Bump the pip group across 2 directories with 5 updates #1542
+128
−140
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
![dependabot[bot]](https://avatars.githubusercontent.com/in/29110?s=60&v=4){kind=small}
Bumps the pip group with 4 updates in the / directory: [certifi](https://github.com/certifi/python-certifi), [idna](https://github.com/kjd/idna), [numpy](https://github.com/numpy/numpy) and [zipp](https://github.com/jaraco/zipp). Bumps the pip group with 4 updates in the /turbinia/api/cli directory: [urllib3](https://github.com/urllib3/urllib3), [certifi](https://github.com/certifi/python-certifi), [idna](https://github.com/kjd/idna) and [numpy](https://github.com/numpy/numpy). Updates `certifi` from 2024.7.4 to 2024.8.30 - [Commits](certifi/python-certifi@2024.07.04...2024.08.30) Updates `idna` from 3.7 to 3.8 - [Release notes](https://github.com/kjd/idna/releases) - [Changelog](https://github.com/kjd/idna/blob/master/HISTORY.rst) - [Commits](kjd/idna@v3.7...v3.8) Updates `numpy` from 2.1.0 to 2.1.1 - [Release notes](https://github.com/numpy/numpy/releases) - [Changelog](https://github.com/numpy/numpy/blob/main/doc/RELEASE_WALKTHROUGH.rst) - [Commits](numpy/numpy@v2.1.0...v2.1.1) Updates `zipp` from 3.20.0 to 3.20.1 - [Release notes](https://github.com/jaraco/zipp/releases) - [Changelog](https://github.com/jaraco/zipp/blob/main/NEWS.rst) - [Commits](jaraco/zipp@v3.20.0...v3.20.1) Updates `urllib3` from 1.26.19 to 1.26.20 - [Release notes](https://github.com/urllib3/urllib3/releases) - [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst) - [Commits](urllib3/urllib3@1.26.19...1.26.20) Updates `certifi` from 2024.7.4 to 2024.8.30 - [Commits](certifi/python-certifi@2024.07.04...2024.08.30) Updates `idna` from 3.7 to 3.8 - [Release notes](https://github.com/kjd/idna/releases) - [Changelog](https://github.com/kjd/idna/blob/master/HISTORY.rst) - [Commits](kjd/idna@v3.7...v3.8) Updates `numpy` from 2.0.1 to 2.0.2 - [Release notes](https://github.com/numpy/numpy/releases) - [Changelog](https://github.com/numpy/numpy/blob/main/doc/RELEASE_WALKTHROUGH.rst) - [Commits](numpy/numpy@v2.1.0...v2.1.1) --- updated-dependencies: - dependency-name: certifi dependency-type: indirect dependency-group: pip - dependency-name: idna dependency-type: indirect dependency-group: pip - dependency-name: numpy dependency-type: indirect dependency-group: pip - dependency-name: zipp dependency-type: indirect dependency-group: pip - dependency-name: urllib3 dependency-type: indirect dependency-group: pip - dependency-name: certifi dependency-type: indirect dependency-group: pip - dependency-name: idna dependency-type: indirect dependency-group: pip - dependency-name: numpy dependency-type: indirect dependency-group: pip ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
bot
added
dependencies
aarontp
approved these changes
Sep 4, 2024
jleaniz
pushed a commit
to jleaniz/turbinia
that referenced
this pull request
Sep 18, 2024
Bumps the pip group with 4 updates in the / directory: [certifi](https://github.com/certifi/python-certifi), [idna](https://github.com/kjd/idna), [numpy](https://github.com/numpy/numpy) and [zipp](https://github.com/jaraco/zipp). Bumps the pip group with 4 updates in the /turbinia/api/cli directory: [urllib3](https://github.com/urllib3/urllib3), [certifi](https://github.com/certifi/python-certifi), [idna](https://github.com/kjd/idna) and [numpy](https://github.com/numpy/numpy). Updates `certifi` from 2024.7.4 to 2024.8.30 - [Commits](certifi/python-certifi@2024.07.04...2024.08.30) Updates `idna` from 3.7 to 3.8 - [Release notes](https://github.com/kjd/idna/releases) - [Changelog](https://github.com/kjd/idna/blob/master/HISTORY.rst) - [Commits](kjd/idna@v3.7...v3.8) Updates `numpy` from 2.1.0 to 2.1.1 - [Release notes](https://github.com/numpy/numpy/releases) - [Changelog](https://github.com/numpy/numpy/blob/main/doc/RELEASE_WALKTHROUGH.rst) - [Commits](numpy/numpy@v2.1.0...v2.1.1) Updates `zipp` from 3.20.0 to 3.20.1 - [Release notes](https://github.com/jaraco/zipp/releases) - [Changelog](https://github.com/jaraco/zipp/blob/main/NEWS.rst) - [Commits](jaraco/zipp@v3.20.0...v3.20.1) Updates `urllib3` from 1.26.19 to 1.26.20 - [Release notes](https://github.com/urllib3/urllib3/releases) - [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst) - [Commits](urllib3/urllib3@1.26.19...1.26.20) Updates `certifi` from 2024.7.4 to 2024.8.30 - [Commits](certifi/python-certifi@2024.07.04...2024.08.30) Updates `idna` from 3.7 to 3.8 - [Release notes](https://github.com/kjd/idna/releases) - [Changelog](https://github.com/kjd/idna/blob/master/HISTORY.rst) - [Commits](kjd/idna@v3.7...v3.8) Updates `numpy` from 2.0.1 to 2.0.2 - [Release notes](https://github.com/numpy/numpy/releases) - [Changelog](https://github.com/numpy/numpy/blob/main/doc/RELEASE_WALKTHROUGH.rst) - [Commits](numpy/numpy@v2.1.0...v2.1.1) --- updated-dependencies: - dependency-name: certifi dependency-type: indirect dependency-group: pip - dependency-name: idna dependency-type: indirect dependency-group: pip - dependency-name: numpy dependency-type: indirect dependency-group: pip - dependency-name: zipp dependency-type: indirect dependency-group: pip - dependency-name: urllib3 dependency-type: indirect dependency-group: pip - dependency-name: certifi dependency-type: indirect dependency-group: pip - dependency-name: idna dependency-type: indirect dependency-group: pip - dependency-name: numpy dependency-type: indirect dependency-group: pip ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Bumps the pip group with 4 updates in the / directory: certifi, idna, numpy and zipp.
Bumps the pip group with 4 updates in the /turbinia/api/cli directory: urllib3, certifi, idna and numpy.
Updates
certififrom 2024.7.4 to 2024.8.30Commits
325c2fd2024.08.30 (#304)d66bf5fBump actions/upload-artifact from 4.3.5 to 4.3.6 (#302)2150f23Bump actions/upload-artifact from 4.3.4 to 4.3.5 (#301)fc9b771Bump actions/setup-python from 5.1.0 to 5.1.1 (#300)965b239Bump actions/download-artifact from 4.1.7 to 4.1.8 (#297)c1f50ccBump actions/upload-artifact from 4.3.3 to 4.3.4 (#296)Updates
idnafrom 3.7 to 3.8Release notes
Sourced from idna's releases.
Changelog
Sourced from idna's changelog.
Commits
784c6f4Release v3.828c7c9eTypo fixa2b41c3Pin remainder of Github Actions flagged in code scanning1f613c5More Github Action dependency pinninga87e2b6Update OSSF scorecard to latest version12d4dd1Merge pull request #182 from kjd/github-pypi-actionse1a1541Pin Github Actions dependenciesc109d3aMerge branch 'master' into github-pypi-actionsf8a8de4Do not try to build/send packages to TestPyPI for now613bddeUpdate regexp to move global flag to start of expressionUpdates
numpyfrom 2.1.0 to 2.1.1Release notes
Sourced from numpy's releases.
... (truncated)
Commits
48606abMerge pull request #27328 from charris/prepare-2.1.1a7cb4c4REL: Prepare for the NumPy 2.1.1 release [wheel build]884c92bMerge pull request #27303 from charris/backport-27284ca7f5c1Merge pull request #27304 from charris/backport-270492a49507BUG: f2py: better handle filtering of public/private subroutinesd4306ddTST: Add regression test for gh-26920db9668dBLD: cp311- macosx_arm64 wheels [wheel build]c6ff254Merge pull request #27287 from charris/post-2.0.2-release-update326bc17MAINT: Update main after the 2.0.2 release8164b7cMerge pull request #27278 from charris/backport-27275Updates
zippfrom 3.20.0 to 3.20.1Changelog
Sourced from zipp's changelog.
Commits
c23e549Finalizec2b9015Merge pull request #124 from jaraco/bugfix/gh-123270-supported-names774a3acAdd TODO to consolidate this behavior in CPython.cc61e61Prefer simpler path.rstrip to consolidate checks for empty or only paths.bec712fMark unused code as uncovered.fde82dcAdd news fragment.a421f7eInvent DirtyZipInfo to create an unsanitized zipfile with backslashes.0a3a7b4Refine expectation that paths with leading slashes are simply not visible.f89b93fAddress infinite loop when zipfile begins with more than one leading slash.3cb5609Removed SanitizedNames.Updates
urllib3from 1.26.19 to 1.26.20Release notes
Sourced from urllib3's releases.
Changelog
Sourced from urllib3's changelog.
Commits
6f2ad7cRelease 1.26.207f925b0Backport changes to the publish workflow3d9b2d3Replace deprecated dash-separated setuptools entries in setup.cfg (#3461)e9ac9bcUpgrade actions (#3437)0b42b01Do not limit runs with 3.13 to Ubuntud135b54Backport a part of 5d93c9c6c01efc469200044027c21c6e661f2a998c13ec8Backporttest_eintr_zero_timeoutfixdf09e8cMove verbosity flag to noxfileac96f20Testtest_requesting_large_resources_via_sslseparately3f1806cTry using same PyPy 3.9 version as in main to fix timeoutsUpdates
certififrom 2024.7.4 to 2024.8.30Commits
325c2fd2024.08.30 (#304)d66bf5fBump actions/upload-artifact from 4.3.5 to 4.3.6 (#302)2150f23Bump actions/upload-artifact from 4.3.4 to 4.3.5 (#301)fc9b771Bump actions/setup-python from 5.1.0 to 5.1.1 (#300)965b239Bump actions/download-artifact from 4.1.7 to 4.1.8 (#297)c1f50ccBump actions/upload-artifact from 4.3.3 to 4.3.4 (#296)Updates
idnafrom 3.7 to 3.8Release notes
Sourced from idna's releases.
Changelog
Sourced from idna's changelog.
Commits
784c6f4Release v3.828c7c9eTypo fixa2b41c3Pin remainder of Github Actions flagged in code scanning1f613c5More Github Action dependency pinninga87e2b6Update OSSF scorecard to latest version12d4dd1Merge pull request #182 from kjd/github-pypi-actionse1a1541Pin Github Actions dependenciesc109d3aMerge branch 'master' into github-pypi-actionsf8a8de4Do not try to build/send packages to TestPyPI for now613bddeUpdate regexp to move global flag to start of expressionUpdates
numpyfrom 2.0.1 to 2.0.2Release notes
Sourced from numpy's releases.
... (truncated)
Commits
48606abMerge pull request #27328 from charris/prepare-2.1.1a7cb4c4REL: Prepare for the NumPy 2.1.1 release [wheel build]884c92bMerge pull request #27303 from charris/backport-27284ca7f5c1Merge pull request #27304 from charris/backport-270492a49507BUG: f2py: better handle filtering of public/private subroutinesd4306ddTST: Add regression test for gh-26920db9668dBLD: cp311- macosx_arm64 wheels [wheel build]c6ff254Merge pull request #27287 from charris/post-2.0.2-release-update326bc17MAINT: Update main after the 2.0.2 release8164b7cMerge pull request #27278 from charris/backport-27275Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditionsYou can disable automated security fix PRs for this repo from the Security Alerts page.