chore(deps): bump the python-major group across 5 directories with 5 updates #123
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Bumps the python-major group with 1 update in the /anonymizer_module directory: setuptools.
Bumps the python-major group with 2 updates in the /collector_module directory: setuptools and urllib3.
Bumps the python-major group with 1 update in the /corrector_module directory: setuptools.
Bumps the python-major group with 2 updates in the /opendata_module directory: setuptools and django.
Bumps the python-major group with 2 updates in the /reports_module directory: weasyprint and numpy.
Updates
setuptools
from 67.4.0 to 74.0.0Changelog
Sourced from setuptools's changelog.
... (truncated)
Commits
98ad794
Bump version: 73.0.1 → 74.0.0b4fb917
Merge pull request #4600 from pypa/debt/msvc-monkey18a44d8
Add news fragment.5f8215d
Merge pull request #4548 from Avasam/from_param-TypeError6928048
Merge branch 'main' into debt/msvc-monkey11a6b59
Merge pull request #4606 from pypa/distutils-58fe058e4903604b
Reraise sensible errors from auto_chmod (#4593)8ec5b5a
Add missing news fragment for PR 4603e90dfd5
Exclude top-level.tox|.nox|.venv
from sdist (#4603)ef2957a
Reraise sensible errors from auto_chmodUpdates
setuptools
from 67.4.0 to 74.0.0Changelog
Sourced from setuptools's changelog.
... (truncated)
Commits
98ad794
Bump version: 73.0.1 → 74.0.0b4fb917
Merge pull request #4600 from pypa/debt/msvc-monkey18a44d8
Add news fragment.5f8215d
Merge pull request #4548 from Avasam/from_param-TypeError6928048
Merge branch 'main' into debt/msvc-monkey11a6b59
Merge pull request #4606 from pypa/distutils-58fe058e4903604b
Reraise sensible errors from auto_chmod (#4593)8ec5b5a
Add missing news fragment for PR 4603e90dfd5
Exclude top-level.tox|.nox|.venv
from sdist (#4603)ef2957a
Reraise sensible errors from auto_chmodUpdates
urllib3
from 1.26.18 to 2.2.2Release notes
Sourced from urllib3's releases.
... (truncated)
Changelog
Sourced from urllib3's changelog.
... (truncated)
Commits
27e2a5c
Release 2.2.2 (#3406)accff72
Merge pull request from GHSA-34jh-p97f-mpxf34be4a5
Pin CFFI to a new release candidate instead of a Git commit (#3398)da41058
Bump browser-actions/setup-chrome from 1.6.0 to 1.7.1 (#3399)b07a669
Bump github/codeql-action from 2.13.4 to 3.25.6 (#3396)b8589ec
Measure coverage with v4 of artifact actions (#3394)f3bdc55
Allow triggering CI manually (#3391)5239265
Fix HTTP version in debug log (#3316)b34619f
Bump actions/checkout to 4.1.4 (#3387)9961d14
Bump browser-actions/setup-chrome from 1.5.0 to 1.6.0 (#3386)Updates
setuptools
from 67.4.0 to 74.0.0Changelog
Sourced from setuptools's changelog.
... (truncated)
Commits
98ad794
Bump version: 73.0.1 → 74.0.0b4fb917
Merge pull request #4600 from pypa/debt/msvc-monkey18a44d8
Add news fragment.5f8215d
Merge pull request #4548 from Avasam/from_param-TypeError6928048
Merge branch 'main' into debt/msvc-monkey11a6b59
Merge pull request #4606 from pypa/distutils-58fe058e4903604b
Reraise sensible errors from auto_chmod (#4593)8ec5b5a
Add missing news fragment for PR 4603e90dfd5
Exclude top-level.tox|.nox|.venv
from sdist (#4603)ef2957a
Reraise sensible errors from auto_chmodUpdates
setuptools
from 67.4.0 to 74.0.0Changelog
Sourced from setuptools's changelog.
... (truncated)
Commits
98ad794
Bump version: 73.0.1 → 74.0.0b4fb917
Merge pull request #4600 from pypa/debt/msvc-monkey18a44d8
Add news fragment.5f8215d
Merge pull request #4548 from Avasam/from_param-TypeError6928048
Merge branch 'main' into debt/msvc-monkey11a6b59
Merge pull request #4606 from pypa/distutils-58fe058e4903604b
Reraise sensible errors from auto_chmod (#4593)8ec5b5a
Add missing news fragment for PR 4603e90dfd5
Exclude top-level.tox|.nox|.venv
from sdist (#4603)ef2957a
Reraise sensible errors from auto_chmodUpdates
django
from 3.2.20 to 5.1Commits
373cb30
[5.1.x] Bumped version for 5.1 release.8baab82
[5.1.x] Finalized release notes for Django 5.1.d5ad743
[5.1.x] Fixed i18n.tests.TranslationTests.test_plural to use correct French t...380c6e6
[5.1.x] Updated translations from Transifex.d787e44
[5.1.x] Added CVE-2024-41989, CVE-2024-41990, CVE-2024-41991, and CVE-2024-42...e2583fb
[5.1.x] Fixed CVE-2024-42005 -- Mitigated QuerySet.values() SQL injection att...bd807c0
[5.1.x] Fixed CVE-2024-41991 -- Prevented potential ReDoS in django.utils.htm...0c1a890
[5.1.x] Fixed CVE-2024-41990 -- Mitigated potential DoS in urlize and urlizet...0504af6
[5.1.x] Fixed CVE-2024-41989 -- Prevented excessive memory consumption in flo...2ba4f4b
[5.1.x] Fixed #35657 -- Made FileField handle db_default values.Updates
weasyprint
from 61.2 to 62.3Release notes
Sourced from weasyprint's releases.
... (truncated)
Changelog
Sourced from weasyprint's changelog.
... (truncated)
Commits
56acbc4
Version 62.3f39039b
Remove useless variable39208b0
Don’t append useless tracks when grid elements are positionedfb9d1f8
Make items overflowing grid wrap to the next row/column4c81663
Fix layout when all footnotes are removed from the footnote area4617b94
Don’t set default Fontconfig values for unset propertiesd9d7f62
Don’t duplicate column when container is split on multiple pages9e9f690
Simplify border drawing2c4351e
Avoid PDF artifacts when drawing 0-width borders61f8bb3
Set default PDF variant values in options before generating PDFUpdates
numpy
from 1.24.4 to 2.1.0Release notes
Sourced from numpy's releases.
... (truncated)
Commits
2f7fe64
Merge pull request #27236 from charris/prepare-2.1.0b6f434f
REL: Prepare for the NumPy 2.1.0 release [wheel build]3cf9394
Merge pull request #27234 from charris/backport-259847443dcc
Merge pull request #27233 from charris/backport-2722385b1cab
BUG: Allow fitting of degree zero polynomials with Polynomial.fit395a81d
DOC: reword discussion about shared arrays to hopefully be clearer5af2e96
Move NUMUSERTYPES thread safety discussion to legacy DType API docsd902c24
DOC: add docs on thread safety in NumPyc080180
Merge pull request #27229 from charris/backport-2722644ce7e8
BUG: FixPyArray_ZeroContiguousBuffer
(resize) with struct dtypesDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase
.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebase
will rebase this PR@dependabot recreate
will recreate this PR, overwriting any edits that have been made to it@dependabot merge
will merge this PR after your CI passes on it@dependabot squash and merge
will squash and merge this PR after your CI passes on it@dependabot cancel merge
will cancel a previously requested merge and block automerging@dependabot reopen
will reopen this PR if it is closed@dependabot close
will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditions
will show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major version
will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor version
will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>
will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>
will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>
will remove the ignore condition of the specified dependency and ignore conditions