Skip to content

build(deps): bump the pip group with 5 updates#525

Merged
github-actions[bot] merged 1 commit intomainfrom
dependabot/pip/pip-e1eb372b25
Feb 1, 2026
Merged

build(deps): bump the pip group with 5 updates#525
github-actions[bot] merged 1 commit intomainfrom
dependabot/pip/pip-e1eb372b25

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Feb 1, 2026

Updates the requirements on boto3, rich, moto[ec2], prek and pyright to permit the latest version.
Updates boto3 from 1.42.19 to 1.42.39

Commits
  • fd93dbb Merge branch 'release-1.42.39'
  • 0a13ecc Bumping version to 1.42.39
  • e6b1f89 Add changelog entries from botocore
  • f76522e Merge branch 'release-1.42.38'
  • c7ef3d3 Merge branch 'release-1.42.38' into develop
  • 24e7223 Bumping version to 1.42.38
  • 0b29f3a Add changelog entries from botocore
  • 68bd84f Update wheel to 0.46.3 (#4713)
  • bae9979 Merge branch 'release-1.42.37'
  • be2fdc5 Merge branch 'release-1.42.37' into develop
  • Additional commits viewable in compare view

Updates rich from 14.2.0 to 14.3.1

Release notes

Sourced from rich's releases.

The Nerdy Fix release

Fixed issue with characters outside of unicode range reporting 0 cell size

[14.3.1] - 2026-01-24

Fixed

The more emojis release

Rich now has support for multi-codepoint emojis. There have also been some Markdown improvements, and a number of fixes. See the release notes below for details.

[14.3.0] - 2026-01-24

Fixed

Added

Changed

Changelog

Sourced from rich's changelog.

[14.3.1] - 2026-01-24

Fixed

[14.3.0] - 2026-01-24

Fixed

Added

Changed

Commits

Updates moto[ec2] from 5.1.19 to 5.1.20

Changelog

Sourced from moto[ec2]'s changelog.

5.1.20

Docker Digest for 5.1.20: sha256:d2711655244df58411ce0be34236c95736390db17886370d21e12ae2b1e36f79

New Methods:
    * EC2:
        * create_subnet_cidr_reservation()
        * delete_subnet_cidr_reservation()
        * get_instance_uefi_data() (Just a stub, no actual data is returned)
        * get_subnet_cidr_reservations()

* IOT:
    * list_thing_principals_v2()

    

  • 

    ResourceGroups:
    

      

    • cancel_tag_sync_task()
      • 

    • get_tag_sync_task()
      • 

    • list_tag_sync_tasks()
      • 

    • start_tag_sync_task()
      • 

    

    • 

  • 

    Route53Resolver:
    

      

    • get_resolver_dnssec_config()
      • 

    • list_resolver_dnssec_configs()
      • 

    • update_resolver_dnssec_config()
      • 

    

    • 

  • 

    S3Control:
    

      

    • create_multi_region_access_point()
      • 

    • delete_multi_region_access_point()
      • 

    • delete_storage_lens_configuration()
      • 

    • describe_multi_region_access_point_operation()
      • 

    • get_multi_region_access_point()
      • 

    • get_multi_region_access_point_policy()
      • 

    • get_multi_region_access_point_policy_status()
      • 

    • list_multi_region_access_points()
      • 

    • put_multi_region_access_point_policy()
      • 

    

    • 

  • 

    SecurityHub:
    

      

    • create_members()
      • 

    • get_members()
      • 

    • list_members()
      






Miscellaneous:
* ACM: import_certificate() now supports all key types, RSA and EC
* APIGateway: update_rest_api() now supports /endpointConfiguration/types
* Autoscaling: update_auto_scaling_group() now supports the MixedInstancesPolicy-parameter
* Batch: register_job_definition() now supports the eksProperties-parameter
* DMS: create_replication_task() now supports the Tags-parameter
* Organizations: list_policies() now support pagination
* Organizations now supports Resource Control Policy
* Redshift: describe_clusters() now supports the TagKeys-parameter

... (truncated)

Commits

Updates prek to 0.3.1

Release notes

Sourced from prek's releases.

0.3.1

Release Notes

Released on 2026-01-31.

Enhancements

  • Add language: swift support (#1463)
  • Add language: haskell support (#1484)
  • Extract go version constraint from go.mod (#1457)
  • Warn when config file exists but fails to parse (#1487)
  • Add GitHub artifact attestations to release and build-docker workflow (#1494, #1497)
  • Allow GIT_CONFIG_PARAMETERS for private repository authentication (#1472)
  • Show progress bar when running builtin hooks (#1504)

Bug fixes

  • Cap ARG_MAX at 1<<19 for safety (#1506)
  • Don't check Python executable path in health check (#1496)

Documentation

  • Include CocoIndex as a project using prek (#1477)
  • Add commands for artifact verification using GitHub Attestations (#1500)

Contributors

Install prek 0.3.1

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://github.com/j178/prek/releases/download/v0.3.1/prek-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://github.com/j178/prek/releases/download/v0.3.1/prek-installer.ps1 | iex"

Install prebuilt binaries via Homebrew

... (truncated)

Changelog

Sourced from prek's changelog.

0.3.1

Released on 2026-01-31.

Enhancements

  • Add language: swift support (#1463)
  • Add language: haskell support (#1484)
  • Extract go version constraint from go.mod (#1457)
  • Warn when config file exists but fails to parse (#1487)
  • Add GitHub artifact attestations to release and build-docker workflow (#1494, #1497)
  • Allow GIT_CONFIG_PARAMETERS for private repository authentication (#1472)
  • Show progress bar when running builtin hooks (#1504)

Bug fixes

  • Cap ARG_MAX at 1<<19 for safety (#1506)
  • Don't check Python executable path in health check (#1496)

Documentation

  • Include CocoIndex as a project using prek (#1477)
  • Add commands for artifact verification using GitHub Attestations (#1500)

Contributors

0.3.0

Released on 2026-01-22.

Highlights

  • prek cache gc (also available via prek gc for pre-commit compatibility) is finally here! You can now run prek cache gc to clean up unused repos, hook envs and tool versions from prek cache.
  • language: bun is now supported, making it possible to write and run hooks with Bun.

Enhancements

  • Implement prek cache gc (#1410)

    • Bootstrap tracking configs from workspace cache (#1417)
    • Show total size prek cache gc removed (#1418)
    • Show accurate repo and hook details in prek cache gc -v (#1420)

... (truncated)

Commits

Updates pyright from 1.1.407 to 1.1.408

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
build(deps): bump the pip group with 5 updates
c043b3e 
Updates the requirements on [boto3](https://github.com/boto/boto3), [rich](https://github.com/Textualize/rich), [moto[ec2]](https://github.com/getmoto/moto), [prek](https://github.com/j178/prek) and [pyright](https://github.com/RobertCraigie/pyright-python) to permit the latest version.

Updates `boto3` from 1.42.19 to 1.42.39
- [Release notes](https://github.com/boto/boto3/releases)
- [Commits](boto/boto3@1.42.19...1.42.39)

Updates `rich` from 14.2.0 to 14.3.1
- [Release notes](https://github.com/Textualize/rich/releases)
- [Changelog](https://github.com/Textualize/rich/blob/master/CHANGELOG.md)
- [Commits](Textualize/rich@v14.2.0...v14.3.1)

Updates `moto[ec2]` from 5.1.19 to 5.1.20
- [Release notes](https://github.com/getmoto/moto/releases)
- [Changelog](https://github.com/getmoto/moto/blob/master/CHANGELOG.md)
- [Commits](getmoto/moto@5.1.19...5.1.20)

Updates `prek` to 0.3.1
- [Release notes](https://github.com/j178/prek/releases)
- [Changelog](https://github.com/j178/prek/blob/master/CHANGELOG.md)
- [Commits](j178/prek@v0.2.11...v0.3.1)

Updates `pyright` from 1.1.407 to 1.1.408
- [Release notes](https://github.com/RobertCraigie/pyright-python/releases)
- [Commits](RobertCraigie/pyright-python@v1.1.407...v1.1.408)

---
updated-dependencies:
- dependency-name: boto3
  dependency-version: 1.42.39
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: pip
- dependency-name: rich
  dependency-version: 14.3.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pip
- dependency-name: moto[ec2]
  dependency-version: 5.1.20
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: pip
- dependency-name: prek
  dependency-version: 0.3.1
  dependency-type: direct:development
  dependency-group: pip
- dependency-name: pyright
  dependency-version: 1.1.408
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: pip
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Feb 1, 2026
@github-actions github-actions bot merged commit 93b1ef2 into main Feb 1, 2026
2 of 3 checks passed
@github-actions github-actions bot deleted the dependabot/pip/pip-e1eb372b25 branch February 1, 2026 08:03
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file maintenance python Pull requests that update Python code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants