Lock file maintenance Python dependencies (16/edge) #1094
Merged
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
renovate
bot
added
the
not bug or enhancement
renovate
bot
requested review from
a team,
dragomirp,
marceloneppel and
taurus-forever
and removed request for
a team
renovate
bot
added
the
not bug or enhancement
![github-actions[bot]](https://avatars.githubusercontent.com/in/15368?s=60&v=4){kind=small}
Codecov Report✅ All modified and coverable lines are covered by tests. ❌ Your project status has failed because the head coverage (67.02%) is below the target coverage (70.00%). You can increase the head coverage or adjust the target coverage. Additional details and impacted files@@ Coverage Diff @@
## 16/edge #1094 +/- ##
========================================
Coverage 67.02% 67.02%
========================================
Files 15 15
Lines 4194 4194
Branches 615 615
========================================
Hits 2811 2811
Misses 1156 1156
Partials 227 227 ☔ View full report in Codecov by Sentry. 🚀 New features to boost your workflow:
|
taurus-forever
approved these changes
Sep 11, 2025
renovate
bot
force-pushed
the
renovate/16/edge-python-dependencies
branch
2 times, most recently
from
f7d834c to
e622f67
Compare
renovate
bot
force-pushed
the
renovate/16/edge-python-dependencies
branch
from
e622f67 to
e74cb75
Compare
dragomirp
approved these changes
Sep 25, 2025
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Coming soon: The Renovate bot (GitHub App) will be renamed to Mend. PRs from Renovate will soon appear from 'Mend'. Learn more here.
This PR contains the following updates:
^1.40.21->^1.40.36^7.10.6->^7.10.7^1.3.0->^1.4.02.1.3->2.2.11.10.22->1.10.23^1.10.22->^1.10.23^1.1.404->^1.1.405^8.4.1->^8.4.2^8.4.1->^8.4.2^0.12.11->^0.13.1🔧 This Pull Request updates lock files to use the latest dependency versions.
Release Notes
boto/boto3 (boto3)
v1.40.36Compare Source
=======
batch: [botocore] Starting in JAN 2026, AWS Batch will change the default AMI for new Amazon ECS compute environments from Amazon Linux 2 to Amazon Linux 2023. We recommend migrating AWS Batch Amazon ECS compute environments to Amazon Linux 2023 to maintain optimal performance and security.eks: [botocore] Adds support for RepairConfig overrides and configurations in EKS Managed Node Groups.imagebuilder: [botocore] Version ARNs are no longer required for the EC2 Image Builder list-image-build-version, list-component-build-version, and list-workflow-build-version APIs. Calling these APIs without the ARN returns all build versions for the given resource type in the requesting account.v1.40.35Compare Source
=======
bedrock-agentcore-control: [botocore] Add tagging and VPC support to AgentCore Runtime, Code Interpreter, and Browser resources. Add support for configuring request headers in Runtime. Fix AgentCore Runtime shape names.config: [botocore] Add UNKNOWN state to RemediationExecutionState and add IN_PROGRESS/EXITED/UNKNOWN states to RemediationExecutionStepState.connect: [botocore] This release adds a persistent connection field to UserPhoneConfig that maintains agent's softphone media connection for faster call connections.kendra-ranking: [botocore] Model whitespace change - no client differencelicense-manager-user-subscriptions: [botocore] Added support for cross-account Active Directories.medialive: [botocore] Add MinBitrate for QVBR mode under H264/H265/AV1 output codec. Add GopBReference, GopNumBFrames, SubGopLength fields under H265 output codec.sms-voice: [botocore] Updated thesms-voiceclient to the latest version. Note: this client is maintained only for backwards compatibility and should not be used for new development. We recommend using thepinpoint-sms-voiceclient for full support and ongoing updates.sqs: [botocore] Update invalid character handling documentation for SQS SendMessage APIv1.40.34Compare Source
=======
bedrock: [botocore] Release includes an increase to the maximum policy build document size, an update to DeleteAutomatedReasoningPolicyBuildWorkflow to add ResourceInUseException, and corrections to UpdateAutomatedReasoningPolicyTestCaseRequest.budgets: [botocore] Added BillingViewHealthStatus Exception which is thrown when a Budget is created or updated with a Billing View that is not in the HEALTHY statuschime-sdk-messaging: [botocore] Amazon Chime SDK Messaging GetMessagingSessionEndpoint API now returns dual-stack WebSocket endpoints supporting IPv4/IPv6.ec2: [botocore] Allowed AMIs adds support for four new parameters - marketplaceProductCodes, deprecationTimeCondition, creationDateCondition and imageNamesv1.40.33Compare Source
=======
ec2: [botocore] Add mac-m4.metal and mac-m4pro.metal instance types.network-firewall: [botocore] Network Firewall now prevents TLS handshakes with the target server until after the Server Name Indication (SNI) has been seen and verified. The monitoring dashboard now provides deeper insights into PrivateLink endpoint candidates and offers filters based on IP addresses and protocol.pcs: [botocore] Add support for Amazon EC2 Capacity Blocks for MLv1.40.32Compare Source
=======
budgets: [botocore] Add support for custom time periods in budget configurationivs-realtime: [botocore] IVS now offers customers the ability to control the positioning of participants in both grid and PiP layouts based on custom attribute values in participant tokens.logs: [botocore] Cloudwatch Logs added support for 2 new API parameters in metric and subscription filter APIs to filter log events based on system field values and emit system field values as dimensions and send them to customer destination as additional metadata.osis: [botocore] Adds support for cross-account ingestion for push-based sources. This includes resource policies for sharing pipelines across accounts and features for managing pipeline endpoints which enable accessing pipelines across different VPCs, including VPCs in other accounts.v1.40.31Compare Source
=======
ce: [botocore] Added endpoint support for eusc-de-east-1 region.medical-imaging: [botocore] Added support for OpenID Connect (OIDC) custom authorizerobservabilityadmin: [botocore] CloudWatch Observability Admin adds the ability to enable telemetry centralization in customers' Organizations. The release introduces new APIs to manage centralization rules, which define settings to replicate telemetry data to a central destination in the customers' Organization.s3control: [botocore] Introduce three new encryption filters: EncryptionType (SSE-S3, SSE-KMS, DSSE-KMS, SSE-C, NOT-SSE), KmsKeyArn (for SSE-KMS and DSSE-KMS), and BucketKeyEnabled (for SSE-KMS).sms: [botocore] The sms client has been removed following the deprecation of the service.v1.40.30Compare Source
=======
payment-cryptography: [botocore] Add support for certificates to be signed by 3rd party certificate authorities. New API GetCertificateSigningRequest API and support for providing certificates at run-time for tr-34 import/exportv1.40.29Compare Source
=======
amp: [botocore] Add Vended Logs APIs for Amazon Prometheus Managed Collectordatazone: [botocore] adding IAM principal id to IAM user profile detailsecs: [botocore] This release supports hook details for Amazon ECS lifecycle hooks.emr-containers: [botocore] Added nodeLabel support in container provider to aid hardware isolation support for virtual cluster and security configuration.evs: [botocore] CreateEnvironment API now supports parameters (isHcxPublic & hcxNetworkAclId) for HCX migration via public internet, adding flexibility for migration scenarios. New APIs have been added for associating (AssociateEipToVlan) & disassociating (DisassociateEipFromVlan) Elastic IP (EIP) addresses.guardduty: [botocore] Updated Java SDK implementation of entity set status in GuardDuty API.medialive: [botocore] AWS Elemental MediaLive adds a new feature in MediaPackage output group that enables MediaPackage V2 users to control HLS-related parameters directly in MediaLive. These parameter settings are then reflected in MediaPackage outputs, providing more streamlined control over HLS configurations.quicksight: [botocore] This release adds support for Account level custom permissions, additional Dashboard Options, and Null support for Q&A.rds: [botocore] Adds support for end-to-end IAM authentication in RDS Proxy for MySQL, MariaDB, and PostgreSQL engines.v1.40.28Compare Source
=======
networkflowmonitor: [botocore] Added new enum value (AWS::Region) for type field under MonitorLocalResource and MonitorRemoteResource. Workload Insights and Monitor top contributors queries now support a new DestinationCategory (INTER_REGION).payment-cryptography: [botocore] AWS Payment Cryptography Service now supports Multi-Region key replication. Customers can choose to automatically distribute keys across AWS Regions.v1.40.27Compare Source
=======
autoscaling: [botocore] Added WaitForTransitioningInstances parameter to the CancelInstanceRefresh API, allowing the caller to cancel an instance refresh without waiting for on-going launches and terminations.cloudwatch: [botocore] Added a new API - DescribeAlarmContributors API, to retrieve alarm contributors in ALARM state. Added support in DescribeAlarmHistory API to query alarm contributor historyconnect: [botocore] SDK release for user defined predefined attributes.datazone: [botocore] Adds support for custom blueprintsmediapackagev2: [botocore] Added CUE tag SCTE output to MediaPackageV2 HLS and LL-HLS manifests.organizations: [botocore] Documentation updates for AWS Organizations APIs.sagemaker: [botocore] Released IPv6 support with dual-stack domain options on SageMaker Studio and introduced support for p6-b200.48xlarge instance type on SageMaker Studio for JupyterLab and CodeEditor applications.v1.40.26Compare Source
=======
iotsitewise: [botocore] Add ComputationModelVersion support in IoT SiteWise APIss3: [botocore] This release includes backward compatibility work on the "Expires" parameter.securityhub: [botocore] This release adds the RESOURCE_NOT_FOUND error code as a possible value in responses to the following operations: BatchGetStandardsControlAssociations, BatchUpdateStandardsControlAssociations, and BatchGetSecurityControls.v1.40.25Compare Source
=======
ecs: [botocore] This is a documentation only release that adds additional information for Amazon ECS Availability Zone rebalancing.pcs: [botocore] Documentation-only update to add AccountingStorageEnforce to SlurmCustomSetting.sagemaker: [botocore] Release IPv6 support with dualstack in SageMaker Notebooks, Tiered Storage Checkpointing Support in SageMaker HyperPod and P5.4xlarge instance type for SageMaker Hosting.v1.40.24Compare Source
=======
cleanrooms: [botocore] Add support for configurable compute sizes for PySpark jobs.cloudformation: [botocore] ListHookResults API now supports retrieving invocation results for all CloudFormation Hooks (previously limited to create change set and Cloud Control operations) with new optional parameters for filtering by Hook status and ARN.ec2: [botocore] Add m8i, m8i-flex and i8ge instance types.opensearchserverless: [botocore] Add support for Federal Information Processing Standards (FIPS) and Federal Risk and Authorization Management Program (FedRAMP) compliancerds: [botocore] Added new EndpointNetworkType and TargetConnectionNetworkType fields in Proxy APIs to support IPv6verifiedpermissions: [botocore] Amazon Verified Permissions / Features : Adds support for datetime and duration attribute values.v1.40.23Compare Source
=======
cleanrooms: [botocore] Added support for adding new data provider members to an existing collaboration.cleanroomsml: [botocore] AWS Clean Rooms ML adds log sanitization for privacy-enhanced error summaries, supports new instance types for custom models providing better performance and lower costs, and deprecates P3-series instances.cloudfront: [botocore] Adding an optional field IpAddressType in CustomOriginConfigmq: [botocore] Add CONFIG_MANAGED as a supported AuthenticationStrategy for Amazon MQ for RabbitMQ brokers. Make username and password optional on broker creation for CONFIG_MANAGED brokers.rds: [botocore] This release adds support for MasterUserAuthenticationType parameter on CreateDBInstance, ModifyDBInstance, CreateDBCluster, and ModifyDBCluster operations.route53: [botocore] Amazon Route 53 now supports the Asia Pacific (New Zealand) Region (ap-southeast-6) for latency records, geoproximity records, and private DNS for Amazon VPCs in that region.route53domains: [botocore] Added new ExtraParams AU_ELIGIBILITY_TYPE, AU_POLICY_REASON, and AU_REGISTRANT_NAMEv1.40.22Compare Source
=======
ec2: [botocore] MaximumEbsAttachments and AttachmentLimitType fields added to DescribeInstanceTypesResponse. G6f, Gr6f, R8i, R8i-flex and p5.4xlarge instance types added to InstanceTypes enum.neptune: [botocore] Removed the deprecated marker from publiclyAccessible parameter from DbInstance, CreateDbInstance and ModifyDbInstance and added relevant usage information for the parameter.notifications: [botocore] Added Org support for notifications: -ListMemberAccountsgets member accounts list,AssociateOrganizationalUnitlinks OU to notification configuration,DisassociateOrganizationalUnitremoves OU from notification configuration,ListOrganizationalUnitsshows OUs configured for notifications.workmail: [botocore] Make RoleArn an optional parameter for the PutEmailMonitoringConfiguration API, and add UnsupportedOperationException to RegisterToWorkMail.nedbat/coveragepy (coverage)
v7.10.7Compare Source
Performance: with branch coverage in large files, generating HTML, JSON, or
LCOV reports could take far too long due to some quadratic behavior when
creating the function and class index pages. This is now fixed, closing
issue 2048_. Thanks to Daniel Diniz for help diagnosing the problem.Most warnings and a few errors now have links to a page in the docs
explaining the specific message. Closes
issue 1921_... _issue 1921: #1921
.. _issue 2048: #2048
.. _changes_7-10-6:
python-poetry/poetry-core (poetry-core)
v2.2.1Compare Source
Fixed
v2.2.0Compare Source
Added
#884).
Changed
[project.license](#870).Fixed
.gitignorewere not included in the distribution (#874).pydantic/pydantic (pydantic)
v1.10.23: 2025-09-13Compare Source
v1.10.23 (2025-09-13)
Full Changelog: pydantic/pydantic@v1.10.22...v1.10.23
RobertCraigie/pyright-python (pyright)
v1.1.405Compare Source
pytest-dev/pytest (pytest)
v8.4.2Compare Source
astral-sh/ruff (ruff)
v0.13.1Compare Source
Released on 2025-09-18.
Preview features
flake8-simplify] Detect unnecessaryNonedefault for additional key expression types (SIM910) (#20343)flake8-use-pathlib] Add fix forPTH123(#20169)flake8-use-pathlib] FixPTH101,PTH104,PTH105,PTH121fixes (#20143)flake8-use-pathlib] MakePTH111fix unsafe because it can change behavior (#20215)pycodestyle] FixE301to only trigger for functions immediately within a class (#19768)refurb] Marksingle-item-membership-testfix as always unsafe (FURB171) (#20279)Bug fixes
flake8-bandit] Fix truthiness: dict-only**displays not truthy forshell(S602,S604,S609) (#20177)flake8-simplify] Fix diagnostic to show correct method name forstr.rsplitcalls (SIM905) (#20459)flynt] Use triple quotes for joined raw strings with newlines (FLY002) (#20197)pyupgrade] Fix false positive when class name is shadowed by local variable (UP008) (#20427)pyupgrade] Prevent infinite loop withI002andUP026(#20327)ruff] Recognize t-strings, generators, and lambdas ininvalid-index-type(RUF016) (#20213)Rule changes
RUF102] Respect rule redirects in invalid rule code detection (#20245)flake8-bugbear] Mark the fix forunreliable-callable-checkas always unsafe (B004) (#20318)ruff] Allow dataclass attribute value instantiation from nested frozen dataclass (RUF009) (#20352)CLI
output-format=sarif(#20300)Documentation
ruff] Addanalyze.string-imports-min-dotsto settings (#20375)Other changes
Contributors
v0.13.0Compare Source
Check out the blog post for a migration
guide and overview of the changes!
Breaking changes
Several rules can now add
from __future__ import annotationsautomaticallyTC001,TC002,TC003,RUF013, andUP037now addfrom __future__ import annotationsas part of their fixes when thelint.future-annotationssetting is enabled. This allows the rules to movemore imports into
TYPE_CHECKINGblocks (TC001,TC002, andTC003),use PEP 604 union syntax on Python versions before 3.10 (
RUF013), andunquote more annotations (
UP037).Full module paths are now used to verify first-party modules
Ruff now checks that the full path to a module exists on disk before
categorizing it as a first-party import. This change makes first-party
import detection more accurate, helping to avoid false positives on local
directories with the same name as a third-party dependency, for example. See
the FAQ
section on import categorization for more details.
Deprecated rules must now be selected by exact rule code
Ruff will no longer activate deprecated rules selected by their group name
or prefix. As noted below, the two remaining deprecated rules were also
removed in this release, so this won't affect any current rules, but it will
still affect any deprecations in the future.
The deprecated macOS configuration directory fallback has been removed
Ruff will no longer look for a user-level configuration file at
~/Library/Application Support/ruff/ruff.tomlon macOS. This feature wasdeprecated in v0.5 in favor of using the XDG
specification
(usually resolving to
~/.config/ruff/ruff.toml), like on Linux. Thefallback and accompanying deprecation warning have now been removed.
Removed Rules
The following rules have been removed:
pandas-df-variable-name(PD901)non-pep604-isinstance(UP038)Stabilization
The following rules have been stabilized and are no longer in preview:
airflow-dag-no-schedule-argument(
AIR002)airflow3-removal(AIR301)airflow3-moved-to-provider(
AIR302)airflow3-suggested-update(
AIR311)airflow3-suggested-to-move-to-provider(
AIR312)long-sleep-not-forever(ASYNC116)f-string-number-format(FURB116)os-symlink(PTH211)generic-not-last-base-class(
PYI059)redundant-none-literal(PYI061)pytest-raises-ambiguous-pattern(
RUF043)unused-unpacked-variable(
RUF059)useless-class-metaclass-type(
UP050)The following behaviors have been stabilized:
assert-raises-exception(B017)now checks for direct calls to
unittest.TestCase.assert_raisesandpytest.raisesinstead ofonly the context manager forms.
missing-trailing-comma(COM812)and
prohibited-trailing-comma(
COM819) now check for trailing commas in PEP 695 type parameter lists.raw-string-in-exception(EM101)now also checks for byte strings in exception messages.
invalid-mock-access(PGH005) nowchecks for
AsyncMockmethods likenot_awaitedin addition to the synchronous variants.useless-import-alias(PLC0414) nolonger applies to
__init__.pyfiles, where it conflicted with one of the suggested fixes forunused-import(F401).bidirectional-unicode(PLE2502) nowalso checks for U+061C (Arabic Letter Mark).
multiple-with-statements(
SIM117) is now marked as always safe.Preview features
pyupgrade] EnableUP043in stub files (#20027)Bug fixes
pyupgrade] ApplyUP008only when the__class__cell exists (#19424)ruff] Fix empty f-string detection inin-empty-collection(RUF060) (#20249)Server
Documentation
pep8-naming] Fix formatting of__all__(N816) (#20301)v0.12.12Compare Source
Release Notes
Preview features
airflow] ConvertDatasetOrTimeSchedule(datasets=...)toAssetOrTimeSchedule(assets=...)(AIR311) (#20202)airflow] Improve theAIR002error message (#20173)airflow] Moveairflow.operators.postgres_operator.MappingfromAIR302toAIR301(#20172)flake8-async] Implementblocking-inputrule (ASYNC250) (#20122)flake8-use-pathlib] MakePTH119andPTH120fixes unsafe because they can change behavior (#20118)pylint] Add U+061C toPLE2502(#20106)ruff] Fix false negative for empty f-strings indequecalls (RUF037) (#20109)Bug fixes
fastapi] Fix false positive for paths with spaces around parameters (FAST003) (#20077)flake8-comprehensions] SkipC417when lambda containsyield/yield from(#20201)perflint] Handle tuples in dictionary comprehensions (PERF403) (#19934)Rule changes
pycodestyle] Preserve return type annotation forParamSpec(E731) (#20108)Documentation
Contributors
Install ruff 0.12.12
Install prebuilt binaries via shell script
Install prebuilt binaries via powershell script
powershell -ExecutionPolicy Bypass -c "irm https://github.com/astral-sh/ruff/releases/download/0.12.12/ruff-installer.ps1 | iex"Download ruff 0.12.12
Configuration
📅 Schedule: Branch creation - Between 01:00 AM and 05:59 AM, only on Tuesday ( * 1-5 * * 2 ) in timezone Etc/UTC, Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.