Bump the minor-patch group with 9 updates

[dependabot]

Bumps the minor-patch group with 9 updates:

Package	From	To
sqlalchemy	2.0.25	2.0.28
build	1.0.3	1.1.1
dockerflow	2024.1.0	2024.3.0
newrelic	9.6.0	9.7.0
playwright	1.41.2	1.42.0
python-dateutil	2.8.2	2.9.0.post0
python-rapidjson	1.14	1.16
ruff	0.2.2	0.3.2
sphinx-github-changelog	1.2.1	1.3.0

Updates sqlalchemy from 2.0.25 to 2.0.28

Release notes

Sourced from sqlalchemy's releases.

2.0.28

Released: March 4, 2024

orm

• [orm] [performance] [bug] [regression] Adjusted the fix made in #10570, released in 2.0.23, where new logic was added to reconcile possibly changing bound parameter values across cache key generations used within the _orm.with_expression() construct. The new logic changes the approach by which the new bound parameter values are associated with the statement, avoiding the need to deep-copy the statement which can result in a significant performance penalty for very deep / complex SQL constructs. The new approach no longer requires this deep-copy step.

  References: #11085

• [orm] [bug] [regression] Fixed regression caused by #9779 where using the "secondary" table in a relationship and_() expression would fail to be aliased to match how the "secondary" table normally renders within a _sql.Select.join() expression, leading to an invalid query.

  References: #11010

engine

• [engine] [usecase] Added new core execution option _engine.Connection.execution_options.preserve_rowcount. When set, the cursor.rowcount attribute from the DBAPI cursor will be unconditionally memoized at statement execution time, so that whatever value the DBAPI offers for any kind of statement will be available using the _engine.CursorResult.rowcount attribute from the _engine.CursorResult. This allows the rowcount to be accessed for statments such as INSERT and SELECT, to the degree supported by the DBAPI in use. The engine_insertmanyvalues also supports this option and will ensure _engine.CursorResult.rowcount is correctly set for a bulk INSERT of rows when set.

  References: #10974

asyncio

• [asyncio] [bug] An error is raised if a QueuePool or other non-asyncio pool class is passed to _asyncio.create_async_engine(). This engine only accepts asyncio-compatible pool classes including AsyncAdaptedQueuePool. Other pool classes such as NullPool are compatible with both synchronous and asynchronous

... (truncated)

Commits

• See full diff in compare view

Updates build from 1.0.3 to 1.1.1

Release notes

Sourced from build's releases.

Version 1.1.1

What's Changed

• Fixed invoking outer pip from user site packages (PR #746, fixes issue #745)
• Corrected the minimum pip version required to use an outer pip (PR #746, fixes issue #745)

Full Changelog: pypa/build@v1.1.0...1.1.1

Version 1.1.0

What's Changed

• Use external pip if available instead of installing, speeds up environment setup with virtualenv slightly and venv significantly. (PR #736)
• Stopped injecting wheel as a build dependency automatically, in the case of missing pyproject.toml -- by @​webknjaz. (PR #716)
• Use importlib_metadata on Python <3.10.2 for bugfixes not present in those CPython standard libraries (not required when bootstrapping) -- by @​GianlucaFicarelli. (PR #693, fixes issue #692)

New Contributors

• @​MichaReiser made their first contribution in pypa/build#697
• @​GianlucaFicarelli made their first contribution in pypa/build#693

Full Changelog: pypa/build@1.0.3...v1.1.0

Changelog

Sourced from build's changelog.

1.1.1 (2024-02-29)

• Fixed invoking outer pip from user site packages (PR :pr:746, fixes issue :issue:745)
• Corrected the minimum pip version required to use an outer pip (PR :pr:746, fixes issue :issue:745)

1.1.0 (2024-02-29)

• Use external pip if available instead of installing, speeds up environment setup with virtualenv slightly and venv significantly. (PR :pr:736)
• Stopped injecting wheel as a build dependency automatically, in the case of missing pyproject.toml -- by :user:webknjaz. (PR :pr:716)
• Use importlib_metadata on Python <3.10.2 for bugfixes not present in those CPython standard libraries (not required when bootstrapping) -- by :user:GianlucaFicarelli. (PR :pr:693, fixes issue :issue:692)

Commits

• b36126a release 1.1.1
• 9588222 env: fix global pip (#746)
• da06973 chore: prepare for 1.1.0 (#744)
• 42231a7 compat: create separate importlib, tarfile and tomllib shims
• 894998a chore: address feedback
• aa0aa04 fix(types): make the passthrough general
• af5ff53 feat: use external pip if available
• 9ceb49d build(deps): bump the actions group with 1 update (#739)
• ac57b94 refactor: pull out pip checks (#735)
• e6969d1 pre-commit: bump repositories (#734)
• Additional commits viewable in compare view

Updates dockerflow from 2024.1.0 to 2024.3.0

Release notes

Sourced from dockerflow's releases.

2024.3.0

What's Changed

New features

• Add optional querystring logging to MozLog "request.summary" by @​leplatrem in mozilla-services/python-dockerflow#97
• Configurable status for failed heartbeat by @​leplatrem in mozilla-services/python-dockerflow#98
• Support of request correlation id @​leplatrem in mozilla-services/python-dockerflow#100 and mozilla-services/python-dockerflow#101
• Fix docs about heartbeat status on warnings (200, not 5XX) by @​leplatrem in mozilla-services/python-dockerflow#99

Internal Changes

• Use ruff instead of flake8 and black by @​leplatrem in mozilla-services/python-dockerflow#96
• Github Action status for each tox combination by @​leplatrem in mozilla-services/python-dockerflow#102

Full Changelog: mozilla-services/python-dockerflow@2024.2.0...2024.3.0

2024.2.0

What's Changed

• Add integration for FastAPI by @​grahamalama in mozilla-services/python-dockerflow#81
• Python 3.12 support by @​leplatrem in mozilla-services/python-dockerflow#93
• Stop testing for Python 3.7 by @​leplatrem in mozilla-services/python-dockerflow#94
• Add developer docs and fix release process by @​leplatrem in mozilla-services/python-dockerflow#92

Full Changelog: mozilla-services/python-dockerflow@2024.1.0...2024.2.0

Changelog

Sourced from dockerflow's changelog.

2024.3.0

- Add request correlation ID support ([#101](https://github.com/mozilla-services/python-dockerflow/issues/101)).
  In order to add a ``rid`` field to all log messages, add the ``dockerflow.logging.RequestIdLogFilter`` filter to your logging handlers.
  See: :ref:`Django <django-logging>`, :ref:`FastAPI <fastapi-logging>`, :ref:`Flask <flask-logging>`, :ref:`Sanic <sanic-logging>` for details.
2024.2.0

• Stop testing Python 3.7 (#94)

• Add support for Python 3.12 (#93)

• Add support for FastAPI >= 0.100 (#81)

• Add developer docs and fix release process (#92)

Commits

• b98b4ff Update changelog 2024.3.0
• a953916 Generalize usage of request correlation id to all integrations (#101)
• 6a6c78a Github Action status for each tox combination (#102)
• 6b9e191 Use ruff instead of flake8 and black (#96)
• 4bad625 (fastapi) Log request ID when set in headers (#100)
• c939637 Fix docs about heartbeat status on warnings (200, not 5XX) (#99)
• e695de7 Configurable status for failed heartbeat (#98)
• 39ea4e4 Add querystring to MozLog "request.summary" (#97)
• 2ba0254 Align upload/download artifacts actions versions
• 6aaf5c1 Do not restrict FastAPI testing to 0.100 only
• Additional commits viewable in compare view

Updates newrelic from 9.6.0 to 9.7.0

Release notes

Sourced from newrelic's releases.

v9.7.0

https://docs.newrelic.com/docs/release-notes/agent-release-notes/python-release-notes/python-agent-90700/

Commits

• 56fbda1 Merge pull request #1064 from newrelic/drop-none-attrs
• 5bbf0dc Fix loguru test
• 2755208 Summarize agent spec quote
• ac17284 Fixup formatting of blank lines
• ee87f7a Remove log context attr=None tests
• 0337ab6 Add description of create_agent_attributes
• 5bb045b Replace create_user_attributes w/create_attributes
• 62b1bc0 Only add attr if key is not None
• 22acf04 Remove unused imports
• a57f789 Drop None type attributes
• Additional commits viewable in compare view

Updates playwright from 1.41.2 to 1.42.0

Release notes

Sourced from playwright's releases.

v1.42.0

New Locator Handler

New method page.add_locator_handler(locator, handler) registers a callback that will be invoked when specified element becomes visible and may block Playwright actions. The callback can get rid of the overlay. Here is an example that closes a cookie dialog when it appears.

