Skip to content

deps(deps): bump the aws group with 3 updates - #39

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/aws-150b054a62
Open

deps(deps): bump the aws group with 3 updates#39
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/aws-150b054a62

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 22, 2026

Copy link
Copy Markdown

Updates the requirements on boto3, aws-lambda-powertools and boto3-stubs to permit the latest version.
Updates boto3 to 1.43.34

Commits

Updates aws-lambda-powertools to 3.29.0

Release notes

Sourced from aws-lambda-powertools's releases.

v3.29.0

Summary

We're thrilled to announce native async resolution for the Event Handler. Write async def route handlers, call await app.resolve_async(event, context), and mix sync/async middlewares. Everything runs natively on the event loop.

We also fixed OpenAPI schema generation for Pydantic @computed_field, a deadlock when sync middlewares raised before calling next(), and ALB returning 422 when response body is None.

A huge thanks to @​hirenkumar-n-dholariya, @​amrabed, and @​catarinacps for their contributions!

Async Event Handler with resolve_async()

Docs

You can now define async route handlers and resolve them without blocking the event loop.

Even though the Lambda handler itself is sync, you can use asyncio.run(app.resolve_async(event, context)) to fan out multiple I/O calls concurrently with asyncio.gather or call async libraries directly.

import asyncio
from aws_lambda_powertools.event_handler import APIGatewayHttpResolver
from aws_lambda_powertools.utilities.typing import LambdaContext
app = APIGatewayHttpResolver()
async def get_orders(user_id: str) -> list:
...
async def get_profile(user_id: str) -> dict:
...
@​app.get("/dashboard/<user_id>")
async def get_dashboard(user_id: str):
orders, profile = await asyncio.gather(
get_orders(user_id),
get_profile(user_id),
)
return {"orders": orders, "profile": profile}
def lambda_handler(event: dict, context: LambdaContext):
return asyncio.run(app.resolve_async(event, context))

Sync and async middlewares work together seamlessly. Sync middlewares are bridged to the event loop in a background thread, so you don't need to rewrite existing middleware to adopt async handlers.

OpenAPI computed_field support

Docs

... (truncated)

Changelog

Sourced from aws-lambda-powertools's changelog.

[v3.29.0] - 2026-05-04

Bug Fixes

  • event_handler: prevent deadlock when async middleware raises before calling next() (#8196)

Maintenance

  • version bump

[v3.28.0] - 2026-04-14

Bug Fixes

  • data_class: merge querystring parameters in ALB/APIGW classes (#8154)
  • event_handler: read swagger files with UTF-8 encoding (#8131)

Code Refactoring

  • event_handler: refactoring encoder file (#8126)
  • event_handler: refactoring proxy events (#8125)
  • event_handler: refactoring params to reduce code (#8124)
  • event_handler: extract OpenAPI schema generation from Route class (#8098)
  • event_handlers: remove unnecessary init methods (#8127)

Documentation

  • adding new Lambda features (#7917)
  • add openapi docs (#7939)

Features

  • event_handler: enrich request object (#8153)
  • event_handler: adding status_code OpenAPI field (#8130)
  • event_handler: add Dependency injection with Depends() (#8128)

Maintenance

  • version bump
  • bump dependabot dependencies. (#8152)
  • deps: bump cryptography from 46.0.6 to 46.0.7 (#8132)
  • deps-dev: bump aws-cdk from 2.1117.0 to 2.1118.0 in the aws-cdk group (#8142)
  • deps-dev: bump types-python-dateutil from 2.9.0.20260305 to 2.9.0.20260402 (#8114)
  • deps-dev: bump aws-cdk from 2.1115.0 to 2.1117.0 in the aws-cdk group (#8111)
  • deps-dev: bump boto3-stubs from 1.42.74 to 1.42.84 (#8115)
  • deps-dev: bump types-protobuf from 6.32.1.20260221 to 7.34.1.20260403 (#8117)
  • deps-dev: bump testcontainers from 4.14.1 to 4.14.2 (#8116)
  • deps-dev: bump cfn-lint from 1.46.0 to 1.48.1 (#8113)

... (truncated)

Commits
  • 245ac2d chore: version bump
  • f4644f7 fix(event_handler): prevent deadlock when async middleware raises before call...
  • 53678cf fix(event_handler): fix ALB resolver returns when response body is None (#8194)
  • 5b8ba36 chore: update aws-encryption-sdk allowed versions (#8191)
  • f83e141 chore(deps): update requests requirement from >=2.32.0 to >=2.33.1 in /exampl...
  • 10ffef1 feat(openapi): add compute_field support (#8188)
  • 08c9921 fix(idempotency): resolve tech debt issues with falsy responses and Redis per...
  • 0834363 chore(deps): batch dependency updates (#8184)
  • 1585b66 fix(parser): type hints should reflect primitive types support (#8175)
  • 2e11129 feat(event_handler): adding resolve async public API (#8171)
  • Additional commits viewable in compare view

Updates boto3-stubs to 1.43.34

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Updates the requirements on [boto3](https://github.com/boto/boto3), [aws-lambda-powertools](https://github.com/aws-powertools/powertools-lambda-python) and [boto3-stubs](https://github.com/youtype/mypy_boto3_builder) to permit the latest version.

Updates `boto3` to 1.43.34
- [Release notes](https://github.com/boto/boto3/releases)
- [Commits](boto/boto3@1.35.80...1.43.34)

Updates `aws-lambda-powertools` to 3.29.0
- [Release notes](https://github.com/aws-powertools/powertools-lambda-python/releases)
- [Changelog](https://github.com/aws-powertools/powertools-lambda-python/blob/develop/CHANGELOG.md)
- [Commits](aws-powertools/powertools-lambda-python@v3.3.0...v3.29.0)

Updates `boto3-stubs` to 1.43.34
- [Release notes](https://github.com/youtype/mypy_boto3_builder/releases)
- [Commits](https://github.com/youtype/mypy_boto3_builder/commits)

---
updated-dependencies:
- dependency-name: boto3
  dependency-version: 1.43.34
  dependency-type: direct:production
  dependency-group: aws
- dependency-name: aws-lambda-powertools
  dependency-version: 3.29.0
  dependency-type: direct:production
  dependency-group: aws
- dependency-name: boto3-stubs
  dependency-version: 1.43.34
  dependency-type: direct:development
  dependency-group: aws
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github

dependabot Bot commented on behalf of github Jun 22, 2026

Copy link
Copy Markdown
Author

Labels

The following labels could not be found: dependencies, python. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot @github

dependabot Bot commented on behalf of github Aug 3, 2026

Copy link
Copy Markdown
Author

Dependabot couldn't access the repository. Because of this, Dependabot cannot update this pull request.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants