From ccb9f512ce774d6ba60940a82e0f5c83ebdd04db Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 17 Sep 2024 05:56:41 -0700
Subject: [PATCH 1/3] Bump memmap2 from 0.9.4 to 0.9.5 (#3326)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
Bumps [memmap2](https://github.com/RazrFalcon/memmap2-rs) from 0.9.4 to
0.9.5.
Changelog
Sourced from memmap2's
changelog.
[0.9.5] - 2024-09-13
Added
Commits
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
Signed-off-by: dependabot[bot]
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
Cargo.lock | 4 ++--
src/core/Cargo.toml | 2 +-
2 files changed, 3 insertions(+), 3 deletions(-)
diff --git a/Cargo.lock b/Cargo.lock
index d2c3a4b182..d7a214a4ae 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -951,9 +951,9 @@ dependencies = [
[[package]]
name = "memmap2"
-version = "0.9.4"
+version = "0.9.5"
source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "fe751422e4a8caa417e13c3ea66452215d7d63e19e604f4980461212f3ae1322"
+checksum = "fd3f7eed9d3848f8b98834af67102b720745c4ec028fcd0aa0239277e7de374f"
dependencies = [
"libc",
]
diff --git a/src/core/Cargo.toml b/src/core/Cargo.toml
index c1d5140268..70adfefef5 100644
--- a/src/core/Cargo.toml
+++ b/src/core/Cargo.toml
@@ -41,7 +41,7 @@ histogram = "0.11.0"
itertools = "0.13.0"
log = "0.4.22"
md5 = "0.7.0"
-memmap2 = "0.9.4"
+memmap2 = "0.9.5"
murmurhash3 = "0.0.5"
needletail = { version = "0.5.1", default-features = false }
niffler = { version = "2.4.0", default-features = false, features = [ "gz" ] }
From 081bbac3b1e47abbc5c497c9a7b9f3028565e26e Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 17 Sep 2024 13:29:20 +0000
Subject: [PATCH 2/3] Bump getset from 0.1.2 to 0.1.3 (#3328)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
[//]: # (dependabot-start)
⚠️ **Dependabot is rebasing this PR** ⚠️
Rebasing might not happen immediately, so don't worry if this takes some
time.
Note: if you make any changes to this PR yourself, they will take
precedence over the rebase.
---
[//]: # (dependabot-end)
Bumps [getset](https://github.com/jbaublitz/getset) from 0.1.2 to 0.1.3.
Release notes
Sourced from getset's
releases.
v0.1.3
Update to syn 2
Commits
ad3b221
Merge pull request #96
from jbaublitz/update_to_syn_20eacb31
Update to syn 2863406d
Merge pull request #95
from jbaublitz/update-cargo-tomlf86ef78
Update Cargo.toml with new maintainer contact info- See full diff in compare
view
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
Signed-off-by: dependabot[bot]
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
Cargo.lock | 26 ++++++++++++--------------
src/core/Cargo.toml | 2 +-
2 files changed, 13 insertions(+), 15 deletions(-)
diff --git a/Cargo.lock b/Cargo.lock
index d7a214a4ae..1ea8343112 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -649,14 +649,14 @@ dependencies = [
[[package]]
name = "getset"
-version = "0.1.2"
+version = "0.1.3"
source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "e45727250e75cc04ff2846a66397da8ef2b3db8e40e0cef4df67950a07621eb9"
+checksum = "f636605b743120a8d32ed92fc27b6cde1a769f8f936c065151eb66f88ded513c"
dependencies = [
- "proc-macro-error",
+ "proc-macro-error2",
"proc-macro2",
"quote",
- "syn 1.0.104",
+ "syn 2.0.46",
]
[[package]]
@@ -1234,27 +1234,25 @@ dependencies = [
]
[[package]]
-name = "proc-macro-error"
-version = "1.0.4"
+name = "proc-macro-error-attr2"
+version = "2.0.0"
source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "da25490ff9892aab3fcf7c36f08cfb902dd3e71ca0f9f9517bea02a73a5ce38c"
+checksum = "96de42df36bb9bba5542fe9f1a054b8cc87e172759a1868aa05c1f3acc89dfc5"
dependencies = [
- "proc-macro-error-attr",
"proc-macro2",
"quote",
- "syn 1.0.104",
- "version_check",
]
[[package]]
-name = "proc-macro-error-attr"
-version = "1.0.4"
+name = "proc-macro-error2"
+version = "2.0.1"
source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "a1be40180e52ecc98ad80b184934baf3d0d29f979574e439af5a55274b35f869"
+checksum = "11ec05c52be0a07b08061f7dd003e7d7092e0472bc731b4af7bb1ef876109802"
dependencies = [
+ "proc-macro-error-attr2",
"proc-macro2",
"quote",
- "version_check",
+ "syn 2.0.46",
]
[[package]]
diff --git a/src/core/Cargo.toml b/src/core/Cargo.toml
index 70adfefef5..98ea183c6d 100644
--- a/src/core/Cargo.toml
+++ b/src/core/Cargo.toml
@@ -36,7 +36,7 @@ csv = "1.3.0"
enum_dispatch = "0.3.13"
finch = { version = "0.6.0", optional = true }
fixedbitset = "0.4.0"
-getset = "0.1.1"
+getset = "0.1.3"
histogram = "0.11.0"
itertools = "0.13.0"
log = "0.4.22"
From 51c9de993b49db8489128d6177939bac0c33fa6b Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 17 Sep 2024 07:28:08 -0700
Subject: [PATCH 3/3] Bump pypa/cibuildwheel from 2.20.0 to 2.21.1 (#3332)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
Bumps [pypa/cibuildwheel](https://github.com/pypa/cibuildwheel) from
2.20.0 to 2.21.1.
Release notes
Sourced from pypa/cibuildwheel's
releases.
Version 2.21.1
- 🐛 Fix a bug in the Linux build, where files copied to the container
would have invalid ownership permissions (#2007)
- 🐛 Fix a bug on Windows where cibuildwheel would call upon
uv to install dependencies for versions of CPython that it
does not support (#2005)
- 🐛 Fix a bug where
uv 0.4.10 would not use the right
Python when testing on Linux. (#2008)
- 🛠 Bump our documentation pins, fixes an issue with a missing package
(#2011)
Version 2.21.0
- ⚠️ Update CPython 3.12 to 3.12.6, which changes the macOS minimum
deployment target on CPython 3.12 from macOS 10.9 to macOS 10.13 (#1998)
- 🛠 Changes the behaviour when inheriting
config-settings
in TOML overrides - rather than extending each key, which is rarely
useful, individual keys will override previously set values. (#1803)
- 🛠 Update CPython 3.13 to 3.13.0rc2 (#1998)
- ✨ Adds support for multiarch OCI images (#1961)
- 🐛 Fixes some bugs building Linux wheels on macOS. (#1961)
- ⚠️ Changes the minimum version of Docker/Podman to Docker API
version 1.43, Podman API version 3. The only mainstream runner this
should affect is Travis Graviton2 runners - if so you can upgrade
your version of Docker. (#1961)
Changelog
Sourced from pypa/cibuildwheel's
changelog.
v2.21.1
16 September 2024
- 🐛 Fix a bug in the Linux build, where files copied to the container
would have invalid ownership permissions (#2007)
- 🐛 Fix a bug on Windows where cibuildwheel would call upon
uv to install dependencies for versions of CPython that it
does not support (#2005)
- 🐛 Fix a bug where
uv 0.4.10 would not use the right
Python when testing on Linux. (#2008)
- 🛠 Bump our documentation pins, fixes an issue with a missing package
(#2011)
v2.21.0
13 September 2024
- ⚠️ Update CPython 3.12 to 3.12.6, which changes the macOS minimum
deployment target on CPython 3.12 from macOS 10.9 to macOS 10.13 (#1998)
- 🛠 Changes the behaviour when inheriting
config-settings
in TOML overrides - rather than extending each key, which is rarely
useful, individual keys will override previously set values. (#1803)
- 🛠 Update CPython 3.13 to 3.13.0rc2 (#1998)
- ✨ Adds support for multiarch OCI images (#1961)
- 🐛 Fixes some bugs building Linux wheels on macOS. (#1961)
- ⚠️ Changes the minimum version of Docker/Podman to Docker API
version 1.43, Podman API version 3. The only mainstream runner this
should affect is Travis Graviton2 runners - if so you can upgrade
your version of Docker. (#1961)
Commits
d4a2945
Bump version: v2.21.19913c03
[pre-commit.ci] pre-commit autoupdate (#2013)c0e28d3
fix: support uv 0.4.10+ on Linux and update dependencies (#2008)8c42e79
fix: file ownership of files copied into the container (#2007)01ecd4e
docs: bump pinned versions (#2011)33da1f7
fix: do not use uv to setup python on windows when
conditions are not met (...79b0dd3
Bump version: v2.21.00787a44
fix: enforce minimum version of docker/podman (#1961)fd11286
[Bot] Update dependencies (#1998)22dc864
[pre-commit.ci] pre-commit autoupdate (#2000)- Additional commits viewable in compare
view
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
Signed-off-by: dependabot[bot]
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
.github/workflows/build_wheel.yml | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)
diff --git a/.github/workflows/build_wheel.yml b/.github/workflows/build_wheel.yml
index 619c4e0fbd..e14fb85188 100644
--- a/.github/workflows/build_wheel.yml
+++ b/.github/workflows/build_wheel.yml
@@ -46,7 +46,7 @@ jobs:
python-version: '3.10'
- name: Build wheels
- uses: pypa/cibuildwheel@v2.20.0
+ uses: pypa/cibuildwheel@v2.21.1
env:
CIBW_ENVIRONMENT_MACOS: ${{ matrix.macos_target }}
CIBW_ARCHS_LINUX: ${{ matrix.arch }}
@@ -63,7 +63,7 @@ jobs:
- uses: actions/checkout@v4
- name: Build wheels
- uses: pypa/cibuildwheel@v2.20.0
+ uses: pypa/cibuildwheel@v2.21.1
env:
CIBW_PLATFORM: pyodide
CIBW_BUILD: 'cp312-pyodide_wasm32'