summary refs log tree commit diff
Commit message (Collapse)AuthorAgeFilesLines
* Wrong retention policy being used when filtering events (lint ↵Eric Eastwood2024-06-102-1/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | `ControlVarUsedAfterBlockViolation` `WPS441`) (#17272) Fix loop var being used outside block. Before this change, we were always using the last room_id's retention policy for all events being filtered. I found this bug with the [new lint rule, `ControlVarUsedAfterBlockViolation` `WPS441`](https://github.com/astral-sh/ruff/pull/11769), that I re-implemented in `ruff`. Shout-out to @reivilibre for all the help in the beginning! ### Pull Request Checklist <!-- Please read https://element-hq.github.io/synapse/latest/development/contributing_guide.html before submitting your pull request --> * [x] Pull request is based on the develop branch * [x] Pull request includes a [changelog file](https://element-hq.github.io/synapse/latest/development/contributing_guide.html#changelog). The entry should: - Be a short description of your change which makes sense to users. "Fixed a bug that prevented receiving messages from other servers." instead of "Moved X method from `EventStore` to `EventWorkerStore`.". - Use markdown where necessary, mostly for `code blocks`. - End with either a period (.) or an exclamation mark (!). - Start with a capital letter. - Feel free to credit yourself, by adding a sentence "Contributed by @github_username." or "Contributed by [Your Name]." to the end of the entry. * [x] [Code style](https://element-hq.github.io/synapse/latest/code_style.html) is correct (run the [linters](https://element-hq.github.io/synapse/latest/development/contributing_guide.html#run-the-linters))
* Support MSC3916 by adding a federation `/download` endpoint (#17172)Shay2024-06-0710-24/+659
|
* Add debug logging for when room keys are uploaded, including whether they ↵reivilibre2024-06-072-0/+19
| | | | | | | | | | | are replacing other room keys. (#17266) Fixes: #17013 Add logging for whether room keys are replaced This is motivated by the Crypto team who need to diagnose crypto issues. The existing opentracing logging is not enough because it is not enabled for all users.
* Add Sliding Sync `/sync` endpoint (initial implementation) (#17187)Eric Eastwood2024-06-0611-15/+2302
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Based on [MSC3575](https://github.com/matrix-org/matrix-spec-proposals/pull/3575): Sliding Sync This iteration only focuses on returning the list of room IDs in the sliding window API (without sorting/filtering). Rooms appear in the Sliding sync response based on: - `invite`, `join`, `knock`, `ban` membership events - Kicks (`leave` membership events where `sender` is different from the `user_id`/`state_key`) - `newly_left` (rooms that were left during the given token range, > `from_token` and <= `to_token`) - In order for bans/kicks to not show up, you need to `/forget` those rooms. This doesn't modify the event itself though and only adds the `forgotten` flag to `room_memberships` in Synapse. There isn't a way to tell when a room was forgotten at the moment so we can't factor it into the from/to range. ### Example request `POST http://localhost:8008/_matrix/client/unstable/org.matrix.msc3575/sync` ```json { "lists": { "foo-list": { "ranges": [ [0, 99] ], "sort": [ "by_notification_level", "by_recency", "by_name" ], "required_state": [ ["m.room.join_rules", ""], ["m.room.history_visibility", ""], ["m.space.child", "*"] ], "timeline_limit": 100 } } } ``` Response: ```json { "next_pos": "s58_224_0_13_10_1_1_16_0_1", "lists": { "foo-list": { "count": 1, "ops": [ { "op": "SYNC", "range": [0, 99], "room_ids": [ "!MmgikIyFzsuvtnbvVG:my.synapse.linux.server" ] } ] } }, "rooms": {}, "extensions": {} } ```
* Handle OTK uploads off master (#17271)Erik Johnston2024-06-063-38/+60
| | | And fallback keys uploads. Only device keys need handling on master
* Don't try and resync devices for down hosts (#17273)Erik Johnston2024-06-062-6/+19
| | | | It's just a waste of time if we won't even query the remote host as its marked as down.
* Always return OTK counts (#17275)Erik Johnston2024-06-062-4/+30
| | | Broke in https://github.com/element-hq/synapse/pull/17215
* Ratelimiting of remote media downloads (#17256)Shay2024-06-0512-14/+372
|
* Handle hyphens in user dir search porperly (#17254)Erik Johnston2024-06-054-6/+104
| | | c.f. #16675
* Use fully-qualified `PersistedEventPosition` when returning `RoomsForUser` ↵Eric Eastwood2024-06-0411-75/+85
| | | | | | | (#17265) Use fully-qualified `PersistedEventPosition` (`instance_name` and `stream_ordering`) when returning `RoomsForUser` to facilitate proper comparisons and `RoomStreamToken` generation. Spawning from https://github.com/element-hq/synapse/pull/17187 where we want to utilize this change
* Merge branch 'release-v1.109' into developAndrew Morgan2024-06-0425-23/+61
|\
| * Fix typo in CHANGES.md v1.109.0rc1Andrew Morgan2024-06-041-1/+1
| |
| * 1.109.0rc1Andrew Morgan2024-06-0425-23/+61
| |
* | Bump sentry-sdk from 2.1.1 to 2.3.1 (#17263)dependabot[bot]2024-06-041-4/+4
|/
* Bump types-pyopenssl from 24.0.0.20240311 to 24.1.0.20240425 (#17260)dependabot[bot]2024-06-031-3/+18
| | | | Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* Bump mypy-zope from 1.0.3 to 1.0.4 (#17262)dependabot[bot]2024-06-031-4/+4
| | | | Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* Bump lxml from 5.2.1 to 5.2.2 (#17261)dependabot[bot]2024-06-031-156/+144
| | | | Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* Fix bug where typing replication breaks (#17252)Erik Johnston2024-05-313-4/+56
| | | | This can happen on restarts of the service, due to old rooms being pruned.
* Fix logging errors when receiving invalid User ID for key querys (#17250)Erik Johnston2024-05-312-0/+6
|
* Fix sentry default tags (#17251)Erik Johnston2024-05-312-10/+11
| | | | | This was broken by the sentry 2.0 upgrade Broke in v1.108.0
* In sync wait for worker to catch up since token (#17215)Erik Johnston2024-05-307-7/+134
| | | | | | | Otherwise things will get confused. An alternative would be to make sure that for lagging stream we don't return anything (and make sure the returned next_batch token doesn't go backwards). But that is a faff.
* Fix deduplicating of membership events to not create unused state groups. ↵Erik Johnston2024-05-304-35/+54
| | | | | | | | | | | | | (#17164) We try and deduplicate in two places: 1) really early on, and 2) just before we persist the event. The first case was broken due to it occuring before the profile information was added, and so it thought the event contents were different. The second case did catch it and handle it correctly, however doing so creates a redundant state group leading to bloat. Fixes #3791
* Replaces all usages of `StreamIdGenerator` with `MultiWriterIdGenerator` ↵Erik Johnston2024-05-3010-363/+227
| | | | | (#17229) Replaces all usages of `StreamIdGenerator` with `MultiWriterIdGenerator`, which is safer.
* Clean out invalid destinations from outbox (#17242)Erik Johnston2024-05-303-0/+92
| | | | We started ensuring we only insert valid destinations: https://github.com/element-hq/synapse/pull/17240
* Ensure we delete media if we reject due to spam check (#17246)Erik Johnston2024-05-303-32/+33
| | | | | | | | Fixes up #17239 We need to keep the spam check within the `try/except` block. Also makes it so that we don't enter the top span twice. Also also ensures that we get the right thumbnail length.
* Move towards using `MultiWriterIdGenerator` everywhere (#17226)Erik Johnston2024-05-2910-379/+341
| | | | | | | | | | | | | | | There is a problem with `StreamIdGenerator` where it can go backwards over restarts when a stream ID is requested but then not inserted into the DB. This is problematic if we want to land #17215, and is generally a potential cause for all sorts of nastiness. Instead of trying to fix `StreamIdGenerator`, we may as well move to `MultiWriterIdGenerator` that does not suffer from this problem (the latest positions are stored in `stream_positions` table). This involves adding SQLite support to the class. This only changes id generators that were already using `MultiWriterIdGenerator` under postgres, a separate PR will move the rest of the uses of `StreamIdGenerator` over.
* Don't invalidate all `get_relations_for_event` on history purge (#17083)Erik Johnston2024-05-296-13/+41
| | | | This is a tree cache already, so may as well move the room ID to the front and use that
* Change allow_unsafe_locale to also apply on new databases (#17238)Erik Johnston2024-05-293-7/+13
| | | | We relax this as there are use cases where this is safe, though it is still highly recommended that people avoid using it.
* Ignore attempts to send to-device messages to bad users (#17240)Erik Johnston2024-05-292-0/+8
| | | | | | | | Currently sending a to-device message to a user ID with a dodgy destination is accepted, but then ends up spamming the logs when we try and send to the destination. An alternative would be to reject the request, but I'm slightly nervous that could break things.
* Handle duplicate OTK uploads racing (#17241)Erik Johnston2024-05-292-33/+46
| | | Currently this causes one of then to 500.
* Fix slipped logging context when media rejected (#17239)Erik Johnston2024-05-296-91/+55
| | | | | | | When a module rejects a piece of media we end up trying to close the same logging context twice. Instead of fixing the existing code we refactor to use an async context manager, which is easier to write correctly.
* Merge branch 'master' into developOlivier 'reivilibre2024-05-283-1/+14
|\
| * 1.108.0 v1.108.0 github/release-v1.108 release-v1.108Olivier 'reivilibre2024-05-283-1/+14
| |
* | Bump phonenumbers from 8.13.35 to 8.13.37 (#17235)dependabot[bot]2024-05-281-3/+3
| |
* | Bump pyicu from 2.13 to 2.13.1 (#17236)dependabot[bot]2024-05-281-2/+2
| |
* | Bump pyopenssl from 24.0.0 to 24.1.0 (#17234)dependabot[bot]2024-05-281-4/+4
| |
* | Bump prometheus-client from 0.19.0 to 0.20.0 (#17233)dependabot[bot]2024-05-281-3/+3
| |
* | Bump serde from 1.0.202 to 1.0.203 (#17232)dependabot[bot]2024-05-281-4/+4
| |
* | Support MSC3916 by adding unstable media endpoints to `_matrix/client` (#17213)Shay2024-05-247-549/+2393
| | | | | | | | | | | | | | | | | | | | [MSC3916](https://github.com/matrix-org/matrix-spec-proposals/blob/rav/authentication-for-media/proposals/3916-authentication-for-media.md) adds new media endpoints under `_matrix/client`. This PR adds the `/preview_url`, `/config`, and `/thumbnail` endpoints. `/download` will be added in a follow-up PR once the work for the federation `/download` endpoint is complete (see https://github.com/element-hq/synapse/pull/17172). Should be reviewable commit-by-commit.
* | Add Sliding Sync `/sync/e2ee` endpoint for To-Device messages (#17167)Eric Eastwood2024-05-237-175/+861
| | | | | | | | | | | | | | | | | | | | | | This is being introduced as part of Sliding Sync but doesn't have any sliding window component. It's just a way to get E2EE events without having to sit through a big initial sync (`/sync` v2). And we can avoid encryption events being backed up by the main sync response or vice-versa. Part of some Sliding Sync simplification/experimentation. See [this discussion](https://github.com/element-hq/synapse/pull/17167#discussion_r1610495866) for why it may not be as useful as we thought. Based on: - https://github.com/matrix-org/matrix-spec-proposals/pull/3575 - https://github.com/matrix-org/matrix-spec-proposals/pull/3885 - https://github.com/matrix-org/matrix-spec-proposals/pull/3884
* | Log exceptions when failing to auto-join new user according to the ↵reivilibre2024-05-222-1/+2
| | | | | | | | | | | | | | `auto_join_rooms` option. (#17176) Would have been useful for tracking down #16878. Signed-off-by: Olivier 'reivilibre <oliverw@matrix.org>
* | Add logging to tasks managed by the task scheduler, showing CPU and database ↵reivilibre2024-05-222-2/+68
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | usage. (#17219) The log format is the same as the request log format, except: - fields that are specific to HTTP requests have been removed - the task's params are included at the end of the log line. These log lines are emitted: - when the task function finishes — both completion and failure (and I suppose it is possible for a task to become schedulable again?) - every 5 minutes whilst it is running Closes #17217. --------- Signed-off-by: Olivier 'reivilibre <oliverw@matrix.org>
* | Reduce work of calculating outbound device pokes (#17211)Erik Johnston2024-05-223-0/+32
| |
* | Update Lemonldap-NG OIDC config (#17204)Yadd2024-05-222-0/+3
| | | | | | | | Update OIDC documentation: by default Matrix doesn't query userinfo endpoint, then claims should be put on id_token.
* | Bring auto-accept invite logic into Synapse (#17147)devonh2024-05-2111-1/+945
| | | | | | | | | | | | | | | | | | | | | | | | | | | | This PR ports the logic from the [synapse_auto_accept_invite](https://github.com/matrix-org/synapse-auto-accept-invite) module into synapse. I went with the naive approach of injecting the "module" next to where third party modules are currently loaded. If there is a better/preferred way to handle this, I'm all ears. It wasn't obvious to me if there was a better location to add this logic that would cleanly apply to all incoming invite events. Relies on https://github.com/element-hq/synapse/pull/17166 to fix linter errors.
* | Improve perf of sync device lists (#17216)Erik Johnston2024-05-215-62/+103
| | | | | | | | | | | | | | | | Re-introduces #17191, and includes #17197 and #17214 The basic idea is to stop calling `get_rooms_for_user` everywhere, and instead use the table `device_lists_changes_in_room`. Commits reviewable one-by-one.
* | Merge branch 'release-v1.108' into developErik Johnston2024-05-2127-25/+53
|\|
| * Fixup changelog v1.108.0rc1Erik Johnston2024-05-211-1/+1
| |
| * Fixup changelogErik Johnston2024-05-211-1/+1
| |
| * 1.108.0rc1Erik Johnston2024-05-2127-25/+53
| |
* | Bump twine from 5.0.0 to 5.1.0 (#17225)dependabot[bot]2024-05-211-3/+3
| |
* | Bump bcrypt from 4.1.2 to 4.1.3 (#17224)dependabot[bot]2024-05-211-28/+28
| |
* | Bump pyasn1 from 0.5.1 to 0.6.0 (#17223)dependabot[bot]2024-05-211-4/+4
| |
* | Bump types-psycopg2 from 2.9.21.20240311 to 2.9.21.20240417 (#17222)dependabot[bot]2024-05-211-3/+3
| |
* | Bump serde from 1.0.201 to 1.0.202 (#17221)dependabot[bot]2024-05-211-4/+4
| |
* | Bump anyhow from 1.0.83 to 1.0.86 (#17220)dependabot[bot]2024-05-211-2/+2
|/
* Add a short sleep if the request is rate-limited (#17210)Erik Johnston2024-05-186-4/+15
| | | This helps prevent clients from "tight-looping" retrying their request.
* Federated Knocking Endpoints added (missing in Docu) (#17058)Dominic Schubert2024-05-172-0/+3
|
* Refactor `SyncResultBuilder` assembly to its own function (#17202)Eric Eastwood2024-05-162-116/+149
| | | | | | We will re-use `get_sync_result_builder(...)` in https://github.com/element-hq/synapse/pull/17167 Split out from https://github.com/element-hq/synapse/pull/17167
* Fix `joined_rooms`/`joined_room_ids` usage (#17208)Eric Eastwood2024-05-162-1/+2
| | | | | | | | This change was introduced in https://github.com/element-hq/synapse/pull/17203 But then https://github.com/element-hq/synapse/pull/17207 was reverted which brought back usage `joined_rooms` that needed to be updated. Wasn't caught because `develop` wasn't up to date before merging.
* Rename to be obvious: `joined_rooms` -> `joined_room_ids` (#17203)Eric Eastwood2024-05-162-2/+3
| | | Split out from https://github.com/element-hq/synapse/pull/17167
* Removed `request_key` from the `SyncConfig` (moved outside as its own ↵Eric Eastwood2024-05-165-14/+59
| | | | | | | | | function parameter) (#17201) Removed `request_key` from the `SyncConfig` (moved outside as its own function parameter) so it doesn't have to flow into `_generate_sync_entry_for_xxx` methods. This way we can separate the concerns of caching from generating the response and reuse the `_generate_sync_entry_for_xxx` functions as we see fit. Plus caching doesn't really have anything to do with the config of sync. Split from https://github.com/element-hq/synapse/pull/17167 Spawning from https://github.com/element-hq/synapse/pull/17167#discussion_r1601497279
* Route `/make_knock` and `/send_knock` to workers in Complement docker image ↵Andrew Morgan2024-05-162-0/+3
| | | | (#17195)
* Revert "Improve perf of sync device lists" (#17207)Erik Johnston2024-05-163-9/+46
| | | Reverts element-hq/synapse#17191
* Fix bug where push rules would be empty in `/sync` (#17142)Erik Johnston2024-05-163-13/+37
| | | | | | Fixes #16987 Some old accounts seem to have an entry in global account data table for push rules, which we should ignore
* Refactor Sync handler to be able to return different sync responses ↵Eric Eastwood2024-05-165-25/+128
| | | | | | | | | | | | | | (`SyncVersion`) (#17200) Refactor Sync handler to be able to be able to return different sync responses (`SyncVersion`). Preparation to be able support sync v2 and a new Sliding Sync `/sync/e2ee` endpoint which returns a subset of sync v2. Split upon request: https://github.com/element-hq/synapse/pull/17167#discussion_r1601497279 Split from https://github.com/element-hq/synapse/pull/17167 where we will add `SyncVersion.E2EE_SYNC` and a new type of sync response.
* Fix request path for `federation_whitelist_endpoint_enabled` option in ↵Andrew Morgan2024-05-152-1/+2
| | | | documentation (#17199)
* Merge branch 'master' into developAndrew Morgan2024-05-143-1/+13
|\
| * 1.107.0 v1.107.0 github/release-v1.107 release-v1.107Andrew Morgan2024-05-143-1/+13
| |
* | Cache literal sync filter validation (#17186)Erik Johnston2024-05-142-1/+14
| | | | | | | | The sliding sync proxy (amongst other things) use literal json blobs as filters, and repeatedly validating them takes a bunch of CPU.
* | Reduce pauses on large device list changes (#17192)Erik Johnston2024-05-142-3/+11
| | | | | | | | For large accounts waking up all the relevant notifier streams can cause pauses of the reactor.
* | Improve perf of sync device lists (#17191)Erik Johnston2024-05-143-46/+9
| | | | | | | | | | It's almost always more efficient to query the rooms that have device list changes, rather than looking at the list of all users whose devices have changed and then look for shared rooms.
* | Allows CAS SSO flow to provide user IDs composed of numbers only (#17098)Aurélien Grimpard2024-05-144-0/+30
| |
* | Bump serde_json from 1.0.116 to 1.0.117 (#17182)dependabot[bot]2024-05-141-2/+2
| |
* | Bump serde from 1.0.200 to 1.0.201 (#17183)dependabot[bot]2024-05-141-4/+4
| |
* | Bump gitpython from 3.1.41 to 3.1.43 (#17181)dependabot[bot]2024-05-141-4/+5
| |
* | Bump cryptography from 42.0.5 to 42.0.7 (#17180)dependabot[bot]2024-05-141-33/+33
| |
* | Bump immutabledict from 4.1.0 to 4.2.0 (#17179)dependabot[bot]2024-05-141-3/+3
| |
* | Bump sentry-sdk from 1.40.3 to 2.1.1 (#17178)dependabot[bot]2024-05-141-5/+21
| |
* | An federation whitelist query endpoint extension (#16848)Erik Johnston2024-05-138-0/+243
| | | | | | | | | | | | | | | | | | | | This is to allow clients to query the configured federation whitelist. Disabled by default. --------- Co-authored-by: Devon Hudson <devonhudson@librem.one> Co-authored-by: devonh <devon.dmytro@gmail.com> Co-authored-by: Andrew Morgan <1342360+anoadragon453@users.noreply.github.com>
* | Actually fix public rooms (#17184)Erik Johnston2024-05-132-54/+55
| | | | | | | | | | See #17177. I'm an idiot and moved them to the wrong store :facepalm:
* | Fix bug with creating public rooms on workers (#17177)Erik Johnston2024-05-132-65/+52
| | | | | | | | | | | | If room publication is disabled then creating public rooms on workers would not work. Introduced in #16811.
* | Update docs to bump libjemalloc version on latest debian; correct ↵ll-SKY-ll2024-05-093-3/+4
| | | | | | | | "push_rules" stream name (#17171)
* | Bump black from 24.2.0 to 24.4.2 (#17170)Andrew Morgan2024-05-082-34/+24
| |
* | Fix undiscovered linter errors (#17166)devonh2024-05-082-3/+12
| | | | | | | | | | | | Linter errors are showing up in #17147 that are unrelated to that PR. The errors do not currently show up on develop. This PR aims to resolve the linter errors separately from #17147.
* | Optional whitespace support in Authorization (#1350) (#17145)Timshel2024-05-083-1/+13
| | | | | | | | Co-authored-by: Andrew Morgan <1342360+anoadragon453@users.noreply.github.com>
* | Update PyO3 to 0.21 (#17162)Erik Johnston2024-05-0810-152/+202
| | | | | | | | | | | | | | | | | | | | This version change requires a migration to a new API. See https://pyo3.rs/v0.21.2/migration#from-020-to-021 This will fix the annoying warnings added when using the recent rust nightly: > warning: non-local `impl` definition, they should be avoided as they go against expectation
* | Note preset behaviour in `autocreate_auto_join_room_preset` docs (#17150)Andrew Morgan2024-05-082-0/+6
| |
* | Add note about MSC3886 being closed (#17151)Hugh Nimmo-Smith2024-05-082-0/+4
| |
* | Merge branch 'release-v1.107' into developOlivier 'reivilibre2024-05-0726-24/+66
|\|
| * Tweak changelog v1.107.0rc1Olivier 'reivilibre2024-05-071-6/+6
| |
| * 1.107.0rc1Olivier 'reivilibre2024-05-0726-24/+66
| |
* | Add note about external_ids for User Admin API in documentation (#17139)Jacob Sánchez2024-05-072-2/+3
|/
* Bump serde from 1.0.199 to 1.0.200 (#17161)dependabot[bot]2024-05-071-4/+4
|
* Bump pydantic from 2.7.0 to 2.7.1 (#17160)dependabot[bot]2024-05-071-84/+84
|
* Bump types-pillow from 10.2.0.20240415 to 10.2.0.20240423 (#17159)dependabot[bot]2024-05-071-3/+3
|
* Bump lxml from 5.1.0 to 5.2.1 (#17158)dependabot[bot]2024-05-071-80/+157
|
* Bump jsonschema from 4.21.1 to 4.22.0 (#17157)dependabot[bot]2024-05-071-4/+15
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumps [jsonschema](https://github.com/python-jsonschema/jsonschema) from 4.21.1 to 4.22.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/python-jsonschema/jsonschema/releases">jsonschema's releases</a>.</em></p> <blockquote> <h2>v4.22.0</h2> <!-- raw HTML omitted --> <h2>What's Changed</h2> <ul> <li>Improve <code>best_match</code> (and thereby error messages from <code>jsonschema.validate</code>) in cases where there are multiple <em>sibling</em> errors from applying <code>anyOf</code> / <code>allOf</code> -- i.e. when multiple elements of a JSON array have errors, we now do prefer showing errors from earlier elements rather than simply showing an error for the full array (<a href="https://redirect.github.com/python-jsonschema/jsonschema/issues/1250">#1250</a>).</li> <li>(Micro-)optimize equality checks when comparing for JSON Schema equality by first checking for object identity, as <code>==</code> would.</li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/shinnar"><code>@​shinnar</code></a> made their first contribution in <a href="https://redirect.github.com/python-jsonschema/jsonschema/pull/1224">python-jsonschema/jsonschema#1224</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/python-jsonschema/jsonschema/compare/v4.21.1...v4.22.0">https://github.com/python-jsonschema/jsonschema/compare/v4.21.1...v4.22.0</a></p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/python-jsonschema/jsonschema/blob/main/CHANGELOG.rst">jsonschema's changelog</a>.</em></p> <blockquote> <h1>v4.22.0</h1> <ul> <li>Improve <code>best_match</code> (and thereby error messages from <code>jsonschema.validate</code>) in cases where there are multiple <em>sibling</em> errors from applying <code>anyOf</code> / <code>allOf</code> -- i.e. when multiple elements of a JSON array have errors, we now do prefer showing errors from earlier elements rather than simply showing an error for the full array (<a href="https://redirect.github.com/python-jsonschema/jsonschema/issues/1250">#1250</a>).</li> <li>(Micro-)optimize equality checks when comparing for JSON Schema equality by first checking for object identity, as <code>==</code> would.</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/python-jsonschema/jsonschema/commit/9882dbeb1a0a0cb1c7e521837132a91cfcc9e0f0"><code>9882dbe</code></a> Add / ignore the new specification test suite property.</li> <li><a href="https://github.com/python-jsonschema/jsonschema/commit/ebc90bb2df9bbe99dd043405a5924aa56205201a"><code>ebc90bb</code></a> Merge commit '8fcfc3a674a7188a4fcc822b7a91efb3e0422a20'</li> <li><a href="https://github.com/python-jsonschema/jsonschema/commit/8fcfc3a674a7188a4fcc822b7a91efb3e0422a20"><code>8fcfc3a</code></a> Squashed 'json/' changes from b41167c74..54f3784a8</li> <li><a href="https://github.com/python-jsonschema/jsonschema/commit/30b7537944fa49950cba3586a866709b662d5073"><code>30b7537</code></a> Pin pyenchant to pre from below until <a href="https://redirect.github.com/pyenchant/pyenchant/issues/302">pyenchant/pyenchant#302</a> is released.</li> <li><a href="https://github.com/python-jsonschema/jsonschema/commit/c3729db7328180ee33acd1cdb5d23c24470a08dd"><code>c3729db</code></a> Enable doctests for the rest of the referencing page.</li> <li><a href="https://github.com/python-jsonschema/jsonschema/commit/70a994ceaba5794eb85483d389d6d3460e607c2f"><code>70a994c</code></a> Remove a now-unneeded noqa since apparently this is fixed in new ruff.</li> <li><a href="https://github.com/python-jsonschema/jsonschema/commit/e6d0ef1cffc375b040d018cd6b1035400de86760"><code>e6d0ef1</code></a> Fix a minor typo in the referencing example docs.</li> <li><a href="https://github.com/python-jsonschema/jsonschema/commit/bceaf41a7dbece0a642c7a6d7859114870875951"><code>bceaf41</code></a> Another placeholder benchmark for future optimization.</li> <li><a href="https://github.com/python-jsonschema/jsonschema/commit/b20234e86c4dadf5d691400383a6fc0a1e9afc34"><code>b20234e</code></a> Consider errors from earlier indices (in instances) to be better matches</li> <li><a href="https://github.com/python-jsonschema/jsonschema/commit/41b49c68e5377f44e54fb1596b233a8da21c24f1"><code>41b49c6</code></a> Minor improvement to test failure message when a best match test fails.</li> <li>Additional commits viewable in <a href="https://github.com/python-jsonschema/jsonschema/compare/v4.21.1...v4.22.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=jsonschema&package-manager=pip&previous-version=4.21.1&new-version=4.22.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* Add optimisation to `StreamChangeCache` (#17130)Erik Johnston2024-05-063-4/+34
| | | | | | | When there have been lots of changes compared with the number of entities, we can do a fast(er) path. Locally I ran some benchmarking, and the comparison seems to give the best determination of which method we use.
* Fix bug where `StreamChangeCache` would not respect cache factors (#17152)Erik Johnston2024-05-032-1/+2
| | | Annoyingly mypy didn't pick up this typo.
* Fix lint.sh script (#17148)Erik Johnston2024-05-032-1/+1
| | | Broke in #17073
* Bump `pillow` from 10.2.0 to 10.3.0 (#17146)Andrew Morgan2024-05-032-437/+74
|
* upgrade.md: Bump minimum Rust version to 1.66.0 (element-hq#17079) (#17140)jahway6032024-05-022-0/+9
| | | upgrade.md: Bump minimum Rust version to 1.66.0 (element-hq#17079)
* synapse complement image: hardcode enabling msc3266 (#17105)Benjamin Bouvier2024-05-022-0/+3
| | | | | | This is an alternative to https://github.com/matrix-org/matrix-rust-sdk/issues/3340 where we don't need to change our CI setup too much in the Rust SDK repository, and still can test MSC3266.
* Add support for MSC3823 - Account Suspension (#17051)Shay2024-05-019-7/+173
|
* Drop sphinx docs (#17073)Erik Johnston2024-05-017-138/+1
| | | | | | It is broken, and we only seemed to have been building it for the federation sender. Closes https://github.com/element-hq/synapse/issues/16804
* Correct licensing metadata on the Docker image (#17141)Ben Banfield-Zanin2024-05-012-1/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | ### Pull Request Checklist <!-- Please read https://element-hq.github.io/synapse/latest/development/contributing_guide.html before submitting your pull request --> * [x] Pull request is based on the develop branch * [x] Pull request includes a [changelog file](https://element-hq.github.io/synapse/latest/development/contributing_guide.html#changelog). The entry should: - Be a short description of your change which makes sense to users. "Fixed a bug that prevented receiving messages from other servers." instead of "Moved X method from `EventStore` to `EventWorkerStore`.". - Use markdown where necessary, mostly for `code blocks`. - End with either a period (.) or an exclamation mark (!). - Start with a capital letter. - Feel free to credit yourself, by adding a sentence "Contributed by @github_username." or "Contributed by [Your Name]." to the end of the entry. * [x] [Code style](https://element-hq.github.io/synapse/latest/code_style.html) is correct (run the [linters](https://element-hq.github.io/synapse/latest/development/contributing_guide.html#run-the-linters))
* Merge branch 'master' into developAndrew Morgan2024-04-303-1/+14
|\
| * 1.106.0 v1.106.0 github/release-v1.106 release-v1.106Andrew Morgan2024-04-303-1/+14
| |
* | Enable complement tests for MSC4115 support (#17137)Richard van der Hoff2024-04-302-3/+14
| | | | | | | | Follow-up to #17137 and https://github.com/matrix-org/complement/pull/722
* | Apply user `email` & `picture` during OIDC registration if present & ↵devonh2024-04-295-15/+205
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | selected (#17120) This change will apply the `email` & `picture` provided by OIDC to the new user account when registering a new user via OIDC. If the user is directed to the account details form, this change makes sure they have been selected before applying them, otherwise they are omitted. In particular, this change ensures the values are carried through when Synapse has consent configured, and the redirect to the consent form/s are followed. I have tested everything manually. Including: - with/without consent configured - allowing/not allowing the use of email/avatar (via `sso_auth_account_details.html`) - with/without automatic account detail population (by un/commenting the `localpart_template` option in synapse config). ### Pull Request Checklist <!-- Please read https://element-hq.github.io/synapse/latest/development/contributing_guide.html before submitting your pull request --> * [X] Pull request is based on the develop branch * [X] Pull request includes a [changelog file](https://element-hq.github.io/synapse/latest/development/contributing_guide.html#changelog). The entry should: - Be a short description of your change which makes sense to users. "Fixed a bug that prevented receiving messages from other servers." instead of "Moved X method from `EventStore` to `EventWorkerStore`.". - Use markdown where necessary, mostly for `code blocks`. - End with either a period (.) or an exclamation mark (!). - Start with a capital letter. - Feel free to credit yourself, by adding a sentence "Contributed by @github_username." or "Contributed by [Your Name]." to the end of the entry. * [X] [Code style](https://element-hq.github.io/synapse/latest/code_style.html) is correct (run the [linters](https://element-hq.github.io/synapse/latest/development/contributing_guide.html#run-the-linters))
* | Add support for MSC4115 (#17104)Richard van der Hoff2024-04-2920-125/+407
| | | | | | | | Co-authored-by: Andrew Morgan <1342360+anoadragon453@users.noreply.github.com>
* | Update tornado 6.2 -> 6.4 (#17131)Andrew Morgan2024-04-292-25/+15
| |
* | Ensure that incoming to-device messages are not dropped (#17127)Richard van der Hoff2024-04-295-19/+55
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | ... when workers are unreachable, etc. Fixes https://github.com/element-hq/synapse/issues/17117. The general principle is just to make sure that we propagate any exceptions to the JsonResource, so that we return an error code to the sending server. That means that the sending server no longer considers the message safely sent, so it will retry later. In the issue, Erik mentions that an alternative solution would be to persist the to-device messages into a table so that they can be retried. This might be an improvement for performance, but even if we did that, we still need this mechanism, since we might be unable to reach the database. So, if we want to do that, it can be a later follow-up. --------- Co-authored-by: Erik Johnston <erik@matrix.org>
* | Declare support for Matrix v1.10. (#17082)Patrick Cloke2024-04-292-0/+2
| | | | | | | | | | Pretty straightforward. 😄 Fixes #17021
* | Bump types-setuptools from 69.0.0.20240125 to 69.5.0.20240423 (#17134)dependabot[bot]2024-04-291-3/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumps [types-setuptools](https://github.com/python/typeshed) from 69.0.0.20240125 to 69.5.0.20240423. <details> <summary>Commits</summary> <ul> <li>See full diff in <a href="https://github.com/python/typeshed/commits">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=types-setuptools&package-manager=pip&previous-version=69.0.0.20240125&new-version=69.5.0.20240423)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* | Bump idna from 3.6 to 3.7 (#17136)dependabot[bot]2024-04-291-3/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumps [idna](https://github.com/kjd/idna) from 3.6 to 3.7. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/kjd/idna/releases">idna's releases</a>.</em></p> <blockquote> <h2>v3.7</h2> <h2>What's Changed</h2> <ul> <li>Fix issue where specially crafted inputs to encode() could take exceptionally long amount of time to process. [CVE-2024-3651]</li> </ul> <p>Thanks to Guido Vranken for reporting the issue.</p> <p><strong>Full Changelog</strong>: <a href="https://github.com/kjd/idna/compare/v3.6...v3.7">https://github.com/kjd/idna/compare/v3.6...v3.7</a></p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/kjd/idna/blob/master/HISTORY.rst">idna's changelog</a>.</em></p> <blockquote> <p>3.7 (2024-04-11) ++++++++++++++++</p> <ul> <li>Fix issue where specially crafted inputs to encode() could take exceptionally long amount of time to process. [CVE-2024-3651]</li> </ul> <p>Thanks to Guido Vranken for reporting the issue.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/kjd/idna/commit/1d365e17e10d72d0b7876316fc7b9ca0eebdd38d"><code>1d365e1</code></a> Release v3.7</li> <li><a href="https://github.com/kjd/idna/commit/c1b3154939907fab67c5754346afaebe165ce8e6"><code>c1b3154</code></a> Merge pull request <a href="https://redirect.github.com/kjd/idna/issues/172">#172</a> from kjd/optimize-contextj</li> <li><a href="https://github.com/kjd/idna/commit/0394ec76ff022813e770ba1fd89658790ea35623"><code>0394ec7</code></a> Merge branch 'master' into optimize-contextj</li> <li><a href="https://github.com/kjd/idna/commit/cd58a23173d2b0a40b95ee680baf3e59e8d33966"><code>cd58a23</code></a> Merge pull request <a href="https://redirect.github.com/kjd/idna/issues/152">#152</a> from elliotwutingfeng/dev</li> <li><a href="https://github.com/kjd/idna/commit/5beb28b9dd77912c0dd656d8b0fdba3eb80222e7"><code>5beb28b</code></a> More efficient resolution of joiner contexts</li> <li><a href="https://github.com/kjd/idna/commit/1b121483ed04d9576a1291758f537e1318cddc8b"><code>1b12148</code></a> Update ossf/scorecard-action to v2.3.1</li> <li><a href="https://github.com/kjd/idna/commit/d516b874c3388047934938a500c7488d52c4e067"><code>d516b87</code></a> Update Github actions/checkout to v4</li> <li><a href="https://github.com/kjd/idna/commit/c095c75943413c75ebf8ac74179757031b7f80b7"><code>c095c75</code></a> Merge branch 'master' into dev</li> <li><a href="https://github.com/kjd/idna/commit/60a0a4cb61ec6834d74306bd8a1fa46daac94c98"><code>60a0a4c</code></a> Fix typo in GitHub Actions workflow key</li> <li><a href="https://github.com/kjd/idna/commit/5918a0ef8034379c2e409ae93ee11d24295bb201"><code>5918a0e</code></a> Merge branch 'master' into dev</li> <li>Additional commits viewable in <a href="https://github.com/kjd/idna/compare/v3.6...v3.7">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=idna&package-manager=pip&previous-version=3.6&new-version=3.7)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* | Bump twisted from 23.10.0 to 24.3.0 (#17135)dependabot[bot]2024-04-291-4/+4
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumps [twisted](https://github.com/twisted/twisted) from 23.10.0 to 24.3.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/twisted/twisted/releases">twisted's releases</a>.</em></p> <blockquote> <h1>Twisted 24.3.0 (2024-03-01)</h1> <p>This release supports PyPy v7.3.14.</p> <h2>Bugfixes</h2> <ul> <li>twisted.logger.formatEvent now honors dotted method names, not just flat function names, in format strings, as it has long been explicitly documented to do. So, you will now get the expected result from [formatEvent(&quot;here's the result of calling a method at log-format time: {obj.method()}&quot;, obj=...)]{.title-ref} (<a href="https://redirect.github.com/twisted/twisted/issues/9347">#9347</a>)</li> <li>twisted.web.http.HTTPChannel now ignores the trailer headers provided in the last chunk of a chunked encoded response, rather than raising an exception. (<a href="https://redirect.github.com/twisted/twisted/issues/11997">#11997</a>)</li> <li>twisted.protocols.tls.BufferingTLSTransport, used by default by twisted.protocols.tls.TLSMemoryBIOFactory, was refactored for improved performance when doing a high number of small writes. (<a href="https://redirect.github.com/twisted/twisted/issues/12011">#12011</a>)</li> <li>twisted.python.failure.Failure now throws exception for generators without triggering a deprecation warnings on Python 3.12. (<a href="https://redirect.github.com/twisted/twisted/issues/12026">#12026</a>)</li> <li>twisted.internet.process.Process, used by <code>reactor.spawnProcess</code>, now copies the parent environment when the [env=None]{.title-ref} argument is passed on Posix systems and <code>os.posix_spawnp</code> is used internally. (<a href="https://redirect.github.com/twisted/twisted/issues/12068">#12068</a>)</li> <li>twisted.internet.defer.inlineCallbacks.returnValue's stack introspection was adjusted for the latest PyPy 7.3.14 release, allowing legacy <a href="https://github.com/inlineCallbacks"><code>@​inlineCallbacks</code></a> to run on new PyPY versions. (<a href="https://redirect.github.com/twisted/twisted/issues/12084">#12084</a>)</li> </ul> <h2>Deprecations and Removals</h2> <ul> <li>twisted.trial.reporter.TestRun.startTest() is no longer called for tests with skip annotation or skip attribute for Python 3.12.1 or newer. This is the result of upstream Python <a href="https://redirect.github.com/twisted/twisted/issues/106584">gh-106584</a> change. The behavior is not change in 3.12.0 or older. (<a href="https://redirect.github.com/twisted/twisted/issues/12052">#12052</a>)</li> </ul> <h2>Misc</h2> <ul> <li><a href="https://redirect.github.com/twisted/twisted/issues/11902">#11902</a>, <a href="https://redirect.github.com/twisted/twisted/issues/12018">#12018</a>, <a href="https://redirect.github.com/twisted/twisted/issues/12023">#12023</a>, <a href="https://redirect.github.com/twisted/twisted/issues/12031">#12031</a>, <a href="https://redirect.github.com/twisted/twisted/issues/12032">#12032</a>, <a href="https://redirect.github.com/twisted/twisted/issues/12052">#12052</a>, <a href="https://redirect.github.com/twisted/twisted/issues/12056">#12056</a>, <a href="https://redirect.github.com/twisted/twisted/issues/12067">#12067</a>, <a href="https://redirect.github.com/twisted/twisted/issues/12076">#12076</a>, <a href="https://redirect.github.com/twisted/twisted/issues/12078">#12078</a>, <a href="https://redirect.github.com/twisted/twisted/issues/12087">#12087</a>, <a href="https://redirect.github.com/twisted/twisted/issues/12095">#12095</a></li> </ul> <h2>Conch</h2> <p>No significant changes.</p> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/twisted/twisted/blob/trunk/NEWS.rst">twisted's changelog</a>.</em></p> <blockquote> <h1>Twisted 24.3.0 (2024-03-01)</h1> <p>This release supports PyPy v7.3.14.</p> <h2>Bugfixes</h2> <ul> <li>twisted.logger.formatEvent now honors dotted method names, not just flat function names, in format strings, as it has long been explicitly documented to do. So, you will now get the expected result from <code>formatEvent(&quot;here's the result of calling a method at log-format time: {obj.method()}&quot;, obj=...)</code> (<a href="https://redirect.github.com/twisted/twisted/issues/9347">#9347</a>)</li> <li>twisted.web.http.HTTPChannel now ignores the trailer headers provided in the last chunk of a chunked encoded response, rather than raising an exception. (<a href="https://redirect.github.com/twisted/twisted/issues/11997">#11997</a>)</li> <li>twisted.protocols.tls.BufferingTLSTransport, used by default by twisted.protocols.tls.TLSMemoryBIOFactory, was refactored for improved performance when doing a high number of small writes. (<a href="https://redirect.github.com/twisted/twisted/issues/12011">#12011</a>)</li> <li>twisted.python.failure.Failure now throws exception for generators without triggering a deprecation warnings on Python 3.12. (<a href="https://redirect.github.com/twisted/twisted/issues/12026">#12026</a>)</li> <li>twisted.internet.process.Process, used by <code>reactor.spawnProcess</code>, now copies the parent environment when the <code>env=None</code> argument is passed on Posix systems and <code>os.posix_spawnp</code> is used internally. (<a href="https://redirect.github.com/twisted/twisted/issues/12068">#12068</a>)</li> <li>twisted.internet.defer.inlineCallbacks.returnValue's stack introspection was adjusted for the latest PyPy 7.3.14 release, allowing legacy <a href="https://github.com/inlineCallbacks"><code>@​inlineCallbacks</code></a> to run on new PyPY versions. (<a href="https://redirect.github.com/twisted/twisted/issues/12084">#12084</a>)</li> </ul> <h2>Deprecations and Removals</h2> <ul> <li>twisted.trial.reporter.TestRun.startTest() is no longer called for tests with skip annotation or skip attribute for Python 3.12.1 or newer. This is the result of upstream Python <a href="https://redirect.github.com/twisted/twisted/issues/106584">gh-106584</a> change. The behavior is not change in 3.12.0 or older. (<a href="https://redirect.github.com/twisted/twisted/issues/12052">#12052</a>)</li> </ul> <h2>Misc</h2> <ul> <li><a href="https://redirect.github.com/twisted/twisted/issues/11902">#11902</a>, <a href="https://redirect.github.com/twisted/twisted/issues/12018">#12018</a>, <a href="https://redirect.github.com/twisted/twisted/issues/12023">#12023</a>, <a href="https://redirect.github.com/twisted/twisted/issues/12031">#12031</a>, <a href="https://redirect.github.com/twisted/twisted/issues/12032">#12032</a>, <a href="https://redirect.github.com/twisted/twisted/issues/12052">#12052</a>, <a href="https://redirect.github.com/twisted/twisted/issues/12056">#12056</a>, <a href="https://redirect.github.com/twisted/twisted/issues/12067">#12067</a>, <a href="https://redirect.github.com/twisted/twisted/issues/12076">#12076</a>, <a href="https://redirect.github.com/twisted/twisted/issues/12078">#12078</a>, <a href="https://redirect.github.com/twisted/twisted/issues/12087">#12087</a>, <a href="https://redirect.github.com/twisted/twisted/issues/12095">#12095</a></li> </ul> <h2>Conch</h2> <p>No significant changes.</p> <h2>Web</h2> <p>Bugfixes</p> <pre><code> - The documentation for twisted.web.client.CookieAgent no longer references long-deprecated ``cookielib`` and ``urllib2`` standard library modules. ([#12044](https://github.com/twisted/twisted/issues/12044)) <p>&lt;/tr&gt;&lt;/table&gt; </code></pre></p> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/twisted/twisted/commit/2e59e1fb322bc4b20009443f2252ecc6d7c79f80"><code>2e59e1f</code></a> Merge remote-tracking branch 'origin/release-24.2.0-12097' into release-24.2....</li> <li><a href="https://github.com/twisted/twisted/commit/64a18eb6d8a71de2dafe6212482a680a12397e0b"><code>64a18eb</code></a> Prep for final release.</li> <li><a href="https://github.com/twisted/twisted/commit/c33d114c83cc283376650defda0e253053c87ef3"><code>c33d114</code></a> Update NEWS.rst</li> <li><a href="https://github.com/twisted/twisted/commit/d7c9b3d886d0f99fe86df2f8bfc9080063ab4b08"><code>d7c9b3d</code></a> Clarify and fix docs.</li> <li><a href="https://github.com/twisted/twisted/commit/4ed1a5b8ad9aaa1e3c5adb13076a2d79ec4279f1"><code>4ed1a5b</code></a> Update copyright year.</li> <li><a href="https://github.com/twisted/twisted/commit/a2ba6eb33011e75102f35a630cd594e0bab403c4"><code>a2ba6eb</code></a> Changelog for 24.2.0.</li> <li><a href="https://github.com/twisted/twisted/commit/f2f1bc5d544efef89139a6a264d39ce0598e3b68"><code>f2f1bc5</code></a> New pre-release.</li> <li><a href="https://github.com/twisted/twisted/commit/446ee139189440e890b26a29af256e9b9d0e8eba"><code>446ee13</code></a> Fix chat.py example (<a href="https://redirect.github.com/twisted/twisted/issues/12070">#12070</a>)</li> <li><a href="https://github.com/twisted/twisted/commit/d05599b21ad3ab3185ca73aa465be0d8dd79a98b"><code>d05599b</code></a> Merge branch 'trunk' into fix-chat-example</li> <li><a href="https://github.com/twisted/twisted/commit/234f3788b60f21ccdc51e7b865d244b9343877bf"><code>234f378</code></a> <a href="https://redirect.github.com/twisted/twisted/issues/11902">#11902</a> - Fix type for twisted.web.server.Request.defaultContentType (<a href="https://redirect.github.com/twisted/twisted/issues/12101">#12101</a>)</li> <li>Additional commits viewable in <a href="https://github.com/twisted/twisted/compare/twisted-23.10.0...twisted-24.3.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=twisted&package-manager=pip&previous-version=23.10.0&new-version=24.3.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* | Bump serde from 1.0.198 to 1.0.199 (#17132)dependabot[bot]2024-04-291-4/+4
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumps [serde](https://github.com/serde-rs/serde) from 1.0.198 to 1.0.199. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/serde-rs/serde/releases">serde's releases</a>.</em></p> <blockquote> <h2>v1.0.199</h2> <ul> <li>Fix ambiguous associated item when <code>forward_to_deserialize_any!</code> is used on an enum with <code>Error</code> variant (<a href="https://redirect.github.com/serde-rs/serde/issues/2732">#2732</a>, thanks <a href="https://github.com/aatifsyed"><code>@​aatifsyed</code></a>)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/serde-rs/serde/commit/147702871760a38d2e97e0cd15d568559876aeda"><code>1477028</code></a> Release 1.0.199</li> <li><a href="https://github.com/serde-rs/serde/commit/789740be0d2cc1d4e280639039f189cc5d98fb40"><code>789740b</code></a> Merge pull request <a href="https://redirect.github.com/serde-rs/serde/issues/2732">#2732</a> from aatifsyed/master</li> <li><a href="https://github.com/serde-rs/serde/commit/8fe7539bb2b46001f70751f1db60e1a7144f8f3d"><code>8fe7539</code></a> fix: ambiguous associated type in forward_to_deserialize_any!</li> <li><a href="https://github.com/serde-rs/serde/commit/f6623a36548cfce02f880a33c6d2f420934c95c5"><code>f6623a3</code></a> Ignore cast_precision_loss pedantic clippy lint</li> <li>See full diff in <a href="https://github.com/serde-rs/serde/compare/v1.0.198...v1.0.199">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=serde&package-manager=cargo&previous-version=1.0.198&new-version=1.0.199)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* | Bump furo from 2024.1.29 to 2024.4.27 (#17133)dependabot[bot]2024-04-291-3/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumps [furo](https://github.com/pradyunsg/furo) from 2024.1.29 to 2024.4.27. <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/pradyunsg/furo/blob/main/docs/changelog.md">furo's changelog</a>.</em></p> <blockquote> <h1>Changelog</h1> <!-- raw HTML omitted --> <h2>2024.04.27 -- Bold Burgundy</h2> <ul> <li>Add a skip to content link.</li> <li>Add <code>--font-stack--headings</code>.</li> <li>Add <code>:visited</code> colour and enforce uniform contrast between light/dark.</li> <li>Add an offset of <code>:target</code> to reduce back-to-top overlap.</li> <li>Improve dark mode colours.</li> <li>Fix outstanding colour contrast warnings on Firefox.</li> <li>Fix bad indent in footnotes.</li> <li>Tweak handling of default configuration options in a more resilient manner.</li> <li>Tweak length and sizing of API <code>source</code> links.</li> <li>Stop search engine indexing on search page.</li> </ul> <h2>2024.01.29 -- Amazing Amethyst</h2> <ul> <li>Fix canonical url when building with <code>dirhtml</code>.</li> <li>Relicense the demo module.</li> </ul> <h2>2023.09.10 -- Zesty Zaffre</h2> <ul> <li>Make asset hash injection idempotent, fixing Sphinx 6 compatibility.</li> <li>Fix the check for HTML builders, fixing non-HTML Read the Docs builds.</li> </ul> <h2>2023.08.19 -- Xenolithic Xanadu</h2> <ul> <li>Fix missing search context with Sphinx 7.2, for dirhtml builds.</li> <li>Drop support for Python 3.7.</li> <li>Present configuration errors in a better format -- thanks <a href="https://github.com/AA-Turner"><code>@​AA-Turner</code></a>!</li> <li>Bump <code>require_sphinx()</code> to Sphinx 6.0, in line with dependency changes in Unassuming Ultramarine.</li> </ul> <h2>2023.08.17 -- Wonderous White</h2> <ul> <li>Fix compatiblity with Sphinx 7.2.0 and 7.2.1.</li> </ul> <h2>2023.07.26 -- Vigilant Volt</h2> <ul> <li>Fix compatiblity with Sphinx 7.1.</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/pradyunsg/furo/commit/750fcd77fdbd4621919e461d366568847d378f6e"><code>750fcd7</code></a> Prepare release: 2024.04.27</li> <li><a href="https://github.com/pradyunsg/furo/commit/c0cb0200f0234a30845a6ee4435ab34cfbcb53be"><code>c0cb020</code></a> Update changelog</li> <li><a href="https://github.com/pradyunsg/furo/commit/3787a7c1f2a63393bb5e2d9f7af87955783b1cf8"><code>3787a7c</code></a> Patch <code>app.config</code> in a more resilient manner (<a href="https://redirect.github.com/pradyunsg/furo/issues/783">#783</a>)</li> <li><a href="https://github.com/pradyunsg/furo/commit/6a3afaba3883216e8135a9d15d4da047b37c2b9c"><code>6a3afab</code></a> Indent all children of aside.footnote (<a href="https://redirect.github.com/pradyunsg/furo/issues/788">#788</a>)</li> <li><a href="https://github.com/pradyunsg/furo/commit/035b27651632e20fec2277e7398cdd00dc63a73f"><code>035b276</code></a> fix: no index content on search page (<a href="https://redirect.github.com/pradyunsg/furo/issues/784">#784</a>)</li> <li><a href="https://github.com/pradyunsg/furo/commit/151f5232715b22fa190a478e67611c3bacbd45df"><code>151f523</code></a> [pre-commit.ci] pre-commit autoupdate (<a href="https://redirect.github.com/pradyunsg/furo/issues/771">#771</a>)</li> <li><a href="https://github.com/pradyunsg/furo/commit/2eb75aa20ec2804f1f34cd5a5bc8dfd55587824d"><code>2eb75aa</code></a> Bump the github-actions group with 1 update (<a href="https://redirect.github.com/pradyunsg/furo/issues/777">#777</a>)</li> <li><a href="https://github.com/pradyunsg/furo/commit/df6f65c819fb1afef26ef4efbfbb64d0bff6c44d"><code>df6f65c</code></a> Bump the npm group with 6 updates (<a href="https://redirect.github.com/pradyunsg/furo/issues/778">#778</a>)</li> <li><a href="https://github.com/pradyunsg/furo/commit/0b51a5eebdf6e643208f1dda45e68d3aee09c1fa"><code>0b51a5e</code></a> Add space after period in ToC warning (<a href="https://redirect.github.com/pradyunsg/furo/issues/776">#776</a>)</li> <li><a href="https://github.com/pradyunsg/furo/commit/01887051504bbec32e241af9cebcf5cd10f656d1"><code>0188705</code></a> Bump the npm group with 5 updates (<a href="https://redirect.github.com/pradyunsg/furo/issues/770">#770</a>)</li> <li>Additional commits viewable in <a href="https://github.com/pradyunsg/furo/compare/2024.01.29...2024.04.27">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=furo&package-manager=pip&previous-version=2024.1.29&new-version=2024.4.27)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* | Fix various typos in docs (#17114)devonh2024-04-269-12/+13
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | ### Pull Request Checklist <!-- Please read https://element-hq.github.io/synapse/latest/development/contributing_guide.html before submitting your pull request --> * [X] Pull request is based on the develop branch * [X] Pull request includes a [changelog file](https://element-hq.github.io/synapse/latest/development/contributing_guide.html#changelog). The entry should: - Be a short description of your change which makes sense to users. "Fixed a bug that prevented receiving messages from other servers." instead of "Moved X method from `EventStore` to `EventWorkerStore`.". - Use markdown where necessary, mostly for `code blocks`. - End with either a period (.) or an exclamation mark (!). - Start with a capital letter. - Feel free to credit yourself, by adding a sentence "Contributed by @github_username." or "Contributed by [Your Name]." to the end of the entry. * [X] [Code style](https://element-hq.github.io/synapse/latest/code_style.html) is correct (run the [linters](https://element-hq.github.io/synapse/latest/development/contributing_guide.html#run-the-linters))
* | Fix filtering of rooms when supplying the `destination` query parameter to ↵Andrew Morgan2024-04-263-3/+66
| | | | | | | | `/_synapse/admin/v1/federation/destinations/<destination>/rooms` (#17077)
* | Add RuntimeDirectory to matrix-synapse.service (#17084)villepeh2024-04-262-0/+2
| | | | | | | | | | | | This makes it easy to store UNIX sockets with correct permissions. Those would be located in /run/synapse which is the directory used in many examples in Synapse configuration manual. Additionally, the directory and sockets are deleted when Synapse is shut down.
* | Improve error message for cross signing reset with MSC3861 enabled (#17121)Michael Telatynski2024-04-262-5/+9
| |
* | Rephrase enable_notifs configuration (#17116)Amanda H. L. de Andrade Katz2024-04-262-2/+3
| |
* | Use recommended endpoint for MSC3266 requests (#17078)Andrew Ferrazzutti2024-04-263-1/+8
| | | | | | | | | | Keep the existing endpoint for backwards compatibility Signed-off-by: Andrew Ferrazzutti <andrewf@element.io>
* | Update event_cache_size and global_factor configurations documentation (#17071)Amanda H. L. de Andrade Katz2024-04-262-0/+9
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | ### Pull Request Checklist <!-- Please read https://element-hq.github.io/synapse/latest/development/contributing_guide.html before submitting your pull request --> * [x] Pull request is based on the develop branch * [x] Pull request includes a [changelog file](https://element-hq.github.io/synapse/latest/development/contributing_guide.html#changelog). The entry should: - Be a short description of your change which makes sense to users. "Fixed a bug that prevented receiving messages from other servers." instead of "Moved X method from `EventStore` to `EventWorkerStore`.". - Use markdown where necessary, mostly for `code blocks`. - End with either a period (.) or an exclamation mark (!). - Start with a capital letter. - Feel free to credit yourself, by adding a sentence "Contributed by @github_username." or "Contributed by [Your Name]." to the end of the entry. * [x] [Code style](https://element-hq.github.io/synapse/latest/code_style.html) is correct (run the [linters](https://element-hq.github.io/synapse/latest/development/contributing_guide.html#run-the-linters))
* | Return the search terms as search highlights for SQLite instead of nothing ↵Melvyn Laïly2024-04-263-14/+31
| | | | | | | | | | | | | | (#17000) Fixes https://github.com/element-hq/synapse/issues/16999 and https://github.com/element-hq/element-android/pull/8729 by returning the search terms as search highlights.
* | Bump serde_json from 1.0.115 to 1.0.116 (#17112)dependabot[bot]2024-04-261-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumps [serde_json](https://github.com/serde-rs/json) from 1.0.115 to 1.0.116. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/serde-rs/json/releases">serde_json's releases</a>.</em></p> <blockquote> <h2>v1.0.116</h2> <ul> <li>Make module structure comprehensible to static analysis (<a href="https://redirect.github.com/serde-rs/json/issues/1124">#1124</a>, thanks <a href="https://github.com/mleonhard"><code>@​mleonhard</code></a>)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/serde-rs/json/commit/a3f62bb10ea870dafe3b49a77dc6c1713ca4b7e4"><code>a3f62bb</code></a> Release 1.0.116</li> <li><a href="https://github.com/serde-rs/json/commit/12c8ee0ce6eaca3a809e83d9df768b67322a7f2a"><code>12c8ee0</code></a> Hide &quot;non-exhaustive patterns&quot; errors when crate fails to compile</li> <li><a href="https://github.com/serde-rs/json/commit/051ce970fe3fab097c618b237aa7ec4a628f85d4"><code>051ce97</code></a> Merge pull request 1124 from mleonhard/master</li> <li><a href="https://github.com/serde-rs/json/commit/25dc75050aee18ff42342bdb64c1e97542d17267"><code>25dc750</code></a> Replace <code>features_check</code> mod with a call to <code>std::compile_error!</code>. Fixes htt...</li> <li><a href="https://github.com/serde-rs/json/commit/2e15e3d7d53a68f78ff559709c57e4fa70584bb7"><code>2e15e3d</code></a> Revert &quot;Temporarily disable miri on doctests&quot;</li> <li><a href="https://github.com/serde-rs/json/commit/0baba2877595e31d57adafd5db2f94074f4a4c2e"><code>0baba28</code></a> Resolve legacy_numeric_constants clippy lints</li> <li>See full diff in <a href="https://github.com/serde-rs/json/compare/v1.0.115...v1.0.116">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=serde_json&package-manager=cargo&previous-version=1.0.115&new-version=1.0.116)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* | Bump serde from 1.0.197 to 1.0.198 (#17111)dependabot[bot]2024-04-261-4/+4
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumps [serde](https://github.com/serde-rs/serde) from 1.0.197 to 1.0.198. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/serde-rs/serde/releases">serde's releases</a>.</em></p> <blockquote> <h2>v1.0.198</h2> <ul> <li>Support serializing and deserializing <code>Saturating&lt;T&gt;</code> (<a href="https://redirect.github.com/serde-rs/serde/issues/2709">#2709</a>, thanks <a href="https://github.com/jbethune"><code>@​jbethune</code></a>)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/serde-rs/serde/commit/c4fb92333593ac875ca7b615398f9de9d703ba8f"><code>c4fb923</code></a> Release 1.0.198</li> <li><a href="https://github.com/serde-rs/serde/commit/65b7eea775fe8aa1faa1fb786811955236854867"><code>65b7eea</code></a> Merge pull request <a href="https://redirect.github.com/serde-rs/serde/issues/2729">#2729</a> from dtolnay/saturating</li> <li><a href="https://github.com/serde-rs/serde/commit/01cd696fd17f586aab428b1bbd11d533124a3425"><code>01cd696</code></a> Integrate Saturating&lt;T&gt; deserialization into impl_deserialize_num macro</li> <li><a href="https://github.com/serde-rs/serde/commit/c13b3f7e68d4c71bbe1ea825b36148eadf7de603"><code>c13b3f7</code></a> Format PR 2709</li> <li><a href="https://github.com/serde-rs/serde/commit/a6571ee0da2564c13b4351805fa216d233719258"><code>a6571ee</code></a> Merge pull request <a href="https://redirect.github.com/serde-rs/serde/issues/2709">#2709</a> from jbethune/master</li> <li><a href="https://github.com/serde-rs/serde/commit/6e38afff498d592af4ccac4cb669a86fc789207f"><code>6e38aff</code></a> Revert &quot;Temporarily disable miri on doctests&quot;</li> <li><a href="https://github.com/serde-rs/serde/commit/3d1b19ed906cb1c8cf4e2b4a45eea8f810115db1"><code>3d1b19e</code></a> Implement Ser+De for <code>Saturating\&lt;T&gt;</code></li> <li><a href="https://github.com/serde-rs/serde/commit/5b24f88e73caa9c607527b5b4696fc34263cd238"><code>5b24f88</code></a> Resolve legacy_numeric_constants clippy lints</li> <li><a href="https://github.com/serde-rs/serde/commit/74d06708ddff495161187ea490c4616291216346"><code>74d0670</code></a> Explicitly install a Rust toolchain for cargo-outdated job</li> <li><a href="https://github.com/serde-rs/serde/commit/3bfab6ef7fc80ad73eb598687c836609c14f6f8b"><code>3bfab6e</code></a> Temporarily disable miri on doctests</li> <li>Additional commits viewable in <a href="https://github.com/serde-rs/serde/compare/v1.0.197...v1.0.198">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=serde&package-manager=cargo&previous-version=1.0.197&new-version=1.0.198)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* | Bump types-bleach from 6.1.0.1 to 6.1.0.20240331 (#17110)dependabot[bot]2024-04-261-4/+18
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumps [types-bleach](https://github.com/python/typeshed) from 6.1.0.1 to 6.1.0.20240331. <details> <summary>Commits</summary> <ul> <li>See full diff in <a href="https://github.com/python/typeshed/commits">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=types-bleach&package-manager=pip&previous-version=6.1.0.1&new-version=6.1.0.20240331)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* | Bump pyicu from 2.12 to 2.13 (#17109)dependabot[bot]2024-04-261-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=pyicu&package-manager=pip&previous-version=2.12&new-version=2.13)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* | Bump pydantic from 2.6.4 to 2.7.0 (#17107)dependabot[bot]2024-04-261-85/+85
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumps [pydantic](https://github.com/pydantic/pydantic) from 2.6.4 to 2.7.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/pydantic/pydantic/releases">pydantic's releases</a>.</em></p> <blockquote> <h1>v2.7.0 (2024-04-11)</h1> <p>The code released in v2.7.0 is practically identical to that of v2.7.0b1.</p> <h3>What's Changed</h3> <h4>Packaging</h4> <ul> <li>Reorganize <code>pyproject.toml</code> sections by <a href="https://github.com/Viicos"><code>@​Viicos</code></a> in <a href="https://redirect.github.com/pydantic/pydantic/pull/8899">#8899</a></li> <li>Bump <code>pydantic-core</code> to <code>v2.18.1</code> by <a href="https://github.com/sydney-runkle"><code>@​sydney-runkle</code></a> in <a href="https://redirect.github.com/pydantic/pydantic/pull/9211">#9211</a></li> <li>Adopt <code>jiter</code> <code>v0.2.0</code> by <a href="https://github.com/samuelcolvin"><code>@​samuelcolvin</code></a> in <a href="https://redirect.github.com/pydantic/pydantic-core/pull/1250">pydantic/pydantic-core#1250</a></li> </ul> <h4>New Features</h4> <ul> <li>Extract attribute docstrings from <code>FieldInfo.description</code> by <a href="https://github.com/Viicos"><code>@​Viicos</code></a> in <a href="https://redirect.github.com/pydantic/pydantic/pull/6563">#6563</a></li> <li>Add a <code>with_config</code> decorator to comply with typing spec by <a href="https://github.com/Viicos"><code>@​Viicos</code></a> in <a href="https://redirect.github.com/pydantic/pydantic/pull/8611">#8611</a></li> <li>Allow an optional separator splitting the value and unit of the result of <code>ByteSize.human_readable</code> by <a href="https://github.com/jks15satoshi"><code>@​jks15satoshi</code></a> in <a href="https://redirect.github.com/pydantic/pydantic/pull/8706">#8706</a></li> <li>Add generic <code>Secret</code> base type by <a href="https://github.com/conradogarciaberrotaran"><code>@​conradogarciaberrotaran</code></a> in <a href="https://redirect.github.com/pydantic/pydantic/pull/8519">#8519</a></li> <li>Make use of <code>Sphinx</code> inventories for cross references in docs by <a href="https://github.com/Viicos"><code>@​Viicos</code></a> in <a href="https://redirect.github.com/pydantic/pydantic/pull/8682">#8682</a></li> <li>Add environment variable to disable plugins by <a href="https://github.com/geospackle"><code>@​geospackle</code></a> in <a href="https://redirect.github.com/pydantic/pydantic/pull/8767">#8767</a></li> <li>Add support for <code>deprecated</code> fields by <a href="https://github.com/Viicos"><code>@​Viicos</code></a> in <a href="https://redirect.github.com/pydantic/pydantic/pull/8237">#8237</a></li> <li>Allow <code>field_serializer('*')</code> by <a href="https://github.com/ornariece"><code>@​ornariece</code></a> in <a href="https://redirect.github.com/pydantic/pydantic/pull/9001">#9001</a></li> <li>Handle a case when <code>model_config</code> is defined as a model property by <a href="https://github.com/alexeyt101"><code>@​alexeyt101</code></a> in <a href="https://redirect.github.com/pydantic/pydantic/pull/9004">#9004</a></li> <li>Update <code>create_model()</code> to support <code>typing.Annotated</code> as input by <a href="https://github.com/wannieman98"><code>@​wannieman98</code></a> in <a href="https://redirect.github.com/pydantic/pydantic/pull/8947">#8947</a></li> <li>Add <code>ClickhouseDsn</code> support by <a href="https://github.com/solidguy7"><code>@​solidguy7</code></a> in <a href="https://redirect.github.com/pydantic/pydantic/pull/9062">#9062</a></li> <li>Add support for <code>re.Pattern[str]</code> to <code>pattern</code> field by <a href="https://github.com/jag-k"><code>@​jag-k</code></a> in <a href="https://redirect.github.com/pydantic/pydantic/pull/9053">#9053</a></li> <li>Support for <code>serialize_as_any</code> runtime setting by <a href="https://github.com/sydney-runkle"><code>@​sydney-runkle</code></a> in <a href="https://redirect.github.com/pydantic/pydantic/pull/8830">#8830</a></li> <li>Add support for <code>typing.Self</code> by <a href="https://github.com/Youssefares"><code>@​Youssefares</code></a> in <a href="https://redirect.github.com/pydantic/pydantic/pull/9023">#9023</a></li> <li>Ability to pass <code>context</code> to serialization by <a href="https://github.com/ornariece"><code>@​ornariece</code></a> in <a href="https://redirect.github.com/pydantic/pydantic/pull/8965">#8965</a></li> <li>Add feedback widget to docs with flarelytics integration by <a href="https://github.com/sydney-runkle"><code>@​sydney-runkle</code></a> in <a href="https://redirect.github.com/pydantic/pydantic/pull/9129">#9129</a></li> <li>Support for parsing partial JSON strings in Python by <a href="https://github.com/samuelcolvin"><code>@​samuelcolvin</code></a> in <a href="https://redirect.github.com/pydantic/jiter/pull/66">pydantic/jiter#66</a></li> </ul> <p><strong>Finalized in v2.7.0, rather than v2.7.0b1:</strong></p> <ul> <li>Add support for field level number to str coercion option by <a href="https://github.com/NeevCohen"><code>@​NeevCohen</code></a> in <a href="https://redirect.github.com/pydantic/pydantic/pull/9137">#9137</a></li> <li>Update <code>warnings</code> parameter for serialization utilities to allow raising a warning by <a href="https://github.com/Lance-Drane"><code>@​Lance-Drane</code></a> in <a href="https://redirect.github.com/pydantic/pydantic/pull/9166">#9166</a></li> </ul> <h4>Changes</h4> <ul> <li>Correct docs, logic for <code>model_construct</code> behavior with <code>extra</code> by <a href="https://github.com/sydney-runkle"><code>@​sydney-runkle</code></a> in <a href="https://redirect.github.com/pydantic/pydantic/pull/8807">#8807</a></li> <li>Improve error message for improper <code>RootModel</code> subclasses by <a href="https://github.com/sydney-runkle"><code>@​sydney-runkle</code></a> in <a href="https://redirect.github.com/pydantic/pydantic/pull/8857">#8857</a></li> <li>Use <code>PEP570</code> syntax by <a href="https://github.com/Viicos"><code>@​Viicos</code></a> in <a href="https://redirect.github.com/pydantic/pydantic/pull/8940">#8940</a></li> <li>Add <code>enum</code> and <code>type</code> to the JSON schema for single item literals by <a href="https://github.com/dmontagu"><code>@​dmontagu</code></a> in <a href="https://redirect.github.com/pydantic/pydantic/pull/8944">#8944</a></li> <li>Deprecate <code>update_json_schema</code> internal function by <a href="https://github.com/sydney-runkle"><code>@​sydney-runkle</code></a> in <a href="https://redirect.github.com/pydantic/pydantic/pull/9125">#9125</a></li> <li>Serialize duration to hour minute second, instead of just seconds by <a href="https://github.com/kakilangit"><code>@​kakilangit</code></a> in <a href="https://redirect.github.com/pydantic/speedate/pull/50">pydantic/speedate#50</a></li> <li>Trimming str before parsing to int and float by <a href="https://github.com/hungtsetse"><code>@​hungtsetse</code></a> in <a href="https://redirect.github.com/pydantic/pydantic-core/pull/1203">pydantic/pydantic-core#1203</a></li> </ul> <h4>Performance</h4> <ul> <li><code>enum</code> validator improvements by <a href="https://github.com/samuelcolvin"><code>@​samuelcolvin</code></a> in <a href="https://redirect.github.com/pydantic/pydantic/pull/9045">#9045</a></li> <li>Move <code>enum</code> validation and serialization to Rust by <a href="https://github.com/samuelcolvin"><code>@​samuelcolvin</code></a> in <a href="https://redirect.github.com/pydantic/pydantic/pull/9064">#9064</a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/pydantic/pydantic/blob/main/HISTORY.md">pydantic's changelog</a>.</em></p> <blockquote> <h2>v2.7.0 (2024-04-11)</h2> <p><a href="https://github.com/pydantic/pydantic/releases/tag/v2.7.0">GitHub release</a></p> <p>The code released in v2.7.0 is practically identical to that of v2.7.0b1.</p> <h3>What's Changed</h3> <h4>Packaging</h4> <ul> <li>Reorganize <code>pyproject.toml</code> sections by <a href="https://github.com/Viicos"><code>@​Viicos</code></a> in <a href="https://redirect.github.com/pydantic/pydantic/pull/8899">#8899</a></li> <li>Bump <code>pydantic-core</code> to <code>v2.18.1</code> by <a href="https://github.com/sydney-runkle"><code>@​sydney-runkle</code></a> in <a href="https://redirect.github.com/pydantic/pydantic/pull/9211">#9211</a></li> <li>Adopt <code>jiter</code> <code>v0.2.0</code> by <a href="https://github.com/samuelcolvin"><code>@​samuelcolvin</code></a> in <a href="https://redirect.github.com/pydantic/pydantic-core/pull/1250">pydantic/pydantic-core#1250</a></li> </ul> <h4>New Features</h4> <ul> <li>Extract attribute docstrings from <code>FieldInfo.description</code> by <a href="https://github.com/Viicos"><code>@​Viicos</code></a> in <a href="https://redirect.github.com/pydantic/pydantic/pull/6563">#6563</a></li> <li>Add a <code>with_config</code> decorator to comply with typing spec by <a href="https://github.com/Viicos"><code>@​Viicos</code></a> in <a href="https://redirect.github.com/pydantic/pydantic/pull/8611">#8611</a></li> <li>Allow an optional separator splitting the value and unit of the result of <code>ByteSize.human_readable</code> by <a href="https://github.com/jks15satoshi"><code>@​jks15satoshi</code></a> in <a href="https://redirect.github.com/pydantic/pydantic/pull/8706">#8706</a></li> <li>Add generic <code>Secret</code> base type by <a href="https://github.com/conradogarciaberrotaran"><code>@​conradogarciaberrotaran</code></a> in <a href="https://redirect.github.com/pydantic/pydantic/pull/8519">#8519</a></li> <li>Make use of <code>Sphinx</code> inventories for cross references in docs by <a href="https://github.com/Viicos"><code>@​Viicos</code></a> in <a href="https://redirect.github.com/pydantic/pydantic/pull/8682">#8682</a></li> <li>Add environment variable to disable plugins by <a href="https://github.com/geospackle"><code>@​geospackle</code></a> in <a href="https://redirect.github.com/pydantic/pydantic/pull/8767">#8767</a></li> <li>Add support for <code>deprecated</code> fields by <a href="https://github.com/Viicos"><code>@​Viicos</code></a> in <a href="https://redirect.github.com/pydantic/pydantic/pull/8237">#8237</a></li> <li>Allow <code>field_serializer('*')</code> by <a href="https://github.com/ornariece"><code>@​ornariece</code></a> in <a href="https://redirect.github.com/pydantic/pydantic/pull/9001">#9001</a></li> <li>Handle a case when <code>model_config</code> is defined as a model property by <a href="https://github.com/alexeyt101"><code>@​alexeyt101</code></a> in <a href="https://redirect.github.com/pydantic/pydantic/pull/9004">#9004</a></li> <li>Update <code>create_model()</code> to support <code>typing.Annotated</code> as input by <a href="https://github.com/wannieman98"><code>@​wannieman98</code></a> in <a href="https://redirect.github.com/pydantic/pydantic/pull/8947">#8947</a></li> <li>Add <code>ClickhouseDsn</code> support by <a href="https://github.com/solidguy7"><code>@​solidguy7</code></a> in <a href="https://redirect.github.com/pydantic/pydantic/pull/9062">#9062</a></li> <li>Add support for <code>re.Pattern[str]</code> to <code>pattern</code> field by <a href="https://github.com/jag-k"><code>@​jag-k</code></a> in <a href="https://redirect.github.com/pydantic/pydantic/pull/9053">#9053</a></li> <li>Support for <code>serialize_as_any</code> runtime setting by <a href="https://github.com/sydney-runkle"><code>@​sydney-runkle</code></a> in <a href="https://redirect.github.com/pydantic/pydantic/pull/8830">#8830</a></li> <li>Add support for <code>typing.Self</code> by <a href="https://github.com/Youssefares"><code>@​Youssefares</code></a> in <a href="https://redirect.github.com/pydantic/pydantic/pull/9023">#9023</a></li> <li>Ability to pass <code>context</code> to serialization by <a href="https://github.com/ornariece"><code>@​ornariece</code></a> in <a href="https://redirect.github.com/pydantic/pydantic/pull/8965">#8965</a></li> <li>Add feedback widget to docs with flarelytics integration by <a href="https://github.com/sydney-runkle"><code>@​sydney-runkle</code></a> in <a href="https://redirect.github.com/pydantic/pydantic/pull/9129">#9129</a></li> <li>Support for parsing partial JSON strings in Python by <a href="https://github.com/samuelcolvin"><code>@​samuelcolvin</code></a> in <a href="https://redirect.github.com/pydantic/jiter/pull/66">pydantic/jiter#66</a></li> </ul> <p><strong>Finalized in v2.7.0, rather than v2.7.0b1:</strong></p> <ul> <li>Add support for field level number to str coercion option by <a href="https://github.com/NeevCohen"><code>@​NeevCohen</code></a> in <a href="https://redirect.github.com/pydantic/pydantic/pull/9137">#9137</a></li> <li>Update <code>warnings</code> parameter for serialization utilities to allow raising a warning by <a href="https://github.com/Lance-Drane"><code>@​Lance-Drane</code></a> in <a href="https://redirect.github.com/pydantic/pydantic/pull/9166">#9166</a></li> </ul> <h4>Changes</h4> <ul> <li>Correct docs, logic for <code>model_construct</code> behavior with <code>extra</code> by <a href="https://github.com/sydney-runkle"><code>@​sydney-runkle</code></a> in <a href="https://redirect.github.com/pydantic/pydantic/pull/8807">#8807</a></li> <li>Improve error message for improper <code>RootModel</code> subclasses by <a href="https://github.com/sydney-runkle"><code>@​sydney-runkle</code></a> in <a href="https://redirect.github.com/pydantic/pydantic/pull/8857">#8857</a></li> <li>Use <code>PEP570</code> syntax by <a href="https://github.com/Viicos"><code>@​Viicos</code></a> in <a href="https://redirect.github.com/pydantic/pydantic/pull/8940">#8940</a></li> <li>Add <code>enum</code> and <code>type</code> to the JSON schema for single item literals by <a href="https://github.com/dmontagu"><code>@​dmontagu</code></a> in <a href="https://redirect.github.com/pydantic/pydantic/pull/8944">#8944</a></li> <li>Deprecate <code>update_json_schema</code> internal function by <a href="https://github.com/sydney-runkle"><code>@​sydney-runkle</code></a> in <a href="https://redirect.github.com/pydantic/pydantic/pull/9125">#9125</a></li> <li>Serialize duration to hour minute second, instead of just seconds by <a href="https://github.com/kakilangit"><code>@​kakilangit</code></a> in <a href="https://redirect.github.com/pydantic/speedate/pull/50">pydantic/speedate#50</a></li> <li>Trimming str before parsing to int and float by <a href="https://github.com/hungtsetse"><code>@​hungtsetse</code></a> in <a href="https://redirect.github.com/pydantic/pydantic-core/pull/1203">pydantic/pydantic-core#1203</a></li> </ul> <h4>Performance</h4> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/pydantic/pydantic/commit/7af856a1098406aea84bcadfd0f3de6b7901526c"><code>7af856a</code></a> Prep for 2.7 Release (<a href="https://redirect.github.com/pydantic/pydantic/issues/9212">#9212</a>)</li> <li><a href="https://github.com/pydantic/pydantic/commit/60d77f02e7bf2887ee3f8251353becd8f4f40015"><code>60d77f0</code></a> Update <code>warnings</code> parameter for serialization utilities to allow raising a wa...</li> <li><a href="https://github.com/pydantic/pydantic/commit/99821e9532f548f5e602240ff782aed8aaf6dd67"><code>99821e9</code></a> Add support for field level number to str coercion option (<a href="https://redirect.github.com/pydantic/pydantic/issues/9137">#9137</a>)</li> <li><a href="https://github.com/pydantic/pydantic/commit/a01b9029e3eac969c35951ee0f69f42c065fdba5"><code>a01b902</code></a> Updating JSON docs, adding <code>cache_strings</code> to <code>ConfigDict</code> (<a href="https://redirect.github.com/pydantic/pydantic/issues/9178">#9178</a>)</li> <li><a href="https://github.com/pydantic/pydantic/commit/932b025f892c5bbfa0a5da0d671179da7f93666e"><code>932b025</code></a> Bump core to 2.18.1 (<a href="https://redirect.github.com/pydantic/pydantic/issues/9211">#9211</a>)</li> <li><a href="https://github.com/pydantic/pydantic/commit/a7d32534779a1fd2ea5d10cbb0eed6db5584149e"><code>a7d3253</code></a> Fix allow extra generic (<a href="https://redirect.github.com/pydantic/pydantic/issues/9193">#9193</a>)</li> <li><a href="https://github.com/pydantic/pydantic/commit/8aeac1a4c61b084ebecf61b38bb8d3e80884dc33"><code>8aeac1a</code></a> Update mkdocs_material (<a href="https://redirect.github.com/pydantic/pydantic/issues/9169">#9169</a>)</li> <li><a href="https://github.com/pydantic/pydantic/commit/75012318fbb65036fbb38c2d04869f38ca4e15d6"><code>7501231</code></a> Add 1.10.15 section to HISTORY.md (<a href="https://redirect.github.com/pydantic/pydantic/issues/9161">#9161</a>)</li> <li><a href="https://github.com/pydantic/pydantic/commit/d294244e2d7d8d395de503203d8924f937bb4f4d"><code>d294244</code></a> Prep for 2.7 beta release 🚀 (<a href="https://redirect.github.com/pydantic/pydantic/issues/9158">#9158</a>)</li> <li><a href="https://github.com/pydantic/pydantic/commit/d77a9403603cfc125b9ff14ea9a45ae15f86b6ed"><code>d77a940</code></a> Uprev <code>pydantic-core</code> (<a href="https://redirect.github.com/pydantic/pydantic/issues/9153">#9153</a>)</li> <li>Additional commits viewable in <a href="https://github.com/pydantic/pydantic/compare/v2.6.4...v2.7.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=pydantic&package-manager=pip&previous-version=2.6.4&new-version=2.7.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* | Bump phonenumbers from 8.13.29 to 8.13.35 (#17106)dependabot[bot]2024-04-261-3/+3
|/ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumps [phonenumbers](https://github.com/daviddrysdale/python-phonenumbers) from 8.13.29 to 8.13.35. <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/daviddrysdale/python-phonenumbers/commit/9369ff4607226aee1dab38e731bd020b537ee636"><code>9369ff4</code></a> Prep for 8.13.35 release</li> <li><a href="https://github.com/daviddrysdale/python-phonenumbers/commit/2e1e1338901842c0e07a783c4be7c2bc938a1984"><code>2e1e133</code></a> Generated files for metadata</li> <li><a href="https://github.com/daviddrysdale/python-phonenumbers/commit/25a306f6709e3248b4650c9ecc0f38c77b17bbc5"><code>25a306f</code></a> Merge metadata changes from upstream 8.13.35</li> <li><a href="https://github.com/daviddrysdale/python-phonenumbers/commit/710529234b9a04495f2d26d877fea8b9f092a813"><code>7105292</code></a> Prep for 8.13.34 release</li> <li><a href="https://github.com/daviddrysdale/python-phonenumbers/commit/e7b328d07142827dbb95f4a6375d37e5782b2c14"><code>e7b328d</code></a> Generated files for metadata</li> <li><a href="https://github.com/daviddrysdale/python-phonenumbers/commit/315eb10e009ce33d35e1a949ba8aebec8b82d0b0"><code>315eb10</code></a> Merge metadata changes from upstream 8.13.34</li> <li><a href="https://github.com/daviddrysdale/python-phonenumbers/commit/29dab756aceb18e0142c9c37e736a67de01e3b33"><code>29dab75</code></a> Prep for 8.13.33 release</li> <li><a href="https://github.com/daviddrysdale/python-phonenumbers/commit/f5b9401fdb93da1113eadcec018fa029081f4232"><code>f5b9401</code></a> Generated files for metadata</li> <li><a href="https://github.com/daviddrysdale/python-phonenumbers/commit/aa21158f8d78f5470866fc6c993d374a6248181e"><code>aa21158</code></a> Merge metadata changes from upstream 8.13.33</li> <li><a href="https://github.com/daviddrysdale/python-phonenumbers/commit/92c242c2b40bbd944a73d72b517c27eed524068f"><code>92c242c</code></a> Prep for 8.13.32 release</li> <li>Additional commits viewable in <a href="https://github.com/daviddrysdale/python-phonenumbers/compare/v8.13.29...v8.13.35">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=phonenumbers&package-manager=pip&previous-version=8.13.29&new-version=8.13.35)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* Tweak changelog v1.106.0rc1Olivier 'reivilibre2024-04-251-2/+2
|
* 1.106.0rc1Olivier 'reivilibre2024-04-2518-16/+49
|
* Redact membership events if the user requested erasure upon deactivating ↵Till2024-04-254-1/+72
| | | | | (#17076) Fixes #15355 by redacting all membership events before leaving rooms.
* MSC4108 implementation (#17056)Quentin Gliech2024-04-2517-9/+1120
| | | | | | Co-authored-by: Hugh Nimmo-Smith <hughns@element.io> Co-authored-by: Hugh Nimmo-Smith <hughns@users.noreply.github.com> Co-authored-by: Andrew Morgan <1342360+anoadragon453@users.noreply.github.com>
* Add type annotation to `visited_chains` (#17125)Andrew Morgan2024-04-252-1/+2
| | | | | This should fix CI on `develop`. Broke in https://github.com/element-hq/synapse/commit/0fe9e1f7dafa80f3e02762f7ae75cefee5b3316c, presumably due to a `mypy` dependency upgrade.
* Merge branch 'master' into developErik Johnston2024-04-236-105/+137
|\
| * 1.105.1 v1.105.1 github/release-v1.105 release-v1.105Erik Johnston2024-04-234-2/+21
| |
| * Fix GHSA-3h7q-rfh9-xm4vErik Johnston2024-04-234-104/+117
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Weakness in auth chain indexing allows DoS from remote room members through disk fill and high CPU usage. A remote Matrix user with malicious intent, sharing a room with Synapse instances before 1.104.1, can dispatch specially crafted events to exploit a weakness in how the auth chain cover index is calculated. This can induce high CPU consumption and accumulate excessive data in the database of such instances, resulting in a denial of service. Servers in private federations, or those that do not federate, are not affected.
* | Send an email if the address is already bound to an user account (#16819)mcalinghee2024-04-237-2/+70
| | | | | | | | Co-authored-by: Mathieu Velten <mathieu.velten@beta.gouv.fr> Co-authored-by: Olivier D <odelcroi@gmail.com>
* | Add an OSX prompt to manually configure icu4c. (#17069)Neil Johnson2024-04-192-0/+3
| | | | | | Documentation fix.
* | Clarify what part of message retention is still experimental (#17099)devonh2024-04-192-2/+5
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | ### Pull Request Checklist <!-- Please read https://element-hq.github.io/synapse/latest/development/contributing_guide.html before submitting your pull request --> * [X] Pull request is based on the develop branch * [x] Pull request includes a [changelog file](https://element-hq.github.io/synapse/latest/development/contributing_guide.html#changelog). The entry should: - Be a short description of your change which makes sense to users. "Fixed a bug that prevented receiving messages from other servers." instead of "Moved X method from `EventStore` to `EventWorkerStore`.". - Use markdown where necessary, mostly for `code blocks`. - End with either a period (.) or an exclamation mark (!). - Start with a capital letter. - Feel free to credit yourself, by adding a sentence "Contributed by @github_username." or "Contributed by [Your Name]." to the end of the entry. * [X] [Code style](https://element-hq.github.io/synapse/latest/code_style.html) is correct (run the [linters](https://element-hq.github.io/synapse/latest/development/contributing_guide.html#run-the-linters))
* | Bump types-pillow from 10.2.0.20240406 to 10.2.0.20240415 (#17090)dependabot[bot]2024-04-191-3/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumps [types-pillow](https://github.com/python/typeshed) from 10.2.0.20240406 to 10.2.0.20240415. <details> <summary>Commits</summary> <ul> <li>See full diff in <a href="https://github.com/python/typeshed/commits">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=types-pillow&package-manager=pip&previous-version=10.2.0.20240406&new-version=10.2.0.20240415)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* | Bump peaceiris/actions-gh-pages from 3.9.3 to 4.0.0 (#17087)dependabot[bot]2024-04-191-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumps [peaceiris/actions-gh-pages](https://github.com/peaceiris/actions-gh-pages) from 3.9.3 to 4.0.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/peaceiris/actions-gh-pages/releases">peaceiris/actions-gh-pages's releases</a>.</em></p> <blockquote> <h2>actions-github-pages v4.0.0</h2> <p>See <a href="https://github.com/peaceiris/actions-gh-pages/blob/v4.0.0/CHANGELOG.md">CHANGELOG.md</a> for more details.</p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/peaceiris/actions-gh-pages/blob/main/CHANGELOG.md">peaceiris/actions-gh-pages's changelog</a>.</em></p> <blockquote> <h1>Changelog</h1> <p>All notable changes to this project will be documented in this file. See <a href="https://github.com/conventional-changelog/standard-version">standard-version</a> for commit guidelines.</p> <h1><a href="https://github.com/peaceiris/actions-gh-pages/compare/v3.9.3...v4.0.0">4.0.0</a> (2024-04-08)</h1> <h3>build</h3> <ul> <li>node 20.11.1 (<a href="https://github.com/peaceiris/actions-gh-pages/commit/5049354438ced05ab8a5da89ef20fd8efff107c7">5049354</a>)</li> </ul> <h3>chore</h3> <ul> <li>bump node16 to node20 (<a href="https://redirect.github.com/peaceiris/actions-gh-pages/issues/1067">#1067</a>) (<a href="https://github.com/peaceiris/actions-gh-pages/commit/4eb285e828117bca26638192c3ed309c622e7bad">4eb285e</a>), closes <a href="https://redirect.github.com/peaceiris/actions-gh-pages/issues/1067">#1067</a></li> <li>downgrade engines.npm to 8.0.0 (<a href="https://github.com/peaceiris/actions-gh-pages/commit/87231bc03a428df52f90a00b3b9e6bef82f7daf9">87231bc</a>)</li> </ul> <h3>ci</h3> <ul> <li>pin node-version to 18 (<a href="https://redirect.github.com/peaceiris/actions-gh-pages/issues/981">#981</a>) (<a href="https://github.com/peaceiris/actions-gh-pages/commit/65ebf11929c082120c54719c87069f0827d2084c">65ebf11</a>), closes <a href="https://redirect.github.com/peaceiris/actions-gh-pages/issues/981">#981</a></li> </ul> <h3>docs</h3> <ul> <li>add Release Strategy (<a href="https://github.com/peaceiris/actions-gh-pages/commit/67f80d94a1668353e4733223685dcb84340c44b5">67f80d9</a>)</li> <li>fix link to Nuxt github-pages (<a href="https://redirect.github.com/peaceiris/actions-gh-pages/issues/980">#980</a>) (<a href="https://github.com/peaceiris/actions-gh-pages/commit/88b4d2aa927893f8976712406df9928468be3c88">88b4d2a</a>), closes <a href="https://redirect.github.com/peaceiris/actions-gh-pages/issues/980">#980</a></li> <li>remove braces in if conditions (<a href="https://redirect.github.com/peaceiris/actions-gh-pages/issues/920">#920</a>) (<a href="https://github.com/peaceiris/actions-gh-pages/commit/0fbd12244217a1fa04396b8a52d911a436893771">0fbd122</a>), closes <a href="https://redirect.github.com/peaceiris/actions-gh-pages/issues/920">#920</a></li> </ul> <h2><a href="https://github.com/peaceiris/actions-gh-pages/compare/v3.9.2...v3.9.3">3.9.3</a> (2023-03-30)</h2> <h3>docs</h3> <ul> <li>fix typo, bump hugo version (<a href="https://redirect.github.com/peaceiris/actions-gh-pages/issues/851">#851</a>) (<a href="https://github.com/peaceiris/actions-gh-pages/commit/884a0224fd48faeb3bde89519e9d612d0585a679">884a022</a>), closes <a href="https://redirect.github.com/peaceiris/actions-gh-pages/issues/851">#851</a></li> </ul> <h3>fix</h3> <ul> <li>fix error handling (<a href="https://redirect.github.com/peaceiris/actions-gh-pages/issues/841">#841</a>) (<a href="https://github.com/peaceiris/actions-gh-pages/commit/32e33dcd3ae1d0cf56ac5a88267de6cbf0359353">32e33dc</a>), closes <a href="https://redirect.github.com/peaceiris/actions-gh-pages/issues/841">#841</a></li> <li>update known_hosts (<a href="https://redirect.github.com/peaceiris/actions-gh-pages/issues/871">#871</a>) (<a href="https://github.com/peaceiris/actions-gh-pages/commit/31c15f03292ac100ae41a50fd3055e00d1b11a32">31c15f0</a>), closes <a href="https://redirect.github.com/peaceiris/actions-gh-pages/issues/871">#871</a></li> </ul> <h2><a href="https://github.com/peaceiris/actions-gh-pages/compare/v3.9.1...v3.9.2">3.9.2</a> (2023-01-17)</h2> <h3>chore</h3> <ul> <li>rename cicd (<a href="https://github.com/peaceiris/actions-gh-pages/commit/32c9288f553bbcbf66869cf553c82754431faf03">32c9288</a>)</li> <li>replace npm ci with install (<a href="https://github.com/peaceiris/actions-gh-pages/commit/983978086a87d25a1ff678aa1ef4c2acc413784a">9839780</a>)</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/peaceiris/actions-gh-pages/commit/4f9cc6602d3f66b9c108549d475ec49e8ef4d45e"><code>4f9cc66</code></a> chore(release): 4.0.0</li> <li><a href="https://github.com/peaceiris/actions-gh-pages/commit/9c75028a530dcac84f98f83ac112b3ecc5eec533"><code>9c75028</code></a> chore(release): Add build assets</li> <li><a href="https://github.com/peaceiris/actions-gh-pages/commit/5049354438ced05ab8a5da89ef20fd8efff107c7"><code>5049354</code></a> build: node 20.11.1</li> <li><a href="https://github.com/peaceiris/actions-gh-pages/commit/4eb285e828117bca26638192c3ed309c622e7bad"><code>4eb285e</code></a> chore: bump node16 to node20 (<a href="https://redirect.github.com/peaceiris/actions-gh-pages/issues/1067">#1067</a>)</li> <li><a href="https://github.com/peaceiris/actions-gh-pages/commit/cdc09a3baa7eac9b40de1dfa92172d75ca5bca5a"><code>cdc09a3</code></a> chore(deps): update dependency <code>@​types/node</code> to v16.18.77 (<a href="https://redirect.github.com/peaceiris/actions-gh-pages/issues/1065">#1065</a>)</li> <li><a href="https://github.com/peaceiris/actions-gh-pages/commit/d830378ec6ffd7f902a3427b78b7941511f64de3"><code>d830378</code></a> chore(deps): update dependency <code>@​types/node</code> to v16.18.76 (<a href="https://redirect.github.com/peaceiris/actions-gh-pages/issues/1063">#1063</a>)</li> <li><a href="https://github.com/peaceiris/actions-gh-pages/commit/80daa1d14446ef560c4b984b37ac7668a7db0ab4"><code>80daa1d</code></a> chore(deps): update dependency <code>@​types/node</code> to v16.18.75 (<a href="https://redirect.github.com/peaceiris/actions-gh-pages/issues/1061">#1061</a>)</li> <li><a href="https://github.com/peaceiris/actions-gh-pages/commit/108285e909b33bc551c67972cdbdbee53b17a112"><code>108285e</code></a> chore(deps): update dependency ts-jest to v29.1.2 (<a href="https://redirect.github.com/peaceiris/actions-gh-pages/issues/1060">#1060</a>)</li> <li><a href="https://github.com/peaceiris/actions-gh-pages/commit/99c95ff54e31aa8b98a1f45d98910a945931c89c"><code>99c95ff</code></a> chore(deps): update dependency <code>@​types/node</code> to v16.18.74 (<a href="https://redirect.github.com/peaceiris/actions-gh-pages/issues/1058">#1058</a>)</li> <li><a href="https://github.com/peaceiris/actions-gh-pages/commit/1f4653792dc64b25bbf4a3490ae085a487673e55"><code>1f46537</code></a> chore(deps): update dependency <code>@​types/node</code> to v16.18.73 (<a href="https://redirect.github.com/peaceiris/actions-gh-pages/issues/1057">#1057</a>)</li> <li>Additional commits viewable in <a href="https://github.com/peaceiris/actions-gh-pages/compare/373f7f263a76c20808c831209c920827a82a2847...4f9cc6602d3f66b9c108549d475ec49e8ef4d45e">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=peaceiris/actions-gh-pages&package-manager=github_actions&previous-version=3.9.3&new-version=4.0.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* | Bump sigstore/cosign-installer from 3.4.0 to 3.5.0 (#17088)dependabot[bot]2024-04-191-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumps [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer) from 3.4.0 to 3.5.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/sigstore/cosign-installer/releases">sigstore/cosign-installer's releases</a>.</em></p> <blockquote> <h2>v3.5.0</h2> <h2>What's Changed</h2> <ul> <li>Bump actions/checkout from 4.1.1 to 4.1.2 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/sigstore/cosign-installer/pull/157">sigstore/cosign-installer#157</a></li> <li>use go 1.22 now by <a href="https://github.com/bobcallaway"><code>@​bobcallaway</code></a> in <a href="https://redirect.github.com/sigstore/cosign-installer/pull/160">sigstore/cosign-installer#160</a></li> <li>bump default version to v2.2.4, prep for v3.5.0 release by <a href="https://github.com/bobcallaway"><code>@​bobcallaway</code></a> in <a href="https://redirect.github.com/sigstore/cosign-installer/pull/159">sigstore/cosign-installer#159</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/sigstore/cosign-installer/compare/v3.4.0...v3.5.0">https://github.com/sigstore/cosign-installer/compare/v3.4.0...v3.5.0</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/sigstore/cosign-installer/commit/59acb6260d9c0ba8f4a2f9d9b48431a222b68e20"><code>59acb62</code></a> bump default version to v2.2.4, prep for v3.5.0 release (<a href="https://redirect.github.com/sigstore/cosign-installer/issues/159">#159</a>)</li> <li><a href="https://github.com/sigstore/cosign-installer/commit/22be4ce325f454c874ccf89af51803efd4e85129"><code>22be4ce</code></a> use go 1.22 now (<a href="https://redirect.github.com/sigstore/cosign-installer/issues/160">#160</a>)</li> <li><a href="https://github.com/sigstore/cosign-installer/commit/162dfdf7b9ab8be88c95b4fc982792c4c273e27a"><code>162dfdf</code></a> Bump actions/checkout from 4.1.1 to 4.1.2 (<a href="https://redirect.github.com/sigstore/cosign-installer/issues/157">#157</a>)</li> <li>See full diff in <a href="https://github.com/sigstore/cosign-installer/compare/v3.4.0...v3.5.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=sigstore/cosign-installer&package-manager=github_actions&previous-version=3.4.0&new-version=3.5.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* | Bump peaceiris/actions-mdbook from 1.2.0 to 2.0.0 (#17089)dependabot[bot]2024-04-192-3/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumps [peaceiris/actions-mdbook](https://github.com/peaceiris/actions-mdbook) from 1.2.0 to 2.0.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/peaceiris/actions-mdbook/releases">peaceiris/actions-mdbook's releases</a>.</em></p> <blockquote> <h2>actions-mdbook v2.0.0</h2> <p>See <a href="https://github.com/peaceiris/actions-mdbook/blob/v2.0.0/CHANGELOG.md">CHANGELOG.md</a> for more details.</p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/peaceiris/actions-mdbook/blob/main/CHANGELOG.md">peaceiris/actions-mdbook's changelog</a>.</em></p> <blockquote> <h1>Changelog</h1> <p>All notable changes to this project will be documented in this file. See <a href="https://github.com/conventional-changelog/standard-version">standard-version</a> for commit guidelines.</p> <h1><a href="https://github.com/peaceiris/actions-mdbook/compare/v1.2.0...v2.0.0">2.0.0</a> (2024-04-08)</h1> <h3>build</h3> <ul> <li>bump node to 20.12.1 (<a href="https://redirect.github.com/peaceiris/actions-mdbook/issues/504">#504</a>) (<a href="https://github.com/peaceiris/actions-mdbook/commit/cb4d902e118c7404c24c2a59b5a619e363e0eed9">cb4d902</a>), closes <a href="https://redirect.github.com/peaceiris/actions-mdbook/issues/504">#504</a></li> </ul> <h3>chore</h3> <ul> <li>revert build (<a href="https://github.com/peaceiris/actions-mdbook/commit/c95f05c7f61f6cc7b1abfc2aa4e2fb293c2e0bb7">c95f05c</a>)</li> </ul> <h3>ci</h3> <ul> <li>bump actions/checkout from 3 to 4 (<a href="https://redirect.github.com/peaceiris/actions-mdbook/issues/487">#487</a>) (<a href="https://github.com/peaceiris/actions-mdbook/commit/c0c1ffeeae553a80d23fe6c4d903f04c20d1efd4">c0c1ffe</a>), closes <a href="https://redirect.github.com/peaceiris/actions-mdbook/issues/487">#487</a></li> <li>bump actions/dependency-review-action from 2.5.0 to 2.5.1 (<a href="https://redirect.github.com/peaceiris/actions-mdbook/issues/470">#470</a>) (<a href="https://github.com/peaceiris/actions-mdbook/commit/e8a2552a1a7d3b89458037a44425d39e11b3bbed">e8a2552</a>), closes <a href="https://redirect.github.com/peaceiris/actions-mdbook/issues/470">#470</a> <a href="https://redirect.github.com/peaceiris/actions-mdbook/issues/290">#290</a> <a href="https://redirect.github.com/peaceiris/actions-mdbook/issues/300">#300</a> <a href="https://redirect.github.com/peaceiris/actions-mdbook/issues/299">#299</a></li> <li>bump actions/dependency-review-action from 2.5.1 to 3.0.0 (<a href="https://redirect.github.com/peaceiris/actions-mdbook/issues/472">#472</a>) (<a href="https://github.com/peaceiris/actions-mdbook/commit/9a6ded1ce6570d9297f3dd08d97553ce8d75e819">9a6ded1</a>), closes <a href="https://redirect.github.com/peaceiris/actions-mdbook/issues/472">#472</a> <a href="https://redirect.github.com/peaceiris/actions-mdbook/issues/327">#327</a> <a href="https://redirect.github.com/peaceiris/actions-mdbook/issues/324">#324</a> <a href="https://redirect.github.com/peaceiris/actions-mdbook/issues/325">#325</a> <a href="https://redirect.github.com/peaceiris/actions-mdbook/issues/326">#326</a></li> <li>bump actions/dependency-review-action from 3.0.0 to 3.0.1 (<a href="https://redirect.github.com/peaceiris/actions-mdbook/issues/473">#473</a>) (<a href="https://github.com/peaceiris/actions-mdbook/commit/939fe7600f5ad73a71889ae9ca327d9c349c1c18">939fe76</a>), closes <a href="https://redirect.github.com/peaceiris/actions-mdbook/issues/473">#473</a></li> <li>bump actions/dependency-review-action from 3.0.1 to 3.0.2 (<a href="https://redirect.github.com/peaceiris/actions-mdbook/issues/474">#474</a>) (<a href="https://github.com/peaceiris/actions-mdbook/commit/404c95aeedbdb24218df5d3a02dd1d639ad7ff0c">404c95a</a>), closes <a href="https://redirect.github.com/peaceiris/actions-mdbook/issues/474">#474</a></li> <li>bump actions/dependency-review-action from 3.0.2 to 3.0.3 (<a href="https://redirect.github.com/peaceiris/actions-mdbook/issues/476">#476</a>) (<a href="https://github.com/peaceiris/actions-mdbook/commit/665e827a09abcfcdfd28e990de96c279f3ba82ee">665e827</a>), closes <a href="https://redirect.github.com/peaceiris/actions-mdbook/issues/476">#476</a></li> <li>bump actions/dependency-review-action from 3.0.3 to 3.0.4 (<a href="https://redirect.github.com/peaceiris/actions-mdbook/issues/479">#479</a>)Co-authored-by: dependabot[bot] <!-- raw HTML omitted --> (<a href="https://github.com/peaceiris/actions-mdbook/commit/9d85c8a72133d66cedafb696236491618b032939">9d85c8a</a>), closes <a href="https://redirect.github.com/peaceiris/actions-mdbook/issues/479">#479</a></li> <li>bump actions/dependency-review-action from 3.0.4 to 3.0.6 (<a href="https://redirect.github.com/peaceiris/actions-mdbook/issues/480">#480</a>) (<a href="https://github.com/peaceiris/actions-mdbook/commit/a1c0a098b8e4a05cb9b25c79af285b6d171dc347">a1c0a09</a>), closes <a href="https://redirect.github.com/peaceiris/actions-mdbook/issues/480">#480</a></li> <li>bump actions/dependency-review-action from 3.0.6 to 3.0.7 (<a href="https://redirect.github.com/peaceiris/actions-mdbook/issues/483">#483</a>) (<a href="https://github.com/peaceiris/actions-mdbook/commit/2987c698ee6c43d5353d672c5768d315a5701d02">2987c69</a>), closes <a href="https://redirect.github.com/peaceiris/actions-mdbook/issues/483">#483</a></li> <li>bump actions/dependency-review-action from 3.0.7 to 3.0.8 (<a href="https://redirect.github.com/peaceiris/actions-mdbook/issues/485">#485</a>) (<a href="https://github.com/peaceiris/actions-mdbook/commit/162a198ca6534c7c8ba31c16e3e14282ca751364">162a198</a>), closes <a href="https://redirect.github.com/peaceiris/actions-mdbook/issues/485">#485</a></li> <li>bump actions/dependency-review-action from 3.0.8 to 3.1.0 (<a href="https://redirect.github.com/peaceiris/actions-mdbook/issues/488">#488</a>) (<a href="https://github.com/peaceiris/actions-mdbook/commit/60cc2ffbc1a8ee8273b736332bd9729fad7aeecd">60cc2ff</a>), closes <a href="https://redirect.github.com/peaceiris/actions-mdbook/issues/488">#488</a></li> <li>bump actions/setup-node from 3.5.1 to 3.6.0 (<a href="https://redirect.github.com/peaceiris/actions-mdbook/issues/475">#475</a>) (<a href="https://github.com/peaceiris/actions-mdbook/commit/10da3f536471b3cbb0c31eeddbe3b692648b6db2">10da3f5</a>), closes <a href="https://redirect.github.com/peaceiris/actions-mdbook/issues/475">#475</a></li> <li>bump actions/setup-node from 3.6.0 to 3.7.0 (<a href="https://redirect.github.com/peaceiris/actions-mdbook/issues/481">#481</a>) (<a href="https://github.com/peaceiris/actions-mdbook/commit/334df4e551c395d0298645134ebb34a0a5036b3b">334df4e</a>), closes <a href="https://redirect.github.com/peaceiris/actions-mdbook/issues/481">#481</a></li> <li>bump actions/setup-node from 3.7.0 to 3.8.0 (<a href="https://redirect.github.com/peaceiris/actions-mdbook/issues/484">#484</a>) (<a href="https://github.com/peaceiris/actions-mdbook/commit/fe519205c007d9337f4c2d3d912636b398d6f32c">fe51920</a>), closes <a href="https://redirect.github.com/peaceiris/actions-mdbook/issues/484">#484</a></li> <li>bump actions/setup-node from 3.8.0 to 3.8.1 (<a href="https://redirect.github.com/peaceiris/actions-mdbook/issues/486">#486</a>) (<a href="https://github.com/peaceiris/actions-mdbook/commit/c6c9e0f19326d4f3e7bbd16d49393d427fc06353">c6c9e0f</a>), closes <a href="https://redirect.github.com/peaceiris/actions-mdbook/issues/486">#486</a></li> <li>bump codecov/codecov-action from 3 to 4 (<a href="https://redirect.github.com/peaceiris/actions-mdbook/issues/490">#490</a>) (<a href="https://github.com/peaceiris/actions-mdbook/commit/7b0c98f8f3651db1bc6fd2a3d32031214fe04bd6">7b0c98f</a>), closes <a href="https://redirect.github.com/peaceiris/actions-mdbook/issues/490">#490</a></li> <li>bump github/codeql-action from 1 to 2 (<a href="https://redirect.github.com/peaceiris/actions-mdbook/issues/440">#440</a>) (<a href="https://github.com/peaceiris/actions-mdbook/commit/7ce6923a7b5ce037d560297e4c5a8a8c7216462d">7ce6923</a>), closes <a href="https://redirect.github.com/peaceiris/actions-mdbook/issues/440">#440</a></li> <li>bump peaceiris/actions-mdbook from 1.1.14 to 1.2.0 (<a href="https://redirect.github.com/peaceiris/actions-mdbook/issues/469">#469</a>) (<a href="https://github.com/peaceiris/actions-mdbook/commit/59732c82f285d3a185e3bce974c59fac83c6be3e">59732c8</a>), closes <a href="https://redirect.github.com/peaceiris/actions-mdbook/issues/469">#469</a> <a href="https://redirect.github.com/peaceiris/actions-mdbook/issues/397">#397</a> <a href="https://redirect.github.com/peaceiris/actions-mdbook/issues/397">#397</a> <a href="https://redirect.github.com/peaceiris/actions-mdbook/issues/385">#385</a> <a href="https://redirect.github.com/peaceiris/actions-mdbook/issues/385">#385</a> <a href="https://redirect.github.com/peaceiris/actions-mdbook/issues/407">#407</a> <a href="https://redirect.github.com/peaceiris/actions-mdbook/issues/407">#407</a> <a href="https://redirect.github.com/peaceiris/actions-mdbook/issues/409">#409</a> <a href="https://redirect.github.com/peaceiris/actions-mdbook/issues/409">#409</a> <a href="https://redirect.github.com/peaceiris/actions-mdbook/issues/424">#424</a> <a href="https://redirect.github.com/peaceiris/actions-mdbook/issues/424">#424</a> <a href="https://redirect.github.com/peaceiris/actions-mdbook/issues/463">#463</a> <a href="https://redirect.github.com/peaceiris/actions-mdbook/issues/463">#463</a> <a href="https://redirect.github.com/peaceiris/actions-mdbook/issues/393">#393</a> <a href="https://redirect.github.com/peaceiris/actions-mdbook/issues/393">#393</a> <a href="https://redirect.github.com/peaceiris/actions-mdbook/issues/395">#395</a> <a href="https://redirect.github.com/peaceiris/actions-mdbook/issues/395">#395</a> <a href="https://redirect.github.com/peaceiris/actions-mdbook/issues/399">#399</a> <a href="https://redirect.github.com/peaceiris/actions-mdbook/issues/399">#399</a> <a href="https://redirect.github.com/peaceiris/actions-mdbook/issues/400">#400</a> <a href="https://redirect.github.com/peaceiris/actions-mdbook/issues/400">#400</a> <a href="https://redirect.github.com/peaceiris/actions-mdbook/issues/405">#405</a> <a href="https://redirect.github.com/peaceiris/actions-mdbook/issues/405">#405</a> <a href="https://redirect.github.com/peaceiris/actions-mdbook/issues/411">#411</a> <a href="https://redirect.github.com/peaceiris/actions-mdbook/issues/411">#411</a> <a href="https://redirect.github.com/peaceiris/actions-mdbook/issues/412">#412</a> <a href="https://redirect.github.com/peaceiris/actions-mdbook/issues/412">#412</a> <a href="https://redirect.github.com/peaceiris/actions-mdbook/issues/416">#416</a> <a href="https://redirect.github.com/peaceiris/actions-mdbook/issues/416">#416</a> <a href="https://redirect.github.com/peaceiris/actions-mdbook/issues/435">#435</a> <a href="https://redirect.github.com/peaceiris/actions-mdbook/issues/435">#435</a> <a href="https://redirect.github.com/peaceiris/actions-mdbook/issues/438">#438</a> <a href="https://redirect.github.com/peaceiris/actions-mdbook/issues/438">#438</a> <a href="https://redirect.github.com/peaceiris/actions-mdbook/issues/456">#456</a> <a href="https://redirect.github.com/peaceiris/actions-mdbook/issues/456">#456</a> <a href="https://redirect.github.com/peaceiris/actions-mdbook/issues/460">#460</a> <a href="https://redirect.github.com/peaceiris/actions-mdbook/issues/460">#460</a> <a href="https://redirect.github.com/peaceiris/actions-mdbook/issues/462">#462</a> <a href="https://redirect.github.com/peaceiris/actions-mdbook/issues/462">#462</a> <a href="https://redirect.github.com/peaceiris/actions-mdbook/issues/371">#371</a> <a href="https://redirect.github.com/peaceiris/actions-mdbook/issues/371">#371</a> <a href="https://redirect.github.com/peaceiris/actions-mdbook/issues/437">#437</a> <a href="https://redirect.github.com/peaceiris/actions-mdbook/issues/437">#437</a> <a href="https://redirect.github.com/peaceiris/actions-mdbook/issues/392">#392</a> <a href="https://redirect.github.com/peaceiris/actions-mdbook/issues/392">#392</a> <a href="https://redirect.github.com/peaceiris/actions-mdbook/issues/394">#394</a> <a href="https://redirect.github.com/peaceiris/actions-mdbook/issues/394">#394</a> <a href="https://redirect.github.com/peaceiris/actions-mdbook/issues/396">#396</a> <a href="https://redirect.github.com/peaceiris/actions-mdbook/issues/396">#396</a> <a href="https://redirect.github.com/peaceiris/actions-mdbook/issues/402">#402</a> <a href="https://redirect.github.com/peaceiris/actions-mdbook/issues/402">#402</a> <a href="https://redirect.github.com/peaceiris/actions-mdbook/issues/404">#404</a> <a href="https://redirect.github.com/peaceiris/actions-mdbook/issues/404">#404</a> <a href="https://redirect.github.com/peaceiris/actions-mdbook/issues/436">#436</a> <a href="https://redirect.github.com/peaceiris/actions-mdbook/issues/436">#436</a> <a href="https://redirect.github.com/peaceiris/actions-mdbook/issues/373">#373</a> <a href="https://redirect.github.com/peaceiris/actions-mdbook/issues/373">#373</a> <a href="https://redirect.github.com/peaceiris/actions-mdbook/issues/374">#374</a> <a href="https://redirect.github.com/peaceiris/actions-mdbook/issues/374">#374</a> <a href="https://redirect.github.com/peaceiris/actions-mdbook/issues/377">#377</a> <a href="https://redirect.github.com/peaceiris/actions-mdbook/issues/377">#377</a> <a href="https://redirect.github.com/peaceiris/actions-mdbook/issues/380">#380</a> <a href="https://redirect.github.com/peaceiris/actions-mdbook/issues/380">#380</a> <a href="https://redirect.github.com/peaceiris/actions-mdbook/issues/381">#381</a> <a href="https://redirect.github.com/peaceiris/actions-mdbook/issues/381">#381</a> <a href="https://redirect.github.com/peaceiris/actions-mdbook/issues/383">#383</a> <a href="https://redirect.github.com/peaceiris/actions-mdbook/issues/383">#383</a> <a href="https://redirect.github.com/peaceiris/actions-mdbook/issues/384">#384</a> <a href="https://redirect.github.com/peaceiris/actions-mdbook/issues/384">#384</a> <a href="https://redirect.github.com/peaceiris/actions-mdbook/issues/382">#382</a> <a href="https://redirect.github.com/peaceiris/actions-mdbook/issues/382">#382</a> <a href="https://redirect.github.com/peaceiris/actions-mdbook/issues/466">#466</a> <a href="https://redirect.github.com/peaceiris/actions-mdbook/issues/463">#463</a> <a href="https://redirect.github.com/peaceiris/actions-mdbook/issues/462">#462</a> <a href="https://redirect.github.com/peaceiris/actions-mdbook/issues/460">#460</a> <a href="https://redirect.github.com/peaceiris/actions-mdbook/issues/456">#456</a> <a href="https://redirect.github.com/peaceiris/actions-mdbook/issues/438">#438</a> <a href="https://redirect.github.com/peaceiris/actions-mdbook/issues/437">#437</a></li> </ul> <h3>feat</h3> <ul> <li>bump to node20 runtime (<a href="https://redirect.github.com/peaceiris/actions-mdbook/issues/500">#500</a>) (<a href="https://github.com/peaceiris/actions-mdbook/commit/46c97c2f70ec25e11d870c72c380aa25107c5189">46c97c2</a>), closes <a href="https://redirect.github.com/peaceiris/actions-mdbook/issues/500">#500</a></li> </ul> <h1><a href="https://github.com/peaceiris/actions-mdbook/compare/v1.1.14...v1.2.0">1.2.0</a> (2022-10-23)</h1> <h3>chore</h3> <ul> <li>Add postinstall for husky install (<a href="https://github.com/peaceiris/actions-mdbook/commit/0622767fb2eae5ab3498152162fd85a7714c64a4">0622767</a>)</li> <li>Convert templates to YAML issue forms (<a href="https://github.com/peaceiris/actions-mdbook/commit/12969d1763255c9381d8037359d9ccbc7f7a726c">12969d1</a>)</li> <li>Fix prettier (<a href="https://redirect.github.com/peaceiris/actions-mdbook/issues/397">#397</a>) (<a href="https://github.com/peaceiris/actions-mdbook/commit/44ecb22db74f4d99ed3e5559a242dac1e8de130f">44ecb22</a>), closes <a href="https://redirect.github.com/peaceiris/actions-mdbook/issues/397">#397</a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/peaceiris/actions-mdbook/commit/ee69d230fe19748b7abf22df32acaa93833fad08"><code>ee69d23</code></a> chore(release): 2.0.0</li> <li><a href="https://github.com/peaceiris/actions-mdbook/commit/2d79d45dae1452d6e4c33d4e88f38db81a676774"><code>2d79d45</code></a> chore(release): Add build assets</li> <li><a href="https://github.com/peaceiris/actions-mdbook/commit/c95f05c7f61f6cc7b1abfc2aa4e2fb293c2e0bb7"><code>c95f05c</code></a> chore: revert build</li> <li><a href="https://github.com/peaceiris/actions-mdbook/commit/cb4d902e118c7404c24c2a59b5a619e363e0eed9"><code>cb4d902</code></a> build: bump node to 20.12.1 (<a href="https://redirect.github.com/peaceiris/actions-mdbook/issues/504">#504</a>)</li> <li><a href="https://github.com/peaceiris/actions-mdbook/commit/46c97c2f70ec25e11d870c72c380aa25107c5189"><code>46c97c2</code></a> feat: bump to node20 runtime (<a href="https://redirect.github.com/peaceiris/actions-mdbook/issues/500">#500</a>)</li> <li><a href="https://github.com/peaceiris/actions-mdbook/commit/7b0c98f8f3651db1bc6fd2a3d32031214fe04bd6"><code>7b0c98f</code></a> ci: bump codecov/codecov-action from 3 to 4 (<a href="https://redirect.github.com/peaceiris/actions-mdbook/issues/490">#490</a>)</li> <li><a href="https://github.com/peaceiris/actions-mdbook/commit/60cc2ffbc1a8ee8273b736332bd9729fad7aeecd"><code>60cc2ff</code></a> ci: bump actions/dependency-review-action from 3.0.8 to 3.1.0 (<a href="https://redirect.github.com/peaceiris/actions-mdbook/issues/488">#488</a>)</li> <li><a href="https://github.com/peaceiris/actions-mdbook/commit/c0c1ffeeae553a80d23fe6c4d903f04c20d1efd4"><code>c0c1ffe</code></a> ci: bump actions/checkout from 3 to 4 (<a href="https://redirect.github.com/peaceiris/actions-mdbook/issues/487">#487</a>)</li> <li><a href="https://github.com/peaceiris/actions-mdbook/commit/c6c9e0f19326d4f3e7bbd16d49393d427fc06353"><code>c6c9e0f</code></a> ci: bump actions/setup-node from 3.8.0 to 3.8.1 (<a href="https://redirect.github.com/peaceiris/actions-mdbook/issues/486">#486</a>)</li> <li><a href="https://github.com/peaceiris/actions-mdbook/commit/162a198ca6534c7c8ba31c16e3e14282ca751364"><code>162a198</code></a> ci: bump actions/dependency-review-action from 3.0.7 to 3.0.8 (<a href="https://redirect.github.com/peaceiris/actions-mdbook/issues/485">#485</a>)</li> <li>Additional commits viewable in <a href="https://github.com/peaceiris/actions-mdbook/compare/adeb05db28a0c0004681db83893d56c0388ea9ea...ee69d230fe19748b7abf22df32acaa93833fad08">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=peaceiris/actions-mdbook&package-manager=github_actions&previous-version=1.2.0&new-version=2.0.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* | Bump twine from 4.0.2 to 5.0.0 (#17091)dependabot[bot]2024-04-191-4/+4
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumps [twine](https://github.com/pypa/twine) from 4.0.2 to 5.0.0. <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/pypa/twine/blob/main/docs/changelog.rst">twine's changelog</a>.</em></p> <blockquote> <h2>Twine 5.0.0 (2024-02-10)</h2> <p>Bugfixes ^^^^^^^^</p> <ul> <li>Use <code>email.message</code> instead of <code>cgi</code> as <code>cgi</code> has been deprecated (<code>[#969](https://github.com/pypa/twine/issues/969) &lt;https://github.com/pypa/twine/issues/969&gt;</code>_)</li> </ul> <p>Misc ^^^^</p> <ul> <li><code>[#931](https://github.com/pypa/twine/issues/931) &lt;https://github.com/pypa/twine/issues/931&gt;</code><em>, <code>[#991](https://github.com/pypa/twine/issues/991) &lt;https://github.com/pypa/twine/issues/991&gt;</code></em>, <code>[#1028](https://github.com/pypa/twine/issues/1028) &lt;https://github.com/pypa/twine/issues/1028&gt;</code><em>, <code>[#1040](https://github.com/pypa/twine/issues/1040) &lt;https://github.com/pypa/twine/issues/1040&gt;</code></em></li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/pypa/twine/commit/94f810c54c8bc9d418a9ed64890ca9fa4ec7b59f"><code>94f810c</code></a> Merge pull request <a href="https://redirect.github.com/pypa/twine/issues/1047">#1047</a> from pypa/new-release</li> <li><a href="https://github.com/pypa/twine/commit/09d993ad4de12f3d11ddf25ff4b4db54714f1969"><code>09d993a</code></a> Update linkcheck_ignore setting for docs</li> <li><a href="https://github.com/pypa/twine/commit/ab0ed199154f8ab341d88c313cf4c2e785d770ee"><code>ab0ed19</code></a> Apply 2024 black format</li> <li><a href="https://github.com/pypa/twine/commit/407e6cc0c42eb0dcbc679cb2ffbffcc5dcbc150b"><code>407e6cc</code></a> Build changelog for 5.0.0</li> <li><a href="https://github.com/pypa/twine/commit/6644b862bb4555ddcb375c794ec5161de4a248df"><code>6644b86</code></a> Add missing changelog entries</li> <li><a href="https://github.com/pypa/twine/commit/fe1885f2bf896c1852dedea7733a582c5718bbbc"><code>fe1885f</code></a> Merge pull request <a href="https://redirect.github.com/pypa/twine/issues/1034">#1034</a> from DimitriPapadopoulos/codespell</li> <li><a href="https://github.com/pypa/twine/commit/694bdcf84686c2821ca3168fbc75c2fa5c901188"><code>694bdcf</code></a> Fix typos found by codespell</li> <li><a href="https://github.com/pypa/twine/commit/89ec78c6be4b4b1bb22514bcddef8f6014c1ba53"><code>89ec78c</code></a> Merge pull request <a href="https://redirect.github.com/pypa/twine/issues/1040">#1040</a> from woodruffw-forks/ww/pypi-mandatory-api-tokens</li> <li><a href="https://github.com/pypa/twine/commit/b3b363aae8cf83bfbdf9228f5e80d9bdb4765053"><code>b3b363a</code></a> tests: lintage</li> <li><a href="https://github.com/pypa/twine/commit/6e94d200e20f700fa2e905dd32afeb367d321b67"><code>6e94d20</code></a> tests: more non-PyPI tests</li> <li>Additional commits viewable in <a href="https://github.com/pypa/twine/compare/4.0.2...5.0.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=twine&package-manager=pip&previous-version=4.0.2&new-version=5.0.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* | Bump pygithub from 2.2.0 to 2.3.0 (#17092)dependabot[bot]2024-04-191-3/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumps [pygithub](https://github.com/pygithub/pygithub) from 2.2.0 to 2.3.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/pygithub/pygithub/releases">pygithub's releases</a>.</em></p> <blockquote> <h2>v2.3.0</h2> <h2>New features</h2> <ul> <li>Support oauth for enterprise <a href="https://github.com/EnricoMi"><code>@​EnricoMi</code></a> (<a href="https://redirect.github.com/pygithub/pygithub/issues/2780">#2780</a>)</li> <li>Support creation of Dependabot Organization and Repository Secrets <a href="https://github.com/thomascrowley"><code>@​thomascrowley</code></a> (<a href="https://redirect.github.com/pygithub/pygithub/issues/2874">#2874</a>)</li> </ul> <h2>Improvements</h2> <ul> <li>Create release with optional <code>name</code> and <code>message</code> when <code>generate_release_notes</code> is true <a href="https://github.com/heitorpolidoro"><code>@​heitorpolidoro</code></a> (<a href="https://redirect.github.com/pygithub/pygithub/issues/2868">#2868</a>)</li> <li>Add missing attributes to <code>WorkflowJob</code> <a href="https://github.com/xvega"><code>@​xvega</code></a> (<a href="https://redirect.github.com/pygithub/pygithub/issues/2921">#2921</a>)</li> <li>Add <code>created</code> and <code>check_suite_id</code> filter for Repository Workflow runs <a href="https://github.com/treee111"><code>@​treee111</code></a> (<a href="https://redirect.github.com/pygithub/pygithub/issues/2891">#2891</a>)</li> <li>Assert requester argument type in Auth <a href="https://github.com/EnricoMi"><code>@​EnricoMi</code></a> (<a href="https://redirect.github.com/pygithub/pygithub/issues/2912">#2912</a>)</li> </ul> <h2>Bug Fixes</h2> <ul> <li>Revert having allowed values for <code>add_to_collaborators</code> <a href="https://github.com/jodelasur"><code>@​jodelasur</code></a> (<a href="https://redirect.github.com/pygithub/pygithub/issues/2905">#2905</a>)</li> </ul> <h2>Maintenance</h2> <ul> <li>Fix imports in authentication docs <a href="https://github.com/wurstbrot"><code>@​wurstbrot</code></a> (<a href="https://redirect.github.com/pygithub/pygithub/issues/2923">#2923</a>)</li> <li>CI: add docformatter to precommit <a href="https://github.com/Borda"><code>@​Borda</code></a> (<a href="https://redirect.github.com/pygithub/pygithub/issues/2614">#2614</a>)</li> <li>Add <code>.swp</code> fils to <code>.gitignore</code> <a href="https://github.com/boomanaiden154"><code>@​boomanaiden154</code></a> (<a href="https://redirect.github.com/pygithub/pygithub/issues/2903">#2903</a>)</li> <li>Fix instructions building docs in <code>CONTRIBUTING.md</code> <a href="https://github.com/wakamex"><code>@​wakamex</code></a> (<a href="https://redirect.github.com/pygithub/pygithub/issues/2900">#2900</a>)</li> <li>Explicitly name the modules built in <code>pyproject.toml</code> <a href="https://github.com/treee111"><code>@​treee111</code></a> (<a href="https://redirect.github.com/pygithub/pygithub/issues/2894">#2894</a>)</li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/PyGithub/PyGithub/blob/main/doc/changes.rst">pygithub's changelog</a>.</em></p> <blockquote> <h2>Version 2.3.0 (March 21, 2024)</h2> <p>New features ^^^^^^^^^^^^</p> <ul> <li>Support OAuth for enterprise (<a href="https://redirect.github.com/pygithub/pygithub/issues/2780">#2780</a>) (e4106e00)</li> <li>Support creation of Dependabot Organization and Repository Secrets (<a href="https://redirect.github.com/pygithub/pygithub/issues/2874">#2874</a>) (0784f835)</li> </ul> <p>Improvements ^^^^^^^^^^^^</p> <ul> <li>Create release with optional name and message when generate_release_notes is true (<a href="https://redirect.github.com/pygithub/pygithub/issues/2868">#2868</a>) (d65fc30d)</li> <li>Add missing attributes to WorkflowJob (<a href="https://redirect.github.com/pygithub/pygithub/issues/2921">#2921</a>) (9e092458)</li> <li>Add <code>created</code> and <code>check_suite_id</code> filter for Repository WorkflowRuns (<a href="https://redirect.github.com/pygithub/pygithub/issues/2891">#2891</a>) (c788985c)</li> <li>Assert requester argument type in Auth (<a href="https://redirect.github.com/pygithub/pygithub/issues/2912">#2912</a>) (0b8435fc)</li> </ul> <p>Bug Fixes ^^^^^^^^^</p> <ul> <li>Revert having allowed values for add_to_collaborators (<a href="https://redirect.github.com/pygithub/pygithub/issues/2905">#2905</a>) (b542438e)</li> </ul> <p>Maintenance ^^^^^^^^^^^</p> <ul> <li>Fix imports in authentication docs (<a href="https://redirect.github.com/pygithub/pygithub/issues/2923">#2923</a>) (e3d36535)</li> <li>CI: add docformatter to precommit (<a href="https://redirect.github.com/pygithub/pygithub/issues/2614">#2614</a>) (96ad19ae)</li> <li>Add .swp files to gitignore (<a href="https://redirect.github.com/pygithub/pygithub/issues/2903">#2903</a>) (af529abe)</li> <li>Fix instructions building docs in CONTRIBUTING.md (<a href="https://redirect.github.com/pygithub/pygithub/issues/2900">#2900</a>) (cd8e528d)</li> <li>Explicitly name the modules built in pyproject.toml (<a href="https://redirect.github.com/pygithub/pygithub/issues/2894">#2894</a>) (4d461734)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/PyGithub/PyGithub/commit/7266e812ed2976ea36a4303edecfe5d75522343f"><code>7266e81</code></a> Release v2.3.0 (<a href="https://redirect.github.com/pygithub/pygithub/issues/2926">#2926</a>)</li> <li><a href="https://github.com/PyGithub/PyGithub/commit/e4106e00fc669cd89a8d9c68c6d977195041d80e"><code>e4106e0</code></a> Support oauth for enterprise (<a href="https://redirect.github.com/pygithub/pygithub/issues/2780">#2780</a>)</li> <li><a href="https://github.com/PyGithub/PyGithub/commit/d65fc30d398fe329bb264f7e277ac371bb20c2f2"><code>d65fc30</code></a> Create release with optional name and message when generate_release_notes is ...</li> <li><a href="https://github.com/PyGithub/PyGithub/commit/0784f8354d1421f26ad198e782f97584a523c462"><code>0784f83</code></a> Support creation of Dependabot Organization and Repository Secrets (<a href="https://redirect.github.com/pygithub/pygithub/issues/2874">#2874</a>)</li> <li><a href="https://github.com/PyGithub/PyGithub/commit/9e092458a5d369525bb72a580b5b1068e5ab7332"><code>9e09245</code></a> Add missing attributes to WorkflowJob (<a href="https://redirect.github.com/pygithub/pygithub/issues/2921">#2921</a>)</li> <li><a href="https://github.com/PyGithub/PyGithub/commit/e3d365358d7149ec1f57ffc4c083df1a0fa76279"><code>e3d3653</code></a> Fix imports in authentication docs (<a href="https://redirect.github.com/pygithub/pygithub/issues/2923">#2923</a>)</li> <li><a href="https://github.com/PyGithub/PyGithub/commit/c788985c9ff190999543f10435131b8f51d1ddfe"><code>c788985</code></a> Add <code>created</code> and <code>check_suite_id</code> filter for Repository WorkflowRuns (<a href="https://redirect.github.com/pygithub/pygithub/issues/2891">#2891</a>)</li> <li><a href="https://github.com/PyGithub/PyGithub/commit/0b8435fccbcc98404f08e146b6e259bd20065c98"><code>0b8435f</code></a> Assert requester argument type in Auth (<a href="https://redirect.github.com/pygithub/pygithub/issues/2912">#2912</a>)</li> <li><a href="https://github.com/PyGithub/PyGithub/commit/96ad19aec782c879d72f2bea80fb8a3932761be9"><code>96ad19a</code></a> CI: add docformatter to precommit (<a href="https://redirect.github.com/pygithub/pygithub/issues/2614">#2614</a>)</li> <li><a href="https://github.com/PyGithub/PyGithub/commit/b542438e319fde3608469675f74e1eb87fc1c5cd"><code>b542438</code></a> Revert having allowed values for add_to_collaborators (<a href="https://redirect.github.com/pygithub/pygithub/issues/2905">#2905</a>)</li> <li>Additional commits viewable in <a href="https://github.com/pygithub/pygithub/compare/v2.2.0...v2.3.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=pygithub&package-manager=pip&previous-version=2.2.0&new-version=2.3.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* | Bump pyasn1-modules from 0.3.0 to 0.4.0 (#17093)dependabot[bot]2024-04-191-5/+5
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumps [pyasn1-modules](https://github.com/pyasn1/pyasn1-modules) from 0.3.0 to 0.4.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/pyasn1/pyasn1-modules/releases">pyasn1-modules's releases</a>.</em></p> <blockquote> <h2>Release 0.4.0</h2> <p>It's a major release where we drop Python 2 support entirely. The most significant changes are:</p> <ul> <li>Added support for Python 3.11, 3.12</li> <li>Removed support for EOL Pythons 2.7, 3.6, 3.7</li> </ul> <p>A full list of changes can be seen in the <a href="https://github.com/pyasn1/pyasn1-modules/blob/main/CHANGES.txt">CHANGELOG</a>.</p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/pyasn1/pyasn1-modules/blob/main/CHANGES.txt">pyasn1-modules's changelog</a>.</em></p> <blockquote> <h2>Revision 0.4.0, released 26-03-2024</h2> <ul> <li>Added support for Python 3.11, 3.12</li> <li>Removed support for EOL Pythons 2.7, 3.6, 3.7</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/pyasn1/pyasn1-modules/commit/98b1e268a30be4b2d6efa5c69eae772edc442c7e"><code>98b1e26</code></a> Prepare release 0.4.0</li> <li><a href="https://github.com/pyasn1/pyasn1-modules/commit/0339532a082ef54b2ac2f4ae72dc6a3a129a4a19"><code>0339532</code></a> Drop support for EOL Python 3.6 and 3.7 (<a href="https://redirect.github.com/pyasn1/pyasn1-modules/issues/14">#14</a>)</li> <li><a href="https://github.com/pyasn1/pyasn1-modules/commit/9ec54091547330aaf994e82ba759cb1fe071e070"><code>9ec5409</code></a> Drop support for EOL Python 2.7 (<a href="https://redirect.github.com/pyasn1/pyasn1-modules/issues/12">#12</a>)</li> <li><a href="https://github.com/pyasn1/pyasn1-modules/commit/252ac00bf1e119a044cc579ffade30164e2cdfff"><code>252ac00</code></a> Add support for Python 3.12 (<a href="https://redirect.github.com/pyasn1/pyasn1-modules/issues/11">#11</a>)</li> <li>See full diff in <a href="https://github.com/pyasn1/pyasn1-modules/compare/v0.3.0...v0.4.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=pyasn1-modules&package-manager=pip&previous-version=0.3.0&new-version=0.4.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* | Bump ruff from 0.3.5 to 0.3.7 (#17094)dependabot[bot]2024-04-192-20/+20
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumps [ruff](https://github.com/astral-sh/ruff) from 0.3.5 to 0.3.7. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/astral-sh/ruff/releases">ruff's releases</a>.</em></p> <blockquote> <h2>v0.3.7</h2> <h2>Changes</h2> <h3>Preview features</h3> <ul> <li>[<code>flake8-bugbear</code>] Implement <code>loop-iterator-mutation</code> (<code>B909</code>) (<a href="https://redirect.github.com/astral-sh/ruff/pull/9578">#9578</a>)</li> <li>[<code>pylint</code>] Implement rule to prefer augmented assignment (<code>PLR6104</code>) (<a href="https://redirect.github.com/astral-sh/ruff/pull/9932">#9932</a>)</li> </ul> <h3>Bug fixes</h3> <ul> <li>Avoid TOCTOU errors in cache initialization (<a href="https://redirect.github.com/astral-sh/ruff/pull/10884">#10884</a>)</li> <li>[<code>pylint</code>] Recode <code>nan-comparison</code> rule to <code>W0177</code> (<a href="https://redirect.github.com/astral-sh/ruff/pull/10894">#10894</a>)</li> <li>[<code>pylint</code>] Reverse min-max logic in <code>if-stmt-min-max</code> (<a href="https://redirect.github.com/astral-sh/ruff/pull/10890">#10890</a>)</li> </ul> <h2>Contributors</h2> <ul> <li><a href="https://github.com/carljm"><code>@​carljm</code></a></li> <li><a href="https://github.com/charliermarsh"><code>@​charliermarsh</code></a></li> <li><a href="https://github.com/lshi18"><code>@​lshi18</code></a></li> <li><a href="https://github.com/mimre25"><code>@​mimre25</code></a></li> </ul> <h2>v0.3.6</h2> <h2>Changes</h2> <h3>Preview features</h3> <ul> <li>[<code>pylint</code>] Implement <code>bad-staticmethod-argument</code> (<code>PLW0211</code>) (<a href="https://redirect.github.com/astral-sh/ruff/pull/10781">#10781</a>)</li> <li>[<code>pylint</code>] Implement <code>if-stmt-min-max</code> (<code>PLR1730</code>, <code>PLR1731</code>) (<a href="https://redirect.github.com/astral-sh/ruff/pull/10002">#10002</a>)</li> <li>[<code>pyupgrade</code>] Replace <code>str,Enum</code> multiple inheritance with <code>StrEnum</code> <code>UP042</code> (<a href="https://redirect.github.com/astral-sh/ruff/pull/10713">#10713</a>)</li> <li>[<code>refurb</code>] Implement <code>if-expr-instead-of-or-operator</code> (<code>FURB110</code>) (<a href="https://redirect.github.com/astral-sh/ruff/pull/10687">#10687</a>)</li> <li>[<code>refurb</code>] Implement <code>int-on-sliced-str</code> (<code>FURB166</code>) (<a href="https://redirect.github.com/astral-sh/ruff/pull/10650">#10650</a>)</li> <li>[<code>refurb</code>] Implement <code>write-whole-file</code> (<code>FURB103</code>) (<a href="https://redirect.github.com/astral-sh/ruff/pull/10802">#10802</a>)</li> <li>[<code>refurb</code>] Support <code>itemgetter</code> in <code>reimplemented-operator</code> (<code>FURB118</code>) (<a href="https://redirect.github.com/astral-sh/ruff/pull/10526">#10526</a>)</li> <li>[<code>flake8_comprehensions</code>] Add <code>sum</code>/<code>min</code>/<code>max</code> to unnecessary comprehension check (<code>C419</code>) (<a href="https://redirect.github.com/astral-sh/ruff/pull/10759">#10759</a>)</li> </ul> <h3>Rule changes</h3> <ul> <li>[<code>pydocstyle</code>] Require capitalizing docstrings where the first sentence is a single word (<code>D403</code>) (<a href="https://redirect.github.com/astral-sh/ruff/pull/10776">#10776</a>)</li> <li>[<code>pycodestyle</code>] Ignore annotated lambdas in class scopes (<code>E731</code>) (<a href="https://redirect.github.com/astral-sh/ruff/pull/10720">#10720</a>)</li> <li>[<code>flake8-pyi</code>] Various improvements to PYI034 (<a href="https://redirect.github.com/astral-sh/ruff/pull/10807">#10807</a>)</li> <li>[<code>flake8-slots</code>] Flag subclasses of call-based <code>typing.NamedTuple</code>s as well as subclasses of <code>collections.namedtuple()</code> (<code>SLOT002</code>) (<a href="https://redirect.github.com/astral-sh/ruff/pull/10808">#10808</a>)</li> <li>[<code>pyflakes</code>] Allow forward references in class bases in stub files (<code>F821</code>) (<a href="https://redirect.github.com/astral-sh/ruff/pull/10779">#10779</a>)</li> <li>[<code>pygrep-hooks</code>] Improve <code>blanket-noqa</code> error message (<code>PGH004</code>) (<a href="https://redirect.github.com/astral-sh/ruff/pull/10851">#10851</a>)</li> </ul> <h3>CLI</h3> <ul> <li>Support <code>FORCE_COLOR</code> env var (<a href="https://redirect.github.com/astral-sh/ruff/pull/10839">#10839</a>)</li> </ul> <h3>Configuration</h3> <ul> <li>Support negated patterns in <code>[extend-]per-file-ignores</code> (<a href="https://redirect.github.com/astral-sh/ruff/pull/10852">#10852</a>)</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md">ruff's changelog</a>.</em></p> <blockquote> <h2>0.3.7</h2> <h3>Preview features</h3> <ul> <li>[<code>flake8-bugbear</code>] Implement <code>loop-iterator-mutation</code> (<code>B909</code>) (<a href="https://redirect.github.com/astral-sh/ruff/pull/9578">#9578</a>)</li> <li>[<code>pylint</code>] Implement rule to prefer augmented assignment (<code>PLR6104</code>) (<a href="https://redirect.github.com/astral-sh/ruff/pull/9932">#9932</a>)</li> </ul> <h3>Bug fixes</h3> <ul> <li>Avoid TOCTOU errors in cache initialization (<a href="https://redirect.github.com/astral-sh/ruff/pull/10884">#10884</a>)</li> <li>[<code>pylint</code>] Recode <code>nan-comparison</code> rule to <code>W0177</code> (<a href="https://redirect.github.com/astral-sh/ruff/pull/10894">#10894</a>)</li> <li>[<code>pylint</code>] Reverse min-max logic in <code>if-stmt-min-max</code> (<a href="https://redirect.github.com/astral-sh/ruff/pull/10890">#10890</a>)</li> </ul> <h2>0.3.6</h2> <h3>Preview features</h3> <ul> <li>[<code>pylint</code>] Implement <code>bad-staticmethod-argument</code> (<code>PLW0211</code>) (<a href="https://redirect.github.com/astral-sh/ruff/pull/10781">#10781</a>)</li> <li>[<code>pylint</code>] Implement <code>if-stmt-min-max</code> (<code>PLR1730</code>, <code>PLR1731</code>) (<a href="https://redirect.github.com/astral-sh/ruff/pull/10002">#10002</a>)</li> <li>[<code>pyupgrade</code>] Replace <code>str,Enum</code> multiple inheritance with <code>StrEnum</code> <code>UP042</code> (<a href="https://redirect.github.com/astral-sh/ruff/pull/10713">#10713</a>)</li> <li>[<code>refurb</code>] Implement <code>if-expr-instead-of-or-operator</code> (<code>FURB110</code>) (<a href="https://redirect.github.com/astral-sh/ruff/pull/10687">#10687</a>)</li> <li>[<code>refurb</code>] Implement <code>int-on-sliced-str</code> (<code>FURB166</code>) (<a href="https://redirect.github.com/astral-sh/ruff/pull/10650">#10650</a>)</li> <li>[<code>refurb</code>] Implement <code>write-whole-file</code> (<code>FURB103</code>) (<a href="https://redirect.github.com/astral-sh/ruff/pull/10802">#10802</a>)</li> <li>[<code>refurb</code>] Support <code>itemgetter</code> in <code>reimplemented-operator</code> (<code>FURB118</code>) (<a href="https://redirect.github.com/astral-sh/ruff/pull/10526">#10526</a>)</li> <li>[<code>flake8_comprehensions</code>] Add <code>sum</code>/<code>min</code>/<code>max</code> to unnecessary comprehension check (<code>C419</code>) (<a href="https://redirect.github.com/astral-sh/ruff/pull/10759">#10759</a>)</li> </ul> <h3>Rule changes</h3> <ul> <li>[<code>pydocstyle</code>] Require capitalizing docstrings where the first sentence is a single word (<code>D403</code>) (<a href="https://redirect.github.com/astral-sh/ruff/pull/10776">#10776</a>)</li> <li>[<code>pycodestyle</code>] Ignore annotated lambdas in class scopes (<code>E731</code>) (<a href="https://redirect.github.com/astral-sh/ruff/pull/10720">#10720</a>)</li> <li>[<code>flake8-pyi</code>] Various improvements to PYI034 (<a href="https://redirect.github.com/astral-sh/ruff/pull/10807">#10807</a>)</li> <li>[<code>flake8-slots</code>] Flag subclasses of call-based <code>typing.NamedTuple</code>s as well as subclasses of <code>collections.namedtuple()</code> (<code>SLOT002</code>) (<a href="https://redirect.github.com/astral-sh/ruff/pull/10808">#10808</a>)</li> <li>[<code>pyflakes</code>] Allow forward references in class bases in stub files (<code>F821</code>) (<a href="https://redirect.github.com/astral-sh/ruff/pull/10779">#10779</a>)</li> <li>[<code>pygrep-hooks</code>] Improve <code>blanket-noqa</code> error message (<code>PGH004</code>) (<a href="https://redirect.github.com/astral-sh/ruff/pull/10851">#10851</a>)</li> </ul> <h3>CLI</h3> <ul> <li>Support <code>FORCE_COLOR</code> env var (<a href="https://redirect.github.com/astral-sh/ruff/pull/10839">#10839</a>)</li> </ul> <h3>Configuration</h3> <ul> <li>Support negated patterns in <code>[extend-]per-file-ignores</code> (<a href="https://redirect.github.com/astral-sh/ruff/pull/10852">#10852</a>)</li> </ul> <h3>Bug fixes</h3> <ul> <li>[<code>flake8-import-conventions</code>] Accept non-aliased (but correct) import in <code>unconventional-import-alias</code> (<code>ICN001</code>) (<a href="https://redirect.github.com/astral-sh/ruff/pull/10729">#10729</a>)</li> <li>[<code>flake8-quotes</code>] Add semantic model flag when inside f-string replacement field (<a href="https://redirect.github.com/astral-sh/ruff/pull/10766">#10766</a>)</li> <li>[<code>pep8-naming</code>] Recursively resolve <code>TypeDicts</code> for N815 violations (<a href="https://redirect.github.com/astral-sh/ruff/pull/10719">#10719</a>)</li> <li>[<code>flake8-quotes</code>] Respect <code>Q00*</code> ignores in <code>flake8-quotes</code> rules (<a href="https://redirect.github.com/astral-sh/ruff/pull/10728">#10728</a>)</li> <li>[<code>flake8-simplify</code>] Show negated condition in <code>needless-bool</code> diagnostics (<code>SIM103</code>) (<a href="https://redirect.github.com/astral-sh/ruff/pull/10854">#10854</a>)</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/astral-sh/ruff/commit/2e37cf6b3b4b873ad9ffe9728bccdf134862b768"><code>2e37cf6</code></a> Bump version to v0.3.7 (<a href="https://redirect.github.com/astral-sh/ruff/issues/10895">#10895</a>)</li> <li><a href="https://github.com/astral-sh/ruff/commit/a9e43930086af3ae3c974e4ecec2ed1b328fa8e6"><code>a9e4393</code></a> [<code>pylint</code>] Implement rule to prefer augmented assignment (<code>PLR6104</code>) (<a href="https://redirect.github.com/astral-sh/ruff/issues/9932">#9932</a>)</li> <li><a href="https://github.com/astral-sh/ruff/commit/312f43475f14cc723c8935e4c909b17510382bb8"><code>312f434</code></a> [<code>pylint</code>] Recode <code>nan-comparison</code> rule to <code>W0177</code> (<a href="https://redirect.github.com/astral-sh/ruff/issues/10894">#10894</a>)</li> <li><a href="https://github.com/astral-sh/ruff/commit/563daa8a86e5fe38dcdcfba5cc7a93a84bc2d550"><code>563daa8</code></a> Fix docs and add overlap test for negated per-file-ignores (<a href="https://redirect.github.com/astral-sh/ruff/issues/10863">#10863</a>)</li> <li><a href="https://github.com/astral-sh/ruff/commit/7ae15c6e0a127ebc7c8fa899dbd821b546abeb41"><code>7ae15c6</code></a> Fix comment copy/paste typo in newtype_index (<a href="https://redirect.github.com/astral-sh/ruff/issues/10892">#10892</a>)</li> <li><a href="https://github.com/astral-sh/ruff/commit/03899dcba37c7429084486600ed7f3b12bea20dc"><code>03899dc</code></a> [<code>flake8-bugbear</code>] Implement <code>loop-iterator-mutation</code> (<code>B909</code>) (<a href="https://redirect.github.com/astral-sh/ruff/issues/9578">#9578</a>)</li> <li><a href="https://github.com/astral-sh/ruff/commit/25f5a8b2019260eba3889d9800a60950a810a43e"><code>25f5a8b</code></a> Struct not tuple for compiled per-file ignores (<a href="https://redirect.github.com/astral-sh/ruff/issues/10864">#10864</a>)</li> <li><a href="https://github.com/astral-sh/ruff/commit/e7d1d43f39ebb7258713edad9aae190c868d5ea2"><code>e7d1d43</code></a> [<code>pylint</code>] Reverse min-max logic in <code>if-stmt-min-max</code> (<a href="https://redirect.github.com/astral-sh/ruff/issues/10890">#10890</a>)</li> <li><a href="https://github.com/astral-sh/ruff/commit/9b9098c3dca7475cbe10fd8d8f7152c392a25924"><code>9b9098c</code></a> Downgrade ESLint to v8 (<a href="https://redirect.github.com/astral-sh/ruff/issues/10888">#10888</a>)</li> <li><a href="https://github.com/astral-sh/ruff/commit/0cc154c2a9ab08568a232f0c67b756c97976332d"><code>0cc154c</code></a> Avoid TOCTOU errors in cache initialization (<a href="https://redirect.github.com/astral-sh/ruff/issues/10884">#10884</a>)</li> <li>Additional commits viewable in <a href="https://github.com/astral-sh/ruff/compare/v0.3.5...v0.3.7">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=ruff&package-manager=pip&previous-version=0.3.5&new-version=0.3.7)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* | Bump anyhow from 1.0.81 to 1.0.82 (#17095)dependabot[bot]2024-04-191-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumps [anyhow](https://github.com/dtolnay/anyhow) from 1.0.81 to 1.0.82. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/dtolnay/anyhow/releases">anyhow's releases</a>.</em></p> <blockquote> <h2>1.0.82</h2> <ul> <li>Documentation improvements</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/dtolnay/anyhow/commit/074bdea1c7b419e4f1267ebb9eac4d6068870122"><code>074bdea</code></a> Release 1.0.82</li> <li><a href="https://github.com/dtolnay/anyhow/commit/47a4fbfa365050b293d9e3898aadb42a47a571e6"><code>47a4fbf</code></a> Merge pull request <a href="https://redirect.github.com/dtolnay/anyhow/issues/360">#360</a> from dtolnay/docensure</li> <li><a href="https://github.com/dtolnay/anyhow/commit/c5af1db020696716ab0de65b663d2370ac4de4d4"><code>c5af1db</code></a> Make ensure's doc comment apply to the cfg(not(doc)) macro too</li> <li><a href="https://github.com/dtolnay/anyhow/commit/bebc7a2fe4ced785da951332fc3b259a5a52d24f"><code>bebc7a2</code></a> Revert &quot;Temporarily disable miri on doctests&quot;</li> <li><a href="https://github.com/dtolnay/anyhow/commit/f2c4db9b47e37fdeef8dc0e1560b3d15f1208fbe"><code>f2c4db9</code></a> Update ui test suite to nightly-2024-03-31</li> <li><a href="https://github.com/dtolnay/anyhow/commit/028cbeedf5e94970c088eb14e325744086a7b768"><code>028cbee</code></a> Explicitly install a Rust toolchain for cargo-outdated job</li> <li><a href="https://github.com/dtolnay/anyhow/commit/7a4cac5192686ca47c40ba9a8dd81f201686375e"><code>7a4cac5</code></a> Merge pull request <a href="https://redirect.github.com/dtolnay/anyhow/issues/358">#358</a> from dtolnay/workspacewrapper</li> <li><a href="https://github.com/dtolnay/anyhow/commit/939db012c2294403db6a1be21b15c0f2750b8b15"><code>939db01</code></a> Apply RUSTC_WORKSPACE_WRAPPER</li> <li><a href="https://github.com/dtolnay/anyhow/commit/9f84a37551de7e7d67dc27a6e1c8518aa21f1d93"><code>9f84a37</code></a> Temporarily disable miri on doctests</li> <li><a href="https://github.com/dtolnay/anyhow/commit/45e5a589e9548d1045ce7518e78f890a83c33580"><code>45e5a58</code></a> Ignore dead code lint in test</li> <li>Additional commits viewable in <a href="https://github.com/dtolnay/anyhow/compare/1.0.81...1.0.82">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=anyhow&package-manager=cargo&previous-version=1.0.81&new-version=1.0.82)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* | Parse json validation (#16923)Gordan Trevis2024-04-186-47/+220
| | | | | | | | Co-authored-by: Andrew Morgan <1342360+anoadragon453@users.noreply.github.com>
* | Helpers to transform Twisted requests to Rust http Requests/Responses (#17081)Quentin Gliech2024-04-186-2/+321
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This adds functions to transform a Twisted request to the `http::Request`, and then to send back an `http::Response` through it. It also imports the SynapseError exception so that we can throw that from Rust code directly Example usage of this would be: ```rust use crate::http::{http_request_from_twisted, http_response_to_twisted, HeaderMapPyExt}; fn handler(twisted_request: &PyAny) -> PyResult<()> { let request = http_request_from_twisted(twisted_request)?; let ua: headers::UserAgent = request.headers().typed_get_required()?; if whatever { return Err((crate::errors::SynapseError::new( StatusCode::UNAUTHORIZED, "Whatever".to_owned "M_UNAUTHORIZED", None, None, ))); } let response = Response::new("hello".as_bytes()); http_response_to_twisted(twisted_request, response)?; Ok(()) } ```
* | Fix remote receipts for events we don't have (#17096)Erik Johnston2024-04-172-1/+6
| | | | | | Introduced in #17032
* | Support for MSC4108 via delegation (#17086)Quentin Gliech2024-04-176-8/+84
| | | | | | | | | | | | | | This adds support for MSC4108 via delegation, similar to what has been done for MSC3886 --------- Co-authored-by: Hugh Nimmo-Smith <hughns@element.io>
* | Bump minimum required Rust version to 1.66.0 (#17079)Quentin Gliech2024-04-173-10/+11
| |
* | Parse Integer negative value validation (#16920)Gordan Trevis2024-04-169-158/+89
| |
* | Merge branch 'master' into developOlivier Wilkinson (reivilibre)2024-04-163-1/+14
|\|
| * 1.105.0 v1.105.0Olivier Wilkinson (reivilibre)2024-04-163-1/+14
| |
* | bugfix: make msc3967 idempotent (#16943)Kegan Dougal2024-04-156-3/+102
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | MSC3967 was updated recently to make it more robust to network failures: > there is an existing cross-signing master key and it exactly matches the cross-signing master key provided in the request body. If there are any additional keys provided in the request (self signing key, user signing key) they MUST also match the existing keys stored on the server. In other words, the request contains no new keys. If there are new keys, UIA MUST be performed. https://github.com/matrix-org/matrix-spec-proposals/blob/hughns/device-signing-upload-uia/proposals/3967-device-signing-upload-uia.md#proposal This covers the case where the 200 OK is lost in transit so the client retries the upload, only to then get UIA'd. Complement tests: https://github.com/matrix-org/complement/pull/713 - passing example https://github.com/element-hq/synapse/actions/runs/7976948122/job/21778795094?pr=16943#step:7:8820 ### Pull Request Checklist <!-- Please read https://element-hq.github.io/synapse/latest/development/contributing_guide.html before submitting your pull request --> * [x] Pull request is based on the develop branch * [x] Pull request includes a [changelog file](https://element-hq.github.io/synapse/latest/development/contributing_guide.html#changelog). The entry should: - Be a short description of your change which makes sense to users. "Fixed a bug that prevented receiving messages from other servers." instead of "Moved X method from `EventStore` to `EventWorkerStore`.". - Use markdown where necessary, mostly for `code blocks`. - End with either a period (.) or an exclamation mark (!). - Start with a capital letter. - Feel free to credit yourself, by adding a sentence "Contributed by @github_username." or "Contributed by [Your Name]." to the end of the entry. * [x] [Code style](https://element-hq.github.io/synapse/latest/code_style.html) is correct (run the [linters](https://element-hq.github.io/synapse/latest/development/contributing_guide.html#run-the-linters)) --------- Co-authored-by: reivilibre <oliverw@matrix.org>
* | Use receipts `event_stream_ordering` instead of joins (#17032)Nick Mills-Barrett2024-04-123-19/+12
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Resurrecting https://github.com/matrix-org/synapse/pull/13918. This should reduce IOPs incurred by joining to the events table to lookup stream ordering, which happens in many receipt handling code paths. Like the previous PR I believe sufficient time has passed between the original migration in DB schema 72 and now to merge this as-is. It's highly unlikely that both the migration is still ongoing AND (active) users still have any receipts prior to that date. In the unlikely event there is a receipt without a populated `event_stream_ordering` synapse will behave just as it does now when receipts exist for events that don't (yet): for push action calculation the receipts are just ignored. I've removed the validation on event IDs as this is already covered here: https://github.com/element-hq/synapse/blob/59ceabcb9798793cd4312fdbcced4e612aeda84d/synapse/handlers/receipts.py#L189-L192
* | Fix mypy on latest Twisted release (#17036)Erik Johnston2024-04-114-4/+7
|/ | | | | | `ITransport.abortConnection` isn't a thing, but `HTTPChannel.forceAbortClient` calls it, so lets just use that Fixes https://github.com/element-hq/synapse/issues/16728
* 1.105.0rc1 v1.105.0rc1Andrew Morgan2024-04-1119-17/+39
|
* Stabilize support for MSC4010: push rules & account data. (#17022)Patrick Cloke2024-04-093-28/+7
| | | | | | | See [MSC4010](https://github.com/matrix-org/matrix-spec-proposals/pull/4010), but this is pretty much just removing an experimental flag. Part of #17021
* Stabliize support for MSC3981: recurse /relations (#17023)Patrick Cloke2024-04-095-19/+9
| | | | | | | See [MSC3981](https://github.com/matrix-org/matrix-spec-proposals/pull/3981), this pretty much just removes flags though. Part of #17021
* Also check if first event matches the last in prev batch (#17066)Erik Johnston2024-04-093-7/+109
| | | | | Refinement of #17064 cc @richvdh
* #17039 Issue: Update base_rules.rs (#17043)Sumiran Pokharel2024-04-092-4/+5
| | | | Co-authored-by: Olivier Wilkinson (reivilibre) <oliverw@matrix.org>
* Fix PR #16677, a parameter was missing in a function call (#17033)Mathieu Velten2024-04-092-0/+2
| | | | Co-authored-by: Andrew Morgan <1342360+anoadragon453@users.noreply.github.com>
* Add forgotten schema delta (#17054)Erik Johnston2024-04-093-7/+23
| | | This should have been in #17045. Whoops.
* Bump packaging from 23.2 to 24.0 (#17027)dependabot[bot]2024-04-091-3/+3
|
* Bump serde_json from 1.0.114 to 1.0.115 (#17041)dependabot[bot]2024-04-091-2/+2
|
* Bump regex from 1.10.3 to 1.10.4 (#17028)dependabot[bot]2024-04-081-2/+2
| | | | Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* Bump ruff from 0.3.2 to 0.3.5 (#17060)dependabot[bot]2024-04-082-20/+20
| | | | Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* Bump types-pillow from 10.2.0.20240125 to 10.2.0.20240406 (#17061)dependabot[bot]2024-04-081-3/+3
| | | | Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* Bump typing-extensions from 4.9.0 to 4.11.0 (#17062)dependabot[bot]2024-04-081-3/+3
| | | | Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* Bump types-requests from 2.31.0.20240125 to 2.31.0.20240406 (#17063)dependabot[bot]2024-04-081-4/+4
| | | | Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* Fixups to #17064 (#17065)Erik Johnston2024-04-082-0/+4
| | | | | Forget a line, and an empty batch is trivially linear. c.f. #17064
* Add back fast path for non-gappy syncs (#17064)Erik Johnston2024-04-082-0/+37
| | | | | | | | | | | PR #16942 removed an invalid optimisation that avoided pulling out state for non-gappy syncs. This causes a large increase in DB usage. c.f. #16941 for why that optimisation was wrong. However, we can still optimise in the simple case where the events in the timeline are a linear chain without any branching/merging of the DAG. cc. @richvdh
* Pull out fewer receipts from DB when doing push (#17049)Erik Johnston2024-04-052-22/+103
| | | | | | | Before we were pulling out *all* read receipts for a user for every event we pushed. Instead let's only pull out the relevant receipts. This also pulled out the event rows for each receipt, causing load on the events table.
* Fix bug in calculating state for non-gappy syncs (#16942)Richard van der Hoff2024-04-045-56/+145
| | | | | | | | | Unfortunately, the optimisation we applied here for non-gappy syncs is not actually valid. Fixes https://github.com/element-hq/synapse/issues/16941. ~~Based on https://github.com/element-hq/synapse/pull/16930.~~ Requires https://github.com/matrix-org/sytest/pull/1374.
* `/sync`: fix bug in calculating `state` response (#16930)Richard van der Hoff2024-04-043-41/+94
| | | | | | | Fix a long-standing issue which could cause state to be omitted from the sync response if the last event was filtered out. Fixes: https://github.com/element-hq/synapse/issues/16928
* Fix bug in `/sync` response for archived rooms (#16932)Richard van der Hoff2024-04-044-34/+314
| | | | | | | | | | | | This PR fixes a very, very niche edge-case, but I've got some more work coming which will otherwise make the problem worse. The bug happens when the syncing user leaves a room, and has a sync filter which includes "left" rooms, but sets the timeline limit to 0. In that case, the state returned in the `state` section is calculated incorrectly. The fix is to pass a token corresponding to the point that the user leaves the room through to `compute_state_delta`.
* Add missing index to `access_tokens` table (#17045)Erik Johnston2024-04-042-0/+8
| | | This was causing sequential scans when using refresh tokens.
* Merge branch 'master' into developErik Johnston2024-04-024-2/+14
|\
| * 1.104.0 v1.104.0 github/release-v1.104 release-v1.104Erik Johnston2024-04-024-2/+14
| |
* | Refactor chain fetching (#17044)Erik Johnston2024-04-022-96/+67
| | | | | | Since these queries are duplicated in two places.
* | Fixups to new push stream (#17038)Erik Johnston2024-03-289-12/+27
| | | | | | Follow on from #17037
* | Add support for moving `/push_rules` off of main process (#17037)Erik Johnston2024-03-2810-40/+133
|/
* Fixup changelog v1.104.0rc1Erik Johnston2024-03-261-3/+3
|
* Fixup changelogErik Johnston2024-03-261-1/+1
|
* Merge remote-tracking branch 'origin/develop' into release-v1.104Erik Johnston2024-03-262-0/+8
|\
| * Fix OIDC login regression (#17031)Erik Johnston2024-03-262-0/+8
| | | | | | | | | | Requests may require a User-Agent header, and the change in #16972 accidentally removed it, resulting in requests getting rejected causing login to fail.
* | 1.104.0rc1Erik Johnston2024-03-2625-24/+68
|/
* Ensure that pending to-device events are sent over federation at startup ↵Richard van der Hoff2024-03-224-31/+127
| | | | | | | | | | | | | | (#16925) Fixes https://github.com/element-hq/synapse/issues/16680, as well as a related bug, where servers which we had *never* successfully sent an event to would not be retried. In order to fix the case of pending to-device messages, we hook into the existing `wake_destinations_needing_catchup` process, by extending it to look for destinations that have pending to-device messages. The federation transmission loop then attempts to send the pending to-device messages as normal.
* Add OIDC config to add extra parameters to the authorize URL (#16971)Mathieu Velten2024-03-224-6/+26
|
* Do not refuse to set read_marker if previous event_id is in wrong room (#16990)SpiritCroc2024-03-214-9/+12
|
* Fix reject knocks on deactivating account (#17010)Hanadi2024-03-214-12/+117
|
* generate configuration with correct user in start.py for docker (#16978)Sam Wedgwood2024-03-212-7/+9
|
* Bump dawidd6/action-download-artifact from 3.1.2 to 3.1.4 (#17008)dependabot[bot]2024-03-211-1/+1
|
* OIDC: try to JWT decode userinfo response if JSON parsing failed (#16972)Mathieu Velten2024-03-212-4/+29
|
* Patch the db conn pool sooner in tests (#17017)Richard van der Hoff2024-03-212-53/+60
| | | | | | | | | When running unit tests, we patch the database connection pool so that it runs queries "synchronously". This is ok, except that if any queries are launched before we do the patching, those queries get left in limbo and never complete. To fix this, let's change the way we do the switcheroo, by patching out the method which creates the connection pool in the first place.
* Bump netaddr from 0.9.0 to 1.2.1 (#17006)dependabot[bot]2024-03-211-4/+7
|
* Remove the hardcoded poetry version from contributing guide (#17002)Tadeusz Sośnierz2024-03-212-1/+2
|
* Add note to using --curses under sqlite porting (#17012)grahhnt2024-03-211-1/+1
|
* Update link, in installation guide, for docker hub synapse images (#17001)Eirik2024-03-211-1/+1
|
* Bump types-jsonschema from 4.21.0.20240118 to 4.21.0.20240311 (#17007)dependabot[bot]2024-03-211-3/+3
|
* Prevent `start_for_complement.sh` from setting `START_POSTGRES` to `false` ↵Andrew Morgan2024-03-213-3/+5
| | | | | | | | | | when it's already set (#16985) I have a use case where I'd like the Synapse image to start up a postgres instance that I can use, but don't want to force Synapse to use postgres as well. This commit prevents postgres from being started when it has already been explicitly enabled elsewhere.
* Update power level default for public rooms (#16907)Shay2024-03-193-1/+20
|
* Improve event validation (#16908)Shay2024-03-196-3/+180
| | | As the title states.
* Bump pydantic from 2.6.0 to 2.6.4 (#17004)dependabot[bot]2024-03-191-84/+84
|
* Bump anyhow from 1.0.80 to 1.0.81 (#17009)dependabot[bot]2024-03-191-2/+2
|
* Bump jinja2 from 3.1.2 to 3.1.3 (#17005)dependabot[bot]2024-03-191-3/+3
|
* Bump types-pyopenssl from 23.3.0.0 to 24.0.0.20240311 (#17003)dependabot[bot]2024-03-191-4/+4
|
* Pass module API to OIDC mapping provider (#16974)Mathieu Velten2024-03-193-4/+18
| | | | As done for SAML mapping provider, let's pass the module API to the OIDC one so the mapper can do more logic in its code.
* Specify IP subnet literals in canonical form (#16953)V024602024-03-192-2/+3
| | | | | This is needed, because the netaddr package removed support for the implicit prefix form in version 1.0.0: https://github.com/netaddr/netaddr/pull/360
* Clarify docs for some room state functions (#16950)Richard van der Hoff2024-03-192-3/+6
| | | | State *before* an event is different to state *after* that event, and people tend to assume the wrong one.
* Merge branch 'master' into developOlivier Wilkinson (reivilibre)2024-03-193-1/+14
|\
| * 1.103.0 v1.103.0 github/release-v1.103 release-v1.103Olivier Wilkinson (reivilibre)2024-03-193-1/+14
| |
* | `/sync`: Fix edge-case in calculating the "device_lists" response (#16949)Richard van der Hoff2024-03-142-2/+10
| | | | | | | | | | Fixes https://github.com/element-hq/synapse/issues/16948. If the `join` and the `leave` are in the same sync response, we need to count them as a "left" user.
* | Split up `SyncHandler.compute_state_delta` (#16929)Richard van der Hoff2024-03-142-145/+238
| | | | | | | | | | | | This is a huge method, which melts my brain. This is a non-functional change which lays some groundwork for future work in this area.
* | Sort versions in the documentation version picker appropriately. (#16966)Will Hunt2024-03-142-3/+24
| | | | | | | | | | | | Fixes #16964 This adds a proper sorter for versions which takes into account semantic versions, rather than just relying on localeCompare.
* | upgrade.md: fix grammatical errors (#16965)Richard van der Hoff2024-03-142-3/+4
| | | | | | | | comma splice "rollback" is a noun
* | Add query to update local cache of a remote user's device list to docs (#16892)Andrew Morgan2024-03-142-0/+10
| |
* | Improve lock performance when a lot of locks are waiting (#16840)Mathieu Velten2024-03-144-7/+74
| | | | | | | | | | | | | | | | | | | | | | | | When a lot of locks are waiting for a single lock, notifying all locks independently with `call_later` on each release is really costly and incurs some kind of async contention, where the CPU is spinning a lot for not much. The included test is taking around 30s before the change, and 0.5s after. It was found following failing tests with https://github.com/element-hq/synapse/pull/16827.
* | Bump types-psycopg2 from 2.9.21.16 to 2.9.21.20240311 (#16995)dependabot[bot]2024-03-141-4/+4
| |
* | Bump pyo3 from 0.20.2 to 0.20.3 (#16962)dependabot[bot]2024-03-141-10/+18
| |
* | Multi-worker-docker-container: disable log buffering (#16919)Richard van der Hoff2024-03-132-2/+6
| | | | | | | | | | | | | | | | | | | | | | Background: we have a `matrixdotorg/synapse-workers` docker image, which is intended for running multiple workers within the same container. That image includes a `prefix-log` script which, for each line printed to stdout or stderr by one of the processes, prepends the name of the process. This commit disables buffering in that script, so that lines are logged quickly after they are printed. This makes it much easier to understand the output, since they then come out in a natural order.
* | Bump ruff from 0.1.14 to 0.3.2 (#16994)dependabot[bot]2024-03-133-27/+20
| |
* | Bump mypy from 1.5.1 to 1.8.0 (#16901)dependabot[bot]2024-03-1312-59/+49
| |
* | Bump dawidd6/action-download-artifact from 3.1.1 to 3.1.2 (#16960)dependabot[bot]2024-03-131-1/+1
| |
* | Bump cryptography from 41.0.7 to 42.0.5 (#16958)dependabot[bot]2024-03-131-31/+40
| |
* | Bump serde_json from 1.0.113 to 1.0.114 (#16961)dependabot[bot]2024-03-131-2/+2
| |
* | Bump serde from 1.0.196 to 1.0.197 (#16963)dependabot[bot]2024-03-131-4/+4
| |
* | Bump log from 0.4.20 to 0.4.21 (#16977)dependabot[bot]2024-03-131-2/+2
| |
* | Bump black from 23.10.1 to 24.2.0 (#16936)dependabot[bot]2024-03-1374-509/+407
| |
* | Raise poetry-core version cap to 1.9.0 (#16986)V024602024-03-132-1/+2
|/ | | | A new poetry-core version was released. See if CI is happy. Required for the latest Fedora Synapse package.
* Update changelog v1.103.0rc1Erik Johnston2024-03-122-1/+1
|
* Merge remote-tracking branch 'origin/develop' into release-v1.103Erik Johnston2024-03-122-9/+35
|\
| * Prevent locking up while processing batched_auth_events (#16968)Gerrit Gogel2024-03-122-9/+35
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This PR aims to fix #16895, caused by a regression in #7 and not fixed by #16903. The PR #16903 only fixes a starvation issue, where the CPU isn't released. There is a second issue, where the execution is blocked. This theory is supported by the flame graphs provided in #16895 and the fact that I see the CPU usage reducing and far below the limit. Since the changes in #7, the method `check_state_independent_auth_rules` is called with the additional parameter `batched_auth_events`: https://github.com/element-hq/synapse/blob/6fa13b4f927c10b5f4e9495be746ec28849f5cb6/synapse/handlers/federation_event.py#L1741-L1743 It makes the execution enter this if clause, introduced with #15195 https://github.com/element-hq/synapse/blob/6fa13b4f927c10b5f4e9495be746ec28849f5cb6/synapse/event_auth.py#L178-L189 There are two issues in the above code snippet. First, there is the blocking issue. I'm not entirely sure if this is a deadlock, starvation, or something different. In the beginning, I thought the copy operation was responsible. It wasn't. Then I investigated the nested `store.get_events` inside the function `update`. This was also not causing the blocking issue. Only when I replaced the set difference operation (`-` ) with a list comprehension, the blocking was resolved. Creating and comparing sets with a very large amount of events seems to be problematic. This is how the flamegraph looks now while persisting outliers. As you can see, the execution no longer locks up in the above function. ![output_2024-02-28_13-59-40](https://github.com/element-hq/synapse/assets/13143850/6db9c9ac-484f-47d0-bdde-70abfbd773ec) Second, the copying here doesn't serve any purpose, because only a shallow copy is created. This means the same objects from the original dict are referenced. This fails the intention of protecting these objects from mutation. The review of the original PR https://github.com/matrix-org/synapse/pull/15195 had an extensive discussion about this matter. Various approaches to copying the auth_events were attempted: 1) Implementing a deepcopy caused issues due to builtins.EventInternalMetadata not being pickleable. 2) Creating a dict with new objects akin to a deepcopy. 3) Creating a dict with new objects containing only necessary attributes. Concluding, there is no easy way to create an actual copy of the objects. Opting for a deepcopy can significantly strain memory and CPU resources, making it an inefficient choice. I don't see why the copy is necessary in the first place. Therefore I'm proposing to remove it altogether. After these changes, I was able to successfully join these rooms, without the main worker locking up: - #synapse:matrix.org - #element-android:matrix.org - #element-web:matrix.org - #ecips:matrix.org - #ipfs-chatter:ipfs.io - #python:matrix.org - #matrix:matrix.org
* | 1.103.0rc1Erik Johnston2024-03-129-7/+35
|/
* deactivated flag refactored to filter deactivated users. (#16874)Alexander Fechler2024-03-116-8/+95
| | | | Co-authored-by: Andrew Morgan <1342360+anoadragon453@users.noreply.github.com>
* Stabilize support for Retry-After header (MSC4014) (#16947)Patrick Cloke2024-03-085-21/+5
|
* Fix joining remote rooms when a `on_new_event` callback is registered (#16973)Quentin Gliech2024-03-064-16/+21
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Since Synapse 1.76.0, any module which registers a `on_new_event` callback would brick the ability to join remote rooms. This is because this callback tried to get the full state of the room, which would end up in a deadlock. Related: https://github.com/matrix-org/synapse-auto-accept-invite/issues/18 The following module would brick the ability to join remote rooms: ```python from typing import Any, Dict, Literal, Union import logging from synapse.module_api import ModuleApi, EventBase logger = logging.getLogger(__name__) class MyModule: def __init__(self, config: None, api: ModuleApi): self._api = api self._config = config self._api.register_third_party_rules_callbacks( on_new_event=self.on_new_event, ) async def on_new_event(self, event: EventBase, _state_map: Any) -> None: logger.info(f"Received new event: {event}") @staticmethod def parse_config(_config: Dict[str, Any]) -> None: return None ``` This is technically a breaking change, as we are now passing partial state on the `on_new_event` callback. However, this callback was broken for federated rooms since 1.76.0, and local rooms have full state anyway, so it's unlikely that it would change anything.
* Merge remote-tracking branch 'origin/release-v1.102' into developAndrew Morgan2024-03-055-148/+128
|\
| * Switch #16979 changelog type from internal change to bugfix v1.102.0 github/release-v1.102 release-v1.102Andrew Morgan2024-03-051-1/+1
| |
| * 1.102.0Andrew Morgan2024-03-054-2/+14
| |
| * Revert "Improve DB performance of calculating badge counts for push. ↵Andrew Morgan2024-03-053-147/+115
| | | | | | | | (#16756)" (#16979)