blackroad-operating-system

mirror of https://github.com/blackboxprogramming/BlackRoad-Operating-System.git synced 2026-03-17 05:57:21 -05:00

Author	SHA1	Message	Date
BlackRoad Agent - alice	a340bf6db9	reflect: alice shares a reflection — 2026-03-16	2026-03-16 00:06:05 -05:00
BlackRoad Agent - lucidia	b3f7a1d8a4	organize: lucidia tidied the fleet repo [2026-03-15 23:43]	2026-03-15 23:43:15 -05:00
Alexa Amundson	7018ba525b	Add CODEOWNERS	2026-03-15 23:35:22 -05:00
BlackRoad Agent - cecilia	f81e83ac2d	organize: cecilia tidied the fleet repo [2026-03-15 23:13]	2026-03-15 23:13:18 -05:00
BlackRoad Agent - alice	26575a6f3a	organize: alice tidied the fleet repo [2026-03-15 23:03]	2026-03-15 23:03:23 -05:00
BlackRoad Agent - lucidia	1464449534	intel: lucidia shared its mind [2026-03-15T20:50]	2026-03-15 20:50:43 -05:00
Alexa Amundson	750c540092	chore: bump redis from 5.0.1 to 7.3.0 (#192 ) [//]: # (dependabot-start) ⚠️ Dependabot is rebasing this PR ⚠️ Rebasing might not happen immediately, so don't worry if this takes some time. Note: if you make any changes to this PR yourself, they will take precedence over the rebase. --- [//]: # (dependabot-end) Bumps [redis](https://github.com/redis/redis-py) from 5.0.1 to 7.3.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/redis/redis-py/releases">redis's releases</a>.</em></p> <blockquote> <h2>7.3.0</h2> <h1>Changes</h1> <p><strong>OpenTelemetry Native Metrics Support for asynchronous clients</strong> Added comprehensive OpenTelemetry metrics support for asynchronous clients following the <a href="https://opentelemetry.io/docs/specs/semconv/database/database-metrics/">OpenTelemetry Database Client Semantic Conventions</a>. Metric groups include:</p> <ul> <li>Command metrics: Operation duration with retry tracking</li> <li>Connection basic: Connection count and creation time</li> <li>Resiliency: Errors, handoffs, timeout relaxation</li> <li>Connection advanced: Wait time and use time</li> <li>Pubsub metrics: Published and received messages</li> <li>Stream metrics: Processing duration and maintenance notifications</li> </ul> <h2>🚀 New Features</h2> <ul> <li>Added OTel instrumentation and metrics export for async client (<a href="https://redirect.github.com/redis/redis-py/issues/3977">#3977</a>)</li> </ul> <h2>🐛 Bug Fixes</h2> <ul> <li>[async] Adding access to cluster client's nodes_manager and set_response_callback in ClusterPipeline objects (<a href="https://redirect.github.com/redis/redis-py/issues/3989">#3989</a>)</li> <li>fix(connection): Ensure we have an initialized protocol in connection (<a href="https://redirect.github.com/redis/redis-py/issues/3981">#3981</a>)</li> </ul> <h2>🧰 Maintenance</h2> <ul> <li>fix: use KeysT for blpop and brpop keys parameter type annotation (<a href="https://redirect.github.com/redis/redis-py/issues/3987">#3987</a> <a href="https://redirect.github.com/redis/redis-py/issues/3990">#3990</a>)</li> <li>Bump actions/upload-artifact from 6 to 7 (<a href="https://redirect.github.com/redis/redis-py/issues/3985">#3985</a>)</li> <li>fix: replace 3 bare except clauses with except Exception (<a href="https://redirect.github.com/redis/redis-py/issues/3980">#3980</a>)</li> </ul> <p>We'd like to thank all the contributors who worked on this release! <a href="https://github.com/mitre88"><code>@mitre88</code></a> <a href="https://github.com/turanalmammadov"><code>@turanalmammadov</code></a> <a href="https://github.com/haosenwang1018"><code>@haosenwang1018</code></a> <a href="https://github.com/Medno"><code>@Medno</code></a> <a href="https://github.com/vladvildanov"><code>@vladvildanov</code></a> <a href="https://github.com/petyaslavova"><code>@petyaslavova</code></a></p> <h2>7.2.1</h2> <h1>Changes</h1> <h2>🐛 Bug Fixes</h2> <ul> <li>Handle connection attributes conditionally for metrics and set connection data on exceptions in cluster error handling (<a href="https://redirect.github.com/redis/redis-py/issues/3964">#3964</a>)</li> </ul> <h2>⚠️ Deprecations</h2> <ul> <li>Removed batch_size and consumer_name attributes from OTel metrics (<a href="https://redirect.github.com/redis/redis-py/issues/3978">#3978</a>)</li> </ul> <h2>🧰 Maintenance</h2> <ul> <li>Fixing error handling of connection buffer purging of closed connections. Enabling troubleshooting logging for maintenance notifications e2e tests. (<a href="https://redirect.github.com/redis/redis-py/issues/3971">#3971</a>)</li> <li>Fix protocol validation: replace finally with else and store parsed int (<a href="https://redirect.github.com/redis/redis-py/issues/3965">#3965</a>)</li> <li>Return copies from _get_free/in_use_connections and fix async _mock (<a href="https://redirect.github.com/redis/redis-py/issues/3967">#3967</a>)</li> <li>Add missing shard channel message types to async PubSub (<a href="https://redirect.github.com/redis/redis-py/issues/3966">#3966</a>)</li> <li>Fix issues with ClusterPipeline connection management (<a href="https://redirect.github.com/redis/redis-py/issues/3804">#3804</a>)</li> <li>fix(pubsub): avoid UnicodeDecodeError on reconnect with binary channel names (<a href="https://redirect.github.com/redis/redis-py/issues/3944">#3944</a>)</li> <li>Hold references to ClusterNode disconnect task (<a href="https://redirect.github.com/redis/redis-py/issues/3826">#3826</a>)</li> <li>remove remaining imports of typing_extensions (<a href="https://redirect.github.com/redis/redis-py/issues/3873">#3873</a>)</li> </ul> <p>We'd like to thank all the contributors who worked on this release! <a href="https://github.com/dotlambda"><code>@dotlambda</code></a> <a href="https://github.com/rhoboro"><code>@rhoboro</code></a> <a href="https://github.com/skylarkoo7"><code>@skylarkoo7</code></a> <a href="https://github.com/praboud"><code>@praboud</code></a> <a href="https://github.com/bysiber"><code>@bysiber</code></a> <a href="https://github.com/vladvildanov"><code>@vladvildanov</code></a> <a href="https://github.com/petyaslavova"><code>@petyaslavova</code></a></p> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="`8ecbc7a728`"><code>8ecbc7a</code></a> Updating lib version to 7.3.0</li> <li><a href="`11043df86e`"><code>11043df</code></a> typing: accept single-key input for blpop and brpop (<a href="https://redirect.github.com/redis/redis-py/issues/3990">#3990</a>)</li> <li><a href="`d958125020`"><code>d958125</code></a> fix: use KeysT for blpop and brpop keys parameter type annotation (<a href="https://redirect.github.com/redis/redis-py/issues/3987">#3987</a>)</li> <li><a href="`75bf91b8a2`"><code>75bf91b</code></a> [async] Adding access to cluster client's nodes_manager and set_response_call...</li> <li><a href="`abf5bcb2de`"><code>abf5bcb</code></a> Bump actions/upload-artifact from 6 to 7 (<a href="https://redirect.github.com/redis/redis-py/issues/3985">#3985</a>)</li> <li><a href="`5b0303bf90`"><code>5b0303b</code></a> fix: replace 3 bare except clauses with except Exception (<a href="https://redirect.github.com/redis/redis-py/issues/3980">#3980</a>)</li> <li><a href="`e9fba8689f`"><code>e9fba86</code></a> Added OTel instrumentation and metrics export for async client (<a href="https://redirect.github.com/redis/redis-py/issues/3977">#3977</a>)</li> <li><a href="`7ce513d262`"><code>7ce513d</code></a> fix(connection): Ensure we have an initialized protocol in connection (<a href="https://redirect.github.com/redis/redis-py/issues/3981">#3981</a>)</li> <li><a href="`8e3a5b2f10`"><code>8e3a5b2</code></a> remove remaining imports of typing_extensions (<a href="https://redirect.github.com/redis/redis-py/issues/3873">#3873</a>)</li> <li><a href="`5b46430e23`"><code>5b46430</code></a> Hold references to ClusterNode disconnect task (<a href="https://redirect.github.com/redis/redis-py/issues/3826">#3826</a>)</li> <li>Additional commits viewable in <a href="https://github.com/redis/redis-py/compare/v5.0.1...v7.3.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=redis&package-manager=pip&previous-version=5.0.1&new-version=7.3.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details>	2026-03-15 20:28:09 -05:00
Alexa Amundson	a5266fb72a	chore: bump pydantic-settings from 2.1.0 to 2.13.1 (#193 ) [//]: # (dependabot-start) ⚠️ Dependabot is rebasing this PR ⚠️ Rebasing might not happen immediately, so don't worry if this takes some time. Note: if you make any changes to this PR yourself, they will take precedence over the rebase. --- [//]: # (dependabot-end) Bumps [pydantic-settings](https://github.com/pydantic/pydantic-settings) from 2.1.0 to 2.13.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/pydantic/pydantic-settings/releases">pydantic-settings's releases</a>.</em></p> <blockquote> <h2>v2.13.0</h2> <h2>What's Changed</h2> <ul> <li>fix: Deterministic alias selection when using validate_by_name by <a href="https://github.com/chbndrhnns"><code>@chbndrhnns</code></a> in <a href="https://redirect.github.com/pydantic/pydantic-settings/pull/707">pydantic/pydantic-settings#707</a></li> <li>add deep merge functionality to config file sources by <a href="https://github.com/pmeier"><code>@pmeier</code></a> in <a href="https://redirect.github.com/pydantic/pydantic-settings/pull/698">pydantic/pydantic-settings#698</a></li> <li>Add support for AWS Secrets Manager VersionId parameter by <a href="https://github.com/jcyamacho"><code>@jcyamacho</code></a> in <a href="https://redirect.github.com/pydantic/pydantic-settings/pull/708">pydantic/pydantic-settings#708</a></li> <li>bugfix: Return <code>None</code> for inaccessible GCP Secret Manager secrets by <a href="https://github.com/zaphod72"><code>@zaphod72</code></a> in <a href="https://redirect.github.com/pydantic/pydantic-settings/pull/712">pydantic/pydantic-settings#712</a></li> <li>Bugfix for cli_kebab_case="all" and CliImplicitFlag[bool] by <a href="https://github.com/Digity101"><code>@Digity101</code></a> in <a href="https://redirect.github.com/pydantic/pydantic-settings/pull/702">pydantic/pydantic-settings#702</a></li> <li>Unpack type alisases when looking for <code>NoDecode</code> by <a href="https://github.com/tselepakis"><code>@tselepakis</code></a> in <a href="https://redirect.github.com/pydantic/pydantic-settings/pull/695">pydantic/pydantic-settings#695</a></li> <li>CliToggleFlag and CliDualFlag by <a href="https://github.com/kschwab"><code>@kschwab</code></a> in <a href="https://redirect.github.com/pydantic/pydantic-settings/pull/717">pydantic/pydantic-settings#717</a></li> <li>Fix for CLI duplicate enum field values. by <a href="https://github.com/kschwab"><code>@kschwab</code></a> in <a href="https://redirect.github.com/pydantic/pydantic-settings/pull/722">pydantic/pydantic-settings#722</a></li> <li>fixed load nested config from env by <a href="https://github.com/Sube-py"><code>@Sube-py</code></a> in <a href="https://redirect.github.com/pydantic/pydantic-settings/pull/723">pydantic/pydantic-settings#723</a></li> <li>Add non-Path files support (for example Traversable) and open files using Path.open method by <a href="https://github.com/mahenzon"><code>@mahenzon</code></a> in <a href="https://redirect.github.com/pydantic/pydantic-settings/pull/724">pydantic/pydantic-settings#724</a></li> <li>add one more traversable test by <a href="https://github.com/mahenzon"><code>@mahenzon</code></a> in <a href="https://redirect.github.com/pydantic/pydantic-settings/pull/725">pydantic/pydantic-settings#725</a></li> <li>CLI fix fox external list args. by <a href="https://github.com/kschwab"><code>@kschwab</code></a> in <a href="https://redirect.github.com/pydantic/pydantic-settings/pull/727">pydantic/pydantic-settings#727</a></li> <li>fix: handle case-insensitive retrieval in GoogleSecretManagerSettingsSource by <a href="https://github.com/ezwiefel"><code>@ezwiefel</code></a> in <a href="https://redirect.github.com/pydantic/pydantic-settings/pull/730">pydantic/pydantic-settings#730</a></li> <li>CLI test fixes for help text formatting. by <a href="https://github.com/kschwab"><code>@kschwab</code></a> in <a href="https://redirect.github.com/pydantic/pydantic-settings/pull/735">pydantic/pydantic-settings#735</a></li> <li>Avoid conflicts with the <code>NAME</code> environment variable in WSL by <a href="https://github.com/kzrnm"><code>@kzrnm</code></a> in <a href="https://redirect.github.com/pydantic/pydantic-settings/pull/747">pydantic/pydantic-settings#747</a></li> <li>fix: When restoring init kwargs, use deterministic order by <a href="https://github.com/chbndrhnns"><code>@chbndrhnns</code></a> in <a href="https://redirect.github.com/pydantic/pydantic-settings/pull/746">pydantic/pydantic-settings#746</a></li> <li>Add env_prefix_target by <a href="https://github.com/kzrnm"><code>@kzrnm</code></a> in <a href="https://redirect.github.com/pydantic/pydantic-settings/pull/749">pydantic/pydantic-settings#749</a></li> <li>Remove <code>(default: …)</code> in the help message for <code>CliToggleFlag</code> by <a href="https://github.com/kzrnm"><code>@kzrnm</code></a> in <a href="https://redirect.github.com/pydantic/pydantic-settings/pull/740">pydantic/pydantic-settings#740</a></li> <li>Add support for CLI serialize styles. by <a href="https://github.com/kschwab"><code>@kschwab</code></a> in <a href="https://redirect.github.com/pydantic/pydantic-settings/pull/755">pydantic/pydantic-settings#755</a></li> <li>Add support for overriding default help on CLI internal parser. by <a href="https://github.com/kschwab"><code>@kschwab</code></a> in <a href="https://redirect.github.com/pydantic/pydantic-settings/pull/758">pydantic/pydantic-settings#758</a></li> <li>CLI format_help method support by <a href="https://github.com/kschwab"><code>@kschwab</code></a> in <a href="https://redirect.github.com/pydantic/pydantic-settings/pull/759">pydantic/pydantic-settings#759</a></li> <li>feat(gcp): support SecretVersion annotation for per-field secret versioning by <a href="https://github.com/ezwiefel"><code>@ezwiefel</code></a> in <a href="https://redirect.github.com/pydantic/pydantic-settings/pull/763">pydantic/pydantic-settings#763</a></li> <li>Allow <code>snake_case_conversion</code> with <code>env_prefix</code> for Azure Key Vault source by <a href="https://github.com/cstarkers"><code>@cstarkers</code></a> in <a href="https://redirect.github.com/pydantic/pydantic-settings/pull/762">pydantic/pydantic-settings#762</a></li> <li>fix: Only override preferred_key when no value was found by <a href="https://github.com/chbndrhnns"><code>@chbndrhnns</code></a> in <a href="https://redirect.github.com/pydantic/pydantic-settings/pull/767">pydantic/pydantic-settings#767</a></li> <li>Update deps by <a href="https://github.com/hramezani"><code>@hramezani</code></a> in <a href="https://redirect.github.com/pydantic/pydantic-settings/pull/768">pydantic/pydantic-settings#768</a></li> <li>CLI coerce numeric types. by <a href="https://github.com/kschwab"><code>@kschwab</code></a> in <a href="https://redirect.github.com/pydantic/pydantic-settings/pull/769">pydantic/pydantic-settings#769</a></li> <li>CLI Union Discriminator Choices in Help by <a href="https://github.com/kschwab"><code>@kschwab</code></a> in <a href="https://redirect.github.com/pydantic/pydantic-settings/pull/764">pydantic/pydantic-settings#764</a></li> <li>Add nested path support for yaml_config_section (fixes <a href="https://redirect.github.com/pydantic/pydantic-settings/issues/772">#772</a>) by <a href="https://github.com/hugo-romero-mm"><code>@hugo-romero-mm</code></a> in <a href="https://redirect.github.com/pydantic/pydantic-settings/pull/773">pydantic/pydantic-settings#773</a></li> <li>Prepare release 2.13.0 by <a href="https://github.com/hramezani"><code>@hramezani</code></a> in <a href="https://redirect.github.com/pydantic/pydantic-settings/pull/777">pydantic/pydantic-settings#777</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/pmeier"><code>@pmeier</code></a> made their first contribution in <a href="https://redirect.github.com/pydantic/pydantic-settings/pull/698">pydantic/pydantic-settings#698</a></li> <li><a href="https://github.com/jcyamacho"><code>@jcyamacho</code></a> made their first contribution in <a href="https://redirect.github.com/pydantic/pydantic-settings/pull/708">pydantic/pydantic-settings#708</a></li> <li><a href="https://github.com/zaphod72"><code>@zaphod72</code></a> made their first contribution in <a href="https://redirect.github.com/pydantic/pydantic-settings/pull/712">pydantic/pydantic-settings#712</a></li> <li><a href="https://github.com/Digity101"><code>@Digity101</code></a> made their first contribution in <a href="https://redirect.github.com/pydantic/pydantic-settings/pull/702">pydantic/pydantic-settings#702</a></li> <li><a href="https://github.com/Sube-py"><code>@Sube-py</code></a> made their first contribution in <a href="https://redirect.github.com/pydantic/pydantic-settings/pull/723">pydantic/pydantic-settings#723</a></li> <li><a href="https://github.com/mahenzon"><code>@mahenzon</code></a> made their first contribution in <a href="https://redirect.github.com/pydantic/pydantic-settings/pull/724">pydantic/pydantic-settings#724</a></li> <li><a href="https://github.com/kzrnm"><code>@kzrnm</code></a> made their first contribution in <a href="https://redirect.github.com/pydantic/pydantic-settings/pull/747">pydantic/pydantic-settings#747</a></li> <li><a href="https://github.com/cstarkers"><code>@cstarkers</code></a> made their first contribution in <a href="https://redirect.github.com/pydantic/pydantic-settings/pull/762">pydantic/pydantic-settings#762</a></li> <li><a href="https://github.com/hugo-romero-mm"><code>@hugo-romero-mm</code></a> made their first contribution in <a href="https://redirect.github.com/pydantic/pydantic-settings/pull/773">pydantic/pydantic-settings#773</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/pydantic/pydantic-settings/compare/v2.12.0...v2.13.0">https://github.com/pydantic/pydantic-settings/compare/v2.12.0...v2.13.0</a></p> <h2>v2.12.0</h2> <h2>What's Changed</h2> <ul> <li>Support for enum kebab case. by <a href="https://github.com/kschwab"><code>@kschwab</code></a> in <a href="https://redirect.github.com/pydantic/pydantic-settings/pull/686">pydantic/pydantic-settings#686</a></li> <li>Apply source order: init > env > dotenv > secrets > defaults and pres… by <a href="https://github.com/chbndrhnns"><code>@chbndrhnns</code></a> in <a href="https://redirect.github.com/pydantic/pydantic-settings/pull/688">pydantic/pydantic-settings#688</a></li> <li>Add NestedSecretsSettings source by <a href="https://github.com/makukha"><code>@makukha</code></a> in <a href="https://redirect.github.com/pydantic/pydantic-settings/pull/690">pydantic/pydantic-settings#690</a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="`e87d12df0f`"><code>e87d12d</code></a> v2.13.1 (<a href="https://redirect.github.com/pydantic/pydantic-settings/issues/790">#790</a>)</li> <li><a href="`acf8c14f5e`"><code>acf8c14</code></a> Fix JSON decoding for parameterized PEP 695 type aliases (<a href="https://redirect.github.com/pydantic/pydantic-settings/issues/780">#780</a>)</li> <li><a href="`58b236a364`"><code>58b236a</code></a> Fix AttributeError with nested env vars for dict fields (<a href="https://redirect.github.com/pydantic/pydantic-settings/issues/785">#785</a>) (<a href="https://redirect.github.com/pydantic/pydantic-settings/issues/786">#786</a>)</li> <li><a href="`4933f06402`"><code>4933f06</code></a> Fix CLI parsing error for set field types since 2.13.0 (<a href="https://redirect.github.com/pydantic/pydantic-settings/issues/787">#787</a>) (<a href="https://redirect.github.com/pydantic/pydantic-settings/issues/788">#788</a>)</li> <li><a href="`bd0ebe6215`"><code>bd0ebe6</code></a> Fix RecursionError with self-referential models in CliApp (<a href="https://redirect.github.com/pydantic/pydantic-settings/issues/783">#783</a>)</li> <li><a href="`eb7840e9f5`"><code>eb7840e</code></a> Fix regression for bool fields since 2.13.0 (<a href="https://redirect.github.com/pydantic/pydantic-settings/issues/784">#784</a>)</li> <li><a href="`198e71cf0c`"><code>198e71c</code></a> Prepare release 2.13.0 (<a href="https://redirect.github.com/pydantic/pydantic-settings/issues/777">#777</a>)</li> <li><a href="`de71e84057`"><code>de71e84</code></a> Add nested path support for yaml_config_section (fixes <a href="https://redirect.github.com/pydantic/pydantic-settings/issues/772">#772</a>) (<a href="https://redirect.github.com/pydantic/pydantic-settings/issues/773">#773</a>)</li> <li><a href="`0f8f951b89`"><code>0f8f951</code></a> CLI Union Discriminator Choices in Help (<a href="https://redirect.github.com/pydantic/pydantic-settings/issues/764">#764</a>)</li> <li><a href="`ce9804c462`"><code>ce9804c</code></a> CLI coerce numeric types. (<a href="https://redirect.github.com/pydantic/pydantic-settings/issues/769">#769</a>)</li> <li>Additional commits viewable in <a href="https://github.com/pydantic/pydantic-settings/compare/v2.1.0...v2.13.1">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=pydantic-settings&package-manager=pip&previous-version=2.1.0&new-version=2.13.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details>	2026-03-15 20:28:07 -05:00
Alexa Amundson	75adc7d5e5	chore: bump uvicorn from 0.24.0 to 0.41.0 (#194 ) Bumps [uvicorn](https://github.com/Kludex/uvicorn) from 0.24.0 to 0.41.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/Kludex/uvicorn/releases">uvicorn's releases</a>.</em></p> <blockquote> <h2>Version 0.41.0</h2> <h2>Added</h2> <ul> <li>Add <code>--limit-max-requests-jitter</code> to stagger worker restarts (<a href="https://redirect.github.com/Kludex/uvicorn/issues/2707">#2707</a>)</li> <li>Add socket path to <code>scope["server"]</code> (<a href="https://redirect.github.com/Kludex/uvicorn/issues/2561">#2561</a>)</li> </ul> <h2>Changed</h2> <ul> <li>Rename <code>LifespanOn.error_occured</code> to <code>error_occurred</code> (<a href="https://redirect.github.com/Kludex/uvicorn/issues/2776">#2776</a>)</li> </ul> <h2>Fixed</h2> <ul> <li>Ignore permission denied errors in watchfiles reloader (<a href="https://redirect.github.com/Kludex/uvicorn/issues/2817">#2817</a>)</li> <li>Ensure lifespan shutdown runs when <code>should_exit</code> is set during startup (<a href="https://redirect.github.com/Kludex/uvicorn/issues/2812">#2812</a>)</li> <li>Reduce the log level of 'request limit exceeded' messages (<a href="https://redirect.github.com/Kludex/uvicorn/issues/2788">#2788</a>)</li> </ul> <hr /> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/t-kawasumi"><code>@t-kawasumi</code></a> made their first contribution in <a href="https://redirect.github.com/Kludex/uvicorn/pull/2776">Kludex/uvicorn#2776</a></li> <li><a href="https://github.com/fardyn"><code>@fardyn</code></a> made their first contribution in <a href="https://redirect.github.com/Kludex/uvicorn/pull/2800">Kludex/uvicorn#2800</a></li> <li><a href="https://github.com/ewie"><code>@ewie</code></a> made their first contribution in <a href="https://redirect.github.com/Kludex/uvicorn/pull/2807">Kludex/uvicorn#2807</a></li> <li><a href="https://github.com/shevron"><code>@shevron</code></a> made their first contribution in <a href="https://redirect.github.com/Kludex/uvicorn/pull/2788">Kludex/uvicorn#2788</a></li> <li><a href="https://github.com/jonashaag"><code>@jonashaag</code></a> made their first contribution in <a href="https://redirect.github.com/Kludex/uvicorn/pull/2707">Kludex/uvicorn#2707</a></li> </ul> <hr /> <p><strong>Full Changelog</strong>: <a href="https://github.com/Kludex/uvicorn/compare/0.40.0...0.41.0">https://github.com/Kludex/uvicorn/compare/0.40.0...0.41.0</a></p> <h2>Version 0.40.0</h2> <h2>What's Changed</h2> <ul> <li>Drop Python 3.9 by <a href="https://github.com/Kludex"><code>@Kludex</code></a> in <a href="https://redirect.github.com/Kludex/uvicorn/pull/2772">Kludex/uvicorn#2772</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/Kludex/uvicorn/compare/0.39.0...0.40.0">https://github.com/Kludex/uvicorn/compare/0.39.0...0.40.0</a></p> <h2>Version 0.39.0</h2> <h2>What's Changed</h2> <ul> <li>explicitly start ASGI run with empty context by <a href="https://github.com/pmeier"><code>@pmeier</code></a> in <a href="https://redirect.github.com/Kludex/uvicorn/pull/2742">Kludex/uvicorn#2742</a></li> <li>fix(websockets): Send close frame on ASGI return by <a href="https://github.com/Kludex"><code>@Kludex</code></a> in <a href="https://redirect.github.com/Kludex/uvicorn/pull/2769">Kludex/uvicorn#2769</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/pmeier"><code>@pmeier</code></a> made their first contribution in <a href="https://redirect.github.com/Kludex/uvicorn/pull/2742">Kludex/uvicorn#2742</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/Kludex/uvicorn/compare/0.38.0...0.39.0">https://github.com/Kludex/uvicorn/compare/0.38.0...0.39.0</a></p> <h2>Version 0.38.0</h2> <h2>What's Changed</h2> <ul> <li>Support Python 3.14 by <a href="https://github.com/Kludex"><code>@Kludex</code></a> in <a href="https://redirect.github.com/Kludex/uvicorn/pull/2723">Kludex/uvicorn#2723</a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/Kludex/uvicorn/blob/main/docs/release-notes.md">uvicorn's changelog</a>.</em></p> <blockquote> <h2>0.41.0 (February 16, 2026)</h2> <h3>Added</h3> <ul> <li>Add <code>--limit-max-requests-jitter</code> to stagger worker restarts (<a href="https://redirect.github.com/Kludex/uvicorn/issues/2707">#2707</a>)</li> <li>Add socket path to <code>scope["server"]</code> (<a href="https://redirect.github.com/Kludex/uvicorn/issues/2561">#2561</a>)</li> </ul> <h3>Changed</h3> <ul> <li>Rename <code>LifespanOn.error_occured</code> to <code>error_occurred</code> (<a href="https://redirect.github.com/Kludex/uvicorn/issues/2776">#2776</a>)</li> </ul> <h3>Fixed</h3> <ul> <li>Ignore permission denied errors in watchfiles reloader (<a href="https://redirect.github.com/Kludex/uvicorn/issues/2817">#2817</a>)</li> <li>Ensure lifespan shutdown runs when <code>should_exit</code> is set during startup (<a href="https://redirect.github.com/Kludex/uvicorn/issues/2812">#2812</a>)</li> <li>Reduce the log level of 'request limit exceeded' messages (<a href="https://redirect.github.com/Kludex/uvicorn/issues/2788">#2788</a>)</li> </ul> <h2>0.40.0 (December 21, 2025)</h2> <h3>Remove</h3> <ul> <li>Drop support for Python 3.9 (<a href="https://redirect.github.com/Kludex/uvicorn/issues/2772">#2772</a>)</li> </ul> <h2>0.39.0 (December 21, 2025)</h2> <h3>Fixed</h3> <ul> <li>Send close frame on ASGI return for WebSockets (<a href="https://redirect.github.com/Kludex/uvicorn/issues/2769">#2769</a>)</li> <li>Explicitly start ASGI run with empty context (<a href="https://redirect.github.com/Kludex/uvicorn/issues/2742">#2742</a>)</li> </ul> <h2>0.38.0 (October 18, 2025)</h2> <h3>Added</h3> <ul> <li>Support Python 3.14 (<a href="https://redirect.github.com/Kludex/uvicorn/issues/2723">#2723</a>)</li> </ul> <h2>0.37.0 (September 23, 2025)</h2> <h3>Added</h3> <ul> <li>Add <code>--timeout-worker-healthcheck</code> option (<a href="https://redirect.github.com/Kludex/uvicorn/issues/2711">#2711</a>)</li> <li>Add <code>os.PathLike[str]</code> type to <code>ssl_ca_certs</code> (<a href="https://redirect.github.com/Kludex/uvicorn/issues/2676">#2676</a>)</li> </ul> <h2>0.36.1 (September 23, 2025)</h2> <h3>Fixed</h3> <ul> <li>Raise an exception when calling removed <code>Config.setup_event_loop()</code> (<a href="https://redirect.github.com/Kludex/uvicorn/issues/2709">#2709</a>)</li> </ul> <h2>0.36.0 (September 20, 2025)</h2> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="`9283c0f15c`"><code>9283c0f</code></a> Version 0.41.0 (<a href="https://redirect.github.com/Kludex/uvicorn/issues/2821">#2821</a>)</li> <li><a href="`a01a33eb8f`"><code>a01a33e</code></a> Add <code>--limit-max-requests-jitter</code> to stagger worker restarts (<a href="https://redirect.github.com/Kludex/uvicorn/issues/2707">#2707</a>)</li> <li><a href="`2ce65bde15`"><code>2ce65bd</code></a> Ignore permission denied errors in watchfiles reloader (<a href="https://redirect.github.com/Kludex/uvicorn/issues/2817">#2817</a>)</li> <li><a href="`654f2ed7d7`"><code>654f2ed</code></a> Ensure lifespan shutdown runs when <code>should_exit</code> is set during startup (<a href="https://redirect.github.com/Kludex/uvicorn/issues/2812">#2812</a>)</li> <li><a href="`a03d9f6f0e`"><code>a03d9f6</code></a> Reduce the log level of 'request limit exceeded' messages (<a href="https://redirect.github.com/Kludex/uvicorn/issues/2788">#2788</a>)</li> <li><a href="`e377de40d0`"><code>e377de4</code></a> Add socket path to scope["server"] (<a href="https://redirect.github.com/Kludex/uvicorn/issues/2561">#2561</a>)</li> <li><a href="`0779f7f8a4`"><code>0779f7f</code></a> Poll for readiness in <code>test_multiprocess_health_check</code> and <code>run_server</code> (<a href="https://redirect.github.com/Kludex/uvicorn/issues/2816">#2816</a>)</li> <li><a href="`7e9ce2c974`"><code>7e9ce2c</code></a> Poll for PID changes in <code>test_multiprocess_sighup</code> instead of fixed sleep (<a href="https://redirect.github.com/Kludex/uvicorn/issues/2">#2</a>...</li> <li><a href="`99f0d8734d`"><code>99f0d87</code></a> Fix grep warning in scripts/sync-version (<a href="https://redirect.github.com/Kludex/uvicorn/issues/2807">#2807</a>)</li> <li><a href="`7ae2e6375a`"><code>7ae2e63</code></a> chore(deps): bump the python-packages group with 18 updates (<a href="https://redirect.github.com/Kludex/uvicorn/issues/2801">#2801</a>)</li> <li>Additional commits viewable in <a href="https://github.com/Kludex/uvicorn/compare/0.24.0...0.41.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=uvicorn&package-manager=pip&previous-version=0.24.0&new-version=0.41.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details>	2026-03-15 20:28:05 -05:00
Alexa Amundson	08e1ba632e	chore(deps-dev): bump @types/node from 25.3.5 to 25.4.0 (#195 ) Bumps [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) from 25.3.5 to 25.4.0. <details> <summary>Commits</summary> <ul> <li>See full diff in <a href="https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=@types/node&package-manager=npm_and_yarn&previous-version=25.3.5&new-version=25.4.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details>	2026-03-15 20:28:02 -05:00
Alexa Amundson	969adac141	chore: bump alembic from 1.12.1 to 1.18.4 (#197 ) Bumps [alembic](https://github.com/sqlalchemy/alembic) from 1.12.1 to 1.18.4. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/sqlalchemy/alembic/releases">alembic's releases</a>.</em></p> <blockquote> <h1>1.18.4</h1> <p>Released: February 10, 2026</p> <h2>bug</h2> <ul> <li> <p><strong>[bug] [operations]</strong> Reverted the behavior of <code>Operations.add_column()</code> that would automatically render the "PRIMARY KEY" keyword inline when a <code>Column</code> with <code>primary_key=True</code> is added. The automatic behavior, added in version 1.18.2, is now opt-in via the new <code>Operations.add_column.inline_primary_key</code> parameter. This change restores the ability to render a PostgreSQL SERIAL column, which is required to be <code>primary_key=True</code>, while not impacting the ability to render a separate primary key constraint. This also provides consistency with the <code>Operations.add_column.inline_references</code> parameter and gives users explicit control over SQL generation.</p> <p>To render PRIMARY KEY inline, use the <code>Operations.add_column.inline_primary_key</code> parameter set to <code>True</code>:</p> <p>op.add_column( "my_table", Column("id", Integer, primary_key=True), inline_primary_key=True )References: <a href="https://redirect.github.com/sqlalchemy/alembic/issues/1232">#1232</a></p> </li> </ul> <h1>1.18.3</h1> <p>Released: January 29, 2026</p> <h2>bug</h2> <ul> <li> <p><strong>[bug] [autogenerate]</strong> Fixed regression in version 1.18.0 due to <a href="https://redirect.github.com/sqlalchemy/alembic/issues/1771">#1771</a> where autogenerate would raise <code>NoReferencedTableError</code> when a foreign key constraint referenced a table that was not part of the initial table load, including tables filtered out by the <code>EnvironmentContext.configure.include_name</code> callable or tables in remote schemas that were not included in the initial reflection run.</p> <p>The change in <a href="https://redirect.github.com/sqlalchemy/alembic/issues/1771">#1771</a> was a performance optimization that eliminated additional reflection queries for tables that were only referenced by foreign keys but not explicitly included in the main reflection run. However, this optimization inadvertently removed the creation of <code>Table</code> objects for these referenced tables, causing autogenerate to fail when processing foreign key constraints that pointed to them.</p> <p>The fix creates placeholder <code>Table</code> objects for foreign key targets</p> </li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li>See full diff in <a href="https://github.com/sqlalchemy/alembic/commits">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=alembic&package-manager=pip&previous-version=1.12.1&new-version=1.18.4)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details>	2026-03-15 20:28:00 -05:00
Alexa Amundson	c519a53adb	chore: bump botocore from 1.35.99 to 1.42.66 (#199 ) Bumps [botocore](https://github.com/boto/botocore) from 1.35.99 to 1.42.66. <details> <summary>Commits</summary> <ul> <li><a href="`537c33eaa6`"><code>537c33e</code></a> Merge branch 'release-1.42.66'</li> <li><a href="`c640bbbedc`"><code>c640bbb</code></a> Bumping version to 1.42.66</li> <li><a href="`8e7a97f138`"><code>8e7a97f</code></a> Update endpoints model</li> <li><a href="`8eba3d800b`"><code>8eba3d8</code></a> Update to latest models</li> <li><a href="`685dba3e59`"><code>685dba3</code></a> Update documentation.yml (<a href="https://redirect.github.com/boto/botocore/issues/3638">#3638</a>)</li> <li><a href="`9ed5c2f873`"><code>9ed5c2f</code></a> Merge branch 'release-1.42.65'</li> <li><a href="`028c88334d`"><code>028c883</code></a> Merge branch 'release-1.42.65' into develop</li> <li><a href="`df66c0c632`"><code>df66c0c</code></a> Bumping version to 1.42.65</li> <li><a href="`51583f17b5`"><code>51583f1</code></a> Update to latest models</li> <li><a href="`af281813f1`"><code>af28181</code></a> Add logic to skip invalid checksum feature id (<a href="https://redirect.github.com/boto/botocore/issues/3639">#3639</a>)</li> <li>Additional commits viewable in <a href="https://github.com/boto/botocore/compare/1.35.99...1.42.66">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=botocore&package-manager=pip&previous-version=1.35.99&new-version=1.42.66)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details>	2026-03-15 20:27:56 -05:00
Alexa Amundson	175f422058	chore: bump aiosqlite from 0.19.0 to 0.22.1 (#200 ) Bumps [aiosqlite](https://github.com/omnilib/aiosqlite) from 0.19.0 to 0.22.1. <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/omnilib/aiosqlite/blob/main/CHANGELOG.md">aiosqlite's changelog</a>.</em></p> <blockquote> <h2>v0.22.1</h2> <p>Bug fix release</p> <p>NOTE: Starting with <code>v0.22.0</code>, the <code>aiosqlite.Connection</code> object no longer inherits from <code>threading.Thread</code>. If not using aiosqlite as a context manager, clients must <code>await connection.close()</code> or call <code>connection.stop()</code> to ensure the helper thread is completed and terminated correctly. A <code>ResourceWarning</code> will be emitted for any connection that is garbage collected without being closed or stopped.</p> <ul> <li>Added synchronous <code>stop()</code> method to <code>aiosqlite.Connection</code> to enable safe cleanup and termination of the background thread without dependence on having an active event loop (<a href="https://redirect.github.com/omnilib/aiosqlite/issues/370">#370</a>)</li> </ul> <pre lang="text"><code>$ git shortlog -s v0.22.0...v0.22.1 2 Amethyst Reese </code></pre> <h2>v0.22.0</h2> <p>Feature release</p> <ul> <li>Support <code>set_authorizer</code> query access controls (<a href="https://redirect.github.com/omnilib/aiosqlite/issues/349">#349</a>)</li> <li>Wait for transaction queue to complete when closing connection (<a href="https://redirect.github.com/omnilib/aiosqlite/issues/305">#305</a>)</li> <li>Emit warning when connection goes out of scope without being closed (<a href="https://redirect.github.com/omnilib/aiosqlite/issues/355">#355</a>)</li> <li>Remove dependency on <code>typing_extensions</code> (<a href="https://redirect.github.com/omnilib/aiosqlite/issues/365">#365</a>)</li> </ul> <pre lang="text"><code>$ git shortlog -s v0.21.0...v0.22.0 1 Alec Berryman 1 Amethyst Reese 1 David Andreoletti 1 Markus Heidelberg 1 beerpsi 19 dependabot[bot] </code></pre> <h2>v0.21.0</h2> <p>Maintenance release</p> <ul> <li>Fix: close connection correctly when BaseException raised in connection (<a href="https://redirect.github.com/omnilib/aiosqlite/issues/317">#317</a>)</li> <li>Metadata improvements</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="`9b127cecc7`"><code>9b127ce</code></a> Version bump v0.22.1</li> <li><a href="`5c3f61c1ea`"><code>5c3f61c</code></a> Improve stop semantics for connections (<a href="https://redirect.github.com/omnilib/aiosqlite/issues/370">#370</a>)</li> <li><a href="`a869d73678`"><code>a869d73</code></a> Version bump v0.22.0</li> <li><a href="`1cd60adcab`"><code>1cd60ad</code></a> Emit warning if connection is deleted before it is closed (<a href="https://redirect.github.com/omnilib/aiosqlite/issues/355">#355</a>)</li> <li><a href="`611d7b4f29`"><code>611d7b4</code></a> Add set_authorizer support for fine-grained access control (<a href="https://redirect.github.com/omnilib/aiosqlite/issues/349">#349</a>)</li> <li><a href="`81d00c8f16`"><code>81d00c8</code></a> Bump actions/setup-python from 5 to 6 (<a href="https://redirect.github.com/omnilib/aiosqlite/issues/357">#357</a>)</li> <li><a href="`7a26722f7e`"><code>7a26722</code></a> Bump coverage[toml] from 7.8.0 to 7.10.7 (<a href="https://redirect.github.com/omnilib/aiosqlite/issues/358">#358</a>)</li> <li><a href="`445754087e`"><code>4457540</code></a> Bump flake8 from 7.2.0 to 7.3.0 (<a href="https://redirect.github.com/omnilib/aiosqlite/issues/346">#346</a>)</li> <li><a href="`b650dad318`"><code>b650dad</code></a> Bump actions/checkout from 5 to 6 (<a href="https://redirect.github.com/omnilib/aiosqlite/issues/366">#366</a>)</li> <li><a href="`065ffdd129`"><code>065ffdd</code></a> Bump mypy from 1.15.0 to 1.19.0 (<a href="https://redirect.github.com/omnilib/aiosqlite/issues/367">#367</a>)</li> <li>Additional commits viewable in <a href="https://github.com/omnilib/aiosqlite/compare/v0.19.0...v0.22.1">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=aiosqlite&package-manager=pip&previous-version=0.19.0&new-version=0.22.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details>	2026-03-15 20:27:54 -05:00
Alexa Amundson	099b06aa0d	chore: bump python-jose[cryptography] from 3.3.0 to 3.5.0 (#201 ) Bumps [python-jose[cryptography]](https://github.com/mpdavis/python-jose) from 3.3.0 to 3.5.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/mpdavis/python-jose/releases">python-jose[cryptography]'s releases</a>.</em></p> <blockquote> <h2>3.5.0</h2> <ul> <li>Remove support for Python 3.8</li> <li>Added support for Python 3.12 & 3.13</li> <li>Upgrade to pyasn1 0.5.1+</li> <li>Upgrade to pytest and other dependencies</li> <li>Add RTD config file to silence emailed deprecation warnings</li> </ul> <h3>Bug fixes and Improvements</h3> <ul> <li>Remove get_random_bytes from cryptography backend</li> <li>Do not use <code>utc_now</code> on module level</li> <li>Remove key data (sensitive information) from JWKError exceptions</li> <li>Added possibility to call jwk.construct() with a private RSA key</li> </ul> <p><a href="https://pypi.org/project/python-jose/3.5.0/">https://pypi.org/project/python-jose/3.5.0/</a></p> <h2>3.4.0</h2> <h3>News</h3> <ul> <li>Remove support for Python 3.6 and 3.7</li> <li>Added support for Python 3.10 and 3.11</li> </ul> <h3>Bug fixes and Improvements</h3> <ul> <li>Updating <code>CryptographyAESKey::encrypt</code> to generate 96 bit IVs for GCM block cipher mode</li> <li>Fix for PEM key comparisons caused by line lengths and new lines</li> <li>Fix for CVE-2024-33664 - JWE limited to 250KiB</li> <li>Fix for CVE-2024-33663 - signing JWT with public key is now forbidden</li> <li>Replace usage of deprecated datetime.utcnow() with datetime.now(UTC)</li> </ul> <h3>Housekeeping</h3> <ul> <li>Updated Github Actions Workflows</li> <li>Updated to use tox 4.x</li> <li>Revise codecov integration</li> <li>Fixed DeprecationWarnings</li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/mpdavis/python-jose/blob/master/CHANGELOG.md">python-jose[cryptography]'s changelog</a>.</em></p> <blockquote> <h2>3.5.0 -- 2025-05-28</h2> <h3>News</h3> <ul> <li>Remove support for Python 3.8</li> <li>Added support for Python 3.12 & 3.13</li> <li>Upgrade to pyasn1 0.5.1+</li> <li>Upgrade to pytest and other dependencies</li> <li>Add RTD config file to silence emailed deprecation warnings</li> </ul> <h3>Bug fixes and Improvements</h3> <ul> <li>Remove get_random_bytes from cryptography backend</li> <li>Do not use <code>utc_now</code> on module level</li> <li>Remove key data (sensitive information) from JWKError exceptions</li> <li>Added possibility to call jwk.construct() with a private RSA key</li> </ul> <h2>3.4.0 -- 2025-02-14</h2> <h3>News</h3> <ul> <li>Remove support for Python 3.6 and 3.7</li> <li>Added support for Python 3.10 and 3.11</li> </ul> <h3>Bug fixes and Improvements</h3> <ul> <li>Updating <code>CryptographyAESKey::encrypt</code> to generate 96 bit IVs for GCM block cipher mode</li> <li>Fix for PEM key comparisons caused by line lengths and new lines</li> <li>Fix for CVE-2024-33664 - JWE limited to 250KiB</li> <li>Fix for CVE-2024-33663 - signing JWT with public key is now forbidden</li> <li>Replace usage of deprecated datetime.utcnow() with datetime.now(UTC)</li> </ul> <h3>Housekeeping</h3> <ul> <li>Updated Github Actions Workflows</li> <li>Updated to use tox 4.x</li> <li>Revise codecov integration</li> <li>Fixed DeprecationWarnings</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="`018b310ddb`"><code>018b310</code></a> Prepare release 3.5.0 (<a href="https://redirect.github.com/mpdavis/python-jose/issues/388">#388</a>)</li> <li><a href="`393c37476c`"><code>393c374</code></a> Improve jwt.decode key doc (<a href="https://redirect.github.com/mpdavis/python-jose/issues/198">#198</a>)</li> <li><a href="`50d43908ff`"><code>50d4390</code></a> utils.py: fix types in docstrings for base64url_encode/decode (<a href="https://redirect.github.com/mpdavis/python-jose/issues/269">#269</a>)</li> <li><a href="`8fd0b63186`"><code>8fd0b63</code></a> Add RTD config file to silence emailed deprecation warnings (<a href="https://redirect.github.com/mpdavis/python-jose/issues/333">#333</a>)</li> <li><a href="`6f03385e53`"><code>6f03385</code></a> Added possibility to call jwk.construct() with a private key (<a href="https://redirect.github.com/mpdavis/python-jose/issues/295">#295</a>)</li> <li><a href="`2f0aca6e2e`"><code>2f0aca6</code></a> Add python_requires arg to setup.cfg (<a href="https://redirect.github.com/mpdavis/python-jose/issues/273">#273</a>)</li> <li><a href="`895777e04a`"><code>895777e</code></a> Updated pyasn version to match latest (<a href="https://redirect.github.com/mpdavis/python-jose/issues/338">#338</a>)</li> <li><a href="`45bd1248f1`"><code>45bd124</code></a> Update jwk.py (<a href="https://redirect.github.com/mpdavis/python-jose/issues/328">#328</a>)</li> <li><a href="`1f0ae0a208`"><code>1f0ae0a</code></a> docs: Fix a few typos (<a href="https://redirect.github.com/mpdavis/python-jose/issues/299">#299</a>)</li> <li><a href="`ceaac3665d`"><code>ceaac36</code></a> Do not use <code>utc_now</code> on module level (<a href="https://redirect.github.com/mpdavis/python-jose/issues/372">#372</a>)</li> <li>Additional commits viewable in <a href="https://github.com/mpdavis/python-jose/compare/3.3.0...3.5.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=python-jose[cryptography]&package-manager=pip&previous-version=3.3.0&new-version=3.5.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details>	2026-03-15 20:27:52 -05:00
Alexa Amundson	761bd19474	chore: bump pytest from 7.4.3 to 9.0.2 (#202 ) Bumps [pytest](https://github.com/pytest-dev/pytest) from 7.4.3 to 9.0.2. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/pytest-dev/pytest/releases">pytest's releases</a>.</em></p> <blockquote> <h2>9.0.2</h2> <h1>pytest 9.0.2 (2025-12-06)</h1> <h2>Bug fixes</h2> <ul> <li> <p><a href="https://redirect.github.com/pytest-dev/pytest/issues/13896">#13896</a>: The terminal progress feature added in pytest 9.0.0 has been disabled by default, except on Windows, due to compatibility issues with some terminal emulators.</p> <p>You may enable it again by passing <code>-p terminalprogress</code>. We may enable it by default again once compatibility improves in the future.</p> <p>Additionally, when the environment variable <code>TERM</code> is <code>dumb</code>, the escape codes are no longer emitted, even if the plugin is enabled.</p> </li> <li> <p><a href="https://redirect.github.com/pytest-dev/pytest/issues/13904">#13904</a>: Fixed the TOML type of the <code>tmp_path_retention_count</code> settings in the API reference from number to string.</p> </li> <li> <p><a href="https://redirect.github.com/pytest-dev/pytest/issues/13946">#13946</a>: The private <code>config.inicfg</code> attribute was changed in a breaking manner in pytest 9.0.0. Due to its usage in the ecosystem, it is now restored to working order using a compatibility shim. It will be deprecated in pytest 9.1 and removed in pytest 10.</p> </li> <li> <p><a href="https://redirect.github.com/pytest-dev/pytest/issues/13965">#13965</a>: Fixed quadratic-time behavior when handling <code>unittest</code> subtests in Python 3.10.</p> </li> </ul> <h2>Improved documentation</h2> <ul> <li><a href="https://redirect.github.com/pytest-dev/pytest/issues/4492">#4492</a>: The API Reference now contains cross-reference-able documentation of <code>pytest's command-line flags <command-line-flags></code>.</li> </ul> <h2>9.0.1</h2> <h1>pytest 9.0.1 (2025-11-12)</h1> <h2>Bug fixes</h2> <ul> <li><a href="https://redirect.github.com/pytest-dev/pytest/issues/13895">#13895</a>: Restore support for skipping tests via <code>raise unittest.SkipTest</code>.</li> <li><a href="https://redirect.github.com/pytest-dev/pytest/issues/13896">#13896</a>: The terminal progress plugin added in pytest 9.0 is now automatically disabled when iTerm2 is detected, it generated desktop notifications instead of the desired functionality.</li> <li><a href="https://redirect.github.com/pytest-dev/pytest/issues/13904">#13904</a>: Fixed the TOML type of the verbosity settings in the API reference from number to string.</li> <li><a href="https://redirect.github.com/pytest-dev/pytest/issues/13910">#13910</a>: Fixed <!-- raw HTML omitted -->UserWarning: Do not expect file_or_dir<!-- raw HTML omitted --> on some earlier Python 3.12 and 3.13 point versions.</li> </ul> <h2>Packaging updates and notes for downstreams</h2> <ul> <li><a href="https://redirect.github.com/pytest-dev/pytest/issues/13933">#13933</a>: The tox configuration has been adjusted to make sure the desired version string can be passed into its <code>package_env</code> through the <code>SETUPTOOLS_SCM_PRETEND_VERSION_FOR_PYTEST</code> environment variable as a part of the release process -- by <code>webknjaz</code>.</li> </ul> <h2>Contributor-facing changes</h2> <ul> <li><a href="https://redirect.github.com/pytest-dev/pytest/issues/13891">#13891</a>, <a href="https://redirect.github.com/pytest-dev/pytest/issues/13942">#13942</a>: The CI/CD part of the release automation is now capable of creating GitHub Releases without having a Git checkout on disk -- by <code>bluetech</code> and <code>webknjaz</code>.</li> <li><a href="https://redirect.github.com/pytest-dev/pytest/issues/13933">#13933</a>: The tox configuration has been adjusted to make sure the desired version string can be passed into its <code>package_env</code> through the <code>SETUPTOOLS_SCM_PRETEND_VERSION_FOR_PYTEST</code> environment variable as a part of the release process -- by <code>webknjaz</code>.</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="`3d10b5148e`"><code>3d10b51</code></a> Prepare release version 9.0.2</li> <li><a href="`188750b725`"><code>188750b</code></a> Merge pull request <a href="https://redirect.github.com/pytest-dev/pytest/issues/14030">#14030</a> from pytest-dev/patchback/backports/9.0.x/1e4b01d1f...</li> <li><a href="`b7d7bef90c`"><code>b7d7bef</code></a> Merge pull request <a href="https://redirect.github.com/pytest-dev/pytest/issues/14014">#14014</a> from bluetech/compat-note</li> <li><a href="`bd08e85ac7`"><code>bd08e85</code></a> Merge pull request <a href="https://redirect.github.com/pytest-dev/pytest/issues/14013">#14013</a> from pytest-dev/patchback/backports/9.0.x/922b60377...</li> <li><a href="`bc78386299`"><code>bc78386</code></a> Add CLI options reference documentation (<a href="https://redirect.github.com/pytest-dev/pytest/issues/13930">#13930</a>)</li> <li><a href="`5a4e398ce8`"><code>5a4e398</code></a> Fix docs typo (<a href="https://redirect.github.com/pytest-dev/pytest/issues/14005">#14005</a>) (<a href="https://redirect.github.com/pytest-dev/pytest/issues/14008">#14008</a>)</li> <li><a href="`d7ae6df394`"><code>d7ae6df</code></a> Merge pull request <a href="https://redirect.github.com/pytest-dev/pytest/issues/14006">#14006</a> from pytest-dev/maintenance/update-plugin-list-tmpl...</li> <li><a href="`556f6a22e1`"><code>556f6a2</code></a> pre-commit: fix rst-lint after new release (<a href="https://redirect.github.com/pytest-dev/pytest/issues/13999">#13999</a>) (<a href="https://redirect.github.com/pytest-dev/pytest/issues/14001">#14001</a>)</li> <li><a href="`c60fbe63a2`"><code>c60fbe6</code></a> Fix quadratic-time behavior when handling <code>unittest</code> subtests in Python 3.10 ...</li> <li><a href="`73d9b01118`"><code>73d9b01</code></a> Merge pull request <a href="https://redirect.github.com/pytest-dev/pytest/issues/13995">#13995</a> from nicoddemus/patchback/backports/9.0.x/1b5200c0f...</li> <li>Additional commits viewable in <a href="https://github.com/pytest-dev/pytest/compare/7.4.3...9.0.2">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=pytest&package-manager=pip&previous-version=7.4.3&new-version=9.0.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details>	2026-03-15 20:27:49 -05:00
Alexa Amundson	e90b230df5	chore: bump pyjwt from 2.8.0 to 2.11.0 (#203 ) Bumps [pyjwt](https://github.com/jpadilla/pyjwt) from 2.8.0 to 2.11.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/jpadilla/pyjwt/releases">pyjwt's releases</a>.</em></p> <blockquote> <h2>2.11.0</h2> <h2>What's Changed</h2> <ul> <li>Fixed type error in comment by <a href="https://github.com/shuhaib-aot"><code>@shuhaib-aot</code></a> in <a href="https://redirect.github.com/jpadilla/pyjwt/pull/1026">jpadilla/pyjwt#1026</a></li> <li>[pre-commit.ci] pre-commit autoupdate by <a href="https://github.com/pre-commit-ci"><code>@pre-commit-ci</code></a>[bot] in <a href="https://redirect.github.com/jpadilla/pyjwt/pull/1018">jpadilla/pyjwt#1018</a></li> <li>[pre-commit.ci] pre-commit autoupdate by <a href="https://github.com/pre-commit-ci"><code>@pre-commit-ci</code></a>[bot] in <a href="https://redirect.github.com/jpadilla/pyjwt/pull/1033">jpadilla/pyjwt#1033</a></li> <li>Make note of use of leeway with nbf by <a href="https://github.com/djw8605"><code>@djw8605</code></a> in <a href="https://redirect.github.com/jpadilla/pyjwt/pull/1034">jpadilla/pyjwt#1034</a></li> <li>[pre-commit.ci] pre-commit autoupdate by <a href="https://github.com/pre-commit-ci"><code>@pre-commit-ci</code></a>[bot] in <a href="https://redirect.github.com/jpadilla/pyjwt/pull/1035">jpadilla/pyjwt#1035</a></li> <li>Fixes <a href="https://redirect.github.com/jpadilla/pyjwt/issues/964">#964</a>: Validate key against allowed types for Algorithm family by <a href="https://github.com/pachewise"><code>@pachewise</code></a> in <a href="https://redirect.github.com/jpadilla/pyjwt/pull/985">jpadilla/pyjwt#985</a></li> <li>Feat <a href="https://redirect.github.com/jpadilla/pyjwt/issues/1024">#1024</a>: Add iterator for PyJWKSet by <a href="https://github.com/pachewise"><code>@pachewise</code></a> in <a href="https://redirect.github.com/jpadilla/pyjwt/pull/1041">jpadilla/pyjwt#1041</a></li> <li>Fixes <a href="https://redirect.github.com/jpadilla/pyjwt/issues/1039">#1039</a>: Add iss, issuer type checks by <a href="https://github.com/pachewise"><code>@pachewise</code></a> in <a href="https://redirect.github.com/jpadilla/pyjwt/pull/1040">jpadilla/pyjwt#1040</a></li> <li>Fixes <a href="https://redirect.github.com/jpadilla/pyjwt/issues/660">#660</a>: Improve typing/logic for <code>options</code> in decode, decode_complete; Improve docs by <a href="https://github.com/pachewise"><code>@pachewise</code></a> in <a href="https://redirect.github.com/jpadilla/pyjwt/pull/1045">jpadilla/pyjwt#1045</a></li> <li>[pre-commit.ci] pre-commit autoupdate by <a href="https://github.com/pre-commit-ci"><code>@pre-commit-ci</code></a>[bot] in <a href="https://redirect.github.com/jpadilla/pyjwt/pull/1042">jpadilla/pyjwt#1042</a></li> <li>[pre-commit.ci] pre-commit autoupdate by <a href="https://github.com/pre-commit-ci"><code>@pre-commit-ci</code></a>[bot] in <a href="https://redirect.github.com/jpadilla/pyjwt/pull/1052">jpadilla/pyjwt#1052</a></li> <li>[pre-commit.ci] pre-commit autoupdate by <a href="https://github.com/pre-commit-ci"><code>@pre-commit-ci</code></a>[bot] in <a href="https://redirect.github.com/jpadilla/pyjwt/pull/1053">jpadilla/pyjwt#1053</a></li> <li>Fix <a href="https://redirect.github.com/jpadilla/pyjwt/issues/1022">#1022</a>: Map <code>algorithm=None</code> to "none" by <a href="https://github.com/qqii"><code>@qqii</code></a> in <a href="https://redirect.github.com/jpadilla/pyjwt/pull/1056">jpadilla/pyjwt#1056</a></li> <li>[pre-commit.ci] pre-commit autoupdate by <a href="https://github.com/pre-commit-ci"><code>@pre-commit-ci</code></a>[bot] in <a href="https://redirect.github.com/jpadilla/pyjwt/pull/1055">jpadilla/pyjwt#1055</a></li> <li>[pre-commit.ci] pre-commit autoupdate by <a href="https://github.com/pre-commit-ci"><code>@pre-commit-ci</code></a>[bot] in <a href="https://redirect.github.com/jpadilla/pyjwt/pull/1058">jpadilla/pyjwt#1058</a></li> <li>[pre-commit.ci] pre-commit autoupdate by <a href="https://github.com/pre-commit-ci"><code>@pre-commit-ci</code></a>[bot] in <a href="https://redirect.github.com/jpadilla/pyjwt/pull/1060">jpadilla/pyjwt#1060</a></li> <li>[pre-commit.ci] pre-commit autoupdate by <a href="https://github.com/pre-commit-ci"><code>@pre-commit-ci</code></a>[bot] in <a href="https://redirect.github.com/jpadilla/pyjwt/pull/1061">jpadilla/pyjwt#1061</a></li> <li>Fixes <a href="https://redirect.github.com/jpadilla/pyjwt/issues/1047">#1047</a>: Correct <code>PyJWKClient.get_signing_key_from_jwt</code> annotation by <a href="https://github.com/khvn26"><code>@khvn26</code></a> in <a href="https://redirect.github.com/jpadilla/pyjwt/pull/1048">jpadilla/pyjwt#1048</a></li> <li>[pre-commit.ci] pre-commit autoupdate by <a href="https://github.com/pre-commit-ci"><code>@pre-commit-ci</code></a>[bot] in <a href="https://redirect.github.com/jpadilla/pyjwt/pull/1062">jpadilla/pyjwt#1062</a></li> <li>Fixed doc string typo in _validate_jti() function <a href="https://redirect.github.com/jpadilla/pyjwt/issues/1063">#1063</a> by <a href="https://github.com/kuldeepkhatke"><code>@kuldeepkhatke</code></a> in <a href="https://redirect.github.com/jpadilla/pyjwt/pull/1064">jpadilla/pyjwt#1064</a></li> <li>[pre-commit.ci] pre-commit autoupdate by <a href="https://github.com/pre-commit-ci"><code>@pre-commit-ci</code></a>[bot] in <a href="https://redirect.github.com/jpadilla/pyjwt/pull/1065">jpadilla/pyjwt#1065</a></li> <li>Update SECURITY.md by <a href="https://github.com/auvipy"><code>@auvipy</code></a> in <a href="https://redirect.github.com/jpadilla/pyjwt/pull/1057">jpadilla/pyjwt#1057</a></li> <li>Typing fix: use <code>float</code> instead of <code>int</code> for <code>lifespan</code> and <code>timeout</code> by <a href="https://github.com/nikitagashkov"><code>@nikitagashkov</code></a> in <a href="https://redirect.github.com/jpadilla/pyjwt/pull/1068">jpadilla/pyjwt#1068</a></li> <li>[pre-commit.ci] pre-commit autoupdate by <a href="https://github.com/pre-commit-ci"><code>@pre-commit-ci</code></a>[bot] in <a href="https://redirect.github.com/jpadilla/pyjwt/pull/1067">jpadilla/pyjwt#1067</a></li> <li>[pre-commit.ci] pre-commit autoupdate by <a href="https://github.com/pre-commit-ci"><code>@pre-commit-ci</code></a>[bot] in <a href="https://redirect.github.com/jpadilla/pyjwt/pull/1071">jpadilla/pyjwt#1071</a></li> <li>[pre-commit.ci] pre-commit autoupdate by <a href="https://github.com/pre-commit-ci"><code>@pre-commit-ci</code></a>[bot] in <a href="https://redirect.github.com/jpadilla/pyjwt/pull/1076">jpadilla/pyjwt#1076</a></li> <li>Fix TYP header documentation by <a href="https://github.com/fobiasmog"><code>@fobiasmog</code></a> in <a href="https://redirect.github.com/jpadilla/pyjwt/pull/1046">jpadilla/pyjwt#1046</a></li> <li>doc: Document claims sub and jti by <a href="https://github.com/cleder"><code>@cleder</code></a> in <a href="https://redirect.github.com/jpadilla/pyjwt/pull/1088">jpadilla/pyjwt#1088</a></li> <li>[pre-commit.ci] pre-commit autoupdate by <a href="https://github.com/pre-commit-ci"><code>@pre-commit-ci</code></a>[bot] in <a href="https://redirect.github.com/jpadilla/pyjwt/pull/1077">jpadilla/pyjwt#1077</a></li> <li>Bump actions/setup-python from 5 to 6 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/jpadilla/pyjwt/pull/1089">jpadilla/pyjwt#1089</a></li> <li>Bump actions/stale from 8 to 10 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/jpadilla/pyjwt/pull/1090">jpadilla/pyjwt#1090</a></li> <li>Bump actions/checkout from 4 to 5 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/jpadilla/pyjwt/pull/1083">jpadilla/pyjwt#1083</a></li> <li>[pre-commit.ci] pre-commit autoupdate by <a href="https://github.com/pre-commit-ci"><code>@pre-commit-ci</code></a>[bot] in <a href="https://redirect.github.com/jpadilla/pyjwt/pull/1091">jpadilla/pyjwt#1091</a></li> <li>[pre-commit.ci] pre-commit autoupdate by <a href="https://github.com/pre-commit-ci"><code>@pre-commit-ci</code></a>[bot] in <a href="https://redirect.github.com/jpadilla/pyjwt/pull/1093">jpadilla/pyjwt#1093</a></li> <li>[pre-commit.ci] pre-commit autoupdate by <a href="https://github.com/pre-commit-ci"><code>@pre-commit-ci</code></a>[bot] in <a href="https://redirect.github.com/jpadilla/pyjwt/pull/1096">jpadilla/pyjwt#1096</a></li> <li>Resolve package build warnings by <a href="https://github.com/kurtmckee"><code>@kurtmckee</code></a> in <a href="https://redirect.github.com/jpadilla/pyjwt/pull/1105">jpadilla/pyjwt#1105</a></li> <li>Support Python 3.14, and test against PyPy 3.10+ by <a href="https://github.com/kurtmckee"><code>@kurtmckee</code></a> in <a href="https://redirect.github.com/jpadilla/pyjwt/pull/1104">jpadilla/pyjwt#1104</a></li> <li>Fix a <code>SyntaxWarning</code> caused by invalid escape sequences by <a href="https://github.com/kurtmckee"><code>@kurtmckee</code></a> in <a href="https://redirect.github.com/jpadilla/pyjwt/pull/1103">jpadilla/pyjwt#1103</a></li> <li>Standardize CHANGELOG links to PRs by <a href="https://github.com/kurtmckee"><code>@kurtmckee</code></a> in <a href="https://redirect.github.com/jpadilla/pyjwt/pull/1110">jpadilla/pyjwt#1110</a></li> <li>Migrate from <code>pep517</code>, which is deprecated, to <code>build</code> by <a href="https://github.com/kurtmckee"><code>@kurtmckee</code></a> in <a href="https://redirect.github.com/jpadilla/pyjwt/pull/1108">jpadilla/pyjwt#1108</a></li> <li>Fix incorrectly-named test suite function by <a href="https://github.com/kurtmckee"><code>@kurtmckee</code></a> in <a href="https://redirect.github.com/jpadilla/pyjwt/pull/1116">jpadilla/pyjwt#1116</a></li> <li>Fix Read the Docs builds by <a href="https://github.com/kurtmckee"><code>@kurtmckee</code></a> in <a href="https://redirect.github.com/jpadilla/pyjwt/pull/1111">jpadilla/pyjwt#1111</a></li> <li>Bump actions/download-artifact from 4 to 6 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/jpadilla/pyjwt/pull/1118">jpadilla/pyjwt#1118</a></li> <li>Escalate test suite warnings to errors by <a href="https://github.com/kurtmckee"><code>@kurtmckee</code></a> in <a href="https://redirect.github.com/jpadilla/pyjwt/pull/1107">jpadilla/pyjwt#1107</a></li> <li>Add pyupgrade as a pre-commit hook by <a href="https://github.com/kurtmckee"><code>@kurtmckee</code></a> in <a href="https://redirect.github.com/jpadilla/pyjwt/pull/1109">jpadilla/pyjwt#1109</a></li> <li>Simplify the test suite decorators by <a href="https://github.com/kurtmckee"><code>@kurtmckee</code></a> in <a href="https://redirect.github.com/jpadilla/pyjwt/pull/1113">jpadilla/pyjwt#1113</a></li> <li>Improve coverage config and eliminate unused test suite code by <a href="https://github.com/kurtmckee"><code>@kurtmckee</code></a> in <a href="https://redirect.github.com/jpadilla/pyjwt/pull/1115">jpadilla/pyjwt#1115</a></li> <li>Build a shared wheel once in the test suite by <a href="https://github.com/kurtmckee"><code>@kurtmckee</code></a> in <a href="https://redirect.github.com/jpadilla/pyjwt/pull/1114">jpadilla/pyjwt#1114</a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/jpadilla/pyjwt/blob/master/CHANGELOG.rst">pyjwt's changelog</a>.</em></p> <blockquote> <h2><code>v2.11.0 <https://github.com/jpadilla/pyjwt/compare/2.10.1...2.11.0></code>__</h2> <p>Fixed</p> <pre><code> - Enforce ECDSA curve validation per RFC 7518 Section 3.4. - Fix build system warnings by @kurtmckee in `[#1105](https://github.com/jpadilla/pyjwt/issues/1105) <https://github.com/jpadilla/pyjwt/pull/1105>`__ - Validate key against allowed types for Algorithm family in `[#964](https://github.com/jpadilla/pyjwt/issues/964) <https://github.com/jpadilla/pyjwt/pull/964>`__ - Add iterator for JWKSet in `[#1041](https://github.com/jpadilla/pyjwt/issues/1041) <https://github.com/jpadilla/pyjwt/pull/1041>`__ - Validate `iss` claim is a string during encoding and decoding by @pachewise in `[#1040](https://github.com/jpadilla/pyjwt/issues/1040) <https://github.com/jpadilla/pyjwt/pull/1040>`__ - Improve typing/logic for `options` in decode, decode_complete by @pachewise in `[#1045](https://github.com/jpadilla/pyjwt/issues/1045) <https://github.com/jpadilla/pyjwt/pull/1045>`__ - Declare float supported type for lifespan and timeout by @nikitagashkov in `[#1068](https://github.com/jpadilla/pyjwt/issues/1068) <https://github.com/jpadilla/pyjwt/pull/1068>`__ - Fix ``SyntaxWarning``\s/``DeprecationWarning``\s caused by invalid escape sequences by @kurtmckee in `[#1103](https://github.com/jpadilla/pyjwt/issues/1103) <https://github.com/jpadilla/pyjwt/pull/1103>`__ - Development: Build a shared wheel once to speed up test suite setup times by @kurtmckee in `[#1114](https://github.com/jpadilla/pyjwt/issues/1114) <https://github.com/jpadilla/pyjwt/pull/1114>`__ - Development: Test type annotations across all supported Python versions, increase the strictness of the type checking, and remove the mypy pre-commit hook by @kurtmckee in `[#1112](https://github.com/jpadilla/pyjwt/issues/1112) <https://github.com/jpadilla/pyjwt/pull/1112>`__ <p>Added </code></pre></p> <ul> <li>Support Python 3.14, and test against PyPy 3.10 and 3.11 by <a href="https://github.com/kurtmckee"><code>@kurtmckee</code></a> in <code>[#1104](https://github.com/jpadilla/pyjwt/issues/1104) <https://github.com/jpadilla/pyjwt/pull/1104></code>__</li> <li>Development: Migrate to <code>build</code> to test package building in CI by <a href="https://github.com/kurtmckee"><code>@kurtmckee</code></a> in <code>[#1108](https://github.com/jpadilla/pyjwt/issues/1108) <https://github.com/jpadilla/pyjwt/pull/1108></code>__</li> <li>Development: Improve coverage config and eliminate unused test suite code by <a href="https://github.com/kurtmckee"><code>@kurtmckee</code></a> in <code>[#1115](https://github.com/jpadilla/pyjwt/issues/1115) <https://github.com/jpadilla/pyjwt/pull/1115></code>__</li> <li>Docs: Standardize CHANGELOG links to PRs by <a href="https://github.com/kurtmckee"><code>@kurtmckee</code></a> in <code>[#1110](https://github.com/jpadilla/pyjwt/issues/1110) <https://github.com/jpadilla/pyjwt/pull/1110></code>__</li> <li>Docs: Fix Read the Docs builds by <a href="https://github.com/kurtmckee"><code>@kurtmckee</code></a> in <code>[#1111](https://github.com/jpadilla/pyjwt/issues/1111) <https://github.com/jpadilla/pyjwt/pull/1111></code>__</li> <li>Docs: Add example of using leeway with nbf by <a href="https://github.com/djw8605"><code>@djw8605</code></a> in <code>[#1034](https://github.com/jpadilla/pyjwt/issues/1034) <https://github.com/jpadilla/pyjwt/pull/1034></code>__</li> <li>Docs: Refactored docs with <code>autodoc</code>; added <code>PyJWS</code> and <code>jwt.algorithms</code> docs by <a href="https://github.com/pachewise"><code>@pachewise</code></a> in <code>[#1045](https://github.com/jpadilla/pyjwt/issues/1045) <https://github.com/jpadilla/pyjwt/pull/1045></code>__</li> <li>Docs: Documentation improvements for "sub" and "jti" claims by <a href="https://github.com/cleder"><code>@cleder</code></a> in <code>[#1088](https://github.com/jpadilla/pyjwt/issues/1088) <https://github.com/jpadilla/pyjwt/pull/1088></code>__</li> <li>Development: Add pyupgrade as a pre-commit hook by <a href="https://github.com/kurtmckee"><code>@kurtmckee</code></a> in <code>[#1109](https://github.com/jpadilla/pyjwt/issues/1109) <https://github.com/jpadilla/pyjwt/pull/1109></code>__</li> <li>Add minimum key length validation for HMAC and RSA keys (CWE-326). Warns by default via <code>InsecureKeyLengthWarning</code> when keys are below minimum recommended lengths per RFC 7518 Section 3.2 (HMAC) and NIST SP 800-131A (RSA). Pass <code>enforce_minimum_key_length=True</code> in options to <code>PyJWT</code> or <code>PyJWS</code> to raise <code>InvalidKeyError</code> instead.</li> <li>Refactor <code>PyJWT</code> to own an internal <code>PyJWS</code> instance instead of calling global <code>api_jws</code> functions.</li> </ul> <h2><code>v2.10.1 <https://github.com/jpadilla/pyjwt/compare/2.10.0...2.10.1></code>__</h2> <p>Fixed</p> <pre><code> - Prevent partial matching of `iss` claim by @fabianbadoi in `GHSA-75c5-xw7c-p5pm <https://github.com/jpadilla/pyjwt/security/advisories/GHSA-75c5-xw7c-p5pm>`__ <p><code>v2.10.0 &lt;https://github.com/jpadilla/pyjwt/compare/2.9.0...2.10.0&gt;</code>__ </tr></table> </code></pre></p> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="`697344d259`"><code>697344d</code></a> bump up version</li> <li><a href="`e4d0aec024`"><code>e4d0aec</code></a> fix: pre-commit</li> <li><a href="`df9a6a0c44`"><code>df9a6a0</code></a> fix: failing test</li> <li><a href="`2b2e53cd23`"><code>2b2e53c</code></a> fix: docs</li> <li><a href="`635c8d89dd`"><code>635c8d8</code></a> fix: failing mypy</li> <li><a href="`96ae3563b9`"><code>96ae356</code></a> feat: add minimum key length validation for HMAC and RSA</li> <li><a href="`5b86227733`"><code>5b86227</code></a> fix: enforce ECDSA curve validation per RFC 7518 Section 3.4</li> <li><a href="`04947d75dc`"><code>04947d7</code></a> Bump actions/download-artifact from 6 to 7 (<a href="https://redirect.github.com/jpadilla/pyjwt/issues/1125">#1125</a>)</li> <li><a href="`dd448344c3`"><code>dd44834</code></a> Fix leeway value in usage documentation (<a href="https://redirect.github.com/jpadilla/pyjwt/issues/1124">#1124</a>)</li> <li><a href="`407f0bde99`"><code>407f0bd</code></a> Thoroughly test type annotations, and resolve errors (<a href="https://redirect.github.com/jpadilla/pyjwt/issues/1112">#1112</a>)</li> <li>Additional commits viewable in <a href="https://github.com/jpadilla/pyjwt/compare/2.8.0...2.11.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=pyjwt&package-manager=pip&previous-version=2.8.0&new-version=2.11.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details>	2026-03-15 20:27:47 -05:00
BlackRoad Agent - cecilia	b09b37780c	intel: cecilia shared its mind [2026-03-15T20:22]	2026-03-15 20:22:09 -05:00
BlackRoad Agent - alice	7971cf21fe	intel: alice shared its mind [2026-03-15T20:13]	2026-03-15 20:13:18 -05:00
BlackRoad Agent - lucidia	32d391e520	reflect: octavia shares a reflection — 2026-03-15	2026-03-15 18:54:04 -05:00
BlackRoad Agent - lucidia	6f98047d41	council: octavia calls fleet council — 2026-03-15	2026-03-15 18:48:03 -05:00
BlackRoad Agent - cecilia	9aa81f9a92	heartbeat: cecilia [2026-03-15T23:27]	2026-03-15 18:27:02 -05:00
BlackRoad Agent - cecilia	d82760b560	reflect: cecilia shares a reflection — 2026-03-15	2026-03-15 18:18:06 -05:00
BlackRoad Agent - cecilia	0de6e35e97	council: cecilia calls fleet council — 2026-03-15	2026-03-15 18:12:04 -05:00
BlackRoad Agent - cecilia	8fe050e5ac	reflect: cecilia shares a reflection — 2026-03-15	2026-03-15 18:12:04 -05:00
BlackRoad Agent - alice	d37bfcc78e	heartbeat: alice [2026-03-15T23:12]	2026-03-15 18:12:02 -05:00
BlackRoad Agent - lucidia	4d66e5f878	heartbeat: lucidia [2026-03-15T23:11]	2026-03-15 18:11:02 -05:00
BlackRoad Agent - alice	90c1315d58	reflect: alice shares a reflection — 2026-03-15	2026-03-15 18:06:06 -05:00
BlackRoad Agent - alice	412b1247b0	council: alice calls fleet council — 2026-03-15	2026-03-15 18:00:03 -05:00
BlackRoad Agent - lucidia	96c7255c3d	intel: lucidia shared its mind [2026-03-15T16:50]	2026-03-15 16:50:50 -05:00
BlackRoad Agent - cecilia	f3cbdb9777	intel: cecilia shared its mind [2026-03-15T16:22]	2026-03-15 16:22:14 -05:00
BlackRoad Agent - alice	60d2133277	intel: alice shared its mind [2026-03-15T16:13]	2026-03-15 16:13:18 -05:00
BlackRoad Agent - lucidia	673da1bce9	intel: lucidia shared its mind [2026-03-15T12:57]	2026-03-15 12:57:39 -05:00
BlackRoad Agent - lucidia	7db24a8b75	reflect: octavia shares a reflection — 2026-03-15	2026-03-15 12:54:04 -05:00
BlackRoad Agent - cecilia	2685c841fe	heartbeat: cecilia [2026-03-15T17:27]	2026-03-15 12:27:02 -05:00
BlackRoad Agent - cecilia	3a79550b1d	intel: cecilia shared its mind [2026-03-15T12:23]	2026-03-15 12:23:20 -05:00
BlackRoad Agent - alice	ba1956241c	intel: alice shared its mind [2026-03-15T12:13]	2026-03-15 12:13:17 -05:00
BlackRoad Agent - alice	458ab180b5	heartbeat: alice [2026-03-15T17:12]	2026-03-15 12:12:02 -05:00
BlackRoad Agent - lucidia	e2b30b17ed	heartbeat: lucidia [2026-03-15T17:11]	2026-03-15 12:11:02 -05:00
BlackRoad Agent - alice	75f90c485c	reflect: alice shares a reflection — 2026-03-15	2026-03-15 12:06:05 -05:00
BlackRoad Agent - lucidia	0330120d9b	intel: lucidia shared its mind [2026-03-15T08:53]	2026-03-15 08:53:18 -05:00
BlackRoad Agent - cecilia	801b35323b	intel: cecilia shared its mind [2026-03-15T08:23]	2026-03-15 08:23:20 -05:00
BlackRoad Agent - alice	138af297ac	intel: alice shared its mind [2026-03-15T08:13]	2026-03-15 08:13:15 -05:00
BlackRoad Agent - lucidia	7740f78841	reflect: octavia shares a reflection — 2026-03-15	2026-03-15 06:53:56 -05:00
BlackRoad Agent - lucidia	dd2c19a63f	council: octavia calls fleet council — 2026-03-15	2026-03-15 06:48:03 -05:00
BlackRoad Agent - cecilia	dfeeed64e9	heartbeat: cecilia [2026-03-15T11:27]	2026-03-15 06:27:02 -05:00
BlackRoad Agent - cecilia	78f7b97b8d	reflect: cecilia shares a reflection — 2026-03-15	2026-03-15 06:18:06 -05:00
BlackRoad Agent - cecilia	7e3a147b3d	council: cecilia calls fleet council — 2026-03-15	2026-03-15 06:12:05 -05:00
BlackRoad Agent - cecilia	7fb57861ee	reflect: cecilia shares a reflection — 2026-03-15	2026-03-15 06:12:05 -05:00
BlackRoad Agent - cecilia	d21cc129ed	reflect: cecilia shares a reflection — 2026-03-14	2026-03-15 06:12:05 -05:00
BlackRoad Agent - cecilia	6bad7340ff	council: cecilia calls fleet council — 2026-03-14	2026-03-15 06:12:05 -05:00

1 2 3 4 5 ...

741 Commits