Skip to content

[pull] master from aio-libs:master#177

Merged
pull[bot] merged 2 commits intotj-python:masterfrom
aio-libs:master
Mar 20, 2025
Merged

[pull] master from aio-libs:master#177
pull[bot] merged 2 commits intotj-python:masterfrom
aio-libs:master

Conversation

@pull
Copy link

@pull pull bot commented Mar 20, 2025

See Commits and Changes for more details.


Created by pull[bot] (v2.0.0-alpha.1)

Can you help keep this open source service alive? 💖 Please sponsor : )

dependabot bot added 2 commits March 20, 2025 10:25
Bumps [actions/cache](https://github.com/actions/cache) from 4.2.2 to
4.2.3.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/actions/cache/releases">actions/cache's
releases</a>.</em></p>
<blockquote>
<h2>v4.2.3</h2>
<h2>What's Changed</h2>
<ul>
<li>Update to use <code>@​actions/cache</code> 4.0.3 package &amp;
prepare for new release by <a
href="https://github.com/salmanmkc"><code>@​salmanmkc</code></a> in <a
href="https://redirect.github.com/actions/cache/pull/1577">actions/cache#1577</a>
(SAS tokens for cache entries are now masked in debug logs)</li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/salmanmkc"><code>@​salmanmkc</code></a>
made their first contribution in <a
href="https://redirect.github.com/actions/cache/pull/1577">actions/cache#1577</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/actions/cache/compare/v4.2.2...v4.2.3">https://github.com/actions/cache/compare/v4.2.2...v4.2.3</a></p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/actions/cache/blob/main/RELEASES.md">actions/cache's
changelog</a>.</em></p>
<blockquote>
<h3>4.2.3</h3>
<ul>
<li>Bump <code>@actions/cache</code> to v4.0.3 (obfuscates SAS token in
debug logs for cache entries)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/actions/cache/commit/5a3ec84eff668545956fd18022155c47e93e2684"><code>5a3ec84</code></a>
Merge pull request <a
href="https://redirect.github.com/actions/cache/issues/1577">#1577</a>
from salmanmkc/salmanmkc/4-test</li>
<li><a
href="https://github.com/actions/cache/commit/7de21022a7b6824c106a9847befcbd8154b45b6a"><code>7de2102</code></a>
Update releases.md</li>
<li><a
href="https://github.com/actions/cache/commit/76d40dd347779762a1c829bbeeda5da4d81ca8c1"><code>76d40dd</code></a>
Update to use the latest version of the cache package to obfuscate the
SAS</li>
<li><a
href="https://github.com/actions/cache/commit/76dd5eb692f606c28d4b7a4ea7cfdffc926ba06a"><code>76dd5eb</code></a>
update cache with main</li>
<li><a
href="https://github.com/actions/cache/commit/8c80c27c5e4498d5675b05fb1eff96a56c593b06"><code>8c80c27</code></a>
new package</li>
<li><a
href="https://github.com/actions/cache/commit/45cfd0e7fffd1869ea4d5bfb54a464d825c1f742"><code>45cfd0e</code></a>
updates</li>
<li><a
href="https://github.com/actions/cache/commit/edd449b9cf39c2a20dc7c3d505ff6dc193c48a02"><code>edd449b</code></a>
updated cache with latest changes</li>
<li><a
href="https://github.com/actions/cache/commit/0576707e373f92196b81695442ed3f80c347f9c7"><code>0576707</code></a>
latest test before pr</li>
<li><a
href="https://github.com/actions/cache/commit/3105dc9754dd9cd935ffcf45c091ed2cadbf42b9"><code>3105dc9</code></a>
update</li>
<li><a
href="https://github.com/actions/cache/commit/9450d42d15022999ad2fa60a8b91f01fc92a0563"><code>9450d42</code></a>
mask</li>
<li>Additional commits viewable in <a
href="https://github.com/actions/cache/compare/v4.2.2...v4.2.3">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=actions/cache&package-manager=github_actions&previous-version=4.2.2&new-version=4.2.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [setuptools](https://github.com/pypa/setuptools) from 76.1.0 to
77.0.1.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/pypa/setuptools/blob/main/NEWS.rst">setuptools's
changelog</a>.</em></p>
<blockquote>
<h1>v77.0.1</h1>
<h2>Bugfixes</h2>
<ul>
<li>Manually fix news fragment entries causing CI to crash when building
docs. (<a
href="https://redirect.github.com/pypa/setuptools/issues/4891">#4891</a>)</li>
</ul>
<h1>v77.0.0</h1>
<h2>Features</h2>
<ul>
<li>Added initial support for license expression (PEP :pep:<code>639
&lt;639#add-license-expression-field&gt;</code>). -- by
:user:<code>cdce8p</code> (<a
href="https://redirect.github.com/pypa/setuptools/issues/4706">#4706</a>)</li>
<li>Store <code>License-File</code>\s in
<code>.dist-info/licenses</code> subfolder and added support for
recursive globs for <code>license_files</code> (PEP :pep:<code>639
&lt;639#add-license-expression-field&gt;</code>). -- by
:user:<code>cdce8p</code> (<a
href="https://redirect.github.com/pypa/setuptools/issues/4728">#4728</a>)</li>
<li>Bump core metadata version to <code>2.4</code>. -- by
:user:<code>cdce8p</code> (<a
href="https://redirect.github.com/pypa/setuptools/issues/4830">#4830</a>)</li>
<li>Updated vendored copy of <code>wheel</code> to <code>v0.45.1</code>.
(<a
href="https://redirect.github.com/pypa/setuptools/issues/4869">#4869</a>)</li>
</ul>
<h2>Deprecations and Removals</h2>
<ul>
<li>Added initial implementation of :pep:<code>639</code>.
Users relying on pre- :pep:<code>639</code> implementation details
(like precise license file paths inside <code>dist-info</code>
directory)
may need to adjust their code base to avoid problems.
Deprecations and stronger validation were also introduced (<a
href="https://redirect.github.com/pypa/setuptools/issues/4829">#4829</a>).</li>
<li>Added exception (or warning) when deprecated license classifiers are
used,
according to PEP :pep:<code>639
&lt;639#deprecate-license-classifiers&gt;</code>. (<a
href="https://redirect.github.com/pypa/setuptools/issues/4833">#4833</a>)</li>
<li>Deprecated <code>tools.setuptools.license-files</code> in favor of
<code>project.license-files</code>
and added exception if <code>project.license-files</code> and
<code>tools.setuptools.license-files</code>
are used together. -- by :user:<code>cdce8p</code> (<a
href="https://redirect.github.com/pypa/setuptools/issues/4837">#4837</a>)</li>
<li>Deprecated <code>project.license</code> as a TOML table in
<code>pyproject.toml</code>. Users are expected to move towards using
<code>project.license-files</code> and/or SPDX expressions (as strings)
in
<code>pyproject.license</code>.
See PEP :pep:<code>639
&lt;639#deprecate-license-key-table-subkeys&gt;</code>. (<a
href="https://redirect.github.com/pypa/setuptools/issues/4840">#4840</a>)</li>
<li>Added simple validation for given glob patterns in
<code>license-files</code>:
a warning will be generated if no file is matched.
Invalid glob patterns can raise an exception.
-- thanks :user:<code>cdce8p</code> for contributions. (<a
href="https://redirect.github.com/pypa/setuptools/issues/4838">#4838</a>)</li>
</ul>
<h2>Misc</h2>
<ul>
<li><a
href="https://redirect.github.com/pypa/setuptools/issues/4734">#4734</a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/pypa/setuptools/commit/f57746186b1476fac7701490f3e8c23bd0eea491"><code>f577461</code></a>
Bump version: 77.0.0 → 77.0.1</li>
<li><a
href="https://github.com/pypa/setuptools/commit/85677af8f6922bed5c2f2c6608749a4771c94e56"><code>85677af</code></a>
Manually fix news fragment entries (<a
href="https://redirect.github.com/pypa/setuptools/issues/4891">#4891</a>)</li>
<li><a
href="https://github.com/pypa/setuptools/commit/ce2e283acfef4d87eee63b5f745f81fc0904342c"><code>ce2e283</code></a>
Change news fragment name to imply patch version bump</li>
<li><a
href="https://github.com/pypa/setuptools/commit/76531493d84c27461b73589e6a4e54c56d0cd6fb"><code>7653149</code></a>
Add news fragments</li>
<li><a
href="https://github.com/pypa/setuptools/commit/7db26a1a5148ef57c8471a410f57258cad11b336"><code>7db26a1</code></a>
Manually fix news fragment entries</li>
<li><a
href="https://github.com/pypa/setuptools/commit/5d58b454a5f720f9afa09b47fe15913d0bef8cc4"><code>5d58b45</code></a>
Bump version: 76.1.0 → 77.0.0</li>
<li><a
href="https://github.com/pypa/setuptools/commit/f49d58939a249bf3571992e18a7c237eea27d5f7"><code>f49d589</code></a>
Update URL in warning</li>
<li><a
href="https://github.com/pypa/setuptools/commit/dee0a5e7e41b0eedc2bd4f754098140044748482"><code>dee0a5e</code></a>
Add news fragment for PEP 639 marking as 'breaking'</li>
<li><a
href="https://github.com/pypa/setuptools/commit/74725de239297dc54da770c612981845ad339b34"><code>74725de</code></a>
Update vendored copy of wheel (<a
href="https://redirect.github.com/pypa/setuptools/issues/4869">#4869</a>)</li>
<li><a
href="https://github.com/pypa/setuptools/commit/5585c1c1f603e04ad778fc72066fad45c7366233"><code>5585c1c</code></a>
Add news fragment</li>
<li>Additional commits viewable in <a
href="https://github.com/pypa/setuptools/compare/v76.1.0...v77.0.1">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=setuptools&package-manager=pip&previous-version=76.1.0&new-version=77.0.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@pull pull bot added the ⤵️ pull label Mar 20, 2025
@pull pull bot merged commit 8fbf5ca into tj-python:master Mar 20, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants