David Drugeon-Hamon requested to merge renovate/python-deps into develop Mar 06, 2024

This MR contains the following updates:

Package	Type	Update	Change
jwcrypto	dependencies	patch	`1.5.4` -> `1.5.6`
pytest (changelog)	dev	minor	`8.0.2` -> `8.1.1`
python	dependencies	minor	`~3.11` -> `~3.12.0`
ruff (source, changelog)	dev	minor	`^0.2.2` -> `^0.3.0`

Release Notes

latchset/jwcrypto (jwcrypto)

`v1.5.6`: Version 1.5.6 - Moderate Security release

Compare Source

What's Changed

Address potential DoS with high compression ratio by @simo5 in https://github.com/latchset/jwcrypto/pull/349

Full Changelog: https://github.com/latchset/jwcrypto/compare/v1.5.5...v1.5.6

`v1.5.5`: Version 1.5.5

Compare Source

This version fixes a pypi distribution problem introduced in 1.0 when pushing was automated. With 1.5.5 a binary wheel is now also made available on pypi.

What's Changed

Fix doc generation by @simo5 in https://github.com/latchset/jwcrypto/pull/345
Update publish action to upload also binary dist by @simo5 in https://github.com/latchset/jwcrypto/pull/347
Fix pypi publishing by @simo5 in https://github.com/latchset/jwcrypto/pull/348

Full Changelog: https://github.com/latchset/jwcrypto/compare/v1.5.4...v1.5.5

pytest-dev/pytest (pytest)

`v8.1.1`

Compare Source

pytest 8.1.1 (2024-03-08)

::: {.note} ::: {.title} Note :::

This release is not a usual bug fix release -- it contains features and improvements, being a follow up to 8.1.0, which has been yanked from PyPI. :::

Features

#11475: Added the new consider_namespace_packages{.interpreted-text role="confval"} configuration option, defaulting to False.

If set to True, pytest will attempt to identify modules that are part of namespace packages when importing modules.
#11653: Added the new verbosity_test_cases{.interpreted-text role="confval"} configuration option for fine-grained control of test execution verbosity. See Fine-grained verbosity <pytest.fine_grained_verbosity>{.interpreted-text role="ref"} for more details.

Improvements

#10865: pytest.warns{.interpreted-text role="func"} now validates that warnings.warn{.interpreted-text role="func"} was called with a [str]{.title-ref} or a [Warning]{.title-ref}. Currently in Python it is possible to use other types, however this causes an exception when warnings.filterwarnings{.interpreted-text role="func"} is used to filter those warnings (see CPython #103577 for a discussion). While this can be considered a bug in CPython, we decided to put guards in pytest as the error message produced without this check in place is confusing.
#11311: When using --override-ini for paths in invocations without a configuration file defined, the current working directory is used as the relative directory.

Previoulsy this would raise an AssertionError{.interpreted-text role="class"}.
#11475: --import-mode=importlib <import-mode-importlib>{.interpreted-text role="ref"} now tries to import modules using the standard import mechanism (but still without changing :pysys.path{.interpreted-text role="data"}), falling back to importing modules directly only if that fails.

This means that installed packages will be imported under their canonical name if possible first, for example app.core.models, instead of having the module name always be derived from their path (for example .env310.lib.site_packages.app.core.models).
#11801: Added the iter_parents() <_pytest.nodes.Node.iter_parents>{.interpreted-text role="func"} helper method on nodes. It is similar to listchain <_pytest.nodes.Node.listchain>{.interpreted-text role="func"}, but goes from bottom to top, and returns an iterator, not a list.
#11850: Added support for sys.last_exc{.interpreted-text role="data"} for post-mortem debugging on Python>=3.12.
#11962: In case no other suitable candidates for configuration file are found, a pyproject.toml (even without a [tool.pytest.ini_options] table) will be considered as the configuration file and define the rootdir.
#11978: Add --log-file-mode option to the logging plugin, enabling appending to log-files. This option accepts either "w" or "a" and defaults to "w".

Previously, the mode was hard-coded to be "w" which truncates the file before logging.
#12047: When multiple finalizers of a fixture raise an exception, now all exceptions are reported as an exception group. Previously, only the first exception was reported.

Bug Fixes

#11475: Fixed regression where --importmode=importlib would import non-test modules more than once.
#11904: Fixed a regression in pytest 8.0.0 that would cause test collection to fail due to permission errors when using --pyargs.

This change improves the collection tree for tests specified using --pyargs, see 12043{.interpreted-text role="pull"} for a comparison with pytest 8.0 and <8.
#12011: Fixed a regression in 8.0.1 whereby setup_module xunit-style fixtures are not executed when --doctest-modules is passed.
#12014: Fix the stacklevel used when warning about marks used on fixtures.
#12039: Fixed a regression in 8.0.2 where tests created using tmp_path{.interpreted-text role="fixture"} have been collected multiple times in CI under Windows.

Improved Documentation

#11790: Documented the retention of temporary directories created using the tmp_path fixture in more detail.

Trivial/Internal Changes

#11785: Some changes were made to private functions which may affect plugins which access them:
- FixtureManager._getautousenames() now takes a Node itself instead of the nodeid.
- FixtureManager.getfixturedefs() now takes the Node itself instead of the nodeid.
- The _pytest.nodes.iterparentnodeids() function is removed without replacement. Prefer to traverse the node hierarchy itself instead. If you really need to, copy the function from the previous pytest release.
#12069: Delayed the deprecation of the following features to 9.0.0:
- node-ctor-fspath-deprecation{.interpreted-text role="ref"}.
- legacy-path-hooks-deprecated{.interpreted-text role="ref"}.
It was discovered after 8.1.0 was released that the warnings about the impeding removal were not being displayed, so the team decided to revert the removal.

This is the reason for 8.1.0 being yanked.

pytest 8.1.0 (YANKED)

::: {.note} ::: {.title} Note :::

This release has been yanked: it broke some plugins without the proper warning period, due to some warnings not showing up as expected.

See #12069. :::

`v8.1.0`

Compare Source

pytest 8.1.0 (YANKED)

[!IMPORTANT]
This release has been yanked: it broke some plugins without the proper warning period, due to some warnings not showing up as expected. See #12069.

Features

#11475: Added the new consider_namespace_packages{.interpreted-text role="confval"} configuration option, defaulting to False.

If set to True, pytest will attempt to identify modules that are part of namespace packages when importing modules.
#11653: Added the new verbosity_test_cases{.interpreted-text role="confval"} configuration option for fine-grained control of test execution verbosity. See Fine-grained verbosity <pytest.fine_grained_verbosity>{.interpreted-text role="ref"} for more details.

Improvements

#10865: pytest.warns{.interpreted-text role="func"} now validates that warnings.warn{.interpreted-text role="func"} was called with a [str]{.title-ref} or a [Warning]{.title-ref}. Currently in Python it is possible to use other types, however this causes an exception when warnings.filterwarnings{.interpreted-text role="func"} is used to filter those warnings (see CPython #103577 for a discussion). While this can be considered a bug in CPython, we decided to put guards in pytest as the error message produced without this check in place is confusing.
#11311: When using --override-ini for paths in invocations without a configuration file defined, the current working directory is used as the relative directory.

Previoulsy this would raise an AssertionError{.interpreted-text role="class"}.
#11475: --import-mode=importlib <import-mode-importlib>{.interpreted-text role="ref"} now tries to import modules using the standard import mechanism (but still without changing :pysys.path{.interpreted-text role="data"}), falling back to importing modules directly only if that fails.

This means that installed packages will be imported under their canonical name if possible first, for example app.core.models, instead of having the module name always be derived from their path (for example .env310.lib.site_packages.app.core.models).
#11801: Added the iter_parents() <_pytest.nodes.Node.iter_parents>{.interpreted-text role="func"} helper method on nodes. It is similar to listchain <_pytest.nodes.Node.listchain>{.interpreted-text role="func"}, but goes from bottom to top, and returns an iterator, not a list.
#11850: Added support for sys.last_exc{.interpreted-text role="data"} for post-mortem debugging on Python>=3.12.
#11962: In case no other suitable candidates for configuration file are found, a pyproject.toml (even without a [tool.pytest.ini_options] table) will be considered as the configuration file and define the rootdir.
#11978: Add --log-file-mode option to the logging plugin, enabling appending to log-files. This option accepts either "w" or "a" and defaults to "w".

Previously, the mode was hard-coded to be "w" which truncates the file before logging.
#12047: When multiple finalizers of a fixture raise an exception, now all exceptions are reported as an exception group. Previously, only the first exception was reported.

Bug Fixes

#11904: Fixed a regression in pytest 8.0.0 that would cause test collection to fail due to permission errors when using --pyargs.

This change improves the collection tree for tests specified using --pyargs, see 12043{.interpreted-text role="pull"} for a comparison with pytest 8.0 and <8.
#12011: Fixed a regression in 8.0.1 whereby setup_module xunit-style fixtures are not executed when --doctest-modules is passed.
#12014: Fix the stacklevel used when warning about marks used on fixtures.
#12039: Fixed a regression in 8.0.2 where tests created using tmp_path{.interpreted-text role="fixture"} have been collected multiple times in CI under Windows.

Improved Documentation

#11790: Documented the retention of temporary directories created using the tmp_path fixture in more detail.

Trivial/Internal Changes

#11785: Some changes were made to private functions which may affect plugins which access them:
- FixtureManager._getautousenames() now takes a Node itself instead of the nodeid.
- FixtureManager.getfixturedefs() now takes the Node itself instead of the nodeid.
- The _pytest.nodes.iterparentnodeids() function is removed without replacement. Prefer to traverse the node hierarchy itself instead. If you really need to, copy the function from the previous pytest release.

containerbase/python-prebuild (python)

`v3.12.2`

Compare Source

Bug Fixes

deps: update dependency python to v3.12.2

`v3.12.1`

Compare Source

Bug Fixes

deps: update dependency python to v3.12.1

`v3.12.0`

Compare Source

Bug Fixes

deps: update dependency python to v3.12.0

astral-sh/ruff (ruff)

`v0.3.2`

Compare Source

Preview features

Improve single-with item formatting for Python 3.8 or older (#10276)

Rule changes

[pyupgrade] Allow fixes for f-string rule regardless of line length (UP032) (#10263)
[pycodestyle] Include actual conditions in E712 diagnostics (#10254)

Bug fixes

Fix trailing kwargs end of line comment after slash (#10297)
Fix unstable with items formatting (#10274)
Avoid repeating function calls in f-string conversions (#10265)
Fix E203 false positive for slices in format strings (#10280)
Fix incorrect Parameter range for *args and **kwargs (#10283)
Treat typing.Annotated subscripts as type definitions (#10285)

`v0.3.1`

Compare Source

Preview features

[pycodestyle] Fix E301 not triggering on decorated methods. (#10117)
[pycodestyle] Respect isort settings in blank line rules (E3*) (#10096)
[pycodestyle] Make blank lines in typing stub files optional (E3*) (#10098)
[pylint] Implement singledispatch-method (E1519) (#10140)
[pylint] Implement useless-exception-statement (W0133) (#10176)

Rule changes

[flake8-debugger] Check for use of debugpy and ptvsd debug modules (#10177) (#10194)
[pyupgrade] Generate diagnostic for all valid f-string conversions regardless of line length (UP032) (#10238)
[pep8_naming] Add fixes for N804 and N805 (#10215)

CLI

Colorize the output of ruff format --diff (#10110)
Make --config and --isolated global flags (#10150)
Correctly expand tildes and environment variables in paths passed to --config (#10219)

Configuration

Accept a PEP 440 version specifier for required-version (#10216)
Implement isort's default-section setting (#10149)

Bug fixes

Remove trailing space from CapWords message (#10220)
Respect external codes in file-level exemptions (#10203)
[flake8-raise] Avoid false-positives for parens-on-raise with future.exception() (RSE102) (#10206)
[pylint] Add fix for unary expressions in PLC2801 (#9587)
[ruff] Fix RUF028 not allowing # fmt: skip on match cases (#10178)

`v0.3.0`

Compare Source

This release introduces the new Ruff formatter 2024.2 style and adds a new lint rule to detect invalid formatter suppression comments.

Preview features

[flake8-bandit] Remove suspicious-lxml-import (S410) (#10154)
[pycodestyle] Allow os.environ modifications between imports (E402) (#10066)
[pycodestyle] Don't warn about a single whitespace character before a comma in a tuple (E203) (#10094)

Rule changes

[eradicate] Detect commented out case statements (ERA001) (#10055)
[eradicate] Detect single-line code for try:, except:, etc. (ERA001) (#10057)
[flake8-boolean-trap] Allow boolean positionals in __post_init__ (#10027)
[isort]: Use one blank line after imports in typing stub files (#9971)
[pylint] New Rule dict-iter-missing-items (PLE1141) (#9845)
[pylint] Ignore sys.version and sys.platform (PLR1714) (#10054)
[pyupgrade] Detect literals with unary operators (UP018) (#10060)
[ruff] Expand rule for list(iterable).pop(0) idiom (RUF015) (#10148)

Formatter

This release introduces the Ruff 2024.2 style, stabilizing the following changes:

Prefer splitting the assignment's value over the target or type annotation (#8943)
Remove blank lines before class docstrings (#9154)
Wrap multiple context managers in with parentheses when targeting Python 3.9 or newer (#9222)
Add a blank line after nested classes with a dummy body (...) in typing stub files (#9155)
Reduce vertical spacing for classes and functions with a dummy (...) body (#7440, #9240)
Add a blank line after the module docstring (#8283)
Parenthesize long type hints in assignments (#9210)
Preserve indent for single multiline-string call-expressions (#9673)
Normalize hex escape and unicode escape sequences (#9280)
Format module docstrings (#9725)

CLI

Explicitly disallow extend as part of a --config flag (#10135)
Remove build from the default exclusion list (#10093)
Deprecate ruff <path>, ruff --explain, ruff --clean, and ruff --generate-shell-completion in favor of ruff check <path>, ruff rule, ruff clean, and ruff generate-shell-completion (#10169)
Remove the deprecated CLI option --format from ruff rule and ruff linter (#10170)

Bug fixes

[flake8-bugbear] Avoid adding default initializers to stubs (B006) (#10152)
[flake8-type-checking] Respect runtime-required decorators for function signatures (#10091)
[pycodestyle] Mark fixes overlapping with a multiline string as unsafe (W293) (#10049)
[pydocstyle] Trim whitespace when removing blank lines after section (D413) (#10162)
[pylint] Delete entire statement, including semicolons (PLR0203) (#10074)
[ruff] Avoid f-string false positives in gettext calls (RUF027) (#10118)
Fix ruff crashing on PowerPC systems because of too small page size (#10080)

Performance

Add cold attribute to less likely printer queue branches in the formatter (#10121)
Skip unnecessary string normalization in the formatter (#10116)

Documentation

Remove "Beta" Label from formatter documentation (#10144)
line-length option: fix link to pycodestyle.max-line-length (#10136)

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever MR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This MR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this MR, check this box

This MR has been generated by Renovate Bot.

Edited Mar 13, 2024 by David Drugeon-Hamon

chore(deps): update python dependencies

Release Notes

v1.5.6: Version 1.5.6 - Moderate Security release

What's Changed

v1.5.5: Version 1.5.5

What's Changed

pytest 8.1.1 (2024-03-08)

Features

Improvements

Bug Fixes

Improved Documentation

Trivial/Internal Changes

pytest 8.1.0 (YANKED)

pytest 8.1.0 (YANKED)

Features

Improvements

Bug Fixes

Improved Documentation

Trivial/Internal Changes

Bug Fixes

Bug Fixes

Bug Fixes

Preview features

Rule changes

Bug fixes

Preview features

Rule changes

CLI

Configuration

Bug fixes

Preview features

Rule changes

Formatter

CLI

Bug fixes

Performance

Documentation

Configuration

Merge request reports

`v1.5.6`: Version 1.5.6 - Moderate Security release

`v1.5.5`: Version 1.5.5