chore(deps): update minor updates (stable/v0.8)

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
fastapi	0.110.2 -> 0.111.0
pymongo	4.7.0 -> 4.7.2
pytest-asyncio (changelog)	0.21.1 -> 0.21.2
requests (source, changelog)	2.31.0 -> 2.32.2
slack-sdk	3.27.1 -> 3.27.2

---

Release Notes

tiangolo/fastapi (fastapi)

v0.111.0

Compare Source

Features

• ✨ Add FastAPI CLI, the new fastapi command. PR #​11522 by @​tiangolo.
  • New docs: FastAPI CLI.

Try it out with:

$ pip install --upgrade fastapi

$ fastapi dev main.py

 ╭────────── FastAPI CLI - Development mode ───────────╮
 │                                                     │
 │  Serving at: http://127.0.0.1:8000                  │
 │                                                     │
 │  API docs: http://127.0.0.1:8000/docs               │
 │                                                     │
 │  Running in development mode, for production use:   │
 │                                                     │
 │  fastapi run                                        │
 │                                                     │
 ╰─────────────────────────────────────────────────────╯

INFO:     Will watch for changes in these directories: ['/home/user/code/awesomeapp']
INFO:     Uvicorn running on http://127.0.0.1:8000 (Press CTRL+C to quit)
INFO:     Started reloader process [2248755] using WatchFiles
INFO:     Started server process [2248757]
INFO:     Waiting for application startup.
INFO:     Application startup complete.

Refactors

• 🔧 Add configs and setup for fastapi-slim including optional extras fastapi-slim[standard], and fastapi including by default the same standard extras. PR #​11503 by @​tiangolo.

v0.110.3

Compare Source

Latest Changes

Docs

• 📝 Update references to Python version, FastAPI supports all the current versions, no need to make the version explicit. PR #​11496 by @​tiangolo.
• ✏️ Fix typo in fastapi/security/api_key.py. PR #​11481 by @​ch33zer.
• ✏️ Fix typo in security/http.py. PR #​11455 by @​omarmoo5.

Translations

• 🌐 Add Traditional Chinese translation for docs/zh-hant/benchmarks.md. PR #​11484 by @​KNChiu.
• 🌐 Update Chinese translation for docs/zh/docs/fastapi-people.md. PR #​11476 by @​billzhong.
• 🌐 Add Chinese translation for docs/zh/docs/how-to/index.md and docs/zh/docs/how-to/general.md. PR #​11443 by @​billzhong.
• 🌐 Add Spanish translation for cookie-params docs/es/docs/tutorial/cookie-params.md. PR #​11410 by @​fabianfalon.

Internal

• ⬆ Bump mkdocstrings[python] from 0.23.0 to 0.24.3. PR #​11469 by @​dependabot[bot].
• 🔨 Update internal scripts and remove unused ones. PR #​11499 by @​tiangolo.
• 🔧 Migrate from Hatch to PDM for the internal build. PR #​11498 by @​tiangolo.
• ⬆️ Upgrade MkDocs Material and re-enable cards. PR #​11466 by @​tiangolo.
• ⬆ Bump pillow from 10.2.0 to 10.3.0. PR #​11403 by @​dependabot[bot].
• 🔧 Ungroup dependabot updates. PR #​11465 by @​tiangolo.

mongodb/mongo-python-driver (pymongo)

v4.7.2: PyMongo 4.7.2

Compare Source

Community Notes: https://www.mongodb.com/community/forums/t/pymongo-4-7-2-released/279584

v4.7.1: PyMongo 4.7.1

Compare Source

Community release note: https://www.mongodb.com/community/forums/t/pymongo-4-7-1-released/278459

pytest-dev/pytest-asyncio (pytest-asyncio)

v0.21.2: pytest-asyncio 0.21.2

Compare Source

0.21.2 (2024-04-29)

• Fix compatibility with pytest 8.2. Backport of #​800 to pytest-asyncio v0.21 for users who are unable to upgrade to a more recent version (see #​706

psf/requests (requests)

v2.32.2

Compare Source

Deprecations

• To provide a more stable migration for custom HTTPAdapters impacted
  by the CVE changes in 2.32.0, we've renamed _get_connection to
  a new public API, get_connection_with_tls_context. Existing custom
  HTTPAdapters will need to migrate their code to use this new API.
  get_connection is considered deprecated in all versions of Requests>=2.32.0.

  A minimal (2-line) example has been provided in the linked PR to ease
  migration, but we strongly urge users to evaluate if their custom adapter
  is subject to the same issue described in CVE-2024-35195. (#​6710)

v2.32.1

Compare Source

Bugfixes

• Add missing test certs to the sdist distributed on PyPI.

v2.32.0

Compare Source

Security

• Fixed an issue where setting verify=False on the first request from a
  Session will cause subsequent requests to the same origin to also ignore
  cert verification, regardless of the value of verify.
  (GHSA-9wx4-h78v-vm56)

Improvements

• verify=True now reuses a global SSLContext which should improve
  request time variance between first and subsequent requests. It should
  also minimize certificate load time on Windows systems when using a Python
  version built with OpenSSL 3.x. (#​6667)
• Requests now supports optional use of character detection
  (chardet or charset_normalizer) when repackaged or vendored.
  This enables pip and other projects to minimize their vendoring
  surface area. The Response.text() and apparent_encoding APIs
  will default to utf-8 if neither library is present. (#​6702)

Bugfixes

• Fixed bug in length detection where emoji length was incorrectly
  calculated in the request content-length. (#​6589)
• Fixed deserialization bug in JSONDecodeError. (#​6629)
• Fixed bug where an extra leading / (path separator) could lead
  urllib3 to unnecessarily reparse the request URI. (#​6644)

Deprecations

• Requests has officially added support for CPython 3.12 (#​6503)
• Requests has officially added support for PyPy 3.9 and 3.10 (#​6641)
• Requests has officially dropped support for CPython 3.7 (#​6642)
• Requests has officially dropped support for PyPy 3.7 and 3.8 (#​6641)

Documentation

• Various typo fixes and doc improvements.

Packaging

• Requests has started adopting some modern packaging practices.
  The source files for the projects (formerly requests) is now located
  in src/requests in the Requests sdist. (#​6506)
• Starting in Requests 2.33.0, Requests will migrate to a PEP 517 build system
  using hatchling. This should not impact the average user, but extremely old
  versions of packaging utilities may have issues with the new packaging format.

slackapi/python-slack-sdk (slack-sdk)

v3.27.2: version 3.27.2

Compare Source

Changes

• #​1498 Fix #​1496 Async client uses blocking call when uploading file with v2 - Thanks @​kdrob @​seratch
• #​1492 Fix #​1468 RichTextElement.elements items are never promoted to a proper Python object type - Thanks @​k1e1n04 @​kezabelle

---

• All issues/pull requests: https://github.com/slackapi/python-slack-sdk/milestone/94?closed=1
• All changes: slackapi/python-slack-sdk@v3.27.1...v3.27.2

---

Configuration

📅 Schedule: Branch creation - "every 4th week on Thursday before 10am" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.