Securetar - A streaming wrapper around python tarfile and allow secure handling files and support encryption

Pascal Vizeli

Last update: Dec 9, 2022

Related tags

Deep Learning securetar

Overview

Secure Tar

Secure Tarfile library

It's a streaming wrapper around python tarfile and allow secure handling files and support encryption.

with SecureTarFile("test.tar", "w") as tar_file:
        atomic_contents_add(
            tar_file,
            temp_orig,
            excludes=[],
            arcname=".",
        )

with SecureTarFile("test.tar", "w", b"AES128_KEY_SIZE") as tar_file:
        atomic_contents_add(
            tar_file,
            temp_orig,
            excludes=[],
            arcname=".",
        )

Comments

Bump black from 22.3.0 to 22.10.0
Bumps black from 22.3.0 to 22.10.0.

Release notes

Sourced from black's releases.

22.10.0

Highlights

Runtime support for Python 3.6 has been removed. Formatting 3.6 code will still be supported until further notice.

Stable style

Fix a crash when # fmt: on is used on a different block level than # fmt: off (#3281)

Preview style

Fix a crash when formatting some dicts with parenthesis-wrapped long string keys (#3262)

Configuration

.ipynb_checkpoints directories are now excluded by default (#3293)

Add --skip-source-first-line / -x option to ignore the first line of source code while formatting (#3299)

Packaging

Executables made with PyInstaller will no longer crash when formatting several files at once on macOS. Native x86-64 executables for macOS are available once again. (#3275)

Hatchling is now used as the build backend. This will not have any effect for users who install Black with its wheels from PyPI. (#3233)

Faster compiled wheels are now available for CPython 3.11 (#3276)

Blackd

Windows style (CRLF) newlines will be preserved (#3257).

Integrations

Vim plugin: add flag (g:black_preview) to enable/disable the preview style (#3246)

Update GitHub Action to support formatting of Jupyter Notebook files via a jupyter option (#3282)

Update GitHub Action to support use of version specifiers (e.g. <23) for Black version (#3265)

22.8.0

Highlights

Python 3.11 is now supported, except for blackd as aiohttp does not support 3.11 as of publishing (#3234)

This is the last release that supports running Black on Python 3.6 (formatting 3.6 code will continue to be supported until further notice)

Reword the stability policy to say that we may, in rare cases, make changes that affect code that was not previously formatted by Black (#3155)

... (truncated)

Changelog

Sourced from black's changelog.

22.10.0

Highlights

Runtime support for Python 3.6 has been removed. Formatting 3.6 code will still be supported until further notice.

Stable style

Fix a crash when # fmt: on is used on a different block level than # fmt: off (#3281)

Preview style

Fix a crash when formatting some dicts with parenthesis-wrapped long string keys (#3262)

Configuration

.ipynb_checkpoints directories are now excluded by default (#3293)

Add --skip-source-first-line / -x option to ignore the first line of source code while formatting (#3299)

Packaging

Executables made with PyInstaller will no longer crash when formatting several files at once on macOS. Native x86-64 executables for macOS are available once again. (#3275)

Hatchling is now used as the build backend. This will not have any effect for users who install Black with its wheels from PyPI. (#3233)

Faster compiled wheels are now available for CPython 3.11 (#3276)

Blackd

Windows style (CRLF) newlines will be preserved (#3257).

Integrations

Vim plugin: add flag (g:black_preview) to enable/disable the preview style (#3246)

Update GitHub Action to support formatting of Jupyter Notebook files via a jupyter option (#3282)

Update GitHub Action to support use of version specifiers (e.g. <23) for Black version (#3265)

22.8.0

Highlights

Python 3.11 is now supported, except for blackd as aiohttp does not support 3.11 as of publishing (#3234)

... (truncated)

Commits

27d2014 Prepare release 22.10.0 (#3311)

4da0851 Add option to skip the first line of source code (#3299)

0359b85 Preserve crlf line endings in blackd (#3257)

27d7ea4 Bump docutils from 0.18.1 to 0.19 in /docs (#3161)

1a20c4d Bump sphinx from 5.2.1 to 5.2.3 in /docs (#3305)

980997f Bump furo from 2022.9.15 to 2022.9.29 in /docs (#3304)

b1077aa Bump myst-parser from 0.18.0 to 0.18.1 in /docs (#3303)

956bf39 Add .ipynb_checkpoints to DEFAULT_EXCLUDES (#3293)

141291a Enable build isolation under CIWB (#3297)

ddb9924 Bump pypa/cibuildwheel from 2.10.0 to 2.10.2 (#3290)

Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

dependencies
opened by dependabot[bot] 1
Bump pytest from 7.1.0 to 7.1.3
Bumps pytest from 7.1.0 to 7.1.3.

Release notes

Sourced from pytest's releases.

7.1.3

pytest 7.1.3 (2022-08-31)

Bug Fixes

#10060: When running with --pdb, TestCase.tearDown is no longer called for tests when the class has been skipped via unittest.skip or pytest.mark.skip.

#10190: Invalid XML characters in setup or teardown error messages are now properly escaped for JUnit XML reports.

#10230: Ignore .py files created by pyproject.toml-based editable builds introduced in pip 21.3.

#3396: Doctests now respect the --import-mode flag.

#9514: Type-annotate FixtureRequest.param as Any as a stop gap measure until 8073{.interpreted-text role="issue"} is fixed.

#9791: Fixed a path handling code in rewrite.py that seems to work fine, but was incorrect and fails in some systems.

#9917: Fixed string representation for pytest.approx{.interpreted-text role="func"} when used to compare tuples.

Improved Documentation

#9937: Explicit note that tmpdir{.interpreted-text role="fixture"} fixture is discouraged in favour of tmp_path{.interpreted-text role="fixture"}.

Trivial/Internal Changes

#10114: Replace atomicwrites dependency on windows with [os.replace]{.title-ref}.

7.1.2

pytest 7.1.2 (2022-04-23)

Bug Fixes

#9726: An unnecessary numpy import inside pytest.approx{.interpreted-text role="func"} was removed.

#9820: Fix comparison of dataclasses with InitVar.

#9869: Increase stacklevel for the NODE_CTOR_FSPATH_ARG deprecation to point to the user's code, not pytest.

#9871: Fix a bizarre (and fortunately rare) bug where the [temp_path]{.title-ref} fixture could raise an internal error while attempting to get the current user's username.

7.1.1

pytest 7.1.1 (2022-03-17)

Bug Fixes

#9767: Fixed a regression in pytest 7.1.0 where some conftest.py files outside of the source tree (e.g. in the [site-packages]{.title-ref} directory) were not picked up.

Commits

4645bcd Remove incorrect output in how-to/fixtures.rst

fadfb4f Prepare release version 7.1.3

ab96ea8 Merge pull request #10258 from pytest-dev/backport-10252-to-7.1.x

fc0e024 [7.1.x] Fix regendoc

8f5088f Merge pull request #10249 from pytest-dev/backport-10231-to-7.1.x

aae93d6 Ignore type-errors related to attr.asdict

71b79fc [7.1.x] Ignore editable installation modules

89f7518 Merge pull request #10222 from pytest-dev/backport-10171-to-7.1.x

88fc45b [7.1.x] Update fixtures.rst w/ finalizer order

d0b53d6 Merge pull request #10221 from pytest-dev/backport-10217-to-7.1.x

Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

dependencies
opened by dependabot[bot] 1
Bump black from 22.3.0 to 22.8.0
Bumps black from 22.3.0 to 22.8.0.

Release notes

Sourced from black's releases.

22.8.0

Highlights

Python 3.11 is now supported, except for blackd as aiohttp does not support 3.11 as of publishing (#3234)

This is the last release that supports running Black on Python 3.6 (formatting 3.6 code will continue to be supported until further notice)

Reword the stability policy to say that we may, in rare cases, make changes that affect code that was not previously formatted by Black (#3155)

Stable style

Fix an infinite loop when using # fmt: on/off in the middle of an expression or code block (#3158)

Fix incorrect handling of # fmt: skip on colon (:) lines (#3148)

Comments are no longer deleted when a line had spaces removed around power operators (#2874)

Preview style

Single-character closing docstring quotes are no longer moved to their own line as this is invalid. This was a bug introduced in version 22.6.0. (#3166)

--skip-string-normalization / -S now prevents docstring prefixes from being normalized as expected (#3168)

When using --skip-magic-trailing-comma or -C, trailing commas are stripped from subscript expressions with more than 1 element (#3209)

Implicitly concatenated strings inside a list, set, or tuple are now wrapped inside parentheses (#3162)

Fix a string merging/split issue when a comment is present in the middle of implicitly concatenated strings on its own line (#3227)

Blackd

blackd now supports enabling the preview style via the X-Preview header (#3217)

Configuration

Black now uses the presence of debug f-strings to detect target version (#3215)

Fix misdetection of project root and verbose logging of sources in cases involving --stdin-filename (#3216)

Immediate .gitignore files in source directories given on the command line are now also respected, previously only .gitignore files in the project root and automatically discovered directories were respected (#3237)

Documentation

Recommend using BlackConnect in IntelliJ IDEs (#3150)

Integrations

Vim plugin: prefix messages with Black: so it's clear they come from Black (#3194)

Docker: changed to a /opt/venv installation + added to PATH to be available to non-root users (#3202)

Output

Change from deprecated asyncio.get_event_loop() to create our event loop which removes DeprecationWarning (#3164)

Remove logging from internal blib2to3 library since it regularly emits error logs about failed caching that can and should be ignored (#3193)

Parser

Type comments are now included in the AST equivalence check consistently so accidental deletion raises an error. Though type comments can't be tracked when running on PyPy 3.7 due to standard library limitations. (#2874)

Performance

... (truncated)

Changelog

Sourced from black's changelog.

22.8.0

Highlights

Python 3.11 is now supported, except for blackd as aiohttp does not support 3.11 as of publishing (#3234)

This is the last release that supports running Black on Python 3.6 (formatting 3.6 code will continue to be supported until further notice)

Reword the stability policy to say that we may, in rare cases, make changes that affect code that was not previously formatted by Black (#3155)

Stable style

Fix an infinite loop when using # fmt: on/off in the middle of an expression or code block (#3158)

Fix incorrect handling of # fmt: skip on colon (:) lines (#3148)

Comments are no longer deleted when a line had spaces removed around power operators (#2874)

Preview style

Single-character closing docstring quotes are no longer moved to their own line as this is invalid. This was a bug introduced in version 22.6.0. (#3166)

--skip-string-normalization / -S now prevents docstring prefixes from being normalized as expected (#3168)

When using --skip-magic-trailing-comma or -C, trailing commas are stripped from subscript expressions with more than 1 element (#3209)

Implicitly concatenated strings inside a list, set, or tuple are now wrapped inside parentheses (#3162)

Fix a string merging/split issue when a comment is present in the middle of implicitly concatenated strings on its own line (#3227)

Blackd

blackd now supports enabling the preview style via the X-Preview header (#3217)

Configuration

Black now uses the presence of debug f-strings to detect target version (#3215)

Fix misdetection of project root and verbose logging of sources in cases involving --stdin-filename (#3216)

Immediate .gitignore files in source directories given on the command line are now also respected, previously only .gitignore files in the project root and automatically discovered directories were respected (#3237)

Documentation

Recommend using BlackConnect in IntelliJ IDEs (#3150)

Integrations

... (truncated)

Commits

2018e66 Prepare docs for release 22.8.0 (#3248)

0019261 Update stable branch after publishing to PyPI (#3223)

7757078 Improve & update release process to reflect recent changes (#3242)

767604e Use .gitignore files in the initial source directories (#3237)

2c90480 Use strict mypy checking (#3222)

ba618a3 Add parens around implicit string concatenations where it increases readabili...

c0cc19b Delay worker count determination

afed2c0 Load .gitignore and exclude regex at time of use

e269f44 Lazily import parallelized format modules

c47b91f Fix misdetection of project root with --stdin-filename (#3216)

Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

dependencies
opened by dependabot[bot] 1
Bump flake8 from 4.0.1 to 5.0.4
Bumps flake8 from 4.0.1 to 5.0.4.

Commits

6027577 Release 5.0.4

213e006 Merge pull request #1653 from asottile/lower-bound-importlib-metadata

e94ee2b require sufficiently new importlib-metadata

318a86a Merge pull request #1646 from televi/main

7b8b374 Clarify entry point naming

7160561 Merge pull request #1649 from PyCQA/pre-commit-ci-update-config

84d56a8 [pre-commit.ci] pre-commit autoupdate

ff6569b Release 5.0.3

e76b59a Merge pull request #1648 from PyCQA/invalid-syntax-partial-parse

25e8ff1 ignore config files that partially parse as flake8 configs

Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

dependencies
opened by dependabot[bot] 1
Bump flake8 from 4.0.1 to 5.0.3
Bumps flake8 from 4.0.1 to 5.0.3.

Commits

ff6569b Release 5.0.3

e76b59a Merge pull request #1648 from PyCQA/invalid-syntax-partial-parse

25e8ff1 ignore config files that partially parse as flake8 configs

70c0b3d Release 5.0.2

5e69ba9 Merge pull request #1642 from PyCQA/no-home

8b51ee4 skip skipping home if home does not exist

446b18d Merge pull request #1641 from PyCQA/entry-points-not-pickleable

b70d7a2 work around un-pickleabiliy of EntryPoint in 3.8.0

91a7fa9 fix order of release notes

405cfe0 Release 5.0.1

Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

dependencies
opened by dependabot[bot] 1
Bump flake8 from 4.0.1 to 5.0.2
Bumps flake8 from 4.0.1 to 5.0.2.

Commits

70c0b3d Release 5.0.2

5e69ba9 Merge pull request #1642 from PyCQA/no-home

8b51ee4 skip skipping home if home does not exist

446b18d Merge pull request #1641 from PyCQA/entry-points-not-pickleable

b70d7a2 work around un-pickleabiliy of EntryPoint in 3.8.0

91a7fa9 fix order of release notes

405cfe0 Release 5.0.1

d20bb97 Merge pull request #1631 from PyCQA/dupe-sys-path

fce93b9 prevent duplicate plugin discovery on misconfigured pythons

3f4872a Merge pull request #1628 from mxr/patch-1

Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

dependencies
opened by dependabot[bot] 1
Bump black from 22.3.0 to 22.6.0
Bumps black from 22.3.0 to 22.6.0.

Release notes

Sourced from black's releases.

22.6.0

Style

Fix unstable formatting involving #fmt: skip and # fmt:skip comments (notice the lack of spaces) (#2970)

Preview style

Docstring quotes are no longer moved if it would violate the line length limit (#3044)

Parentheses around return annotations are now managed (#2990)

Remove unnecessary parentheses around awaited objects (#2991)

Remove unnecessary parentheses in with statements (#2926)

Remove trailing newlines after code block open (#3035)

Integrations

Add scripts/migrate-black.py script to ease introduction of Black to a Git project (#3038)

Output

Output Python version and implementation as part of --version flag (#2997)

Packaging

Use tomli instead of tomllib on Python 3.11 builds where tomllib is not available (#2987)

Parser

PEP 654 syntax (for example, except *ExceptionGroup:) is now supported (#3016)

PEP 646 syntax (for example, Array[Batch, *Shape] or def fn(*args: *T) -> None) is now supported (#3071)

Vim Plugin

Fix strtobool function. It didn't parse true/on/false/off. (#3025)

Full Changelog: https://github.com/psf/black/compare/22.3.0...22.6.0

Thank you!

@jpy-git for improving our parentheses formatting significantly

@siuryan for fixing a fmt: skip bug, making it a little less annoying to use :)

@isidentical for implementing support for PEP 654 and 646 syntax

@defntvdm for fixing our vim plugin, especially as we (the maintainers) don't really know vim script sadly

@idorrington92 for fixing the docstring bug where Black would move the closing quotes causing it to violate the line length limit (whoops!)

@hbrunn for contributing the migrate-black script

@saroad2 for improving newline handling after code blocks and test infrastructure improvements

... and everyone else who contributed documentation, tests, or other improvements to the Black project!

... (truncated)

Changelog

Sourced from black's changelog.

22.6.0

Style

Fix unstable formatting involving #fmt: skip and # fmt:skip comments (notice the lack of spaces) (#2970)

Preview style

Docstring quotes are no longer moved if it would violate the line length limit (#3044)

Parentheses around return annotations are now managed (#2990)

Remove unnecessary parentheses around awaited objects (#2991)

Remove unnecessary parentheses in with statements (#2926)

Remove trailing newlines after code block open (#3035)

Integrations

Add scripts/migrate-black.py script to ease introduction of Black to a Git project (#3038)

Output

Output Python version and implementation as part of --version flag (#2997)

Packaging

Use tomli instead of tomllib on Python 3.11 builds where tomllib is not available (#2987)

Parser

PEP 654 syntax (for example, except *ExceptionGroup:) is now supported (#3016)

PEP 646 syntax (for example, Array[Batch, *Shape] or def fn(*args: *T) -> None) is now supported (#3071)

Vim Plugin

Fix strtobool function. It didn't parse true/on/false/off. (#3025)

Commits

f6c139c Prepare docs for release 22.6.0 (#3139)

eb5d175 Update preview style docs to include recent changes (#3136)

d848209 Bump furo from 2022.6.4.1 to 2022.6.21 in /docs (#3138)

fa6caa6 Only call get_future_imports when needed (#3135)

6463fb8 Bump sphinx from 5.0.1 to 5.0.2 in /docs (#3128)

e3c9b04 Replace link to Requests documentation (#3125)

6c1bd08 Test run black on self (#3114)

799adb5 Bump actions/setup-python from 3 to 4 (#3121)

162ecd1 Use is_number_token instead of assertion (#3069)

8c8675c Update documentation dependencies (#3118)

Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

dependencies
opened by dependabot[bot] 1
Bump pytest from 7.1.0 to 7.1.2
Bumps pytest from 7.1.0 to 7.1.2.

Release notes

Sourced from pytest's releases.

7.1.2

pytest 7.1.2 (2022-04-23)

Bug Fixes

#9726: An unnecessary numpy import inside pytest.approx{.interpreted-text role="func"} was removed.

#9820: Fix comparison of dataclasses with InitVar.

#9869: Increase stacklevel for the NODE_CTOR_FSPATH_ARG deprecation to point to the user's code, not pytest.

#9871: Fix a bizarre (and fortunately rare) bug where the [temp_path]{.title-ref} fixture could raise an internal error while attempting to get the current user's username.

7.1.1

pytest 7.1.1 (2022-03-17)

Bug Fixes

#9767: Fixed a regression in pytest 7.1.0 where some conftest.py files outside of the source tree (e.g. in the [site-packages]{.title-ref} directory) were not picked up.

Commits

2f2f1a6 Prepare release version 7.1.2

5c04f3a [7.1.x] Fix wrong log_file docs (#9879)

078733c Merge pull request #9872 from pytest-dev/backport-9871-to-7.1.x

3a7ead6 [7.1.x] fix: move 'import getpass' statement to try-clause

6d75333 [7.1.x] Increase stacklevel to point at user's code (#9870)

ddbb998 [7.1.x] Increase stacklevel to point at user's code

0ec5886 Merge pull request #9855 from pytest-dev/backport-9854-to-7.1.x

f2469fc [7.1.x] Docs: link to easy issues in contributing guide

94ec0f8 Merge pull request #9846 from pytest-dev/backport-9842-to-7.1.x

5ef96fd [7.1.x] fix comparison of dataclasses with InitVar

Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

dependencies
opened by dependabot[bot] 1
Bump pytest from 7.1.0 to 7.1.1
Bumps pytest from 7.1.0 to 7.1.1.

Release notes

Sourced from pytest's releases.

7.1.1

pytest 7.1.1 (2022-03-17)

Bug Fixes

#9767: Fixed a regression in pytest 7.1.0 where some conftest.py files outside of the source tree (e.g. in the [site-packages]{.title-ref} directory) were not picked up.

Commits

0ffe9e0 Prepare release version 7.1.1

6f2c1ec Merge pull request #9784 from pytest-dev/backport-9768-to-7.1.x

a65c47a Merge pull request #9783 from pytest-dev/backport-9780-to-7.1.x

30d995e [pre-commit.ci] auto fixes from pre-commit.com hooks

10a14d1 [7.1.x] testing: fix tests when run under -v or -vv

f4cfc59 [pre-commit.ci] auto fixes from pre-commit.com hooks

f1df807 [7.1.x] config: restore pre-pytest 7.1.0 confcutdir exclusion behavior

7d4d1ec Merge pull request #9758 from pytest-dev/release-7.1.0

See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

dependencies
opened by dependabot[bot] 1
Bump black from 22.1.0 to 22.3.0
Bumps black from 22.1.0 to 22.3.0.

Release notes

Sourced from black's releases.

22.3.0

Preview style

Code cell separators #%% are now standardised to # %% (#2919)

Remove unnecessary parentheses from except statements (#2939)

Remove unnecessary parentheses from tuple unpacking in for loops (#2945)

Avoid magic-trailing-comma in single-element subscripts (#2942)

Configuration

Do not format __pypackages__ directories by default (#2836)

Add support for specifying stable version with --required-version (#2832).

Avoid crashing when the user has no homedir (#2814)

Avoid crashing when md5 is not available (#2905)

Fix handling of directory junctions on Windows (#2904)

Documentation

Update pylint config documentation (#2931)

Integrations

Move test to disable plugin in Vim/Neovim, which speeds up loading (#2896)

Output

In verbose, mode, log when Black is using user-level config (#2861)

Packaging

Fix Black to work with Click 8.1.0 (#2966)

On Python 3.11 and newer, use the standard library's tomllib instead of tomli (#2903)

black-primer, the deprecated internal devtool, has been removed and copied to a separate repository (#2924)

Parser

Black can now parse starred expressions in the target of for and async for statements, e.g for item in *items_1, *items_2: pass (#2879).

Changelog

Sourced from black's changelog.

22.3.0

Preview style

Code cell separators #%% are now standardised to # %% (#2919)

Remove unnecessary parentheses from except statements (#2939)

Remove unnecessary parentheses from tuple unpacking in for loops (#2945)

Avoid magic-trailing-comma in single-element subscripts (#2942)

Configuration

Do not format __pypackages__ directories by default (#2836)

Add support for specifying stable version with --required-version (#2832).

Avoid crashing when the user has no homedir (#2814)

Avoid crashing when md5 is not available (#2905)

Fix handling of directory junctions on Windows (#2904)

Documentation

Update pylint config documentation (#2931)

Integrations

Move test to disable plugin in Vim/Neovim, which speeds up loading (#2896)

Output

In verbose, mode, log when Black is using user-level config (#2861)

Packaging

Fix Black to work with Click 8.1.0 (#2966)

On Python 3.11 and newer, use the standard library's tomllib instead of tomli (#2903)

black-primer, the deprecated internal devtool, has been removed and copied to a separate repository (#2924)

Parser

Black can now parse starred expressions in the target of for and async for statements, e.g for item in *items_1, *items_2: pass (#2879).

Commits

ae2c075 Prepare release 22.3.0 (#2968)

e9681a4 Fix _unicodefun patch code for Click 8.1.0 (#2966)

ac7402c Bump sphinx from 4.4.0 to 4.5.0 in /docs (GH-2959)

f239d22 Enforce no formatting changes for PRs via CI (GH-2951)

bd1e980 Remove unnecessary parentheses from except clauses (#2939)

14d84ba Resolve new flake8-bugbear errors (B020) (GH-2950)

14e5ce5 Remove unnecessary parentheses from tuple unpacking in for loops (#2945)

3800ebd Avoid magic-trailing-comma in single-element subscripts (#2942)

062b549 Github now supports .git-blame-ignore-revs (GH-2948)

5379d4f stub style: remove some possible future changes (#2940)

Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

dependencies
opened by dependabot[bot] 0
Bump pytest from 7.0.1 to 7.1.0
Bumps pytest from 7.0.1 to 7.1.0.

Release notes

Sourced from pytest's releases.

7.1.0

pytest 7.1.0 (2022-03-13)

Breaking Changes

#8838: As per our policy, the following features have been deprecated in the 6.X series and are now removed:

pytest._fillfuncargs function.

pytest_warning_captured hook - use pytest_warning_recorded instead.

-k -foobar syntax - use -k 'not foobar' instead.

-k foobar: syntax.

pytest.collect module - import from pytest directly.

For more information consult Deprecations and Removals in the docs.

#9437: Dropped support for Python 3.6, which reached end-of-life at 2021-12-23.

Improvements

#5192: Fixed test output for some data types where -v would show less information.

Also, when showing diffs for sequences, -q would produce full diffs instead of the expected diff.

#9362: pytest now avoids specialized assert formatting when it is detected that the default __eq__ is overridden in attrs or dataclasses.

#9536: When -vv is given on command line, show skipping and xfail reasons in full instead of truncating them to fit the terminal width.

#9644: More information about the location of resources that led Python to raise ResourceWarning{.interpreted-text role="class"} can now be obtained by enabling tracemalloc{.interpreted-text role="mod"}.

See resource-warnings{.interpreted-text role="ref"} for more information.

#9678: More types are now accepted in the ids argument to @pytest.mark.parametrize. Previously only [str]{.title-ref}, [float]{.title-ref}, [int]{.title-ref} and [bool]{.title-ref} were accepted; now [bytes]{.title-ref}, [complex]{.title-ref}, [re.Pattern]{.title-ref}, [Enum]{.title-ref} and anything with a [__name__]{.title-ref} are also accepted.

#9692: pytest.approx{.interpreted-text role="func"} now raises a TypeError{.interpreted-text role="class"} when given an unordered sequence (such as set{.interpreted-text role="class"}).

Note that this implies that custom classes which only implement __iter__ and __len__ are no longer supported as they don't guarantee order.

Bug Fixes

#8242: The deprecation of raising unittest.SkipTest{.interpreted-text role="class"} to skip collection of tests during the pytest collection phase is reverted - this is now a supported feature again.

#9493: Symbolic link components are no longer resolved in conftest paths. This means that if a conftest appears twice in collection tree, using symlinks, it will be executed twice.

... (truncated)

Commits

1dbffcc [pre-commit.ci] auto fixes from pre-commit.com hooks

d53a5fb Prepare release version 7.1.0

d306ec0 Update upcoming trainings (#9744)

3e4c14b Merge pull request #9751 from fabianegli/main

7f924b1 Fix typo in deprecation documentation

4a8f8ad build(deps): Bump django from 4.0.2 to 4.0.3 in /testing/plugins_integration ...

c0fd2d8 build(deps): Bump pytest-asyncio from 0.18.1 to 0.18.2 in /testing/plugins_in...

843e018 Merge pull request #9732 from nicoddemus/9730-toml-failure

bc43d66 [automated] Update plugin list (#9733)

e38d1ca Improve error message for malformed pyproject.toml files

Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

dependencies
opened by dependabot[bot] 0
Bump black from 22.3.0 to 22.12.0
Bumps black from 22.3.0 to 22.12.0.

Release notes

Sourced from black's releases.

22.12.0

Preview style

Enforce empty lines before classes and functions with sticky leading comments (#3302)

Reformat empty and whitespace-only files as either an empty file (if no newline is present) or as a single newline character (if a newline is present) (#3348)

Implicitly concatenated strings used as function args are now wrapped inside parentheses (#3307)

Correctly handle trailing commas that are inside a line's leading non-nested parens (#3370)

Configuration

Fix incorrectly applied .gitignore rules by considering the .gitignore location and the relative path to the target file (#3338)

Fix incorrectly ignoring .gitignore presence when more than one source directory is specified (#3336)

Parser

Parsing support has been added for walruses inside generator expression that are passed as function args (for example, any(match := my_re.match(text) for text in texts)) (#3327).

Integrations

Vim plugin: Optionally allow using the system installation of Black via let g:black_use_virtualenv = 0(#3309)

22.10.0

Highlights

Runtime support for Python 3.6 has been removed. Formatting 3.6 code will still be supported until further notice.

Stable style

Fix a crash when # fmt: on is used on a different block level than # fmt: off (#3281)

Preview style

... (truncated)

Changelog

Sourced from black's changelog.

22.12.0

Preview style

Enforce empty lines before classes and functions with sticky leading comments (#3302)

Reformat empty and whitespace-only files as either an empty file (if no newline is present) or as a single newline character (if a newline is present) (#3348)

Implicitly concatenated strings used as function args are now wrapped inside parentheses (#3307)

Correctly handle trailing commas that are inside a line's leading non-nested parens (#3370)

Configuration

Fix incorrectly applied .gitignore rules by considering the .gitignore location and the relative path to the target file (#3338)

Fix incorrectly ignoring .gitignore presence when more than one source directory is specified (#3336)

Parser

Parsing support has been added for walruses inside generator expression that are passed as function args (for example, any(match := my_re.match(text) for text in texts)) (#3327).

Integrations

Vim plugin: Optionally allow using the system installation of Black via let g:black_use_virtualenv = 0(#3309)

22.10.0

Highlights

Runtime support for Python 3.6 has been removed. Formatting 3.6 code will still be supported until further notice.

Stable style

Fix a crash when # fmt: on is used on a different block level than # fmt: off (#3281)

... (truncated)

Commits

2ddea29 Prepare release 22.12.0 (#3413)

5b1443a release: skip bad macos wheels for now (#3411)

9ace064 Bump peter-evans/find-comment from 2.0.1 to 2.1.0 (#3404)

19c5fe4 Fix CI with latest flake8-bugbear (#3412)

d4a8564 Bump sphinx-copybutton from 0.5.0 to 0.5.1 in /docs (#3390)

2793249 Wordsmith current_style.md (#3383)

d97b789 Remove whitespaces of whitespace-only files (#3348)

c23a5c1 Clarify that Black runs with --safe by default (#3378)

8091b25 Correctly handle trailing commas that are inside a line's leading non-nested ...

ffaaf48 Compare each .gitignore found with an appropiate relative path (#3338)

Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

dependencies
opened by dependabot[bot] 0
Bump flake8 from 4.0.1 to 6.0.0
Bumps flake8 from 4.0.1 to 6.0.0.

Commits

b9a7794 Release 6.0.0

b5cac87 Merge pull request #1748 from PyCQA/upgrade-pyflakes

489be4d upgrade pyflakes to 3.0.0

8c06197 Merge pull request #1746 from PyCQA/bump-pycodestyle

047e6f8 upgrade pycodestyle to 2.10

647996c Merge pull request #1744 from PyCQA/pre-commit-ci-update-config

646ad20 [pre-commit.ci] pre-commit autoupdate

b87034d Merge pull request #1741 from PyCQA/drop-py37

aa002ee require python 3.8.1+

16c371d Merge pull request #1739 from PyCQA/remove-optparse

Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

dependencies
opened by dependabot[bot] 0
Bump pytest from 7.1.0 to 7.2.0
Bumps pytest from 7.1.0 to 7.2.0.

Release notes

Sourced from pytest's releases.

7.2.0

pytest 7.2.0 (2022-10-23)

Deprecations

#10012: Update pytest.PytestUnhandledCoroutineWarning{.interpreted-text role="class"} to a deprecation; it will raise an error in pytest 8.

#10396: pytest no longer depends on the py library. pytest provides a vendored copy of py.error and py.path modules but will use the py library if it is installed. If you need other py.* modules, continue to install the deprecated py library separately, otherwise it can usually be removed as a dependency.

#4562: Deprecate configuring hook specs/impls using attributes/marks.

Instead use :pypytest.hookimpl{.interpreted-text role="func"} and :pypytest.hookspec{.interpreted-text role="func"}. For more details, see the docs <legacy-path-hooks-deprecated>{.interpreted-text role="ref"}.

#9886: The functionality for running tests written for nose has been officially deprecated.

This includes:

Plain setup and teardown functions and methods: this might catch users by surprise, as setup() and teardown() are not pytest idioms, but part of the nose support.

Setup/teardown using the @with_setup decorator.

For more details, consult the deprecation docs <nose-deprecation>{.interpreted-text role="ref"}.

Features

#9897: Added shell-style wildcard support to testpaths.

Improvements

#10218: @pytest.mark.parametrize() (and similar functions) now accepts any Sequence[str] for the argument names, instead of just list[str] and tuple[str, ...].

(Note that str, which is itself a Sequence[str], is still treated as a comma-delimited name list, as before).

#10381: The --no-showlocals flag has been added. This can be passed directly to tests to override --showlocals declared through addopts.

#3426: Assertion failures with strings in NFC and NFD forms that normalize to the same string now have a dedicated error message detailing the issue, and their utf-8 representation is expresed instead.

#7337: A warning is now emitted if a test function returns something other than [None]{.title-ref}. This prevents a common mistake among beginners that expect that returning a [bool]{.title-ref} (for example [return foo(a, b) == result]{.title-ref}) would cause a test to pass or fail, instead of using [assert]{.title-ref}.

#8508: Introduce multiline display for warning matching via :pypytest.warns{.interpreted-text role="func"} and enhance match comparison for :py_pytest._code.ExceptionInfo.match{.interpreted-text role="func"} as returned by :pypytest.raises{.interpreted-text role="func"}.

#8646: Improve :pypytest.raises{.interpreted-text role="func"}. Previously passing an empty tuple would give a confusing error. We now raise immediately with a more helpful message.

#9741: On Python 3.11, use the standard library's tomllib{.interpreted-text role="mod"} to parse TOML.

tomli{.interpreted-text role="mod"}` is no longer a dependency on Python 3.11.

#9742: Display assertion message without escaped newline characters with -vv.

#9823: Improved error message that is shown when no collector is found for a given file.

... (truncated)

Commits

3af3f56 Prepare release version 7.2.0

bc2c3b6 Merge pull request #10408 from NateMeyvis/patch-2

d84ed48 Merge pull request #10409 from pytest-dev/asottile-patch-1

ffe49ac Merge pull request #10396 from pytest-dev/pylib-hax

d352098 allow jobs to pass if codecov.io fails

c5c562b Fix typos in CONTRIBUTING.rst

d543a45 add deprecation changelog for py library vendoring

f341a5c Merge pull request #10407 from NateMeyvis/patch-1

1027dc8 [pre-commit.ci] auto fixes from pre-commit.com hooks

6b905ee Add note on tags to CONTRIBUTING.rst

Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

dependencies
opened by dependabot[bot] 0