chore(deps): update python dependencies #30
+92
−92
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
==4.9.0->==4.12.0==3.6.2->==3.6.3==3.3.10->==3.3.11==5.8->==5.9==1.8.3->==1.9.2==25.1.0->==25.12.0==1.38.36->==1.42.16==1.38.41->==1.42.16==1.38.36->==1.42.16==1.38.41->==1.42.16==2.5.post1->==2.6==1.2.2.post1->==1.3.0==1.1.2->==1.2.5==2025.6.15->==2025.11.12==3.4.0->==3.5.0==3.4.2->==3.4.4==8.2.1->==8.3.1==4.8.3->==4.10.1==1.3.2->==1.3.3==7.9.1->==7.13.0==0.3.9->==0.4.0==0.21.2->==0.22.4==7.2.0->==7.3.0==2.6.12->==2.6.15==3.10->==3.11==8.7.0->==8.7.1==2.1.0->==2.3.0==6.0.1->==6.1.0==6.0.1->==6.0.2==4.2.1->==4.4.0==25.6.0->==25.7.0==1.4.8->==1.4.9==0.7.1->==0.8.2==3.8.2->==3.10==3.0.2->==3.0.3==3.10.3->==3.10.8==9.6.14->==9.7.1==10.7.0->==10.8.0==1.15.0->==1.19.1==0.2.21->==0.3.2==1.9.1->==1.10.0==2.2.3->==2.3.3==4.3.8->==4.5.1==4.2.0->==4.5.1==0.22.1->==0.23.1==3.0.51->==3.0.52==2.13.0->==2.14.0==2.11.7->==2.12.5==2.33.2->==2.41.5==2.10.0->==2.12.0==3.3.2->==3.4.0==3.3.6->==3.3.9==3.2.3->==3.3.1==8.3.5->==8.4.2==5.1.0->==5.2.3==6.1.1->==6.3.0==3.14.0->==3.15.1==1.1.0->==1.2.1==6.0.2->==6.0.3==2.1.0->==2.1.1==2.32.4->==2.32.5==14.0.0->==14.2.0==1.8.9->==1.9.5==0.11.6->==0.14.10==0.13.0->==0.16.0==1.15.3->==1.16.3==5.4.1->==5.6.0==2.3.0->==2.5.0==6.1.0->==6.2.0==2.9.0.20241206->==2.9.0.20251115==6.0.12.20250402->==6.0.12.20250915==2.32.0.20250328->==2.32.4.20250913==4.14.0->==4.15.0==0.4.1->==0.4.2==2025.2->==2025.3==20.31.2->==20.35.4==10.0->==10.1==0.2.13->==0.2.14Release Notes
agronholm/anyio (anyio)
v4.12.0Compare Source
functoolsmodule (#1001)uvloop=Trueon Windows via the winloop implementation (#960; PR by @Vizonex)anyio.lowlevel.RunVar(#1003)__all__declarations to public submodules (anyio.lowleveletc.) (#1009)CapacityLimiterto zero (#1019; requires Python 3.10 or later when using Trio)case_sensitiveandrecurse_symlinksalong with support for path-like objects toanyio.Path.glob()andanyio.Path.rglob()(#1033; PR by @northisup)sniffioas a direct dependency and added theget_available_backends()function (#1021)Process.stdin.send()not raisingClosedResourceErrorandBrokenResourceErroron asyncio. Previously, a non-AnyIO exception was raised in such cases (#671; PR by @gschaffner)Process.stdin.send()not checkpointing before writing data on asyncio (#1002; PR by @gschaffner)FuturefromBlockingPortal.start_task_soon()would sometimes not cancel the async function (#1011; PR by @gschaffner)RuntimeError: Set changed size during iterationwhile shutting down the process pool when using the asyncio backend (#985)v4.11.0Compare Source
reasonparameter toCancelScope.cancel()) (#975)anyio.lowlevel.current_token()toanyio.from_thread.run()andanyio.from_thread.run_sync()as thetokenkeyword argument (#256)anyio_mode = "auto") to make the pytest plugin automatically handle all async tests (#971)anyio.Condition.wait_for()method for feature parity with asyncio (#974)anyio.abc.TaskStatusfromAnytoNone(#964)local_port=0(#857; PR by @11kkw and @agronholm)BrokenResourceErroronsend()would still raiseBrokenResourceErrorafter the stream was closed on asyncio, butClosedResourceErroron Trio. They now both raise aClosedResourceErrorin this scenario. (#671)v4.10.0Compare Source
feed_data()method to theBufferedByteReceiveStreamclass, allowing users to inject data directly into the bufferSocketListener.from_socket()SocketStream.from_socket()UNIXSocketStream.from_socket()UDPSocket.from_socket()ConnectedUDPSocket.from_socket()UNIXDatagramSocket.from_socket()ConnectedUNIXDatagramSocket.from_socket()anyio.ContextManagerMixinandanyio.AsyncContextManagerMixin) to help write classes that embed other context managers, particularly cancel scopes or task groups (#905; PR by @agronholm and @tapetersen)start_blocking_portal()(#818; PR by @davidbrochart)anyio.notify_closingto allow wakinganyio.wait_readableandanyio.wait_writablebefore closing a socket. Among other things, this prevents an OSError on theProactorEventLoop. (#896; PR by @graingert)to_interpretersmodule to use the publicconcurrent.interpretersAPI on Python 3.14 or lateranyio.Path.copy()andanyio.Path.copy_into()failing on Python 3.14.0a7__aexit__on async context managers. CMs which can suppress exceptions should returnbool, orNoneotherwise. (#913; PR by @Enegg)SpooledTemporaryFileso that rollover only occurs when the buffer size exceedsmax_size(#915; PR by @11kkw)anyio.to_interpreterwith Python 3.14.0b2 (#926; PR by @hroncok)SyntaxWarningon Python 3.14 aboutreturninfinally(#816)BrokenWorkerIntepreterexception toBrokenWorkerInterpreter. The old name is available as a deprecated alias. (#938; PR by @ayussh-verma)CapacityLimiteron asyncio where a task, waiting to acquire a limiter gets cancelled and is subsequently granted a token from the limiter, but before the cancellation is delivered, and then fails to notify the next waiting task (#947)kislyuk/argcomplete (argcomplete)
v3.6.3Compare Source
===============================
Make RE PCRE compatible. Fixes #539
Only execute Python interpreters (#536)
fish: set variable scope to local to avoid clobbering global or
universal variables (#534)
Documentation and help improvements
pylint-dev/astroid (astroid)
v3.3.11Compare Source
=============================
Release date: 2025-07-13
Fix a crash when parsing an empty arbitrary expression with
extract_node(extract_node("__()")).Closes #2734
Fix a crash when parsing a slice called in a decorator on a function that is also decorated with
a known
sixdecorator.Closes #2721
facelessuser/backrefs (backrefs)
v5.9Compare Source
5.9
PyCQA/bandit (bandit)
v1.9.2Compare Source
What's Changed
Full Changelog: PyCQA/bandit@1.9.1...1.9.2
v1.9.1Compare Source
What's Changed
Full Changelog: PyCQA/bandit@1.9.0...1.9.1
v1.8.6Compare Source
What's Changed
New Contributors
Full Changelog: PyCQA/bandit@1.8.5...1.8.6
v1.8.5Compare Source
What's Changed
Full Changelog: PyCQA/bandit@1.8.4...1.8.5
psf/black (black)
v25.12.0Compare Source
Highlights
Stable style
# fmt: off/# fmt: onblocks were incorrectlyremoved, particularly affecting Jupytext's
# %% [markdown]comments (#4845)# fmt: skipcomments are used in a multi-part if-clause, onstring literals, or on dictionary entries with long lines (#4872)
fmt:directives aren't on the top level (#4856)Preview style
fmt: skipskipping the line after instead of the line it's on (#4855)magic trailing commas and intentional multiline formatting (#4865)
fix_fmt_skip_in_one_linerscrashing onwithstatements (#4853)fix_fmt_skip_in_one_linerscrashing on annotated parameters (#4854)# fmt: skipon them (#4894)Packaging
Integrations
output-fileinput to GitHub Actionpsf/blackto write formatter output to afile for artifact capture and log cleanliness (#4824)
v25.11.0Compare Source
Highlights
Stable style
# fmt: offand# fmt: onwere reformatted (#4811)being normalized (#4811)
Preview style
multiline_string_handlingfrom--unstableto--preview(#4760)comments (#4764)
# type: <value>(#4645)fix_fmt_skip_in_one_linerspreview feature to respect# fmt: skipfor compoundstatements with semicolon-separated bodies (#4800)
Configuration
no_cacheoption to control caching behavior. (#4803)Packaging
Output
(#4610)
Blackd
requests to blackd (#4774)
Integrations
psf/blackto support therequired-versionmajor-version-only"stability" format when using pyproject.toml (#4770)
v25.9.0Compare Source
Highlights
await/asyncas soft keywords/variable names(#4676)
Stable style
delstatement containing tuples (#4628)withstatements (#4630)
# fmt: skipfollowed by a comment at the end of file (#4635)asclause of awithstatement (#4634)withstatement (#4646)\followed by a\rfollowed by a comment (#4663)\\r\n(#4673)await ...(where...is a literalEllipsis) (#4676)(#4670)
Preview style
# fmt: skipwould stillbe formatted (#4552)
multiline_string_handlingwith ternaries and dictionaries (#4657)string_processingwould not split f-strings directly afterexpressions (#4680)
inclause of comprehensions across lines if necessary (#4699)exceptandexcept*withoutas. (#4720)\rstyle newlines to the potential newlines to normalize file newlines both fromand to (#4710)
Parser
parameter bounds and defaults. (#4602)
Performance
Integrations
psf/blackto read Black version from an additional section inpyproject.toml:
[project.dependency-groups](#4606)Documentation
boto/boto3 (boto3)
v1.42.16Compare Source
=======
endpoint-rules: [botocore] Update endpoint-rules client to latest versiongeo-places: [botocore] Adds support for InferredSecondaryAddress place type, Designator in SecondaryAddressComponent and Heading in ReverseGeocode.pinpoint-sms-voice-v2: [botocore] This release adds support for the Registration Reviewer feature, which provides generative AI feedback on a phone number or sender ID registration to ensure completeness before sending to downstream (carrier) review.s3: [botocore] Add additional validation to Outpost bucket names.v1.42.15Compare Source
=======
config: [botocore] Added supported resourceTypes for Config from July to November 2025ec2: [botocore] Adds support for linkedGroupId on the CreatePlacementGroup and DescribePlacementGroups APIs. The linkedGroupId parameter is reserved for future use.guardduty: [botocore] Make accountIds a required field in GetRemainingFreeTrialDays API to reflect service behavior.pcs: [botocore] Change API Reference Documentation for default Mode in Accounting and SlurmRestv1.42.14Compare Source
=======
arc-region-switch: [botocore] Automatic Plan Execution Reports allow customers to maintain a concise record of their Region switch Plan executions. This enables customer SREs and leadership to have a clear view of their recovery posture based on the generated reports for their Plan executions.connect: [botocore] Adding support for Custom Metrics and Pre-Defined Attributes to GetCurrentMetricData API.emr-serverless: [botocore] Added JobLevelCostAllocationConfiguration field to enable cost allocation reporting at the job level, providing more granular visibility into EMR Serverless chargesendpoint-rules: [botocore] Update endpoint-rules client to latest versioniot: [botocore] This release adds event-based logging feature that enables granular event logging controls for AWS IoT logs.qbusiness: [botocore] It is a internal bug fix for region expansionwickr: [botocore] AWS Wickr now provides a suite of admin APIs to allow you to programmatically manage secure communication for Wickr networks at scale. These APIs enable you to automate administrative workflows including user lifecycle management, network configuration, and security group administration.workspaces-web: [botocore] Add support for WebAuthn under user settings.v1.42.13Compare Source
=======
appstream: [botocore] Added support for new operating systems (1) Ubuntu 24.04 Pro LTS on Elastic fleets, and (2) Microsoft Server 2025 on Always-On and On-Demand fleetsarc-region-switch: [botocore] New API to list Route 53 health checks created by ARC region switch for a plan in a specific AWS Region using the Region switch Regional data plane.artifact: [botocore] Add support for ListReportVersions API for the calling AWS account.bedrock-agentcore-control: [botocore] Feature to support header exchanges between Bedrock AgentCore Gateway Targets and client, along with propagating query parameter to the configured targets.bedrock-data-automation: [botocore] Blueprint Optimization (BPO) is a new Amazon Bedrock Data Automation (BDA) capability that improves blueprint inference accuracy using example content assets and ground truth data. BPO works by generating better instructions for fields in the Blueprint using provided data.cleanrooms: [botocore] Adding support for collaboration change requests requiring an approval workflow. Adding support for change requests that grant or revoke results receiver ability and modifying auto approved change types in an existing collaboration.ec2: [botocore] This release adds AvailabilityZoneId support for CreateFleet, ModifyFleet, DescribeFleets, RequestSpotFleet, ModifySpotFleetRequests and DescribeSpotFleetRequests APIs.ecr: [botocore] Adds support for ECR Create On Pushecs: [botocore] Adding support for Event Windows via a new ECS account setting "fargateEventWindows". When enabled, ECS Fargate will use the configured event window for patching tasks. Introducing "CapacityOptionType" for CreateCapacityProvider API, allowing support for Spot capacity for ECS Managed Instances.endpoint-rules: [botocore] Update endpoint-rules client to latest versioniot: [botocore] This release adds message batching for the IoT Rules Engine HTTP action.opensearch: [botocore] Amazon OpenSearch Service adds support for warm nodes, enabling new multi-tier architecture.sesv2: [botocore] Amazon SES introduces Email Validation feature which checks email addresses for syntax errors, domain validity, and risky addresses to help maintain deliverability and protect sender reputation. SES also adds resource tagging and ABAC support for EmailTemplates and CustomVerificationEmailTemplates.ssm-sap: [botocore] Added "Stopping" for the HANA Database Status.v1.42.12Compare Source
=======
gameliftstreams: [botocore] Added new stream group operation parameters for scale-on-demand capacity with automatic prewarming. Added new Gen6 stream classes based on the EC2 G6 instance family. Added new StartStreamSession parameter for exposure of real-time performance stats to clients.guardduty: [botocore] Add support for dbiResourceId in finding.inspector-scan: [botocore] Adds an additional OutputFormatkafkaconnect: [botocore] Support dual-stack network connectivity for connectors via NetworkType field.mediaconvert: [botocore] Adds support for tile encoding in HEVC and audio for video overlays.mediapackagev2: [botocore] This release adds support for SPEKE V2 content key encryption in MediaPackage v2 Origin Endpoints.payment-cryptography: [botocore] Support for AS2805 standard. Modifications to import-key and export-key to support AS2805 variants.payment-cryptography-data: [botocore] Support for AS2805 standard. New API GenerateAs2805KekValidation and changes to translate pin, GenerateMac and VerifyMac to support AS2805 key variants.sagemaker: [botocore] Adding the newly launched p6-b300.48xlarge ec2 instance support in Sagemaker(Hyperpod,Training and Sceptor)v1.42.11Compare Source
=======
iot: [botocore] Add support for dynamic payloads in IoT Device Management Commandstimestream-influxdb: [botocore] This release adds support for rebooting InfluxDB DbInstances and DbClustersv1.42.10Compare Source
=======
bedrock-agentcore-control: [botocore] This release updates broken links for AgentCore Policy APIs in the AWS CLI and SDK resources.connect: [botocore] Amazon Connect now supports outbound WhatsApp contacts via the Send message block or StartOutboundChatContact API. Send proactive messages for surveys, reminders, and updates. Offer customers the option to switch to WhatsApp while in queue, eliminating hold time.ec2: [botocore] EC2 Capacity Manager now supports SpotTotalCount, SpotTotalInterruptions and SpotInterruptionRate metrics for both vCPU and instance units.endpoint-rules: [botocore] Update endpoint-rules client to latest versionentityresolution: [botocore] Support Customer Profiles Integration for AWS Entity Resolutionglacier: [botocore] Documentation updates for Amazon Glacier's maintenance modehealth: [botocore] Updating Health API endpoint generation for dualstack only regionslogs: [botocore] This release allows you to import your historical CloudTrail Lake data into CloudWatch with a few steps, enabling you to easily consolidate operational, security, and compliance data in one place.mediatailor: [botocore] Added support for Ad Decision Server Configuration enabling HTTP POST requests with custom bodies, headers, GZIP compression, and dynamic variables. No changes required for existing GET request configurations.route53resolver: [botocore] Adds support for enabling detailed metrics on Route 53 Resolver endpoints using RniEnhancedMetricsEnabled and TargetNameServerMetricsEnabled in the CreateResolverEndpoint and UpdateResolverEndpoint APIs, providing enhanced visibility into Resolver endpoint and target name server performance.s3: [botocore] This release adds support for the new optional field 'LifecycleExpirationDate' in S3 Inventory configurations.