Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github May 1, 2025

Bumps the dependencies group with 10 updates in the / directory:

Package From To
aiohappyeyeballs 2.4.6 2.6.1
aiohttp 3.11.12 3.11.18
attrs 25.1.0 25.3.0
botocore 1.36.21 1.38.6
certifi 2025.1.31 2025.4.26
frozenlist 1.5.0 1.6.0
multidict 6.1.0 6.4.3
propcache 0.2.1 0.3.1
sentry-sdk 2.21.0 2.27.0
yarl 1.18.3 1.20.0

Updates aiohappyeyeballs from 2.4.6 to 2.6.1

Release notes

Sourced from aiohappyeyeballs's releases.

v2.6.1 (2025-03-12)

Bug Fixes

  • Resolve TypeError on import for Python < 3.9.2 (#151, 2042c82)

Detailed Changes: v2.6.0...v2.6.1

v2.6.0 (2025-03-11)

Features

Creates an api_reference.rst file to expose the existing documentation for the few functions that have docstrings, as well as add documentation for AddrInfoType and SocketFactoryType. Now, these can be properly pointed to by other projects' documentation.


Detailed Changes: v2.5.0...v2.6.0

v2.5.0 (2025-03-06)

Features

  • Add callback for users to customize socket creation (#147, 8e1bc6a)

Co-authored-by: Kieren


Detailed Changes: v2.4.8...v2.5.0

v2.4.8 (2025-03-04)

Bug Fixes

  • Close runner up sockets in the event there are multiple winners (#143, 476a05b)

The first attempt to fix this was to use the cpython staggered race updates in #142 but there is still a race there where there can be multiple winners. Instead we now accept that we will not be able to cancel all coros in time and there will always be a risk of multiple winners. We store all sockets in a set that were not already cleaned up and we close all but the first winner after the staggered race finishes.


Detailed Changes: v2.4.7...v2.4.8

v2.4.7 (2025-03-04)

Bug Fixes

... (truncated)

Changelog

Sourced from aiohappyeyeballs's changelog.

v2.6.1 (2025-03-12)

Bug fixes

  • Resolve typeerror on import for python < 3.9.2 (#151) (2042c82)

v2.6.0 (2025-03-11)

Features

v2.5.0 (2025-03-06)

Features

  • Add callback for users to customize socket creation (#147) (8e1bc6a)

v2.4.8 (2025-03-04)

Bug fixes

  • Close runner up sockets in the event there are multiple winners (#143) (476a05b)

v2.4.7 (2025-03-04)

Bug fixes

Commits

Updates aiohttp from 3.11.12 to 3.11.18

Release notes

Sourced from aiohttp's releases.

3.11.18

Bug fixes

  • Disabled TLS in TLS warning (when using HTTPS proxies) for uvloop and newer Python versions -- by :user:lezgomatt.

    Related issues and pull requests on GitHub: #7686.

  • Fixed reading fragmented WebSocket messages when the payload was masked -- by :user:bdraco.

    The problem first appeared in 3.11.17

    Related issues and pull requests on GitHub: #10764.


3.11.17

Miscellaneous internal changes

  • Optimized web server performance when access logging is disabled by reducing time syscalls -- by :user:bdraco.

    Related issues and pull requests on GitHub: #10713.

  • Improved web server performance when connection can be reused -- by :user:bdraco.

    Related issues and pull requests on GitHub: #10714.

  • Improved performance of the WebSocket reader -- by :user:bdraco.

    Related issues and pull requests on GitHub: #10740.

... (truncated)

Changelog

Sourced from aiohttp's changelog.

3.11.18 (2025-04-20)

Bug fixes

  • Disabled TLS in TLS warning (when using HTTPS proxies) for uvloop and newer Python versions -- by :user:lezgomatt.

    Related issues and pull requests on GitHub: :issue:7686.

  • Fixed reading fragmented WebSocket messages when the payload was masked -- by :user:bdraco.

    The problem first appeared in 3.11.17

    Related issues and pull requests on GitHub: :issue:10764.


3.11.17 (2025-04-19)

Miscellaneous internal changes

  • Optimized web server performance when access logging is disabled by reducing time syscalls -- by :user:bdraco.

    Related issues and pull requests on GitHub: :issue:10713.

  • Improved web server performance when connection can be reused -- by :user:bdraco.

    Related issues and pull requests on GitHub: :issue:10714.

... (truncated)

Commits
  • 2be611a Release 3.11.18 (#10773)
  • 58b512c [PR #10770/a88a2436 backport][3.11] Increase benchmark timeout to 9 minutes i...
  • a003df3 [PR #10726/feff48d backport][3.11] Disable TLS in TLS warning for uvloop (#10...
  • f69333d [PR #10764/e0cc020 backport][3.11] Fix WebSocket reader with fragmented maske...
  • 83690e5 Increment version to 3.11.18.dev0 (#10758)
  • 11be7e2 Release 3.11.17 (#10756)
  • 0615314 [PR #10752/07590cd2 backport][3.11] Add a test to the WebSocket parser for se...
  • 8b9888d [PR #10749/d702fb30 backport][3.11] Add compressed binary WebSocket roundtrip...
  • 1d00bd2 [PR #10744/23d3ee06 backport][3.11] Refactor WebSocket reader to avoid freque...
  • 099cc0c [PR #10740/0d21d8d backport][3.11] Refactor WebSocket reader to avoid creatin...
  • Additional commits viewable in compare view

Updates attrs from 25.1.0 to 25.3.0

Commits

Updates botocore from 1.36.21 to 1.38.6

Commits

Updates certifi from 2025.1.31 to 2025.4.26

Commits
  • 275c9eb 2025.04.26 (#347)
  • 3788331 Bump actions/setup-python from 5.4.0 to 5.5.0 (#346)
  • 9d1f1b7 Bump actions/download-artifact from 4.1.9 to 4.2.1 (#344)
  • 96b97a5 Bump actions/upload-artifact from 4.6.1 to 4.6.2 (#343)
  • c054ed3 Bump peter-evans/create-pull-request from 7.0.7 to 7.0.8 (#342)
  • 44547fc Bump actions/download-artifact from 4.1.8 to 4.1.9 (#341)
  • 5ea5124 Bump actions/upload-artifact from 4.6.0 to 4.6.1 (#340)
  • 2f142b7 Bump peter-evans/create-pull-request from 7.0.6 to 7.0.7 (#339)
  • 80d2ebd Bump actions/setup-python from 5.3.0 to 5.4.0 (#337)
  • See full diff in compare view

Updates frozenlist from 1.5.0 to 1.6.0

Release notes

Sourced from frozenlist's releases.

1.6.0

Bug fixes

  • Stopped implicitly allowing the use of Cython pre-release versions when building the distribution package -- by :user:ajsanchezsanz and :user:markgreene74.

    Related commits on GitHub: :commit:41591f2.

Features

  • Implemented support for the free-threaded build of CPython 3.13 -- by :user:lysnikolaou.

    Related issues and pull requests on GitHub: #618.

  • Started building armv7l wheels -- by :user:bdraco.

    Related issues and pull requests on GitHub: #642.

Packaging updates and notes for downstreams

  • Stopped implicitly allowing the use of Cython pre-release versions when building the distribution package -- by :user:ajsanchezsanz and :user:markgreene74.

    Related commits on GitHub: :commit:41591f2.

  • Started building wheels for the free-threaded build of CPython 3.13 -- by :user:lysnikolaou.

    Related issues and pull requests on GitHub: #618.

  • The packaging metadata switched to including an SPDX license identifier introduced in :pep:639 -- by :user:cdce8p.

    Related issues and pull requests on GitHub: #639.

Contributor-facing changes

... (truncated)

Changelog

Sourced from frozenlist's changelog.

v1.6.0

(2025-04-17)

Bug fixes

  • Stopped implicitly allowing the use of Cython pre-release versions when building the distribution package -- by :user:ajsanchezsanz and :user:markgreene74.

    Related commits on GitHub: :commit:41591f2.

Features

  • Implemented support for the free-threaded build of CPython 3.13 -- by :user:lysnikolaou.

    Related issues and pull requests on GitHub: :issue:618.

  • Started building armv7l wheels -- by :user:bdraco.

    Related issues and pull requests on GitHub: :issue:642.

Packaging updates and notes for downstreams

  • Stopped implicitly allowing the use of Cython pre-release versions when building the distribution package -- by :user:ajsanchezsanz and :user:markgreene74.

    Related commits on GitHub: :commit:41591f2.

  • Started building wheels for the free-threaded build of CPython 3.13 -- by :user:lysnikolaou.

    Related issues and pull requests on GitHub: :issue:618.

  • The packaging metadata switched to including an SPDX license identifier introduced in :pep:639 -- by :user:cdce8p.

    Related issues and pull requests on GitHub: :issue:639.

... (truncated)

Commits
  • 9f4253c Fix towncrier head_line missing the leading v (#645)
  • 4c8207a Release 1.6.0 (#643)
  • 58aef99 Start building wheels on armv7l (#642)
  • d8e4a82 Use SPDX license expression (#639)
  • 57ce238 [pre-commit.ci] pre-commit autoupdate (#641)
  • f545c23 Implement support for the free-threaded build of CPython 3.13 (#618)
  • 4ee4583 Build(deps): Bump pypa/cibuildwheel from 2.23.1 to 2.23.2 (#640)
  • c28f32d Better organize lint and test dependencies (#636)
  • a611cc2 Build(deps): Bump pypa/cibuildwheel from 2.23.0 to 2.23.1 (#638)
  • bfa0cb1 Reduce number of coverage uploads needed (#637)
  • Additional commits viewable in compare view

Updates multidict from 6.1.0 to 6.4.3

Release notes

Sourced from multidict's releases.

6.4.3

Bug fixes

  • Fixed building the library in debug mode.

    Related issues and pull requests on GitHub: #1144.

  • Fixed custom PyType_GetModuleByDef() when non-heap type object was passed.

    Related issues and pull requests on GitHub: #1147.

Packaging updates and notes for downstreams

  • Added the ability to build in debug mode by setting :envvar:MULTIDICT_DEBUG_BUILD in the environment -- by :user:bdraco.

    Related issues and pull requests on GitHub: #1145.


6.4.2

Bug fixes

  • Fixed a segmentation fault when creating subclassed :py:class:~multidict.MultiDict objects on Python < 3.11 -- by :user:bdraco.

    The problem first appeared in 6.4.0

    Related issues and pull requests on GitHub: #1141.


6.4.1

No change release of 6.4.0 since the attestations failed to upload to GitHub


6.4.0

Bug fixes

... (truncated)

Changelog

Sourced from multidict's changelog.

6.4.3

(2025-04-10)

Bug fixes

  • Fixed building the library in debug mode.

    Related issues and pull requests on GitHub: :issue:1144.

  • Fixed custom PyType_GetModuleByDef() when non-heap type object was passed.

    Related issues and pull requests on GitHub: :issue:1147.

Packaging updates and notes for downstreams

  • Added the ability to build in debug mode by setting :envvar:MULTIDICT_DEBUG_BUILD in the environment -- by :user:bdraco.

    Related issues and pull requests on GitHub: :issue:1145.


6.4.2

(2025-04-09)

Bug fixes

  • Fixed a segmentation fault when creating subclassed :py:class:~multidict.MultiDict objects on Python < 3.11 -- by :user:bdraco.

    The problem first appeared in 6.4.0

    Related issues and pull requests on GitHub: :issue:1141.


... (truncated)

Commits

Updates propcache from 0.2.1 to 0.3.1

Release notes

Sourced from propcache's releases.

0.3.1

Bug fixes

  • Improved typing annotations, fixing some type errors under correct usage and improving typing robustness generally -- by :user:Dreamsorcerer.

    Related issues and pull requests on GitHub: #103.


0.3.0

Features

  • Implemented support for the free-threaded build of CPython 3.13 -- by :user:lysnikolaou.

    Related issues and pull requests on GitHub: #84.

Packaging updates and notes for downstreams

  • Started building wheels for the free-threaded build of CPython 3.13 -- by :user:lysnikolaou.

    Related issues and pull requests on GitHub: #84.

Contributor-facing changes

  • GitHub Actions CI/CD is now configured to manage caching pip-ecosystem dependencies using re-actors/cache-python-deps_ -- an action by :user:webknjaz that takes into account ABI stability and the exact version of Python runtime.

    .. _re-actors/cache-python-deps: https://github.com/marketplace/actions/cache-python-deps

    Related issues and pull requests on GitHub: #93.


Changelog

Sourced from propcache's changelog.

0.3.1

(2025-03-25)

Bug fixes

  • Improved typing annotations, fixing some type errors under correct usage and improving typing robustness generally -- by :user:Dreamsorcerer.

    Related issues and pull requests on GitHub: :issue:103.


0.3.0

(2025-02-20)

Features

  • Implemented support for the free-threaded build of CPython 3.13 -- by :user:lysnikolaou.

    Related issues and pull requests on GitHub: :issue:84.

Packaging updates and notes for downstreams

  • Started building wheels for the free-threaded build of CPython 3.13 -- by :user:lysnikolaou.

    Related issues and pull requests on GitHub: :issue:84.

Contributor-facing changes

  • GitHub Actions CI/CD is now configured to manage caching pip-ecosystem dependencies using re-actors/cache-python-deps_ -- an action by :user:webknjaz that takes into account ABI stability and the exact version of Python runtime.

... (truncated)

Commits

Updates sentry-sdk from 2.21.0 to 2.27.0

Release notes

Sourced from sentry-sdk's releases.

2.27.0

Various fixes & improvements

2.26.1

Various fixes & improvements

2.26.0

Various fixes & improvements

2.25.1

Various fixes & improvements

... (truncated)

Changelog

Sourced from sentry-sdk's changelog.

2.27.0

Various fixes & improvements

2.26.1

Various fixes & improvements

2.26.0

Various fixes & improvements

... (truncated)

Commits
  • 919bdea Update CHANGELOG.md
  • 049f2a0 release: 2.27.0
  • bbb41a3 Make sure to use the default decimal context in our code (#4231)
  • 2c3776c tests: Move aiohttp under toxgen (#4319)
  • 434e8af tests: Fix version picking in toxgen (#4323)
  • b96e2b6 fix(integrations): ASGI integration not capture transactions in Websocket (#4...
  • d1819c7 Make all relevant types public (#4315)
  • 11e2648 build(deps): bump codecov/codecov-action from 5.4.0 to 5.4.2 (#4318)
  • c361337 test(logs): Avoid failure when running with integrations enabled (#4316)
  • f3687fc feat(spans): Record flag evaluations as span attributes (#4280)
  • Additional commits viewable in compare view

Updates yarl from 1.18.3 to 1.20.0

Release notes

Sourced from yarl's releases.

1.20.0

Features

  • Implemented support for the free-threaded build of CPython 3.13 -- by :user:lysnikolaou.

    Related issues and pull requests on GitHub: #1456.

Packaging updates and notes for downstreams

  • Started building wheels for the free-threaded build of CPython 3.13 -- by :user:lysnikolaou.

    Related issues and pull requests on GitHub: #1456.


1.19.0

Bug fixes

  • Fixed entire name being re-encoded when using :py:meth:yarl.URL.with_suffix -- by :user:NTFSvolume.

    Related issues and pull requests on GitHub: #1468.

Features

  • Started building armv7l wheels for manylinux -- by :user:bdraco.

    Related issues and pull requests on GitHub: #1495.

Contributor-facing changes

  • GitHub Actions CI/CD is now configured to manage caching pip-ecosystem dependencies using re-actors/cache-python-deps_ -- an action by :user:webknjaz that takes into account ABI stability and the exact version of Python runtime.

    .. _re-actors/cache-python-deps: https://github.com/marketplace/actions/cache-python-deps

... (truncated)

Changelog

Sourced from yarl's changelog.

1.20.0

(2025-04-16)

Features

  • Implemented support for the free-threaded build of CPython 3.13 -- by :user:lysnikolaou.

    Related issues and pull requests on GitHub: :issue:1456.

Packaging updates and notes for downstreams

  • Started building wheels for the free-threaded build of CPython 3.13 -- by :user:lysnikolaou.

    Related issues and pull requests on GitHub: :issue:1456.


1.19.0

(2025-04-05)

Bug fixes

  • Fixed entire name being re-encoded when using :py:meth:yarl.URL.with_suffix -- by :user:NTFSvolume.

    Related issues and pull requests on GitHub: :issue:1468.

Features

  • Started building armv7l wheels for manylinux -- by :user:bdraco.

    Related issues and pull requests on GitHub: :issue:1495.

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the dependencies group with 10 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [aiohappyeyeballs](https://github.com/aio-libs/aiohappyeyeballs) | `2.4.6` | `2.6.1` |
| [aiohttp](https://github.com/aio-libs/aiohttp) | `3.11.12` | `3.11.18` |
| [attrs](https://github.com/sponsors/hynek) | `25.1.0` | `25.3.0` |
| [botocore](https://github.com/boto/botocore) | `1.36.21` | `1.38.6` |
| [certifi](https://github.com/certifi/python-certifi) | `2025.1.31` | `2025.4.26` |
| [frozenlist](https://github.com/aio-libs/frozenlist) | `1.5.0` | `1.6.0` |
| [multidict](https://github.com/aio-libs/multidict) | `6.1.0` | `6.4.3` |
| [propcache](https://github.com/aio-libs/propcache) | `0.2.1` | `0.3.1` |
| [sentry-sdk](https://github.com/getsentry/sentry-python) | `2.21.0` | `2.27.0` |
| [yarl](https://github.com/aio-libs/yarl) | `1.18.3` | `1.20.0` |



Updates `aiohappyeyeballs` from 2.4.6 to 2.6.1
- [Release notes](https://github.com/aio-libs/aiohappyeyeballs/releases)
- [Changelog](https://github.com/aio-libs/aiohappyeyeballs/blob/main/CHANGELOG.md)
- [Commits](aio-libs/aiohappyeyeballs@v2.4.6...v2.6.1)

Updates `aiohttp` from 3.11.12 to 3.11.18
- [Release notes](https://github.com/aio-libs/aiohttp/releases)
- [Changelog](https://github.com/aio-libs/aiohttp/blob/master/CHANGES.rst)
- [Commits](aio-libs/aiohttp@v3.11.12...v3.11.18)

Updates `attrs` from 25.1.0 to 25.3.0
- [Commits](https://github.com/sponsors/hynek/commits)

Updates `botocore` from 1.36.21 to 1.38.6
- [Commits](boto/botocore@1.36.21...1.38.6)

Updates `certifi` from 2025.1.31 to 2025.4.26
- [Commits](certifi/python-certifi@2025.01.31...2025.04.26)

Updates `frozenlist` from 1.5.0 to 1.6.0
- [Release notes](https://github.com/aio-libs/frozenlist/releases)
- [Changelog](https://github.com/aio-libs/frozenlist/blob/master/CHANGES.rst)
- [Commits](aio-libs/frozenlist@v1.5.0...v1.6.0)

Updates `multidict` from 6.1.0 to 6.4.3
- [Release notes](https://github.com/aio-libs/multidict/releases)
- [Changelog](https://github.com/aio-libs/multidict/blob/master/CHANGES.rst)
- [Commits](aio-libs/multidict@v6.1.0...v6.4.3)

Updates `propcache` from 0.2.1 to 0.3.1
- [Release notes](https://github.com/aio-libs/propcache/releases)
- [Changelog](https://github.com/aio-libs/propcache/blob/master/CHANGES.rst)
- [Commits](aio-libs/propcache@v0.2.1...v0.3.1)

Updates `sentry-sdk` from 2.21.0 to 2.27.0
- [Release notes](https://github.com/getsentry/sentry-python/releases)
- [Changelog](https://github.com/getsentry/sentry-python/blob/master/CHANGELOG.md)
- [Commits](getsentry/sentry-python@2.21.0...2.27.0)

Updates `yarl` from 1.18.3 to 1.20.0
- [Release notes](https://github.com/aio-libs/yarl/releases)
- [Changelog](https://github.com/aio-libs/yarl/blob/master/CHANGES.rst)
- [Commits](aio-libs/yarl@v1.18.3...v1.20.0)

---
updated-dependencies:
- dependency-name: aiohappyeyeballs
  dependency-version: 2.6.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: aiohttp
  dependency-version: 3.11.18
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: attrs
  dependency-version: 25.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: botocore
  dependency-version: 1.38.6
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: certifi
  dependency-version: 2025.4.26
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: frozenlist
  dependency-version: 1.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: multidict
  dependency-version: 6.4.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: propcache
  dependency-version: 0.3.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: sentry-sdk
  dependency-version: 2.27.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: yarl
  dependency-version: 1.20.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels May 1, 2025
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Jun 17, 2025

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot bot closed this Jun 17, 2025
@dependabot dependabot bot deleted the dependabot/pip/dependencies-e8ef579f91 branch June 17, 2025 17:45
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Pull requests that update Python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant