Repository navigation
chore(deps-dev): bump the python-dependencies group across 1 directory with 3 updates - #808
Closed
dependabot[bot] wants to merge 1 commit into
Closed
dependabot[bot] wants to merge 1 commit into
dependabot[bot] wants to merge 1 commit into
Conversation
…y with 3 updates Bumps the python-dependencies group with 3 updates in the / directory: [uv](https://github.com/astral-sh/uv), [boto3](https://github.com/boto/boto3) and [hypothesis](https://github.com/HypothesisWorks/hypothesis). Updates `uv` from 0.13.0 to 0.13.1 - [Release notes](https://github.com/astral-sh/uv/releases) - [Changelog](https://github.com/astral-sh/uv/blob/main/CHANGELOG.md) - [Commits](astral-sh/uv@0.13.0...0.13.1) Updates `boto3` from 1.43.112 to 1.43.114 - [Release notes](https://github.com/boto/boto3/releases) - [Commits](boto/boto3@1.43.112...1.43.114) Updates `hypothesis` from 6.169.0 to 6.170.1 - [Release notes](https://github.com/HypothesisWorks/hypothesis/releases) - [Commits](HypothesisWorks/hypothesis@v6.169.0...v6.170.1) --- updated-dependencies: - dependency-name: uv dependency-version: 0.13.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: python-dependencies - dependency-name: boto3 dependency-version: 1.43.114 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: python-dependencies - dependency-name: hypothesis dependency-version: 6.170.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: python-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
Contributor
Dependency ReviewThe following issues were found:
Vulnerabilitiesuv.lock
OpenSSF Scorecard
Scanned Files
|
Contributor
OPA/conftest tenant-isolation gateResult: passed
|
Contributor
Mutation test critical Lambda boundariesResult: passed
Coverage: 39.67% (1215/3063 lines) Lowest-covered Lambda files
|
Contributor
Offline IaC contract testsResult: passed
Coverage: 95.18% (1481/1556 lines) Lowest-covered Lambda files
|
Contributor
Automation gate testsResult: passed
Coverage: 88.30% (906/1026 lines) Lowest-covered Lambda files
|
Contributor
Lambda unit testsResult: passed
Coverage: 92.76% (4641/5003 lines) Lowest-covered Lambda files
|
Contributor
OpenTofu module tests (latest-stable)Result: passed OpenTofu version:
|
Contributor
OpenTofu module tests (minimum-supported)Result: passed OpenTofu version:
|
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the python-dependencies group with 3 updates in the / directory: uv, boto3 and hypothesis.
Updates
uvfrom 0.13.0 to 0.13.1Release notes
Sourced from uv's releases.
... (truncated)
Changelog
Sourced from uv's changelog.
Commits
62faed3Bump version to 0.13.1 (#22525)01bfd22Sync latest Python releases (#22527)07ab80eAvoid linking the Zstandard ZIP encoder (#22432)66cea0cKeep large Debug formatters out of line (#22430)d7eb7abDeserialize dependency overrides and Simple API fields directly (#22429)b757f15Revert interpreter cache warming (#22520)c977e8eSupportbot:automergefor promoted pull requests (#22523)4f14d44Require hashes for uv's build dependencies (#22517)06bf2e8Bump tar-codec to 0.0.15 (#22522)6609cfdUse async I/O and atomic pkgconfig writes for managed Python setup (#22521)Updates
boto3from 1.43.112 to 1.43.114Commits
432fa17Merge branch 'release-1.43.114'bf4aed7Bumping version to 1.43.114fa3e3f2Add changelog entries from botocore69ed308Merge branch 'release-1.43.113'3abaa49Merge branch 'release-1.43.113' into develop741f8d9Bumping version to 1.43.113ad1c6b5Add changelog entries from botocoref5581baMerge branch 'release-1.43.112' into developUpdates
hypothesisfrom 6.169.0 to 6.170.1Commits
718686dBump hypothesis version to 6.170.1 and update changelogba6c3e3Merge pull request #4834 from Zac-HD/claude/hypothesis-4458-prototypes-nqza1f7572cd0Bump hypothesis version to 6.170.0 and update changelog1ad039fMerge pull request #4871 from Zac-HD/claude/hypothesis-conformance-tests-c6877la03eb1bMerge pull request #4895 from TaiSakuma/add-hypothesis-awkward7219a20Strengthen provider conformance tests and fix BytestringProvidere7c0eb9Bump hypothesis version to 6.169.4 and update changelogc3705d2Merge pull request #4898 from Arjun-Aravind/fix/unresolved-lazy-annotations6ec54d5Bump hypothesis version to 6.169.3 and update changelog37c6420Merge pull request #4903 from MarcoGorelli/random-seed-signatureDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions