⬆️(dependencies) update python dependencies by renovate[bot] · Pull Request #260 · openfun/ashley

renovate · 2022-05-23T01:25:00Z

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Confidence
Django (changelog)	`>=3.2.4,<4` → `>=6.0.3,<7`
bandit (source, changelog)	`==1.7.4` → `==1.9.4`
black (changelog)	`==22.3.0` → `==26.1.0`
boto3	`==1.22.10` → `==1.42.62`
cssselect	`==1.1.0` → `==1.4.0`
django-configurations (source)	`==2.3.2` → `==2.5.1`
django-haystack	`==3.2.1` → `==3.3.0`
django-lti-toolbox	`==1.0.1` → `==2.0.0`
django-machina	`==1.1.6` → `==1.3.1`
django-storages (changelog)	`==1.12.3` → `==1.14.6`
djangorestframework (source, changelog)	`==3.13.1` → `==3.16.1`
dockerflow	`==2022.1.0` → `==2026.3.4`
draftjs_exporter (changelog)	`==5.0.0` → `==5.2.0`
factory_boy	`==3.2.1` → `==3.3.3`
flake8 (changelog)	`==4.0.1` → `==7.3.0`
gunicorn (changelog)	`==20.1.0` → `==25.1.0`
ipdb	`==0.13.9` → `==0.13.13`
ipython	`==8.3.0` → `==9.11.0`
isort (changelog)	`==5.10.1` → `==8.0.1`
logging-ldp	`==0.0.6` → `==0.0.7`
lxml (source, changelog)	`==4.8.0` → `==6.0.2`
mypy (changelog)	`==0.950` → `==1.19.1`
psycopg2-binary (source, changelog)	`==2.9.3` → `==2.9.11`
pyfakefs (changelog)	`==4.5.6` → `==6.1.4`
pylint (changelog)	`==2.13.8` → `==4.0.5`
pylint-django	`==2.5.3` → `==2.7.0`
pytest (changelog)	`==7.1.2` → `==9.0.2`
pytest-cov (changelog)	`==3.0.0` → `==7.0.0`
pytest-django (changelog)	`==4.5.2` → `==4.12.0`
sentry-sdk (changelog)	`==1.5.11` → `==2.54.0`
twine	`==4.0.0` → `==6.2.0`

Release Notes

django/django (Django)

PyCQA/bandit (bandit)

`v1.9.4`

Compare Source

What's Changed

chore: fixed some typos in comments by @jakob1379 in #1351
Bump docker/login-action from 3.6.0 to 3.7.0 by @dependabot[bot] in #1353
Bump docker/build-push-action from 6.18.0 to 6.19.2 by @dependabot[bot] in #1357
Fix B613 crash when reading from stdin by @worksbyfriday in #1361
Include filename in nosec 'no failed test' warning by @worksbyfriday in #1363
Fix B615 false positive when revision is set via variable by @worksbyfriday in #1358
Lower version guard in check_ast_node to Python 3.12 by @rcgray in #1355
Fix B106 reporting wrong line number on multiline function calls by @worksbyfriday in #1360

New Contributors

@jakob1379 made their first contribution in #1351
@worksbyfriday made their first contribution in #1361
@rcgray made their first contribution in #1355

Full Changelog: PyCQA/bandit@1.9.3...1.9.4

`v1.9.3`

Compare Source

What's Changed

Bump actions/checkout from 5 to 6 by @dependabot[bot] in #1334
[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci[bot] in #1335
Fix B608 to detect VALUES( without space by @kfess in #1337
Add check for hardcoded passwords in dicts. by @alanverresen in #1338
[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci[bot] in #1341
Update tox tests for Python 3.10 by @willschlitzer in #1346
Bump docker/setup-buildx-action from 3.11.1 to 3.12.0 by @dependabot[bot] in #1347
Limit B614 to torch.load deserializers by @dibussoc in #1348

New Contributors

@kfess made their first contribution in #1337
@alanverresen made their first contribution in #1338
@willschlitzer made their first contribution in #1346
@dibussoc made their first contribution in #1348

Full Changelog: PyCQA/bandit@1.9.2...1.9.3

`v1.9.2`

Compare Source

What's Changed

Argparse Python 3.14 enhancements by @ericwb in #1331
Check whether Constant value is str by @ericwb in #1333

Full Changelog: PyCQA/bandit@1.9.1...1.9.2

`v1.9.1`

Compare Source

What's Changed

More Python version related fixes by @ericwb in #1327

Full Changelog: PyCQA/bandit@1.9.0...1.9.1

`v1.8.6`

Compare Source

What's Changed

Bump sigstore/cosign-installer from 3.8.2 to 3.9.0 by @dependabot in #1279
Bump docker/setup-buildx-action from 3.10.0 to 3.11.1 by @dependabot in #1278
added hint to FreeBSD package in doc/source/integrations.rst by @daniel-mohr in #1282
Bump sigstore/cosign-installer from 3.9.0 to 3.9.1 by @dependabot in #1284
Huggingface revision pinning by @lukehinds in #1281

New Contributors

@daniel-mohr made their first contribution in #1282

Full Changelog: PyCQA/bandit@1.8.5...1.8.6

`v1.8.5`

Compare Source

What's Changed

Fix the rendering of the CI/CD doc by @ericwb in #1274
Fix for publish to PyPI failure by @ericwb in #1273

Full Changelog: PyCQA/bandit@1.8.4...1.8.5

`v1.8.3`

Compare Source

What's Changed

Bump docker/build-push-action from 6.10.0 to 6.11.0 by @dependabot in #1220
Bump docker/build-push-action from 6.11.0 to 6.12.0 by @dependabot in #1221
Bump docker/build-push-action from 6.12.0 to 6.13.0 by @dependabot in #1222
[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci in #1229
Update bug template to include latest released versions by @ericwb in #1218
Add markupsafe.Markup XSS plugin by @Daverball in #1225
Warn not error on an nonexistant test given by @ericwb in #1230
Bump sigstore/cosign-installer from 3.7.0 to 3.8.0 by @dependabot in #1233
Bump docker/setup-buildx-action from 3.8.0 to 3.9.0 by @dependabot in #1234
B107: Skip None values in hardcoded password detection by @lukehinds in #1232
Pytorch fix by @lukehinds in #1231

New Contributors

@Daverball made their first contribution in #1225

Full Changelog: PyCQA/bandit@1.8.2...1.8.3

`v1.8.2`

Compare Source

What's Changed

Revert "Start testing with 3.14 alphas" by @ericwb in #1217

Full Changelog: PyCQA/bandit@1.8.1...1.8.2

`v1.8.1`

Compare Source

What's Changed

Bump docker/build-push-action from 6.9.0 to 6.10.0 by @dependabot in #1209
Update the bug template with latest bandit version by @ericwb in #1208
Add Mercedes-Benz to sponsor list by @ericwb in #1210
Bump docker/setup-buildx-action from 3.7.1 to 3.8.0 by @dependabot in #1211
[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci in #1213
Start testing with 3.14 alphas by @ericwb in #1189
Remove lxml (B320 & B410) from blacklist by @djbrown in #1212
Clarify "getting started" docs by @Flimm in #963

New Contributors

@djbrown made their first contribution in #1212
@Flimm made their first contribution in #963

Full Changelog: PyCQA/bandit@1.8.0...1.8.1

`v1.8.0`

Compare Source

What's Changed

Bump docker/build-push-action from 6.7.0 to 6.9.0 by @dependabot in #1178
Rename doc file to match proper bandit ID by @ericwb in #1183
Removal of Python 3.8 support by @ericwb in #1174
Add more insecure cryptography cipher algorithms by @ericwb in #1185
Bump docker/setup-buildx-action from 3.6.1 to 3.7.1 by @dependabot in #1186
Bump sigstore/cosign-installer from 3.6.0 to 3.7.0 by @dependabot in #1187
[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci in #1162
No need to check httpx client without timeout defined by @ericwb in #1177
[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci in #1191
Mark Python 3.13 as officially supported by @ericwb in #1192
Update project urls with added links by @ericwb in #1193
[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci in #1196
Add a JSON to seek funding from the FLOSS/fund by @ericwb in #1194
Remove Sentry as a sponsor by @ericwb in #1198
Remove more leftover OpenStack references by @ericwb in #1195

Full Changelog: PyCQA/bandit@1.7.10...1.8.0

`v1.7.10`

Compare Source

What's Changed

Bump docker/build-push-action from 5.4.0 to 6.0.0 by @dependabot in #1147
Suggested small refactors in assignments by @ericwb in #1150
Performance improvement in blacklist function by @ericwb in #1148
Add test for usage of FTP_TLS by @ericwb in #1149
New check: B113: TrojanSource - Bidirectional control characters by @Lucas-C in #757
Bump docker/build-push-action from 6.0.0 to 6.1.0 by @dependabot in #1152
feat(plugins): add support for httpx in B113 by @mkniewallner in #1060
Nit: remove unused variable by @ericwb in #1153
Add recent releases to version choice in bug report by @ericwb in #1151
Bump docker/build-push-action from 6.1.0 to 6.2.0 by @dependabot in #1155
Bump docker/build-push-action from 6.2.0 to 6.3.0 by @dependabot in #1157
Bump docker/setup-buildx-action from 3.3.0 to 3.4.0 by @dependabot in #1156
Bump docker/setup-buildx-action from 3.4.0 to 3.5.0 by @dependabot in #1158
Bump docker/login-action from 3.2.0 to 3.3.0 by @dependabot in #1159
Bump docker/build-push-action from 6.3.0 to 6.5.0 by @dependabot in #1160
Bump docker/setup-buildx-action from 3.5.0 to 3.6.1 by @dependabot in #1163
Bump docker/build-push-action from 6.5.0 to 6.6.1 by @dependabot in #1166
Bump sigstore/cosign-installer from 3.5.0 to 3.6.0 by @dependabot in #1165
Bump docker/build-push-action from 6.6.1 to 6.7.0 by @dependabot in #1168
Use consistent file naming of docs by @ericwb in #1170
Pytorch Load / Save Plugin by @lukehinds in #1114

New Contributors

@Lucas-C made their first contribution in #757

Full Changelog: PyCQA/bandit@1.7.9...1.7.10

`v1.7.9`

Compare Source

What's Changed

Bump docker/build-push-action from 5.1.0 to 5.2.0 by @dependabot in #1117
[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci in #1119
New logo for Bandit based on raccoon by @ericwb in #1121
Start testing on Python 3.13 by @ericwb in #1122
Bump docker/build-push-action from 5.2.0 to 5.3.0 by @dependabot in #1123
Bump docker/setup-buildx-action from 3.1.0 to 3.2.0 by @dependabot in #1124
Bump docker/login-action from 3.0.0 to 3.1.0 by @dependabot in #1125
[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci in #1126
[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci in #1127
Bump docker/setup-buildx-action from 3.2.0 to 3.3.0 by @dependabot in #1130
[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci in #1131
Bump sigstore/cosign-installer from 3.4.0 to 3.5.0 by @dependabot in #1132
[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci in #1133
Updates banner logo so it renders well in dark mode by @ericwb in #1134
[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci in #1135
Add a sponsor section to README by @ericwb in #1137
Ensure sarif extra is included as part of doc build by @ericwb in #1139
Bump docker/login-action from 3.1.0 to 3.2.0 by @dependabot in #1142
[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci in #1143
[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci in #1145
Guard against empty call argument list by @ericwb in #1146
Bump docker/build-push-action from 5.3.0 to 5.4.0 by @dependabot in #1144
Support configfile in .bandit file by @bersbersbers in #1052

New Contributors

@pre-commit-ci made their first contribution in #1119
@bersbersbers made their first contribution in #1052

Full Changelog: PyCQA/bandit@1.7.8...1.7.9

`v1.7.8`

Compare Source

What's Changed

Incorrect tag naming in readme by @lukehinds in #1105
Utilize PyPI's trusted publishing by @ericwb in #1107
Bump sigstore/cosign-installer from 3.3.0 to 3.4.0 by @dependabot in #1109
Add 1.7.7 to versions of bug template by @ericwb in #1110
Use datetime to avoid updating copyright year by @ericwb in #1112
filter data is safe for tarfile extractall by @etienneschalk in #1111
Bump docker/setup-buildx-action from 3.0.0 to 3.1.0 by @dependabot in #1115
[B605] Add functions that are vulnerable to shell injection. by @shihai1991 in #1116
Add a SARIF output formatter by @ericwb in #1113

New Contributors

@etienneschalk made their first contribution in #1111
@shihai1991 made their first contribution in #1116

Full Changelog: PyCQA/bandit@1.7.7...1.7.8

`v1.7.7`

Compare Source

What's Changed

Add the new release to bandit versions of bug template by @ericwb in #1075
Bump actions/setup-python from 4 to 5 by @dependabot in #1076
Handle variant in how policy is passed in paramiko by @ericwb in #1078
Flag str.replace as possible sql injection by @costaparas in #1044
defusedxml: Show correct module name by @kajinamit in #1081
Add tidelift to the sponsor funding list by @ericwb in #1089
Create a security policy by @ericwb in #1091
Fix up issues found running Bandit on itself by @ericwb in #1093
Add random.randbytes to blacklist calls by @ericwb in #1096
Prepend ./ for files specified as CLI args by @ericwb in #1094
Rework GitPython dependency to be an extra for bandit-baseline by @ericwb in #1099
Bump actions/dependency-review-action from 3 to 4 by @dependabot in #1101
Introduce Official Bandit Images by @lukehinds in #1088
Remove markdown formatting in reStructuredText formatted README by @ericwb in #1103
Downsize the org:repo name by @lukehinds in #1104

New Contributors

@kajinamit made their first contribution in [#&#8203

Configuration

📅 Schedule: Branch creation - "before 7am on monday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

renovate bot added the dependencies Pull requests that update a dependency file label May 23, 2022

renovate bot force-pushed the renovate/python-dependencies branch 7 times, most recently from 1e91954 to 81d08b3 Compare May 28, 2022 14:06

renovate bot force-pushed the renovate/python-dependencies branch 9 times, most recently from a5341f1 to b26a189 Compare June 7, 2022 19:49

renovate bot force-pushed the renovate/python-dependencies branch 10 times, most recently from ce67b48 to 4112236 Compare June 14, 2022 21:52

renovate bot force-pushed the renovate/python-dependencies branch 3 times, most recently from 0b4a088 to 4bdecd0 Compare June 17, 2022 00:36

renovate bot changed the title ~~⬆️(dependencies): ⬆️(dependencies) update python dependencies~~ ⬆️(dependencies) update python dependencies Jun 28, 2022

renovate bot force-pushed the renovate/python-dependencies branch 7 times, most recently from 0b037fa to e6bc884 Compare July 4, 2022 11:30

renovate bot force-pushed the renovate/python-dependencies branch 6 times, most recently from 255717f to 5ab56cd Compare July 11, 2022 21:46

renovate bot force-pushed the renovate/python-dependencies branch 12 times, most recently from 36e7e0d to 1b37025 Compare July 19, 2022 20:14

renovate bot force-pushed the renovate/python-dependencies branch 3 times, most recently from bf5d511 to d84c45b Compare July 21, 2022 21:19

⬆️(dependencies) update python dependencies

92ecf87

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

⬆️(dependencies) update python dependencies#260

⬆️(dependencies) update python dependencies#260
renovate[bot] wants to merge 1 commit intomasterfrom
renovate/python-dependencies

renovate bot commented May 23, 2022 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

renovate bot commented May 23, 2022 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

What's Changed

What's Changed

New Contributors

What's Changed

What's Changed

New Contributors

What's Changed

What's Changed

New Contributors

What's Changed

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

renovate bot commented May 23, 2022 •

edited

Loading