Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Bump the all-dependencies group in /api with 15 updates #276

Merged
merged 2 commits into from
Oct 2, 2023
Merged

Bump the all-dependencies group in /api with 15 updates #276

merged 2 commits into from
Oct 2, 2023

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Oct 2, 2023

Bumps the all-dependencies group in /api with 15 updates:

Package From To
arrow 1.2.3 1.3.0
boto3 1.28.53 1.28.57
flask 2.3.3 3.0.0
psycopg2-binary 2.9.7 2.9.8
pydantic 2.4.0 2.4.2
urllib3 1.26.16 2.0.6
botocore 1.31.53 1.31.57
charset-normalizer 3.2.0 3.3.0
pydantic-core 2.10.0 2.10.1
s3transfer 0.6.2 0.7.0
werkzeug 2.3.7 3.0.0
coverage 7.3.1 7.3.2
identify 2.5.29 2.5.30
packaging 23.1 23.2
platformdirs 3.10.0 3.11.0

Updates arrow from 1.2.3 to 1.3.0

Release notes

Sourced from arrow's releases.

Version 1.3.0

  • [ADDED] Added official support for Python 3.11 and 3.12.
  • [ADDED] Added dependency on types-python-dateutil to improve Arrow mypy compatibility. PR arrow-py/arrow#1102
  • [FIX] Updates to Italian, Romansh, Hungarian, Finish and Arabic locales.
  • [FIX] Handling parsing of UTC prefix in timezone strings.
  • [CHANGED] Update documentation to improve readability.
  • [CHANGED] Dropped support for Python 3.6 and 3.7, which are end-of-life.
  • [INTERNAL] Migrate from setup.py/Twine to pyproject.toml/Flit for packaging and distribution.
  • [INTERNAL] Adopt .readthedocs.yaml configuration file for continued ReadTheDocs support.
Changelog

Sourced from arrow's changelog.

1.3.0 (2023-09-30)

  • [ADDED] Added official support for Python 3.11 and 3.12.
  • [ADDED] Added dependency on types-python-dateutil to improve Arrow mypy compatibility. PR [#1102](https://github.com/arrow-py/arrow/issues/1102) <https://github.com/arrow-py/arrow/pull/1102>_
  • [FIX] Updates to Italian, Romansh, Hungarian, Finish and Arabic locales.
  • [FIX] Handling parsing of UTC prefix in timezone strings.
  • [CHANGED] Update documentation to improve readability.
  • [CHANGED] Dropped support for Python 3.6 and 3.7, which are end-of-life.
  • [INTERNAL] Migrate from setup.py/Twine to pyproject.toml/Flit for packaging and distribution.
  • [INTERNAL] Adopt .readthedocs.yaml configuration file for continued ReadTheDocs support.
Commits

Updates boto3 from 1.28.53 to 1.28.57

Changelog

Sourced from boto3's changelog.

1.28.57

  • api-change:bedrock-runtime: [botocore] Run Inference: Added support to run the inference on models. Includes set of APIs for running inference in streaming and non-streaming mode.
  • api-change:bedrock: [botocore] Model Invocation logging added to enable or disable logs in customer account. Model listing and description support added. Provisioned Throughput feature added. Custom model support added for creating custom models. Also includes list, and delete functions for custom model.
  • api-change:budgets: [botocore] Update DescribeBudgets and DescribeBudgetNotificationsForAccount MaxResults limit to 1000.
  • api-change:ec2: [botocore] Adds support for Customer Managed Key encryption for Amazon Verified Access resources
  • api-change:iotfleetwise: [botocore] AWS IoT FleetWise now supports encryption through a customer managed AWS KMS key. The PutEncryptionConfiguration and GetEncryptionConfiguration APIs were added.
  • api-change:sagemaker-featurestore-runtime: [botocore] Feature Store supports read/write of records with collection type features.
  • api-change:sagemaker: [botocore] Online store feature groups supports Standard and InMemory tier storage types for low latency storage for real-time data retrieval. The InMemory tier supports collection types List, Set, and Vector.
  • api-change:wafv2: [botocore] Correct and improve the documentation for the FieldToMatch option JA3 fingerprint.

1.28.56

  • api-change:cognito-idp: [botocore] The UserPoolType Status field is no longer used.
  • api-change:firehose: [botocore] Features : Adding support for new data ingestion source to Kinesis Firehose - AWS Managed Services Kafka.
  • api-change:iot: [botocore] Added support for IoT Rules Engine Kafka Action Headers
  • api-change:textract: [botocore] This release adds new feature - Layout to Analyze Document API which can automatically extract layout elements such as titles, paragraphs, headers, section headers, lists, page numbers, footers, table areas, key-value areas and figure areas and order the elements as a human would read.

1.28.55

  • api-change:appintegrations: [botocore] The Amazon AppIntegrations service adds a set of APIs (in preview) to manage third party applications to be used in Amazon Connect agent workspace.
  • api-change:apprunner: [botocore] This release allows an App Runner customer to specify a custom source directory to run the build & start command. This change allows App Runner to support monorepo based repositories
  • api-change:codedeploy: [botocore] CodeDeploy now supports In-place and Blue/Green EC2 deployments with multiple Classic Load Balancers and multiple Target Groups.
  • api-change:connect: [botocore] This release updates a set of Amazon Connect APIs that provides the ability to integrate third party applications in the Amazon Connect agent workspace.
  • api-change:dynamodb: [botocore] Amazon DynamoDB now supports Incremental Export as an enhancement to the existing Export Table
  • api-change:ec2: [botocore] The release includes AWS verified access to support FIPs compliance in North America regions
  • api-change:lakeformation: [botocore] This release adds three new API support "CreateLakeFormationOptIn", "DeleteLakeFormationOptIn" and "ListLakeFormationOptIns", and also updates the corresponding documentation.
  • api-change:pinpoint: [botocore] Update documentation for RemoveAttributes to more accurately reflect its behavior when attributes are deleted.
  • api-change:s3: [botocore] This release adds a new field COMPLETED to the ReplicationStatus Enum. You can now use this field to validate the replication status of S3 objects using the AWS SDK.

1.28.54

  • api-change:amplifyuibuilder: [botocore] Support for generating code that is compatible with future versions of amplify project dependencies.
  • api-change:chime-sdk-media-pipelines: [botocore] Adds support for sending WebRTC audio to Amazon Kineses Video Streams.
  • api-change:emr-serverless: [botocore] This release adds support for application-wide default job configurations.
  • api-change:finspace-data: [botocore] Adding sensitive trait to attributes. Change max SessionDuration from 720 to 60. Correct "ApiAccess" attribute to "apiAccess" to maintain consistency between APIs.
  • api-change:quicksight: [botocore] Added ability to tag users upon creation.
  • api-change:ssm: [botocore] This release updates the enum values for ResourceType in SSM DescribeInstanceInformation input and ConnectionStatus in GetConnectionStatus output.
  • api-change:wafv2: [botocore] You can now perform an exact match against the web request's JA3 fingerprint.
Commits
  • eeadd95 Merge branch 'release-1.28.57'
  • 312cdc9 Bumping version to 1.28.57
  • 9750638 Add changelog entries from botocore
  • 34951e7 Merge pull request #3878 from boto/dependabot/github_actions/actions/checkout...
  • 27b33e0 Bump actions/checkout from 3.5.0 to 4.1.0
  • 1dd9fc0 Fix pins on GHA workflows (#3874)
  • 4d85475 Add dependabot configuration for actions (#3875)
  • a15fb08 Merge branch 'release-1.28.56'
  • 1a7471f Merge branch 'release-1.28.56' into develop
  • 49a9b84 Bumping version to 1.28.56
  • Additional commits viewable in compare view

Updates flask from 2.3.3 to 3.0.0

Release notes

Sourced from flask's releases.

3.0.0

This is a feature release, which includes new features, removes previously deprecated code, and adds new deprecations. The 3.0.x branch is now the supported fix branch, the 2.3.x branch will become a tag marking the end of support for that branch. We encourage everyone to upgrade, and to use a tool such as pip-tools to pin all dependencies and control upgrades. Test with warnings treated as errors to be able to adapt to deprecation warnings early.

Changelog

Sourced from flask's changelog.

Version 3.0.0

Released 2023-09-30

  • Remove previously deprecated code. :pr:5223
  • Deprecate the __version__ attribute. Use feature detection, or importlib.metadata.version("flask"), instead. :issue:5230
  • Restructure the code such that the Flask (app) and Blueprint classes have Sans-IO bases. :pr:5127
  • Allow self as an argument to url_for. :pr:5264
  • Require Werkzeug >= 3.0.0.
Commits
  • 735a470 Release version 3.0.0
  • efe39ae Bump Werkzeug 3.0.0
  • 438edcd Allow self as an argument to url_for
  • b7c1290 Fix wrong spelling of JS method .innerHTML
  • 8037487 Bump pypa/gh-action-pypi-publish from 1.8.8 to 1.8.10 (#5248)
  • e8076d9 Bump slsa-framework/slsa-github-generator from 1.7.0 to 1.9.0 (#5247)
  • ecc4a38 Bump actions/checkout from 3.5.3 to 3.6.0 (#5246)
  • 24c6508 Bump pypa/gh-action-pypi-publish from 1.8.8 to 1.8.10
  • 98cef9f Bump slsa-framework/slsa-github-generator from 1.7.0 to 1.9.0
  • 0c97a41 Bump actions/checkout from 3.5.3 to 3.6.0
  • Additional commits viewable in compare view

Updates psycopg2-binary from 2.9.7 to 2.9.8

Changelog

Sourced from psycopg2-binary's changelog.

Current release

What's new in psycopg 2.9.8 ^^^^^^^^^^^^^^^^^^^^^^^^^^^

  • Wheel package bundled with PostgreSQL 16 libpq in order to add support for recent features, such as sslcertmode.

What's new in psycopg 2.9.7 ^^^^^^^^^^^^^^^^^^^^^^^^^^^

  • Fix propagation of exceptions raised during module initialization (:ticket:[#1598](https://github.com/psycopg/psycopg2/issues/1598)).
  • Fix building when pg_config returns an empty string (:ticket:[#1599](https://github.com/psycopg/psycopg2/issues/1599)).
  • Wheel package bundled with OpenSSL 1.1.1v.

What's new in psycopg 2.9.6 ^^^^^^^^^^^^^^^^^^^^^^^^^^^

  • Package manylinux 2014 for aarch64 and ppc64le platforms, in order to include libpq 15 in the binary package (:ticket:[#1396](https://github.com/psycopg/psycopg2/issues/1396)).
  • Wheel package bundled with OpenSSL 1.1.1t.

What's new in psycopg 2.9.5 ^^^^^^^^^^^^^^^^^^^^^^^^^^^

  • Add support for Python 3.11.
  • Add support for rowcount in MERGE statements in binary packages (:ticket:[#1497](https://github.com/psycopg/psycopg2/issues/1497)).
  • Wheel package bundled with OpenSSL 1.1.1r and PostgreSQL 15 libpq.

What's new in psycopg 2.9.4 ^^^^^^^^^^^^^^^^^^^^^^^^^^^

  • Fix ~psycopg2.extras.register_composite(), ~psycopg2.extras.register_range() with customized :sql:search_path (:ticket:[#1487](https://github.com/psycopg/psycopg2/issues/1487)).
  • Handle correctly composite types with names or in schemas requiring escape.
  • Find pg_service.conf file in the /etc/postgresql-common directory in binary packages (:ticket:[#1365](https://github.com/psycopg/psycopg2/issues/1365)).
  • ~psycopg2.errorcodes map and ~psycopg2.errors classes updated to PostgreSQL 15.
  • Wheel package bundled with OpenSSL 1.1.1q and PostgreSQL 14.4 libpq.

... (truncated)

Commits
  • b39d5d6 chore: bundle libpq 16
  • 921510d docs: replace "compiled against" with "bundled with" in news file
  • 999d7a6 test: skip ssl test if libpq runtime > 16
  • See full diff in compare view

Updates pydantic from 2.4.0 to 2.4.2

Release notes

Sourced from pydantic's releases.

v2.4.2 2023-09-27

What's Changed

Fixes

New Contributors

Full Changelog: pydantic/pydantic@v2.4.1...v2.4.2/

v2.4.1 2023-09-26

What's Changed

Packaging

Fixes

Full Changelog: pydantic/pydantic@v2.4.0...v2.4.1/

Changelog

Sourced from pydantic's changelog.

v2.4.2 (2023-09-27)

GitHub release

What's Changed

Fixes

New Contributors

v2.4.1 (2023-09-26)

GitHub release

What's Changed

Packaging

Fixes

Commits
  • d1634da Prepare relese 2.4.2 (#7671)
  • 0e33bd0 Update Pydantic V1 to 1.10.13 (#7675)
  • 154e679 docs: Mixing of V1/V2 models is not supported in generics (#7663)
  • 7193693 Added small note to use ValidationInfo over FieldValidationInfo. (#7670)
  • 1377c04 Fix xfailed test for generic model signatures (#7658)
  • ea9aa13 Fix models_json_schema for generic models (#7654)
  • 97c0199 Fix json schema generation for recursive models (#7653)
  • 861cfe3 Revert "Fix typo in docs for new private dunder pydantic method names (#7657)...
  • 24e9222 Fix typo in docs for new private dunder pydantic method names (#7657)
  • c04e8e2 Correct allowed formats for datetime.timedelta parsing in docs (#7652)
  • Additional commits viewable in compare view

Updates urllib3 from 1.26.16 to 2.0.6

Release notes

Sourced from urllib3's releases.

2.0.6

  • Added the Cookie header to the list of headers to strip from requests when redirecting to a different host. As before, different headers can be set via Retry.remove_headers_on_redirect. (GHSA-v845-jxx5-vc9f)

2.0.5

  • Allowed pyOpenSSL third-party module without any deprecation warning. #3126
  • Fixed default blocksize of HTTPConnection classes to match high-level classes. Previously was 8KiB, now 16KiB. #3066

2.0.4

  • Added support for union operators to HTTPHeaderDict (#2254)
  • Added BaseHTTPResponse to urllib3.__all__ (#3078)
  • Fixed urllib3.connection.HTTPConnection to raise the http.client.connect audit event to have the same behavior as the standard library HTTP client (#2757)
  • Relied on the standard library for checking hostnames in supported PyPy releases (#3087)

2.0.3

  • Allowed alternative SSL libraries such as LibreSSL, while still issuing a warning as we cannot help users facing issues with implementations other than OpenSSL. #3020
  • Deprecated URLs which don't have an explicit scheme #2950
  • Fixed response decoding with Zstandard when compressed data is made of several frames. #3008
  • Fixed assert_hostname=False to correctly skip hostname check. #3051

2.0.2

  • Fixed HTTPResponse.stream() to continue yielding bytes if buffered decompressed data was still available to be read even if the underlying socket is closed. This prevents a compressed response from being truncated. (urllib3/urllib3#3009)

2.0.1

  • Fixed a socket leak when fingerprint or hostname verifications fail. (#2991)
  • Fixed an error when HTTPResponse.read(0) was the first read call or when the internal response body buffer was otherwise empty. (#2998)

2.0.0

Read the v2.0 migration guide for help upgrading to the latest version of urllib3.

Removed

  • Removed support for Python 2.7, 3.5, and 3.6 (#883, #2336).
  • Removed fallback on certificate commonName in match_hostname() function. This behavior was deprecated in May 2000 in RFC 2818. Instead only subjectAltName is used to verify the hostname by default. To enable verifying the hostname against commonName use SSLContext.hostname_checks_common_name = True (#2113).
  • Removed support for Python with an ssl module compiled with LibreSSL, CiscoSSL, wolfSSL, and all other OpenSSL alternatives. Python is moving to require OpenSSL with PEP 644 (#2168).
  • Removed support for OpenSSL versions earlier than 1.1.1 or that don't have SNI support. When an incompatible OpenSSL version is detected an ImportError is raised (#2168).
  • Removed the list of default ciphers for OpenSSL 1.1.1+ and SecureTransport as their own defaults are already secure (#2082).
  • Removed urllib3.contrib.appengine.AppEngineManager and support for Google App Engine Standard Environment (#2044).
  • Removed deprecated Retry options method_whitelist, DEFAULT_REDIRECT_HEADERS_BLACKLIST (#2086).
  • Removed urllib3.HTTPResponse.from_httplib (#2648).
  • Removed default value of None for the request_context parameter of urllib3.PoolManager.connection_from_pool_key. This change should have no effect on users as the default value of None was an invalid option and was never used (#1897).
  • Removed the urllib3.request module. urllib3.request.RequestMethods has been made a private API. This change was made to ensure that from urllib3 import request imported the top-level request() function instead of the urllib3.request module (#2269).
  • Removed support for SSLv3.0 from the urllib3.contrib.pyopenssl even when support is available from the compiled OpenSSL library (#2233).
  • Removed the deprecated urllib3.contrib.ntlmpool module (#2339).
  • Removed DEFAULT_CIPHERS, HAS_SNI, USE_DEFAULT_SSLCONTEXT_CIPHERS, from the private module urllib3.util.ssl_ (#2168).
  • Removed urllib3.exceptions.SNIMissingWarning (#2168).
  • Removed the _prepare_conn method from HTTPConnectionPool. Previously this was only used to call HTTPSConnection.set_cert() by HTTPSConnectionPool (#1985).
  • Removed tls_in_tls_required property from HTTPSConnection. This is now determined from the scheme parameter in HTTPConnection.set_tunnel() (#1985).

Deprecated

... (truncated)

Changelog

Sourced from urllib3's changelog.

2.0.6 (2023-10-02)

  • Added the Cookie header to the list of headers to strip from requests when redirecting to a different host. As before, different headers can be set via Retry.remove_headers_on_redirect.

2.0.5 (2023-09-20)

  • Allowed pyOpenSSL third-party module without any deprecation warning. ([#3126](https://github.com/urllib3/urllib3/issues/3126) <https://github.com/urllib3/urllib3/issues/3126>__)
  • Fixed default blocksize of HTTPConnection classes to match high-level classes. Previously was 8KiB, now 16KiB. ([#3066](https://github.com/urllib3/urllib3/issues/3066) <https://github.com/urllib3/urllib3/issues/3066>__)

2.0.4 (2023-07-19)

  • Added support for union operators to HTTPHeaderDict ([#2254](https://github.com/urllib3/urllib3/issues/2254) <https://github.com/urllib3/urllib3/issues/2254>__)
  • Added BaseHTTPResponse to urllib3.__all__ ([#3078](https://github.com/urllib3/urllib3/issues/3078) <https://github.com/urllib3/urllib3/issues/3078>__)
  • Fixed urllib3.connection.HTTPConnection to raise the http.client.connect audit event to have the same behavior as the standard library HTTP client ([#2757](https://github.com/urllib3/urllib3/issues/2757) <https://github.com/urllib3/urllib3/issues/2757>__)
  • Relied on the standard library for checking hostnames in supported PyPy releases ([#3087](https://github.com/urllib3/urllib3/issues/3087) <https://github.com/urllib3/urllib3/issues/3087>__)

2.0.3 (2023-06-07)

  • Allowed alternative SSL libraries such as LibreSSL, while still issuing a warning as we cannot help users facing issues with implementations other than OpenSSL. ([#3020](https://github.com/urllib3/urllib3/issues/3020) <https://github.com/urllib3/urllib3/issues/3020>__)
  • Deprecated URLs which don't have an explicit scheme ([#2950](https://github.com/urllib3/urllib3/issues/2950) <https://github.com/urllib3/urllib3/pull/2950>_)
  • Fixed response decoding with Zstandard when compressed data is made of several frames. ([#3008](https://github.com/urllib3/urllib3/issues/3008) <https://github.com/urllib3/urllib3/issues/3008>__)
  • Fixed assert_hostname=False to correctly skip hostname check. ([#3051](https://github.com/urllib3/urllib3/issues/3051) <https://github.com/urllib3/urllib3/issues/3051>__)

2.0.2 (2023-05-03)

  • Fixed HTTPResponse.stream() to continue yielding bytes if buffered decompressed data was still available to be read even if the underlying socket is closed. This prevents a compressed response from being truncated. ([#3009](https://github.com/urllib3/urllib3/issues/3009) <https://github.com/urllib3/urllib3/issues/3009>__)

2.0.1 (2023-04-30)

  • Fixed a socket leak when fingerprint or hostname verifications fail. ([#2991](https://github.com/urllib3/urllib3/issues/2991) <https://github.com/urllib3/urllib3/issues/2991>__)
  • Fixed an error when HTTPResponse.read(0) was the first read call or when the internal response body buffer was otherwise empty. ([#2998](https://github.com/urllib3/urllib3/issues/2998) <https://github.com/urllib3/urllib3/issues/2998>__)

2.0.0 (2023-04-26)

Read the v2.0 migration guide <https://urllib3.readthedocs.io/en/latest/v2-migration-guide.html>__ for help upgrading to the latest version of urllib3.

... (truncated)

Commits

Updates botocore from 1.31.53 to 1.31.57

Changelog

Sourced from botocore's changelog.

1.31.57

  • api-change:bedrock-runtime: Run Inference: Added support to run the inference on models. Includes set of APIs for running inference in streaming and non-streaming mode.
  • api-change:bedrock: Model Invocation logging added to enable or disable logs in customer account. Model listing and description support added. Provisioned Throughput feature added. Custom model support added for creating custom models. Also includes list, and delete functions for custom model.
  • api-change:budgets: Update DescribeBudgets and DescribeBudgetNotificationsForAccount MaxResults limit to 1000.
  • api-change:ec2: Adds support for Customer Managed Key encryption for Amazon Verified Access resources
  • api-change:iotfleetwise: AWS IoT FleetWise now supports encryption through a customer managed AWS KMS key. The PutEncryptionConfiguration and GetEncryptionConfiguration APIs were added.
  • api-change:sagemaker-featurestore-runtime: Feature Store supports read/write of records with collection type features.
  • api-change:sagemaker: Online store feature groups supports Standard and InMemory tier storage types for low latency storage for real-time data retrieval. The InMemory tier supports collection types List, Set, and Vector.
  • api-change:wafv2: Correct and improve the documentation for the FieldToMatch option JA3 fingerprint.

1.31.56

  • api-change:cognito-idp: The UserPoolType Status field is no longer used.
  • api-change:firehose: Features : Adding support for new data ingestion source to Kinesis Firehose - AWS Managed Services Kafka.
  • api-change:iot: Added support for IoT Rules Engine Kafka Action Headers
  • api-change:textract: This release adds new feature - Layout to Analyze Document API which can automatically extract layout elements such as titles, paragraphs, headers, section headers, lists, page numbers, footers, table areas, key-value areas and figure areas and order the elements as a human would read.

1.31.55

  • api-change:appintegrations: The Amazon AppIntegrations service adds a set of APIs (in preview) to manage third party applications to be used in Amazon Connect agent workspace.
  • api-change:apprunner: This release allows an App Runner customer to specify a custom source directory to run the build & start command. This change allows App Runner to support monorepo based repositories
  • api-change:codedeploy: CodeDeploy now supports In-place and Blue/Green EC2 deployments with multiple Classic Load Balancers and multiple Target Groups.
  • api-change:connect: This release updates a set of Amazon Connect APIs that provides the ability to integrate third party applications in the Amazon Connect agent workspace.
  • api-change:dynamodb: Amazon DynamoDB now supports Incremental Export as an enhancement to the existing Export Table
  • api-change:ec2: The release includes AWS verified access to support FIPs compliance in North America regions
  • api-change:lakeformation: This release adds three new API support "CreateLakeFormationOptIn", "DeleteLakeFormationOptIn" and "ListLakeFormationOptIns", and also updates the corresponding documentation.
  • api-change:pinpoint: Update documentation for RemoveAttributes to more accurately reflect its behavior when attributes are deleted.
  • api-change:s3: This release adds a new field COMPLETED to the ReplicationStatus Enum. You can now use this field to validate the replication status of S3 objects using the AWS SDK.

1.31.54

  • api-change:amplifyuibuilder: Support for generating code that is compatible with future versions of amplify project dependencies.
  • api-change:chime-sdk-media-pipelines: Adds support for sending WebRTC audio to Amazon Kineses Video Streams.
  • api-change:emr-serverless: This release adds support for application-wide default job configurations.
  • api-change:finspace-data: Adding sensitive trait to attributes. Change max SessionDuration from 720 to 60. Correct "ApiAccess" attribute to "apiAccess" to maintain consistency between APIs.
  • api-change:quicksight: Added ability to tag users upon creation.
  • api-change:ssm: This release updates the enum values for ResourceType in SSM DescribeInstanceInformation input and ConnectionStatus in GetConnectionStatus output.
  • api-change:wafv2: You can now perform an exact match against the web request's JA3 fingerprint.
Commits
  • 96fd848 Merge branch 'release-1.31.57'
  • 0bb3ef9 Bumping version to 1.31.57
  • efff87a Update to latest partitions and endpoints
  • 730bfe4 Update to latest models
  • c412614 Fix pins and permissions for handle-stale-discussions (#3026)
  • 82e53f2 Merge branch 'release-1.31.56' into develop
  • fd47409 Merge branch 'release-1.31.56'
  • 738033e Bumping version to 1.31.56
  • 68c1fef Update to latest partitions and endpoints
  • 7a7ac6d Update to latest models
  • Additional commits viewable in compare view

Updates charset-normalizer from 3.2.0 to 3.3.0

Release notes

Sourced from charset-normalizer's releases.

Release 3.3.0

3.3.0 (2023-09-30)

Added

  • Allow to execute the CLI (e.g. normalizer) through python -m charset_normalizer.cli or python -m charset_normalizer
  • Support for 9 forgotten encodings that are supported by Python but unlisted in encoding.aliases as they have no alias (#323)

Removed

  • (internal) Redundant utils.is_ascii function and unused function is_private_use_only
  • (internal) charset_normalizer.assets is moved inside charset_normalizer.constant

Changed

  • (internal) Unicode code blocks in constants are updated using the latest v15.0.0 definition to improve detection
  • Optional mypyc compilation upgraded to version 1.5.1 for Python >= 3.8

Fixed

  • Unable to properly sort CharsetMatch when both chaos/noise and coherence were close due to an unreachable condition in __lt__ (#350)
Changelog

Sourced from charset-normalizer's changelog.

3.3.0 (2023-09-30)

Added

  • Allow to execute the CLI (e.g. normalizer) through python -m charset_normalizer.cli or python -m charset_normalizer
  • Support for 9 forgotten encoding that are supported by Python but unlisted in encoding.aliases as they have no alias (#323)

Removed

  • (internal) Redundant utils.is_ascii function and unused function is_private_use_only
  • (internal) charset_normalizer.assets is moved inside charset_normalizer.constant

Changed

  • (internal) Unicode code blocks in constants are updated using the latest v15.0.0 definition to improve detection
  • Optional mypyc compilation upgraded to version 1.5.1 for Python >= 3.7

Fixed

  • Unable to properly sort CharsetMatch when both chaos/noise and coherence were close due to an unreachable condition in __lt__ (#350)
Commits
  • 165211a 🔖 Release 3.3.0 (#353)
  • 5aed9a4 🐛 Fix unreachable code in the sorting algorithm of CharsetMatch (#352)
  • 061a71b ⬆️ Bump actions/checkout from 4.0.0 to 4.1.0 (#348)
  • 88df580 ⬆️ Bump github/codeql-action from 2.21.7 to 2.21.9 (#351)
  • aa0234b ⬆️ Bump pypa/cibuildwheel from 2.15.0 to 2.16.0 (#349)
  • 58f69f7 ⬆️ Bump github/codeql-action from 2.21.5 to 2.21.7 (#345)
  • e7c2d8e ⬆️ Bump docker/setup-qemu-action from 2.2.0 to 3.0.0 (#346)
  • 5abf47f ⬆️ Bump pytest from 7.4.1 to 7.4.2 (#342)
  • 50a138e ⬆️ Bump actions/checkout from 3.6.0 to 4.0.0 (#343)
  • 5da7047 ⬆️ Bump actions/upload-artifact from 3.1.2 to 3.1.3 (#344)
  • Additional commits viewable in compare view

Updates pydantic-core from 2.10.0 to 2.10.1

Release notes

Sourced from pydantic-core's releases.

v2.10.1 2023-09-26

What's Changed

Full Changelog: pydantic/pydantic-core@v2.10.0...v2.10.1

Commits

Updates s3transfer from 0.6.2 to 0.7.0

Changelog

Sourced from s3transfer's changelog.

0.7.0

  • feature:SSE-C: Pass SSECustomer* arguments to CompleteMultipartUpload for upload operations
Commits
  • 9d8dfbd Merge branch 'release-0.7.0'
  • de78b3c Bumping version to 0.7.0
  • 459117c Move change to feature instead of bugfix for backwards compatibility with bot...
  • bafa585 Add changelog for sse-c changes (#275)
  • 0fb0ba2 Add user provided SSE-C arguments to CompleteMultipartUpload call (#274)
  • 3a2c99b Merge branch 'release-0.6.2' into develop
  • See full diff in compare view

Updates werkzeug from 2.3.7 to 3.0.0

Release notes

Sourced from werkzeug's releases.

3.0.0

This is a feature release, which includes new features, removes previously deprecated code, and adds new deprecations. The 3.0.x branch is now the supported fix branch, the 2.3.x branch will become a tag marking the end of support for that branch. We encourage everyone to upgrade, and to use a tool such as pip-tools to pin all dependencies and control upgrades. Test with warnings treated as errors to be able to adapt to deprecation warnings early.

Changelog

Sourced from werkzeug's changelog.

Version 3.0.0

Released 2023-09-30

  • Remove previously deprecated code. :pr:2768
  • Deprecate the __version__ attribute. Use feature detection, or importlib.metadata.version("werkzeug"), instead. :issue:2770
  • generate_password_hash uses scrypt by default. :issue:2769
  • Add the "werkzeug.profiler" item to the WSGI environ dictionary passed to ProfilerMiddleware's filename_format function. It contains the elapsed and time values for the profiled request. :issue:2775
  • Explicitly marked the PathConverter as non path isolating. :pr:2784

Version 2.3.8

Unreleased

Commits
  • aa5088f Release version 3.0.0
  • 6427542 Default the PathConverter (and descendants) to be non part isolating
  • 4820d8c Provide elapsed and timestamp info to filename_format
  • 599993d Bump pypa/gh-action-pypi-publish from 1.8.8 to 1.8.10 (#2780)
  • a2394ed Bump slsa-framework/slsa-github-generator from 1.7.0 to 1.9.0 (#2779)
  • 1efd6f3 Bump actions/checkout from 3.5.3 to 3.6.0 (#2778)
  • 76a5419 Bump pypa/gh-action-pypi-publish from 1.8.8 to 1.8.10
  • ce8cfe7 Bump slsa-framework/slsa-github-generator from 1.7.0 to 1.9.0
  • 2b172cb Bump actions/checkout from 3.5.3 to 3.6.0
  • 3f9c1be Update helpful error message about AirPlay collision on macOS (#2776)
  • Additional commits viewable in compare view

Updates coverage from 7.3.1 to 7.3.2

Changelog

Sourced from coverage's changelog.

Version 7.3.2 — 2023-10-02

  • The coverage lcov command ignored the [report] exclude_lines and [report] exclude_also settings (issue 1684). This is now fixed, thanks Jacqueline Lee <pull 1685_>.

  • Sometimes SQLite will create journal files alongside the coverage.py database files. These are ephemeral, but could be mistakenly included when combining data files. Now they are always ignored, fixing issue 1605_. Thanks to Brad Smith for suggesting fixes and providing detailed debugging.

  • On Python 3.12+, we now disable SQLite writing journal files...

    Description has been truncated

@dependabot
Bump the all-dependencies group in /api with 15 updates
2117912 
Bumps the all-dependencies group in /api with 15 updates:

| Package | From | To |
| --- | --- | --- |
| [arrow](https://github.com/arrow-py/arrow) | `1.2.3` | `1.3.0` |
| [boto3](https://github.com/boto/boto3) | `1.28.53` | `1.28.57` |
| [flask](https://github.com/pallets/flask) | `2.3.3` | `3.0.0` |
| [psycopg2-binary](https://github.com/psycopg/psycopg2) | `2.9.7` | `2.9.8` |
| [pydantic](https://github.com/pydantic/pydantic) | `2.4.0` | `2.4.2` |
| [urllib3](https://github.com/urllib3/urllib3) | `1.26.16` | `2.0.6` |
| [botocore](https://github.com/boto/botocore) | `1.31.53` | `1.31.57` |
| [charset-normalizer](https://github.com/Ousret/charset_normalizer) | `3.2.0` | `3.3.0` |
| [pydantic-core](https://github.com/pydantic/pydantic-core) | `2.10.0` | `2.10.1` |
| [s3transfer](https://github.com/boto/s3transfer) | `0.6.2` | `0.7.0` |
| [werkzeug](https://github.com/pallets/werkzeug) | `2.3.7` | `3.0.0` |
| [coverage](https://github.com/nedbat/coveragepy) | `7.3.1` | `7.3.2` |
| [identify](https://github.com/pre-commit/identify) | `2.5.29` | `2.5.30` |
| [packaging](https://github.com/pypa/packaging) | `23.1` | `23.2` |
| [platformdirs](https://github.com/platformdirs/platformdirs) | `3.10.0` | `3.11.0` |


Updates `arrow` from 1.2.3 to 1.3.0
- [Release notes](https://github.com/arrow-py/arrow/releases)
- [Changelog](https://github.com/arrow-py/arrow/blob/master/CHANGELOG.rst)
- [Commits](arrow-py/arrow@1.2.3...1.3.0)

Updates `boto3` from 1.28.53 to 1.28.57
- [Release notes](https://github.com/boto/boto3/releases)
- [Changelog](https://github.com/boto/boto3/blob/develop/CHANGELOG.rst)
- [Commits](boto/boto3@1.28.53...1.28.57)

Updates `flask` from 2.3.3 to 3.0.0
- [Release notes](https://github.com/pallets/flask/releases)
- [Changelog](https://github.com/pallets/flask/blob/main/CHANGES.rst)
- [Commits](pallets/flask@2.3.3...3.0.0)

Updates `psycopg2-binary` from 2.9.7 to 2.9.8
- [Changelog](https://github.com/psycopg/psycopg2/blob/master/NEWS)
- [Commits](psycopg/psycopg2@2.9.7...2.9.8)

Updates `pydantic` from 2.4.0 to 2.4.2
- [Release notes](https://github.com/pydantic/pydantic/releases)
- [Changelog](https://github.com/pydantic/pydantic/blob/main/HISTORY.md)
- [Commits](pydantic/pydantic@v2.4.0...v2.4.2)

Updates `urllib3` from 1.26.16 to 2.0.6
- [Release notes](https://github.com/urllib3/urllib3/releases)
- [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst)
- [Commits](urllib3/urllib3@1.26.16...2.0.6)

Updates `botocore` from 1.31.53 to 1.31.57
- [Changelog](https://github.com/boto/botocore/blob/develop/CHANGELOG.rst)
- [Commits](boto/botocore@1.31.53...1.31.57)

Updates `charset-normalizer` from 3.2.0 to 3.3.0
- [Release notes](https://github.com/Ousret/charset_normalizer/releases)
- [Changelog](https://github.com/Ousret/charset_normalizer/blob/master/CHANGELOG.md)
- [Commits](jawah/charset_normalizer@3.2.0...3.3.0)

Updates `pydantic-core` from 2.10.0 to 2.10.1
- [Release notes](https://github.com/pydantic/pydantic-core/releases)
- [Commits](pydantic/pydantic-core@v2.10.0...v2.10.1)

Updates `s3transfer` from 0.6.2 to 0.7.0
- [Changelog](https://github.com/boto/s3transfer/blob/develop/CHANGELOG.rst)
- [Commits](boto/s3transfer@0.6.2...0.7.0)

Updates `werkzeug` from 2.3.7 to 3.0.0
- [Release notes](https://github.com/pallets/werkzeug/releases)
- [Changelog](https://github.com/pallets/werkzeug/blob/main/CHANGES.rst)
- [Commits](pallets/werkzeug@2.3.7...3.0.0)

Updates `coverage` from 7.3.1 to 7.3.2
- [Release notes](https://github.com/nedbat/coveragepy/releases)
- [Changelog](https://github.com/nedbat/coveragepy/blob/master/CHANGES.rst)
- [Commits](nedbat/coveragepy@7.3.1...7.3.2)

Updates `identify` from 2.5.29 to 2.5.30
- [Commits](pre-commit/identify@v2.5.29...v2.5.30)

Updates `packaging` from 23.1 to 23.2
- [Release notes](https://github.com/pypa/packaging/releases)
- [Changelog](https://github.com/pypa/packaging/blob/main/CHANGELOG.rst)
- [Commits](pypa/packaging@23.1...23.2)

Updates `platformdirs` from 3.10.0 to 3.11.0
- [Release notes](https://github.com/platformdirs/platformdirs/releases)
- [Changelog](https://github.com/platformdirs/platformdirs/blob/main/CHANGES.rst)
- [Commits](tox-dev/platformdirs@3.10.0...3.11.0)

---
updated-dependencies:
- dependency-name: arrow
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: boto3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: flask
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all-dependencies
- dependency-name: psycopg2-binary
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: pydantic
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: urllib3
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all-dependencies
- dependency-name: botocore
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: charset-normalizer
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: pydantic-core
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: s3transfer
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: werkzeug
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all-dependencies
- dependency-name: coverage
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: identify
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: packaging
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: platformdirs
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Oct 2, 2023
kdeal
kdeal reviewed Oct 2, 2023
View reviewed changes
api/requirements-dev.txt Outdated Show resolved Hide resolved
api/requirements.txt Outdated Show resolved Hide resolved
@ykdeal
Downgrade urllib3 to < 2.x
9fd9dbc 
> 2.x conflicts with the requirements of boto
@kdeal kdeal merged commit ef09df6 into master Oct 2, 2023
3 checks passed
@kdeal kdeal deleted the dependabot/pip/api/all-dependencies-53f5a9359e branch October 2, 2023 18:59
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@kdeal kdeal kdeal approved these changes

Assignees
No one assigned
Labels
dependencies Pull requests that update a dependency file python Pull requests that update Python code
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
2 participants
@kdeal @ykdeal