Skip to content

Bump the pip-deps group across 1 directory with 11 updates - #3171

Open
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/pip/pip-deps-0b0347ae7a
Open

Bump the pip-deps group across 1 directory with 11 updates#3171
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/pip/pip-deps-0b0347ae7a

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 3, 2026

Copy link
Copy Markdown
Contributor

Bumps the pip-deps group with 11 updates in the / directory:

Package From To
cryptography 49.0.0 50.0.0
boto3 1.43.33 1.43.62
prance 25.4.8.0 26.7.19.0
asf-search 12.2.2 12.2.3
responses 0.26.1 0.26.2
ruff 0.15.18 0.16.1
mypy 2.1.0 2.3.0
setuptools 82.0.1 83.0.0
setuptools-scm 10.0.5 10.2.1
openapi-spec-validator 0.8.5 0.9.0
cfn-lint 1.51.5 1.53.3

Updates cryptography from 49.0.0 to 50.0.0

Changelog

Sourced from cryptography's changelog.

50.0.0 - 2026-07-31


* **SECURITY ISSUE**:
  :func:`~cryptography.hazmat.primitives.serialization.pkcs7.pkcs7_decrypt_der`
  and its PEM and S/MIME variants no longer expose distinguishable errors or
  timing when unwrapping a ``RecipientInfo``'s ``encryptedKey``, which could
  act as a Bleichenbacher oracle for callers that decrypt untrusted messages.
  A random key is now substituted on failure, as described in :rfc:`3218`.
  Credit to **@X1AOxiang** for reporting the issue
* Deprecated Diffie-Hellman key exchange over finite fields (FFDH).
  Everything FFDH is deprecated, including the types in
  ``cryptography.hazmat.primitives.asymmetric.dh`` and loading FFDH keys or
  parameters with the key loading APIs. Users should migrate to a more
  modern key exchange algorithm.
* Added ``xof()`` class methods to
  :class:`~cryptography.hazmat.primitives.hashes.SHAKE128` and
  :class:`~cryptography.hazmat.primitives.hashes.SHAKE256` for constructing
  algorithm instances configured for use with
  :class:`~cryptography.hazmat.primitives.hashes.XOFHash`.
* The :mod:`X.509 verification <cryptography.x509.verification>` APIs are now
  considered stable and are subject to our API stability policy.
* Added the :doc:`/cobblestone` recipe, an implementation of the
  Cobblestone-128 and Cobblestone-256 instantiations of the `C2SP
  chunked-encryption specification
  <https://c2sp.org/chunked-encryption>`_ for streaming authenticated
  encryption of large messages.
* Parsing a Signed Certificate Timestamp list now rejects encodings that
  carry trailing bytes after the list or after an individual SCT, instead of
  silently ignoring them.
* Added support for using :class:`~cryptography.x509.Name` as a field type in
  the :doc:`/hazmat/asn1/index` module.
* Loading a public key or an EC private key now rejects DER where the
  ``subjectPublicKey`` (or EC ``publicKey``) ``BIT STRING`` declares a non-zero
  number of unused bits, instead of silently ignoring it.
* Parsing a CRL entry's ``InvalidityDate`` extension now rejects a
  ``GeneralizedTime`` that carries fractional seconds or another non-DER form,
  matching the strict encoding already required for every other X.509 time
  field.
* :func:`~cryptography.x509.ocsp.load_der_ocsp_request` and
  :func:`~cryptography.x509.ocsp.load_der_ocsp_response` now reject a request
  or response whose ``version`` field is not ``v1``, the only version defined
  by RFC 6960, matching the version validation already performed when loading
  certificates, CSRs and CRLs.
* :class:`~cryptography.hazmat.primitives.hashes.XOFHash` is now supported
  when building against AWS-LC.
* HMAC (and therefore PBKDF2-HMAC) with SHA-3 hashes is now supported when
  building against AWS-LC.
* Diffie-Hellman (:doc:`/hazmat/primitives/asymmetric/dh`) is now supported
  when building against AWS-LC.
</tr></table>

... (truncated)

Commits

Updates boto3 from 1.43.33 to 1.43.62

Commits
  • f3e9c52 Merge branch 'release-1.43.62'
  • 47765b7 Bumping version to 1.43.62
  • 2f4f5fb Add changelog entries from botocore
  • 8cd8552 Merge branch 'release-1.43.61'
  • 53d9670 Merge branch 'release-1.43.61' into develop
  • 74101e1 Bumping version to 1.43.61
  • 7faedb5 Add changelog entries from botocore
  • 785f6ff Merge branch 'release-1.43.60'
  • 550ff07 Merge branch 'release-1.43.60' into develop
  • 68f5316 Bumping version to 1.43.60
  • Additional commits viewable in compare view

Updates prance from 25.4.8.0 to 26.7.19.0

Release notes

Sourced from prance's releases.

Prance 26.07.19.0

Features

  • Add --allow-recursion CLI flag to validate and compile commands for recursive $ref specs (#124)
  • Speed up reference resolution with pure Python optimizations: structural sharing, caching, optional orjson (prance[fast]), keep_ref_on_recursion, materialize=True, and a path_get falsy-value fix (#169)
  • Add Python 3.14 support to classifiers, CI, and tox

Misc

  • Packaging modernization (pyproject.toml, PEP 735 dependency groups)
  • Dependency and CI updates
  • Sphinx pinned to <8.2 for Python 3.10 compatibility

PyPI: https://pypi.org/project/prance/26.7.19.0/

Changelog

Sourced from prance's changelog.

Prance 26.07.19.0

Features

  • Add --allow-recursion CLI flag to validate and compile commands, allowing specs with self-referencing $ref (e.g. recursive types like linked lists or trees) to be processed without raising ResolutionError. (#124)
  • Speed up reference resolution with pure Python optimizations: structural sharing for O(N) chained $ref resolution (was O(N^2)), resolved-reference caching, optimized iterators and path functions, optional orjson fast deepcopy (prance[fast]), keep_ref_on_recursion handler to preserve $ref on recursion, materialize=True option for independent subtree copies, and a fix for path_get returning defaultvalue for falsy values. (#169)
  • Add Python 3.14 support to classifiers, CI, and tox

Misc

  • Fix sphinx version constraint to <8.2 as 8.2+ requires Python 3.11+
  • Migrate project metadata to pyproject.toml and convert dev dependencies to PEP 735 dependency group
  • Remove obsolete requirements files and appveyor.yml, update docs with modern installation instructions
  • Update GitHub Actions to use latest action versions: checkout@v4, setup-python@v5
  • Update build dependencies: setuptools to >80, setuptools_scm to >9
  • Update core dependencies: ruamel.yaml to 0.18.16, requests to 2.32.5, packaging to 25.0
  • Update dev dependencies: tox to 4.32.0, pytest to 9.0.1, pytest-cov to 7.0.0, towncrier to 25.8.0
  • Update optional CLI dependency: click to 8.3.0
  • Update pre-commit configuration to use --py310-plus for pyupgrade and reorder-python-imports
  • Use dependency groups in tox configuration instead of manually specifying deps
  • Use pip --group flag to install dev dependency group in CI

Prance 25.04.08.0

Compatibility changes

Thank you to Mathis for bringing this forth.

  • migrate from jsonschema to referencing for references
  • drop unmaintained python 3.8/3.9
  • add support + ci for python 3.11/3.12/3.14
  • migrate convert from mermade.org.uk to converter.swagger.io
  • switch yaml mimetype from the x-yaml form to the official yaml form
  • include petstore example data to ease testing without the git subrepo
  • explicitly use openapi-spec-validator backends in tests

... (truncated)

Commits
  • 8ec6f91 Merge pull request #170 from RonnyPfannschmidt/release-26.07.19.0
  • a1643c5 fix changelog dependency notes for 26.07.19.0
  • 78280c8 prepare release 26.07.19.0
  • b976a7c Merge pull request #169 from RonnyPfannschmidt/speedup-resolver-pure-python
  • 41e6e4a Fix KEEP_REF handler and add permissive_object_on_recursion
  • f8247b4 Add --allow-recursion CLI flag for recursive $ref specs (#124)
  • 318aed9 Rewrite resolver as two-phase iterative algorithm
  • 616381f Use isinstance for subclass safety and unify path helpers
  • 3810190 Replace changelog fragments with single PR-numbered entry
  • 17185f8 Add towncrier changelog fragments for resolver improvements
  • Additional commits viewable in compare view

Updates asf-search from 12.2.2 to 12.2.3

Release notes

Sourced from asf-search's releases.

v12.2.3

v12.2.3

Added

  • Drop old geometry logic for OPERAS1Product dist-alert products
Changelog

Sourced from asf-search's changelog.

v12.2.3

Added

  • Drop old goemetry logic for OPERAS1Product dist-alert products
Commits
  • 21f6b5d Merge pull request #459 from asfadmin/bug-dist-alert-s1-geometry
  • ed3a92e bug: Drop old goemetry logic for OPERAS1Product dist-alert products
  • See full diff in compare view

Updates responses from 0.26.1 to 0.26.2

Release notes

Sourced from responses's releases.

0.26.2

  • Default headers (such as Content-Type, Date and Server) are now stripped from recorded files regardless of header name case. Previously, responses recorded from servers that send lowercase header names (for example over HTTP/2) kept these redundant headers in the generated file.
  • Fixed query_param_matcher mutating the caller's params dict when numeric values are provided. See #801
Changelog

Sourced from responses's changelog.

0.26.2

  • Default headers (such as Content-Type, Date and Server) are now stripped from recorded files regardless of header name case. Previously, responses recorded from servers that send lowercase header names (for example over HTTP/2) kept these redundant headers in the generated file.
  • Fixed query_param_matcher mutating the caller's params dict when numeric values are provided. See #801
Commits

Updates ruff from 0.15.18 to 0.16.1

Release notes

Sourced from ruff's releases.

0.16.1

Release Notes

Released on 2026-07-30.

Preview features

  • Add an option to opt out of human-readable names (#27160)
  • [flake8-pytest-style] Make fixes safe by default and unsafe only when comments are present (PT018) (#27201)
  • [pyupgrade] Skip fix when a defaulted TypeVar precedes a non-defaulted one (UP040, UP046, UP047) (#27133)
  • [ruff] Fix false positive with unpacked arguments (RUF065) (#26959)

Bug fixes

  • Bump gen-lsp-types to gracefully handle unknown enumeration values in LSP messages (#27230)
  • [flake8-bugbear] Mark range as immutable (B008) (#27247)
  • [flake8-comprehensions] NFKC-normalize keyword names in C408 fix (#26813)
  • [flake8-return] Fix false positive when variable is read in finally clause (RET504) (#25441)
  • [pydocstyle] Skip section detection inside RST directive bodies (D214, D405, D413) (#23635)
  • [refurb] Parenthesize yield arguments in the FURB192 fix (#27192)

Rule changes

  • [flake8-pytest-style] Mark PT022 fixes as unsafe (#26440)
  • [refurb] Mark fixes that remove unknown separators as unsafe (FURB105) (#27200)

Server

  • Fix indexing of excluded nested Ruff workspaces (#27303)
  • Lint TOML files in the LSP (#26862)

Documentation

  • Cover pycon Markdown formatting (#27153)
  • [flake8-bandit] Document TYPE_CHECKING exception (S101) (#27004)
  • [flake8-import-conventions] Document that extend-aliases can override default aliases (#27191)
  • [pylint] Add missing fix safety gotchas for non-augmented-assignment (PLR6104) (#27250)

Other changes

  • Reduce syntax error noise by swallowing dedents like indents (#27170)
  • Vendor latest annotate-snippets (#27033)

Contributors

... (truncated)

Changelog

Sourced from ruff's changelog.

0.16.1

Released on 2026-07-30.

Preview features

  • Add an option to opt out of human-readable names (#27160)
  • [flake8-pytest-style] Make fixes safe by default and unsafe only when comments are present (PT018) (#27201)
  • [pyupgrade] Skip fix when a defaulted TypeVar precedes a non-defaulted one (UP040, UP046, UP047) (#27133)
  • [ruff] Fix false positive with unpacked arguments (RUF065) (#26959)

Bug fixes

  • Bump gen-lsp-types to gracefully handle unknown enumeration values in LSP messages (#27230)
  • [flake8-bugbear] Mark range as immutable (B008) (#27247)
  • [flake8-comprehensions] NFKC-normalize keyword names in C408 fix (#26813)
  • [flake8-return] Fix false positive when variable is read in finally clause (RET504) (#25441)
  • [pydocstyle] Skip section detection inside RST directive bodies (D214, D405, D413) (#23635)
  • [refurb] Parenthesize yield arguments in the FURB192 fix (#27192)

Rule changes

  • [flake8-pytest-style] Mark PT022 fixes as unsafe (#26440)
  • [refurb] Mark fixes that remove unknown separators as unsafe (FURB105) (#27200)

Server

  • Fix indexing of excluded nested Ruff workspaces (#27303)
  • Lint TOML files in the LSP (#26862)

Documentation

  • Cover pycon Markdown formatting (#27153)
  • [flake8-bandit] Document TYPE_CHECKING exception (S101) (#27004)
  • [flake8-import-conventions] Document that extend-aliases can override default aliases (#27191)
  • [pylint] Add missing fix safety gotchas for non-augmented-assignment (PLR6104) (#27250)

Other changes

  • Reduce syntax error noise by swallowing dedents like indents (#27170)
  • Vendor latest annotate-snippets (#27033)

Contributors

... (truncated)

Commits
  • 80790b3 Bump 0.16.1 (#27330)
  • 63830f3 [ty] Borrow from constraint set storage less often (#27328)
  • f40dca9 [ty] Preserve forwarded expanded-variadic diagnostic sources (#27266)
  • 0d80497 Lint TOML files in the LSP (#26862)
  • d91586b Update prek dependencies (#27293)
  • 7da4b8b [ty] Respect bounds and constraints in generic materializations (#27228)
  • b20daf7 [ty] refactor: add helper function to send partial results (#27249)
  • 4d4c8fa [ty] Emit diagnostic when specializing a non-generic class (#26883)
  • 7c3e2db [ty] Fix enum class container assignability (#27318)
  • d5ef97f [flake8-return] Fix false positive when variable is read in finally claus...
  • Additional commits viewable in compare view

Updates mypy from 2.1.0 to 2.3.0

Changelog

Sourced from mypy's changelog.

Mypy Release Notes

Next Release

Packaging changes

Mypy 2.3

We've just uploaded mypy 2.3.0 to the Python Package Index (PyPI). Mypy is a static type checker for Python. This release includes new features, performance improvements and bug fixes. You can install it as follows:

python3 -m pip install -U mypy

You can read the full documentation for this release on Read the Docs.

The Upcoming Switch to the New Native Parser

We are planning to enable the new native parser (--native-parser) by default soon. We recommend that you test the native parser in your projects and report any issues in the mypy issue tracker.

Mypyc Free-threading Memory Safety

Free-threaded Python builds that don't have the GIL require additional synchronization primitives or lock-free algorithms to ensure memory safety when there are race conditions (for example, when a thread reads a list item while another thread writes the same list item concurrently). This release greatly improves memory safety of free threading.

List operations are now memory-safe on free threaded Python builds, even in the presence of race conditions. This has some performance cost. For list-heavy workloads, using librt.vecs.vec instead of list is often significantly faster, but note that vec is not (and likely won't be) fully memory safe, and the user is expected to avoid race conditions. The newly introduced librt.threading.Lock helps with this. Using variable-length tuples can also be more efficient than lists, since tuples are immutable and don't require expensive synchronization to ensure memory safety.

Instance attribute access is also (mostly) memory safe now on free-threaded builds in the presence of race conditions. We are planning to fix the remaining unsafe cases in a future release.

Full list of changes:

  • Make attribute access memory safe on free-threaded builds (Jukka Lehtosalo, PR 21705)
  • Fix unsafe borrowing of instance attributes with free-threading (Jukka Lehtosalo, PR 21688)
  • Make list get/set item more memory safe on free-threaded builds (Jukka Lehtosalo, PR 21683)
  • Don't borrow list items on free-threaded builds (Jukka Lehtosalo, PR 21679)
  • Make multiple assignment from list memory-safe on free-threaded builds (Jukka Lehtosalo, PR 21684)

... (truncated)

Commits
  • 8aabf84 Drop +dev from version
  • 4d8ad2a Update changelog for 2.3 release (#21728)
  • 2c21546 [mypyc] Update documentation of race conditions under free threading (#21726)
  • a9f62a3 [mypyc] Make attribute access memory safe on free-threaded builds (#21705)
  • 0faa413 Use PYODIDE environment variable for Emscripten cross-compilation detection...
  • 3d75cdb [mypyc] Borrow final attributes more aggressively (#21702)
  • 24c237d [mypyc] Improve documentation of Final (#21713)
  • b5be217 [mypyc] Update free threading Python compatibility docs (#21711)
  • cbcb51a Narrow for frozendict membership check (#21709)
  • af2bc0f Sync typeshed (#21707)
  • Additional commits viewable in compare view

Updates setuptools from 82.0.1 to 83.0.0

Changelog

Sourced from setuptools's changelog.

v83.0.0

Features

  • Require Python 3.10 or later.

Bugfixes

  • MANIFEST.in matching (via FileList) is now insensitive to Unicode normalization form. A pattern authored in one form (e.g. NFC, as typically saved by editors) now matches a file whose name is stored on disk in another (e.g. NFD, as produced by macOS APFS/HFS+). Previously an exclude, global-exclude, recursive-exclude, or prune rule could silently fail to drop a non-ASCII-named file from the source distribution, publishing it despite the exclusion -- see GHSA-h35f-9h28-mq5c.

Deprecations and Removals

  • pypa/distutils#334
Commits
  • 6519f72 Bump version: 82.0.1 → 83.0.0
  • d1151b1 Merge pull request #5250 from pypa/feature/distutils-d7633fbed
  • a2df31e Capture removal of dry_run parameter in changelog.
  • 00144dc Moved newsfragment to the release where it occurred.
  • a4a5a2b Add news fragment.
  • 77470c2 Merge https://github.com/pypa/distutils into feature/distutils-d7633fbed
  • 3c43897 Merge pull request #5247 from pypa/copilot/fix-pypy-version-issue
  • bb6ea66 Bump PyPy from 3.10 to 3.11 in CI workflow
  • a2bc3ac Fix broken intersphinx reference to build's installation docs
  • 2d6a739 Use stacked parametrize decorators instead of itertools.product
  • Additional commits viewable in compare view

Updates setuptools-scm from 10.0.5 to 10.2.1

Release notes

Sourced from setuptools-scm's releases.

setuptools-scm v10.2.1

Fixed

  • Omit scm_version.json and scm_file_list.json from wheel .dist-info while still including them in sdists for fallback discovery. (#1473)

setuptools-scm v10.2.0

Added

  • Restore Python 3.8 and 3.9 support, re-enabling use as a build dependency for projects like scikit-build that still support these versions. (#1445)

Miscellaneous

  • Move PKG-INFO discovery tests from vcs-versioning to setuptools-scm where the entry points are registered. (#1446)

setuptools-scm v10.1.2

Fixed

  • Fix DeprecationWarning leak by threading VcsEnvironment through VersionInferenceConfig and using env.make_reader() in _should_write_to_source. (#1424)

setuptools-scm v10.1.1

Fixed

  • Update CI to use PyPy 3.11 as cryptography has no PyPy 3.10 build available (#1421)

setuptools-scm v10.1.0

Added

  • Add backward-compatible shims in setuptools_scm.git, setuptools_scm.hg, setuptools_scm.hg_git, and setuptools_scm.scm_workdir so that external code calling get_scm_version(config) or run_describe(config) with an explicit Configuration continues to work. The shim automatically wires _config and VcsEnvironment onto the workdir. (#compat-shims)
  • Write scm_version.json and scm_file_list.json into egg-info directories during egg_info, enabling sdist fallback version inference when no VCS is present. Add ScmEggInfoMixin for workdir-based file finding in find_sources(). (#egg-info-metadata)
  • Add write_to_source pyproject.toml option to control whether version files are written to the source tree. When unset, a deprecation warning advises setting it explicitly before the default changes in a future major release. The SETUPTOOLS_SCM_WRITE_TO_SOURCE environment variable overrides this setting. (#1301)
  • Adopt the workdir-centric pipeline from vcs-versioning: version discovery now follows an explicit env → config → workdir → version chain instead of relying on ambient globals and parse entry points. The egg_info command writes scm_version.json and scm_file_list.json metadata so sdists can infer versions without a VCS checkout. Requires vcs-versioning >= 2.0.0.dev0. (#1378)

Fixed

  • Fix worktree file listing test to expect relative paths from the file finder. The test now passes on Linux; Windows remains xfail due to a subprocess limitation with worktree directories. (#620)
  • Remove the _warn_on_old_setuptools() check that incorrectly warned when a custom build-backend caused setuptools.__version__ to return the project version instead of setuptools' version. The minimum setuptools version is now enforced via build-system requirements. (#1192)
  • Wrap version in setuptools.sic() when normalize = false to prevent setuptools from re-normalizing the version after our hook returns. This preserves CalVer zero-padding (e.g. 2024.01.05) and other non-canonical version strings in dist.metadata.version. (#1354)
  • Skip writing non-package version files to build_lib, fixing incorrect inclusion of root-level version files in wheels. (#1364)

Documentation

  • Rewrite the GitHub Actions CI/CD example to use a dedicated build job (via build-and-inspect-python-package) and OIDC Trusted Publishers instead of building in publishing jobs with long-lived API tokens. (#1215)
Commits
  • ac108b2 Merge pull request #1475 from pypa/release/main
  • b3beed6 Prepare release: setuptools-scm v10.2.1
  • ec67f8c Merge pull request #1474 from RonnyPfannschmidt/fix/1473-omit-scm-metadata-fr...
  • 08f22bd fix: lazy-import bdist_wheel and simplify unlink
  • 82768f0 fix: omit SCM egg-info JSON from wheels
  • 5b91e2f Merge pull request #1460 from pypa/dependabot/uv/uv-f4f52c089d
  • 4ac1724 Merge pull request #1463 from pypa/release/main
  • 474cc9c Prepare release: vcs-versioning v2.2.2
  • 29c8f6c Merge pull request #1462 from RonnyPfannschmidt/fix/vcs-versioning-pytest-tim...
  • 25d32ee fix: add missing pytest-timeout to vcs-versioning test dependencies (#1461)
  • Additional commits viewable in compare view

Updates openapi-spec-validator from 0.8.5 to 0.9.0

Release notes

Sourced from openapi-spec-validator's releases.

0.9.0

Upgrades

  • Upgrade schema-validator 0.9 #505
  • Upgrade jsonschema-path 0.5 #506

Backward incompatibilities

  • Validation results may change for specifications that previously relied on discriminator-based narrowing or on discriminator mapping resolution errors during validation. #505
Commits
  • 2121137 Version 0.9.0
  • ee4683b Merge pull request #506 from python-openapi/feature/upgrade-jsonschema-path-0.5
  • 692131c Upgrade jsonschema-path 0.5
  • 27cb341 Merge pull request #505 from python-openapi/feature/upgrade-schema-validator-...
  • 4413a52 Upgrade schema-validator 0.9
  • f407ed7 Merge pull request #484 from python-openapi/dependabot/pip/isort-8.0.1
  • 081f3be Bump isort from 8.0.0 to 8.0.1
  • d931faf Merge pull request #497 from python-openapi/dependabot/pip/mypy-1.20.2
  • f8c6261 Bump mypy from 1.19.1 to 2.1.0
  • 1b5dafd Merge pull request #500 from python-openapi/dependabot/pip/urllib3-2.7.0
  • Additional commits viewable in compare view

Updates cfn-lint from 1.51.5 to 1.53.3

Release notes

Sourced from cfn-lint's releases.

Release v1.53.3

What's Changed

Full Changelog: aws-cloudformation/cfn-lint@v1.53.2...v1.53.3

Release v1.53.2

What's Changed

New Contributors

Full Changelog: aws-cloudformation/cfn-lint@v1.53.1...v1.53.2

Release v1.53.1

What's Changed

Full Changelog: aws-cloudformation/cfn-lint@v1.53.0...v1.53.1

Release v1.53.0

What's Changed

New Contributors

Full Changelog: aws-cloudformation/cfn-lint@v1.52.1...v1.53.0

Release v1.52.1

What's Changed

... (truncated)

Changelog

Sourced from cfn-lint's changelog.

v1.53.3

What's Changed

Full Changelog: aws-cloudformation/cfn-lint@v1.53.2...v1.53.3

v1.53.2

What's Changed

New Contributors

Full Changelog: aws-cloudformation/cfn-lint@v1.53.1...v1.53.2

v1.53.1

What's Changed

Full Changelog: aws-cloudformation/cfn-lint@v1.53.0...v1.53.1

v1.53.0

What's Changed

@dependabot
Bump the pip-deps group across 1 directory with 11 updates
4e03542 
Bumps the pip-deps group with 11 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [cryptography](https://github.com/pyca/cryptography) | `49.0.0` | `50.0.0` |
| [boto3](https://github.com/boto/boto3) | `1.43.33` | `1.43.62` |
| [prance](https://github.com/RonnyPfannschmidt/prance) | `25.4.8.0` | `26.7.19.0` |
| [asf-search](https://github.com/asfadmin/Discovery-asf_search) | `12.2.2` | `12.2.3` |
| [responses](https://github.com/getsentry/responses) | `0.26.1` | `0.26.2` |
| [ruff](https://github.com/astral-sh/ruff) | `0.15.18` | `0.16.1` |
| [mypy](https://github.com/python/mypy) | `2.1.0` | `2.3.0` |
| [setuptools](https://github.com/pypa/setuptools) | `82.0.1` | `83.0.0` |
| [setuptools-scm](https://github.com/pypa/setuptools-scm) | `10.0.5` | `10.2.1` |
| [openapi-spec-validator](https://github.com/python-openapi/openapi-spec-validator) | `0.8.5` | `0.9.0` |
| [cfn-lint](https://github.com/aws-cloudformation/cfn-lint) | `1.51.5` | `1.53.3` |



Updates `cryptography` from 49.0.0 to 50.0.0
- [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst)
- [Commits](pyca/cryptography@49.0.0...50.0.0)

Updates `boto3` from 1.43.33 to 1.43.62
- [Release notes](https://github.com/boto/boto3/releases)
- [Commits](boto/boto3@1.43.33...1.43.62)

Updates `prance` from 25.4.8.0 to 26.7.19.0
- [Release notes](https://github.com/RonnyPfannschmidt/prance/releases)
- [Changelog](https://github.com/RonnyPfannschmidt/prance/blob/main/CHANGES.rst)
- [Commits](RonnyPfannschmidt/prance@v25.04.08.0...v26.07.19.0)

Updates `asf-search` from 12.2.2 to 12.2.3
- [Release notes](https://github.com/asfadmin/Discovery-asf_search/releases)
- [Changelog](https://github.com/asfadmin/Discovery-asf_search/blob/master/CHANGELOG.md)
- [Commits](asfadmin/Discovery-asf_search@v12.2.2...v12.2.3)

Updates `responses` from 0.26.1 to 0.26.2
- [Release notes](https://github.com/getsentry/responses/releases)
- [Changelog](https://github.com/getsentry/responses/blob/master/CHANGES)
- [Commits](getsentry/responses@0.26.1...0.26.2)

Updates `ruff` from 0.15.18 to 0.16.1
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.15.18...0.16.1)

Updates `mypy` from 2.1.0 to 2.3.0
- [Changelog](https://github.com/python/mypy/blob/master/CHANGELOG.md)
- [Commits](python/mypy@v2.1.0...v2.3.0)

Updates `setuptools` from 82.0.1 to 83.0.0
- [Release notes](https://github.com/pypa/setuptools/releases)
- [Changelog](https://github.com/pypa/setuptools/blob/main/NEWS.rst)
- [Commits](pypa/setuptools@v82.0.1...v83.0.0)

Updates `setuptools-scm` from 10.0.5 to 10.2.1
- [Release notes](https://github.com/pypa/setuptools-scm/releases)
- [Changelog](https://github.com/pypa/setuptools-scm/blob/main/RELEASE_SYSTEM.md)
- [Commits](pypa/setuptools-scm@setuptools-scm-v10.0.5...setuptools-scm-v10.2.1)

Updates `openapi-spec-validator` from 0.8.5 to 0.9.0
- [Release notes](https://github.com/python-openapi/openapi-spec-validator/releases)
- [Commits](python-openapi/openapi-spec-validator@0.8.5...0.9.0)

Updates `cfn-lint` from 1.51.5 to 1.53.3
- [Release notes](https://github.com/aws-cloudformation/cfn-lint/releases)
- [Changelog](https://github.com/aws-cloudformation/cfn-lint/blob/main/CHANGELOG.md)
- [Commits](aws-cloudformation/cfn-lint@v1.51.5...v1.53.3)

---
updated-dependencies:
- dependency-name: cryptography
  dependency-version: 50.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: pip-deps
- dependency-name: boto3
  dependency-version: 1.43.62
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: pip-deps
- dependency-name: prance
  dependency-version: 26.7.19.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: pip-deps
- dependency-name: asf-search
  dependency-version: 12.2.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: pip-deps
- dependency-name: responses
  dependency-version: 0.26.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: pip-deps
- dependency-name: ruff
  dependency-version: 0.16.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pip-deps
- dependency-name: mypy
  dependency-version: 2.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pip-deps
- dependency-name: setuptools
  dependency-version: 83.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: pip-deps
- dependency-name: setuptools-scm
  dependency-version: 10.2.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pip-deps
- dependency-name: openapi-spec-validator
  dependency-version: 0.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pip-deps
- dependency-name: cfn-lint
  dependency-version: 1.53.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pip-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added bumpless Changes to documentation, CI/CD pipelines, etc that don't affect the project's version major Bump the major version number of this project labels Aug 3, 2026
@dependabot
dependabot Bot requested review from a team as code owners August 3, 2026 19:44
@dependabot dependabot Bot added major Bump the major version number of this project bumpless Changes to documentation, CI/CD pipelines, etc that don't affect the project's version labels Aug 3, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

bumpless Changes to documentation, CI/CD pipelines, etc that don't affect the project's version major Bump the major version number of this project

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants