Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump the python-packages group across 1 directory with 7 updates #420

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Mar 12, 2025

Bumps the python-packages group with 7 updates in the / directory:

Package From To
attrs 25.1.0 25.2.0
cssselect2 0.7.0 0.8.0
jinja2 3.1.5 3.1.6
selenium 4.28.1 4.29.0
sqlalchemy 2.0.38 2.0.39
trio-websocket 0.12.1 0.12.2
weasyprint 64.0 64.1

Updates attrs from 25.1.0 to 25.2.0

Commits

Updates cssselect2 from 0.7.0 to 0.8.0

Release notes

Sourced from cssselect2's releases.

0.8.0

  • Drop support of Python 3.8 and 3.9, support 3.12 and 3.13
  • Handle case-sensitive and case-insensitive attribute selectors
Changelog

Sourced from cssselect2's changelog.

Changelog

Version 0.8.0 .............

Released on 2025-03-05.

  • Drop support of Python 3.8 and 3.9, support 3.12 and 3.13
  • Handle case-sensitive and case-insensitive attribute selectors

Version 0.7.0 .............

Released on 2022-09-19.

  • Support :has selector

Version 0.6.0 .............

Released on 2022-04-15.

This version deprecates the iter_ancestors and iter_previous_siblings methods, that will be removed in 0.7.0. Use the ancestors and previous_siblings properties instead.

  • Improve speed of ancestors and previous siblings

Version 0.5.0 .............

Released on 2022-02-27.

  • Support Python 3.10
  • Drop support of Python 3.6
  • Handle many CSS4 selectors
  • Ignore comments at the beginning of selectors

Version 0.4.1 .............

Released on 2020-10-29.

  • Fix PyPI description and various links.

... (truncated)

Commits
  • 774f276 Version 0.8.0
  • e173743 Add GitHub Action for releases
  • de25d57 Use Furo theme for documentation
  • a6d100e Drop support of Python 3.9, support 3.13
  • cb92103 Allow lines to be a bit longer
  • 9d60aed Remove useless sort key for selectors
  • d65a4e4 Drop support of Python 3.8, support 3.12
  • eec7802 Merge pull request #32 from Kozea/ruff
  • ce9d7c0 Use ruff instead of flake8 and isort
  • 102f50b Fix coding style
  • Additional commits viewable in compare view

Updates jinja2 from 3.1.5 to 3.1.6

Release notes

Sourced from jinja2's releases.

3.1.6

This is the Jinja 3.1.6 security release, which fixes security issues but does not otherwise change behavior and should not result in breaking changes compared to the latest feature release.

PyPI: https://pypi.org/project/Jinja2/3.1.6/ Changes: https://jinja.palletsprojects.com/en/stable/changes/#version-3-1-6

  • The |attr filter does not bypass the environment's attribute lookup, allowing the sandbox to apply its checks. GHSA-cpwx-vrp4-4pq7
Changelog

Sourced from jinja2's changelog.

Version 3.1.6

Released 2025-03-05

  • The |attr filter does not bypass the environment's attribute lookup, allowing the sandbox to apply its checks. :ghsa:cpwx-vrp4-4pq7
Commits

Updates selenium from 4.28.1 to 4.29.0

Release notes

Sourced from selenium's releases.

Selenium 4.29.0

Detailed Changelogs by Component

Java     |     Python     |     DotNet     |     Ruby     |     JavaScript     |     IEDriver

What's Changed

... (truncated)

Commits

Updates sqlalchemy from 2.0.38 to 2.0.39

Release notes

Sourced from sqlalchemy's releases.

2.0.39

Released: March 11, 2025

orm

  • [orm] [bug] Fixed bug where using DML returning such as Insert.returning() with an ORM model that has _orm.column_property() constructs that contain subqueries would fail with an internal error.

    References: #12326

  • [orm] [bug] Fixed bug in ORM enabled UPDATE (and theoretically DELETE) where using a multi-table DML statement would not allow ORM mapped columns from mappers other than the primary UPDATE mapper to be named in the RETURNING clause; they would be omitted instead and cause a column not found exception.

    References: #12328

  • [orm] [bug] Fixed issue where the "is ORM" flag of a select() or other ORM statement would not be propagated to the ORM Session based on a multi-part operator expression alone, e.g. such as Cls.attr + Cls.attr + Cls.attr or similar, leading to ORM behaviors not taking place for such statements.

    References: #12357

  • [orm] [bug] Fixed issue where using _orm.aliased() around a CTE construct could cause inappropriate "duplicate CTE" errors in cases where that aliased construct appeared multiple times in a single statement.

    References: #12364

sql

  • [sql] [bug] Added new parameters AddConstraint.isolate_from_table and DropConstraint.isolate_from_table, defaulting to True, which both document and allow to be controllable the long-standing behavior of these two constructs blocking the given constraint from being included inline within the "CREATE TABLE" sequence, under the assumption that separate add/drop directives were to be used.

    References: #12382

typing

  • [typing] [usecase] Support generic types for compound selects (_sql.union(),

... (truncated)

Commits

Updates trio-websocket from 0.12.1 to 0.12.2

Changelog

Sourced from trio-websocket's changelog.

trio-websocket 0.12.2 (2025-02-24)

Fixed

  • fix incorrect port when using a wss:// URL without supplying an explicit SSL context
Commits

Updates weasyprint from 64.0 to 64.1

Release notes

Sourced from weasyprint's releases.

v64.1

Bug fixes

  • #2368: Fix ascent and descent font values
  • #2370: Avoid endless recursion for variables in nested functions
  • #2275: Use correct containing block to render waiting children
  • #2375: Ensure that we handle text-anchor only on text content elements
  • #2090: Only create font temporary folder when adding fonts
  • #2383: Fix grid-template-areas validation and allow uppercase identifiers for grid lines

Contributors

  • Guillaume Ayoub

Backers and sponsors

  • Spacinov
  • Kobalt
  • Grip Angebotssoftware
  • Syslifters
  • Simon Sapin
  • Manuel Barkhau
  • Simonsoft
  • Menutech
  • KontextWork
  • TrainingSparkle
  • Healthchecks.io
  • Hammerbacher
  • DocRaptor
  • Yanal-Yves Fargialla
  • Method B
  • FieldHub
  • Morntag
  • Xavid
  • Kai DeLorenzo
  • Charlie S.
Changelog

Sourced from weasyprint's changelog.

Version 64.1

Released on 2025-02-20.

Bug fixes:

  • [#2368](https://github.com/Kozea/WeasyPrint/issues/2368) <https://github.com/Kozea/WeasyPrint/issues/2368>_: Fix ascent and descent font values
  • [#2370](https://github.com/Kozea/WeasyPrint/issues/2370) <https://github.com/Kozea/WeasyPrint/issues/2370>_: Avoid endless recursion for variables in nested functions
  • [#2275](https://github.com/Kozea/WeasyPrint/issues/2275) <https://github.com/Kozea/WeasyPrint/issues/2275>_: Use correct containing block to render waiting children
  • [#2375](https://github.com/Kozea/WeasyPrint/issues/2375) <https://github.com/Kozea/WeasyPrint/issues/2375>_: Ensure that we handle text-anchor only on text content elements
  • [#2090](https://github.com/Kozea/WeasyPrint/issues/2090) <https://github.com/Kozea/WeasyPrint/issues/2090>_: Only create font temporary folder when adding fonts
  • [#2383](https://github.com/Kozea/WeasyPrint/issues/2383) <https://github.com/Kozea/WeasyPrint/issues/2383>_: Fix grid-template-areas validation and allow uppercase identifiers for grid lines

Contributors:

  • Guillaume Ayoub

Backers and sponsors:

  • Spacinov
  • Kobalt
  • Grip Angebotssoftware
  • Syslifters
  • Simon Sapin
  • Manuel Barkhau
  • Simonsoft
  • Menutech
  • KontextWork
  • TrainingSparkle
  • Healthchecks.io
  • Hammerbacher
  • DocRaptor
  • Yanal-Yves Fargialla
  • Method B
  • FieldHub
  • Morntag
  • Xavid
  • Kai DeLorenzo
  • Charlie S.
Commits
  • 9dc5ac4 Version 64.1
  • b2c6cba Allow uppercase identifiers for grid lines
  • 73a342e Fix grid-template-areas validation
  • 9d9e2d0 Only create font temporary folder when adding fonts
  • 00dda6a Ensure that we handle text-anchor only on text content elements
  • 9a8a71b Use correct containing block to render waiting children
  • caaa1a4 Avoid endless recursion for variables in nested functions
  • 44c97c1 Round and test ascent and descent
  • a3e676d Fix ascent and descent font values
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the python-packages group with 7 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [attrs](https://github.com/sponsors/hynek) | `25.1.0` | `25.2.0` |
| [cssselect2](https://github.com/Kozea/cssselect2) | `0.7.0` | `0.8.0` |
| [jinja2](https://github.com/pallets/jinja) | `3.1.5` | `3.1.6` |
| [selenium](https://github.com/SeleniumHQ/Selenium) | `4.28.1` | `4.29.0` |
| [sqlalchemy](https://github.com/sqlalchemy/sqlalchemy) | `2.0.38` | `2.0.39` |
| [trio-websocket](https://github.com/python-trio/trio-websocket) | `0.12.1` | `0.12.2` |
| [weasyprint](https://github.com/Kozea/WeasyPrint) | `64.0` | `64.1` |



Updates `attrs` from 25.1.0 to 25.2.0
- [Commits](https://github.com/sponsors/hynek/commits)

Updates `cssselect2` from 0.7.0 to 0.8.0
- [Release notes](https://github.com/Kozea/cssselect2/releases)
- [Changelog](https://github.com/Kozea/cssselect2/blob/main/docs/changelog.rst)
- [Commits](Kozea/cssselect2@0.7.0...0.8.0)

Updates `jinja2` from 3.1.5 to 3.1.6
- [Release notes](https://github.com/pallets/jinja/releases)
- [Changelog](https://github.com/pallets/jinja/blob/main/CHANGES.rst)
- [Commits](pallets/jinja@3.1.5...3.1.6)

Updates `selenium` from 4.28.1 to 4.29.0
- [Release notes](https://github.com/SeleniumHQ/Selenium/releases)
- [Commits](https://github.com/SeleniumHQ/Selenium/commits/selenium-4.29.0)

Updates `sqlalchemy` from 2.0.38 to 2.0.39
- [Release notes](https://github.com/sqlalchemy/sqlalchemy/releases)
- [Changelog](https://github.com/sqlalchemy/sqlalchemy/blob/main/CHANGES.rst)
- [Commits](https://github.com/sqlalchemy/sqlalchemy/commits)

Updates `trio-websocket` from 0.12.1 to 0.12.2
- [Changelog](https://github.com/python-trio/trio-websocket/blob/master/CHANGELOG.md)
- [Commits](python-trio/trio-websocket@0.12.1...0.12.2)

Updates `weasyprint` from 64.0 to 64.1
- [Release notes](https://github.com/Kozea/WeasyPrint/releases)
- [Changelog](https://github.com/Kozea/WeasyPrint/blob/main/docs/changelog.rst)
- [Commits](Kozea/WeasyPrint@v64.0...v64.1)

---
updated-dependencies:
- dependency-name: attrs
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-packages
- dependency-name: cssselect2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-packages
- dependency-name: jinja2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-packages
- dependency-name: selenium
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-packages
- dependency-name: sqlalchemy
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-packages
- dependency-name: trio-websocket
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-packages
- dependency-name: weasyprint
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-packages
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Mar 12, 2025
Copy link

netlify bot commented Mar 12, 2025

Deploy Preview for shyparty ready!

Name Link
🔨 Latest commit 90a4128
🔍 Latest deploy log https://app.netlify.com/sites/shyparty/deploys/67d1c3a5734f06000813da59
😎 Deploy Preview https://deploy-preview-420--shyparty.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify site configuration.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file python Pull requests that update Python code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants