Skip to content

Upgrade: Bump the dependencies group across 1 directory with 7 updates - #424

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/dependencies-89092d9eb8
Closed

Upgrade: Bump the dependencies group across 1 directory with 7 updates#424
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/dependencies-89092d9eb8

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Mar 1, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the dependencies group with 7 updates in the / directory:

Package From To
boto3 1.42.32 1.42.59
botocore 1.42.32 1.42.59
certifi 2026.1.4 2026.2.25
jmespath 1.0.1 1.1.0
marshmallow 4.2.0 4.2.2
multidict 6.7.0 6.7.1
sentry-sdk 2.50.0 2.53.0

Updates boto3 from 1.42.32 to 1.42.59

Commits
  • cef3033 Merge branch 'release-1.42.59'
  • 463794a Bumping version to 1.42.59
  • 591d881 Add changelog entries from botocore
  • d327a89 Merge branch 'release-1.42.58'
  • 8727558 Merge branch 'release-1.42.58' into develop
  • 14eee00 Bumping version to 1.42.58
  • dbe54fa Add changelog entries from botocore
  • 1536571 Merge branch 'release-1.42.57'
  • 8108f80 Merge branch 'release-1.42.57' into develop
  • 20eb2f4 Bumping version to 1.42.57
  • Additional commits viewable in compare view

Updates botocore from 1.42.32 to 1.42.59

Commits
  • c204bb1 Merge branch 'release-1.42.59'
  • 7e59865 Bumping version to 1.42.59
  • b38a03c Update to latest models
  • 97336ff Merge customizations for ARC Region switch
  • f76046b Merge branch 'release-1.42.58'
  • be2689a Merge branch 'release-1.42.58' into develop
  • 47f8789 Bumping version to 1.42.58
  • 14bc74f Update to latest models
  • 8c0427a Add support for None values in list parsing (#3618)
  • 86d9ec3 Merge branch 'release-1.42.57'
  • Additional commits viewable in compare view

Updates certifi from 2026.1.4 to 2026.2.25

Commits

Updates jmespath from 1.0.1 to 1.1.0

Changelog

Sourced from jmespath's changelog.

1.1.0

  • Fix concurrency issue with cache (pr [#335](https://github.com/jmespath/jmespath.py/issues/335) <https://github.com/jmespath/jmespath.py/pull/335>__)
  • Added support for Python 3.12-3.14 (pr [#331](https://github.com/jmespath/jmespath.py/issues/331) <https://github.com/jmespath/jmespath.py/pull/331>__)
  • Removed support for Python 3.7-3.8 (pr [#335](https://github.com/jmespath/jmespath.py/issues/335) <https://github.com/jmespath/jmespath.py/pull/335>__)
Commits
  • 6ff419a Merge branch 'release-1.1.0'
  • 17e964f Bump version to 1.1.0
  • 5ce13aa Merge branch 'v1.1.0' into develop
  • d8f0457 Revert versions back to current version
  • 8cb3082 1.1.0
  • 6e37991 Update permissions in codeql.yml workflow (#338)
  • 141734d Bring .github settings up-to-date (#336)
  • 07e30cf Merge pull request #337 from nateprewitt/python_changelog
  • 9170711 Add missing changelog entries for Python support
  • cdb9327 Fix file encoding for Windows
  • Additional commits viewable in compare view

Updates marshmallow from 4.2.0 to 4.2.2

Changelog

Sourced from marshmallow's changelog.

4.2.2 (2026-02-04)

Bug fixes:

  • Fix behavior of fields.Contant(None) (:issue:2868). Thanks :user:T90REAL for reporting and emmanuel-ferdman for the fix.

4.2.1 (2026-01-23)

Bug fixes:

  • Fix validation of URLs beginning with uppercare FILE (:issue:2891). Thanks :user:thanhlecongg for reporting and fixing.
Commits

Updates multidict from 6.7.0 to 6.7.1

Release notes

Sourced from multidict's releases.

6.7.1

Bug fixes

  • Fixed slow memory leak caused by identity by adding Py_DECREF to identity value before leaving md_pop_one on success -- by :user:Vizonex.

    Related issues and pull requests on GitHub: #1284.

Changelog

Sourced from multidict's changelog.

6.7.1

(2026-01-25)

Bug fixes

  • Fixed slow memory leak caused by identity by adding Py_DECREF to identity value before leaving md_pop_one on success -- by :user:Vizonex.

    Related issues and pull requests on GitHub: :issue:1284.

Commits

Updates sentry-sdk from 2.50.0 to 2.53.0

Release notes

Sourced from sentry-sdk's releases.

2.53.0

Bug Fixes 🐛

Openai Agents

Other

Documentation 📚

Internal Changes 🔧

Openai Agents

Other

2.52.0

New Features ✨

Other

Bug Fixes 🐛

Google Genai

Mcp

... (truncated)

Changelog

Sourced from sentry-sdk's changelog.

2.53.0

Bug Fixes 🐛

Openai Agents

Other

Documentation 📚

Internal Changes 🔧

Openai Agents

Other

2.52.0

New Features ✨

Other

Bug Fixes 🐛

Google Genai

... (truncated)

Commits
  • f75a9ac Update CHANGELOG.md
  • b700fa8 Update CHANGELOG.md
  • 45379e2 release: 2.53.0
  • 4d8faf3 test(openai-agents): New tool field and library error log (#5454)
  • d3e2c88 fix(openai-agents): Patch execute_final_output() functions following librar...
  • f71a604 fix(openai-agents): Patch execute_handoffs() functions following library re...
  • bea608c fix(openai-agents): Patch run_single_turn_streamed() functions following li...
  • 14e3e0a fix(openai-agents): Patch run_single_turn() functions following library ref...
  • a5c2906 fix(openai-agents): Patch models functions following library refactor (#5449)
  • f78df7c ci: Use fixed clickhouse action, remove aws-sam-cli dependency (#5457)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Upgrade: Bump the dependencies group across 1 directory with 7 updates
5c4d847 
Bumps the dependencies group with 7 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [boto3](https://github.com/boto/boto3) | `1.42.32` | `1.42.59` |
| [botocore](https://github.com/boto/botocore) | `1.42.32` | `1.42.59` |
| [certifi](https://github.com/certifi/python-certifi) | `2026.1.4` | `2026.2.25` |
| [jmespath](https://github.com/jmespath/jmespath.py) | `1.0.1` | `1.1.0` |
| [marshmallow](https://github.com/marshmallow-code/marshmallow) | `4.2.0` | `4.2.2` |
| [multidict](https://github.com/aio-libs/multidict) | `6.7.0` | `6.7.1` |
| [sentry-sdk](https://github.com/getsentry/sentry-python) | `2.50.0` | `2.53.0` |



Updates `boto3` from 1.42.32 to 1.42.59
- [Release notes](https://github.com/boto/boto3/releases)
- [Commits](boto/boto3@1.42.32...1.42.59)

Updates `botocore` from 1.42.32 to 1.42.59
- [Commits](boto/botocore@1.42.32...1.42.59)

Updates `certifi` from 2026.1.4 to 2026.2.25
- [Commits](certifi/python-certifi@2026.01.04...2026.02.25)

Updates `jmespath` from 1.0.1 to 1.1.0
- [Changelog](https://github.com/jmespath/jmespath.py/blob/develop/CHANGELOG.rst)
- [Commits](jmespath/jmespath.py@1.0.1...1.1.0)

Updates `marshmallow` from 4.2.0 to 4.2.2
- [Changelog](https://github.com/marshmallow-code/marshmallow/blob/dev/CHANGELOG.rst)
- [Commits](marshmallow-code/marshmallow@4.2.0...4.2.2)

Updates `multidict` from 6.7.0 to 6.7.1
- [Release notes](https://github.com/aio-libs/multidict/releases)
- [Changelog](https://github.com/aio-libs/multidict/blob/master/CHANGES.rst)
- [Commits](aio-libs/multidict@v6.7.0...v6.7.1)

Updates `sentry-sdk` from 2.50.0 to 2.53.0
- [Release notes](https://github.com/getsentry/sentry-python/releases)
- [Changelog](https://github.com/getsentry/sentry-python/blob/master/CHANGELOG.md)
- [Commits](getsentry/sentry-python@2.50.0...2.53.0)

---
updated-dependencies:
- dependency-name: boto3
  dependency-version: 1.42.59
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: botocore
  dependency-version: 1.42.59
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: certifi
  dependency-version: 2026.2.25
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: jmespath
  dependency-version: 1.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: marshmallow
  dependency-version: 4.2.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: multidict
  dependency-version: 6.7.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: sentry-sdk
  dependency-version: 2.53.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Mar 1, 2026
@dependabot @github

dependabot Bot commented on behalf of github Apr 1, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Apr 1, 2026
@dependabot
dependabot Bot deleted the dependabot/pip/dependencies-89092d9eb8 branch April 1, 2026 00:23
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python Pull requests that update Python code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants