summary refs log tree commit diff
Commit message (Collapse)AuthorAgeFilesLines
* Use create_and_send_new_client_events for bulk sending emma/patchesRory&2025-08-161-77/+27
|
* Further optimisation attemptsRory&2025-08-161-14/+25
|
* Try to optimise bulk sending some moreRory&2025-08-161-4/+38
|
* Clarify assertsRory&2025-08-161-1/+1
|
* Temporarily disable go in flakeRory&2025-08-161-1/+1
|
* Add bulk send events endpointRory&2025-08-162-1/+119
|
* RequestRatelimiter: expose can_do_actionRory&2025-08-161-0/+75
|
* Devenv: use postgres 17Rory&2025-08-161-0/+1
|
* Fix gitignore to ignore .venvRory&2025-08-161-0/+1
|
* Fix nix flakeRory&2025-08-162-39/+29
|
* Fix pagination with large gaps of rejected eventsNicolas Werner2025-08-161-2/+11
|
* fix: Always recheck `/messages` pagination data if a backfill might have ↵Jason Little2025-08-162-37/+34
| | | | been needed (#28)
* Expose tombstone in room admin apiRory&2025-08-163-2/+40
|
* Use parse_boolean for unredacted contentRory&2025-08-161-3/+2
|
* Log policy server rejected eventsRory&2025-08-161-0/+7
|
* Log entire room if accessibility check failsRory&2025-08-161-0/+4
| | | | Signed-off-by: Rory& <root@rory.gay>
* Add too much logging to room summary over federationRory&2025-08-161-4/+36
| | | | Signed-off-by: Rory& <root@rory.gay>
* Hotfix: ignore rejected events in delayed_eventsRory&2025-08-161-1/+6
|
* Fast auth linksRory&2025-08-162-4/+47
|
* Add security release notesAndrew Morgan2025-08-121-1/+3
|
* 1.136.0Andrew Morgan2025-08-124-2/+16
|
* Make the Make Room Admin API choose to puppet the room creator in v12 rooms ↵Andrew Morgan2025-08-123-1/+35
| | | | (#18805)
* 1.136.0rc2Devon Hudson2025-08-115-3/+33
|
* Fix hydra testsDevon Hudson2025-08-111-1/+0
|
* Add missing additional_creators fieldDevon Hudson2025-08-111-0/+1
|
* Update impl of `_calculate_upgraded_room_creation_content`Andrew Morgan2025-08-111-0/+6
|
* Add `HydraV11` to known room versionsAndrew Morgan2025-08-111-0/+1
|
* Update MSC4293 redact logic for hydra (#80)Devon Hudson2025-08-112-11/+27
|
* Add a parameter to allow room upgrades to auto join local users (#83)Erik Johnston2025-08-114-10/+232
|
* Update changelogDevon Hudson2025-08-111-1/+0
|
* Set type of `user_id` on `is_server_admin` to str (#18786)Andrew Morgan2025-08-111-0/+1
|
* Update changelogDevon Hudson2025-08-110-0/+0
|
* Remove unnecessary extra deferredDevon Hudson2025-08-111-16/+12
|
* Use internal function to appease olddeps testDevon Hudson2025-08-111-14/+20
|
* Fix olddeps & mypy errorsDevon Hudson2025-08-111-1/+1
|
* Fix FakeClock to match new sleep signatureDevon Hudson2025-08-111-2/+2
|
* Fix broken testDevon Hudson2025-08-111-0/+1
|
* Support for room version 12Kegan Dougal2025-08-1128-187/+2173
|
* Update changelogDevon Hudson2025-08-072-1/+1
|
* Set type of `user_id` on `is_server_admin` to str (#18786)Andrew Morgan2025-08-077-10/+8
|
* Update changelogDevon Hudson2025-08-063-2/+2
|
* Merge branch 'develop' into release-v1.136Devon Hudson2025-08-0637-363/+1128
|\
| * Revert "Fix `LaterGauge` metrics to collect from all servers (#18751)" (#18789)Eric Eastwood2025-08-0614-241/+141
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This PR reverts https://github.com/element-hq/synapse/pull/18751 ### Why revert? @reivilibre [found](https://matrix.to/#/!vcyiEtMVHIhWXcJAfl:sw1v.org/$u9OEmMxaFYUzWHhCk1A_r50Y0aGrtKEhepF7WxWJkUA?via=matrix.org&via=node.marinchik.ink&via=element.io) that our CI was failing in bizarre ways (thanks for stepping up to dive into this :bow:). Examples: - `twisted.internet.error.ProcessTerminated: A process has ended with a probable error condition: process ended by signal 9.` - `twisted.internet.error.ProcessTerminated: A process has ended with a probable error condition: process ended by signal 15.` <details> <summary>More detailed part of the log</summary> https://github.com/element-hq/synapse/actions/runs/16758038107/job/47500520633#step:9:6809 ``` tests.util.test_wheel_timer.WheelTimerTestCase.test_single_insert_fetch =============================================================================== Error: Traceback (most recent call last): File "/home/runner/.cache/pypoetry/virtualenvs/matrix-synapse-pswDeSvb-py3.9/lib/python3.9/site-packages/twisted/trial/_dist/disttrial.py", line 371, in task await worker.run(case, result) File "/home/runner/.cache/pypoetry/virtualenvs/matrix-synapse-pswDeSvb-py3.9/lib/python3.9/site-packages/twisted/trial/_dist/worker.py", line 305, in run return await self.callRemote(workercommands.Run, testCase=testCaseId) # type: ignore[no-any-return] File "/home/runner/.cache/pypoetry/virtualenvs/matrix-synapse-pswDeSvb-py3.9/lib/python3.9/site-packages/twisted/internet/defer.py", line 1187, in __iter__ yield self File "/home/runner/.cache/pypoetry/virtualenvs/matrix-synapse-pswDeSvb-py3.9/lib/python3.9/site-packages/twisted/internet/defer.py", line 1092, in _runCallbacks current.result = callback( # type: ignore[misc] File "/home/runner/.cache/pypoetry/virtualenvs/matrix-synapse-pswDeSvb-py3.9/lib/python3.9/site-packages/twisted/protocols/amp.py", line 1968, in _massageError error.trap(RemoteAmpError) File "/home/runner/.cache/pypoetry/virtualenvs/matrix-synapse-pswDeSvb-py3.9/lib/python3.9/site-packages/twisted/python/failure.py", line 431, in trap self.raiseException() File "/home/runner/.cache/pypoetry/virtualenvs/matrix-synapse-pswDeSvb-py3.9/lib/python3.9/site-packages/twisted/python/failure.py", line 455, in raiseException raise self.value.with_traceback(self.tb) twisted.internet.error.ProcessTerminated: A process has ended with a probable error condition: process ended by signal 9. tests.util.test_macaroons.MacaroonGeneratorTestCase.test_guest_access_token ------------------------------------------------------------------------------- Ran 4325 tests in 669.321s FAILED (skips=159, errors=62, successes=4108) while calling from thread Traceback (most recent call last): File "/home/runner/.cache/pypoetry/virtualenvs/matrix-synapse-pswDeSvb-py3.9/lib/python3.9/site-packages/twisted/internet/base.py", line 1064, in runUntilCurrent f(*a, **kw) File "/home/runner/.cache/pypoetry/virtualenvs/matrix-synapse-pswDeSvb-py3.9/lib/python3.9/site-packages/twisted/internet/base.py", line 790, in stop raise error.ReactorNotRunning("Can't stop reactor that isn't running.") twisted.internet.error.ReactorNotRunning: Can't stop reactor that isn't running. joining disttrial worker #0 failed Traceback (most recent call last): File "/home/runner/.cache/pypoetry/virtualenvs/matrix-synapse-pswDeSvb-py3.9/lib/python3.9/site-packages/twisted/internet/defer.py", line 1853, in _inlineCallbacks result = context.run( File "/home/runner/.cache/pypoetry/virtualenvs/matrix-synapse-pswDeSvb-py3.9/lib/python3.9/site-packages/twisted/python/failure.py", line 467, in throwExceptionIntoGenerator return g.throw(self.value.with_traceback(self.tb)) File "/home/runner/.cache/pypoetry/virtualenvs/matrix-synapse-pswDeSvb-py3.9/lib/python3.9/site-packages/twisted/trial/_dist/worker.py", line 406, in exit await endDeferred File "/home/runner/.cache/pypoetry/virtualenvs/matrix-synapse-pswDeSvb-py3.9/lib/python3.9/site-packages/twisted/internet/defer.py", line 1187, in __iter__ yield self twisted.internet.error.ProcessTerminated: A process has ended with a probable error condition: process ended by signal 15. ``` </details> With more debugging (thanks @devonh for also stepping in as maintainer), we were finding that the CI was consistently failing at `test_exposed_to_prometheus` which was a bit of smoke because of all of the [metrics changes](https://github.com/element-hq/synapse/issues/18592) that were merged recently. Locally, although I wasn't able to reproduce the bizarre errors, I could easily see increased memory usage (~20GB vs ~2GB) and the `test_exposed_to_prometheus` test taking a while to complete when running a full test run (`SYNAPSE_TEST_LOG_LEVEL=INFO poetry run trial tests`). <img width="1485" height="78" alt="Lots of memory usage" src="https://github.com/user-attachments/assets/811e2a96-75e5-4a3c-966c-00dc0512cea9" /> After updating `test_exposed_to_prometheus` to dump the `latest_metrics_response = generate_latest(REGISTRY)`, I could see that it's a massive 3.2GB response. Inspecting the contents, we can see 4.1M (4,137,123) entries for just `synapse_background_update_status{server_name="test"} 3.0` which is a `LaterGauge`. I don't think we have 4.1M test cases so it's also unclear why we end up with so many samples but it does make sense that we do see a lot of duplicates because each `HomeserverTestCase` will create a homeserver for each test case that will `LaterGauge.register_hook(...)` (part of the https://github.com/element-hq/synapse/pull/18751 changes). `tests/storage/databases/main/test_metrics.py` ```python latest_metrics_response = generate_latest(REGISTRY) with open("/tmp/synapse-test-metrics", "wb") as f: f.write(latest_metrics_response) ``` After reverting the https://github.com/element-hq/synapse/pull/18751 changes, running the full test suite locally doesn't result in memory spikes and seems to run normally. ### Dev notes Discussion in the [`#synapse-dev:matrix.org`](https://matrix.to/#/!vcyiEtMVHIhWXcJAfl:sw1v.org/$vkMATs04yqZggVVd6Noop5nU8M2DVoTkrAWshw7u1-w?via=matrix.org&via=node.marinchik.ink&via=element.io) room. ### Pull Request Checklist <!-- Please read https://element-hq.github.io/synapse/latest/development/contributing_guide.html before submitting your pull request --> * [x] Pull request is based on the develop branch * [ ] Pull request includes a [changelog file](https://element-hq.github.io/synapse/latest/development/contributing_guide.html#changelog). The entry should: - Be a short description of your change which makes sense to users. "Fixed a bug that prevented receiving messages from other servers." instead of "Moved X method from `EventStore` to `EventWorkerStore`.". - Use markdown where necessary, mostly for `code blocks`. - End with either a period (.) or an exclamation mark (!). - Start with a capital letter. - Feel free to credit yourself, by adding a sentence "Contributed by @github_username." or "Contributed by [Your Name]." to the end of the entry. * [ ] [Code style](https://element-hq.github.io/synapse/latest/code_style.html) is correct (run the [linters](https://element-hq.github.io/synapse/latest/development/contributing_guide.html#run-the-linters))
| * Implement the push rules for experimental MSC4306: Thread Subscriptions. ↵reivilibre2025-08-0612-28/+404
| | | | | | | | | | | | | | | | | | | | | | | | (#18762) Follows: #18756 Implements: MSC4306 --------- Signed-off-by: Olivier 'reivilibre <oliverw@matrix.org> Co-authored-by: Andrew Morgan <1342360+anoadragon453@users.noreply.github.com>
| * Update implementation of MSC4306: Thread Subscriptions to include automatic ↵reivilibre2025-08-0514-99/+587
| | | | | | | | | | | | | | | | | | | | | | | | subscription conflict prevention as introduced in later drafts. (#18756) Follows: #18674 Implements new drafts of MSC4306 --------- Signed-off-by: Olivier 'reivilibre <oliverw@matrix.org> Co-authored-by: Eric Eastwood <erice@element.io>
* | Update changelogDevon Hudson2025-08-051-1/+1
| |
* | Update changelogDevon Hudson2025-08-052-2/+1
| |
* | Merge branch 'develop' into release-v1.136Devon Hudson2025-08-0514-141/+241
|\|
| * Fix `LaterGauge` metrics to collect from all servers (#18751)Eric Eastwood2025-08-0514-141/+241
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Fix `LaterGauge` metrics to collect from all servers Follow-up to https://github.com/element-hq/synapse/pull/18714 Previously, our `LaterGauge` metrics did include the `server_name` label as expected but we were only seeing the last server being reported in some cases. Any `LaterGauge` that we were creating multiple times was only reporting the last instance. This PR updates all `LaterGauge` to be created once and then we use `LaterGauge.register_hook(...)` to add in the metric callback as before. This works now because we store a list of callbacks instead of just one. I noticed this problem thanks to some [tests in the Synapse Pro for Small Hosts](https://github.com/element-hq/synapse-small-hosts/pull/173) repo that sanity check all metrics to ensure that we can see each metric includes data from multiple servers. ### Testing strategy 1. This is only noticeable when you run multiple Synapse instances in the same process. 1. TODO (see test that was added) ### Dev notes Previous non-global `LaterGauge`: ``` synapse_federation_send_queue_xxx synapse_federation_transaction_queue_pending_destinations synapse_federation_transaction_queue_pending_pdus synapse_federation_transaction_queue_pending_edus synapse_handlers_presence_user_to_current_state_size synapse_handlers_presence_wheel_timer_size synapse_notifier_listeners synapse_notifier_rooms synapse_notifier_users synapse_replication_tcp_resource_total_connections synapse_replication_tcp_command_queue synapse_background_update_status synapse_federation_known_servers synapse_scheduler_running_tasks ``` ### Pull Request Checklist <!-- Please read https://element-hq.github.io/synapse/latest/development/contributing_guide.html before submitting your pull request --> * [x] Pull request is based on the develop branch * [x] Pull request includes a [changelog file](https://element-hq.github.io/synapse/latest/development/contributing_guide.html#changelog). The entry should: - Be a short description of your change which makes sense to users. "Fixed a bug that prevented receiving messages from other servers." instead of "Moved X method from `EventStore` to `EventWorkerStore`.". - Use markdown where necessary, mostly for `code blocks`. - End with either a period (.) or an exclamation mark (!). - Start with a capital letter. - Feel free to credit yourself, by adding a sentence "Contributed by @github_username." or "Contributed by [Your Name]." to the end of the entry. * [x] [Code style](https://element-hq.github.io/synapse/latest/code_style.html) is correct (run the [linters](https://element-hq.github.io/synapse/latest/development/contributing_guide.html#run-the-linters))
* | Update changelogDevon Hudson2025-08-051-10/+6
| |
* | 1.136.0rc1Devon Hudson2025-08-0540-38/+72
|/
* Prevent "Move labelled issues to correct projects" GitHub Actions workflow ↵Andrew Morgan2025-08-052-0/+5
| | | | from failing when an issue is already on the project board (#18755)
* Bump minimum supported rust version to 1.82.0 (#18757)Andrew Morgan2025-08-052-1/+2
|
* Make `.sleep(..)` return a coroutine (#18772)Erik Johnston2025-08-057-22/+16
| | | | | | | | This helps ensure that mypy can catch places where we don't await on it, like in #18763. --------- Co-authored-by: Eric Eastwood <erice@element.io>
* Improve order of validation and ratelimiting in room creation (#18723)Eric Eastwood2025-08-042-31/+33
| | | | Spawning from looking at this stuff while reviewing https://github.com/element-hq/synapse/pull/18721
* Stabilise MAS integration (#18759)Quentin Gliech2025-08-0432-223/+1608
| | | | | | | | | | | | | | | | | | | | | | | | | | This can be reviewed commit by commit There are a few improvements over the experimental support: - authorisation of Synapse <-> MAS requests is simplified, with a single shared secret, removing the need for provisioning a client on the MAS side - the tests actually spawn a real server, allowing us to test the rust introspection layer - we now check that the device advertised in introspection actually exist, making it so that when a user logs out, the tokens are immediately invalidated, even if the cache doesn't expire - it doesn't rely on discovery anymore, rather on a static endpoint base. This means users don't have to override the introspection endpoint to avoid internet roundtrips - it doesn't depend on `authlib` anymore, as we simplified a lot the calls done from Synapse to MAS We still have to update the MAS documentation about the Synapse setup, but that can be done later. --------- Co-authored-by: reivilibre <oliverw@element.io>
* Document that there can be multiple workers handling the receipts stream ↵Ben Banfield-Zanin2025-08-042-3/+5
| | | | (#18760)
* Improve device lists documentation (#18761)Ben Banfield-Zanin2025-08-042-3/+4
|
* Make room upgrades faster for rooms with many bans (#18574)Erik Johnston2025-08-045-25/+155
| | | | | | | | | | | | | We do this by a) not pulling out all membership events, and b) batch inserting bans. One blocking concern is that this bypasses the `update_membership` function, which otherwise all other membership events go via. In this case it's fine (having audited what it is doing), but I'm hesitant to set the precedent of bypassing it, given it has a lot of logic in there. --------- Co-authored-by: Eric Eastwood <erice@element.io>
* Update metrics linting to be able to handle custom metrics (#18733)Eric Eastwood2025-08-0110-35/+293
| | | Part of https://github.com/element-hq/synapse/issues/18592
* Fix cache metrics to collect from all servers (#18748)Eric Eastwood2025-08-013-22/+143
| | | | | | | | | | | | | | | | | | Follow-up to https://github.com/element-hq/synapse/pull/18604 Previously, our cache metrics did include the `server_name` label as expected but we were only seeing the last server being reported. This was caused because we would `CACHE_METRIC_REGISTRY.register_hook(metric_name, metric.collect)` where the `metric_name` only took into account the cache name so it would be overwritten every time we spawn a new server. This PR updates the register logic to include the `server_name` so we have a hook for every cache on every server as expected. I noticed this problem thanks to some [tests in the Synapse Pro for Small Hosts](https://github.com/element-hq/synapse-small-hosts/pull/173) repo that sanity check all metrics to ensure that we can see each metric includes data from multiple servers.
* Add missing `await` to `sleep` calls (#18763)Andrew Morgan2025-08-013-2/+3
|
* Merge branch 'master' into developAndrew Morgan2025-08-013-1/+14
|\
| * 1.135.0Andrew Morgan2025-08-013-1/+14
| |
* | Run `cargo update`Andrew Morgan2025-07-311-353/+193
| |
* | Fix `Failed to stop metrics` warnings in request metrics (#18753)Eric Eastwood2025-07-312-1/+1
| | | | | | | | | | | | | | | | | | | | ``` Failed to stop metrics: TypeError("prometheus_client.metrics.MetricWrapperBase.labels() got multiple values for keyword argument 'server_name'") ``` Noticed while running and debugging some tests. This bug was introduced in https://github.com/element-hq/synapse/pull/18724
* | Bump tokio from 1.46.1 to 1.47.0 (#18740)dependabot[bot]2025-07-301-7/+17
| |
* | Bump phonenumbers from 9.0.9 to 9.0.10 (#18741)dependabot[bot]2025-07-301-3/+3
| |
* | Bump ruff from 0.12.4 to 0.12.5 (#18742)dependabot[bot]2025-07-302-21/+21
| |
* | Bump sentry-sdk from 2.32.0 to 2.33.2 (#18745)dependabot[bot]2025-07-301-3/+3
| |
* | Bump mypy-zope from 1.0.12 to 1.0.13 (#18744)dependabot[bot]2025-07-301-4/+4
| |
* | Bump gitpython from 3.1.44 to 3.1.45 (#18743)dependabot[bot]2025-07-301-25/+26
| |
* | Allow suspended users to be auto-joined to server notice rooms (#18750)Andrew Morgan2025-07-305-54/+309
| |
* | Fix trailing whitespace in build_rust.py, from #18700Andrew Morgan2025-07-301-1/+1
| |
* | Minor improvements to README.rst (#18700)Strac Consulting Engineers Pty Ltd2025-07-303-20/+20
| |
* | Merge branch 'release-v1.135' into developAndrew Morgan2025-07-3015-58/+247
|\|
| * Linkify GitHub PR ID in changelogAndrew Morgan2025-07-301-1/+1
| |
| * 1.135.0rc2Andrew Morgan2025-07-305-3/+20
| |
| * Improve performance of `is_server_admin` by adding a cache (#18747)Andrew Morgan2025-07-303-5/+10
| | | | | | | | Fixes https://github.com/element-hq/synapse/issues/18738
| * Fix deactivation running off the main process (#18716)Quentin Gliech2025-07-2412-52/+219
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Best reviewed commit by commit. With the new dedicated MAS API (https://github.com/element-hq/synapse/pull/18520), it's possible that deactivation starts off the main process, which was not possible because of a few calls. I basically looked at everything that the deactivation handler was doing, reviewed whether it could run on workers or not, and find a workaround when possible --------- Co-authored-by: Eric Eastwood <erice@element.io>
* | Work around `twisted.protocols.amp.TooLong` error by reducing logging in ↵reivilibre2025-07-303-147/+173
| | | | | | | | | | | | | | | | | | | | | | some tests. (#18736) Part of: https://github.com/element-hq/synapse/issues/18537 Works around: https://github.com/twisted/twisted/issues/12482 --------- Signed-off-by: Olivier 'reivilibre <oliverw@matrix.org>
* | Use `twisted.internet.testing` module in tests instead of deprecated ↵reivilibre2025-07-30202-201/+202
| | | | | | | | | | | | | | | | | | `twisted.test.proto_helpers`. (#18728) Follows: #18727 --------- Signed-off-by: Olivier 'reivilibre <oliverw@matrix.org>
* | Remove some obsolete Twisted version checks. (#18729)reivilibre2025-07-303-62/+5
| | | | | | | | | | | | Follows: #18727 --------- Signed-off-by: Olivier 'reivilibre <oliverw@matrix.org>
* | Remove obsolete `/send_event` replication endpoint. (#18730)reivilibre2025-07-304-168/+1
| | | | | | | | | | Fixes: #18441 Signed-off-by: Olivier 'reivilibre <oliverw@matrix.org>
* | Refactor `Histogram` metrics to be homeserver-scoped (#18724)Eric Eastwood2025-07-2929-89/+262
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bulk refactor `Histogram` metrics to be homeserver-scoped. We also add lints to make sure that new `Histogram` metrics don't sneak in without using the `server_name` label (`SERVER_NAME_LABEL`). Part of https://github.com/element-hq/synapse/issues/18592 ### Testing strategy 1. Add the `metrics` listener in your `homeserver.yaml` ```yaml listeners: # This is just showing how to configure metrics either way # # `http` `metrics` resource - port: 9322 type: http bind_addresses: ['127.0.0.1'] resources: - names: [metrics] compress: false # `metrics` listener - port: 9323 type: metrics bind_addresses: ['127.0.0.1'] ``` 1. Start the homeserver: `poetry run synapse_homeserver --config-path homeserver.yaml` 1. Fetch `http://localhost:9322/_synapse/metrics` and/or `http://localhost:9323/metrics` 1. Observe response includes the TODO metrics with the `server_name` label ### Todo - [x] Wait for https://github.com/element-hq/synapse/pull/18656 to merge ### Dev notes ``` LoggingDatabaseConnection make_conn make_pool make_fake_db_pool ``` ### Pull Request Checklist <!-- Please read https://element-hq.github.io/synapse/latest/development/contributing_guide.html before submitting your pull request --> * [x] Pull request is based on the develop branch * [x] Pull request includes a [changelog file](https://element-hq.github.io/synapse/latest/development/contributing_guide.html#changelog). The entry should: - Be a short description of your change which makes sense to users. "Fixed a bug that prevented receiving messages from other servers." instead of "Moved X method from `EventStore` to `EventWorkerStore`.". - Use markdown where necessary, mostly for `code blocks`. - End with either a period (.) or an exclamation mark (!). - Start with a capital letter. - Feel free to credit yourself, by adding a sentence "Contributed by @github_username." or "Contributed by [Your Name]." to the end of the entry. * [x] [Code style](https://element-hq.github.io/synapse/latest/code_style.html) is correct (run the [linters](https://element-hq.github.io/synapse/latest/development/contributing_guide.html#run-the-linters))
* | Resolve breaking change to `run_as_background_process` in module API (#18737)Eric Eastwood2025-07-294-6/+137
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Fix https://github.com/element-hq/synapse/issues/18735 In https://github.com/element-hq/synapse/pull/18670, we updated `run_as_background_process` to add a `server_name` argument. Because this function is directly exported from the Synapse module API, this is a breaking change to any downstream Synapse modules that use `run_as_background_process`. This PR shims and deprecates the existing `run_as_background_process(...)` for modules by providing a stub `server_name` value and introduces a new `ModuleApi.run_as_background_process(...)` that covers the `server_name` logic automagically.
* | Allow admins to see policy server-flagged events (#18585)Travis Ralston2025-07-2913-13/+356
| |
* | Refactor `LaterGauge` metrics to be homeserver-scoped (#18714)Eric Eastwood2025-07-2913-103/+142
| | | | | | | | Part of https://github.com/element-hq/synapse/issues/18592
* | MSC4306: expose feature in the client version (#18722)Benjamin Bouvier2025-07-292-0/+3
| |
* | Refactor `GaugeBucketCollector` metrics to be homeserver-scoped (#18715)Eric Eastwood2025-07-294-29/+97
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Refactor `GaugeBucketCollector` metrics to be homeserver-scoped Part of https://github.com/element-hq/synapse/issues/18592 ### Testing strategy 1. Add the `metrics` listener in your `homeserver.yaml` ```yaml listeners: # This is just showing how to configure metrics either way # # `http` `metrics` resource - port: 9322 type: http bind_addresses: ['127.0.0.1'] resources: - names: [metrics] compress: false # `metrics` listener - port: 9323 type: metrics bind_addresses: ['127.0.0.1'] ``` 1. Start the homeserver: `poetry run synapse_homeserver --config-path homeserver.yaml` 1. Fetch `http://localhost:9322/_synapse/metrics` and/or `http://localhost:9323/metrics` 1. Adjust the number of [`msecs` in the `looping_call` so that `_read_forward_extremities`](https://github.com/element-hq/synapse/blob/a82b8a966a7dbe218cb788548683a83ec404e468/synapse/storage/databases/main/metrics.py#L79) runs immediately instead of after an hour. 1. Observe response includes the `synapse_forward_extremities` and `synapse_excess_extremity_events` metrics with the `server_name` label
* | Refactor `Gauge` metrics to be homeserver-scoped (#18725)Eric Eastwood2025-07-2929-88/+234
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bulk refactor `Gauge` metrics to be homeserver-scoped. We also add lints to make sure that new `Gauge` metrics don't sneak in without using the `server_name` label (`SERVER_NAME_LABEL`). Part of https://github.com/element-hq/synapse/issues/18592 ### Testing strategy 1. Add the `metrics` listener in your `homeserver.yaml` ```yaml listeners: # This is just showing how to configure metrics either way # # `http` `metrics` resource - port: 9322 type: http bind_addresses: ['127.0.0.1'] resources: - names: [metrics] compress: false # `metrics` listener - port: 9323 type: metrics bind_addresses: ['127.0.0.1'] ``` 1. Start the homeserver: `poetry run synapse_homeserver --config-path homeserver.yaml` 1. Fetch `http://localhost:9322/_synapse/metrics` and/or `http://localhost:9323/metrics` 1. Observe response includes the TODO metrics with the `server_name` label ### Pull Request Checklist <!-- Please read https://element-hq.github.io/synapse/latest/development/contributing_guide.html before submitting your pull request --> * [x] Pull request is based on the develop branch * [x] Pull request includes a [changelog file](https://element-hq.github.io/synapse/latest/development/contributing_guide.html#changelog). The entry should: - Be a short description of your change which makes sense to users. "Fixed a bug that prevented receiving messages from other servers." instead of "Moved X method from `EventStore` to `EventWorkerStore`.". - Use markdown where necessary, mostly for `code blocks`. - End with either a period (.) or an exclamation mark (!). - Start with a capital letter. - Feel free to credit yourself, by adding a sentence "Contributed by @github_username." or "Contributed by [Your Name]." to the end of the entry. * [x] [Code style](https://element-hq.github.io/synapse/latest/code_style.html) is correct (run the [linters](https://element-hq.github.io/synapse/latest/development/contributing_guide.html#run-the-linters))
* | Refactor `Counter` metrics to be homeserver-scoped (#18656)Eric Eastwood2025-07-2543-240/+753
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bulk refactor `Counter` metrics to be homeserver-scoped. We also add lints to make sure that new `Counter` metrics don't sneak in without using the `server_name` label (`SERVER_NAME_LABEL`). All of the "Fill in" commits are just bulk refactor. Part of https://github.com/element-hq/synapse/issues/18592 ### Testing strategy 1. Add the `metrics` listener in your `homeserver.yaml` ```yaml listeners: # This is just showing how to configure metrics either way # # `http` `metrics` resource - port: 9322 type: http bind_addresses: ['127.0.0.1'] resources: - names: [metrics] compress: false # `metrics` listener - port: 9323 type: metrics bind_addresses: ['127.0.0.1'] ``` 1. Start the homeserver: `poetry run synapse_homeserver --config-path homeserver.yaml` 1. Fetch `http://localhost:9322/_synapse/metrics` and/or `http://localhost:9323/metrics` 1. Observe response includes the `synapse_user_registrations_total`, `synapse_http_server_response_count_total`, etc metrics with the `server_name` label
* | Reduce database usage in Sliding Sync by not querying for background update ↵reivilibre2025-07-242-1/+14
| | | | | | | | | | | | completion after the update is known to be complete. (#18718) Signed-off-by: Olivier 'reivilibre <oliverw@matrix.org> Co-authored-by: Eric Eastwood <erice@element.io>
* | Bump minimum version bound on Twisted to 21.2.0. (#18727)reivilibre2025-07-243-25/+31
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Distro packagers have been consulted and as far as has been answered so far, the lowest version of Twisted on the distros' platforms is 22.1, so this bump should be safe. This gives us 2 notable things: - contextvar propagation support, which would let us remove A LOT of logcontext machinery and vastly simplify logcontext rules! - The test helpers have moved to the new location, so no longer will you import test helpers from the 'correct' (non-deprecated) path and get told by CI (olddeps) that your test doesn't exist. Changelog entries for those are reproduced below: > - twisted.internet.defer.inlineCallbacks and ensureDeferred will now associate a contextvars.Context with the coroutines they run, meaning that ContextVar objects will maintain their value within the same coroutine, similarly to asyncio Tasks. This functionality requires Python 3.7+, or the contextvars PyPI backport to be installed for Python 3.5-3.6. (#<!--- -->9719, #<!--- -->9826) > > - twisted.test.proto_helpers has moved to twisted.internet.testing. twisted.test.proto_helpers has been deprecated. (#<!--- -->6435) --------- Signed-off-by: Olivier 'reivilibre <oliverw@matrix.org>
* | Add configurable rate limiting for the creation of rooms. (#18514)reivilibre2025-07-247-7/+81
| | | | | | | | | | | | | | | | | | | | | | | | Default values will be 1 room per minute, with a burst count of 10. It's hard to imagine most users will be affected by this default rate, but it's intentionally non-invasive in case of bots or other users that need to create rooms at a large rate. Server admins might want to down-tune this on their deployments. --------- Signed-off-by: Olivier 'reivilibre <oliverw@matrix.org>
* | MSC4306: register the thread subscriptions servlet in the client servlet ↵Benjamin Bouvier2025-07-243-2/+7
| | | | | | | | | | | | section (#18726) The MSC4306 endpoints were never registered, and thus never made available, even if the experimental feature flag was enabled.
* | Refactor background process metrics to be homeserver-scoped (#18670)Eric Eastwood2025-07-2371-414/+914
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Part of https://github.com/element-hq/synapse/issues/18592 Separated out of https://github.com/element-hq/synapse/pull/18656 because it's a bigger, unique piece of the refactor ### Testing strategy 1. Add the `metrics` listener in your `homeserver.yaml` ```yaml listeners: # This is just showing how to configure metrics either way # # `http` `metrics` resource - port: 9322 type: http bind_addresses: ['127.0.0.1'] resources: - names: [metrics] compress: false # `metrics` listener - port: 9323 type: metrics bind_addresses: ['127.0.0.1'] ``` 1. Start the homeserver: `poetry run synapse_homeserver --config-path homeserver.yaml` 1. Fetch `http://localhost:9322/_synapse/metrics` and/or `http://localhost:9323/metrics` 1. Observe response includes the background processs metrics (`synapse_background_process_start_count`, `synapse_background_process_db_txn_count_total`, etc) with the `server_name` label
* | Add support for MSC4293 - Redact on Kick/Ban (#18540)Shay2025-07-237-14/+1194
| |
* | Use UTF-8 for config doc generation (#18580)Travis Ralston2025-07-222-1/+9
| |
* | Allow return code 403 when fetching profile via federation (#18696)Andreas Fischer2025-07-222-1/+2
| |
* | Add debug log when `HMAC incorrect` (#18474)Eric Eastwood2025-07-224-0/+201
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Spawning from getting `HMAC incorrect` errors that seem unexplainable except for the `registration_shared_secret` being misconfigured. It's also possible my HMAC calculation is incorrect but every time I double-check the result with the [known-good Python example](https://github.com/element-hq/synapse/blob/553e124f766584456fbdb6d1aa37fdd12ad54dad/docs/admin_api/register_api.md) (which matches [Synapse's source](https://github.com/element-hq/synapse/blob/24e849e483820762fa2d231ad702e6aeaa23829c/synapse/rest/admin/users.py#L618-L633)), it's as expected. With these logs, we can actually debug whether `registration_shared_secret` is being configured correctly or not. It also helps specifically when using `registration_shared_secret_path` since the default Synapse behavior (of creating the file and secret if it doesn't exist) can mask deployment race condition where we would start up Synapse before the `registration_shared_secret_path` file was put in place: > **`registration_shared_secret_path`** > > [...] > > If this file does not exist, Synapse will create a new shared secret on startup and store it in this file. > > *-- [Synapse config docs](https://github.com/element-hq/synapse/blob/6521406a37a40a490a1a435f3616c02cfcbbac16/docs/usage/configuration/config_documentation.md#registration_shared_secret_path)* This only applies to the [`POST /_synapse/admin/v1/register`](https://github.com/element-hq/synapse/blob/553e124f766584456fbdb6d1aa37fdd12ad54dad/docs/admin_api/register_api.md) endpoint but does log very sensitive information so we've made it so you have to explicitly enable the logs by configuring `synapse.rest.admin.users.registration_debug` (does not inherit root log level) (via our new `ExplicitlyConfiguredLogger`) `homeserver.yaml` ```yaml log_config: "/myserver.log.config.yaml" ``` `myserver.log.config.yaml` ```yaml version: 1 formatters: precise: format: '%(asctime)s - %(name)s - %(lineno)d - %(levelname)s - %(request)s - %(message)s' handlers: # ... file/buffer handler (see `sample_log_config.yaml`) # A handler that writes logs to stderr. Unused by default, but can be used # instead of "buffer" and "file" in the logger handlers. console: class: logging.StreamHandler formatter: precise loggers: synapse.storage.SQL: # beware: increasing this to DEBUG will make synapse log sensitive # information such as access tokens. level: INFO # Has to be explicitly configured as such. Will not inherit from the root level even if it's set to DEBUG synapse.rest.admin.users.registration_debug: level: DEBUG root: level: INFO handlers: [console] disable_existing_loggers: false ```
* | Configure HTTP proxy in file config (#18686)Eric Eastwood2025-07-2214-94/+434
| | | | | | | | | | | | This PR makes it possible to configure the HTTP proxy on a per-homeserver-tenant basis. `http_proxy`, `https_proxy`, `no_proxy_hosts`
* | Bump types-psycopg2 from 2.9.21.20250516 to 2.9.21.20250718 (#18706)dependabot[bot]2025-07-221-3/+3
| | | | | | | | Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* | Bump types-jsonschema from 4.24.0.20250708 to 4.25.0.20250720 (#18703)dependabot[bot]2025-07-221-3/+3
|/ | | | Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* Remove stray dev logOlivier 'reivilibre2025-07-221-1/+0
|
* Tweak changelog againOlivier 'reivilibre2025-07-221-1/+1
|
* Tweak changelogOlivier 'reivilibre2025-07-221-3/+3
|
* 1.135.0rc1Olivier 'reivilibre2025-07-2239-37/+72
|
* Bump authlib from 1.6.0 to 1.6.1 (#18704)dependabot[bot]2025-07-221-3/+3
|
* Bump ruff from 0.12.3 to 0.12.4 (#18705)dependabot[bot]2025-07-222-21/+21
|
* Bump jsonschema from 4.24.0 to 4.25.0 (#18707)dependabot[bot]2025-07-221-27/+27
|
* Bump sigstore/cosign-installer from 3.9.1 to 3.9.2 (#18708)dependabot[bot]2025-07-221-1/+1
|
* Bump serde_json from 1.0.140 to 1.0.141 (#18709)dependabot[bot]2025-07-221-2/+2
|
* Bump once_cell from 1.19.0 to 1.21.3 (#18710)dependabot[bot]2025-07-221-2/+2
|
* Reduce log spam when client stops downloading media while it is being ↵Devon Hudson2025-07-212-9/+18
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | streamed to them (`ConsumerStopProducingError`) (#18699) The case where a consumer stops downloading media that is currently being streamed is now able to be handled explicitly. That scenario isn't really an error, it is expected behaviour. This PR adds a custom exception which allows us to drop the log level for this specific case from `WARNING` to `INFO`. ### Pull Request Checklist <!-- Please read https://element-hq.github.io/synapse/latest/development/contributing_guide.html before submitting your pull request --> * [X] Pull request is based on the develop branch * [X] Pull request includes a [changelog file](https://element-hq.github.io/synapse/latest/development/contributing_guide.html#changelog). The entry should: - Be a short description of your change which makes sense to users. "Fixed a bug that prevented receiving messages from other servers." instead of "Moved X method from `EventStore` to `EventWorkerStore`.". - Use markdown where necessary, mostly for `code blocks`. - End with either a period (.) or an exclamation mark (!). - Start with a capital letter. - Feel free to credit yourself, by adding a sentence "Contributed by @github_username." or "Contributed by [Your Name]." to the end of the entry. * [X] [Code style](https://element-hq.github.io/synapse/latest/code_style.html) is correct (run the [linters](https://element-hq.github.io/synapse/latest/development/contributing_guide.html#run-the-linters)) --------- Co-authored-by: Eric Eastwood <erice@element.io>
* Add an option to issue redactions as admin user on admin redaction endpoint ↵Shay2025-07-215-9/+80
| | | | | | | | | (#18671) Currently the [admin redaction endpoint](https://element-hq.github.io/synapse/latest/admin_api/user_admin_api.html#redact-all-the-events-of-a-user) defaults to puppeting the user being redacted. This PR adds an optional param `use_admin`, which when provided issues the redactions as the admin user instead.
* Dedicated MAS API (#18520)Quentin Gliech2025-07-2112-3/+2997
| | | | | | | | | | | | | | | | | | | | | This introduces a dedicated API for MAS to consume. Companion PR on the MAS side: element-hq/matrix-authentication-service#4801 This has a few advantages over the previous admin API: - it works on workers (this will be documented once we stabilise MSC3861 as a whole) - it is more efficient because more focused - it propagates trace contexts from MAS - it is only accessible to MAS (through the shared secret) and will let us remove the weird hack that made this token 'admin' with a ghost '@__oidc_admin:' user The next MAS version should support it, but will be opt-in. The version after that should use this new API by default --------- Co-authored-by: Eric Eastwood <erice@element.io>
* Add experimental and incomplete support for MSC4306: Thread Subscriptions. ↵reivilibre2025-07-2125-3/+1522
| | | | | | | | | | | | (#18674) Implements: [MSC4306](https://github.com/matrix-org/matrix-spec-proposals/blob/rei/msc_thread_subscriptions/proposals/4306-thread-subscriptions.md) (partially) What's missing: - Changes to push rules Signed-off-by: Olivier 'reivilibre <oliverw@matrix.org>
* Prevent dirty `Cargo.lock` changes from install (#18693)Eric Eastwood2025-07-183-1/+47
| | | | | | | | | | Spawning from https://github.com/element-hq/synapse/pull/18689 Example CI failure that will stop people from leaving stray `Cargo.lock` changes behind, ``` Error: Cargo.lock has uncommitted changes after install. Please run 'poetry install --extras all' and commit the Cargo.lock changes. ```
* 18697.misc (#18698)Strac Consulting Engineers Pty Ltd2025-07-181-0/+1
|
* Update msc3861_delegated.py spelling correction (#18697)Strac Consulting Engineers Pty Ltd2025-07-181-1/+1
|
* Don't allow tagnames longer than 255 bytes (#18660)Alex Durham2025-07-183-1/+81
|
* Move device changes off the main process (#18581)Quentin Gliech2025-07-1842-1421/+1752
| | | | | | | | | | | | | | | | | | | | | | | | | The main goal of this PR is to handle device list changes onto multiple writers, off the main process, so that we can have logins happening whilst Synapse is rolling-restarting. This is quite an intrusive change, so I would advise to review this commit by commit; I tried to keep the history as clean as possible. There are a few things to consider: - the `device_list_key` in stream tokens becomes a `MultiWriterStreamToken`, which has a few implications in sync and on the storage layer - we had a split between `DeviceHandler` and `DeviceWorkerHandler` for master vs. worker process. I've kept this split, but making it rather writer vs. non-writer worker, using method overrides for doing replication calls when needed - there are a few operations that need to happen on a single worker at a time. Instead of using cross-worker locks, for now I made them run on the first writer on the list --------- Co-authored-by: Eric Eastwood <erice@element.io>
* Fix dirty `Cargo.lock` changes appearing after install (`base64`) (#18689)Eric Eastwood2025-07-172-1/+2
| | | | | | | | | | | | | | Normal install results in `Cargo.lock` changes constantly popping up for me as I navigate my branches. This was probably caused by some Depdendabot PR updating the `Cargo.toml` without `Cargo.lock` or something. ``` poetry install --extras all ``` In another PR, I've also added CI to ensure we don't leave `Cargo.lock` changes behind to avoid this annoyance in the future -> https://github.com/element-hq/synapse/pull/18693
* Clean up `MetricsResource` and Prometheus hacks (#18687)Eric Eastwood2025-07-178-128/+115
| | | | | | | | | Clean up `MetricsResource`, Prometheus hacks (`_set_prometheus_client_use_created_metrics`), and better document why we care about having a separate `metrics` listener type. These clean-up changes have been split out from https://github.com/element-hq/synapse/pull/18584 since that PR was closed.
* Bump lxml from 5.4.0 to 6.0.0 (#18631)dependabot[bot]2025-07-171-135/+96
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumps [lxml](https://github.com/lxml/lxml) from 5.4.0 to 6.0.0. <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/lxml/lxml/blob/master/CHANGES.txt">lxml's changelog</a>.</em></p> <blockquote> <h1>6.0.0 (2025-06-26)</h1> <h2>Features added</h2> <ul> <li> <p>GH#463: <code>lxml.html.diff</code> is faster and provides structurally better diffs. Original patch by Steven Fernandez.</p> </li> <li> <p>GH#405: The factories <code>Element</code> and <code>ElementTree</code> can now be used in type hints.</p> </li> <li> <p>GH#448: Parsing from <code>memoryview</code> and other buffers is supported to allow zero-copy parsing.</p> </li> <li> <p>GH#437: <code>lxml.html.builder</code> was missing several HTML5 tag names. Patch by Nick Tarleton.</p> </li> <li> <p>GH#458: <code>CDATA</code> can now be written into the incremental <code>xmlfile()</code> writer. Original patch by Lane Shaw.</p> </li> <li> <p>A new parser option <code>decompress=False</code> was added that controls the automatic input decompression when using libxml2 2.15.0 or later. Disabling this option by default will effectively prevent decompression bombs when handling untrusted input. Code that depends on automatic decompression must enable this option. Note that libxml2 2.15.0 was not released yet, so this option currently has no effect but can already be used.</p> </li> <li> <p>The set of compile time / runtime supported libxml2 feature names is available as <code>etree.LIBXML_COMPILED_FEATURES</code> and <code>etree.LIBXML_FEATURES</code>. This currently includes <code>catalog</code>, <code>ftp</code>, <code>html</code>, <code>http</code>, <code>iconv</code>, <code>icu</code>, <code>lzma</code>, <code>regexp</code>, <code>schematron</code>, <code>xmlschema</code>, <code>xpath</code>, <code>zlib</code>.</p> </li> </ul> <h2>Bugs fixed</h2> <ul> <li> <p>GH#353: Predicates in <code>.find*()</code> could mishandle tag indices if a default namespace is provided. Original patch by Luise K.</p> </li> <li> <p>GH#272: The <code>head</code> and <code>body</code> properties of <code>lxml.html</code> elements failed if no such element was found. They now return <code>None</code> instead. Original patch by FVolral.</p> </li> <li> <p>Tag names provided by code (API, not data) that are longer than <code>INT_MAX</code> could be truncated or mishandled in other ways.</p> </li> <li> <p><code>.text_content()</code> on <code>lxml.html</code> elements accidentally returned a &quot;smart string&quot; without additional information. It now returns a plain string.</p> </li> <li> <p>LP#2109931: When building lxml with coverage reporting, it now disables the <code>sys.monitoring</code> support due to the lack of support in <a href="https://redirect.github.com/nedbat/coveragepy/issues/1790">nedbat/coveragepy#1790</a></p> </li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/lxml/lxml/commit/2a67034bc21150e9cc14500f65c41fa4e9d51c9b"><code>2a67034</code></a> Prepare release of 6.0.0.</li> <li><a href="https://github.com/lxml/lxml/commit/e0b4e021825249923b3421abba9e94d03b3cf366"><code>e0b4e02</code></a> Update changelog.</li> <li><a href="https://github.com/lxml/lxml/commit/d3f4dcf6899b82984d24cb20519c23e3c127fc17"><code>d3f4dcf</code></a> Build: Upgrade libxml2 to latest 2.14.4.</li> <li><a href="https://github.com/lxml/lxml/commit/014e51cce37e376aa074c908f0605cd9f378fc09"><code>014e51c</code></a> Build: Add Windows arm64 wheel builds (<a href="https://redirect.github.com/lxml/lxml/issues/465">GH-465</a>)</li> <li><a href="https://github.com/lxml/lxml/commit/d3914dcb6aa3dd05979e2321b17e269744aebae5"><code>d3914dc</code></a> Only use &quot;xmlCtxtIsStopped()&quot; from libxml2 2.15.0 on since it fails to cover ...</li> <li><a href="https://github.com/lxml/lxml/commit/6e413902754dc0b46e89bcab3fdcfb5207095e22"><code>6e41390</code></a> Avoid reading the deprecated &quot;disableSAX&quot; attribute of &quot;xmlParserCtxt&quot;.</li> <li><a href="https://github.com/lxml/lxml/commit/f85da81b1d19440d2be3d295bd7b91f2871a9cfc"><code>f85da81</code></a> Use newer &quot;language_level=3&quot; in ElementPath module.</li> <li><a href="https://github.com/lxml/lxml/commit/787315eb54b9c8efacd3400f801e22e41e4142d0"><code>787315e</code></a> Build: bump pypa/cibuildwheel in the github-actions group (<a href="https://redirect.github.com/lxml/lxml/issues/464">#464</a>)</li> <li><a href="https://github.com/lxml/lxml/commit/fb3adb1dce9afd699f7ab0d4b4866f1c0b8191b2"><code>fb3adb1</code></a> Readme: Add project income report for 2024.</li> <li><a href="https://github.com/lxml/lxml/commit/8e61a757c820dc412458788121cd83425d7f6630"><code>8e61a75</code></a> Fit cached tuple more nicely into cachelines.</li> <li>Additional commits viewable in <a href="https://github.com/lxml/lxml/compare/lxml-5.4.0...lxml-6.0.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=lxml&package-manager=pip&previous-version=5.4.0&new-version=6.0.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* Start and stop the Tokio runtime with the Twisted reactor (#18691)Quentin Gliech2025-07-176-75/+166
| | | | | | | | | | | | | | | Fixes https://github.com/element-hq/synapse/issues/18659 This changes the Tokio runtime to be attached to the Twisted reactor. This way, the Tokio runtime starts when the Twisted reactor starts, and *not* when the module gets loaded. This is important as starting the runtime on module load meant that it broke when Synapse was started with `daemonize`/`synctl`, as forks only retain the calling threads, breaking the Tokio runtime. This also changes so that the HttpClient gets the Twisted reactor explicitly as parameter instead of loading it from `twisted.internet.reactor`
* fix schema and docs of `rc_delayed_event_mgmt` (#18692)Kim Brose2025-07-173-6/+5
| | | Signed-off-by: Kim Brose <kim.brose@nordeck.net>
* Stabilize support for custom profile fields. (#18635)Patrick Cloke2025-07-176-226/+88
|
* Include `event_id` when getting state with `?format=event` (#18675)Tulir Asokan2025-07-173-2/+60
|
* Fix sequence migration for autoincrement tables in synapse_port_db (#18677)Märt2025-07-172-8/+82
| | | | Closes https://github.com/element-hq/synapse/issues/18053 - the sliding sync tables will now migrate properly.
* Bump types-jsonschema from 4.24.0.20250528 to 4.24.0.20250708 (#18682)dependabot[bot]2025-07-171-3/+3
|
* Bump ruff from 0.12.2 to 0.12.3 (#18683)dependabot[bot]2025-07-172-21/+21
|
* Refactor cache metrics to be homeserver-scoped (#18604)Eric Eastwood2025-07-1688-268/+694
| | | | | (add `server_name` label to cache metrics). Part of https://github.com/element-hq/synapse/issues/18592
* Refactor `Measure` block metrics to be homeserver-scoped (v2) (#18601)Eric Eastwood2025-07-1535-94/+380
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Refactor `Measure` block metrics to be homeserver-scoped (add `server_name` label to block metrics). Part of https://github.com/element-hq/synapse/issues/18592 ### Testing strategy #### See behavior of previous `metrics` listener 1. Add the `metrics` listener in your `homeserver.yaml` ```yaml listeners: - port: 9323 type: metrics bind_addresses: ['127.0.0.1'] ``` 1. Start the homeserver: `poetry run synapse_homeserver --config-path homeserver.yaml` 1. Fetch `http://localhost:9323/metrics` 1. Observe response includes the block metrics (`synapse_util_metrics_block_count`, `synapse_util_metrics_block_in_flight`, etc) #### See behavior of the `http` `metrics` resource 1. Add the `metrics` resource to a new or existing `http` listeners in your `homeserver.yaml` ```yaml listeners: - port: 9322 type: http bind_addresses: ['127.0.0.1'] resources: - names: [metrics] compress: false ``` 1. Start the homeserver: `poetry run synapse_homeserver --config-path homeserver.yaml` 1. Fetch `http://localhost:9322/_synapse/metrics` (it's just a `GET` request so you can even do in the browser) 1. Observe response includes the block metrics (`synapse_util_metrics_block_count`, `synapse_util_metrics_block_in_flight`, etc)
* Remove `allow_no_prev_events` option (MSC2716 cleanup) (#18676)Eric Eastwood2025-07-154-116/+12
| | | | | | | | | | This option is no longer used since we backed out the MSC2716 changes in https://github.com/matrix-org/synapse/pull/15748 and is even mentioned as a follow-up task in the PR description there. The `allow_no_prev_events` option was first introduced in https://github.com/matrix-org/synapse/pull/11243 to support MSC2716 back in the day.
* Document that some config options for the user directory are in violation of ↵Johannes Marbach2025-07-153-2/+14
| | | | | | | the Matrix spec (#18548) Fix #17534 Signed-off-by: Johannes Marbach <n0-0ne+github@mailbox.org>
* Advertise support for Matrix v1.12 (#18647)Andrew Morgan2025-07-152-0/+2
|
* Correct version that `recaptcha_{private,public}_key_path` config options ↵Eric Eastwood2025-07-153-4/+5
| | | | | | | | | | | were introduced (#18684) Introduced in https://github.com/element-hq/synapse/pull/17984 I already see a [`v1.134.0rc1`](https://github.com/element-hq/synapse/releases/tag/v1.134.0rc1) tag from 5 days ago so I assume https://github.com/element-hq/synapse/pull/17984 will actually ship in the next release (which will be `v1.135.0`)
* Update URL Preview code to work with `lxml` 6.0.0 (#18622)Andrew Morgan2025-07-152-4/+27
|
* Merge remote-tracking branch 'origin/master' into developErik Johnston2025-07-153-1/+14
|\
| * 1.134.0Erik Johnston2025-07-153-1/+14
| |
* | Bump mypy from 1.13.0 to 1.16.1 (#18653)dependabot[bot]2025-07-1519-69/+112
| |
* | Fix CPU and database spinning when retrying sending events to servers whilst ↵reivilibre2025-07-152-1/+14
| | | | | | | | | | | | | | | | | | | | | | | | at the same time purging those events. (#18499) Fixes: #18491 Fix hotlooping due to skipped PDUs if there is still no progress to be made. This could bite if the event was purged since being skipped during catch-up. Signed-off-by: Olivier 'reivilibre <oliverw@matrix.org>
* | Bump phonenumbers from 9.0.8 to 9.0.9 (#18681)dependabot[bot]2025-07-151-25/+45
| |
* | Add recaptcha_{private,public}_key_path config option (#17984)V024602025-07-145-1/+96
| | | | | | | | | | | | | | | | Another config option on my quest to a `*_path` variant for every secret. Adds the config options `recaptcha_private_key_path` and `recaptcha_public_key_path`. Tests and docs are included. A public key is of course no secret, but it is closely related to the private key, so it’s still useful to have a `*_path` variant for it.
* | Allow admins to see soft failed events (if they want to) (#18238)Travis Ralston2025-07-1411-13/+211
| |
* | Bump base64 from 0.21.7 to 0.22.1 (#18666)dependabot[bot]2025-07-111-10/+4
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumps [base64](https://github.com/marshallpierce/rust-base64) from 0.21.7 to 0.22.1. <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/marshallpierce/rust-base64/blob/master/RELEASE-NOTES.md">base64's changelog</a>.</em></p> <blockquote> <h1>0.22.1</h1> <ul> <li>Correct the symbols used for the predefined <code>alphabet::BIN_HEX</code>.</li> </ul> <h1>0.22.0</h1> <ul> <li><code>DecodeSliceError::OutputSliceTooSmall</code> is now conservative rather than precise. That is, the error will only occur if the decoded output <em>cannot</em> fit, meaning that <code>Engine::decode_slice</code> can now be used with exactly-sized output slices. As part of this, <code>Engine::internal_decode</code> now returns <code>DecodeSliceError</code> instead of <code>DecodeError</code>, but that is not expected to affect any external callers.</li> <li><code>DecodeError::InvalidLength</code> now refers specifically to the <em>number of valid symbols</em> being invalid (i.e. <code>len % 4 == 1</code>), rather than just the number of input bytes. This avoids confusing scenarios when based on interpretation you could make a case for either <code>InvalidLength</code> or <code>InvalidByte</code> being appropriate.</li> <li>Decoding is somewhat faster (5-10%)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/marshallpierce/rust-base64/commit/e14400697453bcc85997119b874bc03d9601d0af"><code>e144006</code></a> v0.22.1</li> <li><a href="https://github.com/marshallpierce/rust-base64/commit/64cca59ddbb4c43244a8f38629b59960ffe36bc0"><code>64cca59</code></a> Merge pull request <a href="https://redirect.github.com/marshallpierce/rust-base64/issues/271">#271</a> from JobanSD/patch-1</li> <li><a href="https://github.com/marshallpierce/rust-base64/commit/838355e0ac5fb8237ec9b96be5edb011bff00275"><code>838355e</code></a> Correct BinHex 4.0 alphabet according to specifications</li> <li><a href="https://github.com/marshallpierce/rust-base64/commit/bf15ccf30af8bb6b1f326fffa025d7b0aaa3342f"><code>bf15ccf</code></a> Merge pull request <a href="https://redirect.github.com/marshallpierce/rust-base64/issues/270">#270</a> from marshallpierce/mp/clippy</li> <li><a href="https://github.com/marshallpierce/rust-base64/commit/fc6aabee8afaf8b2f4cfb12df4cf461bcf9b003d"><code>fc6aabe</code></a> Appease clippy</li> <li><a href="https://github.com/marshallpierce/rust-base64/commit/9a518a2d5d028068d4bf83ebf437f7a3575e640e"><code>9a518a2</code></a> Merge pull request <a href="https://redirect.github.com/marshallpierce/rust-base64/issues/267">#267</a> from bdura/patch-1</li> <li><a href="https://github.com/marshallpierce/rust-base64/commit/d96c80f242e3080a03fd1c079730e17373ef0eb6"><code>d96c80f</code></a> Merge branch 'marshallpierce:master' into patch-1</li> <li><a href="https://github.com/marshallpierce/rust-base64/commit/5d70ba7576f9aafcbf02bd8acfcb9973411fb95f"><code>5d70ba7</code></a> Merge pull request <a href="https://redirect.github.com/marshallpierce/rust-base64/issues/269">#269</a> from marshallpierce/mp/decode-precisely</li> <li><a href="https://github.com/marshallpierce/rust-base64/commit/efb6c006c75ddbe60c084c2e3e0e084cd18b0122"><code>efb6c00</code></a> Release notes</li> <li><a href="https://github.com/marshallpierce/rust-base64/commit/2b91084a31ad11624acd81e06455ba0cbd21d4a8"><code>2b91084</code></a> Add some tests to boost coverage</li> <li>Additional commits viewable in <a href="https://github.com/marshallpierce/rust-base64/compare/v0.21.7...v0.22.1">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=base64&package-manager=cargo&previous-version=0.21.7&new-version=0.22.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* | Use markdown-it-py instead of commonmark in the release script. (#18637)Quentin Gliech2025-07-114-93/+50
| | | | | | | | | | | | | | | | `commonmark` has been deprecated in favor of `markdown-it-py`, and its type hints have been [removed from typeshed](https://github.com/python/typeshed/issues/13725). This switches the release script to use `markdown-it-py` instead of `commonmark` for parsing the `CHANGES.md`
* | Update `latest_deps` workflow to migrate `poetry --no-dev` -> `--without ↵Andrew Morgan2025-07-114-3/+4
| | | | | | | | dev` (#18617)
* | Document config file merge behavior (#18664)V024602025-07-112-1/+5
| | | | | | | | Explains in the doc comment of `synapse.config._base.read_config_file` how config files are merged.
* | Remove unnecessary replication calls (#18564)Quentin Gliech2025-07-117-111/+97
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This should be reviewed commit by commit. Nowadays it's trivial to propagate cache invalidations, which means we can move some things off the main process, and not go through HTTP replication. `ReplicationGetQueryRestServlet` appeared to be unused, and was very weird, as it was being called if the current instance is the main one… to RPC to the main one (if no instance is set on a replication client, it makes it to the main process) The other two handlers could be relatively trivially moved to any workers, moving some methods to the worker store. **I've intentionally not removed the replication servlets yet** so that it's safe to rollout, and will do another PR that clean those up to remove on the N+1 version
* | Move registrations off the main worker (#18552)Quentin Gliech2025-07-106-189/+182
| | | | | | | | This is mainly moving a few store methods around. Note that this doesn't yet remove the replication servlet to avoid breaking during rollout.
* | Add ability to limit amount uploaded by a user (#18527)Erik Johnston2025-07-1011-73/+292
| | | | | | | | | | | | | | You can now configure how much media can be uploaded by a user in a given time period. Note the first commit here is a refactor of create/upload content function
* | Add plain-text handling for rich-text topics as per MSC3765 (#18195)Johannes Marbach2025-07-0913-53/+356
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This implements https://github.com/matrix-org/matrix-spec-proposals/pull/3765 which is already merged and, therefore, can use stable identifiers. For `/publicRooms` and `/hierarchy`, the topic is read from the eponymous field of the `current_state_events` table. Rather than introduce further columns in this table, I changed the insertion / update logic to write the plain-text topic from the rich topic into the existing field. This will not take effect for existing rooms unless their topic is changed. However, existing rooms shouldn't have rich topics to begin with. Similarly, for server-side search, I changed the insertion logic of the `event_search` table to prefer the value from the rich topic. Again, existing events shouldn't have rich topics and, therefore, don't need to be migrated in the table. Spec doc: https://spec.matrix.org/v1.15/client-server-api/#mroomtopic Part of supporting Matrix v1.15: https://spec.matrix.org/v1.15/client-server-api/#mroomtopic Signed-off-by: Johannes Marbach <n0-0ne+github@mailbox.org> Co-authored-by: Eric Eastwood <erice@element.io>
* | Add experimental support for MSC4277: Harmonizing the reporting endpoints ↵Johannes Marbach2025-07-094-6/+59
| | | | | | | | | | | | (#18263) [MSC4277](https://github.com/matrix-org/matrix-spec-proposals/pull/4277): Harmonizing the reporting endpoints
* | Merge branch 'release-v1.134' into developAndrew Morgan2025-07-0927-25/+89
|\|
| * 1.134.0rc1Andrew Morgan2025-07-0927-25/+89
| |
* | Speed up inserting into stream_positions (#18672)Erik Johnston2025-07-092-9/+6
|/ | | | By ensuring we don't do a no-op `UPDATE`, as this causes new tuples to be written in postgres.
* Use native arm runners for building wheels (#18618)Quentin Gliech2025-07-083-27/+14
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This takes down the CI time to build wheels from 50 minutes to <10 minutes. **It also fixes macOS ARM builds, and includes more ARM builds in general** (we were ignoring pypy and musl before). This doesn't cost much for us to do this, reasons for not doing this is 1. space on PyPI and 2. keeping them 'officially' supported? This is the list of wheels this built (`+` are the ones added): ```diff matrix_synapse-1.133.0-cp39-abi3-macosx_10_9_x86_64.whl + matrix_synapse-1.133.0-cp39-abi3-macosx_11_0_arm64.whl matrix_synapse-1.133.0-cp39-abi3-manylinux_2_28_aarch64.whl matrix_synapse-1.133.0-cp39-abi3-manylinux_2_28_x86_64.whl + matrix_synapse-1.133.0-cp39-abi3-musllinux_1_2_aarch64.whl matrix_synapse-1.133.0-cp39-abi3-musllinux_1_2_x86_64.whl matrix_synapse-1.133.0-pp310-pypy310_pp73-macosx_10_15_x86_64.whl + matrix_synapse-1.133.0-pp310-pypy310_pp73-macosx_11_0_arm64.whl + matrix_synapse-1.133.0-pp310-pypy310_pp73-manylinux_2_28_aarch64.whl matrix_synapse-1.133.0-pp310-pypy310_pp73-manylinux_2_28_x86_64.whl matrix_synapse-1.133.0-pp311-pypy311_pp73-macosx_10_15_x86_64.whl + matrix_synapse-1.133.0-pp311-pypy311_pp73-macosx_11_0_arm64.whl + matrix_synapse-1.133.0-pp311-pypy311_pp73-manylinux_2_28_aarch64.whl matrix_synapse-1.133.0-pp311-pypy311_pp73-manylinux_2_28_x86_64.whl ``` And the numbers aaaaare 🥁 - [before](https://github.com/element-hq/synapse/actions/runs/16072488018): 54 minutes - [after](https://github.com/element-hq/synapse/actions/runs/16004034949?pr=18618): 10 minutes **Revert [e43b0f9](https://github.com/element-hq/synapse/pull/18618/commits/e43b0f9bd18f6d4ec9f9e9d992ecdcceaaf10982) before merging**
* Add `.zed/` to `.gitignore` (#18623)Andrew Morgan2025-07-082-0/+2
|
* Speed up the building of Docker images using ARM CI workers (#18620)Quentin Gliech2025-07-083-45/+101
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This splits the building of docker images in 2 jobs, one for each platform, using the native ARM runners for arm64. The tricky part here is to get back a nice multi-arch manifest. Previously, you'd do that by pushing each platform image in two distinct tags, then referencing them in a multi-arch manifest. Nowadays, it's possible to push images by their digest only, then creating the manifest for those pushed digests separately This is inspired by the Docker docs on how to distribute multi-platform image builds: https://docs.docker.com/build/ci/github-actions/multi-platform/#distribute-build-across-multiple-runners `ghcr.io/element-hq/synapse:sha-c733dd6` is an example image that got built by this workflow (there is a temporary sha-* tag on workflow_dispatch runs to help trying out the workflow) I also had to make sure we sign the manifests correctly: ``` $ cosign verify --certificate-oidc-issuer https://token.actions.githubusercontent.com --certificate-identity-regexp 'https://github.com/element-hq/synapse/.github/workflows/docker.yml@.*' ghcr.io/element-hq/synapse:sha-c733dd6 Verification for ghcr.io/element-hq/synapse:sha-c733dd6 -- The following checks were performed on each of these signatures: - The cosign claims were validated - Existence of the claims in the transparency log was verified offline - The code-signing certificate was verified using trusted certificate authority certificates ``` And the numbers aaaaare 🥁 - [before](https://github.com/element-hq/synapse/actions/runs/16118229296/job/45477093703): 30 minutes - [after](https://github.com/element-hq/synapse/actions/runs/16021743575): 4 minutes --------- Co-authored-by: Andrew Morgan <1342360+anoadragon453@users.noreply.github.com>
* Bump typing-extensions from 4.14.0 to 4.14.1 (#18668)dependabot[bot]2025-07-071-3/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumps [typing-extensions](https://github.com/python/typing_extensions) from 4.14.0 to 4.14.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/python/typing_extensions/releases">typing-extensions's releases</a>.</em></p> <blockquote> <h2>4.14.1</h2> <h1>Release 4.14.1 (July 4, 2025)</h1> <ul> <li>Fix usage of <code>typing_extensions.TypedDict</code> nested inside other types (e.g., <code>typing.Type[typing_extensions.TypedDict]</code>). This is not allowed by the type system but worked on older versions, so we maintain support.</li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/python/typing_extensions/blob/main/CHANGELOG.md">typing-extensions's changelog</a>.</em></p> <blockquote> <h1>Release 4.14.1 (July 4, 2025)</h1> <ul> <li>Fix usage of <code>typing_extensions.TypedDict</code> nested inside other types (e.g., <code>typing.Type[typing_extensions.TypedDict]</code>). This is not allowed by the type system but worked on older versions, so we maintain support.</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/python/typing_extensions/commit/42027aba3558c9d9133a90bca17f6fecaecc48d8"><code>42027ab</code></a> Prepare release 4.14.1 (<a href="https://redirect.github.com/python/typing_extensions/issues/620">#620</a>)</li> <li><a href="https://github.com/python/typing_extensions/commit/59d2c20858ac527516ebad5a89c05af514dac94a"><code>59d2c20</code></a> Fix off by one in pickle protocol tests (<a href="https://redirect.github.com/python/typing_extensions/issues/618">#618</a>)</li> <li><a href="https://github.com/python/typing_extensions/commit/40e22ebb2ca5747eaa9405b152c43a294ac3af37"><code>40e22eb</code></a> Do not use slots for <code>_TypedDictSpecialForm</code> (<a href="https://redirect.github.com/python/typing_extensions/issues/616">#616</a>)</li> <li><a href="https://github.com/python/typing_extensions/commit/d17c456d367e88adee4a4e3bef48f81f7e2df473"><code>d17c456</code></a> allow TypedDict as a type argument (<a href="https://redirect.github.com/python/typing_extensions/issues/614">#614</a>)</li> <li>See full diff in <a href="https://github.com/python/typing_extensions/compare/4.14.0...4.14.1">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=typing-extensions&package-manager=pip&previous-version=4.14.0&new-version=4.14.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* Bump tokio from 1.46.0 to 1.46.1 (#18667)dependabot[bot]2025-07-071-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumps [tokio](https://github.com/tokio-rs/tokio) from 1.46.0 to 1.46.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/tokio-rs/tokio/releases">tokio's releases</a>.</em></p> <blockquote> <h2>Tokio v1.46.1</h2> <h1>1.46.1 (July 4th, 2025)</h1> <p>This release fixes incorrect spawn locations in runtime task hooks for tasks spawned using <code>tokio::spawn</code> rather than <code>Runtime::spawn</code>. This issue only effected the spawn location in <code>TaskMeta::spawned_at</code>, and did not effect task locations in Tracing events.</p> <h2>Unstable</h2> <ul> <li>runtime: add <code>TaskMeta::spawn_location</code> tracking where a task was spawned (<a href="https://redirect.github.com/tokio-rs/tokio/issues/7440">#7440</a>)</li> </ul> <p><a href="https://redirect.github.com/tokio-rs/tokio/issues/7440">#7440</a>: <a href="https://redirect.github.com/tokio-rs/tokio/pull/7440">tokio-rs/tokio#7440</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/tokio-rs/tokio/commit/ab3ff69cf2258a8c696b2dca89a2cef4ff114c1c"><code>ab3ff69</code></a> chore: prepare to release v1.46.1 (<a href="https://redirect.github.com/tokio-rs/tokio/issues/7444">#7444</a>)</li> <li><a href="https://github.com/tokio-rs/tokio/commit/a0d5b8ab308bbeaa8090d411550d6c887d699096"><code>a0d5b8a</code></a> runtime(unstable): fix task hook spawn locations for <code>tokio::spawn</code> (<a href="https://redirect.github.com/tokio-rs/tokio/issues/7440">#7440</a>)</li> <li><a href="https://github.com/tokio-rs/tokio/commit/a1ee3ef218894f2441b5719812ab218ae0539c8d"><code>a1ee3ef</code></a> chore: fix some minor typos in the comments (<a href="https://redirect.github.com/tokio-rs/tokio/issues/7442">#7442</a>)</li> <li><a href="https://github.com/tokio-rs/tokio/commit/171cd148a37da40dcbb8b06bf2c67634b2ba1f87"><code>171cd14</code></a> changelog: fix typo in <code>pipe::OpenOptions</code> for 1.46.0 (<a href="https://redirect.github.com/tokio-rs/tokio/issues/7439">#7439</a>)</li> <li>See full diff in <a href="https://github.com/tokio-rs/tokio/compare/tokio-1.46.0...tokio-1.46.1">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=tokio&package-manager=cargo&previous-version=1.46.0&new-version=1.46.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* Bump types-psycopg2 from 2.9.21.20250318 to 2.9.21.20250516 (#18658)dependabot[bot]2025-07-041-3/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumps [types-psycopg2](https://github.com/typeshed-internal/stub_uploader) from 2.9.21.20250318 to 2.9.21.20250516. <details> <summary>Commits</summary> <ul> <li>See full diff in <a href="https://github.com/typeshed-internal/stub_uploader/commits">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=types-psycopg2&package-manager=pip&previous-version=2.9.21.20250318&new-version=2.9.21.20250516)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* Bump ruff from 0.12.1 to 0.12.2 (#18657)dependabot[bot]2025-07-042-21/+21
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumps [ruff](https://github.com/astral-sh/ruff) from 0.12.1 to 0.12.2. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/astral-sh/ruff/releases">ruff's releases</a>.</em></p> <blockquote> <h2>0.12.2</h2> <h2>Release Notes</h2> <h3>Preview features</h3> <ul> <li>[<code>flake8-pyi</code>] Expand <code>Optional[A]</code> to <code>A | None</code> (<code>PYI016</code>) (<a href="https://redirect.github.com/astral-sh/ruff/pull/18572">#18572</a>)</li> <li>[<code>pyupgrade</code>] Mark <code>UP008</code> fix safe if no comments are in range (<a href="https://redirect.github.com/astral-sh/ruff/pull/18683">#18683</a>)</li> </ul> <h3>Bug fixes</h3> <ul> <li>[<code>flake8-comprehensions</code>] Fix <code>C420</code> to prepend whitespace when needed (<a href="https://redirect.github.com/astral-sh/ruff/pull/18616">#18616</a>)</li> <li>[<code>perflint</code>] Fix <code>PERF403</code> panic on attribute or subscription loop variable (<a href="https://redirect.github.com/astral-sh/ruff/pull/19042">#19042</a>)</li> <li>[<code>pydocstyle</code>] Fix <code>D413</code> infinite loop for parenthesized docstring (<a href="https://redirect.github.com/astral-sh/ruff/pull/18930">#18930</a>)</li> <li>[<code>pylint</code>] Fix <code>PLW0108</code> autofix introducing a syntax error when the lambda's body contains an assignment expression (<a href="https://redirect.github.com/astral-sh/ruff/pull/18678">#18678</a>)</li> <li>[<code>refurb</code>] Fix false positive on empty tuples (<code>FURB168</code>) (<a href="https://redirect.github.com/astral-sh/ruff/pull/19058">#19058</a>)</li> <li>[<code>ruff</code>] Allow more <code>field</code> calls from <code>attrs</code> (<code>RUF009</code>) (<a href="https://redirect.github.com/astral-sh/ruff/pull/19021">#19021</a>)</li> <li>[<code>ruff</code>] Fix syntax error introduced for an empty string followed by a u-prefixed string (<code>UP025</code>) (<a href="https://redirect.github.com/astral-sh/ruff/pull/18899">#18899</a>)</li> </ul> <h3>Rule changes</h3> <ul> <li>[<code>flake8-executable</code>] Allow <code>uvx</code> in shebang line (<code>EXE003</code>) (<a href="https://redirect.github.com/astral-sh/ruff/pull/18967">#18967</a>)</li> <li>[<code>pandas</code>] Avoid flagging <code>PD002</code> if <code>pandas</code> is not imported (<a href="https://redirect.github.com/astral-sh/ruff/pull/18963">#18963</a>)</li> <li>[<code>pyupgrade</code>] Avoid PEP-604 unions with <code>typing.NamedTuple</code> (<code>UP007</code>, <code>UP045</code>) (<a href="https://redirect.github.com/astral-sh/ruff/pull/18682">#18682</a>)</li> </ul> <h3>Documentation</h3> <ul> <li>Document link between <code>import-outside-top-level (PLC0415)</code> and <code>lint.flake8-tidy-imports.banned-module-level-imports</code> (<a href="https://redirect.github.com/astral-sh/ruff/pull/18733">#18733</a>)</li> <li>Fix description of the <code>format.skip-magic-trailing-comma</code> example (<a href="https://redirect.github.com/astral-sh/ruff/pull/19095">#19095</a>)</li> <li>[<code>airflow</code>] Make <code>AIR302</code> example error out-of-the-box (<a href="https://redirect.github.com/astral-sh/ruff/pull/18988">#18988</a>)</li> <li>[<code>airflow</code>] Make <code>AIR312</code> example error out-of-the-box (<a href="https://redirect.github.com/astral-sh/ruff/pull/18989">#18989</a>)</li> <li>[<code>flake8-annotations</code>] Make <code>ANN401</code> example error out-of-the-box (<a href="https://redirect.github.com/astral-sh/ruff/pull/18974">#18974</a>)</li> <li>[<code>flake8-async</code>] Make <code>ASYNC100</code> example error out-of-the-box (<a href="https://redirect.github.com/astral-sh/ruff/pull/18993">#18993</a>)</li> <li>[<code>flake8-async</code>] Make <code>ASYNC105</code> example error out-of-the-box (<a href="https://redirect.github.com/astral-sh/ruff/pull/19002">#19002</a>)</li> <li>[<code>flake8-async</code>] Make <code>ASYNC110</code> example error out-of-the-box (<a href="https://redirect.github.com/astral-sh/ruff/pull/18975">#18975</a>)</li> <li>[<code>flake8-async</code>] Make <code>ASYNC210</code> example error out-of-the-box (<a href="https://redirect.github.com/astral-sh/ruff/pull/18977">#18977</a>)</li> <li>[<code>flake8-async</code>] Make <code>ASYNC220</code>, <code>ASYNC221</code>, and <code>ASYNC222</code> examples error out-of-the-box (<a href="https://redirect.github.com/astral-sh/ruff/pull/18978">#18978</a>)</li> <li>[<code>flake8-async</code>] Make <code>ASYNC251</code> example error out-of-the-box (<a href="https://redirect.github.com/astral-sh/ruff/pull/18990">#18990</a>)</li> <li>[<code>flake8-bandit</code>] Make <code>S201</code> example error out-of-the-box (<a href="https://redirect.github.com/astral-sh/ruff/pull/19017">#19017</a>)</li> <li>[<code>flake8-bandit</code>] Make <code>S604</code> and <code>S609</code> examples error out-of-the-box (<a href="https://redirect.github.com/astral-sh/ruff/pull/19049">#19049</a>)</li> <li>[<code>flake8-bugbear</code>] Make <code>B028</code> example error out-of-the-box (<a href="https://redirect.github.com/astral-sh/ruff/pull/19054">#19054</a>)</li> <li>[<code>flake8-bugbear</code>] Make <code>B911</code> example error out-of-the-box (<a href="https://redirect.github.com/astral-sh/ruff/pull/19051">#19051</a>)</li> <li>[<code>flake8-datetimez</code>] Make <code>DTZ011</code> example error out-of-the-box (<a href="https://redirect.github.com/astral-sh/ruff/pull/19055">#19055</a>)</li> <li>[<code>flake8-datetimez</code>] Make <code>DTZ901</code> example error out-of-the-box (<a href="https://redirect.github.com/astral-sh/ruff/pull/19056">#19056</a>)</li> <li>[<code>flake8-pyi</code>] Make <code>PYI032</code> example error out-of-the-box (<a href="https://redirect.github.com/astral-sh/ruff/pull/19061">#19061</a>)</li> <li>[<code>flake8-pyi</code>] Make example error out-of-the-box (<code>PYI014</code>, <code>PYI015</code>) (<a href="https://redirect.github.com/astral-sh/ruff/pull/19097">#19097</a>)</li> <li>[<code>flake8-pyi</code>] Make example error out-of-the-box (<code>PYI042</code>) (<a href="https://redirect.github.com/astral-sh/ruff/pull/19101">#19101</a>)</li> <li>[<code>flake8-pyi</code>] Make example error out-of-the-box (<code>PYI059</code>) (<a href="https://redirect.github.com/astral-sh/ruff/pull/19080">#19080</a>)</li> <li>[<code>flake8-pyi</code>] Make example error out-of-the-box (<code>PYI062</code>) (<a href="https://redirect.github.com/astral-sh/ruff/pull/19079">#19079</a>)</li> <li>[<code>flake8-pytest-style</code>] Make example error out-of-the-box (<code>PT023</code>) (<a href="https://redirect.github.com/astral-sh/ruff/pull/19104">#19104</a>)</li> <li>[<code>flake8-pytest-style</code>] Make example error out-of-the-box (<code>PT030</code>) (<a href="https://redirect.github.com/astral-sh/ruff/pull/19105">#19105</a>)</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md">ruff's changelog</a>.</em></p> <blockquote> <h2>0.12.2</h2> <h3>Preview features</h3> <ul> <li>[<code>flake8-pyi</code>] Expand <code>Optional[A]</code> to <code>A | None</code> (<code>PYI016</code>) (<a href="https://redirect.github.com/astral-sh/ruff/pull/18572">#18572</a>)</li> <li>[<code>pyupgrade</code>] Mark <code>UP008</code> fix safe if no comments are in range (<a href="https://redirect.github.com/astral-sh/ruff/pull/18683">#18683</a>)</li> </ul> <h3>Bug fixes</h3> <ul> <li>[<code>flake8-comprehensions</code>] Fix <code>C420</code> to prepend whitespace when needed (<a href="https://redirect.github.com/astral-sh/ruff/pull/18616">#18616</a>)</li> <li>[<code>perflint</code>] Fix <code>PERF403</code> panic on attribute or subscription loop variable (<a href="https://redirect.github.com/astral-sh/ruff/pull/19042">#19042</a>)</li> <li>[<code>pydocstyle</code>] Fix <code>D413</code> infinite loop for parenthesized docstring (<a href="https://redirect.github.com/astral-sh/ruff/pull/18930">#18930</a>)</li> <li>[<code>pylint</code>] Fix <code>PLW0108</code> autofix introducing a syntax error when the lambda's body contains an assignment expression (<a href="https://redirect.github.com/astral-sh/ruff/pull/18678">#18678</a>)</li> <li>[<code>refurb</code>] Fix false positive on empty tuples (<code>FURB168</code>) (<a href="https://redirect.github.com/astral-sh/ruff/pull/19058">#19058</a>)</li> <li>[<code>ruff</code>] Allow more <code>field</code> calls from <code>attrs</code> (<code>RUF009</code>) (<a href="https://redirect.github.com/astral-sh/ruff/pull/19021">#19021</a>)</li> <li>[<code>ruff</code>] Fix syntax error introduced for an empty string followed by a u-prefixed string (<code>UP025</code>) (<a href="https://redirect.github.com/astral-sh/ruff/pull/18899">#18899</a>)</li> </ul> <h3>Rule changes</h3> <ul> <li>[<code>flake8-executable</code>] Allow <code>uvx</code> in shebang line (<code>EXE003</code>) (<a href="https://redirect.github.com/astral-sh/ruff/pull/18967">#18967</a>)</li> <li>[<code>pandas</code>] Avoid flagging <code>PD002</code> if <code>pandas</code> is not imported (<a href="https://redirect.github.com/astral-sh/ruff/pull/18963">#18963</a>)</li> <li>[<code>pyupgrade</code>] Avoid PEP-604 unions with <code>typing.NamedTuple</code> (<code>UP007</code>, <code>UP045</code>) (<a href="https://redirect.github.com/astral-sh/ruff/pull/18682">#18682</a>)</li> </ul> <h3>Documentation</h3> <ul> <li>Document link between <code>import-outside-top-level (PLC0415)</code> and <code>lint.flake8-tidy-imports.banned-module-level-imports</code> (<a href="https://redirect.github.com/astral-sh/ruff/pull/18733">#18733</a>)</li> <li>Fix description of the <code>format.skip-magic-trailing-comma</code> example (<a href="https://redirect.github.com/astral-sh/ruff/pull/19095">#19095</a>)</li> <li>[<code>airflow</code>] Make <code>AIR302</code> example error out-of-the-box (<a href="https://redirect.github.com/astral-sh/ruff/pull/18988">#18988</a>)</li> <li>[<code>airflow</code>] Make <code>AIR312</code> example error out-of-the-box (<a href="https://redirect.github.com/astral-sh/ruff/pull/18989">#18989</a>)</li> <li>[<code>flake8-annotations</code>] Make <code>ANN401</code> example error out-of-the-box (<a href="https://redirect.github.com/astral-sh/ruff/pull/18974">#18974</a>)</li> <li>[<code>flake8-async</code>] Make <code>ASYNC100</code> example error out-of-the-box (<a href="https://redirect.github.com/astral-sh/ruff/pull/18993">#18993</a>)</li> <li>[<code>flake8-async</code>] Make <code>ASYNC105</code> example error out-of-the-box (<a href="https://redirect.github.com/astral-sh/ruff/pull/19002">#19002</a>)</li> <li>[<code>flake8-async</code>] Make <code>ASYNC110</code> example error out-of-the-box (<a href="https://redirect.github.com/astral-sh/ruff/pull/18975">#18975</a>)</li> <li>[<code>flake8-async</code>] Make <code>ASYNC210</code> example error out-of-the-box (<a href="https://redirect.github.com/astral-sh/ruff/pull/18977">#18977</a>)</li> <li>[<code>flake8-async</code>] Make <code>ASYNC220</code>, <code>ASYNC221</code>, and <code>ASYNC222</code> examples error out-of-the-box (<a href="https://redirect.github.com/astral-sh/ruff/pull/18978">#18978</a>)</li> <li>[<code>flake8-async</code>] Make <code>ASYNC251</code> example error out-of-the-box (<a href="https://redirect.github.com/astral-sh/ruff/pull/18990">#18990</a>)</li> <li>[<code>flake8-bandit</code>] Make <code>S201</code> example error out-of-the-box (<a href="https://redirect.github.com/astral-sh/ruff/pull/19017">#19017</a>)</li> <li>[<code>flake8-bandit</code>] Make <code>S604</code> and <code>S609</code> examples error out-of-the-box (<a href="https://redirect.github.com/astral-sh/ruff/pull/19049">#19049</a>)</li> <li>[<code>flake8-bugbear</code>] Make <code>B028</code> example error out-of-the-box (<a href="https://redirect.github.com/astral-sh/ruff/pull/19054">#19054</a>)</li> <li>[<code>flake8-bugbear</code>] Make <code>B911</code> example error out-of-the-box (<a href="https://redirect.github.com/astral-sh/ruff/pull/19051">#19051</a>)</li> <li>[<code>flake8-datetimez</code>] Make <code>DTZ011</code> example error out-of-the-box (<a href="https://redirect.github.com/astral-sh/ruff/pull/19055">#19055</a>)</li> <li>[<code>flake8-datetimez</code>] Make <code>DTZ901</code> example error out-of-the-box (<a href="https://redirect.github.com/astral-sh/ruff/pull/19056">#19056</a>)</li> <li>[<code>flake8-pyi</code>] Make <code>PYI032</code> example error out-of-the-box (<a href="https://redirect.github.com/astral-sh/ruff/pull/19061">#19061</a>)</li> <li>[<code>flake8-pyi</code>] Make example error out-of-the-box (<code>PYI014</code>, <code>PYI015</code>) (<a href="https://redirect.github.com/astral-sh/ruff/pull/19097">#19097</a>)</li> <li>[<code>flake8-pyi</code>] Make example error out-of-the-box (<code>PYI042</code>) (<a href="https://redirect.github.com/astral-sh/ruff/pull/19101">#19101</a>)</li> <li>[<code>flake8-pyi</code>] Make example error out-of-the-box (<code>PYI059</code>) (<a href="https://redirect.github.com/astral-sh/ruff/pull/19080">#19080</a>)</li> <li>[<code>flake8-pyi</code>] Make example error out-of-the-box (<code>PYI062</code>) (<a href="https://redirect.github.com/astral-sh/ruff/pull/19079">#19079</a>)</li> <li>[<code>flake8-pytest-style</code>] Make example error out-of-the-box (<code>PT023</code>) (<a href="https://redirect.github.com/astral-sh/ruff/pull/19104">#19104</a>)</li> <li>[<code>flake8-pytest-style</code>] Make example error out-of-the-box (<code>PT030</code>) (<a href="https://redirect.github.com/astral-sh/ruff/pull/19105">#19105</a>)</li> <li>[<code>flake8-quotes</code>] Make example error out-of-the-box (<code>Q003</code>) (<a href="https://redirect.github.com/astral-sh/ruff/pull/19106">#19106</a>)</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/astral-sh/ruff/commit/9bee8376a17401f9736b45fdefffb62edc2f1668"><code>9bee837</code></a> Bump 0.12.2 (<a href="https://redirect.github.com/astral-sh/ruff/issues/19126">#19126</a>)</li> <li><a href="https://github.com/astral-sh/ruff/commit/1c6717b149ddfbcd4aa0aee2e160320474392da9"><code>1c6717b</code></a> Filter private symbols from stubs if they are internal types (<a href="https://redirect.github.com/astral-sh/ruff/issues/19121">#19121</a>)</li> <li><a href="https://github.com/astral-sh/ruff/commit/1b813cd5f1933ab05ba7b96ace798199429c0bd6"><code>1b813cd</code></a> Fix description of the <code>format.skip-magic-trailing-comma</code> example (<a href="https://redirect.github.com/astral-sh/ruff/issues/19095">#19095</a>)</li> <li><a href="https://github.com/astral-sh/ruff/commit/b00f68a23cedbd3a38fc25bac63638f0f11fc3f0"><code>b00f68a</code></a> [<code>ruff</code>] Allow more <code>field</code> calls from <code>attrs</code> (<code>RUF009</code>) (<a href="https://redirect.github.com/astral-sh/ruff/issues/19021">#19021</a>)</li> <li><a href="https://github.com/astral-sh/ruff/commit/710c60f7135879b05f6c05a34085cd7af5c19e7f"><code>710c60f</code></a> [<code>flake8-pytest-style</code>] Make example error out-of-the-box (<code>PT023</code>) (<a href="https://redirect.github.com/astral-sh/ruff/issues/19104">#19104</a>)</li> <li><a href="https://github.com/astral-sh/ruff/commit/811e25d16e22ca4ce124d9514232211c9a0b27a1"><code>811e25d</code></a> [<code>flake8-pytest-style</code>] Make example error out-of-the-box (<code>PT030</code>) (<a href="https://redirect.github.com/astral-sh/ruff/issues/19105">#19105</a>)</li> <li><a href="https://github.com/astral-sh/ruff/commit/b78af2db4822dc55acbfb1024b30e69fe0262311"><code>b78af2d</code></a> [<code>flake8-quotes</code>] Make example error out-of-the-box (<code>Q003</code>) (<a href="https://redirect.github.com/astral-sh/ruff/issues/19106">#19106</a>)</li> <li><a href="https://github.com/astral-sh/ruff/commit/4f36f0677f09b0ed1ba20f583b6f017c4f7d26c8"><code>4f36f06</code></a> Document link between <code>import-outside-top-level (PLC0415)</code> and `lint.flake8-t...</li> <li><a href="https://github.com/astral-sh/ruff/commit/2589a2938ee58a1ff1b54a9558807ecb000ccca3"><code>2589a29</code></a> [<code>flake8-simplify</code>] Make example error out-of-the-box (<code>SIM113</code>) (<a href="https://redirect.github.com/astral-sh/ruff/issues/19109">#19109</a>)</li> <li><a href="https://github.com/astral-sh/ruff/commit/26bb8f7b7189558520bb386867579768b5a17347"><code>26bb8f7</code></a> [<code>flake8-simplify</code>] Make example error out-of-the-box (<code>SIM401</code>) (<a href="https://redirect.github.com/astral-sh/ruff/issues/19110">#19110</a>)</li> <li>Additional commits viewable in <a href="https://github.com/astral-sh/ruff/compare/0.12.1...0.12.2">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=ruff&package-manager=pip&previous-version=0.12.1&new-version=0.12.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* Bump setuptools-rust from 1.10.2 to 1.11.1 (#18655)dependabot[bot]2025-07-041-5/+5
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumps [setuptools-rust](https://github.com/PyO3/setuptools-rust) from 1.10.2 to 1.11.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/PyO3/setuptools-rust/releases">setuptools-rust's releases</a>.</em></p> <blockquote> <h2>v1.11.1</h2> <h3>Fixed</h3> <ul> <li>Fix finding cargo artifacts when filenames are empty. <a href="https://redirect.github.com/PyO3/setuptools-rust/pull/521">#521</a></li> </ul> <h2>v1.11.0</h2> <h3>Packaging</h3> <ul> <li>Drop support for Python 3.8. <a href="https://redirect.github.com/PyO3/setuptools-rust/pull/479">#479</a></li> <li>Support free-threaded Python. <a href="https://redirect.github.com/PyO3/setuptools-rust/pull/502">#502</a></li> <li>Support adding custom env vars. <a href="https://redirect.github.com/PyO3/setuptools-rust/pull/504">#504</a></li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/PyO3/setuptools-rust/blob/main/CHANGELOG.md">setuptools-rust's changelog</a>.</em></p> <blockquote> <h2>1.11.1 (2025-04-04)</h2> <h3>Fixed</h3> <ul> <li>Fix finding cargo artifacts when filenames are empty. <a href="https://redirect.github.com/PyO3/setuptools-rust/pull/521">#521</a></li> </ul> <h2>1.11.0 (2025-03-14)</h2> <h3>Packaging</h3> <ul> <li>Drop support for Python 3.8. <a href="https://redirect.github.com/PyO3/setuptools-rust/pull/479">#479</a></li> <li>Support free-threaded Python. <a href="https://redirect.github.com/PyO3/setuptools-rust/pull/502">#502</a></li> <li>Support adding custom env vars. <a href="https://redirect.github.com/PyO3/setuptools-rust/pull/504">#504</a></li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/PyO3/setuptools-rust/commit/cc5c23399393f04197d6e6ec92648c1f504d8deb"><code>cc5c233</code></a> release: 1.11.1 (<a href="https://redirect.github.com/PyO3/setuptools-rust/issues/529">#529</a>)</li> <li><a href="https://github.com/PyO3/setuptools-rust/commit/faa610deef49fb5c563f1624544908c0160aee6f"><code>faa610d</code></a> Fix finding cargo artifacts when <code>filenames</code> are empty (<a href="https://redirect.github.com/PyO3/setuptools-rust/issues/521">#521</a>)</li> <li><a href="https://github.com/PyO3/setuptools-rust/commit/a766bd503f8f0466d7bb4f034ed5dafab501d254"><code>a766bd5</code></a> use <code>SETUPTOOLS_RUST_CARGO_PROFILE=dev</code> for main matrix, document it (<a href="https://redirect.github.com/PyO3/setuptools-rust/issues/527">#527</a>)</li> <li><a href="https://github.com/PyO3/setuptools-rust/commit/229c49298456ed5ef7a105c452f6098bc1ca0159"><code>229c492</code></a> build(deps): bump the deps group across 5 directories with 1 update (<a href="https://redirect.github.com/PyO3/setuptools-rust/issues/522">#522</a>)</li> <li><a href="https://github.com/PyO3/setuptools-rust/commit/4141b0b4c81e5f762ad77d345f6f8fd63983674c"><code>4141b0b</code></a> build(deps): bump pypa/cibuildwheel from 2.22.0 to 2.23.2 (<a href="https://redirect.github.com/PyO3/setuptools-rust/issues/523">#523</a>)</li> <li><a href="https://github.com/PyO3/setuptools-rust/commit/fc4d72c6b925c86d627242be56532556525c123d"><code>fc4d72c</code></a> build(deps): bump pyo3 in /examples/hello-world-setuppy (<a href="https://redirect.github.com/PyO3/setuptools-rust/issues/524">#524</a>)</li> <li><a href="https://github.com/PyO3/setuptools-rust/commit/f20ba9c69c7652a4591fb8d55b7e715bf13eac7f"><code>f20ba9c</code></a> replace quansight-labs/setup-python with actions/setup-python (<a href="https://redirect.github.com/PyO3/setuptools-rust/issues/520">#520</a>)</li> <li><a href="https://github.com/PyO3/setuptools-rust/commit/1054e1c64518822c496ebd76ab0323e2d24936ff"><code>1054e1c</code></a> release: 1.11.0 (<a href="https://redirect.github.com/PyO3/setuptools-rust/issues/518">#518</a>)</li> <li><a href="https://github.com/PyO3/setuptools-rust/commit/d6817d765e9fc04305604d0c32901138fb2f106d"><code>d6817d7</code></a> Support adding custom env vars (<a href="https://redirect.github.com/PyO3/setuptools-rust/issues/504">#504</a>)</li> <li><a href="https://github.com/PyO3/setuptools-rust/commit/17980efa987f3a37526ece92b4b7d02494ed21e2"><code>17980ef</code></a> build(deps): bump the deps group across 3 directories with 1 update (<a href="https://redirect.github.com/PyO3/setuptools-rust/issues/516">#516</a>)</li> <li>Additional commits viewable in <a href="https://github.com/PyO3/setuptools-rust/compare/v1.10.2...v1.11.1">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=setuptools-rust&package-manager=pip&previous-version=1.10.2&new-version=1.11.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* Bump typing-extensions from 4.12.2 to 4.14.0 (#18654)dependabot[bot]2025-07-031-5/+5
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumps [typing-extensions](https://github.com/python/typing_extensions) from 4.12.2 to 4.14.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/python/typing_extensions/releases">typing-extensions's releases</a>.</em></p> <blockquote> <h2>4.14.0</h2> <p>This release adds several new features, including experimental support for inline typed dictionaries (<a href="https://peps.python.org/pep-0764/">PEP 764</a>) and sentinels (<a href="https://peps.python.org/pep-0661/">PEP 661</a>), and support for changes in Python 3.14. In addition, Python 3.8 is no longer supported.</p> <p>Changes since 4.14.0rc1:</p> <ul> <li>Remove <code>__or__</code> and <code>__ror__</code> methods from <code>typing_extensions.Sentinel</code> on Python versions &lt;3.10. PEP 604 was introduced in Python 3.10, and <code>typing_extensions</code> does not generally attempt to backport PEP-604 methods to prior versions.</li> <li>Further update <code>typing_extensions.evaluate_forward_ref</code> with changes in Python 3.14.</li> </ul> <p>Changes included in 4.14.0rc1:</p> <ul> <li>Drop support for Python 3.8 (including PyPy-3.8). Patch by <a href="https://github.com/Viicos">Victorien Plot</a>.</li> <li>Do not attempt to re-export names that have been removed from <code>typing</code>, anticipating the removal of <code>typing.no_type_check_decorator</code> in Python 3.15. Patch by Jelle Zijlstra.</li> <li>Update <code>typing_extensions.Format</code>, <code>typing_extensions.evaluate_forward_ref</code>, and <code>typing_extensions.TypedDict</code> to align with changes in Python 3.14. Patches by Jelle Zijlstra.</li> <li>Fix tests for Python 3.14 and 3.15. Patches by Jelle Zijlstra.</li> </ul> <p>New features:</p> <ul> <li>Add support for inline typed dictionaries (<a href="https://peps.python.org/pep-0764/">PEP 764</a>). Patch by <a href="https://github.com/Viicos">Victorien Plot</a>.</li> <li>Add <code>typing_extensions.Reader</code> and <code>typing_extensions.Writer</code>. Patch by Sebastian Rittau.</li> <li>Add support for sentinels (<a href="https://peps.python.org/pep-0661/">PEP 661</a>). Patch by <a href="https://github.com/Viicos">Victorien Plot</a>.</li> </ul> <h2>4.14.0rc1</h2> <p>Major changes:</p> <ul> <li>Drop support for Python 3.8 (including PyPy-3.8). Patch by <a href="https://github.com/Viicos">Victorien Plot</a>.</li> <li>Do not attempt to re-export names that have been removed from <code>typing</code>, anticipating the removal of <code>typing.no_type_check_decorator</code> in Python 3.15. Patch by Jelle Zijlstra.</li> <li>Update <code>typing_extensions.Format</code>, <code>typing_extensions.evaluate_forward_ref</code>, and <code>typing_extensions.TypedDict</code> to align with changes in Python 3.14. Patches by Jelle Zijlstra.</li> <li>Fix tests for Python 3.14 and 3.15. Patches by Jelle Zijlstra.</li> </ul> <p>New features:</p> <ul> <li>Add support for inline typed dictionaries (<a href="https://peps.python.org/pep-0764/">PEP 764</a>). Patch by <a href="https://github.com/Viicos">Victorien Plot</a>.</li> <li>Add <code>typing_extensions.Reader</code> and <code>typing_extensions.Writer</code>. Patch by Sebastian Rittau.</li> <li>Add support for sentinels (<a href="https://peps.python.org/pep-0661/">PEP 661</a>). Patch by</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/python/typing_extensions/blob/main/CHANGELOG.md">typing-extensions's changelog</a>.</em></p> <blockquote> <h1>Release 4.14.0 (June 2, 2025)</h1> <p>Changes since 4.14.0rc1:</p> <ul> <li>Remove <code>__or__</code> and <code>__ror__</code> methods from <code>typing_extensions.Sentinel</code> on Python versions &lt;3.10. PEP 604 was introduced in Python 3.10, and <code>typing_extensions</code> does not generally attempt to backport PEP-604 methods to prior versions.</li> <li>Further update <code>typing_extensions.evaluate_forward_ref</code> with changes in Python 3.14.</li> </ul> <h1>Release 4.14.0rc1 (May 24, 2025)</h1> <ul> <li>Drop support for Python 3.8 (including PyPy-3.8). Patch by <a href="https://github.com/Viicos">Victorien Plot</a>.</li> <li>Do not attempt to re-export names that have been removed from <code>typing</code>, anticipating the removal of <code>typing.no_type_check_decorator</code> in Python 3.15. Patch by Jelle Zijlstra.</li> <li>Update <code>typing_extensions.Format</code>, <code>typing_extensions.evaluate_forward_ref</code>, and <code>typing_extensions.TypedDict</code> to align with changes in Python 3.14. Patches by Jelle Zijlstra.</li> <li>Fix tests for Python 3.14 and 3.15. Patches by Jelle Zijlstra.</li> </ul> <p>New features:</p> <ul> <li>Add support for inline typed dictionaries (<a href="https://peps.python.org/pep-0764/">PEP 764</a>). Patch by <a href="https://github.com/Viicos">Victorien Plot</a>.</li> <li>Add <code>typing_extensions.Reader</code> and <code>typing_extensions.Writer</code>. Patch by Sebastian Rittau.</li> <li>Add support for sentinels (<a href="https://peps.python.org/pep-0661/">PEP 661</a>). Patch by <a href="https://github.com/Viicos">Victorien Plot</a>.</li> </ul> <h1>Release 4.13.2 (April 10, 2025)</h1> <ul> <li>Fix <code>TypeError</code> when taking the union of <code>typing_extensions.TypeAliasType</code> and a <code>typing.TypeAliasType</code> on Python 3.12 and 3.13. Patch by <a href="https://github.com/jorenham">Joren Hammudoglu</a>.</li> <li>Backport from CPython PR <a href="https://redirect.github.com/python/cpython/pull/132160">#132160</a> to avoid having user arguments shadowed in generated <code>__new__</code> by <code>@typing_extensions.deprecated</code>. Patch by <a href="https://github.com/Viicos">Victorien Plot</a>.</li> </ul> <h1>Release 4.13.1 (April 3, 2025)</h1> <p>Bugfixes:</p> <ul> <li>Fix regression in 4.13.0 on Python 3.10.2 causing a <code>TypeError</code> when using <code>Concatenate</code>. Patch by <a href="https://github.com/Daraan">Daraan</a>.</li> <li>Fix <code>TypeError</code> when using <code>evaluate_forward_ref</code> on Python 3.10.1-2 and 3.9.8-10. Patch by <a href="https://github.com/Daraan">Daraan</a>.</li> </ul> <h1>Release 4.13.0 (March 25, 2025)</h1> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/python/typing_extensions/commit/b07d24525615ba9377e47aaf5a26650a2517b2c4"><code>b07d245</code></a> Prepare release 4.14.0 (<a href="https://redirect.github.com/python/typing_extensions/issues/612">#612</a>)</li> <li><a href="https://github.com/python/typing_extensions/commit/fcf5265b3040337db1cfd6b786648a8ed0aeb0bf"><code>fcf5265</code></a> Backport evaluate_forward_ref() changes (<a href="https://redirect.github.com/python/typing_extensions/issues/611">#611</a>)</li> <li><a href="https://github.com/python/typing_extensions/commit/fadc1edbcfd942074007875007870c1df6acd4d0"><code>fadc1ed</code></a> Remove PEP-604 methods from <code>Sentinel</code> on Python &lt;3.10 (<a href="https://redirect.github.com/python/typing_extensions/issues/605">#605</a>)</li> <li><a href="https://github.com/python/typing_extensions/commit/44de568f73a93f29e52c2fc2d5f149305a4a3bae"><code>44de568</code></a> Add 3.14 to project classifiers and tox.ini (<a href="https://redirect.github.com/python/typing_extensions/issues/604">#604</a>)</li> <li><a href="https://github.com/python/typing_extensions/commit/36cc47605804318bf40ee26d765de2070741c25c"><code>36cc476</code></a> Prepare release 4.14.0rc1 (<a href="https://redirect.github.com/python/typing_extensions/issues/603">#603</a>)</li> <li><a href="https://github.com/python/typing_extensions/commit/ec1876c65000ac86faade29552245178918a7a69"><code>ec1876c</code></a> More fixes for 3.14 and 3.15 (<a href="https://redirect.github.com/python/typing_extensions/issues/602">#602</a>)</li> <li><a href="https://github.com/python/typing_extensions/commit/e89d789104978ba0f3abdb52b1592aa28fedd00f"><code>e89d789</code></a> Update <code>_caller()</code> implementation (<a href="https://redirect.github.com/python/typing_extensions/issues/598">#598</a>)</li> <li><a href="https://github.com/python/typing_extensions/commit/34bfd8423a22797619b14aa622ac0be82f6bf50d"><code>34bfd84</code></a> third party: fix typeguard (<a href="https://redirect.github.com/python/typing_extensions/issues/600">#600</a>)</li> <li><a href="https://github.com/python/typing_extensions/commit/479dae13d084c070301aa91265d1af278b181457"><code>479dae1</code></a> Add support for sentinels (PEP 661) (<a href="https://redirect.github.com/python/typing_extensions/issues/594">#594</a>)</li> <li><a href="https://github.com/python/typing_extensions/commit/f74a56a725e8d60727fccbeebe0dd71037bdf4bb"><code>f74a56a</code></a> Update PEP 649/749 implementation (<a href="https://redirect.github.com/python/typing_extensions/issues/596">#596</a>)</li> <li>Additional commits viewable in <a href="https://github.com/python/typing_extensions/compare/4.12.2...4.14.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=typing-extensions&package-manager=pip&previous-version=4.12.2&new-version=4.14.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* Bump phonenumbers from 9.0.2 to 9.0.8 (#18652)dependabot[bot]2025-07-031-3/+23
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumps [phonenumbers](https://github.com/daviddrysdale/python-phonenumbers) from 9.0.2 to 9.0.8. <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/daviddrysdale/python-phonenumbers/commit/9959754cdfca33facb25c1417c419f6f7251eb5c"><code>9959754</code></a> Prep for 9.0.8 release</li> <li><a href="https://github.com/daviddrysdale/python-phonenumbers/commit/6ffa6ffbec5297485a8a58e1d90a978bfaa595e4"><code>6ffa6ff</code></a> Generated files for metadata</li> <li><a href="https://github.com/daviddrysdale/python-phonenumbers/commit/4b028b4bd30b9d49a64feb4afb8e5a9ce136221a"><code>4b028b4</code></a> Merge metadata changes from upstream 9.0.8</li> <li><a href="https://github.com/daviddrysdale/python-phonenumbers/commit/6817dfb5ab6bb19a176c2c6bd4f5972736bd8d2f"><code>6817dfb</code></a> Prep for 9.0.7 release</li> <li><a href="https://github.com/daviddrysdale/python-phonenumbers/commit/e9a48434e2ba777bbc36d5d9f37e4a65bc00c576"><code>e9a4843</code></a> Generated files for metadata</li> <li><a href="https://github.com/daviddrysdale/python-phonenumbers/commit/8580645ba92ea2c2e0ae455b1aa2b89233881c80"><code>8580645</code></a> Merge metadata changes from upstream 9.0.7</li> <li><a href="https://github.com/daviddrysdale/python-phonenumbers/commit/e6d5f6270eae4e72c058c6b4cfa51f859ebf04b3"><code>e6d5f62</code></a> Prep for 9.0.6 release</li> <li><a href="https://github.com/daviddrysdale/python-phonenumbers/commit/e4e7dbec6c4e1d26e1b53792a221160654bef560"><code>e4e7dbe</code></a> Generated files for metadata</li> <li><a href="https://github.com/daviddrysdale/python-phonenumbers/commit/a8425e7a911e20a4bd6ee9076dcb8f463338f89d"><code>a8425e7</code></a> Merge metadata changes from upstream 9.0.6</li> <li><a href="https://github.com/daviddrysdale/python-phonenumbers/commit/e90d8ea1167ee6afa173822ce4fef0d7ac31be17"><code>e90d8ea</code></a> Prep for 9.0.5 release</li> <li>Additional commits viewable in <a href="https://github.com/daviddrysdale/python-phonenumbers/compare/v9.0.2...v9.0.8">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=phonenumbers&package-manager=pip&previous-version=9.0.2&new-version=9.0.8)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* Bump attrs from 24.2.0 to 25.3.0 (#18649)dependabot[bot]2025-07-031-10/+10
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumps [attrs](https://github.com/sponsors/hynek) from 24.2.0 to 25.3.0. <details> <summary>Commits</summary> <ul> <li>See full diff in <a href="https://github.com/sponsors/hynek/commits">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=attrs&package-manager=pip&previous-version=24.2.0&new-version=25.3.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* Bump authlib from 1.5.2 to 1.6.0 (#18642)dependabot[bot]2025-07-031-3/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumps [authlib](https://github.com/authlib/authlib) from 1.5.2 to 1.6.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/authlib/authlib/releases">authlib's releases</a>.</em></p> <blockquote> <h2>Version 1.6.0</h2> <ul> <li>Fix issue when <a href="https://datatracker.ietf.org/doc/html/rfc9207.html">RFC9207</a> is enabled and the authorization endpoint response is not a redirection. [pull request <a href="https://redirect.github.com/authlib/authlib/issues/733">#733</a>](<a href="https://redirect.github.com/authlib/authlib/pull/733">authlib/authlib#733</a>)</li> <li>Fix missing state parameter in authorization error responses. [issue <a href="https://redirect.github.com/authlib/authlib/issues/525">#525</a>](<a href="https://redirect.github.com/authlib/authlib/issues/525">authlib/authlib#525</a>)</li> <li>Support for acr and amr claims in id_token. [issue <a href="https://redirect.github.com/authlib/authlib/issues/734">#734</a>](<a href="https://redirect.github.com/authlib/authlib/issues/734">authlib/authlib#734</a>)</li> <li>Support for the none JWS algorithm.</li> <li>Fix response_types strict order during dynamic client registration. [issue <a href="https://redirect.github.com/authlib/authlib/issues/760">#760</a>](<a href="https://redirect.github.com/authlib/authlib/issues/760">authlib/authlib#760</a>)</li> <li>Implement <a href="https://datatracker.ietf.org/doc/html/rfc9101.html">RFC9101 The OAuth 2.0 Authorization Framework: JWT-Secured Authorization Request (JAR)</a>. [issue <a href="https://redirect.github.com/authlib/authlib/issues/723">#723</a>](<a href="https://redirect.github.com/authlib/authlib/issues/723">authlib/authlib#723</a>)</li> <li>OIDC <a href="https://docs.authlib.org/en/latest/specs/oidc.html#authlib.oidc.core.UserInfoEndpoint">UserInfo endpoint</a> support. [issue <a href="https://redirect.github.com/authlib/authlib/issues/459">#459</a>](<a href="https://redirect.github.com/authlib/authlib/issues/459">authlib/authlib#459</a>)</li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/authlib/authlib/blob/main/docs/changelog.rst">authlib's changelog</a>.</em></p> <blockquote> <h2>Version 1.6.0</h2> <p><strong>Released on May 22, 2025</strong></p> <ul> <li>Fix issue when :rfc:<code>RFC9207 &lt;9207&gt;</code> is enabled and the authorization endpoint response is not a redirection. :pr:<code>733</code></li> <li>Fix missing <code>state</code> parameter in authorization error responses. :issue:<code>525</code></li> <li>Support for <code>acr</code> and <code>amr</code> claims in <code>id_token</code>. :issue:<code>734</code></li> <li>Support for the <code>none</code> JWS algorithm.</li> <li>Fix <code>response_types</code> strict order during dynamic client registration. :issue:<code>760</code></li> <li>Implement :rfc:<code>RFC9101 The OAuth 2.0 Authorization Framework: JWT-Secured Authorization Request (JAR) &lt;9101&gt;</code>. :issue:<code>723</code></li> <li>OIDC :class:<code>UserInfo endpoint &lt;authlib.oidc.core.userinfo.UserInfoEndpoint&gt;</code> support. :issue:<code>459</code></li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/authlib/authlib/commit/fe87a117f941975793bf4063e9b08b90e88b230a"><code>fe87a11</code></a> chore: release version 1.6.0</li> <li><a href="https://github.com/authlib/authlib/commit/036a0b71532ada9371f0fc41f6bcd2287666bb20"><code>036a0b7</code></a> Merge pull request <a href="https://redirect.github.com/authlib/authlib/issues/774">#774</a> from azmeuk/459-userinfo</li> <li><a href="https://github.com/authlib/authlib/commit/449a1a24a42f5090f339dc60cab29ac89203e971"><code>449a1a2</code></a> feat: OIDC userinfo endpoint support</li> <li><a href="https://github.com/authlib/authlib/commit/d429c36717cfa1df8723139ca4c8d5939ed7fd73"><code>d429c36</code></a> Merge pull request <a href="https://redirect.github.com/authlib/authlib/issues/749">#749</a> from azmeuk/724-jar</li> <li><a href="https://github.com/authlib/authlib/commit/a524d23e95a1ef4e1fd0d4b4cdb0c0005cc74757"><code>a524d23</code></a> chore: move 1.7 deprecations to 1.8</li> <li><a href="https://github.com/authlib/authlib/commit/f37e60ec0cac660df3b1e4256883e77107aa5d78"><code>f37e60e</code></a> feat: implement rfc9101 JWT authorization request</li> <li><a href="https://github.com/authlib/authlib/commit/8a6c714fdbfd8ad574f51eb880590efdc6235912"><code>8a6c714</code></a> refactor: OAuth2 hook mechanism overhaul</li> <li><a href="https://github.com/authlib/authlib/commit/ff1b66bedc736a86ba596ad5d0344c5c2c2f03ad"><code>ff1b66b</code></a> refactor: extract OAuth2Payload from OAuth2Request</li> <li><a href="https://github.com/authlib/authlib/commit/98eebd14b99411235da75457a7aec21d473d448e"><code>98eebd1</code></a> refactor: remove uncovered code in OAuth2Request</li> <li><a href="https://github.com/authlib/authlib/commit/1b848e2a1e0aadc70762f4a707ab91e1b99f2300"><code>1b848e2</code></a> refactor: create_authorization_response can take an optional 'grant' arg</li> <li>Additional commits viewable in <a href="https://github.com/authlib/authlib/compare/v1.5.2...v1.6.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=authlib&package-manager=pip&previous-version=1.5.2&new-version=1.6.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* Bump ijson from 3.3.0 to 3.4.0 (#18650)dependabot[bot]2025-07-031-96/+87
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumps [ijson](https://github.com/ICRAR/ijson) from 3.3.0 to 3.4.0. <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/ICRAR/ijson/blob/master/CHANGELOG.md">ijson's changelog</a>.</em></p> <blockquote> <h2>[3.4.0]</h2> <ul> <li>Added support for PEP 489 multi-phase initialisation and per-module state for our C extension, allowing us to support sub-interpreters with per-interpreter GIL.</li> <li>Advertise support for free-threading python mode.</li> <li>Removed support for Python &lt; 3.9.</li> <li>Enhanced generators so they yield all possible results to users before errors are raised (<a href="https://redirect.github.com/ICRAR/ijson/issues/123">#123</a>).</li> <li>Added <code>ijson.ALL_BACKENDS</code> constant listing all supported backends (which might or not be available at runtime).</li> <li>Added a <code>capabilities</code> constant to each backend describing which capabilities it supports.</li> <li>Exposing backend's name under <code>&lt;backend&gt;.backend_name</code>, and default backend's name under <code>ijson.backend_name</code>. This is similar to the already existing <code>name</code> constant, only slightly better named to hopefully avoid confusion.</li> <li>Restructured source code so all code lives under <code>src/</code>, and the <code>ijson.backends._yajl2</code> extension under <code>src/ijson/backends/ext/_yajl2</code>. This allows C backend tests to actually run on cibuildwheel.</li> <li>Improved performance of <code>parse</code> routine in C backend by ~4%.</li> <li>Fixed several potential stability issues in C backend around correct error handling.</li> <li>Fixed corner-case wrong behaviour of <code>yajl2_c</code> backend, which didn't work correctly with user-provided event names.</li> <li>Pointing to our own fork of yajl (for when we build it ourselves) that contains fixes for all known CVEs (<a href="https://redirect.github.com/ICRAR/ijson/issues/126">#126</a>).</li> <li>Removed leftover compatibility bits in the C backend.</li> <li>Fixed potential issue with <code>yajl</code> and <code>yajl2</code> backends where crashes could occur at interpreter shutdown.</li> <li>Removed tox.</li> <li>Moved static project metadata to <code>pyproject.toml</code>.</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/ICRAR/ijson/commit/36701bed11497ec5fee22239f0a8c2e4a8358e78"><code>36701be</code></a> Release ijson 3.4.0</li> <li><a href="https://github.com/ICRAR/ijson/commit/cfb044a36fc1f1f6959e7680b7e79edc6a109828"><code>cfb044a</code></a> Modernize packaging (<a href="https://redirect.github.com/ICRAR/ijson/issues/138">#138</a>)</li> <li><a href="https://github.com/ICRAR/ijson/commit/044cf9b6b97f23bb1dffc0dadab5a08f509d29f8"><code>044cf9b</code></a> Bump pypa/cibuildwheel from 2.23.2 to 2.23.3 (<a href="https://redirect.github.com/ICRAR/ijson/issues/140">#140</a>)</li> <li><a href="https://github.com/ICRAR/ijson/commit/81e24b4045b8a9cc730ba67dce2d96d0c1884e31"><code>81e24b4</code></a> Allow building embedded yajl with cmake 4.0</li> <li><a href="https://github.com/ICRAR/ijson/commit/b3f9647a54acfae7472d615303a0974dbcd6f9fa"><code>b3f9647</code></a> Bump pypa/cibuildwheel from 2.23.1 to 2.23.2 (<a href="https://redirect.github.com/ICRAR/ijson/issues/137">#137</a>)</li> <li><a href="https://github.com/ICRAR/ijson/commit/d8fd6d2ef5646b8df58b3fb76921fe9368d05533"><code>d8fd6d2</code></a> Bump pypa/cibuildwheel from 2.23.0 to 2.23.1 (<a href="https://redirect.github.com/ICRAR/ijson/issues/134">#134</a>)</li> <li><a href="https://github.com/ICRAR/ijson/commit/caebc6fa38f0aeaee1f9705975c73b8b2d248ac1"><code>caebc6f</code></a> Bump pypa/cibuildwheel from 2.22.0 to 2.23.0 (<a href="https://redirect.github.com/ICRAR/ijson/issues/133">#133</a>)</li> <li><a href="https://github.com/ICRAR/ijson/commit/698b114e7cf780f7aedde57fd79d2f10d58b8e26"><code>698b114</code></a> Downgrade to ubuntu-22.04 to avoid gcc segfault</li> <li><a href="https://github.com/ICRAR/ijson/commit/9f28dc0d54d1273dbed15fd7f4a4fcd8a62b90b0"><code>9f28dc0</code></a> Allow certain branches to trigger a full CI build</li> <li><a href="https://github.com/ICRAR/ijson/commit/901fd3b3bda1120aa60efe9b23195536e3dd8bc9"><code>901fd3b</code></a> Add custom event name interning to yajl2_c</li> <li>Additional commits viewable in <a href="https://github.com/ICRAR/ijson/compare/v3.3.0...v3.4.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=ijson&package-manager=pip&previous-version=3.3.0&new-version=3.4.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* Bump msgpack from 1.1.0 to 1.1.1 (#18651)dependabot[bot]2025-07-031-65/+60
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumps [msgpack](https://github.com/msgpack/msgpack-python) from 1.1.0 to 1.1.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/msgpack/msgpack-python/releases">msgpack's releases</a>.</em></p> <blockquote> <h2>v1.1.1</h2> <h2>What's Changed</h2> <ul> <li>Add Python 3.13 trove classifier by <a href="https://github.com/edgarrmondragon"><code>@​edgarrmondragon</code></a> in <a href="https://redirect.github.com/msgpack/msgpack-python/pull/626">msgpack/msgpack-python#626</a></li> <li>update Cython to 3.1.1 by <a href="https://github.com/methane"><code>@​methane</code></a> in <a href="https://redirect.github.com/msgpack/msgpack-python/pull/637">msgpack/msgpack-python#637</a></li> <li>update cibuildwheel to v2.23.3 by <a href="https://github.com/methane"><code>@​methane</code></a> in <a href="https://redirect.github.com/msgpack/msgpack-python/pull/638">msgpack/msgpack-python#638</a></li> <li>upload to PyPI on create a release by <a href="https://github.com/methane"><code>@​methane</code></a> in <a href="https://redirect.github.com/msgpack/msgpack-python/pull/639">msgpack/msgpack-python#639</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/edgarrmondragon"><code>@​edgarrmondragon</code></a> made their first contribution in <a href="https://redirect.github.com/msgpack/msgpack-python/pull/626">msgpack/msgpack-python#626</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/msgpack/msgpack-python/compare/v1.1.0...v1.1.1">https://github.com/msgpack/msgpack-python/compare/v1.1.0...v1.1.1</a></p> <h2>v1.1.1rc1</h2> <h2>What's Changed</h2> <ul> <li>Add Python 3.13 trove classifier by <a href="https://github.com/edgarrmondragon"><code>@​edgarrmondragon</code></a> in <a href="https://redirect.github.com/msgpack/msgpack-python/pull/626">msgpack/msgpack-python#626</a></li> <li>update Cython to 3.1.1 by <a href="https://github.com/methane"><code>@​methane</code></a> in <a href="https://redirect.github.com/msgpack/msgpack-python/pull/637">msgpack/msgpack-python#637</a></li> <li>update cibuildwheel to v2.23.3 by <a href="https://github.com/methane"><code>@​methane</code></a> in <a href="https://redirect.github.com/msgpack/msgpack-python/pull/638">msgpack/msgpack-python#638</a></li> <li>upload to PyPI on create a release by <a href="https://github.com/methane"><code>@​methane</code></a> in <a href="https://redirect.github.com/msgpack/msgpack-python/pull/639">msgpack/msgpack-python#639</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/edgarrmondragon"><code>@​edgarrmondragon</code></a> made their first contribution in <a href="https://redirect.github.com/msgpack/msgpack-python/pull/626">msgpack/msgpack-python#626</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/msgpack/msgpack-python/compare/v1.1.0...v1.1.1rc1">https://github.com/msgpack/msgpack-python/compare/v1.1.0...v1.1.1rc1</a></p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/msgpack/msgpack-python/blob/main/ChangeLog.rst">msgpack's changelog</a>.</em></p> <blockquote> <h1>1.1.1</h1> <p>Release Date: 2025-06-13</p> <ul> <li>No change from 1.1.1rc1.</li> </ul> <h1>1.1.1rc1</h1> <p>Release Date: 2025-06-06</p> <ul> <li>Update Cython to 3.1.1 and cibuildwheel to 2.23.3.</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/msgpack/msgpack-python/commit/42f056f3cfaf2e3ec220db2f864e7613d433ad48"><code>42f056f</code></a> v1.1.1</li> <li><a href="https://github.com/msgpack/msgpack-python/commit/e6445d3b922ca0b9bc82695dd9d1c1529763095a"><code>e6445d3</code></a> v1.1.1rc1</li> <li><a href="https://github.com/msgpack/msgpack-python/commit/fe9e620a607702b31476f092ad01a387cff4cfbd"><code>fe9e620</code></a> upload to PyPI on create a release (<a href="https://redirect.github.com/msgpack/msgpack-python/issues/639">#639</a>)</li> <li><a href="https://github.com/msgpack/msgpack-python/commit/cdc764450370ff80e7c83edbe8d015f08f6fb9b3"><code>cdc7644</code></a> update cibuildwheel to v2.23.3 (<a href="https://redirect.github.com/msgpack/msgpack-python/issues/638">#638</a>)</li> <li><a href="https://github.com/msgpack/msgpack-python/commit/868aa2cd83f39237deb957c68ce7232422a5950b"><code>868aa2c</code></a> update Cython to 3.1.1 (<a href="https://redirect.github.com/msgpack/msgpack-python/issues/637">#637</a>)</li> <li><a href="https://github.com/msgpack/msgpack-python/commit/0eeabfb453844b441a4a77097b3d5aa0cb6645b6"><code>0eeabfb</code></a> Add Python 3.13 trove classifier (<a href="https://redirect.github.com/msgpack/msgpack-python/issues/626">#626</a>)</li> <li>See full diff in <a href="https://github.com/msgpack/msgpack-python/compare/v1.1.0...v1.1.1">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=msgpack&package-manager=pip&previous-version=1.1.0&new-version=1.1.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* Bump types-setuptools from 75.2.0.20241019 to 80.9.0.20250529 (#18644)dependabot[bot]2025-07-031-4/+4
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumps [types-setuptools](https://github.com/typeshed-internal/stub_uploader) from 75.2.0.20241019 to 80.9.0.20250529. <details> <summary>Commits</summary> <ul> <li>See full diff in <a href="https://github.com/typeshed-internal/stub_uploader/commits">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=types-setuptools&package-manager=pip&previous-version=75.2.0.20241019&new-version=80.9.0.20250529)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* Bump ruff from 0.11.11 to 0.12.1 (#18645)dependabot[bot]2025-07-032-21/+21
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumps [ruff](https://github.com/astral-sh/ruff) from 0.11.11 to 0.12.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/astral-sh/ruff/releases">ruff's releases</a>.</em></p> <blockquote> <h2>0.12.1</h2> <h2>Release Notes</h2> <h3>Preview features</h3> <ul> <li>[<code>flake8-errmsg</code>] Extend <code>EM101</code> to support byte strings (<a href="https://redirect.github.com/astral-sh/ruff/pull/18867">#18867</a>)</li> <li>[<code>flake8-use-pathlib</code>] Add autofix for <code>PTH202</code> (<a href="https://redirect.github.com/astral-sh/ruff/pull/18763">#18763</a>)</li> <li>[<code>pygrep-hooks</code>] Add <code>AsyncMock</code> methods to <code>invalid-mock-access</code> (<code>PGH005</code>) (<a href="https://redirect.github.com/astral-sh/ruff/pull/18547">#18547</a>)</li> <li>[<code>pylint</code>] Ignore <code>__init__.py</code> files in (<code>PLC0414</code>) (<a href="https://redirect.github.com/astral-sh/ruff/pull/18400">#18400</a>)</li> <li>[<code>ruff</code>] Trigger <code>RUF037</code> for empty string and byte strings (<a href="https://redirect.github.com/astral-sh/ruff/pull/18862">#18862</a>)</li> <li>[formatter] Fix missing blank lines before decorated classes in <code>.pyi</code> files (<a href="https://redirect.github.com/astral-sh/ruff/pull/18888">#18888</a>)</li> </ul> <h3>Bug fixes</h3> <ul> <li>Avoid generating diagnostics with per-file ignores (<a href="https://redirect.github.com/astral-sh/ruff/pull/18801">#18801</a>)</li> <li>Handle parenthesized arguments in <code>remove_argument</code> (<a href="https://redirect.github.com/astral-sh/ruff/pull/18805">#18805</a>)</li> <li>[<code>flake8-logging</code>] Avoid false positive for <code>exc_info=True</code> outside <code>logger.exception</code> (<code>LOG014</code>) (<a href="https://redirect.github.com/astral-sh/ruff/pull/18737">#18737</a>)</li> <li>[<code>flake8-pytest-style</code>] Enforce <code>pytest</code> import for decorators (<a href="https://redirect.github.com/astral-sh/ruff/pull/18779">#18779</a>)</li> <li>[<code>flake8-pytest-style</code>] Mark autofix for <code>PT001</code> and <code>PT023</code> as unsafe if there's comments in the decorator (<a href="https://redirect.github.com/astral-sh/ruff/pull/18792">#18792</a>)</li> <li>[<code>flake8-pytest-style</code>] <code>PT001</code>/<code>PT023</code> fix makes syntax error on parenthesized decorator (<a href="https://redirect.github.com/astral-sh/ruff/pull/18782">#18782</a>)</li> <li>[<code>flake8-raise</code>] Make fix unsafe if it deletes comments (<code>RSE102</code>) (<a href="https://redirect.github.com/astral-sh/ruff/pull/18788">#18788</a>)</li> <li>[<code>flake8-simplify</code>] Fix <code>SIM911</code> autofix creating a syntax error (<a href="https://redirect.github.com/astral-sh/ruff/pull/18793">#18793</a>)</li> <li>[<code>flake8-simplify</code>] Fix false negatives for shadowed bindings (<code>SIM910</code>, <code>SIM911</code>) (<a href="https://redirect.github.com/astral-sh/ruff/pull/18794">#18794</a>)</li> <li>[<code>flake8-simplify</code>] Preserve original behavior for <code>except ()</code> and bare <code>except</code> (<code>SIM105</code>) (<a href="https://redirect.github.com/astral-sh/ruff/pull/18213">#18213</a>)</li> <li>[<code>flake8-pyi</code>] Fix <code>PYI041</code>'s fix causing <code>TypeError</code> with <code>None | None | ...</code> (<a href="https://redirect.github.com/astral-sh/ruff/pull/18637">#18637</a>)</li> <li>[<code>perflint</code>] Fix <code>PERF101</code> autofix creating a syntax error and mark autofix as unsafe if there are comments in the <code>list</code> call expr (<a href="https://redirect.github.com/astral-sh/ruff/pull/18803">#18803</a>)</li> <li>[<code>perflint</code>] Fix false negative in <code>PERF401</code> (<a href="https://redirect.github.com/astral-sh/ruff/pull/18866">#18866</a>)</li> <li>[<code>pylint</code>] Avoid flattening nested <code>min</code>/<code>max</code> when outer call has single argument (<code>PLW3301</code>) (<a href="https://redirect.github.com/astral-sh/ruff/pull/16885">#16885</a>)</li> <li>[<code>pylint</code>] Fix <code>PLC2801</code> autofix creating a syntax error (<a href="https://redirect.github.com/astral-sh/ruff/pull/18857">#18857</a>)</li> <li>[<code>pylint</code>] Mark <code>PLE0241</code> autofix as unsafe if there's comments in the base classes (<a href="https://redirect.github.com/astral-sh/ruff/pull/18832">#18832</a>)</li> <li>[<code>pylint</code>] Suppress <code>PLE2510</code>/<code>PLE2512</code>/<code>PLE2513</code>/<code>PLE2514</code>/<code>PLE2515</code> autofix if the text contains an odd number of backslashes (<a href="https://redirect.github.com/astral-sh/ruff/pull/18856">#18856</a>)</li> <li>[<code>refurb</code>] Detect more exotic float literals in <code>FURB164</code> (<a href="https://redirect.github.com/astral-sh/ruff/pull/18925">#18925</a>)</li> <li>[<code>refurb</code>] Fix <code>FURB163</code> autofix creating a syntax error for <code>yield</code> expressions (<a href="https://redirect.github.com/astral-sh/ruff/pull/18756">#18756</a>)</li> <li>[<code>refurb</code>] Mark <code>FURB129</code> autofix as unsafe if there's comments in the <code>readlines</code> call (<a href="https://redirect.github.com/astral-sh/ruff/pull/18858">#18858</a>)</li> <li>[<code>ruff</code>] Fix false positives and negatives in <code>RUF010</code> (<a href="https://redirect.github.com/astral-sh/ruff/pull/18690">#18690</a>)</li> <li>Fix casing of <code>analyze.direction</code> variant names (<a href="https://redirect.github.com/astral-sh/ruff/pull/18892">#18892</a>)</li> </ul> <h3>Rule changes</h3> <ul> <li>Fix f-string interpolation escaping in generated fixes (<a href="https://redirect.github.com/astral-sh/ruff/pull/18882">#18882</a>)</li> <li>[<code>flake8-return</code>] Mark <code>RET501</code> fix unsafe if comments are inside (<a href="https://redirect.github.com/astral-sh/ruff/pull/18780">#18780</a>)</li> <li>[<code>flake8-async</code>] Fix detection for large integer sleep durations in <code>ASYNC116</code> rule (<a href="https://redirect.github.com/astral-sh/ruff/pull/18767">#18767</a>)</li> <li>[<code>flake8-async</code>] Mark autofix for <code>ASYNC115</code> as unsafe if the call expression contains comments (<a href="https://redirect.github.com/astral-sh/ruff/pull/18753">#18753</a>)</li> <li>[<code>flake8-bugbear</code>] Mark autofix for <code>B004</code> as unsafe if the <code>hasattr</code> call expr contains comments (<a href="https://redirect.github.com/astral-sh/ruff/pull/18755">#18755</a>)</li> <li>[<code>flake8-comprehension</code>] Mark autofix for <code>C420</code> as unsafe if there's comments inside the dict comprehension (<a href="https://redirect.github.com/astral-sh/ruff/pull/18768">#18768</a>)</li> <li>[<code>flake8-comprehensions</code>] Handle template strings for comprehension fixes (<a href="https://redirect.github.com/astral-sh/ruff/pull/18710">#18710</a>)</li> <li>[<code>flake8-future-annotations</code>] Add autofix (<code>FA100</code>) (<a href="https://redirect.github.com/astral-sh/ruff/pull/18903">#18903</a>)</li> <li>[<code>pyflakes</code>] Mark <code>F504</code>/<code>F522</code>/<code>F523</code> autofix as unsafe if there's a call with side effect (<a href="https://redirect.github.com/astral-sh/ruff/pull/18839">#18839</a>)</li> <li>[<code>pylint</code>] Allow fix with comments and document performance implications (<code>PLW3301</code>) (<a href="https://redirect.github.com/astral-sh/ruff/pull/18936">#18936</a>)</li> <li>[<code>pylint</code>] Detect more exotic <code>NaN</code> literals in <code>PLW0177</code> (<a href="https://redirect.github.com/astral-sh/ruff/pull/18630">#18630</a>)</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md">ruff's changelog</a>.</em></p> <blockquote> <h2>0.12.1</h2> <h3>Preview features</h3> <ul> <li>[<code>flake8-errmsg</code>] Extend <code>EM101</code> to support byte strings (<a href="https://redirect.github.com/astral-sh/ruff/pull/18867">#18867</a>)</li> <li>[<code>flake8-use-pathlib</code>] Add autofix for <code>PTH202</code> (<a href="https://redirect.github.com/astral-sh/ruff/pull/18763">#18763</a>)</li> <li>[<code>pygrep-hooks</code>] Add <code>AsyncMock</code> methods to <code>invalid-mock-access</code> (<code>PGH005</code>) (<a href="https://redirect.github.com/astral-sh/ruff/pull/18547">#18547</a>)</li> <li>[<code>pylint</code>] Ignore <code>__init__.py</code> files in (<code>PLC0414</code>) (<a href="https://redirect.github.com/astral-sh/ruff/pull/18400">#18400</a>)</li> <li>[<code>ruff</code>] Trigger <code>RUF037</code> for empty string and byte strings (<a href="https://redirect.github.com/astral-sh/ruff/pull/18862">#18862</a>)</li> <li>[formatter] Fix missing blank lines before decorated classes in <code>.pyi</code> files (<a href="https://redirect.github.com/astral-sh/ruff/pull/18888">#18888</a>)</li> </ul> <h3>Bug fixes</h3> <ul> <li>Avoid generating diagnostics with per-file ignores (<a href="https://redirect.github.com/astral-sh/ruff/pull/18801">#18801</a>)</li> <li>Handle parenthesized arguments in <code>remove_argument</code> (<a href="https://redirect.github.com/astral-sh/ruff/pull/18805">#18805</a>)</li> <li>[<code>flake8-logging</code>] Avoid false positive for <code>exc_info=True</code> outside <code>logger.exception</code> (<code>LOG014</code>) (<a href="https://redirect.github.com/astral-sh/ruff/pull/18737">#18737</a>)</li> <li>[<code>flake8-pytest-style</code>] Enforce <code>pytest</code> import for decorators (<a href="https://redirect.github.com/astral-sh/ruff/pull/18779">#18779</a>)</li> <li>[<code>flake8-pytest-style</code>] Mark autofix for <code>PT001</code> and <code>PT023</code> as unsafe if there's comments in the decorator (<a href="https://redirect.github.com/astral-sh/ruff/pull/18792">#18792</a>)</li> <li>[<code>flake8-pytest-style</code>] <code>PT001</code>/<code>PT023</code> fix makes syntax error on parenthesized decorator (<a href="https://redirect.github.com/astral-sh/ruff/pull/18782">#18782</a>)</li> <li>[<code>flake8-raise</code>] Make fix unsafe if it deletes comments (<code>RSE102</code>) (<a href="https://redirect.github.com/astral-sh/ruff/pull/18788">#18788</a>)</li> <li>[<code>flake8-simplify</code>] Fix <code>SIM911</code> autofix creating a syntax error (<a href="https://redirect.github.com/astral-sh/ruff/pull/18793">#18793</a>)</li> <li>[<code>flake8-simplify</code>] Fix false negatives for shadowed bindings (<code>SIM910</code>, <code>SIM911</code>) (<a href="https://redirect.github.com/astral-sh/ruff/pull/18794">#18794</a>)</li> <li>[<code>flake8-simplify</code>] Preserve original behavior for <code>except ()</code> and bare <code>except</code> (<code>SIM105</code>) (<a href="https://redirect.github.com/astral-sh/ruff/pull/18213">#18213</a>)</li> <li>[<code>flake8-pyi</code>] Fix <code>PYI041</code>'s fix causing <code>TypeError</code> with <code>None | None | ...</code> (<a href="https://redirect.github.com/astral-sh/ruff/pull/18637">#18637</a>)</li> <li>[<code>perflint</code>] Fix <code>PERF101</code> autofix creating a syntax error and mark autofix as unsafe if there are comments in the <code>list</code> call expr (<a href="https://redirect.github.com/astral-sh/ruff/pull/18803">#18803</a>)</li> <li>[<code>perflint</code>] Fix false negative in <code>PERF401</code> (<a href="https://redirect.github.com/astral-sh/ruff/pull/18866">#18866</a>)</li> <li>[<code>pylint</code>] Avoid flattening nested <code>min</code>/<code>max</code> when outer call has single argument (<code>PLW3301</code>) (<a href="https://redirect.github.com/astral-sh/ruff/pull/16885">#16885</a>)</li> <li>[<code>pylint</code>] Fix <code>PLC2801</code> autofix creating a syntax error (<a href="https://redirect.github.com/astral-sh/ruff/pull/18857">#18857</a>)</li> <li>[<code>pylint</code>] Mark <code>PLE0241</code> autofix as unsafe if there's comments in the base classes (<a href="https://redirect.github.com/astral-sh/ruff/pull/18832">#18832</a>)</li> <li>[<code>pylint</code>] Suppress <code>PLE2510</code>/<code>PLE2512</code>/<code>PLE2513</code>/<code>PLE2514</code>/<code>PLE2515</code> autofix if the text contains an odd number of backslashes (<a href="https://redirect.github.com/astral-sh/ruff/pull/18856">#18856</a>)</li> <li>[<code>refurb</code>] Detect more exotic float literals in <code>FURB164</code> (<a href="https://redirect.github.com/astral-sh/ruff/pull/18925">#18925</a>)</li> <li>[<code>refurb</code>] Fix <code>FURB163</code> autofix creating a syntax error for <code>yield</code> expressions (<a href="https://redirect.github.com/astral-sh/ruff/pull/18756">#18756</a>)</li> <li>[<code>refurb</code>] Mark <code>FURB129</code> autofix as unsafe if there's comments in the <code>readlines</code> call (<a href="https://redirect.github.com/astral-sh/ruff/pull/18858">#18858</a>)</li> <li>[<code>ruff</code>] Fix false positives and negatives in <code>RUF010</code> (<a href="https://redirect.github.com/astral-sh/ruff/pull/18690">#18690</a>)</li> <li>Fix casing of <code>analyze.direction</code> variant names (<a href="https://redirect.github.com/astral-sh/ruff/pull/18892">#18892</a>)</li> </ul> <h3>Rule changes</h3> <ul> <li>Fix f-string interpolation escaping in generated fixes (<a href="https://redirect.github.com/astral-sh/ruff/pull/18882">#18882</a>)</li> <li>[<code>flake8-return</code>] Mark <code>RET501</code> fix unsafe if comments are inside (<a href="https://redirect.github.com/astral-sh/ruff/pull/18780">#18780</a>)</li> <li>[<code>flake8-async</code>] Fix detection for large integer sleep durations in <code>ASYNC116</code> rule (<a href="https://redirect.github.com/astral-sh/ruff/pull/18767">#18767</a>)</li> <li>[<code>flake8-async</code>] Mark autofix for <code>ASYNC115</code> as unsafe if the call expression contains comments (<a href="https://redirect.github.com/astral-sh/ruff/pull/18753">#18753</a>)</li> <li>[<code>flake8-bugbear</code>] Mark autofix for <code>B004</code> as unsafe if the <code>hasattr</code> call expr contains comments (<a href="https://redirect.github.com/astral-sh/ruff/pull/18755">#18755</a>)</li> <li>[<code>flake8-comprehension</code>] Mark autofix for <code>C420</code> as unsafe if there's comments inside the dict comprehension (<a href="https://redirect.github.com/astral-sh/ruff/pull/18768">#18768</a>)</li> <li>[<code>flake8-comprehensions</code>] Handle template strings for comprehension fixes (<a href="https://redirect.github.com/astral-sh/ruff/pull/18710">#18710</a>)</li> <li>[<code>flake8-future-annotations</code>] Add autofix (<code>FA100</code>) (<a href="https://redirect.github.com/astral-sh/ruff/pull/18903">#18903</a>)</li> <li>[<code>pyflakes</code>] Mark <code>F504</code>/<code>F522</code>/<code>F523</code> autofix as unsafe if there's a call with side effect (<a href="https://redirect.github.com/astral-sh/ruff/pull/18839">#18839</a>)</li> <li>[<code>pylint</code>] Allow fix with comments and document performance implications (<code>PLW3301</code>) (<a href="https://redirect.github.com/astral-sh/ruff/pull/18936">#18936</a>)</li> <li>[<code>pylint</code>] Detect more exotic <code>NaN</code> literals in <code>PLW0177</code> (<a href="https://redirect.github.com/astral-sh/ruff/pull/18630">#18630</a>)</li> <li>[<code>pylint</code>] Fix <code>PLC1802</code> autofix creating a syntax error and mark autofix as unsafe if there's comments in the <code>len</code> call (<a href="https://redirect.github.com/astral-sh/ruff/pull/18836">#18836</a>)</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/astral-sh/ruff/commit/32c54189cb45a9d0409a1140265ce6d5fcec214d"><code>32c5418</code></a> Bump 0.12.1 (<a href="https://redirect.github.com/astral-sh/ruff/issues/18969">#18969</a>)</li> <li><a href="https://github.com/astral-sh/ruff/commit/b85c219283dcdae474642e9174352da5d9aee132"><code>b85c219</code></a> [<code>FastAPI</code>] Add fix safety section to <code>FAST002</code> (<a href="https://redirect.github.com/astral-sh/ruff/issues/18940">#18940</a>)</li> <li><a href="https://github.com/astral-sh/ruff/commit/b1d1cf1d382acd745a57a391a7befb6c300f6c9a"><code>b1d1cf1</code></a> [ty] Add regression test for leading tab mis-alignment in diagnostic renderin...</li> <li><a href="https://github.com/astral-sh/ruff/commit/1dcdf7f41d80b819576b8e146c1af9e72b44d2da"><code>1dcdf7f</code></a> [ty] Resolve python environment in <code>Options::to_program_settings</code> (<a href="https://redirect.github.com/astral-sh/ruff/issues/18960">#18960</a>)</li> <li><a href="https://github.com/astral-sh/ruff/commit/d00697621e2a772e9ad0b25c4c74f1572d72fd29"><code>d006976</code></a> [<code>ruff</code>] Fix false positives and negatives in <code>RUF010</code> (<a href="https://redirect.github.com/astral-sh/ruff/issues/18690">#18690</a>)</li> <li><a href="https://github.com/astral-sh/ruff/commit/76619b96e504d63e574227e8d31d6ecfcd32d1c7"><code>76619b9</code></a> [ty] Fix rendering of long lines that are indented with tabs</li> <li><a href="https://github.com/astral-sh/ruff/commit/6e25cfba2b2fb607e16102cb5cd84cd775882d80"><code>6e25cfb</code></a> [ty] Add regression test for diagnostic rendering panic</li> <li><a href="https://github.com/astral-sh/ruff/commit/76387295a581ed5c665b685e1d69fe2751ad24b1"><code>7638729</code></a> [ty] Move venv and conda env discovery to <code>SearchPath::from_settings</code> (<a href="https://redirect.github.com/astral-sh/ruff/issues/18938">#18938</a>)</li> <li><a href="https://github.com/astral-sh/ruff/commit/d04e63a6d9dbb5c751c99d113d7eaf98b765b426"><code>d04e63a</code></a> [ty] Add regression-benchmark for attribute-assignment hang (<a href="https://redirect.github.com/astral-sh/ruff/issues/18957">#18957</a>)</li> <li><a href="https://github.com/astral-sh/ruff/commit/86fd9b634e5526d2093aeb5a37dc6f30cefc1925"><code>86fd9b6</code></a> [ty] Format conflicting types as an enumeration (<a href="https://redirect.github.com/astral-sh/ruff/issues/18956">#18956</a>)</li> <li>Additional commits viewable in <a href="https://github.com/astral-sh/ruff/compare/0.11.11...0.12.1">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=ruff&package-manager=pip&previous-version=0.11.11&new-version=0.12.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* Update Cargo.lock (#18646)Andrew Morgan2025-07-032-28/+227
|
* Replace PyICU with Rust `icu_segmenter` crate (#18553)Andrew Morgan2025-07-0315-136/+70
| | | | | Co-authored-by: anoa's Codex Agent <codex@amorgan.xyz> Co-authored-by: Quentin Gliech <quenting@element.io>
* Bump types-pyyaml from 6.0.12.20241230 to 6.0.12.20250516 (#18643)dependabot[bot]2025-07-031-4/+4
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumps [types-pyyaml](https://github.com/typeshed-internal/stub_uploader) from 6.0.12.20241230 to 6.0.12.20250516. <details> <summary>Commits</summary> <ul> <li>See full diff in <a href="https://github.com/typeshed-internal/stub_uploader/commits">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=types-pyyaml&package-manager=pip&previous-version=6.0.12.20241230&new-version=6.0.12.20250516)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* Fix GET /_matrix/federation/v1/query/profile response (#18593)Alex Durham2025-07-032-4/+11
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Don't send the fields `avatar_url` and `displayname` when they are not defined for the queried user. Before this change they would be sent and set to null in the JSON response object, which would violate the OpenAPI definitions (https://spec.matrix.org/v1.11/server-server-api/#get_matrixfederationv1queryprofile). Fixes: #18442 ### Pull Request Checklist <!-- Please read https://element-hq.github.io/synapse/latest/development/contributing_guide.html before submitting your pull request --> * [x] Pull request is based on the develop branch * [x] Pull request includes a [changelog file](https://element-hq.github.io/synapse/latest/development/contributing_guide.html#changelog). The entry should: - Be a short description of your change which makes sense to users. "Fixed a bug that prevented receiving messages from other servers." instead of "Moved X method from `EventStore` to `EventWorkerStore`.". - Use markdown where necessary, mostly for `code blocks`. - End with either a period (.) or an exclamation mark (!). - Start with a capital letter. - Feel free to credit yourself, by adding a sentence "Contributed by @github_username." or "Contributed by [Your Name]." to the end of the entry. * [x] [Code style](https://element-hq.github.io/synapse/latest/code_style.html) is correct (run the [linters](https://element-hq.github.io/synapse/latest/development/contributing_guide.html#run-the-linters)) --------- Co-authored-by: Quentin Gliech <quenting@element.io>
* Raise setuptools_rust version cap to 1.11.1 (#18576)V024602025-07-032-1/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Request to raise the defensive version cap for setuptools_rust from 1.10.2 to 1.11.1. ### Pull Request Checklist <!-- Please read https://element-hq.github.io/synapse/latest/development/contributing_guide.html before submitting your pull request --> * [x] Pull request is based on the develop branch * [x] Pull request includes a [changelog file](https://element-hq.github.io/synapse/latest/development/contributing_guide.html#changelog). The entry should: - Be a short description of your change which makes sense to users. "Fixed a bug that prevented receiving messages from other servers." instead of "Moved X method from `EventStore` to `EventWorkerStore`.". - Use markdown where necessary, mostly for `code blocks`. - End with either a period (.) or an exclamation mark (!). - Start with a capital letter. - Feel free to credit yourself, by adding a sentence "Contributed by @github_username." or "Contributed by [Your Name]." to the end of the entry. * [x] [Code style](https://element-hq.github.io/synapse/latest/code_style.html) is correct (run the [linters](https://element-hq.github.io/synapse/latest/development/contributing_guide.html#run-the-linters))
* Bump mypy-zope from 1.0.11 to 1.0.12 (#18640)dependabot[bot]2025-07-031-4/+4
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumps [mypy-zope](https://github.com/Shoobx/mypy-zope) from 1.0.11 to 1.0.12. <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/Shoobx/mypy-zope/blob/master/CHANGELOG.md">mypy-zope's changelog</a>.</em></p> <blockquote> <h2>1.0.12 (2025-06-03)</h2> <hr /> <ul> <li>Support mypy-1.16</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/Shoobx/mypy-zope/commit/fb4d6b3a5d41fc0a0d218edb343ae1e2faea39c6"><code>fb4d6b3</code></a> Preparing release 1.0.12</li> <li><a href="https://github.com/Shoobx/mypy-zope/commit/782aa68f7c7ec2305d73db29f57e01aa9c4123b8"><code>782aa68</code></a> Maintain changelog</li> <li><a href="https://github.com/Shoobx/mypy-zope/commit/dadddcf77cb83f5890192fbff4786bc8c941b1a3"><code>dadddcf</code></a> Merge pull request <a href="https://redirect.github.com/Shoobx/mypy-zope/issues/129">#129</a> from Shoobx/dependabot/pip/mypy-gte-1.0.0-and-lt-1.17.0</li> <li><a href="https://github.com/Shoobx/mypy-zope/commit/1c2e2299cfeb18b3465cf3e6b721449fef29ddc2"><code>1c2e229</code></a> Update mypy requirement from &lt;1.16.0,&gt;=1.0.0 to &gt;=1.0.0,&lt;1.17.0</li> <li><a href="https://github.com/Shoobx/mypy-zope/commit/77eb8fc78fa9237793f1987a65c3ded728d3eea1"><code>77eb8fc</code></a> Back to development: 1.0.12</li> <li>See full diff in <a href="https://github.com/Shoobx/mypy-zope/compare/1.0.11...1.0.12">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=mypy-zope&package-manager=pip&previous-version=1.0.11&new-version=1.0.12)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* Bump pydantic from 2.11.4 to 2.11.7 (#18639)dependabot[bot]2025-07-031-3/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumps [pydantic](https://github.com/pydantic/pydantic) from 2.11.4 to 2.11.7. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/pydantic/pydantic/releases">pydantic's releases</a>.</em></p> <blockquote> <h2>v2.11.7 2025-06-14</h2> <!-- raw HTML omitted --> <h2>What's Changed</h2> <h3>Fixes</h3> <ul> <li>Copy <code>FieldInfo</code> instance if necessary during <code>FieldInfo</code> build by <a href="https://github.com/Viicos"><code>@​Viicos</code></a> in <a href="https://redirect.github.com/pydantic/pydantic/pull/11980">pydantic/pydantic#11980</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/pydantic/pydantic/compare/v2.11.6...v2.11.7">https://github.com/pydantic/pydantic/compare/v2.11.6...v2.11.7</a></p> <h2>v2.11.6 2025-06-13</h2> <h2>v2.11.6 (2025-06-13)</h2> <h3>What's Changed</h3> <h4>Fixes</h4> <ul> <li>Rebuild dataclass fields before schema generation by <a href="https://github.com/Viicos"><code>@​Viicos</code></a> in <a href="https://redirect.github.com/pydantic/pydantic/pull/11949">#11949</a></li> <li>Always store the original field assignment on <code>FieldInfo</code> by <a href="https://github.com/Viicos"><code>@​Viicos</code></a> in <a href="https://redirect.github.com/pydantic/pydantic/pull/11946">#11946</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/pydantic/pydantic/compare/v2.11.5...v2.11.6">https://github.com/pydantic/pydantic/compare/v2.11.5...v2.11.6</a></p> <h2>v2.11.5 2025-05-22</h2> <!-- raw HTML omitted --> <h2>What's Changed</h2> <h3>Fixes</h3> <ul> <li>Check if <code>FieldInfo</code> is complete after applying type variable map by <a href="https://github.com/Viicos"><code>@​Viicos</code></a> in <a href="https://redirect.github.com/pydantic/pydantic/pull/11855">#11855</a></li> <li>Do not delete mock validator/serializer in <code>model_rebuild()</code> by <a href="https://github.com/Viicos"><code>@​Viicos</code></a> in <a href="https://redirect.github.com/pydantic/pydantic/pull/11890">#11890</a></li> <li>Do not duplicate metadata on model rebuild by <a href="https://github.com/Viicos"><code>@​Viicos</code></a> in <a href="https://redirect.github.com/pydantic/pydantic/pull/11902">#11902</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/pydantic/pydantic/compare/v2.11.4...v2.11.5">https://github.com/pydantic/pydantic/compare/v2.11.4...v2.11.5</a></p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/pydantic/pydantic/blob/main/HISTORY.md">pydantic's changelog</a>.</em></p> <blockquote> <h2>v2.11.7 (2025-06-14)</h2> <p><a href="https://github.com/pydantic/pydantic/releases/tag/v2.11.7">GitHub release</a></p> <h3>What's Changed</h3> <h4>Fixes</h4> <ul> <li>Copy <code>FieldInfo</code> instance if necessary during <code>FieldInfo</code> build by <a href="https://github.com/Viicos"><code>@​Viicos</code></a> in <a href="https://redirect.github.com/pydantic/pydantic/pull/11898">#11898</a></li> </ul> <h2>v2.11.6 (2025-06-13)</h2> <p><a href="https://github.com/pydantic/pydantic/releases/tag/v2.11.6">GitHub release</a></p> <h3>What's Changed</h3> <h4>Fixes</h4> <ul> <li>Rebuild dataclass fields before schema generation by <a href="https://github.com/Viicos"><code>@​Viicos</code></a> in <a href="https://redirect.github.com/pydantic/pydantic/pull/11949">#11949</a></li> <li>Always store the original field assignment on <code>FieldInfo</code> by <a href="https://github.com/Viicos"><code>@​Viicos</code></a> in <a href="https://redirect.github.com/pydantic/pydantic/pull/11946">#11946</a></li> </ul> <h2>v2.11.5 (2025-05-22)</h2> <p><a href="https://github.com/pydantic/pydantic/releases/tag/v2.11.5">GitHub release</a></p> <h3>What's Changed</h3> <h4>Fixes</h4> <ul> <li>Check if <code>FieldInfo</code> is complete after applying type variable map by <a href="https://github.com/Viicos"><code>@​Viicos</code></a> in <a href="https://redirect.github.com/pydantic/pydantic/pull/11855">#11855</a></li> <li>Do not delete mock validator/serializer in <code>model_rebuild()</code> by <a href="https://github.com/Viicos"><code>@​Viicos</code></a> in <a href="https://redirect.github.com/pydantic/pydantic/pull/11890">#11890</a></li> <li>Do not duplicate metadata on model rebuild by <a href="https://github.com/Viicos"><code>@​Viicos</code></a> in <a href="https://redirect.github.com/pydantic/pydantic/pull/11902">#11902</a></li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/pydantic/pydantic/commit/5f033e46c54fea1b59b6894d6527daf49475e690"><code>5f033e4</code></a> Prepare release v2.11.7</li> <li><a href="https://github.com/pydantic/pydantic/commit/c3368b83c411f421a7322959bc29f3bea4bd252a"><code>c3368b8</code></a> Copy <code>FieldInfo</code> instance if necessary during <code>FieldInfo</code> build (<a href="https://redirect.github.com/pydantic/pydantic/issues/11980">#11980</a>)</li> <li><a href="https://github.com/pydantic/pydantic/commit/3987b23db4b31ff35e9fa15c21c0c1d1c9808838"><code>3987b23</code></a> Prepare release v2.11.6</li> <li><a href="https://github.com/pydantic/pydantic/commit/dc7a9d20bee55a3a6e7397ee46abfcd9057b627b"><code>dc7a9d2</code></a> Always store the original field assignment on <code>FieldInfo</code></li> <li><a href="https://github.com/pydantic/pydantic/commit/c284c279a5b8c95d32ab5ec31d2511b3b27bfa87"><code>c284c27</code></a> Rebuild dataclass fields before schema generation</li> <li><a href="https://github.com/pydantic/pydantic/commit/5e6d1dc71fe9bd832635cb2e9b4af92286fd00b8"><code>5e6d1dc</code></a> Prepare release v2.11.5</li> <li><a href="https://github.com/pydantic/pydantic/commit/1b63218c42b515bd1f6b0dd323190236ead14bdb"><code>1b63218</code></a> Do not duplicate metadata on model rebuild (<a href="https://redirect.github.com/pydantic/pydantic/issues/11902">#11902</a>)</li> <li><a href="https://github.com/pydantic/pydantic/commit/5aefad873b3dfd60c419bd081ffaf0ac197c7b60"><code>5aefad8</code></a> Do not delete mock validator/serializer in <code>model_rebuild()</code></li> <li><a href="https://github.com/pydantic/pydantic/commit/8fbe6585f4d6179e5234ab61de00059c52e57975"><code>8fbe658</code></a> Check if <code>FieldInfo</code> is complete after applying type variable map</li> <li><a href="https://github.com/pydantic/pydantic/commit/12b371a0f7f800bf65daa3eaada1b4348348d9c4"><code>12b371a</code></a> Update documentation about <code>@dataclass_transform</code> support</li> <li>Additional commits viewable in <a href="https://github.com/pydantic/pydantic/compare/v2.11.4...v2.11.7">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=pydantic&package-manager=pip&previous-version=2.11.4&new-version=2.11.7)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* Bump hiredis from 3.1.0 to 3.2.1 (#18638)dependabot[bot]2025-07-031-110/+110
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumps [hiredis](https://github.com/redis/hiredis-py) from 3.1.0 to 3.2.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/redis/hiredis-py/releases">hiredis's releases</a>.</em></p> <blockquote> <h2>3.2.1</h2> <h1>Changes</h1> <ul> <li>Fix assertion in reader.c (<a href="https://redirect.github.com/redis/hiredis-py/issues/212">#212</a>)</li> </ul> <h2>Contributors</h2> <p>We'd like to thank all the contributors who worked on this release!</p> <p><a href="https://github.com/uglide"><code>@​uglide</code></a></p> <h2>3.2.0</h2> <h1>Changes</h1> <ul> <li>Introduce new type for RESP3 PUSH notifications (<a href="https://redirect.github.com/redis/hiredis-py/issues/208">#208</a>)</li> <li>Run integration workflow on version branches (<a href="https://redirect.github.com/redis/hiredis-py/issues/210">#210</a>)</li> <li>Update hiredis to 1.3.0 (<a href="https://redirect.github.com/redis/hiredis-py/issues/203">#203</a>)</li> </ul> <h2>Contributors</h2> <p>We'd like to thank all the contributors who worked on this release!</p> <p><a href="https://github.com/uglide"><code>@​uglide</code></a></p> <h2>3.1.1</h2> <h2>Summary</h2> <p>This is a maintenance release that addresses issues in RESP3 parsing.</p> <h2>Changes</h2> <ul> <li>Fix memory leaks and segfaults in RESP3 map parsing (<a href="https://redirect.github.com/redis/hiredis-py/issues/204">#204</a>, <a href="https://redirect.github.com/redis/hiredis-py/issues/205">#205</a>, <a href="https://redirect.github.com/redis/hiredis-py/issues/206">#206</a>)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/redis/hiredis-py/commit/c6febde98009b005ad35702c40aba5f926807754"><code>c6febde</code></a> Version 3.2.1</li> <li><a href="https://github.com/redis/hiredis-py/commit/bbfc3a6133c5e03152172d7f77415a0e1f0266f2"><code>bbfc3a6</code></a> Fix assertion in reader.c (<a href="https://redirect.github.com/redis/hiredis-py/issues/212">#212</a>)</li> <li><a href="https://github.com/redis/hiredis-py/commit/f715de2e7c636fd1649e9e038aaba80b05379df2"><code>f715de2</code></a> Version 3.2.0</li> <li><a href="https://github.com/redis/hiredis-py/commit/d5548270b6f2ac00be36d6c68403f1d94f81d086"><code>d554827</code></a> Introduce new type for RESP3 PUSH notifications (<a href="https://redirect.github.com/redis/hiredis-py/issues/208">#208</a>)</li> <li><a href="https://github.com/redis/hiredis-py/commit/58fe9603cd7bcb921de7ba3f43e1556f1df81e02"><code>58fe960</code></a> Run integration workflow on version branches (<a href="https://redirect.github.com/redis/hiredis-py/issues/210">#210</a>)</li> <li><a href="https://github.com/redis/hiredis-py/commit/86089654830a9c5f11d157173e84d7b5ba30eda4"><code>8608965</code></a> Update hiredis to 1.3.0 (<a href="https://redirect.github.com/redis/hiredis-py/issues/203">#203</a>)</li> <li><a href="https://github.com/redis/hiredis-py/commit/ac31d58c5f78090fdfb165f6ecef4e1a539c20a4"><code>ac31d58</code></a> Bump version to 3.2.0-dev (<a href="https://redirect.github.com/redis/hiredis-py/issues/207">#207</a>)</li> <li><a href="https://github.com/redis/hiredis-py/commit/7e77f22963e8889dea6165bd6ac26203645cfb04"><code>7e77f22</code></a> Fix memory leak in RESP3 map parsing (<a href="https://redirect.github.com/redis/hiredis-py/issues/204">#204</a>)</li> <li><a href="https://github.com/redis/hiredis-py/commit/5b34a0e2aade3f5669e92e06b843858aaea12c30"><code>5b34a0e</code></a> Use GitHub Releases to track changelogs (<a href="https://redirect.github.com/redis/hiredis-py/issues/202">#202</a>)</li> <li>See full diff in <a href="https://github.com/redis/hiredis-py/compare/v3.1.0...v3.2.1">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=hiredis&package-manager=pip&previous-version=3.1.0&new-version=3.2.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* Bump reqwest from 0.12.20 to 0.12.22 (#18627)dependabot[bot]2025-07-031-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumps [reqwest](https://github.com/seanmonstar/reqwest) from 0.12.20 to 0.12.22. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/seanmonstar/reqwest/releases">reqwest's releases</a>.</em></p> <blockquote> <h2>v0.12.22</h2> <h2>tl;dr</h2> <ul> <li>Fix socks proxies when resolving IPv6 destinations.</li> </ul> <h2>What's Changed</h2> <ul> <li>fix(socks): bracket IPv6 addresses when formatting destination host by <a href="https://github.com/0x676e67"><code>@​0x676e67</code></a> in <a href="https://redirect.github.com/seanmonstar/reqwest/pull/2753">seanmonstar/reqwest#2753</a></li> <li>Prepare v0.12.22 by <a href="https://github.com/seanmonstar"><code>@​seanmonstar</code></a> in <a href="https://redirect.github.com/seanmonstar/reqwest/pull/2754">seanmonstar/reqwest#2754</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/seanmonstar/reqwest/compare/v0.12.21...v0.12.22">https://github.com/seanmonstar/reqwest/compare/v0.12.21...v0.12.22</a></p> <h2>v0.12.21</h2> <h2>tl;dr</h2> <ul> <li>Fix socks proxy to use <code>socks4a://</code> instead of <code>socks4h://</code>.</li> <li>Fix <code>Error::is_timeout()</code> to check for hyper and IO timeouts too.</li> <li>Fix request <code>Error</code> to again include URLs when possible.</li> <li>Fix socks connect error to include more context.</li> <li>(wasm) implement <code>Default</code> for <code>Body</code>.</li> </ul> <h2>What's Changed</h2> <ul> <li>chore: remove unused slab dep by <a href="https://github.com/seanmonstar"><code>@​seanmonstar</code></a> in <a href="https://redirect.github.com/seanmonstar/reqwest/pull/2729">seanmonstar/reqwest#2729</a></li> <li>docs: mention requiring Tokio by <a href="https://github.com/seanmonstar"><code>@​seanmonstar</code></a> in <a href="https://redirect.github.com/seanmonstar/reqwest/pull/2731">seanmonstar/reqwest#2731</a></li> <li>Fix Typos in Comments for Multipart and Redirect Tests by <a href="https://github.com/leopardracer"><code>@​leopardracer</code></a> in <a href="https://redirect.github.com/seanmonstar/reqwest/pull/2738">seanmonstar/reqwest#2738</a></li> <li>fix: request errors should include url by <a href="https://github.com/seanmonstar"><code>@​seanmonstar</code></a> in <a href="https://redirect.github.com/seanmonstar/reqwest/pull/2741">seanmonstar/reqwest#2741</a></li> <li>fix: consider timeout from hyper::Error by <a href="https://github.com/flisky"><code>@​flisky</code></a> in <a href="https://redirect.github.com/seanmonstar/reqwest/pull/2742">seanmonstar/reqwest#2742</a></li> <li>feat: add Default impl for wasm::Body by <a href="https://github.com/jpopesculian"><code>@​jpopesculian</code></a> in <a href="https://redirect.github.com/seanmonstar/reqwest/pull/2746">seanmonstar/reqwest#2746</a></li> <li>fix: Fix SOCKS4a proxy protocol matching by <a href="https://github.com/0x676e67"><code>@​0x676e67</code></a> in <a href="https://redirect.github.com/seanmonstar/reqwest/pull/2732">seanmonstar/reqwest#2732</a></li> <li>fix: add more context and description to SOCKS errors by <a href="https://github.com/seanmonstar"><code>@​seanmonstar</code></a> in <a href="https://redirect.github.com/seanmonstar/reqwest/pull/2750">seanmonstar/reqwest#2750</a></li> <li>Prepare v0.12.21 by <a href="https://github.com/seanmonstar"><code>@​seanmonstar</code></a> in <a href="https://redirect.github.com/seanmonstar/reqwest/pull/2751">seanmonstar/reqwest#2751</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/leopardracer"><code>@​leopardracer</code></a> made their first contribution in <a href="https://redirect.github.com/seanmonstar/reqwest/pull/2738">seanmonstar/reqwest#2738</a></li> <li><a href="https://github.com/jpopesculian"><code>@​jpopesculian</code></a> made their first contribution in <a href="https://redirect.github.com/seanmonstar/reqwest/pull/2746">seanmonstar/reqwest#2746</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/seanmonstar/reqwest/compare/v0.12.20...v0.12.21">https://github.com/seanmonstar/reqwest/compare/v0.12.20...v0.12.21</a></p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/seanmonstar/reqwest/blob/master/CHANGELOG.md">reqwest's changelog</a>.</em></p> <blockquote> <h2>v0.12.22</h2> <ul> <li>Fix socks proxies when resolving IPv6 destinations.</li> </ul> <h2>v0.12.21</h2> <ul> <li>Fix socks proxy to use <code>socks4a://</code> instead of <code>socks4h://</code>.</li> <li>Fix <code>Error::is_timeout()</code> to check for hyper and IO timeouts too.</li> <li>Fix request <code>Error</code> to again include URLs when possible.</li> <li>Fix socks connect error to include more context.</li> <li>(wasm) implement <code>Default</code> for <code>Body</code>.</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/seanmonstar/reqwest/commit/e6e2d8a25dfcdfae026946672d3aa015214a10c1"><code>e6e2d8a</code></a> v0.12.22</li> <li><a href="https://github.com/seanmonstar/reqwest/commit/a9ab0fae3fa9901608aad70651e7affa61c063d5"><code>a9ab0fa</code></a> fix(socks): bracket IPv6 addresses when formatting destination host (<a href="https://redirect.github.com/seanmonstar/reqwest/issues/2753">#2753</a>)</li> <li><a href="https://github.com/seanmonstar/reqwest/commit/b739726c4a2e47470346777062817af4f35feef2"><code>b739726</code></a> v0.12.21</li> <li><a href="https://github.com/seanmonstar/reqwest/commit/d9ecdc19b3bac1733836bb3a0b37183002b77b16"><code>d9ecdc1</code></a> fix: add more context and description to SOCKS errors (<a href="https://redirect.github.com/seanmonstar/reqwest/issues/2750">#2750</a>)</li> <li><a href="https://github.com/seanmonstar/reqwest/commit/d4c9eec3c2cff04cee246d1fb07da16695ed443c"><code>d4c9eec</code></a> fix: look for socks4a instead of socks4h (<a href="https://redirect.github.com/seanmonstar/reqwest/issues/2732">#2732</a>)</li> <li><a href="https://github.com/seanmonstar/reqwest/commit/d793ed26232060d45f11c169d1d5b98edb6cb7e2"><code>d793ed2</code></a> (wasm) feat: add Default impl for wasm::Body (<a href="https://redirect.github.com/seanmonstar/reqwest/issues/2746">#2746</a>)</li> <li><a href="https://github.com/seanmonstar/reqwest/commit/4cb2866cd4a3d242776d8c0ecea4d81ab78dc5c7"><code>4cb2866</code></a> fix: Error::is_timeout() checks for hyper::Error::is_timeout() (<a href="https://redirect.github.com/seanmonstar/reqwest/issues/2742">#2742</a>)</li> <li><a href="https://github.com/seanmonstar/reqwest/commit/1794d997373c71e9521ada8d3e2f98f36b6aad59"><code>1794d99</code></a> fix: request errors should include url (<a href="https://redirect.github.com/seanmonstar/reqwest/issues/2741">#2741</a>)</li> <li><a href="https://github.com/seanmonstar/reqwest/commit/9edbd2e00b9b752e851cac0374f7aa1034beca85"><code>9edbd2e</code></a> tests: fix typos in multipart and redirect tests (<a href="https://redirect.github.com/seanmonstar/reqwest/issues/2738">#2738</a>)</li> <li><a href="https://github.com/seanmonstar/reqwest/commit/e03d6f4ec4d6ca214b04e5a5c524d70f3ba85f45"><code>e03d6f4</code></a> docs: mention requiring Tokio (<a href="https://redirect.github.com/seanmonstar/reqwest/issues/2731">#2731</a>)</li> <li>Additional commits viewable in <a href="https://github.com/seanmonstar/reqwest/compare/v0.12.20...v0.12.22">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=reqwest&package-manager=cargo&previous-version=0.12.20&new-version=0.12.22)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* Bump types-bleach from 6.2.0.20241123 to 6.2.0.20250514 (#18634)dependabot[bot]2025-07-031-4/+4
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumps [types-bleach](https://github.com/typeshed-internal/stub_uploader) from 6.2.0.20241123 to 6.2.0.20250514. <details> <summary>Commits</summary> <ul> <li>See full diff in <a href="https://github.com/typeshed-internal/stub_uploader/commits">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=types-bleach&package-manager=pip&previous-version=6.2.0.20241123&new-version=6.2.0.20250514)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* Bump jsonschema from 4.23.0 to 4.24.0 (#18630)dependabot[bot]2025-07-031-4/+4
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumps [jsonschema](https://github.com/python-jsonschema/jsonschema) from 4.23.0 to 4.24.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/python-jsonschema/jsonschema/releases">jsonschema's releases</a>.</em></p> <blockquote> <h2>v4.24.0</h2> <!-- raw HTML omitted --> <h2>What's Changed</h2> <ul> <li>Fix calculation of evaluated properties by <a href="https://github.com/V02460"><code>@​V02460</code></a> in <a href="https://redirect.github.com/python-jsonschema/jsonschema/pull/1351">python-jsonschema/jsonschema#1351</a></li> <li>Support for Python 3.8 has been dropped, as it is end-of-life.</li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/bkueng"><code>@​bkueng</code></a> made their first contribution in <a href="https://redirect.github.com/python-jsonschema/jsonschema/pull/1326">python-jsonschema/jsonschema#1326</a></li> <li><a href="https://github.com/V02460"><code>@​V02460</code></a> made their first contribution in <a href="https://redirect.github.com/python-jsonschema/jsonschema/pull/1351">python-jsonschema/jsonschema#1351</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/python-jsonschema/jsonschema/compare/v4.23.0...v4.24.0">https://github.com/python-jsonschema/jsonschema/compare/v4.23.0...v4.24.0</a></p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/python-jsonschema/jsonschema/blob/main/CHANGELOG.rst">jsonschema's changelog</a>.</em></p> <blockquote> <h1>v4.24.0</h1> <ul> <li>Fix improper handling of <code>unevaluatedProperties</code> in the presence of <code>additionalProperties</code> (<a href="https://redirect.github.com/python-jsonschema/jsonschema/issues/1351">#1351</a>).</li> <li>Support for Python 3.8 has been dropped, as it is end-of-life.</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/python-jsonschema/jsonschema/commit/3e23ee5e695f84565f4175fb972073d787e1ab24"><code>3e23ee5</code></a> Add the bugfix to the changelog.</li> <li><a href="https://github.com/python-jsonschema/jsonschema/commit/8917e85c6549b2b2a0dfcae48fd512aaaebae836"><code>8917e85</code></a> Stop running CIFuzz.</li> <li><a href="https://github.com/python-jsonschema/jsonschema/commit/737e5ed536db806d97879ef3681f695ddc75a32d"><code>737e5ed</code></a> Rely on ruff in pre-commit.</li> <li><a href="https://github.com/python-jsonschema/jsonschema/commit/57e5e034cb0c8662995494ed4a833febf9b581a4"><code>57e5e03</code></a> Test via PyPy 3.11.</li> <li><a href="https://github.com/python-jsonschema/jsonschema/commit/d6c2ad7bbbdea0b2c3e627c304ad4dd325aaa254"><code>d6c2ad7</code></a> Add the zizmor setup here as well.</li> <li><a href="https://github.com/python-jsonschema/jsonschema/commit/af9a8578767ca70380ca2a2f7f6c2311b702d663"><code>af9a857</code></a> Drop a dead pyproject section.</li> <li><a href="https://github.com/python-jsonschema/jsonschema/commit/c64ef846095b9d790749152367c8b12bea69a116"><code>c64ef84</code></a> This is less true than it once was...</li> <li><a href="https://github.com/python-jsonschema/jsonschema/commit/9ff926f4588f0e4a8f5726cb69529c05c7921cc6"><code>9ff926f</code></a> Merge branch 'additional-evaluated'</li> <li><a href="https://github.com/python-jsonschema/jsonschema/commit/8290667beb239282529430b59e2d4ea51777b33e"><code>8290667</code></a> We still need to ditch pip-licenses...</li> <li><a href="https://github.com/python-jsonschema/jsonschema/commit/6d973b543030be9b53a67739d08c6f8b19f45119"><code>6d973b5</code></a> Update pre-commit hooks.</li> <li>Additional commits viewable in <a href="https://github.com/python-jsonschema/jsonschema/compare/v4.23.0...v4.24.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=jsonschema&package-manager=pip&previous-version=4.23.0&new-version=4.24.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* Bump sentry-sdk from 2.22.0 to 2.32.0 (#18633)dependabot[bot]2025-07-031-3/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumps [sentry-sdk](https://github.com/getsentry/sentry-python) from 2.22.0 to 2.32.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/getsentry/sentry-python/releases">sentry-sdk's releases</a>.</em></p> <blockquote> <h2>2.32.0</h2> <h3>Various fixes &amp; improvements</h3> <ul> <li>feat(sessions): Add top-level start- and end session methods (<a href="https://redirect.github.com/getsentry/sentry-python/issues/4474">#4474</a>) by <a href="https://github.com/szokeasaurusrex"><code>@​szokeasaurusrex</code></a></li> <li>feat(openai-agents): Set tool span to failed if an error is raised in the tool (<a href="https://redirect.github.com/getsentry/sentry-python/issues/4527">#4527</a>) by <a href="https://github.com/antonpirker"><code>@​antonpirker</code></a></li> <li>fix(integrations/ray): Correctly pass keyword arguments to ray.remote function (<a href="https://redirect.github.com/getsentry/sentry-python/issues/4430">#4430</a>) by <a href="https://github.com/svartalf"><code>@​svartalf</code></a></li> <li>fix(langchain): Make <code>span_map</code> an instance variable (<a href="https://redirect.github.com/getsentry/sentry-python/issues/4476">#4476</a>) by <a href="https://github.com/szokeasaurusrex"><code>@​szokeasaurusrex</code></a></li> <li>fix(langchain): Ensure no duplicate <code>SentryLangchainCallback</code> (<a href="https://redirect.github.com/getsentry/sentry-python/issues/4485">#4485</a>) by <a href="https://github.com/szokeasaurusrex"><code>@​szokeasaurusrex</code></a></li> <li>fix(Litestar): Apply <code>failed_request_status_codes</code> to exceptions raised in middleware (<a href="https://redirect.github.com/getsentry/sentry-python/issues/4074">#4074</a>) by <a href="https://github.com/vrslev"><code>@​vrslev</code></a></li> </ul> <h2>2.31.0</h2> <h3>Various fixes &amp; improvements</h3> <ul> <li> <p><strong>New Integration (BETA):</strong> Add support for <code>openai-agents</code> (<a href="https://redirect.github.com/getsentry/sentry-python/issues/4437">#4437</a>) by <a href="https://github.com/antonpirker"><code>@​antonpirker</code></a></p> <p>We can now instrument AI agents that are created with the <a href="https://openai.github.io/openai-agents-python/">OpenAI Agents SDK</a> out of the box.</p> </li> </ul> <pre lang="python"><code>import sentry_sdk from sentry_sdk.integrations.openai_agents import OpenAIAgentsIntegration <h1>Add the OpenAIAgentsIntegration to your sentry_sdk.init call:</h1> <p>sentry_sdk.init(<br /> dsn=&quot;...&quot;,<br /> integrations=[<br /> OpenAIAgentsIntegration(),<br /> ]<br /> )<br /> </code></pre></p> <p>For more information see the <a href="https://docs.sentry.io/platforms/python/integrations/openai-agents/">OpenAI Agents integrations documentation</a>.</p> <ul> <li>Logs: Add support for <code>dict</code> arguments (<a href="https://redirect.github.com/getsentry/sentry-python/issues/4478">#4478</a>) by <a href="https://github.com/AbhiPrasad"><code>@​AbhiPrasad</code></a></li> <li>Add Cursor generated rules (<a href="https://redirect.github.com/getsentry/sentry-python/issues/4493">#4493</a>) by <a href="https://github.com/sl0thentr0py"><code>@​sl0thentr0py</code></a></li> <li>Greatly simplify Langchain integrations <code>_wrap_configure</code> (<a href="https://redirect.github.com/getsentry/sentry-python/issues/4479">#4479</a>) by <a href="https://github.com/szokeasaurusrex"><code>@​szokeasaurusrex</code></a></li> <li>Fix(ci): Remove tracerite pin (almost) (<a href="https://redirect.github.com/getsentry/sentry-python/issues/4504">#4504</a>) by <a href="https://github.com/sentrivana"><code>@​sentrivana</code></a></li> <li>Fix(profiling): Ensure profiler thread exits when needed (<a href="https://redirect.github.com/getsentry/sentry-python/issues/4497">#4497</a>) by <a href="https://github.com/Zylphrex"><code>@​Zylphrex</code></a></li> <li>Fix(ci): Do not install newest <code>tracerite</code> (<a href="https://redirect.github.com/getsentry/sentry-python/issues/4494">#4494</a>) by <a href="https://github.com/sentrivana"><code>@​sentrivana</code></a></li> <li>Fix(scope): Handle token reset <code>LookupError</code>s gracefully (<a href="https://redirect.github.com/getsentry/sentry-python/issues/4481">#4481</a>) by <a href="https://github.com/sentrivana"><code>@​sentrivana</code></a></li> <li>Tests: Tox update (<a href="https://redirect.github.com/getsentry/sentry-python/issues/4509">#4509</a>) by <a href="https://github.com/sentrivana"><code>@​sentrivana</code></a></li> <li>Tests: Upper bound on fakeredis on old Python versions (<a href="https://redirect.github.com/getsentry/sentry-python/issues/4482">#4482</a>) by <a href="https://github.com/sentrivana"><code>@​sentrivana</code></a></li> <li>Tests: Regenerate tox (<a href="https://redirect.github.com/getsentry/sentry-python/issues/4457">#4457</a>) by <a href="https://github.com/sentrivana"><code>@​sentrivana</code></a></li> </ul> <h2>2.30.0</h2> <h3>Various fixes &amp; improvements</h3> <ul> <li> <p><strong>New beta feature:</strong> Sentry logs for Loguru (<a href="https://redirect.github.com/getsentry/sentry-python/issues/4445">#4445</a>) by <a href="https://github.com/sentrivana"><code>@​sentrivana</code></a></p> <p>We can now capture Loguru logs and send them to Sentry.</p> </li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/getsentry/sentry-python/blob/master/CHANGELOG.md">sentry-sdk's changelog</a>.</em></p> <blockquote> <h2>2.32.0</h2> <h3>Various fixes &amp; improvements</h3> <ul> <li>feat(sessions): Add top-level start- and end session methods (<a href="https://redirect.github.com/getsentry/sentry-python/issues/4474">#4474</a>) by <a href="https://github.com/szokeasaurusrex"><code>@​szokeasaurusrex</code></a></li> <li>feat(openai-agents): Set tool span to failed if an error is raised in the tool (<a href="https://redirect.github.com/getsentry/sentry-python/issues/4527">#4527</a>) by <a href="https://github.com/antonpirker"><code>@​antonpirker</code></a></li> <li>fix(integrations/ray): Correctly pass keyword arguments to ray.remote function (<a href="https://redirect.github.com/getsentry/sentry-python/issues/4430">#4430</a>) by <a href="https://github.com/svartalf"><code>@​svartalf</code></a></li> <li>fix(langchain): Make <code>span_map</code> an instance variable (<a href="https://redirect.github.com/getsentry/sentry-python/issues/4476">#4476</a>) by <a href="https://github.com/szokeasaurusrex"><code>@​szokeasaurusrex</code></a></li> <li>fix(langchain): Ensure no duplicate <code>SentryLangchainCallback</code> (<a href="https://redirect.github.com/getsentry/sentry-python/issues/4485">#4485</a>) by <a href="https://github.com/szokeasaurusrex"><code>@​szokeasaurusrex</code></a></li> <li>fix(Litestar): Apply <code>failed_request_status_codes</code> to exceptions raised in middleware (<a href="https://redirect.github.com/getsentry/sentry-python/issues/4074">#4074</a>) by <a href="https://github.com/vrslev"><code>@​vrslev</code></a></li> </ul> <h2>2.31.0</h2> <h3>Various fixes &amp; improvements</h3> <ul> <li> <p><strong>New Integration (BETA):</strong> Add support for <code>openai-agents</code> (<a href="https://redirect.github.com/getsentry/sentry-python/issues/4437">#4437</a>) by <a href="https://github.com/antonpirker"><code>@​antonpirker</code></a></p> <p>We can now instrument AI agents that are created with the <a href="https://openai.github.io/openai-agents-python/">OpenAI Agents SDK</a> out of the box.</p> </li> </ul> <pre lang="python"><code>import sentry_sdk from sentry_sdk.integrations.openai_agents import OpenAIAgentsIntegration <h1>Add the OpenAIAgentsIntegration to your sentry_sdk.init call:</h1> <p>sentry_sdk.init(<br /> dsn=&quot;...&quot;,<br /> integrations=[<br /> OpenAIAgentsIntegration(),<br /> ]<br /> )<br /> </code></pre></p> <p>For more information see the <a href="https://docs.sentry.io/platforms/python/integrations/openai-agents/">OpenAI Agents integrations documentation</a>.</p> <ul> <li>Logs: Add support for <code>dict</code> arguments (<a href="https://redirect.github.com/getsentry/sentry-python/issues/4478">#4478</a>) by <a href="https://github.com/AbhiPrasad"><code>@​AbhiPrasad</code></a></li> <li>Add Cursor generated rules (<a href="https://redirect.github.com/getsentry/sentry-python/issues/4493">#4493</a>) by <a href="https://github.com/sl0thentr0py"><code>@​sl0thentr0py</code></a></li> <li>Greatly simplify Langchain integrations <code>_wrap_configure</code> (<a href="https://redirect.github.com/getsentry/sentry-python/issues/4479">#4479</a>) by <a href="https://github.com/szokeasaurusrex"><code>@​szokeasaurusrex</code></a></li> <li>Fix(ci): Remove tracerite pin (almost) (<a href="https://redirect.github.com/getsentry/sentry-python/issues/4504">#4504</a>) by <a href="https://github.com/sentrivana"><code>@​sentrivana</code></a></li> <li>Fix(profiling): Ensure profiler thread exits when needed (<a href="https://redirect.github.com/getsentry/sentry-python/issues/4497">#4497</a>) by <a href="https://github.com/Zylphrex"><code>@​Zylphrex</code></a></li> <li>Fix(ci): Do not install newest <code>tracerite</code> (<a href="https://redirect.github.com/getsentry/sentry-python/issues/4494">#4494</a>) by <a href="https://github.com/sentrivana"><code>@​sentrivana</code></a></li> <li>Fix(scope): Handle token reset <code>LookupError</code>s gracefully (<a href="https://redirect.github.com/getsentry/sentry-python/issues/4481">#4481</a>) by <a href="https://github.com/sentrivana"><code>@​sentrivana</code></a></li> <li>Tests: Tox update (<a href="https://redirect.github.com/getsentry/sentry-python/issues/4509">#4509</a>) by <a href="https://github.com/sentrivana"><code>@​sentrivana</code></a></li> <li>Tests: Upper bound on fakeredis on old Python versions (<a href="https://redirect.github.com/getsentry/sentry-python/issues/4482">#4482</a>) by <a href="https://github.com/sentrivana"><code>@​sentrivana</code></a></li> <li>Tests: Regenerate tox (<a href="https://redirect.github.com/getsentry/sentry-python/issues/4457">#4457</a>) by <a href="https://github.com/sentrivana"><code>@​sentrivana</code></a></li> </ul> <h2>2.30.0</h2> <h3>Various fixes &amp; improvements</h3> <ul> <li><strong>New beta feature:</strong> Sentry logs for Loguru (<a href="https://redirect.github.com/getsentry/sentry-python/issues/4445">#4445</a>) by <a href="https://github.com/sentrivana"><code>@​sentrivana</code></a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/getsentry/sentry-python/commit/4b022dc731aa10e8cdb1cc8342c06374b226b6f4"><code>4b022dc</code></a> Merge branch 'master' into release/2.32.0</li> <li><a href="https://github.com/getsentry/sentry-python/commit/2634a523b3416748cf952bc517641594b9b40bac"><code>2634a52</code></a> Pin zope.event (<a href="https://redirect.github.com/getsentry/sentry-python/issues/4531">#4531</a>)</li> <li><a href="https://github.com/getsentry/sentry-python/commit/c815a3245d10e45bebee5b47292deec438a4d4d2"><code>c815a32</code></a> updated changelog</li> <li><a href="https://github.com/getsentry/sentry-python/commit/bca8816ac1f84fe4304682bd6de173fbf0c005a3"><code>bca8816</code></a> release: 2.32.0</li> <li><a href="https://github.com/getsentry/sentry-python/commit/546ce1f71023b651860d6b576024b9d93b4c9ab8"><code>546ce1f</code></a> Set tool span to failed if an error is raised in the tool (<a href="https://redirect.github.com/getsentry/sentry-python/issues/4527">#4527</a>)</li> <li><a href="https://github.com/getsentry/sentry-python/commit/ab2e3f08b600b22a95c3313eddd66f733e2d133c"><code>ab2e3f0</code></a> fix(integrations/ray): Correctly pass keyword arguments to ray.remote functio...</li> <li><a href="https://github.com/getsentry/sentry-python/commit/7804260fbf3ed8f797af95d2c0bdfcfeb85b0605"><code>7804260</code></a> fix(langchain): Make <code>span_map</code> an instance variable (<a href="https://redirect.github.com/getsentry/sentry-python/issues/4476">#4476</a>)</li> <li><a href="https://github.com/getsentry/sentry-python/commit/0a2d8585f18f1d135d1f04624b702ef46fd119bb"><code>0a2d858</code></a> fix(langchain): Ensure no duplicate <code>SentryLangchainCallback</code> (<a href="https://redirect.github.com/getsentry/sentry-python/issues/4485">#4485</a>)</li> <li><a href="https://github.com/getsentry/sentry-python/commit/dae02180dfb095cdbd8ed7e81544ef048482d70b"><code>dae0218</code></a> fix(Litestar): Apply <code>failed_request_status_codes</code> to exceptions raised in mi...</li> <li><a href="https://github.com/getsentry/sentry-python/commit/65d31af4ff9b93cddf12d043fe9d631e3c6c85a4"><code>65d31af</code></a> Merge branch 'release/2.31.0'</li> <li>Additional commits viewable in <a href="https://github.com/getsentry/sentry-python/compare/2.22.0...2.32.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=sentry-sdk&package-manager=pip&previous-version=2.22.0&new-version=2.32.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* Update Rust in CI to v1.87.0 as well as `dtolnay/rust-toolchain` GitHub ↵Andrew Morgan2025-07-025-22/+64
| | | | Action pinned commit hash (#18596)
* Bump base64 from 0.21.7 to 0.22.1 (#18629)dependabot[bot]2025-07-021-10/+4
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumps [base64](https://github.com/marshallpierce/rust-base64) from 0.21.7 to 0.22.1. <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/marshallpierce/rust-base64/blob/master/RELEASE-NOTES.md">base64's changelog</a>.</em></p> <blockquote> <h1>0.22.1</h1> <ul> <li>Correct the symbols used for the predefined <code>alphabet::BIN_HEX</code>.</li> </ul> <h1>0.22.0</h1> <ul> <li><code>DecodeSliceError::OutputSliceTooSmall</code> is now conservative rather than precise. That is, the error will only occur if the decoded output <em>cannot</em> fit, meaning that <code>Engine::decode_slice</code> can now be used with exactly-sized output slices. As part of this, <code>Engine::internal_decode</code> now returns <code>DecodeSliceError</code> instead of <code>DecodeError</code>, but that is not expected to affect any external callers.</li> <li><code>DecodeError::InvalidLength</code> now refers specifically to the <em>number of valid symbols</em> being invalid (i.e. <code>len % 4 == 1</code>), rather than just the number of input bytes. This avoids confusing scenarios when based on interpretation you could make a case for either <code>InvalidLength</code> or <code>InvalidByte</code> being appropriate.</li> <li>Decoding is somewhat faster (5-10%)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/marshallpierce/rust-base64/commit/e14400697453bcc85997119b874bc03d9601d0af"><code>e144006</code></a> v0.22.1</li> <li><a href="https://github.com/marshallpierce/rust-base64/commit/64cca59ddbb4c43244a8f38629b59960ffe36bc0"><code>64cca59</code></a> Merge pull request <a href="https://redirect.github.com/marshallpierce/rust-base64/issues/271">#271</a> from JobanSD/patch-1</li> <li><a href="https://github.com/marshallpierce/rust-base64/commit/838355e0ac5fb8237ec9b96be5edb011bff00275"><code>838355e</code></a> Correct BinHex 4.0 alphabet according to specifications</li> <li><a href="https://github.com/marshallpierce/rust-base64/commit/bf15ccf30af8bb6b1f326fffa025d7b0aaa3342f"><code>bf15ccf</code></a> Merge pull request <a href="https://redirect.github.com/marshallpierce/rust-base64/issues/270">#270</a> from marshallpierce/mp/clippy</li> <li><a href="https://github.com/marshallpierce/rust-base64/commit/fc6aabee8afaf8b2f4cfb12df4cf461bcf9b003d"><code>fc6aabe</code></a> Appease clippy</li> <li><a href="https://github.com/marshallpierce/rust-base64/commit/9a518a2d5d028068d4bf83ebf437f7a3575e640e"><code>9a518a2</code></a> Merge pull request <a href="https://redirect.github.com/marshallpierce/rust-base64/issues/267">#267</a> from bdura/patch-1</li> <li><a href="https://github.com/marshallpierce/rust-base64/commit/d96c80f242e3080a03fd1c079730e17373ef0eb6"><code>d96c80f</code></a> Merge branch 'marshallpierce:master' into patch-1</li> <li><a href="https://github.com/marshallpierce/rust-base64/commit/5d70ba7576f9aafcbf02bd8acfcb9973411fb95f"><code>5d70ba7</code></a> Merge pull request <a href="https://redirect.github.com/marshallpierce/rust-base64/issues/269">#269</a> from marshallpierce/mp/decode-precisely</li> <li><a href="https://github.com/marshallpierce/rust-base64/commit/efb6c006c75ddbe60c084c2e3e0e084cd18b0122"><code>efb6c00</code></a> Release notes</li> <li><a href="https://github.com/marshallpierce/rust-base64/commit/2b91084a31ad11624acd81e06455ba0cbd21d4a8"><code>2b91084</code></a> Add some tests to boost coverage</li> <li>Additional commits viewable in <a href="https://github.com/marshallpierce/rust-base64/compare/v0.21.7...v0.22.1">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=base64&package-manager=cargo&previous-version=0.21.7&new-version=0.22.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* Bump tokio from 1.45.1 to 1.46.0 (#18628)dependabot[bot]2025-07-021-2/+15
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumps [tokio](https://github.com/tokio-rs/tokio) from 1.45.1 to 1.46.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/tokio-rs/tokio/releases">tokio's releases</a>.</em></p> <blockquote> <h2>Tokio v1.46.0</h2> <h1>1.46.0 (July 2nd, 2025)</h1> <h3>Fixed</h3> <ul> <li>net: fixed <code>TcpStream::shutdown</code> incorrectly returning an error on macOS (<a href="https://redirect.github.com/tokio-rs/tokio/issues/7290">#7290</a>)</li> </ul> <h2>Added</h2> <ul> <li>sync: <code>mpsc::OwnedPermit::{same_channel, same_channel_as_sender}</code> methods (<a href="https://redirect.github.com/tokio-rs/tokio/issues/7389">#7389</a>)</li> <li>macros: <code>biased</code> option for <code>join!</code> and <code>try_join!</code>, similar to <code>select!</code> (<a href="https://redirect.github.com/tokio-rs/tokio/issues/7307">#7307</a>)</li> <li>net: support for cygwin (<a href="https://redirect.github.com/tokio-rs/tokio/issues/7393">#7393</a>)</li> <li>net: support <code>pope::OpenOptions::read_write</code> on Android (<a href="https://redirect.github.com/tokio-rs/tokio/issues/7426">#7426</a>)</li> <li>net: add <code>Clone</code> implementation for <code>net::unix::SocketAddr</code> (<a href="https://redirect.github.com/tokio-rs/tokio/issues/7422">#7422</a>)</li> </ul> <h2>Changed</h2> <ul> <li>runtime: eliminate unnecessary lfence while operating on <code>queue::Local&lt;T&gt;</code> (<a href="https://redirect.github.com/tokio-rs/tokio/issues/7340">#7340</a>)</li> <li>task: disallow blocking in <code>LocalSet::{poll,drop}</code> (<a href="https://redirect.github.com/tokio-rs/tokio/issues/7372">#7372</a>)</li> </ul> <h2>Unstable</h2> <ul> <li>runtime: add <code>TaskMeta::spawn_location</code> tracking where a task was spawned (<a href="https://redirect.github.com/tokio-rs/tokio/issues/7417">#7417</a>)</li> <li>runtime: removed borrow from <code>LocalOptions</code> parameter to <code>runtime::Builder::build_local</code> (<a href="https://redirect.github.com/tokio-rs/tokio/issues/7346">#7346</a>)</li> </ul> <h2>Documented</h2> <ul> <li>io: clarify behavior of seeking when <code>start_seek</code> is not used (<a href="https://redirect.github.com/tokio-rs/tokio/issues/7366">#7366</a>)</li> <li>io: document cancellation safety of <code>AsyncWriteExt::flush</code> (<a href="https://redirect.github.com/tokio-rs/tokio/issues/7364">#7364</a>)</li> <li>net: fix docs for <code>recv_buffer_size</code> method (<a href="https://redirect.github.com/tokio-rs/tokio/issues/7336">#7336</a>)</li> <li>net: fix broken link of <code>RawFd</code> in <code>TcpSocket</code> docs (<a href="https://redirect.github.com/tokio-rs/tokio/issues/7416">#7416</a>)</li> <li>net: update <code>AsRawFd</code> doc link to current Rust stdlib location (<a href="https://redirect.github.com/tokio-rs/tokio/issues/7429">#7429</a>)</li> <li>readme: fix double period in reactor description (<a href="https://redirect.github.com/tokio-rs/tokio/issues/7363">#7363</a>)</li> <li>runtime: add doc note that <code>on_*_task_poll</code> is unstable (<a href="https://redirect.github.com/tokio-rs/tokio/issues/7311">#7311</a>)</li> <li>sync: update broadcast docs on allocation failure (<a href="https://redirect.github.com/tokio-rs/tokio/issues/7352">#7352</a>)</li> <li>time: add a missing panic scenario of <code>time::advance</code> (<a href="https://redirect.github.com/tokio-rs/tokio/issues/7394">#7394</a>)</li> </ul> <p><a href="https://redirect.github.com/tokio-rs/tokio/issues/7290">#7290</a>: <a href="https://redirect.github.com/tokio-rs/tokio/pull/7290">tokio-rs/tokio#7290</a> <a href="https://redirect.github.com/tokio-rs/tokio/issues/7307">#7307</a>: <a href="https://redirect.github.com/tokio-rs/tokio/pull/7307">tokio-rs/tokio#7307</a> <a href="https://redirect.github.com/tokio-rs/tokio/issues/7311">#7311</a>: <a href="https://redirect.github.com/tokio-rs/tokio/pull/7311">tokio-rs/tokio#7311</a> <a href="https://redirect.github.com/tokio-rs/tokio/issues/7336">#7336</a>: <a href="https://redirect.github.com/tokio-rs/tokio/pull/7336">tokio-rs/tokio#7336</a> <a href="https://redirect.github.com/tokio-rs/tokio/issues/7340">#7340</a>: <a href="https://redirect.github.com/tokio-rs/tokio/pull/7340">tokio-rs/tokio#7340</a> <a href="https://redirect.github.com/tokio-rs/tokio/issues/7346">#7346</a>: <a href="https://redirect.github.com/tokio-rs/tokio/pull/7346">tokio-rs/tokio#7346</a> <a href="https://redirect.github.com/tokio-rs/tokio/issues/7352">#7352</a>: <a href="https://redirect.github.com/tokio-rs/tokio/pull/7352">tokio-rs/tokio#7352</a> <a href="https://redirect.github.com/tokio-rs/tokio/issues/7363">#7363</a>: <a href="https://redirect.github.com/tokio-rs/tokio/pull/7363">tokio-rs/tokio#7363</a> <a href="https://redirect.github.com/tokio-rs/tokio/issues/7364">#7364</a>: <a href="https://redirect.github.com/tokio-rs/tokio/pull/7364">tokio-rs/tokio#7364</a> <a href="https://redirect.github.com/tokio-rs/tokio/issues/7366">#7366</a>: <a href="https://redirect.github.com/tokio-rs/tokio/pull/7366">tokio-rs/tokio#7366</a> <a href="https://redirect.github.com/tokio-rs/tokio/issues/7372">#7372</a>: <a href="https://redirect.github.com/tokio-rs/tokio/pull/7372">tokio-rs/tokio#7372</a> <a href="https://redirect.github.com/tokio-rs/tokio/issues/7389">#7389</a>: <a href="https://redirect.github.com/tokio-rs/tokio/pull/7389">tokio-rs/tokio#7389</a> <a href="https://redirect.github.com/tokio-rs/tokio/issues/7393">#7393</a>: <a href="https://redirect.github.com/tokio-rs/tokio/pull/7393">tokio-rs/tokio#7393</a></p> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/tokio-rs/tokio/commit/3f1f268583a16c11560f8e310d5a35e9aa55b547"><code>3f1f268</code></a> chore: prepare Tokio v1.46.0 (<a href="https://redirect.github.com/tokio-rs/tokio/issues/7437">#7437</a>)</li> <li><a href="https://github.com/tokio-rs/tokio/commit/3e890cc0171ddb210acdcfec831b7c7bcbb0d2d9"><code>3e890cc</code></a> rt(unstable): add spawn <code>Location</code> to <code>TaskMeta</code> (<a href="https://redirect.github.com/tokio-rs/tokio/issues/7417">#7417</a>)</li> <li><a href="https://github.com/tokio-rs/tokio/commit/69290a64327a017fd9a0cedefaac60c4993c3b54"><code>69290a6</code></a> net: derive <code>Clone</code> for <code>net::unix::SocketAddr</code> (<a href="https://redirect.github.com/tokio-rs/tokio/issues/7422">#7422</a>)</li> <li><a href="https://github.com/tokio-rs/tokio/commit/e2b175848b2cb25e99cd3a0486e506f889379db5"><code>e2b1758</code></a> fuzz: cfg fuzz tests under cfg(test) (<a href="https://redirect.github.com/tokio-rs/tokio/issues/7428">#7428</a>)</li> <li><a href="https://github.com/tokio-rs/tokio/commit/b7a75b5be349aab2cee9b224c0610d7cf4fea73e"><code>b7a75b5</code></a> net: update <code>AsRawFd</code> doc link to current Rust stdlib location (<a href="https://redirect.github.com/tokio-rs/tokio/issues/7429">#7429</a>)</li> <li><a href="https://github.com/tokio-rs/tokio/commit/6b705b3053d2c777e05cb60c758202ff9d4b2e7d"><code>6b705b3</code></a> net: allow <code>pipe::OpenOptions::read_write</code> on Android (<a href="https://redirect.github.com/tokio-rs/tokio/issues/7426">#7426</a>)</li> <li><a href="https://github.com/tokio-rs/tokio/commit/3636fd018ab6416fdfa3aab21e1e55966062dc3c"><code>3636fd0</code></a> net: fix broken link of <code>RawFd</code> in <code>TcpSocket</code> docs (<a href="https://redirect.github.com/tokio-rs/tokio/issues/7416">#7416</a>)</li> <li><a href="https://github.com/tokio-rs/tokio/commit/2506c9fa9916a1bdffbc762f7eb2ae5c2fd23836"><code>2506c9f</code></a> benches: revert &quot;properly gate unix benches&quot; (<a href="https://redirect.github.com/tokio-rs/tokio/issues/7412">#7412</a>)</li> <li><a href="https://github.com/tokio-rs/tokio/commit/b3a14483bf5efa1b5cf75af27f6ef0770f4c5689"><code>b3a1448</code></a> sync: improve docs of <code>tokio_util::sync::CancellationToken</code> (<a href="https://redirect.github.com/tokio-rs/tokio/issues/7408">#7408</a>)</li> <li><a href="https://github.com/tokio-rs/tokio/commit/013f323def73f85185e2633f1b5f8939cc841318"><code>013f323</code></a> docs: add a missing panic scenario of <code>time::advance</code> (<a href="https://redirect.github.com/tokio-rs/tokio/issues/7394">#7394</a>)</li> <li>Additional commits viewable in <a href="https://github.com/tokio-rs/tokio/compare/tokio-1.45.1...tokio-1.46.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=tokio&package-manager=cargo&previous-version=1.45.1&new-version=1.46.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* Bump Swatinem/rust-cache from 2.7.8 to 2.8.0 (#18612)dependabot[bot]2025-07-024-19/+19
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumps [Swatinem/rust-cache](https://github.com/swatinem/rust-cache) from 2.7.8 to 2.8.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/swatinem/rust-cache/releases">Swatinem/rust-cache's releases</a>.</em></p> <blockquote> <h2>v2.8.0</h2> <h2>What's Changed</h2> <ul> <li>Add cache-workspace-crates feature by <a href="https://github.com/jbransen"><code>@​jbransen</code></a> in <a href="https://redirect.github.com/Swatinem/rust-cache/pull/246">Swatinem/rust-cache#246</a></li> <li>Feat: support warpbuild cache provider by <a href="https://github.com/stegaBOB"><code>@​stegaBOB</code></a> in <a href="https://redirect.github.com/Swatinem/rust-cache/pull/247">Swatinem/rust-cache#247</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/jbransen"><code>@​jbransen</code></a> made their first contribution in <a href="https://redirect.github.com/Swatinem/rust-cache/pull/246">Swatinem/rust-cache#246</a></li> <li><a href="https://github.com/stegaBOB"><code>@​stegaBOB</code></a> made their first contribution in <a href="https://redirect.github.com/Swatinem/rust-cache/pull/247">Swatinem/rust-cache#247</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/Swatinem/rust-cache/compare/v2.7.8...v2.8.0">https://github.com/Swatinem/rust-cache/compare/v2.7.8...v2.8.0</a></p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/Swatinem/rust-cache/blob/master/CHANGELOG.md">Swatinem/rust-cache's changelog</a>.</em></p> <blockquote> <h1>Changelog</h1> <h2>2.8.0</h2> <ul> <li>Add support for <code>warpbuild</code> cache provider</li> <li>Add new <code>cache-workspace-crates</code> feature</li> </ul> <h2>2.7.8</h2> <ul> <li>Include CPU arch in the cache key</li> </ul> <h2>2.7.7</h2> <ul> <li>Also cache <code>cargo install</code> metadata</li> </ul> <h2>2.7.6</h2> <ul> <li>Allow opting out of caching $CARGO_HOME/bin</li> <li>Add runner OS in cache key</li> <li>Adds an option to do lookup-only of the cache</li> </ul> <h2>2.7.5</h2> <ul> <li>Support Cargo.lock format cargo-lock v4</li> <li>Only run macOsWorkaround() on macOS</li> </ul> <h2>2.7.3</h2> <ul> <li>Work around upstream problem that causes cache saving to hang for minutes.</li> </ul> <h2>2.7.2</h2> <ul> <li>Only key by <code>Cargo.toml</code> and <code>Cargo.lock</code> files of workspace members.</li> </ul> <h2>2.7.1</h2> <ul> <li>Update toml parser to fix parsing errors.</li> </ul> <h2>2.7.0</h2> <ul> <li>Properly cache <code>trybuild</code> tests.</li> </ul> <h2>2.6.2</h2> <ul> <li>Fix <code>toml</code> parsing.</li> </ul> <h2>2.6.1</h2> <ul> <li>Fix hash contributions of <code>Cargo.lock</code>/<code>Cargo.toml</code> files.</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/Swatinem/rust-cache/commit/98c8021b550208e191a6a3145459bfc9fb29c4c0"><code>98c8021</code></a> 2.8.0</li> <li><a href="https://github.com/Swatinem/rust-cache/commit/14d3bc39c43eec8ca2cd08dd0805a32ee0cb3666"><code>14d3bc3</code></a> update Changelog</li> <li><a href="https://github.com/Swatinem/rust-cache/commit/52ea1434f87f7081841d430fb7b1235754488e51"><code>52ea143</code></a> support warpbuild cache provider (<a href="https://redirect.github.com/swatinem/rust-cache/issues/247">#247</a>)</li> <li><a href="https://github.com/Swatinem/rust-cache/commit/eaa85be6b1bfdc6616fd14d8916fc5aa0435e435"><code>eaa85be</code></a> Add cache-workspace-crates feature (<a href="https://redirect.github.com/swatinem/rust-cache/issues/246">#246</a>)</li> <li><a href="https://github.com/Swatinem/rust-cache/commit/901019c0f83889e6f8eaa395f97093151c05c4b0"><code>901019c</code></a> Update the test lockfiles</li> <li>See full diff in <a href="https://github.com/swatinem/rust-cache/compare/9d47c6ad4b02e050fd481d890b2ea34778fd09d6...98c8021b550208e191a6a3145459bfc9fb29c4c0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=Swatinem/rust-cache&package-manager=github_actions&previous-version=2.7.8&new-version=2.8.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* Bump treq from 24.9.1 to 25.5.0 (#18610)dependabot[bot]2025-07-021-7/+24
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumps [treq](https://github.com/twisted/treq) from 24.9.1 to 25.5.0. <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/twisted/treq/blob/trunk/CHANGELOG.rst">treq's changelog</a>.</em></p> <blockquote> <h1>25.5.0 (2025-05-31)</h1> <h2>Features</h2> <ul> <li>treq is packaged with Hatchling, and consequently no longer directly depends on setuptools. (<code>[#388](https://github.com/twisted/treq/issues/388) &lt;https://github.com/twisted/treq/issues/388&gt;</code>__)</li> </ul> <h2>Improved Documentation</h2> <ul> <li>Update documentation to use <code>async</code>/<code>await</code> syntax (<code>[#409](https://github.com/twisted/treq/issues/409) &lt;https://github.com/twisted/treq/issues/409&gt;</code>__)</li> </ul> <h2>Deprecations and Removals</h2> <ul> <li>Support for Python 3.8, which has reached end of support, is deprecated. This is the last release with support for Python 3.8. (<code>[#407](https://github.com/twisted/treq/issues/407) &lt;https://github.com/twisted/treq/issues/407&gt;</code>__)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/twisted/treq/commit/6869fa5d09f306e2fa225428516f947da0b8fae7"><code>6869fa5</code></a> Merge pull request <a href="https://redirect.github.com/twisted/treq/issues/410">#410</a> from twisted/release-25.5.0</li> <li><a href="https://github.com/twisted/treq/commit/56266566cfa71fc2a92ba5c9ace90c43ac774170"><code>5626656</code></a> Test with Python 3.13 final</li> <li><a href="https://github.com/twisted/treq/commit/f10185e4da4b404fa7592a7d948b6d573a9819da"><code>f10185e</code></a> Generate the changelog</li> <li><a href="https://github.com/twisted/treq/commit/4b846664f18261a666ad1bd6de4b59dd67db1fc5"><code>4b84666</code></a> Version 25.5.0</li> <li><a href="https://github.com/twisted/treq/commit/72a4441f599ac93c6a6a78a398366c103db6fb05"><code>72a4441</code></a> Merge pull request <a href="https://redirect.github.com/twisted/treq/issues/409">#409</a> from twisted/rtd-shiny</li> <li><a href="https://github.com/twisted/treq/commit/0a814edd8a6927e1c5288500ac98ee457cb53a9e"><code>0a814ed</code></a> Add changefragment</li> <li><a href="https://github.com/twisted/treq/commit/993cc47df5ae415dcb361f1215d9c50c31be6983"><code>993cc47</code></a> Fix changelog warnings</li> <li><a href="https://github.com/twisted/treq/commit/3992177456df67811d0960160ce0c343d1969926"><code>3992177</code></a> Link to CookieJar</li> <li><a href="https://github.com/twisted/treq/commit/cff43d93b6fbb6ce68f7721938906573b6ba55ad"><code>cff43d9</code></a> Update source_suffix conf</li> <li><a href="https://github.com/twisted/treq/commit/e39c8511b12c0cf809c6bc3e22f031597ad27067"><code>e39c851</code></a> async def print_response</li> <li>Additional commits viewable in <a href="https://github.com/twisted/treq/compare/treq-24.9.1...treq-25.5.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=treq&package-manager=pip&previous-version=24.9.1&new-version=25.5.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* Bump prometheus-client from 0.21.0 to 0.22.1 (#18609)dependabot[bot]2025-07-021-4/+4
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumps [prometheus-client](https://github.com/prometheus/client_python) from 0.21.0 to 0.22.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/prometheus/client_python/releases">prometheus-client's releases</a>.</em></p> <blockquote> <h2>v0.22.1</h2> <h2>What's Changed</h2> <ul> <li>BugFix: Skip validating and parsing comment lines early (<a href="https://redirect.github.com/prometheus/client_python/issues/1108">#1108</a>) by <a href="https://github.com/wissamir"><code>@​wissamir</code></a> in <a href="https://redirect.github.com/prometheus/client_python/pull/1109">prometheus/client_python#1109</a></li> <li>Use License Expressions in pyproject.toml by <a href="https://github.com/csmarchbanks"><code>@​csmarchbanks</code></a> in <a href="https://redirect.github.com/prometheus/client_python/pull/1111">prometheus/client_python#1111</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/prometheus/client_python/compare/v0.22.0...v0.22.1">https://github.com/prometheus/client_python/compare/v0.22.0...v0.22.1</a></p> <h2>v0.22.0</h2> <h2>What's Changed</h2> <ul> <li>Add support for native histograms in OM parser by <a href="https://github.com/vesari"><code>@​vesari</code></a> in <a href="https://redirect.github.com/prometheus/client_python/pull/1040">prometheus/client_python#1040</a></li> <li>Add exemplar support to CounterMetricFamily [Fix <a href="https://redirect.github.com/prometheus/client_python/issues/1062">#1062</a>] by <a href="https://github.com/lod"><code>@​lod</code></a> in <a href="https://redirect.github.com/prometheus/client_python/pull/1063">prometheus/client_python#1063</a></li> <li>Fix <code>write_to_textfile</code> leaves back temp files on errors by <a href="https://github.com/ethanschen"><code>@​ethanschen</code></a> in <a href="https://redirect.github.com/prometheus/client_python/pull/1066">prometheus/client_python#1066</a></li> <li>Support UTF-8 in metric creation, parsing, and exposition by <a href="https://github.com/ywwg"><code>@​ywwg</code></a> in <a href="https://redirect.github.com/prometheus/client_python/pull/1070">prometheus/client_python#1070</a></li> <li>Fix incorrect use of reentrant locks by <a href="https://github.com/suligap"><code>@​suligap</code></a> in <a href="https://redirect.github.com/prometheus/client_python/pull/1076">prometheus/client_python#1076</a></li> <li>Remove Python 3.8 support by <a href="https://github.com/kajinamit"><code>@​kajinamit</code></a> in <a href="https://redirect.github.com/prometheus/client_python/pull/1075">prometheus/client_python#1075</a></li> <li>Check if labelvalues is in _metrics before deletion in MetricWrapperBase.remove() by <a href="https://github.com/GlorifiedPig"><code>@​GlorifiedPig</code></a> in <a href="https://redirect.github.com/prometheus/client_python/pull/1077">prometheus/client_python#1077</a></li> <li>Add support for Python 3.13 by <a href="https://github.com/Pliner"><code>@​Pliner</code></a> in <a href="https://redirect.github.com/prometheus/client_python/pull/1080">prometheus/client_python#1080</a></li> <li>Correct nh sample span structure and parsing by <a href="https://github.com/vesari"><code>@​vesari</code></a> in <a href="https://redirect.github.com/prometheus/client_python/pull/1082">prometheus/client_python#1082</a></li> <li>Migrate from setup.py to pyproject.toml by <a href="https://github.com/csmarchbanks"><code>@​csmarchbanks</code></a> in <a href="https://redirect.github.com/prometheus/client_python/pull/1084">prometheus/client_python#1084</a></li> <li>Changed pushgateway.md by <a href="https://github.com/mallika-mur"><code>@​mallika-mur</code></a> in <a href="https://redirect.github.com/prometheus/client_python/pull/1083">prometheus/client_python#1083</a></li> <li>Fix order-dependent flaky tests related to UTF-8 support by <a href="https://github.com/dg98"><code>@​dg98</code></a> in <a href="https://redirect.github.com/prometheus/client_python/pull/1093">prometheus/client_python#1093</a></li> <li>Update versions for docs Github actions by <a href="https://github.com/csmarchbanks"><code>@​csmarchbanks</code></a> in <a href="https://redirect.github.com/prometheus/client_python/pull/1096">prometheus/client_python#1096</a></li> <li>Documentation Updates by <a href="https://github.com/ethanschen"><code>@​ethanschen</code></a> in <a href="https://redirect.github.com/prometheus/client_python/pull/1097">prometheus/client_python#1097</a></li> <li>Add note on gauge.set_function not working with multiprocessing by <a href="https://github.com/aapeliv"><code>@​aapeliv</code></a> in <a href="https://redirect.github.com/prometheus/client_python/pull/1098">prometheus/client_python#1098</a></li> <li>Don't send an empty HTTP header for /favicon.ico by <a href="https://github.com/noselasd"><code>@​noselasd</code></a> in <a href="https://redirect.github.com/prometheus/client_python/pull/1101">prometheus/client_python#1101</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/prometheus/client_python/compare/v0.21.0...v0.22.0">https://github.com/prometheus/client_python/compare/v0.21.0...v0.22.0</a></p> <h2>0.21.1 / 2024-12-03</h2> <h2>What's Changed</h2> <p>[BUGFIX] Revert incorrect use of reentrant locks. <a href="https://redirect.github.com/prometheus/client_python/issues/1076">#1076</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/prometheus/client_python/commit/d24220a6c477eef2dfeb12a312e0da66539095e1"><code>d24220a</code></a> Release 0.22.1</li> <li><a href="https://github.com/prometheus/client_python/commit/f294cbbf1dd24ae8936808923d30fafe0a7e519b"><code>f294cbb</code></a> Use License Expressions in pyproject.toml (<a href="https://redirect.github.com/prometheus/client_python/issues/1111">#1111</a>)</li> <li><a href="https://github.com/prometheus/client_python/commit/938b73e0bc2851d30246d572d5cefecf57b02041"><code>938b73e</code></a> BugFix: Skip validating and parsing comment lines early (<a href="https://redirect.github.com/prometheus/client_python/issues/1108">#1108</a>) (<a href="https://redirect.github.com/prometheus/client_python/issues/1109">#1109</a>)</li> <li><a href="https://github.com/prometheus/client_python/commit/8dfa10e5ff5cedd15300f7a13387d646c3010314"><code>8dfa10e</code></a> Release 0.22.0</li> <li><a href="https://github.com/prometheus/client_python/commit/e3902ea45b4bfbaf6ff1d10c3889107e6c8f51fc"><code>e3902ea</code></a> Don't send an empty HTTP header. (<a href="https://redirect.github.com/prometheus/client_python/issues/1101">#1101</a>)</li> <li><a href="https://github.com/prometheus/client_python/commit/23ab8264ceb7b094c65d30c35ff19491e6d38cd9"><code>23ab826</code></a> Add note on gauge.set_function not working with mp, see <a href="https://redirect.github.com/prometheus/client_python/issues/504">#504</a> (<a href="https://redirect.github.com/prometheus/client_python/issues/1098">#1098</a>)</li> <li><a href="https://github.com/prometheus/client_python/commit/c1ff3b28d32ff78a1a6ec0ddd8f81b70ca365b3f"><code>c1ff3b2</code></a> Update docs (<a href="https://redirect.github.com/prometheus/client_python/issues/1097">#1097</a>)</li> <li><a href="https://github.com/prometheus/client_python/commit/e3bfa1f10195b6959c5f49503762d07a47e1654c"><code>e3bfa1f</code></a> Update versions for docs Github actions (<a href="https://redirect.github.com/prometheus/client_python/issues/1096">#1096</a>)</li> <li><a href="https://github.com/prometheus/client_python/commit/de8bb4adf7ebbb73eb50ed4ae9e941ed2f961d0f"><code>de8bb4a</code></a> Fix order-dependent flaky tests related to UTF-8 support (<a href="https://redirect.github.com/prometheus/client_python/issues/1093">#1093</a>)</li> <li><a href="https://github.com/prometheus/client_python/commit/46eae7bae88f76951f7246d9f359f2dd5eeff110"><code>46eae7b</code></a> Changed pushgateway.md (<a href="https://redirect.github.com/prometheus/client_python/issues/1083">#1083</a>)</li> <li>Additional commits viewable in <a href="https://github.com/prometheus/client_python/compare/v0.21.0...v0.22.1">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=prometheus-client&package-manager=pip&previous-version=0.21.0&new-version=0.22.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* Bump pillow from 11.2.1 to 11.3.0 (#18624)dependabot[bot]2025-07-021-84/+89
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumps [pillow](https://github.com/python-pillow/Pillow) from 11.2.1 to 11.3.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/python-pillow/Pillow/releases">pillow's releases</a>.</em></p> <blockquote> <h2>11.3.0</h2> <p><a href="https://pillow.readthedocs.io/en/stable/releasenotes/11.3.0.html">https://pillow.readthedocs.io/en/stable/releasenotes/11.3.0.html</a></p> <h2>Deprecations</h2> <ul> <li>Deprecate fromarray mode argument <a href="https://redirect.github.com/python-pillow/Pillow/issues/9018">#9018</a> [<a href="https://github.com/radarhere"><code>@​radarhere</code></a>]</li> <li>Deprecate saving I mode images as PNG <a href="https://redirect.github.com/python-pillow/Pillow/issues/9023">#9023</a> [<a href="https://github.com/radarhere"><code>@​radarhere</code></a>]</li> </ul> <h2>Documentation</h2> <ul> <li>Added release notes for <a href="https://redirect.github.com/python-pillow/Pillow/issues/9041">#9041</a> <a href="https://redirect.github.com/python-pillow/Pillow/issues/9042">#9042</a> [<a href="https://github.com/radarhere"><code>@​radarhere</code></a>]</li> <li>Add release notes for <a href="https://redirect.github.com/python-pillow/Pillow/issues/8912">#8912</a> and <a href="https://redirect.github.com/python-pillow/Pillow/issues/8969">#8969</a> <a href="https://redirect.github.com/python-pillow/Pillow/issues/9019">#9019</a> [<a href="https://github.com/radarhere"><code>@​radarhere</code></a>]</li> <li>ImageFont does not handle multiline text <a href="https://redirect.github.com/python-pillow/Pillow/issues/9000">#9000</a> [<a href="https://github.com/radarhere"><code>@​radarhere</code></a>]</li> <li>Updated Ubuntu CI targets <a href="https://redirect.github.com/python-pillow/Pillow/issues/8988">#8988</a> [<a href="https://github.com/radarhere"><code>@​radarhere</code></a>]</li> <li>Update MinGW package names <a href="https://redirect.github.com/python-pillow/Pillow/issues/8987">#8987</a> [<a href="https://github.com/H4M5TER"><code>@​H4M5TER</code></a>]</li> <li>Updated docstring <a href="https://redirect.github.com/python-pillow/Pillow/issues/8943">#8943</a> [<a href="https://github.com/radarhere"><code>@​radarhere</code></a>]</li> <li>Mention that tobytes() with the raw encoder uses Pack.c <a href="https://redirect.github.com/python-pillow/Pillow/issues/8878">#8878</a> [<a href="https://github.com/radarhere"><code>@​radarhere</code></a>]</li> <li>Refactor docs <code>Makefile</code> <a href="https://redirect.github.com/python-pillow/Pillow/issues/8933">#8933</a> [<a href="https://github.com/hugovk"><code>@​hugovk</code></a>]</li> <li>Add template for quarterly release issue <a href="https://redirect.github.com/python-pillow/Pillow/issues/8932">#8932</a> [<a href="https://github.com/aclark4life"><code>@​aclark4life</code></a>]</li> <li>Add list of third party plugins <a href="https://redirect.github.com/python-pillow/Pillow/issues/8910">#8910</a> [<a href="https://github.com/radarhere"><code>@​radarhere</code></a>]</li> <li>Update redirected URL <a href="https://redirect.github.com/python-pillow/Pillow/issues/8919">#8919</a> [<a href="https://github.com/radarhere"><code>@​radarhere</code></a>]</li> <li>Docs: use sentence case for headers <a href="https://redirect.github.com/python-pillow/Pillow/issues/8914">#8914</a> [<a href="https://github.com/hugovk"><code>@​hugovk</code></a>]</li> <li>Docs: remove unused Makefile targets <a href="https://redirect.github.com/python-pillow/Pillow/issues/8917">#8917</a> [<a href="https://github.com/hugovk"><code>@​hugovk</code></a>]</li> <li>Remove indentation from lists <a href="https://redirect.github.com/python-pillow/Pillow/issues/8915">#8915</a> [<a href="https://github.com/radarhere"><code>@​radarhere</code></a>]</li> <li>Python 3.13 is tested on Arch <a href="https://redirect.github.com/python-pillow/Pillow/issues/8894">#8894</a> [<a href="https://github.com/radarhere"><code>@​radarhere</code></a>]</li> <li>Move XV Thumbnails to read only section <a href="https://redirect.github.com/python-pillow/Pillow/issues/8893">#8893</a> [<a href="https://github.com/aclark4life"><code>@​aclark4life</code></a>]</li> <li>Updated macOS tested Pillow versions <a href="https://redirect.github.com/python-pillow/Pillow/issues/8890">#8890</a> [<a href="https://github.com/radarhere"><code>@​radarhere</code></a>]</li> </ul> <h2>Dependencies</h2> <ul> <li>Add AVIF to wheels using only aomenc and dav1d AVIF codecs for reduced size <a href="https://redirect.github.com/python-pillow/Pillow/issues/8858">#8858</a> [<a href="https://github.com/fdintino"><code>@​fdintino</code></a>]</li> <li>Use same AVIF URL when fetching dependency <a href="https://redirect.github.com/python-pillow/Pillow/issues/8871">#8871</a> [<a href="https://github.com/radarhere"><code>@​radarhere</code></a>]</li> <li>Update dependency mypy to v1.16.1 <a href="https://redirect.github.com/python-pillow/Pillow/issues/9026">#9026</a> [@<a href="https://github.com/apps/renovate">renovate[bot]</a>]</li> <li>Update libpng to 1.6.49 <a href="https://redirect.github.com/python-pillow/Pillow/issues/9014">#9014</a> [<a href="https://github.com/radarhere"><code>@​radarhere</code></a>]</li> <li>Update dependency cibuildwheel to v3 <a href="https://redirect.github.com/python-pillow/Pillow/issues/9010">#9010</a> [@<a href="https://github.com/apps/renovate">renovate[bot]</a>]</li> <li>Updated libjpeg-turbo to 3.1.1 <a href="https://redirect.github.com/python-pillow/Pillow/issues/9009">#9009</a> [<a href="https://github.com/radarhere"><code>@​radarhere</code></a>]</li> <li>Update dependency mypy to v1.16.0 <a href="https://redirect.github.com/python-pillow/Pillow/issues/8991">#8991</a> [@<a href="https://github.com/apps/renovate">renovate[bot]</a>]</li> <li>Updated libpng to 1.6.48 <a href="https://redirect.github.com/python-pillow/Pillow/issues/8940">#8940</a> [<a href="https://github.com/radarhere"><code>@​radarhere</code></a>]</li> <li>Updated Ghostscript to 10.5.1 <a href="https://redirect.github.com/python-pillow/Pillow/issues/8939">#8939</a> [<a href="https://github.com/radarhere"><code>@​radarhere</code></a>]</li> <li>Updated harfbuzz to 11.2.1 <a href="https://redirect.github.com/python-pillow/Pillow/issues/8937">#8937</a> [<a href="https://github.com/radarhere"><code>@​radarhere</code></a>]</li> <li>Updated libavif to 1.3.0 <a href="https://redirect.github.com/python-pillow/Pillow/issues/8949">#8949</a> [<a href="https://github.com/radarhere"><code>@​radarhere</code></a>]</li> <li>Update dependency cibuildwheel to v2.23.3 <a href="https://redirect.github.com/python-pillow/Pillow/issues/8931">#8931</a> [@<a href="https://github.com/apps/renovate">renovate[bot]</a>]</li> <li>Updated harfbuzz to 11.1.0 <a href="https://redirect.github.com/python-pillow/Pillow/issues/8904">#8904</a> [<a href="https://github.com/radarhere"><code>@​radarhere</code></a>]</li> </ul> <h2>Testing</h2> <ul> <li>Add <code>match</code> parameter to <code>pytest.warns()</code> <a href="https://redirect.github.com/python-pillow/Pillow/issues/9038">#9038</a> [<a href="https://github.com/hugovk"><code>@​hugovk</code></a>]</li> <li>Increase pytest verbosity <a href="https://redirect.github.com/python-pillow/Pillow/issues/9040">#9040</a> [<a href="https://github.com/radarhere"><code>@​radarhere</code></a>]</li> <li>Improve SgiImagePlugin test coverage <a href="https://redirect.github.com/python-pillow/Pillow/issues/8896">#8896</a> [<a href="https://github.com/radarhere"><code>@​radarhere</code></a>]</li> <li>Update ruff pre-commit ID <a href="https://redirect.github.com/python-pillow/Pillow/issues/8994">#8994</a> [<a href="https://github.com/radarhere"><code>@​radarhere</code></a>]</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/python-pillow/Pillow/commit/89f1f4626a2aaf5f3d5ca6437f41def2998fbe09"><code>89f1f46</code></a> 11.3.0 version bump</li> <li><a href="https://github.com/python-pillow/Pillow/commit/f2de251c769ed76acfe94b54cc87c2aee77bdadf"><code>f2de251</code></a> Updated check script paths (<a href="https://redirect.github.com/python-pillow/Pillow/issues/9052">#9052</a>)</li> <li><a href="https://github.com/python-pillow/Pillow/commit/84855d11c8fd790d89507ac1c51a5e393178477a"><code>84855d1</code></a> Raise FileNotFoundError when opening an empty path (<a href="https://redirect.github.com/python-pillow/Pillow/issues/9048">#9048</a>)</li> <li><a href="https://github.com/python-pillow/Pillow/commit/204d11d4da15879946c1120c43e6f75b2a338d5b"><code>204d11d</code></a> Raise FileNotFoundError when opening an empty path</li> <li><a href="https://github.com/python-pillow/Pillow/commit/2b39f7581e9637a7262c070d5cebb12fa70f2c86"><code>2b39f75</code></a> Handle IPTC TIFF tags with incorrect type (<a href="https://redirect.github.com/python-pillow/Pillow/issues/8925">#8925</a>)</li> <li><a href="https://github.com/python-pillow/Pillow/commit/e7a53ba19b477cc30d35ef9e7aab4b79e5bba172"><code>e7a53ba</code></a> Do not update palette for L mode GIF frame (<a href="https://redirect.github.com/python-pillow/Pillow/issues/8924">#8924</a>)</li> <li><a href="https://github.com/python-pillow/Pillow/commit/c22230b761254f3abf4af774d02b18b4b5eb6c71"><code>c22230b</code></a> Use save parameters as encoderinfo defaults (<a href="https://redirect.github.com/python-pillow/Pillow/issues/9001">#9001</a>)</li> <li><a href="https://github.com/python-pillow/Pillow/commit/da10ed1cf3c4123a98a2f765d3beaf830d47d113"><code>da10ed1</code></a> Add support for iOS (<a href="https://redirect.github.com/python-pillow/Pillow/issues/9030">#9030</a>)</li> <li><a href="https://github.com/python-pillow/Pillow/commit/be2b4e78644fdc85e63f08a22514e4d32072439f"><code>be2b4e7</code></a> Fix qtables and quality scaling (<a href="https://redirect.github.com/python-pillow/Pillow/issues/8879">#8879</a>)</li> <li><a href="https://github.com/python-pillow/Pillow/commit/d4162f85056223098fef0ba3f87e58519ba2955f"><code>d4162f8</code></a> Updated return type</li> <li>Additional commits viewable in <a href="https://github.com/python-pillow/Pillow/compare/11.2.1...11.3.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=pillow&package-manager=pip&previous-version=11.2.1&new-version=11.3.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/element-hq/synapse/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* Bump types-jsonschema from 4.23.0.20250516 to 4.24.0.20250528 (#18611)dependabot[bot]2025-07-021-27/+28
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumps [types-jsonschema](https://github.com/typeshed-internal/stub_uploader) from 4.23.0.20250516 to 4.24.0.20250528. <details> <summary>Commits</summary> <ul> <li>See full diff in <a href="https://github.com/typeshed-internal/stub_uploader/commits">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=types-jsonschema&package-manager=pip&previous-version=4.23.0.20250516&new-version=4.24.0.20250528)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* Bump sigstore/cosign-installer from 3.9.0 to 3.9.1 (#18608)dependabot[bot]2025-07-021-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumps [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer) from 3.9.0 to 3.9.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/sigstore/cosign-installer/releases">sigstore/cosign-installer's releases</a>.</em></p> <blockquote> <h2>v3.9.1</h2> <h2>What's Changed</h2> <ul> <li>default action install to use release v2.5.1 by <a href="https://github.com/cpanato"><code>@​cpanato</code></a> in <a href="https://redirect.github.com/sigstore/cosign-installer/pull/193">sigstore/cosign-installer#193</a></li> <li>default cosign to v2.5.2 by <a href="https://github.com/cpanato"><code>@​cpanato</code></a> in <a href="https://redirect.github.com/sigstore/cosign-installer/pull/194">sigstore/cosign-installer#194</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/sigstore/cosign-installer/compare/v3.9.0...v3.9.1">https://github.com/sigstore/cosign-installer/compare/v3.9.0...v3.9.1</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/sigstore/cosign-installer/commit/398d4b0eeef1380460a10c8013a76f728fb906ac"><code>398d4b0</code></a> default cosign to v2.5.2 (<a href="https://redirect.github.com/sigstore/cosign-installer/issues/194">#194</a>)</li> <li><a href="https://github.com/sigstore/cosign-installer/commit/84f54a2bcd1ecf70e51a05388183dce4e1487230"><code>84f54a2</code></a> default action install to use release v2.5.1 (<a href="https://redirect.github.com/sigstore/cosign-installer/issues/193">#193</a>)</li> <li>See full diff in <a href="https://github.com/sigstore/cosign-installer/compare/fb28c2b6339dcd94da6e4cbcbc5e888961f6f8c3...398d4b0eeef1380460a10c8013a76f728fb906ac">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=sigstore/cosign-installer&package-manager=github_actions&previous-version=3.9.0&new-version=3.9.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* Bump stefanzweifel/git-auto-commit-action from 5.2.0 to 6.0.1 (#18607)dependabot[bot]2025-07-021-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumps [stefanzweifel/git-auto-commit-action](https://github.com/stefanzweifel/git-auto-commit-action) from 5.2.0 to 6.0.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/stefanzweifel/git-auto-commit-action/releases">stefanzweifel/git-auto-commit-action's releases</a>.</em></p> <blockquote> <h2>v6.0.1</h2> <h2>Fixed</h2> <ul> <li>Disable Check if Repo is in Detached State (<a href="https://redirect.github.com/stefanzweifel/git-auto-commit-action/pull/379">#379</a>) <a href="https://github.com/@stefanzweifel"><code>@​stefanzweifel</code></a></li> </ul> <h2>v6.0.0</h2> <h2>Added</h2> <ul> <li>Throw error early if repository is in a detached state (<a href="https://redirect.github.com/stefanzweifel/git-auto-commit-action/pull/357">#357</a>)</li> </ul> <h2>Fixed</h2> <ul> <li>Fix PAT instructions with Dependabot (<a href="https://redirect.github.com/stefanzweifel/git-auto-commit-action/pull/376">#376</a>) <a href="https://github.com/@Dreamsorcerer"><code>@​Dreamsorcerer</code></a></li> </ul> <h2>Removed</h2> <ul> <li>Remove support for <code>create_branch</code>, <code>skip_checkout</code>, <code>skip_Fetch</code> (<a href="https://redirect.github.com/stefanzweifel/git-auto-commit-action/pull/314">#314</a>)</li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/stefanzweifel/git-auto-commit-action/blob/master/CHANGELOG.md">stefanzweifel/git-auto-commit-action's changelog</a>.</em></p> <blockquote> <h1>Changelog</h1> <p>All notable changes to this project will be documented in this file.</p> <p>The format is based on <a href="http://keepachangelog.com/en/1.0.0/">Keep a Changelog</a> and this project adheres to <a href="http://semver.org/spec/v2.0.0.html">Semantic Versioning</a>.</p> <h2><a href="https://github.com/stefanzweifel/git-auto-commit-action/compare/v6.0.1...HEAD">Unreleased</a></h2> <blockquote> <p>TBD</p> </blockquote> <h2><a href="https://github.com/stefanzweifel/git-auto-commit-action/compare/v6.0.0...v6.0.1">v6.0.1</a> - 2025-06-11</h2> <h3>Fixed</h3> <ul> <li>Disable Check if Repo is in Detached State (<a href="https://redirect.github.com/stefanzweifel/git-auto-commit-action/pull/379">#379</a>) <a href="https://github.com/@stefanzweifel"><code>@​stefanzweifel</code></a></li> </ul> <h2><a href="https://github.com/stefanzweifel/git-auto-commit-action/compare/v5.2.0...v6.0.0">v6.0.0</a> - 2025-06-10</h2> <h3>Added</h3> <ul> <li>Throw error early if repository is in a detached state (<a href="https://redirect.github.com/stefanzweifel/git-auto-commit-action/pull/357">#357</a>)</li> </ul> <h3>Fixed</h3> <ul> <li>Fix PAT instructions with Dependabot (<a href="https://redirect.github.com/stefanzweifel/git-auto-commit-action/pull/376">#376</a>) <a href="https://github.com/@Dreamsorcerer"><code>@​Dreamsorcerer</code></a></li> </ul> <h3>Removed</h3> <ul> <li>Remove support for <code>create_branch</code>, <code>skip_checkout</code>, <code>skip_Fetch</code> (<a href="https://redirect.github.com/stefanzweifel/git-auto-commit-action/pull/314">#314</a>)</li> </ul> <h2><a href="https://github.com/stefanzweifel/git-auto-commit-action/compare/v5.1.0...v5.2.0">v5.2.0</a> - 2025-04-19</h2> <h3>Added</h3> <ul> <li>Add <code>create_git_tag_only</code> option to skip commiting and always create a git-tag. (<a href="https://redirect.github.com/stefanzweifel/git-auto-commit-action/pull/364">#364</a>) <a href="https://github.com/@zMynxx"><code>@​zMynxx</code></a></li> <li>Add Test for <code>create_git_tag_only</code> feature (<a href="https://redirect.github.com/stefanzweifel/git-auto-commit-action/pull/367">#367</a>) <a href="https://github.com/@stefanzweifel"><code>@​stefanzweifel</code></a></li> </ul> <h3>Fixed</h3> <ul> <li>docs: Update README.md per <a href="https://redirect.github.com/stefanzweifel/git-auto-commit-action/issues/354">#354</a> (<a href="https://redirect.github.com/stefanzweifel/git-auto-commit-action/pull/361">#361</a>) <a href="https://github.com/@rasa"><code>@​rasa</code></a></li> </ul> <h2><a href="https://github.com/stefanzweifel/git-auto-commit-action/compare/v5.0.1...v5.1.0">v5.1.0</a> - 2025-01-11</h2> <h3>Changed</h3> <ul> <li>Include <code>github.actor_id</code> in default <code>commit_author</code> (<a href="https://redirect.github.com/stefanzweifel/git-auto-commit-action/pull/354">#354</a>) <a href="https://github.com/@parkerbxyz"><code>@​parkerbxyz</code></a></li> </ul> <h3>Fixed</h3> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/stefanzweifel/git-auto-commit-action/commit/778341af668090896ca464160c2def5d1d1a3eb0"><code>778341a</code></a> Merge pull request <a href="https://redirect.github.com/stefanzweifel/git-auto-commit-action/issues/379">#379</a> from stefanzweifel/disable-detached-state-check</li> <li><a href="https://github.com/stefanzweifel/git-auto-commit-action/commit/33b203d92a47ab2370a88ce03d9825cdb52cc98c"><code>33b203d</code></a> Disable Check if Repo is in Detached State</li> <li><a href="https://github.com/stefanzweifel/git-auto-commit-action/commit/a82d80a75f85e7feb8d2777704c545af1c7affd9"><code>a82d80a</code></a> Update CHANGELOG</li> <li><a href="https://github.com/stefanzweifel/git-auto-commit-action/commit/3cc016cfc892e0844046da36fc68da4e525e081f"><code>3cc016c</code></a> Merge pull request <a href="https://redirect.github.com/stefanzweifel/git-auto-commit-action/issues/375">#375</a> from stefanzweifel/v6-next</li> <li><a href="https://github.com/stefanzweifel/git-auto-commit-action/commit/ddb7ae415961225797e0234a7018a30ba1e66bb3"><code>ddb7ae4</code></a> Merge pull request <a href="https://redirect.github.com/stefanzweifel/git-auto-commit-action/issues/376">#376</a> from Dreamsorcerer/patch-1</li> <li><a href="https://github.com/stefanzweifel/git-auto-commit-action/commit/b001e5f0ff05d7297c0101f4b44e861799e417dd"><code>b001e5f</code></a> Apply suggestions from code review</li> <li><a href="https://github.com/stefanzweifel/git-auto-commit-action/commit/6494dc61d3e663a9f5166a099d9736ceefc5a3aa"><code>6494dc6</code></a> Fix PAT instructions with Dependabot</li> <li><a href="https://github.com/stefanzweifel/git-auto-commit-action/commit/76180511d9f2354bb712ec6338ce79d4f2061bfe"><code>7618051</code></a> Add deprecated inputs to fix unbound variable issue</li> <li><a href="https://github.com/stefanzweifel/git-auto-commit-action/commit/ae114628ea78fd141aa4fa7730f70c984b29c391"><code>ae11462</code></a> Merge pull request <a href="https://redirect.github.com/stefanzweifel/git-auto-commit-action/issues/371">#371</a> from stefanzweifel/dependabot/npm_and_yarn/bats-1.12.0</li> <li><a href="https://github.com/stefanzweifel/git-auto-commit-action/commit/3058f91afb4f03b73d38f33c35023fb22cf546b8"><code>3058f91</code></a> Bump bats from 1.11.1 to 1.12.0</li> <li>Additional commits viewable in <a href="https://github.com/stefanzweifel/git-auto-commit-action/compare/b863ae1933cb653a53c021fe36dbb774e1fb9403...778341af668090896ca464160c2def5d1d1a3eb0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=stefanzweifel/git-auto-commit-action&package-manager=github_actions&previous-version=5.2.0&new-version=6.0.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* Forbid locked users from using `POST /login` (#18594)Andrew Ferrazzutti2025-07-025-12/+37
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Discussed in the [Synapse Dev room](https://matrix.to/#/!vcyiEtMVHIhWXcJAfl:sw1v.org/$K4UojQtvaSpxSe35TWFXtKWGoAuHwHFcKo8qn2lwxSs?via=matrix.org&via=element.io&via=envs.net) ### Pull Request Checklist <!-- Please read https://element-hq.github.io/synapse/latest/development/contributing_guide.html before submitting your pull request --> * [x] Pull request is based on the develop branch * [x] Pull request includes a [changelog file](https://element-hq.github.io/synapse/latest/development/contributing_guide.html#changelog). The entry should: - Be a short description of your change which makes sense to users. "Fixed a bug that prevented receiving messages from other servers." instead of "Moved X method from `EventStore` to `EventWorkerStore`.". - Use markdown where necessary, mostly for `code blocks`. - End with either a period (.) or an exclamation mark (!). - Start with a capital letter. - Feel free to credit yourself, by adding a sentence "Contributed by @github_username." or "Contributed by [Your Name]." to the end of the entry. * [x] [Code style](https://element-hq.github.io/synapse/latest/code_style.html) is correct (run the [linters](https://element-hq.github.io/synapse/latest/development/contributing_guide.html#run-the-linters))
* Raise poetry-core version cap to 2.1.3 (#18575)V024602025-07-022-1/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Request to raise the defensive version cap for poetry-core from 1.9.1 to 2.1.3. My understanding is that the major version bump of poetry signals the transition to standardized pyproject.toml metadata, but does not affect backwards compatibility. This is a subset of the changes in #18432 Fixes #18200 ### Pull Request Checklist <!-- Please read https://element-hq.github.io/synapse/latest/development/contributing_guide.html before submitting your pull request --> * [x] Pull request is based on the develop branch * [x] Pull request includes a [changelog file](https://element-hq.github.io/synapse/latest/development/contributing_guide.html#changelog). The entry should: - Be a short description of your change which makes sense to users. "Fixed a bug that prevented receiving messages from other servers." instead of "Moved X method from `EventStore` to `EventWorkerStore`.". - Use markdown where necessary, mostly for `code blocks`. - End with either a period (.) or an exclamation mark (!). - Start with a capital letter. - Feel free to credit yourself, by adding a sentence "Contributed by @github_username." or "Contributed by [Your Name]." to the end of the entry. * [x] [Code style](https://element-hq.github.io/synapse/latest/code_style.html) is correct (run the [linters](https://element-hq.github.io/synapse/latest/development/contributing_guide.html#run-the-linters))
* Log the room ID we're purging state for (#18625)Erik Johnston2025-07-022-0/+8
| | | So we can see what we're deleting.
* Fix documentation of the Delete Room Admin API's status field. (#18519)reivilibre2025-07-012-4/+5
| | | | | | | Fixes: #18502 --------- Signed-off-by: Olivier 'reivilibre <oliverw@matrix.org>
* Merge branch 'master' into developQuentin Gliech2025-07-014-3/+27
|\
| * Add a note in the changelog about the manylinux wheelsQuentin Gliech2025-07-011-0/+9
| |
| * 1.133.0Quentin Gliech2025-07-014-2/+16
| |
| * Bump cibuildwheel to 3.0.0 to fix the building of wheels (#18615)Quentin Gliech2025-07-012-2/+3
| | | | | | | | | | | | | | | | | | | | Fixes https://github.com/element-hq/synapse/issues/18614 This upgrade CIBW to 3.0, which now builds using the manylinux_2_28 image, as the previous image is EOL and not supported by some of our dependencies anymore. This also updates the job to use the `ubuntu-24.04` base image instead of `ubuntu-22.04`
* | Stop sending or processing the `origin` field in PDUs (#18418)Andrew Morgan2025-07-0111-32/+18
| | | | | | | | | | Co-authored-by: Quentin Gliech <quenting@element.io> Co-authored-by: Eric Eastwood <erice@element.io>
* | Add `via` param to hierarchy enpoint (#18070)Krishan2025-06-305-3/+89
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | ### Pull Request Checklist Implementation of [MSC4235](https://github.com/matrix-org/matrix-spec-proposals/pull/4235) as per suggestion in [pull request 17750](https://github.com/element-hq/synapse/pull/17750#issuecomment-2411248598). <!-- Please read https://element-hq.github.io/synapse/latest/development/contributing_guide.html before submitting your pull request --> * [x] Pull request is based on the develop branch * [x] Pull request includes a [changelog file](https://element-hq.github.io/synapse/latest/development/contributing_guide.html#changelog). The entry should: - Be a short description of your change which makes sense to users. "Fixed a bug that prevented receiving messages from other servers." instead of "Moved X method from `EventStore` to `EventWorkerStore`.". - Use markdown where necessary, mostly for `code blocks`. - End with either a period (.) or an exclamation mark (!). - Start with a capital letter. - Feel free to credit yourself, by adding a sentence "Contributed by @github_username." or "Contributed by [Your Name]." to the end of the entry. * [x] [Code style](https://element-hq.github.io/synapse/latest/code_style.html) is correct (run the [linters](https://element-hq.github.io/synapse/latest/development/contributing_guide.html#run-the-linters)) --------- Co-authored-by: Quentin Gliech <quenting@element.io>
* | Speed up device deletion (#18602)Erik Johnston2025-06-307-84/+225
| | | | | | | | | | | | | | | | | | This is to handle the case of deleting lots of "bot" devices at once. Reviewable commit-by-commit --------- Co-authored-by: Andrew Morgan <1342360+anoadragon453@users.noreply.github.com>
* | Skip processing policy server events through policy server (#18605)Travis Ralston2025-06-302-0/+4
| | | | | | | | Co-authored-by: Andrew Morgan <andrew@amorgan.xyz>
* | Improve performance of device deletion by adding missing index. (#18582)reivilibre2025-06-303-0/+29
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | <ol> <li> Reorder columns in `event_txn_id_device_id_txn_id` index \ This now satisfies the foreign key on `(user_id, device_id)` making reverse lookups, as needed for device deletions, more efficient. This improves device deletion performance by on the order of 8 to 10× on matrix.org. </li> </ol> Rationale: ## On the `event_txn_id_device_id` table: We currently have this index: ```sql -- This ensures that there is only one mapping per (room_id, user_id, device_id, txn_id) tuple. CREATE UNIQUE INDEX IF NOT EXISTS event_txn_id_device_id_txn_id ON event_txn_id_device_id(room_id, user_id, device_id, txn_id); ``` The main way we use this table is ```python return await self.db_pool.simple_select_one_onecol( table="event_txn_id_device_id", keyvalues={ "room_id": room_id, "user_id": user_id, "device_id": device_id, "txn_id": txn_id, }, retcol="event_id", allow_none=True, desc="get_event_id_from_transaction_id_and_device_id", ) ``` But this foreign key is relatively unsupported, making deletions in the devices table inefficient (full index scan on the above index): ```sql FOREIGN KEY (user_id, device_id) REFERENCES devices (user_id, device_id) ON DELETE CASCADE ``` I propose re-ordering the columns in that index to: `(user_id, device_id, room_id, txn_id)` (by replacing it). That way the foreign key back-check can rely on the prefix of this index, but it's still useful for the original purpose it was made for. It doesn't take any extra disk space and does not harm write performance (because the same amount of writing work needs to be performed). --------- Signed-off-by: Olivier 'reivilibre <oliverw@matrix.org>
* | Improve docstring on `simple_upsert_many`. (#18573)reivilibre2025-06-302-4/+43
| | | | | | | | | | | | | | | | | | It came up that this was somewhat confusing and an example might help. So here's an example :) --------- Signed-off-by: Olivier 'reivilibre <oliverw@matrix.org>
* | Add `forget_forced_upon_leave` capability as per MSC4267 (#18196)Johannes Marbach2025-06-275-1/+50
| | | | | | | | | | | | | | This adds the capability from https://github.com/matrix-org/matrix-spec-proposals/pull/4267 under an experimental feature. Signed-off-by: Johannes Marbach <n0-0ne+github@mailbox.org>
* | Fix backwards compat for `DirectServeJsonResource` (#18600)Erik Johnston2025-06-2619-29/+56
| | | | | | | | | | As that appears in the module API. Broke in #18595.
* | Add `federated_user_may_invite` spam checker callback (#18241)Tulir Asokan2025-06-265-2/+99
| | | | | | | | | | Co-authored-by: Sebastian Spaeth <Sebastian@SSpaeth.de> Co-authored-by: Andrew Morgan <1342360+anoadragon453@users.noreply.github.com>
* | Bump base64 from 0.21.7 to 0.22.1 (#18589)dependabot[bot]2025-06-251-10/+4
| | | | | | | | Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* | Bump docker/build-push-action from 6.17.0 to 6.18.0 (#18497)dependabot[bot]2025-06-251-1/+1
| | | | | | | | Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* | Bump pyasn1-modules from 0.4.1 to 0.4.2 (#18495)dependabot[bot]2025-06-251-4/+4
| | | | | | | | Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* | Bump urllib3 from 2.2.2 to 2.5.0 (#18572)dependabot[bot]2025-06-251-4/+4
| |
* | Bump sigstore/cosign-installer from 3.8.2 to 3.9.0 (#18588)dependabot[bot]2025-06-251-1/+1
| |
* | Bump docker/setup-buildx-action from 3.10.0 to 3.11.1 (#18587)dependabot[bot]2025-06-252-2/+2
| |
* | Bump reqwest from 0.12.15 to 0.12.20 (#18590)dependabot[bot]2025-06-251-129/+49
| |
* | Lift pausing on ratelimited requests to http layer (#18595)Erik Johnston2025-06-2521-34/+49
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | When a request gets ratelimited we (optionally) wait ~500ms before returning to mitigate clients that like to tightloop on request failures. However, this is currently implemented by pausing request processing when we check for ratelimits, which might be deep within request processing, and e.g. while locks are held. Instead, let's hoist the pause to the very top of the HTTP handler. Hopefully, this mitigates the issue where a user sending lots of events to a single room can see their requests time out due to the combination of the linearizer and the pausing of the request. Instead, they should see the requests 429 after ~500ms. The first commit is a refactor to pass the `Clock` to `AsyncResource`, the second commit is the behavioural change.
* | Fix registering of background updates for split main/state db (#18509)Patrick Cloke2025-06-255-32/+33
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The background updates are being registered on an object that is for the _state_ database, but the actual tables are on the _main_ database. This just moves them to a different store that can access the right stuff. I noticed this when trying to do a full schema dump cause I was curious what has changed since the last one. Fixes #16054 ### Pull Request Checklist <!-- Please read https://element-hq.github.io/synapse/latest/development/contributing_guide.html before submitting your pull request --> * [x] Pull request is based on the develop branch * [x] Pull request includes a [changelog file](https://element-hq.github.io/synapse/latest/development/contributing_guide.html#changelog). The entry should: - Be a short description of your change which makes sense to users. "Fixed a bug that prevented receiving messages from other servers." instead of "Moved X method from `EventStore` to `EventWorkerStore`.". - Use markdown where necessary, mostly for `code blocks`. - End with either a period (.) or an exclamation mark (!). - Start with a capital letter. - Feel free to credit yourself, by adding a sentence "Contributed by @github_username." or "Contributed by [Your Name]." to the end of the entry. * [x] [Code style](https://element-hq.github.io/synapse/latest/code_style.html) is correct (run the [linters](https://element-hq.github.io/synapse/latest/development/contributing_guide.html#run-the-linters))
* | Bump types-opentracing from 2.4.10.6 to 2.4.10.20250622 (#18586)dependabot[bot]2025-06-241-4/+4
|/ | | | Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* 1.133.0rc1Andrew Morgan2025-06-2420-18/+47
|
* Unbreak unit tests with Twisted `25.5.0` by add `parsePOSTFormSubmission` ↵Andrew Morgan2025-06-2410-78/+110
| | | | | | arg to `FakeSite` (#18577) Co-authored-by: anoa's Codex Agent <codex@amorgan.xyz>
* Update PyO3 to version 0.25 (#18578)V024602025-06-233-16/+16
| | | | | | Updates `pyo3` to version 0.25.1 and, accordingly, `pyo3-log` to v0.12.4 and `pythonize` to v0.25.0. PyO3 v0.25 enables Python 3.14 support.
* Add report user API from MSC4260 (#18120)Travis Ralston2025-06-2010-0/+335
| | | | | Co-authored-by: turt2live <1190097+turt2live@users.noreply.github.com> Co-authored-by: Andrew Morgan <1342360+anoadragon453@users.noreply.github.com>
* Fixup generated config documentation (#18568)Erik Johnston2025-06-182-1/+2
| | | Somehow its got out of sync, picked up by CI on develop.
* Clean up old `device_federation_inbox` rows (#18546)Erik Johnston2025-06-185-1/+250
| | | Fixes https://github.com/element-hq/synapse/issues/17370
* Merge branch 'master' into developErik Johnston2025-06-174-2/+16
|\
| * 1.132.0Erik Johnston2025-06-174-2/+16
| |
* | Bump dawidd6/action-download-artifact from 9 to 11 (#18556)dependabot[bot]2025-06-171-1/+1
| | | | | | | | Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* | Bump types-requests from 2.32.0.20250328 to 2.32.4.20250611 (#18558)dependabot[bot]2025-06-171-3/+3
| | | | | | | | Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* | Bump actions/setup-python from 5.5.0 to 5.6.0 (#18555)dependabot[bot]2025-06-171-2/+2
| | | | | | | | Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* | Fix Cargo.lock after bad merge (#18561)Erik Johnston2025-06-172-3/+4
| | | | | | Broke in #18357
* | Always run schema workflow on develop (#18551)Erik Johnston2025-06-172-0/+4
| | | | | | | | ... and release branches, so that we catch any problems that slip trough PR review.
* | Speed up MAS token introspection (#18357)Erik Johnston2025-06-1611-293/+1820
| | | | | | | | | | | | | | | | | | | | We do this by shoving it into Rust. We believe our python http client is a bit slow. Also bumps minimum rust version to 1.81.0, released last September (over six months ago) To allow for async Rust, includes some adapters between Tokio in Rust and the Twisted reactor in Python.
* | Bump base64 from 0.21.7 to 0.22.1 (#18559)dependabot[bot]2025-06-161-8/+2
| | | | | | | | Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* | bugfix: assert we always pass the create event to get_user_power_level (#18545)Kegan Dougal2025-06-136-31/+66
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The create event is required if there is no PL event, in which case the creator gets PL100. ### Pull Request Checklist <!-- Please read https://element-hq.github.io/synapse/latest/development/contributing_guide.html before submitting your pull request --> * [x] Pull request is based on the develop branch * [x] Pull request includes a [changelog file](https://element-hq.github.io/synapse/latest/development/contributing_guide.html#changelog). The entry should: - Be a short description of your change which makes sense to users. "Fixed a bug that prevented receiving messages from other servers." instead of "Moved X method from `EventStore` to `EventWorkerStore`.". - Use markdown where necessary, mostly for `code blocks`. - End with either a period (.) or an exclamation mark (!). - Start with a capital letter. - Feel free to credit yourself, by adding a sentence "Contributed by @github_username." or "Contributed by [Your Name]." to the end of the entry. * [x] [Code style](https://element-hq.github.io/synapse/latest/code_style.html) is correct (run the [linters](https://element-hq.github.io/synapse/latest/development/contributing_guide.html#run-the-linters)) --------- Co-authored-by: Andrew Morgan <1342360+anoadragon453@users.noreply.github.com>
* | bugfix: calculate the PL for non-creators correctly in v11 rooms (#18547)Kegan Dougal2025-06-133-18/+41
| | | | | | | | Co-authored-by: Andrew Morgan <1342360+anoadragon453@users.noreply.github.com>
* | Fix typo of Math.pow, `^` -> `**` (#18543)Andrew Morgan2025-06-134-5/+25
| |
* | Bump requests from 2.32.2 to 2.32.4 (#18533)dependabot[bot]2025-06-131-4/+4
| |
* | Fix bug where sliding sync ignored `room_id_to_include` option (#18535)Erik Johnston2025-06-135-40/+336
| | | | | | | | | | | | | | | | This was correctly handled for the "fallback" case where the background updates hadn't finished --------- Co-authored-by: Eric Eastwood <erice@element.io>
* | Enable `flake8-logging` and `flake8-logging-format` rules in Ruff and fix ↵Quentin Gliech2025-06-1352-122/+164
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | related issues throughout the codebase (#18542) This can be reviewed commit by commit. This enables the `flake8-logging` and `flake8-logging-format` rules in Ruff, as well as logging exception stack traces in a few places where it makes sense - https://docs.astral.sh/ruff/rules/#flake8-logging-log - https://docs.astral.sh/ruff/rules/#flake8-logging-format-g ### Linting to avoid pre-formatting log messages See [`adamchainz/flake8-logging` -> *LOG011 avoid pre-formatting log messages*](https://github.com/adamchainz/flake8-logging/blob/152db2f167355fb23e401bf68046c57cb128a2ae/README.rst#log011-avoid-pre-formatting-log-messages) Practically, this means prefer placeholders (`%s`) over f-strings for logging. This is because placeholders are passed as args to loggers, so they can do special handling of them. For example, Sentry will record the args separately in their logging integration: https://github.com/getsentry/sentry-python/blob/c15b390dfe1ca5c01b30dd56b35d693bb50b413c/sentry_sdk/integrations/logging.py#L280-L284 One theoretical small perf benefit is that log levels that aren't enabled won't get formatted, so it doesn't unnecessarily create formatted strings
* | Log user deactivations (#18541)Will Hunt2025-06-122-0/+9
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | One liner to give us more clarity when auditing deactivations of user accounts. ### Pull Request Checklist <!-- Please read https://element-hq.github.io/synapse/latest/development/contributing_guide.html before submitting your pull request --> * [ ] Pull request is based on the develop branch * [ ] Pull request includes a [changelog file](https://element-hq.github.io/synapse/latest/development/contributing_guide.html#changelog). The entry should: - Be a short description of your change which makes sense to users. "Fixed a bug that prevented receiving messages from other servers." instead of "Moved X method from `EventStore` to `EventWorkerStore`.". - Use markdown where necessary, mostly for `code blocks`. - End with either a period (.) or an exclamation mark (!). - Start with a capital letter. - Feel free to credit yourself, by adding a sentence "Contributed by @github_username." or "Contributed by [Your Name]." to the end of the entry. * [ ] [Code style](https://element-hq.github.io/synapse/latest/code_style.html) is correct (run the [linters](https://element-hq.github.io/synapse/latest/development/contributing_guide.html#run-the-linters))
* | bugfix: ensure _get_power_level_for_sender works when there is no PL event ↵Kegan Dougal2025-06-103-1/+132
| | | | | | | | (#18534)
* | Bump headers from 0.4.0 to 0.4.1 (#18529)dependabot[bot]2025-06-101-4/+10
| | | | | | | | Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* | Merge branch 'release-v1.132' into developAndrew Morgan2025-06-1022-20/+43
|\|
| * Add config doc generation command to lint.sh and add missing config schema. ↵reivilibre2025-06-104-9/+32
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | (#18522) Follows: #17892, #18456 <ol> <li> Add config doc generation command to lint.sh </li> <li> Add missing `user_types` config schema </li> </ol> --------- Signed-off-by: Olivier 'reivilibre <oliverw@matrix.org>