mdboop ( Matthew Brooks )

Bumps pip from 9.0.1 to 19.2. <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/pypa/pip/blob/main/NEWS.rst">pip's changelog</a>.</em></p> <blockquote> <h1>19.2 (2019-07-22)</h1> <h2>Deprecations and Removals</h2> <ul> <li>Drop support for EOL Python 3.4. (<code>#6685 <https://github.com/pypa/pip/issues/6685></code>)</li> <li>Improve deprecation messages to include the version in which the functionality will be removed. (<code>#6549 <https://github.com/pypa/pip/issues/6549></code>)</li> </ul> <h2>Features</h2> <ul> <li>Credentials will now be loaded using <code>keyring</code> when installed. (<code>#5948 <https://github.com/pypa/pip/issues/5948></code>)</li> <li>Fully support using <code>--trusted-host</code> inside requirements files. (<code>#3799 <https://github.com/pypa/pip/issues/3799></code>)</li> <li>Update timestamps in pip's <code>--log</code> file to include milliseconds. (<code>#6587 <https://github.com/pypa/pip/issues/6587></code>)</li> <li>Respect whether a file has been marked as "yanked" from a simple repository (see <code>PEP 592 <https://www.python.org/dev/peps/pep-0592/></code>__ for details). (<code>#6633 <https://github.com/pypa/pip/issues/6633></code>)</li> <li>When choosing candidates to install, prefer candidates with a hash matching one of the user-provided hashes. (<code>#5874 <https://github.com/pypa/pip/issues/5874></code>)</li> <li>Improve the error message when <code>METADATA</code> or <code>PKG-INFO</code> is None when accessing metadata. (<code>#5082 <https://github.com/pypa/pip/issues/5082></code>)</li> <li>Add a new command <code>pip debug</code> that can display e.g. the list of compatible tags for the current Python. (<code>#6638 <https://github.com/pypa/pip/issues/6638></code>)</li> <li>Display hint on installing with --pre when search results include pre-release versions. (<code>#5169 <https://github.com/pypa/pip/issues/5169></code>)</li> <li>Report to Warehouse that pip is running under CI if the <code>PIP_IS_CI</code> environment variable is set. (<code>#5499 <https://github.com/pypa/pip/issues/5499></code>)</li> <li>Allow <code>--python-version</code> to be passed as a dotted version string (e.g. <code>3.7</code> or <code>3.7.3</code>). (<code>#6585 <https://github.com/pypa/pip/issues/6585></code>)</li> <li>Log the final filename and SHA256 of a <code>.whl</code> file when done building a wheel. (<code>#5908 <https://github.com/pypa/pip/issues/5908></code>)</li> <li>Include the wheel's tags in the log message explanation when a candidate wheel link is found incompatible. (<code>#6121 <https://github.com/pypa/pip/issues/6121></code>)</li> <li>Add a <code>--path</code> argument to <code>pip freeze</code> to support <code>--target</code> installations. (<code>#6404 <https://github.com/pypa/pip/issues/6404></code>)</li> <li>Add a <code>--path</code> argument to <code>pip list</code> to support <code>--target</code> installations. (<code>#6551 <https://github.com/pypa/pip/issues/6551></code>)</li> </ul> <h2>Bug Fixes</h2> <ul> <li>Set <code>sys.argv[0]</code> to the underlying <code>setup.py</code> when invoking <code>setup.py</code> via the setuptools shim so setuptools doesn't think the path is <code>-c</code>. (<code>#1890 <https://github.com/pypa/pip/issues/1890></code>)</li> <li>Update <code>pip download</code> to respect the given <code>--python-version</code> when checking <code>"Requires-Python"</code>. (<code>#5369 <https://github.com/pypa/pip/issues/5369></code>)</li> <li>Respect <code>--global-option</code> and <code>--install-option</code> when installing from a version control url (e.g. <code>git</code>). (<code>#5518 <https://github.com/pypa/pip/issues/5518></code>)</li> <li>Make the "ascii" progress bar really be "ascii" and not Unicode. (<code>#5671 <https://github.com/pypa/pip/issues/5671></code>)</li> <li>Fail elegantly when trying to set an incorrectly formatted key in config. (<code>#5963 <https://github.com/pypa/pip/issues/5963></code>)</li> <li>Prevent DistutilsOptionError when prefix is indicated in the global environment and <code>--target</code> is used. (<code>#6008 <https://github.com/pypa/pip/issues/6008></code>)</li> <li>Fix <code>pip install</code> to respect <code>--ignore-requires-python</code> when evaluating links. (<code>#6371 <https://github.com/pypa/pip/issues/6371></code>_)</li> </ul>  </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/pypa/pip/commit/0e642958ada570358c3e095b28d78b6196c56a35"><code>0e64295</code></a> Generate NEWS</li> <li><a href="https://github.com/pypa/pip/commit/0df416d66ee6c28512295de297f44597b45acf7a"><code>0df416d</code></a> Bump version for release</li> <li><a href="https://github.com/pypa/pip/commit/5f0aa2a42fc1be8b0d0f6f48263a0d4d9ec8856e"><code>5f0aa2a</code></a> Generate AUTHORS.txt</li> <li><a href="https://github.com/pypa/pip/commit/8582f7e40f3083e6713057122edb1143a1cd784d"><code>8582f7e</code></a> Reduce dependency on ctypes when discovering glibc version. (<a href="https://github-redirect.dependabot.com/pypa/pip/issues/6678">#6678</a>)</li> <li><a href="https://github.com/pypa/pip/commit/e308497416e172b48e2d49a226f4d3e0b71a2a5f"><code>e308497</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/pypa/pip/issues/6743">#6743</a> from chrahunt/maint/remove-path-copytree</li> <li><a href="https://github.com/pypa/pip/commit/9281a7aac19a55ee85a631a148277f2863efd6ac"><code>9281a7a</code></a> Remove copytree from tests.lib.path.Path.</li> <li><a href="https://github.com/pypa/pip/commit/0d286012f79784b05bd1ddbbe9ead01dcfb844fe"><code>0d28601</code></a> Remove copy from tests.lib.path.Path. (<a href="https://github-redirect.dependabot.com/pypa/pip/issues/6746">#6746</a>)</li> <li><a href="https://github.com/pypa/pip/commit/c275e9d1ab6e2a3efb5e7d8cb4db18103bd675df"><code>c275e9d</code></a> Drop a useless import in favor of explicitness</li> <li><a href="https://github.com/pypa/pip/commit/3732e791a5b1cbd9153bbb6645f302cac69c7bd0"><code>3732e79</code></a> Remove normpath from tests.lib.path.Path.</li> <li><a href="https://github.com/pypa/pip/commit/358e690c547e4d62ed50385ee205e6794849ac4f"><code>358e690</code></a> Remove move from tests.lib.path.Path.</li> <li>Additional commits viewable in <a href="https://github.com/pypa/pip/compare/9.0.1...19.2">compare view</a></li> </ul> </details> <br />

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

<details> <summary>Dependabot commands and options</summary> <br />

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
@dependabot use these labels will set the current labels as the default for future PRs for this repo and language
@dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
@dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
@dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

</details>

+1 -1

1 commit in instacart/cwam/tree/dependabot/pip/pip-19.2 instacart/cwam/tree/master

0 comment

1 changed file

pr created time in 15 days

create barnchinstacart/cwam

branch : dependabot/pip/pip-19.2

created branch time in 15 days

release delvedor/find-my-way

v4.2.0

released time in 16 days

PR opened instacart/Snacks

Bump merge-deep from 3.0.2 to 3.0.3 dependencies

Bumps merge-deep from 3.0.2 to 3.0.3. <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/jonschlinkert/merge-deep/commit/628ff47c9d824ccf21adf9a2b7cc6b74632e11a1"><code>628ff47</code></a> 3.0.3</li> <li><a href="https://github.com/jonschlinkert/merge-deep/commit/cfbe20ccdb00255b711de57e37ed8ce9f109ef3f"><code>cfbe20c</code></a> run verb to generate README documentation</li> <li><a href="https://github.com/jonschlinkert/merge-deep/commit/e370968581413a2e5ffdbbf7c2f5094e0e0b3861"><code>e370968</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/jonschlinkert/merge-deep/issues/17">#17</a> from jonschlinkert/key-properties</li> <li><a href="https://github.com/jonschlinkert/merge-deep/commit/393e2cbaeacf54e77a307c3620a00f0ac057b8d5"><code>393e2cb</code></a> adding a test to ensure using merge-deep for inheritance still works</li> <li><a href="https://github.com/jonschlinkert/merge-deep/commit/c39b16134a6a9704be2e661b49b92e8561f10d90"><code>c39b161</code></a> add test to ensure constructor is not cloned</li> <li><a href="https://github.com/jonschlinkert/merge-deep/commit/11e5dd56de8a6aed0b1ed022089dbce6968d82a5"><code>11e5dd5</code></a> add isValidKey function to ensure only valid keys are merged</li> <li>See full diff in <a href="https://github.com/jonschlinkert/merge-deep/compare/3.0.2...3.0.3">compare view</a></li> </ul> </details> <br />

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

<details> <summary>Dependabot commands and options</summary> <br />

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
@dependabot use these labels will set the current labels as the default for future PRs for this repo and language
@dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
@dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
@dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language