chore(pip-dev)(deps-dev): bump setuptools from 69.1.1 to 69.2.0 #180

2024-03-13T16:44:11+01:00

dependabot[bot] commented

2024-03-13 16:44:11 +01:00

(Migrated from github.com)

Bumps setuptools from 69.1.1 to 69.2.0.

Changelog

v69.2.0

Features

Explicitly use encoding="locale" for .pth files whenever possible, to reduce EncodingWarnings. This avoid errors with UTF-8 (see discussion in python/cpython#77102). (#4265)

Bugfixes

Clarify some pkg_resources methods return bytes, not str. Also return an empty bytes in EmptyProvider._get -- by :user:Avasam (#4243)

Return an empty list by default in pkg_resources.ResourceManager.cleanup_resources -- by :user:Avasam (#4244)

Made pkg_resoursces.NullProvider's has_metadata and metadata_isdir methods return actual booleans like all other Providers. -- by :user:Avasam (#4254)

Misc

#4237, #4238, #4241, #4260, #4261, #4263

Commits

6ee23bf Bump version: 69.1.1 → 69.2.0
35df7d0 Update upload-artefact action to v3 (#4274)
50f0459 Update .github/workflows/ci-sage.yml
c9e6b2a Update upload-artefact action to v4
9156fc0 Update cygwin-install-action to v4 (#4269)
e0cb8e8 Update cygwin-install-action
0badbf5 Update checkout action to v4 (#4272)
fe64b70 Update setup-python action to v5 (#4271)
b40a70b Merge branch 'main' into update-setup-python-action
c3dc91e CI: Update cache action to v4 (#4275)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [setuptools](https://github.com/pypa/setuptools) from 69.1.1 to 69.2.0. <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/pypa/setuptools/blob/main/NEWS.rst">setuptools's changelog</a>.</em></p> <blockquote> <h1>v69.2.0</h1> <h2>Features</h2> <ul> <li>Explicitly use <code>encoding="locale"</code> for <code>.pth</code> files whenever possible, to reduce <code>EncodingWarnings</code>. This avoid errors with UTF-8 (see discussion in <a href="https://redirect.github.com/python/cpython/issues/77102">python/cpython#77102</a>). (<a href="https://redirect.github.com/pypa/setuptools/issues/4265">#4265</a>)</li> </ul> <h2>Bugfixes</h2> <ul> <li>Clarify some <code>pkg_resources</code> methods return <code>bytes</code>, not <code>str</code>. Also return an empty <code>bytes</code> in <code>EmptyProvider._get</code> -- by :user:<code>Avasam</code> (<a href="https://redirect.github.com/pypa/setuptools/issues/4243">#4243</a>)</li> <li>Return an empty <code>list</code> by default in <code>pkg_resources.ResourceManager.cleanup_resources</code> -- by :user:<code>Avasam</code> (<a href="https://redirect.github.com/pypa/setuptools/issues/4244">#4244</a>)</li> <li>Made <code>pkg_resoursces.NullProvider</code>'s <code>has_metadata</code> and <code>metadata_isdir</code> methods return actual booleans like all other Providers. -- by :user:<code>Avasam</code> (<a href="https://redirect.github.com/pypa/setuptools/issues/4254">#4254</a>)</li> </ul> <h2>Misc</h2> <ul> <li><a href="https://redirect.github.com/pypa/setuptools/issues/4237">#4237</a>, <a href="https://redirect.github.com/pypa/setuptools/issues/4238">#4238</a>, <a href="https://redirect.github.com/pypa/setuptools/issues/4241">#4241</a>, <a href="https://redirect.github.com/pypa/setuptools/issues/4260">#4260</a>, <a href="https://redirect.github.com/pypa/setuptools/issues/4261">#4261</a>, <a href="https://redirect.github.com/pypa/setuptools/issues/4263">#4263</a></li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/pypa/setuptools/commit/6ee23bf0579c52e1cbe7c97fc20fd085ff2a25c7"><code>6ee23bf</code></a> Bump version: 69.1.1 → 69.2.0</li> <li><a href="https://github.com/pypa/setuptools/commit/35df7d0d7ecae0c8d6820261f48941f9a4825877"><code>35df7d0</code></a> Update upload-artefact action to v3 (<a href="https://redirect.github.com/pypa/setuptools/issues/4274">#4274</a>)</li> <li><a href="https://github.com/pypa/setuptools/commit/50f0459cbd195e548bdfecc08e567c54c76c7f44"><code>50f0459</code></a> Update .github/workflows/ci-sage.yml</li> <li><a href="https://github.com/pypa/setuptools/commit/c9e6b2ae2770286aeab5f95063eccb2dc6deb05a"><code>c9e6b2a</code></a> Update upload-artefact action to v4</li> <li><a href="https://github.com/pypa/setuptools/commit/9156fc0750c2f8927be32cc13835a89107475061"><code>9156fc0</code></a> Update cygwin-install-action to v4 (<a href="https://redirect.github.com/pypa/setuptools/issues/4269">#4269</a>)</li> <li><a href="https://github.com/pypa/setuptools/commit/e0cb8e8fb5e0561da909e22703d5c8a1ce4a0f1d"><code>e0cb8e8</code></a> Update cygwin-install-action</li> <li><a href="https://github.com/pypa/setuptools/commit/0badbf58189229a2f8b56c61fc860f68f674bd2b"><code>0badbf5</code></a> Update checkout action to v4 (<a href="https://redirect.github.com/pypa/setuptools/issues/4272">#4272</a>)</li> <li><a href="https://github.com/pypa/setuptools/commit/fe64b7001691b7f3da380a51ea8eb5a264624a2c"><code>fe64b70</code></a> Update setup-python action to v5 (<a href="https://redirect.github.com/pypa/setuptools/issues/4271">#4271</a>)</li> <li><a href="https://github.com/pypa/setuptools/commit/b40a70bee6934b50a84ba7cefbd828a99af76917"><code>b40a70b</code></a> Merge branch 'main' into update-setup-python-action</li> <li><a href="https://github.com/pypa/setuptools/commit/c3dc91e8927047c189fa08b2f733cf4ed45039a1"><code>c3dc91e</code></a> CI: Update cache action to v4 (<a href="https://redirect.github.com/pypa/setuptools/issues/4275">#4275</a>)</li> <li>Additional commits viewable in <a href="https://github.com/pypa/setuptools/compare/v69.1.1...v69.2.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=setuptools&package-manager=pip&previous-version=69.1.1&new-version=69.2.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details>

luketainton (Migrated from github.com) reviewed 2024-03-13 16:44:11 +01:00

sonarqubecloud[bot] commented

2024-03-13 23:42:20 +01:00

(Migrated from github.com)

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
No data about Coverage
No data about Duplication

See analysis details on SonarCloud

## [![Quality Gate Passed](https://sonarsource.github.io/sonarcloud-github-static-resources/v2/checks/QualityGateBadge/qg-passed-20px.png 'Quality Gate Passed')](https://sonarcloud.io/dashboard?id=luketainton_webexmemebot&pullRequest=180) **Quality Gate passed** Issues ![](https://sonarsource.github.io/sonarcloud-github-static-resources/v2/common/passed-16px.png '') [0 New issues](https://sonarcloud.io/project/issues?id=luketainton_webexmemebot&pullRequest=180&resolved=false&inNewCodePeriod=true) ![](https://sonarsource.github.io/sonarcloud-github-static-resources/v2/common/accepted-16px.png '') [0 Accepted issues](https://sonarcloud.io/component_measures?id=luketainton_webexmemebot&pullRequest=180&metric=new_accepted_issues&view=list) Measures ![](https://sonarsource.github.io/sonarcloud-github-static-resources/v2/common/passed-16px.png '') [0 Security Hotspots](https://sonarcloud.io/project/security_hotspots?id=luketainton_webexmemebot&pullRequest=180&resolved=false&inNewCodePeriod=true) ![](https://sonarsource.github.io/sonarcloud-github-static-resources/v2/common/no-data-16px.png '') No data about Coverage ![](https://sonarsource.github.io/sonarcloud-github-static-resources/v2/common/no-data-16px.png '') No data about Duplication [See analysis details on SonarCloud](https://sonarcloud.io/dashboard?id=luketainton_webexmemebot&pullRequest=180)

Sign in to join this conversation.

No reviewers

luketainton