Skip to content

chore(deps): bump the dependencies group across 1 directory with 8 updates#11

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/pip/dependencies-3bf7ffac3d
Open

chore(deps): bump the dependencies group across 1 directory with 8 updates#11
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/pip/dependencies-3bf7ffac3d

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 4, 2026

Updates the requirements on opensearch-py, boto3, requests-aws4auth, streamlit, aws-cdk-lib, constructs, pandas and pyarrow to permit the latest version.
Updates opensearch-py from 3.1.0 to 3.2.0

Release notes

Sourced from opensearch-py's releases.

v3.2.0

What's Changed

New Contributors

Full Changelog: opensearch-project/opensearch-py@v3.1.0...v3.2.0

Changelog

Sourced from opensearch-py's changelog.

[3.2.0]

Added

  • Add dependency on opensearch-protobufs to provide client libraries for gRPC transport (#977)
  • Add ML Commons plugin documentation (#992)

Updated APIs

Changed

Deprecated

Removed

Fixed

  • Fixed AWSV4Signer.sign() not passing custom headers to AWSRequest, causing x-amz-* headers to be excluded from SigV4 signature (#1034)
  • Fixed AWSV4Signer.sign() not setting X-Amz-Content-SHA256 before SigV4Auth.add_auth(), causing the header to be absent from SignedHeaders in the Authorization header. The fix uses a guarded assignment that preserves caller-provided values (e.g., UNSIGNED-PAYLOAD, precomputed hashes) (#1038, #1039)
  • Fixed the linkchecker CI step (#987)

Security

Dependencies

  • Bump pytest-asyncio from <=1.2.0 to <=1.3.0 (#984)
  • Bump actions/checkout from 5 to 6 (#986)
  • Bump codecov/codecov-action from 4 to 5 (#985)
  • Bump actions/upload-artifact from 5 to 6 (#989)
  • Bump actions/download-artifact from 6 to 7 (#988)
  • Bump peter-evans/create-pull-request from 7 to 8 (#990)
  • Bump opensearch-protobufs from 0.19.0 to 1.2.0 (#1000)
Commits
  • 8991792 fix(signer): Include X-Amz-Content-SHA256 in SignedHeaders (#1038) (#1039)
  • d8a8c57 Fix AWSV4Signer.sign() not passing headers to AWSRequest (#1035)
  • 6551595 Bump opensearch protobufs - 1.2.0. (#1000)
  • 94ae310 Fix CI failures due to API spec updates (#1007)
  • 1ce5b46 fix(docs): use keyword arguments in security API examples (#1004)
  • 9b6d240 Bump peter-evans/create-pull-request from 7 to 8 (#990)
  • 02c5dcc Bump actions/download-artifact from 6 to 7 (#988)
  • fa8a862 Bump actions/upload-artifact from 5 to 6 (#989)
  • f5ef694 Updated opensearch-py to reflect the latest OpenSearch API spec (2026-01-22) ...
  • 10ab792 ci: fix mypy type ignore for untyped decorator in tests (#993)
  • Additional commits viewable in compare view

Updates boto3 from 1.42.84 to 1.43.3

Commits
  • bea693c Merge branch 'release-1.43.3'
  • 1f57fdc Bumping version to 1.43.3
  • ba69bd2 Add changelog entries from botocore
  • 7dc336e Merge branch 'release-1.43.2'
  • e240af8 Merge branch 'release-1.43.2' into develop
  • 99fd421 Bumping version to 1.43.2
  • 80f4db8 Add changelog entries from botocore
  • be6bdf3 Bump pytest from 8.1.1 to 9.0.3 (#4782)
  • 753bcab Merge branch 'release-1.43.1'
  • 09f56f4 Merge branch 'release-1.43.1' into develop
  • Additional commits viewable in compare view

Updates requests-aws4auth from 1.3.1 to 1.3.2

Release notes

Sourced from requests-aws4auth's releases.

v1.3.2

What's Changed

Full Changelog: tedder/requests-aws4auth@v1.3.1...v1.3.2

Changelog

Sourced from requests-aws4auth's changelog.

1.3.2 (2026-05-01)

Changes

Commits
  • 3dda9dc history and version
  • c9cd06a update py versions; use session token for live tests
  • 6e58b3e fix additional deprecation warnings for UTC; ensure pre-py311 compat
  • b7acfe8 Fix Deprecated datetime.datetime.utcnow()
  • 89399ca update release instructions
  • See full diff in compare view

Updates streamlit from 1.56.0 to 1.57.0

Release notes

Sourced from streamlit's releases.

1.57.0

What's Changed

Breaking Changes 🛠

New Features 🎉

Bug Fixes 🐛

Other Changes

New Contributors

Full Changelog: streamlit/streamlit@1.56.0...1.57.0

Commits

Updates aws-cdk-lib from 2.248.0 to 2.252.0

Release notes

Sourced from aws-cdk-lib's releases.

v2.252.0

Features

Bug Fixes


Alpha modules (2.252.0-alpha.0)

v2.251.0

⚠ BREAKING CHANGES

  • ** L1 resources are automatically generated from public CloudFormation Resource Schemas. They are built to closely reflect the real state of CloudFormation. Sometimes these updates can contain changes that are incompatible with previous types, but more accurately reflect reality. In this release we have changed:

aws-elasticloadbalancing: AWS::ElasticLoadBalancing::LoadBalancer: SourceSecurityGroup attribute removed. aws-elasticloadbalancing: AWS::ElasticLoadBalancing::LoadBalancer: PolicyItem type removed. aws-elasticloadbalancing: AWS::ElasticLoadBalancing::LoadBalancer: SourceSecurityGroup type removed.

Features

  • update L1 CloudFormation resource definitions (#37684) (9e6c2ef)
  • lambda: add ruby 4.0 runtime (#37650) (04d4337)
  • update L1 CloudFormation resource definitions (#37644) (e64f943)
  • core: Validations class is the new way to add validation plugins to CDK Apps (#37611) (95696b4), closes #37613
  • core: graduate policyValidationBeta1 interfaces to policyValidation (#37613) (8c613cf)
  • ecs: support for service connect access log configuration (#36067) (5ad1c06)
  • route53: accelerated recovery for public hosted zone (#36358) (f1b7b03)
  • synthetics: support canary group (#35689) (20ccd31), closes #34043

Bug Fixes

  • core: Stage.policyValidationBeta1 is mutable (#37612) (3c1faf1)
  • core: construct creation stack traces are implicit (#37643) (5635c20)
  • core: synth output is not valid YAML when using policy validation (#37597) (927dd60), closes #25331
  • core: token stack traces expensively clutter --debug mode (#37642) (498c546)
  • core: tree metadata does not contain logical ID (#37630) (284ab23)
  • ec2: fixing vpc endpoint for eu-isoe-west-1 region (#37596) (555c930), closes #31690
  • events-targets: make LogGroupTargetInput extend RuleTargetInput for JSII compatibility (#37451) (46dbc7a), closes #36733
  • lambda: add Token.isUnresolved checks to provisioned poller config validation (#37197) (667ed30)
  • stepfunctions-tasks: warn when CallAwsServiceCrossRegion endpoint is resolved from state input (#37646) (9fdf590)

Alpha modules (2.251.0-alpha.0)

Features

... (truncated)

Changelog

Sourced from aws-cdk-lib's changelog.

Changelog

All notable changes to this project will be documented in this file. See standard-version for commit guidelines.

2.252.0-alpha.0 (2026-04-29)

2.251.0-alpha.0 (2026-04-24)

Features

  • bedrock-agentcore-alpha: add L2 constructs for policy and policy engine (#37238) (1e89e7e)
  • bedrock-agentcore-alpha: add observability configuration for Runtime (#36689) (34b43aa), closes #36596
  • bedrock-agentcore-alpha: support No Authorization for AgentCore Gateway (#36610) (f20bd8e)
  • dsql-alpha: initial L2 construct (#34599) (be1a458), closes #34593

2.250.0-alpha.0 (2026-04-14)

2.249.0-alpha.0 (2026-04-10)

2.248.0-alpha.0 (2026-04-02)

2.247.0-alpha.0 (2026-04-02)

Features

2.246.0-alpha.0 (2026-03-31)

2.245.0-alpha.0 (2026-03-27)

Features

  • s3tables-alpha: add support for partition spec, sort order, and table properties (#36811) (2696cd1)
  • s3tables-alpha: add metrics configuration support for TableBucket (#37275) (e8786f5)
  • s3tables-alpha: implement ITaggableV2 on TableBucket and Table L2 constructs (#37277) (69c8944), closes #33054

2.244.0-alpha.0 (2026-03-19)

Bug Fixes

  • kinesisanalytics-flink-alpha: mark deprecated flink runtimes as deprecated (#37155) (0a89447)

2.243.0-alpha.0 (2026-03-11)

2.242.0-alpha.0 (2026-03-10)

... (truncated)

Commits
  • a58510c chore(release): 2.252.0 (#37727)
  • 9e000ff chore: trigger build
  • 323844a chore: update analytics metadata blueprints
  • 9f70a52 chore(release): 2.252.0
  • 6ba0598 fix(aws-cdk-lib): cannot be used as a bundledDependency (#37726)
  • d592a96 feat(core): add Box API for deferred values with accurate stack traces (#37604)
  • 0616322 refactor(lambda-nodejs): unify code paths between local & Docker bundling (#3...
  • dc5be98 fix(s3): resolve S3 notification removal race condition (#37708)
  • a78ddc5 chore(ci): fix pr-issue-check unable to comment on PRs from forks (#37703)
  • 556f8d3 chore(core): migrate off of Beta1 properties internally (#37711)
  • Additional commits viewable in compare view

Updates constructs to 10.6.0

Release notes

Sourced from constructs's releases.

v10.6.0

10.6.0 (2026-03-23)

Features

  • add stackTraceOverride option to MetadataOptions (#2853) (f1fd286)
Commits

Updates pandas to 3.0.2

Release notes

Sourced from pandas's releases.

pandas 3.0.2

We are pleased to announce the release of pandas 3.0.2. This is a patch release in the 3.0.x series and includes some regression fixes and bug fixes. We recommend that all users of the 3.0.x series upgrade to this version.

See the full whatsnew for a list of all the changes.

Pandas 3.0 supports Python 3.11 and higher. The release can be installed from PyPI:

python -m pip install --upgrade pandas==3.0.*

Or from conda-forge

conda install -c conda-forge pandas=3.0

Please report any issues with the release on the pandas issue tracker.

Thanks to all the contributors who made this release possible.

Commits
  • ab90747 RLS: 3.0.2 (#64934)
  • 6f27013 Backport PR #64931 on branch 3.0.x (DOC/BLD: temporary disable upload of docs...
  • 48ddc60 Backport PR #64664 on branch 3.0.x (BUG: DataFrame.sum() crashes on empty Dat...
  • 8774488 [backport 3.0.x] PERF: fix slow python loop in validation for ArrowStringArra...
  • 33af6cc Backport PR #64133 on branch 3.0.x (BUG: str.find returns byte offset instead...
  • 4ef49d8 [backport 3.0.x] BUG: fix convert_dtypes dropping values from sliced mixed-dt...
  • 0668f34 [backport 3.0.x] BUG: Fix HDFStore.put with StringDtype columns and compressi...
  • 23f2f44 [backport 3.0.x] BUG: Suppress unnecessary RuntimeWarning in to_datetime with...
  • 83ba804 Backport PR #64886: BUG: Compute Variance of Complex Numbers Correctly (#64892)
  • bb5ca1a Backport PR #64386 on branch 3.0.x (BUG: fix sort_index AssertionError with R...
  • Additional commits viewable in compare view

Updates pyarrow to 24.0.0

Release notes

Sourced from pyarrow's releases.

Apache Arrow 24.0.0

Release Notes URL: https://arrow.apache.org/release/24.0.0.html

Commits
  • 31b4b6c MINOR: [Release] Update versions for 24.0.0
  • 06dbc17 MINOR: [Release] Update .deb/.rpm changelogs for 24.0.0
  • a021d80 MINOR: [Release] Update CHANGELOG.md for 24.0.0
  • 2d6b12c GH-49716: [C++] FixedShapeTensorType::Deserialize should strictly validate se...
  • a74cb6a GH-49697: [C++][CI] Check IPC file body bounds are in sync with decoder outco...
  • 871a0c6 GH-49676: [Python][Packaging] Fix gRPC docker image layer being too big for h...
  • f9203b3 GH-49586: [C++][CI] StructToStructSubset test failure with libc++ 22.1.1 (#49...
  • fe298b4 GH-49628: [Python][Interchange protocol] Suppress warnings for pandas 4.0.0 a...
  • 1f94910 GH-49252: [GLib] Deprecate Feather features (#49673)
  • 5ba5c3c GH-49671: [CI][Docs] Don't run jobs for push by Dependabot (#49672)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…dates

Updates the requirements on [opensearch-py](https://github.com/opensearch-project/opensearch-py), [boto3](https://github.com/boto/boto3), [requests-aws4auth](https://github.com/tedder/requests-aws4auth), [streamlit](https://github.com/streamlit/streamlit), [aws-cdk-lib](https://github.com/aws/aws-cdk), [constructs](https://github.com/aws/constructs), [pandas](https://github.com/pandas-dev/pandas) and [pyarrow](https://github.com/apache/arrow) to permit the latest version.

Updates `opensearch-py` from 3.1.0 to 3.2.0
- [Release notes](https://github.com/opensearch-project/opensearch-py/releases)
- [Changelog](https://github.com/opensearch-project/opensearch-py/blob/main/CHANGELOG.md)
- [Commits](opensearch-project/opensearch-py@v3.1.0...v3.2.0)

Updates `boto3` from 1.42.84 to 1.43.3
- [Release notes](https://github.com/boto/boto3/releases)
- [Commits](boto/boto3@1.42.84...1.43.3)

Updates `requests-aws4auth` from 1.3.1 to 1.3.2
- [Release notes](https://github.com/tedder/requests-aws4auth/releases)
- [Changelog](https://github.com/tedder/requests-aws4auth/blob/main/HISTORY.md)
- [Commits](tedder/requests-aws4auth@v1.3.1...v1.3.2)

Updates `streamlit` from 1.56.0 to 1.57.0
- [Release notes](https://github.com/streamlit/streamlit/releases)
- [Commits](streamlit/streamlit@1.56.0...1.57.0)

Updates `aws-cdk-lib` from 2.248.0 to 2.252.0
- [Release notes](https://github.com/aws/aws-cdk/releases)
- [Changelog](https://github.com/aws/aws-cdk/blob/main/CHANGELOG.v2.alpha.md)
- [Commits](aws/aws-cdk@v2.248.0...v2.252.0)

Updates `constructs` to 10.6.0
- [Release notes](https://github.com/aws/constructs/releases)
- [Commits](aws/constructs@v10.0.0...v10.6.0)

Updates `pandas` to 3.0.2
- [Release notes](https://github.com/pandas-dev/pandas/releases)
- [Commits](pandas-dev/pandas@v2.0.0...v3.0.2)

Updates `pyarrow` to 24.0.0
- [Release notes](https://github.com/apache/arrow/releases)
- [Commits](apache/arrow@go/v14.0.0...apache-arrow-24.0.0)

---
updated-dependencies:
- dependency-name: opensearch-py
  dependency-version: 3.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: boto3
  dependency-version: 1.43.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: requests-aws4auth
  dependency-version: 1.3.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: streamlit
  dependency-version: 1.57.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: aws-cdk-lib
  dependency-version: 2.252.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: constructs
  dependency-version: 10.6.0
  dependency-type: direct:production
  dependency-group: dependencies
- dependency-name: pandas
  dependency-version: 3.0.2
  dependency-type: direct:production
  dependency-group: dependencies
- dependency-name: pyarrow
  dependency-version: 24.0.0
  dependency-type: direct:production
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot Bot commented on behalf of github May 4, 2026

Labels

The following labels could not be found: python. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants