Skip to content

chore(deps): bump the python-dependencies group with 5 updates - #127

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/python-dependencies-f2b3fda97c
Open

chore(deps): bump the python-dependencies group with 5 updates#127
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/python-dependencies-f2b3fda97c

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 1, 2026

Copy link
Copy Markdown
Contributor

Updates the requirements on aws-cdk-lib, constructs, pydantic-settings, boto3 and pystac[validation] to permit the latest version.
Updates aws-cdk-lib from 2.220.0 to 2.263.0

Release notes

Sourced from aws-cdk-lib's releases.

v2.263.0

Features

  • autoscaling: add support for AutoScalingInstanceRefresh UpdatePolicy (#38277) (434157f), closes #38276
  • docdb: support per-instance maintenance window on DatabaseCluster (#38315) (5390624), closes #30391
  • ecs: add support for using existing Cloud Map namespaces in ECS clusters (#36812) (bda00bf), closes #26698
  • eks: add Provisioned Control Plane support with controlPlaneScalingTier property (#36651) (5ea1054), closes #36650
  • eks: add support for Kubernetes version 1.36 (#38441) (da27b6c), closes #38411
  • lambda: add Java8AL2023, Java11AL2023 and Java17AL2023 runtime for Lambda #38418 (#38419) (1e55176)
  • lambda: add logGroup and systemLogLevel to CapacityProvider (#38183) (61a2e2d), closes #38182
  • lambda: add PropagateTags to CapacityProvider for tag propagation (#38180) (6f86f97), closes #38181

Bug Fixes


Alpha modules (2.263.0-alpha.0)

⚠ BREAKING CHANGES

  • mediaconnect: removalPolicy prop removed from FlowProps, GatewayProps, and BridgeProps. These resources now follow CloudFormation's default deletion behaviour (Delete).

Bug Fixes

v2.262.2

Bug Fixes


Alpha modules (2.262.2-alpha.0)

v2.262.1

Bug Fixes

  • core: bump @aws/cloudformation-validate to 1.5.1-beta to fix install on Node != 22.x (#38382) (d409b96), closes #38380
  • core: env CDK_VALIDATION=false does not disable built-in template validation (#38379) (cc4208c), closes #38378

Alpha modules (2.262.1-alpha.0)

v2.262.0

Features

... (truncated)

Changelog

Sourced from aws-cdk-lib's changelog.

Changelog

All notable changes to this project will be documented in this file. See standard-version for commit guidelines.

2.267.0-alpha.0 (2026-08-27)

⚠ BREAKING CHANGES

  • glue-alpha: schema Type is now an opaque class; construct column types via the Schema factories or Schema.custom(...) rather than { isPrimitive, inputString } literals. StorageParameter.custom(key, value) requires a string value, and StorageParameter.writeKmsKeyId takes a kms.IKey instead of a string.
  • glue-alpha: S3TableProps.bucket/encryption/encryptionKey are removed. Use storage: S3TableStorage.managedBucket(S3TableEncryption.kms(key?)) / S3TableStorage.fromBucket(bucket) and clientSideEncryption: TableClientSideEncryption.kms(key?). S3Table.encryption/encryptionKey are removed (clientSideEncryptionKey exposes the client-side key; read bucket.encryptionKey for server-side). The TableEncryption enum and the deprecated Table/TableProps are removed — use S3Table.

Features

  • glue-alpha: add a typed secret input to Connection (#38585) (ede4a1c)
  • glue-alpha: add subnet selection to Connection (#38561) (f9d7eac)
  • glue-alpha: model S3Table storage/encryption as value objects (#38591) (9990e16)
  • glue-alpha: opaque Schema Type with Schema.custom, and stronger StorageParameter types (#38592) (5c45eb0)
  • msk-alpha: support Kafka 4.2 (#38323) (97b181c)
  • s3tables-alpha: add storage class configuration support (#37339) (63ccf6d)

Bug Fixes

  • glue-alpha: validate that DATE partition projection interval is set when required (#38594) (0e2b582)
  • lambda-python-alpha: escape Docker bundling command arguments (#38583) (f7ce07b)

2.266.0-alpha.0 (2026-08-19)

⚠ BREAKING CHANGES

  • glue-alpha: DataQualityRulesetProps.rulesetDqdl: string is replaced by dqdl: Dqdl. Build it with Dqdl.fromString('Rules = [ ... ]').
  • glue-alpha: s3Encryption, cloudWatchEncryption, and jobBookmarksEncryption are no longer object literals. Use S3Encryption.s3Managed() / S3Encryption.kms(key?), CloudWatchEncryption.kms(key?), and JobBookmarksEncryption.clientSideKms(key?). The CloudWatchEncryptionMode and JobBookmarksEncryptionMode enums are removed (their mode is now implicit); S3EncryptionMode is retained.
  • glue-alpha: this is a corrective breaking change. Apps that leaned on the bug, and did things like InputFormat x = OutputFormat.AVRO; will get a compilation error in other jsii languages. The intended usage, on the other hand, was broken before and works now.
  • glue-alpha: workerType and numberOfWorkers are no longer top-level job props. For Spark jobs, pass them together via workerConfiguration: { workerType, numberOfWorkers }. PythonShellJob no longer accepts them (it is sized by maxCapacity). RayJob no longer accepts workerType (it is fixed to Z.2X).
  • glue-alpha: SparkJobProps.enableMetrics removed, which will cause a compilation error for any app using it. But there is no behavior change, since this is a dead prop.
  • glue-alpha: a differing/tokenized has_encrypted_data supplied via parameters now throws.

Features

  • glue-alpha: add warning for maxRetries when job run queuing is enabled (#38575) (09ae11e)
  • glue-alpha: model SecurityConfiguration encryption as factory subtypes (#38586) (e37e7a6)
  • glue-alpha: new hasEncryptedData property (#38511) (c977e36)
  • glue-alpha: pair workerType and numberOfWorkers into a required workerConfiguration (#38576) (5f3b1b6)
  • glue-alpha: wrap DataQualityRuleset DQDL in a typed value object (#38587) (fd01268)

Bug Fixes

... (truncated)

Commits
  • a9e6639 chore(release): 2.263.0 (#38459)
  • 04d921b chore: update CHANGELOG.v2.md and CHANGELOG.v2.alpha.md
  • 731104d chore: update analytics metadata blueprints
  • 5da984d chore(release): 2.263.0
  • 238193d fix(mediaconnect): remove default removal policy (#38437)
  • 21fede3 chore(codebuild): remove deprecated Ubuntu 14.04 and Win 2016 Base images (#3...
  • a7dcdd2 refactor(msk): stop importing addressOf from constructs private API (#38451)
  • da27b6c feat(eks): add support for Kubernetes version 1.36 (#38441)
  • 5390624 feat(docdb): support per-instance maintenance window on DatabaseCluster (#38315)
  • d26e507 fix(core): upgrade cloudformation-validate library (#38444)
  • Additional commits viewable in compare view

Updates constructs from 10.6.0 to 10.8.0

Release notes

Sourced from constructs's releases.

v10.8.0

10.8.0 (2026-07-30)

Features

  • constructs: restrict package exports to public API (#2878) (9f11c08)

v10.7.2

10.7.2 (2026-07-29)

Bug Fixes

  • ids with a newline can produce duplicate addresses (#2876) (25edded)

v10.7.1

10.7.1 (2026-07-20)

Bug Fixes

  • Node.path takes a lot of time on deep construct trees (#2873) (857a94f)

v10.7.0

10.7.0 (2026-07-15)

Features

Commits

Updates pydantic-settings from 2.14.1 to 2.14.2

Release notes

Sourced from pydantic-settings's releases.

v2.14.2

What's Changed

This is a security patch release.

Security

Fixes GHSA-4xgf-cpjx-pc3j: NestedSecretsSettingsSource with secrets_nested_subdir=True could follow a symbolic link inside secrets_dir pointing outside it, reading out-of-tree files into settings values and bypassing the secrets_dir_max_size cap. Affected versions: >= 2.12.0, < 2.14.2.

Full Changelog: pydantic/pydantic-settings@v2.14.1...v2.14.2

Commits

Updates boto3 from 1.43.42 to 1.43.62

Commits
  • f3e9c52 Merge branch 'release-1.43.62'
  • 47765b7 Bumping version to 1.43.62
  • 2f4f5fb Add changelog entries from botocore
  • 8cd8552 Merge branch 'release-1.43.61'
  • 53d9670 Merge branch 'release-1.43.61' into develop
  • 74101e1 Bumping version to 1.43.61
  • 7faedb5 Add changelog entries from botocore
  • 785f6ff Merge branch 'release-1.43.60'
  • 550ff07 Merge branch 'release-1.43.60' into develop
  • 68f5316 Bumping version to 1.43.60
  • Additional commits viewable in compare view

Updates pystac[validation] to 1.15.2

Release notes

Sourced from pystac[validation]'s releases.

v1.15.2

1.15.2 (2026-07-27)

Bug Fixes

Changelog

Sourced from pystac[validation]'s changelog.

1.15.2 (2026-07-27)

Bug Fixes

1.15.1 (2026-06-30)

Bug Fixes

  • actually link pystac-core and pystac via release-please (207e38d)
  • consolidate core and top-level package in release-please (#1760) (c6a9fbd)
  • more release-please flailing (#1762) (bcf1062)
  • remove invalid version specifier (#1756) (bc70651)

1.15.0 (2026-06-25)

Bug Fixes

Miscellaneous Chores

  • manually set next versions (64fd083)

1.14.3 (2026-01-08)

Bug Fixes

1.14.2 (2025-12-17)

Bug Fixes

  • Remove unused pystac.validation import (#1583)
  • clone extra_fields for Item (#1601) (6ba7da1)
  • make release-please two separate jobs (#1607) (bb6d289)
  • Make extent not required for VerticalSpatialDimension (#1596)

... (truncated)

Commits
  • af10871 chore(main): release 1.15.2 (#1775)
  • 1f8d728 build(deps): bump actions/checkout in the actions-deps group (#1778)
  • 70a6405 build(deps): bump setuptools from 82.0.1 to 83.0.0 (#1776)
  • 6ec1e30 build(deps): bump soupsieve from 2.8.3 to 2.8.4 (#1766)
  • 57b8d50 build(deps): bump mistune from 3.2.1 to 3.3.0 (#1767)
  • c171db2 build(deps): bump jupyter-server from 2.18.0 to 2.20.0 (#1770)
  • c82570e fix: circular imports for extensions (#1764)
  • f0c30cc build(deps): bump cryptography from 46.0.7 to 48.0.1 (#1774)
  • a448ffc build(deps-dev): bump jupyterlab from 4.5.7 to 4.5.9 (#1773)
  • bb1d200 build(deps-dev): bump starlette from 1.0.1 to 1.3.1 (#1771)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Updates the requirements on [aws-cdk-lib](https://github.com/aws/aws-cdk), [constructs](https://github.com/aws/constructs), [pydantic-settings](https://github.com/pydantic/pydantic-settings), [boto3](https://github.com/boto/boto3) and [pystac[validation]](https://github.com/stac-utils/pystac) to permit the latest version.

Updates `aws-cdk-lib` from 2.220.0 to 2.263.0
- [Release notes](https://github.com/aws/aws-cdk/releases)
- [Changelog](https://github.com/aws/aws-cdk/blob/main/CHANGELOG.v2.alpha.md)
- [Commits](aws/aws-cdk@v2.220.0...v2.263.0)

Updates `constructs` from 10.6.0 to 10.8.0
- [Release notes](https://github.com/aws/constructs/releases)
- [Commits](aws/constructs@v10.6.0...v10.8.0)

Updates `pydantic-settings` from 2.14.1 to 2.14.2
- [Release notes](https://github.com/pydantic/pydantic-settings/releases)
- [Commits](pydantic/pydantic-settings@v2.14.1...v2.14.2)

Updates `boto3` from 1.43.42 to 1.43.62
- [Release notes](https://github.com/boto/boto3/releases)
- [Commits](boto/boto3@1.43.42...1.43.62)

Updates `pystac[validation]` to 1.15.2
- [Release notes](https://github.com/stac-utils/pystac/releases)
- [Changelog](https://github.com/stac-utils/pystac/blob/main/CHANGELOG.md)
- [Commits](stac-utils/pystac@v1.15.1...v1.15.2)

---
updated-dependencies:
- dependency-name: aws-cdk-lib
  dependency-version: 2.263.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: constructs
  dependency-version: 10.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: pydantic-settings
  dependency-version: 2.14.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: boto3
  dependency-version: 1.43.62
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: pystac[validation]
  dependency-version: 1.15.2
  dependency-type: direct:development
  dependency-group: python-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Sep 1, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner September 1, 2026 02:27
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Sep 1, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants