Bump the pip group across 2 directories with 4 updates

[dependabot]

Bumps the pip group with 3 updates in the / directory: certifi, jinja2 and numpy.
Bumps the pip group with 1 update in the /turbinia/api/client directory: virtualenv.

Updates certifi from 2024.8.30 to 2025.1.31

Commits

• 088f931 2025.01.31 (#336)
• 1c17795 Bump pypa/gh-action-pypi-publish from 1.12.3 to 1.12.4 (#335)
• a2e88f0 Bump actions/upload-artifact from 4.5.0 to 4.6.0 (#334)
• 82284ed Bump peter-evans/create-pull-request from 7.0.5 to 7.0.6 (#333)
• 10d3d1d Bump actions/upload-artifact from 4.4.3 to 4.5.0 (#332)
• 4ba3900 2024.12.14 (#329)
• 9164660 Bump pypa/gh-action-pypi-publish from 1.12.2 to 1.12.3 (#331)
• 3dc3651 Bump pypa/gh-action-pypi-publish from 1.11.0 to 1.12.2 (#328)
• c5bf18d Bump pypa/gh-action-pypi-publish from 1.10.3 to 1.11.0 (#327)
• b908391 Bump actions/setup-python from 5.2.0 to 5.3.0 (#326)
• Additional commits viewable in compare view

Updates jinja2 from 3.1.4 to 3.1.5

Release notes

Sourced from jinja2's releases.

3.1.5

This is the Jinja 3.1.5 security fix release, which fixes security issues and bugs but does not otherwise change behavior and should not result in breaking changes compared to the latest feature release.

PyPI: https://pypi.org/project/Jinja2/3.1.5/ Changes: https://jinja.palletsprojects.com/changes/#version-3-1-5 Milestone: https://github.com/pallets/jinja/milestone/16?closed=1

• The sandboxed environment handles indirect calls to str.format, such as by passing a stored reference to a filter that calls its argument. GHSA-q2x7-8rv6-6q7h
• Escape template name before formatting it into error messages, to avoid issues with names that contain f-string syntax. #1792, GHSA-gmj6-6f8f-6699
• Sandbox does not allow clear and pop on known mutable sequence types. #2032
• Calling sync render for an async template uses asyncio.run. #1952
• Avoid unclosed auto_aiter warnings. #1960
• Return an aclose-able AsyncGenerator from Template.generate_async. #1960
• Avoid leaving root_render_func() unclosed in Template.generate_async. #1960
• Avoid leaving async generators unclosed in blocks, includes and extends. #1960
• The runtime uses the correct concat function for the current environment when calling block references. #1701
• Make |unique async-aware, allowing it to be used after another async-aware filter. #1781
• |int filter handles OverflowError from scientific notation. #1921
• Make compiling deterministic for tuple unpacking in a {% set ... %} call. #2021
• Fix dunder protocol (copy/pickle/etc) interaction with Undefined objects. #2025
• Fix copy/pickle support for the internal missing object. #2027
• Environment.overlay(enable_async) is applied correctly. #2061
• The error message from FileSystemLoader includes the paths that were searched. #1661
• PackageLoader shows a clearer error message when the package does not contain the templates directory. #1705
• Improve annotations for methods returning copies. #1880
• urlize does not add mailto: to values like @a@b. #1870
• Tests decorated with @pass_context can be used with the |select filter. #1624
• Using set for multiple assignment (a, b = 1, 2) does not fail when the target is a namespace attribute. #1413
• Using set in all branches of {% if %}{% elif %}{% else %} blocks does not cause the variable to be considered initially undefined. #1253

Changelog

Sourced from jinja2's changelog.

