Bump the pip group across 1 directory with 2 updates

[dependabot]

Bumps the pip group with 2 updates in the / directory: apache-airflow and black.

Updates apache-airflow from 2.2.0 to 2.7.2

Release notes

Sourced from apache-airflow's releases.

Apache Airflow 2.7.2

Significant Changes

No significant changes

Bug Fixes

• Check if the lower of provided values are sensitives in config endpoint (#34712)
• Add support for ZoneInfo and generic UTC to fix datetime serialization (#34683, #34804)
• Fix AttributeError: 'Select' object has no attribute 'count' during the airflow db migrate command (#34348)
• Make dry run optional for patch task instance (#34568)
• Fix non deterministic datetime deserialization (#34492)
• Use iterative loop to look for mapped parent (#34622)
• Fix is_parent_mapped value by checking if any of the parent taskgroup is mapped (#34587)
• Avoid top-level airflow import to avoid circular dependency (#34586)
• Add more exemptions to lengthy metric list (#34531)
• Fix dag warning endpoint permissions (#34355)
• Fix task instance access issue in the batch endpoint (#34315)
• Correcting wrong time showing in grid view (#34179)
• Fix www cluster_activity view not loading due to standaloneDagProcessor templating (#34274)
• Set loglevel=DEBUG in 'Not syncing DAG-level permissions' (#34268)
• Make param validation consistent for DAG validation and triggering (#34248)
• Ensure details panel is shown when any tab is selected (#34136)
• Fix issues related to access_control={} (#34114)
• Fix not found ab_user table in the CLI session (#34120)
• Fix FAB-related logging format interpolation (#34139)
• Fix query bug in next_run_datasets_summary endpoint (#34143)
• Fix for TaskGroup toggles for duplicated labels (#34072)
• Fix the required permissions to clear a TI from the UI (#34123)
• Reuse _run_task_session in mapped render_template_fields (#33309)
• Fix scheduler logic to plan new dag runs by ignoring manual runs (#34027)
• Add missing audit logs for Flask actions add, edit and delete (#34090)
• Hide Irrelevant Dag Processor from Cluster Activity Page (#33611)
• Remove infinite animation for pinwheel, spin for 1.5s (#34020)
• Restore rendering of provider configuration with version_added (#34011)

Doc Only Changes

• Clarify audit log permissions (#34815)
• Add explanation for Audit log users (#34814)
• Import AUTH_REMOTE_USER from FAB in WSGI middleware example (#34721)
• Add information about drop support MsSQL as DB Backend in the future (#34375)
• Document how to use the system's timezone database (#34667)
• Clarify what landing time means in doc (#34608)
• Fix screenshot in dynamic task mapping docs (#34566)
• Fix class reference in Public Interface documentation (#34454)
• Clarify var.value.get and var.json.get usage (#34411)
• Schedule default value description (#34291)
• Docs for triggered_dataset_event (#34410)
• Add DagRun events (#34328)
• Provide tabular overview about trigger form param types (#34285)

... (truncated)

Changelog

Sourced from apache-airflow's changelog.

Airflow 2.7.2 (2023-10-12)

Significant Changes ^^^^^^^^^^^^^^^^^^^

No significant changes

Bug Fixes """""""""

• Check if the lower of provided values are sensitives in config endpoint (#34712)
• Add support for ZoneInfo and generic UTC to fix datetime serialization (#34683, #34804)
• Fix AttributeError: 'Select' object has no attribute 'count' during the airflow db migrate command (#34348)
• Make dry run optional for patch task instance (#34568)
• Fix non deterministic datetime deserialization (#34492)
• Use iterative loop to look for mapped parent (#34622)
• Fix is_parent_mapped value by checking if any of the parent taskgroup is mapped (#34587)
• Avoid top-level airflow import to avoid circular dependency (#34586)
• Add more exemptions to lengthy metric list (#34531)
• Fix dag warning endpoint permissions (#34355)
• Fix task instance access issue in the batch endpoint (#34315)
• Correcting wrong time showing in grid view (#34179)
• Fix www cluster_activity view not loading due to standaloneDagProcessor templating (#34274)
• Set loglevel=DEBUG in 'Not syncing DAG-level permissions' (#34268)
• Make param validation consistent for DAG validation and triggering (#34248)
• Ensure details panel is shown when any tab is selected (#34136)
• Fix issues related to access_control={} (#34114)
• Fix not found ab_user table in the CLI session (#34120)
• Fix FAB-related logging format interpolation (#34139)
• Fix query bug in next_run_datasets_summary endpoint (#34143)
• Fix for TaskGroup toggles for duplicated labels (#34072)
• Fix the required permissions to clear a TI from the UI (#34123)
• Reuse _run_task_session in mapped render_template_fields (#33309)
• Fix scheduler logic to plan new dag runs by ignoring manual runs (#34027)
• Add missing audit logs for Flask actions add, edit and delete (#34090)
• Hide Irrelevant Dag Processor from Cluster Activity Page (#33611)
• Remove infinite animation for pinwheel, spin for 1.5s (#34020)
• Restore rendering of provider configuration with version_added (#34011)

Doc Only Changes """"""""""""""""

• Clarify audit log permissions (#34815)
• Add explanation for Audit log users (#34814)
• Import AUTH_REMOTE_USER from FAB in WSGI middleware example (#34721)
• Add information about drop support MsSQL as DB Backend in the future (#34375)
• Document how to use the system's timezone database (#34667)
• Clarify what landing time means in doc (#34608)
• Fix screenshot in dynamic task mapping docs (#34566)
• Fix class reference in Public Interface documentation (#34454)

... (truncated)

Commits

• c8b25cb Update RELEASE_NOTES.rst
• 145dbc9 Clarify audit log permissions (#34815)
• 9cd8f4c Add explanation for Audit log users (#34814)
• a4a0b5d Check if the lower of provided values are sensitives in config endpoint (#34712)
• 1fdfa9a zoneinfo.ZoneInfo is not available on < Python 3.9 (#34804)
• 9fdbe7b Add support for ZoneInfo and generic UTC (#34683)
• c20fc8a Fix autodetect_docker_context for list of dict case (#34779)
• a68ad56 Fix broken breeze by fixing package version (#34701)
• f8fc3d6 Parse 'docker context ls --format=json' correctly (#34711)
• ed36b28 Avoid WSL2 ones when finding a context for Breeze (#34538)
• Additional commits viewable in compare view

Updates black from 21.9b0 to 24.3.0

Release notes

Sourced from black's releases.

24.3.0

Highlights

This release is a milestone: it fixes Black's first CVE security vulnerability. If you run Black on untrusted input, or if you habitually put thousands of leading tab characters in your docstrings, you are strongly encouraged to upgrade immediately to fix CVE-2024-21503.

This release also fixes a bug in Black's AST safety check that allowed Black to make incorrect changes to certain f-strings that are valid in Python 3.12 and higher.

Stable style

• Don't move comments along with delimiters, which could cause crashes (#4248)
• Strengthen AST safety check to catch more unsafe changes to strings. Previous versions of Black would incorrectly format the contents of certain unusual f-strings containing nested strings with the same quote type. Now, Black will crash on such strings until support for the new f-string syntax is implemented. (#4270)
• Fix a bug where line-ranges exceeding the last code line would not work as expected (#4273)

Performance

• Fix catastrophic performance on docstrings that contain large numbers of leading tab characters. This fixes CVE-2024-21503. (#4278)

Documentation

• Note what happens when --check is used with --quiet (#4236)

24.2.0

Stable style

• Fixed a bug where comments where mistakenly removed along with redundant parentheses (#4218)

Preview style

• Move the hug_parens_with_braces_and_square_brackets feature to the unstable style due to an outstanding crash and proposed formatting tweaks (#4198)
• Fixed a bug where base expressions caused inconsistent formatting of ** in tenary expression (#4154)
• Checking for newline before adding one on docstring that is almost at the line limit (#4185)
• Remove redundant parentheses in case statement if guards (#4214).

Configuration

... (truncated)

Changelog

Sourced from black's changelog.

24.3.0

Highlights

This release is a milestone: it fixes Black's first CVE security vulnerability. If you run Black on untrusted input, or if you habitually put thousands of leading tab characters in your docstrings, you are strongly encouraged to upgrade immediately to fix CVE-2024-21503.

This release also fixes a bug in Black's AST safety check that allowed Black to make incorrect changes to certain f-strings that are valid in Python 3.12 and higher.

Stable style

• Don't move comments along with delimiters, which could cause crashes (#4248)
• Strengthen AST safety check to catch more unsafe changes to strings. Previous versions of Black would incorrectly format the contents of certain unusual f-strings containing nested strings with the same quote type. Now, Black will crash on such strings until support for the new f-string syntax is implemented. (#4270)
• Fix a bug where line-ranges exceeding the last code line would not work as expected (#4273)

Performance

• Fix catastrophic performance on docstrings that contain large numbers of leading tab characters. This fixes CVE-2024-21503. (#4278)

Documentation

• Note what happens when --check is used with --quiet (#4236)

24.2.0

Stable style

• Fixed a bug where comments where mistakenly removed along with redundant parentheses (#4218)

Preview style

• Move the hug_parens_with_braces_and_square_brackets feature to the unstable style due to an outstanding crash and proposed formatting tweaks (#4198)
• Fixed a bug where base expressions caused inconsistent formatting of ** in tenary expression (#4154)
• Checking for newline before adding one on docstring that is almost at the line limit (#4185)
• Remove redundant parentheses in case statement if guards (#4214).

... (truncated)

Commits

• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
  You can disable automated security fix PRs for this repo from the Security Alerts page.