dependabot[bot] opened a new pull request, #1097:
URL: https://github.com/apache/sedona/pull/1097

   Bumps [fiona](https://github.com/Toblerity/Fiona) from 1.8.22 to 1.9.5.
   <details>
   <summary>Release notes</summary>
   <p><em>Sourced from <a 
href="https://github.com/Toblerity/Fiona/releases";>fiona's 
releases</a>.</em></p>
   <blockquote>
   <h2>1.9.5</h2>
   <h3>Bug fixes</h3>
   <ul>
   <li>Expand keys in schema mismatch exception, resolving <a 
href="https://redirect.github.com/Toblerity/Fiona/issues/1278";>#1278</a>.</li>
   <li>Preserve the null properties and geometry of a Feature when serializing 
(<a 
href="https://redirect.github.com/Toblerity/Fiona/issues/1276";>#1276</a>).</li>
   </ul>
   <h3>Packaging</h3>
   <ul>
   <li>The distribution name is now officially &quot;fiona&quot;, not 
&quot;Fiona&quot;. The import name remains <code>fiona</code>.</li>
   <li>Builds now require Cython &gt;= 3.0.2 (<a 
href="https://redirect.github.com/Toblerity/Fiona/issues/1276";>#1276</a>).</li>
   <li>PyPI wheels include GDAL 3.6.4, PROJ 9.0.1, and GEOS 3.11.2.</li>
   <li>PyPI wheels include curl 8.4.0, addressing CVE-2023-38545 and 
CVE-38546.</li>
   <li>PyPI wheels are now available for Python 3.12.</li>
   </ul>
   <h2>1.9.4.post1</h2>
   <p>Extraneous files were unintentionally packaged in the 1.9.4 wheels. This 
post1 release excludes them so that wheel contents are as in version 1.9.3.</p>
   <h2>1.9.4</h2>
   <p>Version 1.9.4 has important bug fixes and improvements and, in the PyPI 
wheels, updates GDAL to 3.6.4.</p>
   <ul>
   <li>The performance of Feature.from_dict() has been improved (<a 
href="https://redirect.github.com/Toblerity/Fiona/issues/1267";>#1267</a>).</li>
   <li>Several sources of meaningless log messages from fiona._geometry about 
NULL geometries are avoided (<a 
href="https://redirect.github.com/Toblerity/Fiona/issues/1264";>#1264</a>).</li>
   <li>The Parquet driver has been added to the list of supported drivers and 
will be available if your system's GDAL library links libarrow. Note that fiona 
wheels on PyPI do not include libarrow as it is rather large.</li>
   <li>Ensure that fiona._vendor modules are found and included.</li>
   <li>Bytes type feature properties are now hex encoded when serializing to 
GeoJSON (<a 
href="https://redirect.github.com/Toblerity/Fiona/issues/1263";>#1263</a>).</li>
   <li>Docstrings for listdir and listlayers have been clarified and 
harmonized.</li>
   <li>Nose style test cases have been converted to unittest.TestCase (<a 
href="https://redirect.github.com/Toblerity/Fiona/issues/1256";>#1256</a>).</li>
   <li>The munch package used by fio-filter and fio-calc is now vendored and 
patched to remove usage of the deprecated pkg_resources module (<a 
href="https://redirect.github.com/Toblerity/Fiona/issues/1255";>#1255</a>).</li>
   </ul>
   <h2>1.9.3</h2>
   <p>Version 1.9.3 has a handful of important bug fixes and, in the PyPI 
wheels, upgrades GEOS to 3.11.2.</p>
   <ul>
   <li>Rasterio CRS objects are compatible with the Collection constructor and 
are now accepted (<a 
href="https://redirect.github.com/Toblerity/Fiona/issues/1248";>#1248</a>).</li>
   <li>Append mode for fio-load has been enabled (<a 
href="https://redirect.github.com/Toblerity/Fiona/issues/1237";>#1237</a>).</li>
   <li>Reading a GeoJSON with an empty array property can result in a 
segmentation fault since version 1.9.0. This has been fixed (<a 
href="https://redirect.github.com/Toblerity/Fiona/issues/1228";>#1228</a>).</li>
   </ul>
   <h2>1.9.2</h2>
   <p>Version 1.9.2 has a handful of important bug fixes.</p>
   <ul>
   <li>The fio CLI now gets its command entry points using importlib.metadata 
(<a href="https://redirect.github.com/Toblerity/Fiona/issues/1220";>#1220</a>). 
The project has no more runtime dependency on setuptools.</li>
   <li>Instead of warning, transform_geom() raises an exception when some 
points can't be reprojected unless the caller opts in to partial reprojection. 
This restores the behavior of version 1.8.22.</li>
   <li>Add support for open options to all CLI commands that call fiona.open 
(<a 
href="https://redirect.github.com/Toblerity/Fiona/issues/1215";>#1215</a>).</li>
   <li>Fix a memory leak that can occur when iterating over a dataset using 
strides (<a 
href="https://redirect.github.com/Toblerity/Fiona/issues/1205";>#1205</a>).</li>
   <li>ZipMemoryFile now supports zipped GDB data (<a 
href="https://redirect.github.com/Toblerity/Fiona/issues/1203";>#1203</a>).</li>
   </ul>
   <h2>1.9.1</h2>
   <p>The 1.9.0 release revealed a few bugs. Here are the ones we felt should 
be squished immediately.</p>
   <ul>
   <li>Log a warning message when identically named fields are encountered (<a 
href="https://redirect.github.com/Toblerity/Fiona/issues/1201";>#1201</a>).</li>
   <li>Avoid dependence on listdir order in tests (<a 
href="https://redirect.github.com/Toblerity/Fiona/issues/1193";>#1193</a>).</li>
   </ul>
   <!-- raw HTML omitted -->
   </blockquote>
   <p>... (truncated)</p>
   </details>
   <details>
   <summary>Changelog</summary>
   <p><em>Sourced from <a 
href="https://github.com/Toblerity/Fiona/blob/master/CHANGES.txt";>fiona's 
changelog</a>.</em></p>
   <blockquote>
   <h2>1.9.5 (2023-10-11)</h2>
   <p>Bug fixes:</p>
   <ul>
   <li>Expand keys in schema mismatch exception, resolving <a 
href="https://redirect.github.com/Toblerity/Fiona/issues/1278";>#1278</a>.</li>
   <li>Preserve the null properties and geometry of a Feature when serializing
   (<a 
href="https://redirect.github.com/Toblerity/Fiona/issues/1276";>#1276</a>).</li>
   </ul>
   <p>Packaging:</p>
   <ul>
   <li>Builds now require Cython &gt;= 3.0.2 (<a 
href="https://redirect.github.com/Toblerity/Fiona/issues/1276";>#1276</a>).</li>
   <li>PyPI wheels include GDAL 3.6.4, PROJ 9.0.1, and GEOS 3.11.2.</li>
   <li>PyPI wheels include curl 8.4.0, addressing CVE-2023-38545 and 
CVE-38546.</li>
   <li>PyPI wheels are now available for Python 3.12.</li>
   </ul>
   <h2>1.9.4.post1 (2023-05-23)</h2>
   <p>Extraneous files were unintentionally packaged in the 1.9.4 wheels. This 
post1
   release excludes them so that wheel contents are as in version 1.9.3.</p>
   <h2>1.9.4 (2023-05-16)</h2>
   <ul>
   <li>The performance of Feature.from_dict() has been improved (<a 
href="https://redirect.github.com/Toblerity/Fiona/issues/1267";>#1267</a>).</li>
   <li>Several sources of meaningless log messages from fiona._geometry about 
NULL
   geometries are avoided (<a 
href="https://redirect.github.com/Toblerity/Fiona/issues/1264";>#1264</a>).</li>
   <li>The Parquet driver has been added to the list of supported drivers and 
will
   be available if your system's GDAL library links libarrow. Note that fiona
   wheels on PyPI do not include libarrow as it is rather large.</li>
   <li>Ensure that fiona._vendor modules are found and included.</li>
   <li>Bytes type feature properties are now hex encoded when serializing to 
GeoJSON
   (<a 
href="https://redirect.github.com/Toblerity/Fiona/issues/1263";>#1263</a>).</li>
   <li>Docstrings for listdir and listlayers have been clarified and 
harmonized.</li>
   <li>Nose style test cases have been converted to unittest.TestCase (<a 
href="https://redirect.github.com/Toblerity/Fiona/issues/1256";>#1256</a>).</li>
   <li>The munch package used by fio-filter and fio-calc is now vendored and 
patched
   to remove usage of the deprecated pkg_resources module (<a 
href="https://redirect.github.com/Toblerity/Fiona/issues/1255";>#1255</a>).</li>
   </ul>
   <h2>1.9.3 (2023-04-10)</h2>
   <ul>
   <li>Rasterio CRS objects are compatible with the Collection constructor and 
are
   now accepted (<a 
href="https://redirect.github.com/Toblerity/Fiona/issues/1248";>#1248</a>).</li>
   <li>Enable append mode for fio-load (<a 
href="https://redirect.github.com/Toblerity/Fiona/issues/1237";>#1237</a>).</li>
   <li>Reading a GeoJSON with an empty array property can result in a 
segmentation
   fault since version 1.9.0. This has been fixed (<a 
href="https://redirect.github.com/Toblerity/Fiona/issues/1228";>#1228</a>).</li>
   </ul>
   <h2>1.9.2 (2023-03-20)</h2>
   <!-- raw HTML omitted -->
   </blockquote>
   <p>... (truncated)</p>
   </details>
   <details>
   <summary>Commits</summary>
   <ul>
   <li><a 
href="https://github.com/Toblerity/Fiona/commit/2cab3dfca3add1cfacc756d9698e23d8066bd434";><code>2cab3df</code></a>
 Require setuptools explicitly</li>
   <li><a 
href="https://github.com/Toblerity/Fiona/commit/9828b220bc9c1c57b56b845ec7dbfb3d891fcfb2";><code>9828b22</code></a>
 Update citation file</li>
   <li><a 
href="https://github.com/Toblerity/Fiona/commit/eccb2044a4c18f86e2527faf8e19cf5163d95b30";><code>eccb204</code></a>
 Fix version</li>
   <li><a 
href="https://github.com/Toblerity/Fiona/commit/7115ea3fadf589c768ec43f39cb3950238e41503";><code>7115ea3</code></a>
 This is 1.9.5</li>
   <li><a 
href="https://github.com/Toblerity/Fiona/commit/ca2fe824239612ac4fa15bbf14980ff28169ec70";><code>ca2fe82</code></a>
 Resolves <a 
href="https://redirect.github.com/Toblerity/Fiona/issues/1278";>#1278</a> (<a 
href="https://redirect.github.com/Toblerity/Fiona/issues/1302";>#1302</a>)</li>
   <li><a 
href="https://github.com/Toblerity/Fiona/commit/46e8cf3ff8bd4c4eee7ea65a1589d7d3bce8f6aa";><code>46e8cf3</code></a>
 Preserve the null properties and geometry of a Feature (<a 
href="https://redirect.github.com/Toblerity/Fiona/issues/1276";>#1276</a>)</li>
   <li><a 
href="https://github.com/Toblerity/Fiona/commit/25fc510530ed950cb56f3110a4d997f9b14f404c";><code>25fc510</code></a>
 CI: upgrade actions/checkout@v3 -&gt; v4; move GHA to .yml suffix (<a 
href="https://redirect.github.com/Toblerity/Fiona/issues/1293";>#1293</a>)</li>
   <li><a 
href="https://github.com/Toblerity/Fiona/commit/e698980bebe39af2ab8ede2bb68c9daff0b2f92a";><code>e698980</code></a>
 Update to version 2 ReadTheDocs configuration file (<a 
href="https://redirect.github.com/Toblerity/Fiona/issues/1291";>#1291</a>)</li>
   <li><a 
href="https://github.com/Toblerity/Fiona/commit/f0deb388410e35b8be9996cfe8756def31420ece";><code>f0deb38</code></a>
 update encoding warning (<a 
href="https://redirect.github.com/Toblerity/Fiona/issues/1288";>#1288</a>)</li>
   <li><a 
href="https://github.com/Toblerity/Fiona/commit/ea46bbe771e27481e7baf8fd87a342476bfa7050";><code>ea46bbe</code></a>
 Use America/Denver instead of US/Mountain to fix 
pytz.exceptions.UnknownTimeZ...</li>
   <li>Additional commits viewable in <a 
href="https://github.com/Toblerity/Fiona/compare/1.8.22...1.9.5";>compare 
view</a></li>
   </ul>
   </details>
   <br />
   
   
   [![Dependabot compatibility 
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=fiona&package-manager=pip&previous-version=1.8.22&new-version=1.9.5)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
   
   Dependabot will resolve any conflicts with this PR as long as you don't 
alter it yourself. You can also trigger a rebase manually by commenting 
`@dependabot rebase`.
   
   [//]: # (dependabot-automerge-start)
   [//]: # (dependabot-automerge-end)
   
   ---
   
   <details>
   <summary>Dependabot commands and options</summary>
   <br />
   
   You can trigger Dependabot actions by commenting on this PR:
   - `@dependabot rebase` will rebase this PR
   - `@dependabot recreate` will recreate this PR, overwriting any edits that 
have been made to it
   - `@dependabot merge` will merge this PR after your CI passes on it
   - `@dependabot squash and merge` will squash and merge this PR after your CI 
passes on it
   - `@dependabot cancel merge` will cancel a previously requested merge and 
block automerging
   - `@dependabot reopen` will reopen this PR if it is closed
   - `@dependabot close` will close this PR and stop Dependabot recreating it. 
You can achieve the same result by closing it manually
   - `@dependabot show <dependency name> ignore conditions` will show all of 
the ignore conditions of the specified dependency
   - `@dependabot ignore this major version` will close this PR and stop 
Dependabot creating any more for this major version (unless you reopen the PR 
or upgrade to it yourself)
   - `@dependabot ignore this minor version` will close this PR and stop 
Dependabot creating any more for this minor version (unless you reopen the PR 
or upgrade to it yourself)
   - `@dependabot ignore this dependency` will close this PR and stop 
Dependabot creating any more for this dependency (unless you reopen the PR or 
upgrade to it yourself)
   
   
   </details>


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@sedona.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org

Reply via email to