From cc4b46d7e44f08aea71364c3f37c65316a63124e Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 20 Nov 2023 12:01:33 +0000
Subject: [PATCH 01/27] chore(deps): Update cattrs requirement from <23.2,>=1.8
 to >=1.8,<23.3 in /packages/@jsii/python-runtime (#4338)

Updates the requirements on [cattrs](https://github.com/python-attrs/cattrs) to permit the latest version.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/python-attrs/cattrs/releases">cattrs's releases</a>.</em></p>
<blockquote>
<h2>v23.2.1</h2>
<h2>23.2.1 (2023-11-18)</h2>
<ul>
<li>Fix unnecessary <code>typing_extensions</code> import on Python 3.11.
(<a href="https://redirect.github.com/python-attrs/cattrs/issues/446">#446</a> <a href="https://redirect.github.com/python-attrs/cattrs/pull/447">#447</a>)</li>
</ul>
<p>For the v23.2.0 release notes, see <a href="https://github.com/python-attrs/cattrs/releases/tag/v23.2.0">here</a>.</p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/python-attrs/cattrs/blob/main/HISTORY.md">cattrs's changelog</a>.</em></p>
<blockquote>
<h2>23.2.1 (2023-11-18)</h2>
<ul>
<li>Fix unnecessary <code>typing_extensions</code> import on Python 3.11.
(<a href="https://redirect.github.com/python-attrs/cattrs/issues/446">#446</a> <a href="https://redirect.github.com/python-attrs/cattrs/pull/447">#447</a>)</li>
</ul>
<h2>23.2.0 (2023-11-17)</h2>
<ul>
<li><strong>Potentially breaking</strong>: skip <em>attrs</em> fields marked as <code>init=False</code> by default. This change is potentially breaking for unstructuring.
See <a href="https://catt.rs/en/latest/customizing.html#include_init_false">here</a> for instructions on how to restore the old behavior.
(<a href="https://redirect.github.com/python-attrs/cattrs/issues/40">#40</a> <a href="https://redirect.github.com/python-attrs/cattrs/pull/395">#395</a>)</li>
<li><strong>Potentially breaking</strong>: {py:func}<code>cattrs.gen.make_dict_structure_fn</code> and {py:func}<code>cattrs.gen.typeddicts.make_dict_structure_fn</code> will use the values for the <code>detailed_validation</code> and <code>forbid_extra_keys</code> parameters from the given converter by default now.
If you're using these functions directly, the old behavior can be restored by passing in the desired values directly.
(<a href="https://redirect.github.com/python-attrs/cattrs/issues/410">#410</a> <a href="https://redirect.github.com/python-attrs/cattrs/pull/411">#411</a>)</li>
<li><strong>Potentially breaking</strong>: The default union structuring strategy will also use fields annotated as <code>typing.Literal</code> to help guide structuring.
See <a href="https://catt.rs/en/latest/unions.html#default-union-strategy">here</a> for instructions on how to restore the old behavior.
(<a href="https://redirect.github.com/python-attrs/cattrs/pull/391">#391</a>)</li>
<li>Python 3.12 is now supported. Python 3.7 is no longer supported; use older releases there.
(<a href="https://redirect.github.com/python-attrs/cattrs/pull/424">#424</a>)</li>
<li>Implement the <code>union passthrough</code> strategy, enabling much richer union handling for preconfigured converters. <a href="https://catt.rs/en/stable/strategies.html#union-passthrough">Learn more here</a>.</li>
<li>Introduce the <code>use_class_methods</code> strategy. Learn more <a href="https://catt.rs/en/latest/strategies.html#using-class-specific-structure-and-unstructure-methods">here</a>.
(<a href="https://redirect.github.com/python-attrs/cattrs/pull/405">#405</a>)</li>
<li>The <code>omit</code> parameter of {py:func}<code>cattrs.override</code> is now of type <code>bool | None</code> (from <code>bool</code>).
<code>None</code> is the new default and means to apply default <em>cattrs</em> handling to the attribute, which is to omit the attribute if it's marked as <code>init=False</code>, and keep it otherwise.</li>
<li>Converters can now be initialized with <a href="https://catt.rs/en/latest/converters.html#fallback-hook-factories">custom fallback hook factories</a> for un/structuring.
(<a href="https://redirect.github.com/python-attrs/cattrs/issues/311">#331</a> <a href="https://redirect.github.com/python-attrs/cattrs/pull/441">#441</a>)</li>
<li>Add support for <code>date</code> to preconfigured converters.
(<a href="https://redirect.github.com/python-attrs/cattrs/pull/420">#420</a>)</li>
<li>Add support for <code>datetime.date</code>s to the PyYAML preconfigured converter.
(<a href="https://redirect.github.com/python-attrs/cattrs/issues/393">#393</a>)</li>
<li>Fix {py:func}<code>format_exception() &lt;cattrs.v.format_exception&gt;</code> parameter working for recursive calls to {py:func}<code>transform_error &lt;cattrs.transform_error&gt;</code>.
(<a href="https://redirect.github.com/python-attrs/cattrs/issues/389">#389</a>)</li>
<li><a href="https://www.attrs.org/en/stable/init.html#private-attributes-and-aliases"><em>attrs</em> aliases</a> are now supported, although aliased fields still map to their attribute name instead of their alias by default when un/structuring.
(<a href="https://redirect.github.com/python-attrs/cattrs/issues/322">#322</a> <a href="https://redirect.github.com/python-attrs/cattrs/pull/391">#391</a>)</li>
<li>Fix TypedDicts with periods in their field names.
(<a href="https://redirect.github.com/python-attrs/cattrs/issues/376">#376</a> <a href="https://redirect.github.com/python-attrs/cattrs/pull/377">#377</a>)</li>
<li>Optimize and improve unstructuring of <code>Optional</code> (unions of one type and <code>None</code>).
(<a href="https://redirect.github.com/python-attrs/cattrs/issues/380">#380</a> <a href="https://redirect.github.com/python-attrs/cattrs/pull/381">#381</a>)</li>
<li>Fix {py:func}<code>format_exception &lt;cattrs.v.format_exception&gt;</code> and {py:func}<code>transform_error &lt;cattrs.transform_error&gt;</code> type annotations.</li>
<li>Improve the implementation of <code>cattrs._compat.is_typeddict</code>. The implementation is now simpler, and relies on fewer private implementation details from <code>typing</code> and typing_extensions.
(<a href="https://redirect.github.com/python-attrs/cattrs/pull/384">#384</a>)</li>
<li>Improve handling of TypedDicts with forward references.</li>
<li>Speed up generated <em>attrs</em> and TypedDict structuring functions by changing their signature slightly.
(<a href="https://redirect.github.com/python-attrs/cattrs/pull/388">#388</a>)</li>
<li>Fix copying of converters with function hooks.
(<a href="https://redirect.github.com/python-attrs/cattrs/issues/398">#398</a> <a href="https://redirect.github.com/python-attrs/cattrs/pull/399">#399</a>)</li>
<li>Broaden {py:func}<code>loads' &lt;cattrs.preconf.orjson.OrjsonConverter.loads&gt;</code> type definition for the preconf orjson converter.
(<a href="https://redirect.github.com/python-attrs/cattrs/pull/400">#400</a>)</li>
<li>{py:class}<code>AttributeValidationNote &lt;cattrs.AttributeValidationNote&gt;</code> and {py:class}<code>IterableValidationNote &lt;cattrs.IterableValidationNote&gt;</code> are now picklable.
(<a href="https://redirect.github.com/python-attrs/cattrs/pull/408">#408</a>)</li>
<li>Fix structuring <code>Final</code> lists.</li>
</ul>

</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/python-attrs/cattrs/commit/c098cd8dc723ca7dce859028438795476022a652"><code>c098cd8</code></a> v23.2.1</li>
<li><a href="https://github.com/python-attrs/cattrs/commit/25d15d6f492817a8a618f2accd93bf0d6b55d3d1"><code>25d15d6</code></a> Import typing_extensions.TypeAlias only on python &lt; 3.11 (<a href="https://redirect.github.com/python-attrs/cattrs/issues/447">#447</a>)</li>
<li><a href="https://github.com/python-attrs/cattrs/commit/46be811135633aee3fc97cd8c171bccdd14c5a93"><code>46be811</code></a> Of course I forgot to update the changelog</li>
<li><a href="https://github.com/python-attrs/cattrs/commit/65ca839c85411ba47afbcd8acff21839f19ed8a6"><code>65ca839</code></a> Remove unnecessary docs</li>
<li><a href="https://github.com/python-attrs/cattrs/commit/683e4a7264918327efb838cd55ef0631b31775df"><code>683e4a7</code></a> doc improvement</li>
<li><a href="https://github.com/python-attrs/cattrs/commit/34e7d21567c0c8be38d8b3506899db107feae064"><code>34e7d21</code></a> typing_extensions to docs</li>
<li><a href="https://github.com/python-attrs/cattrs/commit/a980e1b5646c02c868badd891f275bb4c822887b"><code>a980e1b</code></a> Tweak dev doc configuration</li>
<li><a href="https://github.com/python-attrs/cattrs/commit/a9d349a254eb60799e147787c39f153d632e25d6"><code>a9d349a</code></a> Add a regression test for a nested tagged union scenario (<a href="https://redirect.github.com/python-attrs/cattrs/issues/444">#444</a>)</li>
<li><a href="https://github.com/python-attrs/cattrs/commit/4df0c9eed0368756b0ca91d8bab0b4f9845056d1"><code>4df0c9e</code></a> Tweak tagged unions (<a href="https://redirect.github.com/python-attrs/cattrs/issues/443">#443</a>)</li>
<li><a href="https://github.com/python-attrs/cattrs/commit/1352676419129789278c61f5b8e2ea92dca5d19a"><code>1352676</code></a> Doc improvements (<a href="https://redirect.github.com/python-attrs/cattrs/issues/442">#442</a>)</li>
<li>Additional commits viewable in <a href="https://github.com/python-attrs/cattrs/compare/v1.8.0...v23.2.1">compare view</a></li>
</ul>
</details>
<br />


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)


</details>
---
 packages/@jsii/python-runtime/setup.py | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/packages/@jsii/python-runtime/setup.py b/packages/@jsii/python-runtime/setup.py
index c5378575c3..55f021b2e4 100644
--- a/packages/@jsii/python-runtime/setup.py
+++ b/packages/@jsii/python-runtime/setup.py
@@ -31,7 +31,7 @@
     },
     install_requires=[
         "attrs>=21.2,<24.0",
-        "cattrs>=1.8,<23.2",
+        "cattrs>=1.8,<23.3",
         "importlib_resources>=5.2.0",
         "publication>=0.0.3",  # This is used by all generated code.
         "typeguard~=2.13.3",  # This is used by all generated code.

From fe2526cbd600be5489df5e319073b4bcd493a1a3 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 20 Nov 2023 13:41:11 +0000
Subject: [PATCH 02/27] chore(deps-dev): Update mkdocs-material requirement
 from ~=9.4.8 to ~=9.4.10 in /gh-pages (#4339)

Updates the requirements on [mkdocs-material](https://github.com/squidfunk/mkdocs-material) to permit the latest version.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/squidfunk/mkdocs-material/releases">mkdocs-material's releases</a>.</em></p>
<blockquote>
<h2>mkdocs-material-9.4.10</h2>
<ul>
<li>Fixed <a href="https://redirect.github.com/squidfunk/mkdocs-material/issues/6356">#6356</a>: Version selector can't be disabled via mike's configuration</li>
<li>Fixed <a href="https://redirect.github.com/squidfunk/mkdocs-material/issues/6281">#6281</a>: Navigation not rendering due to Safari bug (9.4.2 regression)</li>
<li>Fixed <a href="https://redirect.github.com/squidfunk/mkdocs-material/issues/6261">#6261</a>: Navigation expansion animates on first load (9.4.2 regression)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/squidfunk/mkdocs-material/blob/master/CHANGELOG">mkdocs-material's changelog</a>.</em></p>
<blockquote>
<p>mkdocs-material-9.4.10+insiders-4.43.1 (2023-11-19)</p>
<ul>
<li>Added third-party theme support in projects plugin, improving editing</li>
<li>Fixed <a href="https://redirect.github.com/squidfunk/mkdocs-material/issues/6360">#6360</a>: Projects plugin crashes when theme is not Material for MkDocs</li>
<li>Fixed <a href="https://redirect.github.com/squidfunk/mkdocs-material/issues/6306">#6306</a>: Projects plugin not reloading nested project configuration</li>
</ul>
<p>mkdocs-material-9.4.10 (2023-11-19)</p>
<ul>
<li>Fixed <a href="https://redirect.github.com/squidfunk/mkdocs-material/issues/6356">#6356</a>: Version selector can't be disabled via mike's configuration</li>
<li>Fixed <a href="https://redirect.github.com/squidfunk/mkdocs-material/issues/6281">#6281</a>: Navigation not rendering due to Safari bug (9.4.2 regression)</li>
<li>Fixed <a href="https://redirect.github.com/squidfunk/mkdocs-material/issues/6261">#6261</a>: Navigation expansion animates on first load (9.4.2 regression)</li>
</ul>
<p>mkdocs-material-9.4.9 (2023-11-17)</p>
<ul>
<li>Fixed <a href="https://redirect.github.com/squidfunk/mkdocs-material/issues/6344">#6344</a>: Long entries cutoff in table of contents</li>
<li>Fixed <a href="https://redirect.github.com/squidfunk/mkdocs-material/issues/6336">#6336</a>: Custom template for glob archive not working with pagination</li>
<li>Fixed <a href="https://redirect.github.com/squidfunk/mkdocs-material/issues/6328">#6328</a>: Blog plugin crashes for locales with dashes, e.g. pt-BR</li>
<li>Fixed <a href="https://redirect.github.com/squidfunk/mkdocs-material/issues/6327">#6327</a>: Copy-to-clipboard button doesn't trim trailing line feed</li>
<li>Fixed <a href="https://redirect.github.com/squidfunk/mkdocs-material/issues/6302">#6302</a>: Version strings not matched when using mike, only aliases</li>
<li>Fixed instant navigation progress indicator for gzipped content in Chrome</li>
<li>Fixed rendering bug on details marker rotation in Firefox</li>
</ul>
<p>mkdocs-material-9.4.8+insiders-4.43.0 (2023-11-05)</p>
<ul>
<li>Added support for GitLab committers (document contributors)</li>
<li>Fixed <a href="https://redirect.github.com/squidfunk/mkdocs-material/issues/6264">#6264</a>: Fixed compatibility with Python &lt; 3.10</li>
<li>Fixed <a href="https://redirect.github.com/squidfunk/mkdocs-material/issues/6254">#6254</a>: Meta plugin not applying meta files to blog posts</li>
</ul>
<p>mkdocs-material-9.4.8 (2023-11-05)</p>
<ul>
<li>Fixed invalid local address replacement when using instant loading</li>
<li>Fixed <a href="https://redirect.github.com/squidfunk/mkdocs-material/issues/6275">#6275</a>: Crash after navigation caused 404 when using instant loading</li>
</ul>
<p>mkdocs-material-9.4.7+insiders-4.42.3 (2023-10-27)</p>
<ul>
<li>Fixed <a href="https://redirect.github.com/squidfunk/mkdocs-material/issues/6251">#6251</a>: Cards in grids cut off on very small screens</li>
<li>Fixed <a href="https://redirect.github.com/squidfunk/mkdocs-material/issues/6241">#6241</a>: Using social plugin + static-i18n plugin errors</li>
</ul>
<p>mkdocs-material-9.4.7 (2023-10-27)</p>
<ul>
<li>Added Azerbaijani translations</li>
</ul>
<p>mkdocs-material-9.4.6+insiders-4.42.2 (2023-10-14)</p>
<ul>
<li>Fixed <a href="https://redirect.github.com/squidfunk/mkdocs-material/issues/6186">#6186</a>: Privacy plugin ignores hash fragments on images</li>
<li>Fixed <a href="https://redirect.github.com/squidfunk/mkdocs-material/issues/6180">#6180</a>: Projects plugin crashing when adding or removing files</li>
</ul>
<p>mkdocs-material-9.4.6 (2023-10-14)</p>
<ul>
<li>Updated Danish and Norwegian (Nynorsk) translations</li>
</ul>

</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/squidfunk/mkdocs-material/commit/71a87f86b4616426f930c1fb1f7fb0dc9bdebdd9"><code>71a87f8</code></a> Prepare 9.4.10 release</li>
<li><a href="https://github.com/squidfunk/mkdocs-material/commit/c181a46f741d001c925ea6cdbc746830dc92b17d"><code>c181a46</code></a> Added support to disable version selector in mike</li>
<li><a href="https://github.com/squidfunk/mkdocs-material/commit/9721228f1f098a23f1408e882f97a205ef509c82"><code>9721228</code></a> Merge branch 'master' of github.com:squidfunk/mkdocs-material</li>
<li><a href="https://github.com/squidfunk/mkdocs-material/commit/dcc296e42e20216b29dd48ece346f7f81755fbaf"><code>dcc296e</code></a> Fixed animation of expanded navigation items</li>
<li><a href="https://github.com/squidfunk/mkdocs-material/commit/1cc4aca43a66fe81ee508f6bd03ee7799edd30a5"><code>1cc4aca</code></a> Merge pull request <a href="https://redirect.github.com/squidfunk/mkdocs-material/issues/6361">#6361</a> from sisp/fix/analytics-schema</li>
<li><a href="https://github.com/squidfunk/mkdocs-material/commit/f528598540b992daaa84baec109b2f9b551a0a5d"><code>f528598</code></a> Dropped schema for Google Universal Analytics</li>
<li><a href="https://github.com/squidfunk/mkdocs-material/commit/09cfb90a0e0596c02b336aefae946573b91cc220"><code>09cfb90</code></a> Fixed <code>extra:analytics</code> schema for custom providers</li>
<li><a href="https://github.com/squidfunk/mkdocs-material/commit/5a42f9f2d2acd5b974f88d2ba1ebcd6c7e3c6036"><code>5a42f9f</code></a> Updated changelog</li>
<li><a href="https://github.com/squidfunk/mkdocs-material/commit/a2a4dd928a3934dcef36696caeb50140ee056c18"><code>a2a4dd9</code></a> Prepare 9.4.9 release</li>
<li><a href="https://github.com/squidfunk/mkdocs-material/commit/a508bcc17433983b7d564d0c4cfe419ea7a8eb68"><code>a508bcc</code></a> Updated dependencies</li>
<li>Additional commits viewable in <a href="https://github.com/squidfunk/mkdocs-material/compare/9.4.8...9.4.10">compare view</a></li>
</ul>
</details>
<br />


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)


</details>
---
 gh-pages/requirements-dev.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/gh-pages/requirements-dev.txt b/gh-pages/requirements-dev.txt
index 3b3f489d37..3dac1eea18 100644
--- a/gh-pages/requirements-dev.txt
+++ b/gh-pages/requirements-dev.txt
@@ -1,4 +1,4 @@
 mkdocs~=1.5.3
 mkdocs-awesome-pages-plugin~=2.9.2
-mkdocs-material~=9.4.8
+mkdocs-material~=9.4.10
 mkdocs-git-revision-date-plugin~=0.3.2

From ed97de861791a9b312f3a2ea06e77bfad4bd1902 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 20 Nov 2023 14:26:17 +0000
Subject: [PATCH 03/27] chore(deps): Bump xunit.runner.visualstudio from 2.5.3
 to 2.5.4 in /packages/@jsii/dotnet-runtime-test/test (#4342)

Bumps [xunit.runner.visualstudio](https://github.com/xunit/visualstudio.xunit) from 2.5.3 to 2.5.4.
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/xunit/visualstudio.xunit/commit/b9eacec401591bf17d5a3a5436223045c980562e"><code>b9eacec</code></a> v2.5.4</li>
<li><a href="https://github.com/xunit/visualstudio.xunit/commit/316c225a721e952c98ee36fbd722c2859ff3847e"><code>316c225</code></a> Latest dependencies</li>
<li><a href="https://github.com/xunit/visualstudio.xunit/commit/9d3aaa076f1c5596dd5aed68941aef6ca9657c55"><code>9d3aaa0</code></a> Latest dependencies</li>
<li><a href="https://github.com/xunit/visualstudio.xunit/commit/da1033b99db9ae1debee355466a031081540dd78"><code>da1033b</code></a> Latest dependencies</li>
<li><a href="https://github.com/xunit/visualstudio.xunit/commit/8b760896810eb16a3a55c30a3ee63739ff84a1eb"><code>8b76089</code></a> Remove unnecessary global.json</li>
<li><a href="https://github.com/xunit/visualstudio.xunit/commit/af8f8dfd4ffc32c25a81c2dd3e427658f4c63696"><code>af8f8df</code></a> Sort Directory.Build.props</li>
<li><a href="https://github.com/xunit/visualstudio.xunit/commit/44114d063aae1b4c40d7dd64e378d4151f17f949"><code>44114d0</code></a> Disable MSBuild transitive copies</li>
<li><a href="https://github.com/xunit/visualstudio.xunit/commit/48b0558eadbee6b79379b2ad988ab5940882ef27"><code>48b0558</code></a> Latest dependencies</li>
<li><a href="https://github.com/xunit/visualstudio.xunit/commit/2b7d93036611a5026efe1b5cb90df7290a396f0b"><code>2b7d930</code></a> Updated README</li>
<li><a href="https://github.com/xunit/visualstudio.xunit/commit/097b60584fb932d3dcff297de827c543c879c7f4"><code>097b605</code></a> Move load failure messages from DiaSession and friends to internal diagnostic...</li>
<li>Additional commits viewable in <a href="https://github.com/xunit/visualstudio.xunit/compare/2.5.3...2.5.4">compare view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=xunit.runner.visualstudio&package-manager=nuget&previous-version=2.5.3&new-version=2.5.4)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)


</details>
---
 packages/@jsii/Directory.Build.targets | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/packages/@jsii/Directory.Build.targets b/packages/@jsii/Directory.Build.targets
index 623fa429de..fc32ecbc23 100644
--- a/packages/@jsii/Directory.Build.targets
+++ b/packages/@jsii/Directory.Build.targets
@@ -13,7 +13,7 @@
     <PackageReference Update="Microsoft.NET.Test.Sdk" Version="17.8.0" />
     <PackageReference Update="NSubstitute" Version="5.1.0" />
     <PackageReference Update="xunit" Version="2.6.1" />
-    <PackageReference Update="xunit.runner.visualstudio" Version="2.5.3" />
+    <PackageReference Update="xunit.runner.visualstudio" Version="2.5.4" />
     <PackageReference Update="XunitXml.TestLogger" Version="3.1.17" />
 
     <PackageReference Update="Newtonsoft.Json" Version="13.0.3" />

From be20c96e7db5e6d1607fa1eb1c97122ee64effc7 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 20 Nov 2023 15:15:08 +0000
Subject: [PATCH 04/27] chore(deps): Bump
 Microsoft.Extensions.DependencyInjection from 7.0.0 to 8.0.0 in
 /packages/@jsii/dotnet-runtime-test/test (#4340)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Bumps [Microsoft.Extensions.DependencyInjection](https://github.com/dotnet/runtime) from 7.0.0 to 8.0.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/dotnet/runtime/releases">Microsoft.Extensions.DependencyInjection's releases</a>.</em></p>
<blockquote>
<h2>.NET 8.0.0</h2>
<p><a href="https://github.com/dotnet/core/releases/tag/v8.0.0">Release</a></p>
<h2>.NET 8.0 RC 2</h2>
<p><a href="https://github.com/dotnet/core/releases/tag/v8.0.0-rc.2">Release</a></p>
<h2>.NET 8.0 RC 1</h2>
<p><a href="https://github.com/dotnet/core/releases/tag/v8.0.0-rc.1">Release</a></p>
<h2>.NET 8.0 Preview 7</h2>
<p><a href="https://github.com/dotnet/core/releases/tag/v8.0.0-preview.7">Release</a></p>
<h2>.NET 8.0 Preview 6</h2>
<p><a href="https://github.com/dotnet/core/releases/tag/v8.0.0-preview.6">Release</a></p>
<h2>.NET 8.0 Preview 5</h2>
<p><a href="https://github.com/dotnet/core/releases/tag/v8.0.0-preview.5">Release</a></p>
<h2>.NET 8.0 Preview 4</h2>
<p><a href="https://github.com/dotnet/core/releases/tag/v8.0.0-preview.4">Release</a></p>
<h2>.NET 8.0 Preview 3</h2>
<p><a href="https://github.com/dotnet/core/releases/tag/v8.0.0-preview.3">Release</a></p>
<h2>.NET 8.0 Preview 2</h2>
<p><a href="https://github.com/dotnet/core/releases/tag/v8.0.0-preview.2">Release</a></p>
<h2>.NET 8.0 Preview 1</h2>
<p><a href="https://github.com/dotnet/core/releases/tag/v8.0.0-preview.1">Release</a></p>
<h2>.NET 7.0.14</h2>
<p><a href="https://github.com/dotnet/core/releases/tag/v7.0.14">Release</a></p>
<h2>What's Changed</h2>
<ul>
<li>[release/7.0-staging] Check for .deps.json when enumerating framework paths by <a href="https://github.com/elinor-fung"><code>@​elinor-fung</code></a> in <a href="https://redirect.github.com/dotnet/runtime/pull/92033">dotnet/runtime#92033</a></li>
<li>[release/7.0] Update Ubuntu 16.04 amd64 queues to 22.04 by <a href="https://github.com/carlossanlop"><code>@​carlossanlop</code></a> in <a href="https://redirect.github.com/dotnet/runtime/pull/92796">dotnet/runtime#92796</a></li>
<li>[release/7.0-staging] Fix JsonDocument thread safety. by <a href="https://github.com/github-actions"><code>@​github-actions</code></a> in <a href="https://redirect.github.com/dotnet/runtime/pull/92831">dotnet/runtime#92831</a></li>
<li>[automated] Merge branch 'release/7.0' =&gt; 'release/7.0-staging' by <a href="https://github.com/dotnet-maestro-bot"><code>@​dotnet-maestro-bot</code></a> in <a href="https://redirect.github.com/dotnet/runtime/pull/91916">dotnet/runtime#91916</a></li>
<li>[release/7.0-staging] CI: runtime-wasm-perf: disable for PRs by <a href="https://github.com/radical"><code>@​radical</code></a> in <a href="https://redirect.github.com/dotnet/runtime/pull/92978">dotnet/runtime#92978</a></li>
<li>[release/7.0-staging] Update dependencies from dotnet/emsdk by <a href="https://github.com/dotnet-maestro"><code>@​dotnet-maestro</code></a> in <a href="https://redirect.github.com/dotnet/runtime/pull/92991">dotnet/runtime#92991</a></li>
<li>[release/7.0] Update dependencies from dotnet/emsdk by <a href="https://github.com/dotnet-maestro"><code>@​dotnet-maestro</code></a> in <a href="https://redirect.github.com/dotnet/runtime/pull/92992">dotnet/runtime#92992</a></li>
<li>[release/7.0] [Mono] Race in init_method when using LLVM AOT. by <a href="https://github.com/github-actions"><code>@​github-actions</code></a> in <a href="https://redirect.github.com/dotnet/runtime/pull/93006">dotnet/runtime#93006</a></li>
<li>[release/7.0-staging] Fix a memory leak in runtime interop stubs when using an array of structs of types that use old-style managed marshalers by <a href="https://github.com/github-actions"><code>@​github-actions</code></a> in <a href="https://redirect.github.com/dotnet/runtime/pull/93148">dotnet/runtime#93148</a></li>
<li>[7.0] Make thread pool thread timeouts configurable by <a href="https://github.com/kouvel"><code>@​kouvel</code></a> in <a href="https://redirect.github.com/dotnet/runtime/pull/92987">dotnet/runtime#92987</a></li>
<li>[release/7.0] Fix max chunk size limiting by <a href="https://github.com/github-actions"><code>@​github-actions</code></a> in <a href="https://redirect.github.com/dotnet/runtime/pull/81607">dotnet/runtime#81607</a></li>
<li>Merging internal commits for release/7.0 by <a href="https://github.com/vseanreesermsft"><code>@​vseanreesermsft</code></a> in <a href="https://redirect.github.com/dotnet/runtime/pull/93307">dotnet/runtime#93307</a></li>
<li>[release/7.0] Update dependencies from dotnet/arcade by <a href="https://github.com/dotnet-maestro"><code>@​dotnet-maestro</code></a> in <a href="https://redirect.github.com/dotnet/runtime/pull/93389">dotnet/runtime#93389</a></li>
<li>[release/7.0] Update dependencies from dotnet/xharness by <a href="https://github.com/dotnet-maestro"><code>@​dotnet-maestro</code></a> in <a href="https://redirect.github.com/dotnet/runtime/pull/93391">dotnet/runtime#93391</a></li>
<li>[release/7.0] Update dependencies from dotnet/emsdk by <a href="https://github.com/dotnet-maestro"><code>@​dotnet-maestro</code></a> in <a href="https://redirect.github.com/dotnet/runtime/pull/93408">dotnet/runtime#93408</a></li>
<li>[automated] Merge branch 'release/7.0' =&gt; 'release/7.0-staging' by <a href="https://github.com/dotnet-maestro-bot"><code>@​dotnet-maestro-bot</code></a> in <a href="https://redirect.github.com/dotnet/runtime/pull/92980">dotnet/runtime#92980</a></li>
</ul>

</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/dotnet/runtime/commit/5535e31a712343a63f5d7d796cd874e563e5ac14"><code>5535e31</code></a> Merge in 'release/8.0' changes</li>
<li><a href="https://github.com/dotnet/runtime/commit/e0bed9410065d5e3554cbfc58e1ea1f1115c13e4"><code>e0bed94</code></a> Update dependencies from <a href="https://github.com/dotnet/emsdk">https://github.com/dotnet/emsdk</a> build 20231030.2 (<a href="https://redirect.github.com/dotnet/runtime/issues/9">#9</a>...</li>
<li><a href="https://github.com/dotnet/runtime/commit/0395649aa16820be8a669203b265b0a578e82843"><code>0395649</code></a> Merge in 'release/8.0' changes</li>
<li><a href="https://github.com/dotnet/runtime/commit/0a7709af7830b8b6e3e719fcf64f3da56f00e14a"><code>0a7709a</code></a> [release/8.0] Bump net7 downlevel version to 7.0.14 (<a href="https://redirect.github.com/dotnet/runtime/issues/94192">#94192</a>)</li>
<li><a href="https://github.com/dotnet/runtime/commit/a60d358270ad89a0542d9ec0cb95b7702821a512"><code>a60d358</code></a> Merge in 'release/8.0' changes</li>
<li><a href="https://github.com/dotnet/runtime/commit/7331dcb60e0fd7c74a6f7216d61819c9f57a1ade"><code>7331dcb</code></a> [8.0] Update MsQuic (<a href="https://redirect.github.com/dotnet/runtime/issues/93979">#93979</a>)</li>
<li><a href="https://github.com/dotnet/runtime/commit/17ea9ab3f662320d4ac62d3a2b783b5054ad80bf"><code>17ea9ab</code></a> Merged PR 34793: [internal/release/8.0] Merge from public</li>
<li><a href="https://github.com/dotnet/runtime/commit/2066e8f214a187fb7d039a519808ca67a11b0368"><code>2066e8f</code></a> Apply suggestions from code review</li>
<li><a href="https://github.com/dotnet/runtime/commit/59edaad404d1b8e47080015ae8d0787f94c970df"><code>59edaad</code></a> [release/8.0] Honor JsonSerializerOptions.PropertyNameCaseInsensitive in prop...</li>
<li><a href="https://github.com/dotnet/runtime/commit/488a8a3521610422e8fbe22d5cc66127f3dce3dc"><code>488a8a3</code></a> [release/8.0][wasm] Fix perf pipeline runs (<a href="https://redirect.github.com/dotnet/runtime/issues/93888">#93888</a>)</li>
<li>Additional commits viewable in <a href="https://github.com/dotnet/runtime/compare/v7.0.0...v8.0.0">compare view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=Microsoft.Extensions.DependencyInjection&package-manager=nuget&previous-version=7.0.0&new-version=8.0.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)


</details>
---
 packages/@jsii/Directory.Build.targets | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/packages/@jsii/Directory.Build.targets b/packages/@jsii/Directory.Build.targets
index fc32ecbc23..16633d60e1 100644
--- a/packages/@jsii/Directory.Build.targets
+++ b/packages/@jsii/Directory.Build.targets
@@ -2,7 +2,7 @@
   <ItemGroup>
     <!-- Central configuration of dependency versions for all DotNet packages -->
 
-    <PackageReference Update="Microsoft.Extensions.DependencyInjection" Version="7.0.0" />
+    <PackageReference Update="Microsoft.Extensions.DependencyInjection" Version="8.0.0" />
     <PackageReference Update="Microsoft.Extensions.Logging" Version="7.0.0" />
     <PackageReference Update="Microsoft.Extensions.Logging.Console" Version="7.0.0" />
 

From 24ae5f3eb49c419d323c236083f121d817594443 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 20 Nov 2023 16:05:58 +0000
Subject: [PATCH 05/27] chore(deps): Bump Microsoft.Extensions.Logging from
 7.0.0 to 8.0.0 in /packages/@jsii/dotnet-runtime-test/test (#4344)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Bumps [Microsoft.Extensions.Logging](https://github.com/dotnet/runtime) from 7.0.0 to 8.0.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/dotnet/runtime/releases">Microsoft.Extensions.Logging's releases</a>.</em></p>
<blockquote>
<h2>.NET 8.0.0</h2>
<p><a href="https://github.com/dotnet/core/releases/tag/v8.0.0">Release</a></p>
<h2>.NET 8.0 RC 2</h2>
<p><a href="https://github.com/dotnet/core/releases/tag/v8.0.0-rc.2">Release</a></p>
<h2>.NET 8.0 RC 1</h2>
<p><a href="https://github.com/dotnet/core/releases/tag/v8.0.0-rc.1">Release</a></p>
<h2>.NET 8.0 Preview 7</h2>
<p><a href="https://github.com/dotnet/core/releases/tag/v8.0.0-preview.7">Release</a></p>
<h2>.NET 8.0 Preview 6</h2>
<p><a href="https://github.com/dotnet/core/releases/tag/v8.0.0-preview.6">Release</a></p>
<h2>.NET 8.0 Preview 5</h2>
<p><a href="https://github.com/dotnet/core/releases/tag/v8.0.0-preview.5">Release</a></p>
<h2>.NET 8.0 Preview 4</h2>
<p><a href="https://github.com/dotnet/core/releases/tag/v8.0.0-preview.4">Release</a></p>
<h2>.NET 8.0 Preview 3</h2>
<p><a href="https://github.com/dotnet/core/releases/tag/v8.0.0-preview.3">Release</a></p>
<h2>.NET 8.0 Preview 2</h2>
<p><a href="https://github.com/dotnet/core/releases/tag/v8.0.0-preview.2">Release</a></p>
<h2>.NET 8.0 Preview 1</h2>
<p><a href="https://github.com/dotnet/core/releases/tag/v8.0.0-preview.1">Release</a></p>
<h2>.NET 7.0.14</h2>
<p><a href="https://github.com/dotnet/core/releases/tag/v7.0.14">Release</a></p>
<h2>What's Changed</h2>
<ul>
<li>[release/7.0-staging] Check for .deps.json when enumerating framework paths by <a href="https://github.com/elinor-fung"><code>@​elinor-fung</code></a> in <a href="https://redirect.github.com/dotnet/runtime/pull/92033">dotnet/runtime#92033</a></li>
<li>[release/7.0] Update Ubuntu 16.04 amd64 queues to 22.04 by <a href="https://github.com/carlossanlop"><code>@​carlossanlop</code></a> in <a href="https://redirect.github.com/dotnet/runtime/pull/92796">dotnet/runtime#92796</a></li>
<li>[release/7.0-staging] Fix JsonDocument thread safety. by <a href="https://github.com/github-actions"><code>@​github-actions</code></a> in <a href="https://redirect.github.com/dotnet/runtime/pull/92831">dotnet/runtime#92831</a></li>
<li>[automated] Merge branch 'release/7.0' =&gt; 'release/7.0-staging' by <a href="https://github.com/dotnet-maestro-bot"><code>@​dotnet-maestro-bot</code></a> in <a href="https://redirect.github.com/dotnet/runtime/pull/91916">dotnet/runtime#91916</a></li>
<li>[release/7.0-staging] CI: runtime-wasm-perf: disable for PRs by <a href="https://github.com/radical"><code>@​radical</code></a> in <a href="https://redirect.github.com/dotnet/runtime/pull/92978">dotnet/runtime#92978</a></li>
<li>[release/7.0-staging] Update dependencies from dotnet/emsdk by <a href="https://github.com/dotnet-maestro"><code>@​dotnet-maestro</code></a> in <a href="https://redirect.github.com/dotnet/runtime/pull/92991">dotnet/runtime#92991</a></li>
<li>[release/7.0] Update dependencies from dotnet/emsdk by <a href="https://github.com/dotnet-maestro"><code>@​dotnet-maestro</code></a> in <a href="https://redirect.github.com/dotnet/runtime/pull/92992">dotnet/runtime#92992</a></li>
<li>[release/7.0] [Mono] Race in init_method when using LLVM AOT. by <a href="https://github.com/github-actions"><code>@​github-actions</code></a> in <a href="https://redirect.github.com/dotnet/runtime/pull/93006">dotnet/runtime#93006</a></li>
<li>[release/7.0-staging] Fix a memory leak in runtime interop stubs when using an array of structs of types that use old-style managed marshalers by <a href="https://github.com/github-actions"><code>@​github-actions</code></a> in <a href="https://redirect.github.com/dotnet/runtime/pull/93148">dotnet/runtime#93148</a></li>
<li>[7.0] Make thread pool thread timeouts configurable by <a href="https://github.com/kouvel"><code>@​kouvel</code></a> in <a href="https://redirect.github.com/dotnet/runtime/pull/92987">dotnet/runtime#92987</a></li>
<li>[release/7.0] Fix max chunk size limiting by <a href="https://github.com/github-actions"><code>@​github-actions</code></a> in <a href="https://redirect.github.com/dotnet/runtime/pull/81607">dotnet/runtime#81607</a></li>
<li>Merging internal commits for release/7.0 by <a href="https://github.com/vseanreesermsft"><code>@​vseanreesermsft</code></a> in <a href="https://redirect.github.com/dotnet/runtime/pull/93307">dotnet/runtime#93307</a></li>
<li>[release/7.0] Update dependencies from dotnet/arcade by <a href="https://github.com/dotnet-maestro"><code>@​dotnet-maestro</code></a> in <a href="https://redirect.github.com/dotnet/runtime/pull/93389">dotnet/runtime#93389</a></li>
<li>[release/7.0] Update dependencies from dotnet/xharness by <a href="https://github.com/dotnet-maestro"><code>@​dotnet-maestro</code></a> in <a href="https://redirect.github.com/dotnet/runtime/pull/93391">dotnet/runtime#93391</a></li>
<li>[release/7.0] Update dependencies from dotnet/emsdk by <a href="https://github.com/dotnet-maestro"><code>@​dotnet-maestro</code></a> in <a href="https://redirect.github.com/dotnet/runtime/pull/93408">dotnet/runtime#93408</a></li>
<li>[automated] Merge branch 'release/7.0' =&gt; 'release/7.0-staging' by <a href="https://github.com/dotnet-maestro-bot"><code>@​dotnet-maestro-bot</code></a> in <a href="https://redirect.github.com/dotnet/runtime/pull/92980">dotnet/runtime#92980</a></li>
</ul>

</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/dotnet/runtime/commit/5535e31a712343a63f5d7d796cd874e563e5ac14"><code>5535e31</code></a> Merge in 'release/8.0' changes</li>
<li><a href="https://github.com/dotnet/runtime/commit/e0bed9410065d5e3554cbfc58e1ea1f1115c13e4"><code>e0bed94</code></a> Update dependencies from <a href="https://github.com/dotnet/emsdk">https://github.com/dotnet/emsdk</a> build 20231030.2 (<a href="https://redirect.github.com/dotnet/runtime/issues/9">#9</a>...</li>
<li><a href="https://github.com/dotnet/runtime/commit/0395649aa16820be8a669203b265b0a578e82843"><code>0395649</code></a> Merge in 'release/8.0' changes</li>
<li><a href="https://github.com/dotnet/runtime/commit/0a7709af7830b8b6e3e719fcf64f3da56f00e14a"><code>0a7709a</code></a> [release/8.0] Bump net7 downlevel version to 7.0.14 (<a href="https://redirect.github.com/dotnet/runtime/issues/94192">#94192</a>)</li>
<li><a href="https://github.com/dotnet/runtime/commit/a60d358270ad89a0542d9ec0cb95b7702821a512"><code>a60d358</code></a> Merge in 'release/8.0' changes</li>
<li><a href="https://github.com/dotnet/runtime/commit/7331dcb60e0fd7c74a6f7216d61819c9f57a1ade"><code>7331dcb</code></a> [8.0] Update MsQuic (<a href="https://redirect.github.com/dotnet/runtime/issues/93979">#93979</a>)</li>
<li><a href="https://github.com/dotnet/runtime/commit/17ea9ab3f662320d4ac62d3a2b783b5054ad80bf"><code>17ea9ab</code></a> Merged PR 34793: [internal/release/8.0] Merge from public</li>
<li><a href="https://github.com/dotnet/runtime/commit/2066e8f214a187fb7d039a519808ca67a11b0368"><code>2066e8f</code></a> Apply suggestions from code review</li>
<li><a href="https://github.com/dotnet/runtime/commit/59edaad404d1b8e47080015ae8d0787f94c970df"><code>59edaad</code></a> [release/8.0] Honor JsonSerializerOptions.PropertyNameCaseInsensitive in prop...</li>
<li><a href="https://github.com/dotnet/runtime/commit/488a8a3521610422e8fbe22d5cc66127f3dce3dc"><code>488a8a3</code></a> [release/8.0][wasm] Fix perf pipeline runs (<a href="https://redirect.github.com/dotnet/runtime/issues/93888">#93888</a>)</li>
<li>Additional commits viewable in <a href="https://github.com/dotnet/runtime/compare/v7.0.0...v8.0.0">compare view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=Microsoft.Extensions.Logging&package-manager=nuget&previous-version=7.0.0&new-version=8.0.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)


</details>
---
 packages/@jsii/Directory.Build.targets | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/packages/@jsii/Directory.Build.targets b/packages/@jsii/Directory.Build.targets
index 16633d60e1..921e37ef20 100644
--- a/packages/@jsii/Directory.Build.targets
+++ b/packages/@jsii/Directory.Build.targets
@@ -3,7 +3,7 @@
     <!-- Central configuration of dependency versions for all DotNet packages -->
 
     <PackageReference Update="Microsoft.Extensions.DependencyInjection" Version="8.0.0" />
-    <PackageReference Update="Microsoft.Extensions.Logging" Version="7.0.0" />
+    <PackageReference Update="Microsoft.Extensions.Logging" Version="8.0.0" />
     <PackageReference Update="Microsoft.Extensions.Logging.Console" Version="7.0.0" />
 
     <PackageReference Update="Microsoft.CodeAnalysis.CSharp.Workspaces" Version="4.7.0" />

From 818c7e7a1e6b66e37c35602deaa751fc1b1f559e Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 20 Nov 2023 17:10:04 +0000
Subject: [PATCH 06/27] chore(deps): Bump Microsoft.Extensions.Logging.Console
 from 7.0.0 to 8.0.0 in /packages/@jsii/dotnet-runtime-test/test (#4343)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Bumps [Microsoft.Extensions.Logging.Console](https://github.com/dotnet/runtime) from 7.0.0 to 8.0.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/dotnet/runtime/releases">Microsoft.Extensions.Logging.Console's releases</a>.</em></p>
<blockquote>
<h2>.NET 8.0.0</h2>
<p><a href="https://github.com/dotnet/core/releases/tag/v8.0.0">Release</a></p>
<h2>.NET 8.0 RC 2</h2>
<p><a href="https://github.com/dotnet/core/releases/tag/v8.0.0-rc.2">Release</a></p>
<h2>.NET 8.0 RC 1</h2>
<p><a href="https://github.com/dotnet/core/releases/tag/v8.0.0-rc.1">Release</a></p>
<h2>.NET 8.0 Preview 7</h2>
<p><a href="https://github.com/dotnet/core/releases/tag/v8.0.0-preview.7">Release</a></p>
<h2>.NET 8.0 Preview 6</h2>
<p><a href="https://github.com/dotnet/core/releases/tag/v8.0.0-preview.6">Release</a></p>
<h2>.NET 8.0 Preview 5</h2>
<p><a href="https://github.com/dotnet/core/releases/tag/v8.0.0-preview.5">Release</a></p>
<h2>.NET 8.0 Preview 4</h2>
<p><a href="https://github.com/dotnet/core/releases/tag/v8.0.0-preview.4">Release</a></p>
<h2>.NET 8.0 Preview 3</h2>
<p><a href="https://github.com/dotnet/core/releases/tag/v8.0.0-preview.3">Release</a></p>
<h2>.NET 8.0 Preview 2</h2>
<p><a href="https://github.com/dotnet/core/releases/tag/v8.0.0-preview.2">Release</a></p>
<h2>.NET 8.0 Preview 1</h2>
<p><a href="https://github.com/dotnet/core/releases/tag/v8.0.0-preview.1">Release</a></p>
<h2>.NET 7.0.14</h2>
<p><a href="https://github.com/dotnet/core/releases/tag/v7.0.14">Release</a></p>
<h2>What's Changed</h2>
<ul>
<li>[release/7.0-staging] Check for .deps.json when enumerating framework paths by <a href="https://github.com/elinor-fung"><code>@​elinor-fung</code></a> in <a href="https://redirect.github.com/dotnet/runtime/pull/92033">dotnet/runtime#92033</a></li>
<li>[release/7.0] Update Ubuntu 16.04 amd64 queues to 22.04 by <a href="https://github.com/carlossanlop"><code>@​carlossanlop</code></a> in <a href="https://redirect.github.com/dotnet/runtime/pull/92796">dotnet/runtime#92796</a></li>
<li>[release/7.0-staging] Fix JsonDocument thread safety. by <a href="https://github.com/github-actions"><code>@​github-actions</code></a> in <a href="https://redirect.github.com/dotnet/runtime/pull/92831">dotnet/runtime#92831</a></li>
<li>[automated] Merge branch 'release/7.0' =&gt; 'release/7.0-staging' by <a href="https://github.com/dotnet-maestro-bot"><code>@​dotnet-maestro-bot</code></a> in <a href="https://redirect.github.com/dotnet/runtime/pull/91916">dotnet/runtime#91916</a></li>
<li>[release/7.0-staging] CI: runtime-wasm-perf: disable for PRs by <a href="https://github.com/radical"><code>@​radical</code></a> in <a href="https://redirect.github.com/dotnet/runtime/pull/92978">dotnet/runtime#92978</a></li>
<li>[release/7.0-staging] Update dependencies from dotnet/emsdk by <a href="https://github.com/dotnet-maestro"><code>@​dotnet-maestro</code></a> in <a href="https://redirect.github.com/dotnet/runtime/pull/92991">dotnet/runtime#92991</a></li>
<li>[release/7.0] Update dependencies from dotnet/emsdk by <a href="https://github.com/dotnet-maestro"><code>@​dotnet-maestro</code></a> in <a href="https://redirect.github.com/dotnet/runtime/pull/92992">dotnet/runtime#92992</a></li>
<li>[release/7.0] [Mono] Race in init_method when using LLVM AOT. by <a href="https://github.com/github-actions"><code>@​github-actions</code></a> in <a href="https://redirect.github.com/dotnet/runtime/pull/93006">dotnet/runtime#93006</a></li>
<li>[release/7.0-staging] Fix a memory leak in runtime interop stubs when using an array of structs of types that use old-style managed marshalers by <a href="https://github.com/github-actions"><code>@​github-actions</code></a> in <a href="https://redirect.github.com/dotnet/runtime/pull/93148">dotnet/runtime#93148</a></li>
<li>[7.0] Make thread pool thread timeouts configurable by <a href="https://github.com/kouvel"><code>@​kouvel</code></a> in <a href="https://redirect.github.com/dotnet/runtime/pull/92987">dotnet/runtime#92987</a></li>
<li>[release/7.0] Fix max chunk size limiting by <a href="https://github.com/github-actions"><code>@​github-actions</code></a> in <a href="https://redirect.github.com/dotnet/runtime/pull/81607">dotnet/runtime#81607</a></li>
<li>Merging internal commits for release/7.0 by <a href="https://github.com/vseanreesermsft"><code>@​vseanreesermsft</code></a> in <a href="https://redirect.github.com/dotnet/runtime/pull/93307">dotnet/runtime#93307</a></li>
<li>[release/7.0] Update dependencies from dotnet/arcade by <a href="https://github.com/dotnet-maestro"><code>@​dotnet-maestro</code></a> in <a href="https://redirect.github.com/dotnet/runtime/pull/93389">dotnet/runtime#93389</a></li>
<li>[release/7.0] Update dependencies from dotnet/xharness by <a href="https://github.com/dotnet-maestro"><code>@​dotnet-maestro</code></a> in <a href="https://redirect.github.com/dotnet/runtime/pull/93391">dotnet/runtime#93391</a></li>
<li>[release/7.0] Update dependencies from dotnet/emsdk by <a href="https://github.com/dotnet-maestro"><code>@​dotnet-maestro</code></a> in <a href="https://redirect.github.com/dotnet/runtime/pull/93408">dotnet/runtime#93408</a></li>
<li>[automated] Merge branch 'release/7.0' =&gt; 'release/7.0-staging' by <a href="https://github.com/dotnet-maestro-bot"><code>@​dotnet-maestro-bot</code></a> in <a href="https://redirect.github.com/dotnet/runtime/pull/92980">dotnet/runtime#92980</a></li>
</ul>

</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/dotnet/runtime/commit/5535e31a712343a63f5d7d796cd874e563e5ac14"><code>5535e31</code></a> Merge in 'release/8.0' changes</li>
<li><a href="https://github.com/dotnet/runtime/commit/e0bed9410065d5e3554cbfc58e1ea1f1115c13e4"><code>e0bed94</code></a> Update dependencies from <a href="https://github.com/dotnet/emsdk">https://github.com/dotnet/emsdk</a> build 20231030.2 (<a href="https://redirect.github.com/dotnet/runtime/issues/9">#9</a>...</li>
<li><a href="https://github.com/dotnet/runtime/commit/0395649aa16820be8a669203b265b0a578e82843"><code>0395649</code></a> Merge in 'release/8.0' changes</li>
<li><a href="https://github.com/dotnet/runtime/commit/0a7709af7830b8b6e3e719fcf64f3da56f00e14a"><code>0a7709a</code></a> [release/8.0] Bump net7 downlevel version to 7.0.14 (<a href="https://redirect.github.com/dotnet/runtime/issues/94192">#94192</a>)</li>
<li><a href="https://github.com/dotnet/runtime/commit/a60d358270ad89a0542d9ec0cb95b7702821a512"><code>a60d358</code></a> Merge in 'release/8.0' changes</li>
<li><a href="https://github.com/dotnet/runtime/commit/7331dcb60e0fd7c74a6f7216d61819c9f57a1ade"><code>7331dcb</code></a> [8.0] Update MsQuic (<a href="https://redirect.github.com/dotnet/runtime/issues/93979">#93979</a>)</li>
<li><a href="https://github.com/dotnet/runtime/commit/17ea9ab3f662320d4ac62d3a2b783b5054ad80bf"><code>17ea9ab</code></a> Merged PR 34793: [internal/release/8.0] Merge from public</li>
<li><a href="https://github.com/dotnet/runtime/commit/2066e8f214a187fb7d039a519808ca67a11b0368"><code>2066e8f</code></a> Apply suggestions from code review</li>
<li><a href="https://github.com/dotnet/runtime/commit/59edaad404d1b8e47080015ae8d0787f94c970df"><code>59edaad</code></a> [release/8.0] Honor JsonSerializerOptions.PropertyNameCaseInsensitive in prop...</li>
<li><a href="https://github.com/dotnet/runtime/commit/488a8a3521610422e8fbe22d5cc66127f3dce3dc"><code>488a8a3</code></a> [release/8.0][wasm] Fix perf pipeline runs (<a href="https://redirect.github.com/dotnet/runtime/issues/93888">#93888</a>)</li>
<li>Additional commits viewable in <a href="https://github.com/dotnet/runtime/compare/v7.0.0...v8.0.0">compare view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=Microsoft.Extensions.Logging.Console&package-manager=nuget&previous-version=7.0.0&new-version=8.0.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)


</details>
---
 packages/@jsii/Directory.Build.targets | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/packages/@jsii/Directory.Build.targets b/packages/@jsii/Directory.Build.targets
index 921e37ef20..1201f4c86c 100644
--- a/packages/@jsii/Directory.Build.targets
+++ b/packages/@jsii/Directory.Build.targets
@@ -4,7 +4,7 @@
 
     <PackageReference Update="Microsoft.Extensions.DependencyInjection" Version="8.0.0" />
     <PackageReference Update="Microsoft.Extensions.Logging" Version="8.0.0" />
-    <PackageReference Update="Microsoft.Extensions.Logging.Console" Version="7.0.0" />
+    <PackageReference Update="Microsoft.Extensions.Logging.Console" Version="8.0.0" />
 
     <PackageReference Update="Microsoft.CodeAnalysis.CSharp.Workspaces" Version="4.7.0" />
     <PackageReference Update="Microsoft.CodeAnalysis.Analyzers" Version="3.3.4" />

From b7c0f7f473005ccad5314712dd1bdc89a64178b4 Mon Sep 17 00:00:00 2001
From: Rico Hermans <rix0rrr@gmail.com>
Date: Thu, 23 Nov 2023 16:14:10 +0100
Subject: [PATCH 07/27] chore: update superchain README (#4346)

---

By submitting this pull request, I confirm that my contribution is made under the terms of the [Apache 2.0 license].

[Apache 2.0 license]: https://www.apache.org/licenses/LICENSE-2.0
---
 superchain/README.md | 9 ++++-----
 1 file changed, 4 insertions(+), 5 deletions(-)

diff --git a/superchain/README.md b/superchain/README.md
index c1a718be7b..92cea7deb3 100644
--- a/superchain/README.md
+++ b/superchain/README.md
@@ -26,22 +26,21 @@ Maintained image tags are named using the following pattern:
 public.ecr.aws/jsii/superchain:<JSII-MAJOR>-<BASE>(-node<NODE-MAJOR>)(-nightly)
 ```
 
-- `<JSII-MAJOR>` is the major line of the jsii toolchain
-  - The only supported value is `1`
-- `<BASE>` is the base image tag (e.g: `buster-slim`, `bullseye-slim`, `bookworm-slim`)
-  - The only supported value is `buster-slim`
+- `<JSII-MAJOR>` is the major line of the jsii toolchain (must be `1`)
+- `<BASE>` is the base image tag (must be `bullseye-slim`)
 - `<NODE-MAJOR>` is the major version of node contained in the image
   - `18` corresponds to node 18.x, this is the default
   - `20` corresponds to node 20.x
 - `-nightly` images are released from the `HEAD` of the [`aws/jsii`][jsii]
   repository and should typically not be used for production workloads
 
-The previous image tags have been discontinued:
+**The previous image tags have been discontinued and must NOT BE USED ANYMORE:**
 
 - `:latest` (users should migrate to `:1-bullseye-slim`)
 - `:nightly` (users should migrate to `:1-bullseye-slim-nightly`)
 - `:nodeX` (users should migrate to an image using a supported node version)
 - `:nodeX-nightly` (users should migrate to a nightly image using a supported node version)
+- `:1-buster-slim-*` (users should migrate to `:1-bullseye-slim`)
 
 ## Building
 

From 2ecfb778130c1a2fdd6b4932216e144a0d079d5c Mon Sep 17 00:00:00 2001
From: Romain Marcadier <rmuller@amazon.fr>
Date: Fri, 24 Nov 2023 19:12:54 +0100
Subject: [PATCH 08/27] feat(go): add jsii.Sprintf helper (#4345)

It's a fairly common practice to compose string values using `fmt.Sprintf`, however in order to use these with `jsii` they need to be stored into a variable so a pointer can be taken from them, or they need passed into the `jsii.String` function.

This new helper removes this constraint and provides a simple way to perform `jsii`-friendly string interpolation.



---

By submitting this pull request, I confirm that my contribution is made under the terms of the [Apache 2.0 license].

[Apache 2.0 license]: https://www.apache.org/licenses/LICENSE-2.0
---
 packages/@jsii/go-runtime/jsii-runtime-go/helpers.go  | 11 ++++++++++-
 .../@jsii/go-runtime/jsii-runtime-go/helpers_test.go  |  4 ++++
 2 files changed, 14 insertions(+), 1 deletion(-)

diff --git a/packages/@jsii/go-runtime/jsii-runtime-go/helpers.go b/packages/@jsii/go-runtime/jsii-runtime-go/helpers.go
index 54f7bc2fce..088e161460 100644
--- a/packages/@jsii/go-runtime/jsii-runtime-go/helpers.go
+++ b/packages/@jsii/go-runtime/jsii-runtime-go/helpers.go
@@ -1,6 +1,9 @@
 package jsii
 
-import "time"
+import (
+	"fmt"
+	"time"
+)
 
 type basicType interface {
 	bool | string | float64 | time.Time
@@ -51,6 +54,12 @@ func Numbers[T numberType](v ...T) *[]*float64 {
 // String returns a pointer to the provided string.
 func String(v string) *string { return Ptr(v) }
 
+// Sprintf returns a pointer to a fomratted string (semantics are the same as fmt.Sprintf).
+func Sprintf(format string, a ...interface{}) *string {
+	res := fmt.Sprintf(format, a...)
+	return &res
+}
+
 // Strings returns a pointer to a slice of pointers to all of the provided strings.
 func Strings(v ...string) *[]*string {
 	return PtrSlice(v...)
diff --git a/packages/@jsii/go-runtime/jsii-runtime-go/helpers_test.go b/packages/@jsii/go-runtime/jsii-runtime-go/helpers_test.go
index 4287dbeda9..edb6cbf0d3 100644
--- a/packages/@jsii/go-runtime/jsii-runtime-go/helpers_test.go
+++ b/packages/@jsii/go-runtime/jsii-runtime-go/helpers_test.go
@@ -64,6 +64,10 @@ func TestString(t *testing.T) {
 	assert.Equal(t, "Hello", *String("Hello"))
 }
 
+func TestSprintf(t *testing.T) {
+	assert.Equal(t, "formatted: 42", *Sprintf("formatted: %d", 42))
+}
+
 func TestStrings(t *testing.T) {
 	assert.Equal(t, []*string{String("Hello"), String("World")}, *Strings("Hello", "World"))
 }

From ae8c0ac2f3eed9c9905f55b1e80d0b7f58de9570 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Fri, 24 Nov 2023 18:56:00 +0000
Subject: [PATCH 09/27] chore(deps-dev): Bump mypy from 1.7.0 to 1.7.1 in
 /packages/jsii-pacmak/test/generated-code (#4347)

Bumps [mypy](https://github.com/python/mypy) from 1.7.0 to 1.7.1.
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/python/mypy/commit/6b3c41838d8e7a39242b6fd035535e2d76eabfc6"><code>6b3c418</code></a> Update version to 1.7.1 (without +dev)</li>
<li><a href="https://github.com/python/mypy/commit/c10e17348f2eacbbeae80eb6c10c661c0137d849"><code>c10e173</code></a> [mypyc] Fix regression with nested functions (<a href="https://redirect.github.com/python/mypy/issues/16484">#16484</a>)</li>
<li><a href="https://github.com/python/mypy/commit/e6399d10b0a1cdb104559482fad1b4dc0e2de6ac"><code>e6399d1</code></a> Fix polymorphic application for callback protocols (<a href="https://redirect.github.com/python/mypy/issues/16514">#16514</a>)</li>
<li><a href="https://github.com/python/mypy/commit/661adb756800ecc40fabbe62e9339efd253aff4e"><code>661adb7</code></a> Fix crash on strict-equality with recursive types (<a href="https://redirect.github.com/python/mypy/issues/16483">#16483</a>)</li>
<li><a href="https://github.com/python/mypy/commit/6c8e0cc47c014894ea41621a10f3d1b465322362"><code>6c8e0cc</code></a> Ignore position if imprecise arguments are matched by name (<a href="https://redirect.github.com/python/mypy/issues/16471">#16471</a>)</li>
<li><a href="https://github.com/python/mypy/commit/5c354c41c0fbb74418afcbd30ba822694be28d11"><code>5c354c4</code></a> Fix missing meet case exposed by len narrowing (<a href="https://redirect.github.com/python/mypy/issues/16470">#16470</a>)</li>
<li><a href="https://github.com/python/mypy/commit/88791cabe0521f77b699405154d90f3bb7c6b31b"><code>88791ca</code></a> Exclude private attributes from override checks (<a href="https://redirect.github.com/python/mypy/issues/16464">#16464</a>)</li>
<li><a href="https://github.com/python/mypy/commit/4b5b316beb570bba4c9b7797deb2e6d7df0552d0"><code>4b5b316</code></a> Special-case unions in polymorphic inference (<a href="https://redirect.github.com/python/mypy/issues/16461">#16461</a>)</li>
<li><a href="https://github.com/python/mypy/commit/f862d3ef540c38e7efd2fffd64fc732d6318dfb4"><code>f862d3e</code></a> Fix crash on Callable self in <strong>call</strong> (<a href="https://redirect.github.com/python/mypy/issues/16453">#16453</a>)</li>
<li><a href="https://github.com/python/mypy/commit/fe79a59e44299a3cc8025aa5084e08773c872a54"><code>fe79a59</code></a> Bump version to 1.7.1+dev</li>
<li>See full diff in <a href="https://github.com/python/mypy/compare/v1.7.0...v1.7.1">compare view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=mypy&package-manager=pip&previous-version=1.7.0&new-version=1.7.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)


</details>
---
 packages/jsii-pacmak/test/generated-code/requirements-dev.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/packages/jsii-pacmak/test/generated-code/requirements-dev.txt b/packages/jsii-pacmak/test/generated-code/requirements-dev.txt
index 953c8fa1f9..55c36a61a3 100644
--- a/packages/jsii-pacmak/test/generated-code/requirements-dev.txt
+++ b/packages/jsii-pacmak/test/generated-code/requirements-dev.txt
@@ -1,2 +1,2 @@
-mypy==1.7.0
+mypy==1.7.1
 pip==23.3.1 # required to use --config-settings

From 2099b6955093a2bd06325079b4ab3f3f2c8c3ca7 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 27 Nov 2023 12:00:13 +0000
Subject: [PATCH 10/27] chore(deps-dev): Update mkdocs-material requirement
 from ~=9.4.10 to ~=9.4.14 in /gh-pages (#4349)

Updates the requirements on [mkdocs-material](https://github.com/squidfunk/mkdocs-material) to permit the latest version.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/squidfunk/mkdocs-material/releases">mkdocs-material's releases</a>.</em></p>
<blockquote>
<h2>mkdocs-material-9.4.14</h2>
<ul>
<li>Added support for linking authors in blog posts</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/squidfunk/mkdocs-material/blob/master/CHANGELOG">mkdocs-material's changelog</a>.</em></p>
<blockquote>
<p>mkdocs-material-9.4.14+insiders-4.46.0 (2023-11-26)</p>
<ul>
<li>Added support for author profiles in blog plugin</li>
<li>Fixed custom index pages yielding two navigation items (4.45.0 regression)</li>
</ul>
<p>mkdocs-material-9.4.14 (2023-11-26)</p>
<ul>
<li>Added support for linking authors in blog posts</li>
</ul>
<p>mkdocs-material-9.4.13 (2023-11-26)</p>
<ul>
<li>Fixed <a href="https://redirect.github.com/squidfunk/mkdocs-material/issues/6365">#6365</a>: Blog plugin pagination links to previous pages broken</li>
<li>Fixed <a href="https://redirect.github.com/squidfunk/mkdocs-material/issues/5758">#5758</a>: Updated Mermaid.js to version 10.6.1 (latest)</li>
</ul>
<p>mkdocs-material-9.4.12+insiders-4.45.0 (2023-11-24)</p>
<ul>
<li>Added support for sorting blog categories by post count or custom function</li>
<li>Improved tags plugin to generate Unicode-aware slugs by default</li>
<li>Fixed non-deterministic order of multiple authors in blog plugin</li>
</ul>
<p>mkdocs-material-9.4.12 (2023-11-24)</p>
<ul>
<li>Improved blog plugin to generate Unicode-aware slugs by default</li>
<li>Fixed non-deterministic order of categories in blog plugin</li>
</ul>
<p>mkdocs-material-9.4.11+insiders-4.44.0 (2023-11-23)</p>
<ul>
<li>Added pagination settings for archive pages in blog plugin</li>
<li>Added pagination settings for category pages in blog plugin</li>
</ul>
<p>mkdocs-material-9.4.11 (2023-11-23)</p>
<ul>
<li>Fixed <a href="https://redirect.github.com/squidfunk/mkdocs-material/issues/6364">#6364</a>: Search plugin crashing when enabling theme while serving</li>
<li>Fixed blog plugin crashing when disabling pagination</li>
</ul>
<p>mkdocs-material-9.4.10+insiders-4.43.1 (2023-11-19)</p>
<ul>
<li>Added third-party theme support in projects plugin, improving editing</li>
<li>Fixed <a href="https://redirect.github.com/squidfunk/mkdocs-material/issues/6360">#6360</a>: Projects plugin crashes when theme is not Material for MkDocs</li>
<li>Fixed <a href="https://redirect.github.com/squidfunk/mkdocs-material/issues/6306">#6306</a>: Projects plugin not reloading nested project configuration</li>
</ul>
<p>mkdocs-material-9.4.10 (2023-11-19)</p>
<ul>
<li>Fixed <a href="https://redirect.github.com/squidfunk/mkdocs-material/issues/6356">#6356</a>: Version selector can't be disabled via mike's configuration</li>
<li>Fixed <a href="https://redirect.github.com/squidfunk/mkdocs-material/issues/6281">#6281</a>: Navigation not rendering due to Safari bug (9.4.2 regression)</li>
<li>Fixed <a href="https://redirect.github.com/squidfunk/mkdocs-material/issues/6261">#6261</a>: Navigation expansion animates on first load (9.4.2 regression)</li>
</ul>
<p>mkdocs-material-9.4.9 (2023-11-17)</p>
<ul>
<li>Fixed <a href="https://redirect.github.com/squidfunk/mkdocs-material/issues/6344">#6344</a>: Long entries cutoff in table of contents</li>
</ul>

</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/squidfunk/mkdocs-material/commit/c0aca213603644f80d8137e0932ad684f97d32e1"><code>c0aca21</code></a> Prepare 9.4.14 release</li>
<li><a href="https://github.com/squidfunk/mkdocs-material/commit/989ee849bb90babd86ef9f10ea350927d8ea8690"><code>989ee84</code></a> Documentation</li>
<li><a href="https://github.com/squidfunk/mkdocs-material/commit/8b68710ea3a5e763cf8f3becdf1f6a16c60d8a9e"><code>8b68710</code></a> Documentation</li>
<li><a href="https://github.com/squidfunk/mkdocs-material/commit/d355b435a751c46b0ea4258a824528c38d543a6a"><code>d355b43</code></a> Documentation</li>
<li><a href="https://github.com/squidfunk/mkdocs-material/commit/c81befb4ece9befb08c7c32cc847a749e139c133"><code>c81befb</code></a> Updated JSON schema</li>
<li><a href="https://github.com/squidfunk/mkdocs-material/commit/6be485c38febbe6076555367b4c174c92c6aad15"><code>6be485c</code></a> Documentation</li>
<li><a href="https://github.com/squidfunk/mkdocs-material/commit/28ebcbfb59f16b21d6d3e5e2b3741b72ebaa9c57"><code>28ebcbf</code></a> Added support for linking authors in blog posts</li>
<li><a href="https://github.com/squidfunk/mkdocs-material/commit/9c01605149e3bfabfb32fcf928cac207fb809cde"><code>9c01605</code></a> Updated dependencies</li>
<li><a href="https://github.com/squidfunk/mkdocs-material/commit/baaac7c291b55eb6788785b806133500a5836934"><code>baaac7c</code></a> Prepare 9.4.13 release</li>
<li><a href="https://github.com/squidfunk/mkdocs-material/commit/8143abe1e8267cfde9d2233a0ad7517e7771ce63"><code>8143abe</code></a> Documentation</li>
<li>Additional commits viewable in <a href="https://github.com/squidfunk/mkdocs-material/compare/9.4.10...9.4.14">compare view</a></li>
</ul>
</details>
<br />


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)


</details>
---
 gh-pages/requirements-dev.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/gh-pages/requirements-dev.txt b/gh-pages/requirements-dev.txt
index 3dac1eea18..1e38c5b606 100644
--- a/gh-pages/requirements-dev.txt
+++ b/gh-pages/requirements-dev.txt
@@ -1,4 +1,4 @@
 mkdocs~=1.5.3
 mkdocs-awesome-pages-plugin~=2.9.2
-mkdocs-material~=9.4.10
+mkdocs-material~=9.4.14
 mkdocs-git-revision-date-plugin~=0.3.2

From d305ab827db8ba41370bc19f361c553fbe263cff Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 27 Nov 2023 13:07:45 +0000
Subject: [PATCH 11/27] chore(deps): Update setuptools requirement from
 ~=68.2.2 to ~=69.0.2 in /packages/@jsii/python-runtime (#4353)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Updates the requirements on [setuptools](https://github.com/pypa/setuptools) to permit the latest version.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/pypa/setuptools/blob/main/NEWS.rst">setuptools's changelog</a>.</em></p>
<blockquote>
<h1>v69.0.2</h1>
<h2>Bugfixes</h2>
<ul>
<li>Added missing estimated date for removing <code>setuptools.dep_util</code> (deprecated in v69.0.0). (<a href="https://redirect.github.com/pypa/setuptools/issues/4131">#4131</a>)</li>
</ul>
<h1>v69.0.1</h1>
<h2>Bugfixes</h2>
<ul>
<li>Fixed imports of <code>setuptools.dep_util.newer_group</code>.
A deprecation warning is issued instead of a hard failure. (<a href="https://redirect.github.com/pypa/setuptools/issues/4126">#4126</a>)</li>
</ul>
<h1>v69.0.0</h1>
<h2>Features</h2>
<ul>
<li>Include type information (<code>py.typed</code>, <code>*.pyi</code>) by default (<a href="https://redirect.github.com/pypa/setuptools/issues/3136">#3136</a>) -- by :user:<code>Danie-1</code>,
<strong>EXPERIMENTAL</strong>. (<a href="https://redirect.github.com/pypa/setuptools/issues/3136">#3136</a>)</li>
<li>Exported <code>distutils.dep_util</code> and <code>setuptools.dep_util</code> through <code>setuptools.modified</code> -- by :user:<code>Avasam</code> (<a href="https://redirect.github.com/pypa/setuptools/issues/4069">#4069</a>)</li>
<li>Merged with pypa/distutils@7a04cbda0fc714.</li>
</ul>
<h2>Bugfixes</h2>
<ul>
<li>Replaced hardcoded numeric values with :obj:<code>dis.opmap</code>,
fixing problem with 3.13.0a1. (<a href="https://redirect.github.com/pypa/setuptools/issues/4094">#4094</a>)</li>
</ul>
<h2>Deprecations and Removals</h2>
<ul>
<li>Configuring project <code>version</code> and <code>egg_info.tag_*</code> in such a way that
results in invalid version strings (according to :pep:<code>440</code>) is no longer permitted. (<a href="https://redirect.github.com/pypa/setuptools/issues/4066">#4066</a>)</li>
<li>Removed deprecated <code>egg_base</code> option from <code>dist_info</code>.
Note that the <code>dist_info</code> command is considered internal to the way
<code>setuptools</code> build backend works and not intended for
public usage. (<a href="https://redirect.github.com/pypa/setuptools/issues/4066">#4066</a>)</li>
<li>The parsing of the deprecated <code>metadata.license_file</code> and
<code>metadata.requires</code> fields in <code>setup.cfg</code> is no longer supported.
Users are expected to move to <code>metadata.license_files</code> and</li>
</ul>

</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/pypa/setuptools/commit/4f6449f409322fa63408881860ed9097c2ab0af8"><code>4f6449f</code></a> Bump version: 69.0.1 → 69.0.2</li>
<li><a href="https://github.com/pypa/setuptools/commit/a4298d119a7ed45a752d576dce50e3c4d4db4a72"><code>a4298d1</code></a> Add missing estimated date for removing setuptools.dep_util (<a href="https://redirect.github.com/pypa/setuptools/issues/4132">#4132</a>)</li>
<li><a href="https://github.com/pypa/setuptools/commit/14957384f9e408b2569e5caba85fd2090a8944c9"><code>1495738</code></a> Add news fragment</li>
<li><a href="https://github.com/pypa/setuptools/commit/c836172e42822144ac4823e94fa1b0ed65c7ca54"><code>c836172</code></a> Improve warning visibility with due date and reference url</li>
<li><a href="https://github.com/pypa/setuptools/commit/d148d9e9b530a80c61f15ba64910f51e4fd0e574"><code>d148d9e</code></a> Bump version: 69.0.0 → 69.0.1</li>
<li><a href="https://github.com/pypa/setuptools/commit/28775f31b33a753b5b3b4a32a2097dc7204f03db"><code>28775f3</code></a> Allow imports of setuptools.dep_util.newer_group with deprecation warning (<a href="https://redirect.github.com/pypa/setuptools/issues/4">#4</a>...</li>
<li><a href="https://github.com/pypa/setuptools/commit/7d90e9fa01dbcf05f1ab2f15627effcb70df930c"><code>7d90e9f</code></a> Add newsfragment</li>
<li><a href="https://github.com/pypa/setuptools/commit/e1f8783a6956216a12f98e690e4b10486b093013"><code>e1f8783</code></a> Allow imports of setuptools.dep_util.newer_group with deprecation warning</li>
<li><a href="https://github.com/pypa/setuptools/commit/536d4a82059747873cab87654567a721489e1cd3"><code>536d4a8</code></a> Bump version: 68.2.2 → 69.0.0</li>
<li><a href="https://github.com/pypa/setuptools/commit/b8992ad4737241752b58e6ca1748b0130820c838"><code>b8992ad</code></a> Mark flaky test on  PyPy with <code>xfail</code> (<a href="https://redirect.github.com/pypa/setuptools/issues/4124">#4124</a>)</li>
<li>Additional commits viewable in <a href="https://github.com/pypa/setuptools/compare/v68.2.2...v69.0.2">compare view</a></li>
</ul>
</details>
<br />


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)


</details>
---
 packages/@jsii/python-runtime/requirements.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/packages/@jsii/python-runtime/requirements.txt b/packages/@jsii/python-runtime/requirements.txt
index 40c1cb7234..a0f6d225d9 100644
--- a/packages/@jsii/python-runtime/requirements.txt
+++ b/packages/@jsii/python-runtime/requirements.txt
@@ -3,7 +3,7 @@ mypy==1.7.0
 pip~=23.3
 pytest~=7.4
 pytest-mypy~=0.10
-setuptools~=68.2.2
+setuptools~=69.0.2
 types-python-dateutil~=2.8
 wheel~=0.41
 

From ffee4ae3bdc3b5e643235a20297e25235314f97c Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 27 Nov 2023 13:49:11 +0000
Subject: [PATCH 12/27] chore(deps): Update wheel requirement from ~=0.41 to
 ~=0.42 in /packages/@jsii/python-runtime (#4351)

Updates the requirements on [wheel](https://github.com/pypa/wheel) to permit the latest version.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/pypa/wheel/releases">wheel's releases</a>.</em></p>
<blockquote>
<h2>0.42.0</h2>
<ul>
<li>Allowed removing build tag with <code>wheel tags --build &quot;&quot;</code></li>
<li>Fixed <code>wheel pack</code> and <code>wheel tags</code> writing updated <code>WHEEL</code> fields after a blank line, causing other tools to ignore them</li>
<li>Fixed <code>wheel pack</code> and <code>wheel tags</code> writing <code>WHEEL</code> with CRLF line endings or a mix of CRLF and LF</li>
<li>Fixed <code>wheel pack --build-number &quot;&quot;</code> not removing build tag from <code>WHEEL</code> (above changes by Benjamin Gilbert)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/pypa/wheel/blob/main/docs/news.rst">wheel's changelog</a>.</em></p>
<blockquote>
<h1>Release Notes</h1>
<p><strong>0.42.0 (2023-11-26)</strong></p>
<ul>
<li>Allowed removing build tag with <code>wheel tags --build &quot;&quot;</code></li>
<li>Fixed <code>wheel pack</code> and <code>wheel tags</code> writing updated <code>WHEEL</code> fields after a
blank line, causing other tools to ignore them</li>
<li>Fixed <code>wheel pack</code> and <code>wheel tags</code> writing <code>WHEEL</code> with CRLF line endings or
a mix of CRLF and LF</li>
<li>Fixed <code>wheel pack --build-number &quot;&quot;</code> not removing build tag from <code>WHEEL</code>
(above changes by Benjamin Gilbert)</li>
</ul>
<p><strong>0.41.3 (2023-10-30)</strong></p>
<ul>
<li>Updated vendored <code>packaging</code> to 23.2</li>
<li>Fixed ABI tag generation for CPython 3.13a1 on Windows (PR by Sam Gross)</li>
</ul>
<p><strong>0.41.2 (2023-08-22)</strong></p>
<ul>
<li>Fixed platform tag detection for GraalPy and 32-bit python running on an aarch64
kernel (PR by Matthieu Darbois)</li>
<li>Fixed <code>wheel tags</code> to not list directories in <code>RECORD</code> files
(PR by Mike Taves)</li>
<li>Fixed ABI tag generation for GraalPy (PR by Michael Simacek)</li>
</ul>
<p><strong>0.41.1 (2023-08-05)</strong></p>
<ul>
<li>Fixed naming of the <code>data_dir</code> directory in the presence of local version segment
given via <code>egg_info.tag_build</code> (PR by Anderson Bravalheri)</li>
<li>Fixed version specifiers in <code>Requires-Dist</code> being wrapped in parentheses</li>
</ul>
<p><strong>0.41.0 (2023-07-22)</strong></p>
<ul>
<li>Added full support of the build tag syntax to <code>wheel tags</code> (you can now set a build
tag like <code>123mytag</code>)</li>
<li>Fixed warning on Python 3.12 about <code>onerror</code> deprecation. (PR by Henry Schreiner)</li>
<li>Support testing on Python 3.12 betas (PR by Ewout ter Hoeven)</li>
</ul>
<p><strong>0.40.0 (2023-03-14)</strong></p>
<ul>
<li>Added a <code>wheel tags</code> command to modify tags on an existing wheel
(PR by Henry Schreiner)</li>
<li>Updated vendored <code>packaging</code> to 23.0</li>
<li><code>wheel unpack</code> now preserves the executable attribute of extracted files</li>
<li>Fixed spaces in platform names not being converted to underscores (PR by David Tucker)</li>
<li>Fixed <code>RECORD</code> files in generated wheels missing the regular file attribute</li>
<li>Fixed <code>DeprecationWarning</code> about the use of the deprecated <code>pkg_resources</code> API
(PR by Thomas Grainger)</li>
<li>Wheel now uses flit-core as a build backend (PR by Henry Schreiner)</li>
</ul>

</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/pypa/wheel/commit/63a09bb3d92630c1d35f4fcc6f79250256aeeb5c"><code>63a09bb</code></a> Created a new release</li>
<li><a href="https://github.com/pypa/wheel/commit/f4b8e488dfe3da3ced0bc36aa7dcf21631e7489d"><code>f4b8e48</code></a> Several fixes to <code>WHEEL</code> metadata handling (<a href="https://redirect.github.com/pypa/wheel/issues/588">#588</a>)</li>
<li><a href="https://github.com/pypa/wheel/commit/11e573283181493f7aec55146ab2862bccd4dc4d"><code>11e5732</code></a> [pre-commit.ci] pre-commit autoupdate (<a href="https://redirect.github.com/pypa/wheel/issues/586">#586</a>)</li>
<li><a href="https://github.com/pypa/wheel/commit/fe6bb8268d5f9e98ceec83c67d03b06c1c8862db"><code>fe6bb82</code></a> [pre-commit.ci] pre-commit autoupdate (<a href="https://redirect.github.com/pypa/wheel/issues/584">#584</a>)</li>
<li><a href="https://github.com/pypa/wheel/commit/b90a4bc408ce621818b3e92bb55955431a7fa22a"><code>b90a4bc</code></a> [pre-commit.ci] pre-commit autoupdate (<a href="https://redirect.github.com/pypa/wheel/issues/581">#581</a>)</li>
<li><a href="https://github.com/pypa/wheel/commit/56de2ebd4bffa706a60ee0f7785a33c62be737f3"><code>56de2eb</code></a> Added a link to the GitHub repository to pyproject.toml (<a href="https://redirect.github.com/pypa/wheel/issues/563">#563</a>)</li>
<li><a href="https://github.com/pypa/wheel/commit/a899f1c69ffddf564b904a5de974457c213dc36a"><code>a899f1c</code></a> Fixed parameter for release-notes</li>
<li><a href="https://github.com/pypa/wheel/commit/254ba4658aa0bf1c5be536ccc02ed44e051468fd"><code>254ba46</code></a> Created a new release</li>
<li><a href="https://github.com/pypa/wheel/commit/6f33736b6f252506df8e574deced5d5667d05bf6"><code>6f33736</code></a> Updated actions and added GitHub release automation</li>
<li><a href="https://github.com/pypa/wheel/commit/83b77e591e6f593470f8daddf3bcfd6ca64e81bc"><code>83b77e5</code></a> Replaced <code>black</code> with <code>ruff-format</code></li>
<li>Additional commits viewable in <a href="https://github.com/pypa/wheel/compare/0.41.0...0.42.0">compare view</a></li>
</ul>
</details>
<br />


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)


</details>
---
 packages/@jsii/python-runtime/requirements.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/packages/@jsii/python-runtime/requirements.txt b/packages/@jsii/python-runtime/requirements.txt
index a0f6d225d9..ea715a730b 100644
--- a/packages/@jsii/python-runtime/requirements.txt
+++ b/packages/@jsii/python-runtime/requirements.txt
@@ -5,6 +5,6 @@ pytest~=7.4
 pytest-mypy~=0.10
 setuptools~=69.0.2
 types-python-dateutil~=2.8
-wheel~=0.41
+wheel~=0.42
 
 -e .

From 9bf222fd8633243b11a4b4a8f74fe08bffcea9cc Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 27 Nov 2023 14:32:30 +0000
Subject: [PATCH 13/27] chore(deps): Bump
 Microsoft.CodeAnalysis.CSharp.Workspaces from 4.7.0 to 4.8.0 in
 /packages/@jsii/dotnet-runtime-test/test (#4350)

Bumps [Microsoft.CodeAnalysis.CSharp.Workspaces](https://github.com/dotnet/roslyn) from 4.7.0 to 4.8.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/dotnet/roslyn/releases">Microsoft.CodeAnalysis.CSharp.Workspaces's releases</a>.</em></p>
<blockquote>
<h2>.NET 6.0.1</h2>
<p><a href="https://github.com/dotnet/core/releases/tag/v6.0.1">Release</a></p>
<h2>.NET 5.0.4</h2>
<p><a href="https://github.com/dotnet/core/releases/tag/v5.0.4">Release</a></p>
<h2>.NET 5.0.2</h2>
<p><a href="https://github.com/dotnet/core/blob/master/release-notes/5.0/5.0.2/5.0.2.md">Release Notes</a>
<a href="https://github.com/dotnet/core/blob/master/release-notes/5.0/5.0.2/5.0.2-install-instructions.md">Install Instructions</a></p>
<h1>Repos</h1>
<ul>
<li><a href="https://github.com/dotnet/core/releases/tag/v5.0.2">Core</a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/dotnet/roslyn/blob/main/docs/Breaking%20API%20Changes.md">Microsoft.CodeAnalysis.CSharp.Workspaces's changelog</a>.</em></p>
<blockquote>
<h1>Version 4.7.0</h1>
<h3><code>SymbolDisplayFormat</code> includes parameter name when invoked on <code>IParameterSymbol</code></h3>
<p>All <code>SymbolDisplayFormat</code>s (predefined and user-created) now include parameter names by default if used on a standalone <code>IParameterSymbol</code> for consistency with predefined formats (see the breaking change for version 4.5.0 above).</p>
<h3>Changed <code>IncrementalStepRunReason</code> when a modified input produced a new output</h3>
<p><code>IncrementalGeneratorRunStep.Outputs</code> previously contained <code>IncrementalStepRunReason.Modified</code> as <code>Reason</code>
when the input to the step was modified in a way that produced a new output.
Now the reason will be reported more accurately as <code>IncrementalStepRunReason.New</code>.</p>
<h1>Version 4.8.0</h1>
<h3>Changed <code>Assembly.Location</code> behavior in non-Windows</h3>
<p>The value of <code>Assembly.Location</code> previously held the location on disk where an analyzer or source generator was loaded from. This could be either the original location or the shadow copy location. In 4.8 this will be <code>&quot;&quot;</code> in certain cases when running on non Windows platforms. This is due the compiler server loading assemblies using <code>AssemblyLoadContext.LoadFromStream</code> instead of loading from disk.</p>
<p>This could already happen in other load scenarios but this change moves it into mainline build scenarios.</p>
<h3>Deprecation warning for SyntaxNode serialization</h3>
<p>The ability to serialize/deserialize a SyntaxNode to/from a Stream has been deprecated. The code for this still exists in Roslyn, but attempting to call the APIs to perform these functions will result in 'Obsolete' warnings being reported. A future version of Roslyn will remove this functionality entirely. This functionality could only work for a host that wrote out the nodes to a stream, and later read it back in within the same process instance. It could not be used to communicate across processes, or for persisting nodes to disk to be read in at a later time by a new host sessions. This functionality originally existed for the days when Roslyn was hosted in 32bit processes with limited address space. That is no longer a mainline supported scenario. Clients can get similar functionality by persisting the text of the node, and parsing it back out when needed.</p>
<p>PR: <a href="https://redirect.github.com/dotnet/roslyn/pull/70365">dotnet/roslyn#70365</a></p>
<h1>Version 4.9.0</h1>
<h3>Obsoletion and removal of SyntaxNode serialization.</h3>
<p>Continuation of the deprecation that happened in 4.8.0 (see information above).  In 4.9.0 this functionality is now entirely removed, and will issue both an obsoletion error, and will throw at runtime if the APIs are used.</p>
<p>PR: <a href="https://redirect.github.com/dotnet/roslyn/pull/70277">dotnet/roslyn#70277</a></p>
<h3>Changes in <code>Microsoft.CodeAnalysis.Emit.EmitBaseline.CreateInitialBaseline</code> method</h3>
<p>A new required parameter <code>Compilation</code> has been added. Existing overloads without this parameter no longer work and throw <code>NotSupportedException</code>.</p>
<h3>Changes in <code>Microsoft.CodeAnalysis.Emit.SemanticEdit</code> constructors</h3>
<p>The value of <code>preserveLocalVariables</code> passed to the constructors is no longer used.</p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li>See full diff in <a href="https://github.com/dotnet/roslyn/commits">compare view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=Microsoft.CodeAnalysis.CSharp.Workspaces&package-manager=nuget&previous-version=4.7.0&new-version=4.8.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)


</details>
---
 packages/@jsii/Directory.Build.targets | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/packages/@jsii/Directory.Build.targets b/packages/@jsii/Directory.Build.targets
index 1201f4c86c..a750280a90 100644
--- a/packages/@jsii/Directory.Build.targets
+++ b/packages/@jsii/Directory.Build.targets
@@ -6,7 +6,7 @@
     <PackageReference Update="Microsoft.Extensions.Logging" Version="8.0.0" />
     <PackageReference Update="Microsoft.Extensions.Logging.Console" Version="8.0.0" />
 
-    <PackageReference Update="Microsoft.CodeAnalysis.CSharp.Workspaces" Version="4.7.0" />
+    <PackageReference Update="Microsoft.CodeAnalysis.CSharp.Workspaces" Version="4.8.0" />
     <PackageReference Update="Microsoft.CodeAnalysis.Analyzers" Version="3.3.4" />
     <PackageReference Update="Microsoft.CodeQuality.Analyzers" Version="3.3.2" />
 

From 4d36f1b6383d51785b76f898dc35e4f1bea917ab Mon Sep 17 00:00:00 2001
From: Momo Kornher <mail@moritzkornher.de>
Date: Mon, 27 Nov 2023 16:13:12 +0100
Subject: [PATCH 14/27] chore: use Node 18 in yarn upgrade workflow (#4355)

Workflow currently fails due to the Node version being incompatible with used packages.


---

By submitting this pull request, I confirm that my contribution is made under the terms of the [Apache 2.0 license].

[Apache 2.0 license]: https://www.apache.org/licenses/LICENSE-2.0
---
 .github/workflows/yarn-upgrade.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/yarn-upgrade.yml b/.github/workflows/yarn-upgrade.yml
index 04456ae054..6fbef87768 100644
--- a/.github/workflows/yarn-upgrade.yml
+++ b/.github/workflows/yarn-upgrade.yml
@@ -21,7 +21,7 @@ jobs:
         uses: actions/setup-node@v4
         with:
           cache: yarn
-          node-version: 16
+          node-version: 18
 
       - name: Install Tools
         run: |-

From ab5ee50da2b56c33f6f81654baa874ceccc9eb89 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 27 Nov 2023 15:58:20 +0000
Subject: [PATCH 15/27] chore(deps): Bump mypy from 1.7.0 to 1.7.1 in
 /packages/@jsii/python-runtime (#4352)

Bumps [mypy](https://github.com/python/mypy) from 1.7.0 to 1.7.1.
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/python/mypy/commit/6b3c41838d8e7a39242b6fd035535e2d76eabfc6"><code>6b3c418</code></a> Update version to 1.7.1 (without +dev)</li>
<li><a href="https://github.com/python/mypy/commit/c10e17348f2eacbbeae80eb6c10c661c0137d849"><code>c10e173</code></a> [mypyc] Fix regression with nested functions (<a href="https://redirect.github.com/python/mypy/issues/16484">#16484</a>)</li>
<li><a href="https://github.com/python/mypy/commit/e6399d10b0a1cdb104559482fad1b4dc0e2de6ac"><code>e6399d1</code></a> Fix polymorphic application for callback protocols (<a href="https://redirect.github.com/python/mypy/issues/16514">#16514</a>)</li>
<li><a href="https://github.com/python/mypy/commit/661adb756800ecc40fabbe62e9339efd253aff4e"><code>661adb7</code></a> Fix crash on strict-equality with recursive types (<a href="https://redirect.github.com/python/mypy/issues/16483">#16483</a>)</li>
<li><a href="https://github.com/python/mypy/commit/6c8e0cc47c014894ea41621a10f3d1b465322362"><code>6c8e0cc</code></a> Ignore position if imprecise arguments are matched by name (<a href="https://redirect.github.com/python/mypy/issues/16471">#16471</a>)</li>
<li><a href="https://github.com/python/mypy/commit/5c354c41c0fbb74418afcbd30ba822694be28d11"><code>5c354c4</code></a> Fix missing meet case exposed by len narrowing (<a href="https://redirect.github.com/python/mypy/issues/16470">#16470</a>)</li>
<li><a href="https://github.com/python/mypy/commit/88791cabe0521f77b699405154d90f3bb7c6b31b"><code>88791ca</code></a> Exclude private attributes from override checks (<a href="https://redirect.github.com/python/mypy/issues/16464">#16464</a>)</li>
<li><a href="https://github.com/python/mypy/commit/4b5b316beb570bba4c9b7797deb2e6d7df0552d0"><code>4b5b316</code></a> Special-case unions in polymorphic inference (<a href="https://redirect.github.com/python/mypy/issues/16461">#16461</a>)</li>
<li><a href="https://github.com/python/mypy/commit/f862d3ef540c38e7efd2fffd64fc732d6318dfb4"><code>f862d3e</code></a> Fix crash on Callable self in <strong>call</strong> (<a href="https://redirect.github.com/python/mypy/issues/16453">#16453</a>)</li>
<li><a href="https://github.com/python/mypy/commit/fe79a59e44299a3cc8025aa5084e08773c872a54"><code>fe79a59</code></a> Bump version to 1.7.1+dev</li>
<li>See full diff in <a href="https://github.com/python/mypy/compare/v1.7.0...v1.7.1">compare view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=mypy&package-manager=pip&previous-version=1.7.0&new-version=1.7.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)


</details>
---
 packages/@jsii/python-runtime/requirements.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/packages/@jsii/python-runtime/requirements.txt b/packages/@jsii/python-runtime/requirements.txt
index ea715a730b..63853ed2f3 100644
--- a/packages/@jsii/python-runtime/requirements.txt
+++ b/packages/@jsii/python-runtime/requirements.txt
@@ -1,5 +1,5 @@
 black~=23.11
-mypy==1.7.0
+mypy==1.7.1
 pip~=23.3
 pytest~=7.4
 pytest-mypy~=0.10

From 7b8d70957982aae09e94b20b13ea90340faab95e Mon Sep 17 00:00:00 2001
From: Rico Hermans <rix0rrr@gmail.com>
Date: Mon, 27 Nov 2023 19:51:07 +0100
Subject: [PATCH 16/27] chore: update DockerHub README daily (#4356)

Add a GitHub action to update the DockerHub README of the superchain image every day.

Needed to to refactor the steps a little bit to get the credentials out in a way the Action needs them.

(Of course, no way to test this except in production :/ )


---

By submitting this pull request, I confirm that my contribution is made under the terms of the [Apache 2.0 license].

[Apache 2.0 license]: https://www.apache.org/licenses/LICENSE-2.0
---
 .github/workflows/docker-images.yml | 20 ++++++++++++++++++--
 1 file changed, 18 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/docker-images.yml b/.github/workflows/docker-images.yml
index 3df903d346..79eb41a9a0 100644
--- a/.github/workflows/docker-images.yml
+++ b/.github/workflows/docker-images.yml
@@ -95,14 +95,21 @@ jobs:
           aws ecr-public get-login-password --region=us-east-1                  \
           | docker login --username AWS --password-stdin public.ecr.aws
 
+      - name: Slice DockerHub credentials
+        id: credentials
+        run: |-
+          echo "username=$(cut -d: -f1 <<< '${{ secrets.DOCKER_CREDENTIALS }}')" >> "$GITHUB_OUTPUT"
+          echo "password=$(cut -d: -f2 <<< '${{ secrets.DOCKER_CREDENTIALS }}')" >> "$GITHUB_OUTPUT"
+          echo "::add-mask::$(cut -d: -f2 <<< '${{ secrets.DOCKER_CREDENTIALS }}')"
+
       # We only authenticate to Docker on the 'aws/jsii' repo, as forks will not have the secret
       - name: Login to Docker Hub
         if: steps.should-run.outputs.result == 'true' && github.repository == 'aws/jsii'
         # The DOCKER_CREDENTIALS secret is expected to contain a username:token pair
         run: |-
           docker login                                                          \
-            --username=$(cut -d: -f1 <<< '${{ secrets.DOCKER_CREDENTIALS }}')   \
-            --password=$(cut -d: -f2 <<< '${{ secrets.DOCKER_CREDENTIALS }}')
+            --username=${{ steps.credentials.outputs.username }}                \
+            --password=${{ steps.credentials.outputs.password }}
         # Ensure we run with bash, because that's the syntax we're using here...
         shell: bash
 
@@ -216,6 +223,15 @@ jobs:
               .
           fi
 
+      - name: Update README (nightly)
+        if: steps.should-run.outputs.result == 'true' && github.event_name == 'push' && github.ref == 'refs/heads/main'
+        uses: peter-evans/dockerhub-description@v3
+        with:
+          username: ${{ steps.credentials.outputs.username }}
+          password: ${{ steps.credentials.outputs.password }}
+          repository: jsii/superchain
+          readme-filepath: ./superchain/README.md
+
       - name: Publish (latest)
         if: steps.should-run.outputs.result == 'true' && github.event_name == 'push' && github.ref == 'refs/heads/release'
         # NOTE BELOW: The `--tag` flags can be provided multiple times... we use that capability...

From 79a0f793e08043ae4d9111a39133b3880c98c21a Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 28 Nov 2023 12:26:25 +0000
Subject: [PATCH 17/27] chore(deps): Bump golang.org/x/tools from 0.15.0 to
 0.16.0 in /packages/@jsii/go-runtime-test/project (#4358)

Bumps [golang.org/x/tools](https://github.com/golang/tools) from 0.15.0 to 0.16.0.
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/golang/tools/commit/a9ef4cfeacd705b0e43cc2935571a80b6547d70c"><code>a9ef4cf</code></a> go.mod: update golang.org/x dependencies</li>
<li><a href="https://github.com/golang/tools/commit/d9b9452656b6061e51acbfb411087aaf7ca6d342"><code>d9b9452</code></a> gopls/internal/lsp/cache: move quick-fix bundling logic to the cache pkg</li>
<li><a href="https://github.com/golang/tools/commit/1733061d5fbd81eec28621bcc4d1e41158618669"><code>1733061</code></a> go/analysis/passes/testinggoroutine: report by enclosing regions</li>
<li><a href="https://github.com/golang/tools/commit/b19be0fa71558b3bd27dd4210d9eee35fd52db91"><code>b19be0f</code></a> gopls/internal/cmd/help_test.go: document</li>
<li><a href="https://github.com/golang/tools/commit/daa4aa59ed4efe3c28946c15b249fb8609074354"><code>daa4aa5</code></a> gopls/internal/lsp/source: stubmethods: fix out-of-bounds index</li>
<li><a href="https://github.com/golang/tools/commit/a586d0db8420774bb736981052730e51efca1dac"><code>a586d0d</code></a> go/types/internal/play: show more types.Scope detail</li>
<li><a href="https://github.com/golang/tools/commit/53ad329bd98f6eea2106d46f2c1655cbbdd28242"><code>53ad329</code></a> gopls/internal/lsp/source: move edit logic into the protocol package</li>
<li><a href="https://github.com/golang/tools/commit/3c677e3f7d23999e4a31018a5f6bfade055408b7"><code>3c677e3</code></a> gopls/internal/lsp/cache: move SuggestedFixFromCommand into cache</li>
<li><a href="https://github.com/golang/tools/commit/ab6af7d4bb284d8cae8d82939c658a178fa7ec9f"><code>ab6af7d</code></a> gopls/internal/lsp/source: extract InDir to a new pathutil package</li>
<li><a href="https://github.com/golang/tools/commit/e7d61d9d57a6c8718dbc18fee6d5ac92d2ebd8f8"><code>e7d61d9</code></a> gopls/internal/lsp/cache: simplify named error values</li>
<li>Additional commits viewable in <a href="https://github.com/golang/tools/compare/v0.15.0...v0.16.0">compare view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=golang.org/x/tools&package-manager=go_modules&previous-version=0.15.0&new-version=0.16.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)


</details>
---
 packages/@jsii/go-runtime-test/project/go.mod | 2 +-
 packages/@jsii/go-runtime-test/project/go.sum | 2 ++
 2 files changed, 3 insertions(+), 1 deletion(-)

diff --git a/packages/@jsii/go-runtime-test/project/go.mod b/packages/@jsii/go-runtime-test/project/go.mod
index e6de3322f6..a3a895128c 100644
--- a/packages/@jsii/go-runtime-test/project/go.mod
+++ b/packages/@jsii/go-runtime-test/project/go.mod
@@ -9,7 +9,7 @@ require (
 	github.com/aws/jsii/jsii-calc/go/scopejsiicalclib v0.0.0-devpreview
 	github.com/stretchr/testify v1.8.4
 	golang.org/x/lint v0.0.0-20210508222113-6edffad5e616
-	golang.org/x/tools v0.15.0
+	golang.org/x/tools v0.16.0
 )
 
 require (
diff --git a/packages/@jsii/go-runtime-test/project/go.sum b/packages/@jsii/go-runtime-test/project/go.sum
index 95448607a6..62df36a7e3 100644
--- a/packages/@jsii/go-runtime-test/project/go.sum
+++ b/packages/@jsii/go-runtime-test/project/go.sum
@@ -36,6 +36,8 @@ golang.org/x/text v0.3.0/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ=
 golang.org/x/tools v0.0.0-20200130002326-2f3ba24bd6e7/go.mod h1:TB2adYChydJhpapKDTa4BR/hXlZSLoq2Wpct/0txZ28=
 golang.org/x/tools v0.15.0 h1:zdAyfUGbYmuVokhzVmghFl2ZJh5QhcfebBgmVPFYA+8=
 golang.org/x/tools v0.15.0/go.mod h1:hpksKq4dtpQWS1uQ61JkdqWM3LscIS6Slf+VVkm+wQk=
+golang.org/x/tools v0.16.0 h1:GO788SKMRunPIBCXiQyo2AaexLstOrVhuAL5YwsckQM=
+golang.org/x/tools v0.16.0/go.mod h1:kYVVN6I1mBNoB1OX+noeBjbRk4IUEPa7JJ+TJMEooJ0=
 golang.org/x/xerrors v0.0.0-20191011141410-1b5146add898/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
 gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405 h1:yhCVgyC4o1eVCa2tZl7eS0r+SDo693bJlVdllGtEeKM=
 gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=

From b5802449f4b9292b3396353f1fa3fa768a779cd7 Mon Sep 17 00:00:00 2001
From: Momo Kornher <mail@moritzkornher.de>
Date: Tue, 28 Nov 2023 18:28:24 +0100
Subject: [PATCH 18/27] feat: deprecate `jsii/superchain:buster-slim-*` images
 (#4359)

jsii now requires Python 3.8
Debian Buster only ships with Python 3.7 and we recommend users to upgrade to Bullseye based images.
Let's stop building Buster images.

Also clarifies our build permutations in the README.

---

By submitting this pull request, I confirm that my contribution is made under the terms of the [Apache 2.0 license].

[Apache 2.0 license]: https://www.apache.org/licenses/LICENSE-2.0
---
 .github/workflows/docker-images.yml |  9 ++--
 superchain/README.md                | 75 ++++++++++++++++++++++-------
 2 files changed, 62 insertions(+), 22 deletions(-)

diff --git a/.github/workflows/docker-images.yml b/.github/workflows/docker-images.yml
index 79eb41a9a0..c471a13b88 100644
--- a/.github/workflows/docker-images.yml
+++ b/.github/workflows/docker-images.yml
@@ -22,12 +22,13 @@ jobs:
       fail-fast: false
       matrix:
         debian:
-          - 'buster' # 10
           - 'bullseye' # 11
+          - 'bookworm' # 12
         node: ['18', '20']
-        include:
-          - debian: 'bookworm' #12
-            node: '20'
+        exclude:
+          # We publish bullseye only with Node >= 20
+          - debian: 'bullseye'
+            node: '18'
     env:
       # Node version whose images will be aliased without the -nodeXX segment
       DEFAULT_NODE_MAJOR_VERSION: 18
diff --git a/superchain/README.md b/superchain/README.md
index 92cea7deb3..2a1e7db58f 100644
--- a/superchain/README.md
+++ b/superchain/README.md
@@ -6,16 +6,25 @@ required in order to package [jsii] projects in all supported languages.
 [debian]: https://gallery.ecr.aws/debian/debian
 [jsii]: https://github.com/aws/jsii
 
+## Recommended image
+
+We recommend the following image for most users.
+See [Image tags](#image-tags) for further details.
+
+```
+public.ecr.aws/jsii/superchain:1-bullseye-slim
+```
+
 ## Included Language SDKs
 
 | SDK          | Version                                  |
 | ------------ | ---------------------------------------- |
-| `OpenJDK 20` | Amazon Corretto `>= 20.0.0`              |
+| `OpenJDK 20` | Amazon Corretto `>= 20.0.2`              |
 | `.NET SDK`   | `>= 6.0.14`                              |
-| `mono`       | `>= 6.8.0.105`                           |
+| `mono`       | `>= 6.12.0.200`                          |
 | `Javascript` | see [NodeJS and NPM](#nodejs-and-npm)    |
-| `PowerShell` | `pwsh >= 7.1.3`                          |
-| `Python 3`   | `python3 >= 3.7.4` with `pip3 >= 20.0.2` |
+| `PowerShell` | `pwsh >= 7.2.16`                         |
+| `Python 3`   | see [Python'](#python)                   |
 | `Go`         | `go >= 1.18`                             |
 
 ## Image tags
@@ -27,20 +36,25 @@ public.ecr.aws/jsii/superchain:<JSII-MAJOR>-<BASE>(-node<NODE-MAJOR>)(-nightly)
 ```
 
 - `<JSII-MAJOR>` is the major line of the jsii toolchain (must be `1`)
-- `<BASE>` is the base image tag (must be `bullseye-slim`)
+- `<BASE>` is the base image tag, currently supported base images are
+  - `bookworm-slim`
+  - `bullseye-slim`
 - `<NODE-MAJOR>` is the major version of node contained in the image
   - `18` corresponds to node 18.x, this is the default
   - `20` corresponds to node 20.x
 - `-nightly` images are released from the `HEAD` of the [`aws/jsii`][jsii]
   repository and should typically not be used for production workloads
 
+**The following base image lines have been deprecated and are not updated anymore. Users are adviced to upgrade to :**
+
+- `:1-buster-slim-*`
+
 **The previous image tags have been discontinued and must NOT BE USED ANYMORE:**
 
 - `:latest` (users should migrate to `:1-bullseye-slim`)
 - `:nightly` (users should migrate to `:1-bullseye-slim-nightly`)
 - `:nodeX` (users should migrate to an image using a supported node version)
 - `:nodeX-nightly` (users should migrate to a nightly image using a supported node version)
-- `:1-buster-slim-*` (users should migrate to `:1-bullseye-slim`)
 
 ## Building
 
@@ -59,10 +73,20 @@ jsii$ docker build . -f superchain/Dockerfile -t jsii/superchain:local --target=
 
 ## NodeJS and NPM
 
-We build multiple versions of this image, for different versions of Node. They are available as:
+We build multiple versions of this image, for different versions of Node.
+You can use a specific Node version like this:
+
+```
+public.ecr.aws/jsii/superchain:1-bullseye-slim-node20
+```
 
-* `public.ecr.aws/jsii/superchain:1-bullseye-slim-node18(-nightly)`
-* `public.ecr.aws/jsii/superchain:1-bullseye-slim-node20(-nightly)`
+We will stop publishing images for Node versions that are EOL.
+
+| Debian                      | Node versions    |
+| ----------------------------| -----------------|
+| `bookworm-slim`             | `20`             |
+| `bullseye-slim`             | `20`, `18`       |
+| `buster-slim` (deprecated)  | `18`, `16`, `14` | 
 
 If you are building this image from source, you can control the Node version with the
 `NODE_MAJOR_VERSION` build argument:
@@ -71,22 +95,37 @@ If you are building this image from source, you can control the Node version wit
 jsii$ docker build [...] --build-arg NODE_MAJOR_VERSION=16
 ```
 
+## Python
+
+The image includes the most recent Python version available for the respecitve Debian distribution.
+A complete list can be viewed on the [Debian website](https://wiki.debian.org/Python#Supported_Python_Versions).
+
+| Debian                      | Python version |
+| ----------------------------| ---------------|
+| `bookworm-slim`             | `3.11`         |
+| `bullseye-slim`             | `3.9`          |
+| `buster-slim` (deprecated)  | `3.7`          |
+
+
 ## Included Tools & Utilities
 
+The following tools & utilities are available for your convinience.
+Versions are generally the latest available for the respective Debian distribution.
+
 | Tool / Utility  | Version                    |
 | --------------- | -------------------------- |
 | `aws`           | `>= 2.11.17`               |
 | `bundler`       | `>= 1.17.3` and `>= 2.1.4` |
-| `docker`        | `>= 18.09.9-ce`            |
-| `git`           | `>= 2.23.1`                |
-| `make`          | `>= 3.82`                  |
-| `maven`         | `>= 3.6.3`                 |
-| `openssl`       | `>= 1.0.2k-fips`           |
-| `rsync`         | `>= 3.1.2`                 |
-| `yarn`          | `>= 1.21.1`                |
+| `docker`        | `>= 24.0.7-ce`             |
+| `git`           | `>= 2.30.2`                |
+| `make`          | `>= 4.3`                   |
+| `maven`         | `>= 6.4.15`                |
+| `openssl`       | `>= 1.1.1w`                |
+| `rsync`         | `>= 3.2.3`                 |
+| `yarn`          | `>= 1.22.19`               |
 | `zip` & `unzip` | `>= 6.0-19`                |
-| `gh`            | `>= 1.9.2`                 |
-| `sam`           | `>= 1.37.0`                |
+| `gh`            | `>= 1.13.1`                |
+| `sam`           | `>= 1.102.0`               |
 
 ## License
 

From a619d763ddf6c56c10f378ccdc6ed2a96197eb92 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu, 30 Nov 2023 11:59:42 +0000
Subject: [PATCH 19/27] chore(deps): Bump actions/setup-java from 3 to 4
 (#4360)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Bumps [actions/setup-java](https://github.com/actions/setup-java) from 3 to 4.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/actions/setup-java/releases">actions/setup-java's releases</a>.</em></p>
<blockquote>
<h2>v4.0.0</h2>
<h2>What's Changed</h2>
<p>In the scope of this release, the version of the Node.js runtime was updated to 20. The majority of dependencies were updated to the latest versions. From now on, the code for the setup-java will run on Node.js 20 instead of Node.js 16.</p>
<h2>Breaking changes</h2>
<ul>
<li>Update Node.js runtime to version 20 by <a href="https://github.com/aparnajyothi-y"><code>@​aparnajyothi-y</code></a> in <a href="https://redirect.github.com/actions/setup-java/pull/558">actions/setup-java#558</a></li>
</ul>
<h2>Non-breaking changes</h2>
<ul>
<li>Adding support for microsoft openjdk 21.0.0 by <a href="https://github.com/ralfstuckert"><code>@​ralfstuckert</code></a> in <a href="https://redirect.github.com/actions/setup-java/pull/546">actions/setup-java#546</a></li>
<li>Update <code>@​actions/cache</code> dependency and documentation by <a href="https://github.com/IvanZosimov"><code>@​IvanZosimov</code></a> in <a href="https://redirect.github.com/actions/setup-java/pull/549">actions/setup-java#549</a></li>
<li>Implementation of the cache-dependency-path option to control caching dependency by <a href="https://github.com/itchyny"><code>@​itchyny</code></a> in <a href="https://redirect.github.com/actions/setup-java/pull/499">actions/setup-java#499</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/ralfstuckert"><code>@​ralfstuckert</code></a> made their first contribution in <a href="https://redirect.github.com/actions/setup-java/pull/546">actions/setup-java#546</a></li>
<li><a href="https://github.com/itchyny"><code>@​itchyny</code></a> made their first contribution in <a href="https://redirect.github.com/actions/setup-java/pull/499">actions/setup-java#499</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a href="https://github.com/actions/setup-java/compare/v3...v4.0.0">https://github.com/actions/setup-java/compare/v3...v4.0.0</a></p>
<h2>v3.13.0</h2>
<h2>What's changed</h2>
<p>In the scope of this release, support for Dragonwell JDK was added by <a href="https://github.com/Accelerator1996"><code>@​Accelerator1996</code></a> in <a href="https://redirect.github.com/actions/setup-java/pull/532">actions/setup-java#532</a></p>
<pre lang="yaml"><code>steps:
 - name: Checkout
   uses: actions/checkout@v3
 - name: Setup-java
   uses: actions/setup-java@v3
   with:
     distribution: 'dragonwell'
     java-version: '17'
</code></pre>
<p>Several inaccuracies were also fixed:</p>
<ul>
<li>Fix XML namespaces wrongly using https by <a href="https://github.com/gnodet"><code>@​gnodet</code></a> in <a href="https://redirect.github.com/actions/setup-java/pull/503">actions/setup-java#503</a></li>
<li>Fix typo and remove unintentional(?) word by <a href="https://github.com/CyberFlameGO"><code>@​CyberFlameGO</code></a> in <a href="https://redirect.github.com/actions/setup-java/pull/518">actions/setup-java#518</a></li>
<li>Fix usage link within the README.md file by <a href="https://github.com/dassiorleando"><code>@​dassiorleando</code></a> in <a href="https://redirect.github.com/actions/setup-java/pull/525">actions/setup-java#525</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/CyberFlameGO"><code>@​CyberFlameGO</code></a> made their first contribution in <a href="https://redirect.github.com/actions/setup-java/pull/518">actions/setup-java#518</a></li>
<li><a href="https://github.com/dassiorleando"><code>@​dassiorleando</code></a> made their first contribution in <a href="https://redirect.github.com/actions/setup-java/pull/525">actions/setup-java#525</a></li>
<li><a href="https://github.com/gnodet"><code>@​gnodet</code></a> made their first contribution in <a href="https://redirect.github.com/actions/setup-java/pull/503">actions/setup-java#503</a></li>
<li><a href="https://github.com/Accelerator1996"><code>@​Accelerator1996</code></a> made their first contribution in <a href="https://redirect.github.com/actions/setup-java/pull/532">actions/setup-java#532</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a href="https://github.com/actions/setup-java/compare/v3...v3.13.0">https://github.com/actions/setup-java/compare/v3...v3.13.0</a></p>
<h2>v3.12.0</h2>

</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/actions/setup-java/commit/387ac29b308b003ca37ba93a6cab5eb57c8f5f93"><code>387ac29</code></a> Upgrade Node to v20 (<a href="https://redirect.github.com/actions/setup-java/issues/558">#558</a>)</li>
<li><a href="https://github.com/actions/setup-java/commit/9eda6b51cc4f6ee99be3dd5537b85e389e47bda9"><code>9eda6b5</code></a> feat: implement cache-dependency-path option to control caching dependency (#...</li>
<li><a href="https://github.com/actions/setup-java/commit/78078da0cd035d0d177cc2cb696e05d96fba7d11"><code>78078da</code></a> Update <code>@​actions/cache</code> dependency and documentation (<a href="https://redirect.github.com/actions/setup-java/issues/549">#549</a>)</li>
<li><a href="https://github.com/actions/setup-java/commit/5caaba646e214abb5c4c808eb8fe13db519ab757"><code>5caaba6</code></a> add support for microsoft openjdk 21.0.0 (<a href="https://redirect.github.com/actions/setup-java/issues/546">#546</a>)</li>
<li>See full diff in <a href="https://github.com/actions/setup-java/compare/v3...v4">compare view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=actions/setup-java&package-manager=github_actions&previous-version=3&new-version=4)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)


</details>
---
 .github/workflows/main.yml | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index 0efe8e7a11..84650040da 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -38,7 +38,7 @@ jobs:
         with:
           go-version: '1.18'
       - name: Set up Java 8
-        uses: actions/setup-java@v3
+        uses: actions/setup-java@v4
         with:
           distribution: 'zulu'
           java-version: '8'
@@ -121,7 +121,7 @@ jobs:
         with:
           go-version: '1.18'
       - name: Set up Java 8
-        uses: actions/setup-java@v3
+        uses: actions/setup-java@v4
         with:
           distribution: 'zulu'
           java-version: '8'
@@ -310,7 +310,7 @@ jobs:
         with:
           go-version: ${{ matrix.go }}
       - name: Set up Java ${{ matrix.java }}
-        uses: actions/setup-java@v3
+        uses: actions/setup-java@v4
         with:
           distribution: 'zulu'
           java-version: ${{ matrix.java }}
@@ -440,7 +440,7 @@ jobs:
         with:
           go-version: '1.20'
       - name: Set up Java 20
-        uses: actions/setup-java@v3
+        uses: actions/setup-java@v4
         with:
           distribution: 'corretto'
           java-version: '20'

From 1940a1ddb73b8e743a661e06b97672b7182c15ee Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu, 30 Nov 2023 17:41:44 +0000
Subject: [PATCH 20/27] chore(deps-dev): Update wheel requirement from ~=0.41
 to ~=0.42 in /packages/jsii-pacmak/lib/targets/python (#4354)

Updates the requirements on [wheel](https://github.com/pypa/wheel) to permit the latest version.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/pypa/wheel/releases">wheel's releases</a>.</em></p>
<blockquote>
<h2>0.42.0</h2>
<ul>
<li>Allowed removing build tag with <code>wheel tags --build &quot;&quot;</code></li>
<li>Fixed <code>wheel pack</code> and <code>wheel tags</code> writing updated <code>WHEEL</code> fields after a blank line, causing other tools to ignore them</li>
<li>Fixed <code>wheel pack</code> and <code>wheel tags</code> writing <code>WHEEL</code> with CRLF line endings or a mix of CRLF and LF</li>
<li>Fixed <code>wheel pack --build-number &quot;&quot;</code> not removing build tag from <code>WHEEL</code> (above changes by Benjamin Gilbert)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/pypa/wheel/blob/main/docs/news.rst">wheel's changelog</a>.</em></p>
<blockquote>
<h1>Release Notes</h1>
<p><strong>0.42.0 (2023-11-26)</strong></p>
<ul>
<li>Allowed removing build tag with <code>wheel tags --build &quot;&quot;</code></li>
<li>Fixed <code>wheel pack</code> and <code>wheel tags</code> writing updated <code>WHEEL</code> fields after a
blank line, causing other tools to ignore them</li>
<li>Fixed <code>wheel pack</code> and <code>wheel tags</code> writing <code>WHEEL</code> with CRLF line endings or
a mix of CRLF and LF</li>
<li>Fixed <code>wheel pack --build-number &quot;&quot;</code> not removing build tag from <code>WHEEL</code>
(above changes by Benjamin Gilbert)</li>
</ul>
<p><strong>0.41.3 (2023-10-30)</strong></p>
<ul>
<li>Updated vendored <code>packaging</code> to 23.2</li>
<li>Fixed ABI tag generation for CPython 3.13a1 on Windows (PR by Sam Gross)</li>
</ul>
<p><strong>0.41.2 (2023-08-22)</strong></p>
<ul>
<li>Fixed platform tag detection for GraalPy and 32-bit python running on an aarch64
kernel (PR by Matthieu Darbois)</li>
<li>Fixed <code>wheel tags</code> to not list directories in <code>RECORD</code> files
(PR by Mike Taves)</li>
<li>Fixed ABI tag generation for GraalPy (PR by Michael Simacek)</li>
</ul>
<p><strong>0.41.1 (2023-08-05)</strong></p>
<ul>
<li>Fixed naming of the <code>data_dir</code> directory in the presence of local version segment
given via <code>egg_info.tag_build</code> (PR by Anderson Bravalheri)</li>
<li>Fixed version specifiers in <code>Requires-Dist</code> being wrapped in parentheses</li>
</ul>
<p><strong>0.41.0 (2023-07-22)</strong></p>
<ul>
<li>Added full support of the build tag syntax to <code>wheel tags</code> (you can now set a build
tag like <code>123mytag</code>)</li>
<li>Fixed warning on Python 3.12 about <code>onerror</code> deprecation. (PR by Henry Schreiner)</li>
<li>Support testing on Python 3.12 betas (PR by Ewout ter Hoeven)</li>
</ul>
<p><strong>0.40.0 (2023-03-14)</strong></p>
<ul>
<li>Added a <code>wheel tags</code> command to modify tags on an existing wheel
(PR by Henry Schreiner)</li>
<li>Updated vendored <code>packaging</code> to 23.0</li>
<li><code>wheel unpack</code> now preserves the executable attribute of extracted files</li>
<li>Fixed spaces in platform names not being converted to underscores (PR by David Tucker)</li>
<li>Fixed <code>RECORD</code> files in generated wheels missing the regular file attribute</li>
<li>Fixed <code>DeprecationWarning</code> about the use of the deprecated <code>pkg_resources</code> API
(PR by Thomas Grainger)</li>
<li>Wheel now uses flit-core as a build backend (PR by Henry Schreiner)</li>
</ul>

</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/pypa/wheel/commit/63a09bb3d92630c1d35f4fcc6f79250256aeeb5c"><code>63a09bb</code></a> Created a new release</li>
<li><a href="https://github.com/pypa/wheel/commit/f4b8e488dfe3da3ced0bc36aa7dcf21631e7489d"><code>f4b8e48</code></a> Several fixes to <code>WHEEL</code> metadata handling (<a href="https://redirect.github.com/pypa/wheel/issues/588">#588</a>)</li>
<li><a href="https://github.com/pypa/wheel/commit/11e573283181493f7aec55146ab2862bccd4dc4d"><code>11e5732</code></a> [pre-commit.ci] pre-commit autoupdate (<a href="https://redirect.github.com/pypa/wheel/issues/586">#586</a>)</li>
<li><a href="https://github.com/pypa/wheel/commit/fe6bb8268d5f9e98ceec83c67d03b06c1c8862db"><code>fe6bb82</code></a> [pre-commit.ci] pre-commit autoupdate (<a href="https://redirect.github.com/pypa/wheel/issues/584">#584</a>)</li>
<li><a href="https://github.com/pypa/wheel/commit/b90a4bc408ce621818b3e92bb55955431a7fa22a"><code>b90a4bc</code></a> [pre-commit.ci] pre-commit autoupdate (<a href="https://redirect.github.com/pypa/wheel/issues/581">#581</a>)</li>
<li><a href="https://github.com/pypa/wheel/commit/56de2ebd4bffa706a60ee0f7785a33c62be737f3"><code>56de2eb</code></a> Added a link to the GitHub repository to pyproject.toml (<a href="https://redirect.github.com/pypa/wheel/issues/563">#563</a>)</li>
<li><a href="https://github.com/pypa/wheel/commit/a899f1c69ffddf564b904a5de974457c213dc36a"><code>a899f1c</code></a> Fixed parameter for release-notes</li>
<li><a href="https://github.com/pypa/wheel/commit/254ba4658aa0bf1c5be536ccc02ed44e051468fd"><code>254ba46</code></a> Created a new release</li>
<li><a href="https://github.com/pypa/wheel/commit/6f33736b6f252506df8e574deced5d5667d05bf6"><code>6f33736</code></a> Updated actions and added GitHub release automation</li>
<li><a href="https://github.com/pypa/wheel/commit/83b77e591e6f593470f8daddf3bcfd6ca64e81bc"><code>83b77e5</code></a> Replaced <code>black</code> with <code>ruff-format</code></li>
<li>Additional commits viewable in <a href="https://github.com/pypa/wheel/compare/0.41.0...0.42.0">compare view</a></li>
</ul>
</details>
<br />


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)


</details>
---
 .../jsii-pacmak/lib/targets/python/requirements-dev.txt   | 2 +-
 .../generated-code/__snapshots__/examples.test.js.snap    | 4 ++--
 .../__snapshots__/prerelease-identifiers.test.js.snap     | 8 ++++----
 .../__snapshots__/target-python.test.js.snap              | 8 ++++----
 4 files changed, 11 insertions(+), 11 deletions(-)

diff --git a/packages/jsii-pacmak/lib/targets/python/requirements-dev.txt b/packages/jsii-pacmak/lib/targets/python/requirements-dev.txt
index 2d9112e712..db72a00e0d 100644
--- a/packages/jsii-pacmak/lib/targets/python/requirements-dev.txt
+++ b/packages/jsii-pacmak/lib/targets/python/requirements-dev.txt
@@ -4,6 +4,6 @@
 # package (wheel, sdist), but not declared as build-system dependencies.
 
 setuptools~=67.3.2 # build-system
-wheel~=0.41        # build-system
+wheel~=0.42        # build-system
 
 twine~=4.0.2
diff --git a/packages/jsii-pacmak/test/generated-code/__snapshots__/examples.test.js.snap b/packages/jsii-pacmak/test/generated-code/__snapshots__/examples.test.js.snap
index cbc750ca01..140caa467f 100644
--- a/packages/jsii-pacmak/test/generated-code/__snapshots__/examples.test.js.snap
+++ b/packages/jsii-pacmak/test/generated-code/__snapshots__/examples.test.js.snap
@@ -1220,7 +1220,7 @@ testpkg.FooBar=example.test.demo.FooBar
 
 exports[`diamond-struct-parameter.ts: <outDir>/python/pyproject.toml 1`] = `
 [build-system]
-requires = ["setuptools~=67.3.2", "wheel~=0.41"]
+requires = ["setuptools~=67.3.2", "wheel~=0.42"]
 build-backend = "setuptools.build_meta"
 
 [tool.pyright]
@@ -2641,7 +2641,7 @@ testpkg.Namespace2.Foo.Final=example.test.demo.Namespace2$Foo.Final
 
 exports[`nested-types.ts: <outDir>/python/pyproject.toml 1`] = `
 [build-system]
-requires = ["setuptools~=67.3.2", "wheel~=0.41"]
+requires = ["setuptools~=67.3.2", "wheel~=0.42"]
 build-backend = "setuptools.build_meta"
 
 [tool.pyright]
diff --git a/packages/jsii-pacmak/test/generated-code/__snapshots__/prerelease-identifiers.test.js.snap b/packages/jsii-pacmak/test/generated-code/__snapshots__/prerelease-identifiers.test.js.snap
index 473d5cfe94..9a87703a37 100644
--- a/packages/jsii-pacmak/test/generated-code/__snapshots__/prerelease-identifiers.test.js.snap
+++ b/packages/jsii-pacmak/test/generated-code/__snapshots__/prerelease-identifiers.test.js.snap
@@ -412,7 +412,7 @@ foo
 
 exports[`foo@1.2.3 depends on bar@^2.0.0-rc.42: <outDir>/python/pyproject.toml 1`] = `
 [build-system]
-requires = ["setuptools~=67.3.2", "wheel~=0.41"]
+requires = ["setuptools~=67.3.2", "wheel~=0.42"]
 build-backend = "setuptools.build_meta"
 
 [tool.pyright]
@@ -926,7 +926,7 @@ foo
 
 exports[`foo@1.2.3 depends on bar@^4.5.6-pre.1337: <outDir>/python/pyproject.toml 1`] = `
 [build-system]
-requires = ["setuptools~=67.3.2", "wheel~=0.41"]
+requires = ["setuptools~=67.3.2", "wheel~=0.42"]
 build-backend = "setuptools.build_meta"
 
 [tool.pyright]
@@ -1420,7 +1420,7 @@ foo
 
 exports[`foo@2.0.0-rc.42: <outDir>/python/pyproject.toml 1`] = `
 [build-system]
-requires = ["setuptools~=67.3.2", "wheel~=0.41"]
+requires = ["setuptools~=67.3.2", "wheel~=0.42"]
 build-backend = "setuptools.build_meta"
 
 [tool.pyright]
@@ -1911,7 +1911,7 @@ foo
 
 exports[`foo@4.5.6-pre.1337: <outDir>/python/pyproject.toml 1`] = `
 [build-system]
-requires = ["setuptools~=67.3.2", "wheel~=0.41"]
+requires = ["setuptools~=67.3.2", "wheel~=0.42"]
 build-backend = "setuptools.build_meta"
 
 [tool.pyright]
diff --git a/packages/jsii-pacmak/test/generated-code/__snapshots__/target-python.test.js.snap b/packages/jsii-pacmak/test/generated-code/__snapshots__/target-python.test.js.snap
index b0d3531ebb..dac58bf1dd 100644
--- a/packages/jsii-pacmak/test/generated-code/__snapshots__/target-python.test.js.snap
+++ b/packages/jsii-pacmak/test/generated-code/__snapshots__/target-python.test.js.snap
@@ -243,7 +243,7 @@ scope.jsii-calc-base
 
 exports[`Generated code for "@scope/jsii-calc-base": <outDir>/python/pyproject.toml 1`] = `
 [build-system]
-requires = ["setuptools~=67.3.2", "wheel~=0.41"]
+requires = ["setuptools~=67.3.2", "wheel~=0.42"]
 build-backend = "setuptools.build_meta"
 
 [tool.pyright]
@@ -797,7 +797,7 @@ scope.jsii-calc-base-of-base
 
 exports[`Generated code for "@scope/jsii-calc-base-of-base": <outDir>/python/pyproject.toml 1`] = `
 [build-system]
-requires = ["setuptools~=67.3.2", "wheel~=0.41"]
+requires = ["setuptools~=67.3.2", "wheel~=0.42"]
 build-backend = "setuptools.build_meta"
 
 [tool.pyright]
@@ -1324,7 +1324,7 @@ scope.jsii-calc-lib
 
 exports[`Generated code for "@scope/jsii-calc-lib": <outDir>/python/pyproject.toml 1`] = `
 [build-system]
-requires = ["setuptools~=67.3.2", "wheel~=0.41"]
+requires = ["setuptools~=67.3.2", "wheel~=0.42"]
 build-backend = "setuptools.build_meta"
 
 [tool.pyright]
@@ -2984,7 +2984,7 @@ foo = "bar"
 
 exports[`Generated code for "jsii-calc": <outDir>/python/pyproject.toml 1`] = `
 [build-system]
-requires = ["setuptools~=67.3.2", "wheel~=0.41"]
+requires = ["setuptools~=67.3.2", "wheel~=0.42"]
 build-backend = "setuptools.build_meta"
 
 [tool.pyright]

From 886e465e60a5b6208a862a20af087cbd924416a9 Mon Sep 17 00:00:00 2001
From: Momo Kornher <mail@moritzkornher.de>
Date: Fri, 1 Dec 2023 11:10:35 +0100
Subject: [PATCH 21/27] fix(check-node): unstable node 21 is incorrectly listed
 as supported (#4362)

Any downstream packages that use `NodeRelease.supported` to compute a list of active Node versions currently believe they should test again Node 21, which we don't actually want.

---

By submitting this pull request, I confirm that my contribution is made under the terms of the [Apache 2.0 license].

[Apache 2.0 license]: https://www.apache.org/licenses/LICENSE-2.0
---
 packages/@jsii/check-node/src/constants.ts | 17 +++++++++--------
 1 file changed, 9 insertions(+), 8 deletions(-)

diff --git a/packages/@jsii/check-node/src/constants.ts b/packages/@jsii/check-node/src/constants.ts
index def0d5f8eb..2ead106ac9 100644
--- a/packages/@jsii/check-node/src/constants.ts
+++ b/packages/@jsii/check-node/src/constants.ts
@@ -25,16 +25,16 @@ export class NodeRelease {
     ),
 
     // Past end-of-life releases
-    new NodeRelease(13, { endOfLife: new Date('2020-06-01') }),
-    new NodeRelease(14, {
-      endOfLife: new Date('2023-04-30'),
-      supportedRange: '^14.17.0',
-    }),
-    new NodeRelease(15, { endOfLife: new Date('2021-06-01') }),
     new NodeRelease(12, {
       endOfLife: new Date('2022-04-30'),
       supportedRange: '^12.7.0',
     }),
+    new NodeRelease(13, { endOfLife: new Date('2020-06-01'), untested: true }),
+    new NodeRelease(14, {
+      endOfLife: new Date('2023-04-30'),
+      supportedRange: '^14.17.0',
+    }),
+    new NodeRelease(15, { endOfLife: new Date('2021-06-01'), untested: true }),
     new NodeRelease(16, {
       endOfLife: new Date('2023-09-11'),
       supportedRange: '^16.3.0',
@@ -42,13 +42,14 @@ export class NodeRelease {
     new NodeRelease(17, {
       endOfLife: new Date('2022-06-01'),
       supportedRange: '^17.3.0',
+      untested: true,
     }),
-    new NodeRelease(19, { endOfLife: new Date('2023-06-01') }),
+    new NodeRelease(19, { endOfLife: new Date('2023-06-01'), untested: true }),
 
     // Currently active releases (as of last edit to this file...)
     new NodeRelease(18, { endOfLife: new Date('2025-04-30') }),
     new NodeRelease(20, { endOfLife: new Date('2026-04-30') }),
-    new NodeRelease(21, { endOfLife: new Date('2024-06-01') }),
+    new NodeRelease(21, { endOfLife: new Date('2024-06-01'), untested: true }),
 
     // Future (planned releases)
   ];

From 22a547c27648e86342fc4a6e05f51334aea3a282 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Fri, 1 Dec 2023 11:31:52 +0000
Subject: [PATCH 22/27] chore(deps): Bump golang.org/x/tools from 0.15.0 to
 0.16.0 in /packages/@jsii/go-runtime/jsii-runtime-go (#4357)

Bumps [golang.org/x/tools](https://github.com/golang/tools) from 0.15.0 to 0.16.0.
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/golang/tools/commit/a9ef4cfeacd705b0e43cc2935571a80b6547d70c"><code>a9ef4cf</code></a> go.mod: update golang.org/x dependencies</li>
<li><a href="https://github.com/golang/tools/commit/d9b9452656b6061e51acbfb411087aaf7ca6d342"><code>d9b9452</code></a> gopls/internal/lsp/cache: move quick-fix bundling logic to the cache pkg</li>
<li><a href="https://github.com/golang/tools/commit/1733061d5fbd81eec28621bcc4d1e41158618669"><code>1733061</code></a> go/analysis/passes/testinggoroutine: report by enclosing regions</li>
<li><a href="https://github.com/golang/tools/commit/b19be0fa71558b3bd27dd4210d9eee35fd52db91"><code>b19be0f</code></a> gopls/internal/cmd/help_test.go: document</li>
<li><a href="https://github.com/golang/tools/commit/daa4aa59ed4efe3c28946c15b249fb8609074354"><code>daa4aa5</code></a> gopls/internal/lsp/source: stubmethods: fix out-of-bounds index</li>
<li><a href="https://github.com/golang/tools/commit/a586d0db8420774bb736981052730e51efca1dac"><code>a586d0d</code></a> go/types/internal/play: show more types.Scope detail</li>
<li><a href="https://github.com/golang/tools/commit/53ad329bd98f6eea2106d46f2c1655cbbdd28242"><code>53ad329</code></a> gopls/internal/lsp/source: move edit logic into the protocol package</li>
<li><a href="https://github.com/golang/tools/commit/3c677e3f7d23999e4a31018a5f6bfade055408b7"><code>3c677e3</code></a> gopls/internal/lsp/cache: move SuggestedFixFromCommand into cache</li>
<li><a href="https://github.com/golang/tools/commit/ab6af7d4bb284d8cae8d82939c658a178fa7ec9f"><code>ab6af7d</code></a> gopls/internal/lsp/source: extract InDir to a new pathutil package</li>
<li><a href="https://github.com/golang/tools/commit/e7d61d9d57a6c8718dbc18fee6d5ac92d2ebd8f8"><code>e7d61d9</code></a> gopls/internal/lsp/cache: simplify named error values</li>
<li>Additional commits viewable in <a href="https://github.com/golang/tools/compare/v0.15.0...v0.16.0">compare view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=golang.org/x/tools&package-manager=go_modules&previous-version=0.15.0&new-version=0.16.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)


</details>
---
 packages/@jsii/go-runtime-test/project/go.sum    | 2 --
 packages/@jsii/go-runtime/jsii-runtime-go/go.mod | 2 +-
 packages/@jsii/go-runtime/jsii-runtime-go/go.sum | 4 ++--
 3 files changed, 3 insertions(+), 5 deletions(-)

diff --git a/packages/@jsii/go-runtime-test/project/go.sum b/packages/@jsii/go-runtime-test/project/go.sum
index 62df36a7e3..0e54aacb05 100644
--- a/packages/@jsii/go-runtime-test/project/go.sum
+++ b/packages/@jsii/go-runtime-test/project/go.sum
@@ -34,8 +34,6 @@ golang.org/x/sys v0.14.0 h1:Vz7Qs629MkJkGyHxUlRHizWJRG2j8fbQKjELVSNhy7Q=
 golang.org/x/sys v0.14.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA=
 golang.org/x/text v0.3.0/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ=
 golang.org/x/tools v0.0.0-20200130002326-2f3ba24bd6e7/go.mod h1:TB2adYChydJhpapKDTa4BR/hXlZSLoq2Wpct/0txZ28=
-golang.org/x/tools v0.15.0 h1:zdAyfUGbYmuVokhzVmghFl2ZJh5QhcfebBgmVPFYA+8=
-golang.org/x/tools v0.15.0/go.mod h1:hpksKq4dtpQWS1uQ61JkdqWM3LscIS6Slf+VVkm+wQk=
 golang.org/x/tools v0.16.0 h1:GO788SKMRunPIBCXiQyo2AaexLstOrVhuAL5YwsckQM=
 golang.org/x/tools v0.16.0/go.mod h1:kYVVN6I1mBNoB1OX+noeBjbRk4IUEPa7JJ+TJMEooJ0=
 golang.org/x/xerrors v0.0.0-20191011141410-1b5146add898/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
diff --git a/packages/@jsii/go-runtime/jsii-runtime-go/go.mod b/packages/@jsii/go-runtime/jsii-runtime-go/go.mod
index 8311a01cbc..e44221d5dc 100644
--- a/packages/@jsii/go-runtime/jsii-runtime-go/go.mod
+++ b/packages/@jsii/go-runtime/jsii-runtime-go/go.mod
@@ -8,7 +8,7 @@ require (
 	github.com/mattn/go-isatty v0.0.20
 	github.com/stretchr/testify v1.8.4
 	golang.org/x/lint v0.0.0-20210508222113-6edffad5e616
-	golang.org/x/tools v0.15.0
+	golang.org/x/tools v0.16.0
 )
 
 require (
diff --git a/packages/@jsii/go-runtime/jsii-runtime-go/go.sum b/packages/@jsii/go-runtime/jsii-runtime-go/go.sum
index 95448607a6..0e54aacb05 100644
--- a/packages/@jsii/go-runtime/jsii-runtime-go/go.sum
+++ b/packages/@jsii/go-runtime/jsii-runtime-go/go.sum
@@ -34,8 +34,8 @@ golang.org/x/sys v0.14.0 h1:Vz7Qs629MkJkGyHxUlRHizWJRG2j8fbQKjELVSNhy7Q=
 golang.org/x/sys v0.14.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA=
 golang.org/x/text v0.3.0/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ=
 golang.org/x/tools v0.0.0-20200130002326-2f3ba24bd6e7/go.mod h1:TB2adYChydJhpapKDTa4BR/hXlZSLoq2Wpct/0txZ28=
-golang.org/x/tools v0.15.0 h1:zdAyfUGbYmuVokhzVmghFl2ZJh5QhcfebBgmVPFYA+8=
-golang.org/x/tools v0.15.0/go.mod h1:hpksKq4dtpQWS1uQ61JkdqWM3LscIS6Slf+VVkm+wQk=
+golang.org/x/tools v0.16.0 h1:GO788SKMRunPIBCXiQyo2AaexLstOrVhuAL5YwsckQM=
+golang.org/x/tools v0.16.0/go.mod h1:kYVVN6I1mBNoB1OX+noeBjbRk4IUEPa7JJ+TJMEooJ0=
 golang.org/x/xerrors v0.0.0-20191011141410-1b5146add898/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
 gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405 h1:yhCVgyC4o1eVCa2tZl7eS0r+SDo693bJlVdllGtEeKM=
 gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=

From 1428f68e997688c42ac99cda94a3851eb7fb6f90 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 5 Dec 2023 12:35:54 +0000
Subject: [PATCH 23/27] chore(deps): Bump actions/setup-dotnet from 3 to 4
 (#4363)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Bumps [actions/setup-dotnet](https://github.com/actions/setup-dotnet) from 3 to 4.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/actions/setup-dotnet/releases">actions/setup-dotnet's releases</a>.</em></p>
<blockquote>
<h2>v4.0.0</h2>
<h2>What's Changed</h2>
<p>In the scope of this release, the version of the Node.js runtime was updated to 20. The majority of dependencies were updated to the latest versions. From now on, the code for the setup-dotnet will run on Node.js 20 instead of Node.js 16.</p>
<p><strong>Breaking changes</strong></p>
<p>Update Node.js runtime to version 20 by <a href="https://github.com/harithavattikuti"><code>@​harithavattikuti</code></a> in <a href="https://redirect.github.com/actions/setup-dotnet/issues/484">#484</a></p>
<p><strong>Non-breaking changes</strong></p>
<ul>
<li>Refactor installer by <a href="https://github.com/nikolai-laevskii"><code>@​nikolai-laevskii</code></a> in <a href="https://redirect.github.com/actions/setup-dotnet/pull/432">actions/setup-dotnet#432</a></li>
<li>Allow json comments by <a href="https://github.com/nikolai-laevskii"><code>@​nikolai-laevskii</code></a> in <a href="https://redirect.github.com/actions/setup-dotnet/pull/431">actions/setup-dotnet#431</a></li>
<li>Sequential version install fix by <a href="https://github.com/nikolai-laevskii"><code>@​nikolai-laevskii</code></a> in <a href="https://redirect.github.com/actions/setup-dotnet/pull/433">actions/setup-dotnet#433</a></li>
<li>Update fast-xml-parser and dotnet installer scripts by <a href="https://github.com/IvanZosimov"><code>@​IvanZosimov</code></a> in <a href="https://redirect.github.com/actions/setup-dotnet/pull/437">actions/setup-dotnet#437</a></li>
<li>Update dependencies by <a href="https://github.com/IvanZosimov"><code>@​IvanZosimov</code></a> in <a href="https://redirect.github.com/actions/setup-dotnet/pull/440">actions/setup-dotnet#440</a></li>
<li>Bump word-wrap from 1.2.3 to 1.2.4 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/actions/setup-dotnet/pull/444">actions/setup-dotnet#444</a></li>
<li>Update installers by <a href="https://github.com/nikolai-laevskii"><code>@​nikolai-laevskii</code></a> in <a href="https://redirect.github.com/actions/setup-dotnet/pull/462">actions/setup-dotnet#462</a></li>
<li>Update semver by <a href="https://github.com/dmitry-shibanov"><code>@​dmitry-shibanov</code></a> in <a href="https://redirect.github.com/actions/setup-dotnet/pull/468">actions/setup-dotnet#468</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/HarithaVattikuti"><code>@​HarithaVattikuti</code></a> made their first contribution in <a href="https://redirect.github.com/actions/setup-dotnet/pull/484">actions/setup-dotnet#484</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a href="https://github.com/actions/setup-dotnet/compare/v3...v4.0.0">https://github.com/actions/setup-dotnet/compare/v3...v4.0.0</a></p>
<h2>v3.2.0</h2>
<h2>What's Changed</h2>
<p>In scope of this minor release, the ability to cache the NuGet <code>global-packages</code> folder was added in <a href="https://redirect.github.com/actions/setup-dotnet/pull/303">actions/setup-dotnet#303</a> by <a href="https://github.com/nogic1008"><code>@​nogic1008</code></a></p>
<p>For caching, the action uses the <a href="https://github.com/actions/toolkit/tree/main/packages/cache"><code>@​toolkit/cache</code></a> library under the hood, which in turn allows getting rid of configuring the <a href="https://github.com/actions/cache"><code>@​actions/cache</code></a> action separately.</p>
<p>Such input parameters as <code>cache</code> and <code>cache-dependency-path</code> were added. The <code>cache</code> input is optional, and caching is turned off by default, <code>cache-dependency-path</code> is used to specify the path to a dependency file - <code>packages.lock.json</code>.</p>
<p><strong>Example of use-case:</strong></p>
<pre lang="yaml"><code>- uses: actions/setup-dotnet@v3
  with:
    dotnet-version: 6.x
    cache: true
    cache-dependency-path: subdir/packages.lock.json
</code></pre>
<p>More details can be found in the <a href="https://github.com/actions/setup-dotnet#caching-nuget-packages">action's documentation</a>.</p>
<p><strong>Full Changelog</strong>: <a href="https://github.com/actions/setup-dotnet/compare/v3...v3.2.0">https://github.com/actions/setup-dotnet/compare/v3...v3.2.0</a></p>
<h2>v3.1.0</h2>
<h2>What's Changed</h2>
<p>This minor release includes the following new <strong>features</strong>:</p>

</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/actions/setup-dotnet/commit/4d6c8fcf3c8f7a60068d26b594648e99df24cee3"><code>4d6c8fc</code></a> Upgrade Node to v20 (<a href="https://redirect.github.com/actions/setup-dotnet/issues/484">#484</a>)</li>
<li><a href="https://github.com/actions/setup-dotnet/commit/2216f56ae1eec353f06abd464e2ec435fa5f5d43"><code>2216f56</code></a> Update semver (<a href="https://redirect.github.com/actions/setup-dotnet/issues/468">#468</a>)</li>
<li><a href="https://github.com/actions/setup-dotnet/commit/736bc6dea68eb71addebd0c89e1200178e145f0e"><code>736bc6d</code></a> Merge pull request <a href="https://redirect.github.com/actions/setup-dotnet/issues/462">#462</a> from akv-platform/update-installers</li>
<li><a href="https://github.com/actions/setup-dotnet/commit/f5526c2d1bfe45e0d078b8929dc379a93229ca3b"><code>f5526c2</code></a> Update installers</li>
<li><a href="https://github.com/actions/setup-dotnet/commit/4dba25fa3156706981607e1598b263e056dc3008"><code>4dba25f</code></a> Bump word-wrap from 1.2.3 to 1.2.4 (<a href="https://redirect.github.com/actions/setup-dotnet/issues/444">#444</a>)</li>
<li><a href="https://github.com/actions/setup-dotnet/commit/ada8800330ab5b086010be13121dd25e9297111e"><code>ada8800</code></a> Bump semver from 6.3.0 to 6.3.1 (<a href="https://redirect.github.com/actions/setup-dotnet/issues/443">#443</a>)</li>
<li><a href="https://github.com/actions/setup-dotnet/commit/e1749123a8f5e9db8abf5ec8867696143bf9bf47"><code>e174912</code></a> Update dependencies (<a href="https://redirect.github.com/actions/setup-dotnet/issues/440">#440</a>)</li>
<li><a href="https://github.com/actions/setup-dotnet/commit/a6be55a915808728eafbfb7fcba6275352dcf6e8"><code>a6be55a</code></a> Update fast-xml-parser and dotnet installer scripts (<a href="https://redirect.github.com/actions/setup-dotnet/issues/437">#437</a>)</li>
<li><a href="https://github.com/actions/setup-dotnet/commit/9b407708251d576f3dac6969e4c0c453a00ff5d5"><code>9b40770</code></a> Merge pull request <a href="https://redirect.github.com/actions/setup-dotnet/issues/433">#433</a> from akv-platform/sequential-version-install-fix</li>
<li><a href="https://github.com/actions/setup-dotnet/commit/48277343a530e8f1def38c41afa05da090100cf8"><code>4827734</code></a> Reduce number of e2e tests</li>
<li>Additional commits viewable in <a href="https://github.com/actions/setup-dotnet/compare/v3...v4">compare view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=actions/setup-dotnet&package-manager=github_actions&previous-version=3&new-version=4)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)


</details>
---
 .github/workflows/main.yml | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index 84650040da..67a54fcf46 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -30,7 +30,7 @@ jobs:
         uses: actions/checkout@v4
       # Set up all of our standard runtimes
       - name: Set up .NET 6
-        uses: actions/setup-dotnet@v3
+        uses: actions/setup-dotnet@v4
         with:
           dotnet-version: '6.0.x'
       - name: Set up Go 1.18
@@ -113,7 +113,7 @@ jobs:
         uses: actions/checkout@v4
       # Set up all of our standard runtimes
       - name: Set up .NET 6
-        uses: actions/setup-dotnet@v3
+        uses: actions/setup-dotnet@v4
         with:
           dotnet-version: '6.0.x'
       - name: Set up Go 1.18
@@ -302,7 +302,7 @@ jobs:
           rm built-tree.tgz
       # Set up all of our standard runtimes (this is matrix-based)
       - name: Set up .NET ${{ matrix.dotnet }}
-        uses: actions/setup-dotnet@v3
+        uses: actions/setup-dotnet@v4
         with:
           dotnet-version: ${{ matrix.dotnet }}
       - name: Set up Go ${{ matrix.go }}
@@ -432,7 +432,7 @@ jobs:
           path: ${{ runner.temp }}/release-package
       # Set up all of our standard runtimes
       - name: Set up .NET 7
-        uses: actions/setup-dotnet@v3
+        uses: actions/setup-dotnet@v4
         with:
           dotnet-version: '7.0.x'
       - name: Set up Go 1.20

From feb80f7971cf7655e6adaa8cfd0ab91ca495cafb Mon Sep 17 00:00:00 2001
From: paulhcsun <47882901+paulhcsun@users.noreply.github.com>
Date: Tue, 5 Dec 2023 14:02:05 -0800
Subject: [PATCH 24/27] chore: add author paulhcs to contribution/core (#4364)

Add author paulhcs to contribution/core.

---

By submitting this pull request, I confirm that my contribution is made
under the terms of the [Apache 2.0 license].

[Apache 2.0 license]: https://www.apache.org/licenses/LICENSE-2.0
---
 .mergify/config.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.mergify/config.yml b/.mergify/config.yml
index 1fb8434fc7..e06510673b 100644
--- a/.mergify/config.yml
+++ b/.mergify/config.yml
@@ -11,7 +11,7 @@ pull_request_rules:
       label:
         add: [contribution/core]
     conditions:
-      - author~=^(RomainMuller|rix0rrr|MrArnoldPalmer|iliapolo|madeline-k|comcalvi|kaizencc|corymhall|otaviomacedo|TheRealAmazonKendra|vinayak-kukreja|mrgrain|colifran|mikewrighton)$
+      - author~=^(RomainMuller|rix0rrr|MrArnoldPalmer|iliapolo|madeline-k|comcalvi|kaizencc|corymhall|otaviomacedo|TheRealAmazonKendra|vinayak-kukreja|mrgrain|colifran|mikewrighton|paulhcsun)$
       - -label~="contribution/core"
   - name: Tell them we're good now
     actions:

From 236ee1890fbdbfe57808580d62160428163456fc Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu, 7 Dec 2023 11:56:45 +0000
Subject: [PATCH 25/27] chore(deps): Bump actions/setup-python from 4 to 5
 (#4365)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Bumps [actions/setup-python](https://github.com/actions/setup-python) from 4 to 5.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/actions/setup-python/releases">actions/setup-python's releases</a>.</em></p>
<blockquote>
<h2>v5.0.0</h2>
<h2>What's Changed</h2>
<p>In scope of this release, we update node version runtime from node16 to node20 (<a href="https://redirect.github.com/actions/setup-python/pull/772">actions/setup-python#772</a>). Besides, we update dependencies to the latest versions.</p>
<p><strong>Full Changelog</strong>: <a href="https://github.com/actions/setup-python/compare/v4.8.0...v5.0.0">https://github.com/actions/setup-python/compare/v4.8.0...v5.0.0</a></p>
<h2>v4.8.0</h2>
<h2>What's Changed</h2>
<p>In scope of this release we added support for GraalPy (<a href="https://redirect.github.com/actions/setup-python/pull/694">actions/setup-python#694</a>). You can use this snippet to set up GraalPy:</p>
<pre lang="yaml"><code>steps:
- uses: actions/checkout@v4
- uses: actions/setup-python@v4
  with:
    python-version: 'graalpy-22.3'
- run: python my_script.py
</code></pre>
<p>Besides, the release contains such changes as:</p>
<ul>
<li>Trim python version when reading from file by <a href="https://github.com/FerranPares"><code>@​FerranPares</code></a> in <a href="https://redirect.github.com/actions/setup-python/pull/628">actions/setup-python#628</a></li>
<li>Use non-deprecated versions in examples by <a href="https://github.com/jeffwidman"><code>@​jeffwidman</code></a> in <a href="https://redirect.github.com/actions/setup-python/pull/724">actions/setup-python#724</a></li>
<li>Change deprecation comment to past tense by <a href="https://github.com/jeffwidman"><code>@​jeffwidman</code></a> in <a href="https://redirect.github.com/actions/setup-python/pull/723">actions/setup-python#723</a></li>
<li>Bump <code>@​babel/traverse</code> from 7.9.0 to 7.23.2 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/actions/setup-python/pull/743">actions/setup-python#743</a></li>
<li>advanced-usage.md: Encourage the use actions/checkout@v4 by <a href="https://github.com/cclauss"><code>@​cclauss</code></a> in <a href="https://redirect.github.com/actions/setup-python/pull/729">actions/setup-python#729</a></li>
<li>Examples now use checkout@v4 by <a href="https://github.com/simonw"><code>@​simonw</code></a> in <a href="https://redirect.github.com/actions/setup-python/pull/738">actions/setup-python#738</a></li>
<li>Update actions/checkout to v4 by <a href="https://github.com/dmitry-shibanov"><code>@​dmitry-shibanov</code></a> in <a href="https://redirect.github.com/actions/setup-python/pull/761">actions/setup-python#761</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/FerranPares"><code>@​FerranPares</code></a> made their first contribution in <a href="https://redirect.github.com/actions/setup-python/pull/628">actions/setup-python#628</a></li>
<li><a href="https://github.com/timfel"><code>@​timfel</code></a> made their first contribution in <a href="https://redirect.github.com/actions/setup-python/pull/694">actions/setup-python#694</a></li>
<li><a href="https://github.com/jeffwidman"><code>@​jeffwidman</code></a> made their first contribution in <a href="https://redirect.github.com/actions/setup-python/pull/724">actions/setup-python#724</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a href="https://github.com/actions/setup-python/compare/v4...v4.8.0">https://github.com/actions/setup-python/compare/v4...v4.8.0</a></p>
<h2>v4.7.1</h2>
<h2>What's Changed</h2>
<ul>
<li>Bump word-wrap from 1.2.3 to 1.2.4 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/actions/setup-python/pull/702">actions/setup-python#702</a></li>
<li>Add range validation for toml files by <a href="https://github.com/dmitry-shibanov"><code>@​dmitry-shibanov</code></a> in <a href="https://redirect.github.com/actions/setup-python/pull/726">actions/setup-python#726</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a href="https://github.com/actions/setup-python/compare/v4...v4.7.1">https://github.com/actions/setup-python/compare/v4...v4.7.1</a></p>
<h2>v4.7.0</h2>
<p>In scope of this release, the support for reading python version from pyproject.toml was added (<a href="https://redirect.github.com/actions/setup-python/pull/669">actions/setup-python#669</a>).</p>
<pre lang="yaml"><code>      - name: Setup Python
        uses: actions/setup-python@v4
&lt;/tr&gt;&lt;/table&gt;
</code></pre>
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/actions/setup-python/commit/0a5c61591373683505ea898e09a3ea4f39ef2b9c"><code>0a5c615</code></a> Update action to node20 (<a href="https://redirect.github.com/actions/setup-python/issues/772">#772</a>)</li>
<li><a href="https://github.com/actions/setup-python/commit/0ae58361cdfd39e2950bed97a1e26aa20c3d8955"><code>0ae5836</code></a> Add example of GraalPy to docs (<a href="https://redirect.github.com/actions/setup-python/issues/773">#773</a>)</li>
<li><a href="https://github.com/actions/setup-python/commit/b64ffcaf5b410884ad320a9cfac8866006a109aa"><code>b64ffca</code></a> update actions/checkout to v4 (<a href="https://redirect.github.com/actions/setup-python/issues/761">#761</a>)</li>
<li><a href="https://github.com/actions/setup-python/commit/8d2896179abf658742de432b3f203d2c2d86a587"><code>8d28961</code></a> Examples now use checkout@v4 (<a href="https://redirect.github.com/actions/setup-python/issues/738">#738</a>)</li>
<li><a href="https://github.com/actions/setup-python/commit/7bc6abb01e0555719edc2dbca70a2fde309e5e56"><code>7bc6abb</code></a> advanced-usage.md: Encourage the use actions/checkout@v4 (<a href="https://redirect.github.com/actions/setup-python/issues/729">#729</a>)</li>
<li><a href="https://github.com/actions/setup-python/commit/e8111cec9d3dc15220d8a3b638f08419f57b906a"><code>e8111ce</code></a> Bump <code>@​babel/traverse</code> from 7.9.0 to 7.23.2 (<a href="https://redirect.github.com/actions/setup-python/issues/743">#743</a>)</li>
<li><a href="https://github.com/actions/setup-python/commit/a00ea43da65e7c04d2bdae58b3afecd77057eb9e"><code>a00ea43</code></a> add fix for graalpy ci (<a href="https://redirect.github.com/actions/setup-python/issues/741">#741</a>)</li>
<li><a href="https://github.com/actions/setup-python/commit/8635b1ccc5934e73ed3510980fd2e7790b85839b"><code>8635b1c</code></a> Change deprecation comment to past tense (<a href="https://redirect.github.com/actions/setup-python/issues/723">#723</a>)</li>
<li><a href="https://github.com/actions/setup-python/commit/f6cc428f535856f9c23558d01765a42a4d6cf758"><code>f6cc428</code></a> Use non-deprecated versions in examples (<a href="https://redirect.github.com/actions/setup-python/issues/724">#724</a>)</li>
<li><a href="https://github.com/actions/setup-python/commit/5f2af211d616f86005883b44826180b21abb4060"><code>5f2af21</code></a> Add GraalPy support (<a href="https://redirect.github.com/actions/setup-python/issues/694">#694</a>)</li>
<li>Additional commits viewable in <a href="https://github.com/actions/setup-python/compare/v4...v5">compare view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=actions/setup-python&package-manager=github_actions&previous-version=4&new-version=5)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)


</details>
---
 .github/workflows/gh-pages.yml | 2 +-
 .github/workflows/main.yml     | 8 ++++----
 2 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/.github/workflows/gh-pages.yml b/.github/workflows/gh-pages.yml
index c6fce8593b..68402c7d35 100644
--- a/.github/workflows/gh-pages.yml
+++ b/.github/workflows/gh-pages.yml
@@ -20,7 +20,7 @@ jobs:
       - name: Check out
         uses: actions/checkout@v4
       - name: Set up Python
-        uses: actions/setup-python@v4
+        uses: actions/setup-python@v5
         with:
           cache: 'pip'
           cache-dependency-path: 'gh-pages/requirements-dev.txt'
diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index 67a54fcf46..ee7c4102a1 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -48,7 +48,7 @@ jobs:
           cache: yarn
           node-version: '18'
       - name: Set up Python 3.8
-        uses: actions/setup-python@v4
+        uses: actions/setup-python@v5
         with:
           python-version: '3.8'
           cache: pip
@@ -131,7 +131,7 @@ jobs:
           cache: yarn
           node-version: '18'
       - name: Set up Python 3.8
-        uses: actions/setup-python@v4
+        uses: actions/setup-python@v5
         with:
           python-version: '3.8'
           cache: pip
@@ -320,7 +320,7 @@ jobs:
           cache: yarn
           node-version: ${{ matrix.node }}
       - name: Set up Python ${{ matrix.python }}
-        uses: actions/setup-python@v4
+        uses: actions/setup-python@v5
         with:
           python-version: ${{ matrix.python }}
           cache: pip
@@ -449,7 +449,7 @@ jobs:
         with:
           node-version: '20'
       - name: Set up Python 3.11
-        uses: actions/setup-python@v4
+        uses: actions/setup-python@v5
         with:
           python-version: '3.11'
       - name: Install python3-venv

From 091d6ea210bdb4a5f2fbe517175a89321e5964b0 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu, 7 Dec 2023 12:39:35 +0000
Subject: [PATCH 26/27] chore(deps): Bump actions/setup-go from 4 to 5 (#4366)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Bumps [actions/setup-go](https://github.com/actions/setup-go) from 4 to 5.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/actions/setup-go/releases">actions/setup-go's releases</a>.</em></p>
<blockquote>
<h2>v5.0.0</h2>
<h2>What's Changed</h2>
<p>In scope of this release, we change Nodejs runtime from node16 to node20 (<a href="https://redirect.github.com/actions/setup-go/pull/421">actions/setup-go#421</a>). Moreover, we update some dependencies to the latest versions (<a href="https://redirect.github.com/actions/setup-go/pull/445">actions/setup-go#445</a>).</p>
<p>Besides, this release contains such changes as:</p>
<ul>
<li>Fix hosted tool cache usage on windows by <a href="https://github.com/galargh"><code>@​galargh</code></a> in <a href="https://redirect.github.com/actions/setup-go/pull/411">actions/setup-go#411</a></li>
<li>Improve documentation regarding dependencies caching by <a href="https://github.com/artemgavrilov"><code>@​artemgavrilov</code></a> in <a href="https://redirect.github.com/actions/setup-go/pull/417">actions/setup-go#417</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/galargh"><code>@​galargh</code></a> made their first contribution in <a href="https://redirect.github.com/actions/setup-go/pull/411">actions/setup-go#411</a></li>
<li><a href="https://github.com/artemgavrilov"><code>@​artemgavrilov</code></a> made their first contribution in <a href="https://redirect.github.com/actions/setup-go/pull/417">actions/setup-go#417</a></li>
<li><a href="https://github.com/chenrui333"><code>@​chenrui333</code></a> made their first contribution in <a href="https://redirect.github.com/actions/setup-go/pull/421">actions/setup-go#421</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a href="https://github.com/actions/setup-go/compare/v4...v5.0.0">https://github.com/actions/setup-go/compare/v4...v5.0.0</a></p>
<h2>v4.1.0</h2>
<h2>What's Changed</h2>
<p>In scope of this release, slow installation on Windows was fixed by <a href="https://github.com/dsame"><code>@​dsame</code></a> in <a href="https://redirect.github.com/actions/setup-go/pull/393">actions/setup-go#393</a> and OS version was added to <code>primaryKey</code> for Ubuntu runners to avoid conflicts (<a href="https://redirect.github.com/actions/setup-go/pull/383">actions/setup-go#383</a>)</p>
<p>This release also includes the following changes:</p>
<ul>
<li>Remove implicit dependencies by <a href="https://github.com/nikolai-laevskii"><code>@​nikolai-laevskii</code></a> in <a href="https://redirect.github.com/actions/setup-go/pull/378">actions/setup-go#378</a></li>
<li>Update action.yml by <a href="https://github.com/mkelly"><code>@​mkelly</code></a> in <a href="https://redirect.github.com/actions/setup-go/pull/379">actions/setup-go#379</a></li>
<li>Added a description that go-version should be specified as a string type by <a href="https://github.com/n3xem"><code>@​n3xem</code></a> in <a href="https://redirect.github.com/actions/setup-go/pull/367">actions/setup-go#367</a></li>
<li>Add note about YAML parsing versions by <a href="https://github.com/dmitry-shibanov"><code>@​dmitry-shibanov</code></a> in <a href="https://redirect.github.com/actions/setup-go/pull/382">actions/setup-go#382</a></li>
<li>Automatic update of configuration files from 05/23/2023 by <a href="https://github.com/github-actions"><code>@​github-actions</code></a> in <a href="https://redirect.github.com/actions/setup-go/pull/377">actions/setup-go#377</a></li>
<li>Bump tough-cookie and <code>@​azure/ms-rest-js</code> by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/actions/setup-go/pull/392">actions/setup-go#392</a></li>
<li>Bump word-wrap from 1.2.3 to 1.2.4 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/actions/setup-go/pull/397">actions/setup-go#397</a></li>
<li>Bump semver from 6.3.0 to 6.3.1 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/actions/setup-go/pull/396">actions/setup-go#396</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/mkelly"><code>@​mkelly</code></a> made their first contribution in <a href="https://redirect.github.com/actions/setup-go/pull/379">actions/setup-go#379</a></li>
<li><a href="https://github.com/n3xem"><code>@​n3xem</code></a> made their first contribution in <a href="https://redirect.github.com/actions/setup-go/pull/367">actions/setup-go#367</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a href="https://github.com/actions/setup-go/compare/v4...v4.1.0">https://github.com/actions/setup-go/compare/v4...v4.1.0</a></p>
<h2>v4.0.1</h2>
<h2>What's Changed</h2>
<ul>
<li>Update documentation for <code>v4</code> by <a href="https://github.com/dsame"><code>@​dsame</code></a> in <a href="https://redirect.github.com/actions/setup-go/pull/354">actions/setup-go#354</a></li>
<li>Fix glob bug in the package.json scripts section by <a href="https://github.com/IvanZosimov"><code>@​IvanZosimov</code></a> in <a href="https://redirect.github.com/actions/setup-go/pull/359">actions/setup-go#359</a></li>
<li>Bump <code>xml2js</code> dependency by <a href="https://github.com/dmitry-shibanov"><code>@​dmitry-shibanov</code></a> in <a href="https://redirect.github.com/actions/setup-go/pull/370">actions/setup-go#370</a></li>
<li>Bump <code>@actions/cache</code> dependency to v3.2.1 by <a href="https://github.com/nikolai-laevskii"><code>@​nikolai-laevskii</code></a> in <a href="https://redirect.github.com/actions/setup-go/pull/374">actions/setup-go#374</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/nikolai-laevskii"><code>@​nikolai-laevskii</code></a> made their first contribution in <a href="https://redirect.github.com/actions/setup-go/pull/374">actions/setup-go#374</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a href="https://github.com/actions/setup-go/compare/v4...v4.0.1">https://github.com/actions/setup-go/compare/v4...v4.0.1</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/actions/setup-go/commit/0c52d547c9bc32b1aa3301fd7a9cb496313a4491"><code>0c52d54</code></a> Update dependencies for node20 (<a href="https://redirect.github.com/actions/setup-go/issues/445">#445</a>)</li>
<li><a href="https://github.com/actions/setup-go/commit/bfd2fb341f32be7281829126376a12a780ca79fc"><code>bfd2fb3</code></a> Merge pull request <a href="https://redirect.github.com/actions/setup-go/issues/421">#421</a> from chenrui333/node20-runtime</li>
<li><a href="https://github.com/actions/setup-go/commit/3d65fa57fcbfe4a359b6b71a6c65e6eec12984eb"><code>3d65fa5</code></a> feat: bump to use actions/checkout@v4</li>
<li><a href="https://github.com/actions/setup-go/commit/8a505c9cf2e2726eda7f3268d6992e386a12da52"><code>8a505c9</code></a> feat: bump to use node20 runtime</li>
<li><a href="https://github.com/actions/setup-go/commit/883490dfd06f396ebe0b738bc313a53cf9d851e5"><code>883490d</code></a> Merge pull request <a href="https://redirect.github.com/actions/setup-go/issues/417">#417</a> from artemgavrilov/main</li>
<li><a href="https://github.com/actions/setup-go/commit/d45ebba0ce181dc5604aaf69ce5a0bdcbd3b1807"><code>d45ebba</code></a> Rephrase sentence</li>
<li><a href="https://github.com/actions/setup-go/commit/317c6617fa9e4e67f1e5e20ad8bc98bf298a0f8f"><code>317c661</code></a> Replace <code>wildcards</code> term with <code>globs</code>.</li>
<li><a href="https://github.com/actions/setup-go/commit/f90673ad641a19d0689fba58b5c79adc54be5d81"><code>f90673a</code></a> Merge pull request <a href="https://redirect.github.com/actions/setup-go/issues/1">#1</a> from artemgavrilov/caching-docs-improvement</li>
<li><a href="https://github.com/actions/setup-go/commit/801823434715e45aa48743a38182d33b33675d02"><code>8018234</code></a> Improve documentation regarding dependencies cachin</li>
<li><a href="https://github.com/actions/setup-go/commit/d085b4fe57b6e17262cbebc67b4d2d341d8938c2"><code>d085b4f</code></a> Merge pull request <a href="https://redirect.github.com/actions/setup-go/issues/411">#411</a> from galargh/fix/windows-hostedtoolcache</li>
<li>Additional commits viewable in <a href="https://github.com/actions/setup-go/compare/v4...v5">compare view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=actions/setup-go&package-manager=github_actions&previous-version=4&new-version=5)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)


</details>
---
 .github/workflows/main.yml | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index ee7c4102a1..32cafb7fa9 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -34,7 +34,7 @@ jobs:
         with:
           dotnet-version: '6.0.x'
       - name: Set up Go 1.18
-        uses: actions/setup-go@v4
+        uses: actions/setup-go@v5
         with:
           go-version: '1.18'
       - name: Set up Java 8
@@ -117,7 +117,7 @@ jobs:
         with:
           dotnet-version: '6.0.x'
       - name: Set up Go 1.18
-        uses: actions/setup-go@v4
+        uses: actions/setup-go@v5
         with:
           go-version: '1.18'
       - name: Set up Java 8
@@ -306,7 +306,7 @@ jobs:
         with:
           dotnet-version: ${{ matrix.dotnet }}
       - name: Set up Go ${{ matrix.go }}
-        uses: actions/setup-go@v4
+        uses: actions/setup-go@v5
         with:
           go-version: ${{ matrix.go }}
       - name: Set up Java ${{ matrix.java }}
@@ -436,7 +436,7 @@ jobs:
         with:
           dotnet-version: '7.0.x'
       - name: Set up Go 1.20
-        uses: actions/setup-go@v4
+        uses: actions/setup-go@v5
         with:
           go-version: '1.20'
       - name: Set up Java 20

From e4d2caa27227a05f3b9ad4866211bac329744d14 Mon Sep 17 00:00:00 2001
From: AWS CDK Team <aws-cdk@amazon.com>
Date: Fri, 8 Dec 2023 16:15:55 +0000
Subject: [PATCH 27/27] chore(release): 1.93.0

---
 CHANGELOG.md | 13 +++++++++++++
 lerna.json   |  2 +-
 2 files changed, 14 insertions(+), 1 deletion(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 7c428182b2..533bfa5ff9 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -2,6 +2,19 @@
 
 All notable changes to this project will be documented in this file. See [standard-version](https://github.com/conventional-changelog/standard-version) for commit guidelines.
 
+## [1.93.0](https://github.com/aws/jsii/compare/v1.92.0...v1.93.0) (2023-12-08)
+
+
+### Features
+
+* deprecate `jsii/superchain:buster-slim-*` images ([#4359](https://github.com/aws/jsii/issues/4359)) ([b580244](https://github.com/aws/jsii/commit/b5802449f4b9292b3396353f1fa3fa768a779cd7))
+* **go:** add jsii.Sprintf helper ([#4345](https://github.com/aws/jsii/issues/4345)) ([2ecfb77](https://github.com/aws/jsii/commit/2ecfb778130c1a2fdd6b4932216e144a0d079d5c))
+
+
+### Bug Fixes
+
+* **check-node:** unstable node 21 is incorrectly listed as supported ([#4362](https://github.com/aws/jsii/issues/4362)) ([886e465](https://github.com/aws/jsii/commit/886e465e60a5b6208a862a20af087cbd924416a9))
+
 ## [1.92.0](https://github.com/aws/jsii/compare/v1.91.0...v1.92.0) (2023-11-16)
 
 
diff --git a/lerna.json b/lerna.json
index 69c784d5bf..649bd2352f 100644
--- a/lerna.json
+++ b/lerna.json
@@ -12,6 +12,6 @@
       "rejectCycles": true
     }
   },
-  "version": "1.92.0",
+  "version": "1.93.0",
   "$schema": "node_modules/lerna/schemas/lerna-schema.json"
 }