Skip to content

MESH-2092 py dev (deps): Bump the patch-and-minor group across 1 directory with 9 updates - #329

Merged
shared-merge-writeback[bot] merged 1 commit into
developfrom
dependabot/pip/patch-and-minor-232c4f8267
Aug 21, 2026
Merged

MESH-2092 py dev (deps): Bump the patch-and-minor group across 1 directory with 9 updates#329
shared-merge-writeback[bot] merged 1 commit into
developfrom
dependabot/pip/patch-and-minor-232c4f8267

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 21, 2026

Copy link
Copy Markdown
Contributor

Bumps the patch-and-minor group with 9 updates in the / directory:

Package From To
nhs-aws-helpers 0.8.45 0.8.54
boto3 1.43.58 1.43.71
boto3-stubs 1.43.36 1.43.71
ruff 0.16.2 0.16.3
tox 4.59.0 4.60.0
botocore 1.43.69 1.43.71
charset-normalizer 3.4.9 3.5.0
mypy-boto3-glue 1.43.65 1.43.70
mypy-boto3-iam 1.43.64 1.43.70

Updates nhs-aws-helpers from 0.8.45 to 0.8.54

Commits

Updates boto3 from 1.43.58 to 1.43.71

Commits

Updates boto3-stubs from 1.43.36 to 1.43.71

Commits

Updates ruff from 0.16.2 to 0.16.3

Release notes

Sourced from ruff's releases.

0.16.3

Release Notes

Released on 2026-08-13.

Preview features

  • [pylint] Fix false negatives on negative numbers (PLR6104) (#27251)
  • [pyupgrade] Add rule to replace while 1 with while True (UP048) (#27190)

Bug fixes

  • [flake8-bandit] Also check keyword arguments (S602, S603, S607, S609) (#27687)
  • [pylint] Allow continue in finally on Python 3.8 (#27626)
  • [pylint] Fix PLE1307 false positive with bools (#27651)
  • [pylint] Fix false positives and negatives with %b format character (PLE1300, PLE1307) (#27560)
  • [pylint] Improve handling of concatenated strings (PLE1300) (#27659)

Rule changes

  • [numpy] Make np.chararray autofix backwards-compatible (NPY201) (#27527)

Performance

  • Enable PGO for Linux x86-64 Ruff releases (#27570)
  • Enable PGO for Linux ARM64 Ruff releases (#27574)
  • Enable PGO for Windows x86-64 Ruff releases (#27573)
  • Enable PGO for macOS ARM64 Ruff releases (#27572)
  • Reduce Expr size to 64 bytes (#27591)

CLI

  • Hyperlink rule codes in ruff check --statistics output (#27646)

Documentation

  • [ruff] Also suggest asyncio.TaskGroup (RUF006) (#27461)

Other changes

Contributors

... (truncated)

Changelog

Sourced from ruff's changelog.

0.16.3

Released on 2026-08-13.

Preview features

  • [pylint] Fix false negatives on negative numbers (PLR6104) (#27251)
  • [pyupgrade] Add rule to replace while 1 with while True (UP048) (#27190)

Bug fixes

  • [flake8-bandit] Also check keyword arguments (S602, S603, S607, S609) (#27687)
  • [pylint] Allow continue in finally on Python 3.8 (#27626)
  • [pylint] Fix PLE1307 false positive with bools (#27651)
  • [pylint] Fix false positives and negatives with %b format character (PLE1300, PLE1307) (#27560)
  • [pylint] Improve handling of concatenated strings (PLE1300) (#27659)

Rule changes

  • [numpy] Make np.chararray autofix backwards-compatible (NPY201) (#27527)

Performance

  • Enable PGO for Linux x86-64 Ruff releases (#27570)
  • Enable PGO for Linux ARM64 Ruff releases (#27574)
  • Enable PGO for Windows x86-64 Ruff releases (#27573)
  • Enable PGO for macOS ARM64 Ruff releases (#27572)
  • Reduce Expr size to 64 bytes (#27591)

CLI

  • Hyperlink rule codes in ruff check --statistics output (#27646)

Documentation

  • [ruff] Also suggest asyncio.TaskGroup (RUF006) (#27461)

Other changes

Contributors

... (truncated)

Commits
  • b0e4702 Bump 0.16.3 (#27723)
  • ecdd401 [ty] Separate script and uv modules from project metadata (#27720)
  • 1263524 [ty] Simplify display implementations with std::fmt::from_fn (#27718)
  • 59196ba [ty] Unify polarity-aware relation construction (#27707)
  • b8c5e73 [ty] Disable CodSpeed cycle estimation for instrumented benchmarks (#27706)
  • 2b0d210 [ty] Centralize matched argument relations (#27705)
  • a9130f3 [pyupgrade] Add rule to replace while 1 with while True (while-one, `...
  • c64c7d6 [ty] Model try exception flow with operation checkpoints (#27471)
  • 9dea5ef [ty] Avoid deriving sequents for typevars with concrete bounds (#27587)
  • 9798e88 [ty] Preserve enum exhaustiveness with custom missing methods (#27700)
  • Additional commits viewable in compare view

Updates tox from 4.59.0 to 4.60.0

Release notes

Sourced from tox's releases.

v4.60.0

What's Changed

New Contributors

Full Changelog: tox-dev/tox@4.59.0...4.60.0

Changelog

Sourced from tox's changelog.

Features - 4.60.0

  • Add {home} and {tox_root_name} substitutions; set :ref:work_dir to e.g. "{home}/.local/state/tox/{tox_root_name}" to keep environments outside of the project tree - by :user:WhyNotHugo. (:issue:4020)

Bug fixes - 4.60.0

  • Provision the requested tox version before reading env_list, allowing configuration syntax introduced by that version - by :user:CAOShurong (:issue:4021)

Improved documentation - 4.60.0

  • Fix nine source-code links in the onboarding guide that pointed at paths which no longer exist, and correct the class names of the TOML configuration sources and loaders they refer to - by :user:Yusuf-Gadelrab. (:issue:4024)

v4.59.0 (2026-08-10)

Commits

Updates botocore from 1.43.69 to 1.43.71

Commits

Updates charset-normalizer from 3.4.9 to 3.5.0

Release notes

Sourced from charset-normalizer's releases.

Version 3.5.0

3.5.0 (2026-08-12)

Added

  • Explicit support for Python 3.15

Fixed

  • Comparing a CharsetMatch to a non-alias encoding strings (#773)
  • Return 0.0 CharsetMatch.multi_byte_usage for empty payloads instead of crashing (#774)
  • A file with both a charset declaration and BOM/SIG did not verify first the BOM/SIG charset.
  • iso2022* cases misdetected due to a flaw in our multibyte chunking logic.

Changed

  • Replaced the optional mypyc build with Cython extensions while retaining the pure Python fallback. The previous engine (mypyc) started to hit rough limit around the optimization of our noise/coherence detector while Cython allows us to steer the engine toward the right generated optimized sources. This change SHOULD not impact bundler (e.g. Pyinstaller) as the module are immediately discoverable (i.e. not hidden import like mypyc did). Moreover, a long wished distribution is the abi3 wheels, this will allow us to no longer rush each year when a new Python interpreter is released. We still distribute the interpreter specific wheels for faster performance.
  • Applied micro-optimization on several utils.
  • CharsetMatches no longer sort on each match insertion.

Misc

  • Removed an old performance optimization attempt in apy.py (success_fast_tracked+payload_result_cache).
Changelog

Sourced from charset-normalizer's changelog.

3.5.0 (2026-08-12)

Added

  • Explicit support for Python 3.15

Fixed

  • Comparing a CharsetMatch to a non-alias encoding strings (#773)
  • Return 0.0 CharsetMatch.multi_byte_usage for empty payloads instead of crashing (#774)
  • A file with both a charset declaration and BOM/SIG did not verify first the BOM/SIG charset.
  • iso2022* cases misdetected due to a flaw in our multibyte chunking logic.

Changed

  • Replaced the optional mypyc build with Cython extensions while retaining the pure Python fallback. The previous engine (mypyc) started to hit rough limit around the optimization of our noise/coherence detector while Cython allows us to steer the engine toward the right generated optimized sources. This change SHOULD not impact bundler (e.g. Pyinstaller) as the module are immediately discoverable (i.e. not hidden import like mypyc did). Moreover, a long wished distribution is the abi3 wheels, this will allow us to no longer rush each year when a new Python interpreter is released. We still distribute the interpreter specific wheels for faster performance.
  • Applied micro-optimization on several utils.
  • CharsetMatches no longer sort on each match insertion.

Misc

  • Removed an old performance optimization attempt in apy.py (success_fast_tracked+payload_result_cache).
Commits
  • 3325d87 Merge pull request #792 from jawah/update-cibuildwheel-action
  • 77203b1 chore: reformat noxfile.py
  • 8561c22 chore(deps): bump github/codeql-action/upload-sarif (#787)
  • 25248df chore(deps): bump actions/setup-python from 6.3.0 to 7.0.0 (#789)
  • 3eaaf3e chore: enable cp315t in ci
  • fbe9fc4 chore: update cibuildwheel for py315 by default
  • 5c7b82a chore: add emscripten classifier
  • 7d30c21 chore: skip pyodide tests cibw
  • 417d66f Merge pull request #791 from jawah/patch-1
  • 130afd5 chore: perf script initial warm with big5 dummy content
  • Additional commits viewable in compare view

Updates mypy-boto3-glue from 1.43.65 to 1.43.70

Commits

Updates mypy-boto3-iam from 1.43.64 to 1.43.70

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
MESH-2092 py dev (deps): Bump the patch-and-minor group across 1 dire…
4071805 
…ctory with 9 updates

Bumps the patch-and-minor group with 9 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [nhs-aws-helpers](https://github.com/NHSDigital/nhs-aws-helpers) | `0.8.45` | `0.8.54` |
| [boto3](https://github.com/boto/boto3) | `1.43.58` | `1.43.71` |
| [boto3-stubs](https://github.com/youtype/mypy_boto3_builder) | `1.43.36` | `1.43.71` |
| [ruff](https://github.com/astral-sh/ruff) | `0.16.2` | `0.16.3` |
| [tox](https://github.com/tox-dev/tox) | `4.59.0` | `4.60.0` |
| [botocore](https://github.com/boto/botocore) | `1.43.69` | `1.43.71` |
| [charset-normalizer](https://github.com/jawah/charset_normalizer) | `3.4.9` | `3.5.0` |
| [mypy-boto3-glue](https://github.com/youtype/mypy_boto3_builder) | `1.43.65` | `1.43.70` |
| [mypy-boto3-iam](https://github.com/youtype/mypy_boto3_builder) | `1.43.64` | `1.43.70` |



Updates `nhs-aws-helpers` from 0.8.45 to 0.8.54
- [Commits](https://github.com/NHSDigital/nhs-aws-helpers/commits)

Updates `boto3` from 1.43.58 to 1.43.71
- [Release notes](https://github.com/boto/boto3/releases)
- [Commits](boto/boto3@1.43.58...1.43.71)

Updates `boto3-stubs` from 1.43.36 to 1.43.71
- [Release notes](https://github.com/youtype/mypy_boto3_builder/releases)
- [Commits](https://github.com/youtype/mypy_boto3_builder/commits)

Updates `ruff` from 0.16.2 to 0.16.3
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.16.2...0.16.3)

Updates `tox` from 4.59.0 to 4.60.0
- [Release notes](https://github.com/tox-dev/tox/releases)
- [Changelog](https://github.com/tox-dev/tox/blob/main/docs/changelog.rst)
- [Commits](tox-dev/tox@4.59.0...4.60.0)

Updates `botocore` from 1.43.69 to 1.43.71
- [Commits](boto/botocore@1.43.69...1.43.71)

Updates `charset-normalizer` from 3.4.9 to 3.5.0
- [Release notes](https://github.com/jawah/charset_normalizer/releases)
- [Changelog](https://github.com/jawah/charset_normalizer/blob/master/CHANGELOG.md)
- [Commits](jawah/charset_normalizer@3.4.9...3.5.0)

Updates `mypy-boto3-glue` from 1.43.65 to 1.43.70
- [Release notes](https://github.com/youtype/mypy_boto3_builder/releases)
- [Commits](https://github.com/youtype/mypy_boto3_builder/commits)

Updates `mypy-boto3-iam` from 1.43.64 to 1.43.70
- [Release notes](https://github.com/youtype/mypy_boto3_builder/releases)
- [Commits](https://github.com/youtype/mypy_boto3_builder/commits)

---
updated-dependencies:
- dependency-name: nhs-aws-helpers
  dependency-version: 0.8.54
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-and-minor
- dependency-name: boto3
  dependency-version: 1.43.71
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-and-minor
- dependency-name: boto3-stubs
  dependency-version: 1.43.71
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-and-minor
- dependency-name: ruff
  dependency-version: 0.16.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: patch-and-minor
- dependency-name: tox
  dependency-version: 4.60.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: patch-and-minor
- dependency-name: botocore
  dependency-version: 1.43.71
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-and-minor
- dependency-name: charset-normalizer
  dependency-version: 3.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: patch-and-minor
- dependency-name: mypy-boto3-glue
  dependency-version: 1.43.70
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-and-minor
- dependency-name: mypy-boto3-iam
  dependency-version: 1.43.70
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-and-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Aug 21, 2026
@dependabot
dependabot Bot requested review from a team and matt-mercer as code owners August 21, 2026 07:47
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Aug 21, 2026
@shared-merge-writeback
shared-merge-writeback Bot enabled auto-merge (squash) August 21, 2026 07:47
@shared-merge-writeback
shared-merge-writeback Bot merged commit 64d104c into develop Aug 21, 2026
10 checks passed
@shared-merge-writeback
shared-merge-writeback Bot deleted the dependabot/pip/patch-and-minor-232c4f8267 branch August 21, 2026 08:25
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@github-actions github-actions[bot] github-actions[bot] approved these changes
@johnwilliams57-nhs johnwilliams57-nhs johnwilliams57-nhs approved these changes
@matt-mercer matt-mercer Awaiting requested review from matt-mercer matt-mercer is a code owner

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python Pull requests that update Python code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@johnwilliams57-nhs