build(deps): bump yarl from 1.22.0 to 1.23.0 #956 (lando@main)

Warnings
  • Checking...
Blockers
  • Checking...
Branches dependabot/pip/yarl-1.23.0 -> main
Repo lando@main (git) (git://github.com/mozilla-conduit/lando.git)
Author dependabot[bot]
State closed
Commit Title build(deps): bump yarl from 1.22.0 to 1.23.0
Commit Body Bumps [yarl](https://github.com/aio-libs/yarl) from 1.22.0 to 1.23.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/aio-libs/yarl/releases">yarl's releases</a>.</em></p> <blockquote> <h2>1.23.0</h2> <h2>Features</h2> <ul> <li> <p>Added support for <code>pydantic</code>, the :class:<code>~yarl.URL</code> could be used as a field type in <code>pydantic</code> models seamlessly.</p> <p><em>Related issues and pull requests on GitHub:</em> <a href="https://redirect.github.com/aio-libs/yarl/issues/1607">#1607</a>.</p> </li> </ul> <h2>Packaging updates and notes for downstreams</h2> <ul> <li> <p>The CI has been set up to notify Codecov about upload completion -- by :user:<code>webknjaz</code>.</p> <p>With this, Codecov no longer needs to guess whether it received all the intended coverage reports or not.</p> <p><em>Related issues and pull requests on GitHub:</em> <a href="https://redirect.github.com/aio-libs/yarl/issues/1577">#1577</a>.</p> </li> <li> <p>The in-tree build backend allows the end-users appending <code>CFLAGS</code> and <code>LDFLAGS</code> by setting respective environment variables externally.</p> <p>It additionally sets up default compiler flags to perform building with maximum optimization in release mode. This makes the resulting artifacts shipped to PyPI smaller.</p> <p>When line tracing is requested, the compiler and linker flags are configured to include as much information as possible for debugging and coverage tracking. The development builds are therefore smaller.</p> <p>-- by :user:<code>webknjaz</code></p> <p><em>Related issues and pull requests on GitHub:</em> <a href="https://redirect.github.com/aio-libs/yarl/issues/1586">#1586</a>.</p> </li> <li> <p>The :pep:<code>517</code> build backend now supports a new config setting for controlling whether to build the project in-tree or in a temporary directory. It only affects wheels and is set up to build in a temporary directory by default. It does not affect editable wheel builds — they will keep being built in-tree regardless.</p> <p>-- by :user:<code>webknjaz</code></p> </li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/aio-libs/yarl/blob/master/CHANGES.rst">yarl's changelog</a>.</em></p> <blockquote> <h1>1.23.0</h1> <p><em>(2025-12-16)</em></p> <h2>Features</h2> <ul> <li> <p>Added support for <code>pydantic</code>, the :class:<code>~yarl.URL</code> could be used as a field type in <code>pydantic</code> models seamlessly.</p> <p><em>Related issues and pull requests on GitHub:</em> :issue:<code>1607</code>.</p> </li> </ul> <h2>Packaging updates and notes for downstreams</h2> <ul> <li> <p>The CI has been set up to notify Codecov about upload completion -- by :user:<code>webknjaz</code>.</p> <p>With this, Codecov no longer needs to guess whether it received all the intended coverage reports or not.</p> <p><em>Related issues and pull requests on GitHub:</em> :issue:<code>1577</code>.</p> </li> <li> <p>The in-tree build backend allows the end-users appending <code>CFLAGS</code> and <code>LDFLAGS</code> by setting respective environment variables externally.</p> <p>It additionally sets up default compiler flags to perform building with maximum optimization in release mode. This makes the resulting artifacts shipped to PyPI smaller.</p> <p>When line tracing is requested, the compiler and linker flags are configured to include as much information as possible for debugging and coverage tracking. The development builds are therefore smaller.</p> <p>-- by :user:<code>webknjaz</code></p> <p><em>Related issues and pull requests on GitHub:</em> :issue:<code>1586</code>.</p> </li> <li> <p>The :pep:<code>517</code> build backend now supports a new config setting for controlling whether to build the project in-tree or in a temporary directory. It only affects wheels and is set up to build in a temporary directory by default. It does</p> </li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/aio-libs/yarl/commit/3d05d4c25b9924acf49b35fb04355c37ae708a87"><code>3d05d4c</code></a> Fix 1.23.0 release to match CHANGES.rst format (<a href="https://redirect.github.com/aio-libs/yarl/issues/1636">#1636</a>)</li> <li><a href="https://github.com/aio-libs/yarl/commit/3f4977a14914a6ccdb59058adeece2dd67c88045"><code>3f4977a</code></a> Bump actions/upload-artifact from 6 to 7 (<a href="https://redirect.github.com/aio-libs/yarl/issues/1634">#1634</a>)</li> <li><a href="https://github.com/aio-libs/yarl/commit/7829b01ec6217349dfce3a1dd3190d29ddbb14a9"><code>7829b01</code></a> ci: add riscv64 manylinux wheels (<a href="https://redirect.github.com/aio-libs/yarl/issues/1625">#1625</a>)</li> <li><a href="https://github.com/aio-libs/yarl/commit/e0592a18a9a6ad480e9dbacc997eb493c27fb993"><code>e0592a1</code></a> Bump pre-commit from 4.5.0 to 4.5.1 (<a href="https://redirect.github.com/aio-libs/yarl/issues/1618">#1618</a>)</li> <li><a href="https://github.com/aio-libs/yarl/commit/26ba78c202103bf1557e8228a6d24c3e647ed863"><code>26ba78c</code></a> Fix version number (<a href="https://redirect.github.com/aio-libs/yarl/issues/1616">#1616</a>)</li> <li><a href="https://github.com/aio-libs/yarl/commit/4811166b28ff9731ee3b41857199cb87322ab99b"><code>4811166</code></a> Release 1.23.0 (<a href="https://redirect.github.com/aio-libs/yarl/issues/1615">#1615</a>)</li> <li><a href="https://github.com/aio-libs/yarl/commit/f30712383e7d310f26fc9ee0dd07eda9d0b983fd"><code>f307123</code></a> Add pydantic support (<a href="https://redirect.github.com/aio-libs/yarl/issues/1607">#1607</a>)</li> <li><a href="https://github.com/aio-libs/yarl/commit/383b159a5de015a061c6a2f1a06746cd5a6baa99"><code>383b159</code></a> Bump actions/upload-artifact from 5 to 6 (<a href="https://redirect.github.com/aio-libs/yarl/issues/1612">#1612</a>)</li> <li><a href="https://github.com/aio-libs/yarl/commit/3476600469a7293d03ce9c4968ab2587d52971ad"><code>3476600</code></a> Bump pytest from 8.4.2 to 9.0.2 (<a href="https://redirect.github.com/aio-libs/yarl/issues/1606">#1606</a>)</li> <li><a href="https://github.com/aio-libs/yarl/commit/27cefc5b2e66cb81eb5485f30055bcee469a06d3"><code>27cefc5</code></a> Bump actions/checkout from 5 to 6 (<a href="https://redirect.github.com/aio-libs/yarl/issues/1599">#1599</a>)</li> <li>Additional commits viewable in <a href="https://github.com/aio-libs/yarl/compare/v1.22.0...v1.23.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=yarl&package-manager=pip&previous-version=1.22.0&new-version=1.23.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details>

Landings

Not yet Landed
There has been no attempt to land revisions in this stack.