Skip to content

Chore(deps): Bump the cosmetology-python-minor-patch group across 7 directories with 10 updates#1614

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/backend/cosmetology-app/cosmetology-python-minor-patch-263496c34c
Open

Chore(deps): Bump the cosmetology-python-minor-patch group across 7 directories with 10 updates#1614
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/backend/cosmetology-app/cosmetology-python-minor-patch-263496c34c

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Jun 1, 2026

Bumps the cosmetology-python-minor-patch group with 3 updates in the /backend/cosmetology-app directory: faker, ruff and aws-cdk-aws-lambda-python-alpha.
Bumps the cosmetology-python-minor-patch group with 6 updates in the /backend/cosmetology-app/lambdas/python directory:

Package From To
faker 40.15.0 40.19.1
boto3 1.42.89 1.43.14
moto 5.1.22 5.2.1
requests 2.33.1 2.34.2
statsig-python-core 0.19.1 0.19.3
boto3-stubs 1.43.7 1.43.14

Bumps the cosmetology-python-minor-patch group with 1 update in the /backend/cosmetology-app/lambdas/python/cognito-backup directory: boto3.
Bumps the cosmetology-python-minor-patch group with 4 updates in the /backend/cosmetology-app/lambdas/python/common directory: faker, boto3, requests and boto3-stubs.
Bumps the cosmetology-python-minor-patch group with 2 updates in the /backend/cosmetology-app/lambdas/python/feature-flag directory: moto and statsig-python-core.
Bumps the cosmetology-python-minor-patch group with 1 update in the /backend/cosmetology-app/lambdas/python/provider-data-v1 directory: faker.
Bumps the cosmetology-python-minor-patch group with 1 update in the /backend/cosmetology-app/lambdas/python/staff-users directory: faker.

Updates faker from 40.15.0 to 40.19.1

Release notes

Sourced from faker's releases.

Release v40.19.1

See CHANGELOG.md.

Release v40.19.0

See CHANGELOG.md.

Release v40.18.0

See CHANGELOG.md.

Release v40.17.0

See CHANGELOG.md.

Release v40.16.0

See CHANGELOG.md.

Changelog

Sourced from faker's changelog.

v40.19.1 - 2026-05-22

v40.19.0 - 2026-05-22

v40.18.0 - 2026-05-14

  • Add automotive providers for ar_DZ and fr_DZ locales. Thanks @​othmane099.
  • Add phone_number provider for ar_DZ and fr_DZ locales. Thanks @​othmane099.

v40.17.0 - 2026-05-14

  • Add am_ET phone_number provider for Ethiopia. Thanks @​jasur-py.

v40.16.0 - 2026-05-14

  • Fix duplicate phone number prefix 145 in zh_CN locale. Thanks @​r266-tec.
Commits
  • 3e9b7b0 Bump version: 40.19.0 → 40.19.1
  • fea0515 📝 Update CHANGELOG.md
  • a2af511 fix(en_IN): avoid shared state mutation in pincode_in_state (#2369)
  • fbb59f3 Bump version: 40.18.0 → 40.19.0
  • bd0f6da 📝 Update CHANGELOG.md
  • 822a14d 💄 lint code
  • a1a1b2a feat: Add uuid1 and uuid7 providers to misc provider (#2344)
  • 44c45e0 Bump version: 40.17.0 → 40.18.0
  • 87d8b40 📝 Update CHANGELOG.md
  • 8a7fa46 💄 Lint code
  • Additional commits viewable in compare view

Updates ruff from 0.15.13 to 0.15.14

Release notes

Sourced from ruff's releases.

0.15.14

Release Notes

Released on 2026-05-21.

Preview features

  • [airflow] Implement airflow-task-implicit-multiple-outputs (AIR202) (#25152)
  • [flake8-use-pathlib] Mark PTH101 fix as unsafe when first argument is a class attribute annotated as int (#25086)
  • [pylint] Implement too-many-try-statements (W0717) (#23970)
  • [ruff] Add incorrect-decorator-order (RUF074) (#23461)
  • [ruff] Add fallible-context-manager (RUF075) (#22844)

Bug fixes

  • Fix lambda formatting in interpolated string expressions (#25144)
  • Treat generic frozenset annotations as immutable (#25251)
  • [flake8-type-checking] Avoid strict behavior when future-annotations are enabled (TC001, TC002, TC003) (#25035)
  • [pylint] Avoid false positives in else clause (PLR1733) (#25177)

Rule changes

  • [flake8-comprehensions] Skip C417 for lambdas with positional-only parameters (#25272)
  • [flake8-simplify] Preserve f-string source verbatim in SIM101 fix (#25061)

Performance

  • Avoid unnecessary parser lookahead for operators (#25290)

Documentation

  • Update code example setting Neovim LSP log level (#25284)

Other changes

  • Add full PEP 798 support (#25104)
  • Add a parser recursion limit (#24810)
  • Update various ruff_python_stdlib APIs (#25273)

Contributors

... (truncated)

Changelog

Sourced from ruff's changelog.

0.15.14

Released on 2026-05-21.

Preview features

  • [airflow] Implement airflow-task-implicit-multiple-outputs (AIR202) (#25152)
  • [flake8-use-pathlib] Mark PTH101 fix as unsafe when first argument is a class attribute annotated as int (#25086)
  • [pylint] Implement too-many-try-statements (W0717) (#23970)
  • [ruff] Add incorrect-decorator-order (RUF074) (#23461)
  • [ruff] Add fallible-context-manager (RUF075) (#22844)

Bug fixes

  • Fix lambda formatting in interpolated string expressions (#25144)
  • Treat generic frozenset annotations as immutable (#25251)
  • [flake8-type-checking] Avoid strict behavior when future-annotations are enabled (TC001, TC002, TC003) (#25035)
  • [pylint] Avoid false positives in else clause (PLR1733) (#25177)

Rule changes

  • [flake8-comprehensions] Skip C417 for lambdas with positional-only parameters (#25272)
  • [flake8-simplify] Preserve f-string source verbatim in SIM101 fix (#25061)

Performance

  • Avoid unnecessary parser lookahead for operators (#25290)

Documentation

  • Update code example setting Neovim LSP log level (#25284)

Other changes

  • Add full PEP 798 support (#25104)
  • Add a parser recursion limit (#24810)
  • Update various ruff_python_stdlib APIs (#25273)

Contributors

... (truncated)

Commits
  • 9ad2da3 Bump 0.15.14 (#25295)
  • c714e84 [ty] Modernize setup of union types in mdtests (#25291)
  • 8a8e35e [flake8-comprehensions] Skip C417 for lambdas with positional-only parame...
  • aea5ed4 Avoid unnecessary parser lookahead for operators (#25290)
  • e9d72bb [ty] Allow enum member accesses on self (#25077)
  • 6cbd59b Set exclude-newer = "7 days" in our PEP-723 scripts (#25285)
  • 9999a39 Update code example on how to update Neovim LSP log level (#25284)
  • 67d8c54 [ty] Retain recursively-defined state in binary expressions (#25277)
  • 25a3191 [ty] Refine Callable class-decorator fallback for unknown results (#25250)
  • c423054 Add a recursion limit to the parser (#24810)
  • Additional commits viewable in compare view

Updates aws-cdk-aws-lambda-python-alpha from 2.254.0a0 to 2.257.0a0

Release notes

Sourced from aws-cdk-aws-lambda-python-alpha's releases.

v2.256.1

Bug Fixes

Alpha modules (2.256.1-alpha.0)

v2.256.0

Features

  • aws-cdk-lib: emits performance counters if synthesis is slow (#37919) (caa0f4c), closes #37843
  • core: validations report is always written to cloud assembly (#37867) (dddc6e0)
  • ec2: replace any return types with specific interfaces in IPeer methods (#36637) (626e44d), closes #36636
  • s3: support bucketNamePrefix and bucketNamespace properties (#37386) (997b003), closes #37760

Bug Fixes

  • core: handle token-wrapped Boxes in property merge strategies (#37902) (18435e3)
  • core: prevent stack overflow on large construct trees (#37901) (10163cb), closes #37903

Alpha modules (2.256.0-alpha.0)

v2.255.0

Features

  • aws-cdk-lib: emits performance counters if synthesis is slow (#37843) (ea33967)
  • bedrockagentcore: graduate to stable 🚀 (#37876) (00cf601)
  • core: builtin PropertyMergeStrategys are now compatible with deferred Box values (#37844) (ca4b722)
  • core: persist asset fingerprinting cache (#37822) (605a776)
  • ec2: add C8A instance type support (#36736) (0d088ca), closes #36722

Bug Fixes

  • core: cached Lazys use the Box API internally (#37889) (464fa3d)
  • core: default stack trace size adds unnecessary overhead (#37827) (0b1fb2b)
  • core: share a single IAM role across cross-account Fn::GetStackOutput consumers (#37871) (fee8b90)
  • dynamodb: remove deprecated scope for stream grants (#36680) (570d552), closes #36289
  • iam: validate PolicyStatement SID is alphanumeric for identity policies (#36150) (a7edd72), closes #34819 #34828 #34819

Alpha modules (2.255.0-alpha.0)

Features

  • bedrock-agentcore-alpha: Graduation of the library to stable. The Policy submodule is the only submodule that remains in alpha. All other constructs have graduated to stable in aws-cdk-lib/aws-bedrockagentcore and we recommend migrating to the stable versions (#37876) (00cf601)

v2.254.0

⚠ BREAKING CHANGES

  • ** L1 resources are automatically generated from public CloudFormation Resource Schemas. They are built to closely reflect the real state of CloudFormation. Sometimes these updates can contain changes that are incompatible with previous types, but more accurately reflect reality. In this release we have changed:

... (truncated)

Commits

Updates aws-cdk-lib from 2.254.0 to 2.257.0

Release notes

Sourced from aws-cdk-lib's releases.

v2.257.0

⚠ BREAKING CHANGES

  • ** L1 resources are automatically generated from public CloudFormation Resource Schemas. They are built to closely reflect the real state of CloudFormation. Sometimes these updates can contain changes that are incompatible with previous types, but more accurately reflect reality. In this release we have changed:

    • aws-neptunegraph: AWS::NeptuneGraph::GraphSnapshot: GraphIdentifier property is now required.

Features

Alpha modules (2.257.0-alpha.0)

v2.256.1

Bug Fixes

Alpha modules (2.256.1-alpha.0)

v2.256.0

Features

  • aws-cdk-lib: emits performance counters if synthesis is slow (#37919) (caa0f4c), closes #37843
  • core: validations report is always written to cloud assembly (#37867) (dddc6e0)
  • ec2: replace any return types with specific interfaces in IPeer methods (#36637) (626e44d), closes #36636
  • s3: support bucketNamePrefix and bucketNamespace properties (#37386) (997b003), closes #37760

Bug Fixes

  • core: handle token-wrapped Boxes in property merge strategies (#37902) (18435e3)
  • core: prevent stack overflow on large construct trees (#37901) (10163cb), closes #37903

Alpha modules (2.256.0-alpha.0)

v2.255.0

Features

  • aws-cdk-lib: emits performance counters if synthesis is slow (#37843) (ea33967)
  • bedrockagentcore: graduate to stable 🚀 (#37876) (00cf601)
  • core: builtin PropertyMergeStrategys are now compatible with deferred Box values (#37844) (ca4b722)
  • core: persist asset fingerprinting cache (#37822) (605a776)
  • ec2: add C8A instance type support (#36736) (0d088ca), closes #36722

Bug Fixes

  • core: cached Lazys use the Box API internally (#37889) (464fa3d)

... (truncated)

Changelog

Sourced from aws-cdk-lib's changelog.

Changelog

All notable changes to this project will be documented in this file. See standard-version for commit guidelines.

2.257.0-alpha.0 (2026-05-21)

2.256.1-alpha.0 (2026-05-20)

2.256.0-alpha.0 (2026-05-19)

2.255.0-alpha.0 (2026-05-18)

Features

  • bedrock-agentcore-alpha: Graduation of the library to stable. The Policy submodule is the only submodule that remains in alpha. All other constructs have graduated to stable in aws-cdk-lib/aws-bedrockagentcore and we recommend migrating to the stable versions (#37876) (00cf601)

2.254.0-alpha.0 (2026-05-13)

Features

  • bedrock-agentcore-alpha: add tags support to Evaluator and OnlineEvaluationConfig (#37804) (adbf88f)
  • bedrock-agentcore-alpha: add identity L2 constructs (#37610) (67c3af2)
  • mediapackagev2-alpha: add OAC integration between CloudFront and MediaPackageV2 (#37701) (654f59c)

Bug Fixes

  • bedrock-agentcore-alpha: fix cedar policy bug (#37782) (e678d5c), closes #37828
  • custom-resource-handlers: deployment fails when parameter already exists (#37852) (025c38c)

2.253.1-alpha.0 (2026-05-08)

2.253.0-alpha.0 (2026-05-06)

Features

  • bedrock-agentcore-alpha: add OnlineEvaluationConfig and Evaluator L2 constructs (#37615) (c13de04), closes #37614
  • glue-alpha: add extraPythonFiles support to PythonShellJob (#37130) (c9c6f9c), closes #34448

Bug Fixes

  • bedrock-agentcore-alpha: self-managed memory strategy validation throws on unresolved tokens (#37691) (7956537), closes #37197

2.252.0-alpha.0 (2026-04-29)

2.251.0-alpha.0 (2026-04-24)

... (truncated)

Commits

Updates faker from 40.15.0 to 40.19.1

Release notes

Sourced from faker's releases.

Release v40.19.1

See CHANGELOG.md.

Release v40.19.0

See CHANGELOG.md.

Release v40.18.0

See CHANGELOG.md.

Release v40.17.0

See CHANGELOG.md.

Release v40.16.0

See CHANGELOG.md.

Changelog

Sourced from faker's changelog.

v40.19.1 - 2026-05-22

v40.19.0 - 2026-05-22

v40.18.0 - 2026-05-14

  • Add automotive providers for ar_DZ and fr_DZ locales. Thanks @​othmane099.
  • Add phone_number provider for ar_DZ and fr_DZ locales. Thanks @​othmane099.

v40.17.0 - 2026-05-14

  • Add am_ET phone_number provider for Ethiopia. Thanks @​jasur-py.

v40.16.0 - 2026-05-14

  • Fix duplicate phone number prefix 145 in zh_CN locale. Thanks @​r266-tec.
Commits
  • 3e9b7b0 Bump version: 40.19.0 → 40.19.1
  • fea0515 📝 Update CHANGELOG.md
  • a2af511 fix(en_IN): avoid shared state mutation in pincode_in_state (#2369)
  • fbb59f3 Bump version: 40.18.0 → 40.19.0
  • bd0f6da 📝 Update CHANGELOG.md
  • 822a14d 💄 lint code
  • a1a1b2a feat: Add uuid1 and uuid7 providers to misc provider (#2344)
  • 44c45e0 Bump version: 40.17.0 → 40.18.0
  • 87d8b40 📝 Update CHANGELOG.md
  • 8a7fa46 💄 Lint code
  • Additional commits viewable in compare view

Updates boto3 from 1.42.89 to 1.43.14

Commits
  • 07953b0 Merge branch 'release-1.43.14'
  • 25c77c3 Bumping version to 1.43.14
  • 5e64afc Add changelog entries from botocore
  • 97921f4 Merge branch 'release-1.43.13'
  • 4e58a35 Merge branch 'release-1.43.13' into develop
  • 1307ac2 Bumping version to 1.43.13
  • c75c901 Add changelog entries from botocore
  • d3f2433 Merge branch 'release-1.43.12'
  • d5eddf9 Merge branch 'release-1.43.12' into develop
  • 93f3a42 Bumping version to 1.43.12
  • Additional commits viewable in compare view

Updates botocore from 1.42.92 to 1.43.18

Commits

Updates moto from 5.1.22 to 5.2.1

Changelog

Sourced from moto's changelog.

5.2.1

Docker Digest for 5.2.1: sha256:fe6575dcd878842124f05d20e4ffde2d1126e1e38ad03e196353b9e53649bcdf

Miscellaneous:
    * DynamoDB: batch_write_item() now correctly handles PUT requests with Binary (B) attributes (broken in 5.2.0)
    * S3: Uploading files no longer fails with 'Unsupported protocol' (broken in 5.2.0)
    * S3: create_multipart_upload() is now compatible with Java SDK again (broken in 5.2.0)
    * Route53: update_health_check() now correctly updates falsy values (broken in 5.2.0)

5.2.0

Docker Digest for 5.2.0: sha256:d8d063e3e704d256cbe8165072fa273c17698be91311e49fc602b7716f459bea

General:
    * Drops support for Python 3.9
    * Lambda Containers now configure the AWS_ENDPOINT_URL, automatically intercepting requests to other AWS services

New Services:

* Bedrock-AgentCore-Control:

* create_agent_runtime()

* create_agent_runtime_endpoint()

* create_gateway()

* create_gateway_target()

* create_memory()

* delete_agent_runtime()

* delete_agent_runtime_endpoint()

* delete_gateway()

* delete_gateway_target()

* delete_memory()

* get_agent_runtime()

* get_agent_runtime_endpoint()

* get_gateway()

* get_gateway_target()

* get_memory()

* list_agent_runtimes()

* list_agent_runtime_endpoints()

* list_agent_runtime_versions()

* list_gateways()

* list_gateway_targets()

* list_memories()

* list_tags_for_resource()

* tag_resource()

* update_agent_runtime()

* update_agent_runtime_endpoint()

* update_gateway()

* update_gateway_target()

* untag_resource()

... (truncated)

Commits

Updates requests from 2.33.1 to 2.34.2

Release notes

Sourced from requests's releases.

v2.34.2

2.34.2 (2026-05-14)

  • Moved headers input type back to Mapping to avoid invariance issues with MutableMapping and inferred dict types. Users calling Request.headers.update() may need to narrow typing in their code. (#7441)

Full Changelog: https://github.com/psf/requests/blob/main/HISTORY.md#2342-2026-05-14

v2.34.1

2.34.1 (2026-05-13)

Bugfixes

  • Widened json input type from dict and list to Mapping and Sequence. (#7436)
  • Changed headers input type to MutableMapping and removed None from Request.headers typing to improve handling for users. (#7431)
  • Response.reason moved from str | None to str to improve handling for users. (#7437)
  • Fixed a bug where some bodies with custom __getattr__ implementations weren't being properly detected as Iterables. (#7433)

New Contributors

Full Changelog: https://github.com/psf/requests/blob/main/HISTORY.md#2341-2026-05-13

v2.34.0

2.34.0 (2026-05-11)

Announcements

  • Requests 2.34.0 introduces inline types, replacing those provided by typeshed. Public API types should be fully compatible with mypy, pyright, and ty. We believe types are comprehensive but if you find issues, please report them to the pinned tracking issue.

    Special thanks to @​bastimeyer, @​cthoyt, @​edgarrmondragon, and @​srittau for helping review and test the types ahead of the release. (#7272)

Improvements

  • Digest Auth hashing algorithms have added usedforsecurity=False to clarify security considerations. (#7310)
  • Requests added support for Python 3.15 based on beta1. Downstream projects should be able to start testing prior to its release in October. (#7422)
  • Requests added support for Python 3.14t. (#7419)

Bugfixes

  • Response.history no longer contains a reference to itself, preventing accidental looping when traversing the history list. (#7328)
  • Requests no longer performs greedy matching on no_proxy domains. The

... (truncated)

Changelog

Sourced from requests's changelog.

2.34.2 (2026-05-14)

  • Moved headers input type back to Mapping to avoid invariance issues with MutableMapping and inferred dict types. Users calling Request.headers.update() may need to narrow typing in their code. (#7441)

2.34.1 (2026-05-13)

Bugfixes

  • Widened json input type from dict and list to Mapping and Sequence. (#7436)
  • Changed headers input type to MutableMapping and removed None from Request.headers typing to improve handling for users. (#7431)
  • Response.reason moved from str | None to str to improve handling for users. (#7437)
  • Fixed a bug where some bodies with custom __getattr__ implementations weren't being properly detected as Iterables. (#7433)

2.34.0 (2026-05-11)

Announcements

  • Requests 2.34.0 introduces inline types, replacing those provided by typeshed. Public API types should be fully compatible with mypy, pyright, and ty. We believe types are comprehensive but if you find issues, please report them to the pinned tracking issue.

    Special thanks to @​bastimeyer, @​cthoyt, @​edgarrmondragon, and @​srittau for helping review and test the types ahead of the release. (#7272)

Improvements

  • Digest Auth hashing algorithms have added usedforsecurity=False to clarify security considerations. (#7310)
  • Requests added support for Python 3.15 based on beta1. Downstream projects should be able to start testing prior to its release in October. (#7422)
  • Requests added support for Python 3.14t. (#7419)

Bugfixes

  • Response.history no longer contains a reference to itself, preventing accidental looping when traversing the history list. (#7328)
  • Requests no longer performs greedy matching on no_proxy domains. The proxy_bypass implementation has been updated with CPython's fix from bpo-39057. (#7427)
  • Requests no longer incorrectly strips duplicate leading slashes in URI paths. This should address user issues with specific presigned URLs. Note the full fix requires urllib3 2.7.0+. (#7315)
Commits

Updates statsig-python-core from 0.19.1 to 0.19.3

Release notes

Sourced from statsig-python-core's releases.

0.19.3 - Fix Floating Point in Protobufs

Improvements & Fixes

  • Fix for protobuf "passPercentage" rounding

Included In This Release

  • 69efed87ac4ddadf84297055d105f1cbe0392fd2 Daniel Loomb
    • fix: allow floating point in proto specs

Full Changelog: statsig-io/statsig-server-core@0.19.1...0.19.3

0.19.2

No release notes provided.

Commits
  • a39ce88 unpin versions
  • e804e14 [release] 0.19.3 - Fix Floating Point in Protobufs [rc] (#2947)
  • 69efed8 fix: allow floating point in proto specs
  • b9142ef [release] 0.19.2 - User Data Fix, Sampling Fix (#2927)
  • 7e181c2 chore: bump version to 0.19.2-rc.2604152157
  • d6d0ed7 [automated] sync rc with main
  • 2c2d734 chore: pin GitHub Actions workflow action tags (#2922)
  • 47a0403 Fix promoted secondary exposure sampling undercount (#2921)
  • 8cce563 [codex] add secondary exposure primary logging flag (#2918)
  • d089870 [automated] chore: bump version to 0.19.2-beta.2604150312 (#2920)
  • Additional commits viewable in compare view

Updates boto3-stubs from 1.43.7 to 1.43.14

Release notes

Sourced from boto3-stubs's releases.

8.8.0 - Python 3.8 runtime is back

Changed

  • [services] install_requires section is calculated based on dependencies in use, so typing-extensions version is set properly
  • [all] Replaced typing imports with collections.abc with a fallback to typing for Python <3.9
  • [all] Added aliases for builtins.list, builtins.set, builtins.dict, and builtins.type, so Python 3.8 runtime should work as expected again (reported by @​YHallouard in #340 and @​Omri-Ben-Yair in #336)
  • [all] Unions use the same type annotations as the rest of the structures due to proper fallbacks

Fixed

  • Description has been truncated

@dependabot
Chore(deps): Bump the cosmetology-python-minor-patch group across 7 d…
7d0f59c 
…irectories with 10 updates

Bumps the cosmetology-python-minor-patch group with 3 updates in the /backend/cosmetology-app directory: [faker](https://github.com/joke2k/faker), [ruff](https://github.com/astral-sh/ruff) and [aws-cdk-aws-lambda-python-alpha](https://github.com/aws/aws-cdk).
Bumps the cosmetology-python-minor-patch group with 6 updates in the /backend/cosmetology-app/lambdas/python directory:

| Package | From | To |
| --- | --- | --- |
| [faker](https://github.com/joke2k/faker) | `40.15.0` | `40.19.1` |
| [boto3](https://github.com/boto/boto3) | `1.42.89` | `1.43.14` |
| [moto](https://github.com/getmoto/moto) | `5.1.22` | `5.2.1` |
| [requests](https://github.com/psf/requests) | `2.33.1` | `2.34.2` |
| [statsig-python-core](https://github.com/statsig-io/statsig-server-core) | `0.19.1` | `0.19.3` |
| [boto3-stubs](https://github.com/youtype/mypy_boto3_builder) | `1.43.7` | `1.43.14` |

Bumps the cosmetology-python-minor-patch group with 1 update in the /backend/cosmetology-app/lambdas/python/cognito-backup directory: [boto3](https://github.com/boto/boto3).
Bumps the cosmetology-python-minor-patch group with 4 updates in the /backend/cosmetology-app/lambdas/python/common directory: [faker](https://github.com/joke2k/faker), [boto3](https://github.com/boto/boto3), [requests](https://github.com/psf/requests) and [boto3-stubs](https://github.com/youtype/mypy_boto3_builder).
Bumps the cosmetology-python-minor-patch group with 2 updates in the /backend/cosmetology-app/lambdas/python/feature-flag directory: [moto](https://github.com/getmoto/moto) and [statsig-python-core](https://github.com/statsig-io/statsig-server-core).
Bumps the cosmetology-python-minor-patch group with 1 update in the /backend/cosmetology-app/lambdas/python/provider-data-v1 directory: [faker](https://github.com/joke2k/faker).
Bumps the cosmetology-python-minor-patch group with 1 update in the /backend/cosmetology-app/lambdas/python/staff-users directory: [faker](https://github.com/joke2k/faker).


Updates `faker` from 40.15.0 to 40.19.1
- [Release notes](https://github.com/joke2k/faker/releases)
- [Changelog](https://github.com/joke2k/faker/blob/master/CHANGELOG.md)
- [Commits](joke2k/faker@v40.15.0...v40.19.1)

Updates `ruff` from 0.15.13 to 0.15.14
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.15.13...0.15.14)

Updates `aws-cdk-aws-lambda-python-alpha` from 2.254.0a0 to 2.257.0a0
- [Release notes](https://github.com/aws/aws-cdk/releases)
- [Changelog](https://github.com/aws/aws-cdk/blob/main/CHANGELOG.v2.alpha.md)
- [Commits](https://github.com/aws/aws-cdk/commits)

Updates `aws-cdk-lib` from 2.254.0 to 2.257.0
- [Release notes](https://github.com/aws/aws-cdk/releases)
- [Changelog](https://github.com/aws/aws-cdk/blob/main/CHANGELOG.v2.alpha.md)
- [Commits](aws/aws-cdk@v2.254.0...v2.257.0)

Updates `faker` from 40.15.0 to 40.19.1
- [Release notes](https://github.com/joke2k/faker/releases)
- [Changelog](https://github.com/joke2k/faker/blob/master/CHANGELOG.md)
- [Commits](joke2k/faker@v40.15.0...v40.19.1)

Updates `boto3` from 1.42.89 to 1.43.14
- [Release notes](https://github.com/boto/boto3/releases)
- [Commits](boto/boto3@1.42.89...1.43.14)

Updates `botocore` from 1.42.92 to 1.43.18
- [Commits](boto/botocore@1.42.92...1.43.18)

Updates `moto` from 5.1.22 to 5.2.1
- [Release notes](https://github.com/getmoto/moto/releases)
- [Changelog](https://github.com/getmoto/moto/blob/master/CHANGELOG.md)
- [Commits](getmoto/moto@5.1.22...5.2.1)

Updates `requests` from 2.33.1 to 2.34.2
- [Release notes](https://github.com/psf/requests/releases)
- [Changelog](https://github.com/psf/requests/blob/main/HISTORY.md)
- [Commits](psf/requests@v2.33.1...v2.34.2)

Updates `statsig-python-core` from 0.19.1 to 0.19.3
- [Release notes](https://github.com/statsig-io/statsig-server-core/releases)
- [Commits](statsig-io/statsig-server-core@0.19.1...0.19.3)

Updates `boto3-stubs` from 1.43.7 to 1.43.14
- [Release notes](https://github.com/youtype/mypy_boto3_builder/releases)
- [Commits](https://github.com/youtype/mypy_boto3_builder/commits)

Updates `boto3` from 1.43.7 to 1.43.14
- [Release notes](https://github.com/boto/boto3/releases)
- [Commits](boto/boto3@1.42.89...1.43.14)

Updates `botocore` from 1.43.7 to 1.43.18
- [Commits](boto/botocore@1.42.92...1.43.18)

Updates `faker` from 40.15.0 to 40.19.1
- [Release notes](https://github.com/joke2k/faker/releases)
- [Changelog](https://github.com/joke2k/faker/blob/master/CHANGELOG.md)
- [Commits](joke2k/faker@v40.15.0...v40.19.1)

Updates `boto3` from 1.43.7 to 1.43.14
- [Release notes](https://github.com/boto/boto3/releases)
- [Commits](boto/boto3@1.42.89...1.43.14)

Updates `requests` from 2.34.1 to 2.34.2
- [Release notes](https://github.com/psf/requests/releases)
- [Changelog](https://github.com/psf/requests/blob/main/HISTORY.md)
- [Commits](psf/requests@v2.33.1...v2.34.2)

Updates `boto3-stubs` from 1.43.7 to 1.43.14
- [Release notes](https://github.com/youtype/mypy_boto3_builder/releases)
- [Commits](https://github.com/youtype/mypy_boto3_builder/commits)

Updates `moto` from 5.1.22 to 5.2.1
- [Release notes](https://github.com/getmoto/moto/releases)
- [Changelog](https://github.com/getmoto/moto/blob/master/CHANGELOG.md)
- [Commits](getmoto/moto@5.1.22...5.2.1)

Updates `statsig-python-core` from 0.19.1 to 0.19.3
- [Release notes](https://github.com/statsig-io/statsig-server-core/releases)
- [Commits](statsig-io/statsig-server-core@0.19.1...0.19.3)

Updates `faker` from 40.15.0 to 40.19.1
- [Release notes](https://github.com/joke2k/faker/releases)
- [Changelog](https://github.com/joke2k/faker/blob/master/CHANGELOG.md)
- [Commits](joke2k/faker@v40.15.0...v40.19.1)

Updates `faker` from 40.15.0 to 40.19.1
- [Release notes](https://github.com/joke2k/faker/releases)
- [Changelog](https://github.com/joke2k/faker/blob/master/CHANGELOG.md)
- [Commits](joke2k/faker@v40.15.0...v40.19.1)

---
updated-dependencies:
- dependency-name: faker
  dependency-version: 40.19.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: cosmetology-python-minor-patch
- dependency-name: ruff
  dependency-version: 0.15.14
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: cosmetology-python-minor-patch
- dependency-name: aws-cdk-aws-lambda-python-alpha
  dependency-version: 2.257.0a0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cosmetology-python-minor-patch
- dependency-name: aws-cdk-lib
  dependency-version: 2.257.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cosmetology-python-minor-patch
- dependency-name: faker
  dependency-version: 40.19.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: cosmetology-python-minor-patch
- dependency-name: boto3
  dependency-version: 1.43.14
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cosmetology-python-minor-patch
- dependency-name: botocore
  dependency-version: 1.43.18
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cosmetology-python-minor-patch
- dependency-name: moto
  dependency-version: 5.2.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: cosmetology-python-minor-patch
- dependency-name: requests
  dependency-version: 2.34.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cosmetology-python-minor-patch
- dependency-name: statsig-python-core
  dependency-version: 0.19.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cosmetology-python-minor-patch
- dependency-name: boto3-stubs
  dependency-version: 1.43.14
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: cosmetology-python-minor-patch
- dependency-name: boto3
  dependency-version: 1.43.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cosmetology-python-minor-patch
- dependency-name: botocore
  dependency-version: 1.43.18
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cosmetology-python-minor-patch
- dependency-name: faker
  dependency-version: 40.19.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: cosmetology-python-minor-patch
- dependency-name: boto3
  dependency-version: 1.43.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cosmetology-python-minor-patch
- dependency-name: requests
  dependency-version: 2.34.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cosmetology-python-minor-patch
- dependency-name: boto3-stubs
  dependency-version: 1.43.14
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: cosmetology-python-minor-patch
- dependency-name: moto
  dependency-version: 5.2.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: cosmetology-python-minor-patch
- dependency-name: statsig-python-core
  dependency-version: 0.19.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cosmetology-python-minor-patch
- dependency-name: faker
  dependency-version: 40.19.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: cosmetology-python-minor-patch
- dependency-name: faker
  dependency-version: 40.19.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: cosmetology-python-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Jun 1, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@landonshumway-ia landonshumway-ia landonshumway-ia approved these changes

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python Pull requests that update python code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@landonshumway-ia