Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump the python-dependencies group with 3 updates #1124

Merged
merged 1 commit into from
Mar 4, 2024

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Mar 4, 2024

Bumps the python-dependencies group with 3 updates: django, redis and python-dateutil.

Updates django from 5.0.2 to 5.0.3

Commits
  • 4b64d72 [5.0.x] Bumped version for 5.0.3 release.
  • 3394fc6 [5.0.x] Fixed CVE-2024-27351 -- Prevented potential ReDoS in Truncator.words().
  • 80761c3 [5.0.x] Fixed #35198 -- Fixed facet filters crash on querysets with no primar...
  • 24de811 [5.0.x] Fixed typo in docs/ref/contrib/admin/index.txt.
  • bf7fedc [5.0.x] Removed #django-geo IRC channel in docs.
  • a8de04f [5.0.x] Refs #34964 -- Doc'd that Q expression order is preserved.
  • b1f2833 [5.0.x] Added release date for 5.0.3, 4.2.11, and 3.2.25.
  • 5d9be66 [5.0.x] Removed distracting note from tutorial 4.
  • 69e5b13 [5.0.x] Fixed #35238 -- Fixed database serialization crash when base managers...
  • e72fdc8 [5.0.x] Fixed #35153 -- Added note about locale name notation to FORMAT_MODUL...
  • Additional commits viewable in compare view

Updates redis from 5.0.1 to 5.0.2

Release notes

Sourced from redis's releases.

5.0.2

Changes

🚀 New Features

  • Allow to control the minimum SSL version (#3127)
  • Add modules support to async RedisCluster (#3115)
  • Adding lock_name to LockError (#3023)
  • Add GEOSHAPE field type for index creation of RediSearch (#2957)

🐛 Bug Fixes

  • Fix retry logic for pubsub and pipeline (#3134)
  • Ignore TypeError on disconnect (within multiprocess) (#3149)
  • Release already acquired connections on ClusterPipeline, when get_connection raises an exception (#3133)
  • Fix possible pipeline connections leak (#3104)
  • Return a copy of the response from cache (#3106)
  • Fix: HSET unexpectedly mutates the list passed to items (#3103)
  • Fix acl_genpass with bits (#3062)
  • Allow the parsing of the asking command to forward original options (#3012)
  • Fix parsing of FT.PROFILE result (#3063)
  • Use disable_decoding in async read_response with hiredis parser. (#3042)
  • Fix return types in json commands (#3071)
  • Fix Specifying Target Nodes broken hyperlink (#3072)

🧰 Maintenance

  • Fix incorrect asserts in test and ensure connections are closed (#3004)
  • Revert stale issue version update (#3142)
  • Docs: Add timeout parameter for get_message example (#3129)
  • Bump codecov/codecov-action from 3 to 4 (#3131)
  • Bump actions/stale from 3 to 9 (#3132)
  • Fix grammer in BlockingConnectionPool class documentation (#3120)
  • Updating async-timeout to 4.0.3 (#3109)
  • Fix type hint of arbitrary argument lists (#2908)
  • Fix JSON.OBJLEN type hint (#2966)
  • Fix HDEL type hint (#3029)
  • Docs: organize cluster mode part of lua scripting (#3073)
  • Update reported version deprecation in asyncio.client (#2968)
  • Make the connection callback methods public again, add documentation (#2980)
  • Update repr of important classes with module name and recommended "< … (#3001)
  • Typo in advanced features documentation (#3019)
  • Fix typos in documentation (#3016
  • Add "sum" to DUPLICATE_POLICY documentation of TS.CREATE, TS.ADD and TS.ALTER (#3027)
  • Fixed typo in ocsp.py (#3022)
  • Creating CODEOWNERS for documentation (#2993)

Contributors

We'd like to thank all the contributors who worked on this release!

... (truncated)

Commits

Updates python-dateutil from 2.8.2 to 2.9.0.post0

Release notes

Sourced from python-dateutil's releases.

2.9.0.post0

Version 2.9.0.post0 (2024-03-01)

Bugfixes

  • Pinned setuptools_scm to <8, which should make the generated _version.py file compatible with all supported versions of Python.

2.9.0

Version 2.9.0 (2024-02-29)

Data updates

  • Updated tzdata version to 2024a. (gh pr #1342)

Features

  • Made all dateutil submodules lazily imported using PEP 562. On Python 3.7+, things like import dateutil; dateutil.tz.gettz("America/New_York") will now work without explicitly importing dateutil.tz, with the import occurring behind the scenes on first use. The old behavior remains on Python 3.6 and earlier. Fixed by Orson Adams. (gh issue #771, gh pr #1007)

Bugfixes

  • Removed a call to datetime.utcfromtimestamp, which is deprecated as of Python 3.12. Reported by Hugo van Kemenade (gh pr #1284), fixed by Thomas Grainger (gh pr #1285).

Documentation changes

  • Added note into docs and tests where relativedelta would return last day of the month only if the same day on a different month resolves to a date that doesn't exist. Reported by @​hawkEye-01 (gh issue #1167). Fixed by @​Mifrill (gh pr #1168)
Changelog

Sourced from python-dateutil's changelog.

Version 2.9.0.post0 (2024-03-01)

Bugfixes

  • Pinned setuptools_scm to <8, which should make the generated _version.py file compatible with all supported versions of Python.

Version 2.9.0 (2024-02-29)

Data updates

  • Updated tzdata version to 2024a. (gh pr #1342)

Features

  • Made all dateutil submodules lazily imported using PEP 562 <https://www.python.org/dev/peps/pep-0562/>_. On Python 3.7+, things like import dateutil; dateutil.tz.gettz("America/New_York") will now work without explicitly importing dateutil.tz, with the import occurring behind the scenes on first use. The old behavior remains on Python 3.6 and earlier. Fixed by Orson Adams. (gh issue #771, gh pr #1007)

Bugfixes

  • Removed a call to datetime.utcfromtimestamp, which is deprecated as of Python 3.12. Reported by Hugo van Kemenade (gh pr #1284), fixed by Thomas Grainger (gh pr #1285).

Documentation changes

  • Added note into docs and tests where relativedelta would return last day of the month only if the same day on a different month resolves to a date that doesn't exist. Reported by @​hawkEye-01 (gh issue #1167). Fixed by @​Mifrill (gh pr #1168)
Commits
  • 1ae8077 Merge pull request #1346 from pganssle/release_2.9.0.post0
  • ee6de9d Update news to prepare for release
  • 9780d32 Pin setuptools_scm to <8
  • db9d018 Merge pull request #1343 from pganssle/release_2.9.0
  • 423ca2f Run updatezinfo before build
  • edd3fd4 Update NEWS file
  • fe02d02 Run towncrier with Python 3.11
  • 9c7524a Fix MANIFEST.in pattern
  • 6de58f5 Update classifiers to include Python 3.12
  • 8fe0cab Merge pull request #1342 from pganssle/update_zoneinfo
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the python-dependencies group with 3 updates: [django](https://github.com/django/django), [redis](https://github.com/redis/redis-py) and [python-dateutil](https://github.com/dateutil/dateutil).


Updates `django` from 5.0.2 to 5.0.3
- [Commits](django/django@5.0.2...5.0.3)

Updates `redis` from 5.0.1 to 5.0.2
- [Release notes](https://github.com/redis/redis-py/releases)
- [Changelog](https://github.com/redis/redis-py/blob/master/CHANGES)
- [Commits](redis/redis-py@v5.0.1...v5.0.2)

Updates `python-dateutil` from 2.8.2 to 2.9.0.post0
- [Release notes](https://github.com/dateutil/dateutil/releases)
- [Changelog](https://github.com/dateutil/dateutil/blob/master/NEWS)
- [Commits](dateutil/dateutil@2.8.2...2.9.0.post0)

---
updated-dependencies:
- dependency-name: django
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: redis
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: python-dateutil
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Updates a dependency python Updates python code (for bots) labels Mar 4, 2024
@github-actions github-actions bot enabled auto-merge (rebase) March 4, 2024 16:50
@github-actions github-actions bot merged commit bc40ba0 into main Mar 4, 2024
4 checks passed
@github-actions github-actions bot deleted the dependabot-pip-python-dependencies-d848dead62 branch March 4, 2024 16:59
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Updates a dependency python Updates python code (for bots)
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants