renovate requested to merge renovate/all into development Jun 23, 2023

This MR contains the following updates:

Package	Change	Type	Update
autoflake	`==2.1.1` -> `==2.2.0`		minor
black (changelog)	`==23.3.0` -> `==23.7.0`		minor
boto3	`==1.26.150` -> `==1.28.10`		minor
docformatter	`==1.7.2` -> `==1.7.5`		patch
gitpython	`==3.1.31` -> `==3.1.32`		patch
jsonschema (changelog)	`==4.17.3` -> `==4.18.4`		minor
pandas	`==2.0.2` -> `==2.0.3`		patch
pytest (source, changelog)	`==7.3.1` -> `==7.4.0`		minor
pyyaml (source)	`==6.0` -> `==6.0.1`		patch
registry1.dso.mil/ironbank/ironbank-pipelines/pipeline-runner	`v0.10.2` -> `v0.10.5`	final	patch
sigstore/cosign	`v2.0.2` -> `v2.1.1`	ironbank-github	minor
trufflesecurity/trufflehog	`v3.40.0` -> `v3.45.0`	ironbank-github	minor

Release Notes

psf/black

`v23.7.0`

Compare Source

Highlights

Runtime support for Python 3.7 has been removed. Formatting 3.7 code will still be supported until further notice (#3765)

Stable style

Fix a bug where an illegal trailing comma was added to return type annotations using PEP 604 unions (#3735)
Fix several bugs and crashes where comments in stub files were removed or mishandled under some circumstances (#3745)
Fix a crash with multi-line magic comments like type: ignore within parentheses (#3740)
Fix error in AST validation when Black removes trailing whitespace in a type comment (#3773)

Preview style

Implicitly concatenated strings used as function args are no longer wrapped inside parentheses (#3640)
Remove blank lines between a class definition and its docstring (#3692)

Configuration

The --workers argument to Black can now be specified via the BLACK_NUM_WORKERS environment variable (#3743)
.pytest_cache, .ruff_cache and .vscode are now excluded by default (#3691)
Fix Black not honouring pyproject.toml settings when running --stdin-filename and the pyproject.toml found isn't in the current working directory (#3719)
Black will now error if exclude and extend-exclude have invalid data types in pyproject.toml, instead of silently doing the wrong thing (#3764)

Packaging

Upgrade mypyc from 0.991 to 1.3 (#3697)
Remove patching of Click that mitigated errors on Python 3.6 with LANG=C (#3768)

Parser

Add support for the new PEP 695 syntax in Python 3.12 (#3703)

Performance

Speed up Black significantly when the cache is full (#3751)
Avoid importing IPython in a case where we wouldn't need it (#3748)

Output

Use aware UTC datetimes internally, avoids deprecation warning on Python 3.12 (#3728)
Change verbose logging to exactly mirror Black's logic for source discovery (#3749)

Blackd

The blackd argument parser now shows the default values for options in their help text (#3712)

Integrations

Black is now tested with PYTHONWARNDEFAULTENCODING = 1 (#3763)
Update GitHub Action to display black output in the job summary (#3688)

Documentation

Add a CITATION.cff file to the root of the repository, containing metadata on how to cite this software (#3723)
Update the classes and exceptions documentation in Developer reference to match the latest code base (#3755)

boto/boto3

`v1.28.10`

Compare Source

=======

api-change:apigatewayv2: [botocore] Documentation updates for Amazon API Gateway.
api-change:ce: [botocore] This release introduces the new API 'GetSavingsPlanPurchaseRecommendationDetails', which retrieves the details for a Savings Plan recommendation. It also updates the existing API 'GetSavingsPlansPurchaseRecommendation' to include the recommendation detail ID.
api-change:chime-sdk-media-pipelines: [botocore] AWS Media Pipeline compositing enhancement and Media Insights Pipeline auto language identification.
api-change:cloudformation: [botocore] This release supports filtering by DRIFT_STATUS for existing API ListStackInstances and adds support for a new API ListStackInstanceResourceDrifts. Customers can now view resource drift information from their StackSet management accounts.
api-change:ec2: [botocore] Add "disabled" enum value to SpotInstanceState.
api-change:glue: [botocore] Added support for Data Preparation Recipe node in Glue Studio jobs
api-change:quicksight: [botocore] This release launches new Snapshot APIs for CSV and PDF exports, adds support for info icon for filters and parameters in Exploration APIs, adds modeled exception to the DeleteAccountCustomization API, and introduces AttributeAggregationFunction's ability to add UNIQUE_VALUE aggregation in tooltips.

`v1.28.9`

Compare Source

======

api-change:glue: [botocore] This release adds support for AWS Glue Crawler with Apache Hudi Tables, allowing Crawlers to discover Hudi Tables in S3 and register them in Glue Data Catalog for query engines to query against.
api-change:mediaconvert: [botocore] This release includes improvements to Preserve 444 handling, compatibility of HEVC sources without frame rates, and general improvements to MP4 outputs.
api-change:rds: [botocore] Adds support for the DBSystemID parameter of CreateDBInstance to RDS Custom for Oracle.
api-change:workspaces: [botocore] Fixed VolumeEncryptionKey descriptions

`v1.28.8`

Compare Source

======

api-change:codecatalyst: [botocore] This release adds support for updating and deleting spaces and projects in Amazon CodeCatalyst. It also adds support for creating, getting, and deleting source repositories in CodeCatalyst projects.
api-change:connectcases: [botocore] This release adds the ability to assign a case to a queue or user.
api-change:lexv2-models: [botocore] Update lexv2-models client to latest version
api-change:route53resolver: [botocore] This release adds support for Route 53 On Outposts, a new feature that allows customers to run Route 53 Resolver and Resolver endpoints locally on their Outposts.
api-change:s3: [botocore] Improve performance of S3 clients by simplifying and optimizing endpoint resolution.
api-change:sagemaker-featurestore-runtime: [botocore] Cross account support for SageMaker Feature Store
api-change:sagemaker: [botocore] Cross account support for SageMaker Feature Store
api-change:securitylake: [botocore] Adding support for Tags on Create and Resource Tagging API.
api-change:transcribe: [botocore] Added API argument --toxicity-detection to startTranscriptionJob API, which allows users to view toxicity scores of submitted audio.

`v1.28.7`

Compare Source

======

enhancement:AWSCRT: [botocore] Upgrade awscrt version to 0.16.26
api-change:savingsplans: [botocore] Savings Plans endpoints update

`v1.28.6`

Compare Source

======

api-change:cloudformation: [botocore] SDK and documentation updates for GetTemplateSummary API (unrecognized resources)
api-change:ec2: [botocore] Amazon EC2 documentation updates.
api-change:grafana: [botocore] Amazon Managed Grafana now supports grafanaVersion update for existing workspaces with UpdateWorkspaceConfiguration API. DescribeWorkspaceConfiguration API additionally returns grafanaVersion. A new ListVersions API lists available versions or, if given a workspaceId, the versions it can upgrade to.
api-change:medical-imaging: [botocore] General Availability (GA) release of AWS Health Imaging, enabling customers to store, transform, and analyze medical imaging data at petabyte-scale.
api-change:ram: [botocore] This release adds support for securely sharing with AWS service principals.
api-change:ssm-sap: [botocore] Added support for SAP Hana High Availability discovery (primary and secondary nodes) and Backint agent installation with SSM for SAP.
api-change:wafv2: [botocore] Added the URI path to the custom aggregation keys that you can specify for a rate-based rule.

`v1.28.5`

Compare Source

======

api-change:codeguru-security: [botocore] Documentation updates for CodeGuru Security.
api-change:connect: [botocore] GetMetricDataV2 API: Update to include Contact Lens Conversational Analytics Metrics
api-change:es: [botocore] Regex Validation on the ElasticSearch Engine Version attribute
api-change:lexv2-models: [botocore] Update lexv2-models client to latest version
api-change:m2: [botocore] Allows UpdateEnvironment to update the environment to 0 host capacity. New GetSignedBluinsightsUrl API
api-change:snowball: [botocore] Adds support for RACK_5U_C. This is the first AWS Snow Family device designed to meet U.S. Military Ruggedization Standards (MIL-STD-810H) with 208 vCPU device in a portable, compact 5U, half-rack width form-factor.
api-change:translate: [botocore] Added DOCX word document support to TranslateDocument API

`v1.28.4`

Compare Source

======

api-change:codeartifact: [botocore] Doc only update for AWS CodeArtifact
api-change:docdb: [botocore] Added major version upgrade option in ModifyDBCluster API
api-change:ec2: [botocore] Add Nitro TPM support on DescribeInstanceTypes
api-change:glue: [botocore] Adding new supported permission type flags to get-unfiltered endpoints that callers may pass to indicate support for enforcing Lake Formation fine-grained access control on nested column attributes.
api-change:ivs: [botocore] This release provides the flexibility to configure what renditions or thumbnail qualities to record when creating recording configuration.
api-change:lakeformation: [botocore] Adds supports for ReadOnlyAdmins and AllowFullTableExternalDataAccess. Adds NESTED_PERMISSION and NESTED_CELL_PERMISSION to SUPPORTED_PERMISSION_TYPES enum. Adds CREATE_LF_TAG on catalog resource and ALTER, DROP, and GRANT_WITH_LF_TAG_EXMRESSION on LF Tag resource.

`v1.28.3`

Compare Source

======

api-change:cognito-idp: [botocore] API model updated in Amazon Cognito
api-change:connect: [botocore] Add support for deleting Queues and Routing Profiles.
api-change:datasync: [botocore] Added LunCount to the response object of DescribeStorageSystemResourcesResponse, LunCount represents the number of LUNs on a storage system resource.
api-change:dms: [botocore] Enhanced PostgreSQL target endpoint settings for providing Babelfish support.
api-change:ec2: [botocore] This release adds support for the C7gn and Hpc7g instances. C7gn instances are powered by AWS Graviton3 processors and the fifth-generation AWS Nitro Cards. Hpc7g instances are powered by AWS Graviton 3E processors and provide up to 200 Gbps network bandwidth.
api-change:fsx: [botocore] Amazon FSx for NetApp ONTAP now supports SnapLock, an ONTAP feature that enables you to protect your files in a volume by transitioning them to a write once, read many (WORM) state.
api-change:iam: [botocore] Documentation updates for AWS Identity and Access Management (IAM).
api-change:mediatailor: [botocore] Adds categories to MediaTailor channel assembly alerts
api-change:personalize: [botocore] This release provides ability to customers to change schema associated with their datasets in Amazon Personalize
api-change:proton: [botocore] This release adds support for deployment history for Proton provisioned resources
api-change:s3: [botocore] S3 Inventory now supports Object Access Control List and Object Owner as available object metadata fields in inventory reports.
api-change:sagemaker: [botocore] Amazon SageMaker Canvas adds WorkspeceSettings support for CanvasAppSettings
api-change:secretsmanager: [botocore] Documentation updates for Secrets Manager

`v1.28.2`

Compare Source

======

bugfix:s3: [botocore] Fix s3 presigned URLs for operations with query components (#2962 <https://github.com/boto/botocore/issues/2962>__)
api-change:cognito-idp: [botocore] API model updated in Amazon Cognito

`v1.28.1`

Compare Source

=======

api-change:apigatewayv2: [botocore] Documentation updates for Amazon API Gateway.
api-change:ce: [botocore] This release introduces the new API 'GetSavingsPlanPurchaseRecommendationDetails', which retrieves the details for a Savings Plan recommendation. It also updates the existing API 'GetSavingsPlansPurchaseRecommendation' to include the recommendation detail ID.
api-change:chime-sdk-media-pipelines: [botocore] AWS Media Pipeline compositing enhancement and Media Insights Pipeline auto language identification.
api-change:cloudformation: [botocore] This release supports filtering by DRIFT_STATUS for existing API ListStackInstances and adds support for a new API ListStackInstanceResourceDrifts. Customers can now view resource drift information from their StackSet management accounts.
api-change:ec2: [botocore] Add "disabled" enum value to SpotInstanceState.
api-change:glue: [botocore] Added support for Data Preparation Recipe node in Glue Studio jobs
api-change:quicksight: [botocore] This release launches new Snapshot APIs for CSV and PDF exports, adds support for info icon for filters and parameters in Exploration APIs, adds modeled exception to the DeleteAccountCustomization API, and introduces AttributeAggregationFunction's ability to add UNIQUE_VALUE aggregation in tooltips.

`v1.28.0`

Compare Source

======

enhancement:configprovider: [botocore] Always use shallow copy of session config value store for clients
feature:configuration: [botocore] Configure the endpoint URL in the shared configuration file or via an environment variable for a specific AWS service or all AWS services.
bugfix:configprovider: [botocore] Fix bug when deep copying config value store where overrides were not preserved
api-change:ec2: [botocore] Add Nitro Enclaves support on DescribeInstanceTypes
api-change:location: [botocore] This release adds support for authenticating with Amazon Location Service's Places & Routes APIs with an API Key. Also, with this release developers can publish tracked device position updates to Amazon EventBridge.
api-change:outposts: [botocore] Added paginator support to several APIs. Added the ISOLATED enum value to AssetState.
api-change:quicksight: [botocore] This release includes below three changes: small multiples axes improvement, field based coloring, removed required trait from Aggregation function for TopBottomFilter.
api-change:rds: [botocore] Updates Amazon RDS documentation for creating DB instances and creating Aurora global clusters.

`v1.27.1`

Compare Source

======

api-change:comprehendmedical: [botocore] Update to Amazon Comprehend Medical documentation.
api-change:connect: [botocore] GetMetricDataV2 API: Channels filters do not count towards overall limitation of 100 filter values.
api-change:kms: [botocore] Added Dry Run Feature to cryptographic and cross-account mutating KMS APIs (14 in all). This feature allows users to test their permissions and parameters before making the actual API call.
api-change:mgn: [botocore] This release introduces the Global view feature and new Replication state APIs.
api-change:securityhub: [botocore] Documentation updates for AWS Security Hub

`v1.27.0`

Compare Source

======

feature:Useragent: [botocore] Update User-Agent header format
api-change:batch: [botocore] This feature allows customers to use AWS Batch with Linux with ARM64 CPU Architecture and X86_64 CPU Architecture with Windows OS on Fargate Platform.
api-change:sagemaker: [botocore] SageMaker Inference Recommender now accepts new fields SupportedEndpointType and ServerlessConfiguration to support serverless endpoints.

`v1.26.165`

Compare Source

========

api-change:amp: [botocore] AWS SDK service model generation tool version upgrade.
api-change:ecs: [botocore] Added new field "credentialspecs" to the ecs task definition to support gMSA of windows/linux in both domainless and domain-joined mode
api-change:ivs: [botocore] Corrects the HTTP response code in the generated docs for PutMetadata and DeleteRecordingConfiguration APIs.
api-change:mediaconvert: [botocore] This release includes improved color handling of overlays and general updates to user documentation.
api-change:sagemaker: [botocore] This release adds support for rolling deployment in SageMaker Inference.
api-change:transfer: [botocore] Add outbound Basic authentication support to AS2 connectors
api-change:verifiedpermissions: [botocore] This release corrects several broken links in the documentation.

`v1.26.164`

Compare Source

========

api-change:appstream: [botocore] This release introduces app block builder, allowing customers to provision a resource to package applications into an app block
api-change:chime: [botocore] The Amazon Chime SDK APIs in the Chime namespace are no longer supported. Customers should use APIs in the dedicated Amazon Chime SDK namespaces: ChimeSDKIdentity, ChimeSDKMediaPipelines, ChimeSDKMeetings, ChimeSDKMessaging, and ChimeSDKVoice.
api-change:cleanrooms: [botocore] This release adds support for the OR operator in RSQL join match conditions and the ability to control which operators (AND, OR) are allowed in a join match condition.
api-change:dynamodb: [botocore] This release adds ReturnValuesOnConditionCheckFailure parameter to PutItem, UpdateItem, DeleteItem, ExecuteStatement, BatchExecuteStatement and ExecuteTransaction APIs. When set to ALL_OLD, API returns a copy of the item as it was when a conditional write failed
api-change:gamelift: [botocore] Amazon GameLift now supports game builds that use the Amazon Linux 2023 (AL2023) operating system.
api-change:glue: [botocore] This release adds support for AWS Glue Crawler with Iceberg Tables, allowing Crawlers to discover Iceberg Tables in S3 and register them in Glue Data Catalog for query engines to query against.
api-change:sagemaker: [botocore] Adding support for timeseries forecasting in the CreateAutoMLJobV2 API.

`v1.26.163`

Compare Source

========

api-change:internetmonitor: [botocore] This release adds a new feature for Amazon CloudWatch Internet Monitor that enables customers to set custom thresholds, for performance and availability drops, for triggering when to create a health event.
api-change:kinesisanalyticsv2: [botocore] Support for new runtime environment in Kinesis Data Analytics Studio: Zeppelin-0.10, Apache Flink-1.15
api-change:lambda: [botocore] Surface ResourceConflictException in DeleteEventSourceMapping
api-change:omics: [botocore] Add Common Workflow Language (CWL) as a supported language for Omics workflows
api-change:rds: [botocore] Amazon Relational Database Service (RDS) now supports joining a RDS for SQL Server instance to a self-managed Active Directory.
api-change:s3: [botocore] The S3 LISTObjects, ListObjectsV2 and ListObjectVersions API now supports a new optional header x-amz-optional-object-attributes. If header contains RestoreStatus as the value, then S3 will include Glacier restore status i.e. isRestoreInProgress and RestoreExpiryDate in List response.
api-change:sagemaker: [botocore] This release adds support for Model Cards Model Registry integration.

`v1.26.162`

Compare Source

========

bugfix:Parsers: [botocore] Fixes datetime parse error handling for out-of-range and negative timestamps (#2564 <https://github.com/boto/botocore/issues/2564>__).
api-change:appfabric: [botocore] Initial release of AWS AppFabric for connecting SaaS applications for better productivity and security.
api-change:appflow: [botocore] This release adds support to bypass SSO with the SAPOData connector when connecting to an SAP instance.
api-change:emr-serverless: [botocore] This release adds support to update the release label of an EMR Serverless application to upgrade it to a different version of Amazon EMR via UpdateApplication API.
api-change:ivs: [botocore] IVS customers can now revoke the viewer session associated with an auth token, to prevent and stop playback using that token.
api-change:kinesisvideo: [botocore] General Availability (GA) release of Kinesis Video Streams at Edge, enabling customers to provide a configuration for the Kinesis Video Streams EdgeAgent running on an on-premise IoT device. Customers can now locally record from cameras and stream videos to the cloud on a configured schedule.
api-change:macie2: [botocore] This release adds support for configuring new classification jobs to use the set of managed data identifiers that we recommend for jobs. For the managed data identifier selection type (managedDataIdentifierSelector), specify RECOMMENDED.
api-change:privatenetworks: [botocore] This release allows Private5G customers to choose different commitment plans (60-days, 1-year, 3-years) when placing new orders, enables automatic renewal option for 1-year and 3-years commitments. It also allows customers to update the commitment plan of an existing radio unit.
api-change:sagemaker-featurestore-runtime: [botocore] Introducing TTL for online store records for feature groups.
api-change:sagemaker: [botocore] Introducing TTL for online store records in feature groups.
api-change:ssm: [botocore] Systems Manager doc-only update for June 2023.
api-change:verifiedpermissions: [botocore] This update fixes several broken links to the Cedar documentation.

`v1.26.161`

Compare Source

========

api-change:connect: [botocore] This release provides a way to search for existing tags within an instance. Before tagging a resource, ensure consistency by searching for pre-existing key:value pairs.
api-change:glue: [botocore] Timestamp Starting Position For Kinesis and Kafka Data Sources in a Glue Streaming Job
api-change:guardduty: [botocore] Add support for user.extra.sessionName in Kubernetes Audit Logs Findings.
api-change:iam: [botocore] Support for a new API "GetMFADevice" to present MFA device metadata such as device certifications
api-change:pinpoint: [botocore] Added time zone estimation support for journeys

`v1.26.160`

Compare Source

========

api-change:devops-guru: [botocore] This release adds support for encryption via customer managed keys.
api-change:fsx: [botocore] Update to Amazon FSx documentation.
api-change:rds: [botocore] Documentation improvements for create, describe, and modify DB clusters and DB instances.
api-change:verifiedpermissions: [botocore] Added improved descriptions and new code samples to SDK documentation.

`v1.26.159`

Compare Source

========

api-change:chime-sdk-identity: [botocore] AppInstanceBots can be configured to be invoked or not using the Target or the CHIME.mentions attribute for ChannelMessages
api-change:chime-sdk-messaging: [botocore] ChannelMessages can be made visible to sender and intended recipient rather than all channel members with the target attribute. For example, a user can send messages to a bot and receive messages back in a group channel without other members seeing them.
api-change:kendra: [botocore] Introducing Amazon Kendra Retrieve API that can be used to retrieve relevant passages or text excerpts given an input query.
api-change:stepfunctions: [botocore] Update stepfunctions client to latest version

`v1.26.158`

Compare Source

========

api-change:dynamodb: [botocore] Documentation updates for DynamoDB
api-change:emr: [botocore] Update emr client to latest version
api-change:inspector2: [botocore] This release adds support for Software Bill of Materials (SBOM) export and the general availability of code scanning for AWS Lambda functions.
api-change:mediaconvert: [botocore] This release introduces the bandwidth reduction filter for the HEVC encoder, increases the limits of outputs per job, and updates support for the Nagra SDK to version 1.14.7.
api-change:mq: [botocore] The Cross Region Disaster Recovery feature allows to replicate a brokers state from one region to another in order to provide customers with multi-region resiliency in the event of a regional outage.
api-change:sagemaker: [botocore] This release provides support in SageMaker for output files in training jobs to be uploaded without compression and enable customer to deploy uncompressed model from S3 to real-time inference Endpoints. In addition, ml.trn1n.32xlarge is added to supported instance type list in training job.
api-change:transfer: [botocore] This release adds a new parameter StructuredLogDestinations to CreateServer, UpdateServer APIs.

`v1.26.157`

Compare Source

========

api-change:appflow: [botocore] This release adds new API to reset connector metadata cache
api-change:config: [botocore] Updated ResourceType enum with new resource types onboarded by AWS Config in May 2023.
api-change:ec2: [botocore] Adds support for targeting Dedicated Host allocations by assetIds in AWS Outposts
api-change:lambda: [botocore] This release adds RecursiveInvocationException to the Invoke API and InvokeWithResponseStream API.
api-change:redshift: [botocore] Added support for custom domain names for Redshift Provisioned clusters. This feature enables customers to create a custom domain name and use ACM to generate fully secure connections to it.

`v1.26.156`

Compare Source

========

api-change:cloudformation: [botocore] Specify desired CloudFormation behavior in the event of ChangeSet execution failure using the CreateChangeSet OnStackFailure parameter
api-change:ec2: [botocore] API changes to AWS Verified Access to include data from trust providers in logs
api-change:ecs: [botocore] Documentation only update to address various tickets.
api-change:glue: [botocore] This release adds support for creating cross region table/database resource links
api-change:pricing: [botocore] This release updates the PriceListArn regex pattern.
api-change:route53domains: [botocore] Update MaxItems upper bound to 1000 for ListPricesRequest
api-change:sagemaker: [botocore] Amazon Sagemaker Autopilot releases CreateAutoMLJobV2 and DescribeAutoMLJobV2 for Autopilot customers with ImageClassification, TextClassification and Tabular problem type config support.

`v1.26.155`

Compare Source

========

api-change:account: [botocore] Improve pagination support for ListRegions
api-change:connect: [botocore] Updates the *InstanceStorageConfig APIs to support a new ResourceType: SCREEN_RECORDINGS to enable screen recording and specify the storage configurations for publishing the recordings. Also updates DescribeInstance and ListInstances APIs to include InstanceAccessUrl attribute in the API response.
api-change:discovery: [botocore] Add Amazon EC2 instance recommendations export
api-change:iam: [botocore] Documentation updates for AWS Identity and Access Management (IAM).
api-change:s3: [botocore] This release adds SDK support for request-payer request header and request-charged response header in the "GetBucketAccelerateConfiguration", "ListMultipartUploads", "ListObjects", "ListObjectsV2" and "ListObjectVersions" S3 APIs.

`v1.26.154`

Compare Source

========

api-change:auditmanager: [botocore] This release introduces 2 Audit Manager features: CSV exports and new manual evidence options. You can now export your evidence finder results in CSV format. In addition, you can now add manual evidence to a control by entering free-form text or uploading a file from your browser.
api-change:efs: [botocore] Update efs client to latest version
api-change:guardduty: [botocore] Updated descriptions for some APIs.
api-change:location: [botocore] Amazon Location Service adds categories to places, including filtering on those categories in searches. Also, you can now add metadata properties to your geofences.

`v1.26.153`

Compare Source

========

api-change:cloudtrail: [botocore] This feature allows users to view dashboards for CloudTrail Lake event data stores.
api-change:codeguru-security: [botocore] Initial release of Amazon CodeGuru Security APIs
api-change:drs: [botocore] Added APIs to support network replication and recovery using AWS Elastic Disaster Recovery.
api-change:ec2: [botocore] This release introduces a new feature, EC2 Instance Connect Endpoint, that enables you to connect to a resource over TCP, without requiring the resource to have a public IPv4 address.
api-change:imagebuilder: [botocore] Change the Image Builder ImagePipeline dateNextRun field to more accurately describe the data.
api-change:lightsail: [botocore] This release adds pagination for the Get Certificates API operation.
api-change:s3: [botocore] Integrate double encryption feature to SDKs.
api-change:securityhub: [botocore] Add support for Security Hub Automation Rules
api-change:simspaceweaver: [botocore] This release fixes using aws-us-gov ARNs in API calls and adds documentation for snapshot APIs.
api-change:verifiedpermissions: [botocore] GA release of Amazon Verified Permissions.
api-change:wafv2: [botocore] You can now detect and block fraudulent account creation attempts with the new AWS WAF Fraud Control account creation fraud prevention (ACFP) managed rule group AWSManagedRulesACFMRuleSet.
api-change:wellarchitected: [botocore] AWS Well-Architected now supports Profiles that help customers prioritize which questions to focus on first by providing a list of prioritized questions that are better aligned with their business goals and outcomes.

`v1.26.152`

Compare Source

========

api-change:amplifyuibuilder: [botocore] AWS Amplify UIBuilder is launching Codegen UI, a new feature that enables you to generate your amplify uibuilder components and forms.
api-change:dynamodb: [botocore] Documentation updates for DynamoDB
api-change:dynamodbstreams: [botocore] Update dynamodbstreams client to latest version
api-change:fsx: [botocore] Amazon FSx for NetApp ONTAP now supports joining a storage virtual machine (SVM) to Active Directory after the SVM has been created.
api-change:opensearch: [botocore] This release adds support for SkipUnavailable connection property for cross cluster search
api-change:rekognition: [botocore] This release adds support for improved accuracy with user vector in Amazon Rekognition Face Search. Adds new APIs: AssociateFaces, CreateUser, DeleteUser, DisassociateFaces, ListUsers, SearchUsers, SearchUsersByImage. Also adds new face metadata that can be stored: user vector.
api-change:sagemaker: [botocore] Sagemaker Neo now supports compilation for inferentia2 (ML_INF2) and Trainium1 (ML_TRN1) as available targets. With these devices, you can run your workloads at highest performance with lowest cost. inferentia2 (ML_INF2) is available in CMH and Trainium1 (ML_TRN1) is available in IAD currently

`v1.26.151`

Compare Source

========

api-change:acm-pca: [botocore] Document-only update to refresh CLI documentation for AWS Private CA. No change to the service.
api-change:connect: [botocore] This release adds search APIs for Prompts, Quick Connects and Hours of Operations, which can be used to search for those resources within a Connect Instance.

PyCQA/docformatter

`v1.7.5`

Compare Source

Full Changelog

Features

fix: not recognizing yield as a sphinx field name #254 (weibullguy)

`v1.7.4`

Compare Source

Full Changelog

Bug Fixes

fix: summary with back ticks and sphinx field names with periods #248 (weibullguy)

Merged pull requests:

chore: update documentation link for metadata #247 (icp1994)
test: split format tests into multiple files #246 (weibullguy)

`v1.7.3`

Compare Source

Full Changelog

Bug Fixes

fix: removing newline between Sphinx field lists #237 (weibullguy)

Merged pull requests:

chore: move changelog to tag workflow #233 (weibullguy)

gitpython-developers/GitPython

python-jsonschema/jsonschema

`v4.18.4`

Compare Source

=======

Improve the hashability of wrapped referencing exceptions when they contain hashable data.

`v4.18.3`

Compare Source

=======

Properly preserve applicable_validators in extended validators. Specifically, validators extending early drafts where siblings of $ref were ignored will properly ignore siblings in the extended validator.

`v4.18.2`

Compare Source

=======

Fix an additional regression with the deprecated jsonschema.RefResolver and pointer resolution.

`v4.18.1`

Compare Source

=======

Fix a regression with jsonschema.RefResolver based resolution when used in combination with a custom validation dialect (via jsonschema.validators.create).

This release majorly rehauls the way in which JSON Schema reference resolution is configured. It does so in a way that should be backwards compatible, preserving old behavior whilst emitting deprecation warnings.

jsonschema.RefResolver is now deprecated in favor of the new referencing library <https://github.com/python-jsonschema/referencing/>_. referencing will begin in beta, but already is more compliant than the existing $ref support. This change is a culmination of a meaningful chunk of work to make $ref resolution more flexible and more correct. Backwards compatibility should be preserved for existing code which uses RefResolver, though doing so is again now deprecated, and all such use cases should be doable using the new APIs. Please file issues on the referencing tracker if there is functionality missing from it, or here on the jsonschema issue tracker if you have issues with existing code not functioning the same, or with figuring out how to change it to use referencing. In particular, this referencing change includes a change concerning automatic retrieval of remote references (retrieving http://foo/bar automatically within a schema). This behavior has always been a potential security risk and counter to the recommendations of the JSON Schema specifications; it has survived this long essentially only for backwards compatibility reasons, and now explicitly produces warnings. The referencing library itself will not automatically retrieve references if you interact directly with it, so the deprecated behavior is only triggered if you fully rely on the default $ref resolution behavior and also include remote references in your schema, which will still be retrieved during the deprecation period (after which they will become an error).
Support for Python 3.7 has been dropped, as it is nearing end-of-life. This should not be a "visible" change in the sense that requires-python has been updated, so users using 3.7 should still receive v4.17.3 when installing the library.
On draft 2019-09, unevaluatedItems now properly does not consider items to be evaluated by an additionalItems schema if items is missing from the schema, as the specification says in this case that additionalItems must be completely ignored.
Fix the date format checker on Python 3.11 (when format assertion behavior is enabled), where it was too liberal (#1076).
Speed up validation of unevaluatedProperties (#1075).

Deprecations

jsonschema.RefResolver -- see above for details on the replacement
jsonschema.RefResolutionError -- see above for details on the replacement
relying on automatic resolution of remote references -- see above for details on the replacement
importing jsonschema.ErrorTree -- instead import it via jsonschema.exceptions.ErrorTree
importing jsonschema.FormatError -- instead import it via jsonschema.exceptions.FormatError

pandas-dev/pandas

`v2.0.3`: Pandas 2.0.3

Compare Source

This is a patch release in the 2.0.x series and includes some regression and bug fixes. We recommend that all users upgrade to this version.

See the full whatsnew for a list of all the changes.

The release will be available on the defaults and conda-forge channels:

conda install pandas Or via PyPI:

python3 -m pip install --upgrade pandas Please report any issues with the release on the pandas issue tracker.

Thanks to all the contributors who made this release possible.

pytest-dev/pytest

`v7.4.0`

Compare Source

pytest 7.4.0 (2023-06-23)

Features

#10901: Added ExceptionInfo.from_exception() <pytest.ExceptionInfo.from_exception>{.interpreted-text role="func"}, a simpler way to create an ~pytest.ExceptionInfo{.interpreted-text role="class"} from an exception. This can replace ExceptionInfo.from_exc_info() <pytest.ExceptionInfo.from_exc_info()>{.interpreted-text role="func"} for most uses.

Improvements

#10872: Update test log report annotation to named tuple and fixed inconsistency in docs for pytest_report_teststatus{.interpreted-text role="hook"} hook.
#10907: When an exception traceback to be displayed is completely filtered out (by mechanisms such as __tracebackhide__, internal frames, and similar), now only the exception string and the following message are shown:

"All traceback entries are hidden. Pass [--full-trace]{.title-ref} to see hidden and internal frames.".

Previously, the last frame of the traceback was shown, even though it was hidden.
#10940: Improved verbose output (-vv) of skip and xfail reasons by performing text wrapping while leaving a clear margin for progress output.

Added TerminalReporter.wrap_write() as a helper for that.
#10991: Added handling of %f directive to print microseconds in log format options, such as log-date-format.
#11005: Added the underlying exception to the cache provider's path creation and write warning messages.
#11013: Added warning when testpaths{.interpreted-text role="confval"} is set, but paths are not found by glob. In this case, pytest will fall back to searching from the current directory.
#11043: When [--confcutdir]{.title-ref} is not specified, and there is no config file present, the conftest cutoff directory ([--confcutdir]{.title-ref}) is now set to the rootdir <rootdir>{.interpreted-text role="ref"}. Previously in such cases, [conftest.py]{.title-ref} files would be probed all the way to the root directory of the filesystem. If you are badly affected by this change, consider adding an empty config file to your desired cutoff directory, or explicitly set [--confcutdir]{.title-ref}.
#11081: The norecursedirs{.interpreted-text role="confval"} check is now performed in a pytest_ignore_collect{.interpreted-text role="hook"} implementation, so plugins can affect it.

If after updating to this version you see that your [norecursedirs]{.title-ref} setting is not being respected, it means that a conftest or a plugin you use has a bad [pytest_ignore_collect]{.title-ref} implementation. Most likely, your hook returns [False]{.title-ref} for paths it does not want to ignore, which ends the processing and doesn't allow other plugins, including pytest itself, to ignore the path. The fix is to return [None]{.title-ref} instead of [False]{.title-ref} for paths your hook doesn't want to ignore.
#8711: caplog.set_level() <pytest.LogCaptureFixture.set_level>{.interpreted-text role="func"} and caplog.at_level() <pytest.LogCaptureFixture.at_level>{.interpreted-text role="func"} will temporarily enable the requested level if level was disabled globally via logging.disable(LEVEL).

Bug Fixes

#10831: Terminal Reporting: Fixed bug when running in --tb=line mode where pytest.fail(pytrace=False) tests report None.
#11068: Fixed the --last-failed whole-file skipping functionality ("skipped N files") for non-python test files <non-python tests>{.interpreted-text role="ref"}.
#11104: Fixed a regression in pytest 7.3.2 which caused to testpaths{.interpreted-text role="confval"} to be considered for loading initial conftests, even when it was not utilized (e.g. when explicit paths were given on the command line). Now the testpaths are only considered when they are in use.
#1904: Fixed traceback entries hidden with __tracebackhide__ = True still being shown for chained exceptions (parts after "... the above exception ..." message).
#7781: Fix writing non-encodable text to log file when using --debug.

Improved Documentation

#9146: Improved documentation for caplog.set_level() <pytest.LogCaptureFixture.set_level>{.interpreted-text role="func"}.

Trivial/Internal Changes

#11031: Enhanced the CLI flag for -c to now include --config-file to make it clear that this flag applies to the usage of a custom config file.

`v7.3.2`

Compare Source

pytest 7.3.2 (2023-06-10)

Bug Fixes

#10169: Fix bug where very long option names could cause pytest to break with OSError: [Errno 36] File name too long on some systems.
#10894: Support for Python 3.12 (beta at the time of writing).
#10987: testpaths{.interpreted-text role="confval"} is now honored to load root conftests.
#10999: The [monkeypatch]{.title-ref} [setitem]{.title-ref}/[delitem]{.title-ref} type annotations now allow [TypedDict]{.title-ref} arguments.
#11028: Fixed bug in assertion rewriting where a variable assigned with the walrus operator could not be used later in a function call.
#11054: Fixed --last-failed's "(skipped N files)" functionality for files inside of packages (directories with [__init__.py]{.title-ref} files).

yaml/pyyaml

`v6.0.1`

Compare Source

sigstore/cosign

`v2.1.1`

Compare Source

Bug Fixes

wait for the workers become available again to continue the execution (#3084)
fix help text when in a container (#3082)

Documentation

update changelog (#3080)
DNM: Add CHANGELOG for v2.1.0 (#3068)
Carlos Tadeu Panato Junior
priyawadhwa

`v2.1.0`

Compare Source

Breaking Change: The predicate is now a required flag in the attest commands, set via the --type flag.

Enhancements

Verify sigs and attestations in parallel (#3066)
Deep inspect attestations when filtering download (#3031)
refactor bundle validation code, add support for DSSE rekor type (#3016)
Allow overriding remote options (#3049)
feat: adds no cert found on sig exit code (#3038)
Make predicate a required flag in attest commands (#3033)
Added support for attaching Time stamp authority Response in attach command (#3001)
Add sign --sign-container-identity CLI (#2984)
Feature: Allow cosign to sign digests before they are uploaded. (#2959)
accepts attachment-tag-prefix for cosign copy (#3014)
Feature: adds '--allow-insecure-registry' for cosign load (#3000)
download attestation: support --platform flag (#2980)
Cleanup: Add Digest to the SignedEntity interface. (#2960)
verify command: support keyless verification using only a provided certificate chain with non-fulcio roots (#2845)
verify: use workers to limit the paralellism when verifying images with --max-workers flag (#3069)