Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

build(deps): bump keyring from 25.2.1 to 25.5.0 #18794

Merged
merged 1 commit into from
Nov 6, 2024

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Oct 29, 2024

Bumps keyring from 25.2.1 to 25.5.0.

Changelog

Sourced from keyring's changelog.

v25.5.0

Features

  • When parsing keyring_path from the config, the home directory is now expanded from ~. (#696)

Bugfixes

  • In get_credential, now returns None when the indicated username is not found. (#698)

v25.4.1

Bugfixes

  • Fixed ValueError for AnonymousCredentials in CLI. (#694)

v25.4.0

Features

  • Refined type spec and interfaces on credential objects. Introduced AnonymousCredential to model a secret without a username. (#689)

v25.3.0

Features

  • Deprecated support for empty usernames. Now all backends will reject an empty string as input for the 'username' field when setting a password. Later this deprecation will become a more visible user warning and even later an error. If this warning is triggered in your environment, please consider using a static value (even 'username') or comment in the issue and describe the use-case that demands support for empty usernames. (#668)
Commits

Dependabot compatibility score

You can trigger a rebase of this PR by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot dependabot bot requested a review from a team as a code owner October 29, 2024 20:18
@dependabot dependabot bot added Changed Required label for PR that categorizes merge commit message as "Changed" for changelog dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Oct 29, 2024
@dependabot dependabot bot requested review from altendky and emlowe October 29, 2024 20:18
Copy link

socket-security bot commented Oct 29, 2024

Removed dependencies detected. Learn more about Socket for GitHub ↗︎

🚮 Removed packages: pypi/[email protected]

View full report↗︎

@github-actions github-actions bot added the merge_conflict Branch has conflicts that prevent merge to main label Oct 30, 2024
Copy link
Contributor

This pull request has conflicts, please resolve those before we can evaluate the pull request.

@emlowe
Copy link
Contributor

emlowe commented Nov 5, 2024

@dependabot rebase

Bumps [keyring](https://github.com/jaraco/keyring) from 25.2.1 to 25.5.0.
- [Release notes](https://github.com/jaraco/keyring/releases)
- [Changelog](https://github.com/jaraco/keyring/blob/main/NEWS.rst)
- [Commits](jaraco/keyring@v25.2.1...v25.5.0)

---
updated-dependencies:
- dependency-name: keyring
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot force-pushed the dependabot/pip/keyring-25.5.0 branch from 4839f28 to eafae5c Compare November 5, 2024 13:54
@github-actions github-actions bot removed the merge_conflict Branch has conflicts that prevent merge to main label Nov 5, 2024
Copy link
Contributor

github-actions bot commented Nov 5, 2024

Conflicts have been resolved. A maintainer will review the pull request shortly.

Copy link
Contributor Author

dependabot bot commented on behalf of github Nov 5, 2024

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot rebase.

@pmaslana pmaslana merged commit 3d5752e into main Nov 6, 2024
358 checks passed
@pmaslana pmaslana deleted the dependabot/pip/keyring-25.5.0 branch November 6, 2024 19:56
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Changed Required label for PR that categorizes merge commit message as "Changed" for changelog dependencies Pull requests that update a dependency file python Pull requests that update Python code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants