dependabot[bot] opened a new pull request, #1959: URL: https://github.com/apache/libcloud/pull/1959
Bumps [build](https://github.com/pypa/build) from 0.10.0 to 1.0.3. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/pypa/build/releases";>build's releases</a>.</em></p> <blockquote> <h2>Version 1.0.3</h2> <h2>What's Changed</h2> <ul> <li>fix: avoid bug in various patch releases of Python by <a href="https://github.com/henryiii";><code>@henryiii</code></a> in <a href="https://redirect.github.com/pypa/build/pull/675";>pypa/build#675</a></li> <li>changelog: fix issue reference by <a href="https://github.com/michael-k";><code>@michael-k</code></a> in <a href="https://redirect.github.com/pypa/build/pull/671";>pypa/build#671</a></li> <li>tox: format file by <a href="https://github.com/henryiii";><code>@henryiii</code></a> in <a href="https://redirect.github.com/pypa/build/pull/678";>pypa/build#678</a></li> <li>chore: bump to 1.0.3 by <a href="https://github.com/henryiii";><code>@henryiii</code></a> in <a href="https://redirect.github.com/pypa/build/pull/681";>pypa/build#681</a></li> <li>chore: release 1.0.1 by <a href="https://github.com/henryiii";><code>@henryiii</code></a> in <a href="https://redirect.github.com/pypa/build/pull/677";>pypa/build#677</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/michael-k";><code>@michael-k</code></a> made their first contribution in <a href="https://redirect.github.com/pypa/build/pull/671";>pypa/build#671</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/pypa/build/compare/1.0.0...1.0.3";>https://github.com/pypa/build/compare/1.0.0...1.0.3</a></p> <h2>Version 1.0.0</h2> <h2>What's Changed</h2> <ul> <li>infra: replace flake8 with ruff by <a href="https://github.com/layday";><code>@layday</code></a> in <a href="https://redirect.github.com/pypa/build/pull/565";>pypa/build#565</a></li> <li>Refactor <code>IsolatedEnv</code>, take two by <a href="https://github.com/layday";><code>@layday</code></a> in <a href="https://redirect.github.com/pypa/build/pull/537";>pypa/build#537</a></li> <li>util: allow passing alternative runner to <code>project_wheel_metadata</code> by <a href="https://github.com/q0w";><code>@q0w</code></a> in <a href="https://redirect.github.com/pypa/build/pull/566";>pypa/build#566</a></li> <li>ci: do not trigger workflow for RST file changes by <a href="https://github.com/layday";><code>@layday</code></a> in <a href="https://redirect.github.com/pypa/build/pull/568";>pypa/build#568</a></li> <li>build: drop toml fallback by <a href="https://github.com/layday";><code>@layday</code></a> in <a href="https://redirect.github.com/pypa/build/pull/567";>pypa/build#567</a></li> <li>infra: fix ruff configuration and add a few checks by <a href="https://github.com/henryiii";><code>@henryiii</code></a> in <a href="https://redirect.github.com/pypa/build/pull/573";>pypa/build#573</a></li> <li>Minor doc fixes by <a href="https://github.com/layday";><code>@layday</code></a> in <a href="https://redirect.github.com/pypa/build/pull/574";>pypa/build#574</a></li> <li>docs: reorder installation instructions by <a href="https://github.com/hauntsaninja";><code>@hauntsaninja</code></a> in <a href="https://redirect.github.com/pypa/build/pull/575";>pypa/build#575</a></li> <li>Specify encoding by <a href="https://github.com/jaraco";><code>@jaraco</code></a> in <a href="https://redirect.github.com/pypa/build/pull/578";>pypa/build#578</a></li> <li>infra: use latest Ruff instead of isort by <a href="https://github.com/henryiii";><code>@henryiii</code></a> in <a href="https://redirect.github.com/pypa/build/pull/581";>pypa/build#581</a></li> <li>tests: report installed versions of common packages by <a href="https://github.com/henryiii";><code>@henryiii</code></a> in <a href="https://redirect.github.com/pypa/build/pull/588";>pypa/build#588</a></li> <li>tests: strip formatting from stderr (pip 23) by <a href="https://github.com/henryiii";><code>@henryiii</code></a> in <a href="https://redirect.github.com/pypa/build/pull/589";>pypa/build#589</a></li> <li>docs: remove direct references to PEP 517 in docs landing page by <a href="https://github.com/pradyunsg";><code>@pradyunsg</code></a> in <a href="https://redirect.github.com/pypa/build/pull/562";>pypa/build#562</a></li> <li>docs: use sphinx-issues by <a href="https://github.com/FFY00";><code>@FFY00</code></a> in <a href="https://redirect.github.com/pypa/build/pull/590";>pypa/build#590</a></li> <li>config: support running Ruff 0.258+ directly on source by <a href="https://github.com/henryiii";><code>@henryiii</code></a> in <a href="https://redirect.github.com/pypa/build/pull/591";>pypa/build#591</a></li> <li>tests: useless .stdout detected by Ruff PR by <a href="https://github.com/henryiii";><code>@henryiii</code></a> in <a href="https://redirect.github.com/pypa/build/pull/594";>pypa/build#594</a></li> <li>Fix link to installation page in docs by <a href="https://github.com/atugushev";><code>@atugushev</code></a> in <a href="https://redirect.github.com/pypa/build/pull/597";>pypa/build#597</a></li> <li>fix: mypy update by <a href="https://github.com/henryiii";><code>@henryiii</code></a> in <a href="https://redirect.github.com/pypa/build/pull/606";>pypa/build#606</a></li> <li>chore: minor cleanup by <a href="https://github.com/henryiii";><code>@henryiii</code></a> in <a href="https://redirect.github.com/pypa/build/pull/605";>pypa/build#605</a></li> <li>chore: isort Ruff code was missing by <a href="https://github.com/henryiii";><code>@henryiii</code></a> in <a href="https://redirect.github.com/pypa/build/pull/604";>pypa/build#604</a></li> <li>🎨🧪 Modularize GHA workflow through reuse by <a href="https://github.com/webknjaz";><code>@webknjaz</code></a> in <a href="https://redirect.github.com/pypa/build/pull/618";>pypa/build#618</a></li> <li>Improve CLI help text by <a href="https://github.com/layday";><code>@layday</code></a> in <a href="https://redirect.github.com/pypa/build/pull/616";>pypa/build#616</a></li> <li>ci: add 3.12 beta testing by <a href="https://github.com/henryiii";><code>@henryiii</code></a> in <a href="https://redirect.github.com/pypa/build/pull/624";>pypa/build#624</a></li> <li>chore: remove unneeded target-version by <a href="https://github.com/henryiii";><code>@henryiii</code></a> in <a href="https://redirect.github.com/pypa/build/pull/634";>pypa/build#634</a></li> <li>pre-commit: ruff moved to astral-sh by <a href="https://github.com/henryiii";><code>@henryiii</code></a> in <a href="https://redirect.github.com/pypa/build/pull/635";>pypa/build#635</a></li> <li>main: filter out malicious files when extracting tar archives by <a href="https://github.com/layday";><code>@layday</code></a> in <a href="https://redirect.github.com/pypa/build/pull/609";>pypa/build#609</a></li> <li>main: avoid cost of importing virtualenv if not using it by <a href="https://github.com/henryiii";><code>@henryiii</code></a> in <a href="https://redirect.github.com/pypa/build/pull/636";>pypa/build#636</a></li> <li>Bump importlib metadata dependency by <a href="https://github.com/jaraco";><code>@jaraco</code></a> in <a href="https://redirect.github.com/pypa/build/pull/631";>pypa/build#631</a></li> <li>main: ensure config_settings are passed to get_requires_for_build by <a href="https://github.com/jameshilliard";><code>@jameshilliard</code></a> in <a href="https://redirect.github.com/pypa/build/pull/627";>pypa/build#627</a></li> <li>tests: add network marker by <a href="https://github.com/henryiii";><code>@henryiii</code></a> in <a href="https://redirect.github.com/pypa/build/pull/649";>pypa/build#649</a></li> <li>chore: use 2x faster black mirror by <a href="https://github.com/henryiii";><code>@henryiii</code></a> in <a href="https://redirect.github.com/pypa/build/pull/652";>pypa/build#652</a></li> <li>docs: bump furo/sphinx by <a href="https://github.com/henryiii";><code>@henryiii</code></a> in <a href="https://redirect.github.com/pypa/build/pull/660";>pypa/build#660</a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/pypa/build/blob/main/CHANGELOG.rst";>build's changelog</a>.</em></p> <blockquote> <h1>1.0.3 (2023-09-06)</h1> <ul> <li>Avoid CPython 3.8.17, 3.9.17, 3.10.12, and 3.11.4 tarfile symlink bug triggered by adding <code>data_filter</code> in 1.0.0. (PR :pr:<code>675</code>, fixes issue :issue:<code>674</code>)</li> </ul> <h1>1.0.0 (2023-09-01)</h1> <ul> <li>Removed the <code>toml</code> library fallback; <code>toml</code> can no longer be used as a substitute for <code>tomli</code> (PR :pr:<code>567</code>)</li> <li>Added <code>runner</code> parameter to <code>util.project_wheel_metadata</code> (PR :pr:<code>566</code>, fixes issue :issue:<code>553</code>)</li> <li>Modified <code>ProjectBuilder</code> constructor signature, added alternative <code>ProjectBuilder.from_env</code> constructor, redefined <code>env.IsolatedEnv</code> interface, and exposed <code>env.DefaultIsolatedEnv</code>, replacing <code>env.IsolatedEnvBuilder</code>. The aim has been to shift responsibility for modifying the environment from the project builder to the <code>IsolatedEnv</code> entirely and to ensure that the builder will be initialised from an <code>IsolatedEnv</code> in a consistent manner. Mutating the project builder is no longer supported. (PR :pr:<code>537</code>)</li> <li><code>virtualenv</code> is no longer imported when using <code>-n</code>, for faster builds (PR :pr:<code>636</code>, fixes issue :issue:<code>510</code>)</li> <li>The SDist now contains the repository contents, including tests. Flit-core 3.8+ required. (PR :pr:<code>657</code>, :pr:<code>661</code>, fixes issue :issue:<code>656</code>)</li> <li>The minimum version of <code>importlib-metadata</code> has been increased to 4.6 and Python 3.10 due to a bug in the standard library version with URL requirements in extras. This is still not required for 3.8 when bootstrapping (as long as you don't have URL requirements in extras). (PR :pr:<code>631</code>, fixes issue :issue:<code>630</code>)</li> <li>Docs now built with Sphinx 7 (PR :pr:<code>660</code>)</li> <li>Tests now contain a <code>network</code> marker (PR :pr:<code>649</code>, fixes issue :issue:<code>648</code>)</li> <li>Config-settings are now passed to <code>get_requires*</code> hooks, fixing a long standing bug. If this affects your setuptools build, you can use <code>-C--build-option=<cmd> -C--build-option=<option></code> to workaround an issue with Setuptools not allowing unrecognised build options when running this hook. (PR :pr:<code>627</code>, fixes issue :issue:<code>[#264](https://github.com/pypa/build/issues/264)</code>)</li> <li>Test on Python 3.12 betas/RCs (PR :pr:<code>624</code>)</li> <li>Filter out malicious files when extracting tar archives when Python supports it (PR :pr:<code>609</code>)</li> <li>Specify encoding, fixing issues when <code>PYTHONWARNDEFAULTENCODING</code> is set.</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/pypa/build/commit/38d1a688d5e05557a929245ada14d106f3e5b547";><code>38d1a68</code></a> chore: bump to 1.0.3</li> <li><a href="https://github.com/pypa/build/commit/17cefaf178a2c08abe319d90f8b9690707007f35";><code>17cefaf</code></a> tox: format file</li> <li><a href="https://github.com/pypa/build/commit/c48f4ca7cbe84f027f37ad575713870f5f4f7818";><code>c48f4ca</code></a> chore: release 1.0.1</li> <li><a href="https://github.com/pypa/build/commit/4b61b8e1344324dbf43c7b59b5cf61835b8fa2e3";><code>4b61b8e</code></a> Apply suggestions from code review</li> <li><a href="https://github.com/pypa/build/commit/d6138f59f35bef619db9c071a45f9c13956c1571";><code>d6138f5</code></a> fix: avoid bug in various patch releases of Python</li> <li><a href="https://github.com/pypa/build/commit/eada8112cdfa342390e02e1258da6795a19ada36";><code>eada811</code></a> build(deps): bump actions/checkout from 3 to 4 (<a href="https://redirect.github.com/pypa/build/issues/673";>#673</a>)</li> <li><a href="https://github.com/pypa/build/commit/955e69786fa5a4be0b7fd15e13dfb58ba044ae35";><code>955e697</code></a> pre-commit: bump repositories (<a href="https://redirect.github.com/pypa/build/issues/672";>#672</a>)</li> <li><a href="https://github.com/pypa/build/commit/f51c089ddc608472f34dec002237af3de2d48c43";><code>f51c089</code></a> changelog: fix issue reference</li> <li><a href="https://github.com/pypa/build/commit/1fff01ed7440d5b5626fec31422026a4920b7764";><code>1fff01e</code></a> style: ignore W005, since we are build</li> <li><a href="https://github.com/pypa/build/commit/06e0481cee5321c3a755fd1675e15c3fa926d201";><code>06e0481</code></a> ci: build and test SDist/wheels</li> <li>Additional commits viewable in <a href="https://github.com/pypa/build/compare/0.10.0...1.0.3";>compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: notifications-unsubscr...@libcloud.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org
