Bump the pip group with 7 updates

[dependabot]

Bumps the pip group with 7 updates:

Package	From	To
sqlalchemy	2.0.35	2.0.36
anyio	4.6.0	4.6.2.post1
ipython	8.27.0	8.29.0
pre-commit	3.8.0	4.0.1
mypy	1.11.2	1.13.0
coverage	7.6.1	7.6.4
asyncpg	0.29.0	0.30.0

Updates sqlalchemy from 2.0.35 to 2.0.36

Release notes

Sourced from sqlalchemy's releases.

2.0.36

Released: October 15, 2024

orm

• [orm] [usecase] Added new parameter _orm.mapped_column.hash to ORM constructs such as _orm.mapped_column(), _orm.relationship(), etc., which is interpreted for ORM Native Dataclasses in the same way as other dataclass-specific field parameters.

  References: #11923

• [orm] [bug] Fixed bug in ORM bulk update/delete where using RETURNING with bulk update/delete in combination with populate_existing would fail to accommodate the populate_existing option.

  References: #11912

• [orm] [bug] Continuing from #11912, columns marked with mapped_column.onupdate, mapped_column.server_onupdate, or Computed are now refreshed in ORM instances when running an ORM enabled UPDATE with WHERE criteria, even if the statement does not use RETURNING or populate_existing.

  References: #11917

• [orm] [bug] Fixed regression caused by fixes to joined eager loading in #11449 released in 2.0.31, where a particular joinedload case could not be asserted correctly. We now have an example of that case so the assertion has been repaired to allow for it.

  References: #11965

• [orm] [bug] Improved the error message emitted when trying to map as dataclass a class while also manually providing the __table__ attribute. This usage is currently not supported.

  References: #11973

• [orm] [bug] Refined the check which the ORM lazy loader uses to detect "this would be loading by primary key and the primary key is NULL, skip loading" to take into account the current setting for the orm.Mapper.allow_partial_pks parameter. If this parameter is False, then a composite PK value that has partial NULL elements should also be skipped. This can apply to some composite overlapping foreign key configurations.

... (truncated)

Commits

• See full diff in compare view

Updates anyio from 4.6.0 to 4.6.2.post1

Release notes

Sourced from anyio's releases.

4.6.2

• Fixed regression caused by (#807) that prevented the use of parametrized async fixtures

4.6.1

This release contains all the changes from both v4.5.1 and v4.6.0, plus:

• Fixed TaskGroup and CancelScope producing cyclic references in tracebacks when raising exceptions (#806) (PR by @​graingert)

Commits

• c484425 Bumped up the version
• fb81dfe Fixed a regression in the pytest plugin that broke parametrized async fixtures
• 445e59e Bumped up the version
• 64f570e Fixed tox configuration
• 5abc9ec Updated Path documentation and made is_junction() conditional (#800)
• ede2029 Fixed TypeError when TLS handshake fails with truststore SSLContext (#801)
• 163f10c Fixed cyclic garbage that keeps traceback frames alive in task group exceptio...
• 0614b4f Migrated to native TOML configuration for Tox
• 012a60c Made test_start_task_soon_cancel_immediately() less flaky
• 65ef48a Rebind instance method fixtures to the same instance as the test (#807)
• Additional commits viewable in compare view

Updates ipython from 8.27.0 to 8.29.0

Commits

• af19fb0 release 8.29.0
• b2fc308 Whats new 8.29 (#14560)
• 9c221bb Whats new 8.29
• d022657 Fix line stripping edge case for %load magic command (#14495)
• 25703b5 Refactor with Pathlib for setupbase.py (#14543)
• de562f8 Fix re pattern pretty print (#14559)
• 298e9f5 Fix formatting
• 2888354 Fix line stripping logic
• d7d58a3 ENH: add webp support to IPython.display.Image and complete identification of...
• 5f39fd8 Fix str error in path again
• Additional commits viewable in compare view

Updates pre-commit from 3.8.0 to 4.0.1

Release notes

Sourced from pre-commit's releases.

pre-commit v4.0.1

Fixes

• Fix pre-commit migrate-config for unquoted deprecated stages names with purelib pyyaml.
  • #3324 PR by @​asottile.
  • pre-commit-ci/issues#234 issue by @​lorenzwalthert.

pre-commit v4.0.0

Features

• Improve pre-commit migrate-config to handle more yaml formats.
  • #3301 PR by @​asottile.
• Handle stages deprecation in pre-commit migrate-config.
  • #3302 PR by @​asottile.
  • #2732 issue by @​asottile.
• Upgrade ruby-build.
  • #3199 PR by @​ThisGuyCodes.
• Add "sensible regex" warnings to repo: meta.
  • #3311 PR by @​asottile.
• Add warnings for deprecated stages (commit -> pre-commit, push -> pre-push, merge-commit -> pre-merge-commit).
  • #3312 PR by @​asottile.
  • #3313 PR by @​asottile.
  • #3315 PR by @​asottile.
  • #2732 issue by @​asottile.

Migrating

• language: python_venv has been removed -- use language: python instead.
  • #3320 PR by @​asottile.
  • #2734 issue by @​asottile.

Changelog

Sourced from pre-commit's changelog.

4.0.1 - 2024-10-08

Fixes

• Fix pre-commit migrate-config for unquoted deprecated stages names with purelib pyyaml.
  • #3324 PR by @​asottile.
  • pre-commit-ci/issues#234 issue by @​lorenzwalthert.

4.0.0 - 2024-10-05

Features

• Improve pre-commit migrate-config to handle more yaml formats.
  • #3301 PR by @​asottile.
• Handle stages deprecation in pre-commit migrate-config.
  • #3302 PR by @​asottile.
  • #2732 issue by @​asottile.
• Upgrade ruby-build.
  • #3199 PR by @​ThisGuyCodes.
• Add "sensible regex" warnings to repo: meta.
  • #3311 PR by @​asottile.
• Add warnings for deprecated stages (commit -> pre-commit, push -> pre-push, merge-commit -> pre-merge-commit).
  • #3312 PR by @​asottile.
  • #3313 PR by @​asottile.
  • #3315 PR by @​asottile.
  • #2732 issue by @​asottile.

Migrating

• language: python_venv has been removed -- use language: python instead.
  • #3320 PR by @​asottile.
  • #2734 issue by @​asottile.

Commits

• cc4a522 v4.0.1
• 772d7d4 Merge pull request #3324 from pre-commit/migrate-config-purelib
• 222c62b fix migrate-config for purelib yaml
• 3d5548b Merge pull request #3323 from pre-commit/pre-commit-ci-update-config
• 4235a87 [pre-commit.ci] pre-commit autoupdate
• dbccd57 v4.0.0
• d07e529 Merge pull request #3320 from pre-commit/remove-python-venv
• 801b956 remove deprecated python_venv alias
• a2f7b80 Merge pull request #3315 from pre-commit/warn-deprecated-stage-names-on-init
• d317223 add warning for deprecates stages for remote repos on init
• Additional commits viewable in compare view

Updates mypy from 1.11.2 to 1.13.0

Changelog

Sourced from mypy's changelog.

Mypy Release Notes

Next release

Change to enum membership semantics

As per the updated typing specification for enums, enum members must be left unannotated.

class Pet(Enum):
    CAT = 1  # Member attribute
    DOG = 2  # Member attribute
    WOLF: int = 3  # New error: Enum members must be left unannotated
species: str  # Considered a non-member attribute

In particular, the specification change can result in issues in type stubs (.pyi files), since historically it was common to leave the value absent:

# In a type stub (.pyi file)
class Pet(Enum):
# Change in semantics: previously considered members, now non-member attributes
CAT: int
DOG: int
# Mypy will now issue a warning if it detects this situation in type stubs:
# > Detected enum "Pet" in a type stub with zero members.
# > There is a chance this is due to a recent change in the semantics of enum membership.
# > If so, use `member = value` to mark an enum member, instead of `member: type`

class Pet(Enum):
# As per the specification, you should now do one of the following:
DOG = 1  # Member attribute with value 1 and known type
WOLF = cast(int, ...)  # Member attribute with unknown value but known type
LION = ...  # Member attribute with unknown value and unknown type

Contributed by Terence Honles in PR 17207 and Shantanu Jain in PR 18068.

Mypy 1.13

We’ve just uploaded mypy 1.13 to the Python Package Index (PyPI). Mypy is a static type checker for Python. You can install it as follows:

python3 -m pip install -U mypy

... (truncated)

Commits

• eb31034 Bump version to 1.13.0
• 2eeb588 Update changelog for 1.12.1 (#17999)
• bc0386b Changelog for 1.13 (#18000)
• 5c4d2db Add faster-cache extra, test in CI (#17978)
• 854ad18 Make is_sub_path faster (#17962)
• 50aa4ca Speed up stubs suggestions (#17965)
• 7c27808 Use orjson instead of json, when available (#17955)
• 2cd2406 Use fast path in modulefinder more often (#17950)
• e20aaee Let mypyc optimise os.path.join (#17949)
• 159974c Use sha1 for hashing (#17953)
• Additional commits viewable in compare view

Updates coverage from 7.6.1 to 7.6.4

Changelog

Sourced from coverage's changelog.

Version 7.6.4 — 2024-10-20

• fix: multi-line with statements could cause contained branches to be incorrectly marked as missing (issue 1880_). This is now fixed.

.. _issue 1880: nedbat/coveragepy#1880

.. _changes_7-6-3:

Version 7.6.3 — 2024-10-13

• Fix: nested context managers could incorrectly be analyzed to flag a missing branch on the last context manager, as described in issue 1876_. This is now fixed.

• Fix: the missing branch message about not exiting a module had an extra "didn't," as described in issue 1873_. This is now fixed.

.. _issue 1873: nedbat/coveragepy#1873 .. _issue 1876: nedbat/coveragepy#1876

.. _changes_7-6-2:

Version 7.6.2 — 2024-10-09

• Dropped support for Python 3.8 and PyPy 3.8.

• Fix: a final wildcard match/case clause assigning to a name (case _ as value) was incorrectly marked as a missing branch. This is now fixed, closing issue 1860_.

• Fewer things are considered branches now. Lambdas, comprehensions, and generator expressions are no longer marked as missing branches if they don't complete execution. Closes issue 1852_.

• Fix: the HTML report didn't properly show multi-line f-strings that end with a backslash continuation. This is now fixed, closing issue 1836, thanks to LiuYinCarl and Marco Ricci <pull 1838_>.

• Fix: the LCOV report now has correct line numbers (fixing issue 1846) and better branch descriptions for BRDA records (fixing issue 1850). There are other changes to lcov also, including a new configuration option :ref:line_checksums <config_lcov_line_checksums> to control whether line checksums are included in the lcov report. The default is false. To keep checksums set it to true. All this work is thanks to Zack Weinberg

... (truncated)

Commits

• f24f76b docs: sample HTML for 7.6.4
• 96e10f7 docs: prep for 7.6.4
• b8c236a fix: multi-line with-statements exit correctly. #1880
• 64b7a45 docs: another discord reference
• 68d7427 docs: Python Discord
• 43adcea build: include 3.14 in the usual Pythons
• fb2b49f build: github_releases can update older releases, and pauses to get the sorti...
• ca550ca 3.0b2 wasn't correctly titled
• debcc77 build: bump version
• 342a4cb docs: sample HTML for 7.6.3
• Additional commits viewable in compare view

Updates asyncpg from 0.29.0 to 0.30.0

Release notes

Sourced from asyncpg's releases.

v0.30.0

Support Python 3.13 and PostgreSQL 17.

Improvements

• Implement GSSAPI authentication (by @​eltoder in 1d4e5680 for #1122)

• Implement SSPI authentication (by @​eltoder in 1aab2094 for #1128)

• Add initial typings (by @​bryanforbes in d42432bf for #1127)

• Allow building with Cython 3 (by @​musicinmybrain in 258d8a95 for #1101)

• docs: fix connection pool close call (#1125) (by @​paulovitorweb in e8488149 for #1125)

• Add support for the sslnegotiation parameter (by @​elprans in afdb05c7 for #1187)

• Test and build on Python 3.13 (by @​elprans in 3aa98944 for #1188)

• Support PostgreSQL 17 (by @​elprans in cee97e1a for #1189) (by @​MeggyCal in aa2d0e69 for #1185)

• Add fetchmany to execute many and return rows (by @​rossmacarthur in 73f2209d for #1175)

• Add connect kwarg to Pool to better support GCP's CloudSQL (by @​d1manson in 3ee19baa for #1170)

• Allow customizing connection state reset (#1191) (by @​elprans in f6ec755c for #1191)

Fixes

• s/quote/quote_plus/ in the note about DSN part quoting (by @​elprans in 1194a8a6 for #1151)

• Use asyncio.run() instead of run_until_complete() (by @​eltoder in 9fcddfc1 for #1140)

• Require async_timeout for python < 3.11 (#1177)

... (truncated)

Commits

• bae282e asyncpg v0.30.0
• 965fb08 Fix release workflow
• f6ec755 Allow customizing connection state reset (#1191)
• 3ef884e Upgrade Sphinx
• 3ee19ba Add connect_fn kwarg to Pool to better support GCP's CloudSQL (#1170)
• 73f2209 Add fetchmany to execute many and return rows (#1175)
• b732b4f tests: Attempt to inhibit spurious ConnectionResetError on Windows (#1190)
• cee97e1 Test on PostgreSQL 17 (#1189)
• 3aa9894 Test and build on Python 3.13 (#1188)
• afdb05c Add support for the sslnegotiation parameter (#1187)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[TheSuperiorStanislav]

@dependabot ignore pre-commit major version

PyCQA/docformatter#293

[dependabot]

OK, I won't notify you about version 4.x.x of pre-commit again, unless you unignore it.

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.