Sourced from macaddress's releases.

v0.2.9

• Fixes an arbitrary command execution vulnerability (https://github-redirect.dependabot.com/scravy/node-macaddress/pull/16/files)
• Adds support for freebsd
• Fixes a few typos

• 3379146 Added note about vulnerability
• 4d311a5 Set version 0.2.9
• b83e3f8 Merge pull request #11 from TheBeastOfCaerbannog/master
• 68ecfae Added explicit LICENSE file recognizable by github
• e3e76d5 Support for freebsd as per pull #16
• 6ab7a11 Merge pull request #13 from roebuk/master
• 4d10ca6 Merge pull request #17 from dekoding/patch-1
• 358fd59 Merge pull request #20 from flypapertech/fixCommandInjection
• 214ad00 Run travis against osx and linux, travis doesn't do windows
• 7b0a488 Fix for Node 0.8 thru 0.10
• Additional commits viewable in compare view

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot ignore this [patch|minor|major] version will close this PR and stop Dependabot creating any more for this minor/major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
• @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
• @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
• @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
• @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

Sourced from sqlalchemy's releases.

1.4.46

Released: January 3, 2023

general

• [general] [change] A new deprecation "uber warning" is now emitted at runtime the first time any SQLAlchemy 2.0 deprecation warning would normally be emitted, but the SQLALCHEMY_WARN_20 environment variable is not set. The warning emits only once at most, before setting a boolean to prevent it from emitting a second time.

  This deprecation warning intends to notify users who may not have set an appropriate constraint in their requirements files to block against a surprise SQLAlchemy 2.0 upgrade and also alert that the SQLAlchemy 2.0 upgrade process is available, as the first full 2.0 release is expected very soon. The deprecation warning can be silenced by setting the environment variable SQLALCHEMY_SILENCE_UBER_WARNING to "1".

  References: #8983

• [general] [bug] Fixed regression where the base compat module was calling upon platform.architecture() in order to detect some system properties, which results in an over-broad system call against the system-level file call that is unavailable under some circumstances, including within some secure environment configurations.

  References: #8995

orm

• [orm] [bug] Fixed issue in the internal SQL traversal for DML statements like _dml.Update and _dml.Delete which would cause among other potential issues, a specific issue using lambda statements with the ORM update/delete feature.

  References: #9033

engine

• [engine] [bug] Fixed a long-standing race condition in the connection pool which could occur under eventlet/gevent monkeypatching schemes in conjunction with the use of eventlet/gevent Timeout conditions, where a connection pool checkout that's interrupted due to the timeout would fail to clean up the failed state, causing the underlying connection record and sometimes the database connection itself to "leak", leaving the pool in an invalid state with unreachable entries. This issue was first identified and fixed in

... (truncated)

• See full diff in compare view

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Sourced from graphene's releases.

v3.2.1

What's Changed

Non-required InputFields and Arguments can now be marked as deprecated by passing the deprecation_reason keyword argument to the constructor.

• Complete deprecated fields and arguments support by @​vhutov in graphql-python/graphene#1472

New Contributors

• @​vhutov made their first contribution in graphql-python/graphene#1472

Full Changelog: https://github.com/graphql-python/graphene/compare/v3.2.0...v3.2.1

v3.2.0

What's Changed

Support for custom global IDs in relay.Node

The global ID type of a Node can now be customized:

class CustomNode(Node):
    class Meta:
        global_id_type = CustomGlobalIDType
class User(ObjectType):
class Meta:
interfaces = [CustomNode]
name = String()
@classmethod
def get_node(cls, _type, _id):
return self.users[_id]

Available Types

Currently, the following types are available:

• DefaultGlobalIDType: Default global ID type: base64 encoded version of ": ". (Previously the only option) Scalar: ID
• SimpleGlobalIDType : Simple global ID type: simply the id of the object. Scalar: ID
• UUIDGlobalIDType : UUID global ID type. Scalar: UUID

Customization

To create a custom global type, BaseGlobalIDType must be extended:

class CustomGlobalIDType(BaseGlobalIDType):
graphene_type = CustomScalar
@classmethod

</tr></table>

... (truncated)

• 340d5ed release: 3.2.1
• 19ea63b fix: Input fields and Arguments can now be deprecated (#1472)
• d5dadb7 release: 3.2.0
• 8596349 release: 3.1.2
• a141e84 Do not interpret Enum members called 'description' as description properties ...
• f09b2e5 housekeeping: pin ubuntu to 20.04 for python 3.6
• 7f6fa16 feat_ (#1476)
• 0b1bfbf chore: Make Graphene enums iterable like Python enums (#1473)
• f891a36 docs: Disambiguate argument name in quickstart docs (#1474)
• a2b63d8 fix: MyPy findings due to a mypy version upgrade were corrected (#1477)
• Additional commits viewable in compare view

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Sourced from pytest-asyncio's releases.

pytest-asyncio 0.20.3

---

title: 'pytest-asyncio'

pytest-asyncio is a pytest plugin. It facilitates testing of code that uses the asyncio library.

Specifically, pytest-asyncio provides support for coroutines as test functions. This allows users to await code inside their tests. For example, the following code is executed as a test item by pytest:

@pytest.mark.asyncio
async def test_some_asyncio_code():
    res = await library.do_something()
    assert b"expected result" == res

Note that test classes subclassing the standard unittest library are not supported. Users are advised to use unittest.IsolatedAsyncioTestCase or an async framework such as asynctest.

pytest-asyncio is available under the Apache License 2.0.

Installation

To install pytest-asyncio, simply:

$ pip install pytest-asyncio

... (truncated)

Sourced from pytest-asyncio's changelog.

0.20.3 (22-12-08)

• Prevent DeprecationWarning to bubble up on CPython 3.10.9 and 3.11.1. [#460](https://github.com/pytest-dev/pytest-asyncio/issues/460) <https://github.com/pytest-dev/pytest-asyncio/issues/460>_

• 007e8ec [fix] Prevent DeprecationWarning about existing event loops to bubble up into...
• 44ca3da Build(deps): Bump zipp from 3.10.0 to 3.11.0 in /dependencies/default (#455)
• c3c601c Build(deps): Bump pypa/gh-action-pypi-publish from 1.5.1 to 1.5.2 (#456)
• a962e2b Build(deps): Bump importlib-metadata in /dependencies/default (#454)
• 56a393a Simplify README, move most content to a separate user documentation. (#448)
• 3c78732 Build(deps): Bump hypothesis in /dependencies/default (#453)
• d6a9a72 Build(deps): Bump exceptiongroup in /dependencies/default (#451)
• 42da7a0 Build(deps): Bump hypothesis in /dependencies/default (#450)
• 0b281b1 Build(deps): Bump mypy from 0.990 to 0.991 in /dependencies/default (#446)
• d39589c Update pre-commit hooks (#449)
• See full diff in compare view

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Sourced from pytest-asyncio's releases.

pytest-asyncio 0.20.3

---

title: 'pytest-asyncio'

pytest-asyncio is a pytest plugin. It facilitates testing of code that uses the asyncio library.

Specifically, pytest-asyncio provides support for coroutines as test functions. This allows users to await code inside their tests. For example, the following code is executed as a test item by pytest:

@pytest.mark.asyncio
async def test_some_asyncio_code():
    res = await library.do_something()
    assert b"expected result" == res

Note that test classes subclassing the standard unittest library are not supported. Users are advised to use unittest.IsolatedAsyncioTestCase or an async framework such as asynctest.

pytest-asyncio is available under the Apache License 2.0.

Installation

To install pytest-asyncio, simply:

$ pip install pytest-asyncio

... (truncated)

Sourced from pytest-asyncio's changelog.

0.20.3 (22-12-08)

• Prevent DeprecationWarning to bubble up on CPython 3.10.9 and 3.11.1. [#460](https://github.com/pytest-dev/pytest-asyncio/issues/460) <https://github.com/pytest-dev/pytest-asyncio/issues/460>_

• 007e8ec [fix] Prevent DeprecationWarning about existing event loops to bubble up into...
• 44ca3da Build(deps): Bump zipp from 3.10.0 to 3.11.0 in /dependencies/default (#455)
• c3c601c Build(deps): Bump pypa/gh-action-pypi-publish from 1.5.1 to 1.5.2 (#456)
• a962e2b Build(deps): Bump importlib-metadata in /dependencies/default (#454)
• 56a393a Simplify README, move most content to a separate user documentation. (#448)
• 3c78732 Build(deps): Bump hypothesis in /dependencies/default (#453)
• d6a9a72 Build(deps): Bump exceptiongroup in /dependencies/default (#451)
• 42da7a0 Build(deps): Bump hypothesis in /dependencies/default (#450)
• 0b281b1 Build(deps): Bump mypy from 0.990 to 0.991 in /dependencies/default (#446)
• d39589c Update pre-commit hooks (#449)
• See full diff in compare view

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Sourced from graphql-core's releases.

v3.2.3

Patch-release GraphQL-core v3.2.3, based on GraphQL.js v16.6.0.

This patch-releases includes only one change in GraphQL.js v16.6.0:

• The parser now allows to limit the number of tokens

Thanks to all who are sponsoring me (@​Cito) for maintaining this project.

v3.2.2

Patch-release GraphQL-core v3.2.2, based on GraphQL.js v16.4.0.

This patch-releases includes the changes in GraphQL.js v16.4.0, and the following fixes:

• Require typing extensions when needed
• Recommend using poetry instead of pipenv in the docs (#161)
• Cast error message to string to handle proxy objects (#175)
• Remove newline in description (#180)

Thanks to @​chenrui333, @​conao3, @​jkimbo, @​singingwolfboy for contributing and to all who are sponsoring me (@​Cito) for maintaining this project.

v3.2.1

Patch-release GraphQL-core v3.2.1, based on GraphQL.js v16.3.0.

This patch-releases includes the changes in GraphQL.js v16.3.0, and the following fix:

• Serialize with maximum precision when converting float to FloatValue (#164)

Thanks to @​bennyweise for contributing and all who are sponsoring me (@​Cito) for maintaining this project.

v3.2.0

Final release of GraphQL-core v3.2.0, based on GraphQL.js v16.2.0.

See v3.2.0rc1, v3.2.0rc2, v3.2.0rc3, v3.2.0rc4, v3.2.0rc5 and the changelog of GraphQL.js for a complete list of changes.

Thanks to all who contributed and are sponsoring me (@​Cito) for maintaining this project.

v3.2.0rc5

Pre-release GraphQL-core v3.2.0rc5, based on GraphQL.js v16.1.0.

In addition to porting the recent changes in GraphQL.js, this pre-release also contains the following improvements:

• Add flag for using enum names or members as values (#73)
• Add typed dicts for to_kwargs results (#99)
• Add ast_to_dict utility function (#136)
• Make print_block_string work with string proxy objects (#153)
• Prevent infinite loop in OverlappingFieldsCanBeMergedRule (fetched ahead)

Please test this pre-release and report any issues, the final release is imminent.

... (truncated)

• See full diff in compare view

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)