Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore(deps): bump the python group with 9 updates #392

Closed
wants to merge 2 commits into from

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Mar 21, 2024

Bumps the python group with 9 updates:

Package From To
pypdf 4.0.1 4.1.0
aws-lambda-powertools 2.33.1 2.35.1
boto3 1.34.39 1.34.67
aws-xray-sdk 2.12.1 2.13.0
black 24.1.1 24.3.0
mypy 1.8.0 1.9.0
pylint 3.0.3 3.1.0
types-requests 2.31.0.20240125 2.31.0.20240311
pytest 8.0.0 8.1.1

Updates pypdf from 4.0.1 to 4.1.0

Release notes

Sourced from pypdf's releases.

Version 4.1.0, 2024-03-03

What's new

Generating name objects (NameObject) without a leading slash is considered deprecated now. Previously, just a plain warning would be logged, leading to possibly invalid PDF files. According to our deprecation policy, this will log a DeprecationWarning for now.

New Features (ENH)

Bug Fixes (BUG)

Robustness (ROB)

Documentation (DOC)

Developer Experience (DEV)

Maintenance (MAINT)

Testing (TST)

Full Changelog

Version 4.0.2, 2024-02-18

What's new

Bug Fixes (BUG)

Documentation (DOC)

Developer Experience (DEV)

Testing (TST)

... (truncated)

Changelog

Sourced from pypdf's changelog.

Version 4.1.0, 2024-03-03

Generating name objects (NameObject) without a leading slash is considered deprecated now. Previously, just a plain warning would be logged, leading to possibly invalid PDF files. According to our deprecation policy, this will log a DeprecationWarning for now.

New Features (ENH)

  • Add get_pages_from_field (#2494)
  • Add reattach_fields function (#2480)
  • Automatic access to pointed object for IndirectObject (#2464)

Bug Fixes (BUG)

  • Missing error on name without leading / (#2387)
  • encode_pdfdocencoding() always returns bytes (#2440)
  • BI in text content identified as image tag (#2459)

Robustness (ROB)

  • Missing basefont entry in type 3 font (#2469)

Documentation (DOC)

  • Improve lossless compression example (#2488)
  • Amend robustness documentation (#2479)

Developer Experience (DEV)

  • Fix changelog for UTF-8 characters (#2462)

Maintenance (MAINT)

  • Add _get_page_number_from_indirect in writer (#2493)
  • Remove user assignment for feature requests (#2483)
  • Remove reference to old 2.0.0 branch (#2482)

Testing (TST)

  • Fix benchmark failures (#2481)
  • Broken test due to expired test file URL (#2468)
  • Resolve file naming conflict in test_iss1767 (#2445)

Full Changelog

Version 4.0.2, 2024-02-18

Bug Fixes (BUG)

  • Use NumberObject for /Border elements of annotations (#2451)

Full Changelog

Commits

Updates aws-lambda-powertools from 2.33.1 to 2.35.1

Release notes

Sourced from aws-lambda-powertools's releases.

v2.35.1

Summary

This patch release squashes a couple of bugs:

  • Bedrock Agent Resolver: we now correctly process any request body data (e.g: on a POST request)
  • Event Handler Data Validation: any custom serializer passed to a resolver will now be used for custom objects during OpenAPI data/parameter validation
  • Data Sources: we've improved the typing on the SQSMessageAttributes data class

Huge thanks to @​aitchnyu, @​robk1234 and @​palfrey for reporting and helping us fix these issues!

Changes

🐛 Bug and hot fixes

🔧 Maintenance

This release was made possible by the following contributors:

@​dependabot, @​dependabot[bot], @​github-actions, @​github-actions[bot] and @​rubenfonseca

v2.35.0

Summary

We’re super excited to introduce a brand new utility to author Agents for Amazon Bedrock! 🎉🎉

Agents for Amazon Bedrock is a feature to build and deploy conversational agents that can interact with your customers using Large Language Models (LLM) and AWS Lambda functions.

image

Agents for Amazon Bedrock Event Handler

Docs

Building on top of the Event Handler validation framework and the OpenAPI generation feature introduced in December, we created a new utility to:

... (truncated)

Changelog

Sourced from aws-lambda-powertools's changelog.

[v2.35.1] - 2024-03-08

Bug Fixes

  • data_sources: ensure correct types on SQSMessageAttributes (#3898)
  • event_handler: validate POST bodies on BedrockAgentResolver (#3903)
  • internal: call ruff with correct args (#3901)

Features

  • event_handler: use custom serializer during openapi serialization (#3900)

Maintenance

  • version bump
  • deps: bump aws-xray-sdk from 2.12.1 to 2.13.0 (#3906)
  • deps: bump the layer-balancer group in /layer/scripts/layer-balancer with 3 updates (#3911)
  • deps: bump squidfunk/mkdocs-material from 7be068b to 3678304 in /docs (#3894)
  • deps: bump datadog-lambda from 5.88.0 to 5.89.0 (#3907)
  • deps-dev: bump cdklabs-generative-ai-cdk-constructs from 0.1.81 to 0.1.82 (#3896)
  • deps-dev: bump sentry-sdk from 1.40.6 to 1.41.0 (#3905)
  • deps-dev: bump mkdocs-material from 9.5.12 to 9.5.13 (#3895)
  • deps-dev: bump cdklabs-generative-ai-cdk-constructs from 0.1.82 to 0.1.83 (#3908)
  • deps-dev: bump the boto-typing group with 1 update (#3904)

[v2.35.0] - 2024-03-06

Bug Fixes

  • event_handler: OpenAPI schema version respects Pydantic version (#3860)

Code Refactoring

  • logger: improve typing (#3869)

Documentation

  • event_handler: add bedrock agent resolver documentation (#3602)

Maintenance

  • version bump
  • deps: bump docker/setup-buildx-action from 3.0.0 to 3.1.0 (#3864)
  • deps: bump actions/download-artifact from 4.1.3 to 4.1.4 (#3875)
  • deps: bump the layer-balancer group in /layer/scripts/layer-balancer with 1 update (#3884)
  • deps: bump squidfunk/mkdocs-material from 49d1bfd to 7be068b in /docs (#3872)
  • deps: bump squidfunk/mkdocs-material from 43b898a to 49d1bfd in /docs (#3857)
  • deps: bump codecov/codecov-action from 4.0.2 to 4.1.0 (#3856)
  • deps: bump redis from 5.0.1 to 5.0.2 (#3867)
  • deps: bump the layer-balancer group in /layer/scripts/layer-balancer with 1 update (#3887)

... (truncated)

Commits
  • bd733ca chore: version bump
  • 8765206 feat(event_handler): use custom serializer during openapi serialization (#3900)
  • e79eef4 fix(event_handler): validate POST bodies on BedrockAgentResolver (#3903)
  • ca2e718 chore(deps): bump datadog-lambda from 5.88.0 to 5.89.0 (#3907)
  • 17dc701 chore(deps-dev): bump cdklabs-generative-ai-cdk-constructs from 0.1.82 to 0.1...
  • 024d9d7 chore(ci): changelog rebuild (#3913)
  • f08241e chore(deps-dev): bump sentry-sdk from 1.40.6 to 1.41.0 (#3905)
  • 5bd7526 chore(deps): bump the layer-balancer group in /layer/scripts/layer-balancer w...
  • d2bbaa7 chore(deps): bump aws-xray-sdk from 2.12.1 to 2.13.0 (#3906)
  • f1b95d2 fix(data_sources): ensure correct types on SQSMessageAttributes (#3898)
  • Additional commits viewable in compare view

Updates boto3 from 1.34.39 to 1.34.67

Changelog

Sourced from boto3's changelog.

1.34.67

  • api-change:accessanalyzer: [botocore] This release adds support for policy validation and external access findings for DynamoDB tables and streams. IAM Access Analyzer helps you author functional and secure resource-based policies and identify cross-account access. Updated service API, documentation, and paginators.
  • api-change:codebuild: [botocore] This release adds support for new webhook events (RELEASED and PRERELEASED) and filter types (TAG_NAME and RELEASE_NAME).
  • api-change:connect: [botocore] This release updates the *InstanceStorageConfig APIs to support a new ResourceType: REAL_TIME_CONTACT_ANALYSIS_CHAT_SEGMENTS. Use this resource type to enable streaming for real-time analysis of chat contacts and to associate a Kinesis stream where real-time analysis chat segments will be published.
  • api-change:dynamodb: [botocore] This release introduces 3 new APIs ('GetResourcePolicy', 'PutResourcePolicy' and 'DeleteResourcePolicy') and modifies the existing 'CreateTable' API for the resource-based policy support. It also modifies several APIs to accept a 'TableArn' for the 'TableName' parameter.
  • api-change:managedblockchain-query: [botocore] AMB Query: update GetTransaction to include transactionId as input
  • api-change:savingsplans: [botocore] Introducing the Savings Plans Return feature enabling customers to return their Savings Plans within 7 days of purchase.

1.34.66

  • api-change:cloudformation: [botocore] Documentation update, March 2024. Corrects some formatting.
  • api-change:ec2: [botocore] This release adds the new DescribeMacHosts API operation for getting information about EC2 Mac Dedicated Hosts. Users can now see the latest macOS versions that their underlying Apple Mac can support without needing to be updated.
  • api-change:finspace: [botocore] Adding new attributes readWrite and onDemand to dataview models for Database Maintenance operations.
  • api-change:logs: [botocore] Update LogSamples field in Anomaly model to be a list of LogEvent
  • api-change:managedblockchain-query: [botocore] Introduces a new API for Amazon Managed Blockchain Query: ListFilteredTransactionEvents.

1.34.65

  • api-change:cloudformation: [botocore] This release supports for a new API ListStackSetAutoDeploymentTargets, which provider auto-deployment configuration as a describable resource. Customers can now view the specific combinations of regions and OUs that are being auto-deployed.
  • api-change:kms: [botocore] Adds the ability to use the default policy name by omitting the policyName parameter in calls to PutKeyPolicy and GetKeyPolicy
  • api-change:mediatailor: [botocore] This release adds support to allow customers to show different content within a channel depending on metadata associated with the viewer.
  • api-change:rds: [botocore] This release launches the ModifyIntegration API and support for data filtering for zero-ETL Integrations.
  • api-change:s3: [botocore] Fix two issues with response root node names.
  • api-change:timestream-query: [botocore] Documentation updates, March 2024

1.34.64

  • api-change:backup: [botocore] This release introduces a boolean attribute ManagedByAWSBackupOnly as part of ListRecoveryPointsByResource api to filter the recovery points based on ownership. This attribute can be used to filter out the recovery points protected by AWSBackup.
  • api-change:codebuild: [botocore] AWS CodeBuild now supports overflow behavior on Reserved Capacity.
  • api-change:connect: [botocore] This release adds Hierarchy based Access Control fields to Security Profile public APIs and adds support for UserAttributeFilter to SearchUsers API.
  • api-change:ec2: [botocore] Add media accelerator and neuron device information on the describe instance types API.
  • api-change:kinesisanalyticsv2: [botocore] Support for Flink 1.18 in Managed Service for Apache Flink
  • api-change:s3: [botocore] Documentation updates for Amazon S3.
  • api-change:sagemaker: [botocore] Adds m6i, m6id, m7i, c6i, c6id, c7i, r6i r6id, r7i, p5 instance type support to Sagemaker Notebook Instances and miscellaneous wording fixes for previous Sagemaker documentation.
  • api-change:workspaces-thin-client: [botocore] Removed unused parameter kmsKeyArn from UpdateDeviceRequest

1.34.63

  • api-change:amplify: [botocore] Documentation updates for Amplify. Identifies the APIs available only to apps created using Amplify Gen 1.
  • api-change:ec2-instance-connect: [botocore] This release includes a new exception type "SerialConsoleSessionUnsupportedException" for SendSerialConsoleSSHPublicKey API.

... (truncated)

Commits
  • b5d959a Merge branch 'release-1.34.67'
  • 40e8e24 Bumping version to 1.34.67
  • 59d23f2 Add changelog entries from botocore
  • 8552dcd Merge branch 'release-1.34.66'
  • 0b92cd9 Merge branch 'release-1.34.66' into develop
  • db24b6f Bumping version to 1.34.66
  • 6331de0 Add changelog entries from botocore
  • d70b1ca transfer.py: fix docs (#2784)
  • a53379a Merge branch 'release-1.34.65'
  • 7a8efe3 Merge branch 'release-1.34.65' into develop
  • Additional commits viewable in compare view

Updates aws-xray-sdk from 2.12.1 to 2.13.0

Release notes

Sourced from aws-xray-sdk's releases.

2.13.0 Release

See details in CHANGELOG

Changelog

Sourced from aws-xray-sdk's changelog.

2.13.0

  • bugfix: Fix passing multiple values in testenv.passenv in tox.ini https://github.com/aws/aws-xray-sdk-python/pull/399
  • improvement: Pin flask < 3.x for flask sqlalchemy tests https://github.com/aws/aws-xray-sdk-python/pull/412
  • improvement: Bump werkzeug from 2.2.3 to 3.0.1 in /sample-apps/flask https://github.com/aws/aws-xray-sdk-python/pull/413
  • improvement: Fix typo in docs https://github.com/aws/aws-xray-sdk-python/pull/419
  • bugfix: Fix sqlalchemy_core patch errors for unencoded special characters in db url https://github.com/aws/aws-xray-sdk-python/pull/418
  • bugfix: Fix EB platform version for integration test https://github.com/aws/aws-xray-sdk-python/pull/420
Commits
  • 692a439 Release commit for v2.13.0 (#421)
  • c306099 Fix EB platform version for integration test (#420)
  • de7e178 Fix sqlalchemy_core patch errors for unencoded special characters in db url #...
  • 19fb262 Fix typo in docs (#419)
  • 2e07898 Enable testing on Python 3.12 (#400)
  • 9e6fa9f Merge pull request #413 from aws/dependabot/pip/sample-apps/flask/werkzeug-3.0.1
  • 1fa9e51 Bump werkzeug from 2.2.3 to 3.0.1 in /sample-apps/flask
  • c0550a5 Pin flask < 3.x for flask sqlalchemy tests (#412)
  • 9d27fe2 Fix passing multiple values in testenv.passenv in tox.ini (#399)
  • See full diff in compare view

Updates black from 24.1.1 to 24.3.0

Release notes

Sourced from black's releases.

24.3.0

Highlights

This release is a milestone: it fixes Black's first CVE security vulnerability. If you run Black on untrusted input, or if you habitually put thousands of leading tab characters in your docstrings, you are strongly encouraged to upgrade immediately to fix CVE-2024-21503.

This release also fixes a bug in Black's AST safety check that allowed Black to make incorrect changes to certain f-strings that are valid in Python 3.12 and higher.

Stable style

  • Don't move comments along with delimiters, which could cause crashes (#4248)
  • Strengthen AST safety check to catch more unsafe changes to strings. Previous versions of Black would incorrectly format the contents of certain unusual f-strings containing nested strings with the same quote type. Now, Black will crash on such strings until support for the new f-string syntax is implemented. (#4270)
  • Fix a bug where line-ranges exceeding the last code line would not work as expected (#4273)

Performance

  • Fix catastrophic performance on docstrings that contain large numbers of leading tab characters. This fixes CVE-2024-21503. (#4278)

Documentation

  • Note what happens when --check is used with --quiet (#4236)

24.2.0

Stable style

  • Fixed a bug where comments where mistakenly removed along with redundant parentheses (#4218)

Preview style

  • Move the hug_parens_with_braces_and_square_brackets feature to the unstable style due to an outstanding crash and proposed formatting tweaks (#4198)
  • Fixed a bug where base expressions caused inconsistent formatting of ** in tenary expression (#4154)
  • Checking for newline before adding one on docstring that is almost at the line limit (#4185)
  • Remove redundant parentheses in case statement if guards (#4214).

Configuration

... (truncated)

Changelog

Sourced from black's changelog.

24.3.0

Highlights

This release is a milestone: it fixes Black's first CVE security vulnerability. If you run Black on untrusted input, or if you habitually put thousands of leading tab characters in your docstrings, you are strongly encouraged to upgrade immediately to fix CVE-2024-21503.

This release also fixes a bug in Black's AST safety check that allowed Black to make incorrect changes to certain f-strings that are valid in Python 3.12 and higher.

Stable style

  • Don't move comments along with delimiters, which could cause crashes (#4248)
  • Strengthen AST safety check to catch more unsafe changes to strings. Previous versions of Black would incorrectly format the contents of certain unusual f-strings containing nested strings with the same quote type. Now, Black will crash on such strings until support for the new f-string syntax is implemented. (#4270)
  • Fix a bug where line-ranges exceeding the last code line would not work as expected (#4273)

Performance

  • Fix catastrophic performance on docstrings that contain large numbers of leading tab characters. This fixes CVE-2024-21503. (#4278)

Documentation

  • Note what happens when --check is used with --quiet (#4236)

24.2.0

Stable style

  • Fixed a bug where comments where mistakenly removed along with redundant parentheses (#4218)

Preview style

  • Move the hug_parens_with_braces_and_square_brackets feature to the unstable style due to an outstanding crash and proposed formatting tweaks (#4198)
  • Fixed a bug where base expressions caused inconsistent formatting of ** in tenary expression (#4154)
  • Checking for newline before adding one on docstring that is almost at the line limit (#4185)
  • Remove redundant parentheses in case statement if guards (#4214).

... (truncated)

Commits

Updates mypy from 1.8.0 to 1.9.0

Changelog

Sourced from mypy's changelog.

Mypy Release Notes

Mypy 1.9

We’ve just uploaded mypy 1.9 to the Python Package Index (PyPI). Mypy is a static type checker for Python. This release includes new features, performance improvements and bug fixes. You can install it as follows:

python3 -m pip install -U mypy

You can read the full documentation for this release on Read the Docs.

Breaking Changes

Because the version of typeshed we use in mypy 1.9 doesn't support 3.7, neither does mypy 1.9. (Jared Hance, PR 16883)

We are planning to enable local partial types (enabled via the --local-partial-types flag) later this year by default. This change was announced years ago, but now it's finally happening. This is a major backward-incompatible change, so we'll probably include it as part of the upcoming mypy 2.0 release. This makes daemon and non-daemon mypy runs have the same behavior by default.

Local partial types can also be enabled in the mypy config file:

local_partial_types = True

We are looking at providing a tool to make it easier to migrate projects to use --local-partial-types, but it's not yet clear whether this is practical. The migration usually involves adding some explicit type annotations to module-level and class-level variables.

Basic Support for Type Parameter Defaults (PEP 696)

This release contains new experimental support for type parameter defaults (PEP 696). Please try it out! This feature was contributed by Marc Mueller.

Since this feature will be officially introduced in the next Python feature release (3.13), you will need to import TypeVar, ParamSpec or TypeVarTuple from typing_extensions to use defaults for now.

This example adapted from the PEP defines a default for BotT:

from typing import Generic
from typing_extensions import TypeVar
class Bot: ...
BotT = TypeVar("BotT", bound=Bot, default=Bot)
</tr></table>

... (truncated)

Commits

Updates pylint from 3.0.3 to 3.1.0

Commits
  • 053c2c3 Bump pylint to 3.1.0, update changelog
  • c954636 Upgrade release documentation, and contributors.txt
  • 7300ed2 Discover .pyi files (#9241)
  • 9dbf3df Merge maintenance 3.0.x into main following 3.0.4 release (#9459)
  • 28e89b0 Remove changelog fragments pertaining to 3.0.4
  • 4332ea1 Merge branch 'maintenance/3.0.x' into main following 3.0.4 release
  • 8115381 Bump pylint to 3.0.4, update changelog (#9458)
  • 4bf3524 [false-negative] Fix for consider-using-min/max-builtin (#9127)
  • 8c24b1e [pre-commit.ci] pre-commit autoupdate (#9448)
  • f499686 Update astroid version to 3.1.0 (#9457)
  • Additional commits viewable in compare view

Updates types-requests from 2.31.0.20240125 to 2.31.0.20240311

Commits

Updates pytest from 8.0.0 to 8.1.1

Release notes

Sourced from pytest's releases.

8.1.1

pytest 8.1.1 (2024-03-08)

::: {.note} ::: {.title} Note :::

This release is not a usual bug fix release -- it contains features and improvements, being a follow up to 8.1.0, which has been yanked from PyPI. :::

Features

  • #11475: Added the new consider_namespace_packages{.interpreted-text role="confval"} configuration option, defaulting to False.

    If set to True, pytest will attempt to identify modules that are part of namespace packages when importing modules.

  • #11653: Added the new verbosity_test_cases{.interpreted-text role="confval"} configuration option for fine-grained control of test execution verbosity. See Fine-grained verbosity <pytest.fine_grained_verbosity>{.interpreted-text role="ref"} for more details.

Improvements

  • #10865: pytest.warns{.interpreted-text role="func"} now validates that warnings.warn{.interpreted-text role="func"} was called with a [str]{.title-ref} or a [Warning]{.title-ref}. Currently in Python it is possible to use other types, however this causes an exception when warnings.filterwarnings{.interpreted-text role="func"} is used to filter those warnings (see [CPython #103577](python/cpython#103577) for a discussion). While this can be considered a bug in CPython, we decided to put guards in pytest as the error message produced without this check in place is confusing.

  • #11311: When using --override-ini for paths in invocations without a configuration file defined, the current working directory is used as the relative directory.

    Previoulsy this would raise an AssertionError{.interpreted-text role="class"}.

  • #11475: --import-mode=importlib <import-mode-importlib>{.interpreted-text role="ref"} now tries to import modules using the standard import mechanism (but still without changing :pysys.path{.interpreted-text role="data"}), falling back to importing modules directly only if that fails.

    This means that installed packages will be imported under their canonical name if possible first, for example app.core.models, instead of having the module name always be derived from their path (for example .env310.lib.site_packages.app.core.models).

  • #11801: Added the iter_parents() <_pytest.nodes.Node.iter_parents>{.interpreted-text role="func"} helper method on nodes. It is similar to listchain <_pytest.nodes.Node.listchain>{.interpreted-text role="func"}, but goes from bottom to top, and returns an iterator, not a list.

  • #11850: Added support for sys.last_exc{.interpreted-text role="data"} for post-mortem debugging on Python>=3.12.

  • #11962: In case no other suitable candidates for configuration file are found, a pyproject.toml (even without a [tool.pytest.ini_options] table) will be considered as the configuration file and define the rootdir.

  • #11978: Add --log-file-mode option to the logging plugin, enabling appending to log-files. This option accepts either "w" or "a" and defaults to "w".

    Previously, the mode was hard-coded to be "w" which truncates the file before logging.

... (truncated)

Commits
  • 81653ee Adjust changelog manually for 8.1.1
  • e60b4b9 Prepare release version 8.1.1
  • 15fbe57 [8.1.x] Revert legacy path removals (#12093)
  • 86c3aab [8.1.x] Do not import duplicated modules with --importmode=importlib (#12077)
  • 5b82b0c [8.1.x] Yank version 8.1.0 (#12076)
  • 0a53681 Merge pull request #12054 from pytest-dev/release-8.1.0
  • b9a167f Prepare release version 8.1.0
  • 00043f7 Merge pull request #12038 from bluetech/fixtures-rm-arg2index
  • f4e1025 Merge pull request #12048 from bluetech/fixture-teardown-excgroup
  • 43492f5 Merge pull request #12051 from jakkdl/test_debugging_pythonbreakpoint
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the python group with 9 updates:

| Package | From | To |
| --- | --- | --- |
| [pypdf](https://github.com/py-pdf/pypdf) | `4.0.1` | `4.1.0` |
| [aws-lambda-powertools](https://github.com/aws-powertools/powertools-lambda-python) | `2.33.1` | `2.35.1` |
| [boto3](https://github.com/boto/boto3) | `1.34.39` | `1.34.67` |
| [aws-xray-sdk](https://github.com/aws/aws-xray-sdk-python) | `2.12.1` | `2.13.0` |
| [black](https://github.com/psf/black) | `24.1.1` | `24.3.0` |
| [mypy](https://github.com/python/mypy) | `1.8.0` | `1.9.0` |
| [pylint](https://github.com/pylint-dev/pylint) | `3.0.3` | `3.1.0` |
| [types-requests](https://github.com/python/typeshed) | `2.31.0.20240125` | `2.31.0.20240311` |
| [pytest](https://github.com/pytest-dev/pytest) | `8.0.0` | `8.1.1` |


Updates `pypdf` from 4.0.1 to 4.1.0
- [Release notes](https://github.com/py-pdf/pypdf/releases)
- [Changelog](https://github.com/py-pdf/pypdf/blob/main/CHANGELOG.md)
- [Commits](py-pdf/pypdf@4.0.1...4.1.0)

Updates `aws-lambda-powertools` from 2.33.1 to 2.35.1
- [Release notes](https://github.com/aws-powertools/powertools-lambda-python/releases)
- [Changelog](https://github.com/aws-powertools/powertools-lambda-python/blob/develop/CHANGELOG.md)
- [Commits](aws-powertools/powertools-lambda-python@v2.33.1...v2.35.1)

Updates `boto3` from 1.34.39 to 1.34.67
- [Release notes](https://github.com/boto/boto3/releases)
- [Changelog](https://github.com/boto/boto3/blob/develop/CHANGELOG.rst)
- [Commits](boto/boto3@1.34.39...1.34.67)

Updates `aws-xray-sdk` from 2.12.1 to 2.13.0
- [Release notes](https://github.com/aws/aws-xray-sdk-python/releases)
- [Changelog](https://github.com/aws/aws-xray-sdk-python/blob/master/CHANGELOG.rst)
- [Commits](aws/aws-xray-sdk-python@2.12.1...2.13.0)

Updates `black` from 24.1.1 to 24.3.0
- [Release notes](https://github.com/psf/black/releases)
- [Changelog](https://github.com/psf/black/blob/main/CHANGES.md)
- [Commits](psf/black@24.1.1...24.3.0)

Updates `mypy` from 1.8.0 to 1.9.0
- [Changelog](https://github.com/python/mypy/blob/master/CHANGELOG.md)
- [Commits](python/mypy@v1.8.0...1.9.0)

Updates `pylint` from 3.0.3 to 3.1.0
- [Release notes](https://github.com/pylint-dev/pylint/releases)
- [Commits](pylint-dev/pylint@v3.0.3...v3.1.0)

Updates `types-requests` from 2.31.0.20240125 to 2.31.0.20240311
- [Commits](https://github.com/python/typeshed/commits)

Updates `pytest` from 8.0.0 to 8.1.1
- [Release notes](https://github.com/pytest-dev/pytest/releases)
- [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst)
- [Commits](pytest-dev/pytest@8.0.0...8.1.1)

---
updated-dependencies:
- dependency-name: pypdf
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python
- dependency-name: aws-lambda-powertools
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python
- dependency-name: boto3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python
- dependency-name: aws-xray-sdk
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python
- dependency-name: black
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python
- dependency-name: mypy
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python
- dependency-name: pylint
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python
- dependency-name: types-requests
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python
- dependency-name: pytest
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies python Pull requests that update Python code labels Mar 21, 2024
Copy link

changeset-bot bot commented Mar 21, 2024

🦋 Changeset detected

Latest commit: 44bbee5

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 1 package
Name Type
arcane-scripts Patch

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

@chizmw chizmw added deps Pull requests that update a dependency and removed dependencies labels Mar 24, 2024
@chizmw
Copy link
Owner

chizmw commented Mar 24, 2024

@dependabot recreate

Copy link
Contributor Author

dependabot bot commented on behalf of github Mar 24, 2024

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot bot closed this Mar 24, 2024
@dependabot dependabot bot deleted the dependabot/pip/python-036c049d26 branch March 24, 2024 20:43
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
deps Pull requests that update a dependency python Pull requests that update Python code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant