:arrow_up: Bump yarl from 1.9.2 to 1.9.4

[dependabot[bot]]

Bumps yarl from 1.9.2 to 1.9.4.

Release notes

Sourced from yarl's releases.

1.9.4

Bug fixes

• Started raising :py:exc:TypeError when a string value is passed into :py:meth:~yarl.URL.build as the port argument -- by :user:commonism.

  Previously the empty string as port would create malformed URLs when rendered as string representations. (#883)

Packaging updates and notes for downstreams

• The leading -- has been dropped from the :pep:517 in-tree build backend config setting names. --pure-python is now just pure-python -- by :user:webknjaz.

  The usage now looks as follows:

  .. code-block:: console

  $ python -m build \
      --config-setting=pure-python=true \
      --config-setting=with-cython-tracing=true
  

  (#963)

Contributor-facing changes

• A step-by-step :doc:Release Guide <contributing/release_guide> guide has been added, describing how to release yarl -- by :user:webknjaz.

  This is primarily targeting maintainers. (#960)

• Coverage collection has been implemented for the Cython modules -- by :user:webknjaz.

  It will also be reported to Codecov from any non-release CI jobs.

  To measure coverage in a development environment, yarl can be installed in editable mode, which requires an environment variable YARL_CYTHON_TRACING=1 to be set:

  .. code-block:: console

  $ YARL_CYTHON_TRACING=1 python -Im pip install -e .
  

  Editable install produces C-files required for the Cython coverage plugin to map the measurements back to the PYX-files. (#961)

... (truncated)

Changelog

Sourced from yarl's changelog.

1.9.4 (2023-12-06)

Bug fixes

• Started raising :py:exc:TypeError when a string value is passed into :py:meth:~yarl.URL.build as the port argument -- by :user:commonism.

  Previously the empty string as port would create malformed URLs when rendered as string representations. (:issue:883)

Packaging updates and notes for downstreams

• The leading -- has been dropped from the :pep:517 in-tree build backend config setting names. --pure-python is now just pure-python -- by :user:webknjaz.

  The usage now looks as follows:

  .. code-block:: console

  $ python -m build \
      --config-setting=pure-python=true \
      --config-setting=with-cython-tracing=true
  

  (:issue:963)

Contributor-facing changes

• A step-by-step :doc:Release Guide <contributing/release_guide> guide has been added, describing how to release yarl -- by :user:webknjaz.

  This is primarily targeting maintainers. (:issue:960)

• Coverage collection has been implemented for the Cython modules -- by :user:webknjaz.

  It will also be reported to Codecov from any non-release CI jobs.

  To measure coverage in a development environment, yarl can be installed in editable mode, which requires an environment variable YARL_CYTHON_TRACING=1 to be set:

  .. code-block:: console

  $ YARL_CYTHON_TRACING=1 python -Im pip install -e .
  

... (truncated)

Commits

• 6362ff1 ⇪📦 Release yarl v1.9.4
• 241e5df 📝 Add a dedicated Towncrier template
• f384fef 🎨 Sort coverage report config settings
• 04399eb Exterminate offensive references from the project
• 6e61b44 🎨Move tomllib access to _compat @ packaging
• b3a5a71 Raise TypeError when a string is passed for port to URL.build()
• e8cc8ab 🧪 Determine and use exact pure dist names @ GHA
• cc8f29e 🧪 Skip setting up Python @ cibuildwheel jobs
• d86eb20 Bump cython from 3.0.5 to 3.0.6 (#966)
• d3f762d Bump idna from 3.4 to 3.6 (#965)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)