⬆️(dependencies) update python dependencies #847
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
==1.37.24
->==1.37.33
==5.5.0
->==5.5.1
==5.1.8
->==5.2
==3.2.3
->==4.1
==1.14.5
->==1.14.6
==2025.3.1
->==2025.4.1
==9.0.2
->==9.1.0
==5.3.1
->==5.3.2
==3.7
->==3.8
==1.70.0
->==1.73.0
==0.12.10
->==0.12.12
==6.0.0
->==6.1.1
==4.10.0
->==4.11.1
==0.11.2
->==0.11.5
==2.25.0
->==2.25.1
Release Notes
boto/boto3 (boto3)
v1.37.33
Compare Source
=======
connect-contact-lens
: [botocore
] Making sentiment optional for ListRealtimeContactAnalysisSegments Response depending on conversational analytics configurationdatazone
: [botocore
] Raise hard limit of authorized principals per SubscriptionTarget from 10 to 20.detective
: [botocore
] Add support for Detective DualStack endpointsdynamodb
: [botocore
] Doc only update for API descriptions.marketplace-entitlement
: [botocore
] Add support for Marketplace Entitlement Service dual-stack endpoints for CN and GOV regionsmeteringmarketplace
: [botocore
] Add support for Marketplace Metering Service dual-stack endpoints for CN regionspcs
: [botocore
] Changed the minimum length of clusterIdentifier, computeNodeGroupIdentifier, and queueIdentifier to 3.verifiedpermissions
: [botocore
] Adds deletion protection support to policy stores. Deletion protection is disabled by default, can be enabled via the CreatePolicyStore or UpdatePolicyStore APIs, and is visible in GetPolicyStore.download_fileobj
: Fileobj provided in append mode will no longer allow concurrent writes to preserve data integrity.v1.37.32
Compare Source
=======
application-autoscaling
: [botocore
] Application Auto Scaling now supports horizontal scaling for Elasticache Memcached self-designed clusters using target tracking scaling policies and scheduled scaling.elasticache
: [botocore
] AWS ElastiCache SDK now supports using MemcachedUpgradeConfig parameter with ModifyCacheCluster API to enable updating Memcached cache node types. Please refer to updated AWS ElastiCache public documentation for detailed information on API usage and implementation.m2
: [botocore
] Introduce three new APIs: CreateDataSetExportTask, GetDataSetExportTask and ListDataSetExportHistory. Add support for batch restart for Blu Age applications.medialive
: [botocore
] AWS Elemental MediaLive / Features : Add support for CMAF Ingest CaptionLanguageMappings, TimedMetadataId3 settings, and Link InputResolution.qbusiness
: [botocore
] Adds functionality to enable/disable a new Q Business Hallucination Reduction feature. If enabled, Q Business will detect and attempt to remove Hallucinations from certain Chat requests.quicksight
: [botocore
] Add support to analysis and sheet level highlighting in QuickSight.v1.37.31
Compare Source
=======
controlcatalog
: [botocore
] The GetControl API now surfaces a control's Severity, CreateTime, and Identifier for a control's Implementation. The ListControls API now surfaces a control's Behavior, Severity, CreateTime, and Identifier for a control's Implementation.dynamodb
: [botocore
] Documentation update for secondary indexes and Create_Table.glue
: [botocore
] The TableOptimizer APIs in AWS Glue now return the DpuHours field in each TableOptimizerRun, providing clients visibility to the DPU-hours used for billing in managed Apache Iceberg table compaction optimization.groundstation
: [botocore
] Support tagging Agents and adjust input field validationstransfer
: [botocore
] This launch includes 2 enhancements to SFTP connectors user-experience: 1) Customers can self-serve concurrent connections setting for their connectors, and 2) Customers can discover the public host key of remote servers using their SFTP connectors.v1.37.30
Compare Source
=======
bedrock-runtime
: [botocore
] This release introduces our latest bedrock runtime API, InvokeModelWithBidirectionalStream. The API supports both input and output streams and is supported by only HTTP2.0.ce
: [botocore
] This release supports Pagination traits on Cost Anomaly Detection APIs.cost-optimization-hub
: [botocore
] This release adds resource type "MemoryDbReservedInstances" and resource type "DynamoDbReservedCapacity" to the GetRecommendation, ListRecommendations, and ListRecommendationSummaries APIs to support new MemoryDB and DynamoDB RI recommendations.iotfleetwise
: [botocore
] This release adds the option to update the strategy of state templates already associated to a vehicle, without the need to remove and re-add them.securityhub
: [botocore
] Documentation updates for AWS Security Hub.storagegateway
: [botocore
] Added new ActiveDirectoryStatus value, ListCacheReports paginator, and support for longer pagination tokens.taxsettings
: [botocore
] Uzbekistan Launch on TaxSettings Pagev1.37.29
