Skip to content

fix(deps) Update all non-major dependencies#122

Open
renovate[bot] wants to merge 1 commit into
devfrom
renovate/all-minor-patch
Open

fix(deps) Update all non-major dependencies#122
renovate[bot] wants to merge 1 commit into
devfrom
renovate/all-minor-patch

Conversation

@renovate
Copy link
Copy Markdown

@renovate renovate Bot commented Feb 11, 2024 •
edited
Loading

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence Type Update
@semantic-release/npm 11.0.2 → 11.0.3 age confidence devDependencies patch
Flask-SQLAlchemy (changelog) 3.0.5 → 3.1.1 age confidence dev-dependencies minor
asottile/pyupgrade v3.15.0 → v3.21.2 age confidence repository minor
bandit (source, changelog) 1.7.5 → 1.9.4 age confidence dev-dependencies minor
boto3 1.33.13 → 1.43.9 age confidence dev-dependencies minor
cachelib (changelog) ^0.10.0 → ^0.14.0 age confidence dependencies minor
coverage 7.2.7 → 7.14.0 age confidence dev-dependencies minor
elasticsearch 8.12.0 → 8.19.3 age confidence dev-dependencies minor
google-cloud-datastore (source) 2.19.0 → 2.24.0 age confidence dev-dependencies minor
google-cloud-firestore (source) 2.14.0 → 2.27.0 age confidence dev-dependencies minor
isort (changelog) 5.11.5 → 5.13.2 age confidence dev-dependencies minor
macisamuele/language-formatters-pre-commit-hooks v2.12.0 → v2.16.0 age confidence repository minor
myint/autoflake v2.2.1 → v2.3.3 age confidence repository minor
mypy (changelog) 1.4.1 → 1.20.2 age confidence dev-dependencies minor
peewee (changelog) 3.17.0 → 3.19.0 age confidence dev-dependencies minor
pre-commit/pre-commit-hooks v4.5.0 → v4.6.0 age confidence repository minor
pymongo 4.7.3 → 4.17.0 age confidence dev-dependencies minor
python 3.10 → 3.14 age confidence uses-with minor
redis (changelog) 5.0.1 → 5.3.1 age confidence dev-dependencies minor
semantic-release 23.0.0 → 23.1.1 age confidence devDependencies minor
supercharge/mongodb-github-action v1.10.0 → 1.12.1 age confidence action minor
supercharge/redis-github-action 1.8.0 → 1.8.1 age confidence action patch
tox (changelog) 4.8.0 → 4.54.0 age confidence dev-dependencies minor

Note: The pre-commit manager in Renovate is not supported by the pre-commit maintainers or community. Please do not report any problems there, instead create a Discussion in the Renovate repository if you have any questions.

Release Notes

semantic-release/npm (@​semantic-release/npm)

v11.0.3

Compare Source

Bug Fixes

even though our existing range allowed anyone to update as soon as the new npm version was available, this will encourage being on a version that does not report the ip vulnerability a bit more forcefully

asottile/pyupgrade (asottile/pyupgrade)

v3.21.2

Compare Source

v3.21.1

Compare Source

v3.21.0

Compare Source

v3.20.0

Compare Source

v3.19.1

Compare Source

v3.19.0

Compare Source

v3.18.0

Compare Source

v3.17.0

Compare Source

v3.16.0

Compare Source

v3.15.2

Compare Source

v3.15.1

Compare Source

PyCQA/bandit (bandit)

v1.9.4

Compare Source

What's Changed
New Contributors

Full Changelog: PyCQA/bandit@1.9.3...1.9.4

v1.9.3

Compare Source

What's Changed

New Contributors

Full Changelog: PyCQA/bandit@1.9.2...1.9.3

v1.9.2

Compare Source

What's Changed

Full Changelog: PyCQA/bandit@1.9.1...1.9.2

v1.9.1

Compare Source

What's Changed

Full Changelog: PyCQA/bandit@1.9.0...1.9.1

v1.8.6

Compare Source

What's Changed

New Contributors

Full Changelog: PyCQA/bandit@1.8.5...1.8.6

v1.8.5

Compare Source

What's Changed

Full Changelog: PyCQA/bandit@1.8.4...1.8.5

v1.8.3

Compare Source

What's Changed

New Contributors

Full Changelog: PyCQA/bandit@1.8.2...1.8.3

v1.8.2

Compare Source

What's Changed

Full Changelog: PyCQA/bandit@1.8.1...1.8.2

v1.8.1

Compare Source

What's Changed

New Contributors

Full Changelog: PyCQA/bandit@1.8.0...1.8.1

v1.8.0

Compare Source

What's Changed

Full Changelog: PyCQA/bandit@1.7.10...1.8.0

v1.7.10

Compare Source

What's Changed

New Contributors

Full Changelog: PyCQA/bandit@1.7.9...1.7.10

v1.7.9

Compare Source

What's Changed

New Contributors

Full Changelog: PyCQA/bandit@1.7.8...1.7.9

v1.7.8

Compare Source

What's Changed

New Contributors

Full Changelog: PyCQA/bandit@1.7.7...1.7.8

v1.7.7

Compare Source

What's Changed

New Contributors

Full Changelog: PyCQA/bandit@1.7.6...1.7.7

v1.7.6

Compare Source

What's Changed

New Contributors

Full Changelog: PyCQA/bandit@1.7.5...1.7.6

boto/boto3 (boto3)

v1.43.9

Compare Source

======

  • api-change:logs: [botocore] Updating the max limit for start query api parameter.
  • api-change:mediapackagev2: [botocore] This release adds support for AvailabilityStartTimeConfiguration in MediaPackageV2 DASH manifests
  • api-change:partnercentral-selling: [botocore] Enable TCV intake on Opportunity to improve Opportunities Hygiene and downstream revenue attribution.

v1.43.8

Compare Source

======

  • api-change:bedrock: [botocore] Advanced Prompt Optimization (AdvPO) allows you to optimize and migrate your prompts for any model on Bedrock by automatically evaluating responses and rewriting prompts to improve performance. This release provides a programmatic way to create, get, list, stop, and delete AdvPO jobs.
  • api-change:cloudfront: [botocore] Adding a new boolean for OCSP Revocations in Viewer mTLS Create and Update APIs, and adding a new 'Passthrough' option for TrustStore modes
  • api-change:datazone: [botocore] Adds support for SageMaker Unified Studio notebook operations, including notebook import and export
  • api-change:dms: [botocore] Add 9 SDK waiters for DMS Schema Conversion async operations. Eliminates manual polling for import, assessment, conversion, export, and creation jobs.
  • api-change:glue: [botocore] Release --has-databases parameter for AWS Glue get-catalogs API, which filters catalog responses to include only those capable of containing databases, excluding parent catalogs that hold only other catalogs. Remove model-level validation on partition index list size for AWS Glue tables.
  • api-change:grafana: [botocore] Adds support for dual-stack (IPv4 and IPv6) connectivity to Amazon Managed Grafana workspaces. Customers can configure the ipAddressType parameter when creating or updating a workspace to choose between IPv4-only or dual-stack (IPv4 and IPv6) access.
  • api-change:mgn: [botocore] Introducing new option for security groups mapping - with MAP-DHCP the service translates security rules from your source environment with DHCP compatibility.
  • api-change:qconnect: [botocore] ListModels is an API that returns the available AI models for a Connect Assistant based on its region and AI prompt type.

v1.43.7

Compare Source

======

  • api-change:arc-region-switch: [botocore] Adds support for enabling and disabling Lambda event source mappings in Region switch plans.
  • api-change:batch: [botocore] Adds a billing callout to docs regarding using the CE Scale Down Delay feature
  • api-change:bedrock-agentcore-control: [botocore] Adds support for read-only summary APIs for Policy Engine, Policy, and Policy Generation resources, enabling metadata retrieval without KMS decryption for AWS Config integration.
  • api-change:billingconductor: [botocore] Add ConflictException to UpdateCustomLineItem operation.
  • api-change:connect: [botocore] This change added three new EventSourceName for schedule notification feature
  • api-change:connectcampaignsv2: [botocore] This release added support for Outbound Campaign timezone detection using all available contact methods
  • api-change:connectcases: [botocore] Amazon Connect Cases now supports SLA durations of up to 2 years (1,051,200 minutes), increased from the previous maximum of 90 days (129,600 minutes). This enables you to track long-running service level agreements for cases that require extended resolution timelines.
  • api-change:dsql: [botocore] Added support for Amazon Aurora DSQL change data capture (CDC) streams that deliver row-level database changes to Amazon Kinesis in JSON format. Includes CreateStream, GetStream, ListStreams, and DeleteStream operations.
  • api-change:ec2: [botocore] Include length limits in the SDK and documentation for text fields in Image (AMI) APIs such as the image name and description
  • api-change:endpoint-rules: [botocore] Update endpoint-rules client to latest version
  • api-change:es: [botocore] Adds support for AutomatedSnapshotPauseOptions.
  • api-change:glue: [botocore] AWS Glue now defaults the job timeout to 480 minutes for Glue version 5.0 and later when no timeout value is specified. The default remains 2,880 minutes for Glue version 4.0 and earlier.
  • api-change:lightsail: [botocore] Added OriginIpAddressTypeEnum (ipv4, ipv6, dualstack) and ipAddressType field to Origin and InputOrigin structures for Lightsail CDN distributions. Allows customers to specify how the distribution connects to origins, using IPv4, IPv6, or dualstack networking
  • api-change:opensearch: [botocore] Adds support for AutomatedSnapshotPauseOptions.
  • api-change:partnercentral-account: [botocore] Added ServiceQuotaExceededExceptions for Profile operations
  • api-change:pcs: [botocore] Add support for Amazon EC2 Interruptible-ODCR
  • api-change:quicksight: [botocore] Adds five new custom permission option for Quick Apps so that these capabilities can be controlled by public SDK and CLI.
  • api-change:redshift: [botocore] Added rg.xlarge and rg.4xlarge to valid NodeType values and updated documentation for CreateCluster, ModifyCluster, ResizeCluster, and RestoreFromClusterSnapshot APIs to reflect RG node type support.
  • api-change:rtbfabric: [botocore] Customers can now configure custom domain names for their RTB Fabric gateways. This enables partners to use their own branded domain for RTB traffic instead of the default rtbfabric endpoint
  • api-change:sagemaker: [botocore] Adds execution role session name mode to reflect user identity in Studio. Adds Flexible Training Plans on Studio apps. Adds restricted model packages to control access to proprietary model artifacts via IAM. Fixed instance type parity between inference endpoints and managed shadow tests.
  • api-change:securityagent: [botocore] Add support for code reviews, a new resource type that enables automated security-focused static analysis of source code repositories.
  • api-change:socialmessaging: [botocore] Adds parameters to call the GetWhatsAppMessageTemplate and UpdateWhatsAppMessageTemplate APIs with a template name and language code in place of the template ID. Linked WhatsApp accounts also describe whether the WABA is onboarded to Meta's Marketing Messages API.
  • api-change:stepfunctions: [botocore] Updated default SDK endpoints for AWS Step Functions in AWS GovCloud (US) regions. The default Dual-Stack endpoints now resolve to "states-fips" prefixed hostnames. There are no changes to service behavior. No customer action is required.

v1.43.6

Compare Source

======

  • api-change:bcm-data-exports: [botocore] With this release, customers can configure their data exports to generate additional integration artifacts for Athena and Redshift.
  • api-change:bedrock-agentcore: [botocore] Launching AgentCore payments - a capability that provides secure, instant microtransaction payments for AI agents to access paid APIs, MCP servers, and content. It handles payment processing for x402 protocol, payment limits, and 3P wallet integrations with Coinbase CDP and Stripe (Privy).
  • api-change:bedrock-agentcore-control: [botocore] Launching AgentCore payments - a capability that provides secure, instant microtransaction payments for AI agents to access paid APIs, MCP servers, and content. It handles payment processing for x402 protocol, payment limits, and 3P wallet integrations with Coinbase CDP and Stripe (Privy).
  • api-change:ec2: [botocore] DescribeInstanc

✂ Note

PR body was truncated to here.

Configuration

📅 Schedule: (in timezone America/Chicago)

  • Branch creation
    • "before 10pm on Sunday"
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate
Copy link
Copy Markdown
Author

renovate Bot commented Feb 11, 2024 •
edited
Loading

⚠ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

  • any of the package files in this branch needs updating, or
  • the branch becomes conflicted, or
  • you click the rebase/retry checkbox if found above, or
  • you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: poetry.lock
Updating dependencies
Resolving dependencies...

Creating virtualenv flask-session2-hlBlwS4--py3.12 in /home/ubuntu/.cache/pypoetry/virtualenvs

The current project's Python requirement (>=3.7.2,<4.0.0) is not compatible with some of the required packages Python requirement:
  - cachelib requires Python >=3.8, so it will not be satisfied for Python >=3.7.2,<3.8

Because no versions of cachelib match >0.13.0,<0.14.0
 and cachelib (0.13.0) requires Python >=3.8, cachelib is forbidden.
So, because flask-session2 depends on cachelib (^0.13.0), version solving failed.

  • Check your dependencies Python requirement: The Python requirement can be specified via the `python` or `markers` properties
    
    For cachelib, a possible solution would be to set the `python` property to ">=3.8,<4.0.0"

    https://python-poetry.org/docs/dependency-specification/#python-restricted-dependencies,
    https://python-poetry.org/docs/dependency-specification/#using-environment-markers

@renovate renovate Bot force-pushed the renovate/all-minor-patch branch 7 times, most recently from f711d1f to 9999140 Compare February 17, 2024 04:19
@renovate renovate Bot force-pushed the renovate/all-minor-patch branch 10 times, most recently from 8f12b36 to 6a5e71e Compare February 25, 2024 11:43
@renovate renovate Bot force-pushed the renovate/all-minor-patch branch 6 times, most recently from 113102d to 63b8c12 Compare March 1, 2024 21:29
@renovate renovate Bot force-pushed the renovate/all-minor-patch branch 4 times, most recently from b35674f to c43db40 Compare March 6, 2024 01:55
@renovate renovate Bot force-pushed the renovate/all-minor-patch branch 10 times, most recently from 935cb6b to d9c204f Compare March 22, 2024 17:23
@renovate renovate Bot force-pushed the renovate/all-minor-patch branch 11 times, most recently from 9828dc2 to 8c00cb7 Compare March 29, 2024 20:07
@renovate renovate Bot force-pushed the renovate/all-minor-patch branch 7 times, most recently from aee391f to 049be56 Compare April 6, 2024 21:43
@renovate
Copy link
Copy Markdown
Author

renovate Bot commented May 10, 2024 •
edited
Loading

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

  • any of the package files in this branch needs updating, or
  • the branch becomes conflicted, or
  • you click the rebase/retry checkbox if found above, or
  • you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: poetry.lock
Updating dependencies
Resolving dependencies...

Creating virtualenv flask-session2-hlBlwS4--py3.14 in /home/ubuntu/.cache/pypoetry/virtualenvs

The current project's Python requirement (>=3.7.2,<4.0.0) is not compatible with some of the required packages Python requirement:
  - cachelib requires Python >=3.8, so it will not be satisfied for Python >=3.7.2,<3.8

Because no versions of cachelib match >0.14.0,<0.15.0
 and cachelib (0.14.0) requires Python >=3.8, cachelib is forbidden.
So, because flask-session2 depends on cachelib (^0.14.0), version solving failed.

  • Check your dependencies Python requirement: The Python requirement can be specified via the `python` or `markers` properties
    
    For cachelib, a possible solution would be to set the `python` property to ">=3.8,<4.0.0"

    https://python-poetry.org/docs/dependency-specification/#python-restricted-dependencies,
    https://python-poetry.org/docs/dependency-specification/#using-environment-markers

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

maintenance renovate

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants