Skip to content

Bump the pip-deps group with 5 updates#3097

Open
dependabot[bot] wants to merge 1 commit intodevelopfrom
dependabot/pip/pip-deps-4dd75e1584
Open

Bump the pip-deps group with 5 updates#3097
dependabot[bot] wants to merge 1 commit intodevelopfrom
dependabot/pip/pip-deps-4dd75e1584

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 4, 2026

Bumps the pip-deps group with 5 updates:

Package From To
boto3 1.42.97 1.43.3
asf-search 12.0.7 12.1.0
cryptography 47.0.0 48.0.0
moto 5.1.22 5.2.0
cfn-lint 1.50.0 1.50.1

Updates boto3 from 1.42.97 to 1.43.3

Commits
  • bea693c Merge branch 'release-1.43.3'
  • 1f57fdc Bumping version to 1.43.3
  • ba69bd2 Add changelog entries from botocore
  • 7dc336e Merge branch 'release-1.43.2'
  • e240af8 Merge branch 'release-1.43.2' into develop
  • 99fd421 Bumping version to 1.43.2
  • 80f4db8 Add changelog entries from botocore
  • be6bdf3 Bump pytest from 8.1.1 to 9.0.3 (#4782)
  • 753bcab Merge branch 'release-1.43.1'
  • 09f56f4 Merge branch 'release-1.43.1' into develop
  • Additional commits viewable in compare view

Updates asf-search from 12.0.7 to 12.1.0

Release notes

Sourced from asf-search's releases.

v12.1.0

v12.1.0

Added

  • Add Stack class, used to create stacks of Pair objects. This is a foundational class, which will be used by a near-future SBASNetwork class to automate the creation of connected, multi-annual seasonal SBAS stacks of interferograms.
    • For usage examples, see examples/Stack.ipynb
  • OPERA_L3_DIST-ALERT-S1_V1 shortname/collections added
  • Add NISAR_EA shortname/collections to NISAR dataset (available to authorized users)
Changelog

Sourced from asf-search's changelog.

v12.1.0

Added

  • Add Stack class, used to create stacks of Pair objects. This is a foundational class, which will be used by a near-future SBASNetwork class to automate the creation of connected, multi-annual seasonal SBAS stacks of interferograms.
    • For usage examples, see examples/Stack.ipynb
  • OPERA_L3_DIST-ALERT-S1_V1 shortname/collections added
  • Add NISAR_EA shortname/collections to NISAR dataset (available to authorized users)
Commits
  • fbb0d9e Merge branch 'stable' into master
  • 462161e Merge pull request #447 from asfadmin/feat-nisar-ea-collections
  • 58c7afb Merge branch 'master' into feat-nisar-ea-collections
  • 6fd8a34 chore: update changelog. Bump to minor release
  • 920719c Merge pull request #410 from asfadmin/feature/stack_class
  • 00d8b7d Merge branch 'master' into feature/stack_class
  • 4e544f6 feat: NISAR EA collections added
  • 495f73a Stack._find_connected_substacks return a List[List[Pair]]
  • 39aa0e9 Merge pull request #446 from asfadmin/fix-dist-alert
  • a0fbf25 chore: update changelog
  • Additional commits viewable in compare view

Updates cryptography from 47.0.0 to 48.0.0

Changelog

Sourced from cryptography's changelog.

48.0.0 - 2026-05-04


* **BACKWARDS INCOMPATIBLE:** Support for Python 3.8 has been removed.
  ``cryptography`` now requires Python 3.9 or later.
* **BACKWARDS INCOMPATIBLE:** Loading an X.509 CRL whose inner
  ``TBSCertList.signature`` algorithm does not match the outer
  ``signatureAlgorithm`` now raises ``ValueError``. Previously, such CRLs
  were parsed successfully and only rejected during signature validation.
* Added support for :doc:`/hazmat/primitives/asymmetric/mlkem` and
  :doc:`/hazmat/primitives/asymmetric/mldsa` when using OpenSSL 3.5.0 or
  later, in addition to the existing AWS-LC and BoringSSL support. This means
  post-quantum algorithms are now available to users of our wheels.

    

  • Note: Going forward, we do not guarantee that all functionality
    
in cryptography will be available when building against
    
OpenSSL. See :doc:/statements/state-of-openssl for more information.
    • 



.. _v47-0-0:

Commits

Updates moto from 5.1.22 to 5.2.0

Changelog

Sourced from moto's changelog.

5.2.0

Docker Digest for 5.2.0: sha256:d8d063e3e704d256cbe8165072fa273c17698be91311e49fc602b7716f459bea

General:
    * Drops support for Python 3.9
    * Lambda Containers now configure the AWS_ENDPOINT_URL, automatically intercepting requests to other AWS services

New Services:

* Bedrock-AgentCore-Control:

* create_agent_runtime()

* create_agent_runtime_endpoint()

* create_gateway()

* create_gateway_target()

* create_memory()

* delete_agent_runtime()

* delete_agent_runtime_endpoint()

* delete_gateway()

* delete_gateway_target()

* delete_memory()

* get_agent_runtime()

* get_agent_runtime_endpoint()

* get_gateway()

* get_gateway_target()

* get_memory()

* list_agent_runtimes()

* list_agent_runtime_endpoints()

* list_agent_runtime_versions()

* list_gateways()

* list_gateway_targets()

* list_memories()

* list_tags_for_resource()

* tag_resource()

* update_agent_runtime()

* update_agent_runtime_endpoint()

* update_gateway()

* update_gateway_target()

* untag_resource()


* Bedrock-Runtime:
    * invoke_model()

    

  • FIS:

      

    • create_experiment_template()
      • 

    • delete_experiment_template()
      • 

    • list_tags_for_resource()
      • 

    • tag_resource()
      • 

    • untag_resource()
      






New Methods:

... (truncated)

Commits

Updates cfn-lint from 1.50.0 to 1.50.1

Release notes

Sourced from cfn-lint's releases.

Release v1.50.1

What's Changed

Full Changelog: aws-cloudformation/cfn-lint@v1.50.0...v1.50.1

Changelog

Sourced from cfn-lint's changelog.

v1.50.1

What's Changed

Full Changelog: aws-cloudformation/cfn-lint@v1.50.0...v1.50.1

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the pip-deps group with 5 updates
32c8621 
Bumps the pip-deps group with 5 updates:

| Package | From | To |
| --- | --- | --- |
| [boto3](https://github.com/boto/boto3) | `1.42.97` | `1.43.3` |
| [asf-search](https://github.com/asfadmin/Discovery-asf_search) | `12.0.7` | `12.1.0` |
| [cryptography](https://github.com/pyca/cryptography) | `47.0.0` | `48.0.0` |
| [moto](https://github.com/getmoto/moto) | `5.1.22` | `5.2.0` |
| [cfn-lint](https://github.com/aws-cloudformation/cfn-lint) | `1.50.0` | `1.50.1` |


Updates `boto3` from 1.42.97 to 1.43.3
- [Release notes](https://github.com/boto/boto3/releases)
- [Commits](boto/boto3@1.42.97...1.43.3)

Updates `asf-search` from 12.0.7 to 12.1.0
- [Release notes](https://github.com/asfadmin/Discovery-asf_search/releases)
- [Changelog](https://github.com/asfadmin/Discovery-asf_search/blob/master/CHANGELOG.md)
- [Commits](asfadmin/Discovery-asf_search@v12.0.7...v12.1.0)

Updates `cryptography` from 47.0.0 to 48.0.0
- [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst)
- [Commits](pyca/cryptography@47.0.0...48.0.0)

Updates `moto` from 5.1.22 to 5.2.0
- [Release notes](https://github.com/getmoto/moto/releases)
- [Changelog](https://github.com/getmoto/moto/blob/master/CHANGELOG.md)
- [Commits](getmoto/moto@5.1.22...5.2.0)

Updates `cfn-lint` from 1.50.0 to 1.50.1
- [Release notes](https://github.com/aws-cloudformation/cfn-lint/releases)
- [Changelog](https://github.com/aws-cloudformation/cfn-lint/blob/main/CHANGELOG.md)
- [Commits](aws-cloudformation/cfn-lint@v1.50.0...v1.50.1)

---
updated-dependencies:
- dependency-name: boto3
  dependency-version: 1.43.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pip-deps
- dependency-name: asf-search
  dependency-version: 12.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pip-deps
- dependency-name: cryptography
  dependency-version: 48.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: pip-deps
- dependency-name: moto
  dependency-version: 5.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pip-deps
- dependency-name: cfn-lint
  dependency-version: 1.50.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: pip-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added bumpless Changes to documentation, CI/CD pipelines, etc that don't affect the project's version major Bump the major version number of this project labels May 4, 2026
@dependabot dependabot Bot requested review from a team as code owners May 4, 2026 23:48
@dependabot dependabot Bot added major Bump the major version number of this project bumpless Changes to documentation, CI/CD pipelines, etc that don't affect the project's version labels May 4, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

bumpless Changes to documentation, CI/CD pipelines, etc that don't affect the project's version major Bump the major version number of this project

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants