Bump the pip-minor group across 1 directory with 6 updates

[dependabot]

Bumps the pip-minor group with 6 updates in the / directory:

Package	From	To
flask	3.0.3	3.1.0
werkzeug	3.1.1	3.1.3
cloud-sql-python-connector	1.13.0	1.14.0
pyjwt	2.9.0	2.10.0
sentry-sdk[flask]	2.17.0	2.19.0
ruff	0.7.2	0.8.0

Updates flask from 3.0.3 to 3.1.0

Release notes

Sourced from flask's releases.

3.1.0

This is the Flask 3.1.0 feature release. A feature release may include new features, remove previously deprecated code, add new deprecations, or introduce potentially breaking changes. We encourage everyone to upgrade, and to use a tool such as pip-tools to pin all dependencies and control upgrades. Test with warnings treated as errors to be able to adapt to deprecation warnings early.

PyPI: https://pypi.org/project/Flask/3.1.0/ Changes: https://flask.palletsprojects.com/en/stable/changes/#version-3-1-0 Milestone: https://github.com/pallets/flask/milestone/33?closed=1

• Drop support for Python 3.8. #5623
• Update minimum dependency versions to latest feature releases. Werkzeug >= 3.1, ItsDangerous >= 2.2, Blinker >= 1.9. #5624, #5633
• Provide a configuration option to control automatic option responses. #5496
• Flask.open_resource/open_instance_resource and Blueprint.open_resource take an encoding parameter to use when opening in text mode. It defaults to utf-8. #5504
• Request.max_content_length can be customized per-request instead of only through the MAX_CONTENT_LENGTH config. Added MAX_FORM_MEMORY_SIZE and MAX_FORM_PARTS config. Added documentation about resource limits to the security page. #5625
• Add support for the Partitioned cookie attribute (CHIPS), with the SESSION_COOKIE_PARTITIONED config. #5472
• -e path takes precedence over default .env and .flaskenv files. load_dotenv loads default files in addition to a path unless load_defaults=False is passed. #5628
• Support key rotation with the SECRET_KEY_FALLBACKS config, a list of old secret keys that can still be used for unsigning. Extensions will need to add support. #5621
• Fix how setting host_matching=True or subdomain_matching=False interacts with SERVER_NAME. Setting SERVER_NAME no longer restricts requests to only that domain. #5553
• Request.trusted_hosts is checked during routing, and can be set through the TRUSTED_HOSTS config. #5636

Changelog

Sourced from flask's changelog.

Version 3.1.0

Released 2024-11-13

• Drop support for Python 3.8. :pr:5623
• Update minimum dependency versions to latest feature releases. Werkzeug >= 3.1, ItsDangerous >= 2.2, Blinker >= 1.9. :pr:5624,5633
• Provide a configuration option to control automatic option responses. :pr:5496
• Flask.open_resource/open_instance_resource and Blueprint.open_resource take an encoding parameter to use when opening in text mode. It defaults to utf-8. :issue:5504
• Request.max_content_length can be customized per-request instead of only through the MAX_CONTENT_LENGTH config. Added MAX_FORM_MEMORY_SIZE and MAX_FORM_PARTS config. Added documentation about resource limits to the security page. :issue:5625
• Add support for the Partitioned cookie attribute (CHIPS), with the SESSION_COOKIE_PARTITIONED config. :issue:5472
• -e path takes precedence over default .env and .flaskenv files. load_dotenv loads default files in addition to a path unless load_defaults=False is passed. :issue:5628
• Support key rotation with the SECRET_KEY_FALLBACKS config, a list of old secret keys that can still be used for unsigning. Extensions will need to add support. :issue:5621
• Fix how setting host_matching=True or subdomain_matching=False interacts with SERVER_NAME. Setting SERVER_NAME no longer restricts requests to only that domain. :issue:5553
• Request.trusted_hosts is checked during routing, and can be set through the TRUSTED_HOSTS config. :issue:5636

Commits

• ab81496 release version 3.1.0
• 70602a1 remove test pypi
• 6748a09 update dev dependencies
• 22c48a7 Merge remote-tracking branch 'origin/stable'
• 2eab96a use generic bases for session (#5638)
• f49dbfd use generic bases for session
• 7b21d43 configure and check request.trusted_hosts (#5637)
• 4f7156f configure and check trusted_hosts
• 10bdf61 setting SERVER_NAME does not restrict routing for both subdomain_matching...
• 4995a77 fix subdomain_matching=False behavior
• Additional commits viewable in compare view

Updates werkzeug from 3.1.1 to 3.1.3

Release notes

Sourced from werkzeug's releases.

3.1.3

This is the Werkzeug 3.1.3 fix release, which fixes bugs but does not otherwise change behavior and should not result in breaking changes vs 3.1.0.

PyPI: https://pypi.org/project/Werkzeug/3.1.3/ Changes: https://werkzeug.palletsprojects.com/en/stable/changes/#version-3-1-3 Milestone: https://github.com/pallets/werkzeug/milestone/41?closed=1

• Initial data passed to MultiDict and similar interfaces only accepts list, tuple, or set when passing multiple values. It had been changed to accept any Collection, but this matched types that should be treated as single values, such as bytes. #2994
• When the Host header is not set and Request.host falls back to the WSGI SERVER_NAME value, if that value is an IPv6 address it is wrapped in [] to match the Host header. #2993

3.1.2

This is the Werkzeug 3.1.2 fix release, which fixes bugs but does not otherwise change behavior and should not result in breaking changes vs 3.1.0.

PyPI: https://pypi.org/project/Werkzeug/3.1.2/ Changes: https://werkzeug.palletsprojects.com/en/stable/changes/#version-3-1-2 Milestone: https://github.com/pallets/werkzeug/milestone/40?closed=1

• Improve type annotation for TypeConversionDict.get to allow the type parameter to be a callable. #2988
• Headers does not inherit from MutableMapping, as it is does not exactly match that interface. #2989

Changelog

Sourced from werkzeug's changelog.

Version 3.1.3

Released 2024-11-08

• Initial data passed to MultiDict and similar interfaces only accepts list, tuple, or set when passing multiple values. It had been changed to accept any Collection, but this matched types that should be treated as single values, such as bytes. :issue:2994
• When the Host header is not set and Request.host falls back to the WSGI SERVER_NAME value, if that value is an IPv6 address it is wrapped in [] to match the Host header. :issue:2993

Version 3.1.2

Released 2024-11-04

• Improve type annotation for TypeConversionDict.get to allow the type parameter to be a callable. :issue:2988
• Headers does not inherit from MutableMapping, as it is does not exactly match that interface. :issue:2989

Commits

• 6389612 release version 3.1.3
• ba15683 wrap IPv6 SERVER_NAME in [] (#2997)
• d99f72d wrap IPv6 SERVER_NAME in []
• ea93b54 restrict containers accepted by multi (#2995)
• 598bb1d restrict containers accepted by multi
• 1a1728e start version 3.1.3
• 4fd7073 release version 3.1.2 (#2992)
• 4764684 release version 3.1.2
• 1803db6 Headers is not MutableMapping (#2991)
• ac87bf8 Headers is not MutableMapping
• Additional commits viewable in compare view

Updates cloud-sql-python-connector from 1.13.0 to 1.14.0

Release notes

Sourced from cloud-sql-python-connector's releases.

v1.14.0

1.14.0 (2024-11-20)

Features

• support native asyncpg connection pools (#1182) (eb95a9d)

Changelog

Sourced from cloud-sql-python-connector's changelog.

1.14.0 (2024-11-20)

Features

• support native asyncpg connection pools (#1182) (eb95a9d)

Commits

• d622575 chore(main): release 1.14.0 (#1184)
• 5396642 chore(deps): update dependency aiohttp to v3.11.6 (#1196)
• eb4be82 chore(deps): Update github/codeql-action action to v3.27.4 (#1192)
• aaa1ef3 test: round backoff in exponential backoff tests (#1191)
• e2bba73 chore(deps): update dependency aiohttp to v3.11.5 (#1195)
• b1c2f86 chore(deps): update python-nonmajor (#1187)
• 38d8c38 chore(deps): Update dependencies for github (#1181)
• b591dde build: use multiScm for Kokoro release builds (#1190)
• ef7d8fe refactor: add ConnectionName class (#1186)
• 3b24c10 chore(deps): update dependency pytest-cov to v6 (#1185)
• Additional commits viewable in compare view

Updates pyjwt from 2.9.0 to 2.10.0

Release notes

Sourced from pyjwt's releases.

2.10.0

What's Changed

• chore: use sequence for typing rather than list by @​imnotjames in jpadilla/pyjwt#970
• Add support for Python 3.13 by @​hugovk in jpadilla/pyjwt#972
• [pre-commit.ci] pre-commit autoupdate by @​pre-commit-ci in jpadilla/pyjwt#971
• Add an RTD config file to resolve RTD build failures by @​kurtmckee in jpadilla/pyjwt#977
• docs: Update iat exception docs by @​pachewise in jpadilla/pyjwt#974
• Remove algorithm requirement for JWT API by @​luhn in jpadilla/pyjwt#975
• [pre-commit.ci] pre-commit autoupdate by @​pre-commit-ci in jpadilla/pyjwt#978
• Create SECURITY.md by @​auvipy in jpadilla/pyjwt#973
• docs fix: decode_complete scope and algorithms by @​RbnRncn in jpadilla/pyjwt#982
• fix doctest for docs/usage.rst by @​pachewise in jpadilla/pyjwt#986
• fix test_utils.py not to xfail by @​pachewise in jpadilla/pyjwt#987
• Correct jwt.decode audience param doc expression by @​peter279k in jpadilla/pyjwt#994
• Add PS256 encoding and decoding usage by @​peter279k in jpadilla/pyjwt#992
• Add API docs for PyJWK by @​luhn in jpadilla/pyjwt#980
• Refactor project configuration files from setup.cfg to pyproject.toml PEP-518 by @​cleder in jpadilla/pyjwt#995
• Add JWK support to JWT encode by @​luhn in jpadilla/pyjwt#979
• Update pre-commit hooks to lint pyproject.toml by @​cleder in jpadilla/pyjwt#1002
• Add EdDSA algorithm encoding/decoding usage by @​peter279k in jpadilla/pyjwt#993
• Ruff linter and formatter changes by @​gagandeepp in jpadilla/pyjwt#1001
• Validate sub and jti claims for the token by @​Divan009 in jpadilla/pyjwt#1005
• Add ES256 usage by @​Gautam-Hegde in jpadilla/pyjwt#1003
• Encode EC keys with a fixed bit length by @​way-dave in jpadilla/pyjwt#990
• [pre-commit.ci] pre-commit autoupdate by @​pre-commit-ci in jpadilla/pyjwt#1000
• Drop support for Python 3.8 by @​kkirsche in jpadilla/pyjwt#1007
• Prepare 2.10.0 release by @​benvdh in jpadilla/pyjwt#1011
• Bump codecov/codecov-action from 4 to 5 by @​dependabot in jpadilla/pyjwt#1014
• [pre-commit.ci] pre-commit autoupdate by @​pre-commit-ci in jpadilla/pyjwt#1006

New Contributors

• @​imnotjames made their first contribution in jpadilla/pyjwt#970
• @​kurtmckee made their first contribution in jpadilla/pyjwt#977
• @​pachewise made their first contribution in jpadilla/pyjwt#974
• @​RbnRncn made their first contribution in jpadilla/pyjwt#982
• @​peter279k made their first contribution in jpadilla/pyjwt#994
• @​cleder made their first contribution in jpadilla/pyjwt#995
• @​gagandeepp made their first contribution in jpadilla/pyjwt#1001
• @​Divan009 made their first contribution in jpadilla/pyjwt#1005
• @​Gautam-Hegde made their first contribution in jpadilla/pyjwt#1003
• @​way-dave made their first contribution in jpadilla/pyjwt#990

Full Changelog: jpadilla/pyjwt@2.9.0...2.10.0

Changelog

Sourced from pyjwt's changelog.

v2.10.0 <https://github.com/jpadilla/pyjwt/compare/2.9.0...2.10.0>__

Changed

- Remove algorithm requirement from JWT API, instead relying on JWS API for enforcement, by @luhn in `[#975](https://github.com/jpadilla/pyjwt/issues/975) <https://github.com/jpadilla/pyjwt/pull/975>`__
- Use ``Sequence`` for parameter types rather than ``List`` where applicable by @imnotjames in `[#970](https://github.com/jpadilla/pyjwt/issues/970) <https://github.com/jpadilla/pyjwt/pull/970>`__
- Add JWK support to JWT encode by @luhn in `[#979](https://github.com/jpadilla/pyjwt/issues/979) <https://github.com/jpadilla/pyjwt/pull/979>`__
- Encoding and decoding payloads using the `none` algorithm by @jpadilla in `#c2629f6 <https://github.com/jpadilla/pyjwt/commit/c2629f66c593459e02616048443231ccbe18be16>`
Before:
.. code-block:: pycon
>>> import jwt
>>> jwt.encode({"payload": "abc"}, key=None, algorithm=None)
After:
.. code-block:: pycon
>>> import jwt
>>> jwt.encode({"payload": "abc"}, key=None, algorithm="none")

Added validation for 'sub' (subject) and 'jti' (JWT ID) claims in tokens by @​Divan009 in [#1005](https://github.com/jpadilla/pyjwt/issues/1005) &lt;https://github.com/jpadilla/pyjwt/pull/1005&gt;__
Refactor project configuration files from setup.cfg to pyproject.toml by @​cleder in [#995](https://github.com/jpadilla/pyjwt/issues/995) &lt;https://github.com/jpadilla/pyjwt/pull/995&gt;__
Ruff linter and formatter changes by @​gagandeepp in [#1001](https://github.com/jpadilla/pyjwt/issues/1001) &lt;https://github.com/jpadilla/pyjwt/pull/1001&gt;__
Drop support for Python 3.8 (EOL) by @​kkirsche in [#1007](https://github.com/jpadilla/pyjwt/issues/1007) &lt;https://github.com/jpadilla/pyjwt/pull/1007&gt;__

Fixed

- Encode EC keys with a fixed bit length by @etianen in `[#990](https://github.com/jpadilla/pyjwt/issues/990) &lt;https://github.com/jpadilla/pyjwt/pull/990&gt;`__
- Add an RTD config file to resolve Read the Docs build failures by @kurtmckee in `[#977](https://github.com/jpadilla/pyjwt/issues/977) &lt;https://github.com/jpadilla/pyjwt/pull/977&gt;`__
- Docs: Update ``iat`` exception docs by @pachewise in `[#974](https://github.com/jpadilla/pyjwt/issues/974) &lt;https://github.com/jpadilla/pyjwt/pull/974&gt;`__
- Docs: Fix ``decode_complete`` scope and algorithms by @RbnRncn in `[#982](https://github.com/jpadilla/pyjwt/issues/982) &lt;https://github.com/jpadilla/pyjwt/pull/982&gt;`__
- Fix doctest for ``docs/usage.rst`` by @pachewise in `[#986](https://github.com/jpadilla/pyjwt/issues/986) &lt;https://github.com/jpadilla/pyjwt/pull/986&gt;`__
- Fix ``test_utils.py`` not to xfail by @pachewise in `[#987](https://github.com/jpadilla/pyjwt/issues/987) &lt;https://github.com/jpadilla/pyjwt/pull/987&gt;`__
- Docs: Correct `jwt.decode` audience param doc expression by @peter279k in `[#994](https://github.com/jpadilla/pyjwt/issues/994) &lt;https://github.com/jpadilla/pyjwt/pull/994&gt;`__
Added



Add support for python 3.13 by @​hugovk in [#972](https://github.com/jpadilla/pyjwt/issues/972) &lt;https://github.com/jpadilla/pyjwt/pull/972&gt;__
Create SECURITY.md by @​auvipy and @​jpadilla in [#973](https://github.com/jpadilla/pyjwt/issues/973) &lt;https://github.com/jpadilla/pyjwt/pull/973&gt;__
Docs: Add PS256 encoding and decoding usage by @​peter279k in [#992](https://github.com/jpadilla/pyjwt/issues/992) &lt;https://github.com/jpadilla/pyjwt/pull/992&gt;__
</tr></table>

... (truncated)

Commits

• 783f324 [pre-commit.ci] pre-commit autoupdate (#1006)
• 0116fc6 Bump codecov/codecov-action from 4 to 5 (#1014)
• b032353 feat: surface jwt.decode_complete(...)
• a759c45 Prepare 2.10.0 release (#1011)
• b6b8bce Drop support for Python 3.8 (#1007)
• 189c256 Update index.rst
• 1900857 Update index.rst
• 8fe9eab Update README.rst
• 6f73f6f [pre-commit.ci] pre-commit autoupdate (#1000)
• c2629f6 update changelog
• Additional commits viewable in compare view

Updates sentry-sdk[flask] from 2.17.0 to 2.19.0

Release notes

Sourced from sentry-sdk[flask]'s releases.

2.19.0

Various fixes & improvements

• New: introduce rust_tracing integration. See https://docs.sentry.io/platforms/python/integrations/rust_tracing/ (#3717) by @​matt-codecov
• Auto enable Litestar integration (#3540) by @​provinzkraut
• Deprecate sentry_sdk.init context manager (#3729) by @​szokeasaurusrex
• feat(spotlight): Send PII to Spotlight when no DSN is set (#3804) by @​BYK
• feat(spotlight): Add info logs when Sentry is enabled (#3735) by @​BYK
• feat(spotlight): Inject Spotlight button on Django (#3751) by @​BYK
• feat(spotlight): Auto enable cache_spans for Spotlight on DEBUG (#3791) by @​BYK
• fix(logging): Handle parameter stack_info for the LoggingIntegration (#3745) by @​gmcrocetti
• fix(pure-eval): Make sentry-sdk[pure-eval] installable with pip==24.0 (#3757) by @​sentrivana
• fix(rust_tracing): include_tracing_fields arg to control unvetted data in rust_tracing integration (#3780) by @​matt-codecov
• fix(aws) Fix aws lambda tests (by reducing event size) (#3770) by @​antonpirker
• fix(arq): fix integration with Worker settings as a dict (#3742) by @​saber-solooki
• fix(httpx): Prevent Sentry baggage duplication (#3728) by @​szokeasaurusrex
• fix(falcon): Don't exhaust request body stream (#3768) by @​szokeasaurusrex
• fix(integrations): Check retries_left before capturing exception (#3803) by @​malkovro
• fix(openai): Use name instead of description (#3807) by @​sourceful-rob
• test(gcp): Only run GCP tests when they should (#3721) by @​szokeasaurusrex
• chore: Shorten CI workflow names (#3805) by @​sentrivana
• chore: Test with pyspark prerelease (#3760) by @​sentrivana
• build(deps): bump codecov/codecov-action from 4.6.0 to 5.0.2 (#3792) by @​dependabot
• build(deps): bump actions/checkout from 4.2.1 to 4.2.2 (#3691) by @​dependabot

2.18.0

Various fixes & improvements

• Add LaunchDarkly and OpenFeature integration (#3648) by @​cmanallen
• Correct typo in a comment (#3726) by @​szokeasaurusrex
• End http.client span on timeout (#3723) by @​Zylphrex
• Check for h2 existence in HTTP/2 transport (#3690) by @​BYK
• Use type() instead when extracting frames (#3716) by @​Zylphrex
• Prefer python_multipart import over multipart (#3710) by @​musicinmybrain
• Update active thread for asgi (#3669) by @​Zylphrex
• Only enable HTTP2 when DSN is HTTPS (#3678) by @​BYK
• Prepare for upstream Strawberry extension removal (#3649) by @​DoctorJohn
• Enhance README with improved clarity and developer-friendly examples (#3667) by @​UTSAVS26
• Run license compliance action on all PRs (#3699) by @​szokeasaurusrex
• Run CodeQL action on all PRs (#3698) by @​szokeasaurusrex
• Fix UTC assuming test (#3722) by @​BYK
• Exclude fakeredis 2.26.0 on py3.6 and 3.7 (#3695) by @​szokeasaurusrex
• Unpin pytest for tornado-latest tests (#3714) by @​szokeasaurusrex
• Install pytest-asyncio for redis tests (Python 3.12-13) (#3706) by @​szokeasaurusrex
• Clarify that only pinned tests are required (#3713) by @​szokeasaurusrex
• Remove accidentally-committed print (#3712) by @​szokeasaurusrex
• Disable broken RQ test in newly-released RQ 2.0 (#3708) by @​szokeasaurusrex
• Unpin pytest for celery tests (#3701) by @​szokeasaurusrex
• Unpin pytest on Python 3.8+ gevent tests (#3700) by @​szokeasaurusrex
• Unpin pytest for Python 3.8+ common tests (#3697) by @​szokeasaurusrex

... (truncated)

Changelog

Sourced from sentry-sdk[flask]'s changelog.

2.19.0

Various fixes & improvements

• New: introduce rust_tracing integration. See https://docs.sentry.io/platforms/python/integrations/rust_tracing/ (#3717) by @​matt-codecov
• Auto enable Litestar integration (#3540) by @​provinzkraut
• Deprecate sentry_sdk.init context manager (#3729) by @​szokeasaurusrex
• feat(spotlight): Send PII to Spotlight when no DSN is set (#3804) by @​BYK
• feat(spotlight): Add info logs when Sentry is enabled (#3735) by @​BYK
• feat(spotlight): Inject Spotlight button on Django (#3751) by @​BYK
• feat(spotlight): Auto enable cache_spans for Spotlight on DEBUG (#3791) by @​BYK
• fix(logging): Handle parameter stack_info for the LoggingIntegration (#3745) by @​gmcrocetti
• fix(pure-eval): Make sentry-sdk[pure-eval] installable with pip==24.0 (#3757) by @​sentrivana
• fix(rust_tracing): include_tracing_fields arg to control unvetted data in rust_tracing integration (#3780) by @​matt-codecov
• fix(aws) Fix aws lambda tests (by reducing event size) (#3770) by @​antonpirker
• fix(arq): fix integration with Worker settings as a dict (#3742) by @​saber-solooki
• fix(httpx): Prevent Sentry baggage duplication (#3728) by @​szokeasaurusrex
• fix(falcon): Don't exhaust request body stream (#3768) by @​szokeasaurusrex
• fix(integrations): Check retries_left before capturing exception (#3803) by @​malkovro
• fix(openai): Use name instead of description (#3807) by @​sourceful-rob
• test(gcp): Only run GCP tests when they should (#3721) by @​szokeasaurusrex
• chore: Shorten CI workflow names (#3805) by @​sentrivana
• chore: Test with pyspark prerelease (#3760) by @​sentrivana
• build(deps): bump codecov/codecov-action from 4.6.0 to 5.0.2 (#3792) by @​dependabot
• build(deps): bump actions/checkout from 4.2.1 to 4.2.2 (#3691) by @​dependabot

2.18.0

Various fixes & improvements

• Add LaunchDarkly and OpenFeature integration (#3648) by @​cmanallen
• Correct typo in a comment (#3726) by @​szokeasaurusrex
• End http.client span on timeout (#3723) by @​Zylphrex
• Check for h2 existence in HTTP/2 transport (#3690) by @​BYK
• Use type() instead when extracting frames (#3716) by @​Zylphrex
• Prefer python_multipart import over multipart (#3710) by @​musicinmybrain
• Update active thread for asgi (#3669) by @​Zylphrex
• Only enable HTTP2 when DSN is HTTPS (#3678) by @​BYK
• Prepare for upstream Strawberry extension removal (#3649) by @​DoctorJohn
• Enhance README with improved clarity and developer-friendly examples (#3667) by @​UTSAVS26
• Run license compliance action on all PRs (#3699) by @​szokeasaurusrex
• Run CodeQL action on all PRs (#3698) by @​szokeasaurusrex
• Fix UTC assuming test (#3722) by @​BYK
• Exclude fakeredis 2.26.0 on py3.6 and 3.7 (#3695) by @​szokeasaurusrex
• Unpin pytest for tornado-latest tests (#3714) by @​szokeasaurusrex
• Install pytest-asyncio for redis tests (Python 3.12-13) (#3706) by @​szokeasaurusrex
• Clarify that only pinned tests are required (#3713) by @​szokeasaurusrex
• Remove accidentally-committed print (#3712) by @​szokeasaurusrex
• Disable broken RQ test in newly-released RQ 2.0 (#3708) by @​szokeasaurusrex
• Unpin pytest for celery tests (#3701) by @​szokeasaurusrex

... (truncated)

Commits

• 039c220 Updated changelog
• c83e742 release: 2.19.0
• 8fe5bb4 feat: Send PII to Spotlight when no DSN is set (#3804)
• 295dd8d Auto enable Litestar integration (#3540)
• bd50c38 fix(httpx): Prevent Sentry baggage duplication (#3728)
• e9ec6c1 test(gcp): Only run GCP tests when they should (#3721)
• aa6e8fd fix(falcon): Don't exhaust request body stream (#3768)
• 3e28853 fix(integrations): Check retries_left before capturing exception (#3803)
• 01146bd fix(openai): Use name instead of description (#3807)
• d894fc2 Shorten CI workflow names (#3805)
• Additional commits viewable in compare view

Updates ruff from 0.7.2 to 0.8.0

Release notes

Sourced from ruff's releases.

0.8.0

Release Notes

Check out the blog post for a migration guide and overview of the changes!

Breaking changes

See also, the "Remapped rules" section which may result in disabled rules.

• Default to Python 3.9

  Ruff now defaults to Python 3.9 instead of 3.8 if no explicit Python version is configured using ruff.target-version or project.requires-python (#13896)

• Changed location of pydoclint diagnostics

  pydoclint diagnostics now point to the first-line of the problematic docstring. Previously, this was not the case.

  If you've opted into these preview rules but have them suppressed using noqa comments in some places, this change may mean that you need to move the noqa suppression comments. Most users should be unaffected by this change.

• Use XDG (i.e. ~/.local/bin) instead of the Cargo home directory in the standalone installer

  Previously, Ruff's installer used $CARGO_HOME or ~/.cargo/bin for its target install directory. Now, Ruff will be installed into $XDG_BIN_HOME, $XDG_DATA_HOME/../bin, or ~/.local/bin (in that order).

  This change is only relevant to users of the standalone Ruff installer (using the shell or PowerShell script). If you installed Ruff using uv or pip, you should be unaffected.

• Changes to the line width calculation

  Ruff now uses a new version of the unicode-width Rust crate to calculate the line width. In very rare cases, this may lead to lines containing Unicode characters being reformatted, or being considered too long when they were not before (E501).

Removed Rules

The following deprecated rules have been removed:

• missing-type-self (ANN101)
• missing-type-cls (ANN102)
• syntax-error (E999)
• pytest-missing-fixture-name-underscore (PT004)
• pytest-incorrect-fixture-name-underscore (PT005)
• unpacked-list-comprehension (UP027)

Remapped rules

The following rules have been remapped to new rule codes:

• flake8-type-checking: TCH to TC

Stabilization

... (truncated)

Changelog

Sourced from ruff's changelog.

0.8.0

Check out the blog post for a migration guide and overview of the changes!

Breaking changes

See also, the "Remapped rules" section which may result in disabled rules.

• Default to Python 3.9

  Ruff now defaults to Python 3.9 instead of 3.8 if no explicit Python version is configured using ruff.target-version or project.requires-python (#13896)

• Changed location of pydoclint diagnostics

  pydoclint diagnostics now point to the first-line of the problematic docstring. Previously, this was not the case.

  If you've opted into these preview rules but have them suppressed using noqa comments in some places, this change may mean that you need to move the noqa suppression comments. Most users should be unaffected by this change.

• Use XDG (i.e. ~/.local/bin) instead of the Cargo home directory in the standalone installer

  Previously, Ruff's installer used $CARGO_HOME or ~/.cargo/bin for its target install directory. Now, Ruff will be installed into $XDG_BIN_HOME, $XDG_DATA_HOME/../bin, or ~/.local/bin (in that order).

  This change is only relevant to users of the standalone Ruff installer (using the shell or PowerShell script). If you installed Ruff using uv or pip, you should be unaffected.

• Changes to the line width calculation

  Ruff now uses a new version of the unicode-width Rust crate to calculate the line width. In very rare cases, this may lead to lines containing Unicode characters being reformatted, or being considered too long when they were not before (E501).

Removed Rules

The following deprecated rules have been removed:

• missing-type-self (ANN101)
• missing-type-cls (ANN102)
• syntax-error (E999)
• pytest-missing-fixture-name-underscore (PT004)
• pytest-incorrect-fixture-name-underscore (PT005)
• unpacked-list-comprehension (UP027)

Remapped rules

The following rules have been remapped to new rule codes:

• flake8-type-checking: TCH to TC

Stabilization

... (truncated)

Commits

• a90e404 [red-knot] PEP 695 type aliases (#14357)
• 8358ad8 Ruff 0.8 release (#14486)
• 2b8b1ef Improve docs for some pycodestyle rules (#14517)
• 2efa3fb [flake8-import-conventions] Syntax check aliases supplied in configuration ...
• b9da430 doc(B024): #14455 add annotated but unassgined class variables (#14502)