dependabot[bot] opened a new pull request, #1097: URL: https://github.com/apache/sedona/pull/1097
Bumps [fiona](https://github.com/Toblerity/Fiona) from 1.8.22 to 1.9.5. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/Toblerity/Fiona/releases">fiona's releases</a>.</em></p> <blockquote> <h2>1.9.5</h2> <h3>Bug fixes</h3> <ul> <li>Expand keys in schema mismatch exception, resolving <a href="https://redirect.github.com/Toblerity/Fiona/issues/1278">#1278</a>.</li> <li>Preserve the null properties and geometry of a Feature when serializing (<a href="https://redirect.github.com/Toblerity/Fiona/issues/1276">#1276</a>).</li> </ul> <h3>Packaging</h3> <ul> <li>The distribution name is now officially "fiona", not "Fiona". The import name remains <code>fiona</code>.</li> <li>Builds now require Cython >= 3.0.2 (<a href="https://redirect.github.com/Toblerity/Fiona/issues/1276">#1276</a>).</li> <li>PyPI wheels include GDAL 3.6.4, PROJ 9.0.1, and GEOS 3.11.2.</li> <li>PyPI wheels include curl 8.4.0, addressing CVE-2023-38545 and CVE-38546.</li> <li>PyPI wheels are now available for Python 3.12.</li> </ul> <h2>1.9.4.post1</h2> <p>Extraneous files were unintentionally packaged in the 1.9.4 wheels. This post1 release excludes them so that wheel contents are as in version 1.9.3.</p> <h2>1.9.4</h2> <p>Version 1.9.4 has important bug fixes and improvements and, in the PyPI wheels, updates GDAL to 3.6.4.</p> <ul> <li>The performance of Feature.from_dict() has been improved (<a href="https://redirect.github.com/Toblerity/Fiona/issues/1267">#1267</a>).</li> <li>Several sources of meaningless log messages from fiona._geometry about NULL geometries are avoided (<a href="https://redirect.github.com/Toblerity/Fiona/issues/1264">#1264</a>).</li> <li>The Parquet driver has been added to the list of supported drivers and will be available if your system's GDAL library links libarrow. Note that fiona wheels on PyPI do not include libarrow as it is rather large.</li> <li>Ensure that fiona._vendor modules are found and included.</li> <li>Bytes type feature properties are now hex encoded when serializing to GeoJSON (<a href="https://redirect.github.com/Toblerity/Fiona/issues/1263">#1263</a>).</li> <li>Docstrings for listdir and listlayers have been clarified and harmonized.</li> <li>Nose style test cases have been converted to unittest.TestCase (<a href="https://redirect.github.com/Toblerity/Fiona/issues/1256">#1256</a>).</li> <li>The munch package used by fio-filter and fio-calc is now vendored and patched to remove usage of the deprecated pkg_resources module (<a href="https://redirect.github.com/Toblerity/Fiona/issues/1255">#1255</a>).</li> </ul> <h2>1.9.3</h2> <p>Version 1.9.3 has a handful of important bug fixes and, in the PyPI wheels, upgrades GEOS to 3.11.2.</p> <ul> <li>Rasterio CRS objects are compatible with the Collection constructor and are now accepted (<a href="https://redirect.github.com/Toblerity/Fiona/issues/1248">#1248</a>).</li> <li>Append mode for fio-load has been enabled (<a href="https://redirect.github.com/Toblerity/Fiona/issues/1237">#1237</a>).</li> <li>Reading a GeoJSON with an empty array property can result in a segmentation fault since version 1.9.0. This has been fixed (<a href="https://redirect.github.com/Toblerity/Fiona/issues/1228">#1228</a>).</li> </ul> <h2>1.9.2</h2> <p>Version 1.9.2 has a handful of important bug fixes.</p> <ul> <li>The fio CLI now gets its command entry points using importlib.metadata (<a href="https://redirect.github.com/Toblerity/Fiona/issues/1220">#1220</a>). The project has no more runtime dependency on setuptools.</li> <li>Instead of warning, transform_geom() raises an exception when some points can't be reprojected unless the caller opts in to partial reprojection. This restores the behavior of version 1.8.22.</li> <li>Add support for open options to all CLI commands that call fiona.open (<a href="https://redirect.github.com/Toblerity/Fiona/issues/1215">#1215</a>).</li> <li>Fix a memory leak that can occur when iterating over a dataset using strides (<a href="https://redirect.github.com/Toblerity/Fiona/issues/1205">#1205</a>).</li> <li>ZipMemoryFile now supports zipped GDB data (<a href="https://redirect.github.com/Toblerity/Fiona/issues/1203">#1203</a>).</li> </ul> <h2>1.9.1</h2> <p>The 1.9.0 release revealed a few bugs. Here are the ones we felt should be squished immediately.</p> <ul> <li>Log a warning message when identically named fields are encountered (<a href="https://redirect.github.com/Toblerity/Fiona/issues/1201">#1201</a>).</li> <li>Avoid dependence on listdir order in tests (<a href="https://redirect.github.com/Toblerity/Fiona/issues/1193">#1193</a>).</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/Toblerity/Fiona/blob/master/CHANGES.txt">fiona's changelog</a>.</em></p> <blockquote> <h2>1.9.5 (2023-10-11)</h2> <p>Bug fixes:</p> <ul> <li>Expand keys in schema mismatch exception, resolving <a href="https://redirect.github.com/Toblerity/Fiona/issues/1278">#1278</a>.</li> <li>Preserve the null properties and geometry of a Feature when serializing (<a href="https://redirect.github.com/Toblerity/Fiona/issues/1276">#1276</a>).</li> </ul> <p>Packaging:</p> <ul> <li>Builds now require Cython >= 3.0.2 (<a href="https://redirect.github.com/Toblerity/Fiona/issues/1276">#1276</a>).</li> <li>PyPI wheels include GDAL 3.6.4, PROJ 9.0.1, and GEOS 3.11.2.</li> <li>PyPI wheels include curl 8.4.0, addressing CVE-2023-38545 and CVE-38546.</li> <li>PyPI wheels are now available for Python 3.12.</li> </ul> <h2>1.9.4.post1 (2023-05-23)</h2> <p>Extraneous files were unintentionally packaged in the 1.9.4 wheels. This post1 release excludes them so that wheel contents are as in version 1.9.3.</p> <h2>1.9.4 (2023-05-16)</h2> <ul> <li>The performance of Feature.from_dict() has been improved (<a href="https://redirect.github.com/Toblerity/Fiona/issues/1267">#1267</a>).</li> <li>Several sources of meaningless log messages from fiona._geometry about NULL geometries are avoided (<a href="https://redirect.github.com/Toblerity/Fiona/issues/1264">#1264</a>).</li> <li>The Parquet driver has been added to the list of supported drivers and will be available if your system's GDAL library links libarrow. Note that fiona wheels on PyPI do not include libarrow as it is rather large.</li> <li>Ensure that fiona._vendor modules are found and included.</li> <li>Bytes type feature properties are now hex encoded when serializing to GeoJSON (<a href="https://redirect.github.com/Toblerity/Fiona/issues/1263">#1263</a>).</li> <li>Docstrings for listdir and listlayers have been clarified and harmonized.</li> <li>Nose style test cases have been converted to unittest.TestCase (<a href="https://redirect.github.com/Toblerity/Fiona/issues/1256">#1256</a>).</li> <li>The munch package used by fio-filter and fio-calc is now vendored and patched to remove usage of the deprecated pkg_resources module (<a href="https://redirect.github.com/Toblerity/Fiona/issues/1255">#1255</a>).</li> </ul> <h2>1.9.3 (2023-04-10)</h2> <ul> <li>Rasterio CRS objects are compatible with the Collection constructor and are now accepted (<a href="https://redirect.github.com/Toblerity/Fiona/issues/1248">#1248</a>).</li> <li>Enable append mode for fio-load (<a href="https://redirect.github.com/Toblerity/Fiona/issues/1237">#1237</a>).</li> <li>Reading a GeoJSON with an empty array property can result in a segmentation fault since version 1.9.0. This has been fixed (<a href="https://redirect.github.com/Toblerity/Fiona/issues/1228">#1228</a>).</li> </ul> <h2>1.9.2 (2023-03-20)</h2> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/Toblerity/Fiona/commit/2cab3dfca3add1cfacc756d9698e23d8066bd434"><code>2cab3df</code></a> Require setuptools explicitly</li> <li><a href="https://github.com/Toblerity/Fiona/commit/9828b220bc9c1c57b56b845ec7dbfb3d891fcfb2"><code>9828b22</code></a> Update citation file</li> <li><a href="https://github.com/Toblerity/Fiona/commit/eccb2044a4c18f86e2527faf8e19cf5163d95b30"><code>eccb204</code></a> Fix version</li> <li><a href="https://github.com/Toblerity/Fiona/commit/7115ea3fadf589c768ec43f39cb3950238e41503"><code>7115ea3</code></a> This is 1.9.5</li> <li><a href="https://github.com/Toblerity/Fiona/commit/ca2fe824239612ac4fa15bbf14980ff28169ec70"><code>ca2fe82</code></a> Resolves <a href="https://redirect.github.com/Toblerity/Fiona/issues/1278">#1278</a> (<a href="https://redirect.github.com/Toblerity/Fiona/issues/1302">#1302</a>)</li> <li><a href="https://github.com/Toblerity/Fiona/commit/46e8cf3ff8bd4c4eee7ea65a1589d7d3bce8f6aa"><code>46e8cf3</code></a> Preserve the null properties and geometry of a Feature (<a href="https://redirect.github.com/Toblerity/Fiona/issues/1276">#1276</a>)</li> <li><a href="https://github.com/Toblerity/Fiona/commit/25fc510530ed950cb56f3110a4d997f9b14f404c"><code>25fc510</code></a> CI: upgrade actions/checkout@v3 -> v4; move GHA to .yml suffix (<a href="https://redirect.github.com/Toblerity/Fiona/issues/1293">#1293</a>)</li> <li><a href="https://github.com/Toblerity/Fiona/commit/e698980bebe39af2ab8ede2bb68c9daff0b2f92a"><code>e698980</code></a> Update to version 2 ReadTheDocs configuration file (<a href="https://redirect.github.com/Toblerity/Fiona/issues/1291">#1291</a>)</li> <li><a href="https://github.com/Toblerity/Fiona/commit/f0deb388410e35b8be9996cfe8756def31420ece"><code>f0deb38</code></a> update encoding warning (<a href="https://redirect.github.com/Toblerity/Fiona/issues/1288">#1288</a>)</li> <li><a href="https://github.com/Toblerity/Fiona/commit/ea46bbe771e27481e7baf8fd87a342476bfa7050"><code>ea46bbe</code></a> Use America/Denver instead of US/Mountain to fix pytz.exceptions.UnknownTimeZ...</li> <li>Additional commits viewable in <a href="https://github.com/Toblerity/Fiona/compare/1.8.22...1.9.5">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@sedona.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org