[update] Scheduled weekly dependency update for week 25

Created by: pyup-bot

Updates

Here's a list of all the updates bundled in this pull request. I've added some links to make it easier for you to find all the information you need.

Django	1.11.1	»	1.11.2	PyPI | Changelog | Homepage
django-avatar	3.1.0	»	4.0.0	PyPI | Repo
requests	2.14.2	»	2.18.1	PyPI | Changelog | Homepage
lxml	3.7.3	»	3.8.0	PyPI | Changelog | Homepage | Bugtracker

Changelogs

Django 1.11.1 -> 1.11.2

1.11.2

===========================

June 1, 2017

Django 1.11.2 adds a minor feature and fixes several bugs in 1.11.1. Also, the latest string translations from Transifex are incorporated.

Minor feature

The new LiveServerTestCase.port attribute reallows the use case of binding to a specific port following the :ref:bind to port zero <liveservertestcase-port-zero-change> change in Django 1.11.

Bugfixes

• Added detection for GDAL 2.1 and 2.0, and removed detection for unsupported versions 1.7 and 1.8 (🎫28181).

• Changed contrib.gis to raise ImproperlyConfigured rather than GDALException if gdal isn't installed, to allow third-party apps to catch that exception (🎫28178).

• Fixed django.utils.http.is_safe_url() crash on invalid IPv6 URLs (🎫28142).

• Fixed regression causing pickling of model fields to crash (🎫28188).

• Fixed django.contrib.auth.authenticate() when multiple authentication backends don't accept a positional request argument (🎫28207).

• Fixed introspection of index field ordering on PostgreSQL (🎫28197).

• Fixed a regression where Model._state.adding wasn't set correctly on multi-table inheritance parent models after saving a child model (🎫28210).

• Allowed DjangoJSONEncoder to serialize django.utils.deprecation.CallableBool (🎫28230).

• Relaxed the validation added in Django 1.11 of the fields in the defaults argument of QuerySet.get_or_create() and update_or_create() to reallow settable model properties (🎫28222).

• Fixed MultipleObjectMixin.paginate_queryset() crash on Python 2 if the InvalidPage message contains non-ASCII (🎫28204).

• Prevented Subquery from adding an unnecessary CAST which resulted in invalid SQL (🎫28199).

• Corrected detection of GDAL 2.1 on Windows (🎫28181).

• Made date-based generic views return a 404 rather than crash when given an out of range date (🎫28209).

• Fixed a regression where file_move_safe() crashed when moving files to a CIFS mount (🎫28170).

• Moved the ImageField file extension validation added in Django 1.11 from the model field to the form field to reallow the use case of storing images without an extension (🎫28242).

===========================

requests 2.14.2 -> 2.18.1

2.18.1

+++++++++++++++++++

Bugfixes

• Fix an error in the packaging whereby the *.whl contained incorrect data that regressed the fix in v2.17.3.

2.18.0

+++++++++++++++++++

Improvements

• Response is now a context manager, so can be used directly in a with statement without first having to be wrapped by contextlib.closing().

Bugfixes

• Resolve installation failure if multiprocessing is not available
• Resolve tests crash if multiprocessing is not able to determine the number of CPU cores
• Resolve error swallowing in utils set_environ generator

2.17.3

+++++++++++++++++++

Improvements

• Improved packages namespace identity support, for monkeypatching libraries.

2.17.2

+++++++++++++++++++

Improvements

• Improved packages namespace identity support, for monkeypatching libraries.

2.17.1

+++++++++++++++++++

Improvements

• Improved packages namespace identity support, for monkeypatching libraries.

2.17.0

+++++++++++++++++++

Improvements

• Removal of the 301 redirect cache. This improves thread-safety.

2.16.5

+++++++++++++++++++

• Improvements to $ python -m requests.help.

2.16.4

+++++++++++++++++++

• Introduction of the $ python -m requests.help command, for debugging with maintainers!

2.16.3

+++++++++++++++++++

• Further restored the requests.packages namespace for compatibility reasons.

2.16.2

+++++++++++++++++++

• Further restored the requests.packages namespace for compatibility reasons.

No code modification (noted below) should be neccessary any longer.

2.16.1

+++++++++++++++++++

• Restored the requests.packages namespace for compatibility reasons.
• Bugfix for urllib3 version parsing.

Note: code that was written to import against the requests.packages namespace previously will have to import code that rests at this module-level now.

For example::

from requests.packages.urllib3.poolmanager import PoolManager

Will need to be re-written to be::

from requests.packages import urllib3 urllib3.poolmanager.PoolManager

Or, even better::

from urllib3.poolmanager import PoolManager

2.16.0

+++++++++++++++++++

• Unvendor ALL the things!

2.15.1

+++++++++++++++++++

• Everyone makes mistakes.

2.15.0

+++++++++++++++++++

Improvements

• Introduction of the Response.next property, for getting the next PreparedResponse from a redirect chain (when allow_redirects=False).
• Internal refactoring of __version__ module.

Bugfixes

• Restored once-optional parameter for requests.utils.get_environ_proxies().

lxml 3.7.3 -> 3.8.0

3.8.0

==================

Features added

• ElementTree.write() has a new option doctype that writes out a doctype string before the serialisation, in the same way as tostring().

• GH220: xmlfile allows switching output methods at an element level. Patch by Burak Arslan.

• LP1595781, GH240: added a PyCapsule Python API and C-level API for passing externally generated libxml2 documents into lxml.

• GH244: error log entries have a new property path with an XPath expression (if known, None otherwise) that points to the tree element responsible for the error. Patch by Bob Kline.

• The namespace prefix mapping that can be used in ElementPath now injects a default namespace when passing a None prefix.

Bugs fixed

• GH238: Character escapes were not hex-encoded in the xmlfile serialiser. Patch by matejcik.

• GH229: fix for externally created XML documents. Patch by Theodore Dubois.

• LP1665241, GH228: Form data handling in lxml.html no longer strips the option values specified in form attributes but only the text values. Patch by Ashish Kulkarni.

• LP1551797: revert previous fix for XSLT error logging as it breaks multi-threaded XSLT processing.

• LP1673355, GH233: fromstring() html5parser failed to parse byte strings.

Other changes

• The previously undocumented docstring option in ElementTree.write() produces a deprecation warning and will eventually be removed.

3.7.4

==================

Bugs fixed

• LP1551797: revert previous fix for XSLT error logging as it breaks multi-threaded XSLT processing.

• LP1673355, GH233: fromstring() html5parser failed to parse byte strings.

That's it for now!

Happy merging! 🤖