Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore(deps): bump bottle from 0.12.25 to 0.13.1 #94

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Sep 9, 2024

Bumps bottle from 0.12.25 to 0.13.1.

Release notes

Sourced from bottle's releases.

0.13.1

Full Changelog: bottlepy/bottle@0.13.0...0.13.1

0.13.0

Release 0.13

Warning, this is release is not fully backwards compatible as it drops support for end-of-life python versions. See https://bottlepy.org/docs/dev/changelog.html#release-0-13 for noteworthy changes and bottlepy/bottle@0.12.25...0.13.0 for a complete list.

Changelog

Sourced from bottle's changelog.

.. highlight:: python .. currentmodule:: bottle

============= Release Notes

Release 0.14 (in development)

.. rubric:: Removed APIs (deprecated since 0.13)

  • Removed the RouteReset exception and associated logic.

Release 0.13

.. warning:: This release contains breaking changers, please read the notes below

.. rubric:: Dropped support for Python versions that reached their end-of-life.

Bottle up to 0.12 supported an absurd range of Python versions (2.5 to 3.12) and keeping support for Python versions as ancient as 2.5 required a ton of workarounds and compromises, but served no real purpose. If you need support for older Python versions, you can stay on bottle 0.12. The updated list of tested and supported python releases is as follows:

  • Python 2 >= 2.7.3
  • Python 3 >= 3.8

Support for Python 2.5 was marked as deprecated since 0.12. We decided to go a step further and also remove support for 2.6 and 3.1 to 3.7 even if it was never deprecated explicitly in bottle. This means that this release is not backwards compatible in Python <2.7.3 or <3.8 environments. Maintainers for distributions or systems that still use these old python versions should not update to Bottle 0.13 and stick with 0.12 instead.

.. rubric:: Stabilized APIs

  • The documented API of the :class:ConfigDict class is now considered stable and ready to use.

.. rubric:: Deprecated APIs

  • The old route syntax (/hello/:name) is deprecated in favor of the more readable and flexible /hello/<name> syntax.
  • :meth:Bottle.mount now recognizes Bottle instance and will warn about parameters that are not compatible with the new mounting behavior. The old behavior (mount applications as WSGI callable) still works and is used as a fallback automatically.
  • The undocumented :func:local_property helper is now deprecated.
  • The server adapter for google app engine is not useful anymore and marked as deprecated.
  • Bottle uses pickle to store arbitrary objects into signed cookies. This is safe, as long as the signature key remains a secret. Unfortunately, people tend to push code with signature keys to github all the time, so we decided to remove pickle-support from bottle. Signed cookies will now issue a deprecation warning if the value is not a string, and support for non-string values will be removed in 0.14. The global :func:cookie_encode, :func:cookie_decode and :func:is_cookie_encoded are now also deprecated. If you are using this feature, think about using json to serialize your objects before storing them into cookies, or switch to a session system that stores data server-side instead of client-side.

.. rubric:: Removed APIs (deprecated since 0.12)

... (truncated)

Commits
  • a52ac34 Release of 0.13.1
  • d6c47ab fix: Bottle.setattr breaks data descriptors
  • 8e3a76f Added DeprecationWarning warning for Python 2
  • eb2cd2b Release of 0.13.0
  • 157d844 test: Fixed deprecation warning in mako tests
  • f16a6d0 docs: Removed more outdated links
  • dee9a17 docs: Fix broken links
  • ee61a68 Fix #1350: Serve compressed files as is in static_file()
  • 90d749b fix: Avoid ImportWarning when using _ImportRedirect
  • 0213798 docs: Fixed lots of sphinx warnings
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [bottle](https://github.com/bottlepy/bottle) from 0.12.25 to 0.13.1.
- [Release notes](https://github.com/bottlepy/bottle/releases)
- [Changelog](https://github.com/bottlepy/bottle/blob/master/docs/changelog.rst)
- [Commits](bottlepy/bottle@0.12.25...0.13.1)

---
updated-dependencies:
- dependency-name: bottle
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Sep 9, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file python Pull requests that update Python code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants