Skip to content

chore(deps): bump the python-dependencies group across 1 directory with 39 updates #509

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Closed
wants to merge 81 commits into from
Closed

chore(deps): bump the python-dependencies group across 1 directory with 39 updates #509

wants to merge 81 commits into from

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Oct 15, 2025 •
edited
Loading

Bumps the python-dependencies group with 39 updates in the / directory:

Package From To
attrs 25.3.0 25.4.0
cbor2 5.6.5 5.7.0
certifi 2025.7.14 2025.10.5
cffi 1.17.1 2.0.0
charset-normalizer 3.4.2 3.4.4
cryptography 45.0.5 46.0.2
idna 3.10 3.11
pycparser 2.22 2.23
pyopenssl 25.1.0 25.3.0
requests 2.32.4 2.32.5
simplejson 3.20.1 3.20.2
typing-extensions 4.14.1 4.15.0
pyarrow 17.0.0 21.0.0
datasets 2.20.0 4.2.0
fastapi 0.111.1 0.119.0
locust 2.25.0 2.41.6
mangum 0.17.0 0.19.0
pre-commit 3.5.0 4.3.0
pydantic 2.11.9 2.12.2
pytest-xdist 3.6.1 3.8.0
pytest-asyncio 0.25 1.2.0
uvicorn 0.22.0 0.37.0
boto3 1.35.95 1.40.52
tiktoken 0.11.0 0.12.0
python-docx 1.1.2 1.2.0
pypdf 6.0.0 6.1.1
langchain-community 0.3.27 0.3.31
langchain-core 0.3.76 0.3.79
langchain-openai 0.3.33 0.3.35
cachetools 5.5.0 6.2.1
pytest 8.3.2 8.4.2
moto[all] 5.0.3 5.1.14
lxml 5.3.0 6.0.2
opensearch-py 2.8.0 3.0.0
psycopg2-binary 2.9.10 2.9.11
black 24.3.0 25.9.0
flake8 7.0.0 7.3.0
mypy 1.9.0 1.18.2
pydantic-core 2.33.2 2.41.4

Updates attrs from 25.3.0 to 25.4.0

Commits

Updates cbor2 from 5.6.5 to 5.7.0

Release notes

Sourced from cbor2's releases.

5.7.0

Changelog

Sourced from cbor2's changelog.

Version history

.. currentmodule:: cbor2

This library adheres to Semantic Versioning <https://semver.org/>_.

UNRELEASED

5.7.0 (2025-08-14)

5.6.5 (2024-10-09)

  • Published binary wheels for Python 3.13

5.6.4 (2024-06-06)

  • Fixed compilation of C extension failing on GCC 14
  • Fixed compiler warnings when building C extension

5.6.3 (2024-04-11)

  • Fixed decoding of epoch-based dates being affected by the local time zone in the C extension

5.6.2 (2024-02-19)

  • Fixed __hash__() of the C version of the CBORTag type crashing when there's a recursive reference cycle
  • Fixed type annotation for the file object in cbor2.dump(), cbor2.load(), CBOREncoder and CBORDecoder to be IO[bytes] instead of BytesIO
  • Worked around a CPython bug <https://github.com/python/cpython/issues/99612>_ that caused a SystemError to be raised, or even a buffer overflow to occur when decoding a long text string that contained only ASCII characters
  • Changed the return type annotations of cbor2.load() and cbor2.load() to return Any instead of object so as not to force users to make type casts

5.6.1 (2024-02-01)

  • Fixed use-after-free in the decoder's C version when prematurely encountering the end of stream

... (truncated)

Commits
  • 071a165 Bumped up the version
  • b9c5637 Added missing info on some changes
  • 88eabb7 Added encode/decode support for complex numbers (#249)
  • 0b8d689 Fixed the deprecation warning about argparse.FileType on Python 3.14
  • c4dcd41 Updated the testing and packaging configuration
  • ff2e91e Updated to the latest cibuildwheel and added new platforms for wheel builds
  • 5b8d7ce Declared support for Python 3.14
  • 48e871a Added missing config section for setuptools_scm
  • 9876463 Fixed test not to rely on a specific working directory
  • 600c86f Fixed test failure on 32-bit Windows
  • Additional commits viewable in compare view

Updates certifi from 2025.7.14 to 2025.10.5

Commits

Updates cffi from 1.17.1 to 2.0.0

Release notes

Sourced from cffi's releases.

v2.0.0

What's Changed

  • Add Python 3.14 support.
  • Add CPython free-threaded support (3.14t+ only) - huge thanks to the folks at Quansight Labs for all the work to get this one sorted!
  • Drop Python <= 3.8 support.
  • Fix order dependency affecting nested type size calculation (#148).

Full Changelog: python-cffi/cffi@v1.17.1...v2.0.0

v2.0.0b1

What's Changed

  • Add Python 3.14 support.
  • Add CPython free-threaded support (3.14t+ only).
  • Drop Python <= 3.8 support.
  • Fix order dependency affecting nested type size calculation (#148).

Full Changelog: python-cffi/cffi@v1.17.1...v2.0.0b1

Commits
  • 6366c01 release 2.0.0 (#196)
  • 95c8476 2.0.0 post beta backports (#195)
  • 195cbda Release 2.0.0b1 (#183)
  • b4bbe79 fix version test to support beta
  • 7ed073d Add support for the free-threaded build (#178)
  • 67a170d Change the license from MIT to MIT-no-attribution, which is the same without ...
  • 92645ec Add Python 3.14 support/testing (#177)
  • 2b81170 doc: update test commands in Section Testing/development tips (#158)
  • 25172b8 doc: update year (#153)
  • b57a92c issue 147: force-compute nested structs before parent structs. Occurs mainly...
  • Additional commits viewable in compare view

Updates charset-normalizer from 3.4.2 to 3.4.4

Release notes

Sourced from charset-normalizer's releases.

Version 3.4.4

3.4.4 (2025-10-13)

Changed

  • Bound setuptools to a specific constraint setuptools>=68,<=81.
  • Raised upper bound of mypyc for the optional pre-built extension to v1.18.2

Removed

  • setuptools-scm as a build dependency.

Misc

  • Enforced hashes in dev-requirements.txt and created ci-requirements.txt for security purposes.
  • Additional pre-built wheels for riscv64, s390x, and armv7l architectures.
  • Restore multiple.intoto.jsonl in GitHub releases in addition to individual attestation file per wheel.

Version 3.4.3

3.4.3 (2025-08-09)

Changed

  • mypy(c) is no longer a required dependency at build time if CHARSET_NORMALIZER_USE_MYPYC isn't set to 1. (#595) (#583)
  • automatically lower confidence on small bytes samples that are not Unicode in detect output legacy function. (#391)

Added

  • Custom build backend to overcome inability to mark mypy as an optional dependency in the build phase.
  • Support for Python 3.14

Fixed

  • sdist archive contained useless directories.
  • automatically fallback on valid UTF-16 or UTF-32 even if the md says it's noisy. (#633)

Misc

  • SBOM are automatically published to the relevant GitHub release to comply with regulatory changes. Each published wheel comes with its SBOM. We choose CycloneDX as the format.
  • Prebuilt optimized wheel are no longer distributed by default for CPython 3.7 due to a change in cibuildwheel.
Changelog

Sourced from charset-normalizer's changelog.

3.4.4 (2025-10-13)

Changed

  • Bound setuptools to a specific constraint setuptools>=68,<=81.
  • Raised upper bound of mypyc for the optional pre-built extension to v1.18.2

Removed

  • setuptools-scm as a build dependency.

Misc

  • Enforced hashes in dev-requirements.txt and created ci-requirements.txt for security purposes.
  • Additional pre-built wheels for riscv64, s390x, and armv7l architectures.
  • Restore multiple.intoto.jsonl in GitHub releases in addition to individual attestation file per wheel.

3.4.3 (2025-08-09)

Changed

  • mypy(c) is no longer a required dependency at build time if CHARSET_NORMALIZER_USE_MYPYC isn't set to 1. (#595) (#583)
  • automatically lower confidence on small bytes samples that are not Unicode in detect output legacy function. (#391)

Added

  • Custom build backend to overcome inability to mark mypy as an optional dependency in the build phase.
  • Support for Python 3.14

Fixed

  • sdist archive contained useless directories.
  • automatically fallback on valid UTF-16 or UTF-32 even if the md says it's noisy. (#633)

Misc

  • SBOM are automatically published to the relevant GitHub release to comply with regulatory changes. Each published wheel comes with its SBOM. We choose CycloneDX as the format.
  • Prebuilt optimized wheel are no longer distributed by default for CPython 3.7 due to a change in cibuildwheel.
Commits
  • b30ffdc 🔧 fix checksum step in cd.yml
  • d3fbfcf 🔧 fix cd.yml
  • dafbb95 Release 3.4.4 (#658)
  • 1f18ffa ⬆️ raise mypy upper bound to 1.18.2
  • ef4ac69 Merge branch 'release-3.4.4' of github.com:jawah/charset_normalizer into rele...
  • 4b35dda 📝 write changelog for 3.4.4
  • 0ec6452 🔧 update cd.yml workflow (add riscv64, s390x and armv7l)
  • f341ede ⬆️ upgrade dependencies (dev, ci)
  • a308841 📝 write changelog for 3.4.4
  • 9c906da 🔧 update cd.yml workflow (add riscv64, s390x and armv7l)
  • Additional commits viewable in compare view

Updates cryptography from 45.0.5 to 46.0.2

Changelog

Sourced from cryptography's changelog.

46.0.2 - 2025-09-30


* Updated Windows, macOS, and Linux wheels to be compiled with OpenSSL 3.5.4.

.. _v46-0-1:


46.0.1 - 2025-09-16

  • Fixed an issue where users installing via pip on Python 3.14 development versions would not properly install a dependency.
  • Fixed an issue building the free-threaded macOS 3.14 wheels.

.. _v46-0-0:

46.0.0 - 2025-09-16


* **BACKWARDS INCOMPATIBLE:** Support for Python 3.7 has been removed.
* Support for OpenSSL < 3.0 is deprecated and will be removed in the next
  release.
* Support for ``x86_64`` macOS (including publishing wheels) is deprecated
  and will be removed in two releases. We will switch to publishing an
  ``arm64`` only wheel for macOS.
* Support for 32-bit Windows (including publishing wheels) is deprecated
  and will be removed in two releases. Users should move to a 64-bit
  Python installation.
* Updated Windows, macOS, and Linux wheels to be compiled with OpenSSL 3.5.3.
* We now build ``ppc64le`` ``manylinux`` wheels and publish them to PyPI.
* We now build ``win_arm64`` (Windows on Arm) wheels and publish them to PyPI.
* Added support for free-threaded Python 3.14.
* Removed the deprecated ``get_attribute_for_oid`` method on
  :class:`~cryptography.x509.CertificateSigningRequest`. Users should use
  :meth:`~cryptography.x509.Attributes.get_attribute_for_oid` instead.
* Removed the deprecated ``CAST5``, ``SEED``, ``IDEA``, and ``Blowfish``
  classes from the cipher module. These are still available in
  :doc:`/hazmat/decrepit/index`.
* In X.509, when performing a PSS signature with a SHA-3 hash, it is now
  encoded with the official NIST SHA3 OID.

.. _v45-0-7:


45.0.7 - 2025-09-01

  • Added a function to support an upcoming pyOpenSSL release.

.. _v45-0-6:

... (truncated)

Commits

Updates idna from 3.10 to 3.11

Changelog

Sourced from idna's changelog.

3.11 (2025-10-12)

  • Update to Unicode 16.0.0, including significant changes to UTS46 processing. As a result of Unicode ending support for it, transitional processing no longer has an effect and returns the same result.
  • Add support for Python 3.14, lowest supported version is Python 3.8.
  • Various updates to packaging, including PEP 740 support.
Commits
  • ad949ee Release v3.11
  • cae4ba7 Second release candidate for 3.11
  • 8adb305 Add space in RST link
  • 74cb2b6 Release candidate for 3.11
  • 05dab09 Format idna-data with ruff
  • 90eac78 Apply ruff formatting
  • a31ce7e Remove errant test vectors
  • 81f0333 Omit vectors known to be broken in test suite
  • a0f3257 Merge branch 'master' into unicode-16-uts46-changes
  • 38d9886 Remove extra UTS46 test vector
  • Additional commits viewable in compare view

Updates pycparser from 2.22 to 2.23

Release notes

Sourced from pycparser's releases.

release_v2.23

What's Changed

New Contributors

Full Changelog: eliben/pycparser@release_v2.22...release_v2.23

Commits

Updates pyopenssl from 25.1.0 to 25.3.0

Changelog

Sourced from pyopenssl's changelog.

25.3.0 (2025-09-16)

Backward-incompatible changes: ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

Deprecations: ^^^^^^^^^^^^^

Changes: ^^^^^^^^

  • Maximum supported cryptography version is now 46.x.

25.2.0 (2025-09-14)

Backward-incompatible changes: ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

  • The minimum cryptography version is now 45.0.7.

Deprecations: ^^^^^^^^^^^^^

Changes: ^^^^^^^^

  • pyOpenSSL now sets SSL_MODE_ACCEPT_MOVING_WRITE_BUFFER on connections by default, matching CPython's behavior.
  • Added OpenSSL.SSL.Context.clear_mode.
  • Added OpenSSL.SSL.Context.set_tls13_ciphersuites to set the allowed TLS 1.3 ciphers.
  • Added OpenSSL.SSL.Connection.set_info_callback
Commits

Updates requests from 2.32.4 to 2.32.5

Release notes

Sourced from requests's releases.

v2.32.5

2.32.5 (2025-08-18)

Bugfixes

  • The SSLContext caching feature originally introduced in 2.32.0 has created a new class of issues in Requests that have had negative impact across a number of use cases. The Requests team has decided to revert this feature as long term maintenance of it is proving to be unsustainable in its current iteration.

Deprecations

  • Added support for Python 3.14.
  • Dropped support for Python 3.8 following its end of support.
Changelog

Sourced from requests's changelog.

2.32.5 (2025-08-18)

Bugfixes

  • The SSLContext caching feature originally introduced in 2.32.0 has created a new class of issues in Requests that have had negative impact across a number of use cases. The Requests team has decided to revert this feature as long term maintenance of it is proving to be unsustainable in its current iteration.

Deprecations

  • Added support for Python 3.14.
  • Dropped support for Python 3.8 following its end of support.
Commits
  • b25c87d v2.32.5
  • 131e506 Merge pull request #7010 from psf/dependabot/github_actions/actions/checkout-...
  • b336cb2 Bump actions/checkout from 4.2.0 to 5.0.0
  • 46e939b Update publish workflow to use artifact-id instead of name
  • 4b9c546 Merge pull request #6999 from psf/dependabot/github_actions/step-security/har...
  • 7618dbe Bump step-security/harden-runner from 2.12.0 to 2.13.0
  • 2edca11 Add support for Python 3.14 and drop support for Python 3.8 (#6993)
  • fec96cd Update Makefile rules (#6996)
  • d58d8aa docs: clarify timeout parameter uses seconds in Session.request (#6994)
  • 91a3eab Bump github/codeql-action from 3.28.5 to 3.29.0
  • Additional commits viewable in compare view

Updates simplejson from 3.20.1 to 3.20.2

Release notes

Sourced from simplejson's releases.

v3.20.2

What's Changed

New Contributors

Full Changelog: simplejson/simplejson@v3.20.1...v3.20.2

Changelog

Sourced from simplejson's changelog.

Version 3.20.2 released 2025-09-24

Version 3.20.1 released 2025-02-14

Version 3.19.3 released 2024-08-14

  • Updated test & build matrix to include Python 3.13. Dropped wheel support for Python 2.7 on macOS. simplejson/simplejson#326

Version 3.19.2 released 2023-10-05

  • Updated test & build matrix to include Python 3.12 and use GitHub Actions as a Trusted Publisher (OIDC) simplejson/simplejson#317

Version 3.19.1 released 2023-04-06

  • This release contains security hardening measures based on recommendations by a security audit sponsored by OSTIF and conducted by X41 D-Sec GmbH. Several of these measures include changing defaults to be more strict, by default simplejson will now only consume and produce compliant JSON, but the flags still exist for any backwards compatibility needs. No high priority issues were discovered, the reference count leak is thought to be unreachable since the digits of the float are checked before PyOS_string_to_double is called. A link to the public version of this report will be included in a future release of simplejson. The following fixes were implemented in one PR: simplejson/simplejson#313
  • Fix invalid handling of unicode escape sequences in the pure Python implementation of the decoder (SJ-PT-23-01)
  • Fix missing reference count decrease if PyOS_string_to_double raises an exception in Python 2.x; was probably unreachable (SJ-PT-23-02)
  • Backport the integer string length limitation from Python 3.11 to limit quadratic number parsing (SJ-PT-23-03)
  • Fix inconsistencies with error messages between the C and Python implementations (SJ-PT-23-100)
  • Remove unused unichr import from encoder (SJ-PT-23-101)
  • Remove unused namedtuple_as_object and tuple_as_array arguments from simplejson.load (SJ-PT-23-102)
  • Remove vestigial _one_shot code from iterencode (SJ-PT-23-103)
  • Change default of allow_nan from True to False and add allow_nan to decoder (SJ-PT-23-107)

... (truncated)

Commits
  • 10e5aaf Merge pull request #340 from simplejson/changes-v3.20.2
  • 39ba9df Update changelog and version for v3.20.2
  • 5f9f96f Merge pull request #339 from timfel/patch-1
  • feb07a3 Test pure Python code, also on PyPy and GraalPy
  • ae69b83 Disable speedups on GraalPy same as on PyPy
  • fd905ba Merge pull request #337 from simplejson/float-range
  • 92c0230 Add a test for the min and max floats
  • See full diff in compare view

Updates typing-extensions from 4.14.1 to 4.15.0

Release notes

Sourced from typing-extensions's releases.

4.15.0

No user-facing changes since 4.15.0rc1.

New features since 4.14.1:

  • Add the @typing_extensions.disjoint_base decorator, as specified in PEP 800. Patch by Jelle Zijlstra.
  • Add typing_extensions.type_repr, a backport of annotationlib.type_repr, introduced in Python 3.14 (CPython PR #124551, originally by Jelle Zijlstra). Patch by Semyon Moroz.
  • Fix behavior of type params in typing_extensions.evaluate_forward_ref. Backport of CPython PR #137227 by Jelle Zijlstra.

4.15.0rc1

  • Add the @typing_extensions.disjoint_base decorator, as specified in PEP 800. Patch by Jelle Zijlstra.
  • Add typing_extensions.type_repr, a backport of annotationlib.type_repr, introduced in Python 3.14 (CPython PR #124551, originally by Jelle Zijlstra). Patch by Semyon Moroz.
  • Fix behavior of type params in typing_extensions.evaluate_forward_ref. Backport of CPython PR #137227 by Jelle Zijlstra.
Changelog

Sourced from typing-extensions's changelog.

Release 4.15.0 (August 25, 2025)

No user-facing changes since 4.15.0rc1.

Release 4.15.0rc1 (August 18, 2025)

  • Add the @typing_extensions.disjoint_base decorator, as specified in PEP 800. Patch by Jelle Zijlstra.
  • Add typing_extensions.type_repr, a backport of annotationlib.type_repr, introduced in Python 3.14 (CPython PR #124551, originally by Jelle Zijlstra). Patch by Semyon Moroz.
  • Fix behavior of type params in typing_extensions.evaluate_forward_ref. Backport of CPython PR #137227 by Jelle Zijlstra.
Commits

Updates pyarrow from 17.0.0 to 21.0.0

Release notes

Sourced from pyarrow's releases.

Apache Arrow 21.0.0

Release Notes URL: https://arrow.apache.org/release/21.0.0.html

Apache Arrow 21.0.0 RC6

Release Notes: Release Candidate: 21.0.0 RC6

Apache Arrow 21.0.0 RC5

Release Notes: Release Candidate: 21.0.0 RC5

Apache Arrow 21.0.0 RC4

Release Notes: Release Candidate: 21.0.0 RC4

Apache Arrow 21.0.0 RC3

Release Notes: Release Candidate: 21.0.0 RC3

Apache Arrow 21.0.0 RC2

Release Notes: Release Candidate: 21.0.0 RC2

Apache Arrow 20.0.0

Release Notes URL: https://arrow.apache.org/release/20.0.0.html

Apache Arrow 20.0.0 RC2

Release Notes: Release Candidate: 20.0.0 RC2

Apache Arrow 20.0.0 RC1

Release Notes: Release Candidate: 20.0.0 RC1

Apache Arrow 20.0.0 RC0

Release Notes: Release Candidate: 20.0.0 RC0

Apache Arrow 19.0.1

Release Notes URL: https://arrow.apache.org/release/19.0.1.html

Apache Arrow 19.0.1 RC1

Release Notes: Release Candidate: 19.0.1 RC1

Apache Arrow 19.0.1 RC0

Release Notes: Release Candidate: 19.0.1 RC0

Apache Arrow 19.0.0

Release Notes URL: https://arrow.apache.org/release/19.0.0.html

Apache Arrow 19.0.0 RC0

Release Notes: Release Candidate: 19.0.0 RC0

Apache Arrow 18.1.0

Release Notes URL: https://arrow.apache.org/release/18.1.0.html

Apache Arrow 18.1.0 RC2

Release Notes: Release Candidate: 18.1.0 RC2

... (truncated)

Commits

Updates datasets from 2.20.0 to 4.2.0

Release notes

Sourced from datasets's releases.

4.2.0

Dataset Features

  • Sample without replacement option when interleaving datasets by @​radulescupetru in huggingface/datasets#7786

    ds = interleave_datasets(datasets, stopping_strategy="all_exhausted_without_replacement")

  • Parquet: add on_bad_files argument to error/warn/skip bad files by @​lhoestq in huggingface/datasets#7806

    ds = load_dataset(parquet_dataset_id, on_bad_files="warn")

  • Add parquet scan options and docs by @​lhoestq in huggingface/datasets#7801

    • docs to select columns and filter data efficiently
    ds = load_dataset(parquet_dataset_id, columns=["col_0", "col_1"])
ds = load_dataset(parquet_dataset_id, filters=[("col_0", "==", 0)])
    • new argument to control buffering and caching when streaming
    fragment_scan_options = pyarrow.dataset.ParquetFragmentScanOptions(cache_options=pyarrow.CacheOptions(prefetch_limit=1, range_size_limit=128 << 20))
ds = load_dataset(parquet_dataset_id, streaming=True, fragment_scan_options=fragment_scan_options)

What's Changed

New Contributors

Full Changelog: huggingface/datasets@4.1.1...4.2.0

4.1.1

What's Changed

... (truncated)

Commits

dustins and others added 30 commits October 15, 2025 03:13
@dustins @bedanley
lisa adc specific changes
0c619d3
@batzela @bedanley
bug fixes for constantly loading configurations
335fc61
@batzela @bedanley
CR-199929810 ended up getting written over with a sync from the GitHu…
09b5c5a 
…b repo, add those changes back in.
@batzela @bedanley
hotifx for backend admin controls
6f1f09a
@batzela @bedanley
hotfix for backend gating admins
a51b989
@batzela @bedanley
Bugfix for continuous calling of configuration endpoint
e7396c0
@bedanley
prefixing oidc endpoint with https://
6c3e37c
@estohlmann @bedanley
Updating to only be useable by our team
9248261
@bedanley
setting liteLLM self.verify=False for iso regions
65b75ce
@estohlmann @bedanley
updating package lock
b20c46c
@estohlmann @bedanley
rollback brace-expansion upgrade due to npmprettymuch not having late…
e724249 
…st version
@bedanley
fix: removing ',' from self.verify
dab6271
@estohlmann @bedanley
adding debugging
6ae0885
@estohlmann @bedanley
removing debug statements
9ba8c81
@batzela @bedanley
feat: Implement comprehensive BRASS authorization system
5df416c 
Add complete BRASS integration for bindle lock authorization with:

Backend:
- Professional BRASS client with region-specific endpoint support
- Lambda functions for authorization API with input validation
- CDK constructs for infrastructure deployment
- Integration with existing authorizer system

Frontend:
- Type-safe BrassClient with timeout handling and error management
- Performance optimization with global caching (eliminates 10+ redundant API calls)
- Enhanced user experience with specific error messages
- Simplified authentication flow (removed legacy MIDWAY_AUTH_ENABLED)

Key Features:
- Multi-partition support (AWS, ISO-B, ISO)
- Enterprise-grade input validation and error handling
- Production-ready CDK infrastructure with proper IAM permissions
- Comprehensive JSDoc documentation and examples

cr: https://code.amazon.com/reviews/CR-208157629
@batzela @bedanley
bug fixes for constantly loading configurations
ed4b71d
@batzela @bedanley
CR-199929810 ended up getting written over with a sync from the GitHu…
a0dbe1c 
…b repo, add those changes back in.
@batzela @bedanley
hotifx for backend admin controls
85cbb5f
@batzela @bedanley
hotfix for backend gating admins
d9eb97d
@batzela @bedanley
Bugfix for continuous calling of configuration endpoint
232b960
@estohlmann @bedanley
Updating to only be useable by our team
6b3cb37
@bedanley
setting liteLLM self.verify=False for iso regions
4d57e91
@estohlmann @bedanley
updating package lock
b458194
@estohlmann @bedanley
rollback brace-expansion upgrade due to npmprettymuch not having late…
bbce530 
…st version
@bedanley
fix: removing ',' from self.verify
55b3bef
@estohlmann @bedanley
adding debugging
82eb082
@estohlmann @bedanley
removing debug statements
dee2c76
@batzela @bedanley
feat: Implement comprehensive BRASS authorization system
6bd4d70 
Add complete BRASS integration for bindle lock authorization with:

Backend:
- Professional BRASS client with region-specific endpoint support
- Lambda functions for authorization API with input validation
- CDK constructs for infrastructure deployment
- Integration with existing authorizer system

Frontend:
- Type-safe BrassClient with timeout handling and error management
- Performance optimization with global caching (eliminates 10+ redundant API calls)
- Enhanced user experience with specific error messages
- Simplified authentication flow (removed legacy MIDWAY_AUTH_ENABLED)

Key Features:
- Multi-partition support (AWS, ISO-B, ISO)
- Enterprise-grade input validation and error handling
- Production-ready CDK infrastructure with proper IAM permissions
- Comprehensive JSDoc documentation and examples

cr: https://code.amazon.com/reviews/CR-208157629
@dustins @bedanley
lisa adc specific changes
b481e7d
@batzela @bedanley
bug fixes for constantly loading configurations
52e23e0
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Oct 15, 2025
@dependabot dependabot bot force-pushed the dependabot/pip/develop/python-dependencies-c04c390ee1 branch from ea9500d to 65121b8 Compare October 15, 2025 15:23
@dependabot
chore(deps): bump the python-dependencies group across 1 directory wi…
ec2b10f 
…th 39 updates

Bumps the python-dependencies group with 39 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [attrs](https://github.com/sponsors/hynek) | `25.3.0` | `25.4.0` |
| [cbor2](https://github.com/agronholm/cbor2) | `5.6.5` | `5.7.0` |
| [certifi](https://github.com/certifi/python-certifi) | `2025.7.14` | `2025.10.5` |
| [cffi](https://github.com/python-cffi/cffi) | `1.17.1` | `2.0.0` |
| [charset-normalizer](https://github.com/jawah/charset_normalizer) | `3.4.2` | `3.4.4` |
| [cryptography](https://github.com/pyca/cryptography) | `45.0.5` | `46.0.2` |
| [idna](https://github.com/kjd/idna) | `3.10` | `3.11` |
| [pycparser](https://github.com/eliben/pycparser) | `2.22` | `2.23` |
| [pyopenssl](https://github.com/pyca/pyopenssl) | `25.1.0` | `25.3.0` |
| [requests](https://github.com/psf/requests) | `2.32.4` | `2.32.5` |
| [simplejson](https://github.com/simplejson/simplejson) | `3.20.1` | `3.20.2` |
| [typing-extensions](https://github.com/python/typing_extensions) | `4.14.1` | `4.15.0` |
| [pyarrow](https://github.com/apache/arrow) | `17.0.0` | `21.0.0` |
| [datasets](https://github.com/huggingface/datasets) | `2.20.0` | `4.2.0` |
| [fastapi](https://github.com/fastapi/fastapi) | `0.111.1` | `0.119.0` |
| [locust](https://github.com/locustio/locust) | `2.25.0` | `2.41.6` |
| [mangum](https://github.com/Kludex/mangum) | `0.17.0` | `0.19.0` |
| [pre-commit](https://github.com/pre-commit/pre-commit) | `3.5.0` | `4.3.0` |
| [pydantic](https://github.com/pydantic/pydantic) | `2.11.9` | `2.12.2` |
| [pytest-xdist](https://github.com/pytest-dev/pytest-xdist) | `3.6.1` | `3.8.0` |
| [pytest-asyncio](https://github.com/pytest-dev/pytest-asyncio) | `0.25` | `1.2.0` |
| [uvicorn](https://github.com/Kludex/uvicorn) | `0.22.0` | `0.37.0` |
| [boto3](https://github.com/boto/boto3) | `1.35.95` | `1.40.52` |
| [tiktoken](https://github.com/openai/tiktoken) | `0.11.0` | `0.12.0` |
| [python-docx](https://github.com/python-openxml/python-docx) | `1.1.2` | `1.2.0` |
| [pypdf](https://github.com/py-pdf/pypdf) | `6.0.0` | `6.1.1` |
| [langchain-community](https://github.com/langchain-ai/langchain) | `0.3.27` | `0.3.31` |
| [langchain-core](https://github.com/langchain-ai/langchain) | `0.3.76` | `0.3.79` |
| [langchain-openai](https://github.com/langchain-ai/langchain) | `0.3.33` | `0.3.35` |
| [cachetools](https://github.com/tkem/cachetools) | `5.5.0` | `6.2.1` |
| [pytest](https://github.com/pytest-dev/pytest) | `8.3.2` | `8.4.2` |
| [moto[all]](https://github.com/getmoto/moto) | `5.0.3` | `5.1.14` |
| [lxml](https://github.com/lxml/lxml) | `5.3.0` | `6.0.2` |
| [opensearch-py](https://github.com/opensearch-project/opensearch-py) | `2.8.0` | `3.0.0` |
| [psycopg2-binary](https://github.com/psycopg/psycopg2) | `2.9.10` | `2.9.11` |
| [black](https://github.com/psf/black) | `24.3.0` | `25.9.0` |
| [flake8](https://github.com/pycqa/flake8) | `7.0.0` | `7.3.0` |
| [mypy](https://github.com/python/mypy) | `1.9.0` | `1.18.2` |
| [pydantic-core](https://github.com/pydantic/pydantic-core) | `2.33.2` | `2.41.4` |



Updates `attrs` from 25.3.0 to 25.4.0
- [Commits](https://github.com/sponsors/hynek/commits)

Updates `cbor2` from 5.6.5 to 5.7.0
- [Release notes](https://github.com/agronholm/cbor2/releases)
- [Changelog](https://github.com/agronholm/cbor2/blob/master/docs/versionhistory.rst)
- [Commits](agronholm/cbor2@5.6.5...5.7.0)

Updates `certifi` from 2025.7.14 to 2025.10.5
- [Commits](certifi/python-certifi@2025.07.14...2025.10.05)

Updates `cffi` from 1.17.1 to 2.0.0
- [Release notes](https://github.com/python-cffi/cffi/releases)
- [Commits](python-cffi/cffi@v1.17.1...v2.0.0)

Updates `charset-normalizer` from 3.4.2 to 3.4.4
- [Release notes](https://github.com/jawah/charset_normalizer/releases)
- [Changelog](https://github.com/jawah/charset_normalizer/blob/master/CHANGELOG.md)
- [Commits](jawah/charset_normalizer@3.4.2...3.4.4)

Updates `cryptography` from 45.0.5 to 46.0.2
- [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst)
- [Commits](pyca/cryptography@45.0.5...46.0.2)

Updates `idna` from 3.10 to 3.11
- [Release notes](https://github.com/kjd/idna/releases)
- [Changelog](https://github.com/kjd/idna/blob/master/HISTORY.rst)
- [Commits](kjd/idna@v3.10...v3.11)

Updates `pycparser` from 2.22 to 2.23
- [Release notes](https://github.com/eliben/pycparser/releases)
- [Changelog](https://github.com/eliben/pycparser/blob/main/CHANGES)
- [Commits](eliben/pycparser@release_v2.22...release_v2.23)

Updates `pyopenssl` from 25.1.0 to 25.3.0
- [Changelog](https://github.com/pyca/pyopenssl/blob/main/CHANGELOG.rst)
- [Commits](pyca/pyopenssl@25.1.0...25.3.0)

Updates `requests` from 2.32.4 to 2.32.5
- [Release notes](https://github.com/psf/requests/releases)
- [Changelog](https://github.com/psf/requests/blob/main/HISTORY.md)
- [Commits](psf/requests@v2.32.4...v2.32.5)

Updates `simplejson` from 3.20.1 to 3.20.2
- [Release notes](https://github.com/simplejson/simplejson/releases)
- [Changelog](https://github.com/simplejson/simplejson/blob/master/CHANGES.txt)
- [Commits](simplejson/simplejson@v3.20.1...v3.20.2)

Updates `typing-extensions` from 4.14.1 to 4.15.0
- [Release notes](https://github.com/python/typing_extensions/releases)
- [Changelog](https://github.com/python/typing_extensions/blob/main/CHANGELOG.md)
- [Commits](python/typing_extensions@4.14.1...4.15.0)

Updates `pyarrow` from 17.0.0 to 21.0.0
- [Release notes](https://github.com/apache/arrow/releases)
- [Commits](apache/arrow@go/v17.0.0...apache-arrow-21.0.0)

Updates `datasets` from 2.20.0 to 4.2.0
- [Release notes](https://github.com/huggingface/datasets/releases)
- [Commits](huggingface/datasets@2.20.0...4.2.0)

Updates `fastapi` from 0.111.1 to 0.119.0
- [Release notes](https://github.com/fastapi/fastapi/releases)
- [Commits](fastapi/fastapi@0.111.1...0.119.0)

Updates `locust` from 2.25.0 to 2.41.6
- [Release notes](https://github.com/locustio/locust/releases)
- [Changelog](https://github.com/locustio/locust/blob/master/CHANGELOG.md)
- [Commits](locustio/locust@2.25.0...2.41.6)

Updates `mangum` from 0.17.0 to 0.19.0
- [Release notes](https://github.com/Kludex/mangum/releases)
- [Changelog](https://github.com/Kludex/mangum/blob/main/CHANGELOG.md)
- [Commits](Kludex/mangum@0.17.0...0.19.0)

Updates `pre-commit` from 3.5.0 to 4.3.0
- [Release notes](https://github.com/pre-commit/pre-commit/releases)
- [Changelog](https://github.com/pre-commit/pre-commit/blob/main/CHANGELOG.md)
- [Commits](pre-commit/pre-commit@v3.5.0...v4.3.0)

Updates `pydantic` from 2.11.9 to 2.12.2
- [Release notes](https://github.com/pydantic/pydantic/releases)
- [Changelog](https://github.com/pydantic/pydantic/blob/v2.12.2/HISTORY.md)
- [Commits](pydantic/pydantic@v2.11.9...v2.12.2)

Updates `pytest-xdist` from 3.6.1 to 3.8.0
- [Release notes](https://github.com/pytest-dev/pytest-xdist/releases)
- [Changelog](https://github.com/pytest-dev/pytest-xdist/blob/master/CHANGELOG.rst)
- [Commits](pytest-dev/pytest-xdist@v3.6.1...v3.8.0)

Updates `pytest-asyncio` from 0.25 to 1.2.0
- [Release notes](https://github.com/pytest-dev/pytest-asyncio/releases)
- [Commits](pytest-dev/pytest-asyncio@v0.25.0...v1.2.0)

Updates `uvicorn` from 0.22.0 to 0.37.0
- [Release notes](https://github.com/Kludex/uvicorn/releases)
- [Changelog](https://github.com/Kludex/uvicorn/blob/main/docs/release-notes.md)
- [Commits](Kludex/uvicorn@0.22.0...0.37.0)

Updates `boto3` from 1.35.95 to 1.40.52
- [Release notes](https://github.com/boto/boto3/releases)
- [Commits](boto/boto3@1.35.95...1.40.52)

Updates `tiktoken` from 0.11.0 to 0.12.0
- [Release notes](https://github.com/openai/tiktoken/releases)
- [Changelog](https://github.com/openai/tiktoken/blob/main/CHANGELOG.md)
- [Commits](openai/tiktoken@0.11.0...0.12.0)

Updates `python-docx` from 1.1.2 to 1.2.0
- [Changelog](https://github.com/python-openxml/python-docx/blob/master/HISTORY.rst)
- [Commits](python-openxml/python-docx@v1.1.2...v1.2.0)

Updates `pypdf` from 6.0.0 to 6.1.1
- [Release notes](https://github.com/py-pdf/pypdf/releases)
- [Changelog](https://github.com/py-pdf/pypdf/blob/main/CHANGELOG.md)
- [Commits](py-pdf/pypdf@6.0.0...6.1.1)

Updates `langchain-community` from 0.3.27 to 0.3.31
- [Release notes](https://github.com/langchain-ai/langchain/releases)
- [Commits](langchain-ai/langchain@langchain==0.3.27...langchain-core==0.3.31)

Updates `langchain-core` from 0.3.76 to 0.3.79
- [Release notes](https://github.com/langchain-ai/langchain/releases)
- [Commits](langchain-ai/langchain@langchain-core==0.3.76...langchain-core==0.3.79)

Updates `langchain-openai` from 0.3.33 to 0.3.35
- [Release notes](https://github.com/langchain-ai/langchain/releases)
- [Commits](langchain-ai/langchain@langchain-openai==0.3.33...langchain-openai==0.3.35)

Updates `cachetools` from 5.5.0 to 6.2.1
- [Changelog](https://github.com/tkem/cachetools/blob/master/CHANGELOG.rst)
- [Commits](tkem/cachetools@v5.5.0...v6.2.1)

Updates `pytest` from 8.3.2 to 8.4.2
- [Release notes](https://github.com/pytest-dev/pytest/releases)
- [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst)
- [Commits](pytest-dev/pytest@8.3.2...8.4.2)

Updates `moto[all]` from 5.0.3 to 5.1.14
- [Release notes](https://github.com/getmoto/moto/releases)
- [Changelog](https://github.com/getmoto/moto/blob/master/CHANGELOG.md)
- [Commits](getmoto/moto@5.0.3...5.1.14)

Updates `lxml` from 5.3.0 to 6.0.2
- [Release notes](https://github.com/lxml/lxml/releases)
- [Changelog](https://github.com/lxml/lxml/blob/master/CHANGES.txt)
- [Commits](lxml/lxml@lxml-5.3.0...lxml-6.0.2)

Updates `opensearch-py` from 2.8.0 to 3.0.0
- [Release notes](https://github.com/opensearch-project/opensearch-py/releases)
- [Changelog](https://github.com/opensearch-project/opensearch-py/blob/main/CHANGELOG.md)
- [Commits](opensearch-project/opensearch-py@v2.8.0...v3.0.0)

Updates `psycopg2-binary` from 2.9.10 to 2.9.11
- [Changelog](https://github.com/psycopg/psycopg2/blob/master/NEWS)
- [Commits](psycopg/psycopg2@2.9.10...2.9.11)

Updates `black` from 24.3.0 to 25.9.0
- [Release notes](https://github.com/psf/black/releases)
- [Changelog](https://github.com/psf/black/blob/main/CHANGES.md)
- [Commits](psf/black@24.3.0...25.9.0)

Updates `flake8` from 7.0.0 to 7.3.0
- [Commits](PyCQA/flake8@7.0.0...7.3.0)

Updates `mypy` from 1.9.0 to 1.18.2
- [Changelog](https://github.com/python/mypy/blob/master/CHANGELOG.md)
- [Commits](python/mypy@1.9.0...v1.18.2)

Updates `pydantic-core` from 2.33.2 to 2.41.4
- [Release notes](https://github.com/pydantic/pydantic-core/releases)
- [Commits](pydantic/pydantic-core@v2.33.2...v2.41.4)

---
updated-dependencies:
- dependency-name: attrs
  dependency-version: 25.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: cbor2
  dependency-version: 5.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: certifi
  dependency-version: 2025.10.5
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: cffi
  dependency-version: 2.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: python-dependencies
- dependency-name: charset-normalizer
  dependency-version: 3.4.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: cryptography
  dependency-version: 46.0.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: python-dependencies
- dependency-name: idna
  dependency-version: '3.11'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: pycparser
  dependency-version: '2.23'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: pyopenssl
  dependency-version: 25.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: requests
  dependency-version: 2.32.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: simplejson
  dependency-version: 3.20.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: typing-extensions
  dependency-version: 4.15.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: pyarrow
  dependency-version: 21.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: python-dependencies
- dependency-name: datasets
  dependency-version: 4.2.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: python-dependencies
- dependency-name: fastapi
  dependency-version: 0.119.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: locust
  dependency-version: 2.41.6
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: mangum
  dependency-version: 0.19.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: pre-commit
  dependency-version: 4.3.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: python-dependencies
- dependency-name: pydantic
  dependency-version: 2.12.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: pytest-xdist
  dependency-version: 3.8.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: pytest-asyncio
  dependency-version: 1.2.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: python-dependencies
- dependency-name: uvicorn
  dependency-version: 0.37.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: boto3
  dependency-version: 1.40.52
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: tiktoken
  dependency-version: 0.12.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: python-docx
  dependency-version: 1.2.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: pypdf
  dependency-version: 6.1.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: langchain-community
  dependency-version: 0.3.31
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: langchain-core
  dependency-version: 0.3.79
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: langchain-openai
  dependency-version: 0.3.35
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: cachetools
  dependency-version: 6.2.1
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: python-dependencies
- dependency-name: pytest
  dependency-version: 8.4.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: moto[all]
  dependency-version: 5.1.14
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: lxml
  dependency-version: 6.0.2
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: python-dependencies
- dependency-name: opensearch-py
  dependency-version: 3.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: python-dependencies
- dependency-name: psycopg2-binary
  dependency-version: 2.9.11
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: black
  dependency-version: 25.9.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: python-dependencies
- dependency-name: flake8
  dependency-version: 7.3.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: mypy
  dependency-version: 1.18.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: pydantic-core
  dependency-version: 2.41.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot force-pushed the dependabot/pip/develop/python-dependencies-c04c390ee1 branch from 65121b8 to ec2b10f Compare October 15, 2025 15:27
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Oct 17, 2025

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot bot closed this Oct 17, 2025
@dependabot dependabot bot deleted the dependabot/pip/develop/python-dependencies-c04c390ee1 branch October 17, 2025 23:48
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python Pull requests that update Python code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

4 participants

@dustins @batzela @estohlmann @bedanley