Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Bump the primary-deps group with 5 updates #126

Closed
wants to merge 1 commit into from
Closed

Bump the primary-deps group with 5 updates #126

wants to merge 1 commit into from

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Mar 1, 2024 •
edited
Loading

Bumps the primary-deps group with 5 updates:

Package From To
marshmallow 3.20.1 3.21.0
cryptography 41.0.7 42.0.5
botocore 1.34.11 1.34.53
boto3 1.34.11 1.34.53
slack-sdk 3.26.1 3.27.1

Updates marshmallow from 3.20.1 to 3.21.0

Changelog

Sourced from marshmallow's changelog.

3.21.0 (2024-02-26)

Bug fixes:

  • Fix validation of URL fields to allow missing user field, per NWG RFC 3986 (:issue:2232). Thanks :user:ddennerline3 for reporting and :user:deckar01 for the PR.

Other changes:

  • Backwards-incompatible: __version__, __parsed_version__, and __version_info__ attributes are deprecated (:issue:2227). Use feature detection or importlib.metadata.version("marshmallow") instead.

3.20.2 (2024-01-09)

Bug fixes:

  • Fix Nested field type hint for lambda Schema types (:pr:2164). Thanks :user:somethingnew2-0 for the PR.

Other changes:

  • Officially support Python 3.12 (:pr:2188). Thanks :user:hugovk for the PR.
Commits

Updates cryptography from 41.0.7 to 42.0.5

Changelog

Sourced from cryptography's changelog.

42.0.5 - 2024-02-23


* Limit the number of name constraint checks that will be performed in
  :mod:`X.509 path validation <cryptography.x509.verification>` to protect
  against denial of service attacks.
* Upgrade ``pyo3`` version, which fixes building on PowerPC.

.. _v42-0-4:


42.0.4 - 2024-02-20

  • Fixed a null-pointer-dereference and segfault that could occur when creating a PKCS#12 bundle. Credit to Alexander-Programming for reporting the issue. CVE-2024-26130
  • Fixed ASN.1 encoding for PKCS7/SMIME signed messages. The fields SMIMECapabilities and SignatureAlgorithmIdentifier should now be correctly encoded according to the definitions in :rfc:2633 :rfc:3370.

.. _v42-0-3:

42.0.3 - 2024-02-15


* Fixed an initialization issue that caused key loading failures for some
  users.

.. _v42-0-2:


42.0.2 - 2024-01-30

  • Updated Windows, macOS, and Linux wheels to be compiled with OpenSSL 3.2.1.
  • Fixed an issue that prevented the use of Python buffer protocol objects in sign and verify methods on asymmetric keys.
  • Fixed an issue with incorrect keyword-argument naming with EllipticCurvePrivateKey :meth:~cryptography.hazmat.primitives.asymmetric.ec.EllipticCurvePrivateKey.exchange, X25519PrivateKey :meth:~cryptography.hazmat.primitives.asymmetric.x25519.X25519PrivateKey.exchange, X448PrivateKey :meth:~cryptography.hazmat.primitives.asymmetric.x448.X448PrivateKey.exchange, and DHPrivateKey :meth:~cryptography.hazmat.primitives.asymmetric.dh.DHPrivateKey.exchange.

.. _v42-0-1:

42.0.1 - 2024-01-24


</tr></table>

... (truncated)

Commits

Updates botocore from 1.34.11 to 1.34.53

Changelog

Sourced from botocore's changelog.

1.34.53

  • api-change:docdb-elastic: Launched Elastic Clusters Readable Secondaries, Start/Stop, Configurable Shard Instance count, Automatic Backups and Snapshot Copying
  • api-change:eks: Added support for new AL2023 AMIs to the supported AMITypes.
  • api-change:lexv2-models: This release makes AMAZON.QnAIntent generally available in Amazon Lex. This generative AI feature leverages large language models available through Amazon Bedrock to automate frequently asked questions (FAQ) experience for end-users.
  • api-change:migrationhuborchestrator: Adds new CreateTemplate, UpdateTemplate and DeleteTemplate APIs.
  • api-change:quicksight: TooltipTarget for Combo chart visuals; ColumnConfiguration limit increase to 2000; Documentation Update
  • api-change:sagemaker: Adds support for ModelDataSource in Model Packages to support unzipped models. Adds support to specify SourceUri for models which allows registration of models without mandating a container for hosting. Using SourceUri, customers can decouple the model from hosting information during registration.
  • api-change:securitylake: Add capability to update the Data Lake's MetaStoreManager Role in order to perform required data lake updates to use Iceberg table format in their data lake or update the role for any other reason.

