Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump the production-dependencies group with 8 updates #1252

Merged

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jan 10, 2024

Bumps the production-dependencies group with 8 updates:

Package From To
marshmallow 3.17.1 3.20.2
typing-extensions 4.3.0 4.9.0
marshmallow-dataclass 8.4.2 8.6.0
lark 1.1.7 1.1.9
aiohttp 3.8.5 3.9.1
enum-tools 0.10.0 0.11.0
furo 2023.8.19 2023.9.10
pycryptodome 3.18.0 3.20.0

Updates marshmallow from 3.17.1 to 3.20.2

Changelog

Sourced from marshmallow's changelog.

3.20.2 (2024-01-09)


Bug fixes:

  • Fix Nested field type hint for lambda Schema types (:pr:2164). Thanks :user:somethingnew2-0 for the PR.

Other changes:

  • Officially support Python 3.12 (:pr:2188). Thanks :user:hugovk for the PR.

3.20.1 (2023-07-20)


Bug fixes:

  • Fix call to get_declared_fields: pass dict_cls again (:issue:2152). Thanks :user:Cheaterman for reporting.

3.20.0 (2023-07-20)


Features:

  • Add absolute parameter to URL validator and Url field (:pr:2123). Thanks :user:sirosen for the PR.
  • Use Abstract Base Classes to define FieldABC and SchemaABC (:issue:1449). Thanks :user:aditkumar72 for the PR.
  • Use OrderedSet as default set_class. Schemas are now ordered by default. (:issue:1744)

Bug fixes:

  • Handle OSError and OverflowError in utils.from_timestamp (:pr:2102). Thanks :user:TheBigRoomXXL for the PR.
  • Fix the default inheritance of nested partial schemas (:issue:2149). Thanks :user:matejsp for reporting.

Other changes:

  • Officially support Python 3.11 (:pr:2067).
  • Drop support for Python 3.7 (:pr:2135).

3.19.0 (2022-11-11)


Features:

... (truncated)

Commits
  • 154d4c1 Bump version and update changelog
  • a13e731 Bump LICENSE and fix changelog
  • 755a074 Prevent false from appearing under logo (#2221)
  • f98ad7f Bump alabaster from 0.7.13 to 0.7.15
  • 88ce4cb [pre-commit.ci] pre-commit autoupdate
  • b1857ef Bump autodocsumm from 0.2.11 to 0.2.12
  • 86b8790 [pre-commit.ci] pre-commit autoupdate (#2217)
  • 2ef3f44 Merge pull request #2215 from marshmallow-code/pre-commit_update
  • 24855ac Fix flake8 issues
  • 0547a8a Bump flake8-bugbear to 23.12.2 in pre-commit config
  • Additional commits viewable in compare view

Updates typing-extensions from 4.3.0 to 4.9.0

Release notes

Sourced from typing-extensions's releases.

4.9.0

This feature release adds typing_extensions.ReadOnly, as specified by PEP 705, and makes various other improvements, especially to @typing_extensions.deprecated().

There are no changes since 4.9.0rc1.

4.9.0rc1

  • Add support for PEP 705, adding typing_extensions.ReadOnly. Patch by Jelle Zijlstra.
  • All parameters on NewType.__call__ are now positional-only. This means that the signature of typing_extensions.NewType.__call__ now exactly matches the signature of typing.NewType.__call__. Patch by Alex Waygood.
  • Fix bug with using @deprecated on a mixin class. Inheriting from a deprecated class now raises a DeprecationWarning. Patch by Jelle Zijlstra.
  • @deprecated now gives a better error message if you pass a non-str argument to the msg parameter. Patch by Alex Waygood.
  • @deprecated is now implemented as a class for better introspectability. Patch by Jelle Zijlstra.
  • Exclude __match_args__ from Protocol members. Backport of python/cpython#110683 by Nikita Sobolev.
  • When creating a typing_extensions.NamedTuple class, ensure __set_name__ is called on all objects that define __set_name__ and exist in the values of the NamedTuple class's class dictionary. Patch by Alex Waygood, backporting python/cpython#111876.
  • Improve the error message when trying to call issubclass() against a Protocol that has non-method members. Patch by Alex Waygood (backporting python/cpython#112344, by Randolph Scholz).

4.8.0

Changes since 4.7.1:

  • Add typing_extensions.Doc, as proposed by PEP 727. Patch by Sebastián Ramírez.
  • Drop support for Python 3.7 (including PyPy-3.7). Patch by Alex Waygood.
  • Fix bug where get_original_bases() would return incorrect results when called on a concrete subclass of a generic class. Patch by Alex Waygood (backporting python/cpython#107584, by James Hilton-Balfe).
  • Fix bug where ParamSpec(default=...) would raise a TypeError on Python versions <3.11. Patch by James Hilton-Balfe

No changes since 4.8.0rc1.

4.8.0rc1

  • Add typing_extensions.Doc, as proposed by PEP 727. Patch by Sebastián Ramírez.
  • Drop support for Python 3.7 (including PyPy-3.7). Patch by Alex Waygood.
  • Fix bug where get_original_bases() would return incorrect results when called on a concrete subclass of a generic class. Patch by Alex Waygood

... (truncated)

Changelog

Sourced from typing-extensions's changelog.

Release 4.9.0 (December 9, 2023)

This feature release adds typing_extensions.ReadOnly, as specified by PEP 705, and makes various other improvements, especially to @typing_extensions.deprecated().

There are no changes since 4.9.0rc1.

Release 4.9.0rc1 (November 29, 2023)

  • Add support for PEP 705, adding typing_extensions.ReadOnly. Patch by Jelle Zijlstra.
  • All parameters on NewType.__call__ are now positional-only. This means that the signature of typing_extensions.NewType.__call__ now exactly matches the signature of typing.NewType.__call__. Patch by Alex Waygood.
  • Fix bug with using @deprecated on a mixin class. Inheriting from a deprecated class now raises a DeprecationWarning. Patch by Jelle Zijlstra.
  • @deprecated now gives a better error message if you pass a non-str argument to the msg parameter. Patch by Alex Waygood.
  • @deprecated is now implemented as a class for better introspectability. Patch by Jelle Zijlstra.
  • Exclude __match_args__ from Protocol members. Backport of python/cpython#110683 by Nikita Sobolev.
  • When creating a typing_extensions.NamedTuple class, ensure __set_name__ is called on all objects that define __set_name__ and exist in the values of the NamedTuple class's class dictionary. Patch by Alex Waygood, backporting python/cpython#111876.
  • Improve the error message when trying to call issubclass() against a Protocol that has non-method members. Patch by Alex Waygood (backporting python/cpython#112344, by Randolph Scholz).

Release 4.8.0 (September 17, 2023)

No changes since 4.8.0rc1.

Release 4.8.0rc1 (September 7, 2023)

  • Add typing_extensions.Doc, as proposed by PEP 727. Patch by Sebastián Ramírez.
  • Drop support for Python 3.7 (including PyPy-3.7). Patch by Alex Waygood.
  • Fix bug where get_original_bases() would return incorrect results when called on a concrete subclass of a generic class. Patch by Alex Waygood (backporting python/cpython#107584, by James Hilton-Balfe).
  • Fix bug where ParamSpec(default=...) would raise a TypeError on Python versions <3.11. Patch by James Hilton-Balfe

Release 4.7.1 (July 2, 2023)

  • Fix support for TypedDict, NamedTuple and is_protocol on PyPy-3.7 and

... (truncated)

Commits

Updates marshmallow-dataclass from 8.4.2 to 8.6.0

Changelog

Sourced from marshmallow-dataclass's changelog.

v8.6.0 (2023-09-16)

  • New field in associated Meta classes: include_non_init:
  • This adds the ability to include non init-ed fields into the schema

v8.5.14 (2023-04-27)

  • Pin typing-extensions>=2.4.0 to ensure support for the field_specifiers paramter of the dataclass_transform decorator. (#240)

  • Tighten pin on typing-inspect in an attempt to prevent breakage from a hypothetical major version bump.

  • Tighten pin on typeguard to exclude older versions for which our tests fail.

#240: lovasoa/marshmallow_dataclass#240

v8.5.13 (2023-04-20)

  • Fix to allow type-checkers to properly handle fields initialized by a dataclasses.Field instance. (#239)

#239: lovasoa/marshmallow_dataclass#239

v8.5.12 (2023-03-15)

  • Fixes to work with typeguard 3.x. (#235, #234)
  • Add the @​dataclass_transform decorator ([PEP 681]) to marshmallow_dataclass.dataclass. This fixes our mypy plugin for mypy>=1.1.1.

#234: lovasoa/marshmallow_dataclass#234 #235: lovasoa/marshmallow_dataclass#235 [PEP 681]: https://peps.python.org/pep-0681/

v8.5.11 (2023-01-08)

  • Replace the use of marshmallow-enum with the native marshmallow.field.Enum (when using a sufficiently recent version of marshmallow). (#227[], #225[])

#225: lovasoa/marshmallow_dataclass#225 #227: lovasoa/marshmallow_dataclass#227

v8.5.10 (2022-11-09)

  • We now test under python version 3.11 (as well as 3.6 through 3.10). (#220[])

  • Recognize the variable-length, homogeneous tuple types `Tuple[T,

... (truncated)

Commits
  • 260c4fe v8.6.0
  • 5f38b93 Add Meta option to include non init-ed fields (#246)
  • 06f0660 Release 8.5.14
  • 1ede469 fix: Fix tests badge in README
  • 6d581f2 fix(deps): adjust pin for typeguard
  • 6b2d93d fix(deps): tighten pin on typing-inspect
  • 490fa2b fix(#240): pin typing-extensions>=2.4.0
  • 2f8bf4b Release 8.5.13
  • 5f7ffd0 dataclass_transform: use regular dataclasses.field for field_specifiers
  • 792dc66 Release 8.5.12
  • Additional commits viewable in compare view

Updates lark from 1.1.7 to 1.1.9

Release notes

Sourced from lark's releases.

1.1.8 - Output-stable Earley; Interactive standalone; various improvements

What's Changed

New Contributors

Full Changelog: lark-parser/lark@1.1.7...1.1.8

Commits
  • 262ab71 Version bump (1.1.9)
  • ab11ead Merge pull request #1377 from MegaIng/patch-5
  • b31ef8f MAXWIDTH is not part of sre_constants
  • e4dbb4f Use MAXWIDTH instead of MAXREPEAT when available
  • 942366b Merge pull request #1365 from michael-k/python3.12
  • a835092 Run tests against Python 3.12
  • 67df05b Docs: Update readthedocs config to newer version
  • ab8b0f0 Merge pull request #1357 from ei-grad/patch-1
  • 0104dd4 Fix nested list markdown syntax in how_to_use.md
  • a43373c Version bump (1.1.8)
  • Additional commits viewable in compare view

Updates aiohttp from 3.8.5 to 3.9.1

Release notes

Sourced from aiohttp's releases.

3.9.1

Bugfixes

  • Fixed importing aiohttp under PyPy on Windows.

    (#7848)

  • Fixed async concurrency safety in websocket compressor.

    (#7865)

  • Fixed ClientResponse.close() releasing the connection instead of closing.

    (#7869)

  • Fixed a regression where connection may get closed during upgrade. -- by :user:Dreamsorcerer

    (#7879)

  • Fixed messages being reported as upgraded without an Upgrade header in Python parser. -- by :user:Dreamsorcerer

    (#7895)


3.9.0

Features

  • Introduced AppKey for static typing support of Application storage. See https://docs.aiohttp.org/en/stable/web_advanced.html#application-s-config

    (#5864)

  • Added a graceful shutdown period which allows pending tasks to complete before the application's cleanup is called. The period can be adjusted with the shutdown_timeout parameter. -- by :user:Dreamsorcerer. See https://docs.aiohttp.org/en/latest/web_advanced.html#graceful-shutdown

    (#7188)

  • Added handler_cancellation <https://docs.aiohttp.org/en/stable/web_advanced.html#web-handler-cancellation>_ parameter to cancel web handler on client disconnection. -- by :user:mosquito This (optionally) reintroduces a feature removed in a previous release. Recommended for those looking for an extra level of protection against denial-of-service attacks.

    (#7056)

  • Added support for setting response header parameters max_line_size and max_field_size.

... (truncated)

Changelog

Sourced from aiohttp's changelog.

3.9.1 (2023-11-26)

Bugfixes

  • Fixed importing aiohttp under PyPy on Windows.

    [#7848](https://github.com/aio-libs/aiohttp/issues/7848) <https://github.com/aio-libs/aiohttp/issues/7848>_

  • Fixed async concurrency safety in websocket compressor.

    [#7865](https://github.com/aio-libs/aiohttp/issues/7865) <https://github.com/aio-libs/aiohttp/issues/7865>_

  • Fixed ClientResponse.close() releasing the connection instead of closing.

    [#7869](https://github.com/aio-libs/aiohttp/issues/7869) <https://github.com/aio-libs/aiohttp/issues/7869>_

  • Fixed a regression where connection may get closed during upgrade. -- by :user:Dreamsorcerer

    [#7879](https://github.com/aio-libs/aiohttp/issues/7879) <https://github.com/aio-libs/aiohttp/issues/7879>_

  • Fixed messages being reported as upgraded without an Upgrade header in Python parser. -- by :user:Dreamsorcerer

    [#7895](https://github.com/aio-libs/aiohttp/issues/7895) <https://github.com/aio-libs/aiohttp/issues/7895>_


3.9.0 (2023-11-18)

Features

  • Introduced AppKey for static typing support of Application storage. See https://docs.aiohttp.org/en/stable/web_advanced.html#application-s-config

    [#5864](https://github.com/aio-libs/aiohttp/issues/5864) <https://github.com/aio-libs/aiohttp/issues/5864>_

  • Added a graceful shutdown period which allows pending tasks to complete before the application's cleanup is called. The period can be adjusted with the shutdown_timeout parameter. -- by :user:Dreamsorcerer. See https://docs.aiohttp.org/en/latest/web_advanced.html#graceful-shutdown

    [#7188](https://github.com/aio-libs/aiohttp/issues/7188) <https://github.com/aio-libs/aiohttp/issues/7188>_

  • Added handler_cancellation <https://docs.aiohttp.org/en/stable/web_advanced.html#web-handler-cancellation>_ parameter to cancel web handler on client disconnection. -- by :user:mosquito This (optionally) reintroduces a feature removed in a previous release.

... (truncated)

Commits

Updates enum-tools from 0.10.0 to 0.11.0

Release notes

Sourced from enum-tools's releases.

Version 0.11.0

Automatically copied from PyPI.


Powered by OctoCheese
📝 docs | :octocat: repo | 🙋 issues | 🏪 marketplace

Commits
  • 80b9772 Bump version v0.10.0 -> v0.11.0
  • dfae71a Lint
  • 448b827 Replace windows mojibake in tests.
  • cc35bce Make type: ignore comments more specific
  • ccaa115 Ensure members is always a list of ObjectMember objects for Sphinx 7.2
  • b37071d Use proper endash in README.rst
  • 4668494 Test on Sphinx 7.2
  • 6d33ec9 Use ObjectMember interface for Sphinx autoenum members rather than tuples (#78)
  • da0a72b Don't error on utcfromtimestamp deprecation warnings.
  • 5e67525 Update type hints
  • Additional commits viewable in compare view

Updates furo from 2023.8.19 to 2023.9.10

Changelog

Sourced from furo's changelog.

Changelog

2023.09.10 -- Zesty Zaffre

  • Make asset hash injection idempotent, fixing Sphinx 6 compatibility.
  • Fix the check for HTML builders, fixing non-HTML Read the Docs builds.

2023.08.19 -- Xenolithic Xanadu

  • Fix missing search context with Sphinx 7.2, for dirhtml builds.
  • Drop support for Python 3.7.
  • Present configuration errors in a better format -- thanks @​AA-Turner!
  • Bump require_sphinx() to Sphinx 6.0, in line with dependency changes in Unassuming Ultramarine.

2023.08.17 -- Wonderous White

  • Fix compatiblity with Sphinx 7.2.0 and 7.2.1.

2023.07.26 -- Vigilant Volt

  • Fix compatiblity with Sphinx 7.1.
  • Improve how content overflow is handled.
  • Improve how literal blocks containing inline code are handled.

2023.05.20 -- Unassuming Ultramarine

  • ✨ Add support for Sphinx 7.
  • Drop support for Sphinx 5.
  • Improve the screen-reader label for sidebar collapse.
  • Make it easier to create derived themes from Furo.
  • Bump all JS dependencies (NodeJS and npm packages).

2023.03.27 -- Tasty Tangerine

  • Regenerate with newer version of sphinx-theme-builder, to fix RECORD hashes.
  • Add missing class to Font Awesome examples

2023.03.23 -- Sassy Saffron

... (truncated)

Commits
  • 2718ca4 Prepare release: 2023.09.10
  • c22c99d Update changelog
  • c37e849 Quote a not-runtime-generic type annotation
  • 9cfdf44 Rework infrastructure for linting
  • 5abeb9f Fix the check for HTML builders
  • ee2ab54 Tweak how tests are run with nox
  • cdae236 Test against Sphinx minor versions in CI
  • 9e40071 Make asset hash injection idempotent
  • aab86f4 Revert "Exclude incompatible Sphinx releases (#711)"
  • 4dd6eec Exclude incompatible Sphinx releases (#711)
  • Additional commits viewable in compare view

Updates pycryptodome from 3.18.0 to 3.20.0

Release notes

Sourced from pycryptodome's releases.

v3.20.0 - Amiens

New features

  • Added support for TurboSHAKE128 and TurboSHAKE256.
  • Added method Crypto.Hash.new() to generate a hash object given a hash name.
  • Added support for AES-GCM encryption of PBES2 and PKCS#8 containers.
  • Added support for SHA-2 and SHA-3 algorithms in PBKDF2 when creating PBES2 and PKCS#8 containers.
  • Export of RSA keys accepts the prot_params dictionary as parameter to control the number of iterations for PBKDF2 and scrypt.
  • C unit tests also run on non-x86 architectures.

Resolved issues

  • GH#787: Fixed autodetect logic for GCC 14 in combination with LTO.

v3.20.0 - Amiens (pycryptodomex)

New features

  • Added support for TurboSHAKE128 and TurboSHAKE256.
  • Added method Crypto.Hash.new() to generate a hash object given a hash name.
  • Added support for AES-GCM encryption of PBES2 and PKCS#8 containers.
  • Added support for SHA-2 and SHA-3 algorithms in PBKDF2 when creating PBES2 and PKCS#8 containers.
  • Export of RSA keys accepts the prot_params dictionary as parameter to control the number of iterations for PBKDF2 and scrypt.
  • C unit tests also run on non-x86 architectures.

Resolved issues

  • GH#787: Fixed autodetect logic for GCC 14 in combination with LTO.

v3.19.1 - Zeil

Resolved issues

  • Fixed a side-channel leakage with OAEP decryption that could be exploited to carry out a Manger attack. Thanks to Hubert Kario.

v3.19.1 - Zeil (pycryptodomex)

Resolved issues

  • Fixed a side-channel leakage with OAEP decryption that could be exploited to carry out a Manger attack. Thanks to Hubert Kario.

... (truncated)

Changelog

Sourced from pycryptodome's changelog.

3.20.0 (9 January 2024) ++++++++++++++++++++++++++

New features

  • Added support for TurboSHAKE128 and TurboSHAKE256.
  • Added method Crypto.Hash.new() to generate a hash object given a hash name.
  • Added support for AES-GCM encryption of PBES2 and PKCS#8 containers.
  • Added support for SHA-2 and SHA-3 algorithms in PBKDF2 when creating PBES2 and PKCS#8 containers.
  • Export of RSA keys accepts the prot_params dictionary as parameter to control the number of iterations for PBKDF2 and scrypt.
  • C unit tests also run on non-x86 architectures.

Resolved issues

  • GH#787: Fixed autodetect logic for GCC 14 in combination with LTO.

3.19.1 (28 December 2023) ++++++++++++++++++++++++++

Resolved issues

  • Fixed a side-channel leakage with OAEP decryption that could be exploited to carry out a Manger attack (CVE-2023-52323). Thanks to Hubert Kario.

3.19.0 (16 September 2023) ++++++++++++++++++++++++++

New features

  • The update() methods of TupleHash128 and TupleHash256 objects can now hash multiple items (byte strings) at once. Thanks to Sylvain Pelissier.
  • Added support for ECDH, with Crypto.Protocol.DH.

Resolved issues

  • GH#754: due to a bug in cffi, do not use it on Windows with Python 3.12+.
Commits
  • b6ab946 Bump version and update changelog
  • ebfef94 Update examples
  • 03a66b2 Merge branch 'rsa_pkcs8_params'
  • df3d9a5 Update requirements-test.txt
  • 6f51811 Update Changelog
  • a05e61b Update typing for RSA and ECC
  • dcb92e2 Update RSA and ECC documentation
  • 22b854b Fix typing for PBES and PKCS8
  • a14a222 Update the PKCS#8 documentation
  • 8677775 Add AES-GCM as PBES2/PKCS8 mode
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Jan 10, 2024
Copy link

codecov bot commented Jan 10, 2024

Codecov Report

All modified and coverable lines are covered by tests ✅

Comparison is base (db18a88) 98.00% compared to head (380d6f1) 98.00%.

Additional details and impacted files
@@             Coverage Diff              @@
##           development    #1252   +/-   ##
============================================
  Coverage        98.00%   98.00%           
============================================
  Files               89       89           
  Lines             4506     4506           
============================================
  Hits              4416     4416           
  Misses              90       90           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

Bumps the production-dependencies group with 8 updates:

| Package | From | To |
| --- | --- | --- |
| [marshmallow](https://github.com/marshmallow-code/marshmallow) | `3.17.1` | `3.20.2` |
| [typing-extensions](https://github.com/python/typing_extensions) | `4.3.0` | `4.9.0` |
| [marshmallow-dataclass](https://github.com/lovasoa/marshmallow_dataclass) | `8.4.2` | `8.6.0` |
| [lark](https://github.com/lark-parser/lark) | `1.1.7` | `1.1.9` |
| [aiohttp](https://github.com/aio-libs/aiohttp) | `3.8.5` | `3.9.1` |
| [enum-tools](https://github.com/domdfcoding/enum_tools) | `0.10.0` | `0.11.0` |
| [furo](https://github.com/pradyunsg/furo) | `2023.8.19` | `2023.9.10` |
| [pycryptodome](https://github.com/Legrandin/pycryptodome) | `3.18.0` | `3.20.0` |


Updates `marshmallow` from 3.17.1 to 3.20.2
- [Changelog](https://github.com/marshmallow-code/marshmallow/blob/dev/CHANGELOG.rst)
- [Commits](marshmallow-code/marshmallow@3.17.1...3.20.2)

Updates `typing-extensions` from 4.3.0 to 4.9.0
- [Release notes](https://github.com/python/typing_extensions/releases)
- [Changelog](https://github.com/python/typing_extensions/blob/main/CHANGELOG.md)
- [Commits](python/typing_extensions@4.3.0...4.9.0)

Updates `marshmallow-dataclass` from 8.4.2 to 8.6.0
- [Changelog](https://github.com/lovasoa/marshmallow_dataclass/blob/master/CHANGELOG.md)
- [Commits](lovasoa/marshmallow_dataclass@v8.4.2...v8.6.0)

Updates `lark` from 1.1.7 to 1.1.9
- [Release notes](https://github.com/lark-parser/lark/releases)
- [Changelog](https://github.com/lark-parser/lark/blob/master/CHANGELOG.md)
- [Commits](lark-parser/lark@1.1.7...1.1.9)

Updates `aiohttp` from 3.8.5 to 3.9.1
- [Release notes](https://github.com/aio-libs/aiohttp/releases)
- [Changelog](https://github.com/aio-libs/aiohttp/blob/master/CHANGES.rst)
- [Commits](aio-libs/aiohttp@v3.8.5...v3.9.1)

Updates `enum-tools` from 0.10.0 to 0.11.0
- [Release notes](https://github.com/domdfcoding/enum_tools/releases)
- [Commits](domdfcoding/enum_tools@v0.10.0...v0.11.0)

Updates `furo` from 2023.8.19 to 2023.9.10
- [Release notes](https://github.com/pradyunsg/furo/releases)
- [Changelog](https://github.com/pradyunsg/furo/blob/main/docs/changelog.md)
- [Commits](pradyunsg/furo@2023.08.19...2023.09.10)

Updates `pycryptodome` from 3.18.0 to 3.20.0
- [Release notes](https://github.com/Legrandin/pycryptodome/releases)
- [Changelog](https://github.com/Legrandin/pycryptodome/blob/master/Changelog.rst)
- [Commits](Legrandin/pycryptodome@v3.18.0...v3.20.0)

---
updated-dependencies:
- dependency-name: marshmallow
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: typing-extensions
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: marshmallow-dataclass
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: lark
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: aiohttp
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: enum-tools
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: furo
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: pycryptodome
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/pip/production-dependencies-74a842615d branch from ea1d739 to 7863b3a Compare January 11, 2024 09:32
@ddoktorski ddoktorski merged commit 75c6b8a into development Jan 19, 2024
16 checks passed
@dependabot dependabot bot deleted the dependabot/pip/production-dependencies-74a842615d branch January 19, 2024 14:24
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants