⬆️(dependencies) update python dependencies#1813
Conversation
renovate
bot
added
automated
renovate
bot
force-pushed
the
renovate/python-dependencies
branch
from
7ad2fb9 to
dfd05f2
Compare
renovate
bot
force-pushed
the
renovate/python-dependencies
branch
from
dfd05f2 to
520f26f
Compare
|
Warning Review the following alerts detected in dependencies. According to your organization's Security Policy, it is recommended to resolve "Warn" alerts. Learn more about Socket for GitHub.
|
This PR contains the following updates:
==1.42.17→==1.42.34==0.0.22→==0.0.23==2025.12.1→==2026.1.1==23.0.0→==24.1.1==9.8.0→==9.9.0==4.25.1→==4.26.0==3.11.2→==3.12.0==3.10→==3.10.1==2.14.0→==2.15.0==0.12.44→==0.12.45==2.6.1→==2.7.0==0.14.10→==0.14.14==2.48.0→==2.50.0==2.32.4.20250913→==2.32.4.20260107Release Notes
boto/boto3 (boto3)
v1.42.34Compare Source
=======
connect: [botocore] Amazon Connect now offers public APIs to programmatically configure and run automated tests for contact center experiences. Integrate testing into CICD pipelines, run multiple tests at scale, and retrieve results via API to automate validation of voice interactions and workflows.datazone: [botocore] Added api for deleting data export configuration for a domainqconnect: [botocore] Fixes incorrect types in the UpdateAssistantAIAgent API request, adds MESSAGE to TargetType enum, and other minor changes.v1.42.33Compare Source
=======
autoscaling: [botocore] This release adds support for Amazon EC2 Auto Scaling group deletion protectionbudgets: [botocore] Add Budget FilterExpression and Metrics fields to DescribeBudgetPerformanceHistory to support more granular filtering options.dynamodb: [botocore] Adds additional waiters to Amazon DynamoDB.ec2: [botocore] Add better support for fractional GPU instances in DescribeInstanceTypes API. The new fields, logicalGpuCount, gpuPartitionSize, and workload array enable better GPU resource selection and filtering for both full and fractional GPU instance types.endpoint-rules: [botocore] Update endpoint-rules client to latest versiongamelift: [botocore] Amazon GameLift Servers Realtime now supports Node.js 24.x runtime on the Amazon Linux 2023 operating system.guardduty: [botocore] Adding new enum value for ScanStatusReasonhealth: [botocore] Updates the lower range for the maxResults request property for DescribeAffectedEntities, DescribeAffectedEntitiesForOrganization, DescribeEvents, and DescribeEventsForOrganization API request properties.meteringmarketplace: [botocore] Customer Identifier parameter deprecation date has been removed. For new implementations, we recommend using the CustomerAWSAccountID. Your current integration will continue to work. When updating your implementation, consider migrating to CustomerAWSAccountID for improved integration.verifiedpermissions: [botocore] Adding documentation to user guide and API documentation for how customers can create new encrypted policy stores by passing in their customer managed key during policy store creation.v1.42.32Compare Source
=======
bedrock-agentcore: [botocore] Supports custom browser extensions for AgentCore Browser and increased message payloads up to 100KB per message in an Event for AgentCore Memoryconfig: [botocore] AWS Config Conformance Packs now support tag-on-create through PutConformancePack API.ec2: [botocore] Added support of multiple EBS cards. New EbsCardIndex parameter enables attaching volumes to specific EBS cards on supported instance types for improved storage performance.quicksight: [botocore] Added documentation and model for sheet layout groups - allows sheet elements to be grouped, Added documentation and the feature enables admins to have granular control over connectors under actions, Updated API documentation for PDF Export in Snapshot Export APIsv1.42.31Compare Source
=======
autoscaling: [botocore] This release adds support for three new filters when describing scaling activities, StartTimeLowerBound, StartTimeUpperBound, and Status.bedrock-runtime: [botocore] Added support for extended prompt caching with one hour TTL.keyspaces: [botocore] Adds support for managing table pre-warming in Amazon Keyspaces (for Apache Cassandra)odb: [botocore] Adds support for associating and disassociating IAM roles with Autonomous VM cluster resources through the AssociateIamRoleToResource and DisassociateIamRoleFromResource APIs. The GetCloudAutonomousVmCluster and ListCloudAutonomousVmClusters API responses now include the iamRoles field.verifiedpermissions: [botocore] Amazon Verified Permissions now supports encryption of resources by a customer managed KMS key. Customers can now create new encrypted policy stores by passing in their customer managed key during policy store creation.workspaces-instances: [botocore] Added billing configuration support for WorkSpaces Instances with monthly and hourly billing modes, including new filtering capabilities for instance type searches.v1.42.30Compare Source
=======
connect: [botocore] Adds support to allow customers to create form with Dispute configurationdatazone: [botocore] This release adds support for numeric filtering and complex free-text searches cases for the Search and SearchListings APIs.glacier: [botocore] Documentation updates for Amazon Glacier's maintenance modelaunch-wizard: [botocore] Added UpdateDeployment, ListDeploymentPatternVersions and GetDeploymentPatternVersion APIs for Launch Wizardresource-explorer-2: [botocore] Added ViewName to View-related responses and ServiceViewName to GetServiceView response.sagemaker: [botocore] Adding security consideration comments for lcc accessing execution role under root accessv1.42.29Compare Source
=======
cleanrooms: [botocore] This release adds support for parameters in PySpark analysis templates.deadline: [botocore] AWS Deadline Cloud now supports tagging Budget resources with ABAC for permissions management and selecting up to 16 filter values in the monitor and Search API.ec2: [botocore] This release includes documentation updates to support up to four Elastic Volume modifications per Amazon EBS volume within a rolling 24-hour period.ecs: [botocore] Adds support for configuring FIPS in AWS GovCloud (US) Regions via a new ECS Capacity Provider field fipsEnabled. When enabled, instances launched by the capacity provider will use a FIPS-140 enabled AMI. Instances will use FIPS-140 compliant cryptographic modules and AWS FIPS endpoints.evs: [botocore] A new GetVersions API has been added to retrieve VCF, ESX versions, and EC2 instances provided by Amazon EVS. The CreateEnvironment API now allows you to select a VCF version and the CreateEnvironmentHost API introduces a optional esxVersion parameter.lakeformation: [botocore] API Changes for GTCForLocation feature. Includes a new API, GetTemporaryDataLocationCredentials and updates to the APIs RegisterResource and UpdateResourceopensearchserverless: [botocore] Collection groups in Amazon OpenSearch Serverless enables to organize multiple collections and enable compute resource sharing across collections with different KMS keys. This shared compute model reduces costs by eliminating the need for separate OpenSearch Compute Units (OCUs) for each KMS key.qconnect: [botocore] Fix inference configuration shapes for the CreateAIPrompt and UpdateAIPrompt APIs, Modify Text Length Limit for SendMessage APIbotocore] Add support for TCP Keep-Alive configuration via BOTOCORE_TCP_KEEPALIVE environment variablev1.42.28Compare Source
=======
ce: [botocore] Cost Categories added support to BillingView data filter expressions through the new costCategories parameter, enabling users to filter billing views by AWS Cost Categories for more granular cost management and allocation.connect: [botocore] Amazon Connect makes it easier to manage contact center operating hours by enabling automated scheduling for recurring events like holidays and maintenance windows. Set up recurring patterns (weekly, monthly, etc.) or link to another hours of operation to inherit overrides.eks: [botocore] Added support for BOTTLEROCKET NVIDIA FIPS AMIs to AMI types in US regions.rds: [botocore] no feature changes. model migrated to Smithyredshift: [botocore] Adds support for enabling extra compute resources for automatic optimization during create and modify operations in Amazon Redshift clusters.redshift-serverless: [botocore] Adds support for enabling extra compute resources for automatic optimization during create and update operations in Amazon Redshift Serverless workgroups.socialmessaging: [botocore] This release clarifies WhatsApp template operations as a resource-authenticated operation via the parent WhatsApp Business Account. It also introduces new parameters for parameter format, CTA URL link tracking, and template body examples, and increases the phone number ID length.v1.42.27Compare Source
=======
bedrock: [botocore] This change will increase TestCase guardContent input size from 1024 to 2028 characters and PolicyBuildDocumentDescription from 2000 to 4000 charactersdatazone: [botocore] Adds support for IAM role subscriptions to Glue table listings via CreateSubscriptionRequest API. Also adds owningIamPrincipalArn filter to List APIs and subscriptionGrantCreationMode parameter to subscription target APIs for controlling grant creation behavior.v1.42.26Compare Source
=======
billing: [botocore] Cost Categories filtering support to BillingView data filter expressions through the new costCategories parameter, enabling users to filter billing views by AWS Cost Categories for more granular cost management and allocation.iot-managed-integrations: [botocore] This release introduces WiFi Simple Setup (WSS) enabling device provisioning via barcode scanning with automated network discovery, authentication, and credential provisioning. Additionally, it introduces 2P Device Capability Rediscovery for updating hub-managed device capabilities post-onboarding.sagemaker: [botocore] Added ultraServerType to the UltraServerInfo structure to support server type identification for SageMaker HyperPodv1.42.25Compare Source
=======
bedrock-agentcore-control: [botocore] Adds optional field "view" to GetMemory API input to give customers control over whether CMK encrypted data such as strategy decryption or override prompts is returned or not.cloudfront: [botocore] Added EntityLimitExceeded exception handling to the following API operations AssociateDistributionWebACL, AssociateDistributionTenantWebACL, UpdateDistributionWithStagingConfigglue: [botocore] Adding MaterializedViews task run APIsmedialive: [botocore] MediaPackage v2 output groups in MediaLive can now accept one additional destination for single pipeline channels and up to two additional destinations for standard channels. MediaPackage v2 destinations now support sending to cross region MediaPackage channels.transcribe: [botocore] Adds waiters to Amazon Transcribe.v1.42.24Compare Source
=======
workspaces: [botocore] Add StateMessage and ProgressPercentage fields to DescribeCustomWorkspaceImageImport API response.v1.42.23Compare Source
=======
ce: [botocore] This release updates existing reservation recommendations API to support deployment model.emr-serverless: [botocore] Added support for enabling disk encryption using customer managed AWS KMS keys to CreateApplication, UpdateApplication and StartJobRun APIs.v1.42.22Compare Source
=======
cleanroomsml: [botocore] AWS Clean Rooms ML now supports advanced Spark configurations to optimize SQL performance when creating an MLInputChannel or an audience generation job.v1.42.21Compare Source
=======
s3: [botocore] Clarifypayload_signing_enableddocumentation to cover interaction withrequest_checksum_calculationv1.42.20Compare Source
=======
cleanrooms: [botocore] Added support for publishing detailed metrics to CloudWatch for operational monitoring of collaborations, including query performance and resource utilization.identitystore: [botocore] This change introduces "Roles" attribute for User entities supported by AWS Identity Store SDK.v1.42.19Compare Source
=======
connect: [botocore] Adds support for searching global contacts using the ActiveRegions filter, and pagination support for ListSecurityProfileFlowModules and ListEntitySecurityProfiles.endpoint-rules: [botocore] Update endpoint-rules client to latest versionkafkaconnect: [botocore] This change sets the KafkaConnect GovCloud FIPS and FIPS DualStack endpoints to use kafkaconnect instead of kafkaconnect-fips as the service name. This is done to match the Kafka endpoints.v1.42.18Compare Source
=======
connect: [botocore] Changes for Contact for Global Searchelastictranscoder: [botocore] The elastictranscoder client has been removed following the deprecation of the service.quicksight: [botocore] This release adds support for quick users to be able to perform role upgrades on their own. Additionally it allows admins to make this feature admin or auto approval along with new self upgrade capability that can be restricted by Admins.suitenumerique/django-lasuite (django-lasuite)
v0.0.23Compare Source
Changed
tfranzel/drf-spectacular-sidecar (drf-spectacular-sidecar)
v2026.1.1Compare Source
benoitc/gunicorn (gunicorn)
v24.1.1Compare Source
Bug Fixes
forwarded_allow_ipsandproxy_allow_ipsto remain as strings for backwardcompatibility with external tools like uvicorn. Network validation now uses strict
mode to detect invalid CIDR notation (e.g.,
192.168.1.1/24where host bits are set)(#3458,
PR #3459)
Full Changelog: benoitc/gunicorn@24.1.0...24.1.1
v24.1.0: Gunicorn 24.1.0Compare Source
New Features
Official Docker Image: Gunicorn now publishes official Docker images to GitHub Container Registry (PR #3454)
ghcr.io/benoitc/gunicornPROXY Protocol v2 Support: Extended PROXY protocol implementation to support the binary v2 format in addition to the existing text-based v1 format (PR #3451)
--proxy-protocolmodes:off,v1,v2,autoautomode (default when enabled) detects v1 or v2 automaticallyCIDR Network Support:
--forwarded-allow-ipsand--proxy-allow-fromnow accept CIDR notation (e.g.,192.168.0.0/16) for specifying trusted networks (PR #3449)Socket Backlog Metric: New
gunicorn.socket.backloggauge metric reports the current socket backlog size on Linux systems (PR #3450)InotifyReloader Enhancement: The inotify-based reloader now watches newly imported modules, not just those loaded at startup (PR #3447)
Bug Fixes
finish_body()for faster timeout detection on slow or abandoned connections (PR #3453)SSLWantReadErrorinfinish_body()to prevent worker hangs during SSL renegotiation (PR #3448)unreader.unread()to prepend data to buffer instead of appending (PR #3442)RecursionErrorwhen pickling Config objects (PR #3441)raise fromin glogging.py (PR #3440)Installation
Or use the official Docker image:
v24.0.0Compare Source
New Features
ASGI Worker (Beta): Native asyncio-based ASGI support for running async Python frameworks like FastAPI, Starlette, and Quart without external dependencies
uWSGI Binary Protocol: Support for receiving requests from nginx via
uwsgi_passdirectiveDocumentation Migration: Migrated to MkDocs with Material theme
Security
Install
ipython/ipython (ipython)
v9.9.0Compare Source
python-jsonschema/jsonschema (jsonschema)
v4.26.0Compare Source
=======
urllib.request(#1416).Python-Markdown/markdown (markdown)
v3.10.1Compare Source
Fixed
openai/openai-python (openai)
v2.15.0Compare Source
Full Changelog: v2.14.0...v2.15.0
Features
Chores
y-crdt/pycrdt (pycrdt)
v0.12.45Compare Source
pylint-dev/pylint-django (pylint-django)
v2.7.0Compare Source
We added support for pylint 4.0.0+.
Other
We dropped support for Python 3.7, 3.8, and for pylint below 3.0.
Bugfixes
3.12(#​425 <https://github.com/pylint-dev/pylint-django/issues/425>_)astral-sh/ruff (ruff)
v0.14.14Compare Source
Released on 2026-01-22.
Preview features
airflow] Second positional argument toAsset/Datasetshould not be a dictionary (AIR303) (#22453)ruff] Detect duplicate entries in__all__(RUF068) (#22114)Bug fixes
pyupgrade] Allow shadowing non-builtin bindings (UP029) (#22749)pyupgrade] ApplyUP045to string arguments oftyping.cast(#22320)flake8-pie] Detect duplicated declared class fields inPIE794(#22717)Rule changes
flake8-pyi] Fix inconsistent handling of forward references for__new__,__enter__,__aenter__inPYI034(#22798)flake8-pytest-style] Supportcheckparameter inPT011(#22725)ruff] Add exception forctypes.Structure._fields_(RUF012) (#22559)flake8-bugbear]B009,B010,B013,B014,B033flake8-simplify]SIM910,SIM911pyupgrade]UP007,UP039,UP041,UP045refurb]FURB105,FURB116,FURB136,FURB140,FURB145,FURB154,FURB157,FURB164,FURB181,FURB188ruff]RUF019,RUF020Documentation
--exit-non-zero-on-formatto formatter exit codes section (#22761)FastAPI] Document fix safety forFAST001(#22655)flake8-async] Tweak explanation to focus on latency/efficiency tradeoff (ASYNC110) (#22715)pandas-vet] Make example error out-of-the-box (PD002) (#22561)refurb] Make the example work out of box (FURB101) (#22770)refurb] Make the example work out of box (FURB103) (#22769)Contributors
v0.14.13Released on 2026-01-15.
This is a follow-up release to 0.14.12. Because of an issue publishing the WASM packages, there is no GitHub release or Git tag for 0.14.12, although the package was published to PyPI. The contents of the 0.14.13 release are identical to 0.14.12.
v0.14.12Released on 2026-01-15.
Preview features
flake8-blind-except] Allow more logging methods (BLE001) (#22057)ruff] Respectlint.pydocstyle.property-decoratorsinRUF066(#22515)Bug fixes
--show-settings(#22478)fmt: skipfor multiple statements on the same logical line (#22119)Rule changes
pydocstyle] Update Rust crate imperative to v1.0.7 (D401) (#22519)isort] Insert imports in alphabetical order (I002) (#22493)Documentation
flake8-pytest-style] Addcheckparameter example toPT017docs (#22546)ruff] Make example error out-of-the-box (RUF103) (#22558)ruff] documentRUF100trailing comment fix behavior (#22479)Other changes
Contributors
v0.14.11Compare Source
Released on 2026-01-08.
Preview features
airflow] Passing positional argument intoairflow.lineage.hook.HookLineageCollector.create_assetis not allowed (AIR303) (#22046)refurb] MarkFURB192fix as always unsafe (#22210)ruff] Addnon-empty-init-module(RUF067) (#22143)Bug fixes
flake8-unused-arguments] Mark**kwargsinTypeVaras used (ARG001) (#22214)Rule changes
help:subdiagnostics for several Ruff rules that can sometimes appear to disagree withty(#22331)pylint] DemotePLW1510fix to display-only (#22318)pylint] Ignore identical members (PLR1714) (#22220)pylint] Improve diagnostic range forPLC0206(#22312)ruff] Improve fix title forRUF102invalid rule code (#22100)flake8-simplify]: Avoid unnecessary builtins import forSIM105(#22358)Configuration
target-versionvalue in preview (#22419)required-versionbefore parsing rules (#22410)srcdirectories when resolving graphs (#22451)Documentation
T201suggestion to not use root logger to satisfyLOG015(#22059)iterexample in unsafe fixes doc (#22118)flake8_print] better suggestion forbasicConfiginT201docs (#22101)pylint] Restore the fix safety docs forPLW0133(#22211)Contributors
getsentry/sentry-python (sentry-sdk)
v2.50.0Compare Source
New Features ✨
Ai
Other
feat(asyncio): Add on-demand way to enable AsyncioIntegration by @sentrivana in #5288
You can now enable the
AsyncioIntegrationon demand, after callingsentry_sdk.init(). This is useful in scenarios where you don't havethe event loop running early on, or when you need to instrument multiple event loops.
HostedMCPToolby @alexander-alderman-webb in #5297Bug Fixes 🐛
Integrations
gen_ai.request.messagesextraction from parameters by @constantinius in #5275gen_ai.request.messagesstructure by @constantinius in #5251Litellm
gen_ai.request.messagesto be as expected by @constantinius in #5255Other
Documentation 📚
Internal Changes 🔧
Fastmcp
AttributeErrortry-except by @alexander-alderman-webb in #5339Release
Other
v2.49.0Compare Source
New Features ✨
Scope.set_attributeby @sentrivana in #5256Bug Fixes 🐛
Documentation 📚
middleware_spansdocstring by @sentrivana in #5279Internal Changes 🔧
Configuration
📅 Schedule: Branch creation - "before 7am on monday" (UTC), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.