Skip to content

Update Python dependencies (main)#1798

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/main-python-dependencies
Open

Update Python dependencies (main)#1798
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/main-python-dependencies

Conversation

@renovate

@renovate renovate Bot commented Jun 23, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Change Age Confidence
boto3 ^1.43.30^1.43.36 age confidence
cosl 1.9.11.9.2 age confidence
coverage ^7.14.1^7.14.3 age confidence
jubilant ^1.8.0^1.10.0 age confidence
pytest (changelog) ^9.1.0^9.1.1 age confidence
ruff (source, changelog) ^0.15.17^0.15.18 age confidence
ty (changelog) ^0.0.50^0.0.52 age confidence

Release Notes

boto/boto3 (boto3)

v1.43.36

Compare Source

=======

  • api-change:kafka: [botocore] Amazon MSK Replicator now supports mTLS authentication when connecting to external Apache Kafka clusters, enabling customers to replicate data from clusters that require mutual TLS for client authentication. This capability is supported when replicating to Amazon MSK Express brokers.

v1.43.35

Compare Source

=======

  • api-change:application-signals: [botocore] Application Signals now supports dynamic instrumentation and Service Events telemetry. Add instrumentation at runtime without restarts, and use fine-grained profiling data to quickly pinpoint latency and error root causes.
  • api-change:bedrock-agentcore: [botocore] Adds an optional extractionMode field to CreateEvent. SKIP retains the event in short-term memory but excludes it from long-term memory extraction.
  • api-change:directconnect: [botocore] Added VIF rate limiting support for AWS Direct Connect, allowing customers to set bandwidth allocations on virtual interfaces to manage traffic on dedicated connections.
  • api-change:ec2: [botocore] This release adds support for AMI Watermark and Allowed AMIs integration
  • api-change:endpoint-rules: [botocore] Update endpoint-rules client to latest version
  • api-change:guardduty: [botocore] Added AI-powered investigations that automatically analyze security findings, correlate related activity, and produce structured summaries with risk assessment, confidence scoring, MITRE technique classification, and actionable next steps.
  • api-change:kafka: [botocore] Amazon MSK Replicator now supports mTLS authentication when connecting to external Apache Kafka clusters, enabling customers to replicate data from clusters that require mutual TLS for client authentication. This capability is supported when replicating to Amazon MSK Express brokers.
  • api-change:lambda: [botocore] Add support for tagging Network Connector resources in AWS Lambda.
  • api-change:lambda-core: [botocore] Initial release of the AWS Lambda Core SDK with APIs to create, manage, and tag network connectors that enable Lambda compute resources to access private resources in your Amazon VPC.
  • api-change:lambda-microvms: [botocore] Lambda MicroVMs GA launch. Lambda MicroVMs enable isolated and highly responsive execution of user-supplied or LLM-generated code.
  • api-change:logs: [botocore] CloudWatch Logs Updates - New APIs introduced to support syslog ingestion to a log group. For more information, see CloudWatch Logs API documentation.
  • api-change:mediaconnect: [botocore] AWS MediaConnect now supports Content Quality Analysis for Router Inputs, enabling detection of black frames, frozen frames, and silent audio with configurable thresholds.
  • api-change:omics: [botocore] Adds support for scratch ephemeral storage mounted at tmp
  • api-change:quicksight: [botocore] Updated the Amazon Quick Spaces API to remove unsupported SPACE and ARTIFACT values from the SpaceQuickSightResourceType enum.

v1.43.34

Compare Source

=======

  • api-change:appstream: [botocore] Amazon WorkSpaces Agent Access now supports domain-joined fleets for enterprise identity integration, real-time agent observation with instant stop controls, and MCP tool forwarding for lower-latency, cost-effective desktop tool access.
  • api-change:bedrock-agent: [botocore] Add support for metadata-only retrieval on GetFlow, GetFlowVersion, and GetPrompt APIs.
  • api-change:connect: [botocore] This is the release for point based scoring system and the evaluation form validation project
  • api-change:glue: [botocore] Adds the SearchAssets operation for discovering assets in the AWS Glue Data Catalog using full-text search and filters. Minor naming refinements across the Glossary Terms and Attachment APIs for consistency.
  • api-change:opensearch: [botocore] This release introduces data source attachment APIs, enabling users to attach and detach Amazon OpenSearch Service domains and Amazon OpenSearch Serverless collections to an OpenSearch application.

v1.43.33

Compare Source

=======

  • api-change:application-autoscaling: [botocore] Adds support for ECS high-resolution predefined scaling metrics (ECSServiceAverageCPUUtilizationHighResolution, ECSServiceAverageMemoryUtilizationHighResolution) enabling 20-second metric periods for faster scaling
  • api-change:batch: [botocore] Adds Support for ordered allocation strategies- BEST-FIT-PROGRESSIVE-ORDERED or SPOT-CAPACITY-OPTIMIZED-PRIORITIZED
  • api-change:cognito-idp: [botocore] In order to support the new TLS Self-Service feature, this change adds SecurityPolicyType to CustomDomainConfigType. During CreateUserPoolDomain and UpdateUserPoolDomain this is used to select a custom domain's TLS enforcement, and for DescribeUserPoolDomain it informs users about the current TLS.
  • api-change:compute-optimizer: [botocore] This release surfaces two new metrics Volume IOPS Exceeded and Volume Throughput Exceeded into EBS volume rightsizing recommendations.
  • api-change:ec2: [botocore] Documentation updates clarifying CancelCapacityReservation cancellable states
  • api-change:ecs: [botocore] Amazon ECS services now support high resolution (20 second) CloudWatch metrics for CPUUtilization and MemoryUtilization. Use these metrics for faster service auto scaling.
  • api-change:eks: [botocore] Adds support for configurable control plane egress routing in Amazon EKS, allowing you to route control plane egress traffic through your VPC and control how the control plane reaches resources in your network such as webhook servers and OIDC providers.
  • api-change:gamelift: [botocore] Amazon GameLift Servers has launched support for customizing Linux capabilities in container fleets. You can now specify additional Linux capabilities for containers in a container group definition, giving you finer control over the default Docker capabilities available to your containers.
  • api-change:healthlake: [botocore] Adding New Configurations to the FHIR Create Datastore. The new configurations include NLP Configuration, AnalyticsConfiguration, ProfileConfiguration
  • api-change:lambda: [botocore] Converging and fixing existing documentation gaps in Lambda SDK
  • api-change:logs: [botocore] Added optional startFromHead parameter to FilterLogEvents enabling descending timestamp order (newest first) when set to false. Default true preserves existing ascending order. Reverse sorting requires a startTime on or after Jan 1, 2024.
  • api-change:sagemaker: [botocore] Adds support for automatic AMI patching on HyperPod clusters. Customers can configure patching strategies to automatically apply security patch with zero job termination. Customers can also specify an AMI version at instance group level and update cluster software to a certain AMI version.
  • api-change:synthetics: [botocore] CloudWatch Synthetics adds support for multi-location canaries. Customers can now monitor their endpoints from multiple locations with centralized management from a primary location. The SDK includes new parameters for configuring multiple locations and tracking their state.

v1.43.32

Compare Source

=======

  • api-change:bedrock-agent: [botocore] Launching Bedrock Managed Knowledge Bases. Added support for resource-based policies on Knowledge Base resources, enabling cross-account access for Managed Knowledge Bases.
  • api-change:bedrock-agentcore: [botocore] AgentCore Harness service will be Generally Available at NYS 2026 with this Treb release. Harness will support invoking specific endpoints via the qualifier parameter, AWS Skills for pre-built agent capabilities, and improved validation for skill git source URLs.
  • api-change:bedrock-agentcore-control: [botocore] AgentCore Gateway now supports inference targets to LLM providers (direct config or built-in connectors), HTTP passthrough targets with session stickiness, runtime target API schemas, AWS WAF web ACL association with configurable fail-open or fail-close modes, and interceptor payload filtering.
  • api-change:bedrock-agent-runtime: [botocore] Adds new AgenticRetrieveStream API for managed knowledge bases to use conversation history and autonomously plan for multi-hop multi-KB reasoning with built-in evaluation and access-control. Updates Retrieve API for access-control-based filtering for managed knowledge bases.
  • api-change:compute-optimizer-automation: [botocore] This launch adds IfExists comparison operators to Compute Optimizer Automation rule criteria, so a rule can include recommended actions whose specified attribute isn't present.
  • api-change:devops-agent: [botocore] Adds support for Remote A2A (Agent-to-Agent) agent registration and management. Adds new Release Readiness Review and Release Testing capabilities. Adds support for Git managed skills in AWS DevOps Agent.
  • api-change:ecs: [botocore] Releasing the ability to bring-your-own task-definition for CreateExpressGatewayService and UpdateGatewayExpressService
  • api-change:glue: [botocore] This release adds support for Search and Discovery in AWS Glue, letting you and your applications search Data Catalog assets such as table and enrich them with business context and glossary terms.
  • api-change:mq: [botocore] This release adds private networking support for Amazon MQ for RabbitMQ. You can now associate AWS RAM resource shares with your broker and retrieve shared resource details using the new DescribeSharedResources API.
  • api-change:opensearch: [botocore] Adds support for configuring IAM Identity Center options on existing OpenSearch applications via the UpdateApplication API.
  • api-change:partnercentral-selling: [botocore] Cosell Resonate AND Prospecing API Launch with ARN correction
  • api-change:securityagent: [botocore] Updated AWS Security Agent SDK model with new APIs for threat modeling, code review, security requirements, and additional integration providers.

v1.43.31

Compare Source

=======

  • api-change:directconnect: [botocore] Added VIF rate limiting support for AWS Direct Connect, allowing customers to set bandwidth allocations on virtual interfaces to manage traffic on dedicated connections.
  • api-change:outposts: [botocore] Adds support for creating an order from quotes.
  • api-change:partnercentral-selling: [botocore] Added Prospecting APIs to convert engagements into AI-enriched leads with scoring insights. Extended Engagement APIs with ProspectingResult and Lead contexts. Added CoSell Scoring to GetAwsOpportunitySummary- quality score, trend, agent-driven recommendations, and engagement classification.
  • api-change:route53resolver: [botocore] Adds supports for PartnerManagedRules
  • api-change:s3: [botocore] Added support for annotations. You can now attach up to 1000 annotations (up to 1 MB each) directly to objects and create, retrieve, list, and delete them using new annotation APIs. Also added support for configuring an annotation table in S3 Metadata.
  • api-change:s3vectors: [botocore] Amazon S3 Vectors now supports paginated QueryVectors requests, returning up to 10,000 results per query.
  • api-change:sagemaker: [botocore] Add EnableDetailedObservability to Endpoint MetricsConfig. Publishes GPU, host, and framework-native inference metrics to CloudWatch with per-inference-component, availability-zone, and instance dimensions. Adds Inference Component provisioning lifecycle and multi-AZ placement metrics.
canonical/cos-lib (cosl)

v1.9.2

Compare Source

What's Changed

Full Changelog: canonical/cos-lib@1.9.1...1.9.2

coveragepy/coveragepy (coverage)

v7.14.3

Compare Source

  • Fix: the default ... exclusion rule now also matches function bodies
    whose closing return-type bracket is on its own line (for example, after a
    long -> dict[ ... ] annotation that a formatter has split over multiple
    lines). Closes issue 2185, thanks Mengjia Shang <pull 2196_>.

  • Fix: On 3.13t, we incorrectly issued Couldn't import C tracer errors.
    We can't import the C tracer because in 7.14.2 we stopped shipping compiled
    wheels for 3.13t. Thanks, Hugo van Kemenade <pull 2203_>_.

.. _issue 2185: #​2185
.. _pull 2196: #​2196
.. _pull 2203: #​2203

.. _changes_7-14-2:

v7.14.2

Compare Source

  • Fix: some messages were being written to stdout, making coverage json -o - useless for capturing JSON output. Now messages are written to stderr,
    fixing issue 2197_.

  • Fix: CoverageData kept one SQLite connection per thread that recorded
    coverage, but never closed them when those threads terminated. On long runs
    with many short-lived threads this leaked one file descriptor per dead
    thread, eventually failing with OSError: [Errno 24] Too many open files.
    Connections belonging to terminated threads are now closed and dropped.
    Fixes issue 2192_.

  • Fix: when using sys.monitoring, we were assuming we could use the
    COVERAGE_ID tool id. But other tools might also assume they could use
    that id. Pre-allocated ids don't really make sense, so now we search for a
    usable one instead. Fixes issue 2187. Thanks, Matthew Lloyd <pull 2198_>.

  • Following the advice of cibuildwheel <no-13t_>_, we no longer distribute
    wheels for Python 3.13 free-threaded.

.. _issue 2187: #​2187
.. _issue 2192: #​2192
.. _issue 2197: #​2197
.. _pull 2198: #​2198
.. _no-13t: https://py-free-threading.github.io/ci/#building-free-threaded-wheels-with-cibuildwheel

.. _changes_7-14-1:

canonical/jubilant (jubilant)

v1.10.0

Compare Source

Features

  • Add add_machine command (#​305)

Fixes

  • Add ./ for relative pathlib.Path objects in deploy (#​317)

Documentation

  • Replace the PGP key with the upstream page in SECURITY.md (#​316)
  • Improve support for agents, with Sphinx Stack upgrade (#​322)

CI

  • Use sbomber to security scan and generate SBOM on release (#​325)

v1.9.0

Compare Source

Features

  • Implement add_cloud and update_cloud methods (#​283)

Fixes

  • Correct behaviour when transparently handling Juju's snap confinement (#​275)

Documentation

  • Restructure homepage and update intro to Jubilant (#​287)

CI

  • Configure dependabot (#​288)
  • Pin the versions of zizmor and codespell when run by pre-commit (#​303)
  • Fix unit runs-on (#​302)
  • Run CI (especially integration tests) every Monday morning (#​301)
pytest-dev/pytest (pytest)

v9.1.1

Compare Source

pytest 9.1.1 (2026-06-19)

Bug fixes

  • #​14220: Fixed a logic bug in pytest.RaisesGroup which would might cause it to display incorrect "It matches FooError() which was paired with BarError" messages.
  • #​14591: Fixed a regression in pytest 9.1.0 which caused overriding a parametrized fixture with an indirect @​pytest.mark.parametrize to fail with "duplicate parametrization of '<fixture name>'".
  • #​14606: Fixed list-item typing errors from mypy in @pytest.mark.parametrize <pytest.mark.parametrize ref> argvalues parameter.
  • #​14608: Fixed a regression in pytest 9.1.0 where conftest.py files located in <invocation dir>/test* were no longer loaded as initial conftests when invoked without arguments.
    This could cause certain hooks (like pytest_addoption) in these files to not fire.
astral-sh/ruff (ruff)

v0.15.18

Compare Source

Released on 2026-06-18.

Preview features
  • Handle nested ruff:ignore comments (#​25791)
  • Stop displaying severity in output (#​26050)
  • Use human-readable names in CLI output (#​25937)
  • Use human-readable names in LSP and playground diagnostics (#​26058)
  • [pydocstyle] Prevent property docstrings starting with verbs (D421) (#​23775)
  • [flake8-pyi] Extend PYI033 to Python files (#​26129)
Bug fixes
  • Detect equivalent numeric mapping keys (#​26009)
  • Detect mapping keys equivalent to booleans (#​25982)
  • Detect repeated signed and complex dictionary keys (#​26007)
Rule changes
  • [flake8-pyi] Rename PYI033 to legacy-type-comment (#​26131)
Performance
  • Use ThinVec for call keywords (#​25999)
  • Inline parser recovery context checks (#​26038)
  • Match parser keywords as bytes (#​26037)
  • Move value parsing out of lexing (#​25360)
Server
  • Render subdiagnostics and secondary annotations as related information (#​26011)
Documentation
  • Update fix availability for always-fixable rules (#​26091)
  • [flake8-tidy-imports] Add fix safety section (TID252) (#​17491)
Parser
  • Reject __debug__ lambda parameters (#​26022)
  • Reject _ as a match-pattern target (#​25977)
  • Reject multiple starred names in sequence patterns (#​25976)
  • Reject parenthesized star imports (#​26021)
  • Reject starred comprehension targets (#​26023)
  • Reject unparenthesized generator expressions in class bases (#​25978)
  • Reject yield expressions after commas (#​26024)
  • Validate function type parameter default order (#​25981)
Playground
Contributors
astral-sh/ty (ty)

v0.0.52

Compare Source

Released on 2026-06-22.

Bug fixes
  • Avoid shadowing hints for attribute assignments (#​26164)
  • Fix dict.pop overloads to accept arbitrary keys with defaults (#​26241)
  • Normalize recursive TypeOf across multiple union arms (#​26230)
  • Normalize recursive TypeOf growth during cycle recovery (#​26163)
  • Normalize recursive protocol growth during cycle recovery (#​26246)
  • Preserve generic alias identity during cycle recovery (#​26166)
  • Recover from dynamic class code generator cycles (#​26167)
LSP server
  • Add a go-to destination for Divergent (#​26162)
  • Publish diagnostics for all open files after a single file is saved (#​25929)
  • Render Markdown for reStructuredText fields in docstrings on hover (#​25903)
CLI
  • Make error-on-warning the default (#​26157)
Diagnostics
  • Make rendering of fix diffs more concise (#​26161)
Performance
  • Avoid allocating disabled error context trees (#​26191)
  • Avoid lookup maps for small place tables (#​26177)
  • Avoid moving boxed use-def map builders (#​26211)
  • Avoid transient AST ID merge map (#​26185)
  • Batch signature typevar freshness scans (#​26196)
  • Box large semantic index builders (#​26186)
  • Build frozen definition maps directly (#​26188)
  • Compact use-def binding interner keys (#​26193)
  • Consume condition flow snapshots (#​26189)
  • Lazily allocate reachability caches (#​26194)
  • Remove redundant use-def state shrinking (#​26206)
  • Reuse the first union bindings buffer (#​26225)
  • Short-circuit terminal narrowing constraints (#​26215)
  • Solve simple constraint conjunctions directly (#​25879)
  • Store cycle-detector cache entries inline (#​26183)
  • Stream indexed AST construction (#​26184)
  • Suppress discarded TypedDict diagnostics (#​26250)
  • Use SmallVec for CycleDetector::seen (#​26181)
  • Use a SmallVec for seen type aliases (#​26187)
Core type checking
  • Raise limit for number of non-recursive union literals (#​25212)
  • Preserve gradual behavior for explicit Any subclasses (#​26034)
  • Preserve metaclasses when inheriting from intersection-typed bases (#​26145)
  • Recognize exhaustive matches over finite tuples (#​26132)
Contributors

v0.0.51

Compare Source

Released on 2026-06-18.

Bug fixes
  • Fix bound TypeVar default cycle recovery (#​26124)
  • Support Annotated[Any, ...] as a class base (#​26133)
LSP server
  • Suggest keyword-only arguments between variadic parameters (#​26134)
Core type checking
  • Avoid assuming classes with Any or Unknown bases are descriptors (#​26120)
  • Infer simpler types in complex lambda cycles (#​26137)
  • Preserve exact class objects during identity narrowing (#​26117)
Diagnostics
  • Preserve unpacking diagnostics for nested assignment targets (#​26121)
Performance
  • Compact indexed AST node storage (#​25998)
  • Discard dead DNF branches in intersection building (#​26144)
Documentation
  • Remove broken gradual guarantee link (#​3806)
Contributors

Configuration

📅 Schedule: (in timezone Etc/UTC)

  • Branch creation
    • Between 01:00 AM and 07:59 AM, only on Tuesday (* 1-7 * * 2)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot requested a review from a team as a code owner June 23, 2026 01:32
@renovate renovate Bot added the not bug or enhancement PR is not 'bug' or 'enhancement'. For release notes label Jun 23, 2026
@renovate renovate Bot requested review from a team, carlcsaposs-canonical, dragomirp, juju-charm-bot, marceloneppel and taurus-forever and removed request for a team June 23, 2026 01:32
github-actions[bot]
github-actions Bot previously approved these changes Jun 23, 2026
@github-actions github-actions Bot added the Libraries: Out of sync The charm libs used are out-of-sync label Jun 23, 2026
@renovate renovate Bot force-pushed the renovate/main-python-dependencies branch from 7d96ecc to d1dafc3 Compare June 23, 2026 07:49
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Libraries: Out of sync The charm libs used are out-of-sync not bug or enhancement PR is not 'bug' or 'enhancement'. For release notes

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant