Skip to content

Comments

fix(deps) Update all non-major dependencies#122

Open
renovate[bot] wants to merge 1 commit intodevfrom
renovate/all-minor-patch
Open

fix(deps) Update all non-major dependencies#122
renovate[bot] wants to merge 1 commit intodevfrom
renovate/all-minor-patch

Conversation

@renovate
Copy link

@renovate renovate bot commented Feb 11, 2024 •
edited
Loading

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence Type Update
@semantic-release/npm 11.0.2 → 11.0.3 age confidence devDependencies patch
Flask-SQLAlchemy (changelog) 3.0.5 → 3.1.1 age confidence dev-dependencies minor
asottile/pyupgrade v3.15.0 → v3.21.2 age confidence repository minor
bandit (source, changelog) 1.7.5 → 1.9.3 age confidence dev-dependencies minor
boto3 1.33.13 → 1.42.54 age confidence dev-dependencies minor
cachelib (changelog) ^0.10.0 → ^0.13.0 age confidence dependencies minor
coverage 7.2.7 → 7.13.4 age confidence dev-dependencies minor
elasticsearch 8.12.0 → 8.19.3 age confidence dev-dependencies minor
google-cloud-datastore 2.19.0 → 2.23.0 age confidence dev-dependencies minor
google-cloud-firestore 2.14.0 → 2.23.0 age confidence dev-dependencies minor
isort (changelog) 5.11.5 → 5.13.2 age confidence dev-dependencies minor
macisamuele/language-formatters-pre-commit-hooks v2.12.0 → v2.16.0 age confidence repository minor
myint/autoflake v2.2.1 → v2.3.3 age confidence repository minor
mypy (changelog) 1.4.1 → 1.19.1 age confidence dev-dependencies minor
peewee (changelog) 3.17.0 → 3.19.0 age confidence dev-dependencies minor
pre-commit/pre-commit-hooks v4.5.0 → v4.6.0 age confidence repository minor
pymongo 4.7.3 → 4.16.0 age confidence dev-dependencies minor
python 3.10 → 3.14 age confidence uses-with minor
redis (changelog) 5.0.1 → 5.3.1 age confidence dev-dependencies minor
semantic-release 23.0.0 → 23.1.1 age confidence devDependencies minor
supercharge/mongodb-github-action v1.10.0 → 1.12.1 age confidence action minor
supercharge/redis-github-action 1.8.0 → 1.8.1 age confidence action patch
tox (changelog) 4.8.0 → 4.44.0 age confidence dev-dependencies minor

Note: The pre-commit manager in Renovate is not supported by the pre-commit maintainers or community. Please do not report any problems there, instead create a Discussion in the Renovate repository if you have any questions.

Release Notes

semantic-release/npm (@​semantic-release/npm)

v11.0.3

Compare Source

Bug Fixes

even though our existing range allowed anyone to update as soon as the new npm version was available, this will encourage being on a version that does not report the ip vulnerability a bit more forcefully

asottile/pyupgrade (asottile/pyupgrade)

v3.21.2

Compare Source

v3.21.1

Compare Source

v3.21.0

Compare Source

v3.20.0

Compare Source

v3.19.1

Compare Source

v3.19.0

Compare Source

v3.18.0

Compare Source

v3.17.0

Compare Source

v3.16.0

Compare Source

v3.15.2

Compare Source

v3.15.1

Compare Source

PyCQA/bandit (bandit)

v1.9.3

Compare Source

What's Changed

New Contributors

Full Changelog: PyCQA/bandit@1.9.2...1.9.3

v1.9.2

Compare Source

What's Changed

Full Changelog: PyCQA/bandit@1.9.1...1.9.2

v1.9.1

Compare Source

What's Changed

Full Changelog: PyCQA/bandit@1.9.0...1.9.1

v1.8.6

Compare Source

What's Changed

New Contributors

Full Changelog: PyCQA/bandit@1.8.5...1.8.6

v1.8.5

Compare Source

What's Changed

Full Changelog: PyCQA/bandit@1.8.4...1.8.5

v1.8.3

Compare Source

What's Changed

New Contributors

Full Changelog: PyCQA/bandit@1.8.2...1.8.3

v1.8.2

Compare Source

What's Changed

Full Changelog: PyCQA/bandit@1.8.1...1.8.2

v1.8.1

Compare Source

What's Changed

New Contributors

Full Changelog: PyCQA/bandit@1.8.0...1.8.1

v1.8.0

Compare Source

What's Changed

Full Changelog: PyCQA/bandit@1.7.10...1.8.0

v1.7.10

Compare Source

What's Changed

New Contributors

Full Changelog: PyCQA/bandit@1.7.9...1.7.10

v1.7.9

Compare Source

What's Changed

New Contributors

Full Changelog: PyCQA/bandit@1.7.8...1.7.9

v1.7.8

Compare Source

What's Changed

New Contributors

Full Changelog: PyCQA/bandit@1.7.7...1.7.8

v1.7.7

Compare Source

What's Changed

New Contributors

Full Changelog: PyCQA/bandit@1.7.6...1.7.7

v1.7.6

Compare Source

What's Changed

New Contributors

Full Changelog: PyCQA/bandit@1.7.5...1.7.6

boto/boto3 (boto3)

v1.42.54

Compare Source

=======

  • api-change:appstream: [botocore] Adding new attribute to disable IMDS v1 APIs for fleet, Image Builder and AppBlockBuilder instances.
  • api-change:ecs: [botocore] Migrated to Smithy. No functional changes
  • api-change:endpoint-rules: [botocore] Update endpoint-rules client to latest version
  • api-change:sagemaker-runtime: [botocore] Added support for S3OutputPathExtension and Filename parameters to the InvokeEndpointAsync API to allow users to customize the S3 output path and file name for async inference response payloads.
  • api-change:signer-data: [botocore] This release introduces AWS Signer Data Plane SDK client supporting GetRevocationStatus API. The new client enables AWS PrivateLink connectivity with both private DNS and VPC endpoint URLs.
  • api-change:ssm: [botocore] Add support for AssociationDispatchAssumeRole in AWS SSM State Manager.
  • api-change:trustedadvisor: [botocore] Adding a new enum attribute(statusReason) to TrustedAdvisorAPI response. This attribute explains reasoning behind check status for certain specific scenarios.

v1.42.53

Compare Source

=======

  • api-change:bcm-dashboards: [botocore] The Billing and Cost Management GetDashboard API now returns identifier for each widget, enabling users to uniquely identify widgets within their dashboards.
  • api-change:ecr: [botocore] Adds multiple artifact types filter support in ListImageReferrers API.
  • api-change:pca-connector-scep: [botocore] AWS Private CA Connector for SCEP now supports AWS PrivateLink, allowing your clients to request certificates from within your Amazon Virtual Private Cloud (VPC) without traversing the public internet. With this launch, you can create VPC endpoints to connect to your SCEP connector privately.
  • enhancement:checksums: [botocore] Added support for the SHA512 checksum algorithm. When the optional AWS CRT (awscrt) dependency is installed, support is also enabled for the XXHASH64, XXHASH3, and XXHASH128 checksum algorithms. Also added pass-through support for customer-provided MD5 checksum headers (without SDK-side MD5 calculation or validation).

v1.42.52

Compare Source

=======

  • api-change:cleanrooms: [botocore] This release adds support for federated catalogs in Athena-sourced configured tables.
  • api-change:connect: [botocore] Correcting in-app notifications API documentation.

v1.42.51

Compare Source

=======

  • api-change:ec2: [botocore] Add Operator field to CreatePlacementGroup and DescribePlacementGroup APIs.
  • api-change:evidently: [botocore] The evidently client has been removed following the deprecation of the service.
  • api-change:grafana: [botocore] This release updates Amazon Managed Grafana's APIs to support customer managed KMS keys.
  • api-change:iotanalytics: [botocore] The iotanalytics client has been removed following the deprecation of the service.
  • api-change:rds: [botocore] Adds support for the StorageEncryptionType field to specify encryption type for DB clusters, DB instances, snapshots, automated backups, and global clusters.
  • api-change:workspaces-web: [botocore] Adds support for branding customization without requiring a custom wallpaper.

v1.42.50

Compare Source

=======

  • api-change:arc-region-switch: [botocore] Clarify documentation on ARC Region Switch start-plan-execution operation
  • api-change:ec2: [botocore] Documentation updates for EC2 Secondary Networks
  • api-change:ecr: [botocore] Adds support for enabling blob mounting, and removes support for Clair based image scanning
  • api-change:kafka: [botocore] Amazon MSK now supports dual-stack connectivity (IPv4 and IPv6) for existing MSK clusters. You can enable dual-stack on existing clusters by specifying the NetworkType parameter in updateConnectivity API.
  • api-change:kms: [botocore] Added support for Decrypt and ReEncrypt API's to use dry run feature without ciphertext for authorization validation
  • api-change:qconnect: [botocore] Update MessageType enum to include missing types.

v1.42.49

Compare Source

=======

  • api-change:cloudwatch: [botocore] Adding new evaluation states that provides information about the alarm evaluation process. Evaluation error Indicates configuration errors in alarm setup that require review and correction. Evaluation failure Indicates temporary CloudWatch issues.
  • api-change:connect: [botocore] API release for headerr notifications in the admin website. APIs allow customers to publish brief messages (including URLs) to a specified audience, and a new header icon will indicate when unread messages are available.
  • api-change:ec2: [botocore] This release adds geography information to EC2 region and availability zone APIs. DescribeRegions now includes a Geography field, while DescribeAvailabilityZones includes both Geography and SubGeography fields, enabling better geographic classification for AWS regions and zones.
  • api-change:inspector2: [botocore] Added .Net 10 (dotnet10) and Node 24.x (node24.x) runtime support for lambda package scanning
  • api-change:sagemaker: [botocore] Enable g7e instance type support for SageMaker Processing, and enable single file configuration provisioning for HyperPod Slurm, where customers have the option to use HyperPod API to provide the provisioning parameters.
  • enhancement:AWSCRT: [botocore] Update awscrt version to 0.31.2

v1.42.48

Compare Source

=======

  • api-change:ec2: [botocore] Launching nested virtualization. This feature allows you to run nested VMs inside virtual (non-bare metal) EC2 instances.

v1.42.47

Compare Source

=======

  • api-change:batch: [botocore] Add support for listing jobs by share identifier and getting snapshots of active capacity utilization by job queue and share.
  • api-change:ec2: [botocore] R8i instances powered by custom Intel Xeon 6 processors available only on AWS with sustained all-core 3.9 GHz turbo frequency
  • api-change:eks: [botocore] This release adds support for Windows Server 2025 in Amazon EKS Managed Node Groups.
  • api-change:kafkaconnect: [botocore] Support configurable upper limits on task count during autoscaling operations via maxAutoscalingTaskCount parameter.
  • api-change:s3tables: [botocore] S3 Tables now supports setting partition specifications and sort orders on tables. Partition specs allow users to define how data is organized using transform functions. Sort order configurations enable users to specify sort directions and null ordering preferences for optimized data layout.

v1.42.46

Compare Source

=======

  • api-change:bedrock-agentcore: [botocore] Added AgentCore browser proxy configuration support, allowing routing of browser traffic through HTTP and HTTPS proxy servers with authentication and bypass rules.
  • api-change:connect: [botocore] Amazon Connect now supports per-channel auto-accept and After Contact Work (ACW) timeouts. Configure agents with auto-accept and ACW timeout settings for chat, tasks, emails, and callbacks. Use the new UpdateUserConfig API to manage these settings.
  • api-change:eks: [botocore] Introducing an optional policy field, an IAM policy applied to pod identity associations in addition to IAM role policies. When specified, pod permissions are the intersection of IAM role policies and the policy field, ensuring the principle of least privilege.
  • api-change:kafka: [botocore] Amazon MSK adds three new APIs, CreateTopic, UpdateTopic, and DeleteTopic for managing Kafka topics in your MSK clusters.
  • api-change:rds: [botocore] This release adds backup configuration for RDS and Aurora restores, letting customers set backup retention period and preferred backup window during restore. It also enables viewing backup settings when describing snapshots or automated backups for instances and clusters.

v1.42.45

Compare Source

=======

  • api-change:connectcampaignsv2: [botocore] Add the missing event type for WhatsApp
  • api-change:ec2: [botocore] Amazon Secondary Networks is a networking feature that provides high-performance, low-latency connectivity for specialized workloads.
  • api-change:eks: [botocore] Amazon EKS adds a new DescribeUpdate update type, VendedLogsUpdate, to support an integration between EKS Auto Mode and Amazon CloudWatch Vended Logs.
  • api-change:imagebuilder: [botocore] EC2 Image Builder now supports wildcard patterns in lifecycle policies with recipes and enhances the experience of tag-scoped policies.
  • api-change:lakeformation: [botocore] Allow cross account v5 in put data lake settings
  • api-change:neptunedata: [botocore] Added edgeOnlyLoad boolean parameter to Neptune bulk load request. When TRUE, files are loaded in order without scanning. When FALSE (default), the loader scans files first, then loads vertex files before edge files automatically.
  • api-change:pcs: [botocore] Introduces RESUMING state for clusters, compute node groups, and queues.
  • api-change:transfer: [botocore] This release adds a documentation update for MdnResponse of type "ASYNC"

[v1.42.44](https://redirect.github.com/bo

Configuration

📅 Schedule: Branch creation - "before 10pm on Sunday" in timezone America/Chicago, Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate
Copy link
Author

renovate bot commented Feb 11, 2024 •
edited
Loading

⚠ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

  • any of the package files in this branch needs updating, or
  • the branch becomes conflicted, or
  • you click the rebase/retry checkbox if found above, or
  • you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: poetry.lock
Updating dependencies
Resolving dependencies...

Creating virtualenv flask-session2-hlBlwS4--py3.12 in /home/ubuntu/.cache/pypoetry/virtualenvs

The current project's Python requirement (>=3.7.2,<4.0.0) is not compatible with some of the required packages Python requirement:
  - cachelib requires Python >=3.8, so it will not be satisfied for Python >=3.7.2,<3.8

Because no versions of cachelib match >0.13.0,<0.14.0
 and cachelib (0.13.0) requires Python >=3.8, cachelib is forbidden.
So, because flask-session2 depends on cachelib (^0.13.0), version solving failed.

  • Check your dependencies Python requirement: The Python requirement can be specified via the `python` or `markers` properties
    
    For cachelib, a possible solution would be to set the `python` property to ">=3.8,<4.0.0"

    https://python-poetry.org/docs/dependency-specification/#python-restricted-dependencies,
    https://python-poetry.org/docs/dependency-specification/#using-environment-markers

@renovate renovate bot force-pushed the renovate/all-minor-patch branch 7 times, most recently from f711d1f to 9999140 Compare February 17, 2024 04:19
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 10 times, most recently from 8f12b36 to 6a5e71e Compare February 25, 2024 11:43
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 6 times, most recently from 113102d to 63b8c12 Compare March 1, 2024 21:29
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 4 times, most recently from b35674f to c43db40 Compare March 6, 2024 01:55
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 6 times, most recently from 4d6c960 to 4865a83 Compare July 20, 2025 22:38
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 3 times, most recently from 1b617e1 to be091e3 Compare August 5, 2025 21:12
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 2 times, most recently from cb4a042 to a8d1c5a Compare August 19, 2025 21:40
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 2 times, most recently from 3d35788 to 9329cea Compare September 9, 2025 22:13
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from 9329cea to 88f8301 Compare September 16, 2025 03:06
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from 88f8301 to b27e14a Compare September 23, 2025 21:47
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 2 times, most recently from b80e0eb to 6fee96c Compare October 7, 2025 19:31
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from 6fee96c to ba05a4b Compare October 9, 2025 22:29
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 3 times, most recently from 177cf63 to f6b4960 Compare November 11, 2025 17:12
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 2 times, most recently from b0d6d85 to 2d3ff33 Compare November 19, 2025 02:03
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from 2d3ff33 to a23988a Compare December 1, 2025 10:39
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from a23988a to ea925aa Compare December 19, 2025 00:53
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from ea925aa to 8b7e63d Compare January 11, 2026 04:41
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from 8b7e63d to 60318d6 Compare February 4, 2026 21:03
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from 60318d6 to 7642b5c Compare February 18, 2026 04:29
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from 7642b5c to 3fe7069 Compare February 20, 2026 05:53
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

maintenance renovate

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants