Bump the allpip group with 7 updates

[dependabot]

Bumps the allpip group with 7 updates:

Package	From	To
fastapi	0.114.2	0.115.0
pydantic	2.9.1	2.9.2
sqlalchemy	2.0.34	2.0.35
pytest-httpx	0.30.0	0.31.1
ruff	0.6.5	0.6.7
pyright	1.1.380	1.1.381
types-pyyaml	6.0.12.20240808	6.0.12.20240917

Updates fastapi from 0.114.2 to 0.115.0

Release notes

Sourced from fastapi's releases.

0.115.0

Highlights

Now you can declare Query, Header, and Cookie parameters with Pydantic models. 🎉

Query Parameter Models

Use Pydantic models for Query parameters:

from typing import Annotated, Literal
from fastapi import FastAPI, Query
from pydantic import BaseModel, Field
app = FastAPI()
class FilterParams(BaseModel):
limit: int = Field(100, gt=0, le=100)
offset: int = Field(0, ge=0)
order_by: Literal["created_at", "updated_at"] = "created_at"
tags: list[str] = []
@​app.get("/items/")
async def read_items(filter_query: Annotated[FilterParams, Query()]):
return filter_query

Read the new docs: Query Parameter Models.

Header Parameter Models

Use Pydantic models for Header parameters:

from typing import Annotated
from fastapi import FastAPI, Header
from pydantic import BaseModel
app = FastAPI()
class CommonHeaders(BaseModel):
host: str
save_data: bool
if_modified_since: str | None = None
traceparent: str | None = None
</tr></table>

... (truncated)

Commits

• 40e33e4 🔖 Release version 0.115.0
• b36047b 📝 Update release notes
• 7eadeb6 📝 Update release notes
• 55035f4 ✨ Add support for Pydantic models for parameters using Query, Cookie, `He...
• 0903da7 📝 Update release notes
• 4b2b14a ⬆ [pre-commit.ci] pre-commit autoupdate (#12204)
• 35df20c 📝 Update release notes
• 8eb3c56 🌐 Add Portuguese translation for `docs/pt/docs/advanced/security/http-basic-a...
• See full diff in compare view

Updates pydantic from 2.9.1 to 2.9.2

Release notes

Sourced from pydantic's releases.

v2.9.2 (2024-09-17)

What's Changed

Fixes

• Do not error when trying to evaluate annotations of private attributes by @​Viicos in #10358
• Adding notes on designing sound Callable discriminators by @​sydney-runkle in #10400
• Fix serialization schema generation when using PlainValidator by @​Viicos in #10427
• Fix Union serialization warnings by @​sydney-runkle in pydantic/pydantic-core#1449
• Fix variance issue in _IncEx type alias, only allow True by @​Viicos in #10414
• Fix ZoneInfo validation with various invalid types by @​sydney-runkle in #10408

Full Changelog: pydantic/pydantic@v2.9.1...v2.9.2

Changelog

Sourced from pydantic's changelog.

v2.9.2 (2024-09-17)

GitHub release

What's Changed

Fixes

• Do not error when trying to evaluate annotations of private attributes by @​Viicos in #10358
• Adding notes on designing sound Callable discriminators by @​sydney-runkle in #10400
• Fix serialization schema generation when using PlainValidator by @​Viicos in #10427
• Fix Union serialization warnings by @​sydney-runkle in pydantic/pydantic-core#1449
• Fix variance issue in _IncEx type alias, only allow True by @​Viicos in #10414
• Fix ZoneInfo validation with various invalid types by @​sydney-runkle in #10408

Commits

• 7cedbfb history updates
• 7eab2b8 v bump
• c0a288f Fix ZoneInfo with various invalid types (#10408)
• ea6115d Fix variance issue in _IncEx type alias, only allow True (#10414)
• fbfe25a Fix serialization schema generation when using PlainValidator (#10427)
• 26cff3c Adding notes on designing callable discriminators (#10400)
• 8a0e7ad Do not error when trying to evaluate annotations of private attributes (#10358)
• See full diff in compare view

Updates sqlalchemy from 2.0.34 to 2.0.35

Release notes

Sourced from sqlalchemy's releases.

2.0.35

Released: September 16, 2024

orm

• [orm] [bug] [typing] Fixed issue where it was not possible to use typing.Literal with Mapped[] on Python 3.8 and 3.9. Pull request courtesy Frazer McLean.

  References: #11820

• [orm] [bug] Fixed issue in ORM evaluator where two datatypes being evaluated with the SQL concatenator operator would not be checked for UnevaluatableError based on their datatype; this missed the case of _postgresql.JSONB values being used in a concatenate operation which is supported by PostgreSQL as well as how SQLAlchemy renders the SQL for this operation, but does not work at the Python level. By implementing UnevaluatableError for this combination, ORM update statements will now fall back to "expire" when a concatenated JSON value used in a SET clause is to be synchronized to a Python object.

  References: #11849

• [orm] [bug] An warning is emitted if _orm.joinedload() or _orm.subqueryload() are used as a top level option against a statement that is not a SELECT statement, such as with an insert().returning(). There are no JOINs in INSERT statements nor is there a "subquery" that can be repurposed for subquery eager loading, and for UPDATE/DELETE joinedload does not support these either, so it is never appropriate for this use to pass silently.

  References: #11853

• [orm] [bug] Fixed issue where using loader options such as _orm.selectinload() with additional criteria in combination with ORM DML such as _sql.insert() with RETURNING would not correctly set up internal contexts required for caching to work correctly, leading to incorrect results.

  References: #11855

mysql

• [mysql] [bug] Fixed issue in mariadbconnector dialect where query string arguments that weren't checked integer or boolean arguments would be ignored, such as string arguments like unix_socket, etc. As part of this change, the argument parsing for particular elements such as client_flags, compress, local_infile has been made more consistent across all

... (truncated)

Commits

• See full diff in compare view

Updates pytest-httpx from 0.30.0 to 0.31.1

Release notes

Sourced from pytest-httpx's releases.

0.31.1 (2024-09-22)

Fixed

• It is now possible to match on content provided as async iterable by the client.

0.31.0 (2024-09-20)

Changed

• Tests will now fail at teardown by default if some requests were issued but were not matched.
  • This behavior can be changed thanks to the new pytest.mark.httpx_mock(assert_all_requests_were_expected=False) option.
• The httpx_mock fixture is now configured using a marker (many thanks to Frazer McLean).

  # Apply marker to whole module
  pytestmark = pytest.mark.httpx_mock(assert_all_responses_were_requested=False)
  Or to specific tests
  @​pytest.mark.httpx_mock(non_mocked_hosts=[...])
  def test_foo(httpx_mock):
  ...

  • The following options are available:
    • assert_all_responses_were_requested (boolean), defaulting to True.
    • assert_all_requests_were_expected (boolean), defaulting to True.
    • non_mocked_hosts (iterable), defaulting to an empty list, meaning all hosts are mocked.
• httpx_mock.reset do not expect any parameter anymore and will only reset the mock state (no assertions will be performed).

Removed

• pytest 7 is not supported anymore (pytest 8 has been out for 9 months already).
• assert_all_responses_were_requested fixture is not available anymore, use pytest.mark.httpx_mock(assert_all_responses_were_requested=False) instead.
• non_mocked_hosts fixture is not available anymore, use pytest.mark.httpx_mock(non_mocked_hosts=[]) instead.

Changelog

Sourced from pytest-httpx's changelog.

[0.31.1] - 2024-09-22

Fixed

• It is now possible to match on content provided as async iterable by the client.

[0.31.0] - 2024-09-20

Changed

• Tests will now fail at teardown by default if some requests were issued but were not matched.
  • This behavior can be changed thanks to the new pytest.mark.httpx_mock(assert_all_requests_were_expected=False) option.
• The httpx_mock fixture is now configured using a marker (many thanks to Frazer McLean).

  # Apply marker to whole module
  pytestmark = pytest.mark.httpx_mock(assert_all_responses_were_requested=False)
  Or to specific tests
  @​pytest.mark.httpx_mock(non_mocked_hosts=[...])
  def test_foo(httpx_mock):
  ...

  • The following options are available:
    • assert_all_responses_were_requested (boolean), defaulting to True.
    • assert_all_requests_were_expected (boolean), defaulting to True.
    • non_mocked_hosts (iterable), defaulting to an empty list, meaning all hosts are mocked.
• httpx_mock.reset do not expect any parameter anymore and will only reset the mock state (no assertions will be performed).

Removed

• pytest 7 is not supported anymore (pytest 8 has been out for 9 months already).
• assert_all_responses_were_requested fixture is not available anymore, use pytest.mark.httpx_mock(assert_all_responses_were_requested=False) instead.
• non_mocked_hosts fixture is not available anymore, use pytest.mark.httpx_mock(non_mocked_hosts=[]) instead.

Commits

• 75c308e Merge pull request #153 from Colin-b/develop
• ca067b4 Merge branch 'master' into develop
• d906a89 Merge pull request #152 from Colin-b/bugfix/iter_content
• 6eddd05 Remove dead code
• 29eb9c3 Bump version
• cb820a2 Allow to match on client provided async iterable content
• 26a374e Merge pull request #151 from Colin-b/develop
• 414fb36 Merge remote-tracking branch 'origin/master' into develop
• ddad01b Release version 0.31.0 today
• bc1a05d Keep number of test cases up to date
• Additional commits viewable in compare view

Updates ruff from 0.6.5 to 0.6.7

Release notes

Sourced from ruff's releases.

0.6.7

Release Notes

Preview features

• Add Python version support to ruff analyze CLI (#13426)
• Add exclude support to ruff analyze (#13425)
• Fix parentheses around return type annotations (#13381)

Rule changes

• [pycodestyle] Fix: Don't autofix if the first line ends in a question mark? (D400) (#13399)

Bug fixes

• Respect lint.exclude in ruff check --add-noqa (#13427)

Performance

• Avoid tracking module resolver files in Salsa (#13437)
• Use forget for module resolver database (#13438)

Install ruff 0.6.7

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://github.com/astral-sh/ruff/releases/download/0.6.7/ruff-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy ByPass -c "irm https://github.com/astral-sh/ruff/releases/download/0.6.7/ruff-installer.ps1 | iex"

Download ruff 0.6.7

File	Platform	Checksum
ruff-aarch64-apple-darwin.tar.gz	Apple Silicon macOS	checksum
ruff-x86_64-apple-darwin.tar.gz	Intel macOS	checksum
ruff-aarch64-pc-windows-msvc.zip	ARM64 Windows	checksum
ruff-i686-pc-windows-msvc.zip	x86 Windows	checksum
ruff-x86_64-pc-windows-msvc.zip	x64 Windows	checksum
ruff-aarch64-unknown-linux-gnu.tar.gz	ARM64 Linux	checksum
ruff-i686-unknown-linux-gnu.tar.gz	x86 Linux	checksum
ruff-powerpc64-unknown-linux-gnu.tar.gz	PPC64 Linux	checksum
ruff-powerpc64le-unknown-linux-gnu.tar.gz	PPC64LE Linux	checksum
ruff-s390x-unknown-linux-gnu.tar.gz	S390x Linux	checksum

... (truncated)

Changelog

Sourced from ruff's changelog.

0.6.7

Preview features

• Add Python version support to ruff analyze CLI (#13426)
• Add exclude support to ruff analyze (#13425)
• Fix parentheses around return type annotations (#13381)

Rule changes

• [pycodestyle] Fix: Don't autofix if the first line ends in a question mark? (D400) (#13399)

Bug fixes

• Respect lint.exclude in ruff check --add-noqa (#13427)

Performance

• Avoid tracking module resolver files in Salsa (#13437)
• Use forget for module resolver database (#13438)

0.6.6

Preview features

• [refurb] Skip slice-to-remove-prefix-or-suffix (FURB188) when non-trivial slice steps are present (#13405)
• Add a subcommand to generate dependency graphs (#13402)

Formatter

• Fix placement of inline parameter comments (#13379)

Server

• Fix off-by one error in the LineIndex::offset calculation (#13407)

Bug fixes

• [fastapi] Respect FastAPI aliases in route definitions (#13394)
• [pydocstyle] Respect word boundaries when detecting function signature in docs (#13388)

Documentation

• Add backlinks to rule overview linter (#13368)
• Fix documentation for editor vim plugin ALE (#13348)
• Fix rendering of FURB188 docs (#13406)

Commits

• 17c4690 Bump version to v0.6.7 (#13439)
• f06d44e Use forget for module resolver database (#13438)
• 653c090 Use an empty vendored file system in Ruff (#13436)
• 8921fbb vendored_typeshed_versions should use db.vendored (#13434)
• 3018303 Avoid parsing with Salsa (#13437)
• 6c303b2 red-knot: Add not unary operator for boolean literals (#13422)
• 7579a79 Add test coverage for non-Python globs (#13430)
• 0bbc138 Upgrade to latest cargo-dist version (#13416)
• ff11db6 Add Python version support to ruff analyze CLI (#13426)
• 2823487 Respect lint.exclude in ruff check --add-noqa (#13427)
• Additional commits viewable in compare view

Updates pyright from 1.1.380 to 1.1.381

Commits

• 7b5b8e8 Pyright NPM Package update to 1.1.381 (#295)
• See full diff in compare view

Updates types-pyyaml from 6.0.12.20240808 to 6.0.12.20240917

Commits

• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions