Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump the all-dependencies group with 3 updates #3237

Closed
wants to merge 1 commit into from

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Nov 17, 2023

Bumps the all-dependencies group with 3 updates: rich, ddtrace and botocore.

Updates rich from 13.6.0 to 13.7.0

Release notes

Sourced from rich's releases.

The "It's a wrap" release

[13.7.0] - 2023-11-15

Added

Fixed

  • Some text goes missing during wrapping when it contains double width characters Textualize/rich#3176
  • Ensure font is correctly inherited in exported HTML Textualize/rich#3104
  • Fixed typing for FloatPrompt.
Changelog

Sourced from rich's changelog.

[13.7.0] - 2023-11-15

Added

Fixed

  • Some text goes missing during wrapping when it contains double width characters Textualize/rich#3176
  • Ensure font is correctly inherited in exported HTML Textualize/rich#3104
  • Fixed typing for FloatPrompt.
Commits

Updates ddtrace from 2.1.6 to 2.2.0

Release notes

Sourced from ddtrace's releases.

2.2.0

New Features

  • CI Visibility: adds ITR support for unittest

  • CI Visibility: adds start/end line support for pytest test spans

  • CI Visibility: adds start/end line source file data to unittest test spans

  • aiohttp: This introduces basic tracing of streaming responses that stay open long after the on_prepare signal has been sent.

  • CI Visibility: introduce pytest hooks for modifying the module, suite, and test naming logic

  • CI Visibility: add support for AWS Codepipeline to CI env var gathering

  • datastreams: this change adds message payload size metrics and aggregations for Kafka.

  • structlog: Wraps get_logger function in order to add datadog injection processor regardless of configuration

  • openai: This adds support for openai v1.

  • Source Code: filters Git repo URLs from env vars and setuptools

  • logbook: This introduces log correlation for the logbook library. Refer to logbook-docs <ddtrace.contrib.logbook> for more details.

  • loguru: This introduces log correlation for the loguru library. Refer to loguru-docs <ddtrace.contrib.loguru> for more details.

  • openai: This adds support for tagging function call arguments when using OpenAI's function calling feature.

  • Adds ARM64 support for Single-Step instrumentation

  • structlog: This introduces log correlation for the structlog library. Refer to structlog-docs <ddtrace.contrib.structlog> for more details.

  • celery: Adds Python 3.11 and 3.12 support for the celery integration.

  • CI Visibility: adds full test suite level visibility for unittest

  • ASM: Add support for automatic user login events in Flask when using flask_login.

  • tracer: This introduces collection of inferred service names. The agent version v7.46.0 contains a new field "extra_services" in the remote config client, that allows clients to list any additional services that are used within tracer spans. Knowing all service names used by a tracer instance help the UI give better feedback to the user.

  • tracer: Adds support for DD_TRACE_METHODS. This feature enables the
    specification of custom methods to be instrumented by the tracer when using ddtrace-run. See the configuration documentation for more information: https://ddtrace.readthedocs.io/en/v2.1.0/configuration.html.

  • openai: This introduces official tracing support for Azure OpenAI services, specifically for completions, chat completions, and embeddings using models deployed on Azure OpenAI endpoints.

  • elasticsearch: This introduces tracing for Elasticsearch 8 and the async Elasticsearch client.

  • Vulnerability Management for Code-level (IAST): Server-Side Request Forgery (SSRF) vulnerability detection, which will be displayed on your DataDog Vulnerability Explorer dashboard. See the Application Vulnerability Management documentation for more information about this feature.

  • Vulnerability Management for Code-level (IAST): Weak randomness vulnerability detection.

  • pymemcache: add DD_TRACE_MEMCACHED_COMMAND_ENABLED environment variable for configuring the collection of memcached commands. This feature is disabled by default.

  • wsgi: This change introduces the keyword argument app_is_iterator to the DDWSGIMiddleware constructor. It's provided as a workaround for an issue where the Datadog WSGI middleware would fail to handle WSGI apps that are not their own iterators. This condition can arise when a Django app attempts to send its "request finished" signal, in which case it may cause connection leaks. Standard methods of distinguishing an iterable from its iterator, such as checking for the presence of iter and next dunder methods, don't work in this case for unknown reasons. Instead of adding brittle special-case detection logic to the middleware, this new argument allows users to indicate when this is the case.

Known Issues

  • ASM: fix a body read problem on some corner case where passing empty content length makes wsgi.input.read() blocks.

Upgrade Notes

  • The wrapt and psutil packages are vendored to help users avoid building these packages if wheels were not available for a given platform. This reverses a change released in v2.0.0.
  • pymemcache: The memcached.query span tag will no longer be set by the integration. This command includes keys that can potentially contain sensitive information. If you require this span tag, you can retain the existing functionality by setting DD_TRACE_MEMCACHED_COMMAND_ENABLED=true. This span tag can be redacted using DD_APM_REPLACE_TAGS in your Agent configuration.

Bug Fixes

  • Application Security Management (ASM): fix a body read error when Transfer-Encoding: chunked header is sent
  • CI Visibility: fixes an issue where class-based test methods with the same name across classes would be considered duplicates, and cause one (or more) tests to be dropped from results, by adding --ddtrace-include-class-name as an optional flag (defaulting to false) to prepend the class name to the test name.

... (truncated)

Commits
  • db48b01 chore: fix inconsistency in release process by updating 2.2 from 2.x (#7589)
  • e38aad9 feat(iast): vulnerability deduplication (#7582)
  • c68ae58 chore(test): change teardown to teardown_module (#7584)
  • c0b6911 refactor(rcm): remove code duplication in subscriber service (#7535)
  • a45b659 fix(ci_visibility): only enable coverage if test skipping is enabled (#7564)
  • eb220c9 feat(openai): add support for openai v1 (#7513)
  • b4eb548 feat(logbook): add logbook integration (#7448)
  • 0109310 fix(loguru): moves injection of trace values to extra field (#7536)
  • d279c28 chore: com2ann tracer.py (#7556)
  • 458361a chore(aiohttp): add support for StreamResponse (#7551)
  • Additional commits viewable in compare view

Updates botocore from 1.31.84 to 1.32.2

Changelog

Sourced from botocore's changelog.

1.32.2

  • api-change:codecatalyst: This release includes updates to the Dev Environment APIs to include an optional vpcConnectionName parameter that supports using Dev Environments with Amazon VPC.
  • api-change:dlm: This release adds support for Amazon Data Lifecycle Manager default policies for EBS snapshots and EBS-backed AMIs.
  • api-change:ec2: Enable use of tenant-specific PublicSigningKeyUrl from device trust providers and onboard jumpcloud as a new device trust provider.
  • api-change:endpoint-rules: Update endpoint-rules client to latest version
  • api-change:fsx: Enables customers to update their PerUnitStorageThroughput on their Lustre file systems.
  • api-change:glue: Introduces new column statistics APIs to support statistics generation for tables within the Glue Data Catalog.
  • api-change:imagebuilder: This release adds the Image Lifecycle Management feature to automate the process of deprecating, disabling and deleting outdated images and their associated resources.
  • api-change:iot: GA release the ability to index and search devices based on their GeoLocation data. With GeoQueries you can narrow your search to retrieve devices located in the desired geographic boundary.
  • api-change:ivs-realtime: This release introduces server side composition and recording for stages.
  • api-change:kafka: Added a new API response field which determines if there is an action required from the customer regarding their cluster.
  • api-change:lambda: Adds support for logging configuration in Lambda Functions. Customers will have more control how their function logs are captured and to which cloud watch log group they are delivered also.
  • api-change:macie2: This release adds support for configuring Macie to assume an IAM role when retrieving sample occurrences of sensitive data reported by findings.
  • api-change:mediapackage: DRM_TOP_LEVEL_COMPACT allows placing content protection elements at the MPD level and referenced at the AdaptationSet level
  • api-change:pinpoint-sms-voice-v2: Amazon Pinpoint now offers additional operations as part of version 2 of the SMS and voice APIs. This release includes 26 new APIs to create and manage phone number registrations, add verified destination numbers, and request sender IDs.
  • api-change:polly: Add new engine - long-form - dedicated for longer content, such as news articles, training materials, or marketing videos.
  • api-change:quicksight: Custom permission support for QuickSight roles; Three new datasources STARBURST, TRINO, BIGQUERY; Lenient mode changes the default behavior to allow for exporting and importing with certain UI allowed errors, Support for permissions and tags export and import.
  • api-change:sagemaker: Amazon SageMaker Studio now supports Trainium instance types - trn1.2xlarge, trn1.32xlarge, trn1n.32xlarge.
  • api-change:ssm: This release introduces the ability to filter automation execution steps which have parent steps. In addition, runbook variable information is returned by GetAutomationExecution and parent step information is returned by the DescribeAutomationStepExecutions API.
  • api-change:ssm-incidents: Introduces new APIs ListIncidentFindings and BatchGetIncidentFindings to use findings related to an incident.
  • api-change:sso-admin: Instances bound to a single AWS account, API operations for managing instances and applications, and assignments to applications are now supported. Trusted identity propagation is also supported, with new API operations for managing trusted token issuers and application grants and scopes.
  • api-change:transfer: Introduced S3StorageOptions for servers to enable directory listing optimizations and added Type fields to logical directory mappings.

1.32.1

  • enhancement:Package Size: The botocore .whl file distributed on PyPI now provides compressed service models to improve total size on disk.
  • api-change:autoscaling: This release introduces Instance Maintenance Policy, a new EC2 Auto Scaling capability that allows customers to define whether instances are launched before or after existing instances are terminated during instance replacement operations.
  • api-change:cloudtrail: The Lake Repricing feature lets customers configure a BillingMode for an event data store. The BillingMode determines the cost for ingesting and storing events and the default and maximum retention period for the event data store.
  • api-change:codecatalyst: This release adds functionality for retrieving information about workflows and workflow runs and starting workflow runs in Amazon CodeCatalyst.
  • api-change:ec2: AWS EBS now supports Snapshot Lock, giving users the ability to lock an EBS Snapshot to prohibit deletion of the snapshot. This release introduces the LockSnapshot, UnlockSnapshot & DescribeLockedSnapshots APIs to manage lock configuration for snapshots. The release also includes the dl2q_24xlarge.
  • api-change:finspace-data: Adding deprecated trait to APIs in this name space.
  • api-change:finspace: Adding deprecated trait on Dataset Browser Environment APIs
  • api-change:lambda: Add Java 21 (java21) support to AWS Lambda
  • api-change:mwaa: This Amazon MWAA release adds support for customer-managed VPC endpoints. This lets you choose whether to create, and manage your environment's VPC endpoints, or to have Amazon MWAA create, and manage them for you.
  • api-change:rds: Updates Amazon RDS documentation for support for upgrading RDS for MySQL snapshots from version 5.7 to version 8.0.
  • api-change:redshift: The custom domain name SDK for Amazon Redshift provisioned clusters is updated with additional required parameters for modify and delete operations. Additionally, users can provide domain names with longer top-level domains.
  • api-change:s3control: Add 5 APIs to create, update, get, list, delete S3 Storage Lens group(eg. CreateStorageLensGroup), 3 APIs for tagging(TagResource,UntagResource,ListTagsForResource), and update to StorageLensConfiguration to allow metrics to be aggregated on Storage Lens groups.
  • api-change:ssm-sap: Update the default value of MaxResult to 50.

1.32.0

  • feature:ContainerProvider: Added Support for EKS container credentials
  • api-change:backup: AWS Backup - Features: Provide Job Summary for your backup activity.
  • api-change:cleanrooms: This feature provides the ability for the collaboration creator to configure either the member who can run queries or a different member in the collaboration to be billed for query compute costs.

... (truncated)

Commits
  • 04fd361 Merge branch 'release-1.32.2'
  • 2dcfadb Bumping version to 1.32.2
  • 6bd787f Merge commit '05a361446795374a90f913a273afdaeefb139ee3' into stage-release-de...
  • 0614e03 Merge commit '7623cb166bca8cd818f797c8f6f33b14f8426683' into stage-release-de...
  • 936a333 Update to latest partitions and endpoints
  • 693f153 Update to latest models
  • 7623cb1 Update quicksight sdk extras paginators
  • 929c5a5 Merge branch 'release-1.32.1' into develop
  • 5f77db0 Merge branch 'release-1.32.1'
  • 865ddf7 Bumping version to 1.32.1
  • Additional commits viewable in compare view

Most Recent Ignore Conditions Applied to This Pull Request
Dependency Name Ignore Conditions
ddtrace [< 1.5, > 1.4.1]

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the all-dependencies group with 3 updates: [rich](https://github.com/Textualize/rich), [ddtrace](https://github.com/DataDog/dd-trace-py) and [botocore](https://github.com/boto/botocore).


Updates `rich` from 13.6.0 to 13.7.0
- [Release notes](https://github.com/Textualize/rich/releases)
- [Changelog](https://github.com/Textualize/rich/blob/master/CHANGELOG.md)
- [Commits](Textualize/rich@v13.6.0...v13.7.0)

Updates `ddtrace` from 2.1.6 to 2.2.0
- [Release notes](https://github.com/DataDog/dd-trace-py/releases)
- [Changelog](https://github.com/DataDog/dd-trace-py/blob/2.x/CHANGELOG.md)
- [Commits](DataDog/dd-trace-py@v2.1.6...v2.2.0)

Updates `botocore` from 1.31.84 to 1.32.2
- [Changelog](https://github.com/boto/botocore/blob/develop/CHANGELOG.rst)
- [Commits](boto/botocore@1.31.84...1.32.2)

---
updated-dependencies:
- dependency-name: rich
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: ddtrace
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: botocore
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Nov 17, 2023
Copy link

codecov bot commented Nov 17, 2023

Codecov Report

Merging #3237 (c242a56) into main (edebcb3) will increase coverage by 0.00%.
The diff coverage is n/a.

Additional details and impacted files
@@           Coverage Diff           @@
##             main    #3237   +/-   ##
=======================================
  Coverage   96.59%   96.60%           
=======================================
  Files         481      481           
  Lines       29928    29928           
  Branches     3691     3691           
=======================================
+ Hits        28910    28911    +1     
+ Misses        834      833    -1     
  Partials      184      184           

Copy link

codspeed-hq bot commented Nov 17, 2023

CodSpeed Performance Report

Merging #3237 will not alter performance

Comparing dependabot/pip/all-dependencies-54f10335bb (c242a56) with main (edebcb3)

Summary

✅ 12 untouched benchmarks

Copy link
Contributor Author

dependabot bot commented on behalf of github Nov 20, 2023

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot bot closed this Nov 20, 2023
@dependabot dependabot bot deleted the dependabot/pip/all-dependencies-54f10335bb branch November 20, 2023 18:59
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants