Skip to content

⬆️(dependencies) update python dependencies#419

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/python-dependencies
Open

⬆️(dependencies) update python dependencies#419
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/python-dependencies

Conversation

@renovate
Copy link
Copy Markdown
Contributor

@renovate renovate Bot commented Apr 20, 2026

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence Type Update Pending
PyJWT ==2.12.0==2.12.1 age confidence project.dependencies patch 2.13.0
beautifulsoup4 (changelog) ==4.14.2==4.14.3 age confidence project.dependencies patch
boto3 ==1.40.73==1.43.9 age confidence project.dependencies minor 1.43.14 (+4)
dirty-equals (changelog) ==0.10.0==0.11 age confidence project.optional-dependencies minor
django-countries (changelog) ==8.1.0==8.2.0 age confidence project.dependencies minor
django-lasuite ==0.0.25==0.0.26 age confidence project.dependencies patch
django-parler ==2.3==2.4 age confidence project.dependencies minor
djangorestframework (changelog) ==3.16.1==3.17.1 age confidence project.dependencies minor
dockerflow ==2024.4.2==2026.3.4 age confidence project.dependencies major
drf-spectacular-sidecar ==2025.10.1==2026.5.1 age confidence project.optional-dependencies major
gunicorn (changelog) ==23.0.0==26.0.0 age confidence project.dependencies major
ipython ==9.7.0==9.13.0 age confidence project.optional-dependencies minor
jsonschema (changelog) ==4.25.1==4.26.0 age confidence project.dependencies minor
langfuse ==3.10.0==4.6.1 age confidence project.dependencies major
markdown (changelog) ==3.10==3.10.2 age confidence project.dependencies patch
mozilla-django-oidc (changelog) ==4.0.1==5.0.2 age confidence project.dependencies major
odfdo (changelog) ==3.22.1==3.22.8 age confidence project.dependencies patch
posthog ==7.0.0==7.14.2 age confidence project.dependencies minor 7.15.3 (+3)
psycopg (changelog) ==3.2.12==3.3.4 age confidence project.dependencies minor
pydantic (changelog) ==2.12.4==2.13.4 age confidence project.dependencies minor
pyfakefs (changelog) ==5.10.2==6.2.0 age confidence project.optional-dependencies major
pylint-django ==2.6.1==2.7.0 age confidence project.optional-dependencies minor
pypdf (changelog) ==6.10.2==6.11.0 age confidence project.dependencies minor 6.12.1 (+1)
pytest-cov (changelog) ==7.0.0==7.1.0 age confidence project.optional-dependencies minor
python (source) ~=3.13.0~=3.14.5 age confidence requires-python minor
requests (changelog) ==2.33.0==2.34.2 age confidence project.dependencies minor
responses (changelog) ==0.25.8==0.26.0 age confidence project.optional-dependencies minor 0.26.1
respx (source, changelog) ==0.22.0==0.23.1 age confidence project.optional-dependencies minor
ruff (source, changelog) ==0.14.5==0.15.13 age confidence project.optional-dependencies minor 0.15.14
semchunk ==3.2.5==4.0.0 age confidence project.dependencies major
sentry-sdk (changelog) ==2.44.0==2.60.0 age confidence project.dependencies minor
types-requests (changelog) ==2.32.4.20250913==2.33.0.20260513 age confidence project.optional-dependencies minor 2.33.0.20260518
uvicorn (changelog) ==0.38.0==0.47.0 age confidence project.dependencies minor 0.48.0
whitenoise (changelog) ==6.11.0==6.12.0 age confidence project.dependencies minor

Release Notes

jpadilla/pyjwt (PyJWT)

v2.12.1

Compare Source

Changed


- Migrate the ``dev``, ``docs``, and ``tests`` package extras to dependency groups by @&#8203;kurtmckee in `#&#8203;1152 <https://github.com/jpadilla/pyjwt/pull/1152>`__

`v2.12.1 <https://github.com/jpadilla/pyjwt/compare/2.12.0...2.12.1>`__
------------------------------------------------------------------------

Fixed
~~~~~

- Add missing ``typing_extensions`` dependency for Python < 3.11 in `#&#8203;1150 <https://github.com/jpadilla/pyjwt/issues/1150>`__

`v2.12.0 <https://github.com/jpadilla/pyjwt/compare/2.11.0...2.12.0>`__
-----------------------------------------------------------------------

Fixed
~~~~~

- Annotate PyJWKSet.keys for pyright by @&#8203;tamird in `#&#8203;1134 <https://github.com/jpadilla/pyjwt/pull/1134>`__
- Close ``HTTPError`` response to prevent ``ResourceWarning`` on Python 3.14 by @&#8203;veeceey in `#&#8203;1133 <https://github.com/jpadilla/pyjwt/pull/1133>`__
- Do not keep ``algorithms`` dict in PyJWK instances by @&#8203;akx in `#&#8203;1143 <https://github.com/jpadilla/pyjwt/pull/1143>`__
- Validate the crit (Critical) Header Parameter defined in RFC 7515 §4.1.11. by @&#8203;dmbs335 in `GHSA-752w-5fwx-jx9f <https://github.com/jpadilla/pyjwt/security/advisories/GHSA-752w-5fwx-jx9f>`__
- Use PyJWK algorithm when encoding without explicit algorithm in `#&#8203;1148 <https://github.com/jpadilla/pyjwt/pull/1148>`__

Added
~~~~~

- Docs: Add ``PyJWKClient`` API reference and document the two-tier caching system (JWK Set cache and signing key LRU cache).

`v2.11.0 <https://github.com/jpadilla/pyjwt/compare/2.10.1...2.11.0>`__
-----------------------------------------------------------------------

Fixed
~~~~~

- Enforce ECDSA curve validation per RFC 7518 Section 3.4.
- Fix build system warnings by @&#8203;kurtmckee in `#&#8203;1105 <https://github.com/jpadilla/pyjwt/pull/1105>`__
- Validate key against allowed types for Algorithm family in `#&#8203;964 <https://github.com/jpadilla/pyjwt/pull/964>`__
- Add iterator for JWKSet in `#&#8203;1041 <https://github.com/jpadilla/pyjwt/pull/1041>`__
- Validate `iss` claim is a string during encoding and decoding by @&#8203;pachewise in `#&#8203;1040 <https://github.com/jpadilla/pyjwt/pull/1040>`__
- Improve typing/logic for `options` in decode, decode_complete by @&#8203;pachewise in `#&#8203;1045 <https://github.com/jpadilla/pyjwt/pull/1045>`__
- Declare float supported type for lifespan and timeout by @&#8203;nikitagashkov in `#&#8203;1068 <https://github.com/jpadilla/pyjwt/pull/1068>`__
- Fix ``SyntaxWarning``\s/``DeprecationWarning``\s caused by invalid escape sequences by @&#8203;kurtmckee in `#&#8203;1103 <https://github.com/jpadilla/pyjwt/pull/1103>`__
- Development: Build a shared wheel once to speed up test suite setup times by @&#8203;kurtmckee in `#&#8203;1114 <https://github.com/jpadilla/pyjwt/pull/1114>`__
- Development: Test type annotations across all supported Python versions,
  increase the strictness of the type checking, and remove the mypy pre-commit hook
  by @&#8203;kurtmckee in `#&#8203;1112 <https://github.com/jpadilla/pyjwt/pull/1112>`__

Added
~~~~~

- Support Python 3.14, and test against PyPy 3.10 and 3.11 by @&#8203;kurtmckee in `#&#8203;1104 <https://github.com/jpadilla/pyjwt/pull/1104>`__
- Development: Migrate to ``build`` to test package building in CI by @&#8203;kurtmckee in `#&#8203;1108 <https://github.com/jpadilla/pyjwt/pull/1108>`__
- Development: Improve coverage config and eliminate unused test suite code by @&#8203;kurtmckee in `#&#8203;1115 <https://github.com/jpadilla/pyjwt/pull/1115>`__
- Docs: Standardize CHANGELOG links to PRs by @&#8203;kurtmckee in `#&#8203;1110 <https://github.com/jpadilla/pyjwt/pull/1110>`__
- Docs: Fix Read the Docs builds by @&#8203;kurtmckee in `#&#8203;1111 <https://github.com/jpadilla/pyjwt/pull/1111>`__
- Docs: Add example of using leeway with nbf by @&#8203;djw8605 in `#&#8203;1034 <https://github.com/jpadilla/pyjwt/pull/1034>`__
- Docs: Refactored docs with ``autodoc``; added ``PyJWS`` and ``jwt.algorithms`` docs by @&#8203;pachewise in `#&#8203;1045 <https://github.com/jpadilla/pyjwt/pull/1045>`__
- Docs: Documentation improvements for "sub" and "jti" claims by @&#8203;cleder in `#&#8203;1088 <https://github.com/jpadilla/pyjwt/pull/1088>`__
- Development: Add pyupgrade as a pre-commit hook by @&#8203;kurtmckee in `#&#8203;1109 <https://github.com/jpadilla/pyjwt/pull/1109>`__
- Add minimum key length validation for HMAC and RSA keys (CWE-326).
  Warns by default via ``InsecureKeyLengthWarning`` when keys are below
  minimum recommended lengths per RFC 7518 Section 3.2 (HMAC) and
  NIST SP 800-131A (RSA). Pass ``enforce_minimum_key_length=True`` in
  options to ``PyJWT`` or ``PyJWS`` to raise ``InvalidKeyError`` instead.
- Refactor ``PyJWT`` to own an internal ``PyJWS`` instance instead of
  calling global ``api_jws`` functions.

`v2.10.1 <https://github.com/jpadilla/pyjwt/compare/2.10.0...2.10.1>`__
-----------------------------------------------------------------------

Fixed
~~~~~

- Prevent partial matching of `iss` claim by @&#8203;fabianbadoi in `GHSA-75c5-xw7c-p5pm <https://github.com/jpadilla/pyjwt/security/advisories/GHSA-75c5-xw7c-p5pm>`__

`v2.10.0 <https://github.com/jpadilla/pyjwt/compare/2.9.0...2.10.0>`__
-----------------------------------------------------------------------

Changed
  • Remove algorithm requirement from JWT API, instead relying on JWS API for enforcement, by @​luhn in #&#8203;975 <https://github.com/jpadilla/pyjwt/pull/975>__

  • Use Sequence for parameter types rather than List where applicable by @​imnotjames in #&#8203;970 <https://github.com/jpadilla/pyjwt/pull/970>__

  • Add JWK support to JWT encode by @​luhn in #&#8203;979 <https://github.com/jpadilla/pyjwt/pull/979>__

  • Encoding and decoding payloads using the none algorithm by @​jpadilla in #c2629f6 <https://github.com/jpadilla/pyjwt/commit/c2629f66c593459e02616048443231ccbe18be16>__

    Before:

    .. code-block:: pycon

    import jwt
    jwt.encode({"payload": "abc"}, key=None, algorithm=None)

    After:

    .. code-block:: pycon

    import jwt
    jwt.encode({"payload": "abc"}, key=None, algorithm="none")

  • Added validation for 'sub' (subject) and 'jti' (JWT ID) claims in tokens by @​Divan009 in #&#8203;1005 <https://github.com/jpadilla/pyjwt/pull/1005>__

  • Refactor project configuration files from setup.cfg to pyproject.toml by @​cleder in #&#8203;995 <https://github.com/jpadilla/pyjwt/pull/995>__

  • Ruff linter and formatter changes by @​gagandeepp in #&#8203;1001 <https://github.com/jpadilla/pyjwt/pull/1001>__

  • Drop support for Python 3.8 (EOL) by @​kkirsche in #&#8203;1007 <https://github.com/jpadilla/pyjwt/pull/1007>__

Fixed


- Encode EC keys with a fixed bit length by @&#8203;etianen in `#&#8203;990 <https://github.com/jpadilla/pyjwt/pull/990>`__
- Add an RTD config file to resolve Read the Docs build failures by @&#8203;kurtmckee in `#&#8203;977 <https://github.com/jpadilla/pyjwt/pull/977>`__
- Docs: Update ``iat`` exception docs by @&#8203;pachewise in `#&#8203;974 <https://github.com/jpadilla/pyjwt/pull/974>`__
- Docs: Fix ``decode_complete`` scope and algorithms by @&#8203;RbnRncn in `#&#8203;982 <https://github.com/jpadilla/pyjwt/pull/982>`__
- Fix doctest for ``docs/usage.rst`` by @&#8203;pachewise in `#&#8203;986 <https://github.com/jpadilla/pyjwt/pull/986>`__
- Fix ``test_utils.py`` not to xfail by @&#8203;pachewise in `#&#8203;987 <https://github.com/jpadilla/pyjwt/pull/987>`__
- Docs: Correct `jwt.decode` audience param doc expression by @&#8203;peter279k in `#&#8203;994 <https://github.com/jpadilla/pyjwt/pull/994>`__

Added
  • Add support for python 3.13 by @​hugovk in #&#8203;972 <https://github.com/jpadilla/pyjwt/pull/972>__
  • Create SECURITY.md by @​auvipy and @​jpadilla in #&#8203;973 <https://github.com/jpadilla/pyjwt/pull/973>__
  • Docs: Add PS256 encoding and decoding usage by @​peter279k in #&#8203;992 <https://github.com/jpadilla/pyjwt/pull/992>__
  • Docs: Add API docs for PyJWK by @​luhn in #&#8203;980 <https://github.com/jpadilla/pyjwt/pull/980>__
  • Docs: Add EdDSA algorithm encoding/decoding usage by @​peter279k in #&#8203;993 <https://github.com/jpadilla/pyjwt/pull/993>__
  • Include checkers and linters for pyproject.toml in pre-commit by @​cleder in #&#8203;1002 <https://github.com/jpadilla/pyjwt/pull/1002>__
  • Docs: Add ES256 decoding usage by @​Gautam-Hegde in #&#8203;1003 <https://github.com/jpadilla/pyjwt/pull/1003>__
boto/boto3 (boto3)

v1.43.9

Compare Source

======

  • api-change:logs: [botocore] Updating the max limit for start query api parameter.
  • api-change:mediapackagev2: [botocore] This release adds support for AvailabilityStartTimeConfiguration in MediaPackageV2 DASH manifests
  • api-change:partnercentral-selling: [botocore] Enable TCV intake on Opportunity to improve Opportunities Hygiene and downstream revenue attribution.

v1.43.8

Compare Source

======

  • api-change:bedrock: [botocore] Advanced Prompt Optimization (AdvPO) allows you to optimize and migrate your prompts for any model on Bedrock by automatically evaluating responses and rewriting prompts to improve performance. This release provides a programmatic way to create, get, list, stop, and delete AdvPO jobs.
  • api-change:cloudfront: [botocore] Adding a new boolean for OCSP Revocations in Viewer mTLS Create and Update APIs, and adding a new 'Passthrough' option for TrustStore modes
  • api-change:datazone: [botocore] Adds support for SageMaker Unified Studio notebook operations, including notebook import and export
  • api-change:dms: [botocore] Add 9 SDK waiters for DMS Schema Conversion async operations. Eliminates manual polling for import, assessment, conversion, export, and creation jobs.
  • api-change:glue: [botocore] Release --has-databases parameter for AWS Glue get-catalogs API, which filters catalog responses to include only those capable of containing databases, excluding parent catalogs that hold only other catalogs. Remove model-level validation on partition index list size for AWS Glue tables.
  • api-change:grafana: [botocore] Adds support for dual-stack (IPv4 and IPv6) connectivity to Amazon Managed Grafana workspaces. Customers can configure the ipAddressType parameter when creating or updating a workspace to choose between IPv4-only or dual-stack (IPv4 and IPv6) access.
  • api-change:mgn: [botocore] Introducing new option for security groups mapping - with MAP-DHCP the service translates security rules from your source environment with DHCP compatibility.
  • api-change:qconnect: [botocore] ListModels is an API that returns the available AI models for a Connect Assistant based on its region and AI prompt type.

v1.43.7

Compare Source

======

  • api-change:arc-region-switch: [botocore] Adds support for enabling and disabling Lambda event source mappings in Region switch plans.
  • api-change:batch: [botocore] Adds a billing callout to docs regarding using the CE Scale Down Delay feature
  • api-change:bedrock-agentcore-control: [botocore] Adds support for read-only summary APIs for Policy Engine, Policy, and Policy Generation resources, enabling metadata retrieval without KMS decryption for AWS Config integration.
  • api-change:billingconductor: [botocore] Add ConflictException to UpdateCustomLineItem operation.
  • api-change:connect: [botocore] This change added three new EventSourceName for schedule notification feature
  • api-change:connectcampaignsv2: [botocore] This release added support for Outbound Campaign timezone detection using all available contact methods
  • api-change:connectcases: [botocore] Amazon Connect Cases now supports SLA durations of up to 2 years (1,051,200 minutes), increased from the previous maximum of 90 days (129,600 minutes). This enables you to track long-running service level agreements for cases that require extended resolution timelines.
  • api-change:dsql: [botocore] Added support for Amazon Aurora DSQL change data capture (CDC) streams that deliver row-level database changes to Amazon Kinesis in JSON format. Includes CreateStream, GetStream, ListStreams, and DeleteStream operations.
  • api-change:ec2: [botocore] Include length limits in the SDK and documentation for text fields in Image (AMI) APIs such as the image name and description
  • api-change:endpoint-rules: [botocore] Update endpoint-rules client to latest version
  • api-change:es: [botocore] Adds support for AutomatedSnapshotPauseOptions.
  • api-change:glue: [botocore] AWS Glue now defaults the job timeout to 480 minutes for Glue version 5.0 and later when no timeout value is specified. The default remains 2,880 minutes for Glue version 4.0 and earlier.
  • api-change:lightsail: [botocore] Added OriginIpAddressTypeEnum (ipv4, ipv6, dualstack) and ipAddressType field to Origin and InputOrigin structures for Lightsail CDN distributions. Allows customers to specify how the distribution connects to origins, using IPv4, IPv6, or dualstack networking
  • api-change:opensearch: [botocore] Adds support for AutomatedSnapshotPauseOptions.
  • api-change:partnercentral-account: [botocore] Added ServiceQuotaExceededExceptions for Profile operations
  • api-change:pcs: [botocore] Add support for Amazon EC2 Interruptible-ODCR
  • api-change:quicksight: [botocore] Adds five new custom permission option for Quick Apps so that these capabilities can be controlled by public SDK and CLI.
  • api-change:redshift: [botocore] Added rg.xlarge and rg.4xlarge to valid NodeType values and updated documentation for CreateCluster, ModifyCluster, ResizeCluster, and RestoreFromClusterSnapshot APIs to reflect RG node type support.
  • api-change:rtbfabric: [botocore] Customers can now configure custom domain names for their RTB Fabric gateways. This enables partners to use their own branded domain for RTB traffic instead of the default rtbfabric endpoint
  • api-change:sagemaker: [botocore] Adds execution role session name mode to reflect user identity in Studio. Adds Flexible Training Plans on Studio apps. Adds restricted model packages to control access to proprietary model artifacts via IAM. Fixed instance type parity between inference endpoints and managed shadow tests.
  • api-change:securityagent: [botocore] Add support for code reviews, a new resource type that enables automated security-focused static analysis of source code repositories.
  • api-change:socialmessaging: [botocore] Adds parameters to call the GetWhatsAppMessageTemplate and UpdateWhatsAppMessageTemplate APIs with a template name and language code in place of the template ID. Linked WhatsApp accounts also describe whether the WABA is onboarded to Meta's Marketing Messages API.
  • api-change:stepfunctions: [botocore] Updated default SDK endpoints for AWS Step Functions in AWS GovCloud (US) regions. The default Dual-Stack endpoints now resolve to "states-fips" prefixed hostnames. There are no changes to service behavior. No customer action is required.

v1.43.6

Compare Source

======

  • api-change:bcm-data-exports: [botocore] With this release, customers can configure their data exports to generate additional integration artifacts for Athena and Redshift.
  • api-change:bedrock-agentcore: [botocore] Launching AgentCore payments - a capability that provides secure, instant microtransaction payments for AI agents to access paid APIs, MCP servers, and content. It handles payment processing for x402 protocol, payment limits, and 3P wallet integrations with Coinbase CDP and Stripe (Privy).
  • api-change:bedrock-agentcore-control: [botocore] Launching AgentCore payments - a capability that provides secure, instant microtransaction payments for AI agents to access paid APIs, MCP servers, and content. It handles payment processing for x402 protocol, payment limits, and 3P wallet integrations with Coinbase CDP and Stripe (Privy).
  • api-change:ec2: [botocore] DescribeInstanceTypes now accepts an IncludeUnsupportedInRegion parameter. When set, the response also lists instance types that are not available in the current Region. Each instance type includes a SupportedInRegion field indicating its regional availability.
  • api-change:guardduty: [botocore] This is a documentation update
  • api-change:invoicing: [botocore] Updated ListInvoiceSummaries API to add new ReceiverRole filter in Request and Response
  • api-change:route53resolver: [botocore] Adds supports for DNS64 on inbound endpoints and IPv6 forwarding through the internet gateway (IGW) on outbound endpoints, making it easier to manage hybrid DNS across IPv4 and IPv6 networks.

v1.43.5

Compare Source

======

  • api-change:bedrock-agentcore-control: [botocore] Adds support for bring-your-own file system in AgentCore Runtime. Developers can mount Amazon S3 Files and Amazon EFS access points directly into agent sessions using filesystemConfigurations.
  • api-change:endpoint-rules: [botocore] Update endpoint-rules client to latest version
  • api-change:glue: [botocore] Adds support for a CustomLogGroupPrefix parameter in StartDataQualityRulesetEvaluationRun to specify custom CloudWatch log group paths, and a RulesetName filter in ListDataQualityRulesetEvaluationRuns to filter evaluation runs by ruleset name.
  • api-change:imagebuilder: [botocore] The ImportDiskImage API now enforces a maximum character limit of 128 characters on the image name field.
  • api-change:lexv2-models: [botocore] Amazon Lex V2 introduces audio filler support for speech-to-speech bots. Configure melody or typing sounds that play during backend processing to reduce perceived latency and maintain a natural conversational experience for callers.
  • api-change:mwaa: [botocore] Amazon MWAA now supports a PublicAndPrivate webserver access mode. The Airflow web server is accessible over both public and private endpoints, enabling workers in VPCs without internet access to reach the Task API privately while retaining public access to the Airflow UI.
  • api-change:s3: [botocore] Validate outpost access point resource name
  • api-change:sagemaker: [botocore] Amazon SageMaker HyperPod now returns ImageVersionStatus in DescribeCluster, DescribeClusterNode, and ListClusterNodes responses, indicating whether cluster instances are running the latest available image version.
  • api-change:securityhub: [botocore] Release GenerateRecommendedPolicyV2 and GetRecommendedPolicyV2 APIs. This supports generating and retrieving policy recommendations to remediate unused permissions findings that are now being supported on Security Hub.

v1.43.4

Compare Source

======

  • api-change:cleanroomsml: [botocore] Increase max configurable output limits in the Clean Rooms ML configured model algorithm association resource.
  • api-change:cloudfront: [botocore] Adds support for tagging CloudFront Functions and KeyValueStores resources.
  • api-change:marketplace-agreement: [botocore] With this release, Agreements API provides a programmatic way to generate quotes, accept offers, track charges and entitlements, manage renewals and cancellations, and streamline operations entirely through APIs without navigating to the AWS Marketplace website or AWS Management Console.
  • api-change:mediatailor: [botocore] Added support for Monetization Functions. Monetization Functions let you enrich ad requests with external data and transform session parameters using JSONata expressions, without deploying custom infrastructure.
  • api-change:medical-imaging: [botocore] Add support for DICOM Json Metadata Override features in startDICOMImportJob API
  • api-change:opensearch: [botocore] Amazon OpenSearch Service now supports VPC egress, enabling outbound traffic from your OpenSearch domain to route privately through your VPC instead of the public internet.
  • api-change:route53domains: [botocore] This release adds the TLDInMaintenance exception.
  • api-change:sagemaker: [botocore] Adds support for ml.p5.4xlarge instance type for SageMaker Studio JupyterLab and CodeEditor apps for IAD (us-east-1), NRT (ap-northeast-1), BOM (ap-south-1), CGK (ap-southeast-3), GRU (sa-east-1), PDX (us-west-2), CMH (us-east-2).

v1.43.3

Compare Source

======

  • api-change:bedrock-agentcore-control: [botocore] Amazon Bedrock AgentCore gateways now support MCP Sessions and response streaming from MCP targets. Session timeouts can be set between 15 minutes and 8 hours, and response streaming enables forwarding stream events sent by MCP targets to gateway users.
  • api-change:ec2: [botocore] This feature allows customers to change the tunnel bandwidth on existing VPN connections using the ModifyVpnConnectionOptions API
  • api-change:geo-routes: [botocore] Added support for TravelTimeExceedsDriverWorkHours, ViolatedBlockedRoad, and ViolatedVehicleRestriction notice codes to the CalculateRoutes API response.
  • api-change:lex-models: [botocore] Lex V1 is deprecated, use Lex V2 instead
  • api-change:logs: [botocore] Adding an additional optional deliverySourceConfiguration field to PutDeliverySource API. This enables customers to pass service-specific configurations through IngestionHub such as tracing enablement or sampling rates that will be propagated to the source resource.
  • api-change:medialive: [botocore] Updates the type of the MediaLiveRouterOutputConnectionMap.
  • api-change:securityagent: [botocore] AWS Security Agent is adding a new target domain verification method for private VPC penetration testing. Additionally, the target domain resource will now have a verification status reason field to surface additional details about domain verification
  • api-change:vpc-lattice: [botocore] Amazon VPC Lattice now supports privately resolvable DNS resources

v1.43.2

Compare Source

======

  • api-change:appstream: [botocore] Amazon WorkSpaces Applications now enables AI agents to securely operate desktop applications. Administrators configure stacks to provide agents access to WorkSpaces. Agents can click, type, and take screenshots. Agents authenticate with AWS IAM credentials with activity logged in AWS CloudTrail.
  • api-change:cloudwatch: [botocore] This release adds tag support for CloudWatch Dashboards. The PutDashboard API now accepts a Tags parameter, allowing you to tag dashboards at creation time. Additionally, the TagResource, UntagResource, and ListTagsForResource APIs now support dashboard ARNs as resources.
  • api-change:entityresolution: [botocore] Add support for transitive matching in AWS Entity Resolution rule-based matching workflows. When enabled, records that match through different rules are grouped together into the same match group, allowing related records to be connected across rule levels.
  • api-change:iam: [botocore] Added guidance for CreateOpenIDConnectProvider to include multiple thumbprints when OIDC discovery and JWKS endpoints use different hosts or certificates
  • api-change:iot: [botocore] AWS IoT HTTP rule actions now support cross-topic batching, combining messages from different MQTT topics into single HTTP requests.
  • api-change:logs: [botocore] Adds support for filtering log groups by tags in the ListLogGroups API via the new logGroupTags parameter.
  • api-change:qconnect: [botocore] Added reasoning details, statusDescription, and timeToFirstTokenMs fields to the ListSpans response in Amazon Q in Connect to provide visibility into model thinking, error diagnostics, and inference latency metrics.
  • api-change:quicksight: [botocore] Add IdentityProviderCACertificatesBundleS3Uri for private CA certs with OAuth datasources. 256-char limit for FontFamily in themes. ControlTitleFormatText on all 13 filters. ControlTitleFontConfiguration. ContextRegion for cross-region identity context. Story,scenario in CreateCustomCapability API.

v1.43.1

Compare Source

======

  • api-change:bedrock-agentcore: [botocore] AgentCore Identity now supports on-behalf-of token exchange OAuth2. AgentCore Memory now supports metadata for LongTerm Memory Records.
  • api-change:bedrock-agentcore-control: [botocore] AgentCore Identity now supports on-behalf-of token exchange OAuth2. AgentCore Memory now supports metadata for LongTerm Memory Records.
  • api-change:datazone: [botocore] Adds support for asynchronous notebook runs
  • api-change:eks: [botocore] Vended logs update param for capability vended logs feature
  • api-change:kafka: [botocore] Adds support for ZookeeperAccess field to control the Client-Zookeeper connectivity.
  • api-change:observabilityadmin: [botocore] Observability Admin enablement launch for AWS Kafka, Bedrock Agent Core Workload Identity and OTel metric enablement.
  • api-change:payment-cryptography: [botocore] Adds support for resource-based policies on AWS Payment Cryptography keys, enabling cross-account key sharing. Also adds Multi-Party Approval (MPA) team association APIs for protecting sensitive import root public key operations.
  • api-change:route53globalresolver: [botocore] Adds support for regions in the UpdateGlobalResolver input.
  • api-change:sagemaker: [botocore] Add InstancePools support to Endpoint for flexible provisioning across a prioritized list of instance types. Add Specifications support to InferenceComponent for per-instance-type model configurations.
  • api-change:sso-admin: [botocore] Add InstanceArn and IdentityStoreArn in the response of CreateApplication API and IdentityStoreArn in the response of DescribeApplication API

v1.43.0

Compare Source

======

  • api-change:account: [botocore] Adds AccountState in the response for the GetAccountInformation API. Each state represents a specific phase in the account lifecycle. Use this information to manage account access, automate workflows, or trigger actions based on account state changes.
  • api-change:bedrock-agentcore: [botocore] Adds batch evaluation for running evaluators against multiple agent sessions with server-side orchestration, AI-powered recommendations for optimizing system prompts and tool descriptions, and AB testing with controlled traffic splitting and statistical significance reporting
  • api-change:bedrock-agentcore-control: [botocore] Adds configuration bundles for versioned, immutable agent configuration snapshots with branch-based lineage
  • api-change:cloudfront: [botocore] Amazon CloudFront now supports cache tag. Tag objects via response headers and invalidate all matching objects in a single request, replacing manual URL tracking and broad wildcards.
  • api-change:deadline: [botocore] Adds support for rtx-pro-server-6000 GPU accelerator for service-managed fleets.
  • api-change:ecr: [botocore] Removes support for registry policy V1
  • api-change:gamelift: [botocore] Amazon GameLift Servers adds a new DescribeContainerGroupPortMappings API for container fleets, making it easy to discover which connection ports map to your container ports without needing to remotely access the compute.
  • api-change:mediapackagev2: [botocore] This feature adds configuration for specifying SCTE marker handling and allow greater control over generated manifest and segment URIs
  • api-change:transfer: [botocore] This launch will increase the limits for customers to list the contents from the remote directories from 10k to 200k.
  • api-change:workspaces-web: [botocore] Allow admins to configure IPv6 ranges on IP Access Settings.
  • enhancement:awscrt: [botocore] Update awscrt version to 0.32.2
  • feature:Python: [botocore] End of support for Python 3.9
  • feature:Python: End of support for Python 3.9

v1.42.97

Compare Source

=======

  • api-change:application-signals: [botocore] Application Signals now supports creating composite Service Level Objectives on Service Operations. Users can now create service SLO on multiple operations.
  • api-change:billingconductor: [botocore] Add support for Passthrough pricing plan
  • api-change:gameliftstreams: [botocore] Adds Proton 10.0-4 to the list of runtime environment options available when creating an Amazon GameLift Streams application
  • api-change:glue: [botocore] Addition of AdditionalAuditContext to GetPartition, GetPartitions, GetTableVersion, and GetTableVersions
  • api-change:ivs: [botocore] Adds tags parameter to the CreateAdConfiguration operation
  • api-change:kms: [botocore] KMS GetKeyLastUsage API provides information on the last successful cryptographic operation performed on KMS keys. This new API provides KMS customers with the last timestamp, CloudTrail eventId, and the cryptographic operation that was performed on the key.
  • api-change:logs: [botocore] Adds support for selecting all logs sources and types in a single association.
  • api-change:mgn: [botocore] Added network modernization support, enabling customers to edit, resize, merge, and split VPCs and subnets during migration while retaining functional, non-conflicting IP addresses.
  • api-change:omics: [botocore] Enable Public Internet or VPC configuration to BatchRun
  • api-change:opensearch: [botocore] Amazon OpenSearch Service now supports JWKS URL configuration for JWT authentication
  • api-change:sagemaker: [botocore] Updated API documentation for endpoint MetricsConfig. Added details on supported metric publish frequencies and clarified how EnableEnhancedMetrics controls utilization and invocation metric behavior.
  • api-change:workspaces: [botocore] Added support for Protocol as modified resource and added update failure as modification state

v1.42.96

Compare Source

=======

  • api-change:bedrock-agentcore-control: [botocore] Added support for configuring identity providers and inbound authorizers within a private VPC for AWS Bedrock AgentCore, enabling secure network connection without public internet access
  • api-change:connect: [botocore] Amazon Connect is expanding attachment capabilities to give customers greater flexibility and control. Currently limited to predefined file types, the new feature will allow contact center administrators to customize which file extensions and sizes are supported across chat, email, tasks, and cases.
  • api-change:connecthealth: [botocore] Corrected CreateWebAppConfiguration documentation. Adding slash as an allowed character for the Ambient documentation agent to allow pronoun specifications.
  • api-change:evs: [botocore] EVS now supports i7i.metal-24xl EC2 bare metal instance type, delivering high random IOPS performance with real-time latency, ideal for IO intensive and latency-sensitive workloads such as transactional databases, real-time analytics, and AI ML pre-processing.
  • api-change:logs: [botocore] Adding nextToken and maxItems to the GetQueryResults API.
  • api-change:transfer: [botocore] AWS Transfer Family now support configurable IP address types for Web Apps of type VPC, enabling customers to select IPv4-only or dual-stack (IPv4 and IPv6) configurations based on their network requirements.

v1.42.95

Compare Source

=======

  • api-change:datazone: [botocore] Releasing For LakehouseProperties attributes in the Connections API's
  • api-change:iot-managed-integrations: [botocore] Adds "Status" field to provisioning profile operation response types, giving users visibility into the readiness of a provisioning profile to be used for device provisioning.
  • api-change:opensearch: [botocore] Amazon OpenSearch UI applications now support cross-Region domain association, enabling you to connect OpenSearch Dashboards in one AWS Region to OpenSearch domains in other Regions within the same partition for centralized data visualization.
  • api-change:pcs: [botocore] This release adds support for Slurm 25.11 with expedited requeue enabled by default for jobs failing due to node issues, configurable requeue delay, health checks at node startup only, and unauthenticated HTTP endpoints disabled by default for improved security.
  • bugfix:cloudwatch: [botocore] Alias get_o_tel_enrichment, start_o_tel_enrichment, and stop_o_tel_enrichment botocore methods to use otel instead of o_tel.

v1.42.94

Compare Source

=======

  • api-change:batch: [botocore] Support of S3Files volume type, container start and stop timeouts.
  • api-change:bedrock-agentcore: [botocore] Adds support for Amazon Bedrock AgentCore Harness data plane APIs, enabling customers to invoke managed agent loops and execute commands on live agent sessions with streaming responses.
  • api-change:bedrock-agentcore-control: [botocore] Adds support for Amazon Bedrock AgentCore Harness control plane APIs, enabling customers to create, manage, and configure managed agent loops with customizable models, tools, memory, and isolated execution environments.
  • api-change:ec2: [botocore] Managed resource visibility settings control whether resources that AWS services provision on your behalf within your AWS account appear in your Amazon console views and API list operations.
  • api-change:ecs: [botocore] GPU health monitoring and auto-repair for ECS Managed Instances
  • api-change:emr-serverless: [botocore] This release adds support for Spark connect sessions starting with release label emr-7.13.0.
  • api-change:endpoint-rules: [botocore] Update endpoint-rules client to latest version
  • api-change:iotwireless: [botocore] Enable customers to optionally specify a desired confidence level for Cellular and WiFi position estimates. Customers can use this to trade off confidence level and radius of uncertainty based on their needs.
  • api-change:ivs: [botocore] Adds support for Amazon IVS server-side ad insertion
  • api-change:lambda: [botocore] Add Ruby 4.0 (ruby4.0) support to AWS Lambda.
  • api-change:opensearch: [botocore] Adds support for RollbackServiceSoftwareUpdate API
  • api-change:osis: [botocore] Update the pipeline configuration body character limit for the CreatePipeline API call.
  • api-change:s3: [botocore] This release adds five additional checksum algorithms for S3 data integrity (MD5, SHA-512, XXHash3, XXHash64, XXHash128) and support for S3 Inventory on directory buckets (S3 Express One Zone).
  • api-change:s3control: [botocore] This release adds support for five additional checksum algorithms for data integrity checking in Amazon S3 - MD5, SHA-512, XXHash3, XXHash64, and XXHash128.

v1.42.93

Compare Source

=======

  • api-change:cognito-idp: [botocore] Adding dutch language support for Cognito Managed Login and Terms on Console
  • api-change:comprehendmedical: [botocore] This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.1. The SDK will prioritize its most performant protocol.
  • api-change:compute-optimizer: [botocore] This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.0. The SDK will prioritize its most performant protocol.
  • api-change:compute-optimizer-automation: [botocore] This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.0. The SDK will prioritize its most performant protocol.
  • api-change:gamelift: [botocore] This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.1. The SDK will prioritize its most performant protocol.
  • api-change:marketplace-entitlement: [botocore] This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.1. The SDK will prioritize its most performant protocol.
  • api-change:network-firewall: [botocore] Support for new types of partner managed rulegroups for Network Firewall Service
  • api-change:sagemaker: [botocore] SageMaker AI now supports generative AI inference recommendations. Provide your model and workload, and SageMaker AI optimizes configurations, benchmarks them on real GPUs, and returns deployment-ready recommendations with validated metrics, accelerating the path to production from weeks to hours.
  • api-change:snowball: [botocore] This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.1. The SDK will prioritize its most performant protocol.

v1.42.92

Compare Source

=======

  • api-change:application-signals: [botocore] Releasing Second phase of SLO Recommendations where you can create recommended SLOs out-of-the box using CreateSLO API
  • api-change:bedrock-agentcore-control: [botocore] Supporting listingMode for AgentCore Gateway MCP server targets
  • api-change:ec2: [botocore] Added Transit Gateway Integration into AWS Client VPN.
  • api-change:evs: [botocore] Amazon EVS now allows you to create connectors to your vCenter appliances and create Windows Server entitlements for virtual machines running in your EVS environments
  • api-change:guardduty: [botocore] Expanded support for new suppression rule fields.
  • api-change:kafka: [botocore] Amazon MSK Replicator now supports data migration from external Apache Kafka clusters to Amazon MSK Express brokers. This release adds SaslScram authentication with TLS encryption, enhanced consumer offset synchronization, and customer log forwarding for troubleshooting.
  • api-change:location: [botocore] This release adds support for new Job APIs for bulk workloads. The initial job type supported is Address Validation. The new APIs added are StartJob, CancelJob, ListJobs, and GetJob.
  • api-change:observabilityadmin: [botocore] Enablement for Security Hub v2 via Observability Admin Telemetry Rule for account and organization level.

v1.42.91

Compare Source

=======

  • api-change:cleanrooms: [botocore] This release adds support for configurable spark properties for Cleanrooms PySpark workloads.
  • api-change:connect: [botocore] Fixes in SDK for customers using TestCase APIs
  • api-change:connectcampaignsv2: [botocore] This release adds support for campaign entry limits configuration and hourly refresh frequency in Amazon Connect Outbound Campaigns.
  • api-change:groundstation: [botocore] Adds support for updating contacts, listing antennas, and listing ground station reservations. New API operations - UpdateContact, ListContactVersions, DescribeContactVersion, ListAntennas, and ListGroundStationReservations.
  • api-change:imagebuilder: [botocore] ImportDiskImage API adds registerImageOptions for Secure Boot control and custom UEFI data. It adds windowsConfiguration for selecting a specific edition from multi-image .wim files during ISO import.
  • api-change:neptune: [botocore] Improving Documentation for Neptune
  • api-change:quicksight: [botocore] Public release of dashboard customization summary, S3 Tables data source type, Athena cross-account connector, custom sorting for controls, and AI-powered analysis generation.
  • api-change:sagemaker: [botocore] Adds support for providing NetworkInterface for efa enabled instances and Simplified cluster creation for Slurm-orchestrated clusters with optional Lifecycle Script (LCS) configuration.
  • api-change:sts: [botocore] The STS client now supports configuring SigV4a through the auth scheme preference setting. SigV4a uses asymmetric cryptography, enabling customers using long-term IAM credentials to continue making STS API calls even when a region is isolated from the partition leader.

v1.42.90

Compare Source

=======

  • api-change:appstream: [botocore] Add content redirection to Update Stack
  • api-change:autoscaling: [botocore] This release adds support for specifying Availability Zone IDs as an alternative to Availability Zone names when creating or updating Auto Scaling groups.
  • api-change:bedrock-agentcore: [botocore] Introducing NamespacePath in AgentCore Memory to support hierarchical prefix based memory record retrieval.
  • api-change:cloudwatch: [botocore] Update

Note

PR body was truncated to here.


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • "before 7am on monday"
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot added automated dependencies noChangeLog This does not require a changelog line labels Apr 20, 2026
@renovate renovate Bot force-pushed the renovate/python-dependencies branch from b548354 to 3b81eaf Compare April 27, 2026 00:40
@renovate renovate Bot force-pushed the renovate/python-dependencies branch from 3b81eaf to 7e3e676 Compare May 4, 2026 01:16
@renovate renovate Bot force-pushed the renovate/python-dependencies branch 2 times, most recently from c46743e to a3af5d2 Compare May 18, 2026 01:18
@sonarqubecloud
Copy link
Copy Markdown

@renovate renovate Bot force-pushed the renovate/python-dependencies branch from a3af5d2 to f461077 Compare May 25, 2026 01:00
@sonarqubecloud
Copy link
Copy Markdown

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

automated dependencies noChangeLog This does not require a changelog line

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants