Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Bump the all-dependencies group with 11 updates #3353

Closed
wants to merge 1 commit into from
Closed

Bump the all-dependencies group with 11 updates #3353

wants to merge 1 commit into from

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jan 22, 2024 •
edited
Loading

Bumps the all-dependencies group with 11 updates:

Package From To
uvicorn 0.25.0 0.26.0
flask 3.0.0 3.0.1
pydantic 1.10.13 1.10.14
sanic 23.12.0 23.12.1
ddtrace 2.4.0 2.5.0
markupsafe 2.1.3 2.1.4
sentry-sdk 1.39.1 1.39.2
types-aiofiles 23.2.0.0 23.2.0.20240106
types-python-dateutil 2.8.19.14 2.8.19.20240106
botocore 1.34.13 1.34.23
types-protobuf 4.24.0.4 4.24.0.20240106

Updates uvicorn from 0.25.0 to 0.26.0

Release notes

Sourced from uvicorn's releases.

Version 0.26.0

Changed

  • Update --root-path to include the root path prefix in the full ASGI path as per the ASGI spec (#2213) 16/01/24
  • Use __future__.annotations on some internal modules (#2199) 16/01/24

Full Changelog: encode/uvicorn@0.25.0...0.26.0

Changelog

Sourced from uvicorn's changelog.

0.26.0 - 2024-01-16

Changed

  • Update --root-path to include the root path prefix in the full ASGI path as per the ASGI spec (#2213) 16/01/24
  • Use __future__.annotations on some internal modules (#2199) 16/01/24
Commits

Updates flask from 3.0.0 to 3.0.1

Release notes

Sourced from flask's releases.

3.0.1

This is a fix release for the 3.0.x feature release branch.

Fixes an issue where using other JSON providers, such as flask-orjson, previously caused loaded session data to have an incorrect format in some cases.

Changelog

Sourced from flask's changelog.

Version 3.0.1

Released 2024-01-18

  • Correct type for path argument to send_file. :issue:5230
  • Fix a typo in an error message for the flask run --key option. :pr:5344
  • Session data is untagged without relying on the built-in json.loads object_hook. This allows other JSON providers that don't implement that. :issue:5381
  • Address more type findings when using mypy strict mode. :pr:5383
Commits

Updates pydantic from 1.10.13 to 1.10.14

Release notes

Sourced from pydantic's releases.

v1.10.14 2024-01-19

What's Changed

New Contributors

Full Changelog: pydantic/pydantic@v1.10.13...v1.10.14

Changelog

Sourced from pydantic's changelog.

v1.10.14 (2024-01-19)

Commits

Updates sanic from 23.12.0 to 23.12.1

Release notes

Sourced from sanic's releases.

Version 23.12.1

What's Changed

Full Changelog: sanic-org/sanic@v23.12.0...v23.12.1

Commits

Updates ddtrace from 2.4.0 to 2.5.0

Release notes

Sourced from ddtrace's releases.

2.5.0

New Features

  • aiohttp: add split_by_domain config to split service name by domain
  • CI Visibility: Adds code coverage lines covered tag for pytest and unittest.
  • aiohttp: Adds http.route tag to aiohttp.request spans.
  • bottle: Adds http.route tag to bottle.request spans.
  • falcon: Adds http.route tag to falcon.request spans.
  • molten: Adds http.route tag to molten.request spans.
  • Adds distributed tracing for confluent-kafka integration. Distributed tracing connects Kafka consumer spans with Kafka producer spans within the same trace if a message is valid. To enable distributed tracing, set the configuration: DD_KAFKA_DISTRIBUTED_TRACING_ENABLED=True for both the consumer and producer service.
  • ASM: This introduces (experimental) api security support for fastAPI. Flask and Django were already supported in 2.4.0. Support schema computation on all addresses (requests and responses) and scanner support for pii, credentials and payment data.
  • CI Visibility: introduces a CI visibility-specific logger (enabled for the pytest plugin), enabled by setting the DD_CIVISIBILITY_LOG_LEVEL environment variable (with the same level names as Python logging levels).
  • CI Visibility: allows for waiting for the git metadata upload to complete before deciding whether or not to enable coverage (based on API response).
  • Further lazy loads telemetry_writer so that it is not running when explicitly disabled. Users must explicitly set "DD_INSTRUMENTATION_TELEMETRY_ENABLED=false".
  • tracer: Add support for remotely configuring trace tags.

Bug Fixes

  • loguru: Ensures log correlation is enabled when the root logger is initialized. Previously, log correlation was only enabled when a new sink was added.

  • Fix compatibility with other tools that try to infer the type of a Python object at runtime.

  • tracing: Fixes a bug that prevents span links from being visualized in the Datadog UI.

  • tracing: Resolves span encoding errors raised when span links do not contain expected types

  • ASM: This fix resolves an issue where custom event boolean properties were not reported as true and false like other tracers but as True and False.

  • Vulnerability Management for Code-level (IAST): Ensure that Cookies vulnerabilities report only the cookie name.

  • langchain: This fix resolves an get_openai_token_cost_for_model import error in langhcain version 0.0.351 or later.

  • ASM: This fix resolves an issue where IAST could cause circular dependency at startup.

  • tracing: Ensures all fields in ddtrace.context.Context are picklable.

  • pytest: This fix resolves an issue where the --no-cov flag did not take precedence over the --cov flag when deciding whether to report code coverage on spans.

  • rq: Fixed a bug where the RQ integration would emit a warning when setting job.status span tag.

  • IAST: Don't split AST Assign nodes since it's not needed for propagation to work.

  • Fix an issue that caused an exception to be raised when trying to access resource files via pkg_resources.

  • Fix for an import issue that caused the pytest plugin to fail to properly initialize a test session and exit with an import exception.

  • opentelemetry: Ensures that span links are serialized in a json-compatible representation.

  • otel: Ensures all otel sampling decisions are consistent with Datadog Spans. This prevents otel spans in a distrbuted trace from being sampled differently than Datadog spans in the same trace.

  • tracing: Fix an issue where remote configuration values would not be reverted when unset in the UI.

  • openai: This fix resolves an issue where an internal OpenAI method SyncAPIClient._process_response
    was not being patched correctly and led to to an AttributeError while patching.

  • tracing: Ensures span links are serialized with the expected traceflag when DD_TRACE_API_VERSION=v0.4

2.5.0rc2

New Features

  • aiohttp: add split_by_domain config to split service name by domain
  • CI Visibility: Adds code coverage lines covered tag for pytest and unittest.
  • aiohttp: Adds http.route tag to aiohttp.request spans.
  • bottle: Adds http.route tag to bottle.request spans.
  • falcon: Adds http.route tag to falcon.request spans.
  • molten: Adds http.route tag to molten.request spans.

... (truncated)

Commits
  • 2901112 fix(span_links): set highest order bit in traceflag encoding [backport 2.5] (...
  • ea1187a fix(openai): add version gate to patch _process_response [backport 2.5] (#8148)
  • c4184e8 fix(tracing): enable settings to be unset (#8126) [backport 2.5] (#8142)
  • 4f77b89 fix(otel): ensure booleans have json compatible representation [backport 2.5]...
  • 1a9f1ce fix(otel): support tag flattening [AIT-9352] [backport 2.5] (#8093)
  • 2e77b53 fix(internal): support for pkg_resources [backport 2.5] (#8121)
  • 822e0b4 ci: skip some test_stack.py tests on 3.12 [backport 2.5] (#8085)
  • 0e31149 fix: avoid changing the AST assign node since it's not needed for propagation...
  • 08140f9 fix(ci): pin versions of sphinx dependencies to unlock ci [backport 2.5] (#8107)
  • ce1cbf4 fix(internal): support for namespace packages [backport 2.5] (#8087)
  • Additional commits viewable in compare view

Updates markupsafe from 2.1.3 to 2.1.4

Release notes

Sourced from markupsafe's releases.

2.1.4

This is a fix release for the 2.1.x feature release branch. It fixes bugs but does not otherwise change behavior and should not result in breaking changes.

Changelog

Sourced from markupsafe's changelog.

Version 2.1.4

Released 2024-01-19

  • Don't use regular expressions for striptags, avoiding a performance issue. :pr:413
Commits

Updates sentry-sdk from 1.39.1 to 1.39.2

Release notes

Sourced from sentry-sdk's releases.

1.39.2

Various fixes & improvements

Changelog

Sourced from sentry-sdk's changelog.

1.39.2

Various fixes & improvements

Commits

Updates types-aiofiles from 23.2.0.0 to 23.2.0.20240106

Commits

Updates types-python-dateutil from 2.8.19.14 to 2.8.19.20240106

Commits

Updates botocore from 1.34.13 to 1.34.23

Changelog

Sourced from botocore's changelog.

1.34.23

  • api-change:athena: Introducing new NotebookS3LocationUri parameter to Athena ImportNotebook API. Payload is no longer required and either Payload or NotebookS3LocationUri needs to be provided (not both) for a successful ImportNotebook API call. If both are provided, an InvalidRequestException will be thrown.
  • api-change:codebuild: Release CodeBuild Reserved Capacity feature
  • api-change:dynamodb: This release adds support for including ApproximateCreationDateTimePrecision configurations in EnableKinesisStreamingDestination API, adds the same as an optional field in the response of DescribeKinesisStreamingDestination, and adds support for a new UpdateKinesisStreamingDestination API.
  • api-change:qconnect: Increased Quick Response name max length to 100

1.34.22

  • api-change:b2bi: Increasing TestMapping inputFileContent file size limit to 5MB and adding file size limit 250KB for TestParsing input file. This release also includes exposing InternalServerException for Tag APIs.
  • api-change:cloudtrail: This release adds a new API ListInsightsMetricData to retrieve metric data from CloudTrail Insights.
  • api-change:connect: GetMetricDataV2 now supports 3 groupings
  • api-change:drs: Removed invalid and unnecessary default values.
  • api-change:firehose: Allow support for Snowflake as a Kinesis Data Firehose delivery destination.
  • api-change:sagemaker-featurestore-runtime: Increase BatchGetRecord limits from 10 items to 100 items

1.34.21

  • api-change:dynamodb: Updating note for enabling streams for UpdateTable.
  • api-change:keyspaces: This release adds support for Multi-Region Replication with provisioned tables, and Keyspaces auto scaling APIs

1.34.20

  • api-change:iot: Revert release of LogTargetTypes
  • api-change:iotfleetwise: Updated APIs: SignalNodeType query parameter has been added to ListSignalCatalogNodesRequest and ListVehiclesResponse has been extended with attributes field.
  • api-change:macie2: This release adds support for analyzing Amazon S3 objects that are encrypted using dual-layer server-side encryption with AWS KMS keys (DSSE-KMS). It also adds support for reporting DSSE-KMS details in statistics and metadata about encryption settings for S3 buckets and objects.
  • api-change:payment-cryptography: Provide an additional option for key exchange using RSA wrap/unwrap in addition to tr-34/tr-31 in ImportKey and ExportKey operations. Added new key usage (type) TR31_M1_ISO_9797_1_MAC_KEY, for use with Generate/VerifyMac dataplane operations with ISO9797 Algorithm 1 MAC calculations.
  • api-change:personalize-runtime: Documentation updates for Amazon Personalize
  • api-change:personalize: Documentation updates for Amazon Personalize.
  • api-change:rekognition: This release adds ContentType and TaxonomyLevel attributes to DetectModerationLabels and GetMediaAnalysisJob API responses.
  • api-change:securityhub: Documentation updates for AWS Security Hub

1.34.19

  • api-change:sagemaker: This release will have ValidationException thrown if certain invalid app types are provided. The release will also throw ValidationException if more than 10 account ids are provided in VpcOnlyTrustedAccounts.

1.34.18

  • api-change:connect: Supervisor Barge for Chat is now supported through the MonitorContact API.

... (truncated)

Commits
  • 63e7153 Merge branch 'release-1.34.23'
  • b52f2e5 Bumping version to 1.34.23
  • 357b9ee Update to latest partitions and endpoints
  • 439c5d5 Update to latest models
  • 0995e25 Merge branch 'release-1.34.22'
  • 3489672 Merge branch 'release-1.34.22' into develop
  • c8a53f7 Bumping version to 1.34.22
  • 2007f19 Update to latest partitions and endpoints
  • 97aa212 Update to latest models
  • b738b70 Merge branch 'release-1.34.21'
  • Additional commits viewable in compare view

Updates types-protobuf from 4.24.0.4 to 4.24.0.20240106

Commits

Most Recent Ignore Conditions Applied to This Pull Request
Dependency Name Ignore Conditions
ddtrace [< 1.5, > 1.4.1]

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the all-dependencies group with 11 updates
64a7f53 
Bumps the all-dependencies group with 11 updates:

| Package | From | To |
| --- | --- | --- |
| [uvicorn](https://github.com/encode/uvicorn) | `0.25.0` | `0.26.0` |
| [flask](https://github.com/pallets/flask) | `3.0.0` | `3.0.1` |
| [pydantic](https://github.com/pydantic/pydantic) | `1.10.13` | `1.10.14` |
| [sanic](https://github.com/sanic-org/sanic) | `23.12.0` | `23.12.1` |
| [ddtrace](https://github.com/DataDog/dd-trace-py) | `2.4.0` | `2.5.0` |
| [markupsafe](https://github.com/pallets/markupsafe) | `2.1.3` | `2.1.4` |
| [sentry-sdk](https://github.com/getsentry/sentry-python) | `1.39.1` | `1.39.2` |
| [types-aiofiles](https://github.com/python/typeshed) | `23.2.0.0` | `23.2.0.20240106` |
| [types-python-dateutil](https://github.com/python/typeshed) | `2.8.19.14` | `2.8.19.20240106` |
| [botocore](https://github.com/boto/botocore) | `1.34.13` | `1.34.23` |
| [types-protobuf](https://github.com/python/typeshed) | `4.24.0.4` | `4.24.0.20240106` |


Updates `uvicorn` from 0.25.0 to 0.26.0
- [Release notes](https://github.com/encode/uvicorn/releases)
- [Changelog](https://github.com/encode/uvicorn/blob/master/CHANGELOG.md)
- [Commits](encode/uvicorn@0.25.0...0.26.0)

Updates `flask` from 3.0.0 to 3.0.1
- [Release notes](https://github.com/pallets/flask/releases)
- [Changelog](https://github.com/pallets/flask/blob/main/CHANGES.rst)
- [Commits](pallets/flask@3.0.0...3.0.1)

Updates `pydantic` from 1.10.13 to 1.10.14
- [Release notes](https://github.com/pydantic/pydantic/releases)
- [Changelog](https://github.com/pydantic/pydantic/blob/v1.10.14/HISTORY.md)
- [Commits](pydantic/pydantic@v1.10.13...v1.10.14)

Updates `sanic` from 23.12.0 to 23.12.1
- [Release notes](https://github.com/sanic-org/sanic/releases)
- [Commits](sanic-org/sanic@v23.12.0...v23.12.1)

Updates `ddtrace` from 2.4.0 to 2.5.0
- [Release notes](https://github.com/DataDog/dd-trace-py/releases)
- [Changelog](https://github.com/DataDog/dd-trace-py/blob/main/CHANGELOG.md)
- [Commits](DataDog/dd-trace-py@v2.4.0...v2.5.0)

Updates `markupsafe` from 2.1.3 to 2.1.4
- [Release notes](https://github.com/pallets/markupsafe/releases)
- [Changelog](https://github.com/pallets/markupsafe/blob/main/CHANGES.rst)
- [Commits](pallets/markupsafe@2.1.3...2.1.4)

Updates `sentry-sdk` from 1.39.1 to 1.39.2
- [Release notes](https://github.com/getsentry/sentry-python/releases)
- [Changelog](https://github.com/getsentry/sentry-python/blob/master/CHANGELOG.md)
- [Commits](getsentry/sentry-python@1.39.1...1.39.2)

Updates `types-aiofiles` from 23.2.0.0 to 23.2.0.20240106
- [Commits](https://github.com/python/typeshed/commits)

Updates `types-python-dateutil` from 2.8.19.14 to 2.8.19.20240106
- [Commits](https://github.com/python/typeshed/commits)

Updates `botocore` from 1.34.13 to 1.34.23
- [Changelog](https://github.com/boto/botocore/blob/develop/CHANGELOG.rst)
- [Commits](boto/botocore@1.34.13...1.34.23)

Updates `types-protobuf` from 4.24.0.4 to 4.24.0.20240106
- [Commits](https://github.com/python/typeshed/commits)

---
updated-dependencies:
- dependency-name: uvicorn
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: flask
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: pydantic
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: sanic
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: ddtrace
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: markupsafe
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: sentry-sdk
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: types-aiofiles
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: types-python-dateutil
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: botocore
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: types-protobuf
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Jan 22, 2024
@codecov Codecov
Copy link

codecov bot commented Jan 22, 2024 •
edited
Loading

Codecov Report

Merging #3353 (64a7f53) into main (c26bb05) will decrease coverage by 0.31%.
The diff coverage is n/a.

Additional details and impacted files 
@@            Coverage Diff             @@
##             main    #3353      +/-   ##
==========================================
- Coverage   96.62%   96.32%   -0.31%     
==========================================
  Files         485      484       -1     
  Lines       30292    30272      -20     
  Branches     3746     3742       -4     
==========================================
- Hits        29270    29158     -112     
- Misses        833      903      +70     
- Partials      189      211      +22

@codspeed-hq CodSpeed HQ
Copy link

codspeed-hq bot commented Jan 22, 2024

CodSpeed Performance Report

Merging #3353 will degrade performances by 27.63%

Comparing dependabot/pip/all-dependencies-4acbb40ab5 (64a7f53) with main (c26bb05)

Summary

❌ 1 regressions
✅ 12 untouched benchmarks

⚠️ Please fix the performance issues or acknowledge them on CodSpeed.

Benchmarks breakdown

Benchmark main dependabot/pip/all-dependencies-4acbb40ab5 Change
❌ test_execute_basic 10 ms 13.9 ms -27.63%

@patrick91
Copy link
Member

@dependabot recreate

@dependabot Dependabot
Copy link
Contributor Author

dependabot bot commented on behalf of github Jan 23, 2024

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot bot closed this Jan 23, 2024
@dependabot dependabot bot deleted the dependabot/pip/all-dependencies-4acbb40ab5 branch January 23, 2024 11:03
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
dependencies Pull requests that update a dependency file
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
1 participant
@patrick91