Skip to content

build(deps): bump the pip group with 2 updates#520

Merged
github-actions[bot] merged 1 commit intomainfrom
dependabot/pip/pip-d37144f54e
Dec 1, 2025
Merged

build(deps): bump the pip group with 2 updates#520
github-actions[bot] merged 1 commit intomainfrom
dependabot/pip/pip-d37144f54e

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Dec 1, 2025

Bumps the pip group with 2 updates: boto3 and moto[ec2].

Updates boto3 from 1.40.69 to 1.42.0

Commits
  • 7ce189b Merge branch 'release-1.42.0'
  • 29d92d1 Bumping version to 1.42.0
  • 743f945 Add changelog entries from botocore
  • e3744fd Merge pull request #4629 from hssyoo/crt-mode
  • 39215b6 Merge branch 'release-1.41.5'
  • 79f2845 Merge branch 'release-1.41.5' into develop
  • 0fc8075 Bumping version to 1.41.5
  • 573d359 Add changelog entries from botocore
  • 177e900 Remove backticks from error msg
  • ff9d88c Add warning
  • Additional commits viewable in compare view

Updates moto[ec2] from 5.1.16 to 5.1.18

Changelog

Sourced from moto[ec2]'s changelog.

5.1.18

Docker Digest for 5.1.18: sha256:c99ea4ab0881e1d95af5601c2cd42ef4dac15eefdf6597532c59d9631068818a

General:
    * Introduces two methods for enabling and disabling IAM authentication:
        from moto.core import disable_iam_authentication, enable_iam_authentication
      They behave the same as the `@set_initial_no_auth_action_count`-decorator, but can be used as a fixture/context manager

New Services: * Pipes: * create_pipe() * delete_pipe() * describe_pipe() * list_pipes() * tag_resource() * untag_resource()

New Methods: * S3Control: * list_tags_for_resource() * tag_resource() * untag_resource()

* S3Vectors:
    * delete_vector_bucket_policy()
    * delete_vectors()
    * get_vector_bucket_policy()
    * get_vectors()
    * list_vectors()
    * put_vector_bucket_policy()
    * put_vectors()

Miscellaneous: * APIGateway: put_rest_api() now correctly creates integrations * AutoScaling: create_auto_scaling_group() now correctly calculates the InstancesDistribution for MixedInstancesPolicies * ResourceGroupsTaggingAPI: get_resources() now supports filtering by sqs:queue * SecretsManager: put_secret_value() now adds the AWSCURRENT-label if it's the first version of the Secret being added

5.1.17

Docker Digest for 5.1.17: sha256:0361ac8f0cc6687dcf3835da1d60e31cf457fb0d49229d56586f2aa5c510f170

General:
    * The MotoServer dashboard (available on http://localhost:5000/moto-api) now has an new and improved look, making it easier to search for and find your resources

New Methods: * CloudFront: * tag_resource()

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the pip group with 2 updates: [boto3](https://github.com/boto/boto3) and [moto[ec2]](https://github.com/getmoto/moto).


Updates `boto3` from 1.40.69 to 1.42.0
- [Release notes](https://github.com/boto/boto3/releases)
- [Commits](boto/boto3@1.40.69...1.42.0)

Updates `moto[ec2]` from 5.1.16 to 5.1.18
- [Release notes](https://github.com/getmoto/moto/releases)
- [Changelog](https://github.com/getmoto/moto/blob/master/CHANGELOG.md)
- [Commits](getmoto/moto@5.1.16...5.1.18)

---
updated-dependencies:
- dependency-name: boto3
  dependency-version: 1.42.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pip
- dependency-name: moto[ec2]
  dependency-version: 5.1.18
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: pip
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Dec 1, 2025
@github-actions github-actions bot merged commit e7420f5 into main Dec 1, 2025
2 of 3 checks passed
@github-actions github-actions bot deleted the dependabot/pip/pip-d37144f54e branch December 1, 2025 08:45
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file maintenance python Pull requests that update Python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants