build(deps): bump the minor-updates group with 8 updates by dependabot[bot] · Pull Request #70 · awslabs/mcp-server-for-oscal

dependabot · 2026-02-24T00:21:26Z

Bumps the minor-updates group with 8 updates:

Package	From	To
boto3	`1.42.50`	`1.42.54`
strands-agents	`1.26.0`	`1.27.0`
boto3-stubs	`1.42.50`	`1.42.54`
botocore	`1.42.50`	`1.42.54`
librt	`0.8.0`	`0.8.1`
pydantic-settings	`2.13.0`	`2.13.1`
rich	`14.3.2`	`14.3.3`
stevedore	`5.6.0`	`5.7.0`

Updates boto3 from 1.42.50 to 1.42.54

Commits

ae39e43 Merge branch 'release-1.42.54'
f07efd3 Bumping version to 1.42.54
36bad54 Add changelog entries from botocore
ab66554 Merge branch 'release-1.42.53'
9699df9 Merge branch 'release-1.42.53' into develop
dfa0446 Bumping version to 1.42.53
4399285 Add changelog entries from botocore
d08d5d2 Merge branch 'release-1.42.52'
16b1743 Merge branch 'release-1.42.52' into develop
89e187c Bumping version to 1.42.52
Additional commits viewable in compare view

Updates strands-agents from 1.26.0 to 1.27.0

Release notes

Sourced from strands-agents's releases.

v1.27.0

What's Changed

feat: Propagate exceptions to AfterToolCallEvent for decorated tools (#1565) by @charles-dyfis-net in strands-agents/sdk-python#1566

feat(workflows): add conventional commit workflow in PR by @mkmeral in strands-agents/sdk-python#1645

fix: the A2AAgent returns empty AgentResult content by @afarntrog in strands-agents/sdk-python#1675

auto run review workflow on maintainer PR by @mehtarac in strands-agents/sdk-python#1673

fix: correct output reference for approval-env in integration test by @afarntrog in strands-agents/sdk-python#1685

fix: update approval env var for strands agent workflows by @Unshure in strands-agents/sdk-python#1701

fix: update allowed roles to include maintainer by @afarntrog in strands-agents/sdk-python#1704

fix: propagate reasoningSignature on Gemini tool use by @afarntrog in strands-agents/sdk-python#1703

ci: bump actions/github-script from 7 to 8 by @dependabot[bot] in strands-agents/sdk-python#1699

ci: bump amannn/action-semantic-pull-request from 5 to 6 by @dependabot[bot] in strands-agents/sdk-python#1684

fix: handle OpenAI model responses with tool calls and no other assistant content by @clareliguori in strands-agents/sdk-python#1562

fix: Update finalize condition for workflow execution by @Unshure in strands-agents/sdk-python#1708

fix: upgrade mcp minimum dependency to 1.23.0 for Tasks support by @clareliguori in strands-agents/sdk-python#1674

feat(agent): add concurrent_invocation_mode parameter by @zastrowm in strands-agents/sdk-python#1707

test: coverage for python 3.14 by @awsarron in strands-agents/sdk-python#1178

feat(agent): add add_hook convenience method for hook callback registration by @Unshure in strands-agents/sdk-python#1706

Full Changelog: strands-agents/sdk-python@v1.26.0...v1.27.0

Commits

0a31848 feat(agent): add add_hook convenience method for hook callback registration (...
0eae8a7 test: coverage for python 3.14 (#1178)
a01d933 feat(agent): add concurrent_invocation_mode parameter (#1707)
cb3d359 fix: Upgrade mcp minimum dependency to 1.23.0 for Tasks support (#1674)
4e82957 fix: Update finalize condition for workflow execution (#1708)
bdcc717 fix: handle OpenAI model responses with tool calls and no other assistant con...
2d8c20e ci: bump amannn/action-semantic-pull-request from 5 to 6 (#1684)
ac7244a ci: bump actions/github-script from 7 to 8 (#1699)
2281a20 fix: propagate reasoningSignature on Gemini tool use (#1703)
25c2aa4 fix: update allowed roles to include maintainer (#1704)
Additional commits viewable in compare view

Updates boto3-stubs from 1.42.50 to 1.42.54

Release notes

Sourced from boto3-stubs's releases.

8.8.0 - Python 3.8 runtime is back

Changed

[services] install_requires section is calculated based on dependencies in use, so typing-extensions version is set properly

[all] Replaced typing imports with collections.abc with a fallback to typing for Python <3.9

[all] Added aliases for builtins.list, builtins.set, builtins.dict, and builtins.type, so Python 3.8 runtime should work as expected again (reported by @YHallouard in #340 and @Omri-Ben-Yair in #336)

[all] Unions use the same type annotations as the rest of the structures due to proper fallbacks

Fixed

[services] Universal input/output shapes were not replaced properly in service subresources

[docs] Simplified doc links rendering for services

[services] Cleaned up unnecessary imports in client.pyi

[builder] Import records with fallback are always rendered

Commits

See full diff in compare view

Updates botocore from 1.42.50 to 1.42.54

Commits

b4cc476 Merge branch 'release-1.42.54'
92b6452 Bumping version to 1.42.54
42e39fd Update endpoints model
68d2343 Update to latest models
de615b8 Merge branch 'release-1.42.53'
025b6fa Merge branch 'release-1.42.53' into develop
a1ee10b Bumping version to 1.42.53
e4fa062 Update to latest models
d1efb3b Add support for sha512, xxhash algorithms, and MD5 for httpchecksums (#3637)
7cdfafa Merge branch 'release-1.42.52'
Additional commits viewable in compare view

Updates librt from 0.8.0 to 0.8.1

Commits

e9c167e Sync mypy
See full diff in compare view

Updates pydantic-settings from 2.13.0 to 2.13.1

Commits

e87d12d v2.13.1 (#790)
acf8c14 Fix JSON decoding for parameterized PEP 695 type aliases (#780)
58b236a Fix AttributeError with nested env vars for dict fields (#785) (#786)
4933f06 Fix CLI parsing error for set field types since 2.13.0 (#787) (#788)
bd0ebe6 Fix RecursionError with self-referential models in CliApp (#783)
eb7840e Fix regression for bool fields since 2.13.0 (#784)
See full diff in compare view

Updates rich from 14.3.2 to 14.3.3

Release notes

Sourced from rich's releases.

The infinite Release

Fixed a infinite loop in split_graphemes

[14.3.3] - 2026-02-19

Fixed

Fixed infinite loop with cells.split_graphemes Textualize/rich#4006

Changelog

Sourced from rich's changelog.

[14.3.3] - 2026-02-19

Fixed

Fixed infinite loop with cells.split_graphemes Textualize/rich#4006

Commits

ce01188 Merge pull request #4008 from Textualize/bump1433
14a47c9 bump
f54bfe0 Merge pull request #4007 from Textualize/copilot/sub-pr-4006
7338cb9 Merge pull request #4006 from Textualize/fix-grapheme-stuck
905b397 Update tests/test_cells.py
b031dca Update tests/test_cells.py
f07a3fc Add regression tests for VS16 after zero-width chars in split_graphemes
b618ccc spelling
378c34b Initial plan
87e7ca2 refinements, and tests
Additional commits viewable in compare view

Updates stevedore from 5.6.0 to 5.7.0

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the minor-updates group with 8 updates: | Package | From | To | | --- | --- | --- | | [boto3](https://github.com/boto/boto3) | `1.42.50` | `1.42.54` | | [strands-agents](https://github.com/strands-agents/sdk-python) | `1.26.0` | `1.27.0` | | [boto3-stubs](https://github.com/youtype/mypy_boto3_builder) | `1.42.50` | `1.42.54` | | [botocore](https://github.com/boto/botocore) | `1.42.50` | `1.42.54` | | [librt](https://github.com/mypyc/librt) | `0.8.0` | `0.8.1` | | [pydantic-settings](https://github.com/pydantic/pydantic-settings) | `2.13.0` | `2.13.1` | | [rich](https://github.com/Textualize/rich) | `14.3.2` | `14.3.3` | | [stevedore](https://docs.openstack.org/stevedore) | `5.6.0` | `5.7.0` | Updates `boto3` from 1.42.50 to 1.42.54 - [Release notes](https://github.com/boto/boto3/releases) - [Commits](boto/boto3@1.42.50...1.42.54) Updates `strands-agents` from 1.26.0 to 1.27.0 - [Release notes](https://github.com/strands-agents/sdk-python/releases) - [Commits](strands-agents/sdk-python@v1.26.0...v1.27.0) Updates `boto3-stubs` from 1.42.50 to 1.42.54 - [Release notes](https://github.com/youtype/mypy_boto3_builder/releases) - [Commits](https://github.com/youtype/mypy_boto3_builder/commits) Updates `botocore` from 1.42.50 to 1.42.54 - [Commits](boto/botocore@1.42.50...1.42.54) Updates `librt` from 0.8.0 to 0.8.1 - [Commits](mypyc/librt@v0.8.0...v0.8.1) Updates `pydantic-settings` from 2.13.0 to 2.13.1 - [Release notes](https://github.com/pydantic/pydantic-settings/releases) - [Commits](pydantic/pydantic-settings@v2.13.0...v2.13.1) Updates `rich` from 14.3.2 to 14.3.3 - [Release notes](https://github.com/Textualize/rich/releases) - [Changelog](https://github.com/Textualize/rich/blob/master/CHANGELOG.md) - [Commits](Textualize/rich@v14.3.2...v14.3.3) Updates `stevedore` from 5.6.0 to 5.7.0 --- updated-dependencies: - dependency-name: boto3 dependency-version: 1.42.54 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-updates - dependency-name: strands-agents dependency-version: 1.27.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-updates - dependency-name: boto3-stubs dependency-version: 1.42.54 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-updates - dependency-name: botocore dependency-version: 1.42.54 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-updates - dependency-name: librt dependency-version: 0.8.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-updates - dependency-name: pydantic-settings dependency-version: 2.13.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-updates - dependency-name: rich dependency-version: 14.3.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-updates - dependency-name: stevedore dependency-version: 5.7.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-updates ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-03-03T00:43:06Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Feb 24, 2026

dependabot bot requested a review from a team February 24, 2026 00:21

dependabot bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Feb 24, 2026

dependabot bot force-pushed the dependabot/uv/minor-updates-115182aff6 branch from a9f02dc to bd067cc Compare February 24, 2026 21:54

dependabot bot force-pushed the dependabot/uv/minor-updates-115182aff6 branch from bd067cc to 94b23a0 Compare February 25, 2026 01:47

dependabot bot closed this Mar 3, 2026

dependabot bot deleted the dependabot/uv/minor-updates-115182aff6 branch March 3, 2026 00:43

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

build(deps): bump the minor-updates group with 8 updates#70

build(deps): bump the minor-updates group with 8 updates#70
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/uv/minor-updates-115182aff6

dependabot bot commented on behalf of github Feb 24, 2026 •

edited

Loading

Uh oh!

dependabot bot commented on behalf of github Mar 3, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot bot commented on behalf of github Feb 24, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v1.27.0

What's Changed

8.8.0 - Python 3.8 runtime is back

Changed

Fixed

The infinite Release

[14.3.3] - 2026-02-19

Fixed

[14.3.3] - 2026-02-19

Fixed

Uh oh!

dependabot bot commented on behalf of github Mar 3, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot bot commented on behalf of github Feb 24, 2026 •

edited

Loading