Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[pull] main from pypi:main #2305

Open
wants to merge 1,229 commits into
base: main
Choose a base branch
from
Open

[pull] main from pypi:main #2305

wants to merge 1,229 commits into from

Conversation

pull[bot]
Copy link

@pull pull bot commented Feb 24, 2023 •
edited
Loading

See Commits and Changes for more details.

Created by pull[bot]

Can you help keep this open source service alive? 💖 Please sponsor : )

@pull pull bot added the ⤵️ pull label Feb 24, 2023
di and others added 28 commits July 2, 2024 10:27
@di
Remove view statistics blurb (#16198)
fb07777 
* Remove statistics blurb

* Add statstic links to /stats page

* Update translations
@woodruffw @miketheman @DarkaMaul
Parallelize the unit tests (#16206)
69f8cb1 
Co-authored-by: Mike Fiedler <miketheman@gmail.com>
Co-authored-by: Alexis <alexis.challande@trailofbits.com>
@warsaw @SurenNihalani @di
Document the project and file upload limits in pypi on the FAQ page (#…
16c9bce 
…16200)

* Document the project and file upload limits in pypi on the FAQ page

* Test it

* Add license

* sort

* Test config

* make translations

* Update warehouse/templates/pages/help.html

* Update translations

---------

Co-authored-by: Suren Nihalani <1093911+SurenNihalani@users.noreply.github.com>
Co-authored-by: Dustin Ingram <di@users.noreply.github.com>
@di
Update admin template to use ONE_MIB (#16208)
679dd63
@di
Update ONE_GB to ONE_GIB (#16209)
83b0c6d
@woodruffw
routes: update ToU route + test (#16210)
65033eb
@pypi-combine-prs @dependabot
Combined PRs (#16219)
15de759 
* chore(deps): bump node from 22.3.0-bookworm to 22.4.0-bookworm

Bumps node from 22.3.0-bookworm to 22.4.0-bookworm.

---
updated-dependencies:
- dependency-name: node
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

* chore(deps): bump pillow from 10.3.0 to 10.4.0

Bumps [pillow](https://github.com/python-pillow/Pillow) from 10.3.0 to 10.4.0.
- [Release notes](https://github.com/python-pillow/Pillow/releases)
- [Changelog](https://github.com/python-pillow/Pillow/blob/main/CHANGES.rst)
- [Commits](python-pillow/Pillow@10.3.0...10.4.0)

---
updated-dependencies:
- dependency-name: pillow
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

* chore(deps): bump trove-classifiers from 2024.5.22 to 2024.7.2

Bumps [trove-classifiers](https://github.com/pypa/trove-classifiers) from 2024.5.22 to 2024.7.2.
- [Release notes](https://github.com/pypa/trove-classifiers/releases)
- [Commits](pypa/trove-classifiers@2024.5.22...2024.7.2)

---
updated-dependencies:
- dependency-name: trove-classifiers
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

* chore(deps): bump google-auth from 2.30.0 to 2.31.0

Bumps [google-auth](https://github.com/googleapis/google-auth-library-python) from 2.30.0 to 2.31.0.
- [Release notes](https://github.com/googleapis/google-auth-library-python/releases)
- [Changelog](https://github.com/googleapis/google-auth-library-python/blob/main/CHANGELOG.md)
- [Commits](googleapis/google-auth-library-python@v2.30.0...v2.31.0)

---
updated-dependencies:
- dependency-name: google-auth
  dependency-type: indirect
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

* chore(deps): bump setuptools from 70.1.1 to 70.2.0

Bumps [setuptools](https://github.com/pypa/setuptools) from 70.1.1 to 70.2.0.
- [Release notes](https://github.com/pypa/setuptools/releases)
- [Changelog](https://github.com/pypa/setuptools/blob/main/NEWS.rst)
- [Commits](pypa/setuptools@v70.1.1...v70.2.0)

---
updated-dependencies:
- dependency-name: setuptools
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

* chore(deps): bump pydantic from 2.7.4 to 2.8.0

Bumps [pydantic](https://github.com/pydantic/pydantic) from 2.7.4 to 2.8.0.
- [Release notes](https://github.com/pydantic/pydantic/releases)
- [Changelog](https://github.com/pydantic/pydantic/blob/main/HISTORY.md)
- [Commits](pydantic/pydantic@v2.7.4...v2.8.0)

---
updated-dependencies:
- dependency-name: pydantic
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

* chore(deps): bump pytest-xdist from 3.5.0 to 3.6.1

Bumps [pytest-xdist](https://github.com/pytest-dev/pytest-xdist) from 3.5.0 to 3.6.1.
- [Release notes](https://github.com/pytest-dev/pytest-xdist/releases)
- [Changelog](https://github.com/pytest-dev/pytest-xdist/blob/master/CHANGELOG.rst)
- [Commits](pytest-dev/pytest-xdist@v3.5.0...v3.6.1)

---
updated-dependencies:
- dependency-name: pytest-xdist
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

* chore(deps): bump mkdocs-rss-plugin from 1.14.0 to 1.15.0

Bumps [mkdocs-rss-plugin](https://github.com/Guts/mkdocs-rss-plugin) from 1.14.0 to 1.15.0.
- [Release notes](https://github.com/Guts/mkdocs-rss-plugin/releases)
- [Changelog](https://github.com/Guts/mkdocs-rss-plugin/blob/main/CHANGELOG.md)
- [Commits](Guts/mkdocs-rss-plugin@1.14.0...1.15.0)

---
updated-dependencies:
- dependency-name: mkdocs-rss-plugin
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

* chore(deps): bump execnet from 2.0.2 to 2.1.1

Bumps [execnet](https://github.com/pytest-dev/execnet) from 2.0.2 to 2.1.1.
- [Changelog](https://github.com/pytest-dev/execnet/blob/master/CHANGELOG.rst)
- [Commits](pytest-dev/execnet@v2.0.2...v2.1.1)

---
updated-dependencies:
- dependency-name: execnet
  dependency-type: indirect
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

* chore(deps): bump mkdocs-material from 9.5.27 to 9.5.28

Bumps [mkdocs-material](https://github.com/squidfunk/mkdocs-material) from 9.5.27 to 9.5.28.
- [Release notes](https://github.com/squidfunk/mkdocs-material/releases)
- [Changelog](https://github.com/squidfunk/mkdocs-material/blob/master/CHANGELOG)
- [Commits](squidfunk/mkdocs-material@9.5.27...9.5.28)

---
updated-dependencies:
- dependency-name: mkdocs-material
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

* chore(deps): bump orjson from 3.10.5 to 3.10.6

Bumps [orjson](https://github.com/ijl/orjson) from 3.10.5 to 3.10.6.
- [Release notes](https://github.com/ijl/orjson/releases)
- [Changelog](https://github.com/ijl/orjson/blob/master/CHANGELOG.md)
- [Commits](ijl/orjson@3.10.5...3.10.6)

---
updated-dependencies:
- dependency-name: orjson
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

* chore(deps): bump disposable-email-domains from 0.0.103 to 0.0.104

Bumps [disposable-email-domains](https://github.com/disposable-email-domains/disposable-email-domains) from 0.0.103 to 0.0.104.
- [Commits](https://github.com/disposable-email-domains/disposable-email-domains/commits)

---
updated-dependencies:
- dependency-name: disposable-email-domains
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

* chore(deps): bump certifi from 2024.6.2 to 2024.7.4

Bumps [certifi](https://github.com/certifi/python-certifi) from 2024.6.2 to 2024.7.4.
- [Commits](certifi/python-certifi@2024.06.02...2024.07.04)

---
updated-dependencies:
- dependency-name: certifi
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

* chore(deps): bump types-awscrt from 0.20.12 to 0.21.0

Bumps [types-awscrt](https://github.com/youtype/types-awscrt) from 0.20.12 to 0.21.0.
- [Release notes](https://github.com/youtype/types-awscrt/releases)
- [Commits](https://github.com/youtype/types-awscrt/commits)

---
updated-dependencies:
- dependency-name: types-awscrt
  dependency-type: indirect
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

* chore(deps): bump types-setuptools

Bumps [types-setuptools](https://github.com/python/typeshed) from 70.1.0.20240627 to 70.2.0.20240704.
- [Commits](https://github.com/python/typeshed/commits)

---
updated-dependencies:
- dependency-name: types-setuptools
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: pypi-combine-prs[bot] <144945619+pypi-combine-prs[bot]@users.noreply.github.com>
@miketheman
fix: use correct case for ToU link (#16231)
ee0a453
@ewdurbin
Publish blog regarding leaked personal access token (#16232)
cd0c0a5
@pypi-combine-prs @dependabot
Combined PRs (#16233)
1775af7 
* chore(deps): bump pydantic from 2.7.4 to 2.8.2

Bumps [pydantic](https://github.com/pydantic/pydantic) from 2.7.4 to 2.8.2.
- [Release notes](https://github.com/pydantic/pydantic/releases)
- [Changelog](https://github.com/pydantic/pydantic/blob/v2.8.2/HISTORY.md)
- [Commits](pydantic/pydantic@v2.7.4...v2.8.2)

---
updated-dependencies:
- dependency-name: pydantic
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

* chore(deps): bump tenacity from 8.4.2 to 8.5.0

Bumps [tenacity](https://github.com/jd/tenacity) from 8.4.2 to 8.5.0.
- [Release notes](https://github.com/jd/tenacity/releases)
- [Commits](jd/tenacity@8.4.2...8.5.0)

---
updated-dependencies:
- dependency-name: tenacity
  dependency-type: indirect
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

* chore(deps): bump stripe from 10.1.0 to 10.2.0

Bumps [stripe](https://github.com/stripe/stripe-python) from 10.1.0 to 10.2.0.
- [Release notes](https://github.com/stripe/stripe-python/releases)
- [Changelog](https://github.com/stripe/stripe-python/blob/master/CHANGELOG.md)
- [Commits](stripe/stripe-python@v10.1.0...v10.2.0)

---
updated-dependencies:
- dependency-name: stripe
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

* chore(deps): bump envier from 0.5.1 to 0.5.2

Bumps [envier](https://github.com/DataDog/envier) from 0.5.1 to 0.5.2.
- [Release notes](https://github.com/DataDog/envier/releases)
- [Commits](DataDog/envier@v0.5.1...v0.5.2)

---
updated-dependencies:
- dependency-name: envier
  dependency-type: indirect
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

* chore(deps): bump nh3 from 0.2.17 to 0.2.18

Bumps [nh3](https://github.com/messense/nh3) from 0.2.17 to 0.2.18.
- [Release notes](https://github.com/messense/nh3/releases)
- [Commits](messense/nh3@v0.2.17...v0.2.18)

---
updated-dependencies:
- dependency-name: nh3
  dependency-type: indirect
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

* chore(deps): bump sentry-sdk from 2.7.1 to 2.8.0

Bumps [sentry-sdk](https://github.com/getsentry/sentry-python) from 2.7.1 to 2.8.0.
- [Release notes](https://github.com/getsentry/sentry-python/releases)
- [Changelog](https://github.com/getsentry/sentry-python/blob/master/CHANGELOG.md)
- [Commits](getsentry/sentry-python@2.7.1...2.8.0)

---
updated-dependencies:
- dependency-name: sentry-sdk
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: pypi-combine-prs[bot] <144945619+pypi-combine-prs[bot]@users.noreply.github.com>
@miketheman
feat(admin): Project Quarantine (#16179)
66b6730
@miketheman
chore: increase migration timeouts (#16234)
5bc08a7
@pypi-combine-prs @dependabot
Combined PRs (#16241)
5a28ff2 
* chore(deps): bump humanize from 4.9.0 to 4.10.0

Bumps [humanize](https://github.com/python-humanize/humanize) from 4.9.0 to 4.10.0.
- [Release notes](https://github.com/python-humanize/humanize/releases)
- [Commits](python-humanize/humanize@4.9.0...4.10.0)

---
updated-dependencies:
- dependency-name: humanize
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

* chore(deps): bump rpds-py from 0.18.1 to 0.19.0

Bumps [rpds-py](https://github.com/crate-py/rpds) from 0.18.1 to 0.19.0.
- [Release notes](https://github.com/crate-py/rpds/releases)
- [Commits](crate-py/rpds@v0.18.1...v0.19.0)

---
updated-dependencies:
- dependency-name: rpds-py
  dependency-type: indirect
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

* chore(deps): bump google-auth from 2.31.0 to 2.32.0

Bumps [google-auth](https://github.com/googleapis/google-auth-library-python) from 2.31.0 to 2.32.0.
- [Release notes](https://github.com/googleapis/google-auth-library-python/releases)
- [Changelog](https://github.com/googleapis/google-auth-library-python/blob/main/CHANGELOG.md)
- [Commits](googleapis/google-auth-library-python@v2.31.0...v2.32.0)

---
updated-dependencies:
- dependency-name: google-auth
  dependency-type: indirect
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

* chore(deps): bump jsonschema from 4.22.0 to 4.23.0

Bumps [jsonschema](https://github.com/python-jsonschema/jsonschema) from 4.22.0 to 4.23.0.
- [Release notes](https://github.com/python-jsonschema/jsonschema/releases)
- [Changelog](https://github.com/python-jsonschema/jsonschema/blob/main/CHANGELOG.rst)
- [Commits](python-jsonschema/jsonschema@v4.22.0...v4.23.0)

---
updated-dependencies:
- dependency-name: jsonschema
  dependency-type: indirect
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: pypi-combine-prs[bot] <144945619+pypi-combine-prs[bot]@users.noreply.github.com>
@weblate @bsailer2510
@oriyalperin @progprsazzzz
Translations update from Weblate (#16199)
27d5ec3 
Translate-URL: https://hosted.weblate.org/projects/pypa/warehouse/
Translation: pypa/warehouse

Co-authored-by: Bernhard Sailer <bernhardsailer@bernhardsailer.at>
Co-authored-by: Oriya Alperin <oriya2011@gmail.com>
Co-authored-by: P. adalat <pad.parsa1388@gmail.com>
Co-authored-by: 大王叫我来巡山 <hamburger2048@users.noreply.hosted.weblate.org>
@ewdurbin
Token leak blog update (#16243)
4b62f54 
* fix typo in reporting address

* Add PAT token permissions reported by JFrog

* add cabotage-app image publication dates from JFrog

* backlink to JFrog's blog
@woodruffw
requirements: add pytest-sugar (#16245)
d262906 
* requirements: add pytest-pretty

Signed-off-by: William Woodruff <william@trailofbits.com>

* requirements: switch to pytest-sugar

Signed-off-by: William Woodruff <william@trailofbits.com>

---------

Signed-off-by: William Woodruff <william@trailofbits.com>
@di
Remove HasObservers.observations helper attribute (#16244)
b2c2f3c
@ewdurbin
Admin updates for support (#16247)
9d0e9d6 
* surface organization membership, organization inviations, and project invitations in admin

* surface email unverify_reason in admin

* admin: expose all event history available for users

* admin: when reseting user password by admin intervention, set a unique status and send a better email

* test new email

* untranslate password-reset-by-admin
@ewdurbin
bump timeouts for migration from #16247 (#16248)
c892a55
@ewdurbin
Dev sanity (#16256)
81717df
@ewdurbin
remove duplicate call to post-migrations.sql in make resetdb (#16257)
0878845
@woodruffw @di
help, settings: replace setup.py with pyproject.toml (#16258)
94059bc 
* help, settings: replace setup.py with pyproject.toml

Signed-off-by: William Woodruff <william@trailofbits.com>

* settings: fix language

Signed-off-by: William Woodruff <william@trailofbits.com>

* Apply suggestions from code review

Co-authored-by: Dustin Ingram <di@users.noreply.github.com>

* bump translations

Signed-off-by: William Woodruff <william@trailofbits.com>

---------

Signed-off-by: William Woodruff <william@trailofbits.com>
Co-authored-by: Dustin Ingram <di@users.noreply.github.com>
@miketheman
docs(dev): add more context around accounts and totp (#16255)
6264166
@benjaoming @miketheman @jzohrab
Tell warehouse.db to reuse db_session pytest fixture (#16031)
524bd23 
Co-authored-by: Mike Fiedler <miketheman@gmail.com>
Co-authored-by: Jeff Zohrab <jzohrab@gmail.com>
@woodruffw @di
docs/dev/application: document some more directories (#16259)
fe38096 
Signed-off-by: William Woodruff <william@trailofbits.com>
Co-authored-by: Dustin Ingram <di@users.noreply.github.com>
@facutuesca @woodruffw @di
Add support for uploading attestations in legacy API (#15952)
5940bd9 
* Add support for uploading attestations in legacy API

* Move attestation processing to helper function

* legacy: remove metrics param

Signed-off-by: William Woodruff <william@trailofbits.com>

* lintage

Signed-off-by: William Woodruff <william@trailofbits.com>

* bump pypi-attestations, use AttestationType

Signed-off-by: William Woodruff <william@trailofbits.com>

---------

Signed-off-by: William Woodruff <william@trailofbits.com>
Co-authored-by: William Woodruff <william@trailofbits.com>
Co-authored-by: Dustin Ingram <di@users.noreply.github.com>
@di
Simplify link underlining (#16267)
0377af2 
* Remove gradient background for underlining links

...in favor of normal text-decoration.

* Just make white links white

This also lets white links slightly darken on hover like all other
links.
@ewdurbin
add a make task for generating dev totp creds (#16263)
4a63ffc 
* add a make task for generating dev totp creds

* generate recovery codes for select users

* update doc
ewdurbin and others added 30 commits September 30, 2024 11:04
@ewdurbin
implement some basic guards on our /search endpoint (#16812)
126ac91 
* implement some guards on our /search endpoint

- Move timeout from 2000ms to 500ms
- Add a simple rate limiter to the endpoint by client ip

* no need to explicitly pass empty tags list to metrics.implement
@miketheman
chore(deps): update hiredis manually (#16818)
a0571da
@dependabot
chore(deps): bump uplot from 1.6.30 to 1.6.31 in the npm_and_yarn gro…
658f7a2 
…up across 1 directory (#16819)

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@woodruffw @di @miketheman
conftest: put transaction manager in its own fixture (#16796)
dc5b0e4 
Co-authored-by: Dustin Ingram <di@users.noreply.github.com>
Co-authored-by: Mike Fiedler <miketheman@gmail.com>
@pypi-combine-prs @dependabot
Combined PRs (#16830)
2706bfb 
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: pypi-combine-prs[bot] <144945619+pypi-combine-prs[bot]@users.noreply.github.com>
@woodruffw @miketheman @di
Provenance retrieval route (#16778)
50a58f3 
Co-authored-by: Mike Fiedler <miketheman@gmail.com>
Co-authored-by: Dustin Ingram <di@users.noreply.github.com>
@woodruffw
docs/dev: add destructive migration docs (#16831)
da7b53d
@ewdurbin
update link to new privacy notice (#16835)
9b82274
@pypi-combine-prs @dependabot
Combined PRs (#16845)
b365b53 
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: pypi-combine-prs[bot] <144945619+pypi-combine-prs[bot]@users.noreply.github.com>
@dependabot
chore(deps): bump cookie from 0.5.0 to 0.7.0 in the npm_and_yarn grou…
caa4526 
…p across 1 directory (#16846)

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@pypi-combine-prs @dependabot @ewdurbin
Combined PRs (#16859)
eff39c8 
* chore(deps): bump rich from 13.9.1 to 13.9.2

Bumps [rich](https://github.com/Textualize/rich) from 13.9.1 to 13.9.2.
- [Release notes](https://github.com/Textualize/rich/releases)
- [Changelog](https://github.com/Textualize/rich/blob/master/CHANGELOG.md)
- [Commits](Textualize/rich@v13.9.1...v13.9.2)

---
updated-dependencies:
- dependency-name: rich
  dependency-type: indirect
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

* chore(deps): bump faker from 30.1.0 to 30.3.0

Bumps [faker](https://github.com/joke2k/faker) from 30.1.0 to 30.3.0.
- [Release notes](https://github.com/joke2k/faker/releases)
- [Changelog](https://github.com/joke2k/faker/blob/master/CHANGELOG.md)
- [Commits](joke2k/faker@v30.1.0...v30.3.0)

---
updated-dependencies:
- dependency-name: faker
  dependency-type: indirect
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

* chore(deps): bump black from 24.8.0 to 24.10.0

Bumps [black](https://github.com/psf/black) from 24.8.0 to 24.10.0.
- [Release notes](https://github.com/psf/black/releases)
- [Changelog](https://github.com/psf/black/blob/main/CHANGES.md)
- [Commits](psf/black@24.8.0...24.10.0)

---
updated-dependencies:
- dependency-name: black
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

* chore(deps): bump tuf from 5.0.0 to 5.1.0

Bumps [tuf](https://github.com/theupdateframework/python-tuf) from 5.0.0 to 5.1.0.
- [Release notes](https://github.com/theupdateframework/python-tuf/releases)
- [Changelog](https://github.com/theupdateframework/python-tuf/blob/develop/docs/CHANGELOG.md)
- [Commits](theupdateframework/python-tuf@v5.0.0...v5.1.0)

---
updated-dependencies:
- dependency-name: tuf
  dependency-type: indirect
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

* chore(deps): bump charset-normalizer from 3.3.2 to 3.4.0

Bumps [charset-normalizer](https://github.com/Ousret/charset_normalizer) from 3.3.2 to 3.4.0.
- [Release notes](https://github.com/Ousret/charset_normalizer/releases)
- [Changelog](https://github.com/jawah/charset_normalizer/blob/master/CHANGELOG.md)
- [Commits](jawah/charset_normalizer@3.3.2...3.4.0)

---
updated-dependencies:
- dependency-name: charset-normalizer
  dependency-type: indirect
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

* chore(deps): bump xmltodict from 0.13.0 to 0.14.0

Bumps [xmltodict](https://github.com/martinblech/xmltodict) from 0.13.0 to 0.14.0.
- [Changelog](https://github.com/martinblech/xmltodict/blob/master/CHANGELOG.md)
- [Commits](martinblech/xmltodict@v0.13.0...v0.14.0)

---
updated-dependencies:
- dependency-name: xmltodict
  dependency-type: indirect
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

* chore(deps): bump s3transfer from 0.10.2 to 0.10.3

Bumps [s3transfer](https://github.com/boto/s3transfer) from 0.10.2 to 0.10.3.
- [Changelog](https://github.com/boto/s3transfer/blob/develop/CHANGELOG.rst)
- [Commits](boto/s3transfer@0.10.2...0.10.3)

---
updated-dependencies:
- dependency-name: s3transfer
  dependency-type: indirect
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

* chore(deps): bump markupsafe from 2.1.5 to 3.0.1

Bumps [markupsafe](https://github.com/pallets/markupsafe) from 2.1.5 to 3.0.1.
- [Release notes](https://github.com/pallets/markupsafe/releases)
- [Changelog](https://github.com/pallets/markupsafe/blob/main/CHANGES.rst)
- [Commits](pallets/markupsafe@2.1.5...3.0.1)

---
updated-dependencies:
- dependency-name: markupsafe
  dependency-type: indirect
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

* chore(deps): bump types-s3transfer from 0.10.2 to 0.10.3

Bumps [types-s3transfer](https://github.com/youtype/types-s3transfer) from 0.10.2 to 0.10.3.
- [Release notes](https://github.com/youtype/types-s3transfer/releases)
- [Commits](https://github.com/youtype/types-s3transfer/commits)

---
updated-dependencies:
- dependency-name: types-s3transfer
  dependency-type: indirect
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

* chore(deps): bump isodate from 0.6.1 to 0.7.2

Bumps [isodate](https://github.com/gweis/isodate) from 0.6.1 to 0.7.2.
- [Changelog](https://github.com/gweis/isodate/blob/master/CHANGES.txt)
- [Commits](gweis/isodate@0.6.1...0.7.2)

---
updated-dependencies:
- dependency-name: isodate
  dependency-type: indirect
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

* chore(deps): bump sentry-sdk from 2.15.0 to 2.16.0

Bumps [sentry-sdk](https://github.com/getsentry/sentry-python) from 2.15.0 to 2.16.0.
- [Release notes](https://github.com/getsentry/sentry-python/releases)
- [Changelog](https://github.com/getsentry/sentry-python/blob/master/CHANGELOG.md)
- [Commits](getsentry/sentry-python@2.15.0...2.16.0)

---
updated-dependencies:
- dependency-name: sentry-sdk
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

* chore(deps): bump mkdocs-macros-plugin from 1.2.0 to 1.3.4

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: pypi-combine-prs[bot] <144945619+pypi-combine-prs[bot]@users.noreply.github.com>
Co-authored-by: Ee Durbin <ewdurbin@gmail.com>
@miketheman
feat: follow mx records back to pointers (#16814)
7194600
@pypi-combine-prs @dependabot
Combined PRs (#16870)
10570d1 
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: pypi-combine-prs[bot] <144945619+pypi-combine-prs[bot]@users.noreply.github.com>
@pypi-combine-prs @dependabot
Combined PRs (#16892)
cafec72 
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: pypi-combine-prs[bot] <144945619+pypi-combine-prs[bot]@users.noreply.github.com>
@miketheman
fix: suppress more DNS errors (#16893)
e7762bb
@LeoHsiao1 @miketheman
allow uploads of wheels targeting macosx 15 (#16877)
17f7255 
Co-authored-by: Mike Fiedler <miketheman@gmail.com>
@pypi-combine-prs @dependabot
Combined PRs (#16904)
6f1a2fb 
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: pypi-combine-prs[bot] <144945619+pypi-combine-prs[bot]@users.noreply.github.com>
@radarhere @miketheman
Update to Ubuntu 24.04 for readthedocs (#16891)
694286e 
Co-authored-by: Andrew Murray <radarhere@users.noreply.github.com>
Co-authored-by: Mike Fiedler <miketheman@gmail.com>
@pypi-combine-prs @dependabot
Combined PRs (#16917)
d36b981 
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: pypi-combine-prs[bot] <144945619+pypi-combine-prs[bot]@users.noreply.github.com>
@miketheman
chore(deps): manually update dependabot-failing (#16919)
f978eec
@dependabot
chore(deps): bump types-setuptools (#16925)
c29d254 
Bumps [types-setuptools](https://github.com/python/typeshed) from 75.2.0.20241018 to 75.2.0.20241019.
- [Commits](https://github.com/python/typeshed/commits)

---
updated-dependencies:
- dependency-name: types-setuptools
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot @ewdurbin
chore(deps): bump cryptography from 43.0.1 to 43.0.3 (#16930)
6587ace 
Bumps [cryptography](https://github.com/pyca/cryptography) from 43.0.1 to 43.0.3.
- [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst)
- [Commits](pyca/cryptography@43.0.1...43.0.3)

---
updated-dependencies:
- dependency-name: cryptography
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Ee Durbin <ewdurbin@gmail.com>
@woodruffw @miketheman
test/oidc: rename TestPublisher, mark as abstract (#16921)
08aedde 
Co-authored-by: Mike Fiedler <miketheman@gmail.com>
@woodruffw @miketheman
PEP 740: add provenance to simple API (#16801)
e04b7bb 
Co-authored-by: Mike Fiedler <miketheman@gmail.com>
@miketheman
feat: add tags to conversations on removal (#16933)
5369a5a
@woodruffw
attestations: provenance added metric (#16934)
102f1fa 
Adds `warehouse.attestations.build_provenance.ok`
to signal when a provenance object is persisted to DB.

Signed-off-by: William Woodruff <william@trailofbits.com>
@woodruffw
detail: fix spacing (#16947)
d1c002e 
Signed-off-by: William Woodruff <william@trailofbits.com>
@woodruffw @miketheman
oidc: move reusable_worfklow_used field to the correct event (#16935)
7405bda 
Co-authored-by: Mike Fiedler <miketheman@gmail.com>
@ewdurbin
Guard our BigQuery release metadata sync against upcoming schema chan…
be5f770 
…ges (#16956)
@miketheman
fix: retry token on error (#16957)
41b9c91
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
⤵️ pull
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.