Commit 93af580

authored

chore(deps): update osv-lib (google#5511)

This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [google-cloud-logging](https://redirect.github.com/googleapis/google-cloud-python/tree/main/packages/google-cloud-logging) ([source](https://redirect.github.com/googleapis/google-cloud-python)) | `3.15.0` → `3.16.0` | ![age](https://developer.mend.io/api/mc/badges/age/pypi/google-cloud-logging/3.16.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/pypi/google-cloud-logging/3.15.0/3.16.0?slim=true) | | [google-cloud-pubsub](https://redirect.github.com/googleapis/google-cloud-python/tree/main/packages/google-cloud-pubsub) ([source](https://redirect.github.com/googleapis/google-cloud-python)) | `2.38.0` → `2.39.0` | ![age](https://developer.mend.io/api/mc/badges/age/pypi/google-cloud-pubsub/2.39.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/pypi/google-cloud-pubsub/2.38.0/2.39.0?slim=true) | | [google-cloud-storage](https://redirect.github.com/googleapis/google-cloud-python/tree/main/packages/google-cloud-storage) ([source](https://redirect.github.com/googleapis/google-cloud-python)) | `3.10.1` → `3.11.0` | ![age](https://developer.mend.io/api/mc/badges/age/pypi/google-cloud-storage/3.11.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/pypi/google-cloud-storage/3.10.1/3.11.0?slim=true) | | [grpcio](https://redirect.github.com/grpc/grpc) | `1.80.0` → `1.81.0` | ![age](https://developer.mend.io/api/mc/badges/age/pypi/grpcio/1.81.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/pypi/grpcio/1.80.0/1.81.0?slim=true) | | grpcio-tools | `1.80.0` → `1.81.0` | ![age](https://developer.mend.io/api/mc/badges/age/pypi/grpcio-tools/1.81.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/pypi/grpcio-tools/1.80.0/1.81.0?slim=true) | | [hypothesis](https://redirect.github.com/HypothesisWorks/hypothesis) ([changelog](https://hypothesis.readthedocs.io/en/latest/changelog.html)) | `6.153.2` → `6.155.1` | ![age](https://developer.mend.io/api/mc/badges/age/pypi/hypothesis/6.155.1?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/pypi/hypothesis/6.153.2/6.155.1?slim=true) | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](..google/issues/714) for more information. --- ### Release Notes <details> <summary>googleapis/google-cloud-python (google-cloud-logging)</summary> ### [`v3.16.0`](https://redirect.github.com/googleapis/google-cloud-python/releases/tag/google-cloud-logging-v3.16.0): google-cloud-logging: v3.16.0 [Compare Source](https://redirect.github.com/googleapis/google-cloud-python/compare/google-cloud-logging-v3.15.0...google-cloud-logging-v3.16.0) ##### Features - drop support for Python 3.7, 3.8, and 3.9 runtimes ([#17276](https://redirect.github.com/googleapis/google-cloud-python/issues/17276)) ([014e951b](https://redirect.github.com/googleapis/google-cloud-python/commit/014e951b)) </details> <details> <summary>grpc/grpc (grpcio)</summary> ### [`v1.81.0`](https://redirect.github.com/grpc/grpc/releases/tag/v1.81.0) [Compare Source](https://redirect.github.com/grpc/grpc/compare/v1.80.0...v1.81.0) This is release 1.81.0 ([graphic](https://redirect.github.com/grpc/grpc/blob/master/doc/g_stands_for.md)) of gRPC Core. For gRPC documentation, see [grpc.io](https://grpc.io/). For previous releases, see [Releases](https://redirect.github.com/grpc/grpc/releases). This release contains refinements, improvements, and bug fixes, with highlights listed below. ## Core - \[EventEngine] Fix a potential use-after-free error on Windows. ([#42078](https://redirect.github.com/grpc/grpc/pull/42078)) - \[ssl] Server side handshaker factory stores a map of key signers. ([#42002](https://redirect.github.com/grpc/grpc/pull/42002)) - \[Core] Fix completion queue shutdown race on weak memory models (ARM). ([#41510](https://redirect.github.com/grpc/grpc/pull/41510)) - \[EventEngine] Fix a Windows race that causes an assertion error. ([#41563](https://redirect.github.com/grpc/grpc/pull/41563)) - \[grpc\_error] enable error\_flatten experiment in OSS. ([#41471](https://redirect.github.com/grpc/grpc/pull/41471)) - \[Python] Trim Python2 backward compatiblity syntax - removed (object) inheritance. ([#41708](https://redirect.github.com/grpc/grpc/pull/41708)) ## Objective-C - \[ObjC] Add receiveNextMessage to GRPCUnaryProtoCall. ([#42260](https://redirect.github.com/grpc/grpc/pull/42260)) ## Python - \[Python] Add typing\_extensions dep to aio Bazel target. ([#42001](https://redirect.github.com/grpc/grpc/pull/42001)) - \[Python] \[Pyright] Part 1 - Pyright for src/python/grpcio/grpc/aio/\_base\_server.py. ([#42240](https://redirect.github.com/grpc/grpc/pull/42240)) - \[Python] Drop 3.9. ([#42145](https://redirect.github.com/grpc/grpc/pull/42145)) - \[Python] grpc-status: Relax protobuf dependency upper bound to allow 7.x. ([#41948](https://redirect.github.com/grpc/grpc/pull/41948)) - \[Python] \[Typeguard] Part 5 - Add Typeguard SYNC Stack in tests. ([#40278](https://redirect.github.com/grpc/grpc/pull/40278)) - \[Python] Remove GIL from ReceiveMessageOperation.un\_c method. ([#41812](https://redirect.github.com/grpc/grpc/pull/41812)) - \[Python] Support observability in AsyncIO stack. ([#41573](https://redirect.github.com/grpc/grpc/pull/41573)) ## Ruby - \[Ruby] Drop support for EOL Ruby 3.1 and clean up. ([#41435](https://redirect.github.com/grpc/grpc/pull/41435)) - \[Ruby] Composed CallCredentials keep a reference to their source. ([#41782](https://redirect.github.com/grpc/grpc/pull/41782)) </details> <details> <summary>HypothesisWorks/hypothesis (hypothesis)</summary> ### [`v6.155.1`](https://redirect.github.com/HypothesisWorks/hypothesis/releases/tag/v6.155.1): Hypothesis version 6.155.1 [Compare Source](https://redirect.github.com/HypothesisWorks/hypothesis/compare/v6.155.0...v6.155.1) Shrinking large floats, strings, and bytestrings is now much faster in some cases (issue [#4006](https://redirect.github.com/HypothesisWorks/hypothesis/issues/4006)). *[The canonical version of these notes (with links) is on readthedocs.](https://hypothesis.readthedocs.io/en/latest/changelog.html#v6-155-1)* ### [`v6.155.0`](https://redirect.github.com/HypothesisWorks/hypothesis/releases/tag/v6.155.0): Hypothesis version 6.155.0 [Compare Source](https://redirect.github.com/HypothesisWorks/hypothesis/compare/v6.154.2...v6.155.0) "from\_dtype()" now supports the variable-width string dtype "numpy.dtypes.StringDType", generating arbitrary strings via "text()" (issue [#4039](https://redirect.github.com/HypothesisWorks/hypothesis/issues/4039)). Additionally, passing a dtype *class* such as "np.dtypes.StringDType" where an instance like "np.dtypes.StringDType()" was expected now raises a clear error, rather than the previous confusing message (or silent coercion to the object dtype in "arrays()"). *[The canonical version of these notes (with links) is on readthedocs.](https://hypothesis.readthedocs.io/en/latest/changelog.html#v6-155-0)* ### [`v6.154.2`](https://redirect.github.com/HypothesisWorks/hypothesis/releases/tag/v6.154.2): Hypothesis version 6.154.2 [Compare Source](https://redirect.github.com/HypothesisWorks/hypothesis/compare/v6.154.1...v6.154.2) This patch improves the type annotations of "fixed\_dictionaries()", which now accepts a "Mapping" rather than requiring an invariant "dict". Because the value type is covariant, type-checkers can now infer the generated type even when the strategies are heterogeneous, e.g. a "mapping" annotated as "dict\[str, SearchStrategy\[int] | SearchStrategy\[str]]" (issue [#4665](https://redirect.github.com/HypothesisWorks/hypothesis/issues/4665)). The "mapping" and "optional" arguments may now also have different key and value types, which are unioned in the inferred result. *[The canonical version of these notes (with links) is on readthedocs.](https://hypothesis.readthedocs.io/en/latest/changelog.html#v6-154-2)* ### [`v6.154.1`](https://redirect.github.com/HypothesisWorks/hypothesis/releases/tag/v6.154.1): Hypothesis version 6.154.1 [Compare Source](https://redirect.github.com/HypothesisWorks/hypothesis/compare/v6.154.0...v6.154.1) This patch fixes a bug where resolving recursive forward references in "from\_type()" (such as "A = list\[Union\["A", str]]", added in v6.152.11) could recurse until it hit the interpreter's recursion limit before falling back to a deferred strategy. Because this depended on the ambient stack depth, it occasionally surfaced as a spurious "RecursionError" or other flaky failure. We now break the cycle eagerly by deferring, so resolution uses a small and constant amount of stack regardless of how deeply nested the reference is. *[The canonical version of these notes (with links) is on readthedocs.](https://hypothesis.readthedocs.io/en/latest/changelog.html#v6-154-1)* ### [`v6.154.0`](https://redirect.github.com/HypothesisWorks/hypothesis/releases/tag/v6.154.0): Hypothesis version 6.154.0 [Compare Source](https://redirect.github.com/HypothesisWorks/hypothesis/compare/v6.153.6...v6.154.0) "fixed\_dictionaries()" now varies the iteration order of the dicts it generates, rather than always placing the required keys first, to help find bugs in code which is sensitive to key order (issue [#3906](https://redirect.github.com/HypothesisWorks/hypothesis/issues/3906)). If you need a stable order, we recommend using "fixed\_dictionaries(...).map(stable\_sort\_function)" or similar. *[The canonical version of these notes (with links) is on readthedocs.](https://hypothesis.readthedocs.io/en/latest/changelog.html#v6-154-0)* ### [`v6.153.6`](https://redirect.github.com/HypothesisWorks/hypothesis/releases/tag/v6.153.6): Hypothesis version 6.153.6 [Compare Source](https://redirect.github.com/HypothesisWorks/hypothesis/compare/v6.153.5...v6.153.6) The "--hypothesis-show-statistics" report now accounts for the "Phase.explain" phase separately, rather than including its runtime and test cases in the "Phase.shrink" phase (issue [#4179](https://redirect.github.com/HypothesisWorks/hypothesis/issues/4179)). *[The canonical version of these notes (with links) is on readthedocs.](https://hypothesis.readthedocs.io/en/latest/changelog.html#v6-153-6)* ### [`v6.153.5`](https://redirect.github.com/HypothesisWorks/hypothesis/releases/tag/v6.153.5): Hypothesis version 6.153.5 [Compare Source](https://redirect.github.com/HypothesisWorks/hypothesis/compare/v6.153.4...v6.153.5) This patch dramatically improves the performance of "from\_type()" on hierarchies of abstract classes whose subclasses refer back to the base class (directly, or via a sibling subclass) in their annotations. Resolution previously took time cubic in the number of subclasses; we now resolve each type only once (issue [#4729](https://redirect.github.com/HypothesisWorks/hypothesis/issues/4729)). *[The canonical version of these notes (with links) is on readthedocs.](https://hypothesis.readthedocs.io/en/latest/changelog.html#v6-153-5)* ### [`v6.153.4`](https://redirect.github.com/HypothesisWorks/hypothesis/releases/tag/v6.153.4): Hypothesis version 6.153.4 [Compare Source](https://redirect.github.com/HypothesisWorks/hypothesis/compare/v6.153.3...v6.153.4) This patch fixes a bug where fuzz\_one\_input did not track the "interesting\_origin" of failures (issue [#4420](https://redirect.github.com/HypothesisWorks/hypothesis/issues/4420)). As a result, it only saved the single smallest failure to the database rather than the smallest example of each distinct failure, and the "interesting\_origin" was missing from observability reports. *[The canonical version of these notes (with links) is on readthedocs.](https://hypothesis.readthedocs.io/en/latest/changelog.html#v6-153-4)* ### [`v6.153.3`](https://redirect.github.com/HypothesisWorks/hypothesis/releases/tag/v6.153.3): Hypothesis version 6.153.3 [Compare Source](https://redirect.github.com/HypothesisWorks/hypothesis/compare/v6.153.2...v6.153.3) This patch fixes a bug where "decimals()" with the "places" argument could generate values outside the "min\_value" and "max\_value" bounds, when those bounds had more fractional digits than "places" (issue [#4651](https://redirect.github.com/HypothesisWorks/hypothesis/issues/4651)). *[The canonical version of these notes (with links) is on readthedocs.](https://hypothesis.readthedocs.io/en/latest/changelog.html#v6-153-3)* </details> --- ### Configuration 📅 **Schedule**: (in timezone Australia/Sydney) - Branch creation - "before 6am on wednesday" - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://redirect.github.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/google/osv.dev).

1 parent c183497 commit 93af580Copy full SHA for 93af580

1 file changed

poetry.lock

Comments

(0)