Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Update all dependencies #62

Merged
merged 2 commits into from
Apr 24, 2024
Merged

Update all dependencies #62

merged 2 commits into from
Apr 24, 2024

Conversation

platform-engineering-bot
Copy link
Contributor

@platform-engineering-bot platform-engineering-bot commented Mar 11, 2024 •
edited
Loading

This PR contains the following updates:

Package Type Update Change
ansible-core (source) dependencies minor 2.15.9 -> 2.16.6
black (changelog) dev-dependencies minor 24.2.0 -> 24.4.0
docutils minor ==0.20.1 -> ==0.21.2
idna (changelog) minor ==3.6 -> ==3.7
packaging major ==23.2 -> ==24.0
pycparser minor ==2.21 -> ==2.22
quay.io/arcalot/arcaflow-plugin-baseimage-python-buildbase stage minor 0.3.1 -> 0.4.0
quay.io/arcalot/arcaflow-plugin-baseimage-python-osbase final minor 0.3.1 -> 0.4.0
setuptools (changelog) minor ==69.1.1 -> ==69.5.1
typing-extensions (changelog) minor ==4.10.0 -> ==4.11.0
zope-interface minor ==6.2 -> ==6.3
zope.interface minor ==6.2 -> ==6.3

Release Notes

ansible/ansible (ansible-core)

v2.16.6

Compare Source

Changelog

See the full changelog for the changes included in this release.

Release Artifacts

v2.16.5

Compare Source

Changelog

See the full changelog for the changes included in this release.

Release Artifacts

v2.16.4

Compare Source

Changelog

See the full changelog for the changes included in this release.

Release Artifacts

v2.16.3

Compare Source

Changelog

See the full changelog for the changes included in this release.

Release Artifacts

v2.16.2

Compare Source

Changelog

See the full changelog for the changes included in this release.

Release Artifacts

v2.16.1

Compare Source

Changelog

See the full changelog for the changes included in this release.

Release Artifacts

v2.16.0

Compare Source

Changelog

See the full changelog for the changes included in this release.

Release Artifacts

v2.15.11

Compare Source

Changelog

See the full changelog for the changes included in this release.

Release Artifacts

v2.15.10

Compare Source

Changelog

See the full changelog for the changes included in this release.

Release Artifacts

psf/black (black)

v24.4.0

Compare Source

Stable style
  • Fix unwanted crashes caused by AST equivalency check (#​4290)
Preview style
  • if guards in case blocks are now wrapped in parentheses when the line is too long.
    (#​4269)
  • Stop moving multiline strings to a new line unless inside brackets (#​4289)
Integrations
  • Add a new option use_pyproject to the GitHub Action psf/black. This will read the
    Black version from pyproject.toml. (#​4294)

v24.3.0

Compare Source

Highlights

This release is a milestone: it fixes Black's first CVE security vulnerability. If you
run Black on untrusted input, or if you habitually put thousands of leading tab
characters in your docstrings, you are strongly encouraged to upgrade immediately to fix
CVE-2024-21503.

This release also fixes a bug in Black's AST safety check that allowed Black to make
incorrect changes to certain f-strings that are valid in Python 3.12 and higher.

Stable style
  • Don't move comments along with delimiters, which could cause crashes (#​4248)
  • Strengthen AST safety check to catch more unsafe changes to strings. Previous versions
    of Black would incorrectly format the contents of certain unusual f-strings containing
    nested strings with the same quote type. Now, Black will crash on such strings until
    support for the new f-string syntax is implemented. (#​4270)
  • Fix a bug where line-ranges exceeding the last code line would not work as expected
    (#​4273)
Performance
  • Fix catastrophic performance on docstrings that contain large numbers of leading tab
    characters. This fixes
    CVE-2024-21503.
    (#​4278)
Documentation
  • Note what happens when --check is used with --quiet (#​4236)
kjd/idna (idna)

v3.7

Compare Source

What's Changed

  • Fix issue where specially crafted inputs to encode() could take exceptionally long amount of time to process. [CVE-2024-3651]

Thanks to Guido Vranken for reporting the issue.

Full Changelog: kjd/idna@v3.6...v3.7

pypa/packaging (packaging)

v24.0

Compare Source

What's Changed

New Contributors

Full Changelog: pypa/packaging@23.2...24.0

pypa/setuptools (setuptools)

v69.5.1

Compare Source

v69.5.0

Compare Source

v69.4.2

Compare Source

v69.4.1

Compare Source

v69.4.0

Compare Source

v69.3.1

Compare Source

v69.3.0

Compare Source

v69.2.0

Compare Source

python/typing_extensions (typing-extensions)

v4.11.0

Compare Source

This feature release provides improvements to various recently
added features, most importantly type parameter defaults (PEP 696).

There are no changes since 4.11.0rc1.

zopefoundation/zope.interface (zope-interface)

v6.3

Compare Source

================

  • Add preliminary support for Python 3.13 as of 3.13a6.

Configuration

📅 Schedule: Branch creation - "before 4am on Monday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

@platform-engineering-bot
Copy link
Contributor Author

⚠ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

  • any of the package files in this branch needs updating, or
  • the branch becomes conflicted, or
  • you click the rebase/retry checkbox if found above, or
  • you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: poetry.lock

Creating virtualenv arcaflow-plugin-metadata-q7-46uzw-py3.12 in /home/ubuntu/.cache/pypoetry/virtualenvs
usage: virtualenv [--version] [--with-traceback] [-v | -q] [--read-only-app-data] [--app-data APP_DATA] [--reset-app-data] [--upgrade-embed-wheels] [--discovery {builtin}] [-p py] [--try-first-with py_exe]
                  [--creator {builtin,cpython3-posix,venv}] [--seeder {app-data,pip}] [--no-seed] [--activators comma_sep_list] [--clear] [--no-vcs-ignore] [--system-site-packages] [--symlinks | --copies] [--no-download | --download]
                  [--extra-search-dir d [d ...]] [--pip version] [--setuptools version] [--wheel version] [--no-pip] [--no-setuptools] [--no-wheel] [--no-periodic-update] [--symlink-app-data] [--prompt prompt] [-h]
                  dest
virtualenv: error: argument dest: the destination . is not write-able at /home/ubuntu/.cache

@platform-engineering-bot
Copy link
Contributor Author

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠ Warning: custom changes will be lost.

@webbnh webbnh mentioned this pull request Apr 24, 2024
Merged
@webbnh
Copy link
Contributor

webbnh commented Apr 24, 2024

This PR is now based on #67 (so the commit from the docsgen arcabot appears at the base of this branch instead of coming after the Renovate bot's commit). Once that is merged, this PR can merge (modulo #66).

I've added another commit which removes the digest hashes on the container references in the dockerfile.

@webbnh
Copy link
Contributor

webbnh commented Apr 24, 2024

This PR is now based on #66. Once that merges, this can move forward.

@platform-engineering-bot @webbnh
Update all dependencies
ee2dd17 
Signed-off-by: Platform Engineering Bot <platform-engineering@redhat.com>
@webbnh
Remove digest hashes from container references
b879730
@webbnh
Copy link
Contributor

webbnh commented Apr 24, 2024

This is ready for merge, now.

webbnh
webbnh approved these changes Apr 24, 2024
View reviewed changes
Copy link
Contributor

@webbnh webbnh left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

👍

@webbnh webbnh merged commit e95b814 into main Apr 24, 2024
3 checks passed
@webbnh webbnh deleted the renovate/all branch April 24, 2024 19:43
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@webbnh webbnh webbnh approved these changes

@jaredoconnell jaredoconnell jaredoconnell approved these changes

@dustinblack dustinblack Awaiting requested review from dustinblack

@dbutenhof dbutenhof Awaiting requested review from dbutenhof

@mfleader mfleader Awaiting requested review from mfleader

Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
3 participants
@platform-engineering-bot @webbnh @jaredoconnell