build(deps): bump the python group across 1 directory with 5 updates

[dependabot]

Bumps the python group with 5 updates in the / directory:

Package	From	To
pydantic	1.10.19	1.10.20
vcrpy	6.0.2	7.0.0
twine	5.1.1	6.0.1
tomli	2.1.0	2.2.1
ruff	0.8.0	0.9.1

Updates pydantic from 1.10.19 to 1.10.20

Release notes

Sourced from pydantic's releases.

v1.10.20 2025-01-07

What's Changed

This release provides proper support for Python 3.13, with (Cythonized) wheels published for this version. As a consequence, Cython was updated from 0.29.x to 3.0.x.

• General maintenance of CI and build ecosystem by @​Viicos in pydantic/pydantic#10847
  • Update Cython to 3.0.x.
  • Properly address Python 3.13 deprecation warnings.
  • Migrate packaging to pyproject.toml, make use of PEP 517 build options.
  • Use build instead of direct setup.py invocations.
  • Update various Github Actions versions.
• Replace outdated stpmex link in documentation by @​jaredenorris in pydantic/pydantic#10997

New Contributors

• @​jaredenorris made their first contribution in pydantic/pydantic#10997

Full Changelog: pydantic/pydantic@v1.10.19...v1.10.20

Changelog

Sourced from pydantic's changelog.

v1.10.20 (2025-01-07)

This release provides proper support for Python 3.13, with (Cythonized) wheels published for this version. As a consequence, Cython was updated from 0.29.x to 3.0.x.

• General maintenance of CI and build ecosystem by @​Viicos in pydantic/pydantic#10847
  • Update Cython to 3.0.x.
  • Properly address Python 3.13 deprecation warnings.
  • Migrate packaging to pyproject.toml, make use of PEP 517 build options.
  • Use build instead of direct setup.py invocations.
  • Update various Github Actions versions.
• Replace outdated stpmex link in documentation by @​jaredenorris in pydantic/pydantic#10997

Commits

• bfc2243 Prepare release v1.10.20 (#11226)
• 4a52e6a General maintenance of CI and build ecosystem (#10847)
• 7c70a4a Fix linting job for v1.10.X-fixes (#11028)
• 56321fd Replace outdated docs link (#10997)
• See full diff in compare view

Updates vcrpy from 6.0.2 to 7.0.0

Release notes

Sourced from vcrpy's releases.

v7.0.0

What's Changed

- Drop support for python 3.8 (major version bump) - thanks @jairhenrique
- Various linting and test fixes - thanks @jairhenrique
- Bugfix for urllib2>=2.3.0 - missing version_string ([#888](https://github.com/kevin1024/vcrpy/issues/888))
- Bugfix for asyncio.run - thanks @alekeik1

New Contributors

• @​exslim made their first contribution in kevin1024/vcrpy#889
• @​alekseik1 made their first contribution in kevin1024/vcrpy#886

Changelog

Sourced from vcrpy's changelog.

Changelog

For a full list of triaged issues, bugs and PRs and what release they are targeted for please see the following link.

ROADMAP MILESTONES <https://github.com/kevin1024/vcrpy/milestones>_

All help in providing PRs to close out bug issues is appreciated. Even if that is providing a repo that fully replicates issues. We have very generous contributors that have added these to bug issues which meant another contributor picked up the bug and closed it out.

• 7.0.0

  • Drop support for python 3.8 (major version bump) - thanks @​jairhenrique
  • Various linting and test fixes - thanks @​jairhenrique
  • Bugfix for urllib2>=2.3.0 - missing version_string (#888)
  • Bugfix for asyncio.run - thanks @​alekeik1

• 6.0.2

  • Ensure body is consumed only once (#846) - thanks @​sathieu
  • Permit urllib3 2.x for non-PyPy Python >=3.10
  • Fix typos in test commands - thanks @​chuckwondo
  • Several test and workflow improvements - thanks @​hartwork and @​graingert

• 6.0.1

  • Bugfix with to Tornado cassette generator (thanks @​graingert)

• 6.0.0

  • BREAKING: Fix issue with httpx support (thanks @​parkerhancock) in #784. NOTE: You may have to recreate some of your cassettes produced in previous releases due to the binary format being saved incorrectly in previous releases
  • BREAKING: Drop support for boto (vcrpy still supports boto3, but is dropping the deprecated boto support in this release. (thanks @​jairhenrique)
  • Fix compatibility issue with Python 3.12 (thanks @​hartwork)
  • Drop simplejson (fixes some compatibility issues) (thanks @​jairhenrique)
  • Run CI on Python 3.12 and PyPy 3.9-3.10 (thanks @​mgorny)
  • Various linting and docs improvements (thanks @​jairhenrique)
  • Tornado fixes (thanks @​graingert)

• 5.1.0

  • Use ruff for linting (instead of current flake8/isort/pyflakes) - thanks @​jairhenrique
  • Enable rule B (flake8-bugbear) on ruff - thanks @​jairhenrique
  • Configure read the docs V2 - thanks @​jairhenrique
  • Fix typo in docs - thanks @​quasimik
  • Make json.loads of Python >=3.6 decode bytes by itself - thanks @​hartwork
  • Fix body matcher for chunked requests (fixes #734) - thanks @​hartwork
  • Fix query param filter for aiohttp (fixes #517) - thanks @​hartwork and @​salomvary
  • Remove unnecessary dependency on six. - thanks @​charettes
  • build(deps): update sphinx requirement from <7 to <8 - thanks @​jairhenrique
  • Add action to validate docs - thanks @​jairhenrique
  • Add editorconfig file - thanks @​jairhenrique
  • Drop iscoroutinefunction fallback function for unsupported python thanks @​jairhenrique

• 5.0.0

  • BREAKING CHANGE: Drop support for Python 3.7. 3.7 is EOL as of 6/27/23 Thanks @​jairhenrique
  • BREAKING CHANGE: Custom Cassette persisters no longer catch ValueError. If you have implemented a custom persister (has anyone implemented a custom persister? Let us know!) then you will need to throw a CassetteNotFoundError when unable to find a cassette. See #681 for discussion and reason for this change. Thanks @​amosjyng for the PR and the review from @​hartwork

• 4.4.0

  • HUGE thanks to @​hartwork for all the work done on this release!
  • Bring vcr/unittest in to vcrpy as a full feature of vcr instead of a separate library. Big thanks to @​hartwork for doing this and to @​agriffis for originally creating the library
  • Make decompression robust towards already decompressed input (thanks @​hartwork)

... (truncated)

Commits

• 3278619 Release v7.0.0
• 3fb62e0 fix: correctly handle asyncio.run when loop exists
• 8197865 build(deps): update sphinx requirement from <8 to <9
• be651bd pre-commit: Autoupdate
• a6698ed Fix aiohttp tests
• 48d0a2e Fixed missing version_string attribute when used with urllib3>=2.3.0
• 5b858b1 Fix lint
• c8d99a9 Fix ruff configuration
• ce27c63 Merge pull request #736 from kevin1024/drop-python38
• ab8944d Drop python 3.8 support
• Additional commits viewable in compare view

Updates twine from 5.1.1 to 6.0.1

Changelog

Sourced from twine's changelog.

Twine 6.0.1 (2024-11-30)

Bugfixes ^^^^^^^^

• Fixed a regression where twine check would fail to expand wildcards, e.g. twine check 'dist/*'. ([#1188](https://github.com/pypa/twine/issues/1188) <https://github.com/pypa/twine/issues/1188>_)

Misc ^^^^

• [#1184](https://github.com/pypa/twine/issues/1184) <https://github.com/pypa/twine/issues/1184>_

Twine 6.0.0 (2024-11-29)

Bugfixes ^^^^^^^^

• Restore support for pkginfo 1.11 ([#1116](https://github.com/pypa/twine/issues/1116) <https://github.com/pypa/twine/issues/1116>_)

Deprecations and Removals ^^^^^^^^^^^^^^^^^^^^^^^^^

• Username for PyPI and Test PyPI now defaults to token but no longer overrides a username configured in the environment or supplied on the command line. Workflows still supplying anything other than token for the username when uploading to PyPI or Test PyPI will now fail. Either supply token or do not supply a username at all. ([#1121](https://github.com/pypa/twine/issues/1121) <https://github.com/pypa/twine/issues/1121>_)

Misc ^^^^

• [#1024](https://github.com/pypa/twine/issues/1024) <https://github.com/pypa/twine/issues/1024>_

Commits

• a723876 Merge pull request #1189 from pypa/release-6.0.1
• 9a24828 Update changelog for 6.0.1
• a017005 Merge pull request #1188 from pypa/ww/fix-twine-check-glob
• e98f03b check: fix handling of non-shell-expanded globs
• 873f33e build(deps): bump pypa/gh-action-pypi-publish from 1.11.0 to 1.12.2 (#1175)
• 067412e Use brackets for the default value of option arguments (#1149)
• f32dc35 Apply ruff/Perflint rule (#1136)
• aa58273 Don't require importlib_metadata on Python 3.10+
• 675565f changelog: record #1184
• 80cc58c chore: mark 3.13 as explicitly supported
• Additional commits viewable in compare view

Updates tomli from 2.1.0 to 2.2.1

Changelog

Sourced from tomli's changelog.

2.2.1

• Fixed
  • Don't attempt to compile binary wheels for Python 3.8, 3.9 and 3.10 where cibuildwheel depends on a conflicting Tomli version

2.2.0

• Added
  • mypyc generated binary wheels for common platforms

Commits

• 73c3d10 Bump version: 2.2.0 → 2.2.1
• 7c2368d Don't build wheels for Python versions requiring tomli
• c48e4e1 Bump version: 2.1.0 → 2.2.0
• 7604741 Update README
• 0724e2a Annotate global constants as Final to speed up compiled code
• 149547d Create binary wheels with mypyc (#242)
• 443a0c1 pre-commit autoupdate and autofix
• 48461cf Merge pull request #240 from hukkin/version-2.1.0
• See full diff in compare view

Updates ruff from 0.8.0 to 0.9.1

Release notes

Sourced from ruff's releases.

0.9.1

Release Notes

Preview features

• [pycodestyle] Run too-many-newlines-at-end-of-file on each cell in notebooks (W391) (#15308)
• [ruff] Omit diagnostic for shadowed private function parameters in used-dummy-variable (RUF052) (#15376)

Rule changes

• [flake8-bugbear] Improve assert-raises-exception message (B017) (#15389)

Formatter

• Preserve trailing end-of line comments for the last string literal in implicitly concatenated strings (#15378)

Server

• Fix a bug where the server and client notebooks were out of sync after reordering cells (#15398)

Bug fixes

• [flake8-pie] Correctly remove wrapping parentheses (PIE800) (#15394)
• [pyupgrade] Handle comments and multiline expressions correctly (UP037) (#15337)

Contributors

• @​AntoineD
• @​InSyncWithFoo
• @​MichaReiser
• @​calumy
• @​dcreager
• @​dhruvmanila
• @​dylwil3
• @​sharkdp
• @​tjkuson

Install ruff 0.9.1

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://github.com/astral-sh/ruff/releases/download/0.9.1/ruff-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy ByPass -c "irm https://github.com/astral-sh/ruff/releases/download/0.9.1/ruff-installer.ps1 | iex"

... (truncated)

Changelog

Sourced from ruff's changelog.

0.9.1

Preview features

• [pycodestyle] Run too-many-newlines-at-end-of-file on each cell in notebooks (W391) (#15308)
• [ruff] Omit diagnostic for shadowed private function parameters in used-dummy-variable (RUF052) (#15376)

Rule changes

• [flake8-bugbear] Improve assert-raises-exception message (B017) (#15389)

Formatter

• Preserve trailing end-of line comments for the last string literal in implicitly concatenated strings (#15378)

Server

• Fix a bug where the server and client notebooks were out of sync after reordering cells (#15398)

Bug fixes

• [flake8-pie] Correctly remove wrapping parentheses (PIE800) (#15394)
• [pyupgrade] Handle comments and multiline expressions correctly (UP037) (#15337)

0.9.0

Check out the blog post for a migration guide and overview of the changes!

Breaking changes

Ruff now formats your code according to the 2025 style guide. As a result, your code might now get formatted differently. See the formatter section for a detailed list of changes.

This release doesn’t remove or remap any existing stable rules.

Stabilization

The following rules have been stabilized and are no longer in preview:

• stdlib-module-shadowing (A005). This rule has also been renamed: previously, it was called builtin-module-shadowing.
• builtin-lambda-argument-shadowing (A006)
• slice-to-remove-prefix-or-suffix (FURB188)
• boolean-chained-comparison (PLR1716)
• decimal-from-float-literal (RUF032)
• post-init-default (RUF033)
• useless-if-else (RUF034)

The following behaviors have been stabilized:

• pytest-parametrize-names-wrong-type (PT006): Detect pytest.parametrize calls outside decorators and calls with keyword arguments.

... (truncated)

Commits

• 12f86f3 Ruff 0.9.1 (#15407)
• 2b28d56 Associate a trailing end-of-line comment in a parenthesized implicit concaten...
• adca7bd Remove pygments pin (#15404)
• 6b98a26 [red-knot] Support assert_type (#15194)
• c874638 [red-knot] Move tuple-containing-Never tests to Markdown (#15402)
• c364b58 [flake8-pie] Correctly remove wrapping parentheses (PIE800) (#15394)
• 73d424e Fix outdated doc for handling the default file types with the pre-commit hook...
• 6e9ff44 Insert the cells from the start position (#15398)
• f2c3ddc [red-knot] Move intersection type tests to Markdown (#15396)
• b861551 Remove unnecessary backticks (#15393)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Superseded by #284.