Bump the pip group across 1 directory with 5 updates #360

dependabot · 2024-05-26T09:07:25Z

Bumps the pip group with 5 updates in the / directory:

Package	From	To
boto3	`1.34.98`	`1.34.113`
botocore	`1.34.98`	`1.34.113`
fsspec	`2024.3.1`	`2024.5.0`
requests	`2.31.0`	`2.32.2`
s3fs	`0.4.2`	`2024.5.0`

Updates boto3 from 1.34.98 to 1.34.113

Changelog

Sourced from boto3's changelog.

1.34.113

api-change:dynamodb: [botocore] Documentation only updates for DynamoDB.

api-change:iotfleetwise: [botocore] AWS IoT FleetWise now supports listing vehicles with attributes filter, ListVehicles API is updated to support additional attributes filter.

api-change:managedblockchain: [botocore] This is a minor documentation update to address the impact of the shut down of the Goerli and Polygon networks.

1.34.112

api-change:emr-serverless: [botocore] This release adds the capability to run interactive workloads using Apache Livy Endpoint.

api-change:opsworks: [botocore] Documentation-only update for OpsWorks Stacks.

1.34.111

api-change:chatbot: [botocore] This change adds support for tagging Chatbot configurations.

api-change:cloudformation: [botocore] Added DeletionMode FORCE_DELETE_STACK for deleting a stack that is stuck in DELETE_FAILED state due to resource deletion failure.

api-change:kms: [botocore] This release includes feature to import customer's asymmetric (RSA, ECC and SM2) and HMAC keys into KMS in China.

api-change:opensearch: [botocore] This release adds support for enabling or disabling a data source configured as part of Zero-ETL integration with Amazon S3, by setting its status.

api-change:wafv2: [botocore] You can now use Security Lake to collect web ACL traffic data.

1.34.110

api-change:cloudfront: [botocore] Model update; no change to SDK functionality.

api-change:glue: [botocore] Add Maintenance window to CreateJob and UpdateJob APIs and JobRun response. Add a new Job Run State for EXPIRED.

api-change:lightsail: [botocore] This release adds support for Amazon Lightsail instances to switch between dual-stack or IPv4 only and IPv6-only public IP address types.

api-change:mailmanager: [botocore] This release includes a new Amazon SES feature called Mail Manager, which is a set of email gateway capabilities designed to help customers strengthen their organization's email infrastructure, simplify email workflow management, and streamline email compliance control.

api-change:pi: [botocore] Performance Insights added a new input parameter called AuthorizedActions to support the fine-grained access feature. Performance Insights also restricted the acceptable input characters.

api-change:rds: [botocore] Updates Amazon RDS documentation for Db2 license through AWS Marketplace.

api-change:storagegateway: [botocore] Added new SMBSecurityStrategy enum named MandatoryEncryptionNoAes128, new mode enforces encryption and disables AES 128-bit algorithums.

1.34.109

api-change:bedrock-agent: [botocore] This release adds support for using Guardrails with Bedrock Agents.

api-change:bedrock-agent-runtime: [botocore] This release adds support for using Guardrails with Bedrock Agents.

api-change:controltower: [botocore] Added ListControlOperations API and filtering support for ListEnabledControls API. Updates also includes added metadata for enabled controls and control operations.

api-change:osis: [botocore] Add support for creating an OpenSearch Ingestion pipeline that is attached to a provided VPC. Add information about the destinations of an OpenSearch Ingestion pipeline to the GetPipeline and ListPipelines APIs.

api-change:rds: [botocore] This release adds support for EngineLifecycleSupport on DBInstances, DBClusters, and GlobalClusters.

api-change:secretsmanager: [botocore] add v2 smoke tests and smithy smokeTests trait for SDK testing

1.34.108

... (truncated)

Commits

f5e102c Merge branch 'release-1.34.113'
ded2a5c Bumping version to 1.34.113
d1e9df7 Add changelog entries from botocore
bbd2fec Merge pull request #4144 from boto/3.13
b4997a5 Start testing on 3.13 beta build
b2f3c05 Merge branch 'release-1.34.112'
f6b33f9 Merge branch 'release-1.34.112' into develop
12cc956 Bumping version to 1.34.112
f1cb26a Add changelog entries from botocore
ddf59c2 Merge branch 'release-1.34.111' into develop
Additional commits viewable in compare view

Updates botocore from 1.34.98 to 1.34.113

Changelog

Sourced from botocore's changelog.

1.34.113

api-change:dynamodb: Documentation only updates for DynamoDB.

api-change:iotfleetwise: AWS IoT FleetWise now supports listing vehicles with attributes filter, ListVehicles API is updated to support additional attributes filter.

api-change:managedblockchain: This is a minor documentation update to address the impact of the shut down of the Goerli and Polygon networks.

1.34.112

api-change:emr-serverless: This release adds the capability to run interactive workloads using Apache Livy Endpoint.

api-change:opsworks: Documentation-only update for OpsWorks Stacks.

1.34.111

api-change:chatbot: This change adds support for tagging Chatbot configurations.

api-change:cloudformation: Added DeletionMode FORCE_DELETE_STACK for deleting a stack that is stuck in DELETE_FAILED state due to resource deletion failure.

api-change:kms: This release includes feature to import customer's asymmetric (RSA, ECC and SM2) and HMAC keys into KMS in China.

api-change:opensearch: This release adds support for enabling or disabling a data source configured as part of Zero-ETL integration with Amazon S3, by setting its status.

api-change:wafv2: You can now use Security Lake to collect web ACL traffic data.

1.34.110

api-change:cloudfront: Model update; no change to SDK functionality.

api-change:glue: Add Maintenance window to CreateJob and UpdateJob APIs and JobRun response. Add a new Job Run State for EXPIRED.

api-change:lightsail: This release adds support for Amazon Lightsail instances to switch between dual-stack or IPv4 only and IPv6-only public IP address types.

api-change:mailmanager: This release includes a new Amazon SES feature called Mail Manager, which is a set of email gateway capabilities designed to help customers strengthen their organization's email infrastructure, simplify email workflow management, and streamline email compliance control.

api-change:pi: Performance Insights added a new input parameter called AuthorizedActions to support the fine-grained access feature. Performance Insights also restricted the acceptable input characters.

api-change:rds: Updates Amazon RDS documentation for Db2 license through AWS Marketplace.

api-change:storagegateway: Added new SMBSecurityStrategy enum named MandatoryEncryptionNoAes128, new mode enforces encryption and disables AES 128-bit algorithums.

1.34.109

api-change:bedrock-agent: This release adds support for using Guardrails with Bedrock Agents.

api-change:bedrock-agent-runtime: This release adds support for using Guardrails with Bedrock Agents.

api-change:controltower: Added ListControlOperations API and filtering support for ListEnabledControls API. Updates also includes added metadata for enabled controls and control operations.

api-change:osis: Add support for creating an OpenSearch Ingestion pipeline that is attached to a provided VPC. Add information about the destinations of an OpenSearch Ingestion pipeline to the GetPipeline and ListPipelines APIs.

api-change:rds: This release adds support for EngineLifecycleSupport on DBInstances, DBClusters, and GlobalClusters.

api-change:secretsmanager: add v2 smoke tests and smithy smokeTests trait for SDK testing

1.34.108

... (truncated)

Commits

d3e7607 Merge branch 'release-1.34.113'
0b92c88 Bumping version to 1.34.113
ad1ef71 Update endpoints model
5746767 Update to latest models
23e186f Merge pull request #3189 from boto/revert-3187-a4b
9180f2a Merge pull request #3188 from boto/revert-3186-honeycode
0995d66 Revert "Remove alexaforbusiness client following the service deprecation (#31...
e406696 Revert "Remove honeycode client following the service deprecation (#3186)"
864f431 Remove alexaforbusiness client following the service deprecation (#3187)
df5d06e Remove honeycode client following the service deprecation (#3186)
Additional commits viewable in compare view

Updates fsspec from 2024.3.1 to 2024.5.0

Commits

0bb3f26 changelog (#1601)
1efaca9 Fix typo found by codespell (#1599)
da77548 LocalFileSystem restore _strip_protocol signature (#1567)
bc40f36 Apply ruff/flake8-implicit-str-concat rule ISC001 (#1598)
ecf7f86 Fix bug in rsync's delete_missing (#1596)
8acde84 fsspec.implementations.smb: try harder to ensure session is registered (#1597)
df65747 Fix equality for AbstractBufferedFile != b'' (#1594)
05e8858 Remove mv_file(): not in the specs, while mv() is (#1585)
69f4fe8 Stringify url in url_to_fs (#1591)
b532078 added type guards for MemoryFileSystem and name property to MemoryFile class ...
Additional commits viewable in compare view

Updates requests from 2.31.0 to 2.32.2

Release notes

Sourced from requests's releases.

v2.32.2

2.32.2 (2024-05-21)

Deprecations

To provide a more stable migration for custom HTTPAdapters impacted by the CVE changes in 2.32.0, we've renamed _get_connection to a new public API, get_connection_with_tls_context. Existing custom HTTPAdapters will need to migrate their code to use this new API. get_connection is considered deprecated in all versions of Requests>=2.32.0.

A minimal (2-line) example has been provided in the linked PR to ease migration, but we strongly urge users to evaluate if their custom adapter is subject to the same issue described in CVE-2024-35195. (#6710)

v2.32.1

2.32.1 (2024-05-20)

Bugfixes

Add missing test certs to the sdist distributed on PyPI.

v2.32.0

2.32.0 (2024-05-20)

🐍 PYCON US 2024 EDITION 🐍

Security

Fixed an issue where setting verify=False on the first request from a Session will cause subsequent requests to the same origin to also ignore cert verification, regardless of the value of verify. (GHSA-9wx4-h78v-vm56)

Improvements

verify=True now reuses a global SSLContext which should improve request time variance between first and subsequent requests. It should also minimize certificate load time on Windows systems when using a Python version built with OpenSSL 3.x. (#6667)

Requests now supports optional use of character detection (chardet or charset_normalizer) when repackaged or vendored. This enables pip and other projects to minimize their vendoring surface area. The Response.text() and apparent_encoding APIs will default to utf-8 if neither library is present. (#6702)

Bugfixes

Fixed bug in length detection where emoji length was incorrectly calculated in the request content-length. (#6589)

Fixed deserialization bug in JSONDecodeError. (#6629)

Fixed bug where an extra leading / (path separator) could lead urllib3 to unnecessarily reparse the request URI. (#6644)

... (truncated)

Changelog

Sourced from requests's changelog.

2.32.2 (2024-05-21)

Deprecations

To provide a more stable migration for custom HTTPAdapters impacted by the CVE changes in 2.32.0, we've renamed _get_connection to a new public API, get_connection_with_tls_context. Existing custom HTTPAdapters will need to migrate their code to use this new API. get_connection is considered deprecated in all versions of Requests>=2.32.0.

A minimal (2-line) example has been provided in the linked PR to ease migration, but we strongly urge users to evaluate if their custom adapter is subject to the same issue described in CVE-2024-35195. (#6710)

2.32.1 (2024-05-20)

Bugfixes

Add missing test certs to the sdist distributed on PyPI.

2.32.0 (2024-05-20)

Security

Fixed an issue where setting verify=False on the first request from a Session will cause subsequent requests to the same origin to also ignore cert verification, regardless of the value of verify. (GHSA-9wx4-h78v-vm56)

Improvements

verify=True now reuses a global SSLContext which should improve request time variance between first and subsequent requests. It should also minimize certificate load time on Windows systems when using a Python version built with OpenSSL 3.x. (#6667)

Requests now supports optional use of character detection (chardet or charset_normalizer) when repackaged or vendored. This enables pip and other projects to minimize their vendoring surface area. The Response.text() and apparent_encoding APIs will default to utf-8 if neither library is present. (#6702)

Bugfixes

Fixed bug in length detection where emoji length was incorrectly calculated in the request content-length. (#6589)

Fixed deserialization bug in JSONDecodeError. (#6629)

Fixed bug where an extra leading / (path separator) could lead urllib3 to unnecessarily reparse the request URI. (#6644)

Deprecations

... (truncated)

Commits

88dce9d v2.32.2
c98e4d1 Merge pull request #6710 from nateprewitt/api_rename
92075b3 Add deprecation warning
aa1461b Move _get_connection to get_connection_with_tls_context
970e8ce v2.32.1
d6ebc4a v2.32.0
9a40d12 Avoid reloading root certificates to improve concurrent performance (#6667)
0c030f7 Merge pull request #6702 from nateprewitt/no_char_detection
555b870 Allow character detection dependencies to be optional in post-packaging steps
d6dded3 Merge pull request #6700 from franekmagiera/update-redirect-to-invalid-uri-test
Additional commits viewable in compare view

Updates s3fs from 0.4.2 to 2024.5.0

Commits

a28863f Merge branch 'main' of https://github.com/fsspec/s3fs
98b319a Release (#877)
92ef5e6 Merge branch 'main' of https://github.com/fsspec/s3fs
3966b39 flexible install version (#869)
f883496 flexible install version
7ccc0a5 _bulk_delete must always return a list, even when pathlist is empty (#866)
11ec756 fix(s3fs): Consolidate retry logic for rate limits (#865)
efbe1e4 changelog (#864)
5cf759d fix(core): accept kwargs in get file (#863)
1ddc2b0 changelog (#861)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the pip group with 5 updates in the / directory: | Package | From | To | | --- | --- | --- | | [boto3](https://github.com/boto/boto3) | `1.34.98` | `1.34.113` | | [botocore](https://github.com/boto/botocore) | `1.34.98` | `1.34.113` | | [fsspec](https://github.com/fsspec/filesystem_spec) | `2024.3.1` | `2024.5.0` | | [requests](https://github.com/psf/requests) | `2.31.0` | `2.32.2` | | [s3fs](https://github.com/fsspec/s3fs) | `0.4.2` | `2024.5.0` | Updates `boto3` from 1.34.98 to 1.34.113 - [Release notes](https://github.com/boto/boto3/releases) - [Changelog](https://github.com/boto/boto3/blob/develop/CHANGELOG.rst) - [Commits](boto/boto3@1.34.98...1.34.113) Updates `botocore` from 1.34.98 to 1.34.113 - [Changelog](https://github.com/boto/botocore/blob/develop/CHANGELOG.rst) - [Commits](boto/botocore@1.34.98...1.34.113) Updates `fsspec` from 2024.3.1 to 2024.5.0 - [Commits](fsspec/filesystem_spec@2024.3.1...2024.5.0) Updates `requests` from 2.31.0 to 2.32.2 - [Release notes](https://github.com/psf/requests/releases) - [Changelog](https://github.com/psf/requests/blob/main/HISTORY.md) - [Commits](psf/requests@v2.31.0...v2.32.2) Updates `s3fs` from 0.4.2 to 2024.5.0 - [Changelog](https://github.com/fsspec/s3fs/blob/main/release-procedure.md) - [Commits](fsspec/s3fs@0.4.2...2024.5.0) --- updated-dependencies: - dependency-name: boto3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: pip - dependency-name: botocore dependency-type: direct:production update-type: version-update:semver-patch dependency-group: pip - dependency-name: fsspec dependency-type: direct:production update-type: version-update:semver-minor dependency-group: pip - dependency-name: requests dependency-type: direct:production update-type: version-update:semver-minor dependency-group: pip - dependency-name: s3fs dependency-type: direct:production update-type: version-update:semver-major dependency-group: pip ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2024-06-02T09:55:32Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels May 26, 2024

dependabot bot assigned davidski May 26, 2024

dependabot bot closed this Jun 2, 2024

dependabot bot deleted the dependabot/pip/pip-766c4413c0 branch June 2, 2024 09:55

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump the pip group across 1 directory with 5 updates #360

Bump the pip group across 1 directory with 5 updates #360

dependabot bot commented on behalf of github May 26, 2024 •

edited

dependabot bot commented on behalf of github Jun 2, 2024

Bump the pip group across 1 directory with 5 updates #360

Bump the pip group across 1 directory with 5 updates #360

Conversation

dependabot bot commented on behalf of github May 26, 2024 • edited

1.34.113

1.34.112

1.34.111

1.34.110

1.34.109

1.34.108

1.34.113

1.34.112

1.34.111

1.34.110

1.34.109

1.34.108

v2.32.2

2.32.2 (2024-05-21)

v2.32.1

2.32.1 (2024-05-20)

v2.32.0

2.32.0 (2024-05-20)

🐍 PYCON US 2024 EDITION 🐍

2.32.2 (2024-05-21)

2.32.1 (2024-05-20)

2.32.0 (2024-05-20)

dependabot bot commented on behalf of github Jun 2, 2024

dependabot bot commented on behalf of github May 26, 2024 •

edited