Skip to content

Bump the pip-deps group across 1 directory with 9 updates - #359

Closed
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/pip/pip-deps-f5622a42bb
Closed

Bump the pip-deps group across 1 directory with 9 updates#359
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/pip/pip-deps-f5622a42bb

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github May 4, 2026

Copy link
Copy Markdown
Contributor

Updates the requirements on setuptools, boto3, botocore, asf-search, cfn-lint, ruff, moto, mypy and pytest to permit the latest version.
Updates setuptools to 82.0.1

Changelog

Sourced from setuptools's changelog.

v82.0.1

Bugfixes

  • Fix the loading of launcher manifest.xml file. (#5047)
  • Replaced deprecated json.__version__ with fixture in tests. (#5186)

Improved Documentation

  • Add advice about how to improve predictability when installing sdists. (#5168)

Misc

v82.0.0

Deprecations and Removals

  • pkg_resources has been removed from Setuptools. Most common uses of pkg_resources have been superseded by the importlib.resources <https://docs.python.org/3/library/importlib.resources.html>_ and importlib.metadata <https://docs.python.org/3/library/importlib.metadata.html>_ projects. Projects and environments relying on pkg_resources for namespace packages or other behavior should depend on older versions of setuptools. (#3085)

v81.0.0

Deprecations and Removals

  • Removed support for the --dry-run parameter to setup.py. This one feature by its nature threads through lots of core and ancillary functionality, adding complexity and friction. Removal of this parameter will help decouple the compiler functionality from distutils and thus the eventual full integration of distutils. These changes do affect some class and function signatures, so any derivative functionality may require some compatibility shims to support their expected interface. Please report any issues to the Setuptools project for investigation. (#4872)

v80.10.2

Bugfixes

  • Update vendored dependencies. (#5159)

Misc

... (truncated)

Commits
  • 5a13876 Bump version: 82.0.0 → 82.0.1
  • 51ab8f1 Avoid using (deprecated) 'json.version' in tests (#5194)
  • f9c37b2 Docs/CI: Fix intersphinx references (#5195)
  • 8173db2 Docs: Fix intersphinx references
  • 09bafbc Fix past tense on newsfragment
  • 461ea56 Add news fragment
  • c4ffe53 Avoid using (deprecated) 'json.version' in tests
  • 749258b Cleanup pkg_resources dependencies and configuration (#5175)
  • 2019c16 Parse ext-module.define-macros from pyproject.toml as list of tuples (#5169)
  • b809c86 Sync setuptools schema with validate-pyproject (#5157)
  • Additional commits viewable in compare view

Updates boto3 from 1.42.80 to 1.43.3

Commits
  • bea693c Merge branch 'release-1.43.3'
  • 1f57fdc Bumping version to 1.43.3
  • ba69bd2 Add changelog entries from botocore
  • 7dc336e Merge branch 'release-1.43.2'
  • e240af8 Merge branch 'release-1.43.2' into develop
  • 99fd421 Bumping version to 1.43.2
  • 80f4db8 Add changelog entries from botocore
  • be6bdf3 Bump pytest from 8.1.1 to 9.0.3 (#4782)
  • 753bcab Merge branch 'release-1.43.1'
  • 09f56f4 Merge branch 'release-1.43.1' into develop
  • Additional commits viewable in compare view

Updates botocore from 1.42.80 to 1.43.3

Commits
  • f687cc7 Merge branch 'release-1.43.3'
  • 847cf77 Bumping version to 1.43.3
  • b20a3c1 Update to latest models
  • b8db539 Implement updated retry behavior gated behind opt-in environment variable (#3...
  • 6338dda Merge branch 'release-1.43.2'
  • c139d1b Merge branch 'release-1.43.2' into develop
  • 6a8a47b Bumping version to 1.43.2
  • 0f4537b Update endpoints model
  • e018979 Update to latest models
  • 48efef7 Bump pytest from 8.1.1 to 9.0.3 (#3696)
  • Additional commits viewable in compare view

