Bump the dev-dependencies group with 4 updates by dependabot[bot] · Pull Request #3678 · alephdata/aleph

dependabot · 2024-04-05T07:10:12Z

Bumps the dev-dependencies group with 4 updates: black, playwright, pytest-playwright and ruff.

Updates black from 23.12.1 to 24.3.0

Release notes

24.3.0

Highlights

This release is a milestone: it fixes Black's first CVE security vulnerability. If you run Black on untrusted input, or if you habitually put thousands of leading tab characters in your docstrings, you are strongly encouraged to upgrade immediately to fix CVE-2024-21503.

This release also fixes a bug in Black's AST safety check that allowed Black to make incorrect changes to certain f-strings that are valid in Python 3.12 and higher.

Stable style

Don't move comments along with delimiters, which could cause crashes (#4248)

Strengthen AST safety check to catch more unsafe changes to strings. Previous versions of Black would incorrectly format the contents of certain unusual f-strings containing nested strings with the same quote type. Now, Black will crash on such strings until support for the new f-string syntax is implemented. (#4270)

Fix a bug where line-ranges exceeding the last code line would not work as expected (#4273)

Performance

Fix catastrophic performance on docstrings that contain large numbers of leading tab characters. This fixes CVE-2024-21503. (#4278)

Documentation

Note what happens when --check is used with --quiet (#4236)

24.2.0

Stable style

Fixed a bug where comments where mistakenly removed along with redundant parentheses (#4218)

Preview style

Move the hug_parens_with_braces_and_square_brackets feature to the unstable style due to an outstanding crash and proposed formatting tweaks (#4198)

Fixed a bug where base expressions caused inconsistent formatting of ** in tenary expression (#4154)

Checking for newline before adding one on docstring that is almost at the line limit (#4185)

Remove redundant parentheses in case statement if guards (#4214).

Configuration

... (truncated)

Changelog

Sourced from black's changelog.

24.3.0

Highlights

This release is a milestone: it fixes Black's first CVE security vulnerability. If you run Black on untrusted input, or if you habitually put thousands of leading tab characters in your docstrings, you are strongly encouraged to upgrade immediately to fix CVE-2024-21503.

This release also fixes a bug in Black's AST safety check that allowed Black to make incorrect changes to certain f-strings that are valid in Python 3.12 and higher.

Stable style

Don't move comments along with delimiters, which could cause crashes (#4248)

Strengthen AST safety check to catch more unsafe changes to strings. Previous versions of Black would incorrectly format the contents of certain unusual f-strings containing nested strings with the same quote type. Now, Black will crash on such strings until support for the new f-string syntax is implemented. (#4270)

Fix a bug where line-ranges exceeding the last code line would not work as expected (#4273)

Performance

Fix catastrophic performance on docstrings that contain large numbers of leading tab characters. This fixes CVE-2024-21503. (#4278)

Documentation

Note what happens when --check is used with --quiet (#4236)

24.2.0

Stable style

Fixed a bug where comments where mistakenly removed along with redundant parentheses (#4218)

Preview style

Move the hug_parens_with_braces_and_square_brackets feature to the unstable style due to an outstanding crash and proposed formatting tweaks (#4198)

Fixed a bug where base expressions caused inconsistent formatting of ** in tenary expression (#4154)

Checking for newline before adding one on docstring that is almost at the line limit (#4185)

Remove redundant parentheses in case statement if guards (#4214).

... (truncated)

Commits

552baf8 Prepare release 24.3.0 (#4279)
f000936 Fix catastrophic performance in lines_with_leading_tabs_expanded() (#4278)
7b5a657 Fix --line-ranges behavior when ranges are at EOF (#4273)
1abcffc Use regex where we ignore case on windows (#4252)
719e674 Fix 4227: Improve documentation for --quiet --check (#4236)
e5510af update plugin url for Thonny (#4259)
6af7d11 Fix AST safety check false negative (#4270)
f03ee11 Ensure blib2to3.pygram is initialized before use (#4224)
e4bfedb fix: Don't move comments while splitting delimiters (#4248)
d0287e1 Make trailing comma logic more concise (#4202)
Additional commits viewable in compare view

Updates playwright from 1.40.0 to 1.42.0

Release notes

Sourced from playwright's releases.

v1.42.0

New Locator Handler

New method page.add_locator_handler(locator, handler) registers a callback that will be invoked when specified element becomes visible and may block Playwright actions. The callback can get rid of the overlay. Here is an example that closes a cookie dialog when it appears.
# Setup the handler.
page.add_locator_handler(
    page.get_by_role("heading", name="Hej! You are in control of your cookies."),
    lambda: page.get_by_role("button", name="Accept all").click(),
)
# Write the test as usual.
page.goto("https://www.ikea.com/")
page.get_by_role("link", name="Collection of blue and white").click()
expect(page.get_by_role("heading", name="Light and easy")).to_be_visible()
New APIs

page.pdf([options]) accepts two new options tagged and outline.

Announcements

⚠️ Ubuntu 18 is not supported anymore.

Browser Versions

Chromium 123.0.6312.4

Mozilla Firefox 123.0

WebKit 17.4

This version was also tested against the following stable channels:

Google Chrome 122

Microsoft Edge 123

v1.41.2

Highlights

microsoft/playwright-python#2258 - [REGRESSION] Failing step is not highlighted in red in actions panel for versions after 1.39.0 microsoft/playwright#29123 - [REGRESSION] route.continue: Protocol error (Fetch.continueRequest): Invalid InterceptionId.

Browser Versions

Chromium 121.0.6167.57

Mozilla Firefox 121.0

WebKit 17.4

This version was also tested against the following stable channels:

Google Chrome 120

Microsoft Edge 120

v1.41.1

Highlights

... (truncated)

Commits

665af8d Revert "fix: datetime serialisation (#2314)"
2ab641a Revert "test: fix deprecated datetime serialisation (follow-up to #2314)"
58551ad chore(roll): roll Playwright to v1.42.1 (#2340)
f6071ee build(deps): bump wheel from 0.41.2 to 0.42.0 (#2324)
0d2899a build(deps): bump twisted from 23.10.0 to 24.3.0 (#2337)
07efec1 build(deps): bump types-pyopenssl from 24.0.0.20240130 to 24.0.0.20240228 (#2...
274ea8f build(deps): bump setuptools from 68.2.2 to 69.1.1 (#2339)
2dd251c build(deps): bump types-requests from 2.31.0.10 to 2.31.0.20240218 (#2326)
9517a9a build(deps): bump objgraph from 3.6.0 to 3.6.1 (#2327)
84a62e4 build(deps): bump pyopenssl from 23.2.0 to 24.0.0 (#2325)
Additional commits viewable in compare view

Updates pytest-playwright from 0.4.3 to 0.4.4

Release notes

Sourced from pytest-playwright's releases.

v0.4.4

Bugfixes:

fix: use best-effort artifacts folder removal in microsoft/playwright-pytest#191

chore: support Pytest v8 in microsoft/playwright-pytest#203

Commits

a0e5c0f chore: support Pytest v8 (#203)
851c0e4 devops: remove pinned conda (#199)
af44fd0 chore(deps): bump django from 3.2.20 to 3.2.23 (#193)
ef99541 fix: use best-effort artifacts folder removal (#191)
See full diff in compare view

Updates ruff from 0.1.9 to 0.3.5

Release notes

Sourced from ruff's releases.

v0.3.5

Changes

Preview features

[pylint] Implement modified-iterating-set (E4703) (#10473)

[refurb] Implement for-loop-set-mutations (FURB142) (#10583)

[refurb] Implement unnecessary-from-float (FURB164) (#10647)

[refurb] Implement verbose-decimal-constructor (FURB157) (#10533)

Rule changes

[flake8-comprehensions] Handled special case for C401 which also matches C416 (#10596)

[flake8-pyi] Mark unaliased-collections-abc-set-import fix as "safe" for more cases in stub files (PYI025) (#10547)

[numpy] Add row_stack to NumPy 2.0 migration rule (#10646)

[pycodestyle] Allow cell magics before an import (E402) (#10545)

[pycodestyle] Avoid blank line rules for the first logical line in cell (#10291)

Configuration

Respected nested namespace packages (#10541)

[flake8-boolean-trap] Add setting for user defined allowed boolean trap (#10531)

Bug fixes

Correctly handle references in __all__ definitions when renaming symbols in autofixes (#10527)

Track ranges of names inside __all__ definitions (#10525)

[flake8-bugbear] Avoid false positive for usage after continue (B031) (#10539)

[flake8-copyright] Accept commas in default copyright pattern (#9498)

[flake8-datetimez] Allow f-strings with %z for DTZ007 (#10651)

[flake8-pytest-style] Fix PT014 autofix for last item in list (#10532)

[flake8-quotes] Ignore Q000, Q001 when string is inside forward ref (#10585)

[isort] Always place non-relative imports after relative imports (#10669)

[isort] Respect Unicode characters in import sorting (#10529)

[pyflakes] Fix F821 false negatives when from __future__ import annotations is active (attempt 2) (#10524)

[pyflakes] Make unnecessary-lambda an always-unsafe fix (#10668)

[pylint] Fixed false-positive on the rule PLW1641 (eq-without-hash) (#10566)

[ruff] Fix panic in unused # noqa removal with multi-byte space (RUF100) (#10682)

Documentation

Add PR title format to CONTRIBUTING.md (#10665)

Fix list markup to include blank lines required (#10591)

Put flake8-logging next to the other flake8 plugins in registry (#10587)

[flake8-bandit] Update warning message for rule S305 to address insecure block cipher mode use (#10602)

[flake8-bugbear] Document use of anonymous assignment in useless-expression (#10551)

[flake8-datetimez] Clarify error messages and docs for DTZ rules (#10621)

[pycodestyle] Use same before vs. after numbers for space-around-operator (#10640)

[ruff] Change quadratic-list-summation docs to use iadd consistently (#10666)

... (truncated)

Changelog

Sourced from ruff's changelog.

0.3.5

Preview features

[pylint] Implement modified-iterating-set (E4703) (#10473)

[refurb] Implement for-loop-set-mutations (FURB142) (#10583)

[refurb] Implement unnecessary-from-float (FURB164) (#10647)

[refurb] Implement verbose-decimal-constructor (FURB157) (#10533)

Rule changes

[flake8-comprehensions] Handled special case for C401 which also matches C416 (#10596)

[flake8-pyi] Mark unaliased-collections-abc-set-import fix as "safe" for more cases in stub files (PYI025) (#10547)

[numpy] Add row_stack to NumPy 2.0 migration rule (#10646)

[pycodestyle] Allow cell magics before an import (E402) (#10545)

[pycodestyle] Avoid blank line rules for the first logical line in cell (#10291)

Configuration

Respected nested namespace packages (#10541)

[flake8-boolean-trap] Add setting for user defined allowed boolean trap (#10531)

Bug fixes

Correctly handle references in __all__ definitions when renaming symbols in autofixes (#10527)

Track ranges of names inside __all__ definitions (#10525)

[flake8-bugbear] Avoid false positive for usage after continue (B031) (#10539)

[flake8-copyright] Accept commas in default copyright pattern (#9498)

[flake8-datetimez] Allow f-strings with %z for DTZ007 (#10651)

[flake8-pytest-style] Fix PT014 autofix for last item in list (#10532)

[flake8-quotes] Ignore Q000, Q001 when string is inside forward ref (#10585)

[isort] Always place non-relative imports after relative imports (#10669)

[isort] Respect Unicode characters in import sorting (#10529)

[pyflakes] Fix F821 false negatives when from __future__ import annotations is active (attempt 2) (#10524)

[pyflakes] Make unnecessary-lambda an always-unsafe fix (#10668)

[pylint] Fixed false-positive on the rule PLW1641 (eq-without-hash) (#10566)

[ruff] Fix panic in unused # noqa removal with multi-byte space (RUF100) (#10682)

Documentation

Add PR title format to CONTRIBUTING.md (#10665)

Fix list markup to include blank lines required (#10591)

Put flake8-logging next to the other flake8 plugins in registry (#10587)

[flake8-bandit] Update warning message for rule S305 to address insecure block cipher mode use (#10602)

[flake8-bugbear] Document use of anonymous assignment in useless-expression (#10551)

[flake8-datetimez] Clarify error messages and docs for DTZ rules (#10621)

[pycodestyle] Use same before vs. after numbers for space-around-operator (#10640)

[ruff] Change quadratic-list-summation docs to use iadd consistently (#10666)

0.3.4

... (truncated)

Commits

200ebee Bump version to v0.3.5 (#10717)
23e8279 chore(deps): update npm development dependencies (#10716)
221b323 chore(deps): update strum to 0.26.0 (#10715)
a0e1544 chore(deps): update rust crate pep440_rs to 0.5.0 (#10703)
2740fab Renovate: group all strum dependencies together (#10714)
7042b9b fix(deps): update rust crate similar to v2.5.0 (#10711)
4047d45 chore(deps): update rust crate insta to v1.38.0 (#10701)
20d69ea chore(deps): update npm development dependencies (#10697)
d021cac chore(deps): update rust crate tracing-tree to 0.3.0 (#10709)
46369d4 chore(deps): update rust crate uuid to v1.8.0 (#10710)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the dev-dependencies group with 4 updates: [black](https://github.com/psf/black), [playwright](https://github.com/Microsoft/playwright-python), [pytest-playwright](https://github.com/microsoft/playwright-pytest) and [ruff](https://github.com/astral-sh/ruff). Updates `black` from 23.12.1 to 24.3.0 - [Release notes](https://github.com/psf/black/releases) - [Changelog](https://github.com/psf/black/blob/main/CHANGES.md) - [Commits](psf/black@23.12.1...24.3.0) Updates `playwright` from 1.40.0 to 1.42.0 - [Release notes](https://github.com/Microsoft/playwright-python/releases) - [Commits](microsoft/playwright-python@v1.40.0...v1.42.0) Updates `pytest-playwright` from 0.4.3 to 0.4.4 - [Release notes](https://github.com/microsoft/playwright-pytest/releases) - [Commits](microsoft/playwright-pytest@v0.4.3...v0.4.4) Updates `ruff` from 0.1.9 to 0.3.5 - [Release notes](https://github.com/astral-sh/ruff/releases) - [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md) - [Commits](astral-sh/ruff@v0.1.9...v0.3.5) --- updated-dependencies: - dependency-name: black dependency-type: direct:development update-type: version-update:semver-major dependency-group: dev-dependencies - dependency-name: playwright dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dev-dependencies - dependency-name: pytest-playwright dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-dependencies - dependency-name: ruff dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dev-dependencies ... Signed-off-by: dependabot[bot] <[email protected]>

dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Apr 5, 2024

dependabot bot mentioned this pull request Apr 5, 2024

Bump the dev-dependencies group with 4 updates #3648

Closed

stchris added 3 commits April 5, 2024 15:29

chore: exclude generated code from linter

56453b0

chore: run formatter

6de8176

Update ruff.toml syntax and update list of excluded folders

d71c236

stchris merged commit b58c0ee into develop Apr 5, 2024

dependabot bot deleted the dependabot/pip/develop/dev-dependencies-84a3d375eb branch April 5, 2024 13:41

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump the dev-dependencies group with 4 updates#3678

Bump the dev-dependencies group with 4 updates#3678
stchris merged 4 commits intodevelopfrom
dependabot/pip/develop/dev-dependencies-84a3d375eb

dependabot bot commented on behalf of github Apr 5, 2024

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot bot commented on behalf of github Apr 5, 2024

24.3.0

Highlights

Stable style

Performance

Documentation

24.2.0

Stable style

Preview style

Configuration

24.3.0

Highlights

Stable style

Performance

Documentation

24.2.0

Stable style

Preview style

v1.42.0

New Locator Handler

New APIs

Announcements

Browser Versions

v1.41.2

Highlights

Browser Versions

v1.41.1

Highlights

v0.4.4

v0.3.5

Changes

Preview features

Rule changes

Configuration

Bug fixes

Documentation

0.3.5

Preview features

Rule changes

Configuration

Bug fixes

Documentation

0.3.4

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant