Merge from aws/aws-sam-cli/develop

Author: aws-sam-cli-bot

.github/workflows/automated-updates-to-sam-cli.yml

@@ -24,13 +24,13 @@ jobs:
           fi
 
       - name: Checkout App Templates
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           repository: aws/aws-sam-cli-app-templates
           path: aws-sam-cli-app-templates
 
       - name: Checkout SAM CLI
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           repository: aws/aws-sam-cli
           path: aws-sam-cli
@@ -79,15 +79,15 @@ jobs:
           fi
 
       - name: Checkout SAM
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           repository: aws/serverless-application-model
           path: serverless-application-model
           ref: main
           fetch-depth: 0
 
       - name: Checkout SAM CLI
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           repository: aws/aws-sam-cli
           path: aws-sam-cli
@@ -148,15 +148,15 @@ jobs:
           fi
 
       - name: Checkout Lambda Builders
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           repository: aws/aws-lambda-builders
           path: aws-lambda-builders
           ref: main
           fetch-depth: 0
 
       - name: Checkout SAM CLI
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           repository: aws/aws-sam-cli
           path: aws-sam-cli

.github/workflows/build.yml

@@ -64,7 +64,7 @@ jobs:
         mkdir "D:\\Temp"
         echo "TEMP=D:\\Temp" >> $env:GITHUB_ENV  
       if: ${{ matrix.os == 'windows-latest' }}
-    - uses: actions/checkout@v6
+    - uses: actions/checkout@v7
     - uses: astral-sh/setup-uv@08807647e7069bb48b6ef5acd8ec9567f424441b # v8.1.0
       with:
         python-version: ${{ matrix.python }}
@@ -82,7 +82,7 @@ jobs:
       contents: read
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - uses: astral-sh/setup-uv@08807647e7069bb48b6ef5acd8ec9567f424441b # v8.1.0
         with:
           python-version: "3.11"
@@ -152,7 +152,7 @@ jobs:
             tests_config:
               name: "durable-functions"
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - name: Set TEMP to D:/Temp
         run: |
           mkdir "D:\\Temp"
@@ -241,7 +241,7 @@ jobs:
             params: "-n 4 tests/smoke tests/functional"
             env_vars: "fourth-quarter"
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - name: Set TEMP to D:/Temp
         run: |
           mkdir "D:\\Temp"
@@ -273,7 +273,7 @@ jobs:
           - ubuntu-latest
           - windows-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - name: Set TEMP to D:/Temp
         run: |
           mkdir "D:\\Temp"

.github/workflows/codeql.yml

@@ -42,7 +42,7 @@ jobs:
 
     steps:
     - name: Checkout repository
-      uses: actions/checkout@v6
+      uses: actions/checkout@v7
 
     # Initializes the CodeQL tools for scanning.
     - name: Initialize CodeQL

.github/workflows/integration-tests.yml

@@ -114,7 +114,7 @@ jobs:
           fi
 
       - name: Checkout code
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           ref: ${{ (env.TEST_TYPE == 'nightly-release' && github.event.action == 'published') && 'nightly-builds' || (github.event_name == 'schedule' && 'develop' || github.ref) }}
 
@@ -243,7 +243,7 @@ jobs:
           echo "SAM_CLI_DEV=" >> $GITHUB_ENV
 
       - name: Configure AWS credentials via OIDC
-        uses: aws-actions/configure-aws-credentials@d979d5b3a71173a29b74b5b88418bfda9437d885 # v6
+        uses: aws-actions/configure-aws-credentials@254c19bd240aabef8777f48595e9d2d7b972184b # v6
         with:
           role-to-assume: ${{ secrets.OIDC_ROLE_ARN }}
           aws-region: us-east-1
@@ -451,14 +451,14 @@ jobs:
 
       - name: Re-authenticate with OIDC for cleanup
         if: always() && env.SCRIPT_PY != ''
-        uses: aws-actions/configure-aws-credentials@d979d5b3a71173a29b74b5b88418bfda9437d885 # v6
+        uses: aws-actions/configure-aws-credentials@254c19bd240aabef8777f48595e9d2d7b972184b # v6
         with:
           role-to-assume: ${{ secrets.OIDC_ROLE_ARN }}
           aws-region: us-east-1
 
       - name: Assume test reporting role
         if: always() && env.SCRIPT_PY != ''
-        uses: aws-actions/configure-aws-credentials@d979d5b3a71173a29b74b5b88418bfda9437d885 # v6
+        uses: aws-actions/configure-aws-credentials@254c19bd240aabef8777f48595e9d2d7b972184b # v6
         with:
           role-to-assume: ${{ secrets.TESTREPORTING_ARN }}
           aws-region: us-east-1

.github/workflows/sync-to-mirror-repo.yml

@@ -18,7 +18,7 @@ jobs:
     if: github.repository_owner == 'aws' && github.event.pull_request.head.repo.full_name == github.repository
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           ref: ${{ github.head_ref }}
           token: ${{ secrets.GITHUB_TOKEN }}
@@ -42,7 +42,7 @@ jobs:
     if: github.repository_owner == 'aws' && github.event.pull_request.head.repo.full_name != github.repository
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - uses: actions/setup-python@v6
         with:
           python-version: "3.11"

.github/workflows/update-reproducibles.yml

@@ -19,7 +19,7 @@ jobs:
     strategy:
       fail-fast: false
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - name: Make installer script executable
         run: chmod +x ./installer/pyinstaller/build-linux.sh
       - name: Build PyInstaller in manylinux container
@@ -52,7 +52,7 @@ jobs:
     strategy:
       fail-fast: false
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - uses: actions/setup-python@v6
         with:
           python-version: "3.11"

.github/workflows/validate_pyinstaller.yml

@@ -58,7 +58,8 @@ ln -sf /opt/openssl/lib64 /opt/openssl/lib
 cd ../../
 
 echo "Building zlib"
-curl https://www.zlib.net/zlib-${zlib_version}.tar.gz --output zlib.tar.gz
+curl -fL "https://www.zlib.net/zlib-${zlib_version}.tar.gz" --output zlib.tar.gz || \
+    curl -fL "https://github.com/madler/zlib/releases/download/v${zlib_version}/zlib-${zlib_version}.tar.gz" --output zlib.tar.gz
 tar xvf zlib.tar.gz
 cd zlib-${zlib_version}
 ./configure && make -j8 && make -j8 install

installer/pyinstaller/build-linux.sh

@@ -35,12 +35,12 @@ dependencies = [
     "chevron~=0.12",
     "click==8.1.8",
     "Flask<3.2",
-    "boto3[crt]==1.43.7",
+    "boto3[crt]==1.43.38",
     "jmespath~=1.1.0",
     "ruamel_yaml~=0.19.1",
     "PyYAML~=6.0",
     "cookiecutter>=2.6,<2.8",
-    "aws-sam-translator==1.110.0",
+    "aws-sam-translator==1.111.0",
     # docker minor version updates can include breaking changes. Auto update micro version only.
     "docker~=7.1.0",
     "dateparser~=1.3",
@@ -56,7 +56,7 @@ dependencies = [
     # regex is not a direct dependency of SAM CLI, exclude version 2021.10.8 due to not working on M1 Mac
     "regex!=2021.10.8",
     "tzlocal==5.3.1",
-    "cfn-lint>=1.51.3,<1.52",
+    "cfn-lint>=1.51.3,<1.53",
     "boto3-stubs[apigateway,cloudformation,ecr,iam,lambda,s3,schemas,secretsmanager,signer,stepfunctions,sts,xray,sqs,kinesis]>=1.41.0",
     "python-dotenv>=1.0,<1.3",
 ]
@@ -74,25 +74,25 @@ dev = [
     "types-PyYAML==6.0.12.20260518",
     "types-chevron==0.14.2.20260408",
     "types-psutil==7.2.2.20260518",
-    "types-setuptools==82.0.0.20260508",
+    "types-setuptools==82.0.0.20260518",
     "types-Pygments==2.20.0.20260518",
     "types-colorama==0.4.15.20260508",
-    "types-dateparser==1.4.0.20260508",
+    "types-dateparser==1.4.1.20260617",
     "types-docutils==0.22.3.20260518",
     "types-jsonschema==4.26.0.20260508",
     "types-pyOpenSSL==24.1.0.20240722",
-    "types-requests==2.33.0.20260513",
+    "types-requests==2.33.0.20260518",
     "types-urllib3==1.26.25.14",
     "pytest==9.0.3",
     "parameterized==0.9.0",
     "pytest-xdist==3.8.0",
     "pytest-forked==1.6.0",
     "pytest-timeout==2.4.0",
-    "pytest-rerunfailures==16.2",
+    "pytest-rerunfailures==16.3",
     "pytest-metadata==3.1.1",
     "pytest-json-report-wip==1.5.1",
     "filelock==3.29.0",
-    "black==26.5.0",
+    "black==26.5.1",
     "psutil==7.2.2",
     "chardet<6",
 ]