Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Mar 10, 2025

Bumps the python-packages group with 6 updates in the / directory:

Package From To
beautifulsoup4 4.12.3 4.13.3
cloudflare 3.1.1 4.0.0
django 5.1.4 5.1.7
factory-boy 3.3.1 3.3.3
pytest 8.3.4 8.3.5
whitenoise 6.8.2 6.9.0

Updates beautifulsoup4 from 4.12.3 to 4.13.3

Updates cloudflare from 3.1.1 to 4.0.0

Release notes

Sourced from cloudflare's releases.

v4.0.0

4.0.0 (2025-01-13)

Full Changelog: v3.1.1...v4.0.0

⚠ BREAKING CHANGES

  • addressing: reshuffle relationship in the namespace to align with the product (#2322)
  • r2: rename cf-r2-jurisdiction to more usable jurisdiction parameter (#2310)
  • r2: rename cf-r2-jurisdiction to more usable jurisdiction parameter (#2309)
  • r2: rename cf-r2-jurisdiction to more usable jurisdiction parameter (#2308)
  • loa_documents: move download subresource into parent as get (#2304)
  • addressing: move service bindings to dedicated namespace (#2303)
  • ai: move to dedicated namespace (#2269)
  • kv: move analytics under existing namespace (#2239)
  • zone_transfers: move under DNS namespace (#2234)
  • dnssec: move under DNS namespace (#2233)
  • url_scanner: swap all methods to be v2 only (#2231)
  • warp_connector: move under zero trust namespace (#2220)

Features

... (truncated)

Changelog

Sourced from cloudflare's changelog.

4.0.0 (2025-01-13)

Full Changelog: v3.1.1...v4.0.0

⚠ BREAKING CHANGES

  • addressing: reshuffle relationship in the namespace to align with the product (#2322)
  • r2: rename cf-r2-jurisdiction to more usable jurisdiction parameter (#2310)
  • r2: rename cf-r2-jurisdiction to more usable jurisdiction parameter (#2309)
  • r2: rename cf-r2-jurisdiction to more usable jurisdiction parameter (#2308)
  • loa_documents: move download subresource into parent as get (#2304)
  • addressing: move service bindings to dedicated namespace (#2303)
  • ai: move to dedicated namespace (#2269)
  • kv: move analytics under existing namespace (#2239)
  • zone_transfers: move under DNS namespace (#2234)
  • dnssec: move under DNS namespace (#2233)
  • url_scanner: swap all methods to be v2 only (#2231)
  • warp_connector: move under zero trust namespace (#2220)

Features

... (truncated)

Commits

Updates django from 5.1.4 to 5.1.7

Commits
  • 691e945 [5.1.x] Bumped version for 5.1.7 release.
  • 8dbb44d [5.1.x] Fixed CVE-2025-26699 -- Mitigated potential DoS in wordwrap template ...
  • d7dc1f6 [5.1.x] Fixed typo in docs/ref/checks.txt.
  • dbd94e7 [5.1.x] Fixed #36227 -- Fixed outdated PostgreSQL documentation links.
  • cc405e1 [5.1.x] Fixed #36128 -- Clarified auto-generated unique constraint on m2m thr...
  • 03ace75 [5.1.x] Fixed #36217 -- Restored pre_save/post_save signal emission via LogEn...
  • 76a9f12 [5.1.x] Added some heading labels to to docs/topics/cache.txt.
  • 558c616 [5.1.x] Added stub release notes and release date for 5.1.7, 5.0.13, and 4.2.20.
  • 11243cc [5.1.x] Added security guideline on reasonable size limitations when renderin...
  • b80288a [5.1.x] Added security reporting guidelines.
  • Additional commits viewable in compare view

Updates factory-boy from 3.3.1 to 3.3.3

Changelog

Sourced from factory-boy's changelog.

3.3.3 (2025-02-03)

New:

  • Publish type annotations

3.3.2 (2025-02-03)

Bugfix:

  • Fix docs generation

New:

  • Add support for Python 3.13
Commits
  • f82a7bf Preparing release 3.3.3
  • 336b72f Export type annotations
  • aec0b19 Announce support for intermediate Django versions
  • fa397a2 Fix comment, as caught in #1108
  • 8b75576 Back to development: 3.3.3
  • 11a9acf Preparing release 3.3.2
  • c463536 Update Changelog
  • 6f5f6a0 Fix tox.ini config for Django "main"
  • 68cb77c Replace Python 3.8 with 3.13 in testing matrix
  • e007ef7 fixup! Update readthedocs build configuration
  • Additional commits viewable in compare view

Updates pytest from 8.3.4 to 8.3.5

Release notes

Sourced from pytest's releases.

8.3.5

pytest 8.3.5 (2025-03-02)

Bug fixes

  • #11777: Fixed issue where sequences were still being shortened even with -vv verbosity.
  • #12888: Fixed broken input when using Python 3.13+ and a libedit build of Python, such as on macOS or with uv-managed Python binaries from the python-build-standalone project. This could manifest e.g. by a broken prompt when using Pdb, or seeing empty inputs with manual usage of input() and suspended capturing.
  • #13026: Fixed AttributeError{.interpreted-text role="class"} crash when using --import-mode=importlib when top-level directory same name as another module of the standard library.
  • #13053: Fixed a regression in pytest 8.3.4 where, when using --import-mode=importlib, a directory containing py file with the same name would cause an ImportError
  • #13083: Fixed issue where pytest could crash if one of the collected directories got removed during collection.

Improved documentation

  • #12842: Added dedicated page about using types with pytest.

    See types{.interpreted-text role="ref"} for detailed usage.

Contributor-facing changes

  • #13112: Fixed selftest failures in test_terminal.py with Pygments >= 2.19.0
  • #13256: Support for Towncrier versions released in 2024 has been re-enabled when building Sphinx docs -- by webknjaz{.interpreted-text role="user"}.
Commits

Updates whitenoise from 6.8.2 to 6.9.0

Changelog

Sourced from whitenoise's changelog.

6.9.0 (2025-02-06)

  • Support Django 5.2.
Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Mar 10, 2025
@dependabot dependabot bot force-pushed the dependabot/pip/python-packages-ba4085c843 branch 2 times, most recently from 43c5cc1 to 3b4377d Compare March 20, 2025 13:03
@dependabot dependabot bot force-pushed the dependabot/pip/python-packages-ba4085c843 branch from 3b4377d to 124d17b Compare March 26, 2025 13:49
Bumps the python-packages group with 6 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [beautifulsoup4](https://www.crummy.com/software/BeautifulSoup/bs4/) | `4.12.3` | `4.13.3` |
| [cloudflare](https://github.com/cloudflare/cloudflare-python) | `3.1.1` | `4.0.0` |
| [django](https://github.com/django/django) | `5.1.4` | `5.1.7` |
| [factory-boy](https://github.com/FactoryBoy/factory_boy) | `3.3.1` | `3.3.3` |
| [pytest](https://github.com/pytest-dev/pytest) | `8.3.4` | `8.3.5` |
| [whitenoise](https://github.com/evansd/whitenoise) | `6.8.2` | `6.9.0` |



Updates `beautifulsoup4` from 4.12.3 to 4.13.3

Updates `cloudflare` from 3.1.1 to 4.0.0
- [Release notes](https://github.com/cloudflare/cloudflare-python/releases)
- [Changelog](https://github.com/cloudflare/cloudflare-python/blob/main/CHANGELOG.md)
- [Commits](https://github.com/cloudflare/cloudflare-python/commits/v4.0.0)

Updates `django` from 5.1.4 to 5.1.7
- [Commits](django/django@5.1.4...5.1.7)

Updates `factory-boy` from 3.3.1 to 3.3.3
- [Changelog](https://github.com/FactoryBoy/factory_boy/blob/master/docs/changelog.rst)
- [Commits](FactoryBoy/factory_boy@3.3.1...3.3.3)

Updates `pytest` from 8.3.4 to 8.3.5
- [Release notes](https://github.com/pytest-dev/pytest/releases)
- [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst)
- [Commits](pytest-dev/pytest@8.3.4...8.3.5)

Updates `whitenoise` from 6.8.2 to 6.9.0
- [Changelog](https://github.com/evansd/whitenoise/blob/main/docs/changelog.rst)
- [Commits](evansd/whitenoise@6.8.2...6.9.0)

---
updated-dependencies:
- dependency-name: beautifulsoup4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-packages
- dependency-name: cloudflare
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: python-packages
- dependency-name: django
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-packages
- dependency-name: factory-boy
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-packages
- dependency-name: pytest
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-packages
- dependency-name: whitenoise
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-packages
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot force-pushed the dependabot/pip/python-packages-ba4085c843 branch from 124d17b to 5dbe310 Compare April 9, 2025 13:35
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant