Bump the pip group with 3 updates

[dependabot]

Bumps the pip group with 3 updates: sigstore, pytest-aiohttp and blurb.

Updates sigstore from 3.6.0 to 3.6.1

Release notes

Sourced from sigstore's releases.

v3.6.1

Fixed

• Relaxed the transitive dependency on cryptography to allow v43 and v44 to be resolved (#1251)

Changelog

Sourced from sigstore's changelog.

[3.6.1]

Fixed

• Relaxed the transitive dependency on cryptography to allow v43 and v44 to be resolved (#1251)

Commits

• 896cfe1 sigstore: prep 3.6.1 (#1263)
• 0c6deea build(deps): bump actions/upload-artifact in the actions group (#1262)
• 36a958f build(deps): bump actions/upload-artifact (#1261)
• 25e0ad4 Restructure documentation (#1255)
• 6a98ddd build(deps): bump github/codeql-action in the actions group (#1260)
• 491f3f8 build(deps): update ruff requirement from <0.8.3 to <0.8.4 (#1256)
• 0c1fafe Remove vestigial attestations: true (#1254)
• 9996ae8 bump rfc3161-client (#1251)
• 49c0706 Update Sigstore Timestamp using dependabot (#1225)
• 6a4edb5 build(deps): bump the actions group with 2 updates (#1253)
• Additional commits viewable in compare view

Updates pytest-aiohttp from 1.0.5 to 1.1.0

Release notes

Sourced from pytest-aiohttp's releases.

pytest-aiohttp v1.1.0

pytest-aiohttp

pytest plugin for aiohttp support

The library provides useful fixtures for creation test aiohttp server and client.

Installation

.. code-block:: console

$ pip install pytest-aiohttp

Add asyncio_mode = auto line to pytest configuration <https://docs.pytest.org/en/latest/customize.html>_ (see pytest-asyncio modes <https://github.com/pytest-dev/pytest-asyncio#modes>_ for details). The plugin works with strict mode also.

Usage

Write tests in pytest-asyncio <https://github.com/pytest-dev/pytest-asyncio>_ style using provided fixtures for aiohttp test server and client creation. The plugin provides resources cleanup out-of-the-box.

The simple usage example:

.. code-block:: python

from aiohttp import web
async def hello(request):
return web.Response(body=b"Hello, world")
def create_app():
app = web.Application()
app.router.add_route("GET", "/", hello)
return app
async def test_hello(aiohttp_client):
client = await aiohttp_client(create_app())
resp = await client.get("/")

... (truncated)

Changelog

Sourced from pytest-aiohttp's changelog.

1.1.0 (2025-01-23)

• Drop Python 3.8 (#57)

• Export the plugin types at top-level (#60, #61)

• Add host parameter to aiohttp_server fixture (#63)

Commits

• 5821546 Release 1.1.0
• ca22197 [pre-commit.ci] pre-commit autoupdate (#64)
• 7aaad0b Add host parameter to aiohttp_server fixture (#63)
• 0866b16 [pre-commit.ci] pre-commit autoupdate (#62)
• d6208f9 Expose type annotations (#61)
• 61057f1 Export types at top-level (#60)
• 1206cc4 [pre-commit.ci] pre-commit autoupdate (#58)
• 8887bfa Sync from aiohttp (#56)
• 98444cb Drop Python 3.8 (#57)
• See full diff in compare view

Updates blurb from 1.3.0 to 2.0.0

Release notes

Sourced from blurb's releases.

v2.0.0

What's Changed

• Move blurb test subcommand into test suite by @​hugovk in python/blurb#37
• Add support for Python 3.14 by @​ezio-melotti in python/blurb#40
• Validate gh-issue is int before checking range, and that gh-issue or bpo exists by @​hugovk in python/blurb#35
• Replace safe_mkdir(path) with os.makedirs(path, exist_ok=True) by @​hugovk in python/blurb#38
• Test version handling functions by @​hugovk in python/blurb#36
• Test textwrap_body, current_date and sortable_datetime by @​hugovk in python/blurb#42
• CI: Lint and test via uv by @​hugovk in python/blurb#32

Full Changelog: python/blurb@v1.3.0...v2.0.0

Changelog

Sourced from blurb's changelog.

2.0.0

• Move 'blurb test' subcommand into test suite by @​hugovk in python/blurb#37
• Add support for Python 3.14 by @​ezio-melotti in python/blurb#40
• Validate gh-issue is int before checking range, and that gh-issue or bpo exists by @​hugovk in python/blurb#35
• Replace safe_mkdir(path) with os.makedirs(path, exist_ok=True) by @​hugovk in python/blurb#38
• Test version handling functions by @​hugovk in python/blurb#36
• CI: Lint and test via uv by @​hugovk in python/blurb#32

Commits

• e7ea718 Update changelog for 2.0.0 (#41)
• df1ef06 Test textwrap_body, current_date and sortable_datetime (#42)
• 0f2c292 Add newline
• ee43c48 Remove extra parentheses
• 1e6dd0f Use 'not in' to test membership
• 7cb5abb Remove unused variable
• 156988c Test textwrap_body, current_date and sortable_datetime
• 0311da4 Update changelog for 2.0.0
• 65941da Move 'blurb test' subcommand into test suite (#37)
• 0df5d3b Add support for Python 3.14 (#40)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[ezio-melotti]

This and #211 seem to be failing because of an unrelated issue in a Misc/NEWS that should be fixed upstream.

[hugovk]

Fixed in python/cpython#128875 and backported to 3.12 in python/cpython#128878 two weeks ago.

However, this workflow defaults to the 3.12.3 tag (from 2024-04-09):

release-tools/.github/workflows/source-and-docs-release.yml

Line 44 in 6922a3c

CPYTHON_RELEASE: ${{ github.event.inputs.cpython_release || '3.12.3' }}

So we'll need to update that to something newer. Perhaps 3.12.8 or 3.13.1?

[hugovk]

@python/organization-owners Please could you enable the "Always suggest updating pull request branches" option so we can merge main master into PRs?

[ambv]

Done.