Blazing fast GraphQL endpoints finder using subdomain enumeration, scripts analysis and bruteforce.

Escape

Last update: Dec 28, 2022

Related tags

GraphQL graphql security spider finder subdomain-scanner subdomain-enumeration

Overview

Graphinder

Graphinder is a tool that extracts all GraphQL endpoints from a given domain.

Run with docker

docker run -it -v $(pwd):/usr/bin/graphinder --rm escapetech/graphinder graphinder -d example.com

Usage

A Scan consistes of:

Running on a specific domain (-d, --domain) or a list of domains (-f, --input-file).
Searching all scripts loaded by the browser for graphql endpoint (-s, --script)
Brute forcing the directories of all discovered urls (-b, --bruteforce)

By default, bruteforce and script search are enabled.

graphinder -d example.com

graphinder -f domains.txt

Extra features

--no-bruteforce: Disable bruteforce
--no-script: Disable script search
-f --input-file <FILE_PATH>: Input domain names from file
-w --max-workers <int>: Maximum of concurrent workers on multiple domains.
-o --output-file <FILE_PATH>: Output the results to file
-v --verbose --no-verbose: Verbose mode
-r --reduce: The maximum number of subdomains to scan.

If you experience any issues, irregularities or networking bottlenecks, please reduce your number of workers, otherwise, better is your network, the more workers you can have.

Local installation

Clone the repository and run the installation script

git clone https://github.com/Escape-Technologies/graphinder.git
cd Graphinder
./install-dev.sh

Run this command to enter the virtual enviroment

poetry shell

Profit !

graphinder -d example.com

Contributing

Pull requests are welcome. For major changes, please open an issue first to discuss what you would like to change.

Please make sure to update tests as appropriate.

License

MIT

Comments

in graphinder, change to #!/usr/bin/env python3

After git clone https://github.com/Escape-Technologies/graphinder.git cd Graphinder ./install-dev.sh and poetry shell do nano /usr/local/bin/graphinder and change the 1st line to: #!/usr/bin/env python3
enhancement

opened by gprime31 15
chore(deps-dev): bump pytest-cov from 3.0.0 to 4.0.0
Bumps pytest-cov from 3.0.0 to 4.0.0.

Changelog

Sourced from pytest-cov's changelog.

4.0.0 (2022-09-28)

Note that this release drops support for multiprocessing.

--cov-fail-under no longer causes pytest --collect-only to fail Contributed by Zac Hatfield-Dodds in [#511](https://github.com/pytest-dev/pytest-cov/issues/511) <https://github.com/pytest-dev/pytest-cov/pull/511>_.

Dropped support for multiprocessing (mostly because issue 82408 <https://github.com/python/cpython/issues/82408>_). This feature was mostly working but very broken in certain scenarios and made the test suite very flaky and slow.

There is builtin multiprocessing support in coverage and you can migrate to that. All you need is this in your .coveragerc::

[run] concurrency = multiprocessing parallel = true sigterm = true

Fixed deprecation in setup.py by trying to import setuptools before distutils. Contributed by Ben Greiner in [#545](https://github.com/pytest-dev/pytest-cov/issues/545) <https://github.com/pytest-dev/pytest-cov/pull/545>_.

Removed undesirable new lines that were displayed while reporting was disabled. Contributed by Delgan in [#540](https://github.com/pytest-dev/pytest-cov/issues/540) <https://github.com/pytest-dev/pytest-cov/pull/540>_.

Documentation fixes. Contributed by Andre Brisco in [#543](https://github.com/pytest-dev/pytest-cov/issues/543) <https://github.com/pytest-dev/pytest-cov/pull/543>_ and Colin O'Dell in [#525](https://github.com/pytest-dev/pytest-cov/issues/525) <https://github.com/pytest-dev/pytest-cov/pull/525>_.

Added support for LCOV output format via --cov-report=lcov. Only works with coverage 6.3+. Contributed by Christian Fetzer in [#536](https://github.com/pytest-dev/pytest-cov/issues/536) <https://github.com/pytest-dev/pytest-cov/issues/536>_.

Modernized pytest hook implementation. Contributed by Bruno Oliveira in [#549](https://github.com/pytest-dev/pytest-cov/issues/549) <https://github.com/pytest-dev/pytest-cov/pull/549>_ and Ronny Pfannschmidt in [#550](https://github.com/pytest-dev/pytest-cov/issues/550) <https://github.com/pytest-dev/pytest-cov/pull/550>_.

Commits

28db055 Bump version: 3.0.0 → 4.0.0

57e9354 Really update the changelog.

56b810b Update chagelog.

f7fced5 Add support for LCOV output

1211d31 Fix flake8 error

b077753 Use modern approach to specify hook options

00713b3 removed incorrect docs on data_file.

b3dda36 Improve workflow with a collecting status check. (#548)

218419f Prevent undesirable new lines to be displayed when report is disabled

60b73ec migrate build command from distutils to setuptools

Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot will merge this PR once it's up-to-date and CI passes on it, as requested by @c3b5aw.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

dependencies python
opened by dependabot[bot] 5
chore(deps-dev): bump pytest-mock from 3.8.2 to 3.9.0
Bumps pytest-mock from 3.8.2 to 3.9.0.

Release notes

Sourced from pytest-mock's releases.

v3.9.0

Releases

3.9.0 (2022-09-28)

Expose NonCallableMagicMock via the mocker fixture (#318).

3.8.2 (2022-07-05)

Fixed AsyncMock support for Python 3.7+ in mocker.async_stub (#302).

3.8.1 (2022-06-24)

Fixed regression caused by an explicit mock dependency in the code (#298).

3.8.0 (2022-06-24)

Add MockerFixture.async_mock method. Thanks @PerchunPak for the PR (#296).

3.7.0 (2022-01-28)

Python 3.10 now officially supported.

Dropped support for Python 3.6.

3.6.1 (2021-05-06)

Fix mocker.resetall() when using mocker.spy() (#237). Thanks @blaxter for the report and @shadycuz for the PR.

3.6.0 (2021-04-24)

pytest-mock no longer supports Python 3.5.

Correct type annotations for mocker.patch.object to also include the string form. Thanks @plannigan for the PR (#235).

reset_all now supports return_value and side_effect keyword arguments. Thanks @alex-marty for the PR (#214).

3.5.1 (2021-01-10)

Use inspect.getattr_static instead of resorting to object.__getattribute__ magic. This should better comply with objects which implement a custom descriptor protocol. Thanks @yesthesoup for the PR (#224).

... (truncated)

Changelog

Sourced from pytest-mock's changelog.

3.9.0 (2022-09-28)

Expose NonCallableMagicMock via the mocker fixture ([#318](https://github.com/pytest-dev/pytest-mock/issues/318)_).

.. _#318: pytest-dev/pytest-mock#318

Commits

64a34f6 Update CHANGELOG for 3.9.0

4e31630 Add test for NonCallableMagicMock

247b9d4 Expose NonCallableMagicMock in MockerFixture

0fd7fea Update link to notes about usage as context manager (#313)

903b972 Merge pull request #311 from pytest-dev/pre-commit-ci-update-config

a5a33ac [pre-commit.ci] pre-commit autoupdate

d01b267 Merge pull request #309 from pytest-dev/pre-commit-ci-update-config

736f2ab [pre-commit.ci] pre-commit autoupdate

59b60cb Merge pull request #308 from juliangilbey/add-static-dir

305e082 Add docs/_static directory to allow sphinx-build to work without warnings

Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot will merge this PR once it's up-to-date and CI passes on it, as requested by @c3b5aw.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

dependencies python
opened by dependabot[bot] 5
remove duplicate license
The license file is included two times and one is at the wrong place.

If we take a look at the wheel dist, we can see there is LICENSE at the root and also graphinder-1.11.5.dist-info/LICENSE:

$ 7z l dist/graphinder-1.11.5-py3-none-any.whl | grep -i license 1980-01-01 00:00:00 ..... 1118 661 LICENSE 1980-01-01 00:00:00 ..... 1118 661 graphinder-1.11.5.dist-info/LICENSE

But this is an issue, because when you install it on your system, it deploys one of the license file on the root path of the python site package directory:

$ tar tvf graphinder-1.11.5-1-any.pkg.tar.zst | grep -i license -rw-r--r-- root/root 1118 2022-11-25 11:27 usr/lib/python3.10/site-packages/LICENSE -rw-r--r-- root/root 1118 2022-11-25 11:27 usr/lib/python3.10/site-packages/graphinder-1.11.5.dist-info/LICENSE

So by removing the LICENSE from include it will remove usr/lib/python3.10/site-packages/LICENSE but keep usr/lib/python3.10/site-packages/graphinder-1.11.5.dist-info/LICENSE.

Other packages like https://github.com/nikitastupin/clairvoyance/pull/55 have the same issue which conflicts and prevent installing new tools with the same issue.

error: failed to commit transaction (conflicting files) clairvoyance: /usr/lib/python3.10/site-packages/LICENSE exists in filesystem (owned by crackmapexec)
opened by noraj 4
chore(deps-dev): bump types-setuptools from 65.3.0 to 65.4.0.0
Bumps types-setuptools from 65.3.0 to 65.4.0.0.

Commits

See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot will merge this PR once it's up-to-date and CI passes on it, as requested by @c3b5aw.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

dependencies python
opened by dependabot[bot] 4
chore(deps-dev): bump pylint from 2.15.2 to 2.15.3
Bumps pylint from 2.15.2 to 2.15.3.

Commits

403dac6 Bump pylint to 2.15.3, update changelog

38e2784 Bump astroid to 2.12.10

f5e168e Fix undefined-loop-variable with NoReturn and Never (#7476)

fbc9e66 Accept a comma-separated list of messages IDs in --help-msg (#7490)

fe3436e False positive global-variable-not-assigned (#7479)

52cf631 [invalid-class-object] Fix crash when class is defined with a tuple

8e05ff6 Fix a crash in the modified-iterating-dict checker involving instance attri...

9b359ad Fix unhashable-member crash when lambda used as a dict key (#7454)

See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot will merge this PR once it's up-to-date and CI passes on it, as requested by @c3b5aw.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

dependencies python
opened by dependabot[bot] 4
chore(deps-dev): bump pylint from 2.15.3 to 2.15.4
Bumps pylint from 2.15.3 to 2.15.4.

Commits

20af036 Bump pylint to 2.15.4, update changelog

78f8423 [towncrier] Add whitespaces between fragment in towncrier (#7431)

49e15ab Disambiguate between str and enum member args to typing.Literal (#7414)

07f484f Upgrade astroid version following 2.12.11 release

fa63d9b [doc] Upgrade the contributors list and CONTRIBUTORS.txt

a258854 Raise syntax-error correctly on invalid encodings (#7553)

43ecd7d Fix handling of -- as separator between positional args and flags (#7551)

66ae21c Check py-version for async unnecessary-dunder-call (#7549)

983d5fc Fix crash in modified_iterating checker for set defined as a class attrib...

5c22a79 Prevent redefined-outer-name for if t.TYPE_CHECKING

Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot will merge this PR once it's up-to-date and CI passes on it, as requested by @c3b5aw.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

dependencies python
opened by dependabot[bot] 3
chore(deps-dev): bump poetryup from 0.12.0 to 0.12.3
Bumps poetryup from 0.12.0 to 0.12.3.

Release notes

Sourced from poetryup's releases.

v0.12.3

Changes

fix: poetry version type @MousaZeidBaker (#68)

v0.12.2

Changes

Refactor/poetry @MousaZeidBaker (#66)

v0.12.1

Changes

Update pyproject.py @eloymg (#65)

Commits

b7591d9 Merge pull request #68 from MousaZeidBaker/fix/poetry-version

36c521d fix: tests

b7d24c4 fix: tests

f7450b9 fix: poetry version type

1f94ff6 Merge pull request #66 from MousaZeidBaker/refactor/poetry

5c45b39 bump project version

0704887 fix: poetry class

8d726ee feat: update poetry version in pipeline

ef295cb refactor: poetry commands

fb95544 Merge pull request #65 from eloymg/master

Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot will merge this PR once it's up-to-date and CI passes on it, as requested by @c3b5aw.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

dependencies python
opened by dependabot[bot] 3
chore(deps-dev): bump types-requests from 2.28.11 to 2.28.11.2
Bumps types-requests from 2.28.11 to 2.28.11.2.

Commits

See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot will merge this PR once it's up-to-date and CI passes on it, as requested by @c3b5aw.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

dependencies python
opened by dependabot[bot] 3
chore(deps-dev): bump types-setuptools from 65.4.0.0 to 65.5.0.1
Bumps types-setuptools from 65.4.0.0 to 65.5.0.1.

Commits

See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot will merge this PR once it's up-to-date and CI passes on it, as requested by @c3b5aw.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

dependencies python
opened by dependabot[bot] 3
chore(deps-dev): bump autoflake from 1.5.3 to 1.6.0
Bumps autoflake from 1.5.3 to 1.6.0.

Commits

e336b39 Bump to 1.6.0

d389870 Add option to keep useless pass statements (#143)

b71e395 pre-commit autoupdate

4cb3439 pyproject: remove commented line

33a24ad github/workflows/upload-to-pypi: use build

9912a2e Migrate to pyproject.toml (#140)

a5213fb pre-commit: Fix typos using codespell (#141)

67ee42e Migrate to tomli

9fd81fb Add the black commit to git-blame-ignore-revs

1ec059a Run pre-commit to reformat code with black

Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot will merge this PR once it's up-to-date and CI passes on it, as requested by @c3b5aw.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

dependencies python
opened by dependabot[bot] 3
chore(deps-dev): bump pylint from 2.15.5 to 2.15.9
Bumps pylint from 2.15.5 to 2.15.9.

Commits

1ded4d0 Bump pylint to 2.15.9, update changelog (#7952)

785c629 [testutil] More information in output for functional test fail (#7948)

3c3ab98 [pypy3.8] Disable multiple-statements false positive on affected functional t...

dca3940 Fix inconsistent argument exit code when argparse exit with its own error cod...

494e514 Fix ModuleNotFoundError when using pylint_django (#7940) (#7941)

83668de fix: bump dill to >= 0.3.6, prevents tests hanging with python3.11 (#7918)

eadc308 [github actions] Fix enchant's install in the spelling job

391323e Avoid hanging forever after a parallel job was killed (#7834) (#7930)

4655b92 Prevent used-before-assignment in pattern matching with a guard (#7922) (#7...

1f84ed9 Bump pylint to 2.15.8, update changelog (#7899)

Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

dependencies python
opened by dependabot[bot] 1
chore(deps-dev): bump types-setuptools from 65.5.0.1 to 65.6.0.2
Bumps types-setuptools from 65.5.0.1 to 65.6.0.2.

Commits

See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

dependencies python
opened by dependabot[bot] 1
chore(deps-dev): bump autoflake from 1.7.6 to 2.0.0
Bumps autoflake from 1.7.6 to 2.0.0.

Commits

c056d7f Bump 2.0.0

aee7fb5 Upgrade minimum version of pyflakes

25aea05 pre-commit autoupdate

8198257 Bump 1.7.8

0152be5 Add upper limit to pyflake's version <3.0 (#186)

9a10a30 [pre-commit.ci] pre-commit autoupdate (#185)

011e7c3 [pre-commit.ci] pre-commit autoupdate (#183)

ef11067 github/worfklows/main: 3.11 should be available on macOS now

f423e64 Enable Python 3.11 in CI

6a89d1c [pre-commit.ci] pre-commit autoupdate (#181)

Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

dependencies python
opened by dependabot[bot] 0
chore(deps-dev): bump setuptools from 65.5.0 to 65.6.3
Bumps setuptools from 65.5.0 to 65.6.3.

Changelog

Sourced from setuptools's changelog.

v65.6.3

Misc ^^^^

#3709: Fix condition to patch distutils.dist.log to only apply when using distutils from the stdlib.

v65.6.2

No significant changes.

v65.6.1

Documentation changes ^^^^^^^^^^^^^^^^^^^^^

#3689: Documented that distutils.cfg might be ignored unless SETUPTOOLS_USE_DISTUTILS=stdlib.

Misc ^^^^

#3678: Improve clib builds reproducibility by sorting sources -- by :user:danigm

#3684: Improved exception/traceback when invalid entry-points are specified.

#3690: Fixed logging errors: 'underlying buffer has been detached' (issue #1631).

#3693: Merge pypa/distutils@3e9d47e with compatibility fix for distutils.log.Log.

#3695, #3697, #3698, #3699: Changed minor text details (spelling, spaces ...)

#3696: Removed unnecessary coding: utf-8 annotations

#3704: Fixed temporary build directories interference with auto-discovery.

v65.6.0

Changes ^^^^^^^

#3674: Sync with pypa/distutils@e0787fa, including pypa/distutils#183 updating distutils to use the Python logging framework.

v65.5.1

Misc

... (truncated)

Commits

6f7dd7c Bump version: 65.6.2 → 65.6.3

0f513c1 Merge pull request #3709 from abravalheri/issue-3707

a4db65f Remove wrong comment

5801753 Add news fragment

4c267c7 Replace condition to patch distutils.dist.log

7049c73 Add simple regression test for logging patches

e515641 Bump version: 65.6.1 → 65.6.2

bd60014 Minor adjustments in changelog

00f59ef Bump version: 65.6.0 → 65.6.1

b0f42b9 Adequate news fragment file names

Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

dependencies python
opened by dependabot[bot] 0
chore(deps-dev): bump pytest-rerunfailures from 10.2 to 10.3
Bumps pytest-rerunfailures from 10.2 to 10.3.

Changelog

Sourced from pytest-rerunfailures's changelog.

10.3 (unreleased)

Bug fixes +++++++++

Fix crash when pytest-xdist is installed but disabled. (Thanks to @mgorny <https://github.com/mgorny>_ for the PR.)

Fix crash when xfail(strict=True) mark is used with --rerun-only flag.

Features ++++++++

Added option --rerun-except to rerun failed tests those are other than the mentioned Error.

Commits

88496e9 Preparing release 10.3

e80c12e replace pkg_resources with package+importlib.metadata

2731a87 [pre-commit.ci] pre-commit autoupdate

43538dd [pre-commit.ci] pre-commit autoupdate

2b862b3 Fix crash with strict xfail and --only-rerun flag

121ce30 [pre-commit.ci] pre-commit autoupdate

fc6c352 [pre-commit.ci] pre-commit autoupdate

e558b1b [pre-commit.ci] pre-commit autoupdate

719b78f [pre-commit.ci] auto fixes from pre-commit.com hooks

bd040fc [pre-commit.ci] pre-commit autoupdate

Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

dependencies python
opened by dependabot[bot] 0