dependabot[bot] opened a new pull request, #120: URL: https://github.com/apache/iceberg-python/pull/120
Bumps [zstandard](https://github.com/indygreg/python-zstandard) from 0.21.0 to 0.22.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/indygreg/python-zstandard/releases";>zstandard's releases</a>.</em></p> <blockquote> <h2>0.22.0</h2> <h1>Backwards Compatibility Notes</h1> <ul> <li><code>ZstdDecompressor.decompressobj()</code> will change <code>read_across_frames</code> to default to <code>True</code> in a future release. If you depend on the current functionality of stopping at frame boundaries, start explicitly passing <code>read_across_frames=False</code> to preserve the current behavior.</li> <li><code>manylinux2010</code> wheels are no longer published since this wheel format is no longer supported by the pypa/manylinux project.</li> <li>Removed CI coverage for PyPy 3.7 and 3.8, which are no longer supported PyPy versions.</li> <li>Support for Python 3.7 has been dropped because it reached end of life. Python 3.8 is the minimum supported Python version. The code should still be compatible with Python 3.7 and removing of version checks from <code>setup.py</code> will likely yield a working install. However, this is no officially supported.</li> </ul> <h1>Bug Fixes</h1> <ul> <li><code>ZstdDecompressor.decompress()</code> with <code>allow_extra_data=False</code> would previously allow extra data to exist after an <em>empty</em> zstd frame (a frame holding 0 length input). This scenario now raises an exception.</li> </ul> <h1>Changes</h1> <ul> <li><code>ZstdDecompressor.decompressobj()</code> now accepts a <code>read_across_frames</code> boolean named argument to control whether to transparently read across multiple zstd frames. It defaults to <code>False</code> to preserve existing behavior.</li> <li>Added CI coverage for PyPy 3.10.</li> <li>Added CI coverage for newer Anaconda Python versions.</li> <li>Packages used in CI have been upgraded to latest versions. This should nominally only impact developers of this project and not end-users.</li> <li><code>pyproject.toml</code> now declares a <code>[build-system]</code> section saying to build with setuptools.</li> <li>CI now builds wheels with pip instead of <code>setup.py</code> directly.</li> <li>Official support for CPython 3.12. Binary wheels for 3.12 are now published during releases. There were no meaningful code changes to support Python 3.12.</li> <li>Binary wheels for musllinux_1_1 x86_64 and aarch64 are now being built and published.</li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/indygreg/python-zstandard/blob/main/docs/news.rst";>zstandard's changelog</a>.</em></p> <blockquote> <h1>0.22.0 (released 2023-11-01)</h1> <h2>Backwards Compatibility Notes</h2> <ul> <li><code>ZstdDecompressor.decompressobj()</code> will change <code>read_across_frames</code> to default to <code>True</code> in a future release. If you depend on the current functionality of stopping at frame boundaries, start explicitly passing <code>read_across_frames=False</code> to preserve the current behavior.</li> <li><code>manylinux2010</code> wheels are no longer published since this wheel format is no longer supported by the pypa/manylinux project.</li> <li>Removed CI coverage for PyPy 3.7 and 3.8, which are no longer supported PyPy versions.</li> <li>Support for Python 3.7 has been dropped because it reached end of life. Python 3.8 is the minimum supported Python version. The code should still be compatible with Python 3.7 and removing of version checks from <code>setup.py</code> will likely yield a working install. However, this is no officially supported.</li> </ul> <h2>Bug Fixes</h2> <ul> <li><code>ZstdDecompressor.decompress()</code> with <code>allow_extra_data=False</code> would previously allow extra data to exist after an <em>empty</em> zstd frame (a frame holding 0 length input). This scenario now raises an exception.</li> </ul> <h2>Changes</h2> <ul> <li><code>ZstdDecompressor.decompressobj()</code> now accepts a <code>read_across_frames</code> boolean named argument to control whether to transparently read across multiple zstd frames. It defaults to <code>False</code> to preserve existing behavior.</li> <li>Added CI coverage for PyPy 3.10.</li> <li>Added CI coverage for newer Anaconda Python versions.</li> <li>Packages used in CI have been upgraded to latest versions. This should nominally only impact developers of this project and not end-users.</li> <li><code>pyproject.toml</code> now declares a <code>[build-system]</code> section saying to build with setuptools.</li> <li>CI now builds wheels with pip instead of <code>setup.py</code> directly.</li> <li>Official support for CPython 3.12. Binary wheels for 3.12 are now published during releases. There were no meaningful code changes to support Python 3.12.</li> <li>Binary wheels for musllinux_1_1 x86_64 and aarch64 are now being built and published.</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/indygreg/python-zstandard/commit/255b579735f26c2d0e08257f632de75d2ab882cf";><code>255b579</code></a> global: release 0.22.0</li> <li><a href="https://github.com/indygreg/python-zstandard/commit/9a38896f544c7c0201330309b1b9ca92d9691ae2";><code>9a38896</code></a> ci: add musllinux wheels</li> <li><a href="https://github.com/indygreg/python-zstandard/commit/bd6f2ef79bb4ba617d2e0cbee2e276d990217e18";><code>bd6f2ef</code></a> global: add Python 3.12 support</li> <li><a href="https://github.com/indygreg/python-zstandard/commit/cfbd3e757845ad800c011c2640bce43d010e6ebe";><code>cfbd3e7</code></a> ci: use pip install instead of setup.py develop</li> <li><a href="https://github.com/indygreg/python-zstandard/commit/f17569c645618a786ad11a3d51c3baa0b49a311c";><code>f17569c</code></a> ci: simplify macOS wheel builds</li> <li><a href="https://github.com/indygreg/python-zstandard/commit/8d4e26e38b86d8f8908e537b32208586561db094";><code>8d4e26e</code></a> pyproject: use pip wheel for building wheels</li> <li><a href="https://github.com/indygreg/python-zstandard/commit/2ae031298d1e43e025b67c4fd83d245047a7bead";><code>2ae0312</code></a> setup: look for distutils in setuptools</li> <li><a href="https://github.com/indygreg/python-zstandard/commit/3fcb6a109bfa42316fa9ab71f59bc5b2f57fd3ea";><code>3fcb6a1</code></a> test: use pytest conftest.py and plugin to define hypothesis profile</li> <li><a href="https://github.com/indygreg/python-zstandard/commit/1229817836908202639ff8ed020ad440065e4bc7";><code>1229817</code></a> ci: upgrade requirements.txt</li> <li><a href="https://github.com/indygreg/python-zstandard/commit/b7f9eac2ae12e6ddfd4a51e64c046ad604fb6a87";><code>b7f9eac</code></a> global: drop support for Python 3.7</li> <li>Additional commits viewable in <a href="https://github.com/indygreg/python-zstandard/compare/0.21.0...0.22.0";>compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
