Bump importlib-metadata from 7.1.0 to 7.2.0 (microsoft#23652)

dependabot[bot] · web-flow · commit 54b64c066698 · 2024-06-21T05:57:59.000Z
Bumps [importlib-metadata](https://github.com/python/importlib_metadata) from 7.1.0 to 7.2.0. <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/python/importlib_metadata/blob/main/NEWS.rst">importlib-metadata's changelog</a>.</em></p> <blockquote> <h1>v7.2.0</h1> <h2>Features</h2> <ul> <li><code>python/cpython#109829</code></li> <li>Updated fixtures for <a href="https://redirect.github.com/python/cpython/issues/120801">python/cpython#120801</a>.</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/python/importlib_metadata/commit/311cef4ab03cfd122bc4895094ab85b67f565406"><code>311cef4</code></a> Finalize</li> <li><a href="https://github.com/python/importlib_metadata/commit/963f643b1f05effc980bb6df0196c64f6576dfc6"><code>963f643</code></a> <a href="https://redirect.github.com/python/importlib_metadata/issues/120801">gh-120801</a>: Update fixtures.</li> <li><a href="https://github.com/python/importlib_metadata/commit/5eee2ff5245c95722965f73d0c188f3fe5e9e3eb"><code>5eee2ff</code></a> Merge <a href="https://github.com/jaraco/skeleton">https://github.com/jaraco/skeleton</a></li> <li><a href="https://github.com/python/importlib_metadata/commit/a595a0fad054cd20b69d3e954c99174e3a548938"><code>a595a0f</code></a> Rename extras to align with core metadata spec.</li> <li><a href="https://github.com/python/importlib_metadata/commit/e8f686979b716520e39d422f85bb84b6d66225ca"><code>e8f6869</code></a> Merge <a href="https://github.com/jaraco/skeleton">https://github.com/jaraco/skeleton</a></li> <li><a href="https://github.com/python/importlib_metadata/commit/67aab1554c7c9cbb19bb546a5b6476267030c5b5"><code>67aab15</code></a> Revert &quot;Allow macos on Python 3.8 to fail as GitHub CI has dropped support.&quot;</li> <li><a href="https://github.com/python/importlib_metadata/commit/42b46109cd3ea989f05e1e16245aadd983f1bbe5"><code>42b4610</code></a> Merge <a href="https://github.com/jaraco/skeleton">https://github.com/jaraco/skeleton</a></li> <li><a href="https://github.com/python/importlib_metadata/commit/bcf8f079eb729e7bcd50c10cf4da522620b00635"><code>bcf8f07</code></a> Move project.urls to appear in the order that ini2toml generates it. Remove p...</li> <li><a href="https://github.com/python/importlib_metadata/commit/744cf2a2befb6a616657c105e5c9be9f3f921224"><code>744cf2a</code></a> Allow macos on Python 3.8 to fail as GitHub CI has dropped support.</li> <li><a href="https://github.com/python/importlib_metadata/commit/d34801bd169637d95d262fca9e0dbd658ae1feef"><code>d34801b</code></a> Migrated config to pyproject.toml using jaraco.develop.migrate-config and ini...</li> <li>Additional commits viewable in <a href="https://github.com/python/importlib_metadata/compare/v7.1.0...v7.2.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=importlib-metadata&package-manager=pip&previous-version=7.1.0&new-version=7.2.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
diff --git a/requirements.txt b/requirements.txt
@@ -4,9 +4,9 @@
 #
 #    pip-compile --generate-hashes requirements.in
 #
-importlib-metadata==7.1.0 \
-    --hash=sha256:30962b96c0c223483ed6cc7280e7f0199feb01a0e40cfae4d4450fc6fab1f570 \
-    --hash=sha256:b78938b926ee8d5f020fc4772d487045805a55ddbad2ecf21c6d60938dc7fcd2
+importlib-metadata==7.2.0 \
+    --hash=sha256:04e4aad329b8b948a5711d394fa8759cb80f009225441b4f2a02bd4d8e5f426c \
+    --hash=sha256:3ff4519071ed42740522d494d04819b666541b9752c43012f85afb2cc220fcc6
     # via -r requirements.in
 microvenv==2023.5.post1 \
     --hash=sha256:32c46afea874e300f69f1add0806eb0795fd02b5fb251092fba0b73c059a7d1f \
