Upgrade: Bump the dependencies group with 5 updates #297

dependabot · 2024-01-27T10:22:21Z

Bumps the dependencies group with 5 updates:

Package	From	To
botocore	`1.34.12`	`1.34.29`
pproxy	`2.7.8`	`2.7.9`
pynamodb	`5.5.1`	`6.0.0`
sentry-sdk	`1.39.1`	`1.39.2`
urllib3	`1.26.18`	`2.1.0`

Updates botocore from 1.34.12 to 1.34.29

Changelog

Sourced from botocore's changelog.

1.34.29

api-change:connect: Update list and string length limits for predefined attributes.

api-change:inspector2: This release adds ECR container image scanning based on their lastRecordedPullTime.

api-change:sagemaker: Amazon SageMaker Automatic Model Tuning now provides an API to programmatically delete tuning jobs.

1.34.28

api-change:acm-pca: AWS Private CA now supports an option to omit the CDP extension from issued certificates, when CRL revocation is enabled.

api-change:lightsail: This release adds support for IPv6-only instance plans.

1.34.27

api-change:ec2: Introduced a new clientToken request parameter on CreateNetworkAcl and CreateRouteTable APIs. The clientToken parameter allows idempotent operations on the APIs.

api-change:ecs: Documentation updates for Amazon ECS.

api-change:outposts: DeviceSerialNumber parameter is now optional in StartConnection API

api-change:rds: This release adds support for Aurora Limitless Database.

api-change:storagegateway: Add DeprecationDate and SoftwareVersion to response of ListGateways.

1.34.26

api-change:inspector2: This release adds support for CIS scans on EC2 instances.

1.34.25

enhancement:documentation: Updates the GitHub issue creation link in our README

1.34.24

api-change:appconfigdata: Fix FIPS Endpoints in aws-us-gov.

api-change:cloud9: Doc-only update around removing AL1 from list of available AMIs for Cloud9

api-change:cloudfront-keyvaluestore: This release improves upon the DescribeKeyValueStore API by returning two additional fields, Status of the KeyValueStore and the FailureReason in case of failures during creation of KeyValueStore.

api-change:connectcases: This release adds the ability to view audit history on a case and introduces a new parameter, performedBy, for CreateCase and UpdateCase API's.

api-change:ec2: Documentation updates for Amazon EC2.

api-change:ecs: This release adds support for Transport Layer Security (TLS) and Configurable Timeout to ECS Service Connect. TLS facilitates privacy and data security for inter-service communications, while Configurable Timeout allows customized per-request timeout and idle timeout for Service Connect services.

api-change:finspace: Allow customer to set zip default through command line arguments.

api-change:organizations: Doc only update for quota increase change

api-change:rds: Introduced support for the InsufficientDBInstanceCapacityFault error in the RDS CreateDBCluster API method. This provides enhanced error handling, ensuring a more robust experience when creating database clusters with insufficient instance capacity.

api-change:endpoint-rules: Update endpoint-rules client to latest version

... (truncated)

Commits

535ecc3 Merge branch 'release-1.34.29'
56fd757 Bumping version to 1.34.29
cd526a7 Update to latest models
bd1d85b Minor GitHub workflow changes (#3104)
27b2aaa Merge branch 'release-1.34.28'
573510f Merge branch 'release-1.34.28' into develop
d24a5cc Bumping version to 1.34.28
0d0f0e0 Update to latest models
cadb988 Merge branch 'release-1.34.27'
e7c5b6a Merge branch 'release-1.34.27' into develop
Additional commits viewable in compare view

Updates pproxy from 2.7.8 to 2.7.9

Commits

09d4752 Merge branch 'master' of https://github.com/qwj/python-proxy
e03384f Merge pull request #163 from Jonney/patch-2
4863477 Merge pull request #151 from Mervent/master
c970092 Compatible with Python 3.11
fe495ce Obey RFC2616
7c96730 Merge pull request #143 from milahu/print-effective-port-when-port-is-automatic
697635c print effective port when port is automatic (zero)
See full diff in compare view

Updates pynamodb from 5.5.1 to 6.0.0

Release notes

Sourced from pynamodb's releases.

6.0.0

This is a major release with breaking changes.

Please read the release notes carefully for a full list of changes.

Changelog

Sourced from pynamodb's changelog.

v6.0.0

This is a major release and contains breaking changes. Please read the notes below carefully.

Breaking changes:

:py:class:~pynamodb.attributes.BinaryAttribute and :py:class:~pynamodb.attributes.BinarySetAttribute have undergone breaking changes:

The attributes' internal encoding has changed. To prevent this change going unnoticed, a new required :code:legacy_encoding parameter was added: see :doc:upgrading_binary for details. If your codebase uses :py:class:~pynamodb.attributes.BinaryAttribute or :py:class:~pynamodb.attributes.BinarySetAttribute, go over the attribute declarations and mark them accordingly.

When using binary attributes, the return value of :meth:~pynamodb.models.Model.serialize will no longer be JSON-serializable since it will contain :code:bytes objects. Use :meth:~pynamodb.models.Model.to_dynamodb_dict for a safe JSON-serializable representation.

Python 3.6 is no longer supported.

:meth:Index.count <pynamodb.indexes.Index.count>, :meth:Index.query <pynamodb.indexes.Index.query>, and :meth:Indexn.scan <pynamodb.indexes.Index.scan> are now instance methods.

:py:class:~pynamodb.settings.OperationSettings has been removed

Major changes:

We are now compatible with opentelemetry botocore instrumentation <https://github.com/open-telemetry/opentelemetry-python-contrib/tree/main/instrumentation/opentelemetry-instrumentation-botocore>_.

We've reduced our usage of botocore private APIs (:pr:1079). On multiple occasions, new versions of botocore broke PynamoDB, and this change lessens the likelihood of that happening in the future by reducing (albeit not eliminating) our reliance on private botocore APIs.

Minor changes:

:meth:~pynamodb.models.Model.save, :meth:~pynamodb.models.Model.update, :meth:~pynamodb.models.Model.delete_item, and :meth:~pynamodb.models.Model.delete now accept a add_version_condition parameter. See :ref:optimistic_locking_version_condition for more details.

:meth:~pynamodb.models.Model.batch_get, has guard rails defending against items without a hash_key and range_key.

:meth:~pynamodb.attributes.Attribute.set, can remove attribute by assigning an empty value in the update expression.

v5.3.2

Prevent typing_tests from being installed into site-packages (:pr:1118)

Contributors to this release:

:user:musicinmybrain

v5.3.1

Fixed issue introduced in 5.3.0: using :py:class:~pynamodb.connection.table.TableConnection directly (not through a model) raised the following exception::

... (truncated)

Commits

d61d906 Bump version to 6.0.0 (#1216)
e8d3bb4 release_notes.rst: nits
d655771 release_notes.rst: 6.0.0 heading
fdbac4a Update release notes for 6.0 release (#1211)
369f461 Switch back to botocore _make_api_call under the hood (#1079)
c5e91ca In setup.cfg, avoid deprecated license_file (#1207)
c1d6222 Add upgrade guide to docs (#1197)
5facc5d typing_extensions should be optional on Python 3.11 (#1198)
d74a88b _make_api_call: remove dead code (#1196)
9e17fd4 Fix mypy failure (#1195)
Additional commits viewable in compare view

Updates sentry-sdk from 1.39.1 to 1.39.2

Release notes

Sourced from sentry-sdk's releases.

1.39.2

Various fixes & improvements

Fix timestamp in transaction created by OTel (#2627) by @antonpirker

Fix relative path in DB query source (#2624) by @antonpirker

Run more CI checks on 2.0 branch (#2625) by @sentrivana

Fix tracing TypeError for static and class methods (#2559) by @szokeasaurusrex

Fix missing ctx in Arq integration (#2600) by @ivanovart

Change data_category from check_in to monitor (#2598) by @sentrivana

Changelog

Sourced from sentry-sdk's changelog.

1.39.2

Various fixes & improvements

Fix timestamp in transaction created by OTel (#2627) by @antonpirker

Fix relative path in DB query source (#2624) by @antonpirker

Run more CI checks on 2.0 branch (#2625) by @sentrivana

Fix tracing TypeError for static and class methods (#2559) by @szokeasaurusrex

Fix missing ctx in Arq integration (#2600) by @ivanovart

Change data_category from check_in to monitor (#2598) by @sentrivana

Commits

b244efc Update CHANGELOG.md
5a2d813 release: 1.39.2
b74ea08 Fix timestamp in transaction created by OTel (#2627)
b873c38 Fix relative path in db query source (#2624)
6f41823 Run more CI checks on 2.0 branch (#2625)
8bd2f46 fix(api): Fix tracing TypeError for static and class methods (#2559)
6470063 Arq integration ctx (#2600)
248cb06 fix(crons): Change data_category from check_in to monitor (#2598)
658c6c9 Merge branch 'release/1.39.1'
See full diff in compare view

Updates urllib3 from 1.26.18 to 2.1.0

Release notes

Sourced from urllib3's releases.

2.1.0

Read the v2 migration guide for help upgrading to the latest version of urllib3.

Removals

Removed support for the deprecated urllib3[secure] extra. (#2680)

Removed support for the deprecated SecureTransport TLS implementation. (#2681)

Removed support for the end-of-life Python 3.7. (#3143)

Bugfixes

Allowed loading CA certificates from memory for proxies. (#3065)

Fixed decoding Gzip-encoded responses which specified x-gzip content-encoding. (#3174)

2.0.7

Made body stripped from HTTP requests changing the request method to GET after HTTP 303 "See Other" redirect responses. (GHSA-g4mx-q9vg-27p4)

2.0.6

Added the Cookie header to the list of headers to strip from requests when redirecting to a different host. As before, different headers can be set via Retry.remove_headers_on_redirect. (GHSA-v845-jxx5-vc9f)

2.0.5

Allowed pyOpenSSL third-party module without any deprecation warning. #3126

Fixed default blocksize of HTTPConnection classes to match high-level classes. Previously was 8KiB, now 16KiB. #3066

2.0.4

Added support for union operators to HTTPHeaderDict (#2254)

Added BaseHTTPResponse to urllib3.__all__ (#3078)

Fixed urllib3.connection.HTTPConnection to raise the http.client.connect audit event to have the same behavior as the standard library HTTP client (#2757)

Relied on the standard library for checking hostnames in supported PyPy releases (#3087)

2.0.3

Allowed alternative SSL libraries such as LibreSSL, while still issuing a warning as we cannot help users facing issues with implementations other than OpenSSL. #3020

Deprecated URLs which don't have an explicit scheme #2950

Fixed response decoding with Zstandard when compressed data is made of several frames. #3008

Fixed assert_hostname=False to correctly skip hostname check. #3051

2.0.2

Fixed HTTPResponse.stream() to continue yielding bytes if buffered decompressed data was still available to be read even if the underlying socket is closed. This prevents a compressed response from being truncated. (urllib3/urllib3#3009)

2.0.1

Fixed a socket leak when fingerprint or hostname verifications fail. (#2991)

Fixed an error when HTTPResponse.read(0) was the first read call or when the internal response body buffer was otherwise empty. (#2998)

2.0.0

Read the v2.0 migration guide for help upgrading to the latest version of urllib3.

Removed

Removed support for Python 2.7, 3.5, and 3.6 (#883, #2336).

... (truncated)

Changelog

Sourced from urllib3's changelog.

2.1.0 (2023-11-13)

Read the v2 migration guide <https://urllib3.readthedocs.io/en/latest/v2-migration-guide.html>__ for help upgrading to the latest version of urllib3.

Removals

Removed support for the deprecated urllib3[secure] extra. ([#2680](https://github.com/urllib3/urllib3/issues/2680) <https://github.com/urllib3/urllib3/issues/2680>__)

Removed support for the deprecated SecureTransport TLS implementation. ([#2681](https://github.com/urllib3/urllib3/issues/2681) <https://github.com/urllib3/urllib3/issues/2681>__)

Removed support for the end-of-life Python 3.7. ([#3143](https://github.com/urllib3/urllib3/issues/3143) <https://github.com/urllib3/urllib3/issues/3143>__)

Bugfixes

Allowed loading CA certificates from memory for proxies. ([#3065](https://github.com/urllib3/urllib3/issues/3065) <https://github.com/urllib3/urllib3/issues/3065>__)

Fixed decoding Gzip-encoded responses which specified x-gzip content-encoding. ([#3174](https://github.com/urllib3/urllib3/issues/3174) <https://github.com/urllib3/urllib3/issues/3174>__)

2.0.7 (2023-10-17)

Made body stripped from HTTP requests changing the request method to GET after HTTP 303 "See Other" redirect responses.

2.0.6 (2023-10-02)

Added the Cookie header to the list of headers to strip from requests when redirecting to a different host. As before, different headers can be set via Retry.remove_headers_on_redirect.

2.0.5 (2023-09-20)

Allowed pyOpenSSL third-party module without any deprecation warning. ([#3126](https://github.com/urllib3/urllib3/issues/3126) <https://github.com/urllib3/urllib3/issues/3126>__)

Fixed default blocksize of HTTPConnection classes to match high-level classes. Previously was 8KiB, now 16KiB. ([#3066](https://github.com/urllib3/urllib3/issues/3066) <https://github.com/urllib3/urllib3/issues/3066>__)

2.0.4 (2023-07-19)

Added support for union operators to HTTPHeaderDict ([#2254](https://github.com/urllib3/urllib3/issues/2254) <https://github.com/urllib3/urllib3/issues/2254>__)

Added BaseHTTPResponse to urllib3.__all__ ([#3078](https://github.com/urllib3/urllib3/issues/3078) <https://github.com/urllib3/urllib3/issues/3078>__)

Fixed urllib3.connection.HTTPConnection to raise the http.client.connect audit event to have the same behavior as the standard library HTTP client ([#2757](https://github.com/urllib3/urllib3/issues/2757) <https://github.com/urllib3/urllib3/issues/2757>__)

Relied on the standard library for checking hostnames in supported PyPy releases ([#3087](https://github.com/urllib3/urllib3/issues/3087) <https://github.com/urllib3/urllib3/issues/3087>__)

2.0.3 (2023-06-07)

Allowed alternative SSL libraries such as LibreSSL, while still issuing a warning as we cannot help users facing issues with implementations other than OpenSSL. ([#3020](https://github.com/urllib3/urllib3/issues/3020) <https://github.com/urllib3/urllib3/issues/3020>__)

... (truncated)

Commits

69be299 Release 2.1.0
77f71d3 Mention myself in README
e601a0e Check _has_route within the test function (#3187)
f7cd7f3 Stop naming urllib3/requests tests "integration" (#3182)
6fc4260 Use more precise type checks
5fa8ea6 Fix lint on Python 3.12
8727683 Remove Sphinx version pin
5fc48e7 Treat x-gzip content encoding as gzip
ff764a0 Allow loading CA certificates from memory for proxies (#3150)
b99cc39 Replace deprecated set-output in GitHub Actions
Additional commits viewable in compare view

Most Recent Ignore Conditions Applied to This Pull Request

Dependency Name	Ignore Conditions
botocore	[< 1.28, > 1.27.22]

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

TrueBrain · 2024-01-27T10:26:06Z

@dependabot unignore botocore

dependabot · 2024-01-27T10:26:08Z

OK, I will stop ignoring the botocore dependency.

TrueBrain · 2024-01-27T10:26:12Z

@dependabot ignore urllib 2.1.0

TrueBrain · 2024-01-27T10:26:22Z

@dependabot ignore urllib3 2.1.0

TrueBrain · 2024-01-27T10:26:42Z

@dependabot ignore urllib3 major 2

Bumps the dependencies group with 5 updates: | Package | From | To | | --- | --- | --- | | [botocore](https://github.com/boto/botocore) | `1.34.12` | `1.34.29` | | [pproxy](https://github.com/qwj/python-proxy) | `2.7.8` | `2.7.9` | | [pynamodb](https://github.com/pynamodb/PynamoDB) | `5.5.1` | `6.0.0` | | [sentry-sdk](https://github.com/getsentry/sentry-python) | `1.39.1` | `1.39.2` | | [urllib3](https://github.com/urllib3/urllib3) | `1.26.18` | `2.1.0` | Updates `botocore` from 1.34.12 to 1.34.29 - [Changelog](https://github.com/boto/botocore/blob/develop/CHANGELOG.rst) - [Commits](boto/botocore@1.34.12...1.34.29) Updates `pproxy` from 2.7.8 to 2.7.9 - [Commits](qwj/python-proxy@2.7.8...2.7.9) Updates `pynamodb` from 5.5.1 to 6.0.0 - [Release notes](https://github.com/pynamodb/PynamoDB/releases) - [Changelog](https://github.com/pynamodb/PynamoDB/blob/master/docs/release_notes.rst) - [Commits](pynamodb/PynamoDB@5.5.1...6.0.0) Updates `sentry-sdk` from 1.39.1 to 1.39.2 - [Release notes](https://github.com/getsentry/sentry-python/releases) - [Changelog](https://github.com/getsentry/sentry-python/blob/master/CHANGELOG.md) - [Commits](getsentry/sentry-python@1.39.1...1.39.2) Updates `urllib3` from 1.26.18 to 2.1.0 - [Release notes](https://github.com/urllib3/urllib3/releases) - [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst) - [Commits](urllib3/urllib3@1.26.18...2.1.0) --- updated-dependencies: - dependency-name: botocore dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: pproxy dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: pynamodb dependency-type: direct:production update-type: version-update:semver-major dependency-group: dependencies - dependency-name: sentry-sdk dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: urllib3 dependency-type: direct:production update-type: version-update:semver-major dependency-group: dependencies ... Signed-off-by: dependabot[bot] <[email protected]>

TrueBrain · 2024-01-27T10:29:34Z

@dependabot ignore urllib3 major 2

TrueBrain · 2024-01-27T10:30:16Z

@dependabot ignore urllib3 major version

dependabot · 2024-01-27T10:30:19Z

OK, I won't notify you about version 2.x.x of urllib3 again, unless you unignore it.

dependabot · 2024-01-27T10:31:24Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Jan 27, 2024

dependabot bot force-pushed the dependabot/pip/dependencies-ecfa4b50ca branch from 66a5de9 to 210a2be Compare January 27, 2024 10:27

dependabot bot closed this Jan 27, 2024

dependabot bot deleted the dependabot/pip/dependencies-ecfa4b50ca branch January 27, 2024 10:31

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Upgrade: Bump the dependencies group with 5 updates #297

Upgrade: Bump the dependencies group with 5 updates #297

dependabot bot commented on behalf of github Jan 27, 2024 •

edited

Loading

TrueBrain commented Jan 27, 2024

dependabot bot commented on behalf of github Jan 27, 2024

TrueBrain commented Jan 27, 2024

TrueBrain commented Jan 27, 2024

TrueBrain commented Jan 27, 2024

TrueBrain commented Jan 27, 2024

TrueBrain commented Jan 27, 2024

dependabot bot commented on behalf of github Jan 27, 2024

dependabot bot commented on behalf of github Jan 27, 2024

Upgrade: Bump the dependencies group with 5 updates #297

Upgrade: Bump the dependencies group with 5 updates #297

Conversation

dependabot bot commented on behalf of github Jan 27, 2024 • edited Loading

1.34.29

1.34.28

1.34.27

1.34.26

1.34.25

1.34.24

6.0.0

v6.0.0

v5.3.2

v5.3.1

1.39.2

Various fixes & improvements

1.39.2

Various fixes & improvements

2.1.0

Removals

Bugfixes

2.0.7

2.0.6

2.0.5

2.0.4

2.0.3

2.0.2

2.0.1

2.0.0

Removed

2.1.0 (2023-11-13)

Removals

Bugfixes

2.0.7 (2023-10-17)

2.0.6 (2023-10-02)

2.0.5 (2023-09-20)

2.0.4 (2023-07-19)

2.0.3 (2023-06-07)

TrueBrain commented Jan 27, 2024

dependabot bot commented on behalf of github Jan 27, 2024

TrueBrain commented Jan 27, 2024

TrueBrain commented Jan 27, 2024

TrueBrain commented Jan 27, 2024

TrueBrain commented Jan 27, 2024

TrueBrain commented Jan 27, 2024

dependabot bot commented on behalf of github Jan 27, 2024

dependabot bot commented on behalf of github Jan 27, 2024

dependabot bot commented on behalf of github Jan 27, 2024 •

edited

Loading