Bump the pip group across 1 directory with 3 updates

Open dependabot[bot] opened this issue 1 year ago • 0 comments

Bumps the pip group with 3 updates in the / directory: streamlit, aiohttp and nltk.

Updates streamlit from 1.36.0 to 1.37.0

Release notes

1.37.0

What's Changed

New Features 🎉

Stacking options - st.bar_chart by @mayagbarnes in streamlit/streamlit#8945

Support graphviz.sources.Source object for st.graphviz_chart by @sfc-gh-kbregula in streamlit/streamlit#8993

Add support for material icons in markdown by @LukasMasuch in streamlit/streamlit#8889

Fix lag when closing dialog by @raethlein in streamlit/streamlit#9023

Stacking options - st.area_chart by @mayagbarnes in streamlit/streamlit#8992

Add feedback widget by @raethlein in streamlit/streamlit#8915

READ only headers and cookies by @kajarenc in streamlit/streamlit#8976

De-experimentalize st.fragment by @vdonato in streamlit/streamlit#9019

De-experimentalize st.dialog by @raethlein in streamlit/streamlit#9020

Bug Fixes 🐛

Show fragment errors in fragment-path for main app runs by @raethlein in streamlit/streamlit#8868

Fix st.rerun fragment thread reuse issue by @raethlein in streamlit/streamlit#8798

Support non-unix style paths for MPA loading by @kmcgrady in streamlit/streamlit#8988

Set theme hash properly on load if a custom theme is active to start by @kmcgrady in streamlit/streamlit#8989

Don't remove session refs on fragment runs by @vdonato in streamlit/streamlit#9010

Improvements to NumberInput formatting by @sfc-gh-nbellante in streamlit/streamlit#9035

Hide all Particles upon printing by @sfc-gh-nbellante in streamlit/streamlit#9053

Fix: MPA support of custom themes by @mayagbarnes in streamlit/streamlit#8994

st.switch_page clears non-embed query params by @mayagbarnes in streamlit/streamlit#9059

Fix secrets.toml Windows Path Bug by @sfc-gh-nbellante in streamlit/streamlit#9061

Bugfix: Fixes two st.map width bugs by @sfc-gh-nbellante in streamlit/streamlit#9070

Validate the path using Tornado before performing checks by @kmcgrady in streamlit/streamlit#8990

Reset ctx.current_fragment_id to last ID instead of None by @vdonato in streamlit/streamlit#9114

Other Changes

Update emojis used for validation by @LukasMasuch in streamlit/streamlit#8923

Add support for numpy 2.x by @LukasMasuch in streamlit/streamlit#8940

Remove a bunch of deprecated experimental features by @vdonato in streamlit/streamlit#8943

Migrate custom icons from material outlined to rounded by @LukasMasuch in streamlit/streamlit#8998

Remove old config options - part 1 by @mayagbarnes in streamlit/streamlit#9005

Remove old config options - part 2 by @mayagbarnes in streamlit/streamlit#9013

Remove deprecation.showPyplotGlobalUse config option by @LukasMasuch in streamlit/streamlit#9018

Fix broken st.navigation docstring by @mahotd in streamlit/streamlit#9027

Update the feedback widget design by @raethlein in streamlit/streamlit#9094

New Contributors

@Dev-iL made their first contribution in streamlit/streamlit#8947

@quant12345 made their first contribution in streamlit/streamlit#8968

@mahotd made their first contribution in streamlit/streamlit#9027

Full Changelog: https://github.com/streamlit/streamlit/compare/1.36.0...1.37.0

Commits

e2c3c93 Up version to 1.37.0
88389e3 Docstrings for 1.37.0 (#9115)
898fd80 Temp solution to fix invalid material icon error rendering (#9113)
b2c88c6 Reset ctx.current_fragment_id to last ID instead of None (#9114)
3a63985 Validate the path using Tornado before performing checks (#8990)
40303e1 Move the filled star icon for feedback widget from python code to web app (#9...
6296baf Update the feedback widget design (#9094)
b9c3521 Fixes two st.map width bugs (#9070)
a2ae47a Only expose selected objects in components module (#8873)
340f3f7 De-experimentalize st.dialog (#9020)
Additional commits viewable in compare view

Updates aiohttp from 3.9.5 to 3.10.2

Release notes

Sourced from aiohttp's releases.

3.10.2

Bug fixes

Fixed server checks for circular symbolic links to be compatible with Python 3.13 -- by :user:steverep.

Related issues and pull requests on GitHub: #8565.

Fixed request body not being read when ignoring an Upgrade request -- by :user:Dreamsorcerer.

Related issues and pull requests on GitHub: #8597.

Fixed an edge case where shutdown would wait for timeout when the handler was already completed -- by :user:Dreamsorcerer.

Related issues and pull requests on GitHub: #8611.

Fixed connecting to npipe://, tcp://, and unix:// urls -- by :user:bdraco.

Related issues and pull requests on GitHub: #8632.

Fixed WebSocket ping tasks being prematurely garbage collected -- by :user:bdraco.

There was a small risk that WebSocket ping tasks would be prematurely garbage collected because the event loop only holds a weak reference to the task. The garbage collection risk has been fixed by holding a strong reference to the task. Additionally, the task is now scheduled eagerly with Python 3.12+ to increase the chance it can be completed immediately and avoid having to hold any references to the task.

Related issues and pull requests on GitHub: #8641.

Fixed incorrectly following symlinks for compressed file variants -- by :user:steverep.

Related issues and pull requests on GitHub:

... (truncated)

Changelog

Sourced from aiohttp's changelog.

3.10.2 (2024-08-08)

Bug fixes

Fixed server checks for circular symbolic links to be compatible with Python 3.13 -- by :user:steverep.

Related issues and pull requests on GitHub: :issue:8565.

Fixed request body not being read when ignoring an Upgrade request -- by :user:Dreamsorcerer.

Related issues and pull requests on GitHub: :issue:8597.

Fixed an edge case where shutdown would wait for timeout when the handler was already completed -- by :user:Dreamsorcerer.

Related issues and pull requests on GitHub: :issue:8611.

Fixed connecting to npipe://, tcp://, and unix:// urls -- by :user:bdraco.

Related issues and pull requests on GitHub: :issue:8632.

Fixed WebSocket ping tasks being prematurely garbage collected -- by :user:bdraco.

There was a small risk that WebSocket ping tasks would be prematurely garbage collected because the event loop only holds a weak reference to the task. The garbage collection risk has been fixed by holding a strong reference to the task. Additionally, the task is now scheduled eagerly with Python 3.12+ to increase the chance it can be completed immediately and avoid having to hold any references to the task.

Related issues and pull requests on GitHub: :issue:8641.

Fixed incorrectly following symlinks for compressed file variants -- by :user:steverep.

... (truncated)

Commits

491106e Release 3.10.2 (#8655)
ce2e975 [PR #8652/b0536ae6 backport][3.10] Do not follow symlinks for compressed file...
6a77806 [PR #8636/51d872e backport][3.10] Remove Request.wait_for_disconnection() met...
1f92213 [PR #8642/e4942771 backport][3.10] Fix response to circular symlinks with Pyt...
2ef14a6 [PR #8641/0a88bab backport][3.10] Fix WebSocket ping tasks being prematurely ...
68e8496 [PR #8608/c4acabc backport][3.10] Fix timer handle churn in websocket heartbe...
72f41aa [PR #8632/b2691f2 backport][3.10] Fix connecting to npipe://, tcp://, and uni...
bf83dbe [PR #8634/c7293e19 backport][3.10] Backport #8620 as improvements to various ...
4815765 [PR #8597/c99a1e27 backport][3.10] Fix reading of body when ignoring an upgra...
266608d [PR #8611/1fcef940 backport][3.10] Fix handler waiting on shutdown (#8627)
Additional commits viewable in compare view

Updates nltk from 3.8.1 to 3.8.2

Changelog

Sourced from nltk's changelog.

Version 3.8.2 2024-08-09

Avoid need for pickled models, resolves security vulnerability CVE-2024-39705

Add Python 3.12 support

Many other minor fixes

Thanks to the following contributors to 3.8.2: Tom Aarsen, Cat Lee Ball, Veralara Bernhard, Carlos Brandt, Konstantin Chernyshev, Michael Higgins, Eric Kafe, Vivek Kalyan, David Lukes, Rob Malouf, purificant, Alex Rudnick, Liling Tan, Akihiro Yamazaki.

Version 3.8.1 2023-01-02

Resolve RCE vulnerability in localhost WordNet Browser (#3100)

Remove unused tool scripts (#3099)

Resolve XSS vulnerability in localhost WordNet Browser (#3096)

Add Python 3.11 support (#3090)

Thanks to the following contributors to 3.8.1: Francis Bond, John Vandenberg, Tom Aarsen

Version 3.8 2022-12-12

Refactor dispersion plot (#3082)

Provide type hints for LazyCorpusLoader variables (#3081)

Throw warning when LanguageModel is initialized with incorrect vocabulary (#3080)

Fix WordNet's all_synsets() function (#3078)

Resolve TreebankWordDetokenizer inconsistency with end-of-string contractions (#3070)

Support both iso639-3 codes and BCP-47 language tags (#3060)

Avoid DeprecationWarning in Regexp tokenizer (#3055)

Fix many doctests, add doctests to CI (#3054, #3050, #3048)

Fix bool field not being read in VerbNet (#3044)

Greatly improve time efficiency of SyllableTokenizer when tokenizing numbers (#3042)

Fix encodings of Polish udhr corpus reader (#3038)

Allow TweetTokenizer to tokenize emoji flag sequences (#3034)

Prevent LazyModule from increasing the size of nltk.dict (#3033)

Fix CoreNLPServer non-default port issue (#3031)

Add "acion" suffix to the Spanish SnowballStemmer (#3030)

Allow loading WordNet without OMW (#3026)

Use input() in nltk.chat.chatbot() for Jupyter support (#3022)

Fix edit_distance_align() in distance.py (#3017)

Tackle performance and accuracy regression of sentence tokenizer since NLTK 3.6.6 (#3014)

Add the Iota operator to semantic logic (#3010)

Resolve critical errors in WordNet app (#3008)

Resolve critical error in CHILDES Corpus (#2998)

Make WordNet information_content() accept adjective satellites (#2995)

Add "strict=True" parameter to CoreNLP (#2993, #3043)

Resolve issue with WordNet's synset_from_sense_key (#2988)

Handle WordNet synsets that were lost in mapping (#2985)

Resolve TypeError in Boxer (#2979)

Add function to retrieve WordNet synonyms (#2978)

Warn about nonexistent OMW offsets instead of raising an error (#2974)

... (truncated)

Commits

0753ee5 fix whitespace (#3292)
d3c1cc5 Mention Python 3.12 support
ee69707 Formatting fix
5fb43d4 improve release howto
8c2a6f6 Update copyright year
441aecb Update version to 3.8.2, add release notes
b73aa9b Merge pull request #3283 from ekaf/punkt_tab
45731bc Fix ne_chunk and add doctest
520475b Don't use remove_suffix()
5ee6c93 Don't initialize sent_tokenizer in plaintext reader
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions You can disable automated security fix PRs for this repo from the Security Alerts page.

Aug 12 '24 19:08 dependabot[bot]