Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Bump the production-dependencies group across 1 directory with 5 updates #1491

Closed
wants to merge 1 commit into from
Closed

Bump the production-dependencies group across 1 directory with 5 updates #1491

wants to merge 1 commit into from

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Sep 13, 2024 •
edited
Loading

Bumps the production-dependencies group with 5 updates in the / directory:

Package From To
marshmallow 3.21.3 3.22.0
marshmallow-dataclass 8.7.0 8.7.1
lark 1.1.9 1.2.2
aiohttp 3.10.1 3.10.5
ledgerwallet 0.5.0 0.5.1

Updates marshmallow from 3.21.3 to 3.22.0

Changelog

Sourced from marshmallow's changelog.

3.22.0 (2024-08-20)

Features:

  • Add many Meta option to Schema so it expects a collection by default (:issue:2270). Thanks :user:himalczyk for reporting and :user:deckar01 for the PR.
  • Refactor hooks (:pr:2279). Thanks :user:deckar01 for the PR.
Commits

Updates marshmallow-dataclass from 8.7.0 to 8.7.1

Changelog

Sourced from marshmallow-dataclass's changelog.

v8.7.1 (2024-09-12)

  • Relax dependency pins for typeguard and typing-inspect. (#273, #272)

#272: lovasoa/marshmallow_dataclass#272 #273: lovasoa/marshmallow_dataclass#273

Commits

Updates lark from 1.1.9 to 1.2.2

Commits

Updates aiohttp from 3.10.1 to 3.10.5

Release notes

Sourced from aiohttp's releases.

3.10.5

Bug fixes

  • Fixed :meth:aiohttp.ClientResponse.json() not setting status when :exc:aiohttp.ContentTypeError is raised -- by :user:bdraco.

    Related issues and pull requests on GitHub: #8742.

Miscellaneous internal changes

  • Improved performance of the WebSocket reader -- by :user:bdraco.

    Related issues and pull requests on GitHub: #8736, #8747.

3.10.4

Bug fixes

  • Fixed decoding base64 chunk in BodyPartReader -- by :user:hyzyla.

    Related issues and pull requests on GitHub: #3867.

  • Fixed a race closing the server-side WebSocket where the close code would not reach the client -- by :user:bdraco.

    Related issues and pull requests on GitHub: #8680.

  • Fixed unconsumed exceptions raised by the WebSocket heartbeat -- by :user:bdraco.

    If the heartbeat ping raised an exception, it would not be consumed and would be logged as an warning.

... (truncated)

Changelog

Sourced from aiohttp's changelog.

3.10.5 (2024-08-19)

Bug fixes

  • Fixed :meth:aiohttp.ClientResponse.json() not setting status when :exc:aiohttp.ContentTypeError is raised -- by :user:bdraco.

    Related issues and pull requests on GitHub: :issue:8742.

Miscellaneous internal changes

  • Improved performance of the WebSocket reader -- by :user:bdraco.

    Related issues and pull requests on GitHub: :issue:8736, :issue:8747.

3.10.4 (2024-08-17)

Bug fixes

  • Fixed decoding base64 chunk in BodyPartReader -- by :user:hyzyla.

    Related issues and pull requests on GitHub: :issue:3867.

  • Fixed a race closing the server-side WebSocket where the close code would not reach the client -- by :user:bdraco.

    Related issues and pull requests on GitHub: :issue:8680.

... (truncated)

Commits

Updates ledgerwallet from 0.5.0 to 0.5.1

Changelog

Sourced from ledgerwallet's changelog.

[0.5.1] - 2024-08-23

Fixed

  • For Nano S+ and X, generate NBGL compliant buffer (uncompressed) for app icon (from api_level > 5)
Commits
  • e14223b Merge pull request #78 from LedgerHQ/y333/support_nbgl_icon_for_nano
  • 6b47bb4 Fix unit tests
  • ea67ecc Use api_level to switch between BAGL or NBGL compliant buffers for Nano S+/X
  • 4e40be7 Update CHANGELOG
  • 1fddb3b Icon shall be transformed into NBGL uncompressed buffer for Nano S+ and X
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the production-dependencies group across 1 directory with 5 updates
191a6b1 
Bumps the production-dependencies group with 5 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [marshmallow](https://github.com/marshmallow-code/marshmallow) | `3.21.3` | `3.22.0` |
| [marshmallow-dataclass](https://github.com/lovasoa/marshmallow_dataclass) | `8.7.0` | `8.7.1` |
| [lark](https://github.com/lark-parser/lark) | `1.1.9` | `1.2.2` |
| [aiohttp](https://github.com/aio-libs/aiohttp) | `3.10.1` | `3.10.5` |
| [ledgerwallet](https://github.com/LedgerHQ/ledgerctl) | `0.5.0` | `0.5.1` |



Updates `marshmallow` from 3.21.3 to 3.22.0
- [Changelog](https://github.com/marshmallow-code/marshmallow/blob/dev/CHANGELOG.rst)
- [Commits](marshmallow-code/marshmallow@3.21.3...3.22.0)

Updates `marshmallow-dataclass` from 8.7.0 to 8.7.1
- [Changelog](https://github.com/lovasoa/marshmallow_dataclass/blob/master/CHANGELOG.md)
- [Commits](lovasoa/marshmallow_dataclass@v8.7.0...v8.7.1)

Updates `lark` from 1.1.9 to 1.2.2
- [Release notes](https://github.com/lark-parser/lark/releases)
- [Changelog](https://github.com/lark-parser/lark/blob/master/CHANGELOG.md)
- [Commits](lark-parser/lark@1.1.9...1.2.2)

Updates `aiohttp` from 3.10.1 to 3.10.5
- [Release notes](https://github.com/aio-libs/aiohttp/releases)
- [Changelog](https://github.com/aio-libs/aiohttp/blob/master/CHANGES.rst)
- [Commits](aio-libs/aiohttp@v3.10.1...v3.10.5)

Updates `ledgerwallet` from 0.5.0 to 0.5.1
- [Release notes](https://github.com/LedgerHQ/ledgerctl/releases)
- [Changelog](https://github.com/LedgerHQ/ledgerctl/blob/master/CHANGELOG.md)
- [Commits](LedgerHQ/ledgerctl@v0.5.0...v0.5.1)

---
updated-dependencies:
- dependency-name: marshmallow
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: marshmallow-dataclass
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: lark
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: aiohttp
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: ledgerwallet
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Sep 13, 2024
@dependabot Dependabot
Copy link
Contributor Author

dependabot bot commented on behalf of github Sep 18, 2024

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot bot closed this Sep 18, 2024
@dependabot dependabot bot deleted the dependabot/pip/production-dependencies-6457b77fd6 branch September 18, 2024 20:03
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
dependencies Pull requests that update a dependency file
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
0 participants