Lock file maintenance Python dependencies (main) #1208
Merged
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
renovate
bot
added
the
not bug or enhancement
renovate
bot
added
the
not bug or enhancement
renovate
bot
requested review from
carlcsaposs-canonical,
dragomirp,
juju-charm-bot,
marceloneppel and
taurus-forever
and removed request for
a team
![github-actions[bot]](https://avatars.githubusercontent.com/in/15368?s=60&v=4){kind=small}
github-actions
bot
added
the
Libraries: Out of sync
Codecov Report✅ All modified and coverable lines are covered by tests. Additional details and impacted files@@ Coverage Diff @@
## main #1208 +/- ##
=======================================
Coverage 72.58% 72.58%
=======================================
Files 16 16
Lines 4111 4111
Branches 601 601
=======================================
Hits 2984 2984
Misses 900 900
Partials 227 227 ☔ View full report in Codecov by Sentry. 🚀 New features to boost your workflow:
|
renovate
bot
force-pushed
the
renovate/main-python-dependencies
branch
from
4cc4a60 to
62e0328
Compare
carlcsaposs-canonical
previously approved these changes
Jan 21, 2026
renovate
bot
dismissed stale reviews from carlcsaposs-canonical and github-actions[bot]
via
a7599b6
renovate
bot
force-pushed
the
renovate/main-python-dependencies
branch
2 times, most recently
from
a7599b6 to
2387260
Compare
renovate
bot
force-pushed
the
renovate/main-python-dependencies
branch
from
2387260 to
2bb2d3a
Compare
dragomirp
approved these changes
Jan 29, 2026
carlcsaposs-canonical
approved these changes
Jan 29, 2026
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
^1.42.22→^1.42.37^7.13.1→^7.13.246.0.3→46.0.44.25.1→4.26.0^0.19.0→^0.19.1^0.19.0→^0.19.12.2.1→2.3.0^0.14.10→^0.14.14🔧 This Pull Request updates lock files to use the latest dependency versions.
Release Notes
boto/boto3 (boto3)
v1.42.37Compare Source
=======
cognito-idp: [botocore] This release adds support for a new lambda trigger to transform federated user attributes during the authentication with external identity providers on Cognito Managed Login.connect: [botocore] Adds support for filtering search results based on tags assigned to contacts.ec2: [botocore] SearchTransitGatewayRoutes API response now includes a NextToken field, enabling pagination when retrieving large sets of transit gateway routes. Pass the returned NextToken value in subsequent requests to retrieve the next page of results.lambda: [botocore] We are launching ESM Metrics and logging for Kafka ESM to allow customers to monitor Kafka event processing using CloudWatch Metrics and Logs.mediaconnect: [botocore] This release adds support for NDI flow sources in AWS Elemental MediaConnect. You can now send content to your MediaConnect transport streams directly from your NDI environment using the new NDI source type. Also adds support for LARGE 4X flow size, which can be used when creating CDI JPEG-XS flows.mediaconvert: [botocore] This release adds a follow source mode for audio output channel count, an AES audio frame wrapping option for MXF outputs, and an option to signal DolbyVision compatibility using the SUPPLEMENTAL-CODECS tag in HLS manifests.s3: [botocore] Adds support for the UpdateObjectEncryption API to change the server-side encryption type of objects in general purpose buckets.s3control: [botocore] Adds support for the UpdateObjectEncryption API to change the server-side encryption type of objects in general purpose buckets.v1.42.36Compare Source
=======
connect: [botocore] Added support for task attachments. The StartTaskContact API now accepts file attachments, enabling customers to include files (.csv, .doc, .docx, .heic, .jfif, .jpeg, .jpg, .mov, .mp4, .pdf, .png, .ppt, .pptx, .rtf, .txt, etc.) when creating Task contacts. Supports up to 5 attachments per task.deadline: [botocore] AWS Deadline Cloud now supports editing job names and descriptions after submission.ec2: [botocore] Releasing new EC2 instances. C8gb and M8gb with highest EBS performance, M8gn with 600 Gbps network bandwidth, X8aedz and M8azn with 5GHz AMD processors, X8i with Intel Xeon 6 processors and up to 6TB memory, and Mac-m4max with Apple M4 Max chip for 25 percent faster builds.medialive: [botocore] AWS Elemental MediaLive released two new features that allows customers 1) to set Output Timecode for AV1 encoder, 2) to set a Custom Epoch for CMAF Ingest and MediaPackage V2 output groups when using Pipeline Locking or Disabled Locking modes.sagemaker: [botocore] Idle resource sharing enables teams to borrow unused compute resources in your SageMaker HyperPod cluster. This capability maximizes resource utilization by allowing teams to borrow idle compute capacity beyond their allocated compute quotas.v1.42.35Compare Source
=======
connectcases: [botocore] Amazon Connect now enables you to use tag-based access controls to define who can access specific cases. You can associate tags with case templates and configure security profiles to determine which users can access cases with those tags.ec2: [botocore] DescribeInstanceTypes API response now includes an additionalFlexibleNetworkInterfaces field, the number of interfaces attachable to an instance when using flexible Elastic Network Adapter (ENA) queues in addition to the base number specified by maximumNetworkInterfaces.evidently: [botocore] Deprecate all Evidently API for AWS CloudWatch Evidently deprecationgroundstation: [botocore] Adds support for AWS Ground Station Telemetry.v1.42.34Compare Source
=======
connect: [botocore] Amazon Connect now offers public APIs to programmatically configure and run automated tests for contact center experiences. Integrate testing into CICD pipelines, run multiple tests at scale, and retrieve results via API to automate validation of voice interactions and workflows.datazone: [botocore] Added api for deleting data export configuration for a domainqconnect: [botocore] Fixes incorrect types in the UpdateAssistantAIAgent API request, adds MESSAGE to TargetType enum, and other minor changes.v1.42.33Compare Source
=======
autoscaling: [botocore] This release adds support for Amazon EC2 Auto Scaling group deletion protectionbudgets: [botocore] Add Budget FilterExpression and Metrics fields to DescribeBudgetPerformanceHistory to support more granular filtering options.dynamodb: [botocore] Adds additional waiters to Amazon DynamoDB.ec2: [botocore] Add better support for fractional GPU instances in DescribeInstanceTypes API. The new fields, logicalGpuCount, gpuPartitionSize, and workload array enable better GPU resource selection and filtering for both full and fractional GPU instance types.endpoint-rules: [botocore] Update endpoint-rules client to latest versiongamelift: [botocore] Amazon GameLift Servers Realtime now supports Node.js 24.x runtime on the Amazon Linux 2023 operating system.guardduty: [botocore] Adding new enum value for ScanStatusReasonhealth: [botocore] Updates the lower range for the maxResults request property for DescribeAffectedEntities, DescribeAffectedEntitiesForOrganization, DescribeEvents, and DescribeEventsForOrganization API request properties.meteringmarketplace: [botocore] Customer Identifier parameter deprecation date has been removed. For new implementations, we recommend using the CustomerAWSAccountID. Your current integration will continue to work. When updating your implementation, consider migrating to CustomerAWSAccountID for improved integration.verifiedpermissions: [botocore] Adding documentation to user guide and API documentation for how customers can create new encrypted policy stores by passing in their customer managed key during policy store creation.v1.42.32Compare Source
=======
bedrock-agentcore: [botocore] Supports custom browser extensions for AgentCore Browser and increased message payloads up to 100KB per message in an Event for AgentCore Memoryconfig: [botocore] AWS Config Conformance Packs now support tag-on-create through PutConformancePack API.ec2: [botocore] Added support of multiple EBS cards. New EbsCardIndex parameter enables attaching volumes to specific EBS cards on supported instance types for improved storage performance.quicksight: [botocore] Added documentation and model for sheet layout groups - allows sheet elements to be grouped, Added documentation and the feature enables admins to have granular control over connectors under actions, Updated API documentation for PDF Export in Snapshot Export APIsv1.42.31Compare Source
=======
autoscaling: [botocore] This release adds support for three new filters when describing scaling activities, StartTimeLowerBound, StartTimeUpperBound, and Status.bedrock-runtime: [botocore] Added support for extended prompt caching with one hour TTL.keyspaces: [botocore] Adds support for managing table pre-warming in Amazon Keyspaces (for Apache Cassandra)odb: [botocore] Adds support for associating and disassociating IAM roles with Autonomous VM cluster resources through the AssociateIamRoleToResource and DisassociateIamRoleFromResource APIs. The GetCloudAutonomousVmCluster and ListCloudAutonomousVmClusters API responses now include the iamRoles field.verifiedpermissions: [botocore] Amazon Verified Permissions now supports encryption of resources by a customer managed KMS key. Customers can now create new encrypted policy stores by passing in their customer managed key during policy store creation.workspaces-instances: [botocore] Added billing configuration support for WorkSpaces Instances with monthly and hourly billing modes, including new filtering capabilities for instance type searches.v1.42.30Compare Source
=======
connect: [botocore] Adds support to allow customers to create form with Dispute configurationdatazone: [botocore] This release adds support for numeric filtering and complex free-text searches cases for the Search and SearchListings APIs.glacier: [botocore] Documentation updates for Amazon Glacier's maintenance modelaunch-wizard: [botocore] Added UpdateDeployment, ListDeploymentPatternVersions and GetDeploymentPatternVersion APIs for Launch Wizardresource-explorer-2: [botocore] Added ViewName to View-related responses and ServiceViewName to GetServiceView response.sagemaker: [botocore] Adding security consideration comments for lcc accessing execution role under root accessv1.42.29Compare Source
=======
cleanrooms: [botocore] This release adds support for parameters in PySpark analysis templates.deadline: [botocore] AWS Deadline Cloud now supports tagging Budget resources with ABAC for permissions management and selecting up to 16 filter values in the monitor and Search API.ec2: [botocore] This release includes documentation updates to support up to four Elastic Volume modifications per Amazon EBS volume within a rolling 24-hour period.ecs: [botocore] Adds support for configuring FIPS in AWS GovCloud (US) Regions via a new ECS Capacity Provider field fipsEnabled. When enabled, instances launched by the capacity provider will use a FIPS-140 enabled AMI. Instances will use FIPS-140 compliant cryptographic modules and AWS FIPS endpoints.evs: [botocore] A new GetVersions API has been added to retrieve VCF, ESX versions, and EC2 instances provided by Amazon EVS. The CreateEnvironment API now allows you to select a VCF version and the CreateEnvironmentHost API introduces a optional esxVersion parameter.lakeformation: [botocore] API Changes for GTCForLocation feature. Includes a new API, GetTemporaryDataLocationCredentials and updates to the APIs RegisterResource and UpdateResourceopensearchserverless: [botocore] Collection groups in Amazon OpenSearch Serverless enables to organize multiple collections and enable compute resource sharing across collections with different KMS keys. This shared compute model reduces costs by eliminating the need for separate OpenSearch Compute Units (OCUs) for each KMS key.qconnect: [botocore] Fix inference configuration shapes for the CreateAIPrompt and UpdateAIPrompt APIs, Modify Text Length Limit for SendMessage APIbotocore] Add support for TCP Keep-Alive configuration via BOTOCORE_TCP_KEEPALIVE environment variablev1.42.28Compare Source
=======
