From 86edd56859c1d0d43fe9251e9050990677456532 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu, 16 Mar 2023 22:31:22 +0100
Subject: [PATCH] Bump orjson from 3.8.6 to 3.8.7 (#524)
Bumps [orjson](https://github.com/ijl/orjson) from 3.8.6 to 3.8.7.
Release notes
Sourced from orjson's
releases.
3.8.7
Fixed
- Use serialization backend introduced in 3.8.4 only on well-tested
platforms such as glibc, macOS by default.
Changelog
Sourced from orjson's
changelog.
3.8.7 - 2023-02-28
Fixed
- Use serialization backend introduced in 3.8.4 only on well-tested
platforms such as glibc, macOS by default.
Commits
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
Signed-off-by: dependabot[bot]
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
pyproject.toml | 2 +-
requirements_all.txt | 2 +-
2 files changed, 2 insertions(+), 2 deletions(-)
diff --git a/pyproject.toml b/pyproject.toml
index 5c6d5f7c..e8e39234 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -37,7 +37,7 @@ server = [
"pillow==9.4.0",
"unidecode==1.3.6",
"xmltodict==0.13.0",
- "orjson==3.8.6",
+ "orjson==3.8.7",
"shortuuid==1.0.11",
"zeroconf==0.47.3",
"cryptography==39.0.2"
diff --git a/requirements_all.txt b/requirements_all.txt
index 3e5ae9a9..0e6b3d76 100644
--- a/requirements_all.txt
+++ b/requirements_all.txt
@@ -14,7 +14,7 @@ getmac==0.8.2
mashumaro==3.5.0
memory-tempfile==2.2.3
music-assistant-frontend==20230313.0
-orjson==3.8.6
+orjson==3.8.7
pillow==9.4.0
PyChromecast==13.0.4
pysmb==1.2.9.1
--
2.34.1