Bump the uv group across 1 directory with 8 updates#3689
Open
dependabot[bot] wants to merge 1 commit intomainfrom
Open
Bump the uv group across 1 directory with 8 updates#3689dependabot[bot] wants to merge 1 commit intomainfrom
dependabot[bot] wants to merge 1 commit intomainfrom
Conversation
Bumps the uv group with 8 updates in the / directory: | Package | From | To | | --- | --- | --- | | [flask-cors](https://github.com/corydolphin/flask-cors) | `4.0.1` | `6.0.0` | | [nltk](https://github.com/nltk/nltk) | `3.6.6` | `3.9` | | [redis](https://github.com/redis/redis-py) | `4.3.3` | `4.4.4` | | [requests](https://github.com/psf/requests) | `2.32.0` | `2.32.4` | | [tornado](https://github.com/tornadoweb/tornado) | `6.4.1` | `6.5` | | [fonttools](https://github.com/fonttools/fonttools) | `4.58.4` | `4.60.2` | | [pillow](https://github.com/python-pillow/Pillow) | `11.2.1` | `12.1.1` | | [pyasn1](https://github.com/pyasn1/pyasn1) | `0.6.1` | `0.6.2` | Updates `flask-cors` from 4.0.1 to 6.0.0 - [Release notes](https://github.com/corydolphin/flask-cors/releases) - [Changelog](https://github.com/corydolphin/flask-cors/blob/main/CHANGELOG.md) - [Commits](corydolphin/flask-cors@4.0.1...6.0.0) Updates `nltk` from 3.6.6 to 3.9 - [Changelog](https://github.com/nltk/nltk/blob/develop/ChangeLog) - [Commits](nltk/nltk@3.6.6...3.9) Updates `redis` from 4.3.3 to 4.4.4 - [Release notes](https://github.com/redis/redis-py/releases) - [Changelog](https://github.com/redis/redis-py/blob/master/CHANGES) - [Commits](redis/redis-py@v4.3.3...v4.4.4) Updates `requests` from 2.32.0 to 2.32.4 - [Release notes](https://github.com/psf/requests/releases) - [Changelog](https://github.com/psf/requests/blob/main/HISTORY.md) - [Commits](psf/requests@v2.32.0...v2.32.4) Updates `tornado` from 6.4.1 to 6.5 - [Changelog](https://github.com/tornadoweb/tornado/blob/master/docs/releases.rst) - [Commits](tornadoweb/tornado@v6.4.1...v6.5.0) Updates `fonttools` from 4.58.4 to 4.60.2 - [Release notes](https://github.com/fonttools/fonttools/releases) - [Changelog](https://github.com/fonttools/fonttools/blob/main/NEWS.rst) - [Commits](fonttools/fonttools@4.58.4...4.60.2) Updates `pillow` from 11.2.1 to 12.1.1 - [Release notes](https://github.com/python-pillow/Pillow/releases) - [Changelog](https://github.com/python-pillow/Pillow/blob/main/CHANGES.rst) - [Commits](python-pillow/Pillow@11.2.1...12.1.1) Updates `pyasn1` from 0.6.1 to 0.6.2 - [Release notes](https://github.com/pyasn1/pyasn1/releases) - [Changelog](https://github.com/pyasn1/pyasn1/blob/main/CHANGES.rst) - [Commits](pyasn1/pyasn1@v0.6.1...v0.6.2) --- updated-dependencies: - dependency-name: flask-cors dependency-version: 6.0.0 dependency-type: direct:production dependency-group: uv - dependency-name: nltk dependency-version: '3.9' dependency-type: direct:production dependency-group: uv - dependency-name: redis dependency-version: 4.4.4 dependency-type: direct:production dependency-group: uv - dependency-name: requests dependency-version: 2.32.4 dependency-type: direct:production dependency-group: uv - dependency-name: tornado dependency-version: '6.5' dependency-type: direct:production dependency-group: uv - dependency-name: fonttools dependency-version: 4.60.2 dependency-type: indirect dependency-group: uv - dependency-name: pillow dependency-version: 12.1.1 dependency-type: indirect dependency-group: uv - dependency-name: pyasn1 dependency-version: 0.6.2 dependency-type: indirect dependency-group: uv ... Signed-off-by: dependabot[bot] <support@github.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the uv group with 8 updates in the / directory:
4.0.16.0.03.6.63.94.3.34.4.42.32.02.32.46.4.16.54.58.44.60.211.2.112.1.10.6.10.6.2Updates
flask-corsfrom 4.0.1 to 6.0.0Release notes
Sourced from flask-cors's releases.
Changelog
Sourced from flask-cors's changelog.
Commits
35d8753[CVE-2024-6844] Replace use of (urllib) unquote_plus with unquote for paths (...e970988[CVE-2024-6839] Sort Paths by Regex Specificity (#391)eb39516[CVE-2024-6866] Case Sensitive Request Path Matching (#390)5da9be4Fix packaging: missing source files (#381)65a5132Workaround license publishing issue (#380)7127e7eAlways use trusted publishing (#379)01e2e68Fix release pipeline (#378)ade65a1Major Packaging Refactor: migrate to uv (#377)eb44bfffix: typos (#371)1225e78replace documentation links in README (#369)Updates
nltkfrom 3.6.6 to 3.9Changelog
Sourced from nltk's changelog.
... (truncated)
Commits
24936a2Bump version to 3.9c222897Merge branch 'develop' of https://github.com/nltk/nltk into develop34c3a4aMerge branch 'develop' of https://github.com/nltk/nltk into develop253dd3aadd blackc43727fUpdate version7137405Merge pull request #3066 from asishm/bugfix-lambda-closure-leak369cb9fMerge pull request #3245 from ekaf/hotfix-closuredup501c70eMerge branch 'develop' into hotfix-closuredupbf05dc4Merge pull request #3306 from ekaf/py3_compat66539c7Sorted output in unit/test_wordnet.pyUpdates
redisfrom 4.3.3 to 4.4.4Release notes
Sourced from redis's releases.
... (truncated)
Commits
49d9cb7Version 4.4.4 (#2671)b3c89acAsyncIO Race Condition Fix (#2640)8592cacversion 4.4.2 (#2550)be84b93Add support to BF.CARD (#2545)7dd73a3add support for custom connection pool class in NodesManager (#2547)bae6385allow replica to master promotion in nodes_cache (#2549)4a825bcString cleanse (#2548)f46d7f3Version 4.4.1 (#2544)c7600b4add type checking for graph eq (#2531)decd1f6ValueError must be AttributeError in init.py (#2542)Updates
requestsfrom 2.32.0 to 2.32.4Release notes
Sourced from requests's releases.
Changelog
Sourced from requests's changelog.
Commits
021dc72Polish up release tooling for last manual release821770eBump version and add release notes for v2.32.459f8aa2Add netrc file search information to authentication documentation (#6876)5b4b64cAdd more tests to prevent regression of CVE 2024 470817bc4587Add new test to check netrc auth leak (#6962)96ba401Only use hostname to do netrc lookup instead of netloc7341690Merge pull request #6951 from tswast/patch-16716d7cremove linksa7e1c74Update docs/conf.pyc799b81docs: fix dead links to kenreitz.orgUpdates
tornadofrom 6.4.1 to 6.5Changelog
Sourced from tornado's changelog.
... (truncated)
Commits
ab5f354Merge pull request #3498 from bdarnell/final-6.53623024Final release notes for 6.5.0b39b892Merge pull request #3497 from bdarnell/multipart-log-spamcc61050httputil: Raise errors instead of logging in multipart/form-data parsingae4a4e4asyncio: Preserve contextvars across SelectorThread on Windows (#3479)197ff13Merge pull request #3496 from bdarnell/undeprecate-set-event-loopc3d906crequirements: Upgrade tox to 4.26.0a838977testing: Remove deprecation warning filter for set_event_loopd8e0d36build: Fix free-threaded build, mark speedups module as no-GILbfe7489Merge pull request #3492 from bdarnell/relnotes-6.5Updates
fonttoolsfrom 4.58.4 to 4.60.2Release notes
Sourced from fonttools's releases.
... (truncated)
Changelog
Sourced from fonttools's changelog.
... (truncated)
Commits
78ba5e8Release 4.60.2c3f9979macos-13 runner is no more, use macos-15-intel8016403Revert "Merge pull request #3982 from fonttools/drop-py39"e691e3bRelease 4.61.0c2d540fUpdate NEWS.rst3859753Update NEWS.rst26eb070black5ff73afMerge commit from forka696d5bvarLib: only use the basename(vf.filename)b00bc45varLib_test: test path traversal in variable-font filenameUpdates
pillowfrom 11.2.1 to 12.1.1Release notes
Sourced from pillow's releases.
... (truncated)
Commits
5158d9812.1.1 version bump9000313Fix OOB Write with invalid tile extents (#9427)cd01118Patch libavif for svt-av1 4.0 compatibility46f45f612.1.0 version bumpc9ac097Simplify band splitting (#9291)3baedf2Deprecate getdata(), in favour of new get_flattened_data() (#9292)b51a036Specify APNG duration type when opening (#9368)8d08e31Add release notes for #9348 (#9369)432707eAdded release notes for #93482d58910Specify APNG duration type when openingUpdates
pyasn1from 0.6.1 to 0.6.2Release notes
Sourced from pyasn1's releases.
Changelog
Sourced from pyasn1's changelog.
Commits
e7356f8Prepare release 0.6.23908f14Merge commit from fork0a7e067Add support for Python 3.14 (#97)33656e9Create Security Policyfa62307fix for issue #91: unit tests failing due to missing code (#92)f1ed02ePackage pyasn1 with pyproject.toml (#90)93c4d4fSwitch documentation user to pyasn1 (#89)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditionsYou can disable automated security fix PRs for this repo from the Security Alerts page.