Skip to content

chore(deps): bump the dependencies group across 1 directory with 8 updates - #35

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/dependencies-02e3619c09
Open

chore(deps): bump the dependencies group across 1 directory with 8 updates#35
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/dependencies-02e3619c09

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 13, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Updates the requirements on opensearch-py, boto3, requests-aws4auth, aws-cdk-lib, constructs, beautifulsoup4, pandas and pyarrow to permit the latest version.
Updates opensearch-py from 3.1.0 to 3.2.0

Release notes

Sourced from opensearch-py's releases.

v3.2.0

What's Changed

New Contributors

Full Changelog: opensearch-project/opensearch-py@v3.1.0...v3.2.0

Changelog

Sourced from opensearch-py's changelog.

[3.2.0]

Added

  • Add dependency on opensearch-protobufs to provide client libraries for gRPC transport (#977)
  • Add ML Commons plugin documentation (#992)

Updated APIs

Changed

Deprecated

Removed

Fixed

  • Fixed AWSV4Signer.sign() not passing custom headers to AWSRequest, causing x-amz-* headers to be excluded from SigV4 signature (#1034)
  • Fixed AWSV4Signer.sign() not setting X-Amz-Content-SHA256 before SigV4Auth.add_auth(), causing the header to be absent from SignedHeaders in the Authorization header. The fix uses a guarded assignment that preserves caller-provided values (e.g., UNSIGNED-PAYLOAD, precomputed hashes) (#1038, #1039)
  • Fixed the linkchecker CI step (#987)

Security

Dependencies

  • Bump pytest-asyncio from <=1.2.0 to <=1.3.0 (#984)
  • Bump actions/checkout from 5 to 6 (#986)
  • Bump codecov/codecov-action from 4 to 5 (#985)
  • Bump actions/upload-artifact from 5 to 6 (#989)
  • Bump actions/download-artifact from 6 to 7 (#988)
  • Bump peter-evans/create-pull-request from 7 to 8 (#990)
  • Bump opensearch-protobufs from 0.19.0 to 1.2.0 (#1000)
Commits
  • 8991792 fix(signer): Include X-Amz-Content-SHA256 in SignedHeaders (#1038) (#1039)
  • d8a8c57 Fix AWSV4Signer.sign() not passing headers to AWSRequest (#1035)
  • 6551595 Bump opensearch protobufs - 1.2.0. (#1000)
  • 94ae310 Fix CI failures due to API spec updates (#1007)
  • 1ce5b46 fix(docs): use keyword arguments in security API examples (#1004)
  • 9b6d240 Bump peter-evans/create-pull-request from 7 to 8 (#990)
  • 02c5dcc Bump actions/download-artifact from 6 to 7 (#988)
  • fa8a862 Bump actions/upload-artifact from 5 to 6 (#989)
  • f5ef694 Updated opensearch-py to reflect the latest OpenSearch API spec (2026-01-22) ...
  • 10ab792 ci: fix mypy type ignore for untyped decorator in tests (#993)
  • Additional commits viewable in compare view

Updates boto3 from 1.42.84 to 1.43.71

Commits

Updates requests-aws4auth from 1.3.1 to 1.3.2

Release notes

Sourced from requests-aws4auth's releases.

v1.3.2

What's Changed

Full Changelog: tedder/requests-aws4auth@v1.3.1...v1.3.2

Changelog

Sourced from requests-aws4auth's changelog.

1.3.2 (2026-05-01)

Changes

Commits
  • 3dda9dc history and version
  • c9cd06a update py versions; use session token for live tests
  • 6e58b3e fix additional deprecation warnings for UTC; ensure pre-py311 compat
  • b7acfe8 Fix Deprecated datetime.datetime.utcnow()
  • 89399ca update release instructions
  • See full diff in compare view

Updates aws-cdk-lib from 2.248.0 to 2.265.0

Release notes

Sourced from aws-cdk-lib's releases.

v2.265.0

Features

Bug Fixes

Alpha modules (2.265.0-alpha.0)

⚠ BREAKING CHANGES

  • glue-alpha: PySparkFlexEtlJob and ScalaSparkFlexEtlJob now default to GlueVersion.V5_0 instead of V3_0. Set glueVersion explicitly to keep the previous behavior.
  • glue-alpha: removal policy of existing Database resources will change to RETAIN.

Features

  • glue-alpha: default Flex jobs to Glue 5.0 (#38543) (36d4976)
  • glue-alpha: removal policy is RETAIN for Database by default (#38535) (9669928)
  • glue-alpha: warn on plaintext secrets (#38538) (10bf0b5)

Bug Fixes

  • glue-alpha: warn when S3Table grants cover a shared bucket (#38542) (d81d2d6)
  • mediaconnect-alpha: update validation to allow adding an underscore to name (#38539) (7c85994)

v2.264.0

⚠ BREAKING CHANGES

  • bedrockagentcore: Gateway metric helpers now emit corrected CloudWatch dimensions per-gateway metrics use { Operation, Protocol, Resource } (was { Resource }). Alarms/dashboards built on the old dimensions must be updated.
  • bedrockagentcore: RuntimeBase metric helpers now emit corrected CloudWatch dimensions per-resource metrics use { Operation, Name, Resource } (was { Resource }) and aggregated metrics use { AggregateOperation } (was { Resource: 'All' }). Alarms/dashboards built on the old dimensions must be updated.

Features

... (truncated)

Changelog

Sourced from aws-cdk-lib's changelog.

Changelog

All notable changes to this project will be documented in this file. See standard-version for commit guidelines.

2.265.0-alpha.0 (2026-08-13)

⚠ BREAKING CHANGES

  • glue-alpha: PySparkFlexEtlJob and ScalaSparkFlexEtlJob now default to GlueVersion.V5_0 instead of V3_0. Set glueVersion explicitly to keep the previous behavior.
  • glue-alpha: removal policy of existing Database resources will change to RETAIN.

Features

  • glue-alpha: default Flex jobs to Glue 5.0 (#38543) (36d4976)
  • glue-alpha: removal policy is RETAIN for Database by default (#38535) (9669928)
  • glue-alpha: warn on plaintext secrets (#38538) (10bf0b5)

Bug Fixes

  • glue-alpha: warn when S3Table grants cover a shared bucket (#38542) (d81d2d6)
  • mediaconnect-alpha: update validation to allow adding an underscore to name (#38539) (7c85994)

2.264.0-alpha.0 (2026-08-10)

⚠ BREAKING CHANGES

  • glue-alpha: IDatabase.catalogArn and IDatabase.catalogId were removed in factor of a type safe ICatalog, which has catalogArn and catalogId. Consumers and implementations were updated accordingly.

Features

Bug Fixes

  • glue-alpha: enable key rotation for security configuration encryption (#38512) (18560e0)
  • mediaconnect-alpha: addOutput options and simplified VPC interface referencing (#38515) (3c71466), closes #38517

2.263.0-alpha.0 (2026-07-31)

⚠ BREAKING CHANGES

  • mediaconnect: removalPolicy prop removed from FlowProps, GatewayProps, and BridgeProps. These resources now follow CloudFormation's default deletion behaviour (Delete).

... (truncated)

Commits
  • 3ea03cf chore(deps): upgrade jsii packaging toolchain to 1.139.0 (#38560)
  • 49d4eab chore(release): 2.265.0 (#38559)
  • 3c8d99e chore: update analytics metadata blueprints
  • 4009a44 chore(release): 2.265.0
  • a29b5c0 fix(secretsmanager): correct SAR rotation app versions for GovCloud (#38462)
  • 974e43b feat(cloudwatch): support AT_LEAST expression for composite alarm rules (#37693)
  • e322035 fix(cloudwatch): make concrete widgets assignable to widget interface (#37695)
  • b98477b chore(core): update feature flag documentation for @​aws-cdk/core:defaultCross...
  • 000f532 feat(ec2): add ipAddressType and dnsRecordIpType to GatewayVpcEndpoint (#37900)
  • 6e05a63 chore: yarn upgrade dependencies requiring intervention (#38125)
  • Additional commits viewable in compare view

Updates constructs to 10.8.1

Release notes

Sourced from constructs's releases.

v10.8.1

10.8.1 (2026-08-03)

Bug Fixes

Commits
  • 740480f fix: dropping jsii.tsc.outDir breaks Java/Go transliteration for jsii-rosetta...
  • 9f11c08 feat(constructs): restrict package exports to public API (#2878)
  • 61a20b4 chore(deps): upgrade cdklabs-projen-project-types (#2877)
  • 25edded fix: ids with a newline can produce duplicate addresses (#2876)
  • b0d316d chore(deps): upgrade dev dependencies (#2875)
  • 4756e27 chore(deps): upgrade dev dependencies (#2874)
  • 857a94f fix: Node.path takes a lot of time on deep construct trees (#2873)
  • 67495a0 feat: removeDependency (#2872)
  • 34b862f chore(deps): upgrade dev dependencies (#2871)
  • 9b63ef8 chore(deps): upgrade dev dependencies (#2870)
  • Additional commits viewable in compare view

Updates beautifulsoup4 from 4.14.3 to 4.15.0

Updates pandas to 3.0.5

Release notes

Sourced from pandas's releases.

pandas 3.0.5

We are pleased to announce the release of pandas 3.0.5. This is a patch release in the 3.0.x series and includes some regression fixes and bug fixes. We recommend that all users of the 3.0.x series upgrade to this version.

See the full whatsnew for a list of all the changes.

Pandas 3.0 supports Python 3.11 and higher. The release can be installed from PyPI:

python -m pip install --upgrade pandas==3.0.*

Or from conda-forge

conda install -c conda-forge pandas=3.0

Please report any issues with the release on the pandas issue tracker.

Thanks to all the contributors who made this release possible.

Commits
  • e68db09 RLS: 3.0.5
  • 0697623 Backport PR #66428: DOC: update whatsnew for 3.0.5 (#66430)
  • 5d846d0 Backport PR #66090 on branch 3.0.x (BLD: exclude numpy 2.5.0 when building wh...
  • bef7a2b Backport PR #66169 on branch 3.0.x (CI: Fix pyarrow-nightly job (stale nightl...
  • 8188eb1 RLS: 3.0.4 (#66079)
  • bd35f15 [3.0.x] BUG: fix CoW issue in eval() (#66072)
  • 6195872 [backport 3.0.x] BUG: anchor whole alternation in Series.str.match for PyArro...
  • 70313be Backport PR #66051 on branch 3.0.x (BUG: fix regression in DataFrame setitem ...
  • 57ed3e2 [backport 3.0.x] Bump pypa/cibuildwheel from 3.4.1 to 4.1.0 (#65934) (#66026)
  • f9693fc [backport 3.0.x] BUG(pandas 3.0 regression): drop(index=...) doesn't accept N...
  • Additional commits viewable in compare view

Updates pyarrow to 25.0.1

Release notes

Sourced from pyarrow's releases.

Apache Arrow 25.0.1

Release Notes URL: https://arrow.apache.org/release/25.0.1.html

Commits

@dependabot @github

dependabot Bot commented on behalf of github Jul 13, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: python. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot
dependabot Bot force-pushed the dependabot/pip/dependencies-02e3619c09 branch from 932e303 to 0cbe2b4 Compare July 20, 2026 17:46
@dependabot
dependabot Bot force-pushed the dependabot/pip/dependencies-02e3619c09 branch from 0cbe2b4 to 1b3cbbd Compare August 3, 2026 17:46
@dependabot
chore(deps): bump the dependencies group across 1 directory with 8 up…
23434a8 
…dates

Updates the requirements on [opensearch-py](https://github.com/opensearch-project/opensearch-py), [boto3](https://github.com/boto/boto3), [requests-aws4auth](https://github.com/tedder/requests-aws4auth), [aws-cdk-lib](https://github.com/aws/aws-cdk), [constructs](https://github.com/aws/constructs), [beautifulsoup4](https://www.crummy.com/software/BeautifulSoup/bs4/), [pandas](https://github.com/pandas-dev/pandas) and [pyarrow](https://github.com/apache/arrow) to permit the latest version.

Updates `opensearch-py` from 3.1.0 to 3.2.0
- [Release notes](https://github.com/opensearch-project/opensearch-py/releases)
- [Changelog](https://github.com/opensearch-project/opensearch-py/blob/main/CHANGELOG.md)
- [Commits](opensearch-project/opensearch-py@v3.1.0...v3.2.0)

Updates `boto3` from 1.42.84 to 1.43.71
- [Release notes](https://github.com/boto/boto3/releases)
- [Commits](boto/boto3@1.42.84...1.43.71)

Updates `requests-aws4auth` from 1.3.1 to 1.3.2
- [Release notes](https://github.com/tedder/requests-aws4auth/releases)
- [Changelog](https://github.com/tedder/requests-aws4auth/blob/main/HISTORY.md)
- [Commits](tedder/requests-aws4auth@v1.3.1...v1.3.2)

Updates `aws-cdk-lib` from 2.248.0 to 2.265.0
- [Release notes](https://github.com/aws/aws-cdk/releases)
- [Changelog](https://github.com/aws/aws-cdk/blob/main/CHANGELOG.v2.alpha.md)
- [Commits](aws/aws-cdk@v2.248.0...v2.265.0)

Updates `constructs` to 10.8.1
- [Release notes](https://github.com/aws/constructs/releases)
- [Commits](aws/constructs@v10.0.0...v10.8.1)

Updates `beautifulsoup4` from 4.14.3 to 4.15.0

Updates `pandas` to 3.0.5
- [Release notes](https://github.com/pandas-dev/pandas/releases)
- [Commits](pandas-dev/pandas@v2.0.0...v3.0.5)

Updates `pyarrow` to 25.0.1
- [Release notes](https://github.com/apache/arrow/releases)
- [Commits](apache/arrow@go/v14.0.0...apache-arrow-25.0.1)

---
updated-dependencies:
- dependency-name: aws-cdk-lib
  dependency-version: 2.261.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: beautifulsoup4
  dependency-version: 4.15.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: boto3
  dependency-version: 1.43.46
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: constructs
  dependency-version: 10.6.0
  dependency-type: direct:production
  dependency-group: dependencies
- dependency-name: opensearch-py
  dependency-version: 3.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: pandas
  dependency-version: 3.0.3
  dependency-type: direct:production
  dependency-group: dependencies
- dependency-name: pyarrow
  dependency-version: 25.0.0
  dependency-type: direct:production
  dependency-group: dependencies
- dependency-name: requests-aws4auth
  dependency-version: 1.3.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/pip/dependencies-02e3619c09 branch from 1b3cbbd to 23434a8 Compare August 17, 2026 18:57
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants