oncall-engine/engine/requirements-dev.txt

164 lines
3.5 KiB
Text
Raw Permalink Normal View History

# This file was autogenerated by uv via the following command:
# uv pip compile requirements-dev.in -o requirements-dev.txt
asgiref==3.7.2
# via
Bump django from 4.2.10 to 4.2.11 in /engine (#4079) Bumps [django](https://github.com/django/django) from 4.2.10 to 4.2.11. <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/django/django/commit/61a986f53d805e4d359ab61af60a2dcd55befe25"><code>61a986f</code></a> [4.2.x] Bumped version for 4.2.11 release.</li> <li><a href="https://github.com/django/django/commit/3c9a2771cc80821e041b16eb36c1c37af5349d4a"><code>3c9a277</code></a> [4.2.x] Fixed CVE-2024-27351 -- Prevented potential ReDoS in Truncator.words().</li> <li><a href="https://github.com/django/django/commit/79739511397367c56d20393b93c5edd35f5cca53"><code>7973951</code></a> [4.2.x] Added release date for 4.2.11 and 3.2.25.</li> <li><a href="https://github.com/django/django/commit/86d8034972db5014769cdd4832125067f31b3e8b"><code>86d8034</code></a> [4.2.x] Refs <a href="https://redirect.github.com/django/django/issues/34900">#34900</a>, Refs <a href="https://redirect.github.com/django/django/issues/34118">#34118</a> -- Updated assertion in test_skip_class_unle...</li> <li><a href="https://github.com/django/django/commit/cb173bb088e32df3d9ee8bee3c579d88ea713e8f"><code>cb173bb</code></a> [4.2.x] Fixed <a href="https://redirect.github.com/django/django/issues/35172">#35172</a> -- Fixed intcomma for string floats.</li> <li><a href="https://github.com/django/django/commit/227ef29cff8ded8187c48b0aa955264cf83a01a4"><code>227ef29</code></a> [4.2.x] Added CVE-2024-24680 to security archive.</li> <li><a href="https://github.com/django/django/commit/e2f1907642c311b21d45d85a0aca7d9c05ede5cd"><code>e2f1907</code></a> [4.2.x] Post release version bump.</li> <li>See full diff in <a href="https://github.com/django/django/compare/4.2.10...4.2.11">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=django&package-manager=pip&previous-version=4.2.10&new-version=4.2.11)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/grafana/oncall/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Joey Orlando <joey.orlando@grafana.com>
2024-03-19 21:14:44 +00:00
# -c requirements.txt
# django
celery-types==0.18.0
Bump django from 4.2.10 to 4.2.11 in /engine (#4079) Bumps [django](https://github.com/django/django) from 4.2.10 to 4.2.11. <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/django/django/commit/61a986f53d805e4d359ab61af60a2dcd55befe25"><code>61a986f</code></a> [4.2.x] Bumped version for 4.2.11 release.</li> <li><a href="https://github.com/django/django/commit/3c9a2771cc80821e041b16eb36c1c37af5349d4a"><code>3c9a277</code></a> [4.2.x] Fixed CVE-2024-27351 -- Prevented potential ReDoS in Truncator.words().</li> <li><a href="https://github.com/django/django/commit/79739511397367c56d20393b93c5edd35f5cca53"><code>7973951</code></a> [4.2.x] Added release date for 4.2.11 and 3.2.25.</li> <li><a href="https://github.com/django/django/commit/86d8034972db5014769cdd4832125067f31b3e8b"><code>86d8034</code></a> [4.2.x] Refs <a href="https://redirect.github.com/django/django/issues/34900">#34900</a>, Refs <a href="https://redirect.github.com/django/django/issues/34118">#34118</a> -- Updated assertion in test_skip_class_unle...</li> <li><a href="https://github.com/django/django/commit/cb173bb088e32df3d9ee8bee3c579d88ea713e8f"><code>cb173bb</code></a> [4.2.x] Fixed <a href="https://redirect.github.com/django/django/issues/35172">#35172</a> -- Fixed intcomma for string floats.</li> <li><a href="https://github.com/django/django/commit/227ef29cff8ded8187c48b0aa955264cf83a01a4"><code>227ef29</code></a> [4.2.x] Added CVE-2024-24680 to security archive.</li> <li><a href="https://github.com/django/django/commit/e2f1907642c311b21d45d85a0aca7d9c05ede5cd"><code>e2f1907</code></a> [4.2.x] Post release version bump.</li> <li>See full diff in <a href="https://github.com/django/django/compare/4.2.10...4.2.11">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=django&package-manager=pip&previous-version=4.2.10&new-version=4.2.11)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/grafana/oncall/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Joey Orlando <joey.orlando@grafana.com>
2024-03-19 21:14:44 +00:00
# via -r requirements-dev.in
certifi==2024.7.4
# via
Bump django from 4.2.10 to 4.2.11 in /engine (#4079) Bumps [django](https://github.com/django/django) from 4.2.10 to 4.2.11. <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/django/django/commit/61a986f53d805e4d359ab61af60a2dcd55befe25"><code>61a986f</code></a> [4.2.x] Bumped version for 4.2.11 release.</li> <li><a href="https://github.com/django/django/commit/3c9a2771cc80821e041b16eb36c1c37af5349d4a"><code>3c9a277</code></a> [4.2.x] Fixed CVE-2024-27351 -- Prevented potential ReDoS in Truncator.words().</li> <li><a href="https://github.com/django/django/commit/79739511397367c56d20393b93c5edd35f5cca53"><code>7973951</code></a> [4.2.x] Added release date for 4.2.11 and 3.2.25.</li> <li><a href="https://github.com/django/django/commit/86d8034972db5014769cdd4832125067f31b3e8b"><code>86d8034</code></a> [4.2.x] Refs <a href="https://redirect.github.com/django/django/issues/34900">#34900</a>, Refs <a href="https://redirect.github.com/django/django/issues/34118">#34118</a> -- Updated assertion in test_skip_class_unle...</li> <li><a href="https://github.com/django/django/commit/cb173bb088e32df3d9ee8bee3c579d88ea713e8f"><code>cb173bb</code></a> [4.2.x] Fixed <a href="https://redirect.github.com/django/django/issues/35172">#35172</a> -- Fixed intcomma for string floats.</li> <li><a href="https://github.com/django/django/commit/227ef29cff8ded8187c48b0aa955264cf83a01a4"><code>227ef29</code></a> [4.2.x] Added CVE-2024-24680 to security archive.</li> <li><a href="https://github.com/django/django/commit/e2f1907642c311b21d45d85a0aca7d9c05ede5cd"><code>e2f1907</code></a> [4.2.x] Post release version bump.</li> <li>See full diff in <a href="https://github.com/django/django/compare/4.2.10...4.2.11">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=django&package-manager=pip&previous-version=4.2.10&new-version=4.2.11)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/grafana/oncall/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Joey Orlando <joey.orlando@grafana.com>
2024-03-19 21:14:44 +00:00
# -c requirements.txt
# requests
cfgv==3.4.0
# via pre-commit
charset-normalizer==3.3.2
# via
Bump django from 4.2.10 to 4.2.11 in /engine (#4079) Bumps [django](https://github.com/django/django) from 4.2.10 to 4.2.11. <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/django/django/commit/61a986f53d805e4d359ab61af60a2dcd55befe25"><code>61a986f</code></a> [4.2.x] Bumped version for 4.2.11 release.</li> <li><a href="https://github.com/django/django/commit/3c9a2771cc80821e041b16eb36c1c37af5349d4a"><code>3c9a277</code></a> [4.2.x] Fixed CVE-2024-27351 -- Prevented potential ReDoS in Truncator.words().</li> <li><a href="https://github.com/django/django/commit/79739511397367c56d20393b93c5edd35f5cca53"><code>7973951</code></a> [4.2.x] Added release date for 4.2.11 and 3.2.25.</li> <li><a href="https://github.com/django/django/commit/86d8034972db5014769cdd4832125067f31b3e8b"><code>86d8034</code></a> [4.2.x] Refs <a href="https://redirect.github.com/django/django/issues/34900">#34900</a>, Refs <a href="https://redirect.github.com/django/django/issues/34118">#34118</a> -- Updated assertion in test_skip_class_unle...</li> <li><a href="https://github.com/django/django/commit/cb173bb088e32df3d9ee8bee3c579d88ea713e8f"><code>cb173bb</code></a> [4.2.x] Fixed <a href="https://redirect.github.com/django/django/issues/35172">#35172</a> -- Fixed intcomma for string floats.</li> <li><a href="https://github.com/django/django/commit/227ef29cff8ded8187c48b0aa955264cf83a01a4"><code>227ef29</code></a> [4.2.x] Added CVE-2024-24680 to security archive.</li> <li><a href="https://github.com/django/django/commit/e2f1907642c311b21d45d85a0aca7d9c05ede5cd"><code>e2f1907</code></a> [4.2.x] Post release version bump.</li> <li>See full diff in <a href="https://github.com/django/django/compare/4.2.10...4.2.11">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=django&package-manager=pip&previous-version=4.2.10&new-version=4.2.11)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/grafana/oncall/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Joey Orlando <joey.orlando@grafana.com>
2024-03-19 21:14:44 +00:00
# -c requirements.txt
# requests
distlib==0.3.8
# via virtualenv
django==4.2.20
# via
Bump django from 4.2.10 to 4.2.11 in /engine (#4079) Bumps [django](https://github.com/django/django) from 4.2.10 to 4.2.11. <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/django/django/commit/61a986f53d805e4d359ab61af60a2dcd55befe25"><code>61a986f</code></a> [4.2.x] Bumped version for 4.2.11 release.</li> <li><a href="https://github.com/django/django/commit/3c9a2771cc80821e041b16eb36c1c37af5349d4a"><code>3c9a277</code></a> [4.2.x] Fixed CVE-2024-27351 -- Prevented potential ReDoS in Truncator.words().</li> <li><a href="https://github.com/django/django/commit/79739511397367c56d20393b93c5edd35f5cca53"><code>7973951</code></a> [4.2.x] Added release date for 4.2.11 and 3.2.25.</li> <li><a href="https://github.com/django/django/commit/86d8034972db5014769cdd4832125067f31b3e8b"><code>86d8034</code></a> [4.2.x] Refs <a href="https://redirect.github.com/django/django/issues/34900">#34900</a>, Refs <a href="https://redirect.github.com/django/django/issues/34118">#34118</a> -- Updated assertion in test_skip_class_unle...</li> <li><a href="https://github.com/django/django/commit/cb173bb088e32df3d9ee8bee3c579d88ea713e8f"><code>cb173bb</code></a> [4.2.x] Fixed <a href="https://redirect.github.com/django/django/issues/35172">#35172</a> -- Fixed intcomma for string floats.</li> <li><a href="https://github.com/django/django/commit/227ef29cff8ded8187c48b0aa955264cf83a01a4"><code>227ef29</code></a> [4.2.x] Added CVE-2024-24680 to security archive.</li> <li><a href="https://github.com/django/django/commit/e2f1907642c311b21d45d85a0aca7d9c05ede5cd"><code>e2f1907</code></a> [4.2.x] Post release version bump.</li> <li>See full diff in <a href="https://github.com/django/django/compare/4.2.10...4.2.11">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=django&package-manager=pip&previous-version=4.2.10&new-version=4.2.11)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/grafana/oncall/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Joey Orlando <joey.orlando@grafana.com>
2024-03-19 21:14:44 +00:00
# -c requirements.txt
# django-stubs
# django-stubs-ext
django-filter-stubs==0.1.3
Bump django from 4.2.10 to 4.2.11 in /engine (#4079) Bumps [django](https://github.com/django/django) from 4.2.10 to 4.2.11. <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/django/django/commit/61a986f53d805e4d359ab61af60a2dcd55befe25"><code>61a986f</code></a> [4.2.x] Bumped version for 4.2.11 release.</li> <li><a href="https://github.com/django/django/commit/3c9a2771cc80821e041b16eb36c1c37af5349d4a"><code>3c9a277</code></a> [4.2.x] Fixed CVE-2024-27351 -- Prevented potential ReDoS in Truncator.words().</li> <li><a href="https://github.com/django/django/commit/79739511397367c56d20393b93c5edd35f5cca53"><code>7973951</code></a> [4.2.x] Added release date for 4.2.11 and 3.2.25.</li> <li><a href="https://github.com/django/django/commit/86d8034972db5014769cdd4832125067f31b3e8b"><code>86d8034</code></a> [4.2.x] Refs <a href="https://redirect.github.com/django/django/issues/34900">#34900</a>, Refs <a href="https://redirect.github.com/django/django/issues/34118">#34118</a> -- Updated assertion in test_skip_class_unle...</li> <li><a href="https://github.com/django/django/commit/cb173bb088e32df3d9ee8bee3c579d88ea713e8f"><code>cb173bb</code></a> [4.2.x] Fixed <a href="https://redirect.github.com/django/django/issues/35172">#35172</a> -- Fixed intcomma for string floats.</li> <li><a href="https://github.com/django/django/commit/227ef29cff8ded8187c48b0aa955264cf83a01a4"><code>227ef29</code></a> [4.2.x] Added CVE-2024-24680 to security archive.</li> <li><a href="https://github.com/django/django/commit/e2f1907642c311b21d45d85a0aca7d9c05ede5cd"><code>e2f1907</code></a> [4.2.x] Post release version bump.</li> <li>See full diff in <a href="https://github.com/django/django/compare/4.2.10...4.2.11">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=django&package-manager=pip&previous-version=4.2.10&new-version=4.2.11)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/grafana/oncall/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Joey Orlando <joey.orlando@grafana.com>
2024-03-19 21:14:44 +00:00
# via -r requirements-dev.in
chore(deps): bump virtualenv from 20.25.0 to 20.26.6 in /engine (#5411) Bumps [virtualenv](https://github.com/pypa/virtualenv) from 20.25.0 to 20.26.6. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/pypa/virtualenv/releases">virtualenv's releases</a>.</em></p> <blockquote> <h2>20.26.6</h2> <!-- raw HTML omitted --> <h2>What's Changed</h2> <ul> <li>release 20.26.5 by <a href="https://github.com/gaborbernat"><code>@​gaborbernat</code></a> in <a href="https://redirect.github.com/pypa/virtualenv/pull/2766">pypa/virtualenv#2766</a></li> <li>Fix <a href="https://redirect.github.com/pypa/virtualenv/issues/2768">#2768</a>: Quote template strings in activation scripts by <a href="https://github.com/y5c4l3"><code>@​y5c4l3</code></a> in <a href="https://redirect.github.com/pypa/virtualenv/pull/2771">pypa/virtualenv#2771</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/y5c4l3"><code>@​y5c4l3</code></a> made their first contribution in <a href="https://redirect.github.com/pypa/virtualenv/pull/2771">pypa/virtualenv#2771</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/pypa/virtualenv/compare/20.26.5...20.26.6">https://github.com/pypa/virtualenv/compare/20.26.5...20.26.6</a></p> <h2>20.26.5</h2> <!-- raw HTML omitted --> <h2>What's Changed</h2> <ul> <li>release 20.26.4 by <a href="https://github.com/gaborbernat"><code>@​gaborbernat</code></a> in <a href="https://redirect.github.com/pypa/virtualenv/pull/2761">pypa/virtualenv#2761</a></li> <li>Use uv over pip by <a href="https://github.com/gaborbernat"><code>@​gaborbernat</code></a> in <a href="https://redirect.github.com/pypa/virtualenv/pull/2765">pypa/virtualenv#2765</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/pypa/virtualenv/compare/20.26.4...20.26.5">https://github.com/pypa/virtualenv/compare/20.26.4...20.26.5</a></p> <h2>20.26.4</h2> <!-- raw HTML omitted --> <h2>What's Changed</h2> <ul> <li>release 20.26.3 by <a href="https://github.com/gaborbernat"><code>@​gaborbernat</code></a> in <a href="https://redirect.github.com/pypa/virtualenv/pull/2742">pypa/virtualenv#2742</a></li> <li>Fix whitespace around backticks in changelog by <a href="https://github.com/edmorley"><code>@​edmorley</code></a> in <a href="https://redirect.github.com/pypa/virtualenv/pull/2751">pypa/virtualenv#2751</a></li> <li>Test latest Python 3.13 by <a href="https://github.com/hugovk"><code>@​hugovk</code></a> in <a href="https://redirect.github.com/pypa/virtualenv/pull/2752">pypa/virtualenv#2752</a></li> <li>Fix typo in Nushell activation script by <a href="https://github.com/edmorley"><code>@​edmorley</code></a> in <a href="https://redirect.github.com/pypa/virtualenv/pull/2754">pypa/virtualenv#2754</a></li> <li>GitHub Actions: Replace deprecated macos-12 with macos-13 by <a href="https://github.com/hugovk"><code>@​hugovk</code></a> in <a href="https://redirect.github.com/pypa/virtualenv/pull/2756">pypa/virtualenv#2756</a></li> <li>Fix <a href="https://redirect.github.com/pypa/virtualenv/issues/2728">#2728</a>: Activating venv create unwanted console output by <a href="https://github.com/ShootGan"><code>@​ShootGan</code></a> in <a href="https://redirect.github.com/pypa/virtualenv/pull/2748">pypa/virtualenv#2748</a></li> <li>Upgrade bundled wheels by <a href="https://github.com/gaborbernat"><code>@​gaborbernat</code></a> in <a href="https://redirect.github.com/pypa/virtualenv/pull/2760">pypa/virtualenv#2760</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/ShootGan"><code>@​ShootGan</code></a> made their first contribution in <a href="https://redirect.github.com/pypa/virtualenv/pull/2748">pypa/virtualenv#2748</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/pypa/virtualenv/compare/20.26.3...20.26.4">https://github.com/pypa/virtualenv/compare/20.26.3...20.26.4</a></p> <h2>20.26.3</h2> <!-- raw HTML omitted --> <h2>What's Changed</h2> <ul> <li>release 20.26.2 by <a href="https://github.com/gaborbernat"><code>@​gaborbernat</code></a> in <a href="https://redirect.github.com/pypa/virtualenv/pull/2724">pypa/virtualenv#2724</a></li> <li>Bump embeded wheels by <a href="https://github.com/gaborbernat"><code>@​gaborbernat</code></a> in <a href="https://redirect.github.com/pypa/virtualenv/pull/2741">pypa/virtualenv#2741</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/pypa/virtualenv/compare/20.26.2...20.26.3">https://github.com/pypa/virtualenv/compare/20.26.2...20.26.3</a></p> <h2>20.26.2</h2> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/pypa/virtualenv/blob/main/docs/changelog.rst">virtualenv's changelog</a>.</em></p> <blockquote> <h2>v20.26.6 (2024-09-27)</h2> <p>Bugfixes - 20.26.6</p> <pre><code>- Properly quote string placeholders in activation script templates to mitigate potential command injection - by :user:`y5c4l3`. (:issue:`2768`) <h2>v20.26.5 (2024-09-17)</h2> <p>Bugfixes - 20.26.5 </code></pre></p> <ul> <li>Upgrade embedded wheels: setuptools to <code>75.1.0</code> from <code>74.1.2</code> - by :user:<code>gaborbernat</code>. (:issue:<code>2765</code>)</li> </ul> <h2>v20.26.4 (2024-09-07)</h2> <p>Bugfixes - 20.26.4</p> <pre><code>- no longer create `()` output in console during activation of a virtualenv by .bat file. (:issue:`2728`) - Upgrade embedded wheels: <ul> <li>wheel to <code>0.44.0</code> from <code>0.43.0</code></li> <li>pip to <code>24.2</code> from <code>24.1</code></li> <li>setuptools to <code>74.1.2</code> from <code>70.1.0</code> (:issue:<code>2760</code>)</li> </ul> <h2>v20.26.3 (2024-06-21)</h2> <p>Bugfixes - 20.26.3 </code></pre></p> <ul> <li> <p>Upgrade embedded wheels:</p> <ul> <li>setuptools to <code>70.1.0</code> from <code>69.5.1</code></li> <li>pip to <code>24.1</code> from <code>24.0</code> (:issue:<code>2741</code>)</li> </ul> </li> </ul> <h2>v20.26.2 (2024-05-13)</h2> <p>Bugfixes - 20.26.2</p> <pre><code>- ``virtualenv.pyz`` no longer fails when zipapp path contains a symlink - by :user:`HandSonic` and :user:`petamas`. (:issue:`1949`) - Fix bad return code from activate.sh if hashing is disabled - by :user:'fenkes-ibm'. (:issue:`2717`) <h2>v20.26.1 (2024-04-29)</h2> <p>Bugfixes - 20.26.1 </code></pre></p> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/pypa/virtualenv/commit/ec04726d065372ffad9920998aef1ce41252a61d"><code>ec04726</code></a> release 20.26.6</li> <li><a href="https://github.com/pypa/virtualenv/commit/86dddeda7c991f8529e1995bbff280fb7b761972"><code>86ddded</code></a> Fix <a href="https://redirect.github.com/pypa/virtualenv/issues/2768">#2768</a>: Quote template strings in activation scripts (<a href="https://redirect.github.com/pypa/virtualenv/issues/2771">#2771</a>)</li> <li><a href="https://github.com/pypa/virtualenv/commit/6bb3f6226c18d69bb6cfa3475b6d46dd463bb530"><code>6bb3f62</code></a> [pre-commit.ci] pre-commit autoupdate (<a href="https://redirect.github.com/pypa/virtualenv/issues/2769">#2769</a>)</li> <li><a href="https://github.com/pypa/virtualenv/commit/220d49c2e3ade2ed24f5712ab5a23895cde2e04c"><code>220d49c</code></a> Bump pypa/gh-action-pypi-publish from 1.10.1 to 1.10.2 (<a href="https://redirect.github.com/pypa/virtualenv/issues/2767">#2767</a>)</li> <li><a href="https://github.com/pypa/virtualenv/commit/cf340c83c2828a92def78c77b3e037a2baa4d557"><code>cf340c8</code></a> Merge pull request <a href="https://redirect.github.com/pypa/virtualenv/issues/2766">#2766</a> from pypa/release-20.26.5</li> <li><a href="https://github.com/pypa/virtualenv/commit/f3172b4da576b88275a14d2e7bbeb98b8f958a05"><code>f3172b4</code></a> release 20.26.5</li> <li><a href="https://github.com/pypa/virtualenv/commit/22b9795eb6bed0c17d0415c5513eca099a0a11ad"><code>22b9795</code></a> Use uv over pip (<a href="https://redirect.github.com/pypa/virtualenv/issues/2765">#2765</a>)</li> <li><a href="https://github.com/pypa/virtualenv/commit/35d8269aba12a1e3c60183a2082b2c4d0cc1192f"><code>35d8269</code></a> [pre-commit.ci] pre-commit autoupdate (<a href="https://redirect.github.com/pypa/virtualenv/issues/2764">#2764</a>)</li> <li><a href="https://github.com/pypa/virtualenv/commit/ee77feb77ccb3c5deefa318630c59315bcfda521"><code>ee77feb</code></a> [pre-commit.ci] pre-commit autoupdate (<a href="https://redirect.github.com/pypa/virtualenv/issues/2763">#2763</a>)</li> <li><a href="https://github.com/pypa/virtualenv/commit/c5160566293ed098ca30e0856dbf44588dd5c3a3"><code>c516056</code></a> Update README.md</li> <li>Additional commits viewable in <a href="https://github.com/pypa/virtualenv/compare/20.25.0...20.26.6">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=virtualenv&package-manager=pip&previous-version=20.25.0&new-version=20.26.6)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) You can trigger a rebase of this PR by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/grafana/oncall/network/alerts). </details> > **Note** > Automatic rebases have been disabled on this pull request as it has been open for over 30 days. --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: twu <199651+twu@users.noreply.github.com> Co-authored-by: Thomas Wurmitzer <thomas.wurmitzer@grafana.com>
2025-03-12 16:52:30 +01:00
django-stubs[compatible-mypy]==4.2.2
# via
Bump django from 4.2.10 to 4.2.11 in /engine (#4079) Bumps [django](https://github.com/django/django) from 4.2.10 to 4.2.11. <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/django/django/commit/61a986f53d805e4d359ab61af60a2dcd55befe25"><code>61a986f</code></a> [4.2.x] Bumped version for 4.2.11 release.</li> <li><a href="https://github.com/django/django/commit/3c9a2771cc80821e041b16eb36c1c37af5349d4a"><code>3c9a277</code></a> [4.2.x] Fixed CVE-2024-27351 -- Prevented potential ReDoS in Truncator.words().</li> <li><a href="https://github.com/django/django/commit/79739511397367c56d20393b93c5edd35f5cca53"><code>7973951</code></a> [4.2.x] Added release date for 4.2.11 and 3.2.25.</li> <li><a href="https://github.com/django/django/commit/86d8034972db5014769cdd4832125067f31b3e8b"><code>86d8034</code></a> [4.2.x] Refs <a href="https://redirect.github.com/django/django/issues/34900">#34900</a>, Refs <a href="https://redirect.github.com/django/django/issues/34118">#34118</a> -- Updated assertion in test_skip_class_unle...</li> <li><a href="https://github.com/django/django/commit/cb173bb088e32df3d9ee8bee3c579d88ea713e8f"><code>cb173bb</code></a> [4.2.x] Fixed <a href="https://redirect.github.com/django/django/issues/35172">#35172</a> -- Fixed intcomma for string floats.</li> <li><a href="https://github.com/django/django/commit/227ef29cff8ded8187c48b0aa955264cf83a01a4"><code>227ef29</code></a> [4.2.x] Added CVE-2024-24680 to security archive.</li> <li><a href="https://github.com/django/django/commit/e2f1907642c311b21d45d85a0aca7d9c05ede5cd"><code>e2f1907</code></a> [4.2.x] Post release version bump.</li> <li>See full diff in <a href="https://github.com/django/django/compare/4.2.10...4.2.11">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=django&package-manager=pip&previous-version=4.2.10&new-version=4.2.11)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/grafana/oncall/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Joey Orlando <joey.orlando@grafana.com>
2024-03-19 21:14:44 +00:00
# -r requirements-dev.in
# django-filter-stubs
# djangorestframework-stubs
django-stubs-ext==4.2.7
# via django-stubs
chore(deps): bump virtualenv from 20.25.0 to 20.26.6 in /engine (#5411) Bumps [virtualenv](https://github.com/pypa/virtualenv) from 20.25.0 to 20.26.6. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/pypa/virtualenv/releases">virtualenv's releases</a>.</em></p> <blockquote> <h2>20.26.6</h2> <!-- raw HTML omitted --> <h2>What's Changed</h2> <ul> <li>release 20.26.5 by <a href="https://github.com/gaborbernat"><code>@​gaborbernat</code></a> in <a href="https://redirect.github.com/pypa/virtualenv/pull/2766">pypa/virtualenv#2766</a></li> <li>Fix <a href="https://redirect.github.com/pypa/virtualenv/issues/2768">#2768</a>: Quote template strings in activation scripts by <a href="https://github.com/y5c4l3"><code>@​y5c4l3</code></a> in <a href="https://redirect.github.com/pypa/virtualenv/pull/2771">pypa/virtualenv#2771</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/y5c4l3"><code>@​y5c4l3</code></a> made their first contribution in <a href="https://redirect.github.com/pypa/virtualenv/pull/2771">pypa/virtualenv#2771</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/pypa/virtualenv/compare/20.26.5...20.26.6">https://github.com/pypa/virtualenv/compare/20.26.5...20.26.6</a></p> <h2>20.26.5</h2> <!-- raw HTML omitted --> <h2>What's Changed</h2> <ul> <li>release 20.26.4 by <a href="https://github.com/gaborbernat"><code>@​gaborbernat</code></a> in <a href="https://redirect.github.com/pypa/virtualenv/pull/2761">pypa/virtualenv#2761</a></li> <li>Use uv over pip by <a href="https://github.com/gaborbernat"><code>@​gaborbernat</code></a> in <a href="https://redirect.github.com/pypa/virtualenv/pull/2765">pypa/virtualenv#2765</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/pypa/virtualenv/compare/20.26.4...20.26.5">https://github.com/pypa/virtualenv/compare/20.26.4...20.26.5</a></p> <h2>20.26.4</h2> <!-- raw HTML omitted --> <h2>What's Changed</h2> <ul> <li>release 20.26.3 by <a href="https://github.com/gaborbernat"><code>@​gaborbernat</code></a> in <a href="https://redirect.github.com/pypa/virtualenv/pull/2742">pypa/virtualenv#2742</a></li> <li>Fix whitespace around backticks in changelog by <a href="https://github.com/edmorley"><code>@​edmorley</code></a> in <a href="https://redirect.github.com/pypa/virtualenv/pull/2751">pypa/virtualenv#2751</a></li> <li>Test latest Python 3.13 by <a href="https://github.com/hugovk"><code>@​hugovk</code></a> in <a href="https://redirect.github.com/pypa/virtualenv/pull/2752">pypa/virtualenv#2752</a></li> <li>Fix typo in Nushell activation script by <a href="https://github.com/edmorley"><code>@​edmorley</code></a> in <a href="https://redirect.github.com/pypa/virtualenv/pull/2754">pypa/virtualenv#2754</a></li> <li>GitHub Actions: Replace deprecated macos-12 with macos-13 by <a href="https://github.com/hugovk"><code>@​hugovk</code></a> in <a href="https://redirect.github.com/pypa/virtualenv/pull/2756">pypa/virtualenv#2756</a></li> <li>Fix <a href="https://redirect.github.com/pypa/virtualenv/issues/2728">#2728</a>: Activating venv create unwanted console output by <a href="https://github.com/ShootGan"><code>@​ShootGan</code></a> in <a href="https://redirect.github.com/pypa/virtualenv/pull/2748">pypa/virtualenv#2748</a></li> <li>Upgrade bundled wheels by <a href="https://github.com/gaborbernat"><code>@​gaborbernat</code></a> in <a href="https://redirect.github.com/pypa/virtualenv/pull/2760">pypa/virtualenv#2760</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/ShootGan"><code>@​ShootGan</code></a> made their first contribution in <a href="https://redirect.github.com/pypa/virtualenv/pull/2748">pypa/virtualenv#2748</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/pypa/virtualenv/compare/20.26.3...20.26.4">https://github.com/pypa/virtualenv/compare/20.26.3...20.26.4</a></p> <h2>20.26.3</h2> <!-- raw HTML omitted --> <h2>What's Changed</h2> <ul> <li>release 20.26.2 by <a href="https://github.com/gaborbernat"><code>@​gaborbernat</code></a> in <a href="https://redirect.github.com/pypa/virtualenv/pull/2724">pypa/virtualenv#2724</a></li> <li>Bump embeded wheels by <a href="https://github.com/gaborbernat"><code>@​gaborbernat</code></a> in <a href="https://redirect.github.com/pypa/virtualenv/pull/2741">pypa/virtualenv#2741</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/pypa/virtualenv/compare/20.26.2...20.26.3">https://github.com/pypa/virtualenv/compare/20.26.2...20.26.3</a></p> <h2>20.26.2</h2> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/pypa/virtualenv/blob/main/docs/changelog.rst">virtualenv's changelog</a>.</em></p> <blockquote> <h2>v20.26.6 (2024-09-27)</h2> <p>Bugfixes - 20.26.6</p> <pre><code>- Properly quote string placeholders in activation script templates to mitigate potential command injection - by :user:`y5c4l3`. (:issue:`2768`) <h2>v20.26.5 (2024-09-17)</h2> <p>Bugfixes - 20.26.5 </code></pre></p> <ul> <li>Upgrade embedded wheels: setuptools to <code>75.1.0</code> from <code>74.1.2</code> - by :user:<code>gaborbernat</code>. (:issue:<code>2765</code>)</li> </ul> <h2>v20.26.4 (2024-09-07)</h2> <p>Bugfixes - 20.26.4</p> <pre><code>- no longer create `()` output in console during activation of a virtualenv by .bat file. (:issue:`2728`) - Upgrade embedded wheels: <ul> <li>wheel to <code>0.44.0</code> from <code>0.43.0</code></li> <li>pip to <code>24.2</code> from <code>24.1</code></li> <li>setuptools to <code>74.1.2</code> from <code>70.1.0</code> (:issue:<code>2760</code>)</li> </ul> <h2>v20.26.3 (2024-06-21)</h2> <p>Bugfixes - 20.26.3 </code></pre></p> <ul> <li> <p>Upgrade embedded wheels:</p> <ul> <li>setuptools to <code>70.1.0</code> from <code>69.5.1</code></li> <li>pip to <code>24.1</code> from <code>24.0</code> (:issue:<code>2741</code>)</li> </ul> </li> </ul> <h2>v20.26.2 (2024-05-13)</h2> <p>Bugfixes - 20.26.2</p> <pre><code>- ``virtualenv.pyz`` no longer fails when zipapp path contains a symlink - by :user:`HandSonic` and :user:`petamas`. (:issue:`1949`) - Fix bad return code from activate.sh if hashing is disabled - by :user:'fenkes-ibm'. (:issue:`2717`) <h2>v20.26.1 (2024-04-29)</h2> <p>Bugfixes - 20.26.1 </code></pre></p> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/pypa/virtualenv/commit/ec04726d065372ffad9920998aef1ce41252a61d"><code>ec04726</code></a> release 20.26.6</li> <li><a href="https://github.com/pypa/virtualenv/commit/86dddeda7c991f8529e1995bbff280fb7b761972"><code>86ddded</code></a> Fix <a href="https://redirect.github.com/pypa/virtualenv/issues/2768">#2768</a>: Quote template strings in activation scripts (<a href="https://redirect.github.com/pypa/virtualenv/issues/2771">#2771</a>)</li> <li><a href="https://github.com/pypa/virtualenv/commit/6bb3f6226c18d69bb6cfa3475b6d46dd463bb530"><code>6bb3f62</code></a> [pre-commit.ci] pre-commit autoupdate (<a href="https://redirect.github.com/pypa/virtualenv/issues/2769">#2769</a>)</li> <li><a href="https://github.com/pypa/virtualenv/commit/220d49c2e3ade2ed24f5712ab5a23895cde2e04c"><code>220d49c</code></a> Bump pypa/gh-action-pypi-publish from 1.10.1 to 1.10.2 (<a href="https://redirect.github.com/pypa/virtualenv/issues/2767">#2767</a>)</li> <li><a href="https://github.com/pypa/virtualenv/commit/cf340c83c2828a92def78c77b3e037a2baa4d557"><code>cf340c8</code></a> Merge pull request <a href="https://redirect.github.com/pypa/virtualenv/issues/2766">#2766</a> from pypa/release-20.26.5</li> <li><a href="https://github.com/pypa/virtualenv/commit/f3172b4da576b88275a14d2e7bbeb98b8f958a05"><code>f3172b4</code></a> release 20.26.5</li> <li><a href="https://github.com/pypa/virtualenv/commit/22b9795eb6bed0c17d0415c5513eca099a0a11ad"><code>22b9795</code></a> Use uv over pip (<a href="https://redirect.github.com/pypa/virtualenv/issues/2765">#2765</a>)</li> <li><a href="https://github.com/pypa/virtualenv/commit/35d8269aba12a1e3c60183a2082b2c4d0cc1192f"><code>35d8269</code></a> [pre-commit.ci] pre-commit autoupdate (<a href="https://redirect.github.com/pypa/virtualenv/issues/2764">#2764</a>)</li> <li><a href="https://github.com/pypa/virtualenv/commit/ee77feb77ccb3c5deefa318630c59315bcfda521"><code>ee77feb</code></a> [pre-commit.ci] pre-commit autoupdate (<a href="https://redirect.github.com/pypa/virtualenv/issues/2763">#2763</a>)</li> <li><a href="https://github.com/pypa/virtualenv/commit/c5160566293ed098ca30e0856dbf44588dd5c3a3"><code>c516056</code></a> Update README.md</li> <li>Additional commits viewable in <a href="https://github.com/pypa/virtualenv/compare/20.25.0...20.26.6">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=virtualenv&package-manager=pip&previous-version=20.25.0&new-version=20.26.6)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) You can trigger a rebase of this PR by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/grafana/oncall/network/alerts). </details> > **Note** > Automatic rebases have been disabled on this pull request as it has been open for over 30 days. --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: twu <199651+twu@users.noreply.github.com> Co-authored-by: Thomas Wurmitzer <thomas.wurmitzer@grafana.com>
2025-03-12 16:52:30 +01:00
djangorestframework-stubs[compatible-mypy]==3.14.2
# via
Bump django from 4.2.10 to 4.2.11 in /engine (#4079) Bumps [django](https://github.com/django/django) from 4.2.10 to 4.2.11. <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/django/django/commit/61a986f53d805e4d359ab61af60a2dcd55befe25"><code>61a986f</code></a> [4.2.x] Bumped version for 4.2.11 release.</li> <li><a href="https://github.com/django/django/commit/3c9a2771cc80821e041b16eb36c1c37af5349d4a"><code>3c9a277</code></a> [4.2.x] Fixed CVE-2024-27351 -- Prevented potential ReDoS in Truncator.words().</li> <li><a href="https://github.com/django/django/commit/79739511397367c56d20393b93c5edd35f5cca53"><code>7973951</code></a> [4.2.x] Added release date for 4.2.11 and 3.2.25.</li> <li><a href="https://github.com/django/django/commit/86d8034972db5014769cdd4832125067f31b3e8b"><code>86d8034</code></a> [4.2.x] Refs <a href="https://redirect.github.com/django/django/issues/34900">#34900</a>, Refs <a href="https://redirect.github.com/django/django/issues/34118">#34118</a> -- Updated assertion in test_skip_class_unle...</li> <li><a href="https://github.com/django/django/commit/cb173bb088e32df3d9ee8bee3c579d88ea713e8f"><code>cb173bb</code></a> [4.2.x] Fixed <a href="https://redirect.github.com/django/django/issues/35172">#35172</a> -- Fixed intcomma for string floats.</li> <li><a href="https://github.com/django/django/commit/227ef29cff8ded8187c48b0aa955264cf83a01a4"><code>227ef29</code></a> [4.2.x] Added CVE-2024-24680 to security archive.</li> <li><a href="https://github.com/django/django/commit/e2f1907642c311b21d45d85a0aca7d9c05ede5cd"><code>e2f1907</code></a> [4.2.x] Post release version bump.</li> <li>See full diff in <a href="https://github.com/django/django/compare/4.2.10...4.2.11">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=django&package-manager=pip&previous-version=4.2.10&new-version=4.2.11)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/grafana/oncall/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Joey Orlando <joey.orlando@grafana.com>
2024-03-19 21:14:44 +00:00
# -r requirements-dev.in
# django-filter-stubs
execnet==2.1.1
# via pytest-xdist
factory-boy==2.12.0
# via
Bump django from 4.2.10 to 4.2.11 in /engine (#4079) Bumps [django](https://github.com/django/django) from 4.2.10 to 4.2.11. <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/django/django/commit/61a986f53d805e4d359ab61af60a2dcd55befe25"><code>61a986f</code></a> [4.2.x] Bumped version for 4.2.11 release.</li> <li><a href="https://github.com/django/django/commit/3c9a2771cc80821e041b16eb36c1c37af5349d4a"><code>3c9a277</code></a> [4.2.x] Fixed CVE-2024-27351 -- Prevented potential ReDoS in Truncator.words().</li> <li><a href="https://github.com/django/django/commit/79739511397367c56d20393b93c5edd35f5cca53"><code>7973951</code></a> [4.2.x] Added release date for 4.2.11 and 3.2.25.</li> <li><a href="https://github.com/django/django/commit/86d8034972db5014769cdd4832125067f31b3e8b"><code>86d8034</code></a> [4.2.x] Refs <a href="https://redirect.github.com/django/django/issues/34900">#34900</a>, Refs <a href="https://redirect.github.com/django/django/issues/34118">#34118</a> -- Updated assertion in test_skip_class_unle...</li> <li><a href="https://github.com/django/django/commit/cb173bb088e32df3d9ee8bee3c579d88ea713e8f"><code>cb173bb</code></a> [4.2.x] Fixed <a href="https://redirect.github.com/django/django/issues/35172">#35172</a> -- Fixed intcomma for string floats.</li> <li><a href="https://github.com/django/django/commit/227ef29cff8ded8187c48b0aa955264cf83a01a4"><code>227ef29</code></a> [4.2.x] Added CVE-2024-24680 to security archive.</li> <li><a href="https://github.com/django/django/commit/e2f1907642c311b21d45d85a0aca7d9c05ede5cd"><code>e2f1907</code></a> [4.2.x] Post release version bump.</li> <li>See full diff in <a href="https://github.com/django/django/compare/4.2.10...4.2.11">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=django&package-manager=pip&previous-version=4.2.10&new-version=4.2.11)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/grafana/oncall/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Joey Orlando <joey.orlando@grafana.com>
2024-03-19 21:14:44 +00:00
# -c requirements.txt
# pytest-factoryboy
faker==23.1.0
# via
Bump django from 4.2.10 to 4.2.11 in /engine (#4079) Bumps [django](https://github.com/django/django) from 4.2.10 to 4.2.11. <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/django/django/commit/61a986f53d805e4d359ab61af60a2dcd55befe25"><code>61a986f</code></a> [4.2.x] Bumped version for 4.2.11 release.</li> <li><a href="https://github.com/django/django/commit/3c9a2771cc80821e041b16eb36c1c37af5349d4a"><code>3c9a277</code></a> [4.2.x] Fixed CVE-2024-27351 -- Prevented potential ReDoS in Truncator.words().</li> <li><a href="https://github.com/django/django/commit/79739511397367c56d20393b93c5edd35f5cca53"><code>7973951</code></a> [4.2.x] Added release date for 4.2.11 and 3.2.25.</li> <li><a href="https://github.com/django/django/commit/86d8034972db5014769cdd4832125067f31b3e8b"><code>86d8034</code></a> [4.2.x] Refs <a href="https://redirect.github.com/django/django/issues/34900">#34900</a>, Refs <a href="https://redirect.github.com/django/django/issues/34118">#34118</a> -- Updated assertion in test_skip_class_unle...</li> <li><a href="https://github.com/django/django/commit/cb173bb088e32df3d9ee8bee3c579d88ea713e8f"><code>cb173bb</code></a> [4.2.x] Fixed <a href="https://redirect.github.com/django/django/issues/35172">#35172</a> -- Fixed intcomma for string floats.</li> <li><a href="https://github.com/django/django/commit/227ef29cff8ded8187c48b0aa955264cf83a01a4"><code>227ef29</code></a> [4.2.x] Added CVE-2024-24680 to security archive.</li> <li><a href="https://github.com/django/django/commit/e2f1907642c311b21d45d85a0aca7d9c05ede5cd"><code>e2f1907</code></a> [4.2.x] Post release version bump.</li> <li>See full diff in <a href="https://github.com/django/django/compare/4.2.10...4.2.11">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=django&package-manager=pip&previous-version=4.2.10&new-version=4.2.11)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/grafana/oncall/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Joey Orlando <joey.orlando@grafana.com>
2024-03-19 21:14:44 +00:00
# -c requirements.txt
# factory-boy
filelock==3.13.1
# via virtualenv
httpretty==1.1.4
Bump django from 4.2.10 to 4.2.11 in /engine (#4079) Bumps [django](https://github.com/django/django) from 4.2.10 to 4.2.11. <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/django/django/commit/61a986f53d805e4d359ab61af60a2dcd55befe25"><code>61a986f</code></a> [4.2.x] Bumped version for 4.2.11 release.</li> <li><a href="https://github.com/django/django/commit/3c9a2771cc80821e041b16eb36c1c37af5349d4a"><code>3c9a277</code></a> [4.2.x] Fixed CVE-2024-27351 -- Prevented potential ReDoS in Truncator.words().</li> <li><a href="https://github.com/django/django/commit/79739511397367c56d20393b93c5edd35f5cca53"><code>7973951</code></a> [4.2.x] Added release date for 4.2.11 and 3.2.25.</li> <li><a href="https://github.com/django/django/commit/86d8034972db5014769cdd4832125067f31b3e8b"><code>86d8034</code></a> [4.2.x] Refs <a href="https://redirect.github.com/django/django/issues/34900">#34900</a>, Refs <a href="https://redirect.github.com/django/django/issues/34118">#34118</a> -- Updated assertion in test_skip_class_unle...</li> <li><a href="https://github.com/django/django/commit/cb173bb088e32df3d9ee8bee3c579d88ea713e8f"><code>cb173bb</code></a> [4.2.x] Fixed <a href="https://redirect.github.com/django/django/issues/35172">#35172</a> -- Fixed intcomma for string floats.</li> <li><a href="https://github.com/django/django/commit/227ef29cff8ded8187c48b0aa955264cf83a01a4"><code>227ef29</code></a> [4.2.x] Added CVE-2024-24680 to security archive.</li> <li><a href="https://github.com/django/django/commit/e2f1907642c311b21d45d85a0aca7d9c05ede5cd"><code>e2f1907</code></a> [4.2.x] Post release version bump.</li> <li>See full diff in <a href="https://github.com/django/django/compare/4.2.10...4.2.11">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=django&package-manager=pip&previous-version=4.2.10&new-version=4.2.11)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/grafana/oncall/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Joey Orlando <joey.orlando@grafana.com>
2024-03-19 21:14:44 +00:00
# via -r requirements-dev.in
identify==2.5.34
# via pre-commit
idna==3.7
# via
Bump django from 4.2.10 to 4.2.11 in /engine (#4079) Bumps [django](https://github.com/django/django) from 4.2.10 to 4.2.11. <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/django/django/commit/61a986f53d805e4d359ab61af60a2dcd55befe25"><code>61a986f</code></a> [4.2.x] Bumped version for 4.2.11 release.</li> <li><a href="https://github.com/django/django/commit/3c9a2771cc80821e041b16eb36c1c37af5349d4a"><code>3c9a277</code></a> [4.2.x] Fixed CVE-2024-27351 -- Prevented potential ReDoS in Truncator.words().</li> <li><a href="https://github.com/django/django/commit/79739511397367c56d20393b93c5edd35f5cca53"><code>7973951</code></a> [4.2.x] Added release date for 4.2.11 and 3.2.25.</li> <li><a href="https://github.com/django/django/commit/86d8034972db5014769cdd4832125067f31b3e8b"><code>86d8034</code></a> [4.2.x] Refs <a href="https://redirect.github.com/django/django/issues/34900">#34900</a>, Refs <a href="https://redirect.github.com/django/django/issues/34118">#34118</a> -- Updated assertion in test_skip_class_unle...</li> <li><a href="https://github.com/django/django/commit/cb173bb088e32df3d9ee8bee3c579d88ea713e8f"><code>cb173bb</code></a> [4.2.x] Fixed <a href="https://redirect.github.com/django/django/issues/35172">#35172</a> -- Fixed intcomma for string floats.</li> <li><a href="https://github.com/django/django/commit/227ef29cff8ded8187c48b0aa955264cf83a01a4"><code>227ef29</code></a> [4.2.x] Added CVE-2024-24680 to security archive.</li> <li><a href="https://github.com/django/django/commit/e2f1907642c311b21d45d85a0aca7d9c05ede5cd"><code>e2f1907</code></a> [4.2.x] Post release version bump.</li> <li>See full diff in <a href="https://github.com/django/django/compare/4.2.10...4.2.11">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=django&package-manager=pip&previous-version=4.2.10&new-version=4.2.11)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/grafana/oncall/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Joey Orlando <joey.orlando@grafana.com>
2024-03-19 21:14:44 +00:00
# -c requirements.txt
# requests
inflection==0.5.1
# via
Bump django from 4.2.10 to 4.2.11 in /engine (#4079) Bumps [django](https://github.com/django/django) from 4.2.10 to 4.2.11. <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/django/django/commit/61a986f53d805e4d359ab61af60a2dcd55befe25"><code>61a986f</code></a> [4.2.x] Bumped version for 4.2.11 release.</li> <li><a href="https://github.com/django/django/commit/3c9a2771cc80821e041b16eb36c1c37af5349d4a"><code>3c9a277</code></a> [4.2.x] Fixed CVE-2024-27351 -- Prevented potential ReDoS in Truncator.words().</li> <li><a href="https://github.com/django/django/commit/79739511397367c56d20393b93c5edd35f5cca53"><code>7973951</code></a> [4.2.x] Added release date for 4.2.11 and 3.2.25.</li> <li><a href="https://github.com/django/django/commit/86d8034972db5014769cdd4832125067f31b3e8b"><code>86d8034</code></a> [4.2.x] Refs <a href="https://redirect.github.com/django/django/issues/34900">#34900</a>, Refs <a href="https://redirect.github.com/django/django/issues/34118">#34118</a> -- Updated assertion in test_skip_class_unle...</li> <li><a href="https://github.com/django/django/commit/cb173bb088e32df3d9ee8bee3c579d88ea713e8f"><code>cb173bb</code></a> [4.2.x] Fixed <a href="https://redirect.github.com/django/django/issues/35172">#35172</a> -- Fixed intcomma for string floats.</li> <li><a href="https://github.com/django/django/commit/227ef29cff8ded8187c48b0aa955264cf83a01a4"><code>227ef29</code></a> [4.2.x] Added CVE-2024-24680 to security archive.</li> <li><a href="https://github.com/django/django/commit/e2f1907642c311b21d45d85a0aca7d9c05ede5cd"><code>e2f1907</code></a> [4.2.x] Post release version bump.</li> <li>See full diff in <a href="https://github.com/django/django/compare/4.2.10...4.2.11">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=django&package-manager=pip&previous-version=4.2.10&new-version=4.2.11)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/grafana/oncall/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Joey Orlando <joey.orlando@grafana.com>
2024-03-19 21:14:44 +00:00
# -c requirements.txt
# pytest-factoryboy
iniconfig==2.0.0
# via pytest
mypy==1.4.1
# via
Bump django from 4.2.10 to 4.2.11 in /engine (#4079) Bumps [django](https://github.com/django/django) from 4.2.10 to 4.2.11. <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/django/django/commit/61a986f53d805e4d359ab61af60a2dcd55befe25"><code>61a986f</code></a> [4.2.x] Bumped version for 4.2.11 release.</li> <li><a href="https://github.com/django/django/commit/3c9a2771cc80821e041b16eb36c1c37af5349d4a"><code>3c9a277</code></a> [4.2.x] Fixed CVE-2024-27351 -- Prevented potential ReDoS in Truncator.words().</li> <li><a href="https://github.com/django/django/commit/79739511397367c56d20393b93c5edd35f5cca53"><code>7973951</code></a> [4.2.x] Added release date for 4.2.11 and 3.2.25.</li> <li><a href="https://github.com/django/django/commit/86d8034972db5014769cdd4832125067f31b3e8b"><code>86d8034</code></a> [4.2.x] Refs <a href="https://redirect.github.com/django/django/issues/34900">#34900</a>, Refs <a href="https://redirect.github.com/django/django/issues/34118">#34118</a> -- Updated assertion in test_skip_class_unle...</li> <li><a href="https://github.com/django/django/commit/cb173bb088e32df3d9ee8bee3c579d88ea713e8f"><code>cb173bb</code></a> [4.2.x] Fixed <a href="https://redirect.github.com/django/django/issues/35172">#35172</a> -- Fixed intcomma for string floats.</li> <li><a href="https://github.com/django/django/commit/227ef29cff8ded8187c48b0aa955264cf83a01a4"><code>227ef29</code></a> [4.2.x] Added CVE-2024-24680 to security archive.</li> <li><a href="https://github.com/django/django/commit/e2f1907642c311b21d45d85a0aca7d9c05ede5cd"><code>e2f1907</code></a> [4.2.x] Post release version bump.</li> <li>See full diff in <a href="https://github.com/django/django/compare/4.2.10...4.2.11">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=django&package-manager=pip&previous-version=4.2.10&new-version=4.2.11)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/grafana/oncall/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Joey Orlando <joey.orlando@grafana.com>
2024-03-19 21:14:44 +00:00
# -r requirements-dev.in
# django-filter-stubs
# django-stubs
# djangorestframework-stubs
mypy-extensions==1.0.0
# via mypy
nodeenv==1.8.0
# via pre-commit
packaging==23.2
# via
# pytest
# pytest-factoryboy
platformdirs==4.2.0
# via virtualenv
pluggy==1.5.0
# via pytest
pre-commit==2.15.0
Bump django from 4.2.10 to 4.2.11 in /engine (#4079) Bumps [django](https://github.com/django/django) from 4.2.10 to 4.2.11. <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/django/django/commit/61a986f53d805e4d359ab61af60a2dcd55befe25"><code>61a986f</code></a> [4.2.x] Bumped version for 4.2.11 release.</li> <li><a href="https://github.com/django/django/commit/3c9a2771cc80821e041b16eb36c1c37af5349d4a"><code>3c9a277</code></a> [4.2.x] Fixed CVE-2024-27351 -- Prevented potential ReDoS in Truncator.words().</li> <li><a href="https://github.com/django/django/commit/79739511397367c56d20393b93c5edd35f5cca53"><code>7973951</code></a> [4.2.x] Added release date for 4.2.11 and 3.2.25.</li> <li><a href="https://github.com/django/django/commit/86d8034972db5014769cdd4832125067f31b3e8b"><code>86d8034</code></a> [4.2.x] Refs <a href="https://redirect.github.com/django/django/issues/34900">#34900</a>, Refs <a href="https://redirect.github.com/django/django/issues/34118">#34118</a> -- Updated assertion in test_skip_class_unle...</li> <li><a href="https://github.com/django/django/commit/cb173bb088e32df3d9ee8bee3c579d88ea713e8f"><code>cb173bb</code></a> [4.2.x] Fixed <a href="https://redirect.github.com/django/django/issues/35172">#35172</a> -- Fixed intcomma for string floats.</li> <li><a href="https://github.com/django/django/commit/227ef29cff8ded8187c48b0aa955264cf83a01a4"><code>227ef29</code></a> [4.2.x] Added CVE-2024-24680 to security archive.</li> <li><a href="https://github.com/django/django/commit/e2f1907642c311b21d45d85a0aca7d9c05ede5cd"><code>e2f1907</code></a> [4.2.x] Post release version bump.</li> <li>See full diff in <a href="https://github.com/django/django/compare/4.2.10...4.2.11">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=django&package-manager=pip&previous-version=4.2.10&new-version=4.2.11)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/grafana/oncall/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Joey Orlando <joey.orlando@grafana.com>
2024-03-19 21:14:44 +00:00
# via -r requirements-dev.in
psutil==5.9.4
# via
Bump django from 4.2.10 to 4.2.11 in /engine (#4079) Bumps [django](https://github.com/django/django) from 4.2.10 to 4.2.11. <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/django/django/commit/61a986f53d805e4d359ab61af60a2dcd55befe25"><code>61a986f</code></a> [4.2.x] Bumped version for 4.2.11 release.</li> <li><a href="https://github.com/django/django/commit/3c9a2771cc80821e041b16eb36c1c37af5349d4a"><code>3c9a277</code></a> [4.2.x] Fixed CVE-2024-27351 -- Prevented potential ReDoS in Truncator.words().</li> <li><a href="https://github.com/django/django/commit/79739511397367c56d20393b93c5edd35f5cca53"><code>7973951</code></a> [4.2.x] Added release date for 4.2.11 and 3.2.25.</li> <li><a href="https://github.com/django/django/commit/86d8034972db5014769cdd4832125067f31b3e8b"><code>86d8034</code></a> [4.2.x] Refs <a href="https://redirect.github.com/django/django/issues/34900">#34900</a>, Refs <a href="https://redirect.github.com/django/django/issues/34118">#34118</a> -- Updated assertion in test_skip_class_unle...</li> <li><a href="https://github.com/django/django/commit/cb173bb088e32df3d9ee8bee3c579d88ea713e8f"><code>cb173bb</code></a> [4.2.x] Fixed <a href="https://redirect.github.com/django/django/issues/35172">#35172</a> -- Fixed intcomma for string floats.</li> <li><a href="https://github.com/django/django/commit/227ef29cff8ded8187c48b0aa955264cf83a01a4"><code>227ef29</code></a> [4.2.x] Added CVE-2024-24680 to security archive.</li> <li><a href="https://github.com/django/django/commit/e2f1907642c311b21d45d85a0aca7d9c05ede5cd"><code>e2f1907</code></a> [4.2.x] Post release version bump.</li> <li>See full diff in <a href="https://github.com/django/django/compare/4.2.10...4.2.11">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=django&package-manager=pip&previous-version=4.2.10&new-version=4.2.11)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/grafana/oncall/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Joey Orlando <joey.orlando@grafana.com>
2024-03-19 21:14:44 +00:00
# -c requirements.txt
# pytest-xdist
pytest==8.2.2
# via
Bump django from 4.2.10 to 4.2.11 in /engine (#4079) Bumps [django](https://github.com/django/django) from 4.2.10 to 4.2.11. <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/django/django/commit/61a986f53d805e4d359ab61af60a2dcd55befe25"><code>61a986f</code></a> [4.2.x] Bumped version for 4.2.11 release.</li> <li><a href="https://github.com/django/django/commit/3c9a2771cc80821e041b16eb36c1c37af5349d4a"><code>3c9a277</code></a> [4.2.x] Fixed CVE-2024-27351 -- Prevented potential ReDoS in Truncator.words().</li> <li><a href="https://github.com/django/django/commit/79739511397367c56d20393b93c5edd35f5cca53"><code>7973951</code></a> [4.2.x] Added release date for 4.2.11 and 3.2.25.</li> <li><a href="https://github.com/django/django/commit/86d8034972db5014769cdd4832125067f31b3e8b"><code>86d8034</code></a> [4.2.x] Refs <a href="https://redirect.github.com/django/django/issues/34900">#34900</a>, Refs <a href="https://redirect.github.com/django/django/issues/34118">#34118</a> -- Updated assertion in test_skip_class_unle...</li> <li><a href="https://github.com/django/django/commit/cb173bb088e32df3d9ee8bee3c579d88ea713e8f"><code>cb173bb</code></a> [4.2.x] Fixed <a href="https://redirect.github.com/django/django/issues/35172">#35172</a> -- Fixed intcomma for string floats.</li> <li><a href="https://github.com/django/django/commit/227ef29cff8ded8187c48b0aa955264cf83a01a4"><code>227ef29</code></a> [4.2.x] Added CVE-2024-24680 to security archive.</li> <li><a href="https://github.com/django/django/commit/e2f1907642c311b21d45d85a0aca7d9c05ede5cd"><code>e2f1907</code></a> [4.2.x] Post release version bump.</li> <li>See full diff in <a href="https://github.com/django/django/compare/4.2.10...4.2.11">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=django&package-manager=pip&previous-version=4.2.10&new-version=4.2.11)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/grafana/oncall/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Joey Orlando <joey.orlando@grafana.com>
2024-03-19 21:14:44 +00:00
# -r requirements-dev.in
# pytest-django
# pytest-factoryboy
chore: add `pytest-socket` library + disable network calls in tests (#5315) # What this PR does Inspired by [this discussion](https://github.com/grafana/oncall/pull/5307#discussion_r1862449480). _tldr;_ ensures that if any of our tests try making an external network call, they will fail. Setup an example test: ```python def test_external_network_call(): import requests response = requests.get('https://www.example.com') assert response.status_code == 200 ``` and it worked (failed; [example CI test run](https://github.com/grafana/oncall/actions/runs/12106416991/job/33752144727?pr=5315#step:6:389)) as expected: ```bash __________________________ test_external_network_call __________________________ def test_external_network_call(): import requests > response = requests.get('https://www.example.com') requests = <module 'requests' from '/opt/hostedtoolcache/Python/3.12.3/x64/lib/python3.12/site-packages/requests/__init__.py'> apps/test_joey.py:4: _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ /opt/hostedtoolcache/Python/3.12.3/x64/lib/python3.12/site-packages/requests/api.py:73: in get return request("get", url, params=params, **kwargs) kwargs = {} params = None url = 'https://www.example.com' /opt/hostedtoolcache/Python/3.12.3/x64/lib/python3.12/site-packages/requests/api.py:59: in request return session.request(method=method, url=url, **kwargs) kwargs = {'params': None} method = 'get' session = <requests.sessions.Session object at 0x7f10ebaada90> url = 'https://www.example.com' /opt/hostedtoolcache/Python/3.12.3/x64/lib/python3.12/site-packages/requests/sessions.py:589: in request resp = self.send(prep, **send_kwargs) allow_redirects = True auth = None cert = None cookies = None data = None files = None headers = None hooks = None json = None method = 'get' params = None prep = <PreparedRequest [GET]> proxies = {} req = <Request [GET]> self = <requests.sessions.Session object at 0x7f10ebaada90> send_kwargs = {'allow_redirects': True, 'cert': None, 'proxies': OrderedDict(), 'stream': False, ...} settings = {'cert': None, 'proxies': OrderedDict(), 'stream': False, 'verify': True} stream = None timeout = None url = 'https://www.example.com' verify = None /opt/hostedtoolcache/Python/3.12.3/x64/lib/python3.12/site-packages/requests/sessions.py:703: in send r = adapter.send(request, **kwargs) adapter = <requests.adapters.HTTPAdapter object at 0x7f10ebaada30> allow_redirects = True hooks = {'response': []} kwargs = {'cert': None, 'proxies': OrderedDict(), 'stream': False, 'timeout': None, ...} request = <PreparedRequest [GET]> self = <requests.sessions.Session object at 0x7f10ebaada90> start = 1733064371.649901 stream = False /opt/hostedtoolcache/Python/3.12.3/x64/lib/python3.12/site-packages/requests/adapters.py:667: in send resp = conn.urlopen( cert = None chunked = False conn = <urllib3.connectionpool.HTTPSConnectionPool object at 0x7f10ebaadd30> proxies = OrderedDict() request = <PreparedRequest [GET]> self = <requests.adapters.HTTPAdapter object at 0x7f10ebaada30> stream = False timeout = Timeout(connect=None, read=None, total=None) url = '/' verify = True /opt/hostedtoolcache/Python/3.12.3/x64/lib/python3.12/site-packages/urllib3/connectionpool.py:715: in urlopen httplib_response = self._make_request( assert_same_host = False body = None body_pos = None chunked = False clean_exit = False conn = None destination_scheme = None err = None headers = {'User-Agent': 'python-requests/2.32.3', 'Accept-Encoding': 'gzip, deflate', 'Accept': '*/*', 'Connection': 'keep-alive'} http_tunnel_required = False is_new_proxy_conn = False method = 'GET' parsed_url = Url(scheme=None, auth=None, host=None, port=None, path='/', query=None, fragment=None) pool_timeout = None redirect = False release_conn = False release_this_conn = True response_kw = {'decode_content': False, 'preload_content': False} retries = Retry(total=0, connect=None, read=False, redirect=None, status=None) self = <urllib3.connectionpool.HTTPSConnectionPool object at 0x7f10ebaadd30> timeout = Timeout(connect=None, read=None, total=None) timeout_obj = Timeout(connect=None, read=None, total=None) url = '/' /opt/hostedtoolcache/Python/3.12.3/x64/lib/python3.12/site-packages/urllib3/connectionpool.py:404: in _make_request self._validate_conn(conn) chunked = False conn = <urllib3.connection.HTTPSConnection object at 0x7f10ebaadd60> httplib_request_kw = {'body': None, 'headers': {'User-Agent': 'python-requests/2.32.3', 'Accept-Encoding': 'gzip, deflate', 'Accept': '*/*', 'Connection': 'keep-alive'}} method = 'GET' self = <urllib3.connectionpool.HTTPSConnectionPool object at 0x7f10ebaadd30> timeout = Timeout(connect=None, read=None, total=None) timeout_obj = Timeout(connect=None, read=None, total=None) url = '/' /opt/hostedtoolcache/Python/3.12.3/x64/lib/python3.12/site-packages/urllib3/connectionpool.py:1060: in _validate_conn conn.connect() __class__ = <class 'urllib3.connectionpool.HTTPSConnectionPool'> conn = <urllib3.connection.HTTPSConnection object at 0x7f10ebaadd60> self = <urllib3.connectionpool.HTTPSConnectionPool object at 0x7f10ebaadd30> /opt/hostedtoolcache/Python/3.12.3/x64/lib/python3.12/site-packages/urllib3/connection.py:363: in connect self.sock = conn = self._new_conn() self = <urllib3.connection.HTTPSConnection object at 0x7f10ebaadd60> /opt/hostedtoolcache/Python/3.12.3/x64/lib/python3.12/site-packages/urllib3/connection.py:174: in _new_conn conn = connection.create_connection( extra_kw = {'socket_options': [(6, 1, 1)]} self = <urllib3.connection.HTTPSConnection object at 0x7f10ebaadd60> /opt/hostedtoolcache/Python/3.12.3/x64/lib/python3.12/site-packages/urllib3/util/connection.py:85: in create_connection sock.connect(sa) address = ('www.example.com', 443) af = <AddressFamily.AF_INET: 2> canonname = '' err = None family = <AddressFamily.AF_UNSPEC: 0> host = 'www.example.com' port = 443 proto = 6 res = (<AddressFamily.AF_INET: 2>, <SocketKind.SOCK_STREAM: 1>, 6, '', ('93.184.215.14', 443)) sa = ('93.184.215.14', 443) sock = <socket.socket fd=12, family=2, type=1, proto=6, laddr=('0.0.0.0', 0)> socket_options = [(6, 1, 1)] socktype = <SocketKind.SOCK_STREAM: 1> source_address = None timeout = None _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ inst = <socket.socket fd=12, family=2, type=1, proto=6, laddr=('0.0.0.0', 0)> args = (('93.184.215.14', 443),), host = '93.184.215.14' def guarded_connect(inst, *args): host = host_from_connect_args(args) if host in allowed_ip_hosts_and_hostnames or ( _is_unix_socket(inst.family) and allow_unix_socket ): return _true_connect(inst, *args) > raise SocketConnectBlockedError(allowed_list, host) E pytest_socket.SocketConnectBlockedError: A test tried to use socket.socket.connect() with host "93.184.215.14" (allowed: "calendar.google.com (142.251.167.100,142.251.167.101,142.251.167.102,142.251.167.113,142.251.167.138,142.251.167.139,2607:f8b0:4004:c09::65,2607:f8b0:4004:c09::66,2607:f8b0:4004:c09::71,2607:f8b0:4004:c09::8b),localhost (127.0.0.1,::1),oncall-dev-mariadb ()"). allow_unix_socket = False allowed_ip_hosts_and_hostnames = {'127.0.0.1', '142.251.167.100', '142.251.167.101', '142.251.167.102', '142.251.167.113', '142.251.167.138', ...} allowed_list = ['calendar.google.com (142.251.167.100,142.251.167.101,142.251.167.102,142.251.167.113,142.251.167.138,142.251.167.139...8b0:4004:c09::66,2607:f8b0:4004:c09::71,2607:f8b0:4004:c09::8b)', 'localhost (127.0.0.1,::1)', 'oncall-dev-mariadb ()'] args = (('93.184.215.14', 443),) host = '93.184.215.14' inst = <socket.socket fd=12, family=2, type=1, proto=6, laddr=('0.0.0.0', 0)> /opt/hostedtoolcache/Python/3.12.3/x64/lib/python3.12/site-packages/pytest_socket.py:252: SocketConnectBlockedError ``` ## Checklist - [x] Unit, integration, and e2e (if applicable) tests updated - [x] Documentation added (or `pr:no public docs` PR label added if not required) - [x] Added the relevant release notes label (see labels prefixed w/ `release:`). These labels dictate how your PR will show up in the autogenerated release notes.
2024-12-02 10:53:18 -05:00
# pytest-socket
# pytest-xdist
pytest-django==4.8.0
Bump django from 4.2.10 to 4.2.11 in /engine (#4079) Bumps [django](https://github.com/django/django) from 4.2.10 to 4.2.11. <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/django/django/commit/61a986f53d805e4d359ab61af60a2dcd55befe25"><code>61a986f</code></a> [4.2.x] Bumped version for 4.2.11 release.</li> <li><a href="https://github.com/django/django/commit/3c9a2771cc80821e041b16eb36c1c37af5349d4a"><code>3c9a277</code></a> [4.2.x] Fixed CVE-2024-27351 -- Prevented potential ReDoS in Truncator.words().</li> <li><a href="https://github.com/django/django/commit/79739511397367c56d20393b93c5edd35f5cca53"><code>7973951</code></a> [4.2.x] Added release date for 4.2.11 and 3.2.25.</li> <li><a href="https://github.com/django/django/commit/86d8034972db5014769cdd4832125067f31b3e8b"><code>86d8034</code></a> [4.2.x] Refs <a href="https://redirect.github.com/django/django/issues/34900">#34900</a>, Refs <a href="https://redirect.github.com/django/django/issues/34118">#34118</a> -- Updated assertion in test_skip_class_unle...</li> <li><a href="https://github.com/django/django/commit/cb173bb088e32df3d9ee8bee3c579d88ea713e8f"><code>cb173bb</code></a> [4.2.x] Fixed <a href="https://redirect.github.com/django/django/issues/35172">#35172</a> -- Fixed intcomma for string floats.</li> <li><a href="https://github.com/django/django/commit/227ef29cff8ded8187c48b0aa955264cf83a01a4"><code>227ef29</code></a> [4.2.x] Added CVE-2024-24680 to security archive.</li> <li><a href="https://github.com/django/django/commit/e2f1907642c311b21d45d85a0aca7d9c05ede5cd"><code>e2f1907</code></a> [4.2.x] Post release version bump.</li> <li>See full diff in <a href="https://github.com/django/django/compare/4.2.10...4.2.11">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=django&package-manager=pip&previous-version=4.2.10&new-version=4.2.11)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/grafana/oncall/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Joey Orlando <joey.orlando@grafana.com>
2024-03-19 21:14:44 +00:00
# via -r requirements-dev.in
pytest-factoryboy==2.7.0
Bump django from 4.2.10 to 4.2.11 in /engine (#4079) Bumps [django](https://github.com/django/django) from 4.2.10 to 4.2.11. <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/django/django/commit/61a986f53d805e4d359ab61af60a2dcd55befe25"><code>61a986f</code></a> [4.2.x] Bumped version for 4.2.11 release.</li> <li><a href="https://github.com/django/django/commit/3c9a2771cc80821e041b16eb36c1c37af5349d4a"><code>3c9a277</code></a> [4.2.x] Fixed CVE-2024-27351 -- Prevented potential ReDoS in Truncator.words().</li> <li><a href="https://github.com/django/django/commit/79739511397367c56d20393b93c5edd35f5cca53"><code>7973951</code></a> [4.2.x] Added release date for 4.2.11 and 3.2.25.</li> <li><a href="https://github.com/django/django/commit/86d8034972db5014769cdd4832125067f31b3e8b"><code>86d8034</code></a> [4.2.x] Refs <a href="https://redirect.github.com/django/django/issues/34900">#34900</a>, Refs <a href="https://redirect.github.com/django/django/issues/34118">#34118</a> -- Updated assertion in test_skip_class_unle...</li> <li><a href="https://github.com/django/django/commit/cb173bb088e32df3d9ee8bee3c579d88ea713e8f"><code>cb173bb</code></a> [4.2.x] Fixed <a href="https://redirect.github.com/django/django/issues/35172">#35172</a> -- Fixed intcomma for string floats.</li> <li><a href="https://github.com/django/django/commit/227ef29cff8ded8187c48b0aa955264cf83a01a4"><code>227ef29</code></a> [4.2.x] Added CVE-2024-24680 to security archive.</li> <li><a href="https://github.com/django/django/commit/e2f1907642c311b21d45d85a0aca7d9c05ede5cd"><code>e2f1907</code></a> [4.2.x] Post release version bump.</li> <li>See full diff in <a href="https://github.com/django/django/compare/4.2.10...4.2.11">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=django&package-manager=pip&previous-version=4.2.10&new-version=4.2.11)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/grafana/oncall/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Joey Orlando <joey.orlando@grafana.com>
2024-03-19 21:14:44 +00:00
# via -r requirements-dev.in
chore: add `pytest-socket` library + disable network calls in tests (#5315) # What this PR does Inspired by [this discussion](https://github.com/grafana/oncall/pull/5307#discussion_r1862449480). _tldr;_ ensures that if any of our tests try making an external network call, they will fail. Setup an example test: ```python def test_external_network_call(): import requests response = requests.get('https://www.example.com') assert response.status_code == 200 ``` and it worked (failed; [example CI test run](https://github.com/grafana/oncall/actions/runs/12106416991/job/33752144727?pr=5315#step:6:389)) as expected: ```bash __________________________ test_external_network_call __________________________ def test_external_network_call(): import requests > response = requests.get('https://www.example.com') requests = <module 'requests' from '/opt/hostedtoolcache/Python/3.12.3/x64/lib/python3.12/site-packages/requests/__init__.py'> apps/test_joey.py:4: _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ /opt/hostedtoolcache/Python/3.12.3/x64/lib/python3.12/site-packages/requests/api.py:73: in get return request("get", url, params=params, **kwargs) kwargs = {} params = None url = 'https://www.example.com' /opt/hostedtoolcache/Python/3.12.3/x64/lib/python3.12/site-packages/requests/api.py:59: in request return session.request(method=method, url=url, **kwargs) kwargs = {'params': None} method = 'get' session = <requests.sessions.Session object at 0x7f10ebaada90> url = 'https://www.example.com' /opt/hostedtoolcache/Python/3.12.3/x64/lib/python3.12/site-packages/requests/sessions.py:589: in request resp = self.send(prep, **send_kwargs) allow_redirects = True auth = None cert = None cookies = None data = None files = None headers = None hooks = None json = None method = 'get' params = None prep = <PreparedRequest [GET]> proxies = {} req = <Request [GET]> self = <requests.sessions.Session object at 0x7f10ebaada90> send_kwargs = {'allow_redirects': True, 'cert': None, 'proxies': OrderedDict(), 'stream': False, ...} settings = {'cert': None, 'proxies': OrderedDict(), 'stream': False, 'verify': True} stream = None timeout = None url = 'https://www.example.com' verify = None /opt/hostedtoolcache/Python/3.12.3/x64/lib/python3.12/site-packages/requests/sessions.py:703: in send r = adapter.send(request, **kwargs) adapter = <requests.adapters.HTTPAdapter object at 0x7f10ebaada30> allow_redirects = True hooks = {'response': []} kwargs = {'cert': None, 'proxies': OrderedDict(), 'stream': False, 'timeout': None, ...} request = <PreparedRequest [GET]> self = <requests.sessions.Session object at 0x7f10ebaada90> start = 1733064371.649901 stream = False /opt/hostedtoolcache/Python/3.12.3/x64/lib/python3.12/site-packages/requests/adapters.py:667: in send resp = conn.urlopen( cert = None chunked = False conn = <urllib3.connectionpool.HTTPSConnectionPool object at 0x7f10ebaadd30> proxies = OrderedDict() request = <PreparedRequest [GET]> self = <requests.adapters.HTTPAdapter object at 0x7f10ebaada30> stream = False timeout = Timeout(connect=None, read=None, total=None) url = '/' verify = True /opt/hostedtoolcache/Python/3.12.3/x64/lib/python3.12/site-packages/urllib3/connectionpool.py:715: in urlopen httplib_response = self._make_request( assert_same_host = False body = None body_pos = None chunked = False clean_exit = False conn = None destination_scheme = None err = None headers = {'User-Agent': 'python-requests/2.32.3', 'Accept-Encoding': 'gzip, deflate', 'Accept': '*/*', 'Connection': 'keep-alive'} http_tunnel_required = False is_new_proxy_conn = False method = 'GET' parsed_url = Url(scheme=None, auth=None, host=None, port=None, path='/', query=None, fragment=None) pool_timeout = None redirect = False release_conn = False release_this_conn = True response_kw = {'decode_content': False, 'preload_content': False} retries = Retry(total=0, connect=None, read=False, redirect=None, status=None) self = <urllib3.connectionpool.HTTPSConnectionPool object at 0x7f10ebaadd30> timeout = Timeout(connect=None, read=None, total=None) timeout_obj = Timeout(connect=None, read=None, total=None) url = '/' /opt/hostedtoolcache/Python/3.12.3/x64/lib/python3.12/site-packages/urllib3/connectionpool.py:404: in _make_request self._validate_conn(conn) chunked = False conn = <urllib3.connection.HTTPSConnection object at 0x7f10ebaadd60> httplib_request_kw = {'body': None, 'headers': {'User-Agent': 'python-requests/2.32.3', 'Accept-Encoding': 'gzip, deflate', 'Accept': '*/*', 'Connection': 'keep-alive'}} method = 'GET' self = <urllib3.connectionpool.HTTPSConnectionPool object at 0x7f10ebaadd30> timeout = Timeout(connect=None, read=None, total=None) timeout_obj = Timeout(connect=None, read=None, total=None) url = '/' /opt/hostedtoolcache/Python/3.12.3/x64/lib/python3.12/site-packages/urllib3/connectionpool.py:1060: in _validate_conn conn.connect() __class__ = <class 'urllib3.connectionpool.HTTPSConnectionPool'> conn = <urllib3.connection.HTTPSConnection object at 0x7f10ebaadd60> self = <urllib3.connectionpool.HTTPSConnectionPool object at 0x7f10ebaadd30> /opt/hostedtoolcache/Python/3.12.3/x64/lib/python3.12/site-packages/urllib3/connection.py:363: in connect self.sock = conn = self._new_conn() self = <urllib3.connection.HTTPSConnection object at 0x7f10ebaadd60> /opt/hostedtoolcache/Python/3.12.3/x64/lib/python3.12/site-packages/urllib3/connection.py:174: in _new_conn conn = connection.create_connection( extra_kw = {'socket_options': [(6, 1, 1)]} self = <urllib3.connection.HTTPSConnection object at 0x7f10ebaadd60> /opt/hostedtoolcache/Python/3.12.3/x64/lib/python3.12/site-packages/urllib3/util/connection.py:85: in create_connection sock.connect(sa) address = ('www.example.com', 443) af = <AddressFamily.AF_INET: 2> canonname = '' err = None family = <AddressFamily.AF_UNSPEC: 0> host = 'www.example.com' port = 443 proto = 6 res = (<AddressFamily.AF_INET: 2>, <SocketKind.SOCK_STREAM: 1>, 6, '', ('93.184.215.14', 443)) sa = ('93.184.215.14', 443) sock = <socket.socket fd=12, family=2, type=1, proto=6, laddr=('0.0.0.0', 0)> socket_options = [(6, 1, 1)] socktype = <SocketKind.SOCK_STREAM: 1> source_address = None timeout = None _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ inst = <socket.socket fd=12, family=2, type=1, proto=6, laddr=('0.0.0.0', 0)> args = (('93.184.215.14', 443),), host = '93.184.215.14' def guarded_connect(inst, *args): host = host_from_connect_args(args) if host in allowed_ip_hosts_and_hostnames or ( _is_unix_socket(inst.family) and allow_unix_socket ): return _true_connect(inst, *args) > raise SocketConnectBlockedError(allowed_list, host) E pytest_socket.SocketConnectBlockedError: A test tried to use socket.socket.connect() with host "93.184.215.14" (allowed: "calendar.google.com (142.251.167.100,142.251.167.101,142.251.167.102,142.251.167.113,142.251.167.138,142.251.167.139,2607:f8b0:4004:c09::65,2607:f8b0:4004:c09::66,2607:f8b0:4004:c09::71,2607:f8b0:4004:c09::8b),localhost (127.0.0.1,::1),oncall-dev-mariadb ()"). allow_unix_socket = False allowed_ip_hosts_and_hostnames = {'127.0.0.1', '142.251.167.100', '142.251.167.101', '142.251.167.102', '142.251.167.113', '142.251.167.138', ...} allowed_list = ['calendar.google.com (142.251.167.100,142.251.167.101,142.251.167.102,142.251.167.113,142.251.167.138,142.251.167.139...8b0:4004:c09::66,2607:f8b0:4004:c09::71,2607:f8b0:4004:c09::8b)', 'localhost (127.0.0.1,::1)', 'oncall-dev-mariadb ()'] args = (('93.184.215.14', 443),) host = '93.184.215.14' inst = <socket.socket fd=12, family=2, type=1, proto=6, laddr=('0.0.0.0', 0)> /opt/hostedtoolcache/Python/3.12.3/x64/lib/python3.12/site-packages/pytest_socket.py:252: SocketConnectBlockedError ``` ## Checklist - [x] Unit, integration, and e2e (if applicable) tests updated - [x] Documentation added (or `pr:no public docs` PR label added if not required) - [x] Added the relevant release notes label (see labels prefixed w/ `release:`). These labels dictate how your PR will show up in the autogenerated release notes.
2024-12-02 10:53:18 -05:00
pytest-socket==0.7.0
# via -r requirements-dev.in
chore(deps): bump virtualenv from 20.25.0 to 20.26.6 in /engine (#5411) Bumps [virtualenv](https://github.com/pypa/virtualenv) from 20.25.0 to 20.26.6. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/pypa/virtualenv/releases">virtualenv's releases</a>.</em></p> <blockquote> <h2>20.26.6</h2> <!-- raw HTML omitted --> <h2>What's Changed</h2> <ul> <li>release 20.26.5 by <a href="https://github.com/gaborbernat"><code>@​gaborbernat</code></a> in <a href="https://redirect.github.com/pypa/virtualenv/pull/2766">pypa/virtualenv#2766</a></li> <li>Fix <a href="https://redirect.github.com/pypa/virtualenv/issues/2768">#2768</a>: Quote template strings in activation scripts by <a href="https://github.com/y5c4l3"><code>@​y5c4l3</code></a> in <a href="https://redirect.github.com/pypa/virtualenv/pull/2771">pypa/virtualenv#2771</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/y5c4l3"><code>@​y5c4l3</code></a> made their first contribution in <a href="https://redirect.github.com/pypa/virtualenv/pull/2771">pypa/virtualenv#2771</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/pypa/virtualenv/compare/20.26.5...20.26.6">https://github.com/pypa/virtualenv/compare/20.26.5...20.26.6</a></p> <h2>20.26.5</h2> <!-- raw HTML omitted --> <h2>What's Changed</h2> <ul> <li>release 20.26.4 by <a href="https://github.com/gaborbernat"><code>@​gaborbernat</code></a> in <a href="https://redirect.github.com/pypa/virtualenv/pull/2761">pypa/virtualenv#2761</a></li> <li>Use uv over pip by <a href="https://github.com/gaborbernat"><code>@​gaborbernat</code></a> in <a href="https://redirect.github.com/pypa/virtualenv/pull/2765">pypa/virtualenv#2765</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/pypa/virtualenv/compare/20.26.4...20.26.5">https://github.com/pypa/virtualenv/compare/20.26.4...20.26.5</a></p> <h2>20.26.4</h2> <!-- raw HTML omitted --> <h2>What's Changed</h2> <ul> <li>release 20.26.3 by <a href="https://github.com/gaborbernat"><code>@​gaborbernat</code></a> in <a href="https://redirect.github.com/pypa/virtualenv/pull/2742">pypa/virtualenv#2742</a></li> <li>Fix whitespace around backticks in changelog by <a href="https://github.com/edmorley"><code>@​edmorley</code></a> in <a href="https://redirect.github.com/pypa/virtualenv/pull/2751">pypa/virtualenv#2751</a></li> <li>Test latest Python 3.13 by <a href="https://github.com/hugovk"><code>@​hugovk</code></a> in <a href="https://redirect.github.com/pypa/virtualenv/pull/2752">pypa/virtualenv#2752</a></li> <li>Fix typo in Nushell activation script by <a href="https://github.com/edmorley"><code>@​edmorley</code></a> in <a href="https://redirect.github.com/pypa/virtualenv/pull/2754">pypa/virtualenv#2754</a></li> <li>GitHub Actions: Replace deprecated macos-12 with macos-13 by <a href="https://github.com/hugovk"><code>@​hugovk</code></a> in <a href="https://redirect.github.com/pypa/virtualenv/pull/2756">pypa/virtualenv#2756</a></li> <li>Fix <a href="https://redirect.github.com/pypa/virtualenv/issues/2728">#2728</a>: Activating venv create unwanted console output by <a href="https://github.com/ShootGan"><code>@​ShootGan</code></a> in <a href="https://redirect.github.com/pypa/virtualenv/pull/2748">pypa/virtualenv#2748</a></li> <li>Upgrade bundled wheels by <a href="https://github.com/gaborbernat"><code>@​gaborbernat</code></a> in <a href="https://redirect.github.com/pypa/virtualenv/pull/2760">pypa/virtualenv#2760</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/ShootGan"><code>@​ShootGan</code></a> made their first contribution in <a href="https://redirect.github.com/pypa/virtualenv/pull/2748">pypa/virtualenv#2748</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/pypa/virtualenv/compare/20.26.3...20.26.4">https://github.com/pypa/virtualenv/compare/20.26.3...20.26.4</a></p> <h2>20.26.3</h2> <!-- raw HTML omitted --> <h2>What's Changed</h2> <ul> <li>release 20.26.2 by <a href="https://github.com/gaborbernat"><code>@​gaborbernat</code></a> in <a href="https://redirect.github.com/pypa/virtualenv/pull/2724">pypa/virtualenv#2724</a></li> <li>Bump embeded wheels by <a href="https://github.com/gaborbernat"><code>@​gaborbernat</code></a> in <a href="https://redirect.github.com/pypa/virtualenv/pull/2741">pypa/virtualenv#2741</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/pypa/virtualenv/compare/20.26.2...20.26.3">https://github.com/pypa/virtualenv/compare/20.26.2...20.26.3</a></p> <h2>20.26.2</h2> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/pypa/virtualenv/blob/main/docs/changelog.rst">virtualenv's changelog</a>.</em></p> <blockquote> <h2>v20.26.6 (2024-09-27)</h2> <p>Bugfixes - 20.26.6</p> <pre><code>- Properly quote string placeholders in activation script templates to mitigate potential command injection - by :user:`y5c4l3`. (:issue:`2768`) <h2>v20.26.5 (2024-09-17)</h2> <p>Bugfixes - 20.26.5 </code></pre></p> <ul> <li>Upgrade embedded wheels: setuptools to <code>75.1.0</code> from <code>74.1.2</code> - by :user:<code>gaborbernat</code>. (:issue:<code>2765</code>)</li> </ul> <h2>v20.26.4 (2024-09-07)</h2> <p>Bugfixes - 20.26.4</p> <pre><code>- no longer create `()` output in console during activation of a virtualenv by .bat file. (:issue:`2728`) - Upgrade embedded wheels: <ul> <li>wheel to <code>0.44.0</code> from <code>0.43.0</code></li> <li>pip to <code>24.2</code> from <code>24.1</code></li> <li>setuptools to <code>74.1.2</code> from <code>70.1.0</code> (:issue:<code>2760</code>)</li> </ul> <h2>v20.26.3 (2024-06-21)</h2> <p>Bugfixes - 20.26.3 </code></pre></p> <ul> <li> <p>Upgrade embedded wheels:</p> <ul> <li>setuptools to <code>70.1.0</code> from <code>69.5.1</code></li> <li>pip to <code>24.1</code> from <code>24.0</code> (:issue:<code>2741</code>)</li> </ul> </li> </ul> <h2>v20.26.2 (2024-05-13)</h2> <p>Bugfixes - 20.26.2</p> <pre><code>- ``virtualenv.pyz`` no longer fails when zipapp path contains a symlink - by :user:`HandSonic` and :user:`petamas`. (:issue:`1949`) - Fix bad return code from activate.sh if hashing is disabled - by :user:'fenkes-ibm'. (:issue:`2717`) <h2>v20.26.1 (2024-04-29)</h2> <p>Bugfixes - 20.26.1 </code></pre></p> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/pypa/virtualenv/commit/ec04726d065372ffad9920998aef1ce41252a61d"><code>ec04726</code></a> release 20.26.6</li> <li><a href="https://github.com/pypa/virtualenv/commit/86dddeda7c991f8529e1995bbff280fb7b761972"><code>86ddded</code></a> Fix <a href="https://redirect.github.com/pypa/virtualenv/issues/2768">#2768</a>: Quote template strings in activation scripts (<a href="https://redirect.github.com/pypa/virtualenv/issues/2771">#2771</a>)</li> <li><a href="https://github.com/pypa/virtualenv/commit/6bb3f6226c18d69bb6cfa3475b6d46dd463bb530"><code>6bb3f62</code></a> [pre-commit.ci] pre-commit autoupdate (<a href="https://redirect.github.com/pypa/virtualenv/issues/2769">#2769</a>)</li> <li><a href="https://github.com/pypa/virtualenv/commit/220d49c2e3ade2ed24f5712ab5a23895cde2e04c"><code>220d49c</code></a> Bump pypa/gh-action-pypi-publish from 1.10.1 to 1.10.2 (<a href="https://redirect.github.com/pypa/virtualenv/issues/2767">#2767</a>)</li> <li><a href="https://github.com/pypa/virtualenv/commit/cf340c83c2828a92def78c77b3e037a2baa4d557"><code>cf340c8</code></a> Merge pull request <a href="https://redirect.github.com/pypa/virtualenv/issues/2766">#2766</a> from pypa/release-20.26.5</li> <li><a href="https://github.com/pypa/virtualenv/commit/f3172b4da576b88275a14d2e7bbeb98b8f958a05"><code>f3172b4</code></a> release 20.26.5</li> <li><a href="https://github.com/pypa/virtualenv/commit/22b9795eb6bed0c17d0415c5513eca099a0a11ad"><code>22b9795</code></a> Use uv over pip (<a href="https://redirect.github.com/pypa/virtualenv/issues/2765">#2765</a>)</li> <li><a href="https://github.com/pypa/virtualenv/commit/35d8269aba12a1e3c60183a2082b2c4d0cc1192f"><code>35d8269</code></a> [pre-commit.ci] pre-commit autoupdate (<a href="https://redirect.github.com/pypa/virtualenv/issues/2764">#2764</a>)</li> <li><a href="https://github.com/pypa/virtualenv/commit/ee77feb77ccb3c5deefa318630c59315bcfda521"><code>ee77feb</code></a> [pre-commit.ci] pre-commit autoupdate (<a href="https://redirect.github.com/pypa/virtualenv/issues/2763">#2763</a>)</li> <li><a href="https://github.com/pypa/virtualenv/commit/c5160566293ed098ca30e0856dbf44588dd5c3a3"><code>c516056</code></a> Update README.md</li> <li>Additional commits viewable in <a href="https://github.com/pypa/virtualenv/compare/20.25.0...20.26.6">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=virtualenv&package-manager=pip&previous-version=20.25.0&new-version=20.26.6)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) You can trigger a rebase of this PR by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/grafana/oncall/network/alerts). </details> > **Note** > Automatic rebases have been disabled on this pull request as it has been open for over 30 days. --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: twu <199651+twu@users.noreply.github.com> Co-authored-by: Thomas Wurmitzer <thomas.wurmitzer@grafana.com>
2025-03-12 16:52:30 +01:00
pytest-xdist[psutil]==3.6.1
Bump django from 4.2.10 to 4.2.11 in /engine (#4079) Bumps [django](https://github.com/django/django) from 4.2.10 to 4.2.11. <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/django/django/commit/61a986f53d805e4d359ab61af60a2dcd55befe25"><code>61a986f</code></a> [4.2.x] Bumped version for 4.2.11 release.</li> <li><a href="https://github.com/django/django/commit/3c9a2771cc80821e041b16eb36c1c37af5349d4a"><code>3c9a277</code></a> [4.2.x] Fixed CVE-2024-27351 -- Prevented potential ReDoS in Truncator.words().</li> <li><a href="https://github.com/django/django/commit/79739511397367c56d20393b93c5edd35f5cca53"><code>7973951</code></a> [4.2.x] Added release date for 4.2.11 and 3.2.25.</li> <li><a href="https://github.com/django/django/commit/86d8034972db5014769cdd4832125067f31b3e8b"><code>86d8034</code></a> [4.2.x] Refs <a href="https://redirect.github.com/django/django/issues/34900">#34900</a>, Refs <a href="https://redirect.github.com/django/django/issues/34118">#34118</a> -- Updated assertion in test_skip_class_unle...</li> <li><a href="https://github.com/django/django/commit/cb173bb088e32df3d9ee8bee3c579d88ea713e8f"><code>cb173bb</code></a> [4.2.x] Fixed <a href="https://redirect.github.com/django/django/issues/35172">#35172</a> -- Fixed intcomma for string floats.</li> <li><a href="https://github.com/django/django/commit/227ef29cff8ded8187c48b0aa955264cf83a01a4"><code>227ef29</code></a> [4.2.x] Added CVE-2024-24680 to security archive.</li> <li><a href="https://github.com/django/django/commit/e2f1907642c311b21d45d85a0aca7d9c05ede5cd"><code>e2f1907</code></a> [4.2.x] Post release version bump.</li> <li>See full diff in <a href="https://github.com/django/django/compare/4.2.10...4.2.11">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=django&package-manager=pip&previous-version=4.2.10&new-version=4.2.11)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/grafana/oncall/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Joey Orlando <joey.orlando@grafana.com>
2024-03-19 21:14:44 +00:00
# via -r requirements-dev.in
python-dateutil==2.8.2
# via
Bump django from 4.2.10 to 4.2.11 in /engine (#4079) Bumps [django](https://github.com/django/django) from 4.2.10 to 4.2.11. <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/django/django/commit/61a986f53d805e4d359ab61af60a2dcd55befe25"><code>61a986f</code></a> [4.2.x] Bumped version for 4.2.11 release.</li> <li><a href="https://github.com/django/django/commit/3c9a2771cc80821e041b16eb36c1c37af5349d4a"><code>3c9a277</code></a> [4.2.x] Fixed CVE-2024-27351 -- Prevented potential ReDoS in Truncator.words().</li> <li><a href="https://github.com/django/django/commit/79739511397367c56d20393b93c5edd35f5cca53"><code>7973951</code></a> [4.2.x] Added release date for 4.2.11 and 3.2.25.</li> <li><a href="https://github.com/django/django/commit/86d8034972db5014769cdd4832125067f31b3e8b"><code>86d8034</code></a> [4.2.x] Refs <a href="https://redirect.github.com/django/django/issues/34900">#34900</a>, Refs <a href="https://redirect.github.com/django/django/issues/34118">#34118</a> -- Updated assertion in test_skip_class_unle...</li> <li><a href="https://github.com/django/django/commit/cb173bb088e32df3d9ee8bee3c579d88ea713e8f"><code>cb173bb</code></a> [4.2.x] Fixed <a href="https://redirect.github.com/django/django/issues/35172">#35172</a> -- Fixed intcomma for string floats.</li> <li><a href="https://github.com/django/django/commit/227ef29cff8ded8187c48b0aa955264cf83a01a4"><code>227ef29</code></a> [4.2.x] Added CVE-2024-24680 to security archive.</li> <li><a href="https://github.com/django/django/commit/e2f1907642c311b21d45d85a0aca7d9c05ede5cd"><code>e2f1907</code></a> [4.2.x] Post release version bump.</li> <li>See full diff in <a href="https://github.com/django/django/compare/4.2.10...4.2.11">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=django&package-manager=pip&previous-version=4.2.10&new-version=4.2.11)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/grafana/oncall/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Joey Orlando <joey.orlando@grafana.com>
2024-03-19 21:14:44 +00:00
# -c requirements.txt
# faker
pyyaml==6.0.1
# via
Bump django from 4.2.10 to 4.2.11 in /engine (#4079) Bumps [django](https://github.com/django/django) from 4.2.10 to 4.2.11. <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/django/django/commit/61a986f53d805e4d359ab61af60a2dcd55befe25"><code>61a986f</code></a> [4.2.x] Bumped version for 4.2.11 release.</li> <li><a href="https://github.com/django/django/commit/3c9a2771cc80821e041b16eb36c1c37af5349d4a"><code>3c9a277</code></a> [4.2.x] Fixed CVE-2024-27351 -- Prevented potential ReDoS in Truncator.words().</li> <li><a href="https://github.com/django/django/commit/79739511397367c56d20393b93c5edd35f5cca53"><code>7973951</code></a> [4.2.x] Added release date for 4.2.11 and 3.2.25.</li> <li><a href="https://github.com/django/django/commit/86d8034972db5014769cdd4832125067f31b3e8b"><code>86d8034</code></a> [4.2.x] Refs <a href="https://redirect.github.com/django/django/issues/34900">#34900</a>, Refs <a href="https://redirect.github.com/django/django/issues/34118">#34118</a> -- Updated assertion in test_skip_class_unle...</li> <li><a href="https://github.com/django/django/commit/cb173bb088e32df3d9ee8bee3c579d88ea713e8f"><code>cb173bb</code></a> [4.2.x] Fixed <a href="https://redirect.github.com/django/django/issues/35172">#35172</a> -- Fixed intcomma for string floats.</li> <li><a href="https://github.com/django/django/commit/227ef29cff8ded8187c48b0aa955264cf83a01a4"><code>227ef29</code></a> [4.2.x] Added CVE-2024-24680 to security archive.</li> <li><a href="https://github.com/django/django/commit/e2f1907642c311b21d45d85a0aca7d9c05ede5cd"><code>e2f1907</code></a> [4.2.x] Post release version bump.</li> <li>See full diff in <a href="https://github.com/django/django/compare/4.2.10...4.2.11">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=django&package-manager=pip&previous-version=4.2.10&new-version=4.2.11)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/grafana/oncall/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Joey Orlando <joey.orlando@grafana.com>
2024-03-19 21:14:44 +00:00
# -c requirements.txt
# pre-commit
Fix missing `setuptools` dep (#4799) # What this PR does _tldr;_ I think we should install `setuptools` into our engine `Dockerfile` + in our CI env because Python 3.12 no longer installs `distutils` by default. This should unblock us from being able to merge #4656 and #4555. **More details** I would like to be able to merge #4656 and #4555. _However_, in both of these PRs `setuptools` is being removed from `requirements-dev.txt` ([here](https://github.com/grafana/oncall/pull/4555/files#diff-d8146d0816a943b0fa69a20399d7bbdb58e1c84c8b7933b2ba6dea7c10c410f5L113-L116) and [here](https://github.com/grafana/oncall/pull/4656/files#diff-d8146d0816a943b0fa69a20399d7bbdb58e1c84c8b7933b2ba6dea7c10c410f5L113-L116)). This leads to things breaking because of: ```bash File "/opt/hostedtoolcache/Python/3.12.3/x64/lib/python3.12/site-packages/polymorphic/__init__.py", line 9, in <module> import pkg_resources ModuleNotFoundError: No module named 'pkg_resources' ``` - https://github.com/grafana/oncall/actions/runs/9865348392/job/27242117474?pr=4555#step:5:98 - https://github.com/grafana/oncall/actions/runs/10078898966/job/27864920455?pr=4656#step:5:100 Python 3.12 made a change to no longer pre-install `distutils` ([relevant release notes](https://docs.python.org/3/whatsnew/3.12.html#:~:text=The%20third%2Dparty%20Setuptools%20package%20continues%20to%20provide%20distutils%2C%20if%20you%20still%20require%20it%20in%20Python%203.12%20and%20beyond)): > [PEP 632](https://peps.python.org/pep-0632/): Remove the distutils package. See [the migration guide](https://peps.python.org/pep-0632/#migration-advice) for advice replacing the APIs it provided. The third-party [Setuptools](https://setuptools.pypa.io/en/latest/deprecated/distutils-legacy.html) package continues to provide distutils, if you still require it in Python 3.12 and beyond. > > [gh-95299](https://github.com/python/cpython/issues/95299): Do not pre-install setuptools in virtual environments created with [venv](https://docs.python.org/3/library/venv.html#module-venv). This means that distutils, setuptools, pkg_resources, and easy_install will no longer available by default; to access these run pip install setuptools in the [activated](https://docs.python.org/3/library/venv.html#venv-explanation) virtual environment. Additionally, `setuptools` is in `pip-tools` `UNSAFE_PACKAGES` list ([related GitHub issue](https://github.com/pypa/pipenv/issues/1417#issuecomment-364795745)), hence why I think Dependabot is removing it in #4656 and #4555. ## Checklist - [x] Unit, integration, and e2e (if applicable) tests updated - [x] Documentation added (or `pr:no public docs` PR label added if not required) - [x] Added the relevant release notes label (see labels prefixed w/ `release:`). These labels dictate how your PR will show up in the autogenerated release notes.
2024-08-09 16:09:47 -04:00
requests==2.32.3
# via
Bump django from 4.2.10 to 4.2.11 in /engine (#4079) Bumps [django](https://github.com/django/django) from 4.2.10 to 4.2.11. <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/django/django/commit/61a986f53d805e4d359ab61af60a2dcd55befe25"><code>61a986f</code></a> [4.2.x] Bumped version for 4.2.11 release.</li> <li><a href="https://github.com/django/django/commit/3c9a2771cc80821e041b16eb36c1c37af5349d4a"><code>3c9a277</code></a> [4.2.x] Fixed CVE-2024-27351 -- Prevented potential ReDoS in Truncator.words().</li> <li><a href="https://github.com/django/django/commit/79739511397367c56d20393b93c5edd35f5cca53"><code>7973951</code></a> [4.2.x] Added release date for 4.2.11 and 3.2.25.</li> <li><a href="https://github.com/django/django/commit/86d8034972db5014769cdd4832125067f31b3e8b"><code>86d8034</code></a> [4.2.x] Refs <a href="https://redirect.github.com/django/django/issues/34900">#34900</a>, Refs <a href="https://redirect.github.com/django/django/issues/34118">#34118</a> -- Updated assertion in test_skip_class_unle...</li> <li><a href="https://github.com/django/django/commit/cb173bb088e32df3d9ee8bee3c579d88ea713e8f"><code>cb173bb</code></a> [4.2.x] Fixed <a href="https://redirect.github.com/django/django/issues/35172">#35172</a> -- Fixed intcomma for string floats.</li> <li><a href="https://github.com/django/django/commit/227ef29cff8ded8187c48b0aa955264cf83a01a4"><code>227ef29</code></a> [4.2.x] Added CVE-2024-24680 to security archive.</li> <li><a href="https://github.com/django/django/commit/e2f1907642c311b21d45d85a0aca7d9c05ede5cd"><code>e2f1907</code></a> [4.2.x] Post release version bump.</li> <li>See full diff in <a href="https://github.com/django/django/compare/4.2.10...4.2.11">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=django&package-manager=pip&previous-version=4.2.10&new-version=4.2.11)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/grafana/oncall/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Joey Orlando <joey.orlando@grafana.com>
2024-03-19 21:14:44 +00:00
# -c requirements.txt
# djangorestframework-stubs
six==1.16.0
# via
Bump django from 4.2.10 to 4.2.11 in /engine (#4079) Bumps [django](https://github.com/django/django) from 4.2.10 to 4.2.11. <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/django/django/commit/61a986f53d805e4d359ab61af60a2dcd55befe25"><code>61a986f</code></a> [4.2.x] Bumped version for 4.2.11 release.</li> <li><a href="https://github.com/django/django/commit/3c9a2771cc80821e041b16eb36c1c37af5349d4a"><code>3c9a277</code></a> [4.2.x] Fixed CVE-2024-27351 -- Prevented potential ReDoS in Truncator.words().</li> <li><a href="https://github.com/django/django/commit/79739511397367c56d20393b93c5edd35f5cca53"><code>7973951</code></a> [4.2.x] Added release date for 4.2.11 and 3.2.25.</li> <li><a href="https://github.com/django/django/commit/86d8034972db5014769cdd4832125067f31b3e8b"><code>86d8034</code></a> [4.2.x] Refs <a href="https://redirect.github.com/django/django/issues/34900">#34900</a>, Refs <a href="https://redirect.github.com/django/django/issues/34118">#34118</a> -- Updated assertion in test_skip_class_unle...</li> <li><a href="https://github.com/django/django/commit/cb173bb088e32df3d9ee8bee3c579d88ea713e8f"><code>cb173bb</code></a> [4.2.x] Fixed <a href="https://redirect.github.com/django/django/issues/35172">#35172</a> -- Fixed intcomma for string floats.</li> <li><a href="https://github.com/django/django/commit/227ef29cff8ded8187c48b0aa955264cf83a01a4"><code>227ef29</code></a> [4.2.x] Added CVE-2024-24680 to security archive.</li> <li><a href="https://github.com/django/django/commit/e2f1907642c311b21d45d85a0aca7d9c05ede5cd"><code>e2f1907</code></a> [4.2.x] Post release version bump.</li> <li>See full diff in <a href="https://github.com/django/django/compare/4.2.10...4.2.11">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=django&package-manager=pip&previous-version=4.2.10&new-version=4.2.11)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/grafana/oncall/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Joey Orlando <joey.orlando@grafana.com>
2024-03-19 21:14:44 +00:00
# -c requirements.txt
# python-dateutil
sqlparse==0.5.0
# via
Bump django from 4.2.10 to 4.2.11 in /engine (#4079) Bumps [django](https://github.com/django/django) from 4.2.10 to 4.2.11. <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/django/django/commit/61a986f53d805e4d359ab61af60a2dcd55befe25"><code>61a986f</code></a> [4.2.x] Bumped version for 4.2.11 release.</li> <li><a href="https://github.com/django/django/commit/3c9a2771cc80821e041b16eb36c1c37af5349d4a"><code>3c9a277</code></a> [4.2.x] Fixed CVE-2024-27351 -- Prevented potential ReDoS in Truncator.words().</li> <li><a href="https://github.com/django/django/commit/79739511397367c56d20393b93c5edd35f5cca53"><code>7973951</code></a> [4.2.x] Added release date for 4.2.11 and 3.2.25.</li> <li><a href="https://github.com/django/django/commit/86d8034972db5014769cdd4832125067f31b3e8b"><code>86d8034</code></a> [4.2.x] Refs <a href="https://redirect.github.com/django/django/issues/34900">#34900</a>, Refs <a href="https://redirect.github.com/django/django/issues/34118">#34118</a> -- Updated assertion in test_skip_class_unle...</li> <li><a href="https://github.com/django/django/commit/cb173bb088e32df3d9ee8bee3c579d88ea713e8f"><code>cb173bb</code></a> [4.2.x] Fixed <a href="https://redirect.github.com/django/django/issues/35172">#35172</a> -- Fixed intcomma for string floats.</li> <li><a href="https://github.com/django/django/commit/227ef29cff8ded8187c48b0aa955264cf83a01a4"><code>227ef29</code></a> [4.2.x] Added CVE-2024-24680 to security archive.</li> <li><a href="https://github.com/django/django/commit/e2f1907642c311b21d45d85a0aca7d9c05ede5cd"><code>e2f1907</code></a> [4.2.x] Post release version bump.</li> <li>See full diff in <a href="https://github.com/django/django/compare/4.2.10...4.2.11">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=django&package-manager=pip&previous-version=4.2.10&new-version=4.2.11)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/grafana/oncall/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Joey Orlando <joey.orlando@grafana.com>
2024-03-19 21:14:44 +00:00
# -c requirements.txt
# django
toml==0.10.2
# via
Bump django from 4.2.10 to 4.2.11 in /engine (#4079) Bumps [django](https://github.com/django/django) from 4.2.10 to 4.2.11. <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/django/django/commit/61a986f53d805e4d359ab61af60a2dcd55befe25"><code>61a986f</code></a> [4.2.x] Bumped version for 4.2.11 release.</li> <li><a href="https://github.com/django/django/commit/3c9a2771cc80821e041b16eb36c1c37af5349d4a"><code>3c9a277</code></a> [4.2.x] Fixed CVE-2024-27351 -- Prevented potential ReDoS in Truncator.words().</li> <li><a href="https://github.com/django/django/commit/79739511397367c56d20393b93c5edd35f5cca53"><code>7973951</code></a> [4.2.x] Added release date for 4.2.11 and 3.2.25.</li> <li><a href="https://github.com/django/django/commit/86d8034972db5014769cdd4832125067f31b3e8b"><code>86d8034</code></a> [4.2.x] Refs <a href="https://redirect.github.com/django/django/issues/34900">#34900</a>, Refs <a href="https://redirect.github.com/django/django/issues/34118">#34118</a> -- Updated assertion in test_skip_class_unle...</li> <li><a href="https://github.com/django/django/commit/cb173bb088e32df3d9ee8bee3c579d88ea713e8f"><code>cb173bb</code></a> [4.2.x] Fixed <a href="https://redirect.github.com/django/django/issues/35172">#35172</a> -- Fixed intcomma for string floats.</li> <li><a href="https://github.com/django/django/commit/227ef29cff8ded8187c48b0aa955264cf83a01a4"><code>227ef29</code></a> [4.2.x] Added CVE-2024-24680 to security archive.</li> <li><a href="https://github.com/django/django/commit/e2f1907642c311b21d45d85a0aca7d9c05ede5cd"><code>e2f1907</code></a> [4.2.x] Post release version bump.</li> <li>See full diff in <a href="https://github.com/django/django/compare/4.2.10...4.2.11">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=django&package-manager=pip&previous-version=4.2.10&new-version=4.2.11)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/grafana/oncall/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Joey Orlando <joey.orlando@grafana.com>
2024-03-19 21:14:44 +00:00
# -c requirements.txt
# pre-commit
types-beautifulsoup4==4.12.0.5
Bump django from 4.2.10 to 4.2.11 in /engine (#4079) Bumps [django](https://github.com/django/django) from 4.2.10 to 4.2.11. <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/django/django/commit/61a986f53d805e4d359ab61af60a2dcd55befe25"><code>61a986f</code></a> [4.2.x] Bumped version for 4.2.11 release.</li> <li><a href="https://github.com/django/django/commit/3c9a2771cc80821e041b16eb36c1c37af5349d4a"><code>3c9a277</code></a> [4.2.x] Fixed CVE-2024-27351 -- Prevented potential ReDoS in Truncator.words().</li> <li><a href="https://github.com/django/django/commit/79739511397367c56d20393b93c5edd35f5cca53"><code>7973951</code></a> [4.2.x] Added release date for 4.2.11 and 3.2.25.</li> <li><a href="https://github.com/django/django/commit/86d8034972db5014769cdd4832125067f31b3e8b"><code>86d8034</code></a> [4.2.x] Refs <a href="https://redirect.github.com/django/django/issues/34900">#34900</a>, Refs <a href="https://redirect.github.com/django/django/issues/34118">#34118</a> -- Updated assertion in test_skip_class_unle...</li> <li><a href="https://github.com/django/django/commit/cb173bb088e32df3d9ee8bee3c579d88ea713e8f"><code>cb173bb</code></a> [4.2.x] Fixed <a href="https://redirect.github.com/django/django/issues/35172">#35172</a> -- Fixed intcomma for string floats.</li> <li><a href="https://github.com/django/django/commit/227ef29cff8ded8187c48b0aa955264cf83a01a4"><code>227ef29</code></a> [4.2.x] Added CVE-2024-24680 to security archive.</li> <li><a href="https://github.com/django/django/commit/e2f1907642c311b21d45d85a0aca7d9c05ede5cd"><code>e2f1907</code></a> [4.2.x] Post release version bump.</li> <li>See full diff in <a href="https://github.com/django/django/compare/4.2.10...4.2.11">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=django&package-manager=pip&previous-version=4.2.10&new-version=4.2.11)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/grafana/oncall/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Joey Orlando <joey.orlando@grafana.com>
2024-03-19 21:14:44 +00:00
# via -r requirements-dev.in
types-html5lib==1.1.11.20240106
# via types-beautifulsoup4
types-pymysql==1.0.19.7
Bump django from 4.2.10 to 4.2.11 in /engine (#4079) Bumps [django](https://github.com/django/django) from 4.2.10 to 4.2.11. <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/django/django/commit/61a986f53d805e4d359ab61af60a2dcd55befe25"><code>61a986f</code></a> [4.2.x] Bumped version for 4.2.11 release.</li> <li><a href="https://github.com/django/django/commit/3c9a2771cc80821e041b16eb36c1c37af5349d4a"><code>3c9a277</code></a> [4.2.x] Fixed CVE-2024-27351 -- Prevented potential ReDoS in Truncator.words().</li> <li><a href="https://github.com/django/django/commit/79739511397367c56d20393b93c5edd35f5cca53"><code>7973951</code></a> [4.2.x] Added release date for 4.2.11 and 3.2.25.</li> <li><a href="https://github.com/django/django/commit/86d8034972db5014769cdd4832125067f31b3e8b"><code>86d8034</code></a> [4.2.x] Refs <a href="https://redirect.github.com/django/django/issues/34900">#34900</a>, Refs <a href="https://redirect.github.com/django/django/issues/34118">#34118</a> -- Updated assertion in test_skip_class_unle...</li> <li><a href="https://github.com/django/django/commit/cb173bb088e32df3d9ee8bee3c579d88ea713e8f"><code>cb173bb</code></a> [4.2.x] Fixed <a href="https://redirect.github.com/django/django/issues/35172">#35172</a> -- Fixed intcomma for string floats.</li> <li><a href="https://github.com/django/django/commit/227ef29cff8ded8187c48b0aa955264cf83a01a4"><code>227ef29</code></a> [4.2.x] Added CVE-2024-24680 to security archive.</li> <li><a href="https://github.com/django/django/commit/e2f1907642c311b21d45d85a0aca7d9c05ede5cd"><code>e2f1907</code></a> [4.2.x] Post release version bump.</li> <li>See full diff in <a href="https://github.com/django/django/compare/4.2.10...4.2.11">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=django&package-manager=pip&previous-version=4.2.10&new-version=4.2.11)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/grafana/oncall/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Joey Orlando <joey.orlando@grafana.com>
2024-03-19 21:14:44 +00:00
# via -r requirements-dev.in
types-python-dateutil==2.8.19.13
Bump django from 4.2.10 to 4.2.11 in /engine (#4079) Bumps [django](https://github.com/django/django) from 4.2.10 to 4.2.11. <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/django/django/commit/61a986f53d805e4d359ab61af60a2dcd55befe25"><code>61a986f</code></a> [4.2.x] Bumped version for 4.2.11 release.</li> <li><a href="https://github.com/django/django/commit/3c9a2771cc80821e041b16eb36c1c37af5349d4a"><code>3c9a277</code></a> [4.2.x] Fixed CVE-2024-27351 -- Prevented potential ReDoS in Truncator.words().</li> <li><a href="https://github.com/django/django/commit/79739511397367c56d20393b93c5edd35f5cca53"><code>7973951</code></a> [4.2.x] Added release date for 4.2.11 and 3.2.25.</li> <li><a href="https://github.com/django/django/commit/86d8034972db5014769cdd4832125067f31b3e8b"><code>86d8034</code></a> [4.2.x] Refs <a href="https://redirect.github.com/django/django/issues/34900">#34900</a>, Refs <a href="https://redirect.github.com/django/django/issues/34118">#34118</a> -- Updated assertion in test_skip_class_unle...</li> <li><a href="https://github.com/django/django/commit/cb173bb088e32df3d9ee8bee3c579d88ea713e8f"><code>cb173bb</code></a> [4.2.x] Fixed <a href="https://redirect.github.com/django/django/issues/35172">#35172</a> -- Fixed intcomma for string floats.</li> <li><a href="https://github.com/django/django/commit/227ef29cff8ded8187c48b0aa955264cf83a01a4"><code>227ef29</code></a> [4.2.x] Added CVE-2024-24680 to security archive.</li> <li><a href="https://github.com/django/django/commit/e2f1907642c311b21d45d85a0aca7d9c05ede5cd"><code>e2f1907</code></a> [4.2.x] Post release version bump.</li> <li>See full diff in <a href="https://github.com/django/django/compare/4.2.10...4.2.11">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=django&package-manager=pip&previous-version=4.2.10&new-version=4.2.11)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/grafana/oncall/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Joey Orlando <joey.orlando@grafana.com>
2024-03-19 21:14:44 +00:00
# via -r requirements-dev.in
types-pytz==2024.1.0.20240203
# via django-stubs
types-pyyaml==6.0.12.12
# via
# django-stubs
# djangorestframework-stubs
types-requests==2.31.0.1
# via
Bump django from 4.2.10 to 4.2.11 in /engine (#4079) Bumps [django](https://github.com/django/django) from 4.2.10 to 4.2.11. <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/django/django/commit/61a986f53d805e4d359ab61af60a2dcd55befe25"><code>61a986f</code></a> [4.2.x] Bumped version for 4.2.11 release.</li> <li><a href="https://github.com/django/django/commit/3c9a2771cc80821e041b16eb36c1c37af5349d4a"><code>3c9a277</code></a> [4.2.x] Fixed CVE-2024-27351 -- Prevented potential ReDoS in Truncator.words().</li> <li><a href="https://github.com/django/django/commit/79739511397367c56d20393b93c5edd35f5cca53"><code>7973951</code></a> [4.2.x] Added release date for 4.2.11 and 3.2.25.</li> <li><a href="https://github.com/django/django/commit/86d8034972db5014769cdd4832125067f31b3e8b"><code>86d8034</code></a> [4.2.x] Refs <a href="https://redirect.github.com/django/django/issues/34900">#34900</a>, Refs <a href="https://redirect.github.com/django/django/issues/34118">#34118</a> -- Updated assertion in test_skip_class_unle...</li> <li><a href="https://github.com/django/django/commit/cb173bb088e32df3d9ee8bee3c579d88ea713e8f"><code>cb173bb</code></a> [4.2.x] Fixed <a href="https://redirect.github.com/django/django/issues/35172">#35172</a> -- Fixed intcomma for string floats.</li> <li><a href="https://github.com/django/django/commit/227ef29cff8ded8187c48b0aa955264cf83a01a4"><code>227ef29</code></a> [4.2.x] Added CVE-2024-24680 to security archive.</li> <li><a href="https://github.com/django/django/commit/e2f1907642c311b21d45d85a0aca7d9c05ede5cd"><code>e2f1907</code></a> [4.2.x] Post release version bump.</li> <li>See full diff in <a href="https://github.com/django/django/compare/4.2.10...4.2.11">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=django&package-manager=pip&previous-version=4.2.10&new-version=4.2.11)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/grafana/oncall/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Joey Orlando <joey.orlando@grafana.com>
2024-03-19 21:14:44 +00:00
# -r requirements-dev.in
# djangorestframework-stubs
types-urllib3==1.26.25.14
# via types-requests
typing-extensions==4.9.0
# via
Bump django from 4.2.10 to 4.2.11 in /engine (#4079) Bumps [django](https://github.com/django/django) from 4.2.10 to 4.2.11. <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/django/django/commit/61a986f53d805e4d359ab61af60a2dcd55befe25"><code>61a986f</code></a> [4.2.x] Bumped version for 4.2.11 release.</li> <li><a href="https://github.com/django/django/commit/3c9a2771cc80821e041b16eb36c1c37af5349d4a"><code>3c9a277</code></a> [4.2.x] Fixed CVE-2024-27351 -- Prevented potential ReDoS in Truncator.words().</li> <li><a href="https://github.com/django/django/commit/79739511397367c56d20393b93c5edd35f5cca53"><code>7973951</code></a> [4.2.x] Added release date for 4.2.11 and 3.2.25.</li> <li><a href="https://github.com/django/django/commit/86d8034972db5014769cdd4832125067f31b3e8b"><code>86d8034</code></a> [4.2.x] Refs <a href="https://redirect.github.com/django/django/issues/34900">#34900</a>, Refs <a href="https://redirect.github.com/django/django/issues/34118">#34118</a> -- Updated assertion in test_skip_class_unle...</li> <li><a href="https://github.com/django/django/commit/cb173bb088e32df3d9ee8bee3c579d88ea713e8f"><code>cb173bb</code></a> [4.2.x] Fixed <a href="https://redirect.github.com/django/django/issues/35172">#35172</a> -- Fixed intcomma for string floats.</li> <li><a href="https://github.com/django/django/commit/227ef29cff8ded8187c48b0aa955264cf83a01a4"><code>227ef29</code></a> [4.2.x] Added CVE-2024-24680 to security archive.</li> <li><a href="https://github.com/django/django/commit/e2f1907642c311b21d45d85a0aca7d9c05ede5cd"><code>e2f1907</code></a> [4.2.x] Post release version bump.</li> <li>See full diff in <a href="https://github.com/django/django/compare/4.2.10...4.2.11">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=django&package-manager=pip&previous-version=4.2.10&new-version=4.2.11)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/grafana/oncall/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Joey Orlando <joey.orlando@grafana.com>
2024-03-19 21:14:44 +00:00
# -c requirements.txt
# celery-types
# django-filter-stubs
# django-stubs
# django-stubs-ext
# djangorestframework-stubs
# mypy
# pytest-factoryboy
Bump urllib3 from 1.26.18 to 1.26.19 in /engine (#4555) Bumps [urllib3](https://github.com/urllib3/urllib3) from 1.26.18 to 1.26.19. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/urllib3/urllib3/releases">urllib3's releases</a>.</em></p> <blockquote> <h2>1.26.19</h2> <h2>🚀 urllib3 is fundraising for HTTP/2 support</h2> <p><a href="https://sethmlarson.dev/urllib3-is-fundraising-for-http2-support">urllib3 is raising ~$40,000 USD</a> to release HTTP/2 support and ensure long-term sustainable maintenance of the project after a sharp decline in financial support for 2023. If your company or organization uses Python and would benefit from HTTP/2 support in Requests, pip, cloud SDKs, and thousands of other projects <a href="https://opencollective.com/urllib3">please consider contributing financially</a> to ensure HTTP/2 support is developed sustainably and maintained for the long-haul.</p> <p>Thank you for your support.</p> <h2>Changes</h2> <ul> <li>Added the <code>Proxy-Authorization</code> header to the list of headers to strip from requests when redirecting to a different host. As before, different headers can be set via <code>Retry.remove_headers_on_redirect</code>.</li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/urllib3/urllib3/compare/1.26.18...1.26.19">https://github.com/urllib3/urllib3/compare/1.26.18...1.26.19</a></p> <p>Note that due to an issue with our release automation, no <code> multiple.intoto.jsonl</code> file is available for this release.</p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/urllib3/urllib3/blob/1.26.19/CHANGES.rst">urllib3's changelog</a>.</em></p> <blockquote> <h2>1.26.19 (2024-06-17)</h2> <ul> <li>Added the <code>Proxy-Authorization</code> header to the list of headers to strip from requests when redirecting to a different host. As before, different headers can be set via <code>Retry.remove_headers_on_redirect</code>.</li> <li>Fixed handling of OpenSSL 3.2.0 new error message for misconfiguring an HTTP proxy as HTTPS. (<code>[#3405](https://github.com/urllib3/urllib3/issues/3405) &lt;https://github.com/urllib3/urllib3/issues/3405&gt;</code>__)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/urllib3/urllib3/commit/d9d85c88aa644af56d5e129634e750ce76e1a765"><code>d9d85c8</code></a> Release 1.26.19</li> <li><a href="https://github.com/urllib3/urllib3/commit/8528b63b6fe5cfd7b21942cf988670de68fcd8c0"><code>8528b63</code></a> [1.26] Fix downstream tests (<a href="https://redirect.github.com/urllib3/urllib3/issues/3409">#3409</a>)</li> <li><a href="https://github.com/urllib3/urllib3/commit/40b6d1605814dd1db0a46e202d6e56f2e4c9a468"><code>40b6d16</code></a> Merge pull request from GHSA-34jh-p97f-mpxf</li> <li><a href="https://github.com/urllib3/urllib3/commit/29cfd02f66376c61bd20f1725477925106321f68"><code>29cfd02</code></a> Fix handling of OpenSSL 3.2.0 new error message &quot;record layer failure&quot; (<a href="https://redirect.github.com/urllib3/urllib3/issues/3405">#3405</a>)</li> <li><a href="https://github.com/urllib3/urllib3/commit/b60064388302f54a3455259ddab121618650a154"><code>b600643</code></a> [1.26] Bump RECENT_DATE (<a href="https://redirect.github.com/urllib3/urllib3/issues/3404">#3404</a>)</li> <li><a href="https://github.com/urllib3/urllib3/commit/7e2d3890926d4788e219f63e2e36fbeb8714827f"><code>7e2d389</code></a> [1.26] Fix running CPython 2.7 tests in CI (<a href="https://redirect.github.com/urllib3/urllib3/issues/3137">#3137</a>)</li> <li>See full diff in <a href="https://github.com/urllib3/urllib3/compare/1.26.18...1.26.19">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=urllib3&package-manager=pip&previous-version=1.26.18&new-version=1.26.19)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) You can trigger a rebase of this PR by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/grafana/oncall/network/alerts). </details> > **Note** > Automatic rebases have been disabled on this pull request as it has been open for over 30 days. Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-08-09 16:30:38 -04:00
urllib3==1.26.19
# via
Bump django from 4.2.10 to 4.2.11 in /engine (#4079) Bumps [django](https://github.com/django/django) from 4.2.10 to 4.2.11. <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/django/django/commit/61a986f53d805e4d359ab61af60a2dcd55befe25"><code>61a986f</code></a> [4.2.x] Bumped version for 4.2.11 release.</li> <li><a href="https://github.com/django/django/commit/3c9a2771cc80821e041b16eb36c1c37af5349d4a"><code>3c9a277</code></a> [4.2.x] Fixed CVE-2024-27351 -- Prevented potential ReDoS in Truncator.words().</li> <li><a href="https://github.com/django/django/commit/79739511397367c56d20393b93c5edd35f5cca53"><code>7973951</code></a> [4.2.x] Added release date for 4.2.11 and 3.2.25.</li> <li><a href="https://github.com/django/django/commit/86d8034972db5014769cdd4832125067f31b3e8b"><code>86d8034</code></a> [4.2.x] Refs <a href="https://redirect.github.com/django/django/issues/34900">#34900</a>, Refs <a href="https://redirect.github.com/django/django/issues/34118">#34118</a> -- Updated assertion in test_skip_class_unle...</li> <li><a href="https://github.com/django/django/commit/cb173bb088e32df3d9ee8bee3c579d88ea713e8f"><code>cb173bb</code></a> [4.2.x] Fixed <a href="https://redirect.github.com/django/django/issues/35172">#35172</a> -- Fixed intcomma for string floats.</li> <li><a href="https://github.com/django/django/commit/227ef29cff8ded8187c48b0aa955264cf83a01a4"><code>227ef29</code></a> [4.2.x] Added CVE-2024-24680 to security archive.</li> <li><a href="https://github.com/django/django/commit/e2f1907642c311b21d45d85a0aca7d9c05ede5cd"><code>e2f1907</code></a> [4.2.x] Post release version bump.</li> <li>See full diff in <a href="https://github.com/django/django/compare/4.2.10...4.2.11">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=django&package-manager=pip&previous-version=4.2.10&new-version=4.2.11)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/grafana/oncall/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Joey Orlando <joey.orlando@grafana.com>
2024-03-19 21:14:44 +00:00
# -c requirements.txt
# requests
chore(deps): bump virtualenv from 20.25.0 to 20.26.6 in /engine (#5411) Bumps [virtualenv](https://github.com/pypa/virtualenv) from 20.25.0 to 20.26.6. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/pypa/virtualenv/releases">virtualenv's releases</a>.</em></p> <blockquote> <h2>20.26.6</h2> <!-- raw HTML omitted --> <h2>What's Changed</h2> <ul> <li>release 20.26.5 by <a href="https://github.com/gaborbernat"><code>@​gaborbernat</code></a> in <a href="https://redirect.github.com/pypa/virtualenv/pull/2766">pypa/virtualenv#2766</a></li> <li>Fix <a href="https://redirect.github.com/pypa/virtualenv/issues/2768">#2768</a>: Quote template strings in activation scripts by <a href="https://github.com/y5c4l3"><code>@​y5c4l3</code></a> in <a href="https://redirect.github.com/pypa/virtualenv/pull/2771">pypa/virtualenv#2771</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/y5c4l3"><code>@​y5c4l3</code></a> made their first contribution in <a href="https://redirect.github.com/pypa/virtualenv/pull/2771">pypa/virtualenv#2771</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/pypa/virtualenv/compare/20.26.5...20.26.6">https://github.com/pypa/virtualenv/compare/20.26.5...20.26.6</a></p> <h2>20.26.5</h2> <!-- raw HTML omitted --> <h2>What's Changed</h2> <ul> <li>release 20.26.4 by <a href="https://github.com/gaborbernat"><code>@​gaborbernat</code></a> in <a href="https://redirect.github.com/pypa/virtualenv/pull/2761">pypa/virtualenv#2761</a></li> <li>Use uv over pip by <a href="https://github.com/gaborbernat"><code>@​gaborbernat</code></a> in <a href="https://redirect.github.com/pypa/virtualenv/pull/2765">pypa/virtualenv#2765</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/pypa/virtualenv/compare/20.26.4...20.26.5">https://github.com/pypa/virtualenv/compare/20.26.4...20.26.5</a></p> <h2>20.26.4</h2> <!-- raw HTML omitted --> <h2>What's Changed</h2> <ul> <li>release 20.26.3 by <a href="https://github.com/gaborbernat"><code>@​gaborbernat</code></a> in <a href="https://redirect.github.com/pypa/virtualenv/pull/2742">pypa/virtualenv#2742</a></li> <li>Fix whitespace around backticks in changelog by <a href="https://github.com/edmorley"><code>@​edmorley</code></a> in <a href="https://redirect.github.com/pypa/virtualenv/pull/2751">pypa/virtualenv#2751</a></li> <li>Test latest Python 3.13 by <a href="https://github.com/hugovk"><code>@​hugovk</code></a> in <a href="https://redirect.github.com/pypa/virtualenv/pull/2752">pypa/virtualenv#2752</a></li> <li>Fix typo in Nushell activation script by <a href="https://github.com/edmorley"><code>@​edmorley</code></a> in <a href="https://redirect.github.com/pypa/virtualenv/pull/2754">pypa/virtualenv#2754</a></li> <li>GitHub Actions: Replace deprecated macos-12 with macos-13 by <a href="https://github.com/hugovk"><code>@​hugovk</code></a> in <a href="https://redirect.github.com/pypa/virtualenv/pull/2756">pypa/virtualenv#2756</a></li> <li>Fix <a href="https://redirect.github.com/pypa/virtualenv/issues/2728">#2728</a>: Activating venv create unwanted console output by <a href="https://github.com/ShootGan"><code>@​ShootGan</code></a> in <a href="https://redirect.github.com/pypa/virtualenv/pull/2748">pypa/virtualenv#2748</a></li> <li>Upgrade bundled wheels by <a href="https://github.com/gaborbernat"><code>@​gaborbernat</code></a> in <a href="https://redirect.github.com/pypa/virtualenv/pull/2760">pypa/virtualenv#2760</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/ShootGan"><code>@​ShootGan</code></a> made their first contribution in <a href="https://redirect.github.com/pypa/virtualenv/pull/2748">pypa/virtualenv#2748</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/pypa/virtualenv/compare/20.26.3...20.26.4">https://github.com/pypa/virtualenv/compare/20.26.3...20.26.4</a></p> <h2>20.26.3</h2> <!-- raw HTML omitted --> <h2>What's Changed</h2> <ul> <li>release 20.26.2 by <a href="https://github.com/gaborbernat"><code>@​gaborbernat</code></a> in <a href="https://redirect.github.com/pypa/virtualenv/pull/2724">pypa/virtualenv#2724</a></li> <li>Bump embeded wheels by <a href="https://github.com/gaborbernat"><code>@​gaborbernat</code></a> in <a href="https://redirect.github.com/pypa/virtualenv/pull/2741">pypa/virtualenv#2741</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/pypa/virtualenv/compare/20.26.2...20.26.3">https://github.com/pypa/virtualenv/compare/20.26.2...20.26.3</a></p> <h2>20.26.2</h2> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/pypa/virtualenv/blob/main/docs/changelog.rst">virtualenv's changelog</a>.</em></p> <blockquote> <h2>v20.26.6 (2024-09-27)</h2> <p>Bugfixes - 20.26.6</p> <pre><code>- Properly quote string placeholders in activation script templates to mitigate potential command injection - by :user:`y5c4l3`. (:issue:`2768`) <h2>v20.26.5 (2024-09-17)</h2> <p>Bugfixes - 20.26.5 </code></pre></p> <ul> <li>Upgrade embedded wheels: setuptools to <code>75.1.0</code> from <code>74.1.2</code> - by :user:<code>gaborbernat</code>. (:issue:<code>2765</code>)</li> </ul> <h2>v20.26.4 (2024-09-07)</h2> <p>Bugfixes - 20.26.4</p> <pre><code>- no longer create `()` output in console during activation of a virtualenv by .bat file. (:issue:`2728`) - Upgrade embedded wheels: <ul> <li>wheel to <code>0.44.0</code> from <code>0.43.0</code></li> <li>pip to <code>24.2</code> from <code>24.1</code></li> <li>setuptools to <code>74.1.2</code> from <code>70.1.0</code> (:issue:<code>2760</code>)</li> </ul> <h2>v20.26.3 (2024-06-21)</h2> <p>Bugfixes - 20.26.3 </code></pre></p> <ul> <li> <p>Upgrade embedded wheels:</p> <ul> <li>setuptools to <code>70.1.0</code> from <code>69.5.1</code></li> <li>pip to <code>24.1</code> from <code>24.0</code> (:issue:<code>2741</code>)</li> </ul> </li> </ul> <h2>v20.26.2 (2024-05-13)</h2> <p>Bugfixes - 20.26.2</p> <pre><code>- ``virtualenv.pyz`` no longer fails when zipapp path contains a symlink - by :user:`HandSonic` and :user:`petamas`. (:issue:`1949`) - Fix bad return code from activate.sh if hashing is disabled - by :user:'fenkes-ibm'. (:issue:`2717`) <h2>v20.26.1 (2024-04-29)</h2> <p>Bugfixes - 20.26.1 </code></pre></p> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/pypa/virtualenv/commit/ec04726d065372ffad9920998aef1ce41252a61d"><code>ec04726</code></a> release 20.26.6</li> <li><a href="https://github.com/pypa/virtualenv/commit/86dddeda7c991f8529e1995bbff280fb7b761972"><code>86ddded</code></a> Fix <a href="https://redirect.github.com/pypa/virtualenv/issues/2768">#2768</a>: Quote template strings in activation scripts (<a href="https://redirect.github.com/pypa/virtualenv/issues/2771">#2771</a>)</li> <li><a href="https://github.com/pypa/virtualenv/commit/6bb3f6226c18d69bb6cfa3475b6d46dd463bb530"><code>6bb3f62</code></a> [pre-commit.ci] pre-commit autoupdate (<a href="https://redirect.github.com/pypa/virtualenv/issues/2769">#2769</a>)</li> <li><a href="https://github.com/pypa/virtualenv/commit/220d49c2e3ade2ed24f5712ab5a23895cde2e04c"><code>220d49c</code></a> Bump pypa/gh-action-pypi-publish from 1.10.1 to 1.10.2 (<a href="https://redirect.github.com/pypa/virtualenv/issues/2767">#2767</a>)</li> <li><a href="https://github.com/pypa/virtualenv/commit/cf340c83c2828a92def78c77b3e037a2baa4d557"><code>cf340c8</code></a> Merge pull request <a href="https://redirect.github.com/pypa/virtualenv/issues/2766">#2766</a> from pypa/release-20.26.5</li> <li><a href="https://github.com/pypa/virtualenv/commit/f3172b4da576b88275a14d2e7bbeb98b8f958a05"><code>f3172b4</code></a> release 20.26.5</li> <li><a href="https://github.com/pypa/virtualenv/commit/22b9795eb6bed0c17d0415c5513eca099a0a11ad"><code>22b9795</code></a> Use uv over pip (<a href="https://redirect.github.com/pypa/virtualenv/issues/2765">#2765</a>)</li> <li><a href="https://github.com/pypa/virtualenv/commit/35d8269aba12a1e3c60183a2082b2c4d0cc1192f"><code>35d8269</code></a> [pre-commit.ci] pre-commit autoupdate (<a href="https://redirect.github.com/pypa/virtualenv/issues/2764">#2764</a>)</li> <li><a href="https://github.com/pypa/virtualenv/commit/ee77feb77ccb3c5deefa318630c59315bcfda521"><code>ee77feb</code></a> [pre-commit.ci] pre-commit autoupdate (<a href="https://redirect.github.com/pypa/virtualenv/issues/2763">#2763</a>)</li> <li><a href="https://github.com/pypa/virtualenv/commit/c5160566293ed098ca30e0856dbf44588dd5c3a3"><code>c516056</code></a> Update README.md</li> <li>Additional commits viewable in <a href="https://github.com/pypa/virtualenv/compare/20.25.0...20.26.6">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=virtualenv&package-manager=pip&previous-version=20.25.0&new-version=20.26.6)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) You can trigger a rebase of this PR by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/grafana/oncall/network/alerts). </details> > **Note** > Automatic rebases have been disabled on this pull request as it has been open for over 30 days. --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: twu <199651+twu@users.noreply.github.com> Co-authored-by: Thomas Wurmitzer <thomas.wurmitzer@grafana.com>
2025-03-12 16:52:30 +01:00
virtualenv==20.26.6
# via pre-commit