chore(pip-dev)(deps-dev): bump setuptools from 75.4.0 to 75.5.0 #403

Merged
dependabot[bot] merged 1 commits from dependabot/pip/setuptools-75.5.0 into main 2024-11-13 16:54:22 +01:00
dependabot[bot] commented 2024-11-13 16:39:08 +01:00 (Migrated from github.com)

Bumps setuptools from 75.4.0 to 75.5.0.

Changelog

Sourced from setuptools's changelog.

v75.5.0

Features

  • Removed support for SETUPTOOLS_DANGEROUSLY_SKIP_PYPROJECT_VALIDATION, as it is deemed prone to errors. (#4746)
Commits
  • 5400015 Bump version: 75.4.0 → 75.5.0
  • 01b9f20 Add note about removed variable in NEWS.rst
  • 57ed6f0 Revert "Allow user to skip validation of pyproject.toml via env var" (#4746)
  • 36e945e Add news fragment
  • f6c9fdb Revert "Allow user to skip validation of pyproject.toml via env var"
  • See full diff in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
Bumps [setuptools](https://github.com/pypa/setuptools) from 75.4.0 to 75.5.0. <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/pypa/setuptools/blob/main/NEWS.rst">setuptools's changelog</a>.</em></p> <blockquote> <h1>v75.5.0</h1> <h2>Features</h2> <ul> <li>Removed support for <code>SETUPTOOLS_DANGEROUSLY_SKIP_PYPROJECT_VALIDATION</code>, as it is deemed prone to errors. (<a href="https://redirect.github.com/pypa/setuptools/issues/4746">#4746</a>)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/pypa/setuptools/commit/540001561bc2c6766940ba5fd6247735c1a3a290"><code>5400015</code></a> Bump version: 75.4.0 → 75.5.0</li> <li><a href="https://github.com/pypa/setuptools/commit/01b9f208110da1db8e8aec0debbffd15ea30a38c"><code>01b9f20</code></a> Add note about removed variable in NEWS.rst</li> <li><a href="https://github.com/pypa/setuptools/commit/57ed6f0e3967b5d6d7a0e7190a8465b38919c084"><code>57ed6f0</code></a> Revert &quot;Allow user to skip validation of pyproject.toml via env var&quot; (<a href="https://redirect.github.com/pypa/setuptools/issues/4746">#4746</a>)</li> <li><a href="https://github.com/pypa/setuptools/commit/36e945e5a12ed552b33c523ba8ede4fa5a38d553"><code>36e945e</code></a> Add news fragment</li> <li><a href="https://github.com/pypa/setuptools/commit/f6c9fdb5489ab49856cb1f4c237f02651c16b05f"><code>f6c9fdb</code></a> Revert &quot;Allow user to skip validation of pyproject.toml via env var&quot;</li> <li>See full diff in <a href="https://github.com/pypa/setuptools/compare/v75.4.0...v75.5.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=setuptools&package-manager=pip&previous-version=75.4.0&new-version=75.5.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details>
luketainton (Migrated from github.com) reviewed 2024-11-13 16:39:08 +01:00
sonarqubecloud[bot] commented 2024-11-13 16:42:00 +01:00 (Migrated from github.com)
## [![Quality Gate Passed](https://sonarsource.github.io/sonarcloud-github-static-resources/v2/checks/QualityGateBadge/qg-passed-20px.png 'Quality Gate Passed')](https://sonarcloud.io/dashboard?id=luketainton_webexmemebot&pullRequest=403) **Quality Gate passed** Issues ![](https://sonarsource.github.io/sonarcloud-github-static-resources/v2/common/passed-16px.png '') [0 New issues](https://sonarcloud.io/project/issues?id=luketainton_webexmemebot&pullRequest=403&issueStatuses=OPEN,CONFIRMED&sinceLeakPeriod=true) ![](https://sonarsource.github.io/sonarcloud-github-static-resources/v2/common/accepted-16px.png '') [0 Accepted issues](https://sonarcloud.io/project/issues?id=luketainton_webexmemebot&pullRequest=403&issueStatuses=ACCEPTED) Measures ![](https://sonarsource.github.io/sonarcloud-github-static-resources/v2/common/passed-16px.png '') [0 Security Hotspots](https://sonarcloud.io/project/security_hotspots?id=luketainton_webexmemebot&pullRequest=403&issueStatuses=OPEN,CONFIRMED&sinceLeakPeriod=true) ![](https://sonarsource.github.io/sonarcloud-github-static-resources/v2/common/passed-16px.png '') [0.0% Coverage on New Code](https://sonarcloud.io/component_measures?id=luketainton_webexmemebot&pullRequest=403&metric=new_coverage&view=list) ![](https://sonarsource.github.io/sonarcloud-github-static-resources/v2/common/passed-16px.png '') [0.0% Duplication on New Code](https://sonarcloud.io/component_measures?id=luketainton_webexmemebot&pullRequest=403&metric=new_duplicated_lines_density&view=list) [See analysis details on SonarQube Cloud](https://sonarcloud.io/dashboard?id=luketainton_webexmemebot&pullRequest=403)
Sign in to join this conversation.
No description provided.