1.34.52

  • api-change:batch: This release adds Batch support for configuration of multicontainer jobs in ECS, Fargate, and EKS. This support is available for all types of jobs, including both array jobs and multi-node parallel jobs.
  • api-change:bedrock-agent-runtime: This release adds support to override search strategy performed by the Retrieve and RetrieveAndGenerate APIs for Amazon Bedrock Agents
  • api-change:ce: This release introduces the new API 'GetApproximateUsageRecords', which retrieves estimated usage records for hourly granularity or resource-level data at daily granularity.
  • api-change:ec2: This release increases the range of MaxResults for GetNetworkInsightsAccessScopeAnalysisFindings to 1,000.
  • api-change:iot: This release reduces the maximum results returned per query invocation from 500 to 100 for the SearchIndex API. This change has no implications as long as the API is invoked until the nextToken is NULL.
  • api-change:wafv2: AWS WAF now supports configurable time windows for request aggregation with rate-based rules. Customers can now select time windows of 1 minute, 2 minutes or 10 minutes, in addition to the previously supported 5 minutes.

1.34.51

  • api-change:amplifyuibuilder: We have added the ability to tag resources after they are created

1.34.50

  • api-change:apigateway: Documentation updates for Amazon API Gateway.
  • api-change:drs: Added volume status to DescribeSourceServer replicated volumes.
  • api-change:kafkaconnect: Adds support for tagging, with new TagResource, UntagResource and ListTagsForResource APIs to manage tags and updates to existing APIs to allow tag on create. This release also adds support for the new DeleteWorkerConfiguration API.
  • api-change:rds: This release adds support for gp3 data volumes for Multi-AZ DB Clusters.

1.34.49

  • api-change:appsync: Documentation only updates for AppSync
  • api-change:qldb: Clarify possible values for KmsKeyArn and EncryptionDescription.
  • api-change:rds: Add pattern and length based validations for DBShardGroupIdentifier
  • api-change:rum: Doc-only update for new RUM metrics that were added

1.34.48

... (truncated)

Commits
  • eeb3362 Merge branch 'release-1.34.53'
  • 799f216 Bumping version to 1.34.53
  • 73acc04 Update endpoints model
  • 7afd549 Update to latest models
  • 5719553 Merge branch 'release-1.34.52' into develop
  • ec6d662 Merge branch 'release-1.34.52'
  • 9aa9f07 Bumping version to 1.34.52
  • c3e4bf6 Update to latest models
  • 1b66485 Merge branch 'release-1.34.51' into develop
  • 5863421 Merge branch 'release-1.34.51'
  • Additional commits viewable in compare view

Updates boto3 from 1.34.11 to 1.34.53

Changelog

Sourced from boto3's changelog.

1.34.53

  • api-change:docdb-elastic: [botocore] Launched Elastic Clusters Readable Secondaries, Start/Stop, Configurable Shard Instance count, Automatic Backups and Snapshot Copying
  • api-change:eks: [botocore] Added support for new AL2023 AMIs to the supported AMITypes.
  • api-change:lexv2-models: [botocore] This release makes AMAZON.QnAIntent generally available in Amazon Lex. This generative AI feature leverages large language models available through Amazon Bedrock to automate frequently asked questions (FAQ) experience for end-users.
  • api-change:migrationhuborchestrator: [botocore] Adds new CreateTemplate, UpdateTemplate and DeleteTemplate APIs.
  • api-change:quicksight: [botocore] TooltipTarget for Combo chart visuals; ColumnConfiguration limit increase to 2000; Documentation Update
  • api-change:sagemaker: [botocore] Adds support for ModelDataSource in Model Packages to support unzipped models. Adds support to specify SourceUri for models which allows registration of models without mandating a container for hosting. Using SourceUri, customers can decouple the model from hosting information during registration.
  • api-change:securitylake: [botocore] Add capability to update the Data Lake's MetaStoreManager Role in order to perform required data lake updates to use Iceberg table format in their data lake or update the role for any other reason.

1.34.52

  • api-change:batch: [botocore] This release adds Batch support for configuration of multicontainer jobs in ECS, Fargate, and EKS. This support is available for all types of jobs, including both array jobs and multi-node parallel jobs.
  • api-change:bedrock-agent-runtime: [botocore] This release adds support to override search strategy performed by the Retrieve and RetrieveAndGenerate APIs for Amazon Bedrock Agents
  • api-change:ce: [botocore] This release introduces the new API 'GetApproximateUsageRecords', which retrieves estimated usage records for hourly granularity or resource-level data at daily granularity.
  • api-change:ec2: [botocore] This release increases the range of MaxResults for GetNetworkInsightsAccessScopeAnalysisFindings to 1,000.
  • api-change:iot: [botocore] This release reduces the maximum results returned per query invocation from 500 to 100 for the SearchIndex API. This change has no implications as long as the API is invoked until the nextToken is NULL.
  • api-change:wafv2: [botocore] AWS WAF now supports configurable time windows for request aggregation with rate-based rules. Customers can now select time windows of 1 minute, 2 minutes or 10 minutes, in addition to the previously supported 5 minutes.

1.34.51

  • api-change:amplifyuibuilder: [botocore] We have added the ability to tag resources after they are created

1.34.50

  • api-change:apigateway: [botocore] Documentation updates for Amazon API Gateway.
  • api-change:drs: [botocore] Added volume status to DescribeSourceServer replicated volumes.
  • api-change:kafkaconnect: [botocore] Adds support for tagging, with new TagResource, UntagResource and ListTagsForResource APIs to manage tags and updates to existing APIs to allow tag on create. This release also adds support for the new DeleteWorkerConfiguration API.
  • api-change:rds: [botocore] This release adds support for gp3 data volumes for Multi-AZ DB Clusters.

1.34.49

  • api-change:appsync: [botocore] Documentation only updates for AppSync
  • api-change:qldb: [botocore] Clarify possible values for KmsKeyArn and EncryptionDescription.
  • api-change:rds: [botocore] Add pattern and length based validations for DBShardGroupIdentifier
  • api-change:rum: [botocore] Doc-only update for new RUM metrics that were added

1.34.48

... (truncated)

Commits
  • 914c71b Merge branch 'release-1.34.53'
  • 0fdef8b Bumping version to 1.34.53
  • f39ede7 Add changelog entries from botocore
  • 7d55662 Merge branch 'release-1.34.52' into develop
  • 78d211e Merge branch 'release-1.34.52'
  • f93792b Bumping version to 1.34.52
  • aae855b Add changelog entries from botocore
  • f707245 Merge branch 'release-1.34.51' into develop
  • 97c442a Merge branch 'release-1.34.51'
  • cc367ab Bumping version to 1.34.51
  • Additional commits viewable in compare view

Updates slack-sdk from 3.26.1 to 3.27.1

Release notes

Sourced from slack-sdk's releases.

version 3.27.1

Changes

version 3.27.0

Changes

version 3.26.2

Changes

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the primary-deps group with 5 updates
98869a4 
Bumps the primary-deps group with 5 updates:

| Package | From | To |
| --- | --- | --- |
| [marshmallow](https://github.com/marshmallow-code/marshmallow) | `3.20.1` | `3.21.0` |
| [cryptography](https://github.com/pyca/cryptography) | `41.0.7` | `42.0.5` |
| [botocore](https://github.com/boto/botocore) | `1.34.11` | `1.34.53` |
| [boto3](https://github.com/boto/boto3) | `1.34.11` | `1.34.53` |
| [slack-sdk](https://github.com/slackapi/python-slack-sdk) | `3.26.1` | `3.27.1` |


Updates `marshmallow` from 3.20.1 to 3.21.0
- [Changelog](https://github.com/marshmallow-code/marshmallow/blob/dev/CHANGELOG.rst)
- [Commits](marshmallow-code/marshmallow@3.20.1...3.21.0)

Updates `cryptography` from 41.0.7 to 42.0.5
- [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst)
- [Commits](pyca/cryptography@41.0.7...42.0.5)

Updates `botocore` from 1.34.11 to 1.34.53
- [Changelog](https://github.com/boto/botocore/blob/develop/CHANGELOG.rst)
- [Commits](boto/botocore@1.34.11...1.34.53)

Updates `boto3` from 1.34.11 to 1.34.53
- [Release notes](https://github.com/boto/boto3/releases)
- [Changelog](https://github.com/boto/boto3/blob/develop/CHANGELOG.rst)
- [Commits](boto/boto3@1.34.11...1.34.53)

Updates `slack-sdk` from 3.26.1 to 3.27.1
- [Release notes](https://github.com/slackapi/python-slack-sdk/releases)
- [Changelog](https://github.com/slackapi/python-slack-sdk/blob/main/docs-v2/changelog.html)
- [Commits](slackapi/python-slack-sdk@v3.26.1...v3.27.1)

---
updated-dependencies:
- dependency-name: marshmallow
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: primary-deps
- dependency-name: cryptography
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: primary-deps
- dependency-name: botocore
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: primary-deps
- dependency-name: boto3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: primary-deps
- dependency-name: slack-sdk
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: primary-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Mar 1, 2024
@dependabot dependabot bot mentioned this pull request Mar 1, 2024
Closed
@mikegrima
Copy link
Contributor

@dependabot rebase

@dependabot Dependabot
Copy link
Contributor Author

dependabot bot commented on behalf of github Mar 27, 2024

Looks like these dependencies are no longer updatable, so this is no longer needed.

@dependabot dependabot bot closed this Mar 27, 2024
@dependabot dependabot bot deleted the dependabot/pip/primary-deps-5657463c72 branch March 27, 2024 18:58
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
dependencies Pull requests that update a dependency file
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
1 participant
@mikegrima