Bump pip-tools from 6.8.0 to 6.12.3

[dependabot[bot]]

Bumps pip-tools from 6.8.0 to 6.12.3.

Release notes

Sourced from pip-tools's releases.

6.12.3

Bug Fixes:

• Remove extras from user-supplied constraints in backtracking resolver (#1808). Thanks @​thomdixon
• Fix for sync error when the ireqs being merged have no names (#1802). Thanks @​richafrank

6.12.2

Bug Fixes:

• Raise error if input and output filenames are matched (#1787). Thanks @​atugushev
• Add pyproject.toml as default input file format (#1780). Thanks @​berislavlopac
• Fix a regression with unsafe packages for --allow-unsafe (#1788). Thanks @​q0w

6.12.1

Bug Fixes:

• Set explicitly packages for setuptools (#1782). Thanks @​q0w

6.12.0

Features:

• Add --no-index flag to pip-compile (#1745). Thanks @​atugushev

Bug Fixes:

• Treat --upgrade-packages PKGSPECs as constraints (not just minimums), consistently (#1578). Thanks @​AndydeCleyre
• Filter out the user provided unsafe packages (#1766). Thanks @​q0w
• Adopt PEP-621 for packaging (#1763). Thanks @​ssbarnea

6.11.0

Features:

• Add pyproject.toml file (#1643). Thanks @​otherJL0
• Support build isolation using setuptools/pyproject.toml requirement files (#1727). Thanks @​atugushev

Bug Fixes:

• Improve punctuation/grammar with pip-compile header (#1547). Thanks @​blueyed
• Generate hashes for all available candidates (#1723). Thanks @​neykov

Other Changes:

• Bump click minimum version to >= 8 (#1733). Thanks @​atugushev
• Bump pip minimum version to >= 22.2 (#1729). Thanks @​atugushev

6.10.0

Features:

• Deprecate pip-compile --resolver=legacy (#1724). Thanks @​atugushev
• Prompt user to use the backtracking resolver on errors (#1719). Thanks @​maxfenv

... (truncated)

Changelog

Sourced from pip-tools's changelog.

6.12.3 (2023-03-01)

Bug Fixes:

• Remove extras from user-supplied constraints in backtracking resolver (#1808). Thanks @​thomdixon
• Fix for sync error when the ireqs being merged have no names (#1802). Thanks @​richafrank

6.12.2 (2022-12-25)

Bug Fixes:

• Raise error if input and output filenames are matched (#1787). Thanks @​atugushev
• Add pyproject.toml as default input file format (#1780). Thanks @​berislavlopac
• Fix a regression with unsafe packages for --allow-unsafe (#1788). Thanks @​q0w

6.12.1 (2022-12-16)

Bug Fixes:

• Set explicitly packages for setuptools (#1782). Thanks @​q0w

6.12.0 (2022-12-13)

Features:

• Add --no-index flag to pip-compile (#1745). Thanks @​atugushev

Bug Fixes:

• Treat --upgrade-packages PKGSPECs as constraints (not just minimums), consistently (#1578). Thanks @​AndydeCleyre
• Filter out the user provided unsafe packages (#1766). Thanks @​q0w
• Adopt PEP-621 for packaging (#1763). Thanks @​ssbarnea

6.11.0 (2022-11-30)

Features:

• Add pyproject.toml file (#1643). Thanks @​otherJL0
• Support build isolation using setuptools/pyproject.toml requirement files

... (truncated)

Commits

• 4219171 Release 6.12.3 (#1815)
• 7d22cb1 Remove extras from user-supplied constraints in backtracking resolver (#1808)
• bce5b24 Use a temp directory for input and output files (#1807)
• 6735e62 pre-commit autoupdate (#1810)
• 9134115 Fix for sync error when the ireqs being merged have no names (#1802)
• 83042a0 Release 6.12.2 (#1789)
• 5afde74 Avoid pre-commit isort crash (#1803)
• 0c1ddcc pre-commit autoupdate (#1790)
• 7357383 Raise error if input and output filenames are matched (#1787)
• cee88ed Add pyproject.toml as default input file format (#1780)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)