openfun / marsha

:clapper: An opensource LTI Learning Content Management System (LCMS)
MIT License
104 stars 24 forks source link

⬆️(dependencies) update python dependencies #2526

Closed renovate[bot] closed 6 months ago

renovate[bot] commented 7 months ago

Mend Renovate

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
bandit (source, changelog) ==1.7.5 -> ==1.7.6 age adoption passing confidence
black (changelog) ==23.11.0 -> ==23.12.0 age adoption passing confidence
boto3 ==1.29.6 -> ==1.34.6 age adoption passing confidence
celery (source, changelog) ==5.3.5 -> ==5.3.6 age adoption passing confidence
cryptography (changelog) ==41.0.5 -> ==41.0.7 age adoption passing confidence
django (source, changelog) ==4.2.7 -> ==5.0 age adoption passing confidence
django-filter (changelog) ==23.4 -> ==23.5 age adoption passing confidence
django-waffle ==4.0.0 -> ==4.1.0 age adoption passing confidence
djangorestframework_simplejwt ==5.3.0 -> ==5.3.1 age adoption passing confidence
drf-spectacular ==0.26.5 -> ==0.27.0 age adoption passing confidence
ipython (source) ==8.18.0 -> ==8.18.1 age adoption passing confidence
isort (source, changelog) ==5.12.0 -> ==5.13.2 age adoption passing confidence
psycopg (source, changelog) ==3.1.13 -> ==3.1.16 age adoption passing confidence
pylint (changelog) ==3.0.2 -> ==3.0.3 age adoption passing confidence
sentry-sdk (changelog) ==1.37.1 -> ==1.39.1 age adoption passing confidence
social-auth-core ==4.5.0 -> ==4.5.1 age adoption passing confidence
uvicorn (changelog) ==0.24.0.post1 -> ==0.25.0 age adoption passing confidence

Release Notes

PyCQA/bandit (bandit) ### [`v1.7.6`](https://togithub.com/PyCQA/bandit/releases/tag/1.7.6) [Compare Source](https://togithub.com/PyCQA/bandit/compare/1.7.5...1.7.6) #### What's Changed - Update bug report to include version 1.7.5 by [@​ericwb](https://togithub.com/ericwb) in [https://github.com/PyCQA/bandit/pull/993](https://togithub.com/PyCQA/bandit/pull/993) - Render Python 3.10 in drop down correctly by [@​ericwb](https://togithub.com/ericwb) in [https://github.com/PyCQA/bandit/pull/997](https://togithub.com/PyCQA/bandit/pull/997) - Remove checks for Python2 urllib by [@​ericwb](https://togithub.com/ericwb) in [https://github.com/PyCQA/bandit/pull/999](https://togithub.com/PyCQA/bandit/pull/999) - Improper detection of non-requests module by [@​ericwb](https://togithub.com/ericwb) in [https://github.com/PyCQA/bandit/pull/1011](https://togithub.com/PyCQA/bandit/pull/1011) - xmlrpclib replaced with xmlrpc in Python3 by [@​ericwb](https://togithub.com/ericwb) in [https://github.com/PyCQA/bandit/pull/1012](https://togithub.com/PyCQA/bandit/pull/1012) - language and linting updates by [@​marksmayo](https://togithub.com/marksmayo) in [https://github.com/PyCQA/bandit/pull/1015](https://togithub.com/PyCQA/bandit/pull/1015) - Adds check for crypt module usage as weak hash by [@​ericwb](https://togithub.com/ericwb) in [https://github.com/PyCQA/bandit/pull/1018](https://togithub.com/PyCQA/bandit/pull/1018) - Switch to tox 4 by [@​mportesdev](https://togithub.com/mportesdev) in [https://github.com/PyCQA/bandit/pull/1020](https://togithub.com/PyCQA/bandit/pull/1020) - Skip unnecessary `pip install` commands in the pythonpackage.yml workflow by [@​mportesdev](https://togithub.com/mportesdev) in [https://github.com/PyCQA/bandit/pull/1021](https://togithub.com/PyCQA/bandit/pull/1021) - Update versions of used GitHub Actions by [@​mportesdev](https://togithub.com/mportesdev) in [https://github.com/PyCQA/bandit/pull/1024](https://togithub.com/PyCQA/bandit/pull/1024) - Update pre-commit hooks by [@​mportesdev](https://togithub.com/mportesdev) in [https://github.com/PyCQA/bandit/pull/1026](https://togithub.com/PyCQA/bandit/pull/1026) - Add `random.Random` to B311 checks by [@​shiftinv](https://togithub.com/shiftinv) in [https://github.com/PyCQA/bandit/pull/940](https://togithub.com/PyCQA/bandit/pull/940) - Add a copy button to all code snippets in docs by [@​ericwb](https://togithub.com/ericwb) in [https://github.com/PyCQA/bandit/pull/1030](https://togithub.com/PyCQA/bandit/pull/1030) - Replace pbr in favor of importlib by [@​ericwb](https://togithub.com/ericwb) in [https://github.com/PyCQA/bandit/pull/1016](https://togithub.com/PyCQA/bandit/pull/1016) - Switch from open collective to PSF by [@​ericwb](https://togithub.com/ericwb) in [https://github.com/PyCQA/bandit/pull/1031](https://togithub.com/PyCQA/bandit/pull/1031) - Make pre-commit run Bandit hook using a single process by [@​Klavionik](https://togithub.com/Klavionik) in [https://github.com/PyCQA/bandit/pull/1029](https://togithub.com/PyCQA/bandit/pull/1029) - Remove support for Python 3.7 due to end-of-life by [@​ericwb](https://togithub.com/ericwb) in [https://github.com/PyCQA/bandit/pull/1034](https://togithub.com/PyCQA/bandit/pull/1034) - Update asserts.py documentation by [@​deronnax](https://togithub.com/deronnax) in [https://github.com/PyCQA/bandit/pull/1036](https://togithub.com/PyCQA/bandit/pull/1036) - Simplify `wrap_file_object` by [@​mportesdev](https://togithub.com/mportesdev) in [https://github.com/PyCQA/bandit/pull/1037](https://togithub.com/PyCQA/bandit/pull/1037) - django_rawsql_used: support keyword arguments used in `RawSQL` by [@​kevinmarsh](https://togithub.com/kevinmarsh) in [https://github.com/PyCQA/bandit/pull/765](https://togithub.com/PyCQA/bandit/pull/765) - Avoid gitpyhon CVE-2022-24439 by [@​carlosduelo](https://togithub.com/carlosduelo) in [https://github.com/PyCQA/bandit/pull/1048](https://togithub.com/PyCQA/bandit/pull/1048) - Update blacklist call documentation by [@​costaparas](https://togithub.com/costaparas) in [https://github.com/PyCQA/bandit/pull/1045](https://togithub.com/PyCQA/bandit/pull/1045) - Support ignoring blacklists by name by [@​costaparas](https://togithub.com/costaparas) in [https://github.com/PyCQA/bandit/pull/1046](https://togithub.com/PyCQA/bandit/pull/1046) - Fix dependabot to update github actions by [@​ericwb](https://togithub.com/ericwb) in [https://github.com/PyCQA/bandit/pull/1057](https://togithub.com/PyCQA/bandit/pull/1057) - Bump actions/checkout from 3 to 4 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/PyCQA/bandit/pull/1058](https://togithub.com/PyCQA/bandit/pull/1058) - Fix for ReadtheDocs build by [@​ericwb](https://togithub.com/ericwb) in [https://github.com/PyCQA/bandit/pull/1061](https://togithub.com/PyCQA/bandit/pull/1061) - fix(plugins/B507): also detect class instances by [@​mkniewallner](https://togithub.com/mkniewallner) in [https://github.com/PyCQA/bandit/pull/1064](https://togithub.com/PyCQA/bandit/pull/1064) - Use mirror repository for black pre-commit hook by [@​mportesdev](https://togithub.com/mportesdev) in [https://github.com/PyCQA/bandit/pull/1070](https://togithub.com/PyCQA/bandit/pull/1070) - Add official support of Python 3.12 by [@​ericwb](https://togithub.com/ericwb) in [https://github.com/PyCQA/bandit/pull/1068](https://togithub.com/PyCQA/bandit/pull/1068) - Fix crash on pyproject.toml without bandit config by [@​javajawa](https://togithub.com/javajawa) in [https://github.com/PyCQA/bandit/pull/1073](https://togithub.com/PyCQA/bandit/pull/1073) - refactor: remove `importlib-metadata` fallback by [@​mkniewallner](https://togithub.com/mkniewallner) in [https://github.com/PyCQA/bandit/pull/1066](https://togithub.com/PyCQA/bandit/pull/1066) - Fixes for sphinx build by [@​ericwb](https://togithub.com/ericwb) in [https://github.com/PyCQA/bandit/pull/1063](https://togithub.com/PyCQA/bandit/pull/1063) #### New Contributors - [@​marksmayo](https://togithub.com/marksmayo) made their first contribution in [https://github.com/PyCQA/bandit/pull/1015](https://togithub.com/PyCQA/bandit/pull/1015) - [@​shiftinv](https://togithub.com/shiftinv) made their first contribution in [https://github.com/PyCQA/bandit/pull/940](https://togithub.com/PyCQA/bandit/pull/940) - [@​Klavionik](https://togithub.com/Klavionik) made their first contribution in [https://github.com/PyCQA/bandit/pull/1029](https://togithub.com/PyCQA/bandit/pull/1029) - [@​deronnax](https://togithub.com/deronnax) made their first contribution in [https://github.com/PyCQA/bandit/pull/1036](https://togithub.com/PyCQA/bandit/pull/1036) - [@​kevinmarsh](https://togithub.com/kevinmarsh) made their first contribution in [https://github.com/PyCQA/bandit/pull/765](https://togithub.com/PyCQA/bandit/pull/765) - [@​carlosduelo](https://togithub.com/carlosduelo) made their first contribution in [https://github.com/PyCQA/bandit/pull/1048](https://togithub.com/PyCQA/bandit/pull/1048) - [@​costaparas](https://togithub.com/costaparas) made their first contribution in [https://github.com/PyCQA/bandit/pull/1045](https://togithub.com/PyCQA/bandit/pull/1045) - [@​dependabot](https://togithub.com/dependabot) made their first contribution in [https://github.com/PyCQA/bandit/pull/1058](https://togithub.com/PyCQA/bandit/pull/1058) - [@​javajawa](https://togithub.com/javajawa) made their first contribution in [https://github.com/PyCQA/bandit/pull/1073](https://togithub.com/PyCQA/bandit/pull/1073) **Full Changelog**: https://github.com/PyCQA/bandit/compare/1.7.5...1.7.6
psf/black (black) ### [`v23.12.0`](https://togithub.com/psf/black/blob/HEAD/CHANGES.md#23120) [Compare Source](https://togithub.com/psf/black/compare/23.11.0...23.12.0) ##### Highlights It's almost 2024, which means it's time for a new edition of *Black*'s stable style! Together with this release, we'll put out an alpha release 24.1a1 showcasing the draft 2024 stable style, which we'll finalize in the January release. Please try it out and [share your feedback](https://togithub.com/psf/black/issues/4042). This release (23.12.0) will still produce the 2023 style. Most but not all of the changes in `--preview` mode will be in the 2024 stable style. ##### Stable style - Fix bug where `# fmt: off` automatically dedents when used with the `--line-ranges` option, even when it is not within the specified line range. ([#​4084](https://togithub.com/psf/black/issues/4084)) - Fix feature detection for parenthesized context managers ([#​4104](https://togithub.com/psf/black/issues/4104)) ##### Preview style - Prefer more equal signs before a break when splitting chained assignments ([#​4010](https://togithub.com/psf/black/issues/4010)) - Standalone form feed characters at the module level are no longer removed ([#​4021](https://togithub.com/psf/black/issues/4021)) - Additional cases of immediately nested tuples, lists, and dictionaries are now indented less ([#​4012](https://togithub.com/psf/black/issues/4012)) - Allow empty lines at the beginning of all blocks, except immediately before a docstring ([#​4060](https://togithub.com/psf/black/issues/4060)) - Fix crash in preview mode when using a short `--line-length` ([#​4086](https://togithub.com/psf/black/issues/4086)) - Keep suites consisting of only an ellipsis on their own lines if they are not functions or class definitions ([#​4066](https://togithub.com/psf/black/issues/4066)) ([#​4103](https://togithub.com/psf/black/issues/4103)) ##### Configuration - `--line-ranges` now skips *Black*'s internal stability check in `--safe` mode. This avoids a crash on rare inputs that have many unformatted same-content lines. ([#​4034](https://togithub.com/psf/black/issues/4034)) ##### Packaging - Upgrade to mypy 1.7.1 ([#​4049](https://togithub.com/psf/black/issues/4049)) ([#​4069](https://togithub.com/psf/black/issues/4069)) - Faster compiled wheels are now available for CPython 3.12 ([#​4070](https://togithub.com/psf/black/issues/4070)) ##### Integrations - Enable 3.12 CI ([#​4035](https://togithub.com/psf/black/issues/4035)) - Build docker images in parallel ([#​4054](https://togithub.com/psf/black/issues/4054)) - Build docker images with 3.12 ([#​4055](https://togithub.com/psf/black/issues/4055))
boto/boto3 (boto3) ### [`v1.34.6`](https://togithub.com/boto/boto3/blob/HEAD/CHANGELOG.rst#1346) [Compare Source](https://togithub.com/boto/boto3/compare/1.34.5...1.34.6) \====== - enhancement:AWSCRT: \[`botocore`] Update awscrt version to 0.19.19 - api-change:`amp`: \[`botocore`] This release updates Amazon Managed Service for Prometheus APIs to support customer managed KMS keys. - api-change:`appintegrations`: \[`botocore`] The Amazon AppIntegrations service adds DeleteApplication API for deleting applications, and updates APIs to support third party applications reacting to workspace events and make data requests to Amazon Connect for agent and contact events. - api-change:`bedrock-agent`: \[`botocore`] This release introduces Amazon Aurora as a vector store on Knowledge Bases for Amazon Bedrock - api-change:`codecommit`: \[`botocore`] AWS CodeCommit now supports customer managed keys from AWS Key Management Service. UpdateRepositoryEncryptionKey is added for updating the key configuration. CreateRepository, GetRepository, BatchGetRepositories are updated with new input or output parameters. - api-change:`connect`: \[`botocore`] Adds APIs to manage User Proficiencies and Predefined Attributes. Enhances StartOutboundVoiceContact API input. Introduces SearchContacts API. Enhances DescribeContact API. Adds an API to update Routing Attributes in QueuePriority and QueueTimeAdjustmentSeconds. - api-change:`medialive`: \[`botocore`] MediaLive now supports the ability to configure the audio that an AWS Elemental Link UHD device produces, when the device is configured as the source for a flow in AWS Elemental MediaConnect. - api-change:`neptune-graph`: \[`botocore`] Adds Waiters for successful creation and deletion of Graph, Graph Snapshot, Import Task and Private Endpoints for Neptune Analytics - api-change:`rds-data`: \[`botocore`] This release adds support for using RDS Data API with Aurora PostgreSQL Serverless v2 and provisioned DB clusters. - api-change:`rds`: \[`botocore`] This release adds support for using RDS Data API with Aurora PostgreSQL Serverless v2 and provisioned DB clusters. - api-change:`sagemaker`: \[`botocore`] Amazon SageMaker Training now provides model training container access for debugging purposes. Amazon SageMaker Search now provides the ability to use visibility conditions to limit resource access to a single domain or multiple domains. ### [`v1.34.5`](https://togithub.com/boto/boto3/blob/HEAD/CHANGELOG.rst#1345) [Compare Source](https://togithub.com/boto/boto3/compare/1.34.4...1.34.5) \====== - api-change:`appstream`: \[`botocore`] This release introduces configurable clipboard, allowing admins to specify the maximum length of text that can be copied by the users from their device to the remote session and vice-versa. - api-change:`eks`: \[`botocore`] Add support for cluster insights, new EKS capability that surfaces potentially upgrade impacting issues. - api-change:`guardduty`: \[`botocore`] This release 1) introduces a new API: GetOrganizationStatistics , and 2) adds a new UsageStatisticType TOP_ACCOUNTS_BY_FEATURE for GetUsageStatistics API - api-change:`managedblockchain-query`: \[`botocore`] Adding Confirmation Status and Execution Status to GetTransaction Response. - api-change:`mediatailor`: \[`botocore`] Adds the ability to configure time shifting on MediaTailor channels using the TimeShiftConfiguration field - api-change:`route53`: \[`botocore`] Amazon Route 53 now supports the Canada West (Calgary) Region (ca-west-1) for latency records, geoproximity records, and private DNS for Amazon VPCs in that region. - api-change:`endpoint-rules`: \[`botocore`] Update endpoint-rules client to latest version ### [`v1.34.4`](https://togithub.com/boto/boto3/blob/HEAD/CHANGELOG.rst#1344) [Compare Source](https://togithub.com/boto/boto3/compare/1.34.3...1.34.4) \====== - api-change:`appsync`: \[`botocore`] This release adds additional configurations on GraphQL APIs for limits on query depth, resolver count, and introspection - api-change:`chime-sdk-meetings`: \[`botocore`] Add meeting features to specify a maximum camera resolution, a maximum content sharing resolution, and a maximum number of attendees for a given meeting. - api-change:`ec2`: \[`botocore`] Provision BYOIPv4 address ranges and advertise them by specifying the network border groups option in Los Angeles, Phoenix and Dallas AWS Local Zones. - api-change:`fsx`: \[`botocore`] Added support for FSx for OpenZFS on-demand data replication across AWS accounts and/or regions.Added the IncludeShared attribute for DescribeSnapshots.Added the CopyStrategy attribute for OpenZFSVolumeConfiguration. - api-change:`marketplace-catalog`: \[`botocore`] AWS Marketplace now supports a new API, BatchDescribeEntities, which returns metadata and content for multiple entities. - api-change:`rds`: \[`botocore`] RDS - The release adds two new APIs: DescribeDBRecommendations and ModifyDBRecommendation ### [`v1.34.3`](https://togithub.com/boto/boto3/blob/HEAD/CHANGELOG.rst#1343) [Compare Source](https://togithub.com/boto/boto3/compare/1.34.2...1.34.3) \====== - api-change:`cognito-idp`: \[`botocore`] Amazon Cognito now supports trigger versions that define the fields in the request sent to pre token generation Lambda triggers. - api-change:`eks`: \[`botocore`] Add support for EKS Cluster Access Management. - api-change:`quicksight`: \[`botocore`] A docs-only release to add missing entities to the API reference. - api-change:`route53resolver`: \[`botocore`] Add DOH protocols in resolver endpoints. ### [`v1.34.2`](https://togithub.com/boto/boto3/blob/HEAD/CHANGELOG.rst#1342) [Compare Source](https://togithub.com/boto/boto3/compare/1.34.1...1.34.2) \====== - api-change:`cloud9`: \[`botocore`] Updated Cloud9 API documentation for AL2023 release - api-change:`connect`: \[`botocore`] Adds relatedContactId field to StartOutboundVoiceContact API input. Introduces PauseContact API and ResumeContact API for Task contacts. Adds pause duration, number of pauses, timestamps for last paused and resumed events to DescribeContact API response. Adds new Rule type and new Rule action. - api-change:`connectcases`: \[`botocore`] Increase number of fields that can be included in CaseEventIncludedData from 50 to 200 - api-change:`kms`: \[`botocore`] Documentation updates for AWS Key Management Service - api-change:`rds`: \[`botocore`] Updates Amazon RDS documentation by adding code examples - api-change:`sagemaker`: \[`botocore`] This release 1) introduces a new API: DeleteCompilationJob , and 2) adds InfraCheckConfig for Create/Describe training job API ### [`v1.34.1`](https://togithub.com/boto/boto3/blob/HEAD/CHANGELOG.rst#1341) [Compare Source](https://togithub.com/boto/boto3/compare/1.34.0...1.34.1) \====== - api-change:`appstream`: \[`botocore`] This release includes support for images of Windows Server 2022 platform. - api-change:`b2bi`: \[`botocore`] Documentation updates for AWS B2B Data Interchange - api-change:`billingconductor`: \[`botocore`] Billing Conductor is releasing a new API, GetBillingGroupCostReport, which provides the ability to retrieve/view the Billing Group Cost Report broken down by attributes for a specific billing group. - api-change:`connect`: \[`botocore`] This release adds support for more granular billing using tags (key:value pairs) - api-change:`controltower`: \[`botocore`] Documentation updates for AWS Control Tower. - api-change:`firehose`: \[`botocore`] This release, 1) adds configurable buffering hints for the Splunk destination, and 2) reduces the minimum configurable buffering interval for supported destinations - api-change:`gamelift`: \[`botocore`] Amazon GameLift adds the ability to add and update the game properties of active game sessions. - api-change:`iot`: \[`botocore`] This release adds the ability to self-manage certificate signing in AWS IoT Core fleet provisioning using the new certificate provider resource. - api-change:`neptune-graph`: \[`botocore`] This is the initial SDK release for Amazon Neptune Analytics - api-change:`opensearch`: \[`botocore`] Updating documentation for Amazon OpenSearch Service support for new zero-ETL integration with Amazon S3. - api-change:`quicksight`: \[`botocore`] Update Dashboard Links support; SingleAxisOptions support; Scatterplot Query limit support. - api-change:`workspaces`: \[`botocore`] Updated note to ensure customers understand running modes. - api-change:`endpoint-rules`: \[`botocore`] Update endpoint-rules client to latest version ### [`v1.34.0`](https://togithub.com/boto/boto3/blob/HEAD/CHANGELOG.rst#1340) [Compare Source](https://togithub.com/boto/boto3/compare/1.33.13...1.34.0) \====== - feature:Python: End of support for Python 3.7 - feature:Python: \[`botocore`] End of support for Python 3.7 - api-change:`drs`: \[`botocore`] Adding AgentVersion to SourceServer and RecoveryInstance structures ### [`v1.33.13`](https://togithub.com/boto/boto3/blob/HEAD/CHANGELOG.rst#13313) [Compare Source](https://togithub.com/boto/boto3/compare/1.33.12...1.33.13) \======= - api-change:`imagebuilder`: \[`botocore`] This release adds the Image Workflows feature to give more flexibility and control over the image building and testing process. - api-change:`location`: \[`botocore`] This release 1) adds sub-municipality field in Places API for searching and getting places information, and 2) allows optimizing route calculation based on expected arrival time. - api-change:`logs`: \[`botocore`] This release introduces the StartLiveTail API to tail ingested logs in near real time. ### [`v1.33.12`](https://togithub.com/boto/boto3/blob/HEAD/CHANGELOG.rst#13312) [Compare Source](https://togithub.com/boto/boto3/compare/1.33.11...1.33.12) \======= - api-change:`neptune`: \[`botocore`] This release adds a new parameter configuration setting to the Neptune cluster related APIs that can be leveraged to switch between the underlying supported storage modes. - api-change:`pinpoint`: \[`botocore`] This release includes Amazon Pinpoint API documentation updates pertaining to campaign message sending rate limits. - api-change:`securityhub`: \[`botocore`] Added new resource detail objects to ASFF, including resources for AwsDynamoDbTable, AwsEc2ClientVpnEndpoint, AwsMskCluster, AwsS3AccessPoint, AwsS3Bucket - api-change:`endpoint-rules`: \[`botocore`] Update endpoint-rules client to latest version ### [`v1.33.11`](https://togithub.com/boto/boto3/blob/HEAD/CHANGELOG.rst#13311) [Compare Source](https://togithub.com/boto/boto3/compare/1.33.10...1.33.11) \======= - api-change:`cloudwatch`: \[`botocore`] Update cloudwatch client to latest version - api-change:`ec2`: \[`botocore`] M2 Mac instances are built on Apple M2 Mac mini computers. I4i instances are powered by 3rd generation Intel Xeon Scalable processors. C7i compute optimized, M7i general purpose and R7i memory optimized instances are powered by custom 4th Generation Intel Xeon Scalable processors. - api-change:`finspace`: \[`botocore`] Releasing Scaling Group, Dataview, and Volume APIs ### [`v1.33.10`](https://togithub.com/boto/boto3/blob/HEAD/CHANGELOG.rst#13310) [Compare Source](https://togithub.com/boto/boto3/compare/1.33.9...1.33.10) \======= - api-change:`codedeploy`: \[`botocore`] This release adds support for two new CodeDeploy features: 1) zonal deployments for Amazon EC2 in-place deployments, 2) deployments triggered by Auto Scaling group termination lifecycle hook events. ### [`v1.33.9`](https://togithub.com/boto/boto3/blob/HEAD/CHANGELOG.rst#1339) [Compare Source](https://togithub.com/boto/boto3/compare/1.33.8...1.33.9) \====== - api-change:`backup`: \[`botocore`] AWS Backup - Features: Add VaultType to the output of DescribeRecoveryPoint, ListRecoveryPointByBackupVault API and add ResourceType to the input of ListRestoreJobs API - api-change:`comprehend`: \[`botocore`] Documentation updates for Trust and Safety features. - api-change:`connect`: \[`botocore`] Releasing Tagging Support for Instance Management APIS - api-change:`ec2`: \[`botocore`] Releasing the new cpuManufacturer attribute within the DescribeInstanceTypes API response which notifies our customers with information on who the Manufacturer is for the processor attached to the instance, for example: Intel. - api-change:`payment-cryptography`: \[`botocore`] AWS Payment Cryptography IPEK feature release ### [`v1.33.8`](https://togithub.com/boto/boto3/blob/HEAD/CHANGELOG.rst#1338) [Compare Source](https://togithub.com/boto/boto3/compare/1.33.7...1.33.8) \====== - api-change:`athena`: \[`botocore`] Adding IdentityCenter enabled request for interactive query - api-change:`cleanroomsml`: \[`botocore`] Updated service title from cleanroomsml to CleanRoomsML. - api-change:`cloudformation`: \[`botocore`] Documentation update, December 2023 - api-change:`ec2`: \[`botocore`] Adds A10G, T4G, and H100 as accelerator name options and Habana as an accelerator manufacturer option for attribute based selection ### [`v1.33.7`](https://togithub.com/boto/boto3/blob/HEAD/CHANGELOG.rst#1337) [Compare Source](https://togithub.com/boto/boto3/compare/1.33.6...1.33.7) \====== - api-change:`billingconductor`: \[`botocore`] This release adds the ability to specify a linked account of the billing group for the custom line item resource. - api-change:`braket`: \[`botocore`] This release enhances service support to create quantum tasks and hybrid jobs associated with Braket Direct Reservations. - api-change:`cloud9`: \[`botocore`] This release adds the requirement to include the imageId parameter in the CreateEnvironmentEC2 API call. - api-change:`cloudformation`: \[`botocore`] Including UPDATE_\* states as a success status for CreateStack waiter. - api-change:`finspace`: \[`botocore`] Release General Purpose type clusters - api-change:`medialive`: \[`botocore`] Adds support for custom color correction on channels using 3D LUT files. - api-change:`servicecatalog-appregistry`: \[`botocore`] Documentation-only updates for Dawn - api-change:`endpoint-rules`: \[`botocore`] Update endpoint-rules client to latest version ### [`v1.33.6`](https://togithub.com/boto/boto3/blob/HEAD/CHANGELOG.rst#1336) [Compare Source](https://togithub.com/boto/boto3/compare/1.33.5...1.33.6) \====== - api-change:`qconnect`: \[`botocore`] This release adds the PutFeedback API and allows providing feedback against the specified assistant for the specified target. - api-change:`rbin`: \[`botocore`] Added resource identifier in the output and updated error handling. - api-change:`verifiedpermissions`: \[`botocore`] Adds description field to PolicyStore API's and namespaces field to GetSchema. ### [`v1.33.5`](https://togithub.com/boto/boto3/blob/HEAD/CHANGELOG.rst#1335) [Compare Source](https://togithub.com/boto/boto3/compare/1.33.4...1.33.5) \====== - api-change:`arc-zonal-shift`: \[`botocore`] This release adds a new capability, zonal autoshift. You can configure zonal autoshift so that AWS shifts traffic for a resource away from an Availability Zone, on your behalf, when AWS determines that there is an issue that could potentially affect customers in the Availability Zone. - api-change:`glue`: \[`botocore`] Adds observation and analyzer support to the GetDataQualityResult and BatchGetDataQualityResult APIs. - api-change:`sagemaker`: \[`botocore`] This release adds support for 1/ Code Editor, based on Code-OSS, Visual Studio Code Open Source, a new fully managed IDE option in SageMaker Studio 2/ JupyterLab, a new fully managed JupyterLab IDE experience in SageMaker Studio ### [`v1.33.4`](https://togithub.com/boto/boto3/blob/HEAD/CHANGELOG.rst#1334) [Compare Source](https://togithub.com/boto/boto3/compare/1.33.3...1.33.4) \====== - bugfix:`s3transfer`: Raise floor for `s3transfer` to 0.8.2 to avoid any conflicts with the awscrt - api-change:`marketplace-agreement`: \[`botocore`] The AWS Marketplace Agreement Service provides an API interface that helps AWS Marketplace sellers manage their agreements, including listing, filtering, and viewing details about their agreements. - api-change:`marketplace-catalog`: \[`botocore`] This release enhances the ListEntities API to support new entity type-specific strongly typed filters in the request and entity type-specific strongly typed summaries in the response. - api-change:`marketplace-deployment`: \[`botocore`] AWS Marketplace Deployment is a new service that provides essential features that facilitate the deployment of software, data, and services procured through AWS Marketplace. - api-change:`redshift-serverless`: \[`botocore`] This release adds the following support for Amazon Redshift Serverless: 1) cross-account cross-VPCs, 2) copying snapshots across Regions, 3) scheduling snapshot creation, and 4) restoring tables from a recovery point. - api-change:`endpoint-rules`: \[`botocore`] Update endpoint-rules client to latest version ### [`v1.33.3`](https://togithub.com/boto/boto3/blob/HEAD/CHANGELOG.rst#1333) [Compare Source](https://togithub.com/boto/boto3/compare/1.33.2...1.33.3) \====== - api-change:`application-autoscaling`: \[`botocore`] Amazon SageMaker customers can now use Application Auto Scaling to automatically scale the number of Inference Component copies across an endpoint to meet the varying demand of their workloads. - api-change:`cleanrooms`: \[`botocore`] AWS Clean Rooms now provides differential privacy to protect against user-identification attempts and machine learning modeling to allow two parties to identify similar users in their data. - api-change:`cleanroomsml`: \[`botocore`] Public Preview SDK release of AWS Clean Rooms ML APIs - api-change:`opensearch`: \[`botocore`] Launching Amazon OpenSearch Service support for new zero-ETL integration with Amazon S3. Customers can now manage their direct query data sources to Amazon S3 programatically - api-change:`opensearchserverless`: \[`botocore`] Amazon OpenSearch Serverless collections support an additional attribute called standby-replicas. This allows to specify whether a collection should have redundancy enabled. - api-change:`sagemaker-runtime`: \[`botocore`] Update sagemaker-runtime client to latest version - api-change:`sagemaker`: \[`botocore`] This release adds following support 1/ Improved SDK tooling for model deployment. 2/ New Inference Component based features to lower inference costs and latency 3/ SageMaker HyperPod management. 4/ Additional parameters for FM Fine Tuning in Autopilot - api-change:`sts`: \[`botocore`] Documentation updates for AWS Security Token Service. - api-change:`endpoint-rules`: \[`botocore`] Update endpoint-rules client to latest version ### [`v1.33.2`](https://togithub.com/boto/boto3/blob/HEAD/CHANGELOG.rst#1332) [Compare Source](https://togithub.com/boto/boto3/compare/1.33.1...1.33.2) \====== - api-change:`accessanalyzer`: \[`botocore`] This release adds support for external access findings for S3 directory buckets to help you easily identify cross-account access. Updated service API, documentation, and paginators. - api-change:`bedrock-agent-runtime`: \[`botocore`] This release introduces Agents for Amazon Bedrock Runtime - api-change:`bedrock-agent`: \[`botocore`] This release introduces Agents for Amazon Bedrock - api-change:`bedrock-runtime`: \[`botocore`] This release adds support for minor versions/aliases for invoke model identifier. - api-change:`bedrock`: \[`botocore`] This release adds support for customization types, model life cycle status and minor versions/aliases for model identifiers. - api-change:`connect`: \[`botocore`] Added support for following capabilities: Amazon Connect's in-app, web, and video calling. Two-way SMS integrations. Contact Lens real-time chat analytics feature. Amazon Connect Analytics Datalake capability. Capability to configure real time chat rules. - api-change:`customer-profiles`: \[`botocore`] This release introduces DetectProfileObjectType API to auto generate object type mapping. - api-change:`qbusiness`: \[`botocore`] Amazon Q - a generative AI powered application that your employees can use to ask questions and get answers from knowledge spread across disparate content repositories, summarize reports, write articles, take actions, and much more - all within their company's connected content repositories. - api-change:`qconnect`: \[`botocore`] Amazon Q in Connect, an LLM-enhanced evolution of Amazon Connect Wisdom. This release adds generative AI support to Amazon Q Connect QueryAssistant and GetRecommendations APIs. - api-change:`s3`: \[`botocore`] Adds support for S3 Express One Zone. - api-change:`s3control`: \[`botocore`] Adds support for S3 Express One Zone, and InvocationSchemaVersion 2.0 for S3 Batch Operations. - api-change:`endpoint-rules`: \[`botocore`] Update endpoint-rules client to latest version ### [`v1.33.1`](https://togithub.com/boto/boto3/blob/HEAD/CHANGELOG.rst#1331) [Compare Source](https://togithub.com/boto/boto3/compare/1.33.0...1.33.1) \====== - api-change:`elasticache`: \[`botocore`] Launching Amazon ElastiCache Serverless that enables you to create a cache in under a minute without any capacity management. ElastiCache Serverless monitors the cache's memory, CPU, and network usage and scales both vertically and horizontally to support your application's requirements. ### [`v1.33.0`](https://togithub.com/boto/boto3/blob/HEAD/CHANGELOG.rst#1330) [Compare Source](https://togithub.com/boto/boto3/compare/1.29.7...1.33.0) \====== - enhancement:Versioning: Bump boto3 from 1.29.7 to 1.33.0 to match Botocore versioning scheme. - feature:`s3`: Boto3 will now opt into using the awscrt on select EC2 instance types for s3 transfers. - feature:Versioning: \[`botocore`] With the release of Botocore 1.33.0, Boto3 and Botocore will share the same version number. - api-change:`appsync`: \[`botocore`] This update enables introspection of Aurora cluster databases using the RDS Data API - api-change:`b2bi`: \[`botocore`] This is the initial SDK release for AWS B2B Data Interchange. - api-change:`backup`: \[`botocore`] AWS Backup now supports restore testing, a new feature that allows customers to automate restore testing and validating their backups. Additionally, this release adds support for EBS Snapshots Archive tier. - api-change:`controltower`: \[`botocore`] This release adds the following support: 1. The EnableControl API can configure controls that are configurable. 2. The GetEnabledControl API shows the configured parameters on an enabled control. 3. The new UpdateEnabledControl API can change parameters on an enabled control. - api-change:`efs`: \[`botocore`] Update efs client to latest version - api-change:`fis`: \[`botocore`] AWS FIS adds support for multi-account experiments & empty target resolution. This release also introduces the CreateTargetAccountConfiguration API that allows experiments across multiple AWS accounts, and the ListExperimentResolvedTargets API to list target details. - api-change:`glue`: \[`botocore`] add observations support to DQ CodeGen config model + update document for connectiontypes supported by ConnectorData entities - api-change:`rds`: \[`botocore`] Updates Amazon RDS documentation for support for RDS for Db2. - api-change:`securityhub`: \[`botocore`] Adds and updates APIs to support central configuration. This feature allows the Security Hub delegated administrator to configure Security Hub for their entire AWS Org across multiple regions from a home Region. With this release, findings also include account name and application metadata. - api-change:`transcribe`: \[`botocore`] This release adds support for AWS HealthScribe APIs within Amazon Transcribe - api-change:`endpoint-rules`: \[`botocore`] Update endpoint-rules client to latest version ### [`v1.29.7`](https://togithub.com/boto/boto3/blob/HEAD/CHANGELOG.rst#1297) [Compare Source](https://togithub.com/boto/boto3/compare/1.29.6...1.29.7) \====== - enhancement:AWSCRT: \[`botocore`] Update awscrt version to 0.19.17 - api-change:`accessanalyzer`: \[`botocore`] IAM Access Analyzer now continuously monitors IAM roles and users in your AWS account or organization to generate findings for unused access. Additionally, IAM Access Analyzer now provides custom policy checks to validate that IAM policies adhere to your security standards ahead of deployments. - api-change:`amp`: \[`botocore`] This release adds support for the Amazon Managed Service for Prometheus collector, a fully managed, agentless Prometheus metrics scraping capability. - api-change:`bcm-data-exports`: \[`botocore`] Users can create, read, update, delete Exports of billing and cost management data. Users can get details of Export Executions and details of Tables for exporting. Tagging support is provided for Exports - api-change:`cloudtrail`: \[`botocore`] CloudTrail Lake now supports federating event data stores. giving users the ability to run queries against their event data using Amazon Athena. - api-change:`codestar-connections`: \[`botocore`] This release adds support for the CloudFormation Git sync feature. Git sync enables updating a CloudFormation stack from a template stored in a Git repository. - api-change:`compute-optimizer`: \[`botocore`] This release enables AWS Compute Optimizer to analyze and generate recommendations with customization and discounts preferences. - api-change:`config`: \[`botocore`] Support Periodic Recording for Configuration Recorder - api-change:`controltower`: \[`botocore`] Add APIs to create and manage a landing zone. - api-change:`cost-optimization-hub`: \[`botocore`] This release launches Cost Optimization Hub, a new AWS Billing and Cost Management feature that helps you consolidate and prioritize cost optimization recommendations across your AWS Organizations member accounts and AWS Regions, so that you can get the most out of your AWS spend. - api-change:`detective`: \[`botocore`] Added new APIs in Detective to support resource investigations - api-change:`ecs`: \[`botocore`] Adds a new 'type' property to the Setting structure. Adds a new AccountSetting - guardDutyActivate for ECS. - api-change:`efs`: \[`botocore`] Update efs client to latest version - api-change:`eks-auth`: \[`botocore`] This release adds support for EKS Pod Identity feature. EKS Pod Identity makes it easy for customers to obtain IAM permissions for their applications running in the EKS clusters. - api-change:`eks`: \[`botocore`] This release adds support for EKS Pod Identity feature. EKS Pod Identity makes it easy for customers to obtain IAM permissions for the applications running in their EKS clusters. - api-change:`elbv2`: \[`botocore`] Update elbv2 client to latest version - api-change:`freetier`: \[`botocore`] This is the initial SDK release for the AWS Free Tier GetFreeTierUsage API - api-change:`fsx`: \[`botocore`] Added support for FSx for ONTAP scale-out file systems and FlexGroup volumes. Added the HAPairs field and ThroughputCapacityPerHAPair for filesystem. Added AggregateConfiguration (containing Aggregates and ConstituentsPerAggregate) and SizeInBytes for volume. - api-change:`guardduty`: \[`botocore`] Add support for Runtime Monitoring for ECS and ECS-EC2. - api-change:`iotfleetwise`: \[`botocore`] AWS IoT FleetWise introduces new APIs for vision system data, such as data collected from cameras, radars, and lidars. You can now model and decode complex data types. - api-change:`lakeformation`: \[`botocore`] This release adds four new APIs "DescribeLakeFormationIdentityCenterConfiguration", "CreateLakeFormationIdentityCenterConfiguration", "DescribeLakeFormationIdentityCenterConfiguration", and "DeleteLakeFormationIdentityCenterConfiguration", and also updates the corresponding documentation. - api-change:`lexv2-models`: \[`botocore`] Update lexv2-models client to latest version - api-change:`lexv2-runtime`: \[`botocore`] Update lexv2-runtime client to latest version - api-change:`logs`: \[`botocore`] Added APIs to Create, Update, Get, List and Delete LogAnomalyDetectors and List and Update Anomalies in Detector. Added LogGroupClass attribute for LogGroups to classify loggroup as Standard loggroup with all capabilities or InfrequentAccess loggroup with limited capabilities. - api-change:`managedblockchain`: \[`botocore`] Add optional NetworkType property to Accessor APIs - api-change:`personalize-events`: \[`botocore`] This release enables PutActions and PutActionInteractions - api-change:`personalize-runtime`: \[`botocore`] Enables metadata in recommendations and next best action recommendations - api-change:`personalize`: \[`botocore`] Enables metadata in recommendations, recommendations with themes, and next best action recommendations - api-change:`quicksight`: \[`botocore`] This release launches new APIs for trusted identity propagation setup and supports creating datasources using trusted identity propagation as authentication method for QuickSight accounts configured with IAM Identity Center. - api-change:`redshift`: \[`botocore`] This release adds support for multi-data warehouse writes through data sharing. - api-change:`repostspace`: \[`botocore`] Initial release of AWS re:Post Private - api-change:`s3`: \[`botocore`] Adding new params - Key and Prefix, to S3 API operations for supporting S3 Access Grants. Note - These updates will not change any of the existing S3 API functionality. - api-change:`s3control`: \[`botocore`] Introduce Amazon S3 Access Grants, a new S3 access control feature that maps identities in directories such as Active Directory, or AWS Identity and Access Management (IAM) Principals, to datasets in S3. - api-change:`secretsmanager`: \[`botocore`] AWS Secrets Manager has released the BatchGetSecretValue API, which allows customers to fetch up to 20 Secrets with a single request using a list of secret names or filters. - api-change:`securityhub`: \[`botocore`] Adds and updates APIs to support customizable security controls. This feature allows Security Hub customers to provide custom parameters for security controls. With this release, findings for controls that support custom parameters will include the parameters used to generate the findings. - api-change:`stepfunctions`: \[`botocore`] Update stepfunctions client to latest version - api-change:`transcribe`: \[`botocore`] This release adds support for transcriptions from audio sources in 64 new languages and introduces generative call summarization in Transcribe Call Analytics (Post call) - api-change:`workspaces-thin-client`: \[`botocore`] Initial release of Amazon WorkSpaces Thin Client - api-change:`workspaces`: \[`botocore`] The release introduces Multi-Region Resilience one-way data replication that allows you to replicate data from your primary WorkSpace to a standby WorkSpace in another AWS Region. DescribeWorkspaces now returns the status of data replication. - api-change:`endpoint-rules`: \[`botocore`] Update endpoint-rules client to latest version
celery/celery (celery) ### [`v5.3.6`](https://togithub.com/celery/celery/blob/HEAD/Changelog.rst#536) [Compare Source](https://togithub.com/celery/celery/compare/v5.3.5...v5.3.6) \===== :release-date: 2023-11-22 9:15 P.M GMT+6 :release-by: Asif Saif Uddin This release is focused mainly to fix AWS SQS new feature comatibility issue and old regressions. The code changes are mostly fix for regressions. More details can be found below.
pyca/cryptography (cryptography) ### [`v41.0.7`](https://togithub.com/pyca/cryptography/compare/41.0.6...41.0.7) [Compare Source](https://togithub.com/pyca/cryptography/compare/41.0.6...41.0.7) ### [`v41.0.6`](https://togithub.com/pyca/cryptography/compare/41.0.5...41.0.6) [Compare Source](https://togithub.com/pyca/cryptography/compare/41.0.5...41.0.6)
django/django (django) ### [`v5.0`](https://togithub.com/django/django/compare/4.2.8...5.0) [Compare Source](https://togithub.com/django/django/compare/4.2.8...5.0) ### [`v4.2.8`](https://togithub.com/django/django/compare/4.2.7...4.2.8) [Compare Source](https://togithub.com/django/django/compare/4.2.7...4.2.8)
carltongibson/django-filter (django-filter) ### [`v23.5`](https://togithub.com/carltongibson/django-filter/blob/HEAD/CHANGES.rst#Version-235-2023-12-05) [Compare Source](https://togithub.com/carltongibson/django-filter/compare/23.4...23.5) - Fixed OrderingFilter handling of empty values. ([#​1628](https://togithub.com/carltongibson/django-filter/issues/1628)) Thanks to Matt Munns.
django-waffle/django-waffle (django-waffle) ### [`v4.1.0`](https://togithub.com/django-waffle/django-waffle/blob/HEAD/CHANGES#v410) [Compare Source](https://togithub.com/django-waffle/django-waffle/compare/v4.0.0...v4.1.0) \====== - Updated `is_active_for_user` method to account for `everyone` option - Added `--testing` option to waffle_flag management command
jazzband/djangorestframework-simplejwt (djangorestframework_simplejwt) ### [`v5.3.1`](https://togithub.com/jazzband/djangorestframework-simplejwt/blob/HEAD/CHANGELOG.md#531) [Compare Source](https://togithub.com/jazzband/djangorestframework-simplejwt/compare/v5.3.0...v5.3.1)
tfranzel/drf-spectacular (drf-spectacular) ### [`v0.27.0`](https://togithub.com/tfranzel/drf-spectacular/blob/HEAD/CHANGELOG.rst#0270-2023-12-12) [Compare Source](https://togithub.com/tfranzel/drf-spectacular/compare/0.26.5...0.27.0) - improve mypy typing `#​600 `\_ - add django 5 to test suite and adapt to changes `#​1126 `\_ - Use correctly allowed http methods for schema generation \[Jekel] - OAS 3.1 - Fix Enum collision with same choices & varying labels `#​790 `\_ `#​1104 `\_ - Undo adding middleware \[Jelmer Draaijer] - Set JWTTokenUserAuthentication to None when missing \[Jelmer Draaijer] - Add setuptools required for packaging \[Jelmer Draaijer] - Add allauth.account.middleware.AccountMiddleware to middleware \[Jelmer Draaijer] - Add Python 3.12 to test matrix and add classifiers \[Jelmer Draaijer] - Add official support for pydantic decoration. - bugfix ignored OpenApiRequest case `#​1106 `\_ - JSONField may also be a non-object/primitive `#​1095 `\_ - add test for empty whitelist (no auth) `#​1094 `\_ - Avoid ChoiceField duplicate enum values for allow_null, allow_blank (`#​1085

Configuration

📅 Schedule: Branch creation - "before 7am on monday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.



This PR has been generated by Mend Renovate. View repository job log here.

renovate[bot] commented 6 months ago

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

Warning: custom changes will be lost.