Version 3.1.5

Released 2024-12-21

• The sandboxed environment handles indirect calls to str.format, such as by passing a stored reference to a filter that calls its argument. :ghsa:q2x7-8rv6-6q7h
• Escape template name before formatting it into error messages, to avoid issues with names that contain f-string syntax. :issue:1792, :ghsa:gmj6-6f8f-6699
• Sandbox does not allow clear and pop on known mutable sequence types. :issue:2032
• Calling sync render for an async template uses asyncio.run. :pr:1952
• Avoid unclosed auto_aiter warnings. :pr:1960
• Return an aclose-able AsyncGenerator from Template.generate_async. :pr:1960
• Avoid leaving root_render_func() unclosed in Template.generate_async. :pr:1960
• Avoid leaving async generators unclosed in blocks, includes and extends. :pr:1960
• The runtime uses the correct concat function for the current environment when calling block references. :issue:1701
• Make |unique async-aware, allowing it to be used after another async-aware filter. :issue:1781
• |int filter handles OverflowError from scientific notation. :issue:1921
• Make compiling deterministic for tuple unpacking in a {% set ... %} call. :issue:2021
• Fix dunder protocol (copy/pickle/etc) interaction with Undefined objects. :issue:2025
• Fix copy/pickle support for the internal missing object. :issue:2027
• Environment.overlay(enable_async) is applied correctly. :pr:2061
• The error message from FileSystemLoader includes the paths that were searched. :issue:1661
• PackageLoader shows a clearer error message when the package does not contain the templates directory. :issue:1705
• Improve annotations for methods returning copies. :pr:1880
• urlize does not add mailto: to values like @a@b. :pr:1870
• Tests decorated with @pass_context`` can be used with the ``|select`` filter. :issue:1624`
• Using set for multiple assignment (a, b = 1, 2) does not fail when the target is a namespace attribute. :issue:1413
• Using set in all branches of {% if %}{% elif %}{% else %} blocks does not cause the variable to be considered initially undefined. :issue:1253

Commits

• 877f6e5 release version 3.1.5
• 8d58859 remove test pypi
• eda8fe8 update dev dependencies
• c8fdce1 Fix bug involving calling set on a template parameter within all branches of ...
• 66587ce Fix bug where set would sometimes fail within if
• fbc3a69 Add support for namespaces in tuple parsing (#1664)
• b8f4831 more comments about nsref assignment
• ee83219 Add support for namespaces in tuple assignment
• 1d55cdd Triple quotes in docs (#2064)
• 8a8eafc edit block assignment section
• Additional commits viewable in compare view

Updates numpy from 2.1.3 to 2.2.2

Release notes

Sourced from numpy's releases.

2.2.2 (Jan 18, 2025)

NumPy 2.2.2 Release Notes

NumPy 2.2.2 is a patch release that fixes bugs found after the 2.2.1 release. The number of typing fixes/updates is notable. This release supports Python versions 3.10-3.13.

Contributors

A total of 8 people contributed to this release. People with a "+" by their names contributed a patch for the first time.

• Alicia Boya García +
• Charles Harris
• Joren Hammudoglu
• Kai Germaschewski +
• Nathan Goldbaum
• PTUsumit +
• Rohit Goswami
• Sebastian Berg

Pull requests merged

A total of 16 pull requests were merged for this release.

• #28050: MAINT: Prepare 2.2.x for further development
• #28055: TYP: fix void arrays not accepting str keys in __setitem__
• #28066: TYP: fix unnecessarily broad integer binop return types (#28065)
• #28112: TYP: Better ndarray binop return types for float64 &...
• #28113: TYP: Return the correct bool from issubdtype
• #28114: TYP: Always accept date[time] in the datetime64 constructor
• #28120: BUG: Fix auxdata initialization in ufunc slow path
• #28131: BUG: move reduction initialization to ufunc initialization
• #28132: TYP: Fix interp to accept and return scalars
• #28137: BUG: call PyType_Ready in f2py to avoid data races
• #28145: BUG: remove unnecessary call to PyArray_UpdateFlags
• #28160: BUG: Avoid data race in PyArray_CheckFromAny_int
• #28175: BUG: Fix f2py directives and --lower casing
• #28176: TYP: Fix overlapping overloads issue in 2->1 ufuncs
• #28177: TYP: preserve shape-type in ndarray.astype()
• #28178: TYP: Fix missing and spurious top-level exports

Checksums

MD5

749cb2adf8043551aae22bbf0ed3130a  numpy-2.2.2-cp310-cp310-macosx_10_9_x86_64.whl
bc79fa2e44316b7ce9bacb48a993ed91  numpy-2.2.2-cp310-cp310-macosx_11_0_arm64.whl
c6b2caa2bbb645b5950dccb77efb1dbb  numpy-2.2.2-cp310-cp310-macosx_14_0_arm64.whl
8c410efac169af880cacbbac8a731658  numpy-2.2.2-cp310-cp310-macosx_14_0_x86_64.whl

... (truncated)

Commits

• fd8a68e Merge pull request #28184 from charris/prepare-2.2.2
• 0d106a5 REL: Prepare for the NumPy 2.2.2 release [wheel build]
• dfdd35a Merge pull request #28175 from charris/backport-28056
• e4517a8 Merge pull request #28176 from charris/backport-28168
• 2c0432b Merge pull request #28178 from charris/backport-28170
• 2230a08 Merge pull request #28177 from charris/backport-28169
• b04e32c TYP: Fix missing and spurious top-level exports
• 6a5f537 TYP: preserve shape-type in ndarray.astype()
• f782790 TYP: Fix overlapping overloads issue in 2->1 ufuncs
• a19acf1 BUG: Fix casing for f2py directives
• Additional commits viewable in compare view

Updates virtualenv from 20.26.3 to 20.26.6

Release notes

Sourced from virtualenv's releases.

20.26.6

What's Changed

• release 20.26.5 by @​gaborbernat in pypa/virtualenv#2766
• Fix #2768: Quote template strings in activation scripts by @​y5c4l3 in pypa/virtualenv#2771

New Contributors

• @​y5c4l3 made their first contribution in pypa/virtualenv#2771

Full Changelog: pypa/virtualenv@20.26.5...20.26.6

20.26.5

What's Changed

• release 20.26.4 by @​gaborbernat in pypa/virtualenv#2761
• Use uv over pip by @​gaborbernat in pypa/virtualenv#2765

Full Changelog: pypa/virtualenv@20.26.4...20.26.5

20.26.4

What's Changed

• release 20.26.3 by @​gaborbernat in pypa/virtualenv#2742
• Fix whitespace around backticks in changelog by @​edmorley in pypa/virtualenv#2751
• Test latest Python 3.13 by @​hugovk in pypa/virtualenv#2752
• Fix typo in Nushell activation script by @​edmorley in pypa/virtualenv#2754
• GitHub Actions: Replace deprecated macos-12 with macos-13 by @​hugovk in pypa/virtualenv#2756
• Fix #2728: Activating venv create unwanted console output by @​ShootGan in pypa/virtualenv#2748
• Upgrade bundled wheels by @​gaborbernat in pypa/virtualenv#2760

New Contributors

• @​ShootGan made their first contribution in pypa/virtualenv#2748

Full Changelog: pypa/virtualenv@20.26.3...20.26.4

Changelog

Sourced from virtualenv's changelog.

v20.26.6 (2024-09-27)

Bugfixes - 20.26.6

- Properly quote string placeholders in activation script templates to mitigate
  potential command injection - by :user:`y5c4l3`. (:issue:`2768`)
v20.26.5 (2024-09-17)
Bugfixes - 20.26.5

• Upgrade embedded wheels: setuptools to 75.1.0 from 74.1.2 - by :user:gaborbernat. (:issue:2765)

v20.26.4 (2024-09-07)

Bugfixes - 20.26.4

- no longer create `()` output in console during activation of a virtualenv by .bat file. (:issue:`2728`)
- Upgrade embedded wheels:

wheel to 0.44.0 from 0.43.0
pip to 24.2 from 24.1
setuptools to 74.1.2 from 70.1.0 (:issue:2760)

Commits

• ec04726 release 20.26.6
• 86ddded Fix #2768: Quote template strings in activation scripts (#2771)
• 6bb3f62 [pre-commit.ci] pre-commit autoupdate (#2769)
• 220d49c Bump pypa/gh-action-pypi-publish from 1.10.1 to 1.10.2 (#2767)
• cf340c8 Merge pull request #2766 from pypa/release-20.26.5
• f3172b4 release 20.26.5
• 22b9795 Use uv over pip (#2765)
• 35d8269 [pre-commit.ci] pre-commit autoupdate (#2764)
• ee77feb [pre-commit.ci] pre-commit autoupdate (#2763)
• c516056 Update README.md
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
  You can disable automated security fix PRs for this repo from the Security Alerts page.