Skip to content

fix(deps): lock file maintenance poetry dependencies (master)#2193

Open
red-hat-konflux[bot] wants to merge 2 commits intomasterfrom
konflux/mintmaker/master-master/poetry-deps
Open

fix(deps): lock file maintenance poetry dependencies (master)#2193
red-hat-konflux[bot] wants to merge 2 commits intomasterfrom
konflux/mintmaker/master-master/poetry-deps

Conversation

@red-hat-konflux
Copy link
Contributor

@red-hat-konflux red-hat-konflux bot commented Jan 31, 2026

This PR contains the following updates:

Package Type Update Change Age Confidence
lockFileMaintenance All locks refreshed
aiokafka (changelog) dependencies minor ^0.12.0 -> ^0.13.0 age confidence
asyncpg dependencies minor ^0.30.0 -> ^0.31.0 age confidence
boto3 dependencies patch 1.42.52 -> 1.42.54 age confidence
botocore dependencies patch 1.42.52 -> 1.42.54 age confidence
prometheus-client dependencies minor ^0.22.0 -> ^0.24.0 age confidence
python-box dev minor 7.3.2 -> 7.4.1 age confidence
uvicorn (changelog) dependencies minor ^0.35.0 -> ^0.41.0 age confidence

🔧 This Pull Request updates lock files to use the latest dependency versions.


Release Notes

aio-libs/aiokafka (aiokafka)

v0.13.0

Compare Source

===================

Breaking changes:

  • Resolve API versions at connection with brokers
    api_version parameter has been removed from the different clients (admin/consumer/producer)
    (pr #​1136 by @​vmaurin)

Improved Documentation:

Bugfixes:

  • Make KafkaStorageError retriable after metadata refresh like in other
    implementations (pr #​1115 by @​omerhadari)
  • Ensure the transaction coordinator is refreshed after broker fail‑over,
    so transactional producers resume once a new coordinator is elected.
    (pr #​1135 by @​vmaurin)
  • Rename the RequestHeader version classes to match official version
    schemas (pr #​1141 by @​vmaurin)

Misc:

  • Use SPDX license expression for project metadata.
MagicStack/asyncpg (asyncpg)

v0.31.0

Compare Source

Enable Python 3.14 with experimental subinterpreter/freethreading
support.

Improvements

Fixes

Other

boto/boto3 (boto3)

v1.42.54

Compare Source

=======

  • api-change:appstream: [botocore] Adding new attribute to disable IMDS v1 APIs for fleet, Image Builder and AppBlockBuilder instances.
  • api-change:ecs: [botocore] Migrated to Smithy. No functional changes
  • api-change:endpoint-rules: [botocore] Update endpoint-rules client to latest version
  • api-change:sagemaker-runtime: [botocore] Added support for S3OutputPathExtension and Filename parameters to the InvokeEndpointAsync API to allow users to customize the S3 output path and file name for async inference response payloads.
  • api-change:signer-data: [botocore] This release introduces AWS Signer Data Plane SDK client supporting GetRevocationStatus API. The new client enables AWS PrivateLink connectivity with both private DNS and VPC endpoint URLs.
  • api-change:ssm: [botocore] Add support for AssociationDispatchAssumeRole in AWS SSM State Manager.
  • api-change:trustedadvisor: [botocore] Adding a new enum attribute(statusReason) to TrustedAdvisorAPI response. This attribute explains reasoning behind check status for certain specific scenarios.

v1.42.53

Compare Source

=======

  • api-change:bcm-dashboards: [botocore] The Billing and Cost Management GetDashboard API now returns identifier for each widget, enabling users to uniquely identify widgets within their dashboards.
  • api-change:ecr: [botocore] Adds multiple artifact types filter support in ListImageReferrers API.
  • api-change:pca-connector-scep: [botocore] AWS Private CA Connector for SCEP now supports AWS PrivateLink, allowing your clients to request certificates from within your Amazon Virtual Private Cloud (VPC) without traversing the public internet. With this launch, you can create VPC endpoints to connect to your SCEP connector privately.
  • enhancement:checksums: [botocore] Added support for the SHA512 checksum algorithm. When the optional AWS CRT (awscrt) dependency is installed, support is also enabled for the XXHASH64, XXHASH3, and XXHASH128 checksum algorithms. Also added pass-through support for customer-provided MD5 checksum headers (without SDK-side MD5 calculation or validation).
boto/botocore (botocore)

v1.42.54

Compare Source

=======

  • api-change:appstream: Adding new attribute to disable IMDS v1 APIs for fleet, Image Builder and AppBlockBuilder instances.
  • api-change:ecs: Migrated to Smithy. No functional changes
  • api-change:endpoint-rules: Update endpoint-rules client to latest version
  • api-change:sagemaker-runtime: Added support for S3OutputPathExtension and Filename parameters to the InvokeEndpointAsync API to allow users to customize the S3 output path and file name for async inference response payloads.
  • api-change:signer-data: This release introduces AWS Signer Data Plane SDK client supporting GetRevocationStatus API. The new client enables AWS PrivateLink connectivity with both private DNS and VPC endpoint URLs.
  • api-change:ssm: Add support for AssociationDispatchAssumeRole in AWS SSM State Manager.
  • api-change:trustedadvisor: Adding a new enum attribute(statusReason) to TrustedAdvisorAPI response. This attribute explains reasoning behind check status for certain specific scenarios.

v1.42.53

Compare Source

=======

  • api-change:bcm-dashboards: The Billing and Cost Management GetDashboard API now returns identifier for each widget, enabling users to uniquely identify widgets within their dashboards.
  • api-change:ecr: Adds multiple artifact types filter support in ListImageReferrers API.
  • api-change:pca-connector-scep: AWS Private CA Connector for SCEP now supports AWS PrivateLink, allowing your clients to request certificates from within your Amazon Virtual Private Cloud (VPC) without traversing the public internet. With this launch, you can create VPC endpoints to connect to your SCEP connector privately.
  • enhancement:checksums: Added support for the SHA512 checksum algorithm. When the optional AWS CRT (awscrt) dependency is installed, support is also enabled for the XXHASH64, XXHASH3, and XXHASH128 checksum algorithms. Also added pass-through support for customer-provided MD5 checksum headers (without SDK-side MD5 calculation or validation).
prometheus/client_python (prometheus-client)

v0.24.1

Compare Source

v0.24.0

Compare Source

What's Changed

Full Changelog: prometheus/client_python@v0.23.1...v0.24.0

v0.23.1

Compare Source

What's Changed

New Contributors

Full Changelog: prometheus/client_python@v0.23.0...v0.23.1

v0.23.0

Compare Source

What's Changed

New Contributors

Full Changelog: prometheus/client_python@v0.22.1...v0.23.0

cdgriffith/Box (python-box)

v7.4.1

  • Fixing #​303 Wrong version number (7.3.3) in 7.4.0 release (thanks to Michał Górny)

v7.3.3

  • Mistakenly released 7.4.0 as 7.3.3 in PyPI, same as above
Kludex/uvicorn (uvicorn)

v0.41.0: Version 0.41.0

Compare Source

Added

  • Add --limit-max-requests-jitter to stagger worker restarts (#​2707)
  • Add socket path to scope["server"] (#​2561)

Changed

  • Rename LifespanOn.error_occured to error_occurred (#​2776)

Fixed

  • Ignore permission denied errors in watchfiles reloader (#​2817)
  • Ensure lifespan shutdown runs when should_exit is set during startup (#​2812)
  • Reduce the log level of 'request limit exceeded' messages (#​2788)

New Contributors


Full Changelog: Kludex/uvicorn@0.40.0...0.41.0

v0.40.0: Version 0.40.0

Compare Source

What's Changed

Full Changelog: Kludex/uvicorn@0.39.0...0.40.0

v0.39.0: Version 0.39.0

Compare Source

What's Changed

New Contributors

Full Changelog: Kludex/uvicorn@0.38.0...0.39.0

v0.38.0: Version 0.38.0

Compare Source

What's Changed


New Contributors

Full Changelog: Kludex/uvicorn@0.37.0...0.38.0

v0.37.0: Version 0.37.0

Compare Source

What's Changed

New Contributors

Full Changelog: Kludex/uvicorn@0.36.1...0.37.0

v0.36.1: Version 0.36.1

Compare Source

What's Changed

  • Raise an exception when calling removed Config.setup_event_loop() by @​Kludex in #​2709

Full Changelog: Kludex/uvicorn@0.36.0...0.36.1

v0.36.0: Version 0.36.0

Compare Source

Added


New Contributors

Full Changelog: Kludex/uvicorn@0.35.0...0.36.0


Configuration

📅 Schedule: Branch creation - "before 5am" in timezone Europe/Prague, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

To execute skipped test pipelines write comment /ok-to-test.


Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.

@jira-linking
Copy link

jira-linking bot commented Jan 31, 2026

Commits missing Jira IDs:
b296d86
841814e

@red-hat-konflux red-hat-konflux bot force-pushed the konflux/mintmaker/master-master/poetry-deps branch from 1723726 to b296d86 Compare January 31, 2026 00:54
@red-hat-konflux red-hat-konflux bot force-pushed the konflux/mintmaker/master-master/poetry-deps branch from 841814e to b4c1623 Compare February 12, 2026 17:02
@github-actions
Copy link
Contributor

github-actions bot commented Feb 12, 2026

SC Environment Impact Assessment

Overall Impact:NONE

No SC Environment-specific impacts detected in this PR.

What was checked

This PR was automatically scanned for:

  • Database migrations
  • ClowdApp configuration changes
  • Kessel integration changes
  • AWS service integrations (S3, RDS, ElastiCache)
  • Kafka topic changes
  • Secrets management changes
  • External dependencies

@red-hat-konflux red-hat-konflux bot force-pushed the konflux/mintmaker/master-master/poetry-deps branch 2 times, most recently from f1c47e3 to 66ed834 Compare February 18, 2026 18:15
Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>
@red-hat-konflux red-hat-konflux bot force-pushed the konflux/mintmaker/master-master/poetry-deps branch from 0028284 to d0cb3a8 Compare February 23, 2026 17:02
@red-hat-konflux
Copy link
Contributor Author

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants