Bump awscli from 1.29.85 to 1.45.28 - #37
Conversation
Bumps [awscli](https://github.com/aws/aws-cli) from 1.29.85 to 1.45.28. - [Release notes](https://github.com/aws/aws-cli/releases) - [Commits](aws/aws-cli@1.29.85...1.45.28) --- updated-dependencies: - dependency-name: awscli dependency-version: 1.45.28 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
![cursor[bot]](https://avatars.githubusercontent.com/in/1210556?s=60&v=4){kind=small}
There was a problem hiding this comment.
Cursor Bugbot has reviewed your changes and found 2 potential issues.
❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, have a team admin enable autofix in the Cursor dashboard.
Reviewed by Cursor Bugbot for commit ef76a76. Configure here.
| amazon = | ||
| boto3~=1.28.57 | ||
| awscli~=1.29.57 | ||
| awscli~=1.45.28 |
There was a problem hiding this comment.
Incompatible AWS dependency pins
High Severity
awscli was bumped to 1.45.28 while boto3 and botocore stay on the 1.28/1.31 lines. Those packages are released together and awscli pins an exact newer botocore, so the amazon extra and pinned requirements.txt set are unsatisfiable. Related pins such as s3transfer and docutils are also too old for this awscli release, so installs resolve or fail inconsistently.
Additional Locations (1)
Reviewed by Cursor Bugbot for commit ef76a76. Configure here.
| amazon = | ||
| boto3~=1.28.57 | ||
| awscli~=1.29.57 | ||
| awscli~=1.45.28 |
There was a problem hiding this comment.
Broken Python version support
Medium Severity
awscli 1.45.28 requires Python >=3.10, but this package still declares python_requires = >=3.8,<3.11. On supported Python 3.8 and 3.9 environments, installing the amazon extra cannot succeed after this bump.
Reviewed by Cursor Bugbot for commit ef76a76. Configure here.
There was a problem hiding this comment.
Risk: medium. Left a non-blocking comment — not approving because Cursor Bugbot reported unresolved dependency/Python-compat issues (and the Bugbot check ended as skipped). Assigned reviewers for human follow-up on awscli pin consistency with boto3/botocore and python_requires.
Sent by Cursor Approval Agent: Pull Request Approver
Bumps awscli from 1.29.85 to 1.45.28.
Commits
13defc3Merge branch 'release-1.45.28'fa1eed1Bumping version to 1.45.2872d1d54Update changelog based on model updates1c2d1bdMerge customizations for EKS170cfc7feat(emr): Improve SSH host key verification with accept-new (#10390)11d8b20Merge branch 'release-1.45.27'a819530Merge branch 'release-1.45.27' into develop34296e8Bumping version to 1.45.27a3a7d02Update changelog based on model updates6be9e33Merge branch 'release-1.45.26'Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)You can disable automated security fix PRs for this repo from the Security Alerts page.
Note
Low Risk
Dependency-only bump with no runtime code changes; verify install/CLI behavior if you rely on the amazon extra, since boto3/botocore were not updated alongside awscli.
Overview
Dependabot bumps awscli from
1.29.85to1.45.28in the pinned lockfile (requirements.txt) and in the optionalamazonextra insetup.cfg(awscli~=1.45.28). No application or client code changes.boto3 and botocore pins are unchanged in this PR; only the CLI package version moves forward.
Reviewed by Cursor Bugbot for commit ef76a76. Bugbot is set up for automated code reviews on this repo. Configure here.