Updates asf-search from 12.0.6 to 12.1.0

Release notes

Sourced from asf-search's releases.

v12.1.0

v12.1.0

Added

  • Add Stack class, used to create stacks of Pair objects. This is a foundational class, which will be used by a near-future SBASNetwork class to automate the creation of connected, multi-annual seasonal SBAS stacks of interferograms.
    • For usage examples, see examples/Stack.ipynb
  • OPERA_L3_DIST-ALERT-S1_V1 shortname/collections added
  • Add NISAR_EA shortname/collections to NISAR dataset (available to authorized users)

v12.0.7

v12.0.7

Added

Changelog

Sourced from asf-search's changelog.

v12.1.0

Added

  • Add Stack class, used to create stacks of Pair objects. This is a foundational class, which will be used by a near-future SBASNetwork class to automate the creation of connected, multi-annual seasonal SBAS stacks of interferograms.
    • For usage examples, see examples/Stack.ipynb
  • OPERA_L3_DIST-ALERT-S1_V1 shortname/collections added
  • Add NISAR_EA shortname/collections to NISAR dataset (available to authorized users)

v12.0.7

Added


Commits
  • fbb0d9e Merge branch 'stable' into master
  • 462161e Merge pull request #447 from asfadmin/feat-nisar-ea-collections
  • 58c7afb Merge branch 'master' into feat-nisar-ea-collections
  • 6fd8a34 chore: update changelog. Bump to minor release
  • 920719c Merge pull request #410 from asfadmin/feature/stack_class
  • 00d8b7d Merge branch 'master' into feature/stack_class
  • 4e544f6 feat: NISAR EA collections added
  • 495f73a Stack._find_connected_substacks return a List[List[Pair]]
  • 39aa0e9 Merge pull request #446 from asfadmin/fix-dist-alert
  • a0fbf25 chore: update changelog
  • Additional commits viewable in compare view

Updates cfn-lint from 1.48.0 to 1.50.1

Release notes

Sourced from cfn-lint's releases.

Release v1.50.1

What's Changed

Full Changelog: aws-cloudformation/cfn-lint@v1.50.0...v1.50.1

Release v1.50.0

What's Changed

Full Changelog: aws-cloudformation/cfn-lint@v1.49.3...v1.50.0

Release v1.49.3

What's Changed

Full Changelog: aws-cloudformation/cfn-lint@v1.49.2...v1.49.3

Release v1.49.2

What's Changed

Full Changelog: aws-cloudformation/cfn-lint@v1.49.1...v1.49.2

Release v1.49.1

What's Changed

Full Changelog: aws-cloudformation/cfn-lint@v1.49.0...v1.49.1

Release v1.49.0

What's Changed

... (truncated)

Changelog

Sourced from cfn-lint's changelog.

v1.50.1

What's Changed

Full Changelog: aws-cloudformation/cfn-lint@v1.50.0...v1.50.1

v1.50.0

What's Changed

Full Changelog: aws-cloudformation/cfn-lint@v1.49.3...v1.50.0

v1.49.3

What's Changed

Full Changelog: aws-cloudformation/cfn-lint@v1.49.2...v1.49.3

v1.49.2

What's Changed

Full Changelog: aws-cloudformation/cfn-lint@v1.49.1...v1.49.2

v1.49.1

What's Changed

Full Changelog: aws-cloudformation/cfn-lint@v1.49.0...v1.49.1

v1.49.0

What's Changed

... (truncated)

Commits

Updates ruff from 0.15.8 to 0.15.12

Release notes

Sourced from ruff's releases.

0.15.12

Release Notes

Released on 2026-04-24.

Preview features

  • Implement #ruff:file-ignore file-level suppressions (#23599)
  • Implement #ruff:ignore logical-line suppressions (#23404)
  • Revert preview changes to displayed diagnostic severity in LSP (#24789)
  • [airflow] Implement task-branch-as-short-circuit (AIR004) (#23579)
  • [flake8-bugbear] Fix break/continue handling in loop-iterator-mutation (B909) (#24440)
  • [pylint] Fix PLC2701 for type parameter scopes (#24576)

Rule changes

  • [pandas-vet] Suggest .array as well in PD011 (#24805)

CLI

  • Respect default Unix permissions for cache files (#24794)

Documentation

  • [pylint] Fix PLR0124 description not to claim self-comparison always returns the same value (#24749)
  • [pyupgrade] Expand docs on reusable TypeVars and scoping (UP046) (#24153)
  • Improve rules table accessibility (#24711)

Contributors

Install ruff 0.15.12

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/ruff/releases/download/0.15.12/ruff-installer.sh | sh

... (truncated)

Changelog

Sourced from ruff's changelog.

0.15.12

Released on 2026-04-24.

Preview features

  • Implement #ruff:file-ignore file-level suppressions (#23599)
  • Implement #ruff:ignore logical-line suppressions (#23404)
  • Revert preview changes to displayed diagnostic severity in LSP (#24789)
  • [airflow] Implement task-branch-as-short-circuit (AIR004) (#23579)
  • [flake8-bugbear] Fix break/continue handling in loop-iterator-mutation (B909) (#24440)
  • [pylint] Fix PLC2701 for type parameter scopes (#24576)

Rule changes

  • [pandas-vet] Suggest .array as well in PD011 (#24805)

CLI

  • Respect default Unix permissions for cache files (#24794)

Documentation

  • [pylint] Fix PLR0124 description not to claim self-comparison always returns the same value (#24749)
  • [pyupgrade] Expand docs on reusable TypeVars and scoping (UP046) (#24153)
  • Improve rules table accessibility (#24711)

Contributors

0.15.11

Released on 2026-04-16.

Preview features

  • [ruff] Ignore RUF029 when function is decorated with asynccontextmanager (#24642)
  • [airflow] Implement airflow-xcom-pull-in-template-string (AIR201) (#23583)
  • [flake8-bandit] Fix S103 false positives and negatives in mask analysis (#24424)

... (truncated)

Commits
  • 66f93cf Bump 0.15.12 (#24815)
  • 476a4d0 [ty] Complete support for more detailed diagnostics on possibly unbound error...
  • ed669ea Implement #ruff:file-ignore file-level suppressions (#23599)
  • e73d952 [ty] Include inferred type in invalid-key concise diagnostic for union/inte...
  • 80feb29 [ty] report only dead annotation-only locals as unused (#24811)
  • 0fbf2bc Drop deprecated license classifier (#24808)
  • 43b174c [ty] Infer lambda parameter types with Callable type context (#24317)
  • 4f449ae [ty] Add error context for intersection types (#24772)
  • 5b4e753 [ty] Add support for goto in literal enum member inlay hint (#24792)
  • e7cc762 [ty] Add error context for TypedDict assignments (#24790)
  • Additional commits viewable in compare view

Updates moto from 5.1.22 to 5.2.0

Changelog

Sourced from moto's changelog.

5.2.0

Docker Digest for 5.2.0: sha256:d8d063e3e704d256cbe8165072fa273c17698be91311e49fc602b7716f459bea

General:
    * Drops support for Python 3.9
    * Lambda Containers now configure the AWS_ENDPOINT_URL, automatically intercepting requests to other AWS services

New Services:
* Bedrock-AgentCore-Control:
* create_agent_runtime()
* create_agent_runtime_endpoint()
* create_gateway()
* create_gateway_target()
* create_memory()
* delete_agent_runtime()
* delete_agent_runtime_endpoint()
* delete_gateway()
* delete_gateway_target()
* delete_memory()
* get_agent_runtime()
* get_agent_runtime_endpoint()
* get_gateway()
* get_gateway_target()
* get_memory()
* list_agent_runtimes()
* list_agent_runtime_endpoints()
* list_agent_runtime_versions()
* list_gateways()
* list_gateway_targets()
* list_memories()
* list_tags_for_resource()
* tag_resource()
* update_agent_runtime()
* update_agent_runtime_endpoint()
* update_gateway()
* update_gateway_target()
* untag_resource()

* Bedrock-Runtime:
    * invoke_model()
  • FIS:
    • create_experiment_template()
    • delete_experiment_template()
    • list_tags_for_resource()
    • tag_resource()
    • untag_resource()

New Methods:

... (truncated)

Commits

Updates mypy from 1.20.0 to 1.20.2

Changelog

Sourced from mypy's changelog.

Mypy 1.20.2

  • Use WAL with SQLite cache and fix close (Shantanu, PR 21154)
  • Adjust SQLite journal mode (Ivan Levkivskyi, PR 21217)
  • Correctly aggregate narrowing information on parent expressions (Shantanu, PR 21206)
  • Fix regression related to generic callables (Shantanu, PR 21208)
  • Fix regression by avoiding widening types in some contexts (Shantanu, PR 21242)
  • Fix slicing in non-strict optional mode (Shantanu, PR 21282)
  • mypyc: Fix match statement semantics for "or" pattern (Shantanu, PR 21156)
  • mypyc: Fix issue with module dunder attributes (Piotr Sawicki, PR 21275)
  • Initial support for Python 3.15.0a8 (Marc Mueller, PR 21255)

Acknowledgements

Thanks to all mypy contributors who contributed to this release:

  • A5rocks
  • Aaron Wieczorek
  • Adam Turner
  • Ali Hamdan
  • asce
  • BobTheBuidler
  • Brent Westbrook
  • Brian Schubert
  • bzoracler
  • Chris Burroughs
  • Christoph Tyralla
  • Colin Watson
  • Donghoon Nam
  • E. M. Bray
  • Emma Smith
  • Ethan Sarp
  • George Ogden
  • getzze
  • grayjk
  • Gregor Riepl
  • Ivan Levkivskyi
  • James Hilliard
  • James Le Cuirot
  • Jeremy Nimmer
  • Joren Hammudoglu
  • Kai (Kazuya Ito)
  • kaushal trivedi
  • Kevin Kannammalil
  • Lukas Geiger
  • Łukasz Langa
  • Marc Mueller
  • Michael R. Crusoe
  • michaelm-openai
  • Neil Schemenauer
  • Piotr Sawicki

... (truncated)

Commits

Updates pytest from 9.0.2 to 9.0.3

Release notes

Sourced from pytest's releases.

9.0.3

pytest 9.0.3 (2026-04-07)

Bug fixes

  • #12444: Fixed pytest.approx which now correctly takes into account ~collections.abc.Mapping keys order to compare them.

  • #13634: Blocking a conftest.py file using the -p no: option is now explicitly disallowed.

    Previously this resulted in an internal assertion failure during plugin loading.

    Pytest now raises a clear UsageError explaining that conftest files are not plugins and cannot be disabled via -p.

  • #13734: Fixed crash when a test raises an exceptiongroup with __tracebackhide__ = True.

  • #14195: Fixed an issue where non-string messages passed to unittest.TestCase.subTest() were not printed.

  • #14343: Fixed use of insecure temporary directory (CVE-2025-71176).

Improved documentation

  • #13388: Clarified documentation for -p vs PYTEST_PLUGINS plugin loading and fixed an incorrect -p example.
  • #13731: Clarified that capture fixtures (e.g. capsys and capfd) take precedence over the -s / --capture=no command-line options in Accessing captured output from a test function <accessing-captured-output>.
  • #14088: Clarified that the default pytest_collection hook sets session.items before it calls pytest_collection_finish, not after.
  • #14255: TOML integer log levels must be quoted: Updating reference documentation.

Contributor-facing changes

  • #12689: The test reports are now published to Codecov from GitHub Actions. The test statistics is visible on the web interface.

    -- by aleguy02

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Updates the requirements on [setuptools](https://github.com/pypa/setuptools), [boto3](https://github.com/boto/boto3), [botocore](https://github.com/boto/botocore), [asf-search](https://github.com/asfadmin/Discovery-asf_search), [cfn-lint](https://github.com/aws-cloudformation/cfn-lint), [ruff](https://github.com/astral-sh/ruff), [moto](https://github.com/getmoto/moto), [mypy](https://github.com/python/mypy) and [pytest](https://github.com/pytest-dev/pytest) to permit the latest version.

Updates `setuptools` to 82.0.1
- [Release notes](https://github.com/pypa/setuptools/releases)
- [Changelog](https://github.com/pypa/setuptools/blob/main/NEWS.rst)
- [Commits](pypa/setuptools@v80.0.0...v82.0.1)

Updates `boto3` from 1.42.80 to 1.43.3
- [Release notes](https://github.com/boto/boto3/releases)
- [Commits](boto/boto3@1.42.80...1.43.3)

Updates `botocore` from 1.42.80 to 1.43.3
- [Commits](boto/botocore@1.42.80...1.43.3)

Updates `asf-search` from 12.0.6 to 12.1.0
- [Release notes](https://github.com/asfadmin/Discovery-asf_search/releases)
- [Changelog](https://github.com/asfadmin/Discovery-asf_search/blob/master/CHANGELOG.md)
- [Commits](asfadmin/Discovery-asf_search@v12.0.6...v12.1.0)

Updates `cfn-lint` from 1.48.0 to 1.50.1
- [Release notes](https://github.com/aws-cloudformation/cfn-lint/releases)
- [Changelog](https://github.com/aws-cloudformation/cfn-lint/blob/main/CHANGELOG.md)
- [Commits](aws-cloudformation/cfn-lint@v1.48.0...v1.50.1)

Updates `ruff` from 0.15.8 to 0.15.12
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.15.8...0.15.12)

Updates `moto` from 5.1.22 to 5.2.0
- [Release notes](https://github.com/getmoto/moto/releases)
- [Changelog](https://github.com/getmoto/moto/blob/master/CHANGELOG.md)
- [Commits](getmoto/moto@5.1.22...5.2.0)

Updates `mypy` from 1.20.0 to 1.20.2
- [Changelog](https://github.com/python/mypy/blob/master/CHANGELOG.md)
- [Commits](python/mypy@v1.20.0...v1.20.2)

Updates `pytest` from 9.0.2 to 9.0.3
- [Release notes](https://github.com/pytest-dev/pytest/releases)
- [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst)
- [Commits](pytest-dev/pytest@9.0.2...9.0.3)

---
updated-dependencies:
- dependency-name: setuptools
  dependency-version: 82.0.1
  dependency-type: direct:development
  dependency-group: pip-deps
- dependency-name: boto3
  dependency-version: 1.43.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pip-deps
- dependency-name: botocore
  dependency-version: 1.43.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pip-deps
- dependency-name: asf-search
  dependency-version: 12.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pip-deps
- dependency-name: cfn-lint
  dependency-version: 1.50.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pip-deps
- dependency-name: ruff
  dependency-version: 0.15.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: pip-deps
- dependency-name: moto
  dependency-version: 5.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pip-deps
- dependency-name: mypy
  dependency-version: 1.20.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: pip-deps
- dependency-name: pytest
  dependency-version: 9.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: pip-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added bumpless Changes to documentation, CI/CD pipelines, etc that don't affect the project's version major Bump the major version number of this project labels May 4, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner May 4, 2026 22:34
@dependabot dependabot Bot added bumpless Changes to documentation, CI/CD pipelines, etc that don't affect the project's version major Bump the major version number of this project labels May 4, 2026
@dependabot @github

dependabot Bot commented on behalf of github May 12, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this May 12, 2026
@dependabot
dependabot Bot deleted the dependabot/pip/pip-deps-f5622a42bb branch May 12, 2026 01:10
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

bumpless Changes to documentation, CI/CD pipelines, etc that don't affect the project's version major Bump the major version number of this project

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants