Bump the pip group across 1 directory with 4 updates

[dependabot]

Bumps the pip group with 3 updates in the / directory: eth-abi, requests and setuptools.

Updates eth-abi from 2.2.0 to 5.0.1

Changelog

Sourced from eth-abi's changelog.

eth-abi v5.0.1 (2024-03-04)

Bugfixes

- During decoding, verify all pointers in arrays and tuples point to a valid location in the payload (`[#226](https://github.com/ethereum/eth-abi/issues/226) <https://github.com/ethereum/eth-abi/issues/226>`__)
- Fix memory leak warning in NodeVisitor and ABIRegistry (`[#230](https://github.com/ethereum/eth-abi/issues/230) <https://github.com/ethereum/eth-abi/issues/230>`__)
Internal Changes - for eth-abi Contributors

• Clear mypy misc-type errors and add top-level py.typed file back ([#221](https://github.com/ethereum/eth-abi/issues/221) <https://github.com/ethereum/eth-abi/issues/221>__)

eth-abi v5.0.0 (2024-01-09)

Breaking Changes

- Drop python 3.7 support (`[#217](https://github.com/ethereum/eth-abi/issues/217) <https://github.com/ethereum/eth-abi/issues/217>`__)
Internal Changes - for eth-abi Contributors

• Merge updates from the project template, notably, use pre-commit for linting and change the name of the master branch to main ([#217](https://github.com/ethereum/eth-abi/issues/217) <https://github.com/ethereum/eth-abi/issues/217>__)
• Corrected format of booleans in pyproject.toml and added a test for the presence of the eth_abi.__version__ attribute ([#219](https://github.com/ethereum/eth-abi/issues/219) <https://github.com/ethereum/eth-abi/issues/219>__)

eth-abi v4.2.1 (2023-09-13)

Internal Changes - for eth-abi contributors

- Add ``build.os`` section to readthedocs build settings (`[#213](https://github.com/ethereum/eth-abi/issues/213) <https://github.com/ethereum/eth-abi/issues/213>`__)
Miscellaneous changes

- `[#214](https://github.com/ethereum/eth-abi/issues/214) &lt;https://github.com/ethereum/eth-abi/issues/214&gt;`__
eth-abi v4.2.0 (2023-08-28)
&lt;/tr&gt;&lt;/table&gt;

</code></pre>

</blockquote>

<p>... (truncated)</p>

</details>

<details>

<summary>Commits</summary>
<ul>

<li><a href="https://github.com/ethereum/eth-abi/commit/be95178fda29e50c2378163cd2239abe842d8bbd&quot;&gt;&lt;code&gt;be95178&lt;/code&gt;&lt;/a> Bump version: 5.0.0 → 5.0.1</li>

<li><a href="https://github.com/ethereum/eth-abi/commit/00f990ed135cf203f1407bf05184cfc9f336ba3f&quot;&gt;&lt;code&gt;00f990e&lt;/code&gt;&lt;/a> Compile release notes for v5.0.1</li>

<li><a href="https://github.com/ethereum/eth-abi/commit/82c1ad37a866472562d81fedaef0f4fed0a08269&quot;&gt;&lt;code&gt;82c1ad3&lt;/code&gt;&lt;/a> add validate_pointers for tuples and arrays, add tests and more</li>

<li><a href="https://github.com/ethereum/eth-abi/commit/75aab7cdcc2a1200b0cebaaee84d0d816f9147be&quot;&gt;&lt;code&gt;75aab7c&lt;/code&gt;&lt;/a> remove warning of ABIv2 being unstable</li>

<li><a href="https://github.com/ethereum/eth-abi/commit/6063bf1f3f1f6fc0e0e74e4d6e7f86e62fc850b2&quot;&gt;&lt;code&gt;6063bf1&lt;/code&gt;&lt;/a> add newsfragments file</li>

<li><a href="https://github.com/ethereum/eth-abi/commit/2367eef95b5b28945bf912ae56640682e67ff1da&quot;&gt;&lt;code&gt;2367eef&lt;/code&gt;&lt;/a> 🚨 fix linting warning (rule B019)</li>

<li><a href="https://github.com/ethereum/eth-abi/commit/abbe2100a5e7d8d0913e83632fffd77ea2ab75a1&quot;&gt;&lt;code&gt;abbe210&lt;/code&gt;&lt;/a> type codec.py and exceptions, change mypy ignore from files to error types, a...</li>

<li><a href="https://github.com/ethereum/eth-abi/commit/d063fc6e9195f20d9c42a88dde3f6e4b3319f067&quot;&gt;&lt;code&gt;d063fc6&lt;/code&gt;&lt;/a> Bump version: 4.2.1 → 5.0.0</li>

<li><a href="https://github.com/ethereum/eth-abi/commit/7641e321c89b0ebba355830819036bacbb5072db&quot;&gt;&lt;code&gt;7641e32&lt;/code&gt;&lt;/a> Compile release notes for v5.0.0</li>

<li><a href="https://github.com/ethereum/eth-abi/commit/31866a392ed3ac376ea00d8ab57e4a5f4818ceee&quot;&gt;&lt;code&gt;31866a3&lt;/code&gt;&lt;/a> fix toml bools and add version test</li>

<li>Additional commits viewable in <a href="https://github.com/ethereum/eth-abi/compare/v2.2.0...v5.0.1&quot;&gt;compare view</a></li>

</ul>

</details>
<br />


Updates requests from 2.28.2 to 2.32.2

Release notes
Sourced from requests's releases.

v2.32.2
2.32.2 (2024-05-21)
Deprecations


To provide a more stable migration for custom HTTPAdapters impacted
by the CVE changes in 2.32.0, we've renamed _get_connection to
a new public API, get_connection_with_tls_context. Existing custom
HTTPAdapters will need to migrate their code to use this new API.
get_connection is considered deprecated in all versions of Requests>=2.32.0.
A minimal (2-line) example has been provided in the linked PR to ease
migration, but we strongly urge users to evaluate if their custom adapter
is subject to the same issue described in CVE-2024-35195. (#6710)


v2.32.1
2.32.1 (2024-05-20)
Bugfixes

Add missing test certs to the sdist distributed on PyPI.

v2.32.0
2.32.0 (2024-05-20)
🐍 PYCON US 2024 EDITION 🐍
Security

Fixed an issue where setting verify=False on the first request from a
Session will cause subsequent requests to the same origin to also ignore
cert verification, regardless of the value of verify.
(https://github.com/psf/requests/security/advisories/GHSA-9wx4-h78v-vm56)

Improvements

verify=True now reuses a global SSLContext which should improve
request time variance between first and subsequent requests. It should
also minimize certificate load time on Windows systems when using a Python
version built with OpenSSL 3.x. (#6667)
Requests now supports optional use of character detection
(chardet or charset_normalizer) when repackaged or vendored.
This enables pip and other projects to minimize their vendoring
surface area. The Response.text() and apparent_encoding APIs
will default to utf-8 if neither library is present. (#6702)

Bugfixes

Fixed bug in length detection where emoji length was incorrectly
calculated in the request content-length. (#6589)
Fixed deserialization bug in JSONDecodeError. (#6629)
Fixed bug where an extra leading / (path separator) could lead
urllib3 to unnecessarily reparse the request URI. (#6644)



... (truncated)


Changelog
Sourced from requests's changelog.

2.32.2 (2024-05-21)
Deprecations


To provide a more stable migration for custom HTTPAdapters impacted
by the CVE changes in 2.32.0, we've renamed _get_connection to
a new public API, get_connection_with_tls_context. Existing custom
HTTPAdapters will need to migrate their code to use this new API.
get_connection is considered deprecated in all versions of Requests>=2.32.0.
A minimal (2-line) example has been provided in the linked PR to ease
migration, but we strongly urge users to evaluate if their custom adapter
is subject to the same issue described in CVE-2024-35195. (#6710)


2.32.1 (2024-05-20)
Bugfixes

Add missing test certs to the sdist distributed on PyPI.

2.32.0 (2024-05-20)
Security

Fixed an issue where setting verify=False on the first request from a
Session will cause subsequent requests to the same origin to also ignore
cert verification, regardless of the value of verify.
(https://github.com/psf/requests/security/advisories/GHSA-9wx4-h78v-vm56)

Improvements

verify=True now reuses a global SSLContext which should improve
request time variance between first and subsequent requests. It should
also minimize certificate load time on Windows systems when using a Python
version built with OpenSSL 3.x. (#6667)
Requests now supports optional use of character detection
(chardet or charset_normalizer) when repackaged or vendored.
This enables pip and other projects to minimize their vendoring
surface area. The Response.text() and apparent_encoding APIs
will default to utf-8 if neither library is present. (#6702)

Bugfixes

Fixed bug in length detection where emoji length was incorrectly
calculated in the request content-length. (#6589)
Fixed deserialization bug in JSONDecodeError. (#6629)
Fixed bug where an extra leading / (path separator) could lead
urllib3 to unnecessarily reparse the request URI. (#6644)

Deprecations


... (truncated)


Commits

88dce9d v2.32.2
c98e4d1 Merge pull request #6710 from nateprewitt/api_rename
92075b3 Add deprecation warning
aa1461b Move _get_connection to get_connection_with_tls_context
970e8ce v2.32.1
d6ebc4a v2.32.0
9a40d12 Avoid reloading root certificates to improve concurrent performance (#6667)
0c030f7 Merge pull request #6702 from nateprewitt/no_char_detection
555b870 Allow character detection dependencies to be optional in post-packaging steps
d6dded3 Merge pull request #6700 from franekmagiera/update-redirect-to-invalid-uri-test
Additional commits viewable in compare view




Updates setuptools from 67.2.0 to 70.0.0

Changelog
Sourced from setuptools's changelog.

v70.0.0
Features

Emit a warning when [tools.setuptools] is present in pyproject.toml and will be ignored. -- by :user:SnoopJ (#4150)
Improved AttributeError error message if pkg_resources.EntryPoint.require is called without extras or distribution
Gracefully "do nothing" when trying to activate a pkg_resources.Distribution with a None location, rather than raising a TypeError
-- by :user:Avasam (#4262)
Typed the dynamically defined variables from pkg_resources -- by :user:Avasam (#4267)
Modernized and refactored VCS handling in package_index. (#4332)

Bugfixes

In install command, use super to call the superclass methods. Avoids race conditions when monkeypatching from _distutils_system_mod occurs late. (#4136)
Fix finder template for lenient editable installs of implicit nested namespaces
constructed by using package_dir to reorganise directory structure. (#4278)
Fix an error with UnicodeDecodeError handling in pkg_resources when trying to read files in UTF-8 with a fallback -- by :user:Avasam (#4348)

Improved Documentation

Uses RST substitution to put badges in 1 line. (#4312)

Deprecations and Removals


Further adoption of UTF-8 in setuptools.
This change regards mostly files produced and consumed during the build process
(e.g. metadata files, script wrappers, automatically updated config files, etc..)
Although precautions were taken to minimize disruptions, some edge cases might
be subject to backwards incompatibility.
Support for "locale" encoding is now deprecated. (#4309)


Remove setuptools.convert_path after long deprecation period.
This function was never defined by setuptools itself, but rather a
side-effect of an import for internal usage. (#4322)


Remove fallback for customisations of distutils' build.sub_command after long
deprecated period.
Users are advised to import build directly from setuptools.command.build. (#4322)


Removed typing_extensions from vendored dependencies -- by :user:Avasam (#4324)


Remove deprecated setuptools.dep_util.
The provided alternative is setuptools.modified. (#4360)




... (truncated)


Commits

5cbf12a Workaround for release error in v70
9c1bcc3 Bump version: 69.5.1 → 70.0.0
4dc0c31 Remove deprecated setuptools.dep_util (#4360)
6c1ef57 Remove xfail now that test passes. Ref #4371.
d14fa01 Add all site-packages dirs when creating simulated environment for test_edita...
6b7f7a1 Prevent bin folders to be taken as extern packages when vendoring (#4370)
69141f6 Add doctest for vendorised bin folder
2a53cc1 Prevent 'bin' folders to be taken as extern packages
7208628 Replace call to deprecated validate_pyproject command (#4363)
96d681a Remove call to deprecated validate_pyproject command
Additional commits viewable in compare view




Updates urllib3 from 1.26.14 to 2.2.3

Release notes
Sourced from urllib3's releases.

2.2.3
🚀 urllib3 is fundraising for HTTP/2 support
urllib3 is raising ~$40,000 USD to release HTTP/2 support and ensure long-term sustainable maintenance of the project after a sharp decline in financial support for 2023. If your company or organization uses Python and would benefit from HTTP/2 support in Requests, pip, cloud SDKs, and thousands of other projects please consider contributing financially to ensure HTTP/2 support is developed sustainably and maintained for the long-haul.
Thank you for your support.
Features

Added support for Python 3.13. (#3473)

Bugfixes

Fixed the default encoding of chunked request bodies to be UTF-8 instead of ISO-8859-1. All other methods of supplying a request body already use UTF-8 starting in urllib3 v2.0. (#3053)
Fixed ResourceWarning on CONNECT with Python < 3.11.4 by backporting python/cpython#103472. (`#3252)
Adjust tolerance for floating-point comparison on Windows to avoid flakiness in CI (#3413)
Fixed a crash where certain standard library hash functions were absent in restricted environments. (#3432)
Fixed mypy error when adding to HTTPConnection.default_socket_options. (#3448)

HTTP/2 (experimental)
HTTP/2 support is still in early development.

Excluded Transfer-Encoding: chunked from HTTP/2 request body (#3425)
Added version checking for h2 (https://pypi.org/project/h2/) usage. Now only accepting supported h2 major version 4.x.x. (#3290)
Added a probing mechanism for determining whether a given target origin supports HTTP/2 via ALPN. (#3301)
Add support for sending a request body with HTTP/2 (#3302)

Full Changelog: https://github.com/urllib3/urllib3/compare/2.2.2...2.2.3
2.2.2
🚀 urllib3 is fundraising for HTTP/2 support
urllib3 is raising ~$40,000 USD to release HTTP/2 support and ensure long-term sustainable maintenance of the project after a sharp decline in financial support for 2023. If your company or organization uses Python and would benefit from HTTP/2 support in Requests, pip, cloud SDKs, and thousands of other projects please consider contributing financially to ensure HTTP/2 support is developed sustainably and maintained for the long-haul.
Thank you for your support.
Changes

Added the Proxy-Authorization header to the list of headers to strip from requests when redirecting to a different host. As before, different headers can be set via Retry.remove_headers_on_redirect.
Allowed passing negative integers as amt to read methods of http.client.HTTPResponse as an alternative to None. (#3122)
Fixed return types representing copying actions to use typing.Self. (#3363)

Full Changelog: https://github.com/urllib3/urllib3/compare/2.2.1...2.2.2
2.2.1
🚀 urllib3 is fundraising for HTTP/2 support
urllib3 is raising ~$40,000 USD to release HTTP/2 support and ensure long-term sustainable maintenance of the project after a sharp decline in financial support for 2023. If your company or organization uses Python and would benefit from HTTP/2 support in Requests, pip, cloud SDKs, and thousands of other projects please consider contributing financially to ensure HTTP/2 support is developed sustainably and maintained for the long-haul.


... (truncated)


Changelog
Sourced from urllib3's changelog.

2.2.3 (2024-09-12)
Features

Added support for Python 3.13. ([#3473](https://github.com/urllib3/urllib3/issues/3473) <https://github.com/urllib3/urllib3/issues/3473>__)

Bugfixes

Fixed the default encoding of chunked request bodies to be UTF-8 instead of ISO-8859-1.
All other methods of supplying a request body already use UTF-8 starting in urllib3 v2.0. ([#3053](https://github.com/urllib3/urllib3/issues/3053) <https://github.com/urllib3/urllib3/issues/3053>__)
Fixed ResourceWarning on CONNECT with Python `__)
Adjust tolerance for floating-point comparison on Windows to avoid flakiness in CI ([#3413](https://github.com/urllib3/urllib3/issues/3413) <https://github.com/urllib3/urllib3/issues/3413>__)
Fixed a crash where certain standard library hash functions were absent in restricted environments. ([#3432](https://github.com/urllib3/urllib3/issues/3432) <https://github.com/urllib3/urllib3/issues/3432>__)
Fixed mypy error when adding to HTTPConnection.default_socket_options. ([#3448](https://github.com/urllib3/urllib3/issues/3448) <https://github.com/urllib3/urllib3/issues/3448>__)

HTTP/2 (experimental)
HTTP/2 support is still in early development.


Excluded Transfer-Encoding: chunked from HTTP/2 request body ([#3425](https://github.com/urllib3/urllib3/issues/3425) <https://github.com/urllib3/urllib3/issues/3425>__)


Added version checking for h2 (https://pypi.org/project/h2/) usage.
Now only accepting supported h2 major version 4.x.x. ([#3290](https://github.com/urllib3/urllib3/issues/3290) <https://github.com/urllib3/urllib3/issues/3290>__)


Added a probing mechanism for determining whether a given target origin
supports HTTP/2 via ALPN. ([#3301](https://github.com/urllib3/urllib3/issues/3301) <https://github.com/urllib3/urllib3/issues/3301>__)


Add support for sending a request body with HTTP/2 ([#3302](https://github.com/urllib3/urllib3/issues/3302) <https://github.com/urllib3/urllib3/issues/3302>__)


Deprecations and Removals

Note for downstream distributors: the _version.py file has been removed and is now created at build time by hatch-vcs. ([#3412](https://github.com/urllib3/urllib3/issues/3412) <https://github.com/urllib3/urllib3/issues/3412>__)
Drop support for end-of-life PyPy3.8 and PyPy3.9. ([#3475](https://github.com/urllib3/urllib3/issues/3475) <https://github.com/urllib3/urllib3/issues/3475>__)

2.2.2 (2024-06-17)

Added the Proxy-Authorization header to the list of headers to strip from requests when redirecting to a different host. As before, different headers can be set via Retry.remove_headers_on_redirect.
Allowed passing negative integers as amt to read methods of http.client.HTTPResponse as an alternative to None. ([#3122](https://github.com/urllib3/urllib3/issues/3122) <https://github.com/urllib3/urllib3/issues/3122>__)
Fixed return types representing copying actions to use typing.Self. ([#3363](https://github.com/urllib3/urllib3/issues/3363) <https://github.com/urllib3/urllib3/issues/3363>__)

2.2.1 (2024-02-16)

Fixed issue where InsecureRequestWarning was emitted for HTTPS connections when using Emscripten. ([#3331](https://github.com/urllib3/urllib3/issues/3331) <https://github.com/urllib3/urllib3/issues/3331>__)



... (truncated)


Commits

2458bfc Release 2.2.3
9b25db6 Only attempt to publish for upstream
b9adeef Drop support for EOL PyPy3.8 and PyPy3.9
b1d4649 Add explicit support for Python 3.13
cc42860 Bump cryptography from 42.0.4 to 43.0.1 (#3470)
3dae2e9 Bump pypa/gh-action-pypi-publish from 1.9.0 to 1.10.1 (#3469)
1e94feb Revert "Add TLS settings for HTTP/2 (#3456)" (#3466)
aa73abc Bump actions/setup-python from 5.1.0 to 5.2.0 (#3468)
abbfbcb Add 1.26.20 to changelog and make the publish workflow the same (#3464)
d480615 Add TLS settings for HTTP/2 (#3456)
Additional commits viewable in compare view




Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options


You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

You can disable automated security fix PRs for this repo from the Security Alerts page.