Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore(deps): bump the all group with 3 updates #140

Merged
merged 1 commit into from
Mar 18, 2024

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Mar 18, 2024

Bumps the all group with 3 updates: pydantic, black and mkdocs-material.

Updates pydantic from 2.6.3 to 2.6.4

Release notes

Sourced from pydantic's releases.

v2.6.4 (2024-03-12)

What's Changed

Fixes

Full Changelog: pydantic/pydantic@v2.6.3...v2.6.4/

Changelog

Sourced from pydantic's changelog.

v2.6.4 (2024-03-12)

GitHub release

What's Changed

Fixes

Commits

Updates black from 24.2.0 to 24.3.0

Release notes

Sourced from black's releases.

24.3.0

Highlights

This release is a milestone: it fixes Black's first CVE security vulnerability. If you run Black on untrusted input, or if you habitually put thousands of leading tab characters in your docstrings, you are strongly encouraged to upgrade immediately to fix CVE-2024-21503.

This release also fixes a bug in Black's AST safety check that allowed Black to make incorrect changes to certain f-strings that are valid in Python 3.12 and higher.

Stable style

  • Don't move comments along with delimiters, which could cause crashes (#4248)
  • Strengthen AST safety check to catch more unsafe changes to strings. Previous versions of Black would incorrectly format the contents of certain unusual f-strings containing nested strings with the same quote type. Now, Black will crash on such strings until support for the new f-string syntax is implemented. (#4270)
  • Fix a bug where line-ranges exceeding the last code line would not work as expected (#4273)

Performance

  • Fix catastrophic performance on docstrings that contain large numbers of leading tab characters. This fixes CVE-2024-21503. (#4278)

Documentation

  • Note what happens when --check is used with --quiet (#4236)
Changelog

Sourced from black's changelog.

24.3.0

Highlights

This release is a milestone: it fixes Black's first CVE security vulnerability. If you run Black on untrusted input, or if you habitually put thousands of leading tab characters in your docstrings, you are strongly encouraged to upgrade immediately to fix CVE-2024-21503.

This release also fixes a bug in Black's AST safety check that allowed Black to make incorrect changes to certain f-strings that are valid in Python 3.12 and higher.

Stable style

  • Don't move comments along with delimiters, which could cause crashes (#4248)
  • Strengthen AST safety check to catch more unsafe changes to strings. Previous versions of Black would incorrectly format the contents of certain unusual f-strings containing nested strings with the same quote type. Now, Black will crash on such strings until support for the new f-string syntax is implemented. (#4270)
  • Fix a bug where line-ranges exceeding the last code line would not work as expected (#4273)

Performance

  • Fix catastrophic performance on docstrings that contain large numbers of leading tab characters. This fixes CVE-2024-21503. (#4278)

Documentation

  • Note what happens when --check is used with --quiet (#4236)
Commits

Updates mkdocs-material from 9.5.13 to 9.5.14

Release notes

Sourced from mkdocs-material's releases.

mkdocs-material-9.5.14

  • Added support for hiding versions from selector when using mike
  • Added init system to improve signal handling in Docker image
  • Fixed edge cases in exclusion logic of info plugin
  • Fixed inability to reset pipeline in search plugin
  • Fixed syntax error in Finnish translations
  • Fixed #6917: UTF-8 encoding problems in blog plugin on Windows
  • Fixed #6889: Transparent iframes get background color

Thanks to @​kamilkrzyskow, @​yubiuser and @​todeveni for their contributions

Changelog

Sourced from mkdocs-material's changelog.

mkdocs-material-9.5.14 (2024-03-18)

  • Added support for hiding versions from selector when using mike
  • Added init system to improve signal handling in Docker image
  • Fixed edge cases in exclusion logic of info plugin
  • Fixed inability to reset pipeline in search plugin
  • Fixed syntax error in Finnish translations
  • Fixed #6917: UTF-8 encoding problems in blog plugin on Windows
  • Fixed #6889: Transparent iframes get background color

mkdocs-material-9.5.13+insiders-4.53.1 (2024-03-06)

  • Fixed #6877: Projects plugin computes incorrect path to assets
  • Fixed #6869: Blog plugin should emit warning on invalid related link

mkdocs-material-9.5.13 (2024-03-06)

  • Updated Slovak translations
  • Improved info plugin interop with projects plugin
  • Improved info plugin inclusion/exclusion logic
  • Fixed info plugin not gathering files recursively
  • Fixed #6750: Ensure info plugin packs up all necessary files

mkdocs-material-9.5.12 (2024-02-29)

  • Fixed #6846: Some meta tags removed on instant navigation (9.4.2 regression)
  • Fixed #6823: KaTex not rendering on instant navigation (9.5.5 regression)
  • Fixed #6821: Privacy plugin doesn't handle URLs with encoded characters

mkdocs-material-9.5.11+insiders-4.53.0 (2024-02-24)

  • Added support for automatic instant previews
  • Added support for pinned blog posts

mkdocs-material-9.5.11 (2024-02-19)

  • Updated Finnish translation

mkdocs-material-9.5.10+insiders-4.52.3 (2024-02-21)

  • Fixed resolution of URLs in instant previews
  • Fixed instant previews not mounting for same-page links

mkdocs-material-9.5.10 (2024-02-19)

  • Updated Bahasa Malaysia translations
  • Fixed #6783: Hide continue reading link for blog posts without separators
  • Fixed #6779: Incorrect positioning of integrated table of contents

mkdocs-material-9.5.9 (2024-02-10)

... (truncated)

Commits
  • cc78979 Updated Insiders changelog
  • c51eb2f Prepare 9.5.14 release
  • 3311a61 Updated dependencies
  • 022f14c Fixed UTF-8 with BOM encoding support
  • 2f1b2e9 Added support for hiding versions from selector
  • babc995 Formatting
  • 7e27f4d Merge branch 'master' of github.com:squidfunk/mkdocs-material
  • dc97a56 Updated dependencies
  • 2d39824 Fixed info plugin's exclusion logic (#6874)
  • f325238 Fixed inability to reset search pipeline
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the all group with 3 updates: [pydantic](https://github.com/pydantic/pydantic), [black](https://github.com/psf/black) and [mkdocs-material](https://github.com/squidfunk/mkdocs-material).


Updates `pydantic` from 2.6.3 to 2.6.4
- [Release notes](https://github.com/pydantic/pydantic/releases)
- [Changelog](https://github.com/pydantic/pydantic/blob/main/HISTORY.md)
- [Commits](pydantic/pydantic@v2.6.3...v2.6.4)

Updates `black` from 24.2.0 to 24.3.0
- [Release notes](https://github.com/psf/black/releases)
- [Changelog](https://github.com/psf/black/blob/main/CHANGES.md)
- [Commits](psf/black@24.2.0...24.3.0)

Updates `mkdocs-material` from 9.5.13 to 9.5.14
- [Release notes](https://github.com/squidfunk/mkdocs-material/releases)
- [Changelog](https://github.com/squidfunk/mkdocs-material/blob/master/CHANGELOG)
- [Commits](squidfunk/mkdocs-material@9.5.13...9.5.14)

---
updated-dependencies:
- dependency-name: pydantic
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: black
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: mkdocs-material
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added the dependencies Dependabot PRs label Mar 18, 2024
Copy link

codecov bot commented Mar 18, 2024

Codecov Report

Merging #140 (d8b973e) into master (1173df8) will not change coverage.
The diff coverage is n/a.

Additional details and impacted files
@@           Coverage Diff           @@
##           master     #140   +/-   ##
=======================================
  Coverage   94.27%   94.27%           
=======================================
  Files          19       19           
  Lines         437      437           
=======================================
  Hits          412      412           
  Misses         25       25           

@tomasvotava tomasvotava merged commit 2f6390f into master Mar 18, 2024
24 checks passed
@tomasvotava tomasvotava deleted the dependabot/pip/all-2457c543d3 branch March 18, 2024 15:22
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Dependabot PRs
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant