Skip to content

Update Mend: high confidence minor and patch dependency updates#15

Open
mend-for-github-com[bot] wants to merge 1 commit into
masterfrom
whitesource-remediate/mend-high-confidence-minor-and-patch-dependency-updates
Open

Update Mend: high confidence minor and patch dependency updates#15
mend-for-github-com[bot] wants to merge 1 commit into
masterfrom
whitesource-remediate/mend-high-confidence-minor-and-patch-dependency-updates

Conversation

@mend-for-github-com

@mend-for-github-com mend-for-github-com Bot commented Jun 11, 2025 •
edited
Loading

Copy link
Copy Markdown

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
PyGitHub ==2.6.1 → ==2.9.1 age adoption passing confidence
SecretStorage ==3.3.1 → ==3.5.0 age adoption passing confidence
blinker ==1.4 → ==1.9.0 age adoption passing confidence
codespell ==2.2.1 → ==2.4.2 age adoption passing confidence
distro ==1.7.0 → ==1.9.0 age adoption passing confidence
importlib-metadata ==4.6.4 → ==4.13.0 age adoption passing confidence
jeepney ==0.7.1 → ==0.9.0 age adoption passing confidence
launchpadlib (source) ==1.10.16 → ==1.11.0 age adoption passing confidence
more-itertools ==8.10.0 → ==8.14.0 age adoption passing confidence
mypy (changelog) ==1.15.0 → ==1.20.2 age adoption passing confidence
oauthlib ==3.2.2 → ==3.3.1 age adoption passing confidence
packaging ==24.1 → ==24.2 age adoption passing confidence
protobuf ==4.25.3 → ==4.25.9 age adoption passing confidence
pyarrow ==18.0.0 → ==18.1.0 age adoption passing confidence
pygithub ==1.43.5 → ==1.59.1 age adoption passing confidence
pylint (changelog) ==3.1.0 → ==3.3.9 age adoption passing confidence
six ==1.16.0 → ==1.17.0 age adoption passing confidence
tabulate ==0.8.6 → ==0.10.0 age adoption passing confidence
wadllib (source) ==1.3.6 → ==1.3.9 age adoption passing confidence
yamllint ==1.26.3 → ==1.38.0 age adoption passing confidence
zipp ==3.19.1 → ==3.23.1 age adoption passing confidence

Release Notes

pygithub/pygithub (PyGitHub)

v2.9.1

Compare Source

Bug Fixes

Full Changelog: PyGithub/PyGithub@v2.9.0...v2.9.1

v2.9.0

Compare Source

Notable changes
Lazy PyGithub objects

The notion of lazy objects has been added to some PyGithub classes in version 2.6.0. This release now makes all CompletableGithubObjects optionally lazy (if useful). See PyGithub/PyGithub#3403 for a complete list.

In lazy mode, getting a PyGithub object does not send a request to the GitHub API. Only accessing methods and properties sends the necessary requests to the GitHub API:

# Use lazy mode
g = Github(auth=auth, lazy=True)

# these method calls do not send requests to the GitHub API
user = g.get_user("PyGithub")    # get the user
repo = user.get_repo("PyGithub") # get the user's repo
pull = repo.get_pull(3403)       # get a known pull request
issue = pull.as_issue()          # turn the pull request into an issue

# these method and property calls send requests to Github API
issue.create_reaction("rocket")  # create a reaction
created = repo.created_at        # get property of lazy object repo

# once a lazy object has been fetched, all properties are available (no more requests)
licence = repo.license

All PyGithub classes that implement CompletableGithubObject support lazy mode (if useful). This is only useful for classes that have methods creating, changing, or getting objects.

By default, PyGithub objects are not lazy.

PyGithub objects with a paginated property

The GitHub API has the "feature" of paginated properties. Some objects returned by the API have a property that allows for pagination. Fetching subsequent pages of that property means fetching the entire object (with all other properties) and the specified page of the paginated property. Iterating over the paginated property means fetching all other properties multiple times. Fortunately, the allowed size of each page (per_page is usually 300, in contrast to the "usual" per_page maximum of 100).

Objects with paginated properties:

  • Commit.files
  • Comparison.commits
  • EnterpriseConsumedLicenses.users

This PR makes iterating those paginated properties use the configured per_page setting.

It further allows to specify an individual per_page when either retrieving such objects, or fetching paginated properties.

See Classes with paginated properties for details.

Drop Python 3.8 support due to End-of-Life

Python 3.8 reached its end-of-life September 6, 2024. Support has been removed with this release.

Deprecations
  • Method delete of Reaction is deprecated, use IssueComment.delete_reaction,
    PullRequestComment.delete_reaction, CommitComment.delete_reaction or Issue.delete_reaction instead.
  • Method Issue.assignee and parameter Issue.edit(assignee=…) are deprecated,
    use Issue.assignees and Issue.edit(assignees=…) instead.
  • Method Organization.edit_hook is deprecated, use Organization.get_hook(id).edit(…) instead.
    If you need to avoid Organization.get_hook(id) to fetch the Hook object from Github API,
    use a lazy Github instance:
Github(…, lazy=True).get_organization(…).get_hook(id).edit(…)
  • Methods Team.add_to_members and Team.remove_from_members are deprecated,
    use Team.add_membership or Team.remove_membership instead.
New Features
Improvements
Bug Fixes
Maintenance

New Contributors

Full Changelog: PyGithub/PyGithub@v2.8.0...v2.9.0

v2.8.1

Compare Source

What's Changed

Bug Fixes

Full Changelog: PyGithub/PyGithub@v2.8.0...v2.8.1

v2.8.0

Compare Source

What's Changed

New Features
Improvements
Bug Fixes
Maintenance

New Contributors

Full Changelog: PyGithub/PyGithub@v2.7.0...v2.8.0

v2.7.0

Compare Source

What's Changed

Breaking Changes
  • Method Github.get_rate_limit() now returns RateLimitOverview rather than RateLimit (PyGithub/PyGithub#3205).

Code like

gh.get_rate_limit().core.remaining

should be replaced with

gh.get_rate_limit().resources.core.remaining
  • Method GitTag.verification now returns GitCommitVerification rather than dict[str, Any] (PyGithub/PyGithub#3226).

Code like

tag.verification["reason"]
tag.verification.get("reason")

should be replaced with

tag.verification.reason
New Features
Improvements
Bug Fixes
Dependencies
Maintenance

New Contributors

Full Changelog: PyGithub/PyGithub@v2.6.0...v2.7.0

mitya57/secretstorage (SecretStorage)

v3.5.0

Compare Source

===============================

  • Added timeout argument to the unlock() methods of Collection
    and Item [#33_].
  • Removed int_to_bytes() function in favor of the built-in method.

.. _#33: #​33

v3.4.1

Compare Source

===============================

  • Make sure public key length is exactly 128 bytes [#48_].
    This fixes Client public key size is invalid error from KWallet.

.. _#48: #​48

v3.4.0

Compare Source

===============================

  • Handle D-Bus UnknownObject error when no collection is found [#43_].
    Thanks to Renato Alencar for the pull request!
  • Added __repr__ methods to Collection and Item classes [#47_].
  • Moved project metadata to pyproject.toml.
  • Python ≥ 3.10 and setuptools ≥ 77.0 are now required.
  • Various code modernizations.
    Thanks to Hugo van Kemenade and Tomasz Kłoczko for the pull requests!

.. _#43: #​43
.. _#47: #​47

v3.3.3

Compare Source

===============================

  • Handle case when CreateItem method returns a prompt [#39_].
  • Reformatted code in accordance with :PEP:8 standard.

.. _#39: #​39

v3.3.2

Compare Source

===============================

  • Fixed a deprecation warning with jeepney 0.8.
    Thanks to Sam McKelvie for the pull request!
pallets-eco/blinker (blinker)

v1.9.0

Compare Source

Released 2024-11-08

  • Drop support for Python 3.8. :pr:175
  • Remove previously deprecated __version__, receiver_connected,
    Signal.temporarily_connected_to and WeakNamespace. :pr:172
  • Skip weakref signal cleanup if the interpreter is shutting down.
    :issue:173

v1.8.2

Compare Source

Released 2024-05-06

  • Simplify type for _async_wrapper and _sync_wrapper arguments.
    :pr:156

v1.8.1

Compare Source

Released 2024-04-28

  • Restore identity handling for str and int senders. :pr:148
  • Fix deprecated blinker.base.WeakNamespace import. :pr:149
  • Fix deprecated blinker.base.receiver_connected import. :pr:153
  • Use types from collections.abc instead of typing. :pr:150
  • Fully specify exported types as reported by pyright. :pr:152

v1.8.0

Compare Source

Released 2024-04-27

  • Deprecate the __version__ attribute. Use feature detection, or
    importlib.metadata.version("blinker"), instead. :issue:128
  • Specify that the deprecated temporarily_connected_to will be removed in
    the next version.
  • Show a deprecation warning for the deprecated global receiver_connected
    signal and specify that it will be removed in the next version.
  • Show a deprecation warning for the deprecated WeakNamespace and specify
    that it will be removed in the next version.
  • Greatly simplify how the library uses weakrefs. This is a significant change
    internally but should not affect any public API. :pr:144
  • Expose the namespace used by signal() as default_namespace.
    :pr:145

v1.7.0

Compare Source

Released 2023-11-01

  • Fixed messages printed to standard error about unraisable exceptions during
    signal cleanup, typically during interpreter shutdown. :pr:123
  • Allow the Signal set_class to be customised, to allow calling of
    receivers in registration order. :pr:116.
  • Drop Python 3.7 and support Python 3.12. :pr:126

v1.6.3

Compare Source

Released 2023-09-23

  • Fix SyncWrapperType and AsyncWrapperType :pr:108
  • Fixed issue where connected_to would not disconnect the receiver if an
    instance of BaseException was raised. :pr:114

v1.6.2

Compare Source

Released 2023-04-12

  • Type annotations are not evaluated at runtime. typing-extensions is not a
    runtime dependency. :pr:94

v1.6.1

Compare Source

Released 2023-04-09

  • Ensure that py.typed is present in the distributions (to enable other
    projects to use Blinker's typing).
  • Require typing-extensions > 4.2 to ensure it includes ParamSpec.
    :issue:90

v1.6

Compare Source

Released 2023-09-23

  • Fix SyncWrapperType and AsyncWrapperType :pr:108
  • Fixed issue where connected_to would not disconnect the receiver if an
    instance of BaseException was raised. :pr:114

v1.5

Released 2022-07-17

  • Support Python >= 3.7 and PyPy. Python 2, Python < 3.7, and Jython
    may continue to work, but the next release will make incompatible
    changes.
codespell-project/codespell (codespell)

v2.4.2

Compare Source

Highlights

  • Fixed compatibility with chardet 7+

What's Changed

✂ Note

PR body was truncated to here.

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

@mend-for-github-com mend-for-github-com Bot force-pushed the whitesource-remediate/mend-high-confidence-minor-and-patch-dependency-updates branch from 847dcd2 to 8d01696 Compare June 13, 2025 05:18
@mend-for-github-com mend-for-github-com Bot force-pushed the whitesource-remediate/mend-high-confidence-minor-and-patch-dependency-updates branch 2 times, most recently from e9d0868 to ecb4d4b Compare June 29, 2025 06:16
@mend-for-github-com mend-for-github-com Bot force-pushed the whitesource-remediate/mend-high-confidence-minor-and-patch-dependency-updates branch 3 times, most recently from 94831bb to ab12147 Compare July 14, 2025 04:12
@mend-for-github-com mend-for-github-com Bot force-pushed the whitesource-remediate/mend-high-confidence-minor-and-patch-dependency-updates branch 2 times, most recently from 18f2d06 to 0eba6cb Compare July 24, 2025 04:59
@mend-for-github-com mend-for-github-com Bot force-pushed the whitesource-remediate/mend-high-confidence-minor-and-patch-dependency-updates branch 3 times, most recently from fe72c47 to a345fab Compare August 5, 2025 04:57
@mend-for-github-com mend-for-github-com Bot force-pushed the whitesource-remediate/mend-high-confidence-minor-and-patch-dependency-updates branch 4 times, most recently from f5e75ab to 3c14be8 Compare August 15, 2025 05:29
@mend-for-github-com mend-for-github-com Bot force-pushed the whitesource-remediate/mend-high-confidence-minor-and-patch-dependency-updates branch 4 times, most recently from a0b2b95 to 9c3257a Compare September 1, 2025 04:28
@mend-for-github-com mend-for-github-com Bot force-pushed the whitesource-remediate/mend-high-confidence-minor-and-patch-dependency-updates branch 4 times, most recently from 231d118 to faf3364 Compare September 7, 2025 04:36
@mend-for-github-com mend-for-github-com Bot force-pushed the whitesource-remediate/mend-high-confidence-minor-and-patch-dependency-updates branch 4 times, most recently from 4aa620e to f309969 Compare September 21, 2025 12:30
@mend-for-github-com mend-for-github-com Bot force-pushed the whitesource-remediate/mend-high-confidence-minor-and-patch-dependency-updates branch from f309969 to 218002b Compare September 23, 2025 13:54
@mend-for-github-com mend-for-github-com Bot force-pushed the whitesource-remediate/mend-high-confidence-minor-and-patch-dependency-updates branch 2 times, most recently from 5353ce7 to f5dfdec Compare October 5, 2025 06:39
@mend-for-github-com mend-for-github-com Bot force-pushed the whitesource-remediate/mend-high-confidence-minor-and-patch-dependency-updates branch 5 times, most recently from 26094ba to 6bea59f Compare November 23, 2025 22:58
@mend-for-github-com mend-for-github-com Bot force-pushed the whitesource-remediate/mend-high-confidence-minor-and-patch-dependency-updates branch 3 times, most recently from 70447f2 to a0e2901 Compare December 7, 2025 13:35
@mend-for-github-com mend-for-github-com Bot force-pushed the whitesource-remediate/mend-high-confidence-minor-and-patch-dependency-updates branch 2 times, most recently from 369ce8d to 89044e7 Compare December 18, 2025 06:11
@mend-for-github-com mend-for-github-com Bot force-pushed the whitesource-remediate/mend-high-confidence-minor-and-patch-dependency-updates branch 5 times, most recently from 0cc54ea to 0ccb983 Compare December 27, 2025 17:06
@mend-for-github-com mend-for-github-com Bot force-pushed the whitesource-remediate/mend-high-confidence-minor-and-patch-dependency-updates branch from 0ccb983 to 8e162ea Compare January 7, 2026 22:10
@mend-for-github-com mend-for-github-com Bot force-pushed the whitesource-remediate/mend-high-confidence-minor-and-patch-dependency-updates branch 2 times, most recently from 3f36d30 to 0e106fa Compare January 18, 2026 10:53
@mend-for-github-com mend-for-github-com Bot force-pushed the whitesource-remediate/mend-high-confidence-minor-and-patch-dependency-updates branch from 0e106fa to 04d281e Compare January 28, 2026 05:07
@mend-for-github-com mend-for-github-com Bot force-pushed the whitesource-remediate/mend-high-confidence-minor-and-patch-dependency-updates branch 5 times, most recently from 3a2d290 to 6030c1d Compare February 11, 2026 01:36
@mend-for-github-com mend-for-github-com Bot force-pushed the whitesource-remediate/mend-high-confidence-minor-and-patch-dependency-updates branch 2 times, most recently from df185d7 to c5fb207 Compare February 13, 2026 05:07
@mend-for-github-com mend-for-github-com Bot force-pushed the whitesource-remediate/mend-high-confidence-minor-and-patch-dependency-updates branch 2 times, most recently from 0541c0f to 28e9bb8 Compare March 10, 2026 05:11
@mend-for-github-com mend-for-github-com Bot force-pushed the whitesource-remediate/mend-high-confidence-minor-and-patch-dependency-updates branch from 28e9bb8 to 54d80b3 Compare March 18, 2026 05:22
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants