From: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Date: Thu, 16 Mar 2023 21:31:22 +0000 (+0100) Subject: Bump orjson from 3.8.6 to 3.8.7 (#524) X-Git-Url: https://git.kitaultman.com/?a=commitdiff_plain;h=86edd56859c1d0d43fe9251e9050990677456532;p=music-assistant-server.git Bump orjson from 3.8.6 to 3.8.7 (#524) Bumps [orjson](https://github.com/ijl/orjson) from 3.8.6 to 3.8.7.
Release notes

Sourced from orjson's releases.

3.8.7

Fixed

Changelog

Sourced from orjson's changelog.

3.8.7 - 2023-02-28

Fixed

Commits

[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=orjson&package-manager=pip&previous-version=3.8.6&new-version=3.8.7)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) ---
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> --- diff --git a/pyproject.toml b/pyproject.toml index 5c6d5f7c..e8e39234 100644 --- a/pyproject.toml +++ b/pyproject.toml @@ -37,7 +37,7 @@ server = [ "pillow==9.4.0", "unidecode==1.3.6", "xmltodict==0.13.0", - "orjson==3.8.6", + "orjson==3.8.7", "shortuuid==1.0.11", "zeroconf==0.47.3", "cryptography==39.0.2" diff --git a/requirements_all.txt b/requirements_all.txt index 3e5ae9a9..0e6b3d76 100644 --- a/requirements_all.txt +++ b/requirements_all.txt @@ -14,7 +14,7 @@ getmac==0.8.2 mashumaro==3.5.0 memory-tempfile==2.2.3 music-assistant-frontend==20230313.0 -orjson==3.8.6 +orjson==3.8.7 pillow==9.4.0 PyChromecast==13.0.4 pysmb==1.2.9.1