Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump the dependencies group with 3 updates #863

Merged
merged 1 commit into from
Aug 20, 2024

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Aug 19, 2024

Bumps the dependencies group with 3 updates: sigstore, boto3 and botocore.

Updates sigstore from 3.1.0 to 3.2.0

Release notes

Sourced from sigstore's releases.

v3.2.0

Added

  • API: models.Bundle.BundleType is now a public API (#1089)

  • CLI: The sigstore plumbing subcommand hierarchy has been added. This hierarchy is for developer-only interactions, such as fixing malformed Sigstore bundles. These subcommands are not considered stable until explicitly documented as such. (#1089)

Changed

  • CLI: The default console logger now emits to stderr, rather than stdout (#1089)
Changelog

Sourced from sigstore's changelog.

[3.2.0]

Added

  • API: models.Bundle.BundleType is now a public API (#1089)

  • CLI: The sigstore plumbing subcommand hierarchy has been added. This hierarchy is for developer-only interactions, such as fixing malformed Sigstore bundles. These subcommands are not considered stable until explicitly documented as such. (#1089)

Changed

  • CLI: The default console logger now emits to stderr, rather than stdout (#1089)
Commits
  • fc29ec1 prep 3.2.0 (#1094)
  • a966b3e add fix-bundle plumbing command (#1089)
  • 93e3c5b build(deps): update ruff requirement from <0.6.1 to <0.6.2 (#1093)
  • b193d67 build(deps): update ruff requirement from <0.5.8 to <0.6.1 (#1092)
  • b3e707f build(deps): bump github/codeql-action from 3.26.0 to 3.26.2 in the actions g...
  • dcba009 build(deps): update ruff requirement from <0.5.7 to <0.5.8 (#1090)
  • e6270b8 build(deps): bump actions/upload-artifact from 4.3.5 to 4.3.6 in /.github/act...
  • 5ab49d7 build(deps): bump the actions group with 2 updates (#1086)
  • 19b74c9 build(deps): bump actions/upload-artifact from 4.3.4 to 4.3.5 in /.github/act...
  • 54ee6cf build(deps): update ruff requirement from <0.5.6 to <0.5.7 (#1084)
  • Additional commits viewable in compare view

Updates boto3 from 1.34.159 to 1.35.1

Commits
  • 729aba1 Merge branch 'release-1.35.1'
  • 8312b03 Bumping version to 1.35.1
  • c817e4d Add changelog entries from botocore
  • f38acbb Merge branch 'release-1.35.0'
  • 996e89b Merge branch 'release-1.35.0' into develop
  • d0a872d Bumping version to 1.35.0
  • eaae319 Add changelog entries from botocore
  • 59518e4 Merge branch 'release-1.34.162'
  • a791aa7 Merge branch 'release-1.34.162' into develop
  • add8a63 Bumping version to 1.34.162
  • Additional commits viewable in compare view

Updates botocore from 1.34.159 to 1.35.1

Changelog

Sourced from botocore's changelog.

1.35.1

  • api-change:bedrock: Amazon Bedrock Batch Inference/ Model Invocation is a feature which allows customers to asynchronously run inference on a large set of records/files stored in S3.
  • api-change:codebuild: AWS CodeBuild now supports creating fleets with macOS platform for running builds.
  • api-change:deadline: This release adds additional search fields and provides sorting by multiple fields.
  • api-change:lambda: Release Lambda FunctionRecursiveConfig, enabling customers to turn recursive loop detection on or off on individual functions. This release adds two new APIs, GetFunctionRecursionConfig and PutFunctionRecursionConfig.
  • api-change:ssm-sap: Add new attributes to the outputs of GetApplication and GetDatabase APIs.

1.35.0

  • api-change:batch: Improvements of integration between AWS Batch and EC2.
  • api-change:inspector2: Update the correct format of key and values for resource tags
  • api-change:quicksight: Amazon QuickSight launches Customer Managed Key (CMK) encryption for Data Source metadata
  • api-change:sagemaker: Introduce Endpoint and EndpointConfig Arns in sagemaker:ListPipelineExecutionSteps API response
  • api-change:sesv2: Marking use case description field of account details as deprecated.
  • feature:signing: Adds internal support for the new 'auth' trait to allow a priority list of auth types for a service or operation.

1.34.162

  • api-change:docdb: This release adds Global Cluster Failover capability which enables you to change your global cluster's primary AWS region, the region that serves writes, during a regional outage. Performing a failover action preserves your Global Cluster setup.
  • api-change:ecs: This release introduces a new ContainerDefinition configuration to support the customer-managed keys for ECS container restart feature.
  • api-change:iam: Make the LastUsedDate field in the GetAccessKeyLastUsed response optional. This may break customers who only call the API for access keys with a valid LastUsedDate. This fixes a deserialization issue for access keys without a LastUsedDate, because the field was marked as required but could be null.
  • api-change:s3: Amazon Simple Storage Service / Features : Adds support for pagination in the S3 ListBuckets API.

1.34.161

  • api-change:codebuild: AWS CodeBuild now supports using Secrets Manager to store git credentials and using multiple source credentials in a single project.

1.34.160

  • api-change:amplify: Add a new field "cacheConfig" that enables users to configure the CDN cache settings for an App
  • api-change:appstream: This release includes following new APIs: CreateThemeForStack, DescribeThemeForStack, UpdateThemeForStack, DeleteThemeForStack to support custom branding programmatically.
  • api-change:fis: This release adds support for additional error information on experiment failure. It adds the error code, location, and account id on relevant failures to the GetExperiment and ListExperiment API responses.
  • api-change:glue: Add AttributesToGet parameter support for Glue GetTables
  • api-change:neptune-graph: Amazon Neptune Analytics provides a new option for customers to load data into a graph using the RDF (Resource Description Framework) NTRIPLES format. When loading NTRIPLES files, use the value convertToIri for the blankNodeHandling parameter.
Commits
  • 8b536a3 Merge branch 'release-1.35.1'
  • e6c5c15 Bumping version to 1.35.1
  • 1d51814 Update endpoints model
  • a5f2f2a Update to latest models
  • 53abee4 Merge pull request #3196 from tim-finnigan/update-waiter-description
  • e0f04ab Merge branch 'develop' into update-waiter-description
  • 98899c0 Merge branch 'release-1.35.0' into develop
  • 756df07 Bumping version to 1.35.0
  • d780ee8 Update endpoints model
  • d8cce8e Update to latest models
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the dependencies group with 3 updates: [sigstore](https://github.com/sigstore/sigstore-python), [boto3](https://github.com/boto/boto3) and [botocore](https://github.com/boto/botocore).


Updates `sigstore` from 3.1.0 to 3.2.0
- [Release notes](https://github.com/sigstore/sigstore-python/releases)
- [Changelog](https://github.com/sigstore/sigstore-python/blob/main/CHANGELOG.md)
- [Commits](sigstore/sigstore-python@v3.1.0...v3.2.0)

Updates `boto3` from 1.34.159 to 1.35.1
- [Release notes](https://github.com/boto/boto3/releases)
- [Commits](boto/boto3@1.34.159...1.35.1)

Updates `botocore` from 1.34.159 to 1.35.1
- [Changelog](https://github.com/boto/botocore/blob/develop/CHANGELOG.rst)
- [Commits](boto/botocore@1.34.159...1.35.1)

---
updated-dependencies:
- dependency-name: sigstore
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: boto3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: botocore
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Aug 19, 2024
@jku jku merged commit de219a4 into main Aug 20, 2024
17 checks passed
@dependabot dependabot bot deleted the dependabot/pip/dependencies-b374673339 branch August 20, 2024 06:48
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file python Pull requests that update Python code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant