Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Bump the minor-patch-dependencies group with 5 updates #967

Merged
merged 1 commit into from
Sep 9, 2024
Merged

Bump the minor-patch-dependencies group with 5 updates #967

merged 1 commit into from
Sep 9, 2024

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Sep 9, 2024

Bumps the minor-patch-dependencies group with 5 updates:

Package From To
fastapi 0.112.2 0.114.0
starlette 0.38.4 0.38.5
pydantic 2.8.2 2.9.0
sqlalchemy 2.0.32 2.0.34
ruff 0.6.3 0.6.4

Updates fastapi from 0.112.2 to 0.114.0

Release notes

Sourced from fastapi's releases.

0.114.0

You can restrict form fields to only include those declared in a Pydantic model and forbid any extra field sent in the request using Pydantic's model_config = {"extra": "forbid"}:

from typing import Annotated
from fastapi import FastAPI, Form
from pydantic import BaseModel
app = FastAPI()
class FormData(BaseModel):
username: str
password: str
model_config = {"extra": "forbid"}
@​app.post("/login/")
async def login(data: Annotated[FormData, Form()]):
return data

Read the new docs: Form Models - Forbid Extra Form Fields.

Features

  • ✨ Add support for forbidding extra form fields with Pydantic models. PR #12134 by @​tiangolo.

Docs

  • 📝 Update docs, Form Models section title, to match config name. PR #12152 by @​tiangolo.

Internal

  • ✅ Update internal tests for latest Pydantic, including CI tweaks to install the latest Pydantic. PR #12147 by @​tiangolo.

0.113.0

Now you can declare form fields with Pydantic models:

from typing import Annotated
from fastapi import FastAPI, Form
from pydantic import BaseModel
app = FastAPI()
class FormData(BaseModel):
</tr></table>

... (truncated)

Commits
  • bde12fa 🔖 Release version 0.114.0
  • 74842f0 📝 Update release notes
  • e68d8c6 📝 Update release notes
  • 4ff22a0 📝 Update docs, Form Models section title, to match config name (#12152)
  • a11e392 📝 Update release notes
  • 4633b1b ✨ Add support for forbidding extra form fields with Pydantic models (#12134)
  • 1b06b53 📝 Update release notes
  • c411b81 ✅ Update internal tests for latest Pydantic, including CI tweaks to install t...
  • d86f660 🔖 Release version 0.113.0
  • 179f838 📝 Update release notes
  • Additional commits viewable in compare view

Updates starlette from 0.38.4 to 0.38.5

Release notes

Sourced from starlette's releases.

Version 0.38.5

Fixed

  • Schedule BackgroundTasks from within BaseHTTPMiddleware #2688. This behavior was removed in 0.38.3, and is now restored.

Full Changelog: encode/starlette@0.38.4...0.38.5

Changelog

Sourced from starlette's changelog.

0.38.5 (September 7, 2024)

Fixed

  • Schedule BackgroundTasks from within BaseHTTPMiddleware #2688. This behavior was removed in 0.38.3, and is now restored.
Commits

Updates pydantic from 2.8.2 to 2.9.0

Release notes

Sourced from pydantic's releases.

v2.9.0 (2024-09-05)

The code released in v2.9.0 is practically identical to that of v2.9.0b2.

Check out our blog post to learn more about the release highlights!

What's Changed

Packaging

New Features

Changes

Performance

... (truncated)

Changelog

Sourced from pydantic's changelog.

v2.9.0 (2024-09-05)

GitHub release

The code released in v2.9.0 is practically identical to that of v2.9.0b2.

What's Changed

Packaging

New Features

Changes

Performance

... (truncated)

Commits

Updates sqlalchemy from 2.0.32 to 2.0.34

Release notes

Sourced from sqlalchemy's releases.

2.0.34

Released: September 4, 2024

orm

  • [orm] [bug] Fixed regression caused by issue #11814 which broke support for certain flavors of PEP 593 Annotated in the type_annotation_map when builtin types such as list, dict were used without an element type. While this is an incomplete style of typing, these types nonetheless previously would be located in the type_annotation_map correctly.

    References: #11831

sqlite

  • [sqlite] [bug] Fixed regression in SQLite reflection caused by #11677 which interfered with reflection for CHECK constraints that were followed by other kinds of constraints within the same table definition. Pull request courtesy Harutaka Kawamura.

    References: #11832

2.0.33

Released: September 3, 2024

general

  • [general] [change] The pin for setuptools<69.3 in pyproject.toml has been removed. This pin was to prevent a sudden change in setuptools to use PEP 625 from taking place, which would change the file name of SQLAlchemy's source distribution on pypi to be an all lower case name, which is likely to cause problems with various build environments that expected the previous naming style. However, the presence of this pin is holding back environments that otherwise want to use a newer setuptools, so we've decided to move forward with this change, with the assumption that build environments will have largely accommodated the setuptools change by now.

    References: #11818

orm

  • [orm] [bug] [regression] Fixed regression from 1.3 where the column key used for a hybrid property might be populated with that of the underlying column that it returns, for a property that returns an ORM mapped column directly, rather than the key

... (truncated)

Commits

Updates ruff from 0.6.3 to 0.6.4

Release notes

Sourced from ruff's releases.

0.6.4

Release Notes

Preview features

  • [flake8-builtins] Use dynamic builtins list based on Python version (#13172)
  • [pydoclint] Permit yielding None in DOC402 and DOC403 (#13148)
  • [pylint] Update diagnostic message for PLW3201 (#13194)
  • [ruff] Implement post-init-default (RUF033) (#13192)
  • [ruff] Implement useless if-else (RUF034) (#13218)

Rule changes

  • [flake8-pyi] Respect pep8_naming.classmethod-decorators settings when determining if a method is a classmethod in custom-type-var-return-type (PYI019) (#13162)
  • [flake8-pyi] Teach various rules that annotations might be stringized (#12951)
  • [pylint] Avoid no-self-use for attrs-style validators (#13166)
  • [pylint] Recurse into subscript subexpressions when searching for list/dict lookups (PLR1733, PLR1736) (#13186)
  • [pyupgrade] Detect aiofiles.open calls in UP015 (#13173)
  • [pyupgrade] Mark sys.version_info[0] < 3 and similar comparisons as outdated (UP036) (#13175)

CLI

  • Enrich messages of SARIF results (#13180)
  • Handle singular case for incompatible rules warning in ruff format output (#13212)

Bug fixes

  • [pydocstyle] Improve heuristics for detecting Google-style docstrings (#13142)
  • [refurb] Treat sep arguments with effects as unsafe removals (FURB105) (#13165)

Contributors

Install ruff 0.6.4

... (truncated)

Changelog

Sourced from ruff's changelog.

0.6.4

Preview features

  • [flake8-builtins] Use dynamic builtins list based on Python version (#13172)
  • [pydoclint] Permit yielding None in DOC402 and DOC403 (#13148)
  • [pylint] Update diagnostic message for PLW3201 (#13194)
  • [ruff] Implement post-init-default (RUF033) (#13192)
  • [ruff] Implement useless if-else (RUF034) (#13218)

Rule changes

  • [flake8-pyi] Respect pep8_naming.classmethod-decorators settings when determining if a method is a classmethod in custom-type-var-return-type (PYI019) (#13162)
  • [flake8-pyi] Teach various rules that annotations might be stringized (#12951)
  • [pylint] Avoid no-self-use for attrs-style validators (#13166)
  • [pylint] Recurse into subscript subexpressions when searching for list/dict lookups (PLR1733, PLR1736) (#13186)
  • [pyupgrade] Detect aiofiles.open calls in UP015 (#13173)
  • [pyupgrade] Mark sys.version_info[0] < 3 and similar comparisons as outdated (UP036) (#13175)

CLI

  • Enrich messages of SARIF results (#13180)
  • Handle singular case for incompatible rules warning in ruff format output (#13212)

Bug fixes

  • [pydocstyle] Improve heuristics for detecting Google-style docstrings (#13142)
  • [refurb] Treat sep arguments with effects as unsafe removals (FURB105) (#13165)
Commits
  • 65cc6ec Bump version to 0.6.4 (#13253)
  • 66fe226 [red-knot] fix lookup of nonlocal names in deferred annotations (#13236)
  • e965f9c [red-knot] Infer Unknown for the loop var in async for loops (#13243)
  • 0512428 [red-knot] Emit a diagnostic if the value of a starred expression or a `yield...
  • 46a4573 [red-knot] Add type inference for basic for loops (#13195)
  • 5728909 Make mypy pass on black in knot_benchmark (#13235)
  • 9d1bd7a [pylint] removed dunder methods in Python 3 (PLW3201) (#13194)
  • e37bde4 [ruff] implement useless if-else (RUF034) (#13218)
  • 862bd0c [red-knot] Add debug assert to check for duplicate definitions (#13214)
  • e1e9143 [red-knot] Handle multiple comprehension targets (#13213)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the minor-patch-dependencies group with 5 updates
74230d0 
Bumps the minor-patch-dependencies group with 5 updates:

| Package | From | To |
| --- | --- | --- |
| [fastapi](https://github.com/fastapi/fastapi) | `0.112.2` | `0.114.0` |
| [starlette](https://github.com/encode/starlette) | `0.38.4` | `0.38.5` |
| [pydantic](https://github.com/pydantic/pydantic) | `2.8.2` | `2.9.0` |
| [sqlalchemy](https://github.com/sqlalchemy/sqlalchemy) | `2.0.32` | `2.0.34` |
| [ruff](https://github.com/astral-sh/ruff) | `0.6.3` | `0.6.4` |


Updates `fastapi` from 0.112.2 to 0.114.0
- [Release notes](https://github.com/fastapi/fastapi/releases)
- [Commits](fastapi/fastapi@0.112.2...0.114.0)

Updates `starlette` from 0.38.4 to 0.38.5
- [Release notes](https://github.com/encode/starlette/releases)
- [Changelog](https://github.com/encode/starlette/blob/master/docs/release-notes.md)
- [Commits](encode/starlette@0.38.4...0.38.5)

Updates `pydantic` from 2.8.2 to 2.9.0
- [Release notes](https://github.com/pydantic/pydantic/releases)
- [Changelog](https://github.com/pydantic/pydantic/blob/main/HISTORY.md)
- [Commits](pydantic/pydantic@v2.8.2...v2.9.0)

Updates `sqlalchemy` from 2.0.32 to 2.0.34
- [Release notes](https://github.com/sqlalchemy/sqlalchemy/releases)
- [Changelog](https://github.com/sqlalchemy/sqlalchemy/blob/main/CHANGES.rst)
- [Commits](https://github.com/sqlalchemy/sqlalchemy/commits)

Updates `ruff` from 0.6.3 to 0.6.4
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.6.3...0.6.4)

---
updated-dependencies:
- dependency-name: fastapi
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-patch-dependencies
- dependency-name: starlette
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-patch-dependencies
- dependency-name: pydantic
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-patch-dependencies
- dependency-name: sqlalchemy
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-patch-dependencies
- dependency-name: ruff
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-patch-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot requested a review from a team as a code owner September 9, 2024 08:46
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Sep 9, 2024
@github-actions github-actions bot enabled auto-merge (squash) September 9, 2024 08:47
@github-actions GitHub Actions
Copy link

github-actions bot commented Sep 9, 2024

The minor update of this production dependency was not automatically approved. For production dependencies, these semver updates can be automatically approved: patch

@github-actions github-actions bot merged commit a3b4c45 into main Sep 9, 2024
8 checks passed
@github-actions github-actions bot deleted the dependabot/pip/minor-patch-dependencies-7c85c4ec56 branch September 9, 2024 09:27
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@leplatrem leplatrem leplatrem approved these changes

Assignees
No one assigned
Labels
dependencies Pull requests that update a dependency file python Pull requests that update Python code
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
1 participant
@leplatrem