# Setup the handler.
page.add_locator_handler(
    page.get_by_role("heading", name="Hej! You are in control of your cookies."),
    lambda: page.get_by_role("button", name="Accept all").click(),
)
# Write the test as usual.
page.goto("https://www.ikea.com/")
page.get_by_role("link", name="Collection of blue and white").click()
expect(page.get_by_role("heading", name="Light and easy")).to_be_visible()

New APIs

• page.pdf([options]) accepts two new options tagged and outline.

Announcements

• ⚠️ Ubuntu 18 is not supported anymore.

Browser Versions

• Chromium 123.0.6312.4
• Mozilla Firefox 123.0
• WebKit 17.4

This version was also tested against the following stable channels:

• Google Chrome 122
• Microsoft Edge 123

Commits

• 665af8d Revert "fix: datetime serialisation (#2314)"
• 2ab641a Revert "test: fix deprecated datetime serialisation (follow-up to #2314)"
• 58551ad chore(roll): roll Playwright to v1.42.1 (#2340)
• f6071ee build(deps): bump wheel from 0.41.2 to 0.42.0 (#2324)
• 0d2899a build(deps): bump twisted from 23.10.0 to 24.3.0 (#2337)
• 07efec1 build(deps): bump types-pyopenssl from 24.0.0.20240130 to 24.0.0.20240228 (#2...
• 274ea8f build(deps): bump setuptools from 68.2.2 to 69.1.1 (#2339)
• 2dd251c build(deps): bump types-requests from 2.31.0.10 to 2.31.0.20240218 (#2326)
• 9517a9a build(deps): bump objgraph from 3.6.0 to 3.6.1 (#2327)
• 84a62e4 build(deps): bump pyopenssl from 23.2.0 to 24.0.0 (#2325)
• Additional commits viewable in compare view

Updates python-dateutil from 2.8.2 to 2.9.0.post0

Release notes

Sourced from python-dateutil's releases.

2.9.0.post0

Version 2.9.0.post0 (2024-03-01)

Bugfixes

• Pinned setuptools_scm to <8, which should make the generated _version.py file compatible with all supported versions of Python.

2.9.0

Version 2.9.0 (2024-02-29)

Data updates

• Updated tzdata version to 2024a. (gh pr #1342)

Features

• Made all dateutil submodules lazily imported using PEP 562. On Python 3.7+, things like import dateutil; dateutil.tz.gettz("America/New_York") will now work without explicitly importing dateutil.tz, with the import occurring behind the scenes on first use. The old behavior remains on Python 3.6 and earlier. Fixed by Orson Adams. (gh issue #771, gh pr #1007)

Bugfixes

• Removed a call to datetime.utcfromtimestamp, which is deprecated as of Python 3.12. Reported by Hugo van Kemenade (gh pr #1284), fixed by Thomas Grainger (gh pr #1285).

Documentation changes

• Added note into docs and tests where relativedelta would return last day of the month only if the same day on a different month resolves to a date that doesn't exist. Reported by @​hawkEye-01 (gh issue #1167). Fixed by @​Mifrill (gh pr #1168)

Changelog

Sourced from python-dateutil's changelog.

Version 2.9.0.post0 (2024-03-01)

Bugfixes

• Pinned setuptools_scm to <8, which should make the generated _version.py file compatible with all supported versions of Python.

Version 2.9.0 (2024-02-29)

Data updates

• Updated tzdata version to 2024a. (gh pr #1342)

Features

• Made all dateutil submodules lazily imported using PEP 562 <https://www.python.org/dev/peps/pep-0562/>_. On Python 3.7+, things like import dateutil; dateutil.tz.gettz("America/New_York") will now work without explicitly importing dateutil.tz, with the import occurring behind the scenes on first use. The old behavior remains on Python 3.6 and earlier. Fixed by Orson Adams. (gh issue #771, gh pr #1007)

Bugfixes

• Removed a call to datetime.utcfromtimestamp, which is deprecated as of Python 3.12. Reported by Hugo van Kemenade (gh pr #1284), fixed by Thomas Grainger (gh pr #1285).

Documentation changes

• Added note into docs and tests where relativedelta would return last day of the month only if the same day on a different month resolves to a date that doesn't exist. Reported by @​hawkEye-01 (gh issue #1167). Fixed by @​Mifrill (gh pr #1168)

Commits

• 1ae8077 Merge pull request #1346 from pganssle/release_2.9.0.post0
• ee6de9d Update news to prepare for release
• 9780d32 Pin setuptools_scm to <8
• db9d018 Merge pull request #1343 from pganssle/release_2.9.0
• 423ca2f Run updatezinfo before build
• edd3fd4 Update NEWS file
• fe02d02 Run towncrier with Python 3.11
• 9c7524a Fix MANIFEST.in pattern
• 6de58f5 Update classifiers to include Python 3.12
• 8fe0cab Merge pull request #1342 from pganssle/update_zoneinfo
• Additional commits viewable in compare view

Updates python-rapidjson from 1.14 to 1.16

Changelog

Sourced from python-rapidjson's changelog.

1.16 (2024-02-28)

* Produce Python 3.8 wheels again, I deactivated it too eagerly, it's in *security fixes
  only* mode, not yet reached its `end-of-life` state
1.15 (2024-02-28)

• Honor the recursion limit__ also at parse time, to avoid attacks as described by CVE-2024-27454__

  __ https://docs.python.org/3.12/library/sys.html#sys.setrecursionlimit __ https://monicz.dev/CVE-2024-27454

Commits

• 018fe4a Release 1.16
• 0da1259 Update CHANGES.rst
• 32df22d Revert "Stop producing binary wheels for Python 3.8"
• 95f68b3 There's something silly going on GH Action...
• af3c8c7 Release 1.15
• 233f928 Update CHANGES.rst
• 4ca5fed Attempt to turn a crash into a proper exception
• 65a507f Drop support for Pythons older than 3.5
• 13c1736 Re-try uploading wheels only on new git tag
• 0622101 Use cibuildwheel 2.16.5
• Additional commits viewable in compare view

Updates ruff from 0.2.2 to 0.3.2

Release notes

Sourced from ruff's releases.

v0.3.2

Changes

Preview features

• Improve single-with item formatting for Python 3.8 or older (#10276)

Rule changes

• [pyupgrade] Allow fixes for f-string rule regardless of line length (UP032) (#10263)
• [pycodestyle] Include actual conditions in E712 diagnostics (#10254)

Bug fixes

• Fix trailing kwargs end of line comment after slash (#10297)
• Fix unstable with items formatting (#10274)
• Avoid repeating function calls in f-string conversions (#10265)
• Fix E203 false positive for slices in format strings (#10280)
• Fix incorrect Parameter range for *args and **kwargs (#10283)
• Treat typing.Annotated subscripts as type definitions (#10285)

Contributors

• @​AlexWaygood
• @​GtrMo
• @​MichaReiser
• @​charliermarsh
• @​sciyoshi
• @​tjkuson

v0.3.1

Changes

Preview features

• [pycodestyle] Fix E301 not triggering on decorated methods. (#10117)
• [pycodestyle] Respect isort settings in blank line rules (E3*) (#10096)
• [pycodestyle] Make blank lines in typing stub files optional (E3*) (#10098)
• [pylint] Implement singledispatch-method (E1519) (#10140)
• [pylint] Implement useless-exception-statement (W0133) (#10176)

Rule changes

• [flake8-debugger] Check for use of debugpy and ptvsd debug modules (#10177) (#10194)
• [pyupgrade] Generate diagnostic for all valid f-string conversions regardless of line length (UP032) (#10238)
• [pep8_naming] Add fixes for N804 and N805 (#10215)

CLI

• Colorize the output of ruff format --diff (#10110)

... (truncated)

Changelog

Sourced from ruff's changelog.

0.3.2

Preview features

• Improve single-with item formatting for Python 3.8 or older (#10276)

Rule changes

• [pyupgrade] Allow fixes for f-string rule regardless of line length (UP032) (#10263)
• [pycodestyle] Include actual conditions in E712 diagnostics (#10254)

Bug fixes

• Fix trailing kwargs end of line comment after slash (#10297)
• Fix unstable with items formatting (#10274)
• Avoid repeating function calls in f-string conversions (#10265)
• Fix E203 false positive for slices in format strings (#10280)
• Fix incorrect Parameter range for *args and **kwargs (#10283)
• Treat typing.Annotated subscripts as type definitions (#10285)

0.3.1

Preview features

• [pycodestyle] Fix E301 not triggering on decorated methods. (#10117)
• [pycodestyle] Respect isort settings in blank line rules (E3*) (#10096)
• [pycodestyle] Make blank lines in typing stub files optional (E3*) (#10098)
• [pylint] Implement singledispatch-method (E1519) (#10140)
• [pylint] Implement useless-exception-statement (W0133) (#10176)

Rule changes

• [flake8-debugger] Check for use of debugpy and ptvsd debug modules (#10177) (#10194)
• [pyupgrade] Generate diagnostic for all valid f-string conversions regardless of line length (UP032) (#10238)
• [pep8_naming] Add fixes for N804 and N805 (#10215)

CLI

• Colorize the output of ruff format --diff (#10110)
• Make --config and --isolated global flags (#10150)
• Correctly expand tildes and environment variables in paths passed to --config (#10219)

Configuration

• Accept a PEP 440 version specifier for required-version (#10216)
• Implement isort's default-section setting (#10149)

Bug fixes

• Remove trailing space from CapWords message (#10220)

... (truncated)

Commits

• a892fc7 Bump version to v0.3.2 (#10304)
• a067d87 Fix incorrect Parameter range for *args and **kwargs (#10283)
• b64f2ea Formatter: Improve single-with item formatting for Python 3.8 or older (#10276)
• 4bce801 Fix unstable with-items formatting (#10274)
• a56d42f Refactor with statement formatting to have explicit layouts (#10296)
• 1d97f27 Start tracking quoting style in the AST (#10298)
• 965adbe Fix trailing kwargs end of line comment after slash (#10297)
• c504d7a Track quoting style in the tokenizer (#10256)
• 72c9f7e Include actual conditions in E712 diagnostics (#10254)
• 57be3fc Treat typing.Annotated subscripts as type definitions (#10285)
• Additional commits viewable in compare view

Updates sphinx-github-changelog from 1.2.1 to 1.3.0

Release notes

Sourced from sphinx-github-changelog's releases.

1.3.0

• Fix crashes (#124)
• Bump jinja2 from 3.1.2 to 3.1.3 (#119)
• [pre-commit.ci] pre-commit autoupdate (#118)
• Bump urllib3 from 2.0.6 to 2.0.7 (#117)
• Bump urllib3 from 2.0.4 to 2.0.6 (#115)
• [pre-commit.ci] pre-commit autoupdate (#116)
• remove line referencing tox in MANIFEST (#113)
• Drop py3.7 and upgrade all deps (#112)

Commits

• 159c0bb Merge pull request #124 from ewjoachim/fixes
• 4927fef pre-commit
• b4c134e Fix Poetry & ReadTheDocs
• 5921df6 Fix crash when no token is provided and there's no changelog url
• 331466d Fix crash when release title is empty
• b89acad Merge pull request #119 from ewjoachim/dependabot/pip/jinja2-3.1.3
• c6647c9 Bump jinja2 from 3.1.2 to 3.1.3
• b6ae8f9 Merge pull request #118 from ewjoachim/pre-commit-ci-update-config
• c05a5bc [pre-commit.ci] auto fixes from pre-commit.com hooks
• 6f7323f [pre-commit.ci] pre-commit autoupdate
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions