Bump the pypi group across 1 directory with 5 updates

[dependabot]

Bumps the pypi group with 5 updates in the / directory:

Package	From	To
internetarchive	3.6.0	4.1.0
jsonpickle	3.0.2	3.0.4
jsonschema	4.21.1	4.22.0
requests[security]	2.31.0	2.32.2
pytest	8.0.1	8.2.1

Updates internetarchive from 3.6.0 to 4.1.0

Release notes

Sourced from internetarchive's releases.

Version 4.1.0

What's Changed

• Add refresh opt-out on Item.modify_metadata() by @​DuncanDHall in jjjake/internetarchive#643
• Use mtime from files.xml if no Last-Modified header is available (e.g. VTT files) by @​jjjake in jjjake/internetarchive@903a833

Full Changelog: jjjake/internetarchive@v4.0.1...v4.1.0

Version 4.0.1

Features and Improvements

• Partially downloaded files will now automatically resume where they left off when retried.
• Use Last-Modified header to set all mtimes (this includes files.xml now).

Version 3.7.0

Features and Improvements

• Added support for JSON Patch test operations, via the expect parameter.
• Added support for moving values via --append-list (Now, rather than ignoring any requests where the value is already present, --append-list will move the value to the end of the list).
• Switched to importlib-metadata to drop deprecated pkg_resources.

Bugfixes

• Fixed automatic size hint on uploads.
• Fixed bug where auth wasn't being sent for searches with user_aggs params.

Changelog

Sourced from internetarchive's changelog.

4.1.0 (2024-05-07) ++++++++++++++++++

Bugfixes

• Use mtime from files.xml if no Last-Modified header is available (e.g. VTT files).

4.0.1 (2024-04-15) ++++++++++++++++++

Features and Improvements

• Partially downloaded files will now automatically resume where they left off when retried.
• Use Last-Modified header to set all mtimes (this includes files.xml now).

3.7.0 (2024-03-19) ++++++++++++++++++

Features and Improvements

• Added support for JSON Patch test operations, via the expect parameter.
• Added support for moving values via --append-list (Now, rather than ignoring any requests where the value is already present, --append-list will move the value to the end of the list).
• Switched to importlib-metadata to drop deprecated pkg_resources.

Bugfixes

• Fixed automatic size hint on uploads.
• Fixed bug where auth wasn't being sent for searches with user_aggs params.

Commits

• 445d1d2 v4.1.0
• e638d46 v4.1.0
• 903a833 Use mtime from files.xml if no Last-Modified header is available
• d8f2cc3 Merge pull request #643 from DuncanDHall/skip-refresh
• 894b736 Correct RequestsMock expectations
• c17a9cd Add refresh opt-out on Item.modify_metadata()
• ac05934 Updated publish
• be9cb2e v4.0.1
• 06d66ec v4.0.1
• 7a895b1 Move md5 check outside of with statement
• Additional commits viewable in compare view

Updates jsonpickle from 3.0.2 to 3.0.4

Changelog

Sourced from jsonpickle's changelog.

v3.0.4

* Fixed an issue with django.SafeString and other classes inheriting from
  str having read-only attribute errors ([#478](https://github.com/jsonpickle/jsonpickle/issues/478)) (+481)
* The test suite was made compatible with `pytest-ruff>=0.3.0`. (+482)
* A `garden.yaml` file was added for use with the
  `garden <https://crates.io/crates/garden-tools>_` command runner. (+486)
* The test suite was updated to avoid deprecated SQLALchemy APIs.
* The `jaraco.packaging.sphinx` documentation dependency was removed.

v3.0.3

* Compatibilty with Pandas and Cython 3.0 was added. ([#460](https://github.com/jsonpickle/jsonpickle/issues/460)) (+477)
* Fixed a bug where pickling some built-in classes (e.g. zoneinfo) 
  could return a ``None`` module. ([#447](https://github.com/jsonpickle/jsonpickle/issues/447))
* Fixed a bug where unpickling a missing class would return a different object
  instead of ``None``. (+471)
* Fixed the handling of missing classes when setting ``on_missing`` to ``warn``
  or ``error``. (+471)
* The test suite was made compatible with Python 3.12.
* The tox configuration was updated to generate code coverage reports.
* The suite now uses ``ruff`` to validate python code.
* The documentation can now be built offline when ``rst.linker`` and
  ``jaraco.packaging.sphinx`` are not available.

Commits

• d047e45 jsonpickle v3.0.4
• feb82e2 setup.cfg: adjust formatting to fix publishing
• e8e5431 garden: add "wheel" and "publish" commands
• 1ae9034 packaging: remove unnecessary setup.py
• 60b6dc7 garden: add virtualenvs to the garden commands
• ea2eb5c setup.cfg: fix tab indentation
• 016291f docs: drop the jaraco.packaging.sphinx documentation dependency
• cb9077b CHANGES: remove references that cause documentation warnings
• 6a5f90f garden: add "clean" command
• 9983238 garden: add "check" command
• Additional commits viewable in compare view

Updates jsonschema from 4.21.1 to 4.22.0

Release notes

Sourced from jsonschema's releases.

v4.22.0

What's Changed

• Improve best_match (and thereby error messages from jsonschema.validate) in cases where there are multiple sibling errors from applying anyOf / allOf -- i.e. when multiple elements of a JSON array have errors, we now do prefer showing errors from earlier elements rather than simply showing an error for the full array (#1250).
• (Micro-)optimize equality checks when comparing for JSON Schema equality by first checking for object identity, as == would.

New Contributors

• @​shinnar made their first contribution in python-jsonschema/jsonschema#1224

Full Changelog: python-jsonschema/jsonschema@v4.21.1...v4.22.0

Changelog

Sourced from jsonschema's changelog.

v4.22.0

• Improve best_match (and thereby error messages from jsonschema.validate) in cases where there are multiple sibling errors from applying anyOf / allOf -- i.e. when multiple elements of a JSON array have errors, we now do prefer showing errors from earlier elements rather than simply showing an error for the full array (#1250).
• (Micro-)optimize equality checks when comparing for JSON Schema equality by first checking for object identity, as == would.

Commits

• 9882dbe Add / ignore the new specification test suite property.
• ebc90bb Merge commit '8fcfc3a674a7188a4fcc822b7a91efb3e0422a20'
• 8fcfc3a Squashed 'json/' changes from b41167c74..54f3784a8
• 30b7537 Pin pyenchant to pre from below until pyenchant/pyenchant#302 is released.
• c3729db Enable doctests for the rest of the referencing page.
• 70a994c Remove a now-unneeded noqa since apparently this is fixed in new ruff.
• e6d0ef1 Fix a minor typo in the referencing example docs.
• bceaf41 Another placeholder benchmark for future optimization.
• b20234e Consider errors from earlier indices (in instances) to be better matches
• 41b49c6 Minor improvement to test failure message when a best match test fails.
• Additional commits viewable in compare view

Updates requests[security] from 2.31.0 to 2.32.2

Release notes

Sourced from requests[security]'s releases.

v2.32.2

2.32.2 (2024-05-21)

Deprecations

• To provide a more stable migration for custom HTTPAdapters impacted by the CVE changes in 2.32.0, we've renamed _get_connection to a new public API, get_connection_with_tls_context. Existing custom HTTPAdapters will need to migrate their code to use this new API. get_connection is considered deprecated in all versions of Requests>=2.32.0.

  A minimal (2-line) example has been provided in the linked PR to ease migration, but we strongly urge users to evaluate if their custom adapter is subject to the same issue described in CVE-2024-35195. (#6710)

v2.32.1

2.32.1 (2024-05-20)

Bugfixes

• Add missing test certs to the sdist distributed on PyPI.

v2.32.0

2.32.0 (2024-05-20)

🐍 PYCON US 2024 EDITION 🐍

Security

• Fixed an issue where setting verify=False on the first request from a Session will cause subsequent requests to the same origin to also ignore cert verification, regardless of the value of verify. (GHSA-9wx4-h78v-vm56)

Improvements

• verify=True now reuses a global SSLContext which should improve request time variance between first and subsequent requests. It should also minimize certificate load time on Windows systems when using a Python version built with OpenSSL 3.x. (#6667)
• Requests now supports optional use of character detection (chardet or charset_normalizer) when repackaged or vendored. This enables pip and other projects to minimize their vendoring surface area. The Response.text() and apparent_encoding APIs will default to utf-8 if neither library is present. (#6702)

Bugfixes

• Fixed bug in length detection where emoji length was incorrectly calculated in the request content-length. (#6589)
• Fixed deserialization bug in JSONDecodeError. (#6629)
• Fixed bug where an extra leading / (path separator) could lead urllib3 to unnecessarily reparse the request URI. (#6644)

... (truncated)

Changelog

Sourced from requests[security]'s changelog.

2.32.2 (2024-05-21)

Deprecations

• To provide a more stable migration for custom HTTPAdapters impacted by the CVE changes in 2.32.0, we've renamed _get_connection to a new public API, get_connection_with_tls_context. Existing custom HTTPAdapters will need to migrate their code to use this new API. get_connection is considered deprecated in all versions of Requests>=2.32.0.

  A minimal (2-line) example has been provided in the linked PR to ease migration, but we strongly urge users to evaluate if their custom adapter is subject to the same issue described in CVE-2024-35195. (#6710)

2.32.1 (2024-05-20)

Bugfixes

• Add missing test certs to the sdist distributed on PyPI.

2.32.0 (2024-05-20)

Security

• Fixed an issue where setting verify=False on the first request from a Session will cause subsequent requests to the same origin to also ignore cert verification, regardless of the value of verify. (GHSA-9wx4-h78v-vm56)

Improvements

• verify=True now reuses a global SSLContext which should improve request time variance between first and subsequent requests. It should also minimize certificate load time on Windows systems when using a Python version built with OpenSSL 3.x. (#6667)
• Requests now supports optional use of character detection (chardet or charset_normalizer) when repackaged or vendored. This enables pip and other projects to minimize their vendoring surface area. The Response.text() and apparent_encoding APIs will default to utf-8 if neither library is present. (#6702)

Bugfixes

• Fixed bug in length detection where emoji length was incorrectly calculated in the request content-length. (#6589)
• Fixed deserialization bug in JSONDecodeError. (#6629)
• Fixed bug where an extra leading / (path separator) could lead urllib3 to unnecessarily reparse the request URI. (#6644)

Deprecations

... (truncated)

Commits

• 88dce9d v2.32.2
• c98e4d1 Merge pull request #6710 from nateprewitt/api_rename
• 92075b3 Add deprecation warning
• aa1461b Move _get_connection to get_connection_with_tls_context
• 970e8ce v2.32.1
• d6ebc4a v2.32.0
• 9a40d12 Avoid reloading root certificates to improve concurrent performance (#6667)
• 0c030f7 Merge pull request #6702 from nateprewitt/no_char_detection
• 555b870 Allow character detection dependencies to be optional in post-packaging steps
• d6dded3 Merge pull request #6700 from franekmagiera/update-redirect-to-invalid-uri-test
• Additional commits viewable in compare view

Updates pytest from 8.0.1 to 8.2.1

Release notes

Sourced from pytest's releases.

8.2.1

pytest 8.2.1 (2024-05-19)

Improvements

• #12334: Support for Python 3.13 (beta1 at the time of writing).

Bug Fixes

• #12120: Fix [PermissionError]{.title-ref} crashes arising from directories which are not selected on the command-line.
• #12191: Keyboard interrupts and system exits are now properly handled during the test collection.
• #12300: Fixed handling of 'Function not implemented' error under squashfuse_ll, which is a different way to say that the mountpoint is read-only.
• #12308: Fix a regression in pytest 8.2.0 where the permissions of automatically-created .pytest_cache directories became rwx------ instead of the expected rwxr-xr-x.

Trivial/Internal Changes

• #12333: pytest releases are now attested using the recent Artifact Attestation support from GitHub, allowing users to verify the provenance of pytest's sdist and wheel artifacts.

8.2.0

pytest 8.2.0 (2024-04-27)

Deprecations

• #12069: A deprecation warning is now raised when implementations of one of the following hooks request a deprecated py.path.local parameter instead of the pathlib.Path parameter which replaced it:

  • pytest_ignore_collect{.interpreted-text role="hook"} - the path parameter - use collection_path instead.
  • pytest_collect_file{.interpreted-text role="hook"} - the path parameter - use file_path instead.
  • pytest_pycollect_makemodule{.interpreted-text role="hook"} - the path parameter - use module_path instead.
  • pytest_report_header{.interpreted-text role="hook"} - the startdir parameter - use start_path instead.
  • pytest_report_collectionfinish{.interpreted-text role="hook"} - the startdir parameter - use start_path instead.

  The replacement parameters are available since pytest 7.0.0. The old parameters will be removed in pytest 9.0.0.

  See legacy-path-hooks-deprecated{.interpreted-text role="ref"} for more details.

Features

• #11871: Added support for reading command line arguments from a file using the prefix character @, like e.g.: pytest @tests.txt. The file must have one argument per line.

  See Read arguments from file <args-from-file>{.interpreted-text role="ref"} for details.

Improvements

... (truncated)

Commits

• 66ff8df Prepare release version 8.2.1
• 3ffcfd1 Merge pull request #12340 from pytest-dev/backport-12334-to-8.2.x
• 0b28313 [8.2.x] Add Python 3.13 (beta) support
• f3dd93a [8.2.x] Attest package provenance (#12335)
• bb5a125 [8.2.x] Spelling (#12331)
• f179bf2 Merge pull request #12327 from pytest-dev/backport-12325-to-8.2.x
• 2b671b5 [8.2.x] cacheprovider: fix .pytest_cache not being world-readable
• 65ab7cb Merge pull request #12324 from pytest-dev/backport-12320-to-8.2.x
• 4d5fb7d Merge pull request #12319 from pytest-dev/backport-12311-to-8.2.x
• cbe5996 [8.2.x] changelog: document unittest 8.2 change as breaking
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Superseded by #413.