Compare Source
=======
bedrock
: [botocore
] New options for how to handle harmful content detected by Amazon Bedrock Guardrails.bedrock-runtime
: [botocore
] New options for how to handle harmful content detected by Amazon Bedrock Guardrails.codebuild
: [botocore
] AWS CodeBuild now offers an enhanced debugging experience.glue
: [botocore
] Add input validations for multiple Glue APIsmedialive
: [botocore
] AWS Elemental MediaLive now supports SDI inputs to MediaLive Anywhere Channels in workflows that use AWS SDKs.personalize
: [botocore
] Add support for eventsConfig for CreateSolution, UpdateSolution, DescribeSolution, DescribeSolutionVersion. Add support for GetSolutionMetrics to return weighted NDCG metrics when eventsConfig is enabled for the solution.transfer
: [botocore
] This launch enables customers to manage contents of their remote directories, by deleting old files or moving files to archive folders in remote servers once they have been retrieved. Customers will be able to automate the process using event-driven architecture.v1.37.28
Compare Source
=======
ds-data
: [botocore
] Doc only update - fixed broken links.ec2
: [botocore
] Doc-only updates for Amazon EC2events
: [botocore
] Amazon EventBridge adds support for customer-managed keys on Archives and validations for two fields: eventSourceArn and kmsKeyIdentifier.s3control
: [botocore
] Updated max size of Prefixes parameter of Scope data type.v1.37.27
Compare Source
=======
bedrock-agent
: [botocore
] Added optional "customMetadataField" for Amazon Aurora knowledge bases, allowing single-column metadata. Also added optional "textIndexName" for MongoDB Atlas knowledge bases, enabling hybrid search support.chime-sdk-voice
: [botocore
] Added FOC date as an attribute of PhoneNumberOrder, added AccessDeniedException as a possible return type of ValidateE911Addressmailmanager
: [botocore
] Add support for Dual_Stack and PrivateLink types of IngressPoint. For configuration requests, SES Mail Manager will now accept both IPv4/IPv6 dual-stack endpoints and AWS PrivateLink VPC endpoints for email receiving.opensearch
: [botocore
] Improve descriptions for various API commands and data types.route53
: [botocore
] Added us-gov-east-1 and us-gov-west-1 as valid Latency Based Routing regions for change-resource-record-sets.sagemaker
: [botocore
] Adds support for i3en, m7i, r7i instance types for SageMaker Hyperpodsesv2
: [botocore
] This release enables customers to provide attachments in the SESv2 SendEmail and SendBulkEmail APIs.transcribe
: [botocore
] This Feature Adds Support for the "zh-HK" Locale for Batch Operationsbotocore
] The event streams maximum payload size is now required to be 24Mb or less.v1.37.26
Compare Source
=======
application-signals
: [botocore
] Application Signals now supports creating Service Level Objectives on service dependencies. Users can now create or update SLOs on discovered service dependencies to monitor their standard application metrics.codebuild
: [botocore
] This release adds support for environment type WINDOWS_SERVER_2022_CONTAINER in ProjectEnvironmentecr
: [botocore
] Fix for customer issues related to AWS account ID and size limitation for token.ecs
: [botocore
] This is an Amazon ECS documentation only update to address various tickets.lexv2-models
: [botocore
] Release feature of errorlogging for lex bot, customer can config this feature in bot version to generate log for error exception which helps debugmedialive
: [botocore
] Added support for SMPTE 2110 inputs when running a channel in a MediaLive Anywhere cluster. This feature enables ingestion of SMPTE 2110-compliant video, audio, and ancillary streams by reading SDP files that AWS Elemental MediaLive can retrieve from a network source.v1.37.25
Compare Source
=======
cleanrooms
: [botocore
] This release adds support for updating the analytics engine of a collaboration.sagemaker
: [botocore
] Added tagging support for SageMaker notebook instance lifecycle configurationscelery/celery (celery)
v5.5.1
Compare Source
=====
:release-date: 2025-04-08
:release-by: Tomer Nosrati
What's Changed
django/django (django)
v5.2
Compare Source
django-extensions/django-extensions (django-extensions)
v4.1
Compare Source
Changes:
v4.0
Compare Source
Changes:
field-type-differ
(#1867)jschneier/django-storages (django-storages)
v1.14.6
Compare Source
tfranzel/drf-spectacular-sidecar (drf-spectacular-sidecar)
v2025.4.1
Compare Source
ipython/ipython (ipython)
v9.1.0
Compare Source
lxml/lxml (lxml)
v5.3.2
Compare Source
==================
This release resolves CVE-2025-24928 as described in
https://gitlab.gnome.org/GNOME/libxml2/-/issues/847
Bugs fixed
Binary wheels use libxml2 2.12.10 and libxslt 1.1.42.
Binary wheels for Windows use a patched libxml2 2.11.9 and libxslt 1.1.39.
Python-Markdown/markdown (markdown)
v3.8
Compare Source
Changed
abbr
extension by introducing methodcreate_element
(#1483).non-redundant cases to the newer test framework.
Fixed
attr_list
ontoc
(#1493).md_in_html
processes content inside "markdown" blocks as they areparsed outside of "markdown" blocks to keep things more consistent for
third-party extensions (#1503).
md_in_html
handle tags within inline code blocks better (#1075).md_in_html
fix handling of one-liner block HTML handling (#1074).<center>
is treated like a block-level element (#1481).abbr
extension respectsAtomicString
and does not processperceived abbreviations in these strings (#1512).
smarty
extension correctly renders nested closing quotes (#1514).openai/openai-python (openai)
v1.73.0
Compare Source
Full Changelog: v1.72.0...v1.73.0
Features
Bug Fixes
Chores
v1.72.0
Compare Source
Full Changelog: v1.71.0...v1.72.0
Features
Chores
v1.71.0
Compare Source
Full Changelog: v1.70.0...v1.71.0
Features
Chores
jupyter-server/pycrdt (pycrdt)
v0.12.12
Compare Source
events()
async event iterator.v0.12.11
Compare Source
pyo3
to v0.24.1.pytest-dev/pytest-cov (pytest-cov)
v6.1.1
Compare Source
--cov-context
and theno_cover
marker are used together.v6.1.0
Compare Source
Contributed by Tsvika Shapira in
#​678 <https://github.com/pytest-dev/pytest-cov/pull/678>
_.#​675 <https://github.com/pytest-dev/pytest-cov/issues/675>
_.--cov-precision
.pytest-dev/pytest-django (pytest-django)
v4.11.1
Compare Source
https://github.com/pytest-dev/pytest-django/blob/main/docs/changelog.rst#v4111-2025-04-03
v4.11.0
Compare Source
https://github.com/pytest-dev/pytest-django/blob/main/docs/changelog.rst#v4110-2025-04-01
astral-sh/ruff (ruff)
v0.11.5
Compare Source
Preview features
airflow
] Add missingAIR302
attribute check (#17115)airflow
] Expand module path check to individual symbols (AIR302
) (#17278)airflow
] ExtractAIR312
fromAIR302
rules (AIR302
,AIR312
) (#17152)airflow
] Update oudatedAIR301
,AIR302
rules (#17123)await
(#17282)Bug fixes
flake8-pie
] Avoid false positive for multiple assignment withauto()
(PIE796
) (#17274)Rule changes
ruff
] FixRUF100
to detect unused file-levelnoqa
directives with specific codes (#17042) (#17061)flake8-pytest-style
] Avoid false positive for legacy form ofpytest.raises
(PT011
) (#17231)Documentation
v0.11.4
Compare Source
Preview features
ruff
] Implementinvalid-rule-code
asRUF102
(#17138)match
mapping patterns (#17129)match
class patterns (#17186)Bug fixes
match
patterns (#17184)typing.Annotated
subscripts (#17201)v0.11.3
Compare Source
Preview features
airflow
] Add more autofixes forAIR302
(#16876, #16977, #16976, #16965)airflow
] MoveAIR301
toAIR002
(#16978)airflow
] MoveAIR302
toAIR301
andAIR303
toAIR302
(#17151)flake8-bandit
] Markstr
andlist[str]
literals as trusted input (S603
) (#17136)ruff
] Support slices inRUF005
(#17078)case
pattern before final case (#16905)case
pattern (#16957)return
,yield
, andfor
(#17134)__debug__
(#16984)Bug fixes
panic!
when running Ruff from a deleted directory (#16903) (#17054)CLI
pyproject.toml
correctly when it is passed via stdin (#16971)Configuration
flake8-import-conventions
] Add importnumpy.typing as npt
to defaultflake8-import-conventions.aliases
(#17133)Documentation
refurb
] Document whyUserDict
,UserList
, andUserString
are preferred overdict
,list
, andstr
(FURB189
) (#16927)getsentry/sentry-python (sentry-sdk)
v2.25.1
Compare Source
Various fixes & improvements
debug
level. (#4224) by @antonpirkerConfiguration
📅 Schedule: Branch creation - "before 7am on monday" (UTC), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.