From 57b958eb7acc603d8b0f742d23f6f7b7a49ef60e Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu, 22 Aug 2024 11:47:55 +0000
Subject: [PATCH] Bump distlib from 0.3.7 to 0.3.8 (#8838)
Bumps [distlib](https://github.com/pypa/distlib) from 0.3.7 to 0.3.8.
Changelog
Sourced from distlib's
changelog.
0.3.8
Released: 2023-12-12
-
markers
- Fix #209: use
legacy version implementation for Python versions.
-
tests
Commits
ab5f8e7
Changes for 0.3.8.
86bb212
Update change log.
488599f
Updates based on flake8 checks.
0e261af
Use legacy version implementation for Python itself.
8242f39
Update copyright years.
e27569b
Fix #208:
Handle deprecation removals in Python 3.13.
65a014b
Update requirements and CI matrix.
124108a
Skip test for non-final Python versions.
ff48e09
Fix #206:
include tox.ini in sdist.
eeaa18d
Fix #204: Use
symlinks in venv creation during test.
- Additional commits viewable in compare
view
[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=distlib&package-manager=pip&previous-version=0.3.7&new-version=0.3.8)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
Signed-off-by: dependabot[bot]
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
requirements/dev.txt | 2 +-
requirements/lint.txt | 2 +-
2 files changed, 2 insertions(+), 2 deletions(-)
diff --git a/requirements/dev.txt b/requirements/dev.txt
index 078be0edf5e..6c6e238997b 100644
--- a/requirements/dev.txt
+++ b/requirements/dev.txt
@@ -62,7 +62,7 @@ cryptography==43.0.0
# via
# pyjwt
# trustme
-distlib==0.3.7
+distlib==0.3.8
# via virtualenv
docutils==0.20.1
# via sphinx
diff --git a/requirements/lint.txt b/requirements/lint.txt
index 589e1801dd5..ccc9d3cf43d 100644
--- a/requirements/lint.txt
+++ b/requirements/lint.txt
@@ -28,7 +28,7 @@ click==8.1.6
# typer
cryptography==43.0.0
# via trustme
-distlib==0.3.7
+distlib==0.3.8
# via virtualenv
exceptiongroup==1.1.2
# via pytest