d895a64f19
Bump lxml from 4.9.3 to 5.1.0 ( #16813 )
2024-01-15 13:53:54 +00:00
a83a270069
Bump immutabledict from 4.0.0 to 4.1.0 ( #16812 )
2024-01-15 13:53:33 +00:00
79a88b5fc9
Bump pillow from 10.1.0 to 10.2.0 ( #16802 )
2024-01-11 11:25:23 +00:00
c9ac102668
Bump types-commonmark from 0.9.2.4 to 0.9.2.20240106 ( #16797 )
...
Bumps [types-commonmark](https://github.com/python/typeshed ) from
0.9.2.4 to 0.9.2.20240106.
<details>
<summary>Commits</summary>
<ul>
<li>See full diff in <a
href="https://github.com/python/typeshed/commits ">compare view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-01-10 15:06:35 +00:00
5d2e606076
Bump sentry-sdk from 1.35.0 to 1.39.1 ( #16799 )
...
Bumps [sentry-sdk](https://github.com/getsentry/sentry-python ) from
1.35.0 to 1.39.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/getsentry/sentry-python/releases ">sentry-sdk's
releases</a>.</em></p>
<blockquote>
<h2>1.39.1</h2>
<h3>Various fixes & improvements</h3>
<ul>
<li>Fix psycopg2 detection in the Django integration (<a
href="https://redirect.github.com/getsentry/sentry-python/issues/2593 ">#2593</a>)
by <a
href="https://github.com/sentrivana "><code>@sentrivana</code></a></li>
<li>Filter out empty string releases (<a
href="https://redirect.github.com/getsentry/sentry-python/issues/2591 ">#2591</a>)
by <a
href="https://github.com/sentrivana "><code>@sentrivana</code></a></li>
<li>Fixed local var not present when there is an error in a user's
<code>error_sampler</code> function (<a
href="https://redirect.github.com/getsentry/sentry-python/issues/2511 ">#2511</a>)
by <a
href="https://github.com/antonpirker "><code>@antonpirker</code></a></li>
<li>Fixed typing in <code>aiohttp</code> (<a
href="https://redirect.github.com/getsentry/sentry-python/issues/2590 ">#2590</a>)
by <a
href="https://github.com/antonpirker "><code>@antonpirker</code></a></li>
</ul>
<h2>1.39.0</h2>
<h3>Various fixes & improvements</h3>
<ul>
<li>Add support for cluster clients from Redis SDK (<a
href="https://redirect.github.com/getsentry/sentry-python/issues/2394 ">#2394</a>)
by <a href="https://github.com/md384 "><code>@md384</code></a></li>
<li>Improve location reporting for timer metrics (<a
href="https://redirect.github.com/getsentry/sentry-python/issues/2552 ">#2552</a>)
by <a
href="https://github.com/mitsuhiko "><code>@mitsuhiko</code></a></li>
<li>Fix Celery <code>TypeError</code> with no-argument
<code>apply_async</code> (<a
href="https://redirect.github.com/getsentry/sentry-python/issues/2575 ">#2575</a>)
by <a
href="https://github.com/szokeasaurusrex "><code>@szokeasaurusrex</code></a></li>
<li>Fix Lambda integration with EventBridge source (<a
href="https://redirect.github.com/getsentry/sentry-python/issues/2546 ">#2546</a>)
by <a
href="https://github.com/davidcroda "><code>@davidcroda</code></a></li>
<li>Add max tries to Spotlight (<a
href="https://redirect.github.com/getsentry/sentry-python/issues/2571 ">#2571</a>)
by <a href="https://github.com/hazAT "><code>@hazAT</code></a></li>
<li>Handle <code>os.path.devnull</code> access issues (<a
href="https://redirect.github.com/getsentry/sentry-python/issues/2579 ">#2579</a>)
by <a
href="https://github.com/sentrivana "><code>@sentrivana</code></a></li>
<li>Change <code>code.filepath</code> frame picking logic (<a
href="https://redirect.github.com/getsentry/sentry-python/issues/2568 ">#2568</a>)
by <a
href="https://github.com/sentrivana "><code>@sentrivana</code></a></li>
<li>Trigger AWS Lambda tests on label (<a
href="https://redirect.github.com/getsentry/sentry-python/issues/2538 ">#2538</a>)
by <a
href="https://github.com/sentrivana "><code>@sentrivana</code></a></li>
<li>Run permissions step on pull_request_target but not push (<a
href="https://redirect.github.com/getsentry/sentry-python/issues/2548 ">#2548</a>)
by <a
href="https://github.com/sentrivana "><code>@sentrivana</code></a></li>
<li>Hash AWS Lambda test functions based on current revision (<a
href="https://redirect.github.com/getsentry/sentry-python/issues/2557 ">#2557</a>)
by <a
href="https://github.com/sentrivana "><code>@sentrivana</code></a></li>
<li>Update Django version in tests (<a
href="https://redirect.github.com/getsentry/sentry-python/issues/2562 ">#2562</a>)
by <a
href="https://github.com/sentrivana "><code>@sentrivana</code></a></li>
<li>Make metrics tests non-flaky (<a
href="https://redirect.github.com/getsentry/sentry-python/issues/2572 ">#2572</a>)
by <a
href="https://github.com/antonpirker "><code>@antonpirker</code></a></li>
</ul>
<h2>1.38.0</h2>
<h3>Various fixes & improvements</h3>
<ul>
<li>Only add trace context to checkins and do not run
<code>event_processors</code> for checkins (<a
href="https://redirect.github.com/getsentry/sentry-python/issues/2536 ">#2536</a>)
by <a
href="https://github.com/antonpirker "><code>@antonpirker</code></a></li>
<li>Metric span summaries (<a
href="https://redirect.github.com/getsentry/sentry-python/issues/2522 ">#2522</a>)
by <a
href="https://github.com/mitsuhiko "><code>@mitsuhiko</code></a></li>
<li>Add source context to code locations (<a
href="https://redirect.github.com/getsentry/sentry-python/issues/2539 ">#2539</a>)
by <a
href="https://github.com/jan-auer "><code>@jan-auer</code></a></li>
<li>Use in-app filepath instead of absolute path (<a
href="https://redirect.github.com/getsentry/sentry-python/issues/2541 ">#2541</a>)
by <a
href="https://github.com/antonpirker "><code>@antonpirker</code></a></li>
<li>Switch to <code>jinja2</code> for generating CI yamls (<a
href="https://redirect.github.com/getsentry/sentry-python/issues/2534 ">#2534</a>)
by <a
href="https://github.com/sentrivana "><code>@sentrivana</code></a></li>
</ul>
<h2>1.37.1</h2>
<h3>Various fixes & improvements</h3>
<ul>
<li>Fix <code>NameError</code> on <code>parse_version</code> with
eventlet (<a
href="https://redirect.github.com/getsentry/sentry-python/issues/2532 ">#2532</a>)
by <a
href="https://github.com/sentrivana "><code>@sentrivana</code></a></li>
<li>build(deps): bump checkouts/data-schemas from <code>68def1e</code>
to <code>e9f7d58</code> (<a
href="https://redirect.github.com/getsentry/sentry-python/issues/2501 ">#2501</a>)
by <a
href="https://github.com/dependabot "><code>@dependabot</code></a></li>
</ul>
<h2>1.37.0</h2>
<h3>Various fixes & improvements</h3>
<ul>
<li>
<p>Move installed modules code to utils (<a
href="https://redirect.github.com/getsentry/sentry-python/issues/2429 ">#2429</a>)
by <a
href="https://github.com/sentrivana "><code>@sentrivana</code></a></p>
<p>Note: We moved the internal function
<code>_get_installed_modules</code> from
<code>sentry_sdk.integrations.modules</code> to
<code>sentry_sdk.utils</code>.
So if you use this function you have to update your imports</p>
</li>
<li>
<p>Add code locations for metrics (<a
href="https://redirect.github.com/getsentry/sentry-python/issues/2526 ">#2526</a>)
by <a href="https://github.com/jan-auer "><code>@jan-auer</code></a></p>
</li>
<li>
<p>Add query source to DB spans (<a
href="https://redirect.github.com/getsentry/sentry-python/issues/2521 ">#2521</a>)
by <a
href="https://github.com/antonpirker "><code>@antonpirker</code></a></p>
</li>
<li>
<p>Send events to Spotlight sidecar (<a
href="https://redirect.github.com/getsentry/sentry-python/issues/2524 ">#2524</a>)
by <a href="https://github.com/HazAT "><code>@HazAT</code></a></p>
</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/getsentry/sentry-python/blob/master/CHANGELOG.md ">sentry-sdk's
changelog</a>.</em></p>
<blockquote>
<h2>1.39.1</h2>
<h3>Various fixes & improvements</h3>
<ul>
<li>Fix psycopg2 detection in the Django integration (<a
href="https://redirect.github.com/getsentry/sentry-python/issues/2593 ">#2593</a>)
by <a
href="https://github.com/sentrivana "><code>@sentrivana</code></a></li>
<li>Filter out empty string releases (<a
href="https://redirect.github.com/getsentry/sentry-python/issues/2591 ">#2591</a>)
by <a
href="https://github.com/sentrivana "><code>@sentrivana</code></a></li>
<li>Fixed local var not present when there is an error in a user's
<code>error_sampler</code> function (<a
href="https://redirect.github.com/getsentry/sentry-python/issues/2511 ">#2511</a>)
by <a
href="https://github.com/antonpirker "><code>@antonpirker</code></a></li>
<li>Fixed typing in <code>aiohttp</code> (<a
href="https://redirect.github.com/getsentry/sentry-python/issues/2590 ">#2590</a>)
by <a
href="https://github.com/antonpirker "><code>@antonpirker</code></a></li>
</ul>
<h2>1.39.0</h2>
<h3>Various fixes & improvements</h3>
<ul>
<li>Add support for cluster clients from Redis SDK (<a
href="https://redirect.github.com/getsentry/sentry-python/issues/2394 ">#2394</a>)
by <a href="https://github.com/md384 "><code>@md384</code></a></li>
<li>Improve location reporting for timer metrics (<a
href="https://redirect.github.com/getsentry/sentry-python/issues/2552 ">#2552</a>)
by <a
href="https://github.com/mitsuhiko "><code>@mitsuhiko</code></a></li>
<li>Fix Celery <code>TypeError</code> with no-argument
<code>apply_async</code> (<a
href="https://redirect.github.com/getsentry/sentry-python/issues/2575 ">#2575</a>)
by <a
href="https://github.com/szokeasaurusrex "><code>@szokeasaurusrex</code></a></li>
<li>Fix Lambda integration with EventBridge source (<a
href="https://redirect.github.com/getsentry/sentry-python/issues/2546 ">#2546</a>)
by <a
href="https://github.com/davidcroda "><code>@davidcroda</code></a></li>
<li>Add max tries to Spotlight (<a
href="https://redirect.github.com/getsentry/sentry-python/issues/2571 ">#2571</a>)
by <a href="https://github.com/hazAT "><code>@hazAT</code></a></li>
<li>Handle <code>os.path.devnull</code> access issues (<a
href="https://redirect.github.com/getsentry/sentry-python/issues/2579 ">#2579</a>)
by <a
href="https://github.com/sentrivana "><code>@sentrivana</code></a></li>
<li>Change <code>code.filepath</code> frame picking logic (<a
href="https://redirect.github.com/getsentry/sentry-python/issues/2568 ">#2568</a>)
by <a
href="https://github.com/sentrivana "><code>@sentrivana</code></a></li>
<li>Trigger AWS Lambda tests on label (<a
href="https://redirect.github.com/getsentry/sentry-python/issues/2538 ">#2538</a>)
by <a
href="https://github.com/sentrivana "><code>@sentrivana</code></a></li>
<li>Run permissions step on pull_request_target but not push (<a
href="https://redirect.github.com/getsentry/sentry-python/issues/2548 ">#2548</a>)
by <a
href="https://github.com/sentrivana "><code>@sentrivana</code></a></li>
<li>Hash AWS Lambda test functions based on current revision (<a
href="https://redirect.github.com/getsentry/sentry-python/issues/2557 ">#2557</a>)
by <a
href="https://github.com/sentrivana "><code>@sentrivana</code></a></li>
<li>Update Django version in tests (<a
href="https://redirect.github.com/getsentry/sentry-python/issues/2562 ">#2562</a>)
by <a
href="https://github.com/sentrivana "><code>@sentrivana</code></a></li>
<li>Make metrics tests non-flaky (<a
href="https://redirect.github.com/getsentry/sentry-python/issues/2572 ">#2572</a>)
by <a
href="https://github.com/antonpirker "><code>@antonpirker</code></a></li>
</ul>
<h2>1.38.0</h2>
<h3>Various fixes & improvements</h3>
<ul>
<li>Only add trace context to checkins and do not run
<code>event_processors</code> for checkins (<a
href="https://redirect.github.com/getsentry/sentry-python/issues/2536 ">#2536</a>)
by <a
href="https://github.com/antonpirker "><code>@antonpirker</code></a></li>
<li>Metric span summaries (<a
href="https://redirect.github.com/getsentry/sentry-python/issues/2522 ">#2522</a>)
by <a
href="https://github.com/mitsuhiko "><code>@mitsuhiko</code></a></li>
<li>Add source context to code locations (<a
href="https://redirect.github.com/getsentry/sentry-python/issues/2539 ">#2539</a>)
by <a
href="https://github.com/jan-auer "><code>@jan-auer</code></a></li>
<li>Use in-app filepath instead of absolute path (<a
href="https://redirect.github.com/getsentry/sentry-python/issues/2541 ">#2541</a>)
by <a
href="https://github.com/antonpirker "><code>@antonpirker</code></a></li>
<li>Switch to <code>jinja2</code> for generating CI yamls (<a
href="https://redirect.github.com/getsentry/sentry-python/issues/2534 ">#2534</a>)
by <a
href="https://github.com/sentrivana "><code>@sentrivana</code></a></li>
</ul>
<h2>1.37.1</h2>
<h3>Various fixes & improvements</h3>
<ul>
<li>Fix <code>NameError</code> on <code>parse_version</code> with
eventlet (<a
href="https://redirect.github.com/getsentry/sentry-python/issues/2532 ">#2532</a>)
by <a
href="https://github.com/sentrivana "><code>@sentrivana</code></a></li>
<li>build(deps): bump checkouts/data-schemas from <code>68def1e</code>
to <code>e9f7d58</code> (<a
href="https://redirect.github.com/getsentry/sentry-python/issues/2501 ">#2501</a>)
by <a
href="https://github.com/dependabot "><code>@dependabot</code></a></li>
</ul>
<h2>1.37.0</h2>
<h3>Various fixes & improvements</h3>
<ul>
<li>
<p>Move installed modules code to utils (<a
href="https://redirect.github.com/getsentry/sentry-python/issues/2429 ">#2429</a>)
by <a
href="https://github.com/sentrivana "><code>@sentrivana</code></a></p>
<p>Note: We moved the internal function
<code>_get_installed_modules</code> from
<code>sentry_sdk.integrations.modules</code> to
<code>sentry_sdk.utils</code>.</p>
</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="2b46ec3ba2d634c059ead76fa98332https://redirect.github.com/getsentry/sentry-python/issues/2593 ">#2593</a>)</li>
<li><a
href="64c42ca975https://redirect.github.com/getsentry/sentry-python/issues/2591 ">#2591</a>)</li>
<li><a
href="47313123d8https://redirect.github.com/getsentry/sentry-python/issues/2511 ">#2511</a>)</li>
<li><a
href="4deaa38413https://redirect.github.com/getsentry/sentry-python/issues/2590 ">#2590</a>)</li>
<li><a
href="507d4098fbc6cd6360d8c3a60a60a27df152ba3dhttps://redirect.github.com/getsentry/sentry-python/issues/2568 ">#2568</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/getsentry/sentry-python/compare/1.35.0...1.39.1 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-01-10 14:38:21 +00:00
b96ce9229d
Bump types-jsonschema from 4.20.0.0 to 4.20.0.20240105 ( #16800 )
...
Bumps [types-jsonschema](https://github.com/python/typeshed ) from
4.20.0.0 to 4.20.0.20240105.
<details>
<summary>Commits</summary>
<ul>
<li>See full diff in <a
href="https://github.com/python/typeshed/commits ">compare view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-01-10 13:27:45 +00:00
a0f0fdf4d4
Bump authlib from 1.2.1 to 1.3.0 ( #16801 )
...
Bumps [authlib](https://github.com/lepture/authlib ) from 1.2.1 to 1.3.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/lepture/authlib/releases ">authlib's
releases</a>.</em></p>
<blockquote>
<h2>Version 1.3.0</h2>
<p><strong>Bug fixes</strong></p>
<ul>
<li>Restore AuthorizationServer.create_authorization_response behavior,
via <a
href="https://redirect.github.com/lepture/authlib/issues/558 ">#558</a>
by <a
href="https://github.com/TurnrDev "><code>@TurnrDev</code></a></li>
<li>Include leeway in validate_iat() for JWT, via <a
href="https://redirect.github.com/lepture/authlib/issues/565 ">#565</a>
by <a href="https://github.com/dhallam "><code>@dhallam</code></a></li>
<li>Fix encode_client_secret_basic, via <a
href="https://redirect.github.com/lepture/authlib/issues/594 ">#594</a>
by <a href="https://github.com/Prilkop "><code>@Prilkop</code></a></li>
<li>Use single key in JWK if JWS does not specify kid, via <a
href="https://redirect.github.com/lepture/authlib/issues/596 ">#596</a>
by <a
href="https://github.com/dklimpel "><code>@dklimpel</code></a></li>
<li>Fix error when RFC9068 JWS has no scope field, via <a
href="https://redirect.github.com/lepture/authlib/issues/598 ">#598</a>
by <a
href="https://github.com/tanguilp "><code>@tanguilp</code></a></li>
<li>Get werkzeug version using importlib, via <a
href="https://redirect.github.com/lepture/authlib/issues/591 ">#591</a>
by <a
href="https://github.com/Sparrow0hawk "><code>@Sparrow0hawk</code></a></li>
</ul>
<p><strong>Breaking changes</strong></p>
<ul>
<li>RFC9068 implementation, via <a
href="https://redirect.github.com/lepture/authlib/issues/586 ">#586</a>
by <a href="https://github.com/azmeuk "><code>@azmeuk</code></a>.</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/lepture/authlib/blob/master/docs/changelog.rst ">authlib's
changelog</a>.</em></p>
<blockquote>
<h2>Version 1.3.0</h2>
<p><strong>Released on Dec 17, 2023</strong></p>
<ul>
<li>Restore
<code>AuthorizationServer.create_authorization_response</code> behavior,
via :PR:<code>558</code></li>
<li>Include <code>leeway</code> in <code>validate_iat()</code> for JWT,
via :PR:<code>565</code></li>
<li>Fix <code>encode_client_secret_basic</code>, via
:PR:<code>594</code></li>
<li>Use single key in JWK if JWS does not specify <code>kid</code>, via
:PR:<code>596</code></li>
<li>Fix error when RFC9068 JWS has no scope field, via
:PR:<code>598</code></li>
<li>Get werkzeug version using importlib, via :PR:<code>591</code></li>
</ul>
<p><strong>New features</strong>:</p>
<ul>
<li>RFC9068 implementation, via :PR:<code>586</code>, by <a
href="https://github.com/azmeuk "><code>@azmeuk</code></a>.</li>
</ul>
<p><strong>Breaking changes</strong>:</p>
<ul>
<li>End support for python 3.7</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="a7d68b4c3ba26f1d09932d66702dechttps://redirect.github.com/lepture/authlib/issues/591 ">#591</a>
from Sparrow0hawk/patch-2</li>
<li><a
href="0f8e08738b3ffc950d5ba2543b9ad0c7e1b2d41d04e83f60aehttps://redirect.github.com/lepture/authlib/issues/598 ">#598</a>
from tanguilp/fix-rfc9068-no-scope-in-jws</li>
<li><a
href="092f688b0dac58322655https://github.com/lepture/authlib/compare/v1.2.1...v1.3.0 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-01-10 11:30:21 +00:00
1b9319209c
Bump isort from 5.13.0 to 5.13.1 ( #16752 )
...
Bumps [isort](https://github.com/pycqa/isort ) from 5.13.0 to 5.13.1.
- [Release notes](https://github.com/pycqa/isort/releases )
- [Changelog](https://github.com/PyCQA/isort/blob/main/CHANGELOG.md )
- [Commits](https://github.com/pycqa/isort/compare/5.13.0...5.13.1 )
---
updated-dependencies:
- dependency-name: isort
dependency-type: direct:development
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-12-12 10:27:06 +00:00
9d22fe1fb9
Bump types-setuptools from 68.2.0.2 to 69.0.0.0 ( #16744 )
...
Bumps [types-setuptools](https://github.com/python/typeshed ) from 68.2.0.2 to 69.0.0.0.
- [Commits](https://github.com/python/typeshed/commits )
---
updated-dependencies:
- dependency-name: types-setuptools
dependency-type: direct:development
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-12-12 10:01:01 +00:00
8782ec13f3
Bump isort from 5.12.0 to 5.13.0 ( #16745 )
...
Bumps [isort](https://github.com/pycqa/isort ) from 5.12.0 to 5.13.0.
- [Release notes](https://github.com/pycqa/isort/releases )
- [Changelog](https://github.com/PyCQA/isort/blob/main/CHANGELOG.md )
- [Commits](https://github.com/pycqa/isort/compare/5.12.0...5.13.0 )
---
updated-dependencies:
- dependency-name: isort
dependency-type: direct:development
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-12-12 10:00:45 +00:00
8275953626
Bump ruff from 0.1.6 to 0.1.7 ( #16746 )
...
Bumps [ruff](https://github.com/astral-sh/ruff ) from 0.1.6 to 0.1.7.
- [Release notes](https://github.com/astral-sh/ruff/releases )
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md )
- [Commits](https://github.com/astral-sh/ruff/compare/v0.1.6...v0.1.7 )
---
updated-dependencies:
- dependency-name: ruff
dependency-type: direct:development
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-12-12 10:00:18 +00:00
438df1c37f
Bump pydantic from 2.5.1 to 2.5.2 ( #16747 )
...
Bumps [pydantic](https://github.com/pydantic/pydantic ) from 2.5.1 to 2.5.2.
- [Release notes](https://github.com/pydantic/pydantic/releases )
- [Changelog](https://github.com/pydantic/pydantic/blob/v2.5.2/HISTORY.md )
- [Commits](https://github.com/pydantic/pydantic/compare/v2.5.1...v2.5.2 )
---
updated-dependencies:
- dependency-name: pydantic
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-12-12 09:58:29 +00:00
043bea8593
Bump immutabledict from 3.0.0 to 4.0.0 ( #16743 )
...
Bumps [immutabledict](https://github.com/corenting/immutabledict ) from 3.0.0 to 4.0.0.
- [Release notes](https://github.com/corenting/immutabledict/releases )
- [Changelog](https://github.com/corenting/immutabledict/blob/master/CHANGELOG.md )
- [Commits](https://github.com/corenting/immutabledict/compare/v3.0.0...v4.0.0 )
---
updated-dependencies:
- dependency-name: immutabledict
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-12-12 09:57:48 +00:00
15c46cf86a
Bump phonenumbers from 8.13.23 to 8.13.26 ( #16722 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-12-04 12:32:06 +00:00
2686a05766
Bump idna from 3.4 to 3.6 ( #16720 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-12-04 11:34:53 +00:00
c915b91840
Bump cryptography from 41.0.6 to 41.0.7 ( #16721 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-12-04 11:30:15 +00:00
dd02c6340e
Bump sphinx-autodoc2 from 0.4.2 to 0.5.0 ( #16723 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-12-04 11:17:42 +00:00
a5c14346fa
Bump types-jsonschema from 4.19.0.4 to 4.20.0.0 ( #16724 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-12-04 11:16:45 +00:00
6f2be7794e
Bump cryptography from 41.0.5 to 41.0.6 ( #16703 )
2023-11-28 19:57:48 -05:00
b3e8d503c7
Bump prometheus-client from 0.18.0 to 0.19.0 ( #16691 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-11-27 11:27:27 +00:00
62e96a2929
Bump pyasn1 from 0.5.0 to 0.5.1 ( #16689 )
...
Bumps [pyasn1](https://github.com/pyasn1/pyasn1 ) from 0.5.0 to 0.5.1.
- [Release notes](https://github.com/pyasn1/pyasn1/releases )
- [Changelog](https://github.com/pyasn1/pyasn1/blob/main/CHANGES.rst )
- [Commits](https://github.com/pyasn1/pyasn1/compare/v0.5.0...v0.5.1 )
---
updated-dependencies:
- dependency-name: pyasn1
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-11-27 11:15:52 +00:00
3238ae3aa0
Bump types-setuptools from 68.2.0.0 to 68.2.0.2 ( #16688 )
...
Bumps [types-setuptools](https://github.com/python/typeshed ) from 68.2.0.0 to 68.2.0.2.
- [Commits](https://github.com/python/typeshed/commits )
---
updated-dependencies:
- dependency-name: types-setuptools
dependency-type: direct:development
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-11-27 10:49:15 +00:00
73794dd8c4
Bump ruff from 0.1.4 to 0.1.6 ( #16690 )
...
Bumps [ruff](https://github.com/astral-sh/ruff ) from 0.1.4 to 0.1.6.
- [Release notes](https://github.com/astral-sh/ruff/releases )
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md )
- [Commits](https://github.com/astral-sh/ruff/compare/v0.1.4...v0.1.6 )
---
updated-dependencies:
- dependency-name: ruff
dependency-type: direct:development
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-11-27 10:48:53 +00:00
9a6181fb4e
Bump jsonschema from 4.19.1 to 4.20.0 ( #16692 )
...
Bumps [jsonschema](https://github.com/python-jsonschema/jsonschema ) from 4.19.1 to 4.20.0.
- [Release notes](https://github.com/python-jsonschema/jsonschema/releases )
- [Changelog](https://github.com/python-jsonschema/jsonschema/blob/main/CHANGELOG.rst )
- [Commits](https://github.com/python-jsonschema/jsonschema/compare/v4.19.1...v4.20.0 )
---
updated-dependencies:
- dependency-name: jsonschema
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-11-27 10:48:41 +00:00
c8118ba8c9
Bump pydantic from 2.4.2 to 2.5.1 ( #16663 )
...
Bumps [pydantic](https://github.com/pydantic/pydantic ) from 2.4.2 to 2.5.1.
- [Release notes](https://github.com/pydantic/pydantic/releases )
- [Changelog](https://github.com/pydantic/pydantic/blob/main/HISTORY.md )
- [Commits](https://github.com/pydantic/pydantic/compare/v2.4.2...v2.5.1 )
---
updated-dependencies:
- dependency-name: pydantic
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-11-22 13:14:00 +00:00
7611df705e
Bump sentry-sdk from 1.32.0 to 1.35.0 ( #16666 )
...
Bumps [sentry-sdk](https://github.com/getsentry/sentry-python ) from 1.32.0 to 1.35.0.
- [Release notes](https://github.com/getsentry/sentry-python/releases )
- [Changelog](https://github.com/getsentry/sentry-python/blob/master/CHANGELOG.md )
- [Commits](https://github.com/getsentry/sentry-python/compare/1.32.0...1.35.0 )
---
updated-dependencies:
- dependency-name: sentry-sdk
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-11-20 12:14:06 +00:00
e934e7f7e7
Bump pyopenssl from 23.2.0 to 23.3.0 ( #16662 )
...
Bumps [pyopenssl](https://github.com/pyca/pyopenssl ) from 23.2.0 to 23.3.0.
- [Changelog](https://github.com/pyca/pyopenssl/blob/main/CHANGELOG.rst )
- [Commits](https://github.com/pyca/pyopenssl/compare/23.2.0...23.3.0 )
---
updated-dependencies:
- dependency-name: pyopenssl
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-11-20 12:11:15 +00:00
d792e0f2d9
Bump types-pillow from 10.1.0.0 to 10.1.0.2 ( #16664 )
...
Bumps [types-pillow](https://github.com/python/typeshed ) from 10.1.0.0 to 10.1.0.2.
- [Commits](https://github.com/python/typeshed/commits )
---
updated-dependencies:
- dependency-name: types-pillow
dependency-type: direct:development
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-11-20 12:08:25 +00:00
89d9ab0a0a
Bump types-psycopg2 from 2.9.21.15 to 2.9.21.16 ( #16665 )
...
Bumps [types-psycopg2](https://github.com/python/typeshed ) from 2.9.21.15 to 2.9.21.16.
- [Commits](https://github.com/python/typeshed/commits )
---
updated-dependencies:
- dependency-name: types-psycopg2
dependency-type: direct:development
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-11-20 12:07:34 +00:00
d9dcfe2a35
Bump requests-toolbelt from 0.10.1 to 1.0.0. ( #16659 )
2023-11-17 10:23:07 -05:00
35fac66d20
Bump prometheus-client from 0.17.1 to 0.18.0 ( #16626 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-11-13 11:09:30 +00:00
69d1ee3feb
Bump treq from 22.2.0 to 23.11.0 ( #16623 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-11-13 11:08:31 +00:00
f92af19fa5
Bump types-pyopenssl from 23.2.0.2 to 23.3.0.0 ( #16625 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-11-13 11:06:10 +00:00
22a513014d
Bump types-bleach from 6.1.0.0 to 6.1.0.1 ( #16624 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-11-13 11:05:37 +00:00
ca7421b5fd
Bump towncrier from 23.6.0 to 23.11.0 ( #16622 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-11-13 11:05:02 +00:00
f6aa047aa2
Bump pyicu from 2.11 to 2.12 ( #16603 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-11-08 09:28:51 -05:00
1a9b22a3d1
Bump setuptools-rust from 1.8.0 to 1.8.1 ( #16601 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-11-06 08:12:18 -05:00
5cf2988694
Bump types-pyyaml from 6.0.12.11 to 6.0.12.12 ( #16602 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-11-06 08:12:01 -05:00
a28339b867
Bump types-jsonschema from 4.19.0.3 to 4.19.0.4 ( #16599 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-11-06 08:11:31 -05:00
2f689a6326
Bump ruff from 0.0.292 to 0.1.4 ( #16600 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-11-06 08:11:15 -05:00
c812f43bd7
Bump twisted from 23.8.0 to 23.10.0 ( #16588 )
2023-11-01 10:23:13 +00:00
a3f6200d65
Bump setuptools-rust from 1.7.0 to 1.8.0 ( #16574 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: David Robertson <davidr@element.io>
2023-10-30 13:40:17 +00:00
ba55835000
Bump cryptography from 41.0.4 to 41.0.5 ( #16572 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-10-30 11:44:36 +00:00
425cb9c23c
Bump phonenumbers from 8.13.22 to 8.13.23 ( #16576 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-10-30 11:30:26 +00:00
13f6467785
Bump black from 23.10.0 to 23.10.1 ( #16575 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-10-30 11:29:52 +00:00
bcaaeab410
Bump types-psycopg2 from 2.9.21.14 to 2.9.21.15 ( #16573 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-10-30 11:28:50 +00:00
478a6c65eb
Bump matrix-synapse-ldap3 from 0.2.2 to 0.3.0 ( #16539 )
2023-10-23 12:28:29 +01:00
f835ab8de5
Bump black from 23.9.1 to 23.10.0 ( #16538 )
...
Bumps [black](https://github.com/psf/black ) from 23.9.1 to 23.10.0.
- [Release notes](https://github.com/psf/black/releases )
- [Changelog](https://github.com/psf/black/blob/main/CHANGES.md )
- [Commits](https://github.com/psf/black/compare/23.9.1...23.10.0 )
---
updated-dependencies:
- dependency-name: black
dependency-type: direct:development
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-10-23 10:25:14 +01:00
786b614fb2
Bump types-requests from 2.31.0.2 to 2.31.0.10 ( #16537 )
...
Bumps [types-requests](https://github.com/python/typeshed ) from 2.31.0.2 to 2.31.0.10.
- [Commits](https://github.com/python/typeshed/commits )
---
updated-dependencies:
- dependency-name: types-requests
dependency-type: direct:development
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-10-23 10:25:02 +01:00
a8026209d2
Bump gitpython from 3.1.37 to 3.1.40 ( #16534 )
...
Bumps [gitpython](https://github.com/gitpython-developers/GitPython ) from 3.1.37 to 3.1.40.
- [Release notes](https://github.com/gitpython-developers/GitPython/releases )
- [Changelog](https://github.com/gitpython-developers/GitPython/blob/main/CHANGES )
- [Commits](https://github.com/gitpython-developers/GitPython/compare/3.1.37...3.1.40 )
---
updated-dependencies:
- dependency-name: gitpython
dependency-type: direct:development
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-10-23 10:24:46 +01:00
dependabot[bot]