chore(pip-prod)(deps): bump tomli from 2.0.2 to 2.1.0 #311

2024-11-12T17:53:49+01:00

dependabot[bot] commented

2024-11-12 17:53:49 +01:00

(Migrated from github.com)

Bumps tomli from 2.0.2 to 2.1.0.

Changelog

2.1.0

Deprecated

Instantiating TOMLDecodeError with free-form arguments. msg, doc and pos arguments should be given.

Added

msg, doc, pos, lineno and colno attributes to TOMLDecodeError

Commits

d6e045b Bump version: 2.0.2 → 2.1.0
d1d6a85 Add attributes to TOMLDecodeError. Deprecate free-form __init__ args (#238)
59ed9ef Add a comment about implicit lru_cache bound
9d25b3f Test against Python 3.13 final (#237)
f57fb66 Add test coverage for text mode error (#231)
4be816b Convert tox config to native TOML
e2f8d2d Merge pull request #233 from hukkin/version-2.0.2
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [tomli](https://github.com/hukkin/tomli) from 2.0.2 to 2.1.0. <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/hukkin/tomli/blob/master/CHANGELOG.md">tomli's changelog</a>.</em></p> <blockquote> <h2>2.1.0</h2> <ul> <li>Deprecated <ul> <li>Instantiating <code>TOMLDecodeError</code> with free-form arguments. <code>msg</code>, <code>doc</code> and <code>pos</code> arguments should be given.</li> </ul> </li> <li>Added <ul> <li><code>msg</code>, <code>doc</code>, <code>pos</code>, <code>lineno</code> and <code>colno</code> attributes to <code>TOMLDecodeError</code></li> </ul> </li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/hukkin/tomli/commit/d6e045b1e6b36c56271d9f003794d915d713f962"><code>d6e045b</code></a> Bump version: 2.0.2 → 2.1.0</li> <li><a href="https://github.com/hukkin/tomli/commit/d1d6a8571b06b18005af8bf9078c1d37de5353e1"><code>d1d6a85</code></a> Add attributes to TOMLDecodeError. Deprecate free-form <code>__init__</code> args (<a href="https://redirect.github.com/hukkin/tomli/issues/238">#238</a>)</li> <li><a href="https://github.com/hukkin/tomli/commit/59ed9efb3d6bb7ec71454601a72088b0a6853b8c"><code>59ed9ef</code></a> Add a comment about implicit lru_cache bound</li> <li><a href="https://github.com/hukkin/tomli/commit/9d25b3f99e37426d33eb8b5513890d723fefd441"><code>9d25b3f</code></a> Test against Python 3.13 final (<a href="https://redirect.github.com/hukkin/tomli/issues/237">#237</a>)</li> <li><a href="https://github.com/hukkin/tomli/commit/f57fb669e9147bc69e2681ce7eeea2ed6294c039"><code>f57fb66</code></a> Add test coverage for text mode error (<a href="https://redirect.github.com/hukkin/tomli/issues/231">#231</a>)</li> <li><a href="https://github.com/hukkin/tomli/commit/4be816b4070f1705e19231166aedf9256aa38086"><code>4be816b</code></a> Convert tox config to native TOML</li> <li><a href="https://github.com/hukkin/tomli/commit/e2f8d2dd15313d5ffca65dd8d1aaf70e6386dddc"><code>e2f8d2d</code></a> Merge pull request <a href="https://redirect.github.com/hukkin/tomli/issues/233">#233</a> from hukkin/version-2.0.2</li> <li>See full diff in <a href="https://github.com/hukkin/tomli/compare/2.0.2...2.1.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=tomli&package-manager=pip&previous-version=2.0.2&new-version=2.1.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details>

luketainton (Migrated from github.com) reviewed 2024-11-12 17:53:49 +01:00

sonarqubecloud[bot] commented

2024-11-12 17:55:18 +01:00

(Migrated from github.com)

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

## [![Quality Gate Passed](https://sonarsource.github.io/sonarcloud-github-static-resources/v2/checks/QualityGateBadge/qg-passed-20px.png 'Quality Gate Passed')](https://sonarcloud.io/dashboard?id=luketainton_roboluke-tasks&pullRequest=311) **Quality Gate passed** Issues ![](https://sonarsource.github.io/sonarcloud-github-static-resources/v2/common/passed-16px.png '') [0 New issues](https://sonarcloud.io/project/issues?id=luketainton_roboluke-tasks&pullRequest=311&issueStatuses=OPEN,CONFIRMED&sinceLeakPeriod=true) ![](https://sonarsource.github.io/sonarcloud-github-static-resources/v2/common/accepted-16px.png '') [0 Accepted issues](https://sonarcloud.io/project/issues?id=luketainton_roboluke-tasks&pullRequest=311&issueStatuses=ACCEPTED) Measures ![](https://sonarsource.github.io/sonarcloud-github-static-resources/v2/common/passed-16px.png '') [0 Security Hotspots](https://sonarcloud.io/project/security_hotspots?id=luketainton_roboluke-tasks&pullRequest=311&issueStatuses=OPEN,CONFIRMED&sinceLeakPeriod=true) ![](https://sonarsource.github.io/sonarcloud-github-static-resources/v2/common/passed-16px.png '') [0.0% Coverage on New Code](https://sonarcloud.io/component_measures?id=luketainton_roboluke-tasks&pullRequest=311&metric=new_coverage&view=list) ![](https://sonarsource.github.io/sonarcloud-github-static-resources/v2/common/passed-16px.png '') [0.0% Duplication on New Code](https://sonarcloud.io/component_measures?id=luketainton_roboluke-tasks&pullRequest=311&metric=new_duplicated_lines_density&view=list) [See analysis details on SonarQube Cloud](https://sonarcloud.io/dashboard?id=luketainton_roboluke-tasks&pullRequest=311)

luketainton commented

2024-11-13 17:32:11 +01:00

(Migrated from github.com)

Google Gemini AI Review

Decision: Accept
Change Score: 80%

tomli is updated to version 2.1.0, which is a recommended security update.
This change makes the code more secure and should be accepted.

*Google Gemini AI Review* **Decision: Accept** **Change Score: 80%** - `tomli` is updated to version 2.1.0, which is a recommended security update. - This change makes the code more secure and should be accepted.

Sign in to join this conversation.

No reviewers

luketainton