Update all dependencies #77
Open
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
![renovate[bot]](https://avatars.githubusercontent.com/in/2740?s=60&v=4){kind=small}
|
Holding off on this until fakeredis supports this version of redis. See jamesls/fakeredis#329. |
renovate
bot
force-pushed
the
renovate/all
branch
2 times, most recently
from
4f887da
to
7ee6efc
Compare
renovate
bot
force-pushed
the
renovate/all
branch
6 times, most recently
from
16d26db
to
8c966e2
Compare
cunla
approved these changes
Apr 15, 2022
renovate
bot
force-pushed
the
renovate/all
branch
3 times, most recently
from
c0b7635
to
9d2b5f0
Compare
renovate
bot
force-pushed
the
renovate/all
branch
4 times, most recently
from
7dc2411
to
2dc4152
Compare
renovate
bot
force-pushed
the
renovate/all
branch
8 times, most recently
from
8ae3d06
to
52849bb
Compare
renovate
bot
force-pushed
the
renovate/all
branch
4 times, most recently
from
bb139d7
to
135eacb
Compare
renovate
bot
force-pushed
the
renovate/all
branch
6 times, most recently
from
a612249
to
1c47f1a
Compare
renovate
bot
force-pushed
the
renovate/all
branch
5 times, most recently
from
490c15b
to
e409936
Compare
renovate
bot
force-pushed
the
renovate/all
branch
9 times, most recently
from
4b7b5ad
to
166f523
Compare
renovate
bot
force-pushed
the
renovate/all
branch
5 times, most recently
from
1ca93cf
to
ebe532a
Compare
renovate
bot
force-pushed
the
renovate/all
branch
3 times, most recently
from
6c8490c
to
2669cc3
Compare
renovate
bot
force-pushed
the
renovate/all
branch
from
2669cc3
to
748e2ad
Compare
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
==1.1.0->==1.3.2==0.14.3->==0.17.3==3.1.2->==3.1.4==3.4.1->==3.7==1.4.43->==2.0.35==2.2.2->==3.0.4v3->v4==22.1.0->==24.1.0==3.8.3->==3.10.6==1.8.1->==1.13.3==3.5.2->==3.8.1==1.7.7->==2.3.1==4.0.1->==4.2.0==4.11.1->==4.12.3==22.10.0->==24.8.0==5.0.1->==6.1.0==6.5.0->==7.6.1==1.3.0->==2.2.0==1.10.0->==2.24.1==0.86.0->==0.115.0==0.9.0->==1.0.0==3.8.0->==3.16.1==5.0.4->==7.1.1==20.1.0->==23.0.011.5.0->11.10.0==0.23.0->==0.27.2==5.10.1->==5.13.2==2.1.2->==2.2.0==4.9.1->==5.3.0==0.5.2->==0.8.1==2.1.1->==2.2.4==3.8.1->==3.10.7==0.5.6->==0.5.7==1.0.5->==1.1.1==5.9.1->==7.0.0==4.21.9->==5.28.2==1.10.1->==1.15.1==7.2.0->==8.3.3==0.20.1->==0.24.0==4.0.0->==5.0.0==3.3->==3.4==3.0.2->==3.6.1==0.0.5->==0.0.10==4.3.4->==5.0.8==2.28.1->==2.32.3==1.10.1->==2.14.0==0.19.0->==0.30.6Release Notes
lepture/authlib (Authlib)
v1.3.2: Version 1.3.2Compare Source
quoteclient id and secret.unquotebasic auth header for authorization server.v1.3.1: Version 1.3.1Compare Source
Prevent
OctKeyto import ssh and PEM strings.v1.3.0: Version 1.3.0Compare Source
Bug fixes
Breaking changes
v1.2.1: Version 1.2.1Compare Source
ClientSecretJWT.signmethod, via #552authorize_redirectfor Starlette v0.26.0, via #533has_client_secretmethod and documentation, via #513request_invalidandtoken_revokedremaining occurencesand documentation. #514
grant_typesandresponse_typesdefault values, via #509v1.2.0: Version 1.2.0Compare Source
request.bodytoResourceProtector, #485.flask.ginstead of_app_ctx_stack, #482.headersparameter back toClientSecretJWT, #457.realmparameter in OAuth 1 clients, #339.default_timeoutfor requestsOAuth2SessionandAssertionSession.jwk.loadsandjwk.dumpspgjones/hypercorn (Hypercorn)
v0.17.3Compare Source
v0.17.2Compare Source
v0.17.1Compare Source
v0.17.0Compare Source
ProxyFixMiddleware.
is accepted.
v0.16.0Compare Source
the HTTP/2 rapid reset attack.
proxy.
manage memory leaks in apps.
flushing.
headers on first response byte, erroring if
start_responseisnot called, and switching wsgi.errors to stdout.
race conditions.
v0.15.0Compare Source
found.
failures.
memory leak issues.
is being used.
systems that don't support multiprocessing.
v0.14.4Compare Source
unmaintained toml library.
client-only code).
0.22 is not supported).
machines.
pallets/jinja (Jinja2)
v3.1.4Compare Source
Released 2024-05-05
xmlattrfilter does not allow keys with/solidus,>greater-than sign, or
=equals sign, in addition to disallowing spaces.Regardless of any validation done by Jinja, user input should never be used
as keys to this filter, or must be separately validated first.
:ghsa:
h75v-3vvj-5mfjv3.1.3Compare Source
Released 2024-01-10
empty. :pr:
1858xmlattrfilter does not allow keys with spaces. :ghsa:h5c8-rqwp-cp95{% trans %}blocksmore helpful. :pr:
1918Python-Markdown/markdown (Markdown)
v3.7Compare Source
Changed
Refactor
abbrExtensionA new
AbbrTreeprocessorhas been introduced, which replaces the now deprecatedAbbrInlineProcessor. Abbreviation processing now happens after Attribute Lists,avoiding a conflict between the two extensions (#1460).
The
AbbrPreprocessorclass has been renamed toAbbrBlockprocessor, whichbetter reflects what it is.
AbbrPreprocessorhas been deprecated.A call to
Markdown.reset()now clears all previously defined abbreviations.Abbreviations are now sorted by length before executing
AbbrTreeprocessorto ensure that multi-word abbreviations are implemented even if an abbreviation
exists for one of those component words. (#1465)
Abbreviations without a definition are now ignored. This avoids applying
abbr tags to text without a title value.
Added an optional
glossaryconfiguration option to the abbreviations extension.This provides a simple and efficient way to apply a dictionary of abbreviations
to every page.
Abbreviations can now be disabled by setting their definition to
""or''.This can be useful when using the
glossaryoption.Fixed
v3.6Compare Source
Changed
Refactor TOC Sanitation
striptagsis provided to convert headings to plain text.Unlike, the
markupsafeimplementation, HTML entities are not unescaped.name, richhtml, and unescaped rawdata-toc-labelaresaved to
toc_tokens, allowing users to access the full rich text content ofthe headings directly from
toc_tokens.data-toc-labelis sanitized separate from heading contentbefore being written to
name. This fixes a bug which allowed markup throughin certain circumstances. To access the raw unsanitized data, retrieve the
value from
token['data-toc-label']directly.html.unescapecall is made just prior to callingslugifyso thatslugifyonly operates on Unicode characters. Note thathtml.unescapeisnot run on
name,html, ordata-toc-label.get_nameandstashedHTML2textdefined in thetocextensionare both deprecated. Instead, third party extensions should use some
combination of the new functions
run_postprocessors,render_inner_htmlandstriptags.Fixed
scripts/*.pyin the generated source tarballs (#1430).^) and square brackets (]) but explicitly excludebackslashes (
\) from abbreviations (#1444).attr_list,fenced_code), quoted attribute values arenow allowed to contain curly braces (
}) (#1414).v3.5.2Compare Source
Fixed
convertFile- it accepts only bytes-based buffers.Also remove legacy checks from Python 2 (#1400)
AdmonitionProcessor.content_indentunset(#1404)
InlineProcessorwithAtomicString(#1406).codehilitewith an emptycodetag (#1405).v3.5.1Compare Source
Fixed
trigger quadratic line counting behavior (#1392).
v3.5Compare Source
v3.4.4Compare Source
v3.4.3Compare Source
v3.4.2Compare Source
actions/checkout (actions/checkout)
v4Compare Source
Tinche/aiofiles (aiofiles)
v24.1.0: 24.1.0Compare Source
os.linkconditionally to fix importing on android.#175
aiofiles.os.__all__when running on Windows.aiofiles.os.path.abspathandaiofiles.os.getcwd.#174
#184
v23.2.1: 23.2.1Compare Source
os.statvfsconditionally to fix importing on non-UNIX systems.#171 #172
v23.2.0: 23.2.0Compare Source
23.2.0
#166 #168
aiofiles.tempfile.NamedTemporaryFilenow accepts adelete_on_closeargument, just like the stdlib version.aiofiles.tempfile.NamedTemporaryFileno longer exposes adeleteattribute, just like the stdlib version.aiofiles.os.statvfsandaiofiles.os.path.ismount.#162
#169
v23.1.0Compare Source
aio-libs/aiohttp (aiohttp)
v3.10.6: 3.10.6Compare Source
Bug fixes
Added :exc:
aiohttp.ClientConnectionResetError. Client code that previously threw :exc:ConnectionResetErrorwill now throw this -- by :user:
Dreamsorcerer.Related issues and pull requests on GitHub:
#9137.
Fixed an unclosed transport
ResourceWarningon web handlers -- by :user:Dreamsorcerer.Related issues and pull requests on GitHub:
#8875.
Fixed resolve_host() 'Task was destroyed but is pending' errors -- by :user:
Dreamsorcerer.Related issues and pull requests on GitHub:
#8967.
Fixed handling of some file-like objects (e.g.
tarfile.extractfile()) which raiseAttributeErrorinstead ofOSErrorwhenfilenofails for streaming payload data -- by :user:ReallyReivax.Related issues and pull requests on GitHub:
#6732.
Fixed web router not matching pre-encoded URLs (requires yarl 1.9.6+) -- by :user:
Dreamsorcerer.Related issues and pull requests on GitHub:
#8898, #9267.
Fixed an error when trying to add a route for multiple methods with a path containing a regex pattern -- by :user:
Dreamsorcerer.Related issues and pull requests on GitHub:
#8998.
Fixed
Response.textwhen body is aPayload-- by :user:Dreamsorcerer.Related issues and pull requests on GitHub:
#6485.
Fixed compressed requests failing when no body was provided -- by :user:
Dreamsorcerer.Related issues and pull requests on GitHub:
#9108.
Fixed client incorrectly reusing a connection when the previous message had not been fully sent -- by :user:
Dreamsorcerer.Related issues and pull requests on GitHub:
#8992.
Fixed race condition that could cause server to close connection incorrectly at keepalive timeout -- by :user:
Dreamsorcerer.Related issues and pull requests on GitHub:
#9140.
Fixed Python parser chunked handling with multiple Transfer-Encoding values -- by :user:
Dreamsorcerer.Related issues and pull requests on GitHub:
#8823.
Fixed error handling after 100-continue so server sends 500 response instead of disconnecting -- by :user:
Dreamsorcerer.Related issues and pull requests on GitHub:
#8876.
Stopped adding a default Content-Type header when response has no content -- by :user:
Dreamsorcerer.Related issues and pull requests on GitHub:
#8858.
Added support for URL credentials with empty (zero-length) username, e.g.
https://:password@host-- by :user:shuckcRelated issues and pull requests on GitHub:
#6494.
Stopped logging exceptions from
web.run_app()that would be raised regardless -- by :user:Dreamsorcerer.Related issues and pull requests on GitHub:
[#6807](https://github.com/aio-libs/aiohttp/issues/6807
Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.