Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

build(deps): bump the pip group across 7 directories with 9 updates #2194

Closed
wants to merge 1 commit into from

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github May 16, 2024

Bumps the pip group with 3 updates in the /api directory: fastapi, urllib3 and pydantic.
Bumps the pip group with 5 updates in the /ee/api directory:

Package From To
fastapi 0.104.1 0.109.1
urllib3 1.26.16 1.26.18
pydantic 2.3.0 2.4.0
gunicorn 21.2.0 22.0.0
python-multipart 0.0.6 0.0.7

Bumps the pip group with 3 updates in the /ee/connectors/deploy directory: urllib3, idna and pycryptodomex.
Bumps the pip group with 2 updates in the /ee/intelligent_search directory: fastapi and pydantic.
Bumps the pip group with 6 updates in the /ee/recommendation directory:

Package From To
fastapi 0.95.2 0.109.1
urllib3 1.26.16 1.26.18
pydantic 1.10.12 1.10.13
python-multipart 0.0.6 0.0.7
mlflow 2.5 2.12.1
apache-airflow 2.6.2 2.9.0

Bumps the pip group with 1 update in the /ee/recommendation/ml_service directory: fastapi.
Bumps the pip group with 1 update in the /ee/recommendation/ml_trainer directory: apache-airflow.

Updates fastapi from 0.104.1 to 0.109.1

Release notes

Sourced from fastapi's releases.

0.109.1

Security fixes

  • ⬆️ Upgrade minimum version of python-multipart to >=0.0.7 to fix a vulnerability when using form data with a ReDos attack. You can also simply upgrade python-multipart.

Read more in the advisory: Content-Type Header ReDoS.

Features

Refactors

  • ✅ Refactor tests for duplicate operation ID generation for compatibility with other tools running the FastAPI test suite. PR #10876 by @​emmettbutler.
  • ♻️ Simplify string format with f-strings in fastapi/utils.py. PR #10576 by @​eukub.
  • 🔧 Fix Ruff configuration unintentionally enabling and re-disabling mccabe complexity check. PR #10893 by @​jiridanek.
  • ✅ Re-enable test in tests/test_tutorial/test_header_params/test_tutorial003.py after fix in Starlette. PR #10904 by @​ooknimm.

Docs

Translations

  • 🌐 Add Spanish translation for docs/es/docs/external-links.md. PR #10933 by @​pablocm83.
  • 🌐 Update Korean translation for docs/ko/docs/tutorial/first-steps.md, docs/ko/docs/tutorial/index.md, docs/ko/docs/tutorial/path-params.md, and docs/ko/docs/tutorial/query-params.md. PR #4218 by @​SnowSuno.

... (truncated)

Commits

Updates urllib3 from 1.26.16 to 1.26.18

Release notes

Sourced from urllib3's releases.

1.26.18

  • Made body stripped from HTTP requests changing the request method to GET after HTTP 303 "See Other" redirect responses. (GHSA-g4mx-q9vg-27p4)

1.26.17

  • Added the Cookie header to the list of headers to strip from requests when redirecting to a different host. As before, different headers can be set via Retry.remove_headers_on_redirect. (GHSA-v845-jxx5-vc9f)
Changelog

Sourced from urllib3's changelog.

1.26.18 (2023-10-17)

  • Made body stripped from HTTP requests changing the request method to GET after HTTP 303 "See Other" redirect responses.

1.26.17 (2023-10-02)

  • Added the Cookie header to the list of headers to strip from requests when redirecting to a different host. As before, different headers can be set via Retry.remove_headers_on_redirect. ([#3139](https://github.com/urllib3/urllib3/issues/3139) <https://github.com/urllib3/urllib3/pull/3139>_)
Commits

Updates pydantic from 2.3.0 to 2.4.0

Release notes

Sourced from pydantic's releases.

v2.4.0 2023-09-25

What's Changed

Packaging

New Features

Changes

Performance

  • Simplify flattening and inlining of CoreSchema by @​adriangb in #7523
  • Remove unused copies in CoreSchema walking by @​adriangb in #7528
  • Add caches for collecting definitions and invalid schemas from a CoreSchema by @​adriangb in #7527
  • Eagerly resolve discriminated unions and cache cases where we can't by @​adriangb in #7529
  • Replace dict.get and dict.setdefault with more verbose versions in CoreSchema building hot paths by @​adriangb in #7536
  • Cache invalid CoreSchema discovery by @​adriangb in #7535
  • Allow disabling CoreSchema validation for faster startup times by @​adriangb in #7565

Fixes

... (truncated)

Changelog

Sourced from pydantic's changelog.

v2.4.0 (2023-09-22)

GitHub release

What's Changed

Packaging

New Features

Changes

Performance

  • Simplify flattening and inlining of CoreSchema by @​adriangb in #7523
  • Remove unused copies in CoreSchema walking by @​adriangb in #7528
  • Add caches for collecting definitions and invalid schemas from a CoreSchema by @​adriangb in #7527
  • Eagerly resolve discriminated unions and cache cases where we can't by @​adriangb in #7529
  • Replace dict.get and dict.setdefault with more verbose versions in CoreSchema building hot paths by @​adriangb in #7536
  • Cache invalid CoreSchema discovery by @​adriangb in #7535
  • Allow disabling CoreSchema validation for faster startup times by @​adriangb in #7565

Fixes

... (truncated)

Commits

Updates fastapi from 0.104.1 to 0.109.1

Release notes

Sourced from fastapi's releases.

0.109.1

Security fixes

  • ⬆️ Upgrade minimum version of python-multipart to >=0.0.7 to fix a vulnerability when using form data with a ReDos attack. You can also simply upgrade python-multipart.

Read more in the advisory: Content-Type Header ReDoS.

Features

Refactors

  • ✅ Refactor tests for duplicate operation ID generation for compatibility with other tools running the FastAPI test suite. PR #10876 by @​emmettbutler.
  • ♻️ Simplify string format with f-strings in fastapi/utils.py. PR #10576 by @​eukub.
  • 🔧 Fix Ruff configuration unintentionally enabling and re-disabling mccabe complexity check. PR #10893 by @​jiridanek.
  • ✅ Re-enable test in tests/test_tutorial/test_header_params/test_tutorial003.py after fix in Starlette. PR #10904 by @​ooknimm.

Docs

Translations

  • 🌐 Add Spanish translation for docs/es/docs/external-links.md. PR #10933 by @​pablocm83.
  • 🌐 Update Korean translation for docs/ko/docs/tutorial/first-steps.md, docs/ko/docs/tutorial/index.md, docs/ko/docs/tutorial/path-params.md, and docs/ko/docs/tutorial/query-params.md. PR #4218 by @​SnowSuno.

... (truncated)

Commits

Updates urllib3 from 1.26.16 to 1.26.18

Release notes

Sourced from urllib3's releases.

1.26.18

  • Made body stripped from HTTP requests changing the request method to GET after HTTP 303 "See Other" redirect responses. (GHSA-g4mx-q9vg-27p4)

1.26.17

  • Added the Cookie header to the list of headers to strip from requests when redirecting to a different host. As before, different headers can be set via Retry.remove_headers_on_redirect. (GHSA-v845-jxx5-vc9f)
Changelog

Sourced from urllib3's changelog.

1.26.18 (2023-10-17)

  • Made body stripped from HTTP requests changing the request method to GET after HTTP 303 "See Other" redirect responses.

1.26.17 (2023-10-02)

  • Added the Cookie header to the list of headers to strip from requests when redirecting to a different host. As before, different headers can be set via Retry.remove_headers_on_redirect. ([#3139](https://github.com/urllib3/urllib3/issues/3139) <https://github.com/urllib3/urllib3/pull/3139>_)
Commits

Updates pydantic from 2.3.0 to 2.4.0

Release notes

Sourced from pydantic's releases.

v2.4.0 2023-09-25

What's Changed

Packaging

New Features

Changes

Performance

  • Simplify flattening and inlining of CoreSchema by @​adriangb in #7523
  • Remove unused copies in CoreSchema walking by @​adriangb in #7528
  • Add caches for collecting definitions and invalid schemas from a CoreSchema by @​adriangb in #7527
  • Eagerly resolve discriminated unions and cache cases where we can't by @​adriangb in #7529
  • Replace dict.get and dict.setdefault with more verbose versions in CoreSchema building hot paths by @​adriangb in #7536
  • Cache invalid CoreSchema discovery by @​adriangb in #7535
  • Allow disabling CoreSchema validation for faster startup times by @​adriangb in #7565

Fixes

... (truncated)

Changelog

Sourced from pydantic's changelog.

v2.4.0 (2023-09-22)

GitHub release

What's Changed

Packaging

New Features

Changes

Performance

  • Simplify flattening and inlining of CoreSchema by @​adriangb in #7523
  • Remove unused copies in CoreSchema walking by @​adriangb in #7528
  • Add caches for collecting definitions and invalid schemas from a CoreSchema by @​adriangb in #7527
  • Eagerly resolve discriminated unions and cache cases where we can't by @​adriangb in #7529
  • Replace dict.get and dict.setdefault with more verbose versions in CoreSchema building hot paths by @​adriangb in #7536
  • Cache invalid CoreSchema discovery by @​adriangb in #7535
  • Allow disabling CoreSchema validation for faster startup times by @​adriangb in #7565

Fixes

... (truncated)

Commits

Bumps the pip group with 3 updates in the /api directory: [fastapi](https://github.com/tiangolo/fastapi), [urllib3](https://github.com/urllib3/urllib3) and [pydantic](https://github.com/pydantic/pydantic).
Bumps the pip group with 5 updates in the /ee/api directory:

| Package | From | To |
| --- | --- | --- |
| [fastapi](https://github.com/tiangolo/fastapi) | `0.104.1` | `0.109.1` |
| [urllib3](https://github.com/urllib3/urllib3) | `1.26.16` | `1.26.18` |
| [pydantic](https://github.com/pydantic/pydantic) | `2.3.0` | `2.4.0` |
| [gunicorn](https://github.com/benoitc/gunicorn) | `21.2.0` | `22.0.0` |
| [python-multipart](https://github.com/andrew-d/python-multipart) | `0.0.6` | `0.0.7` |

Bumps the pip group with 3 updates in the /ee/connectors/deploy directory: [urllib3](https://github.com/urllib3/urllib3), [idna](https://github.com/kjd/idna) and [pycryptodomex](https://github.com/Legrandin/pycryptodome).
Bumps the pip group with 2 updates in the /ee/intelligent_search directory: [fastapi](https://github.com/tiangolo/fastapi) and [pydantic](https://github.com/pydantic/pydantic).
Bumps the pip group with 6 updates in the /ee/recommendation directory:

| Package | From | To |
| --- | --- | --- |
| [fastapi](https://github.com/tiangolo/fastapi) | `0.95.2` | `0.109.1` |
| [urllib3](https://github.com/urllib3/urllib3) | `1.26.16` | `1.26.18` |
| [pydantic](https://github.com/pydantic/pydantic) | `1.10.12` | `1.10.13` |
| [python-multipart](https://github.com/andrew-d/python-multipart) | `0.0.6` | `0.0.7` |
| [mlflow](https://github.com/mlflow/mlflow) | `2.5` | `2.12.1` |
| [apache-airflow](https://github.com/apache/airflow) | `2.6.2` | `2.9.0` |

Bumps the pip group with 1 update in the /ee/recommendation/ml_service directory: [fastapi](https://github.com/tiangolo/fastapi).
Bumps the pip group with 1 update in the /ee/recommendation/ml_trainer directory: [apache-airflow](https://github.com/apache/airflow).


Updates `fastapi` from 0.104.1 to 0.109.1
- [Release notes](https://github.com/tiangolo/fastapi/releases)
- [Commits](tiangolo/fastapi@0.104.1...0.109.1)

Updates `urllib3` from 1.26.16 to 1.26.18
- [Release notes](https://github.com/urllib3/urllib3/releases)
- [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst)
- [Commits](urllib3/urllib3@1.26.16...1.26.18)

Updates `pydantic` from 2.3.0 to 2.4.0
- [Release notes](https://github.com/pydantic/pydantic/releases)
- [Changelog](https://github.com/pydantic/pydantic/blob/main/HISTORY.md)
- [Commits](pydantic/pydantic@v2.3.0...v2.4.0)

Updates `fastapi` from 0.104.1 to 0.109.1
- [Release notes](https://github.com/tiangolo/fastapi/releases)
- [Commits](tiangolo/fastapi@0.104.1...0.109.1)

Updates `urllib3` from 1.26.16 to 1.26.18
- [Release notes](https://github.com/urllib3/urllib3/releases)
- [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst)
- [Commits](urllib3/urllib3@1.26.16...1.26.18)

Updates `pydantic` from 2.3.0 to 2.4.0
- [Release notes](https://github.com/pydantic/pydantic/releases)
- [Changelog](https://github.com/pydantic/pydantic/blob/main/HISTORY.md)
- [Commits](pydantic/pydantic@v2.3.0...v2.4.0)

Updates `gunicorn` from 21.2.0 to 22.0.0
- [Release notes](https://github.com/benoitc/gunicorn/releases)
- [Commits](benoitc/gunicorn@21.2.0...22.0.0)

Updates `python-multipart` from 0.0.6 to 0.0.7
- [Release notes](https://github.com/andrew-d/python-multipart/releases)
- [Changelog](https://github.com/Kludex/python-multipart/blob/master/CHANGELOG.md)
- [Commits](Kludex/python-multipart@0.0.6...0.0.7)

Updates `urllib3` from 1.26.12 to 1.26.18
- [Release notes](https://github.com/urllib3/urllib3/releases)
- [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst)
- [Commits](urllib3/urllib3@1.26.16...1.26.18)

Updates `idna` from 3.4 to 3.7
- [Release notes](https://github.com/kjd/idna/releases)
- [Changelog](https://github.com/kjd/idna/blob/master/HISTORY.rst)
- [Commits](kjd/idna@v3.4...v3.7)

Updates `pycryptodomex` from 3.18.0 to 3.19.1
- [Release notes](https://github.com/Legrandin/pycryptodome/releases)
- [Changelog](https://github.com/Legrandin/pycryptodome/blob/master/Changelog.rst)
- [Commits](Legrandin/pycryptodome@v3.18.0...v3.19.1)

Updates `fastapi` from 0.103.1 to 0.109.1
- [Release notes](https://github.com/tiangolo/fastapi/releases)
- [Commits](tiangolo/fastapi@0.104.1...0.109.1)

Updates `pydantic` from 2.3.0 to 2.4.0
- [Release notes](https://github.com/pydantic/pydantic/releases)
- [Changelog](https://github.com/pydantic/pydantic/blob/main/HISTORY.md)
- [Commits](pydantic/pydantic@v2.3.0...v2.4.0)

Updates `fastapi` from 0.95.2 to 0.109.1
- [Release notes](https://github.com/tiangolo/fastapi/releases)
- [Commits](tiangolo/fastapi@0.104.1...0.109.1)

Updates `urllib3` from 1.26.16 to 1.26.18
- [Release notes](https://github.com/urllib3/urllib3/releases)
- [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst)
- [Commits](urllib3/urllib3@1.26.16...1.26.18)

Updates `pydantic` from 1.10.12 to 1.10.13
- [Release notes](https://github.com/pydantic/pydantic/releases)
- [Changelog](https://github.com/pydantic/pydantic/blob/main/HISTORY.md)
- [Commits](pydantic/pydantic@v2.3.0...v2.4.0)

Updates `python-multipart` from 0.0.6 to 0.0.7
- [Release notes](https://github.com/andrew-d/python-multipart/releases)
- [Changelog](https://github.com/Kludex/python-multipart/blob/master/CHANGELOG.md)
- [Commits](Kludex/python-multipart@0.0.6...0.0.7)

Updates `mlflow` from 2.5 to 2.12.1
- [Release notes](https://github.com/mlflow/mlflow/releases)
- [Changelog](https://github.com/mlflow/mlflow/blob/master/CHANGELOG.md)
- [Commits](mlflow/mlflow@v2.5.0...v2.12.1)

Updates `apache-airflow` from 2.6.2 to 2.9.0
- [Release notes](https://github.com/apache/airflow/releases)
- [Changelog](https://github.com/apache/airflow/blob/main/RELEASE_NOTES.rst)
- [Commits](apache/airflow@2.6.2...2.9.0)

Updates `fastapi` from 0.95.2 to 0.109.1
- [Release notes](https://github.com/tiangolo/fastapi/releases)
- [Commits](tiangolo/fastapi@0.104.1...0.109.1)

Updates `apache-airflow` from 2.6.2 to 2.9.0
- [Release notes](https://github.com/apache/airflow/releases)
- [Changelog](https://github.com/apache/airflow/blob/main/RELEASE_NOTES.rst)
- [Commits](apache/airflow@2.6.2...2.9.0)

---
updated-dependencies:
- dependency-name: fastapi
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: urllib3
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: pydantic
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: fastapi
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: urllib3
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: pydantic
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: gunicorn
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: python-multipart
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: urllib3
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: idna
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: pycryptodomex
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: fastapi
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: pydantic
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: fastapi
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: urllib3
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: pydantic
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: python-multipart
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: mlflow
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: apache-airflow
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: fastapi
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: apache-airflow
  dependency-type: direct:production
  dependency-group: pip
...

Signed-off-by: dependabot[bot] <[email protected]>
Copy link

coderabbitai bot commented May 16, 2024

Important

Auto Review Skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.


Thank you for using CodeRabbit. We offer it for free to the OSS community and would appreciate your support in helping us grow. If you find it useful, would you consider giving us a shout-out on your favorite social media?

Share
Tips

Chat

There are 3 ways to chat with CodeRabbit:

  • Review comments: Directly reply to a review comment made by CodeRabbit. Example:
    • I pushed a fix in commit <commit_id>.
    • Generate unit testing code for this file.
    • Open a follow-up GitHub issue for this discussion.
  • Files and specific lines of code (under the "Files changed" tab): Tag @coderabbitai in a new review comment at the desired location with your query. Examples:
    • @coderabbitai generate unit testing code for this file.
    • @coderabbitai modularize this function.
  • PR comments: Tag @coderabbitai in a new PR comment to ask questions about the PR branch. For the best results, please provide a very specific query, as very limited context is provided in this mode. Examples:
    • @coderabbitai generate interesting stats about this repository and render them as a table.
    • @coderabbitai show all the console.log statements in this repository.
    • @coderabbitai read src/utils.ts and generate unit testing code.
    • @coderabbitai read the files in the src/scheduler package and generate a class diagram using mermaid and a README in the markdown format.

Note: Be mindful of the bot's finite context window. It's strongly recommended to break down tasks such as reading entire modules into smaller chunks. For a focused discussion, use review comments to chat about specific files and their changes, instead of using the PR comments.

CodeRabbit Commands (invoked as PR comments)

  • @coderabbitai pause to pause the reviews on a PR.
  • @coderabbitai resume to resume the paused reviews.
  • @coderabbitai review to trigger a review. This is useful when automatic reviews are disabled for the repository.
  • @coderabbitai resolve resolve all the CodeRabbit review comments.
  • @coderabbitai help to get help.

Additionally, you can add @coderabbitai ignore anywhere in the PR description to prevent this PR from being reviewed.

CodeRabbit Configration File (.coderabbit.yaml)

  • You can programmatically configure CodeRabbit by adding a .coderabbit.yaml file to the root of your repository.
  • Please see the configuration documentation for more information.
  • If your editor has YAML language server enabled, you can add the path at the top of this file to enable auto-completion and validation: # yaml-language-server: $schema=https://coderabbit.ai/integrations/schema.v2.json

Documentation and Community

  • Visit our Documentation for detailed information on how to use CodeRabbit.
  • Join our Discord Community to get help, request features, and share feedback.
  • Follow us on X/Twitter for updates and announcements.

@CLAassistant
Copy link

CLA assistant check
Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.
You have signed the CLA already but the status is still pending? Let us recheck it.

Copy link
Contributor Author

dependabot bot commented on behalf of github May 21, 2024

Superseded by #2196.

@dependabot dependabot bot closed this May 21, 2024
@dependabot dependabot bot deleted the dependabot/pip/api/pip-40e5683fe1 branch May 21, 2024 03:38
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

1 participant