authx ⬆ Bump the python-packages group with 2 updates

Bumps the python-packages group with 2 updates: pydantic-core and starlette.

Updates pydantic-core from 2.20.1 to 2.21.0

Release notes

Sourced from pydantic-core's releases.

v2.21.0 2024-08-05

What's Changed

Packaging

Bump idna from 0.5.0 to 1.0.1 by @dependabot in pydantic/pydantic-core#1358

Bump pyo3 from 0.22.0 to 0.22.2 by @dependabot in pydantic/pydantic-core#1383

Bump serde_json from 1.0.118 to 1.0.121 by @dependabot in pydantic/pydantic-core#1384

Bump serde from 1.0.203 to 1.0.204 by @dependabot in pydantic/pydantic-core#1385

Bump base64 from 0.21.7 to 0.22.1 by @dependabot in pydantic/pydantic-core#1386

Fixes

Fixes discriminated union bug regression when using enums by @kfreezen in pydantic/pydantic-core#1286

string: Use 're.Pattern.search' instead of 're.Pattern.match' by @tinez in pydantic/pydantic-core#1368

Fix model field_serializer with computed field by @nix010 in pydantic/pydantic-core#1349

Clean up some string handling cases by @davidhewitt in pydantic/pydantic-core#1381

Features

Validate bytes based on ser_json_bytes by @josh-newman in pydantic/pydantic-core#1308

Support allow_partial='trailing-strings' by @sydney-runkle in pydantic/pydantic-core#1390

Performance

Use Uuid:::from_u128 for uuid_to_string by @fft001 in pydantic/pydantic-core#1362

New Contributors

@kfreezen made their first contribution in pydantic/pydantic-core#1286

@tinez made their first contribution in pydantic/pydantic-core#1368

@fft001 made their first contribution in pydantic/pydantic-core#1362

@nix010 made their first contribution in pydantic/pydantic-core#1349

@BoxyUwU made their first contribution in pydantic/pydantic-core#1379

Full Changelog: https://github.com/pydantic/pydantic-core/compare/v2.20.1...v2.21.0

Commits

f79d49b Revert "use little endian int (#1372)" (#1393)
81106d9 Uprev to v2.21.0 (#1391)
099a8e1 Support allow_partial='trailing-strings' (#1390)
cc2c46c Bump base64 from 0.21.7 to 0.22.1 (#1386)
c5a4261 clean up some string handling cases (#1381)
507ff47 Bump serde from 1.0.203 to 1.0.204 (#1385)
1111096 Bump serde_json from 1.0.118 to 1.0.121 (#1384)
a1ee736 Bump pyo3 from 0.22.0 to 0.22.2 (#1383)
0ff28ea Bump version_check from 0.9.4 to 0.9.5 (#1382)
3a5f2cb Bump the python-packages group with 7 updates (#1388)
Additional commits viewable in compare view

Updates starlette from 0.37.2 to 0.38.2

Release notes

Sourced from starlette's releases.

Version 0.38.2

Fixed

Fix routing.get_name() not to assume all routines have __name__ #2648

Full Changelog: https://github.com/encode/starlette/compare/0.38.1...0.38.2

Version 0.38.1

Removed

Revert "Add support for ASGI pathsend extension" #2649.

Full Changelog: https://github.com/encode/starlette/compare/0.38.0...0.38.1

Version 0.38.0

Added

Allow use of memoryview in StreamingResponse and Response #2576 and #2577.

Send 404 instead of 500 when filename requested is too long on StaticFiles #2583.

Changed

Fail fast on invalid Jinja2Template instantiation parameters #2568.

Check endpoint handler is async only once #2536.

Fixed

Add proper synchronization to WebSocketTestSession #2597.

Full Changelog: https://github.com/encode/starlette/compare/0.37.2...0.38.0

Changelog

Sourced from starlette's changelog.

0.38.2

July 27, 2024

Fixed

Not assume all routines have __name__ on routing.get_name() #2648.

0.38.1

July 23, 2024

Removed

Revert "Add support for ASGI pathsend extension" #2649.

0.38.0

July 20, 2024

Added

Allow use of memoryview in StreamingResponse and Response #2576 and #2577.

Send 404 instead of 500 when filename requested is too long on StaticFiles #2583.

Changed

Fail fast on invalid Jinja2Template instantiation parameters #2568.

Check endpoint handler is async only once #2536.

Fixed

Add proper synchronization to WebSocketTestSession #2597.

Commits

5ed55c4 Version 0.38.2 (#2655)
78fcd54 Create types module inside tests (#2502)
296cab9 Bump the python-packages group with 13 updates (#2632)
07427f8 Fix routing.get_name() not to assume all routines have __name__ (#2648)
921f137 Version 0.38.1 (#2650)
67f473d Revert "Add support for ASGI pathsend extension" (#2649)
8b1d2c2 Version 0.38.0 (#2647)
357a291 Add proper synchronisation to WebSocketTestSession (#2597)
5f57ef4 test: refine the test of client disconnection after reading request body (#2639)
d3e5327 Add section for Vellox to third-party plugins (#2624)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Aug 12 '24 04:08 dependabot[bot]

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name	Status	Preview	Comments	Updated (UTC)
authx	❌ Failed (Inspect)			Aug 19, 2024 10:05pm

Aug 12 '24 04:08 vercel[bot]

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot rebase.

Aug 19 '24 04:08 dependabot[bot]

@dependabot rebase

Aug 19 '24 07:08 yezz123

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot rebase.

Aug 19 '24 08:08 dependabot[bot]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarCloud

Aug 19 '24 22:08 sonarqubecloud[bot]

Codecov Report

All modified and coverable lines are covered by tests :white_check_mark:

Project coverage is 98.74%. Comparing base (10e2b5f) to head (2f7b1dd). Report is 3 commits behind head on main.

Additional details and impacted files

@@           Coverage Diff           @@
##             main     #655   +/-   ##
=======================================
  Coverage   98.74%   98.74%           
=======================================
  Files          16       16           
  Lines         798      798           
  Branches      117      117           
=======================================
  Hits          788      788           
  Misses          4        4           
  Partials        6        6

:umbrella: View full report in Codecov by Sentry.
:loudspeaker: Have feedback on the report? Share it here.

Aug 19 '24 22:08 codecov[bot]

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot rebase.

Aug 26 '24 04:08 dependabot[bot]

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

Aug 26 '24 08:08 dependabot[bot]