⬆️(dependencies) update python dependencies #333
+14
−14
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
==3.11.11
->==3.11.12
==1.36.6
->==1.36.18
==5.1.5
->==5.1.6
==4.6.0
->==4.7.0
==2024.12.1
->==2025.2.1
==3.3.1
->==3.3.3
==8.31.0
->==8.32.0
==0.8.1
->==0.8.2
==1.60.2
->==1.61.1
==3.3.3
->==3.3.4
==4.9.0
->==4.10.0
==0.9.3
->==0.9.6
==6.8.2
->==6.9.0
Release Notes
aio-libs/aiohttp (aiohttp)
v3.11.12
Compare Source
====================
Bug fixes
MultipartForm.decode()
now follows RFC1341 7.2.1 with aCRLF
after the boundary-- by :user:
imnotjames
.Related issues and pull requests on GitHub:
:issue:
10270
.Restored the missing
total_bytes
attribute toEmptyStreamReader
-- by :user:bdraco
.Related issues and pull requests on GitHub:
:issue:
10387
.Features
Updated :py:func:
~aiohttp.request
to make it accept_RequestOptions
kwargs.-- by :user:
Cycloctane
.Related issues and pull requests on GitHub:
:issue:
10300
.Improved logging of HTTP protocol errors to include the remote address -- by :user:
bdraco
.Related issues and pull requests on GitHub:
:issue:
10332
.Improved documentation
Added
aiohttp-openmetrics
to list of third-party libraries -- by :user:jelmer
.Related issues and pull requests on GitHub:
:issue:
10304
.Packaging updates and notes for downstreams
Added missing files to the source distribution to fix
Makefile
targets.Added a
cythonize-nodeps
target to run Cython without invoking pip to install dependencies.Related issues and pull requests on GitHub:
:issue:
10366
.Started building armv7l musllinux wheels -- by :user:
bdraco
.Related issues and pull requests on GitHub:
:issue:
10404
.Contributor-facing changes
The CI/CD workflow has been updated to use
upload-artifact
v4 anddownload-artifact
v4 GitHub Actions -- by :user:silamon
.Related issues and pull requests on GitHub:
:issue:
10281
.Miscellaneous internal changes
Restored support for zero copy writes when using Python 3.12 versions 3.12.9 and later or Python 3.13.2+ -- by :user:
bdraco
.Zero copy writes were previously disabled due to :cve:
2024-12254
which is resolved in these Python versions.Related issues and pull requests on GitHub:
:issue:
10137
.boto/boto3 (boto3)
v1.36.18
Compare Source
=======
acm-pca
: [botocore
] Private Certificate Authority service now supports Partitioned CRL as a revocation configuration option.appsync
: [botocore
] Add support for operation level cachingec2
: [botocore
] Adding support for the new fullSnapshotSizeInBytes field in the response of the EC2 EBS DescribeSnapshots API. This field represents the size of all the blocks that were written to the source volume at the time the snapshot was created.pi
: [botocore
] Documentation only update for RDS Performance Insights dimensions for execution plans and locking analysis.v1.36.17
Compare Source
=======
apigatewayv2
: [botocore
] Documentation updates for Amazon API Gatewaycloudfront
: [botocore
] Doc-only update that adds defaults for CloudFront VpcOriginEndpointConfig values.connect
: [botocore
] Updated the CreateContact API documentation to indicate that it only applies to EMAIL contacts.dms
: [botocore
] New vendors for DMS Data Providers: DB2 LUW and DB2 for z/OSv1.36.16
Compare Source
=======
ecr
: [botocore
] Adds support to handle the new basic scanning daily quota.eks
: [botocore
] Introduce versionStatus field to take place of status field in EKS DescribeClusterVersions APImediaconvert
: [botocore
] This release adds support for Animated GIF output, forced chroma sample positioning metadata, and Extensible Wave Container formatpi
: [botocore
] Adds documentation for dimension groups and dimensions to analyze locks for Database Insights.transcribe
: [botocore
] This release adds support for the Clinical Note Template Customization feature for the AWS HealthScribe APIs within Amazon Transcribe.v1.36.15
Compare Source
=======
cloudformation
: [botocore
] We added 5 new stack refactoring APIs: CreateStackRefactor, ExecuteStackRefactor, ListStackRefactors, DescribeStackRefactor, ListStackRefactorActions.connectcases
: [botocore
] This release adds the ability to conditionally require fields on a template. Check public documentation for more information.cost-optimization-hub
: [botocore
] This release enables AWS Cost Optimization Hub to show cost optimization recommendations for Amazon Auto Scaling Groups, including those with single and mixed instance types.s3
: [botocore
] Updated list of the valid AWS Region values for the LocationConstraint parameter for general purpose buckets.botocore
] The SDK no longer validates payload size for eventstreams. This is to facilitate varying payload requirements across AWS services.v1.36.14
Compare Source
=======
rds
: [botocore
] Documentation updates to clarify the description for the parameter AllocatedStorage for the DB cluster data type, the description for the parameter DeleteAutomatedBackups for the DeleteDBCluster API operation, and removing an outdated note for the CreateDBParameterGroup API operation.v1.36.13
Compare Source
=======
datasync
: [botocore
] Doc-only update to provide more information on using Kerberos authentication with SMB locations.dms
: [botocore
] Introduces TargetDataSettings with the TablePreparationMode option available for data migrations.iam
: [botocore
] This release adds support for accepting encrypted SAML assertions. Customers can now configure their identity provider to encrypt the SAML assertions it sends to IAM.neptune-graph
: [botocore
] Added argument tolist-export
to filter by graph IDqbusiness
: [botocore
] Adds functionality to enable/disable a new Q Business Chat orchestration feature. If enabled, Q Business can orchestrate over datasources and plugins without the need for customers to select specific chat modes.sagemaker
: [botocore
] IPv6 support for Hyperpod clustersv1.36.12
Compare Source
=======
mediatailor
: [botocore
] Add support for CloudWatch Vended Logs which allows for delivery of customer logs to CloudWatch Logs, S3, or Firehose.v1.36.11
Compare Source
=======
amp
: [botocore
] Add support for sending metrics to cross account and CMCK AMP workspaces through RoleConfiguration on Create/Update Scraper.bedrock-agent-runtime
: [botocore
] This change is to deprecate the existing citation field under RetrieveAndGenerateStream API response in lieu of GeneratedResponsePart and RetrievedReferencescodebuild
: [botocore
] Added support for CodeBuild self-hosted Buildkite runner buildsgeo-routes
: [botocore
] The OptimizeWaypoints API now supports 50 waypoints per request (20 with constraints like AccessHours or AppointmentTime). It adds waypoint clustering via Clustering and ClusteringIndex for better optimization. Also, total distance validation is removed for greater flexibility.rds
: [botocore
] Updates to Aurora MySQL and Aurora PostgreSQL API pages with instance log type in the create and modify DB Cluster.sagemaker
: [botocore
] This release introduces a new valid value in InstanceType parameter: p5en.48xlarge, in ProductionVariant.v1.36.10
Compare Source
=======
appstream
: [botocore
] Add support for managing admin consent requirement on selected domains for OneDrive Storage Connectors in AppStream2.0.bedrock-agent-runtime
: [botocore
] Add a 'reason' field to InternalServerExceptionecr
: [botocore
] Temporarily updating dualstack endpoint supportecr-public
: [botocore
] Temporarily updating dualstack endpoint supportmediatailor
: [botocore
] Adds options for configuring how MediaTailor conditions ads before inserting them into the content stream. Based on the new settings, MediaTailor will either transcode ads to match the content stream as it has in the past, or it will insert ads without first transcoding them.qbusiness
: [botocore
] Added APIs to manage QBusiness user subscriptionss3tables
: [botocore
] You can now use the CreateTable API operation to create tables with schemas by adding an optional metadata argument.verifiedpermissions
: [botocore
] Adds Cedar JSON format support for entities and context data in authorization requestsbotocore
] Update awscrt version to 0.23.8v1.36.9
Compare Source
======
bcm-pricing-calculator
: [botocore
] Added ConflictException error type in DeleteBillScenario, BatchDeleteBillScenarioCommitmentModification, BatchDeleteBillScenarioUsageModification, BatchUpdateBillScenarioUsageModification, and BatchUpdateBillScenarioCommitmentModification API operations.ecr
: [botocore
] Add support for Dualstack and Dualstack-with-FIPS Endpointsecr-public
: [botocore
] Add support for Dualstack Endpointsmailmanager
: [botocore
] This release includes a new feature for Amazon SES Mail Manager which allows customers to specify known addresses and domains and make use of those in traffic policies and rules actions to distinguish between known and unknown entries.s3
: [botocore
] Change the type of MpuObjectSize in CompleteMultipartUploadRequest from int to long.v1.36.8
Compare Source
======
appsync
: [botocore
] Add stash and outErrors to EvaluateCode/EvaluateMappingTemplate responsedatasync
: [botocore
] AWS DataSync now supports the Kerberos authentication protocol for SMB locations.deadline
: [botocore
] feature: Deadline: Add support for limiting the concurrent usage of external resources, like floating licenses, using limits and the ability to constrain the maximum number of workers that work on a jobec2
: [botocore
] This release changes the CreateFleet CLI and SDK's such that if you do not specify a client token, a randomly generated token is used for the request to ensure idempotency.firehose
: [botocore
] For AppendOnly streams, Firehose will automatically scale to match your throughput.timestream-influxdb
: [botocore
] Adds 'allocatedStorage' parameter to UpdateDbInstance API that allows increasing the database instance storage size and 'dbStorageType' parameter to UpdateDbInstance API that allows changing the storage type of the database instancev1.36.7
Compare Source
======
bedrock-agent
: [botocore
] Add support for the prompt caching feature for Bedrock Prompt Managementiot
: [botocore
] Raised the documentParameters size limit to 30 KB for AWS IoT Device Management - Jobs.mediaconvert
: [botocore
] This release adds support for dynamic audio configuration and the ability to disable the deblocking filter for h265 encodes.s3control
: [botocore
] Minor fix to ARN validation for Lambda functions passed to S3 Batch Operationsbotocore
] No longer sign transfer-encoding header for SigV4django/django (django)
v5.1.6
Compare Source
adamchainz/django-cors-headers (django-cors-headers)
v4.7.0
Compare Source
tfranzel/drf-spectacular-sidecar (drf-spectacular-sidecar)
v2025.2.1
Compare Source
FactoryBoy/factory_boy (factory_boy)
v3.3.3
Compare Source
v3.3.2
Compare Source
ipython/ipython (ipython)
v8.32.0
Compare Source
openai/openai-python (openai)
v1.61.1
Compare Source
Full Changelog: v1.61.0...v1.61.1
Bug Fixes
Chores
v1.61.0
Compare Source
Full Changelog: v1.60.2...v1.61.0
Features
Bug Fixes
Chores
Documentation
pylint-dev/pylint (pylint)
v3.3.4
: 3.3.4Compare Source
Other Bug Fixes
Fixes "skipped files" count calculation; the previous method was displaying an arbitrary number.
Closes #10073
Fixes a crash that occurred when pylint was run in a container on a host with cgroupsv2 and restrictions on CPU usage.
Closes #10103
Relaxed the requirements for isort so pylint can benefit from isort 6.
Closes #10203
pytest-dev/pytest-django (pytest-django)
v4.10.0
Compare Source
https://github.com/pytest-dev/pytest-django/blob/main/docs/changelog.rst#v4100-2025-02-10
astral-sh/ruff (ruff)
v0.9.6
Compare Source
Preview features
airflow
] Addexternal_task.{ExternalTaskMarker, ExternalTaskSensor}
forAIR302
(#16014)flake8-builtins
] Make strict module name comparison optional (A005
) (#15951)flake8-pyi
] Extend fix to Python <= 3.9 forredundant-none-literal
(PYI061
) (#16044)pylint
] Also report when the object isn't a literal (PLE1310
) (#15985)ruff
] Implementindented-form-feed
(RUF054
) (#16049)ruff
] Skip type definitions formissing-f-string-syntax
(RUF027
) (#16054)Rule changes
flake8-annotations
] Correct syntax fortyping.Union
in suggested return type fixes forANN20x
rules (#16025)flake8-builtins
] Match upstream module name comparison (A005
) (#16006)flake8-comprehensions
] Detect overshadowedlist
/set
/dict
, ignore variadics and named expressions (C417
) (#15955)flake8-pie
] Remove following comma correctly when the unpacked dictionary is empty (PIE800
) (#16008)flake8-simplify
] Only triggerSIM401
on known dictionaries (#15995)pylint
] Do not report calls when object type and argument type mismatch, remove custom escape handling logic (PLE1310
) (#15984)pyupgrade
] Comments within parenthesized value ranges should not affect applicability (UP040
) (#16027)pyupgrade
] Don't introduce invalid syntax when upgrading old-style type aliases with parenthesized multiline values (UP040
) (#16026)pyupgrade
] Ensure we do not rename two type parameters to the same name (UP049
) (#16038)pyupgrade
] [ruff
] Don't apply renamings if the new name is shadowed in a scope of one of the references to the binding (UP049
,RUF052
) (#16032)ruff
] UpdateRUF009
to behave similar toB008
and ignore attributes with immutable types (#16048)Server
Bug fixes
flake8-datetime
] Ignore.replace()
calls while looking for.astimezone
(#16050)flake8-type-checking
] AvoidTC004
false positive where the runtime definition is provided by__getattr__
(#16052)Documentation
ruff-lsp
migration document (#16072)ruff.nativeServer
(#16039)v0.9.5
Compare Source
Preview features
TYPE_CHECKING
forin_type_checking_block
(#15719)flake8-comprehensions
] Handle builtins at top of file correctly forunnecessary-dict-comprehension-for-iterable
(C420
) (#15837)flake8-logging
].exception()
andexc_info=
outside exception handlers (LOG004
,LOG014
) (#15799)flake8-pyi
] Fix incorrect behaviour ofcustom-typevar-return-type
preview-mode autofix iftyping
was already imported (PYI019
) (#15853)flake8-pyi
] Fix more complex cases (PYI019
) (#15821)flake8-pyi
] MakePYI019
autofixable for.py
files in preview mode as well as stubs (#15889)flake8-pyi
] Remove type parameter correctly when it is the last (PYI019
) (#15854)pylint
] Fix missing parens in unsafe fix forunnecessary-dunder-call
(PLC2801
) (#15762)pyupgrade
] Better messages and diagnostic range (UP015
) (#15872)pyupgrade
] Rename private type parameters in PEP 695 generics (UP049
) (#15862)refurb
] Also report non-name expressions (FURB169
) (#15905)refurb
] Mark fix as unsafe if there are comments (FURB171
) (#15832)ruff
] Classes with mixed type variable style (RUF053
) (#15841)airflow
]BashOperator
has been moved toairflow.providers.standard.operators.bash.BashOperator
(AIR302
) (#15922)flake8-pyi
] Add autofix for unused-private-type-var (PYI018
) (#15999)flake8-pyi
] Significantly improve accuracy ofPYI019
if preview mode is enabled (#15888)Rule changes
flake8-comprehensions
] Skip whenTypeError
present from too many (kw)args forC410
,C411
, andC418
(#15838)flake8-pyi
] RenamePYI019
and improve its diagnostic message (#15885)pep8-naming
] Ignore@override
methods (N803
) (#15954)pyupgrade
] Reuse replacement logic fromUP046
andUP047
to preserve more comments (UP040
) (#15840)ruff
] Analyze deferred annotations before enforcingmutable-(data)class-default
andfunction-call-in-dataclass-default-argument
(RUF008
,RUF009
,RUF012
) (#15921)pycodestyle
] Exemptsys.path += ...
calls (E402
) (#15980)Configuration
flake8-import-conventions
alias conflicts withisort.required-imports
bound name (#15918)allOf
(#15992)Bug fixes
flake8-comprehensions
] Unnecessarylist
comprehension (rewrite as aset
comprehension) (C403
) - Handle extraneous parentheses around list comprehension (#15877)flake8-comprehensions
] Handle trailing comma in fixes forunnecessary-generator-list/set
(C400
,C401
) (#15929)flake8-pyi
] Fix several correctness issues withcustom-type-var-return-type
(PYI019
) (#15851)pep8-naming
] Consider any number of leading underscore forN801
(#15988)pyflakes
] Visit forward annotations inTypeAliasType
as types (F401
) (#15829)pylint
] Correct min/max auto-fix and suggestion for (PL1730
) (#15930)refurb
] Handle unparenthesized tuples correctly (FURB122
,FURB142
) (#15953)refurb
] AvoidNone | None
as well as better detection and fix (FURB168
) (#15779)Documentation
ruff-lsp
related settings (#15850)linter.md
): clarify that Python files are always searched for in subdirectories (#15882)non_pep695_generic_class.rs
(#15946)lint.extendIgnore
editor setting (#15844)UP049
inUP046
andUP047
, addSee also
section toUP040
(#15956)RUF012
(#15982)ignore
andselect
config (#15883)v0.9.4
Compare Source
Preview features
airflow
] Extend airflow context parameter check forBaseOperator.execute
(AIR302
) (#15713)airflow
] UpdateAIR302
to check for deprecated context keys (#15144)flake8-bandit
] Permit suspicious imports within stub files (S4
) (#15822)pylint
] Do not triggerPLR6201
on empty collections (#15732)refurb
] Do not emit diagnostic when loop variables are used outside loop body (FURB122
) (#15757)ruff
] Add support for morere
patterns (RUF055
) (#15764)ruff
] Check for shadowedmap
before suggesting fix (RUF058
) (#15790)ruff
] Do not emit diagnostic when all arguments tozip()
are variadic (RUF058
) (#15744)ruff
] Parenthesize fix when argument spans multiple lines forunnecessary-round
(RUF057
) (#15703)Rule changes
flake8-bugbear
] ExemptNewType
calls where the original type is immutable (B008
) (#15765)pylint
] Honor banned top-level imports byTID253
inPLC0415
. (#15628)pyupgrade
] Ignoreis_typeddict
andTypedDict
fordeprecated-import
(UP035
) (#15800)CLI
flake8-quotes
option (#15788)ruff config
(#15603)Bug fixes
flake8-comprehensions
] Do not emitunnecessary-map
diagnostic when lambda has different arity (C417
) (#15802)flake8-comprehensions
] Parenthesizesorted
when needed forunnecessary-call-around-sorted
(C413
) (#15825)pyupgrade
] Handle end-of-line comments forquoted-annotation
(UP037
) (#15824)Documentation
trio.run_process
andanyio.run_process
(#15761)uv init --lib
in tutorial (#15718)evansd/whitenoise (whitenoise)
v6.9.0
Compare Source
Configuration
📅 Schedule: Branch creation - "before 7am on monday" (UTC), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.