate_async. #1960
  • Avoid leaving root_render_func() unclosed in Template.generate_async. #1960
  • Avoid leaving async generators unclosed in blocks, includes and extends. #1960
  • The runtime uses the correct concat function for the current environment when calling block references. #1701
  • Make |unique async-aware, allowing it to be used after another async-aware filter. #1781
  • |int filter handles OverflowError from scientific notation. #1921
  • Make compiling deterministic for tuple unpacking in a {% set ... %} call. #2021
  • Fix dunder protocol (copy/pickle/etc) interaction with Undefined objects. #2025
  • Fix copy/pickle support for the internal missing object. #2027
  • Environment.overlay(enable_async) is applied correctly. #2061
  • The error message from FileSystemLoader includes the paths that were searched. #1661
  • PackageLoader shows a clearer error message when the package does not contain the templates directory. #1705
  • Improve annotations for methods returning copies. #1880
  • urlize does not add mailto: to values like @a@b. #1870
  • Tests decorated with @pass_context can be used with the |select filter. #1624
  • Using set for multiple assignment (a, b = 1, 2) does not fail when the target is a namespace attribute. #1413
  • Using set in all branches of {% if %}{% elif %}{% else %} blocks does not cause the variable to be considered initially undefined. #1253
Changelog

Sourced from jinja2's changelog.

Version 3.1.5

Released 2024-12-21

  • The sandboxed environment handles indirect calls to str.format, such as by passing a stored reference to a filter that calls its argument. :ghsa:q2x7-8rv6-6q7h
  • Escape template name before formatting it into error messages, to avoid issues with names that contain f-string syntax. :issue:1792, :ghsa:gmj6-6f8f-6699
  • Sandbox does not allow clear and pop on known mutable sequence types. :issue:2032
  • Calling sync render for an async template uses asyncio.run. :pr:1952
  • Avoid unclosed auto_aiter warnings. :pr:1960
  • Return an aclose-able AsyncGenerator from Template.generate_async. :pr:1960
  • Avoid leaving root_render_func() unclosed in Template.generate_async. :pr:1960
  • Avoid leaving async generators unclosed in blocks, includes and extends. :pr:1960
  • The runtime uses the correct concat function for the current environment when calling block references. :issue:1701
  • Make |unique async-aware, allowing it to be used after another async-aware filter. :issue:1781
  • |int filter handles OverflowError from scientific notation. :issue:1921
  • Make compiling deterministic for tuple unpacking in a {% set ... %} call. :issue:2021
  • Fix dunder protocol (copy/pickle/etc) interaction with Undefined objects. :issue:2025
  • Fix copy/pickle support for the internal missing object. :issue:2027
  • Environment.overlay(enable_async) is applied correctly. :pr:2061
  • The error message from FileSystemLoader includes the paths that were searched. :issue:1661
  • PackageLoader shows a clearer error message when the package does not contain the templates directory. :issue:1705
  • Improve annotations for methods returning copies. :pr:1880
  • urlize does not add mailto: to values like @a@b. :pr:1870
  • Tests decorated with @pass_context`` can be used with the ``|select`` filter. :issue:1624`
  • Using set for multiple assignment (a, b = 1, 2) does not fail when the target is a namespace attribute. :issue:1413
  • Using set in all branches of {% if %}{% elif %}{% else %} blocks does not cause the variable to be considered initially undefined. :issue:1253
Commits
  • 877f6e5 release version 3.1.5
  • 8d58859 remove test pypi
  • eda8fe8 update dev dependencies
  • c8fdce1 Fix bug involving calling set on a template parameter within all branches of ...
  • 66587ce Fix bug where set would sometimes fail within if
  • fbc3a69 Add support for namespaces in tuple parsing (#1664)
  • b8f4831 more comments about nsref assignment
  • ee83219 Add support for namespaces in tuple assignment
  • 1d55cdd Triple quotes in docs (#2064)
  • 8a8eafc edit block assignment section
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the python-root group across 1 directory with 8 updates
124ec02 
Bumps the python-root group with 8 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [flake8](https://github.com/pycqa/flake8) | `3.8.4` | `7.1.1` |
| [isort](https://github.com/pycqa/isort) | `5.7.0` | `5.13.2` |
| [build](https://github.com/pypa/build) | `0.3.0` | `1.2.2.post1` |
| [twine](https://github.com/pypa/twine) | `3.3.0` | `6.0.1` |
| [wheel](https://github.com/pypa/wheel) | `0.38.1` | `0.45.1` |
| [setuptools](https://github.com/pypa/setuptools) | `70.0.0` | `75.7.0` |
| [protobuf](https://github.com/protocolbuffers/protobuf) | `5.27.0` | `5.29.2` |
| [jinja2](https://github.com/pallets/jinja) | `3.1.4` | `3.1.5` |



Updates `flake8` from 3.8.4 to 7.1.1
- [Commits](PyCQA/flake8@3.8.4...7.1.1)

Updates `isort` from 5.7.0 to 5.13.2
- [Release notes](https://github.com/pycqa/isort/releases)
- [Changelog](https://github.com/PyCQA/isort/blob/main/CHANGELOG.md)
- [Commits](PyCQA/isort@5.7.0...5.13.2)

Updates `build` from 0.3.0 to 1.2.2.post1
- [Release notes](https://github.com/pypa/build/releases)
- [Changelog](https://github.com/pypa/build/blob/main/CHANGELOG.rst)
- [Commits](pypa/build@0.3.0...1.2.2.post1)

Updates `twine` from 3.3.0 to 6.0.1
- [Release notes](https://github.com/pypa/twine/releases)
- [Changelog](https://github.com/pypa/twine/blob/main/docs/changelog.rst)
- [Commits](pypa/twine@3.3.0...6.0.1)

Updates `wheel` from 0.38.1 to 0.45.1
- [Release notes](https://github.com/pypa/wheel/releases)
- [Changelog](https://github.com/pypa/wheel/blob/main/docs/news.rst)
- [Commits](pypa/wheel@0.38.1...0.45.1)

Updates `setuptools` from 70.0.0 to 75.7.0
- [Release notes](https://github.com/pypa/setuptools/releases)
- [Changelog](https://github.com/pypa/setuptools/blob/main/NEWS.rst)
- [Commits](pypa/setuptools@v70.0.0...v75.7.0)

Updates `protobuf` from 5.27.0 to 5.29.2
- [Release notes](https://github.com/protocolbuffers/protobuf/releases)
- [Changelog](https://github.com/protocolbuffers/protobuf/blob/main/protobuf_release.bzl)
- [Commits](protocolbuffers/protobuf@v5.27.0...v5.29.2)

Updates `jinja2` from 3.1.4 to 3.1.5
- [Release notes](https://github.com/pallets/jinja/releases)
- [Changelog](https://github.com/pallets/jinja/blob/main/CHANGES.rst)
- [Commits](pallets/jinja@3.1.4...3.1.5)

---
updated-dependencies:
- dependency-name: flake8
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: python-root
- dependency-name: isort
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-root
- dependency-name: build
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: python-root
- dependency-name: twine
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: python-root
- dependency-name: wheel
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-root
- dependency-name: setuptools
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: python-root
- dependency-name: protobuf
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-root
- dependency-name: jinja2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-root
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added Dependencies Updates a dependency Python Python language support labels Jan 6, 2025
@dependabot dependabot bot mentioned this pull request Jan 6, 2025
Closed
@stefanvanburen
Copy link
Member

stefanvanburen commented Jan 6, 2025

Looks like this is failing because the newer versions of setuptools have dropped support for Python 3.8 (starting in v75.4.0, 3.9 is required). We ought to decide if we want to continue supporting 3.8 (which is EOL) and pin to v75.3.0 or earlier, or drop support for 3.8.

@rodaine
Copy link
Member

rodaine commented Jan 6, 2025

Since 3.8 is EOL, I think it's acceptable for us to drop support. We'll likely want to cut a release to provide a bifurcation point for users.

@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Jan 13, 2025

Superseded by #1221.

@dependabot dependabot bot closed this Jan 13, 2025
@dependabot dependabot bot deleted the dependabot/pip/python-root-9c71e71a33 branch January 13, 2025 11:32
@stefanvanburen
Copy link
Member

stefanvanburen commented Jan 13, 2025

Since 3.8 is EOL, I think it's acceptable for us to drop support.

I had started taking a look at doing this; I think the "biggest" thing is figuring out how to update the Dockerfile for 3.9. Maybe someone more familiar with the Dockerfile could do the updates; happy to review.

@stefanvanburen
Copy link
Member

stefanvanburen commented Jan 14, 2025

Related PR: #1225.

rodaine pushed a commit that referenced this pull request Sep 8, 2025
@dependabot
Bump twine from 6.1.0 to 6.2.0 in the python-root group (#1305)
660ec2d 
Bumps the python-root group with 1 update:
[twine](https://github.com/pypa/twine).

Updates `twine` from 6.1.0 to 6.2.0
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/pypa/twine/blob/main/docs/changelog.rst">twine's
changelog</a>.</em></p>
<blockquote>
<h2>twine 6.2.0 (2025-09-04)</h2>
<p>Features
^^^^^^^^</p>
<ul>
<li>
<p>Automatically refresh short-lived PyPI token in long running Trusted
Publishing uploads.</p>
<p>In the event that a trusted publishing upload job is taking longer
than the
validity period of a trusted publishing token (15 minutes at the time of
this
writing), <em>and</em> we are already 10 minutes into that validity
period, we will
begin to attempt to replace the token on each subsequent request.
(<code>[#1246](pypa/twine#1246)
&lt;https://github.com/pypa/twine/issues/1246&gt;</code>_)</p>
</li>
</ul>
<p>Bugfixes
^^^^^^^^</p>
<ul>
<li>Fix compatibility kludge for invalid License-File metadata entries
emitted by
build backends to work also with <code>packaging</code> version 24.0.
(<code>[#1217](pypa/twine#1217)
&lt;https://github.com/pypa/twine/issues/1217&gt;</code>_)</li>
<li>Fix a couple of incorrectly rendered error messages.
(<code>[#1224](pypa/twine#1224)
&lt;https://github.com/pypa/twine/issues/1224&gt;</code>_)</li>
<li><code>twine</code> now enforces <code>keyring &gt;= 21.2.0</code>,
which was previously
implicitly required by API usage.
(<code>[#1229](pypa/twine#1229)
&lt;https://github.com/pypa/twine/issues/1229&gt;</code>_)</li>
<li><code>twine</code> now catches <code>configparser.Error</code> to
prevent accidental
leaks of secret tokens or passwords to the user's console.
(<code>[#1240](pypa/twine#1240)
&lt;https://github.com/pypa/twine/issues/1240&gt;</code>_)</li>
</ul>
<p>Deprecations and Removals
^^^^^^^^^^^^^^^^^^^^^^^^^</p>
<ul>
<li>
<p>Remove hacks that support <code>--skip-existing</code> for indexes
other than PyPI and
TestPyPI.</p>
<p>To date, these hacks continue to accrue and there have been numerous
issues
with them, not the least of which being that every time we update them,
the
paid index providers change things to break the compatibility we
implement
for them. Beyond that, these hacks do not work when text is
internationalized
in the response from the index provider.</p>
<p>For a sample of past issues, see:</p>
<ul>
<li>
<p><a
href="https://redirect.github.com/pypa/twine/issues/1251">pypa/twine#1251</a></p>
</li>
<li>
<p><a
href="https://redirect.github.com/pypa/twine/issues/918">pypa/twine#918</a></p>
</li>
<li>
<p><a
href="https://redirect.github.com/pypa/twine/issues/856">pypa/twine#856</a></p>
</li>
<li>
<p><a
href="https://redirect.github.com/pypa/twine/issues/693">pypa/twine#693</a></p>
</li>
<li>
<p><a
href="https://redirect.github.com/pypa/twine/issues/332">pypa/twine#332</a>
(<code>[#1251](pypa/twine#1251)
&lt;https://github.com/pypa/twine/issues/1251&gt;</code>_)</p>
</li>
</ul>
</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/pypa/twine/commit/14ceb29585a54f679e415b351aece2acc19aa4b2"><code>14ceb29</code></a>
Update changelog for 6.2.0 (<a
href="https://redirect.github.com/pypa/twine/issues/1264">#1264</a>)</li>
<li><a
href="https://github.com/pypa/twine/commit/60e377bd5b340b90504c9e4e976eae926d9c9ddc"><code>60e377b</code></a>
build(deps): bump actions/checkout from 4.2.2 to 5.0.0 (<a
href="https://redirect.github.com/pypa/twine/issues/1263">#1263</a>)</li>
<li><a
href="https://github.com/pypa/twine/commit/88821f278022011496c0ccb0d8ae40ab9d6c5c3d"><code>88821f2</code></a>
feat(package): remove MD5 hashing entirely (<a
href="https://redirect.github.com/pypa/twine/issues/1262">#1262</a>)</li>
<li><a
href="https://github.com/pypa/twine/commit/ce5fe530511c13816e51dbbd13892f10274a87b1"><code>ce5fe53</code></a>
build(deps): bump actions/download-artifact from 4.3.0 to 5.0.0</li>
<li><a
href="https://github.com/pypa/twine/commit/6a696edefec47e842d11de468caf6c7e69694976"><code>6a696ed</code></a>
PEP 639 compliance</li>
<li><a
href="https://github.com/pypa/twine/commit/91753343daa1366711a441b4a13bd1b31146909b"><code>9175334</code></a>
rename 1247.misc.rst to changelog/1247.misc.rst</li>
<li><a
href="https://github.com/pypa/twine/commit/d94a4750883dc7cc92b2cbbb3970895303af216d"><code>d94a475</code></a>
fix(tests): update expected error message</li>
<li><a
href="https://github.com/pypa/twine/commit/c1c02d13d00f496339a86cd4f40d9f7e6926c0e4"><code>c1c02d1</code></a>
Remove --skip-existing support for non-PyPI indices</li>
<li><a
href="https://github.com/pypa/twine/commit/a24d308bb7fa5304ede3414747a939c7929d4c76"><code>a24d308</code></a>
Set trusted publishing logging to INFO/WARN (<a
href="https://redirect.github.com/pypa/twine/issues/1247">#1247</a>)</li>
<li><a
href="https://github.com/pypa/twine/commit/becf1a8ffe6ebd404aea9d7aeae1f756aeba57ba"><code>becf1a8</code></a>
Fix py3.9 mypy error in <code>__init__</code> around
<code>PackageMetadata</code></li>
<li>Additional commits viewable in <a
href="https://github.com/pypa/twine/compare/6.1.0...6.2.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=twine&package-manager=pip&previous-version=6.1.0&new-version=6.2.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

Dependencies Updates a dependency Python Python language support

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

3 participants

@stefanvanburen @rodaine