Bump the pip-deps group with 7 updates by dependabot[bot] · Pull Request #2782 · ASFHyP3/hyp3

dependabot · 2025-05-28T18:20:20Z

Bumps the pip-deps group with 7 updates:

Package	From	To
jsonschema	`4.23.0`	`4.24.0`
boto3	`1.38.19`	`1.38.24`
moto[dynamodb]	`5.1.4`	`5.1.5`
ruff	`0.11.10`	`0.11.11`
setuptools	`80.7.1`	`80.9.0`
cfn-lint	`1.35.1`	`1.35.3`
cryptography	`45.0.2`	`45.0.3`

Updates jsonschema from 4.23.0 to 4.24.0

Release notes

Sourced from jsonschema's releases.

v4.24.0

What's Changed

Fix calculation of evaluated properties by @V02460 in python-jsonschema/jsonschema#1351

Support for Python 3.8 has been dropped, as it is end-of-life.

New Contributors

@bkueng made their first contribution in python-jsonschema/jsonschema#1326

@V02460 made their first contribution in python-jsonschema/jsonschema#1351

Full Changelog: python-jsonschema/jsonschema@v4.23.0...v4.24.0

Changelog

Sourced from jsonschema's changelog.

v4.24.0

Fix improper handling of unevaluatedProperties in the presence of additionalProperties (#1351).

Support for Python 3.8 has been dropped, as it is end-of-life.

Commits

3e23ee5 Add the bugfix to the changelog.
8917e85 Stop running CIFuzz.
737e5ed Rely on ruff in pre-commit.
57e5e03 Test via PyPy 3.11.
d6c2ad7 Add the zizmor setup here as well.
af9a857 Drop a dead pyproject section.
c64ef84 This is less true than it once was...
9ff926f Merge branch 'additional-evaluated'
8290667 We still need to ditch pip-licenses...
6d973b5 Update pre-commit hooks.
Additional commits viewable in compare view

Updates boto3 from 1.38.19 to 1.38.24

Commits

fd39c84 Merge branch 'release-1.38.24'
10fe8d5 Bumping version to 1.38.24
d584e98 Add changelog entries from botocore
8c036e4 Merge branch 'release-1.38.23'
5ab9ecf Merge branch 'release-1.38.23' into develop
c1e90fc Bumping version to 1.38.23
7f84e4d Add changelog entries from botocore
373e03b Merge branch 'release-1.38.22'
3415de4 Merge branch 'release-1.38.22' into develop
b19759d Bumping version to 1.38.22
Additional commits viewable in compare view

Updates moto[dynamodb] from 5.1.4 to 5.1.5

Changelog

Sourced from moto[dynamodb]'s changelog.

5.1.5

Docker Digest for 5.1.5: sha256:b9dbd12d211c88e5799d023db15ec809bca4cc6df93a8aa78f26ccbfb073d18a

New Services:
    * Connect Campaign:
        * create_campaign()
        * delete_campaign()
        * describe_campaign()
        * get_connect_instance_config()
        * start_instance_onboarding_job()
* CloudDirectory:
    * create_directory()
    * delete_directory()
    * get_directory()
    * list_directories()
    * list_tags_for_resource()
    * tag_resource()
    * untag_resource()


Network Firewall:

create_firewall()
describe_firewall()
describe_logging_configuration()
list_firewalls()
update_logging_configuration()



ServiceCatalog-AppRegistry:

associate_resource()
create_application()
list_applications()
list_associated_resources()





New Methods:
* ACM PCA:
* list_certificate_authorities()
* CloudWatch:
    * delete_insight_rules()
    * describe_insight_rules()
    * disable_insight_rules()
    * enable_insight_rules()
    * put_insight_rule()

CodeDeploy:

list_tags_for_resource()
tag_resource()
untag_resource()

... (truncated)

Commits

b7c66df Pre-Release: Up Version Number
5b0a4ff Prep release 5.1.5 (#8924)
6001586 [EC2] Add modify_instance_metadata_options support (#8922)
865b9a7 SQS: Return MessageGroupId (and similar attributes) on receive_messages (#8902)
f04c3a6 EventBridge: Update describe_event_bus schema (#8893)
3ef1ae7 [Connect Campaign] - Config, Job, Campaign (#8905)
2f6807f Add tagging support for CodeDeploy resources (#8878)
a981fe0 ResourceGroups: support retrieval by the name or the ARN of the resource grou...
ca847fa [APIGateway] Add ApiKeyNotFoundException for update/delete_api_key (#8918)
c04116b EC2: Fix Flaky Test (#8914)
Additional commits viewable in compare view

Updates ruff from 0.11.10 to 0.11.11

Release notes

Sourced from ruff's releases.

0.11.11

Release Notes

Preview features

[airflow] Add autofixes for AIR302 and AIR312 (#17942)

[airflow] Move rules from AIR312 to AIR302 (#17940)

[airflow] Update AIR301 and AIR311 with the latest Airflow implementations (#17985)

[flake8-simplify] Enable fix in preview mode (SIM117) (#18208)

Bug fixes

Fix inconsistent formatting of match-case on [] and _ (#18147)

[pylint] Fix PLW1514 not recognizing the encoding positional argument of codecs.open (#18109)

CLI

Add full option name in formatter warning (#18217)

Documentation

Fix rendering of admonition in docs (#18163)

[flake8-print] Improve print/pprint docs for T201 and T203 (#18130)

[flake8-simplify] Add fix safety section (SIM110,SIM210) (#18114,#18100)

[pylint] Fix docs example that produced different output (PLW0603) (#18216)

Contributors

@AlexWaygood

@BradonZhang

@BurntSushi

@CodeMan62

@InSyncWithFoo

@LaBatata101

@Lee-W

@Mathemmagician

@MatthewMckee4

@MichaReiser

@TomerBin

@VascoSch92

@adamaaronson

@brainwane

@brandtbucher

@carljm

@dcreager

@dhruvmanila

@dragon-dxw

@felixscherz

@kiran-4444

@maxmynter

@ntBre

... (truncated)

Changelog

Sourced from ruff's changelog.

0.11.11

Preview features

[airflow] Add autofixes for AIR302 and AIR312 (#17942)

[airflow] Move rules from AIR312 to AIR302 (#17940)

[airflow] Update AIR301 and AIR311 with the latest Airflow implementations (#17985)

[flake8-simplify] Enable fix in preview mode (SIM117) (#18208)

Bug fixes

Fix inconsistent formatting of match-case on [] and _ (#18147)

[pylint] Fix PLW1514 not recognizing the encoding positional argument of codecs.open (#18109)

CLI

Add full option name in formatter warning (#18217)

Documentation

Fix rendering of admonition in docs (#18163)

[flake8-print] Improve print/pprint docs for T201 and T203 (#18130)

[flake8-simplify] Add fix safety section (SIM110,SIM210) (#18114,#18100)

[pylint] Fix docs example that produced different output (PLW0603) (#18216)

Commits

0397682 Bump 0.11.11 (#18259)
bcefa45 [ty] Rename call-possibly-unbound-method to `possibly-unbound-implicit-call...
91b7a57 [ty] Implement Python's floor division semantics for Literal ints (#18249)
98da200 [ty] Fix server panic when calling system_mut (#18252)
029085f [ty] Clarify ty check output default in documentation. (#18246)
6df10c6 [pylint] Fix docs example that produced different output (PLW0603) (#18216)
bdf4884 Preserve tuple parentheses in case patterns (#18147)
01eeb2f [ty] Support frozen dataclasses (#17974)
cb04343 [ty] Split invalid-base error code into two error codes (#18245)
02394b8 [ty] Improve invalid-type-form diagnostic where a module-literal type is us...
Additional commits viewable in compare view

Updates setuptools from 80.7.1 to 80.9.0

Changelog

Sourced from setuptools's changelog.

v80.9.0

Features

Set a deadline for the removal of pkg_resources later this year (December). (#3085)

Removed reliance on pkg_resources in test_wheel. (#3085)

v80.8.0

Features

Replaced more references to pkg_resources with importlib equivalents in wheel odule. (#3085)

Restore explicit LICENSE file. (#5001)

Removed no longer used build dependency on coherent.licensed. (#5003)

Commits

9c4d383 Bump version: 80.8.0 → 80.9.0
05cb3c8 Merge pull request #5014 from pypa/debt/pkg_resources-deadline
3b0bf5b Adjust ignore
9c28cdf Set a deadline for the removal of pkg_resources later this year (December).
a3bfef9 Merge pull request #5013 from DimitriPapadopoulos/ISC
64bf9d0 Enforce ruff/flake8-implicit-str-concat rules (ISC)
3250c25 Fix broken link in docs (#4947)
5ccf50e Merge pull request #5006 from pypa/feature/remove-more-pkg_resources
134e587 Suppress nitpicky typecheck in pyright.
0bf2663 Add news fragment.
Additional commits viewable in compare view

Updates cfn-lint from 1.35.1 to 1.35.3

Release notes

Sourced from cfn-lint's releases.

Release v1.35.3

What's Changed

Undo change 4138 by @kddejong in aws-cloudformation/cfn-lint#4149

Full Changelog: aws-cloudformation/cfn-lint@v1.35.2...v1.35.3

Release v1.35.2

What's Changed

Stdin overrides .cfnlintrc when determining templates by @kddejong in aws-cloudformation/cfn-lint#4138

Add in more custom schema information to the docs by @kddejong in aws-cloudformation/cfn-lint#4141

Fix outdated GitHub source URLs by @leinardi in aws-cloudformation/cfn-lint#4143

Update CloudFormation schemas to 2025-05-21 by @github-actions in aws-cloudformation/cfn-lint#4142

New Contributors

@leinardi made their first contribution in aws-cloudformation/cfn-lint#4143

Full Changelog: aws-cloudformation/cfn-lint@v1.35.1...v1.35.2

Changelog

Sourced from cfn-lint's changelog.

v1.35.3

What's Changed

Undo change 4138 by @kddejong in aws-cloudformation/cfn-lint#4149

Full Changelog: aws-cloudformation/cfn-lint@v1.35.2...v1.35.3

v1.35.2

What's Changed

Stdin overrides .cfnlintrc when determining templates by @kddejong in aws-cloudformation/cfn-lint#4138

Add in more custom schema information to the docs by @kddejong in aws-cloudformation/cfn-lint#4141

Fix outdated GitHub source URLs by @leinardi in aws-cloudformation/cfn-lint#4143

Update CloudFormation schemas to 2025-05-21 by @github-actions in aws-cloudformation/cfn-lint#4142

New Contributors

@leinardi made their first contribution in aws-cloudformation/cfn-lint#4143

Full Changelog: aws-cloudformation/cfn-lint@v1.35.1...v1.35.2

Commits

a3e659f Release v1.35.3 (#4150)
2a3da05 undo change 4138 (#4149)
8e57c91 Release v1.35.2 (#4146)
c403f19 Update CloudFormation schemas to 2025-05-21 (#4142)
ae80a38 Fix outdated GitHub source URLs (#4143)
96d6ff2 Release v1.35.2 (#4145)
41a97f4 Update CloudFormation schemas to 2025-05-14 (#4140)
dd504e8 Add in more custom schema information to the docs (#4141)
a23bb00 Stdin overrides .cfnlintrc when determining templates (#4138)
See full diff in compare view

Updates cryptography from 45.0.2 to 45.0.3

Changelog

Sourced from cryptography's changelog.

45.0.3 - 2025-05-25

* Fixed decrypting PKCS#8 files encrypted with long salts (this impacts keys encrypted by Bouncy Castle). * Fixed decrypting PKCS#8 files encrypted with DES-CBC-MD5. While wildly insecure, this remains prevalent.

.. _v45-0-2:

Commits

5038495 backports for 45.0.3 release (#12979)
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the pip-deps group with 7 updates: | Package | From | To | | --- | --- | --- | | [jsonschema](https://github.com/python-jsonschema/jsonschema) | `4.23.0` | `4.24.0` | | [boto3](https://github.com/boto/boto3) | `1.38.19` | `1.38.24` | | [moto[dynamodb]](https://github.com/getmoto/moto) | `5.1.4` | `5.1.5` | | [ruff](https://github.com/astral-sh/ruff) | `0.11.10` | `0.11.11` | | [setuptools](https://github.com/pypa/setuptools) | `80.7.1` | `80.9.0` | | [cfn-lint](https://github.com/aws-cloudformation/cfn-lint) | `1.35.1` | `1.35.3` | | [cryptography](https://github.com/pyca/cryptography) | `45.0.2` | `45.0.3` | Updates `jsonschema` from 4.23.0 to 4.24.0 - [Release notes](https://github.com/python-jsonschema/jsonschema/releases) - [Changelog](https://github.com/python-jsonschema/jsonschema/blob/main/CHANGELOG.rst) - [Commits](python-jsonschema/jsonschema@v4.23.0...v4.24.0) Updates `boto3` from 1.38.19 to 1.38.24 - [Release notes](https://github.com/boto/boto3/releases) - [Commits](boto/boto3@1.38.19...1.38.24) Updates `moto[dynamodb]` from 5.1.4 to 5.1.5 - [Release notes](https://github.com/getmoto/moto/releases) - [Changelog](https://github.com/getmoto/moto/blob/master/CHANGELOG.md) - [Commits](getmoto/moto@5.1.4...5.1.5) Updates `ruff` from 0.11.10 to 0.11.11 - [Release notes](https://github.com/astral-sh/ruff/releases) - [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md) - [Commits](astral-sh/ruff@0.11.10...0.11.11) Updates `setuptools` from 80.7.1 to 80.9.0 - [Release notes](https://github.com/pypa/setuptools/releases) - [Changelog](https://github.com/pypa/setuptools/blob/main/NEWS.rst) - [Commits](pypa/setuptools@v80.7.1...v80.9.0) Updates `cfn-lint` from 1.35.1 to 1.35.3 - [Release notes](https://github.com/aws-cloudformation/cfn-lint/releases) - [Changelog](https://github.com/aws-cloudformation/cfn-lint/blob/main/CHANGELOG.md) - [Commits](aws-cloudformation/cfn-lint@v1.35.1...v1.35.3) Updates `cryptography` from 45.0.2 to 45.0.3 - [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst) - [Commits](pyca/cryptography@45.0.2...45.0.3) --- updated-dependencies: - dependency-name: jsonschema dependency-version: 4.24.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: pip-deps - dependency-name: boto3 dependency-version: 1.38.24 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: pip-deps - dependency-name: moto[dynamodb] dependency-version: 5.1.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: pip-deps - dependency-name: ruff dependency-version: 0.11.11 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: pip-deps - dependency-name: setuptools dependency-version: 80.9.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: pip-deps - dependency-name: cfn-lint dependency-version: 1.35.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: pip-deps - dependency-name: cryptography dependency-version: 45.0.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: pip-deps ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added bumpless Changes to documentation, CI/CD pipelines, etc that don't affect the project's version minor Bump the minor version number of this project labels May 28, 2025

dependabot Bot requested review from a team as code owners May 28, 2025 18:20

dependabot Bot added minor Bump the minor version number of this project bumpless Changes to documentation, CI/CD pipelines, etc that don't affect the project's version labels May 28, 2025

This was referenced May 28, 2025

Bump ruff from 0.11.10 to 0.11.11 #2775

Closed

Bump jsonschema from 4.23.0 to 4.24.0 #2776

Closed

Bump moto[dynamodb] from 5.1.4 to 5.1.5 #2777

Closed

Bump setuptools from 80.7.1 to 80.8.0 #2778

Closed

Bump cfn-lint from 1.35.1 to 1.35.3 #2779

Closed

jtherrmann approved these changes May 28, 2025

View reviewed changes

jtherrmann merged commit 5be8a29 into develop May 28, 2025
17 checks passed

jtherrmann deleted the dependabot/pip/pip-deps-797ff3aeea branch May 28, 2025 18:28

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump the pip-deps group with 7 updates#2782

Bump the pip-deps group with 7 updates#2782
jtherrmann merged 1 commit intodevelopfrom
dependabot/pip/pip-deps-797ff3aeea

dependabot Bot commented on behalf of github May 28, 2025

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github May 28, 2025

v4.24.0

What's Changed

New Contributors

v4.24.0

5.1.5

0.11.11

Release Notes

Preview features

Bug fixes

CLI

Documentation

Contributors

0.11.11

Preview features

Bug fixes

CLI

Documentation

v80.9.0

Features

v80.8.0

Features

Release v1.35.3

What's Changed

Release v1.35.2

What's Changed

New Contributors

v1.35.3

What's Changed

v1.35.2

What's Changed

New Contributors

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant