chore(deps): update dependency black to v24.10.0 #19

Closed
renovate-bot wants to merge 1 commits from renovate/black-24.x-lockfile into main
Collaborator

This PR contains the following updates:

Package Type Update Change
black (changelog) dev minor 24.2.0 -> 24.10.0

Release Notes

psf/black (black)

v24.10.0

Compare Source

Highlights
  • Black is now officially tested with Python 3.13 and provides Python 3.13
    mypyc-compiled wheels. (#​4436) (#​4449)
  • Black will issue an error when used with Python 3.12.5, due to an upstream memory
    safety issue in Python 3.12.5 that can cause Black's AST safety checks to fail. Please
    use Python 3.12.6 or Python 3.12.4 instead. (#​4447)
  • Black no longer supports running with Python 3.8 (#​4452)
Stable style
  • Fix crashes involving comments in parenthesised return types or X | Y style unions.
    (#​4453)
  • Fix skipping Jupyter cells with unknown %% magic (#​4462)
Preview style
  • Fix type annotation spacing between * and more complex type variable tuple (i.e. def fn(*args: *tuple[*Ts, T]) -> None: pass) (#​4440)
Caching
  • Fix bug where the cache was shared between runs with and without --unstable (#​4466)
Packaging
  • Upgrade version of mypyc used to 1.12 beta (#​4450) (#​4449)
  • blackd now requires a newer version of aiohttp. (#​4451)
Output
  • Added Python target version information on parse error (#​4378)
  • Add information about Black version to internal error messages (#​4457)

v24.8.0

Compare Source

Stable style
  • Fix crash when # fmt: off is used before a closing parenthesis or bracket. (#​4363)
Packaging
  • Packaging metadata updated: docs are explictly linked, the issue tracker is now also
    linked. This improves the PyPI listing for Black. (#​4345)
Parser
  • Fix regression where Black failed to parse a multiline f-string containing another
    multiline string (#​4339)
  • Fix regression where Black failed to parse an escaped single quote inside an f-string
    (#​4401)
  • Fix bug with Black incorrectly parsing empty lines with a backslash (#​4343)
  • Fix bugs with Black's tokenizer not handling \{ inside f-strings very well (#​4422)
  • Fix incorrect line numbers in the tokenizer for certain tokens within f-strings
    (#​4423)
Performance
  • Improve performance when a large directory is listed in .gitignore (#​4415)
Blackd
  • Fix blackd (and all extras installs) for docker container (#​4357)

v24.4.2

Compare Source

This is a bugfix release to fix two regressions in the new f-string parser introduced in
24.4.1.

Parser
  • Fix regression where certain complex f-strings failed to parse (#​4332)
Performance
  • Fix bad performance on certain complex string literals (#​4331)

v24.4.1

Compare Source

Highlights
  • Add support for the new Python 3.12 f-string syntax introduced by PEP 701 (#​3822)
Stable style
  • Fix crash involving indented dummy functions containing newlines (#​4318)
Parser
  • Add support for type parameter defaults, a new syntactic feature added to Python 3.13
    by PEP 696 (#​4327)
Integrations
  • Github Action now works even when git archive is skipped (#​4313)

v24.4.0

Compare Source

Stable style
  • Fix unwanted crashes caused by AST equivalency check (#​4290)
Preview style
  • if guards in case blocks are now wrapped in parentheses when the line is too long.
    (#​4269)
  • Stop moving multiline strings to a new line unless inside brackets (#​4289)
Integrations
  • Add a new option use_pyproject to the GitHub Action psf/black. This will read the
    Black version from pyproject.toml. (#​4294)

v24.3.0

Compare Source

Highlights

This release is a milestone: it fixes Black's first CVE security vulnerability. If you
run Black on untrusted input, or if you habitually put thousands of leading tab
characters in your docstrings, you are strongly encouraged to upgrade immediately to fix
CVE-2024-21503.

This release also fixes a bug in Black's AST safety check that allowed Black to make
incorrect changes to certain f-strings that are valid in Python 3.12 and higher.

Stable style
  • Don't move comments along with delimiters, which could cause crashes (#​4248)
  • Strengthen AST safety check to catch more unsafe changes to strings. Previous versions
    of Black would incorrectly format the contents of certain unusual f-strings containing
    nested strings with the same quote type. Now, Black will crash on such strings until
    support for the new f-string syntax is implemented. (#​4270)
  • Fix a bug where line-ranges exceeding the last code line would not work as expected
    (#​4273)
Performance
  • Fix catastrophic performance on docstrings that contain large numbers of leading tab
    characters. This fixes
    CVE-2024-21503.
    (#​4278)
Documentation
  • Note what happens when --check is used with --quiet (#​4236)

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [black](https://github.com/psf/black) ([changelog](https://github.com/psf/black/blob/main/CHANGES.md)) | dev | minor | `24.2.0` -> `24.10.0` | --- ### Release Notes <details> <summary>psf/black (black)</summary> ### [`v24.10.0`](https://github.com/psf/black/blob/HEAD/CHANGES.md#24100) [Compare Source](https://github.com/psf/black/compare/24.8.0...24.10.0) ##### Highlights - Black is now officially tested with Python 3.13 and provides Python 3.13 mypyc-compiled wheels. ([#&#8203;4436](https://github.com/psf/black/issues/4436)) ([#&#8203;4449](https://github.com/psf/black/issues/4449)) - Black will issue an error when used with Python 3.12.5, due to an upstream memory safety issue in Python 3.12.5 that can cause Black's AST safety checks to fail. Please use Python 3.12.6 or Python 3.12.4 instead. ([#&#8203;4447](https://github.com/psf/black/issues/4447)) - Black no longer supports running with Python 3.8 ([#&#8203;4452](https://github.com/psf/black/issues/4452)) ##### Stable style - Fix crashes involving comments in parenthesised return types or `X | Y` style unions. ([#&#8203;4453](https://github.com/psf/black/issues/4453)) - Fix skipping Jupyter cells with unknown `%%` magic ([#&#8203;4462](https://github.com/psf/black/issues/4462)) ##### Preview style - Fix type annotation spacing between \* and more complex type variable tuple (i.e. `def fn(*args: *tuple[*Ts, T]) -> None: pass`) ([#&#8203;4440](https://github.com/psf/black/issues/4440)) ##### Caching - Fix bug where the cache was shared between runs with and without `--unstable` ([#&#8203;4466](https://github.com/psf/black/issues/4466)) ##### Packaging - Upgrade version of mypyc used to 1.12 beta ([#&#8203;4450](https://github.com/psf/black/issues/4450)) ([#&#8203;4449](https://github.com/psf/black/issues/4449)) - `blackd` now requires a newer version of aiohttp. ([#&#8203;4451](https://github.com/psf/black/issues/4451)) ##### Output - Added Python target version information on parse error ([#&#8203;4378](https://github.com/psf/black/issues/4378)) - Add information about Black version to internal error messages ([#&#8203;4457](https://github.com/psf/black/issues/4457)) ### [`v24.8.0`](https://github.com/psf/black/blob/HEAD/CHANGES.md#2480) [Compare Source](https://github.com/psf/black/compare/24.4.2...24.8.0) ##### Stable style - Fix crash when `# fmt: off` is used before a closing parenthesis or bracket. ([#&#8203;4363](https://github.com/psf/black/issues/4363)) ##### Packaging - Packaging metadata updated: docs are explictly linked, the issue tracker is now also linked. This improves the PyPI listing for Black. ([#&#8203;4345](https://github.com/psf/black/issues/4345)) ##### Parser - Fix regression where Black failed to parse a multiline f-string containing another multiline string ([#&#8203;4339](https://github.com/psf/black/issues/4339)) - Fix regression where Black failed to parse an escaped single quote inside an f-string ([#&#8203;4401](https://github.com/psf/black/issues/4401)) - Fix bug with Black incorrectly parsing empty lines with a backslash ([#&#8203;4343](https://github.com/psf/black/issues/4343)) - Fix bugs with Black's tokenizer not handling `\{` inside f-strings very well ([#&#8203;4422](https://github.com/psf/black/issues/4422)) - Fix incorrect line numbers in the tokenizer for certain tokens within f-strings ([#&#8203;4423](https://github.com/psf/black/issues/4423)) ##### Performance - Improve performance when a large directory is listed in `.gitignore` ([#&#8203;4415](https://github.com/psf/black/issues/4415)) ##### *Blackd* - Fix blackd (and all extras installs) for docker container ([#&#8203;4357](https://github.com/psf/black/issues/4357)) ### [`v24.4.2`](https://github.com/psf/black/blob/HEAD/CHANGES.md#2442) [Compare Source](https://github.com/psf/black/compare/24.4.1...24.4.2) This is a bugfix release to fix two regressions in the new f-string parser introduced in 24.4.1. ##### Parser - Fix regression where certain complex f-strings failed to parse ([#&#8203;4332](https://github.com/psf/black/issues/4332)) ##### Performance - Fix bad performance on certain complex string literals ([#&#8203;4331](https://github.com/psf/black/issues/4331)) ### [`v24.4.1`](https://github.com/psf/black/blob/HEAD/CHANGES.md#2441) [Compare Source](https://github.com/psf/black/compare/24.4.0...24.4.1) ##### Highlights - Add support for the new Python 3.12 f-string syntax introduced by PEP 701 ([#&#8203;3822](https://github.com/psf/black/issues/3822)) ##### Stable style - Fix crash involving indented dummy functions containing newlines ([#&#8203;4318](https://github.com/psf/black/issues/4318)) ##### Parser - Add support for type parameter defaults, a new syntactic feature added to Python 3.13 by PEP 696 ([#&#8203;4327](https://github.com/psf/black/issues/4327)) ##### Integrations - Github Action now works even when `git archive` is skipped ([#&#8203;4313](https://github.com/psf/black/issues/4313)) ### [`v24.4.0`](https://github.com/psf/black/blob/HEAD/CHANGES.md#2440) [Compare Source](https://github.com/psf/black/compare/24.3.0...24.4.0) ##### Stable style - Fix unwanted crashes caused by AST equivalency check ([#&#8203;4290](https://github.com/psf/black/issues/4290)) ##### Preview style - `if` guards in `case` blocks are now wrapped in parentheses when the line is too long. ([#&#8203;4269](https://github.com/psf/black/issues/4269)) - Stop moving multiline strings to a new line unless inside brackets ([#&#8203;4289](https://github.com/psf/black/issues/4289)) ##### Integrations - Add a new option `use_pyproject` to the GitHub Action `psf/black`. This will read the Black version from `pyproject.toml`. ([#&#8203;4294](https://github.com/psf/black/issues/4294)) ### [`v24.3.0`](https://github.com/psf/black/blob/HEAD/CHANGES.md#2430) [Compare Source](https://github.com/psf/black/compare/24.2.0...24.3.0) ##### Highlights This release is a milestone: it fixes Black's first CVE security vulnerability. If you run Black on untrusted input, or if you habitually put thousands of leading tab characters in your docstrings, you are strongly encouraged to upgrade immediately to fix [CVE-2024-21503](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21503). This release also fixes a bug in Black's AST safety check that allowed Black to make incorrect changes to certain f-strings that are valid in Python 3.12 and higher. ##### Stable style - Don't move comments along with delimiters, which could cause crashes ([#&#8203;4248](https://github.com/psf/black/issues/4248)) - Strengthen AST safety check to catch more unsafe changes to strings. Previous versions of Black would incorrectly format the contents of certain unusual f-strings containing nested strings with the same quote type. Now, Black will crash on such strings until support for the new f-string syntax is implemented. ([#&#8203;4270](https://github.com/psf/black/issues/4270)) - Fix a bug where line-ranges exceeding the last code line would not work as expected ([#&#8203;4273](https://github.com/psf/black/issues/4273)) ##### Performance - Fix catastrophic performance on docstrings that contain large numbers of leading tab characters. This fixes [CVE-2024-21503](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21503). ([#&#8203;4278](https://github.com/psf/black/issues/4278)) ##### Documentation - Note what happens when `--check` is used with `--quiet` ([#&#8203;4236](https://github.com/psf/black/issues/4236)) </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy4yNDYuMSIsInVwZGF0ZWRJblZlciI6IjM5LjE2OS4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiJ9-->
renovate-bot added the dependencies label 2024-03-16 00:03:50 +01:00
renovate-bot added 1 commit 2024-03-16 00:03:51 +01:00
chore(deps): update dependency black to v24.3.0
All checks were successful
Python Linters / pylint (pull_request) Successful in 59s
Python Linters / formatting (pull_request) Successful in 51s
Python Linters / mypy (pull_request) Successful in 55s
REUSE Compliance / reuse (pull_request) Successful in 24s
Selftests / test-build-install (pull_request) Successful in 51s
Selftests / test-sync (pull_request) Successful in 1m23s
renovate/stability-days Updates have met minimum release age requirement
8e6f396453
renovate-bot changed title from chore(deps): update dependency black to v24.3.0 to chore(deps): update dependency black to v24.4.0 2024-04-16 00:08:16 +02:00
renovate-bot force-pushed renovate/black-24.x-lockfile from 8e6f396453 to 1d5d9cb259 2024-04-16 00:08:18 +02:00 Compare
renovate-bot force-pushed renovate/black-24.x-lockfile from 1d5d9cb259 to a8770caa45 2024-04-28 00:04:13 +02:00 Compare
renovate-bot changed title from chore(deps): update dependency black to v24.4.0 to chore(deps): update dependency black to v24.4.1 2024-04-28 00:04:14 +02:00
renovate-bot changed title from chore(deps): update dependency black to v24.4.1 to chore(deps): update dependency black to v24.4.2 2024-04-30 00:03:09 +02:00
renovate-bot force-pushed renovate/black-24.x-lockfile from a8770caa45 to d462dcb8d8 2024-08-06 00:03:30 +02:00 Compare
renovate-bot changed title from chore(deps): update dependency black to v24.4.2 to chore(deps): update dependency black to v24.8.0 2024-08-06 00:03:30 +02:00
renovate-bot changed title from chore(deps): update dependency black to v24.8.0 to chore(deps): update dependency black to v24.10.0 2024-10-11 00:03:18 +02:00
renovate-bot force-pushed renovate/black-24.x-lockfile from d462dcb8d8 to 7bd745ad3c 2024-10-11 00:03:19 +02:00 Compare
renovate-bot force-pushed renovate/black-24.x-lockfile from 7bd745ad3c to eb18ddf1e9 2025-02-27 01:08:44 +01:00 Compare
mxmehl closed this pull request 2025-03-24 22:09:51 +01:00
Author
Collaborator

Renovate Ignore Notification

Because you closed this PR without merging, Renovate will ignore this update (^24.0.0). You will get a PR once a newer version is released. To ignore this dependency forever, add it to the ignoreDeps array of your Renovate config.

If you accidentally closed this PR, or if you changed your mind: rename this PR to get a fresh replacement PR.

### Renovate Ignore Notification Because you closed this PR without merging, Renovate will ignore this update (`^24.0.0`). You will get a PR once a newer version is released. To ignore this dependency forever, add it to the `ignoreDeps` array of your Renovate config. If you accidentally closed this PR, or if you changed your mind: rename this PR to get a fresh replacement PR.
All checks were successful
renovate/stability-days Updates have met minimum release age requirement
Python Linters / pylint (pull_request) Successful in 1m19s
Python Linters / formatting (pull_request) Successful in 32s
Python Linters / mypy (pull_request) Successful in 34s
REUSE Compliance / reuse (pull_request) Successful in 15s
Selftests / test-build-install (pull_request) Successful in 1m17s
Selftests / test-sync (pull_request) Successful in 59s

Pull request closed

Sign in to join this conversation.