Skip to content

build(deps-dev): update ruff requirement from <0.0.226 to <0.0.229 #466

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 1 commit into from
Jan 20, 2023

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jan 20, 2023

Updates the requirements on ruff to permit the latest version.

Release notes

Sourced from ruff's releases.

v0.0.228

What's Changed

New Contributors

Full Changelog: astral-sh/ruff@v0.0.227...v0.0.228

Changelog

Sourced from ruff's changelog.

Breaking Changes

0.0.226

misplaced-comparison-constant (PLC2201) was deprecated in favor of SIM300 (#1980)

These two rules contain (nearly) identical logic. To deduplicate the rule set, we've upgraded SIM300 to handle a few more cases, and deprecated PLC2201 in favor of SIM300.

0.0.225

@functools.cache rewrites have been moved to a standalone rule (UP033) (#1938)

Previously, UP011 handled both @functools.lru_cache()-to-@functools.lru_cache conversions, and @functools.lru_cache(maxsize=None)-to-@functools.cache conversions. The latter has been moved out to its own rule (UP033). As such, some # noqa: UP011 comments may need to be updated to reflect the change in rule code.

0.0.222

--max-complexity has been removed from the CLI (#1877)

The McCabe plugin's --max-complexity setting has been removed from the CLI, for consistency with the treatment of other, similar settings.

To set the maximum complexity, use the max-complexity property in your pyproject.toml file, like so:

[tool.ruff.mccabe]
max-complexity = 10

0.0.181

Files excluded by .gitignore are now ignored (#1234)

Ruff will now avoid checking files that are excluded by .ignore, .gitignore, .git/info/exclude, and global gitignore files. This behavior is powered by the ignore crate, and is applied in addition to Ruff's built-in exclude system.

To disable this behavior, set respect-gitignore = false in your pyproject.toml file.

Note that hidden files (i.e., files and directories prefixed with a .) are not ignored by default.

0.0.178

Configuration files are now resolved hierarchically (#1190)

... (truncated)

Commits
  • 9e704a7 Only fix true-false returns for return-bool-condition-directly (#2037)
  • c9da98e Fix D404 NoThisPrefix not working with whitespace. (#2036)
  • 5377d24 Bump version to 0.0.228
  • db8e450 fix(pydocstyle): Avoid trimming docstring if starts with leading quote (#2027)
  • bd2de56 Move readme dev details to CONTRIBUTING.md and fix contradictions (#2030)
  • 3a81f89 Bump terminfo to remove a whole bunch of unnecessary dependencies (#2022)
  • fd6dc2a Use platform-appropriate newline character for LibCST embedding (#2028)
  • 8693236 Make CI test add_*.py scripts
  • 44e2b62 fix: Update add_rule.py to create new files for rules
  • 16c81f7 fix: Update add_rule.py to account for 16e79c8d
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Updates the requirements on [ruff](https://github.com/charliermarsh/ruff) to permit the latest version.
- [Release notes](https://github.com/charliermarsh/ruff/releases)
- [Changelog](https://github.com/charliermarsh/ruff/blob/main/BREAKING_CHANGES.md)
- [Commits](astral-sh/ruff@v0.0.18...v0.0.228)

---
updated-dependencies:
- dependency-name: ruff
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Jan 20, 2023
@woodruffw
Copy link
Member

/gcbrun

@woodruffw woodruffw enabled auto-merge (squash) January 20, 2023 19:12
@woodruffw woodruffw merged commit 7ba62b9 into main Jan 20, 2023
@woodruffw woodruffw deleted the dependabot/pip/ruff-lt-0.0.229 branch January 20, 2023 19:13
jleightcap pushed a commit that referenced this pull request Jan 31, 2023
)

Updates the requirements on [ruff](https://github.com/charliermarsh/ruff) to permit the latest version.
- [Release notes](https://github.com/charliermarsh/ruff/releases)
- [Changelog](https://github.com/charliermarsh/ruff/blob/main/BREAKING_CHANGES.md)
- [Commits](astral-sh/ruff@v0.0.18...v0.0.228)

---
updated-dependencies:
- dependency-name: ruff
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
jleightcap pushed a commit that referenced this pull request Jan 31, 2023
)

Updates the requirements on [ruff](https://github.com/charliermarsh/ruff) to permit the latest version.
- [Release notes](https://github.com/charliermarsh/ruff/releases)
- [Changelog](https://github.com/charliermarsh/ruff/blob/main/BREAKING_CHANGES.md)
- [Commits](astral-sh/ruff@v0.0.18...v0.0.228)

---
updated-dependencies:
- dependency-name: ruff
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Signed-off-by: Jack Leightcap <jack.leightcap@trailofbits.com>
emboman13 pushed a commit to emilejbm/sigstore-python that referenced this pull request Feb 2, 2023
…igstore#466)

Updates the requirements on [ruff](https://github.com/charliermarsh/ruff) to permit the latest version.
- [Release notes](https://github.com/charliermarsh/ruff/releases)
- [Changelog](https://github.com/charliermarsh/ruff/blob/main/BREAKING_CHANGES.md)
- [Commits](astral-sh/ruff@v0.0.18...v0.0.228)

---
updated-dependencies:
- dependency-name: ruff
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Signed-off-by: emboman13 <embo1013@yahoo.com>
woodruffw added a commit that referenced this pull request Feb 14, 2023
* class prototype and script to find instances to change

* script added

* Set up newtype file with example newTypes

* added newtypes to _util.py

* renamed newtypes, added keyID

* deletion of old file

* added hexstr newtype and implemented newtypes for SigningResults

* added newtypes to verify/models.py

* renamed newtypes to follow standardized format

* moved newtypes into _util

* deleted newtypes.py

* Changed sign.py to use _utils and set up basic implementation in verifier

* build(deps-dev): update ruff requirement from <0.0.226 to <0.0.229 (#466)

Updates the requirements on [ruff](https://github.com/charliermarsh/ruff) to permit the latest version.
- [Release notes](https://github.com/charliermarsh/ruff/releases)
- [Changelog](https://github.com/charliermarsh/ruff/blob/main/BREAKING_CHANGES.md)
- [Commits](astral-sh/ruff@v0.0.18...v0.0.228)

---
updated-dependencies:
- dependency-name: ruff
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Signed-off-by: emboman13 <embo1013@yahoo.com>

* build(deps-dev): update ruff requirement from <0.0.229 to <0.0.231 (#468)

Updates the requirements on [ruff](https://github.com/charliermarsh/ruff) to permit the latest version.
- [Release notes](https://github.com/charliermarsh/ruff/releases)
- [Changelog](https://github.com/charliermarsh/ruff/blob/main/BREAKING_CHANGES.md)
- [Commits](astral-sh/ruff@v0.0.18...v0.0.230)

---
updated-dependencies:
- dependency-name: ruff
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Signed-off-by: emboman13 <embo1013@yahoo.com>

* build(deps-dev): update ruff requirement from <0.0.231 to <0.0.232 (#469)

Updates the requirements on [ruff](https://github.com/charliermarsh/ruff) to permit the latest version.
- [Release notes](https://github.com/charliermarsh/ruff/releases)
- [Changelog](https://github.com/charliermarsh/ruff/blob/main/BREAKING_CHANGES.md)
- [Commits](astral-sh/ruff@v0.0.18...v0.0.231)

---
updated-dependencies:
- dependency-name: ruff
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Signed-off-by: emboman13 <embo1013@yahoo.com>

* Initial Sigstore bundle support (#465)

* Initial Sigstore bundle support

Signed-off-by: William Woodruff <william@trailofbits.com>

* README: update `--help` texts

Signed-off-by: William Woodruff <william@trailofbits.com>

* sign: fix bundle generation

Certs are base64'd DER, not PEM, and the canonicalized_body
is the log entry body, not the canonicalized contents that
the SET is signed over.

Signed-off-by: William Woodruff <william@trailofbits.com>

* sign: remove TODO

Signed-off-by: William Woodruff <william@trailofbits.com>

* sign: update TODO

Signed-off-by: William Woodruff <william@trailofbits.com>

* _cli: Make `--bundle` refer to a path and create a `--no-bundle` flag
to control whether Sigstore bundles are emitted by default

Signed-off-by: Alex Cameron <asc@tetsuo.sh>

* _cli: Move variable to correct scope

Signed-off-by: Alex Cameron <asc@tetsuo.sh>

* _cli: Reword warnings for bundle flags

Signed-off-by: Alex Cameron <asc@tetsuo.sh>

* README: Fix sign example

Signed-off-by: Alex Cameron <asc@tetsuo.sh>

* README: Update verify invocations

Signed-off-by: Alex Cameron <asc@tetsuo.sh>

* README: Fix line breaks

Signed-off-by: Alex Cameron <asc@tetsuo.sh>

* _cli: fix sig output

Signed-off-by: William Woodruff <william@trailofbits.com>

* _cli: fix sig check, take 2

Signed-off-by: William Woodruff <william@trailofbits.com>

Signed-off-by: William Woodruff <william@trailofbits.com>
Signed-off-by: Alex Cameron <asc@tetsuo.sh>
Co-authored-by: Alex Cameron <asc@tetsuo.sh>
Signed-off-by: emboman13 <embo1013@yahoo.com>

* CHANGELOG: record changes (#470)

Signed-off-by: William Woodruff <william@trailofbits.com>

Signed-off-by: William Woodruff <william@trailofbits.com>
Signed-off-by: emboman13 <embo1013@yahoo.com>

* class prototype and script to find instances to change

Signed-off-by: emboman13 <embo1013@yahoo.com>

* script added

Signed-off-by: emboman13 <embo1013@yahoo.com>

* Set up newtype file with example newTypes

Signed-off-by: emboman13 <embo1013@yahoo.com>

* renamed newtypes, added keyID

Signed-off-by: emboman13 <embo1013@yahoo.com>

* deletion of old file

Signed-off-by: emboman13 <embo1013@yahoo.com>

* added hexstr newtype and implemented newtypes for SigningResults

Signed-off-by: emboman13 <embo1013@yahoo.com>

* added newtypes to _util.py

Signed-off-by: emboman13 <embo1013@yahoo.com>

* renamed newtypes to follow standardized format

Signed-off-by: emboman13 <embo1013@yahoo.com>

* added newtypes to verify/models.py

Signed-off-by: emboman13 <embo1013@yahoo.com>

* moved newtypes into _util

Signed-off-by: emboman13 <embo1013@yahoo.com>

* deleted newtypes.py

Signed-off-by: emboman13 <embo1013@yahoo.com>

* Changed sign.py to use _utils and set up basic implementation in verifier

Signed-off-by: emboman13 <embo1013@yahoo.com>

* added newtypes to sigstore/veriry/models.py

* updated newtypes in verify/models.py

Signed-off-by: omartounsi7 <otounsi@purdue.edu>

* Revert "updated newtypes in verify/models.py"

This reverts commit f767d7a.

* Encapsulation of NewTypes in my share of files

Creation of new type 'dercert' that masks DER encoded bytes. Focus
on changing types in files within sigstore/_internal/.  Reformat, lint
lint is successful. 103 Tests pass, 8 are skipped, 2 fail.

* Removed an incorrect b64str newtype in models.py

Signed-off-by: omartounsi7 <otounsi@purdue.edu>

* "added newtypes to _internal/rekor/client.py"

Signed-off-by: omartounsi7 <otounsi@purdue.edu>

* "fixed type errors in sign.py"

Signed-off-by: omartounsi7 <otounsi@purdue.edu>

* Added a b64str newtype in verify/models.py

Signed-off-by: omartounsi7 <otounsi@purdue.edu>

* added a b64str newtype in verify/verifier.py

Signed-off-by: omartounsi7 <otounsi@purdue.edu>

* added a b64str newtype to _internal/fulcio/client.py

Signed-off-by: omartounsi7 <otounsi@purdue.edu>

* added a b64str newtype in _internal/oidc/oauth.py

Signed-off-by: omartounsi7 <otounsi@purdue.edu>

* added a b64str newtype in _internal/rekor/client.py

Signed-off-by: omartounsi7 <otounsi@purdue.edu>

* deleted script

Signed-off-by: omartounsi7 <otounsi@purdue.edu>

* fixed some type errors

* changed keyid to KeyID

Signed-off-by: omartounsi7 <otounsi@purdue.edu>

* anged hexstr to HexStr

Signed-off-by: omartounsi7 <otounsi@purdue.edu>

* changed b64str to B64Str

Signed-off-by: omartounsi7 <otounsi@purdue.edu>

* changed pemcert to PEMCert

Signed-off-by: omartounsi7 <otounsi@purdue.edu>

* changed dercert to DERCert

Signed-off-by: omartounsi7 <otounsi@purdue.edu>

* added docstrings to newtypes in _utils.py

Signed-off-by: omartounsi7 <otounsi@purdue.edu>

* Update sigstore/_utils.py

Co-authored-by: William Woodruff <william@yossarian.net>
Signed-off-by: omartounsi7 <62721212+omartounsi7@users.noreply.github.com>

* Update sigstore/_utils.py

Co-authored-by: William Woodruff <william@yossarian.net>
Signed-off-by: omartounsi7 <62721212+omartounsi7@users.noreply.github.com>

---------

Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: emboman13 <embo1013@yahoo.com>
Signed-off-by: William Woodruff <william@trailofbits.com>
Signed-off-by: Alex Cameron <asc@tetsuo.sh>
Signed-off-by: omartounsi7 <otounsi@purdue.edu>
Signed-off-by: omartounsi7 <62721212+omartounsi7@users.noreply.github.com>
Co-authored-by: emboman13 <embo1013@yahoo.com>
Co-authored-by: omartounsi7 <otounsi@purdue.edu>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: William Woodruff <william@trailofbits.com>
Co-authored-by: Alex Cameron <asc@tetsuo.sh>
Co-authored-by: omartounsi7 <62721212+omartounsi7@users.noreply.github.com>
Co-authored-by: William Woodruff <william@yossarian.net>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file python Pull requests that update Python code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant