Skip to content

chore(deps-dev): bump the python-dependencies group across 1 directory with 3 updates - #668

Merged
Nikolaichukr merged 1 commit into
mainfrom
dependabot/uv/python-dependencies-881fb2849b
Aug 25, 2026
Merged

chore(deps-dev): bump the python-dependencies group across 1 directory with 3 updates#668
Nikolaichukr merged 1 commit into
mainfrom
dependabot/uv/python-dependencies-881fb2849b

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 20, 2026

Copy link
Copy Markdown
Contributor

Bumps the python-dependencies group with 3 updates in the / directory: uv, boto3 and hypothesis.

Updates uv from 0.12.3 to 0.12.5

Release notes

Sourced from uv's releases.

0.12.5

Release Notes

Released on 2026-08-14.

Python

  • Add CPython 3.10.21, 3.11.16, and 3.12.14 (#21138)
  • Prefer newer versions and standard variants when selecting between equally prioritized Python interpreters (#21134)

Enhancements

  • Simplify errors and hints for invalid editable requirements, and redact credentials in requirement URLs (#21130)

Preview features

  • Allow --index and --default-index to select configured package indexes by name with the index-by-name preview feature (#17455)
  • Include distribution artifact URLs and hashes in CycloneDX SBOM exports by default (#21131)
  • Fall back to logical file sizes when using cache-physical-space on filesystems that do not support physical-space accounting (#21133)

Bug fixes

  • Resolve relative package index paths in PEP 723 scripts against the script directory (#21097)

Install uv 0.12.5

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/uv/releases/download/0.12.5/uv-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://releases.astral.sh/github/uv/releases/download/0.12.5/uv-installer.ps1 | iex"

Download uv 0.12.5

File Platform Checksum
uv-aarch64-apple-darwin.tar.gz Apple Silicon macOS checksum
uv-x86_64-apple-darwin.tar.gz Intel macOS checksum
uv-aarch64-pc-windows-msvc.zip ARM64 Windows checksum
uv-i686-pc-windows-msvc.zip x86 Windows checksum
uv-x86_64-pc-windows-msvc.zip x64 Windows checksum
uv-aarch64-unknown-linux-gnu.tar.gz ARM64 Linux checksum
uv-i686-unknown-linux-gnu.tar.gz x86 Linux checksum
uv-powerpc64le-unknown-linux-gnu.tar.gz PPC64LE Linux checksum

... (truncated)

Changelog

Sourced from uv's changelog.

0.12.5

Released on 2026-08-14.

Python

  • Add CPython 3.10.21, 3.11.16, and 3.12.14 (#21138)
  • Prefer newer versions and standard variants when selecting between equally prioritized Python interpreters (#21134)

Enhancements

  • Simplify errors and hints for invalid editable requirements, and redact credentials in requirement URLs (#21130)

Preview features

  • Allow --index and --default-index to select configured package indexes by name with the index-by-name preview feature (#17455)
  • Include distribution artifact URLs and hashes in CycloneDX SBOM exports by default (#21131)
  • Fall back to logical file sizes when using cache-physical-space on filesystems that do not support physical-space accounting (#21133)

Bug fixes

  • Resolve relative package index paths in PEP 723 scripts against the script directory (#21097)

0.12.4

Released on 2026-08-13.

Enhancements

  • Prefer post-quantum key exchange and enable opt-in TLS diagnostics (#21054)
  • Accept whitespace before versions in noncompliant wildcard comparisons such as Requires-Python: >= 3.5.* (#21012)
  • Report a specific error when a PEP 723 closing tag contains trailing whitespace or other content (#20944)
  • Omit source-span carets from diagnostics for empty PEP 508 requirements (#21094)

Preview features

  • Add uv check --no-install-project and respect UV_NO_INSTALL_PROJECT to install dependencies without building or installing the project (#21085)
  • Make the ty subprocess invoked by uv check honor uv's color and progress settings, including quiet mode (#21086)

Performance

  • Speed up resolutions with long runs of unavailable package versions by coalescing gaps in the resolver's version ranges (#20804)
  • Speed up Simple API parsing by deserializing PyPI and Pyx file metadata directly (#21041)

Bug fixes

  • Use windowed pythonw.exe launchers for virtual environments created from managed Python minor-version links (#19235)
  • Allow uv lock to proceed when .venv is an unusable project environment (#21068)
  • Respect fork-strategy when ordering forks created from environments or existing lockfile resolution-markers (#21000)
  • Preserve consecutive wildcard Python minor-version exclusions such as !=3.11.*, !=3.12.* in uv.lock (#21045)

... (truncated)

Commits
  • 210d1f6 Bump version to 0.12.5 (#21140)
  • 802a916 Sync latest Python releases: 3.10.21, 3.11.16, 3.12.14 (#21138)
  • a6904bb Order equal-priority Python installations by key (#21134)
  • 728a70d Improve automated fixes for related bug manifestations (#21102)
  • b82b038 Include hashes in cyclonedx exports (#21131)
  • 8011778 Simplify editable requirement errors and hints (#21130)
  • dca33f5 Fall back to logical cache accounting on unsupported filesystems (#21133)
  • 3a76e49 Get rid of Lock::with_manifest, make Lock::from_resolution take the manif...
  • 7e6caa4 Support referencing indexes by name via --index and --default-index (#17455)
  • 298dda4 Fix relative indexes in PEP 723 scripts (#21097)
  • Additional commits viewable in compare view

Updates boto3 from 1.43.69 to 1.43.73

Commits
  • 97c19e9 Merge branch 'release-1.43.73'
  • a08d771 Bumping version to 1.43.73
  • 0cdfdc2 Add changelog entries from botocore
  • a3fc41f Merge branch 'release-1.43.72'
  • 2ec791c Merge branch 'release-1.43.72' into develop
  • 27a2636 Bumping version to 1.43.72
  • 33a1671 Add changelog entries from botocore
  • a0b0f50 Merge branch 'release-1.43.71'
  • f1ea765 Merge branch 'release-1.43.71' into develop
  • 3a07077 Bumping version to 1.43.71
  • Additional commits viewable in compare view

Updates hypothesis from 6.165.3 to 6.165.10

Commits
  • 6384dee Bump hypothesis version to 6.165.10 and update changelog
  • c7ca59d Merge pull request #4864 from dgutson/claude-stateful-and-example
  • 3fc38f1 claude: teach /hypothesis about stateful tests and @​example
  • 16f24b7 Merge pull request #4862 from Zac-HD/claude/upstream-regex-issues-fkke9q
  • 48ce446 Bump hypothesis version to 6.165.9 and update changelog
  • d559a69 Merge pull request #4860 from Liam-DeVoe/optimize-single-branch-one-of
  • 3a19d89 fix context flag restoration
  • 2408c99 drop unecessary empty check
  • 3f94912 Clarify re.ASCII wording in changelog entry
  • 9d0a9a8 Fix from_regex handling of negative classes, re.ASCII, and zero-min repeats
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Aug 20, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner August 20, 2026 23:56
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Aug 20, 2026
@github-actions

Copy link
Copy Markdown
Contributor

OPA/conftest tenant-isolation gate

Result: passed

Gate Result
conftest verify --policy policy/opa passed

@github-actions

github-actions Bot commented Aug 20, 2026

Copy link
Copy Markdown
Contributor

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

PackageVersionScoreDetails
pip/boto3 1.43.73 🟢 7.4
Details
CheckScoreReason
Maintained🟢 1030 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10
Security-Policy🟢 10security policy file detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Code-Review⚠️ 0Found 0/28 approved changesets -- score normalized to 0
Packaging⚠️ -1packaging workflow not detected
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Token-Permissions🟢 9detected GitHub workflow tokens with excessive permissions
License🟢 10license file detected
Fuzzing⚠️ 0project is not fuzzed
Pinned-Dependencies🟢 10all dependencies are pinned
Binary-Artifacts🟢 10no binaries found in the repo
Signed-Releases⚠️ -1no releases found
Branch-Protection🟢 6branch protection is not maximal on development and all release branches
SAST🟢 10SAST tool is run on all commits
pip/hypothesis 6.165.10 UnknownUnknown
pip/uv 0.12.5 UnknownUnknown

Scanned Files

  • uv.lock

@github-actions

github-actions Bot commented Aug 20, 2026

Copy link
Copy Markdown
Contributor

Automation gate tests

Result: passed

Suite Passed Failed Errors Skipped Total Duration Result
Automation gate tests 26 0 0 0 26 0.66s passed

Coverage: 84.81% (670/790 lines)

Lowest-covered Lambda files

File Coverage Missed lines

@github-actions

github-actions Bot commented Aug 20, 2026

Copy link
Copy Markdown
Contributor

Offline IaC contract tests

Result: passed

Suite Passed Failed Errors Skipped Total Duration Result
Offline IaC contracts 128 0 0 0 128 5.46s passed

Coverage: 95.14% (1467/1542 lines)

Lowest-covered Lambda files

File Coverage Missed lines

@github-actions

github-actions Bot commented Aug 20, 2026

Copy link
Copy Markdown
Contributor

Mutation test critical Lambda boundaries

Result: passed

Suite Passed Failed Errors Skipped Total Duration Result
Mutation tests 17 0 0 0 17 1.57s passed

Coverage: 39.67% (1215/3063 lines)

Lowest-covered Lambda files

File Coverage Missed lines

@github-actions

github-actions Bot commented Aug 20, 2026

Copy link
Copy Markdown
Contributor

Lambda unit tests

Result: passed

Suite Passed Failed Errors Skipped Total Duration Result
Lambda unit tests 255 0 0 0 255 57.24s passed

Coverage: 92.76% (4641/5003 lines)

Lowest-covered Lambda files

File Coverage Missed lines
modules/integrations/splunk_aws_billing/lambda/handler_per_resource_process.py 73.13% 18
modules/platform/forge_runners/forge_trust_validator/lambda/trust_common.py 77.57% 48
modules/integrations/splunk_stuck_workflow_job_dispatcher/lambda/worker.py 78.83% 58
modules/integrations/splunk_aws_billing/lambda/handler_per_service.py 79.41% 14
modules/platform/forge_runners/forge_trust_validator/lambda/trust_validator.py 79.80% 20
modules/platform/forge_runners/forge_trust_validator/lambda/trust_preparer.py 80.00% 10
modules/integrations/github_webhook_relay_destination_receivers/webex_webhook_relay/lambda/handler.py 80.00% 24
modules/integrations/splunk_cloud_data_manager/log_group_reconciler/lambda/log_group_reconciler.py 82.52% 18

@github-actions

Copy link
Copy Markdown
Contributor

OpenTofu module tests (latest-stable)

Result: passed

OpenTofu version: 1.12.6

Metric Count
Passed modules 72
Failed modules 0
Total modules 72
Module Result
modules/helpers/ami_policy passed
modules/helpers/ami_sharing passed
modules/helpers/aws_config_recording passed
modules/helpers/cloud_custodian passed
modules/helpers/cloud_formation passed
modules/helpers/dedicated_mac_hosts passed
modules/helpers/ecr passed
modules/helpers/forge_subscription passed
modules/helpers/microvm passed
modules/helpers/opt_in_regions passed
modules/helpers/service_linked_roles passed
modules/helpers/storage passed
modules/infra/eks passed
modules/integrations/github_webhook_relay_destination passed
modules/integrations/github_webhook_relay_destination_receivers passed
modules/integrations/github_webhook_relay_destination_receivers/webex_webhook_relay passed
modules/integrations/splunk_aws_billing passed
modules/integrations/splunk_cloud_conf_shared passed
modules/integrations/splunk_cloud_data_manager passed
modules/integrations/splunk_cloud_data_manager/data_input passed
modules/integrations/splunk_cloud_data_manager/log_group_reconciler passed
modules/integrations/splunk_cloud_data_manager/sec_meta_ec2_tags passed
modules/integrations/splunk_cloud_data_manager_common passed
modules/integrations/splunk_dependency_monitor passed
modules/integrations/splunk_o11y_aws_integration passed
modules/integrations/splunk_o11y_aws_integration_common passed
modules/integrations/splunk_o11y_conf_shared passed
modules/integrations/splunk_o11y_conf_shared/dashboards/arc_runner_operations passed
modules/integrations/splunk_o11y_conf_shared/dashboards/aws_regional_health passed
modules/integrations/splunk_o11y_conf_shared/dashboards/aws_service_limits passed
modules/integrations/splunk_o11y_conf_shared/dashboards/billing passed
modules/integrations/splunk_o11y_conf_shared/dashboards/dependency_probes passed
modules/integrations/splunk_o11y_conf_shared/dashboards/dynamodb passed
modules/integrations/splunk_o11y_conf_shared/dashboards/ebs passed
modules/integrations/splunk_o11y_conf_shared/dashboards/forge_impact passed
modules/integrations/splunk_o11y_conf_shared/dashboards/k8s_control_plane passed
modules/integrations/splunk_o11y_conf_shared/dashboards/lambda passed
modules/integrations/splunk_o11y_conf_shared/dashboards/lambda_control_plane passed
modules/integrations/splunk_o11y_conf_shared/dashboards/metric_ingest passed
modules/integrations/splunk_o11y_conf_shared/dashboards/opencost passed
modules/integrations/splunk_o11y_conf_shared/dashboards/runner_ec2 passed
modules/integrations/splunk_o11y_conf_shared/dashboards/runner_k8s passed
modules/integrations/splunk_o11y_conf_shared/dashboards/runner_usage passed
modules/integrations/splunk_o11y_conf_shared/dashboards/s3 passed
modules/integrations/splunk_o11y_conf_shared/dashboards/s3_control_plane passed
modules/integrations/splunk_o11y_conf_shared/dashboards/sqs passed
modules/integrations/splunk_o11y_conf_shared/dashboards/sqs_control_plane passed
modules/integrations/splunk_o11y_conf_shared/detectors/aws_regional_health passed
modules/integrations/splunk_o11y_conf_shared/detectors/dependency_probes passed
modules/integrations/splunk_o11y_conf_shared/detectors/ec2_runner_health passed
modules/integrations/splunk_o11y_conf_shared/detectors/k8s passed
modules/integrations/splunk_opencost_eks passed
modules/integrations/splunk_otel_eks passed
modules/integrations/splunk_secrets passed
modules/integrations/splunk_stuck_workflow_job_dispatcher passed
modules/integrations/teleport passed
modules/integrations/teleport/tenant passed
modules/platform/arc passed
modules/platform/arc/scale_set passed
modules/platform/arc/scale_set_controller passed
modules/platform/arc_deployment passed
modules/platform/ec2_deployment passed
modules/platform/ec2_deployment/ec2_update_runner_ssm_ami passed
modules/platform/ec2_deployment/ec2_update_runner_tags passed
modules/platform/forge_runners passed
modules/platform/forge_runners/forge_trust_validator passed
modules/platform/forge_runners/github_actions_job_logs passed
modules/platform/forge_runners/github_app_runner_group passed
modules/platform/forge_runners/github_global_lock passed
modules/platform/forge_runners/github_webhook_relay passed
modules/platform/forge_runners/github_webhook_relay/source passed
modules/platform/forge_runners/redrive_deadletter passed

@github-actions

Copy link
Copy Markdown
Contributor

OpenTofu module tests (minimum-supported)

Result: passed

OpenTofu version: 1.11.0

Metric Count
Passed modules 72
Failed modules 0
Total modules 72
Module Result
modules/helpers/ami_policy passed
modules/helpers/ami_sharing passed
modules/helpers/aws_config_recording passed
modules/helpers/cloud_custodian passed
modules/helpers/cloud_formation passed
modules/helpers/dedicated_mac_hosts passed
modules/helpers/ecr passed
modules/helpers/forge_subscription passed
modules/helpers/microvm passed
modules/helpers/opt_in_regions passed
modules/helpers/service_linked_roles passed
modules/helpers/storage passed
modules/infra/eks passed
modules/integrations/github_webhook_relay_destination passed
modules/integrations/github_webhook_relay_destination_receivers passed
modules/integrations/github_webhook_relay_destination_receivers/webex_webhook_relay passed
modules/integrations/splunk_aws_billing passed
modules/integrations/splunk_cloud_conf_shared passed
modules/integrations/splunk_cloud_data_manager passed
modules/integrations/splunk_cloud_data_manager/data_input passed
modules/integrations/splunk_cloud_data_manager/log_group_reconciler passed
modules/integrations/splunk_cloud_data_manager/sec_meta_ec2_tags passed
modules/integrations/splunk_cloud_data_manager_common passed
modules/integrations/splunk_dependency_monitor passed
modules/integrations/splunk_o11y_aws_integration passed
modules/integrations/splunk_o11y_aws_integration_common passed
modules/integrations/splunk_o11y_conf_shared passed
modules/integrations/splunk_o11y_conf_shared/dashboards/arc_runner_operations passed
modules/integrations/splunk_o11y_conf_shared/dashboards/aws_regional_health passed
modules/integrations/splunk_o11y_conf_shared/dashboards/aws_service_limits passed
modules/integrations/splunk_o11y_conf_shared/dashboards/billing passed
modules/integrations/splunk_o11y_conf_shared/dashboards/dependency_probes passed
modules/integrations/splunk_o11y_conf_shared/dashboards/dynamodb passed
modules/integrations/splunk_o11y_conf_shared/dashboards/ebs passed
modules/integrations/splunk_o11y_conf_shared/dashboards/forge_impact passed
modules/integrations/splunk_o11y_conf_shared/dashboards/k8s_control_plane passed
modules/integrations/splunk_o11y_conf_shared/dashboards/lambda passed
modules/integrations/splunk_o11y_conf_shared/dashboards/lambda_control_plane passed
modules/integrations/splunk_o11y_conf_shared/dashboards/metric_ingest passed
modules/integrations/splunk_o11y_conf_shared/dashboards/opencost passed
modules/integrations/splunk_o11y_conf_shared/dashboards/runner_ec2 passed
modules/integrations/splunk_o11y_conf_shared/dashboards/runner_k8s passed
modules/integrations/splunk_o11y_conf_shared/dashboards/runner_usage passed
modules/integrations/splunk_o11y_conf_shared/dashboards/s3 passed
modules/integrations/splunk_o11y_conf_shared/dashboards/s3_control_plane passed
modules/integrations/splunk_o11y_conf_shared/dashboards/sqs passed
modules/integrations/splunk_o11y_conf_shared/dashboards/sqs_control_plane passed
modules/integrations/splunk_o11y_conf_shared/detectors/aws_regional_health passed
modules/integrations/splunk_o11y_conf_shared/detectors/dependency_probes passed
modules/integrations/splunk_o11y_conf_shared/detectors/ec2_runner_health passed
modules/integrations/splunk_o11y_conf_shared/detectors/k8s passed
modules/integrations/splunk_opencost_eks passed
modules/integrations/splunk_otel_eks passed
modules/integrations/splunk_secrets passed
modules/integrations/splunk_stuck_workflow_job_dispatcher passed
modules/integrations/teleport passed
modules/integrations/teleport/tenant passed
modules/platform/arc passed
modules/platform/arc/scale_set passed
modules/platform/arc/scale_set_controller passed
modules/platform/arc_deployment passed
modules/platform/ec2_deployment passed
modules/platform/ec2_deployment/ec2_update_runner_ssm_ami passed
modules/platform/ec2_deployment/ec2_update_runner_tags passed
modules/platform/forge_runners passed
modules/platform/forge_runners/forge_trust_validator passed
modules/platform/forge_runners/github_actions_job_logs passed
modules/platform/forge_runners/github_app_runner_group passed
modules/platform/forge_runners/github_global_lock passed
modules/platform/forge_runners/github_webhook_relay passed
modules/platform/forge_runners/github_webhook_relay/source passed
modules/platform/forge_runners/redrive_deadletter passed

@dependabot
dependabot Bot force-pushed the dependabot/uv/python-dependencies-881fb2849b branch from cb35ab3 to 683932b Compare August 21, 2026 23:55
…y with 3 updates

Bumps the python-dependencies group with 3 updates in the / directory: [uv](https://github.com/astral-sh/uv), [boto3](https://github.com/boto/boto3) and [hypothesis](https://github.com/HypothesisWorks/hypothesis).


Updates `uv` from 0.12.3 to 0.12.5
- [Release notes](https://github.com/astral-sh/uv/releases)
- [Changelog](https://github.com/astral-sh/uv/blob/main/CHANGELOG.md)
- [Commits](astral-sh/uv@0.12.3...0.12.5)

Updates `boto3` from 1.43.69 to 1.43.73
- [Release notes](https://github.com/boto/boto3/releases)
- [Commits](boto/boto3@1.43.69...1.43.73)

Updates `hypothesis` from 6.165.3 to 6.165.10
- [Release notes](https://github.com/HypothesisWorks/hypothesis/releases)
- [Commits](HypothesisWorks/hypothesis@v6.165.3...v6.165.10)

---
updated-dependencies:
- dependency-name: boto3
  dependency-version: 1.43.71
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: hypothesis
  dependency-version: 6.165.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: uv
  dependency-version: 0.12.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/uv/python-dependencies-881fb2849b branch from 683932b to 5ff3c79 Compare August 24, 2026 23:56
@Nikolaichukr
Nikolaichukr merged commit 5265778 into main Aug 25, 2026
20 checks passed
@Nikolaichukr
Nikolaichukr deleted the dependabot/uv/python-dependencies-881fb2849b branch August 25, 2026 22:36
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Pull requests that update python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant