Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore(deps): bump the python-major group across 2 directories with 3 updates #131

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Oct 3, 2024

Bumps the python-major group with 1 update in the /opendata_module directory: django.
Bumps the python-major group with 2 updates in the /reports_module directory: weasyprint and numpy.

Updates django from 3.2.20 to 5.1.1

Commits
  • 1e1d791 [5.1.x] Bumped version for 5.1.1 release.
  • 3c733c7 [5.1.x] Fixed CVE-2024-45231 -- Avoided server error on password reset when e...
  • 022ab0a [5.1.x] Fixed CVE-2024-45230 -- Mitigated potential DoS in urlize and urlizet...
  • 6203965 [5.1.x] Fixed #35716 -- Fixed VariableDoesNotExist when rendering admin field...
  • 26c0667 [5.1.x] Fixed #35688 -- Restored timezone and role setters to be PostgreSQL D...
  • fcb71a7 [5.1.x] Removed outdated note about lack of subquery support in MySQL.
  • 9b09a4f [5.1.x] Fixed typos in docs/howto/initial-data.txt.
  • 9a461ca [5.1.x] Fixed #35666 -- Documented stacklevel usage and testing, and adjusted...
  • dd58edc [5.1.x] Refs #35405 -- Adjusted deprecation warning stacklevel in FieldCacheM...
  • 8f5d2c3 [5.1.x] Refs #35326 -- Adjusted deprecation warning stacklevel in FileSystemS...
  • Additional commits viewable in compare view

Updates weasyprint from 61.2 to 62.3

Release notes

Sourced from weasyprint's releases.

v62.3

Bug fixes

  • #2174: Fix extra width distribution for auto table layout
  • #2175: Don’t compress PDF metadata for PDF/A-1
  • 61f8bb3: Set default PDF variant values in options before generating PDF
  • 2c4351e: Avoid PDF artifacts when drawing 0-width borders
  • d9d7f62: Don’t duplicate column when container is split on multiple pages
  • 4617b94: Don’t set default Fontconfig values for unset properties
  • 4c81663: Fix layout when all footnotes are removed from the footnote area
  • #2184: Make items overflowing grid wrap to the next row/column
  • #2187: Don’t append useless tracks when grid elements are positioned

Contributors

  • Guillaume Ayoub

Backers and sponsors

  • Spacinov
  • Kobalt
  • Grip Angebotssoftware
  • Manuel Barkhau
  • SimonSoft
  • Menutech
  • KontextWork
  • Simon Sapin
  • René Fritz
  • TrainingSparkle
  • Healthchecks.io
  • Hammerbacher
  • Docraptor
  • Yanal-Yvez Fargialla
  • Douwe van Loenen
  • Morntag
  • Xavid

v62.2

Features

  • #2142, #2162: Support grid-auto-flow: column, with financial support from Menutech

Bug fixes

  • #2167: Fix space added by CSS gap at the end
  • #2134: Remove absolute placeholders from discarded content
  • #2154: Don’t crash when grid items have auto margins
  • 8cdd66f: Fix CSS nesting for nested selectors with comma
  • 3359db5: Fix and test grid shorthand
  • 82deda4: Fix wrong resume_at for split floats

... (truncated)

Changelog

Sourced from weasyprint's changelog.

Version 62.3

Released on 2024-06-21.

Bug fixes:

  • [#2174](https://github.com/Kozea/WeasyPrint/issues/2174) <https://github.com/Kozea/WeasyPrint/issues/2174>_: Fix extra width distribution for auto table layout
  • [#2175](https://github.com/Kozea/WeasyPrint/issues/2175) <https://github.com/Kozea/WeasyPrint/issues/2175>_: Don’t compress PDF metadata for PDF/A-1
  • 61f8bb3 <https://github.com/Kozea/WeasyPrint/commit/61f8bb3>_: Set default PDF variant values in options before generating PDF
  • 2c4351e <https://github.com/Kozea/WeasyPrint/commit/2c4351e>_: Avoid PDF artifacts when drawing 0-width borders
  • d9d7f62 <https://github.com/Kozea/WeasyPrint/commit/d9d7f62>_: Don’t duplicate column when container is split on multiple pages
  • 4617b94 <https://github.com/Kozea/WeasyPrint/commit/4617b94>_: Don’t set default Fontconfig values for unset properties
  • 4c81663 <https://github.com/Kozea/WeasyPrint/commit/4c81663>_: Fix layout when all footnotes are removed from the footnote area
  • [#2184](https://github.com/Kozea/WeasyPrint/issues/2184) <https://github.com/Kozea/WeasyPrint/issues/2184>_: Make items overflowing grid wrap to the next row/column
  • [#2187](https://github.com/Kozea/WeasyPrint/issues/2187) <https://github.com/Kozea/WeasyPrint/issues/2187>_: Don’t append useless tracks when grid elements are positioned

Contributors:

  • Guillaume Ayoub

Backers and sponsors:

  • Spacinov
  • Kobalt
  • Grip Angebotssoftware
  • Manuel Barkhau
  • SimonSoft
  • Menutech
  • KontextWork
  • Simon Sapin
  • René Fritz
  • TrainingSparkle
  • Healthchecks.io
  • Hammerbacher
  • Docraptor
  • Yanal-Yvez Fargialla
  • Douwe van Loenen
  • Morntag
  • Xavid

... (truncated)

Commits
  • 56acbc4 Version 62.3
  • f39039b Remove useless variable
  • 39208b0 Don’t append useless tracks when grid elements are positioned
  • fb9d1f8 Make items overflowing grid wrap to the next row/column
  • 4c81663 Fix layout when all footnotes are removed from the footnote area
  • 4617b94 Don’t set default Fontconfig values for unset properties
  • d9d7f62 Don’t duplicate column when container is split on multiple pages
  • 9e9f690 Simplify border drawing
  • 2c4351e Avoid PDF artifacts when drawing 0-width borders
  • 61f8bb3 Set default PDF variant values in options before generating PDF
  • Additional commits viewable in compare view

Updates numpy from 1.24.4 to 2.1.1

Release notes

Sourced from numpy's releases.

2.1.1 (Sep 3, 2024)

NumPy 2.1.1 Release Notes

NumPy 2.1.1 is a maintenance release that fixes bugs and regressions discovered after the 2.1.0 release.

The Python versions supported by this release are 3.10-3.13.

Contributors

A total of 7 people contributed to this release. People with a "+" by their names contributed a patch for the first time.

  • Andrew Nelson
  • Charles Harris
  • Mateusz Sokół
  • Maximilian Weigand +
  • Nathan Goldbaum
  • Pieter Eendebak
  • Sebastian Berg

Pull requests merged

A total of 10 pull requests were merged for this release.

  • #27236: REL: Prepare for the NumPy 2.1.0 release [wheel build]
  • #27252: MAINT: prepare 2.1.x for further development
  • #27259: BUG: revert unintended change in the return value of set_printoptions
  • #27266: BUG: fix reference counting bug in __array_interface__ implementation...
  • #27267: TST: Add regression test for missing descr in array-interface
  • #27276: BUG: Fix #27256 and #27257
  • #27278: BUG: Fix array_equal for numeric and non-numeric scalar types
  • #27287: MAINT: Update maintenance/2.1.x after the 2.0.2 release
  • #27303: BLD: cp311- macosx_arm64 wheels [wheel build]
  • #27304: BUG: f2py: better handle filtering of public/private subroutines

Checksums

MD5

3053a97400db800b7377749e691eb39e  numpy-2.1.1-cp310-cp310-macosx_10_9_x86_64.whl
84b752a2220dce7c96ff89eef4f4aec3  numpy-2.1.1-cp310-cp310-macosx_11_0_arm64.whl
47ed4f704a64261f07ca24ef2e674524  numpy-2.1.1-cp310-cp310-macosx_14_0_arm64.whl
b8a45caa870aee980c298053cf064d28  numpy-2.1.1-cp310-cp310-macosx_14_0_x86_64.whl
e097ad5eee572b791b4a25eedad6df4a  numpy-2.1.1-cp310-cp310-manylinux_2_17_aarch64.manylinux2014_aarch64.whl
ae502c99315884cda7f0236a07c035c4  numpy-2.1.1-cp310-cp310-manylinux_2_17_x86_64.manylinux2014_x86_64.whl
841a859d975c55090c0b60b72aab93a3  numpy-2.1.1-cp310-cp310-musllinux_1_1_x86_64.whl
d51be2b17f5b87aac64ab80fdfafc85e  numpy-2.1.1-cp310-cp310-musllinux_1_2_aarch64.whl
1f8249bd725397c6233fe6a0e8ad18b1  numpy-2.1.1-cp310-cp310-win32.whl
d38d6f06589c1ec104a6a31ff6035781  numpy-2.1.1-cp310-cp310-win_amd64.whl

... (truncated)

Commits
  • 48606ab Merge pull request #27328 from charris/prepare-2.1.1
  • a7cb4c4 REL: Prepare for the NumPy 2.1.1 release [wheel build]
  • 884c92b Merge pull request #27303 from charris/backport-27284
  • ca7f5c1 Merge pull request #27304 from charris/backport-27049
  • 2a49507 BUG: f2py: better handle filtering of public/private subroutines
  • d4306dd TST: Add regression test for gh-26920
  • db9668d BLD: cp311- macosx_arm64 wheels [wheel build]
  • c6ff254 Merge pull request #27287 from charris/post-2.0.2-release-update
  • 326bc17 MAINT: Update main after the 2.0.2 release
  • 8164b7c Merge pull request #27278 from charris/backport-27275
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…updates

Bumps the python-major group with 1 update in the /opendata_module directory: [django](https://github.com/django/django).
Bumps the python-major group with 2 updates in the /reports_module directory: [weasyprint](https://github.com/Kozea/WeasyPrint) and [numpy](https://github.com/numpy/numpy).


Updates `django` from 3.2.20 to 5.1.1
- [Commits](django/django@3.2.20...5.1.1)

Updates `weasyprint` from 61.2 to 62.3
- [Release notes](https://github.com/Kozea/WeasyPrint/releases)
- [Changelog](https://github.com/Kozea/WeasyPrint/blob/main/docs/changelog.rst)
- [Commits](Kozea/WeasyPrint@v61.2...v62.3)

Updates `numpy` from 1.24.4 to 2.1.1
- [Release notes](https://github.com/numpy/numpy/releases)
- [Changelog](https://github.com/numpy/numpy/blob/main/doc/RELEASE_WALKTHROUGH.rst)
- [Commits](numpy/numpy@v1.24.4...v2.1.1)

---
updated-dependencies:
- dependency-name: django
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: python-major
- dependency-name: weasyprint
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: python-major
- dependency-name: numpy
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: python-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Oct 3, 2024
Copy link

sonarqubecloud bot commented Oct 3, 2024

Copy link
Contributor Author

dependabot bot commented on behalf of github Oct 10, 2024

Looks like these dependencies are no longer updatable, so this is no longer needed.

@dependabot dependabot bot closed this Oct 10, 2024
@dependabot dependabot bot deleted the dependabot/pip/opendata_module/python-major-6923f7a096 branch October 10, 2024 22:04
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file python Pull requests that update Python code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants