chore(pip-prod)(deps): bump websockets from 11.0.3 to 13.0.1 #274

2024-08-29T16:54:31Z

dependabot[bot] commented

2024-08-29 16:54:31 +00:00

(Migrated from github.com)

Bumps websockets from 11.0.3 to 13.0.1.

Release notes

13.0.1

See https://websockets.readthedocs.io/en/stable/project/changelog.html for details.

13.0

See https://websockets.readthedocs.io/en/stable/project/changelog.html for details.

12.0

See https://websockets.readthedocs.io/en/stable/project/changelog.html for details.

Commits

157f790 Add provenance attestations.
62d70f4 Restore speedups.c in source distribution.
16456e2 Restore id-token permission.
ed2f21e Attempt to fix automatic creation of GitHub release.
323adef Migrate to actions/upload-artifact@v4.
f9c20d0 Avoid deleting .so files in .direnv or equivalent.
4d0e0e1 Build sdist and arch-independent wheel with build.
0019943 Release version 13.0.
12fa8bc Complete changelog with changes since 12.0.
9d355bf Remove unnecessary code paths in keepalive().
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [websockets](https://github.com/python-websockets/websockets) from 11.0.3 to 13.0.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/python-websockets/websockets/releases">websockets's releases</a>.</em></p> <blockquote> <h2>13.0.1</h2> <p>See <a href="https://websockets.readthedocs.io/en/stable/project/changelog.html">https://websockets.readthedocs.io/en/stable/project/changelog.html</a> for details.</p> <h2>13.0</h2> <p>See <a href="https://websockets.readthedocs.io/en/stable/project/changelog.html">https://websockets.readthedocs.io/en/stable/project/changelog.html</a> for details.</p> <h2>12.0</h2> <p>See <a href="https://websockets.readthedocs.io/en/stable/project/changelog.html">https://websockets.readthedocs.io/en/stable/project/changelog.html</a> for details.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/python-websockets/websockets/commit/157f7908c33cb540f7cf76568dde8aa6cf400504"><code>157f790</code></a> Add provenance attestations.</li> <li><a href="https://github.com/python-websockets/websockets/commit/62d70f4a8fb5e30d8744b1378659cc999deb0715"><code>62d70f4</code></a> Restore speedups.c in source distribution.</li> <li><a href="https://github.com/python-websockets/websockets/commit/16456e2bec3ad324d545c8eb5ea9d1eed583dea4"><code>16456e2</code></a> Restore id-token permission.</li> <li><a href="https://github.com/python-websockets/websockets/commit/ed2f21e3ce5bb494e0c9a51833b7da6692b5b9fc"><code>ed2f21e</code></a> Attempt to fix automatic creation of GitHub release.</li> <li><a href="https://github.com/python-websockets/websockets/commit/323adef1f3000cf07617d7ee649c27c0801126e6"><code>323adef</code></a> Migrate to actions/upload-artifact@v4.</li> <li><a href="https://github.com/python-websockets/websockets/commit/f9c20d0e4c9a25b66d4643879bc4594137036793"><code>f9c20d0</code></a> Avoid deleting .so files in .direnv or equivalent.</li> <li><a href="https://github.com/python-websockets/websockets/commit/4d0e0e10c6ebb779780a9e590667661381df78dc"><code>4d0e0e1</code></a> Build sdist and arch-independent wheel with build.</li> <li><a href="https://github.com/python-websockets/websockets/commit/0019943e551d285ec27c29315a23dcc959a2ec29"><code>0019943</code></a> Release version 13.0.</li> <li><a href="https://github.com/python-websockets/websockets/commit/12fa8bc8fcc03a120ceb05700905b6e4698df563"><code>12fa8bc</code></a> Complete changelog with changes since 12.0.</li> <li><a href="https://github.com/python-websockets/websockets/commit/9d355bfeb784e41b2a879645113c73c4560c9a91"><code>9d355bf</code></a> Remove unnecessary code paths in keepalive().</li> <li>Additional commits viewable in <a href="https://github.com/python-websockets/websockets/compare/11.0.3...13.0.1">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=websockets&package-manager=pip&previous-version=11.0.3&new-version=13.0.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details>

luketainton (Migrated from github.com) reviewed 2024-08-29 16:54:31 +00:00

luketainton commented

2024-09-02 12:21:28 +00:00

(Migrated from github.com)

Google Gemini AI Review

Decision: Accept

Change Score: 95%

The code change updates the websockets package from version 11.0.3 to 13.0.1. This is a good change as it upgrades the package to a newer version, which may include bug fixes and security improvements.

However, it is important to note that updating Python packages can sometimes break dependencies. Therefore, it is recommended to check all dependencies for compatibility after updating the websockets package.

*Google Gemini AI Review* **Decision: Accept** **Change Score: 95%** The code change updates the `websockets` package from version 11.0.3 to 13.0.1. This is a good change as it upgrades the package to a newer version, which may include bug fixes and security improvements. However, it is important to note that updating Python packages can sometimes break dependencies. Therefore, it is recommended to check all dependencies for compatibility after updating the `websockets` package.

dependabot[bot] commented

2024-09-23 16:42:08 +00:00

(Migrated from github.com)

Superseded by #291.

Pull request closed

This pull request cannot be reopened because the branch was deleted.

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: repos/roboluke#274