ce: [botocore] Cost Categories added support to BillingView data filter expressions through the new costCategories parameter, enabling users to filter billing views by AWS Cost Categories for more granular cost management and allocation.connect: [botocore] Amazon Connect makes it easier to manage contact center operating hours by enabling automated scheduling for recurring events like holidays and maintenance windows. Set up recurring patterns (weekly, monthly, etc.) or link to another hours of operation to inherit overrides.eks: [botocore] Added support for BOTTLEROCKET NVIDIA FIPS AMIs to AMI types in US regions.rds: [botocore] no feature changes. model migrated to Smithyredshift: [botocore] Adds support for enabling extra compute resources for automatic optimization during create and modify operations in Amazon Redshift clusters.redshift-serverless: [botocore] Adds support for enabling extra compute resources for automatic optimization during create and update operations in Amazon Redshift Serverless workgroups.socialmessaging: [botocore] This release clarifies WhatsApp template operations as a resource-authenticated operation via the parent WhatsApp Business Account. It also introduces new parameters for parameter format, CTA URL link tracking, and template body examples, and increases the phone number ID length.v1.42.27Compare Source
=======
bedrock: [botocore] This change will increase TestCase guardContent input size from 1024 to 2028 characters and PolicyBuildDocumentDescription from 2000 to 4000 charactersdatazone: [botocore] Adds support for IAM role subscriptions to Glue table listings via CreateSubscriptionRequest API. Also adds owningIamPrincipalArn filter to List APIs and subscriptionGrantCreationMode parameter to subscription target APIs for controlling grant creation behavior.v1.42.26Compare Source
=======
billing: [botocore] Cost Categories filtering support to BillingView data filter expressions through the new costCategories parameter, enabling users to filter billing views by AWS Cost Categories for more granular cost management and allocation.iot-managed-integrations: [botocore] This release introduces WiFi Simple Setup (WSS) enabling device provisioning via barcode scanning with automated network discovery, authentication, and credential provisioning. Additionally, it introduces 2P Device Capability Rediscovery for updating hub-managed device capabilities post-onboarding.sagemaker: [botocore] Added ultraServerType to the UltraServerInfo structure to support server type identification for SageMaker HyperPodv1.42.25Compare Source
=======
bedrock-agentcore-control: [botocore] Adds optional field "view" to GetMemory API input to give customers control over whether CMK encrypted data such as strategy decryption or override prompts is returned or not.cloudfront: [botocore] Added EntityLimitExceeded exception handling to the following API operations AssociateDistributionWebACL, AssociateDistributionTenantWebACL, UpdateDistributionWithStagingConfigglue: [botocore] Adding MaterializedViews task run APIsmedialive: [botocore] MediaPackage v2 output groups in MediaLive can now accept one additional destination for single pipeline channels and up to two additional destinations for standard channels. MediaPackage v2 destinations now support sending to cross region MediaPackage channels.transcribe: [botocore] Adds waiters to Amazon Transcribe.v1.42.24Compare Source
=======
workspaces: [botocore] Add StateMessage and ProgressPercentage fields to DescribeCustomWorkspaceImageImport API response.v1.42.23Compare Source
=======
ce: [botocore] This release updates existing reservation recommendations API to support deployment model.emr-serverless: [botocore] Added support for enabling disk encryption using customer managed AWS KMS keys to CreateApplication, UpdateApplication and StartJobRun APIs.coveragepy/coveragepy (coverage)
v7.13.2Compare Source
Fix: when Python is installed via symlinks, for example with Homebrew, the
standard library files could be incorrectly included in coverage reports.
This is now fixed, closing
issue 2115_.Fix: if a data file is created with no read permissions, the combine step
would fail completely. Now a warning is issued and the file is skipped.
Closes
issue 2117_... _issue 2115: #2115
.. _issue 2117: #2117
.. _changes_7-13-1:
pyca/cryptography (cryptography)
v46.0.4Compare Source
python-jsonschema/jsonschema (jsonschema)
v4.26.0Compare Source
=======
urllib.request(#1416).gtsystem/lightkube (lightkube)
v0.19.1Compare Source
python-poetry/poetry-core (poetry-core)
v2.3.0Compare Source
Added
sizeandupload_timetoLinkandPackage.files(#905).Changed
Package.files(#904).#895).
Fixed
python_full_versionmarkers with pre-release versions were parsed incorrectly (#893).astral-sh/ruff (ruff)
v0.14.14Compare Source
Released on 2026-01-22.
Preview features
airflow] Second positional argument toAsset/Datasetshould not be a dictionary (AIR303) (#22453)ruff] Detect duplicate entries in__all__(RUF068) (#22114)Bug fixes
pyupgrade] Allow shadowing non-builtin bindings (UP029) (#22749)pyupgrade] ApplyUP045to string arguments oftyping.cast(#22320)flake8-pie] Detect duplicated declared class fields inPIE794(#22717)Rule changes
flake8-pyi] Fix inconsistent handling of forward references for__new__,__enter__,__aenter__inPYI034(#22798)flake8-pytest-style] Supportcheckparameter inPT011(#22725)ruff] Add exception forctypes.Structure._fields_(RUF012) (#22559)flake8-bugbear]B009,B010,B013,B014,B033flake8-simplify]SIM910,SIM911pyupgrade]UP007,UP039,UP041,UP045refurb]FURB105,FURB116,FURB136,FURB140,FURB145,FURB154,FURB157,FURB164,FURB181,FURB188ruff]RUF019,RUF020Documentation
--exit-non-zero-on-formatto formatter exit codes section (#22761)FastAPI] Document fix safety forFAST001(#22655)flake8-async] Tweak explanation to focus on latency/efficiency tradeoff (ASYNC110) (#22715)pandas-vet] Make example error out-of-the-box (PD002) (#22561)refurb] Make the example work out of box (FURB101) (#22770)refurb] Make the example work out of box (FURB103) (#22769)Contributors
v0.14.13Released on 2026-01-15.
This is a follow-up release to 0.14.12. Because of an issue publishing the WASM packages, there is no GitHub release or Git tag for 0.14.12, although the package was published to PyPI. The contents of the 0.14.13 release are identical to 0.14.12.
v0.14.12Released on 2026-01-15.
Preview features
flake8-blind-except] Allow more logging methods (BLE001) (#22057)ruff] Respectlint.pydocstyle.property-decoratorsinRUF066(#22515)Bug fixes
--show-settings(#22478)fmt: skipfor multiple statements on the same logical line (#22119)Rule changes
pydocstyle] Update Rust crate imperative to v1.0.7 (D401) (#22519)isort] Insert imports in alphabetical order (I002) (#22493)Documentation
flake8-pytest-style] Addcheckparameter example toPT017docs (#22546)ruff] Make example error out-of-the-box (RUF103) (#22558)ruff] documentRUF100trailing comment fix behavior (#22479)Other changes
Contributors
v0.14.11Compare Source
Released on 2026-01-08.
Preview features
airflow] Passing positional argument intoairflow.lineage.hook.HookLineageCollector.create_assetis not allowed (AIR303) (#22046)refurb] MarkFURB192fix as always unsafe (#22210)ruff] Addnon-empty-init-module(RUF067) (#22143)Bug fixes
flake8-unused-arguments] Mark**kwargsinTypeVaras used (ARG001) (#22214)Rule changes
help:subdiagnostics for several Ruff rules that can sometimes appear to disagree withty(#22331)pylint] DemotePLW1510fix to display-only (#22318)pylint] Ignore identical members (PLR1714) (#22220)pylint] Improve diagnostic range forPLC0206(#22312)ruff] Improve fix title forRUF102invalid rule code (#22100)flake8-simplify]: Avoid unnecessary builtins import forSIM105(#22358)Configuration
target-versionvalue in preview (#22419)required-versionbefore parsing rules (#22410)srcdirectories when resolving graphs (#22451)Documentation
T201suggestion to not use root logger to satisfyLOG015(#22059)iterexample in unsafe fixes doc (#22118)flake8_print] better suggestion forbasicConfiginT201docs (#22101)pylint] Restore the fix safety docs forPLW0133(#22211)Contributors
Configuration
📅 Schedule: Branch creation - Between 01:00 AM and 05:59 AM, only on Tuesday ( * 1-5 * * 2 ) in timezone Etc/UTC, Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.