Skip to content

chore(deps): bump the python group with 4 updates #617

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Merged
sjakthol merged 1 commit into from
Dec 8, 2025
Merged

chore(deps): bump the python group with 4 updates #617

sjakthol merged 1 commit into from
Dec 8, 2025

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Dec 7, 2025

Bumps the python group with 4 updates: boto3, ruff, botocore and s3transfer.

Updates boto3 from 1.41.5 to 1.42.4

Commits
  • 87d85be Merge branch 'release-1.42.4'
  • 2ed62e3 Bumping version to 1.42.4
  • 7df80a3 Add changelog entries from botocore
  • 3471175 Merge branch 'release-1.42.3'
  • dfb22ff Merge branch 'release-1.42.3' into develop
  • 2e3d125 Bumping version to 1.42.3
  • 04ebd3c Add changelog entries from botocore
  • cc95ab6 Merge branch 'release-1.42.2'
  • 743b8e4 Merge branch 'release-1.42.2' into develop
  • 8f7ba80 Bumping version to 1.42.2
  • Additional commits viewable in compare view

Updates ruff from 0.14.7 to 0.14.8

Release notes

Sourced from ruff's releases.

0.14.8

Release Notes

Released on 2025-12-04.

Preview features

  • [flake8-bugbear] Catch yield expressions within other statements (B901) (#21200)
  • [flake8-use-pathlib] Mark fixes unsafe for return type changes (PTH104, PTH105, PTH109, PTH115) (#21440)

Bug fixes

  • Fix syntax error false positives for await outside functions (#21763)
  • [flake8-simplify] Fix truthiness assumption for non-iterable arguments in tuple/list/set calls (SIM222, SIM223) (#21479)

Documentation

  • Suggest using --output-file option in GitLab integration (#21706)

Other changes

  • [syntax-error] Default type parameter followed by non-default type parameter (#21657)

Contributors

Install ruff 0.14.8

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://github.com/astral-sh/ruff/releases/download/0.14.8/ruff-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://github.com/astral-sh/ruff/releases/download/0.14.8/ruff-installer.ps1 | iex"

Download ruff 0.14.8

File Platform Checksum
ruff-aarch64-apple-darwin.tar.gz Apple Silicon macOS checksum
ruff-x86_64-apple-darwin.tar.gz Intel macOS checksum

... (truncated)

Changelog

Sourced from ruff's changelog.

0.14.8

Released on 2025-12-04.

Preview features

  • [flake8-bugbear] Catch yield expressions within other statements (B901) (#21200)
  • [flake8-use-pathlib] Mark fixes unsafe for return type changes (PTH104, PTH105, PTH109, PTH115) (#21440)

Bug fixes

  • Fix syntax error false positives for await outside functions (#21763)
  • [flake8-simplify] Fix truthiness assumption for non-iterable arguments in tuple/list/set calls (SIM222, SIM223) (#21479)

Documentation

  • Suggest using --output-file option in GitLab integration (#21706)

Other changes

  • [syntax-error] Default type parameter followed by non-default type parameter (#21657)

Contributors

Commits
  • 9d4f1c6 Bump 0.14.8 (#21791)
  • 326025d [ty] Always register rename provider if client doesn't support dynamic regist...
  • 3aefe85 [ty] Ensure rename CursorTest calls can_rename before renaming (#21790)
  • b8ecc83 Fix clippy errors on main (#21788)
  • 6491932 [ty] Fix crash when hovering an unknown string annotation (#21782)
  • a9f2bb4 [ty] Don't send publish diagnostics for clients supporting pull diagnostics (...
  • e2b72fb [ty] cleanup test path (#21781)
  • 14fce0d [ty] Improve the display of various special-form types (#21775)
  • 8ebecb2 [ty] Add subdiagnostic hint if the user wrote X = Any rather than X: Any ...
  • 45ac30a [ty] Teach ty the meaning of desperation (try ancestor pyproject.tomls as...
  • Additional commits viewable in compare view

Updates botocore from 1.41.5 to 1.42.4

Commits

Updates s3transfer from 0.15.0 to 0.16.0

Changelog

Sourced from s3transfer's changelog.

0.16.0

  • feature:awscrt: CRTTransferManager now supports the following TransferConfig options - multipart_threshold, multipart_chunksize, max_request_concurrency
Commits
  • 8ebcc1e Merge branch 'release-0.16.0'
  • cc4db16 Bumping version to 0.16.0
  • 3d60212 Merge pull request #361 from hssyoo/crt-mode
  • ee83a56 Add test for arg removal
  • 9363a53 Validate min CRT version for config options
  • ce2ea72 Use request_type to build CRT args
  • fa2d8e0 Edit changelog entry to feature type
  • 32137a7 Add support for max_request_concurrency
  • 6519e63 Add TransferConfig support for CRTTransferManager
  • 2d09805 Merge branch 'release-0.15.0' into develop
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot dependabot bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Dec 7, 2025
@dependabot
chore(deps): bump the python group with 4 updates
b7b49dd 
Bumps the python group with 4 updates: [boto3](https://github.com/boto/boto3), [ruff](https://github.com/astral-sh/ruff), [botocore](https://github.com/boto/botocore) and [s3transfer](https://github.com/boto/s3transfer).


Updates `boto3` from 1.41.5 to 1.42.4
- [Release notes](https://github.com/boto/boto3/releases)
- [Commits](boto/boto3@1.41.5...1.42.4)

Updates `ruff` from 0.14.7 to 0.14.8
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.14.7...0.14.8)

Updates `botocore` from 1.41.5 to 1.42.4
- [Commits](boto/botocore@1.41.5...1.42.4)

Updates `s3transfer` from 0.15.0 to 0.16.0
- [Changelog](https://github.com/boto/s3transfer/blob/develop/CHANGELOG.rst)
- [Commits](boto/s3transfer@0.15.0...0.16.0)

---
updated-dependencies:
- dependency-name: boto3
  dependency-version: 1.42.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python
- dependency-name: ruff
  dependency-version: 0.14.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python
- dependency-name: botocore
  dependency-version: 1.42.4
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: python
- dependency-name: s3transfer
  dependency-version: 0.16.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: python
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Dec 7, 2025
@sjakthol sjakthol merged commit 1cf8609 into main Dec 8, 2025
6 checks passed
@dependabot dependabot bot deleted the dependabot/uv/python-a5d0415646 branch December 8, 2025 16:44
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@sjakthol