Bump pydantic from 1.7.2 to 1.7.4

[dependabot]

Bumps pydantic from 1.7.2 to 1.7.4.

Release notes

Sourced from pydantic's releases.

v1.7.4 (2021-05-11)

Security fix: Fix date and datetime parsing so passing either 'infinity' or float('inf') (or their negative values) does not cause an infinite loop, see security advisory CVE-2021-29510.

v1.7.3 (2020-11-30)

See Changelog.

Thank you to pydantic's sponsors: @​timdrijvers, @​BCarley, @​chdsbd, @​tiangolo, @​matin, @​linusg, @​kevinalh, @​jorgecarleitao, @​koxudaxi, @​primer-api, @​mkeen, @​meadsteve for their kind support.

• fix: set right default value for required (optional) fields, #2142 by @​PrettyWood
• fix: support underscore_attrs_are_private with generic models, #2138 by @​PrettyWood
• fix: update all modified field values in root_validator when validate_assignment is on, #2116 by @​PrettyWood
• Allow pickling of pydantic.dataclasses.dataclass dynamically created from a built-in dataclasses.dataclass, #2111 by @​aimestereo
• Fix a regression where Enum fields would not propagate keyword arguments to the schema, #2109 by @​bm424
• Ignore __doc__ as private attribute when Config.underscore_attrs_are_private is set, #2090 by @​PrettyWood

Changelog

Sourced from pydantic's changelog.

v1.7.4 (2021-05-11)

• Security fix: Fix date and datetime parsing so passing either 'infinity' or float('inf') (or their negative values) does not cause an infinite loop, See security advisory CVE-2021-29510

v1.7.3 (2020-11-30)

Thank you to pydantic's sponsors: @​timdrijvers, @​BCarley, @​chdsbd, @​tiangolo, @​matin, @​linusg, @​kevinalh, @​jorgecarleitao, @​koxudaxi, @​primer-api, @​mkeen, @​meadsteve for their kind support.

• fix: set right default value for required (optional) fields, #2142 by @​PrettyWood
• fix: support underscore_attrs_are_private with generic models, #2138 by @​PrettyWood
• fix: update all modified field values in root_validator when validate_assignment is on, #2116 by @​PrettyWood
• Allow pickling of pydantic.dataclasses.dataclass dynamically created from a built-in dataclasses.dataclass, #2111 by @​aimestereo
• Fix a regression where Enum fields would not propagate keyword arguments to the schema, #2109 by @​bm424
• Ignore __doc__ as private attribute when Config.underscore_attrs_are_private is set, #2090 by @​PrettyWood

Commits

• e3d1c16 tweak history
• b3ecf68 comment out broken tests
• 4c1fea6 hack tests into passing
• f461cb0 prepare for release
• 80e0dd3 Merge pull request from GHSA-5jqp-qgf6-3pvh
• 00a128a tempoarily pin pip
• 08922c3 uprev and add history
• b1bb6e0 Fix #2111: support pickle for built-in dataclasses (#2114)
• 9ae40a2 fix: set right default value for required (optional) fields (#2143)
• 0d2b4d6 fix: support underscore_attrs_are_private with generic models (#2139)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)