id,node_id,number,title,user,state,locked,assignee,milestone,comments,created_at,updated_at,closed_at,author_association,pull_request,body,repo,type,active_lock_reason,performed_via_github_app,reactions,draft,state_reason
890073888,MDExOlB1bGxSZXF1ZXN0NjQzMTQ5Mjcz,1323,"Update click requirement from ~=7.1.1 to >=7.1.1,<8.1.0",49699333,closed,0,,,1,2021-05-12T13:08:56Z,2021-05-22T23:54:48Z,2021-05-22T23:54:48Z,CONTRIBUTOR,simonw/datasette/pulls/1323,"Updates the requirements on [click](https://github.com/pallets/click) to permit the latest version.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href=""https://github.com/pallets/click/releases"">click's releases</a>.</em></p>
<blockquote>
<h2>8.0.0</h2>
<p>New major versions of all the core Pallets libraries, including Click 8.0, have been released! :tada:</p>
<ul>
<li>Read the announcement on our blog: <a href=""https://palletsprojects.com/blog/flask-2-0-released/"">https://palletsprojects.com/blog/flask-2-0-released/</a></li>
<li>Read the full list of changes: <a href=""https://click.palletsprojects.com/changes/#version-8-0-0"">https://click.palletsprojects.com/changes/#version-8-0-0</a></li>
<li>Retweet the announcement on Twitter: <a href=""https://twitter.com/PalletsTeam/status/1392266507296514048"">https://twitter.com/PalletsTeam/status/1392266507296514048</a></li>
<li>Follow our blog, Twitter, or GitHub to see future announcements.</li>
</ul>
<p>This represents a significant amount of work, and there are quite a few changes. Be sure to carefully read the changelog, and use tools such as pip-compile and Dependabot to pin your dependencies and control your updates.</p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href=""https://github.com/pallets/click/blob/main/CHANGES.rst"">click's changelog</a>.</em></p>
<blockquote>
<h2>Version 8.0.0</h2>
<p>Released 2021-05-11</p>
<ul>
<li>Drop support for Python 2 and 3.5.</li>
<li>Colorama is always installed on Windows in order to provide style
and color support. :pr:<code>1784</code></li>
<li>Adds a repr to Command, showing the command name for friendlier
debugging. :issue:<code>1267</code>, :pr:<code>1295</code></li>
<li>Add support for distinguishing the source of a command line
parameter. :issue:<code>1264</code>, :pr:<code>1329</code></li>
<li>Add an optional parameter to <code>ProgressBar.update</code> to set the
<code>current_item</code>. :issue:<code>1226</code>, :pr:<code>1332</code></li>
<li><code>version_option</code> uses <code>importlib.metadata</code> (or the
<code>importlib_metadata</code> backport) instead of <code>pkg_resources</code>.
:issue:<code>1582</code></li>
<li>If validation fails for a prompt with <code>hide_input=True</code>, the value
is not shown in the error message. :issue:<code>1460</code></li>
<li>An <code>IntRange</code> or <code>FloatRange</code> option shows the accepted range in
its help text. :issue:<code>1525</code>, :pr:<code>1303</code></li>
<li><code>IntRange</code> and <code>FloatRange</code> bounds can be open (<code>&lt;</code>) instead
of closed (<code>&lt;=</code>) by setting <code>min_open</code> and <code>max_open</code>. Error
messages have changed to reflect this. :issue:<code>1100</code></li>
<li>An option defined with duplicate flag names (<code>&quot;--foo/--foo&quot;</code>)
raises a <code>ValueError</code>. :issue:<code>1465</code></li>
<li><code>echo()</code> will not fail when using pytest's <code>capsys</code> fixture on
Windows. :issue:<code>1590</code></li>
<li>Resolving commands returns the canonical command name instead of the
matched name. This makes behavior such as help text and
<code>Context.invoked_subcommand</code> consistent when using patterns like
<code>AliasedGroup</code>. :issue:<code>1422</code></li>
<li>The <code>BOOL</code> type accepts the values &quot;on&quot; and &quot;off&quot;. :issue:<code>1629</code></li>
<li>A <code>Group</code> with <code>invoke_without_command=True</code> will always invoke
its result callback. :issue:<code>1178</code></li>
<li><code>nargs == -1</code> and <code>nargs &gt; 1</code> is parsed and validated for
values from environment variables and defaults. :issue:<code>729</code></li>
<li>Detect the program name when executing a module or package with
<code>python -m name</code>. :issue:<code>1603</code></li>
<li>Include required parent arguments in help synopsis of subcommands.
:issue:<code>1475</code></li>
<li>Help for boolean flags with <code>show_default=True</code> shows the flag
name instead of <code>True</code> or <code>False</code>. :issue:<code>1538</code></li>
<li>Non-string objects passed to <code>style()</code> and <code>secho()</code> will be
converted to string. :pr:<code>1146</code></li>
<li><code>edit(require_save=True)</code> will detect saves for editors that exit
very fast on filesystems with 1 second resolution. :pr:<code>1050</code></li>
<li>New class attributes make it easier to use custom core objects
throughout an entire application. :pr:<code>938</code></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href=""https://github.com/pallets/click/commit/9da166957f5848b641231d485467f6140bca2bc0""><code>9da1669</code></a> Merge pull request <a href=""https://github-redirect.dependabot.com/pallets/click/issues/1877"">#1877</a> from pallets/release-8.0.0</li>
<li><a href=""https://github.com/pallets/click/commit/dfa63691631e733712d8a7d706e154f3d7b7cd5d""><code>dfa6369</code></a> release version 8.0.0</li>
<li><a href=""https://github.com/pallets/click/commit/b862cb17cb99e748bf0160583d00874aaabe2f04""><code>b862cb1</code></a> update requirements</li>
<li><a href=""https://github.com/pallets/click/commit/f51584cf506bec6624435b408ce3cf2f7a10baf6""><code>f51584c</code></a> Merge pull request <a href=""https://github-redirect.dependabot.com/pallets/click/issues/1876"">#1876</a> from pallets/pre-commit-ci-schedule</li>
<li><a href=""https://github.com/pallets/click/commit/804c71c4dbf22cb5fa5bda6c2a5fb902b790f229""><code>804c71c</code></a> update pre-commit monthly</li>
<li><a href=""https://github.com/pallets/click/commit/ac655f8ac8a13cd45ce96bdc296bd857654088f0""><code>ac655f8</code></a> Merge pull request <a href=""https://github-redirect.dependabot.com/pallets/click/issues/1872"">#1872</a> from janLuke/fix/formatter_write_text</li>
<li><a href=""https://github.com/pallets/click/commit/dcd991d986d43c4f12cc838c4008dfafc015c21d""><code>dcd991d</code></a> HelpFormatter.write_text uses full width</li>
<li><a href=""https://github.com/pallets/click/commit/5215fc1030ed911c0c67b18e2fcad95fc173dd0e""><code>5215fc1</code></a> Merge pull request <a href=""https://github-redirect.dependabot.com/pallets/click/issues/1870"">#1870</a> from AdrienPensart/allow_colors_in_metavar</li>
<li><a href=""https://github.com/pallets/click/commit/e3e1691620c4791e662e4d8846b18295c1a018a2""><code>e3e1691</code></a> repr is erasing ANSI escapes codes</li>
<li><a href=""https://github.com/pallets/click/commit/482e6e6ae7e4da1712c16baf28c2cb239ee35b8a""><code>482e6e6</code></a> Merge pull request <a href=""https://github-redirect.dependabot.com/pallets/click/issues/1875"">#1875</a> from pallets/pre-commit-ci-update-config</li>
<li>Additional commits viewable in <a href=""https://github.com/pallets/click/compare/7.1.1...8.0.0"">compare view</a></li>
</ul>
</details>
<br />


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually


</details>",107914493,pull,,,"{""url"": ""https://api.github.com/repos/simonw/datasette/issues/1323/reactions"", ""total_count"": 0, ""+1"": 0, ""-1"": 0, ""laugh"": 0, ""hooray"": 0, ""confused"": 0, ""heart"": 0, ""rocket"": 0, ""eyes"": 0}",0,
890073989,MDExOlB1bGxSZXF1ZXN0NjQzMTQ5MzY0,1325,"Update itsdangerous requirement from ~=1.1 to >=1.1,<3.0",49699333,closed,0,,,2,2021-05-12T13:09:03Z,2021-05-22T23:54:25Z,2021-05-22T23:54:25Z,CONTRIBUTOR,simonw/datasette/pulls/1325,"Updates the requirements on [itsdangerous](https://github.com/pallets/itsdangerous) to permit the latest version.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href=""https://github.com/pallets/itsdangerous/releases"">itsdangerous's releases</a>.</em></p>
<blockquote>
<h2>2.0.0</h2>
<p>New major versions of all the core Pallets libraries, including ItsDangerous 2.0, have been released! :tada:</p>
<ul>
<li>Read the announcement on our blog: <a href=""https://palletsprojects.com/blog/flask-2-0-released/"">https://palletsprojects.com/blog/flask-2-0-released/</a></li>
<li>Read the full list of changes: <a href=""https://itsdangerous.palletsprojects.com/changes/#version-2-0-0"">https://itsdangerous.palletsprojects.com/changes/#version-2-0-0</a></li>
<li>Retweet the announcement on Twitter: <a href=""https://twitter.com/PalletsTeam/status/1392266507296514048"">https://twitter.com/PalletsTeam/status/1392266507296514048</a></li>
<li>Follow our blog, Twitter, or GitHub to see future announcements.</li>
</ul>
<p>This represents a significant amount of work, and there are quite a few changes. Be sure to carefully read the changelog, and use tools such as pip-compile and Dependabot to pin your dependencies and control your updates.</p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href=""https://github.com/pallets/itsdangerous/blob/main/CHANGES.rst"">itsdangerous's changelog</a>.</em></p>
<blockquote>
<h2>Version 2.0.0</h2>
<p>Released 2021-05-11</p>
<ul>
<li>Drop support for Python 2 and 3.5.</li>
<li>JWS support (<code>JSONWebSignatureSerializer</code>,
<code>TimedJSONWebSignatureSerializer</code>) is deprecated. Use a dedicated
JWS/JWT library such as authlib instead. :issue:<code>129</code></li>
<li>Importing <code>itsdangerous.json</code> is deprecated. Import Python's
<code>json</code> module instead. :pr:<code>152</code></li>
<li>Simplejson is no longer used if it is installed. To use a different
library, pass it as <code>Serializer(serializer=...)</code>. :issue:<code>146</code></li>
<li><code>datetime</code> values are timezone-aware with <code>timezone.utc</code>. Code
using <code>TimestampSigner.unsign(return_timestamp=True)</code> or
<code>BadTimeSignature.date_signed</code> may need to change. :issue:<code>150</code></li>
<li>If a signature has an age less than 0, it will raise
<code>SignatureExpired</code> rather than appearing valid. This can happen if
the timestamp offset is changed. :issue:<code>126</code></li>
<li><code>BadTimeSignature.date_signed</code> is always a <code>datetime</code> object
rather than an <code>int</code> in some cases. :issue:<code>124</code></li>
<li>Added support for key rotation. A list of keys can be passed as
<code>secret_key</code>, oldest to newest. The newest key is used for
signing, all keys are tried for unsigning. :pr:<code>141</code></li>
<li>Removed the default SHA-512 fallback signer from
<code>default_fallback_signers</code>. :issue:<code>155</code></li>
<li>Add type information for static typing tools. :pr:<code>186</code></li>
</ul>
<h2>Version 1.1.0</h2>
<p>Released 2018-10-26</p>
<ul>
<li>Change default signing algorithm back to SHA-1. :pr:<code>113</code></li>
<li>Added a default SHA-512 fallback for users who used the yanked 1.0.0
release which defaulted to SHA-512. :pr:<code>114</code></li>
<li>Add support for fallback algorithms during deserialization to
support changing the default in the future without breaking existing
signatures. :pr:<code>113</code></li>
<li>Changed capitalization of packages back to lowercase as the change
in capitalization broke some tooling. :pr:<code>113</code></li>
</ul>
<h2>Version 1.0.0</h2>
<p>Released 2018-10-18</p>
<p>YANKED</p>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href=""https://github.com/pallets/itsdangerous/commit/d101100c395958d67368b8c37d95a9c404598c2e""><code>d101100</code></a> Merge pull request <a href=""https://github-redirect.dependabot.com/pallets/itsdangerous/issues/235"">#235</a> from pallets/release-2.0.0</li>
<li><a href=""https://github.com/pallets/itsdangerous/commit/ca0f59ac73507014729a5857e985229604e5e83b""><code>ca0f59a</code></a> release version 2.0.0</li>
<li><a href=""https://github.com/pallets/itsdangerous/commit/d1ed89f6ac50d58fa43ce37f92db371bebc20bc5""><code>d1ed89f</code></a> update requirements</li>
<li><a href=""https://github.com/pallets/itsdangerous/commit/d1722ea35b4239b6d08e8d418edc74d6594eebd6""><code>d1722ea</code></a> Merge pull request <a href=""https://github-redirect.dependabot.com/pallets/itsdangerous/issues/234"">#234</a> from pallets/pre-commit-ci-schedule</li>
<li><a href=""https://github.com/pallets/itsdangerous/commit/d1eb7aa76756268061f2d31551f79da7882b45a9""><code>d1eb7aa</code></a> update pre-commit monthly</li>
<li><a href=""https://github.com/pallets/itsdangerous/commit/acbc456c91d4a9e9f63b9230be5a1cf3d5a1d767""><code>acbc456</code></a> Merge pull request <a href=""https://github-redirect.dependabot.com/pallets/itsdangerous/issues/233"">#233</a> from pallets/pre-commit-ci-update-config</li>
<li><a href=""https://github.com/pallets/itsdangerous/commit/04e485a0b0b00d8b2dc73a287852d642d3366c72""><code>04e485a</code></a> [pre-commit.ci] pre-commit autoupdate</li>
<li><a href=""https://github.com/pallets/itsdangerous/commit/c0e6b484a6cdc92c38bec74ffcf350bc42f20e2b""><code>c0e6b48</code></a> Merge pull request <a href=""https://github-redirect.dependabot.com/pallets/itsdangerous/issues/232"">#232</a> from pallets/pre-commit-ci-update-config</li>
<li><a href=""https://github.com/pallets/itsdangerous/commit/6a9df8338ce39b780cebd8a7f54b8a7cb75eeab4""><code>6a9df83</code></a> [pre-commit.ci] pre-commit autoupdate</li>
<li><a href=""https://github.com/pallets/itsdangerous/commit/477f42c3e74f1a823deb3d7c3ab94a5b534d545b""><code>477f42c</code></a> Merge pull request <a href=""https://github-redirect.dependabot.com/pallets/itsdangerous/issues/231"">#231</a> from pallets/dependabot/pip/pre-commit-2.12.1</li>
<li>Additional commits viewable in <a href=""https://github.com/pallets/itsdangerous/compare/1.1.0...2.0.0"">compare view</a></li>
</ul>
</details>
<br />


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually


</details>",107914493,pull,,,"{""url"": ""https://api.github.com/repos/simonw/datasette/issues/1325/reactions"", ""total_count"": 0, ""+1"": 0, ""-1"": 0, ""laugh"": 0, ""hooray"": 0, ""confused"": 0, ""heart"": 0, ""rocket"": 0, ""eyes"": 0}",0,