Scheduled monthly dependency update for August

[pyup-bot]

Update Flask from 1.0.3 to 1.1.1.

Changelog

1.1.1

-------------

Released 2019-07-08

-   The ``flask.json_available`` flag was added back for compatibility
 with some extensions. It will raise a deprecation warning when used,
 and will be removed in version 2.0.0. :issue:`3288`

1.1.0

-------------

Released 2019-07-04

-   Bump minimum Werkzeug version to >= 0.15.
-   Drop support for Python 3.4.
-   Error handlers for ``InternalServerError`` or ``500`` will always be
 passed an instance of ``InternalServerError``. If they are invoked
 due to an unhandled exception, that original exception is now
 available as ``e.original_exception`` rather than being passed
 directly to the handler. The same is true if the handler is for the
 base ``HTTPException``. This makes error handler behavior more
 consistent. :pr:`3266`

 -   :meth:`Flask.finalize_request` is called for all unhandled
     exceptions even if there is no ``500`` error handler.

-   :attr:`Flask.logger` takes the same name as
 :attr:`Flask.name` (the value passed as
 ``Flask(import_name)``. This reverts 1.0's behavior of always
 logging to ``"flask.app"``, in order to support multiple apps in the
 same process. A warning will be shown if old configuration is
 detected that needs to be moved. :issue:`2866`
-   :meth:`flask.RequestContext.copy` includes the current session
 object in the request context copy. This prevents ``session``
 pointing to an out-of-date object. :issue:`2935`
-   Using built-in RequestContext, unprintable Unicode characters in
 Host header will result in a HTTP 400 response and not HTTP 500 as
 previously. :pr:`2994`
-   :func:`send_file` supports :class:`~os.PathLike` objects as
 described in PEP 0519, to support :mod:`pathlib` in Python 3.
 :pr:`3059`
-   :func:`send_file` supports :class:`~io.BytesIO` partial content.
 :issue:`2957`
-   :func:`open_resource` accepts the "rt" file mode. This still does
 the same thing as "r". :issue:`3163`
-   The :attr:`MethodView.methods` attribute set in a base class is used
 by subclasses. :issue:`3138`
-   :attr:`Flask.jinja_options` is a ``dict`` instead of an
 ``ImmutableDict`` to allow easier configuration. Changes must still
 be made before creating the environment. :pr:`3190`
-   Flask's ``JSONMixin`` for the request and response wrappers was
 moved into Werkzeug. Use Werkzeug's version with Flask-specific
 support. This bumps the Werkzeug dependency to >= 0.15.
 :issue:`3125`
-   The ``flask`` command entry point is simplified to take advantage
 of Werkzeug 0.15's better reloader support. This bumps the Werkzeug
 dependency to >= 0.15. :issue:`3022`
-   Support ``static_url_path`` that ends with a forward slash.
 :issue:`3134`
-   Support empty ``static_folder`` without requiring setting an empty
 ``static_url_path`` as well. :pr:`3124`
-   :meth:`jsonify` supports :class:`dataclasses.dataclass` objects.
 :pr:`3195`
-   Allow customizing the :attr:`Flask.url_map_class` used for routing.
 :pr:`3069`
-   The development server port can be set to 0, which tells the OS to
 pick an available port. :issue:`2926`
-   The return value from :meth:`cli.load_dotenv` is more consistent
 with the documentation. It will return ``False`` if python-dotenv is
 not installed, or if the given path isn't a file. :issue:`2937`
-   Signaling support has a stub for the ``connect_via`` method when
 the Blinker library is not installed. :pr:`3208`
-   Add an ``--extra-files`` option to the ``flask run`` CLI command to
 specify extra files that will trigger the reloader on change.
 :issue:`2897`
-   Allow returning a dictionary from a view function. Similar to how
 returning a string will produce a ``text/html`` response, returning
 a dict will call ``jsonify`` to produce a ``application/json``
 response. :pr:`3111`
-   Blueprints have a ``cli`` Click group like ``app.cli``. CLI commands
 registered with a blueprint will be available as a group under the
 ``flask`` command. :issue:`1357`.
-   When using the test client as a context manager (``with client:``),
 all preserved request contexts are popped when the block exits,
 ensuring nested contexts are cleaned up correctly. :pr:`3157`
-   Show a better error message when the view return type is not
 supported. :issue:`3214`
-   ``flask.testing.make_test_environ_builder()`` has been deprecated in
 favour of a new class ``flask.testing.EnvironBuilder``. :pr:`3232`
-   The ``flask run`` command no longer fails if Python is not built
 with SSL support. Using the ``--cert`` option will show an
 appropriate error message. :issue:`3211`
-   URL matching now occurs after the request context is pushed, rather
 than when it's created. This allows custom URL converters to access
 the app and request contexts, such as to query a database for an id.
 :issue:`3088`

1.0.4

-------------

Released 2019-07-04

-   The key information for ``BadRequestKeyError`` is no longer cleared
 outside debug mode, so error handlers can still access it. This
 requires upgrading to Werkzeug 0.15.5. :issue:`3249`
-   ``send_file`` url quotes the ":" and "/" characters for more
 compatible UTF-8 filename support in some browsers. :issue:`3074`
-   Fixes for PEP451 import loaders and pytest 5.x. :issue:`3275`
-   Show message about dotenv on stderr instead of stdout. :issue:`3285`

Links

• PyPI: https://pypi.org/project/flask
• Changelog: https://pyup.io/changelogs/flask/
• Homepage: https://palletsprojects.com/p/flask/

Update SQLAlchemy from 1.3.5 to 1.3.6.

Changelog

1.3.6

:released: July 21, 2019

 .. change::
     :tags: bug, engine
     :tickets: 4754

     Fixed bug where using reflection function such as :meth:`.MetaData.reflect`
     with an :class:`.Engine` object that had execution options applied to it
     would fail, as the resulting :class:`.OptionEngine` proxy object failed to
     include a ``.engine`` attribute used within the reflection routines.

 .. change::
     :tags: bug, mysql
     :tickets: 4743

     Fixed bug where the special logic to render "NULL" for the
     :class:`.TIMESTAMP` datatype when ``nullable=True`` would not work if the
     column's datatype were a :class:`.TypeDecorator` or a :class:`.Variant`.
     The logic now ensures that it unwraps down to the original
     :class:`.TIMESTAMP` so that this special case NULL keyword is correctly
     rendered when requested.

 .. change::
     :tags: performance, orm
     :tickets: 4775

     The optimzation applied to selectin loading in :ticket:`4340` where a JOIN
     is not needed to eagerly load related items is now applied to many-to-one
     relationships as well, so that only the related table is queried for a
     simple join condition.   In this case, the related items are queried
     based on the value of a foreign key column on the parent; if these columns
     are deferred or otherwise not loaded on any of the parent objects in
     the collection, the loader falls back to the JOIN method.


 .. change::
     :tags: bug, orm
     :tickets: 4773

     Fixed regression caused by :ticket:`4365` where a join from an entity to
     itself without using aliases no longer raises an informative error message,
     instead failing on an assertion.  The informative error condition has been
     restored.


 .. change::
     :tags: orm, feature
     :tickets: 4736

     Added new loader option method :meth:`.Load.options` which allows loader
     options to be constructed hierarchically, so that many sub-options can be
     applied to a particular path without needing to call :func:`.defaultload`
     many times.  Thanks to Alessio Bogon for the idea.


 .. change::
     :tags: usecase, postgresql
     :tickets: 4771

     Added support for reflection of indexes on PostgreSQL partitioned tables,
     which was added to PostgreSQL as of version 11.

 .. change::
    :tags: bug, mysql
    :tickets: 4624

    Enhanced MySQL/MariaDB version string parsing to accommodate for exotic
    MariaDB version strings where the "MariaDB" word is embedded among other
    alphanumeric characters such as "MariaDBV1".   This detection is critical in
    order to correctly accommodate for API features that have split between MySQL
    and MariaDB such as the "transaction_isolation" system variable.


 .. change::
     :tags: bug, mssql
     :tickets: 4745

     Ensured that the queries used to reflect indexes and view definitions will
     explicitly CAST string parameters into NVARCHAR, as many SQL Server drivers
     frequently treat string values, particularly those with non-ascii
     characters or larger string values, as TEXT which often don't compare
     correctly against VARCHAR characters in SQL Server's information schema
     tables for some reason.    These CAST operations already take place for
     reflection queries against SQL Server ``information_schema.`` tables but
     were missing from three additional queries that are against ``sys.``
     tables.

 .. change::
     :tags: bug, orm
     :tickets: 4713

     Fixed an issue where the :meth:`.orm._ORMJoin.join` method, which is a
     not-internally-used ORM-level method that exposes what is normally an
     internal process of :meth:`.Query.join`, did not propagate the ``full`` and
     ``outerjoin`` keyword arguments correctly.  Pull request courtesy Denis
     Kataev.

 .. change::
     :tags: bug, sql
     :tickets: 4758

     Adjusted the initialization for :class:`.Enum` to minimize how often it
     invokes the ``.__members__`` attribute of a given PEP-435 enumeration
     object, to suit the case where this attribute is expensive to invoke, as is
     the case for some popular third party enumeration libraries.


 .. change::
     :tags: bug, orm
     :tickets: 4772

     Fixed bug where a many-to-one relationship that specified ``uselist=True``
     would fail to update correctly during a primary key change where a related
     column needs to change.


 .. change::
     :tags: bug, orm
     :tickets: 4772

     Fixed bug where the detection for many-to-one or one-to-one use with a
     "dynamic" relationship, which is an invalid configuration, would fail to
     raise if the relationship were configured with ``uselist=True``.  The
     current fix is that it warns, instead of raises, as this would otherwise be
     backwards incompatible, however in a future release it will be a raise.


 .. change::
     :tags: bug, orm
     :tickets: 4767

     Fixed bug where a synonym created against a mapped attribute that does not
     exist yet, as is the case when it refers to backref before mappers are
     configured, would raise recursion errors when trying to test for attributes
     on it which ultimately don't exist (as occurs when the classes are run
     through Sphinx autodoc), as the unconfigured state of the synonym would put
     it into an attribute not found loop.


 .. change::
     :tags: usecase, postgresql
     :tickets: 4756

     Added support for multidimensional Postgresql array literals via nesting
     the :class:`.postgresql.array` object within another one.  The
     multidimensional array type is detected automatically.

     .. seealso::

         :class:`.postgresql.array`

 .. change::
     :tags: bug, sql, postgresql
     :tickets: 4760

     Fixed issue where the :class:`.array_agg` construct in combination with
     :meth:`.FunctionElement.filter` would not produce the correct operator
     precedence in combination with the array index operator.


 .. change::
     :tags: bug, sql
     :tickets: 4747

     Fixed an unlikely issue where the "corresponding column" routine for unions
     and other :class:`.CompoundSelect` objects could return the wrong column in
     some overlapping column situtations, thus potentially impacting some ORM
     operations when set operations are in use, if the underlying
     :func:`.select` constructs were used previously in other similar kinds of
     routines, due to a cached value not being cleared.

 .. change::
     :tags: usecase, sqlite
     :tickets: 4766

     Added support for composite (tuple) IN operators with SQLite, by rendering
     the VALUES keyword for this backend.  As other backends such as DB2 are
     known to use the same syntax, the syntax is enabled in the base compiler
     using a dialect-level flag ``tuple_in_values``.   The change also includes
     support for "empty IN tuple" expressions for SQLite when using "in_()"
     between a tuple value and an empty set.


.. changelog::

Links

• PyPI: https://pypi.org/project/sqlalchemy
• Changelog: https://pyup.io/changelogs/sqlalchemy/
• Homepage: http://www.sqlalchemy.org

Update SQLAlchemy-Utils from 0.34.0 to 0.34.1.

Changelog

0.34.1

^^^^^^^^^^^^^^^^^^^

- Remove deprecation warnings (379, pull request courtesy of Le-Stagiaire)
- Drop py34 support

Links

• PyPI: https://pypi.org/project/sqlalchemy-utils
• Changelog: https://pyup.io/changelogs/sqlalchemy-utils/
• Repo: https://github.com/kvesteri/sqlalchemy-utils

Update redis from 3.2.1 to 3.3.4.

Changelog

3.3.4

* More specifically identify nonblocking read errors for both SSL and
   non-SSL connections. 3.3.1, 3.3.2 and 3.3.3 on Python 2.7 could
   potentially mask a ConnectionError. 1197

3.3.3

* The SSL module in Python < 2.7.9 handles non-blocking sockets
   differently than 2.7.9+. This patch accommodates older versions. 1197

3.3.2

* Further fixed a regression introduced in 3.3.0 involving SSL and
   non-blocking sockets. 1197

3.3.1

* Fixed a regression introduced in 3.3.0 involving SSL and non-blocking
   sockets. 1197

3.3.0

* Resolve a race condition with the PubSubWorkerThread. 1150
 * Cleanup socket read error messages. Thanks Vic Yu. 1159
 * Cleanup the Connection's selector correctly. Thanks Bruce Merry. 1153
 * Added a Monitor object to make working with MONITOR output easy.
   Thanks Roey Prat 1033
 * Internal cleanup: Removed the legacy Token class which was necessary
   with older version of Python that are no longer supported. 1066
 * Response callbacks are now case insensitive. This allows users that
   call Redis.execute_command() directly to pass lower-case command
   names and still get reasonable responses. 1168
 * Added support for hiredis-py 1.0.0 encoding error support. This should
   make the PythonParser and the HiredisParser behave identically
   when encountering encoding errors. Thanks Brian Candler. 1161/1162
 * All authentication errors now properly raise AuthenticationError.
   AuthenticationError is now a subclass of ConnectionError, which will
   cause the connection to be disconnected and cleaned up appropriately.
   923
 * Add READONLY and READWRITE commands. Thanks theodesp. 1114
 * Remove selectors in favor of nonblocking sockets. Selectors had
   issues in some environments including eventlet and gevent. This should
   resolve those issues with no other side effects.
 * Fixed an issue with XCLAIM and previously claimed but not removed
   messages. Thanks thomdask. 1192/1191
 * Allow for single connection client instances. These instances
   are not thread safe but offer other benefits including a subtle
   performance increase.
 * Added extensive health checks that keep the connections lively.
   Passing the "health_check_interval=N" option to the Redis client class
   or to a ConnectionPool ensures that a round trip PING/PONG is successful
   before any command if the underlying connection has been idle for more
   than N seconds. ConnectionErrors and TimeoutErrors are automatically
   retried once for health checks.
 * Changed the PubSubWorkerThread to use a threading.Event object rather
   than a boolean to control the thread's life cycle. Thanks Timothy
   Rule. 1194/1195.
 * Fixed a bug in Pipeline error handling that would incorrectly retry
   ConnectionErrors.

Links

• PyPI: https://pypi.org/project/redis
• Changelog: https://pyup.io/changelogs/redis/
• Repo: https://github.com/andymccurdy/redis-py

Update pillow from 6.0.0 to 6.1.0.

Changelog

6.1.0

------------------

- Deprecate Image.__del__ 3929
[jdufresne]

- Tiff: Add support for JPEG quality 3886
[olt]

- Respect the PKG_CONFIG environment variable when building 3928
[chewi]

- Use explicit memcpy() to avoid unaligned memory accesses 3225
[DerDakon]

- Improve encoding of TIFF tags 3861
[olt]

- Update Py_UNICODE to Py_UCS4 3780
[nulano]

- Consider I;16 pixel size when drawing 3899
[radarhere]

- Add TIFFTAG_SAMPLEFORMAT to blocklist 3926
[cgohlke, radarhere]

- Create GIF deltas from background colour of GIF frames if disposal mode is 2 3708
[sircinnamon, radarhere]

- Added ImageSequence all_frames 3778
[radarhere]

- Use unsigned int to store TIFF IFD offsets 3923
[cgohlke]

- Include CPPFLAGS when searching for libraries 3819
[jefferyto]

- Updated TIFF tile descriptors to match current decoding functionality 3795
[dmnisson]

- Added an `image.entropy()` method (second revision) 3608
[fish2000]

- Pass the correct types to PyArg_ParseTuple 3880
[QuLogic]

- Fixed crash when loading non-font bytes 3912
[radarhere]

- Fix SPARC memory alignment issues in Pack/Unpack functions 3858
[kulikjak]

- Added CMYK;16B and CMYK;16N unpackers 3913
[radarhere]

- Fixed bugs in calculating text size 3864
[radarhere]

- Add __main__.py to output basic format and support information 3870
[jdufresne]

- Added variation font support 3802
[radarhere]

- Do not down-convert if image is LA when showing with PNG format 3869
[radarhere]

- Improve handling of PSD frames 3759
[radarhere]

- Improved ICO and ICNS loading 3897
[radarhere]

- Changed Preview application path so that it is no longer static 3896
[radarhere]

- Corrected ttb text positioning 3856
[radarhere]

- Handle unexpected ICO image sizes 3836
[radarhere]

- Fixed bits value for RGB;16N unpackers 3837
[kkopachev]

- Travis CI: Add Fedora 30, remove Fedora 28 3821
[hugovk]

- Added reading of CMYK;16L TIFF images 3817
[radarhere]

- Fixed dimensions of 1-bit PDFs 3827
[radarhere]

- Fixed opening mmap image through Path on Windows 3825
[radarhere]

- Fixed ImageDraw arc gaps 3824
[radarhere]

- Expand GIF to include frames with extents outside the image size 3822
[radarhere]

- Fixed ImageTk getimage 3814
[radarhere]

- Fixed bug in decoding large images 3791
[radarhere]

- Fixed reading APP13 marker without Photoshop data 3771
[radarhere]

- Added option to include layered windows in ImageGrab.grab on Windows 3808
[radarhere]

- Detect libimagequant when installed by pacman on MingW 3812
[radarhere]

- Fixed raqm layout bug 3787
[radarhere]

- Fixed loading font with non-Unicode path on Windows 3785
[radarhere]

- Travis CI: Upgrade PyPy from 6.0.0 to 7.1.1 3783
[hugovk, johnthagen]

- Depends: Updated openjpeg to 2.3.1 3794, raqm to 0.7.0 3877, libimagequant to 2.12.3 3889
[radarhere]

- Fix numpy bool bug 3790
[radarhere]

Links

• PyPI: https://pypi.org/project/pillow
• Changelog: https://pyup.io/changelogs/pillow/
• Homepage: http://python-pillow.org

Update coverage from 4.5.3 to 4.5.4.

Changelog

4.5.4

---------------------------

- Multiprocessing support in Python 3.8 was broken, but is now fixed.  Closes
`issue 828`_.

.. _issue 828: https://github.com/nedbat/coveragepy/issues/828


.. _changes_453:

Links

• PyPI: https://pypi.org/project/coverage
• Changelog: https://pyup.io/changelogs/coverage/
• Repo: https://github.com/nedbat/coveragepy