Update maintenance #210

renovate · 2024-12-01T01:27:58Z

This PR contains the following updates:

Package	Type	Update	Change
actions/dependency-review-action	action	minor	`v4.4.0` -> `v4.5.0`
packaging		minor	`==24.1` -> `==24.2`
pglast	install	minor	`==6.9` -> `==6.11`
pglast		minor	`==6.9` -> `==6.11`
pylint (changelog)		patch	`==3.3.1` -> `==3.3.2`
pypa/gh-action-pypi-publish	action	digest	`fb13cb3` -> `218af42`
slackapi/slack-github-action	action	patch	`v1.27.0` -> `v1.27.1`
step-security/harden-runner	action	patch	`v2.10.1` -> `v2.10.2`
tomli (changelog)		minor	`==2.0.2` -> `==2.2.1`
virtualenv		minor	`==20.27.1` -> `==20.28.0`

Release Notes

actions/dependency-review-action (actions/dependency-review-action)

pypa/packaging (packaging)

`v24.2`

Compare Source

What's Changed

The source is auto-formatted with ruff, not black by @DimitriPapadopoulos in https://github.com/pypa/packaging/pull/798
Bump the github-actions group across 1 directory with 3 updates by @dependabot in https://github.com/pypa/packaging/pull/813
Apply ruff rules (RUF) by @DimitriPapadopoulos in https://github.com/pypa/packaging/pull/800
Fix typo in Version __str__ by @aryanpingle in https://github.com/pypa/packaging/pull/817
Bump the github-actions group with 3 updates by @dependabot in https://github.com/pypa/packaging/pull/819
Get rid of duplicate test cases by @DimitriPapadopoulos in https://github.com/pypa/packaging/pull/821
Fix doc for canonicalize_version and a typo in a docstring by @Laurent-Dx in https://github.com/pypa/packaging/pull/801
docs: public/base_version comparison by @henryiii in https://github.com/pypa/packaging/pull/818
Apply ruff/bugbear rules (B) by @DimitriPapadopoulos in https://github.com/pypa/packaging/pull/787
Apply ruff/pyupgrade rules (UP) by @DimitriPapadopoulos in https://github.com/pypa/packaging/pull/786
Add a changelog entry for dropping Python 3.7 support by @alexwlchan in https://github.com/pypa/packaging/pull/824
Patch python_full_version unconditionally by @jaraco in https://github.com/pypa/packaging/pull/825
Refactor canonicalize_version by @jaraco in https://github.com/pypa/packaging/pull/793
Allow creating a SpecifierSet from a list of specifiers by @pfmoore in https://github.com/pypa/packaging/pull/777
Fix uninformative error message by @abravalheri in https://github.com/pypa/packaging/pull/830
Fix prerelease detection for > and < by @notatallshaw in https://github.com/pypa/packaging/pull/794
Bump the github-actions group across 1 directory with 4 updates by @dependabot in https://github.com/pypa/packaging/pull/839
Add support for PEP 730 iOS tags. by @freakboy3742 in https://github.com/pypa/packaging/pull/832
Update the changelog to reflect 24.1 changes by @pradyunsg in https://github.com/pypa/packaging/pull/840
Mention updating changelog in release process by @pradyunsg in https://github.com/pypa/packaging/pull/841
Add a comment as to why Metadata.name isn't normalized by @brettcannon in https://github.com/pypa/packaging/pull/842
Use !r formatter for error messages with filenames. by @Carreau in https://github.com/pypa/packaging/pull/844
PEP 639: Implement License-Expression and License-File by @ewdurbin in https://github.com/pypa/packaging/pull/828
Bump the github-actions group with 4 updates by @dependabot in https://github.com/pypa/packaging/pull/852
Upgrade to latest mypy by @hauntsaninja in https://github.com/pypa/packaging/pull/853
Extraneous quotes by @ewdurbin in https://github.com/pypa/packaging/pull/848

New Contributors

@aryanpingle made their first contribution in https://github.com/pypa/packaging/pull/817
@Laurent-Dx made their first contribution in https://github.com/pypa/packaging/pull/801
@alexwlchan made their first contribution in https://github.com/pypa/packaging/pull/824
@jaraco made their first contribution in https://github.com/pypa/packaging/pull/825
@notatallshaw made their first contribution in https://github.com/pypa/packaging/pull/794
@freakboy3742 made their first contribution in https://github.com/pypa/packaging/pull/832
@Carreau made their first contribution in https://github.com/pypa/packaging/pull/844
@ewdurbin made their first contribution in https://github.com/pypa/packaging/pull/828

Full Changelog: pypa/packaging@24.1...24.2

lelit/pglast (pglast)

`v6.11`

Compare Source

`v6.10`

Compare Source

pylint-dev/pylint (pylint)

`v3.3.2`

Compare Source

False Positives Fixed

Fix a false positive for potential-index-error when an indexed iterable
contains a starred element that evaluates to more than one item.

Closes #10076

Other Bug Fixes

Fixes the issue with --source-root option not working when the source files are in a subdirectory of the source root (e.g. when using a /src layout).

Closes #10026

slackapi/slack-github-action (slackapi/slack-github-action)

`v1.27.1`: Slack Send V1.27.1

Compare Source

What's changed

This release tags multiple updates to dependencies and a clarification in documentation 📚

No changes are needed to update from slackapi/slack-github-action@v1.27.0 - other than bumping the version - but ongoing development is now happening on version @v2 and @v1 is no longer planning to receive significant updates after this.

Please stay tuned for upcoming changes, and may all of your workflows run well ❤️

📚 Documentation

docs(fix): reference octokit context and github event webhook payloads in variables in https://github.com/slackapi/slack-github-action/pull/348 - thanks @zimeg!

🧪 Maintenance

ci: include the slack health score as part of ci tests in https://github.com/slackapi/slack-github-action/pull/346 - thanks @zimeg!

📦 Dependencies

build(deps): bump axios from 1.7.5 to 1.7.7 in https://github.com/slackapi/slack-github-action/pull/334 - thanks @dependabot!
build(deps-dev): bump mocha from 10.7.0 to 10.7.3 in https://github.com/slackapi/slack-github-action/pull/335 - thanks @dependabot!
build(deps-dev): bump eslint-plugin-jsdoc from 48.10.2 to 50.2.2 in https://github.com/slackapi/slack-github-action/pull/336 - thanks @dependabot!
build(deps): bump @slack/web-api from 7.3.4 to 7.5.0 in https://github.com/slackapi/slack-github-action/pull/339 - thanks @dependabot!
build(deps-dev): bump eslint-plugin-import from 2.29.1 to 2.30.0 in https://github.com/slackapi/slack-github-action/pull/341 - thanks @dependabot!
build(deps-dev): bump eslint-plugin-jsdoc from 50.2.2 to 50.3.1 in https://github.com/slackapi/slack-github-action/pull/344 - thanks @dependabot!
build(deps-dev): bump nyc from 17.0.0 to 17.1.0 in https://github.com/slackapi/slack-github-action/pull/342 - thanks @dependabot!
build(deps-dev): bump sinon from 18.0.0 to 19.0.2 in https://github.com/slackapi/slack-github-action/pull/343 - thanks @dependabot!
build(deps-dev): bump mocha from 10.7.3 to 10.8.2 in https://github.com/slackapi/slack-github-action/pull/350 - thanks @dependabot!
build(deps): bump @slack/web-api from 7.5.0 to 7.7.0 in https://github.com/slackapi/slack-github-action/pull/351 - thanks @dependabot!
build(deps-dev): bump eslint-plugin-import from 2.30.0 to 2.31.0 in https://github.com/slackapi/slack-github-action/pull/352 - thanks @dependabot!
build(deps-dev): bump eslint-plugin-jsdoc from 50.3.1 to 50.4.3 in https://github.com/slackapi/slack-github-action/pull/353 - thanks @dependabot!
build(deps): bump @actions/core from 1.10.1 to 1.11.1 in https://github.com/slackapi/slack-github-action/pull/354 - thanks @dependabot!
build(deps): bump codecov/codecov-action from 4.5.0 to 4.6.0 in https://github.com/slackapi/slack-github-action/pull/355 - thanks @dependabot!

Full Changelog: slackapi/slack-github-action@v1.27.0...v1.27.1

step-security/harden-runner (step-security/harden-runner)

`v2.10.2`

Compare Source

What's Changed

Fixes low-severity command injection weaknesses
The advisory is here: GHSA-g85v-wf27-67xc
Bug fix to improve detection of whether Harden-Runner is running in a container

Full Changelog: step-security/harden-runner@v2...v2.10.2

hukkin/tomli (tomli)

`v2.2.1`

Compare Source

Fixed
- Don't attempt to compile binary wheels for Python 3.8, 3.9 and 3.10 where cibuildwheel depends on a conflicting Tomli version

`v2.1.0`

Compare Source

Deprecated
- Instantiating TOMLDecodeError with free-form arguments.
  msg, doc and pos arguments should be given.
Added
- msg, doc, pos, lineno and colno attributes to TOMLDecodeError

pypa/virtualenv (virtualenv)

`v20.28.0`

Compare Source

What's Changed

fix: Update run_with_catch log flushing by @neilramsay in https://github.com/pypa/virtualenv/pull/2806
feat: Write CACHEDIR.TAG file by @neilramsay in https://github.com/pypa/virtualenv/pull/2805

Full Changelog: pypa/virtualenv@20.27.2...20.28.0

Configuration

📅 Schedule: Branch creation - "every month" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

CLAassistant · 2024-12-01T01:28:04Z

Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.
_{You have signed the CLA already but the status is still pending? Let us recheck it.}

renovate bot requested a review from svenklemm as a code owner December 1, 2024 01:27

Update maintenance

b538c7b

renovate bot force-pushed the renovate/maintenance branch from 1bd0f7c to b538c7b Compare December 1, 2024 19:18

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Update maintenance #210

Update maintenance #210

renovate bot commented Dec 1, 2024 •

edited

Loading

CLAassistant commented Dec 1, 2024

Update maintenance #210

Are you sure you want to change the base?

Update maintenance #210

Conversation

renovate bot commented Dec 1, 2024 • edited Loading

Release Notes

What's Changed

New Contributors

What's Changed

New Contributors

False Positives Fixed

Other Bug Fixes

v1.27.1: Slack Send V1.27.1

What's changed

📚 Documentation

🧪 Maintenance

📦 Dependencies

What's Changed

What's Changed

Configuration

CLAassistant commented Dec 1, 2024

renovate bot commented Dec 1, 2024 •

edited

Loading

`v1.27.1`: Slack Send V1.27.1