Initial commit for Python 3.13

Author: leandrodamascena

.github/ISSUE_TEMPLATE/bug_report.yml

@@ -63,6 +63,7 @@ body:
         - "3.10"
         - "3.11"
         - "3.12"
+        - "3.13"
     validations:
       required: true
   - type: dropdown

.github/ISSUE_TEMPLATE/static_typing.yml

@@ -30,6 +30,7 @@ body:
         - "3.10"
         - "3.11"
         - "3.12"
+        - "3.13"
     validations:
       required: true
   - type: input

.github/workflows/publish_v3_layer.yml

@@ -85,7 +85,7 @@ jobs:
     strategy:
       max-parallel: 5
       matrix:
-        python-version: ["3.8","3.9","3.10","3.11","3.12"]
+        python-version: ["3.8","3.9","3.10","3.11","3.12","3.13"]
     defaults:
       run:
         working-directory: ./layer_v3
@@ -232,28 +232,29 @@ jobs:
   # where a new release creates a new doc (2.16.0) while layers are still pointing to 2.15
   # because the PR has to be merged while release process is running
 
-  update_v3_layer_arn_docs:
-    needs: prod
-    outputs:
-      temp_branch: ${{ steps.create-pr.outputs.temp_branch }}
-    runs-on: ubuntu-latest
-    permissions:
-      # lower privilege propagated from parent workflow (release.yml)
-      contents: write
-      pull-requests: write
-      id-token: none
-      pages: none
-    steps:
-      - name: Checkout repository # reusable workflows start clean, so we need to checkout again
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683  # v4.2.2
-        with:
-          ref: ${{ env.RELEASE_COMMIT }}
+  # UNCOMMENT LEO
+  # update_v3_layer_arn_docs:
+  #  needs: prod
+  #   outputs:
+  #    temp_branch: ${{ steps.create-pr.outputs.temp_branch }}
+  #  runs-on: ubuntu-latest
+  #  permissions:
+  #    # lower privilege propagated from parent workflow (release.yml)
+  #    contents: write
+  #    pull-requests: write
+  #    id-token: none
+  #    pages: none
+  #  steps:
+  #    - name: Checkout repository # reusable workflows start clean, so we need to checkout again
+  #      uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683  # v4.2.2
+  #      with:
+  #        ref: ${{ env.RELEASE_COMMIT }}
 
-      - name: Restore sealed source code
-        uses: ./.github/actions/seal-restore
-        with:
-          integrity_hash: ${{ inputs.source_code_integrity_hash }}
-          artifact_name: ${{ inputs.source_code_artifact_name }}
+  #    - name: Restore sealed source code
+  #      uses: ./.github/actions/seal-restore
+  #      with:
+  #        integrity_hash: ${{ inputs.source_code_integrity_hash }}
+  #        artifact_name: ${{ inputs.source_code_artifact_name }}
 
   # UNCOMMENT THIS
   #    - name: Download CDK layer artifacts

.github/workflows/quality_check.yml

@@ -48,7 +48,7 @@ jobs:
     strategy:
       max-parallel: 4
       matrix:
-        python-version: ["3.8", "3.9", "3.10", "3.11", "3.12"]
+        python-version: ["3.8","3.9","3.10","3.11","3.12","3.13"]
     env:
       PYTHON: "${{ matrix.python-version }}"
     permissions:

.github/workflows/reusable_deploy_v3_layer_stack.yml

@@ -78,7 +78,7 @@ jobs:
                  "eu-north-1", "eu-south-1", "eu-south-2", "eu-west-1", "eu-west-2", "eu-west-3",
                  "il-central-1", "me-central-1", "me-south-1", "sa-east-1", "us-east-1",
                  "us-east-2", "us-west-1", "us-west-2"]
-        python-version: ["3.8","3.9","3.10","3.11","3.12"]
+        python-version: ["3.8","3.9","3.10","3.11","3.12","3.13"]
         include:
           - region: "af-south-1"
             has_arm64_support: "true"

.github/workflows/reusable_deploy_v3_sar.yml

@@ -72,7 +72,7 @@ jobs:
     strategy:
       matrix:
         architecture: ["x86_64", "arm64"]
-        python-version: ["3.8","3.9","3.10","3.11","3.12"]
+        python-version: ["3.8","3.9","3.10","3.11","3.12","3.13"]
     steps:
       - name: checkout
         uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683  # v4.2.2

.github/workflows/run-e2e-tests.yml

@@ -48,7 +48,7 @@ jobs:
     strategy:
       fail-fast: false # needed so if a version fails, the others will still be able to complete and cleanup
       matrix:
-        version: ["3.8", "3.9", "3.10", "3.11", "3.12"]
+        version: ["3.8", "3.9", "3.10", "3.11", "3.12","3.13"]
     if: ${{ github.actor != 'dependabot[bot]' && github.repository == 'aws-powertools/powertools-lambda-python' }}
     steps:
       - name: "Checkout"

Makefile

@@ -6,7 +6,6 @@ target:
 
 dev:
 	pip install --upgrade pip pre-commit poetry
-	poetry config --local virtualenvs.in-project true
 	@$(MAKE) dev-version-plugin
 	poetry install --extras "all redis datamasking"
 	pre-commit install

aws_lambda_powertools/utilities/parser/models/cloudformation_custom_resource.py

@@ -14,16 +14,16 @@ class CloudFormationCustomResourceBaseModel(BaseModel):
     resource_properties: Union[Dict[str, Any], BaseModel, None] = Field(None, alias="ResourceProperties")
 
 
-class CloudFormationCustomResourceCreateModel(CloudFormationCustomResourceBaseModel):
+class CloudFormationCustomResourceCreateModel(CloudFormationCustomResourceBaseModel):  # type: ignore[override]
     request_type: Literal["Create"] = Field(..., alias="RequestType")
 
 
-class CloudFormationCustomResourceDeleteModel(CloudFormationCustomResourceBaseModel):
+class CloudFormationCustomResourceDeleteModel(CloudFormationCustomResourceBaseModel):  # type: ignore[override]
     request_type: Literal["Delete"] = Field(..., alias="RequestType")
     physical_resource_id: str = Field(..., alias="PhysicalResourceId")
 
 
-class CloudFormationCustomResourceUpdateModel(CloudFormationCustomResourceBaseModel):
+class CloudFormationCustomResourceUpdateModel(CloudFormationCustomResourceBaseModel):  # type: ignore[override]
     request_type: Literal["Update"] = Field(..., alias="RequestType")
     physical_resource_id: str = Field(..., alias="PhysicalResourceId")
     old_resource_properties: Union[Dict[str, Any], BaseModel, None] = Field(None, alias="OldResourceProperties")

docs/automation.md

@@ -94,7 +94,7 @@ This is a snapshot of our automated checks at a glance.
 To build and deploy the Lambda Layers, we run a pipeline with the following steps:
 
 * We fetch the latest PyPi release and use it as the source for our layer.
-* We build Python versions ranging from **3.8 to 3.12** for x86_64 and arm64 architectures. This is necessary because we use pre-compiled libraries like **Pydantic** and **Cryptography**, which require specific Python versions for each layer.
+* We build Python versions ranging from **3.8 to 3.13** for x86_64 and arm64 architectures. This is necessary because we use pre-compiled libraries like **Pydantic** and **Cryptography**, which require specific Python versions for each layer.
 * We provide layer distributions for both the **x86_64** and **arm64** architectures.
 * For each Python version, we create a single CDK package containing both x86_64 and arm64 assets to optimize deployment performance.
 
@@ -111,6 +111,7 @@ graph LR
     Fetch --> P310[<strong>Python 3.10</strong>]
     Fetch --> P311[<strong>Python 3.11</strong>]
     Fetch --> P312[<strong>Python 3.12</strong>]
+    Fetch --> P313[<strong>Python 3.13</strong>]
 
     subgraph build ["LAYER BUILD"]
       P38 --> P38x86[build x86_64]
@@ -124,6 +125,8 @@ graph LR
       P311 --> P311arm64[build arm64]
       P312 --> P312x86[build x86_64]
       P312 --> P312arm64[build arm64]
+      P313 --> P313x86[build x86_64]
+      P313 --> P313arm64[build arm64]
       P38x86 --> CDKP1[CDK Package]
       P38arm64 --> CDKP1[CDK Package]
       P39x86 --> CDKP2[CDK Package]
@@ -134,6 +137,8 @@ graph LR
       P311arm64 --> CDKP4[CDK Package]
       P312x86 --> CDKP5[CDK Package]
       P312arm64 --> CDKP5[CDK Package]
+      P313x86 --> CDKP6[CDK Package]
+      P313arm64 --> CDKP6[CDK Package]
     end
 
     subgraph beta ["BETA (all regions)"]
@@ -142,6 +147,7 @@ graph LR
       CDKP3 --> DeployBeta
       CDKP4 --> DeployBeta
       CDKP5 --> DeployBeta
+      CDKP6 --> DeployBeta
       DeployBeta --> RunBetaCanary["Beta canary tests<br> <i>(all packages)</i>"]
     end
     subgraph prod ["PROD (all regions)"]