chore(deps): bump the boto group across 1 directory with 5 updates#8930
chore(deps): bump the boto group across 1 directory with 5 updates#8930dependabot[bot] wants to merge 1 commit intodevelopfrom
Conversation
Bumps the boto group with 5 updates in the / directory: | Package | From | To | | --- | --- | --- | | [boto3-stubs](https://github.com/youtype/mypy_boto3_builder) | `1.42.83` | `1.42.91` | | [mypy-boto3-ecr](https://github.com/youtype/mypy_boto3_builder) | `1.42.67` | `1.42.86` | | [mypy-boto3-lambda](https://github.com/youtype/mypy_boto3_builder) | `1.42.37` | `1.42.85` | | [mypy-boto3-s3](https://github.com/youtype/mypy_boto3_builder) | `1.42.80` | `1.42.85` | | [mypy-boto3-sts](https://github.com/youtype/mypy_boto3_builder) | `1.42.3` | `1.42.91` | Updates `boto3-stubs` from 1.42.83 to 1.42.91 - [Release notes](https://github.com/youtype/mypy_boto3_builder/releases) - [Commits](https://github.com/youtype/mypy_boto3_builder/commits) Updates `mypy-boto3-ecr` from 1.42.67 to 1.42.86 - [Release notes](https://github.com/youtype/mypy_boto3_builder/releases) - [Commits](https://github.com/youtype/mypy_boto3_builder/commits) Updates `mypy-boto3-lambda` from 1.42.37 to 1.42.85 - [Release notes](https://github.com/youtype/mypy_boto3_builder/releases) - [Commits](https://github.com/youtype/mypy_boto3_builder/commits) Updates `mypy-boto3-s3` from 1.42.80 to 1.42.85 - [Release notes](https://github.com/youtype/mypy_boto3_builder/releases) - [Commits](https://github.com/youtype/mypy_boto3_builder/commits) Updates `mypy-boto3-sts` from 1.42.3 to 1.42.91 - [Release notes](https://github.com/youtype/mypy_boto3_builder/releases) - [Commits](https://github.com/youtype/mypy_boto3_builder/commits) --- updated-dependencies: - dependency-name: boto3-stubs dependency-version: 1.42.91 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: boto - dependency-name: mypy-boto3-ecr dependency-version: 1.42.86 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: boto - dependency-name: mypy-boto3-lambda dependency-version: 1.42.85 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: boto - dependency-name: mypy-boto3-s3 dependency-version: 1.42.85 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: boto - dependency-name: mypy-boto3-sts dependency-version: 1.42.91 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: boto ... Signed-off-by: dependabot[bot] <support@github.com>
| boto3-stubs[apigateway, cloudformation, ecr, iam, kinesis, lambda, s3, schemas, secretsmanager, signer, sqs, stepfunctions, sts, xray]==1.42.83 \ | ||
| --hash=sha256:06185ca5f11a1edc880286f5f33779a2b08be356bf270bf1ec128d0819782a20 \ | ||
| --hash=sha256:1ecbd88f4ae35764b9ea3579ca1e851b67ea0a73a442cb406de277fc1478daeb | ||
| boto3-stubs[apigateway, cloudformation, ecr, iam, kinesis, lambda, s3, schemas, secretsmanager, signer, sqs, stepfunctions, sts, xray]==1.42.91 \ |
There was a problem hiding this comment.
[GENERAL] Version skew between boto3 runtime and boto3-stubs type stubs is widening.
This PR bumps boto3-stubs to 1.42.91, but the runtime boto3[crt] remains pinned at 1.42.70 (line 77, all three platform files). That's a 21-version gap. Similarly, botocore[crt]==1.42.85 and botocore-stubs==1.42.41 are also mismatched and not updated in this PR.
The sub-stubs are also ahead of the runtime:
mypy-boto3-ecr==1.42.86vsboto3==1.42.70mypy-boto3-lambda==1.42.85vsboto3==1.42.70mypy-boto3-s3==1.42.85vsboto3==1.42.70mypy-boto3-sts==1.42.91vsboto3==1.42.70
When stubs are significantly ahead of the runtime, type checking may pass for API signatures, parameters, or return types that don't actually exist in the installed boto3 version. This gives false confidence — code that type-checks cleanly could fail at runtime with AttributeError or unexpected behavior.
Consider bumping boto3[crt] and botocore[crt] in the same PR to keep the runtime and stubs versions aligned, or document why the skew is intentional.
Bumps the boto group with 5 updates in the / directory:
1.42.831.42.911.42.671.42.861.42.371.42.851.42.801.42.851.42.31.42.91Updates
boto3-stubsfrom 1.42.83 to 1.42.91Release notes
Sourced from boto3-stubs's releases.
Commits
Updates
mypy-boto3-ecrfrom 1.42.67 to 1.42.86Release notes
Sourced from mypy-boto3-ecr's releases.
Commits
Updates
mypy-boto3-lambdafrom 1.42.37 to 1.42.85Release notes
Sourced from mypy-boto3-lambda's releases.
Commits
Updates
mypy-boto3-s3from 1.42.80 to 1.42.85Release notes
Sourced from mypy-boto3-s3's releases.
Commits
Updates
mypy-boto3-stsfrom 1.42.3 to 1.42.91Release notes
Sourced from mypy-boto3-sts's releases.
Commits
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions