MESH-2092 py dev (deps): Bump the patch-and-minor group with 6 updates

[dependabot]

Bumps the patch-and-minor group with 6 updates:

Package	From	To
nhs-aws-helpers	0.8.45	0.8.51
aws-lambda-powertools	3.31.1	3.34.0
boto3	1.43.58	1.43.68
boto3-stubs	1.43.36	1.43.68
tox	4.58.0	4.59.0
botocore	1.43.67	1.43.68

Updates nhs-aws-helpers from 0.8.45 to 0.8.51

Commits

• See full diff in compare view

Updates aws-lambda-powertools from 3.31.1 to 3.34.0

Release notes

Sourced from aws-lambda-powertools's releases.

v3.34.0

Summary

We're really happy to say the Circuit Breaker utility is now GA. It shipped as alpha in 3.31.0 to collect real-world feedback, and that's exactly what happened, so it's time to drop the _alpha suffix and call it stable.

A big thank you to everyone who used it, reported issues and sent fixes during the alpha. It's in much better shape because of you.

Circuit Breaker is now GA

Docs

The only change you need to make is the import path. circuit_breaker_alpha becomes circuit_breaker:

from aws_lambda_powertools.utilities.circuit_breaker import circuit_breaker
from aws_lambda_powertools.utilities.circuit_breaker.persistence import (
    CircuitBreakerDynamoDBPersistence,
)
from aws_lambda_powertools.utilities.typing import LambdaContext
persistence = CircuitBreakerDynamoDBPersistence(table_name="CircuitBreakerState")
@​circuit_breaker(name="payment-backend", persistence_store=persistence)
def charge(order: dict) -> dict:
return payment_api.charge(order)
def lambda_handler(event: dict, context: LambdaContext) -> dict:
return charge(event)

Everything else stays the same. Same API, same defaults (open after 5 consecutive failures, probe after 30 seconds, close after 3 probe successes), same behaviour. If you were using it during the alpha, update the import and you're done.

A note on 3.32.0 and 3.33.0

You'll notice we jumped from 3.31.1 straight to 3.34.0. Nothing to worry about: our release pipeline accidentally skipped 3.32.0 and 3.33.0, so they were never built or published. No package went to PyPI and no Lambda layer was published for either of them, so there's no impact for anyone. Everything that was meant to go out in those two releases is included here in 3.34.0.

Changes

• fix(event_handler): omit Content-Type header from OpenAPI (#8374) by @​DebadityaHait
• fix(tracer): declare in_subsegment_async as an async context manager (#8367) by @​vishwakt

📜 Documentation updates

• feat: promote circuit breaker to GA (#8373) by @​leandrodamascena
• chore(deps): bump pymdown-extensions from 11.0 to 11.0.1 in /docs (#8370) by @dependabot[bot]
• chore(deps): bump gitpython from 3.1.57 to 3.1.58 in /docs (#8368) by @dependabot[bot]
• chore(deps): bump pymdown-extensions from 10.21.3 to 11.0 in /docs (#8358) by @dependabot[bot]
• chore(deps): bump gitpython from 3.1.50 to 3.1.57 in /docs (#8362) by @dependabot[bot]

... (truncated)

Changelog

Sourced from aws-lambda-powertools's changelog.

[v3.34.0] - 2026-08-10

Bug Fixes

• event_handler: omit Content-Type header from OpenAPI (#8374)

Maintenance

• version bump

Commits

• 3767571 chore: version bump
• 715012f fix(event_handler): omit Content-Type header from OpenAPI (#8374)
• ad15c7a fix(tracer): declare in_subsegment_async as an async context manager (#8367)
• dccd850 feat: promote circuit breaker to GA (#8373)
• 8de9a28 chore(deps): bump pymdown-extensions from 11.0 to 11.0.1 in /docs (#8370)
• 29e07ef chore(deps): bump gitpython from 3.1.57 to 3.1.58 in /docs (#8368)
• 4aae609 chore(deps-dev): bump gitpython from 3.1.57 to 3.1.58 (#8369)
• 957dde2 chore(deps-dev): bump pymdown-extensions from 11.0 to 11.0.1 (#8371)
• a129938 chore(deps-dev): bump pymdown-extensions from 10.21.3 to 11.0 (#8359)
• ec8cd72 chore(deps-dev): bump types-requests from 2.33.0.20260518 to 2.33.0.20260712 ...
• Additional commits viewable in compare view

Updates boto3 from 1.43.58 to 1.43.68

Commits

• 64ffe2a Merge branch 'release-1.43.68'
• 68d8cba Bumping version to 1.43.68
• 9cd72d4 Add changelog entries from botocore
• 04f44b8 Bump https://github.com/astral-sh/ruff-pre-commit (#4824)
• ca719c8 Merge branch 'release-1.43.67'
• baf4372 Merge branch 'release-1.43.67' into develop
• fc8af6b Bumping version to 1.43.67
• 254a8c9 Add changelog entries from botocore
• f53e30a Merge branch 'release-1.43.66'
• e08b015 Merge branch 'release-1.43.66' into develop
• Additional commits viewable in compare view

Updates boto3-stubs from 1.43.36 to 1.43.68

Commits

• See full diff in compare view

Updates tox from 4.58.0 to 4.59.0

Release notes

Sourced from tox's releases.

v4.59.0

What's Changed

• 🐛 fix(type): cast set value in _render_options by @​gaborbernat in tox-dev/tox#4003
• docs: fix typo 'set the the' -> 'set then the' in config reference by @​LaRoyBot in tox-dev/tox#4002
• 👷 ci: pin coverage to the ctrace core by @​gaborbernat in tox-dev/tox#4009
• 🔥 chore: remove the misc changelog category by @​gaborbernat in tox-dev/tox#4012
• ✅ test: seed the virtualenv wheel image up front by @​gaborbernat in tox-dev/tox#4011
• ✨ feat(plugin): type the plugin and internal API surfaces by @​gaborbernat in tox-dev/tox#4014
• ✅ test: raise timeout for missing-interpreter discovery tests by @​gaborbernat in tox-dev/tox#4018
• 📝 docs: mark the INI configuration format as deprecated by @​gaborbernat in tox-dev/tox#4017

New Contributors

• @​LaRoyBot made their first contribution in tox-dev/tox#4002

Full Changelog: tox-dev/tox@4.58.0...4.59.0

Changelog

Sourced from tox's changelog.

Features - 4.59.0

• The plugin and internal APIs now declare their types, and the code base passes mypy --strict and pyrefly next to ty - by :user:gaborjbernat.

  • :meth:ConfigSet.get <tox.config.sets.ConfigSet.get> returns a configuration value after checking it against its declared type, so plugins can drop cast around conf["key"] reads.
  • The :func:tox_on_install <tox.plugin.spec.tox_on_install> hook and :class:Installer <tox.tox_env.installer.Installer> type their arguments as :data:InstallArguments <tox.tox_env.installer.InstallArguments>; installer subclasses may narrow it through the new second type parameter.
  • :class:Parsed <tox.config.cli.parser.Parsed> declares the CLI option surface, so options.<name> reads type-check.
  • :meth:ConfigSet.add_config <tox.config.sets.ConfigSet.add_config> accepts default=None for optional values and infers the value type from callable defaults.
  • The journal, the environment cache, and execute metadata hold JsonValue content; structured set_env entries match the SetEnvEntry shape. (:issue:4014)

Improved documentation - 4.59.0

• Mark the INI configuration format as deprecated throughout the documentation - by :user:gaborbernat.

  • The tutorial, the configuration reference, and the migration how-to state that INI keeps working for existing projects but is frozen and receives no new features.
  • Every INI example tab, the configuration discovery diagram, and the man page carry a deprecation marker.
  • The tutorial no longer suggests generating a tox.ini via tox quickstart. (:issue:4017)

Contributor-facing changes - 4.59.0

• Remove the misc changelog category, and align the changelog filename check with the categories towncrier accepts - by :user:gaborbernat. (:issue:4012)

---

v4.58.0 (2026-07-21)

---

Commits

• cb7eeca release 4.59.0
• da75cad 📝 docs: mark the INI configuration format as deprecated (#4017)
• ef7dc3a ✅ test: raise timeout for missing-interpreter discovery tests (#4018)
• c76344d [pre-commit.ci] pre-commit autoupdate (#4016)
• 7be33b8 ✨ feat(plugin): type the plugin and internal API surfaces (#4014)
• 2e247dc ✅ test: raise timeout for tests hitting real PyPI (#4011)
• 2c1f86f 🔥 chore: remove the misc changelog category (#4012)
• 59302d8 build(deps): bump pypa/gh-action-pypi-publish from 1.14.1 to 1.14.2 (#4008)
• 08333ee [pre-commit.ci] pre-commit autoupdate (#4010)
• 0bbe8c4 👷 ci: pin coverage to the ctrace core (#4009)
• Additional commits viewable in compare view

Updates botocore from 1.43.67 to 1.43.68

Commits

• 7fb8da7 Merge branch 'release-1.43.68'
• 13bea5e Bumping version to 1.43.68
• a0aceab Update to latest models
• a14f76d Add support for per-API invocation read timeouts (#3770)
• 0e6e240 Bump https://github.com/astral-sh/ruff-pre-commit (#3768)
• 1fd3b81 Merge branch 'release-1.43.67' into develop
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions