chore(deps): bump the python-major group across 5 directories with 5 updates #121
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Bumps the python-major group with 1 update in the /anonymizer_module directory: setuptools.
Bumps the python-major group with 2 updates in the /collector_module directory: setuptools and urllib3.
Bumps the python-major group with 1 update in the /corrector_module directory: setuptools.
Bumps the python-major group with 2 updates in the /opendata_module directory: setuptools and django.
Bumps the python-major group with 2 updates in the /reports_module directory: weasyprint and numpy.
Updates
setuptools
from 67.4.0 to 72.2.0Changelog
Sourced from setuptools's changelog.
... (truncated)
Commits
76942cf
Bump version: 72.1.0 → 72.2.0780a782
Correct reference in news fragment. Ref #453964f10c5
Merge pull request #4539 from pypa/feature/distutils-b7ee725f3d4ad24b
Add news fragment.0ab156c
Merge https://github.com/pypa/distutilsb7ee725
Apply isort. Ref pypa/distutils#24032e5fea
Rely on monkeysession to monkeypatch.5f79f22
Merge pull request pypa/distutils#274 from msys2-contrib/ci-msvc-python-mingw...6748224
Merge pull request pypa/distutils#273 from msys2-contrib/tests-fix-venv_insta...1f999b9
Remove unused RangeMapUpdates
setuptools
from 67.4.0 to 72.2.0Changelog
Sourced from setuptools's changelog.
... (truncated)
Commits
76942cf
Bump version: 72.1.0 → 72.2.0780a782
Correct reference in news fragment. Ref #453964f10c5
Merge pull request #4539 from pypa/feature/distutils-b7ee725f3d4ad24b
Add news fragment.0ab156c
Merge https://github.com/pypa/distutilsb7ee725
Apply isort. Ref pypa/distutils#24032e5fea
Rely on monkeysession to monkeypatch.5f79f22
Merge pull request pypa/distutils#274 from msys2-contrib/ci-msvc-python-mingw...6748224
Merge pull request pypa/distutils#273 from msys2-contrib/tests-fix-venv_insta...1f999b9
Remove unused RangeMapUpdates
urllib3
from 1.26.18 to 2.2.2Release notes
Sourced from urllib3's releases.
... (truncated)
Changelog
Sourced from urllib3's changelog.
... (truncated)
Commits
27e2a5c
Release 2.2.2 (#3406)accff72
Merge pull request from GHSA-34jh-p97f-mpxf34be4a5
Pin CFFI to a new release candidate instead of a Git commit (#3398)da41058
Bump browser-actions/setup-chrome from 1.6.0 to 1.7.1 (#3399)b07a669
Bump github/codeql-action from 2.13.4 to 3.25.6 (#3396)b8589ec
Measure coverage with v4 of artifact actions (#3394)f3bdc55
Allow triggering CI manually (#3391)5239265
Fix HTTP version in debug log (#3316)b34619f
Bump actions/checkout to 4.1.4 (#3387)9961d14
Bump browser-actions/setup-chrome from 1.5.0 to 1.6.0 (#3386)Updates
setuptools
from 67.4.0 to 72.2.0Changelog
Sourced from setuptools's changelog.
... (truncated)
Commits
76942cf
Bump version: 72.1.0 → 72.2.0780a782
Correct reference in news fragment. Ref #453964f10c5
Merge pull request #4539 from pypa/feature/distutils-b7ee725f3d4ad24b
Add news fragment.0ab156c
Merge https://github.com/pypa/distutilsb7ee725
Apply isort. Ref pypa/distutils#24032e5fea
Rely on monkeysession to monkeypatch.5f79f22
Merge pull request pypa/distutils#274 from msys2-contrib/ci-msvc-python-mingw...6748224
Merge pull request pypa/distutils#273 from msys2-contrib/tests-fix-venv_insta...1f999b9
Remove unused RangeMapUpdates
setuptools
from 67.4.0 to 72.2.0Changelog
Sourced from setuptools's changelog.
... (truncated)
Commits
76942cf
Bump version: 72.1.0 → 72.2.0780a782
Correct reference in news fragment. Ref #453964f10c5
Merge pull request #4539 from pypa/feature/distutils-b7ee725f3d4ad24b
Add news fragment.0ab156c
Merge https://github.com/pypa/distutilsb7ee725
Apply isort. Ref pypa/distutils#24032e5fea
Rely on monkeysession to monkeypatch.5f79f22
Merge pull request pypa/distutils#274 from msys2-contrib/ci-msvc-python-mingw...6748224
Merge pull request pypa/distutils#273 from msys2-contrib/tests-fix-venv_insta...1f999b9
Remove unused RangeMapUpdates
django
from 3.2.20 to 5.1Commits
373cb30
[5.1.x] Bumped version for 5.1 release.8baab82
[5.1.x] Finalized release notes for Django 5.1.d5ad743
[5.1.x] Fixed i18n.tests.TranslationTests.test_plural to use correct French t...380c6e6
[5.1.x] Updated translations from Transifex.d787e44
[5.1.x] Added CVE-2024-41989, CVE-2024-41990, CVE-2024-41991, and CVE-2024-42...e2583fb
[5.1.x] Fixed CVE-2024-42005 -- Mitigated QuerySet.values() SQL injection att...bd807c0
[5.1.x] Fixed CVE-2024-41991 -- Prevented potential ReDoS in django.utils.htm...0c1a890
[5.1.x] Fixed CVE-2024-41990 -- Mitigated potential DoS in urlize and urlizet...0504af6
[5.1.x] Fixed CVE-2024-41989 -- Prevented excessive memory consumption in flo...2ba4f4b
[5.1.x] Fixed #35657 -- Made FileField handle db_default values.Updates
weasyprint
from 61.2 to 62.3Release notes
Sourced from weasyprint's releases.
... (truncated)
Changelog
Sourced from weasyprint's changelog.
... (truncated)
Commits
56acbc4
Version 62.3f39039b
Remove useless variable39208b0
Don’t append useless tracks when grid elements are positionedfb9d1f8
Make items overflowing grid wrap to the next row/column4c81663
Fix layout when all footnotes are removed from the footnote area4617b94
Don’t set default Fontconfig values for unset propertiesd9d7f62
Don’t duplicate column when container is split on multiple pages9e9f690
Simplify border drawing2c4351e
Avoid PDF artifacts when drawing 0-width borders61f8bb3
Set default PDF variant values in options before generating PDFUpdates
numpy
from 1.24.4 to 2.0.1Release notes
Sourced from numpy's releases.
... (truncated)
Commits
4c9f431
Merge pull request #27000 from charris/prepare-2.0.10e70e00
REL: Prepare for the NumPy 2.0.1 release [wheel build]4d10ffc
Merge pull request #26995 from charris/backport-26985764b667
BUG: Add object cast to avoid warning with limited API9be6ad6
Merge pull request #26971 from charris/backport-269356d950e9
BUG: fix f2py tests to work with v2 API89630c0
Merge pull request #26962 from charris/backport-2691988fa840
TST: Apply test suggestion by Nathan for rlstrip fixesa9da01e
BUG,MAINT: Fix utf-8 character stripping memory access6afbbf8
Merge pull request #26963 from charris/backport-26930Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase
.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebase
will rebase this PR@dependabot recreate
will recreate this PR, overwriting any edits that have been made to it@dependabot merge
will merge this PR after your CI passes on it@dependabot squash and merge
will squash and merge this PR after your CI passes on it@dependabot cancel merge
will cancel a previously requested merge and block automerging@dependabot reopen
will reopen this PR if it is closed@dependabot close
will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditions
will show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major version
will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor version
will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>
will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>
will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>
will remove the ignore condition of the specified dependency and ignore conditions