dependabot[bot] opened a new pull request, #71898: URL: https://github.com/apache/airflow/pull/71898
Bumps the 3-3-uv-dependency-updates group in /dev/breeze with 3 updates: [filelock](https://github.com/tox-dev/py-filelock), [hatch](https://github.com/pypa/hatch) and [boto3](https://github.com/boto/boto3). Updates `filelock` from 3.32.2 to 3.32.3 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/tox-dev/py-filelock/releases";>filelock's releases</a>.</em></p> <blockquote> <h2>3.32.3</h2> <!-- raw HTML omitted --> <h2>What's Changed</h2> <ul> <li>🧪 test(strict): deflake close-fault injections on graalpy by <a href="https://github.com/gaborbernat";><code>@gaborbernat</code></a> in <a href="https://redirect.github.com/tox-dev/filelock/pull/697";>tox-dev/filelock#697</a></li> <li>📄 docs: publish llms.txt from the docs build by <a href="https://github.com/gaborbernat";><code>@gaborbernat</code></a> in <a href="https://redirect.github.com/tox-dev/filelock/pull/700";>tox-dev/filelock#700</a></li> <li>🐛 fix(fork): survive audit events during interpreter shutdown by <a href="https://github.com/gaborbernat";><code>@gaborbernat</code></a> in <a href="https://redirect.github.com/tox-dev/filelock/pull/703";>tox-dev/filelock#703</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/tox-dev/filelock/compare/3.32.2...3.32.3";>https://github.com/tox-dev/filelock/compare/3.32.2...3.32.3</a></p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/tox-dev/filelock/blob/main/docs/changelog.rst";>filelock's changelog</a>.</em></p> <blockquote> <p>########### Changelog ###########</p> <p>.. towncrier-draft-entries:: Unreleased</p> <p>.. towncrier release notes start</p> <hr /> <p>3.32.3 (2026-08-13)</p> <hr /> <ul> <li>The fork-safety audit hook no longer prints <code>Exception ignored in audit hook</code> with a <code>TypeError</code> when an audit event fires during interpreter shutdown, after CPython has already cleared the module globals. :pr:<code>701</code></li> </ul> <hr /> <p>3.32.2 (2026-07-29)</p> <hr /> <ul> <li>A <code>SoftReadWriteLock</code> or <code>SoftFileLease</code> acquire whose heartbeat thread fails to start now unlinks its marker and hands the claim back, instead of leaving an unrefreshed marker a peer takes while the caller believes it still holds the lock. :pr:<code>691</code></li> </ul> <hr /> <p>3.32.1 (2026-07-26)</p> <hr /> <ul> <li>Canceling an <code>AsyncSoftReadWriteLock</code> acquire now releases the claim instead of leaking a marker whose heartbeat wedges every contender. :pr:<code>686</code></li> </ul> <hr /> <p>3.32.0 (2026-07-21)</p> <hr /> <ul> <li><code>SoftReadWriteLock</code> closes the directory handle it opens to scan for readers as soon as a scan stops early, rather than holding it until the generator is collected. :pr:<code>685</code></li> <li>Declare support for Python 3.15 and run the test suite against it and its free-threaded build, both currently in beta. :pr:<code>683</code></li> <li>The source distribution ships the capability probes the tests import, and reading one no longer needs <code>coverage</code> installed, so the suite runs from an unpacked sdist instead of failing on a missing <code>coverage_pragmas</code>. :pr:<code>685</code></li> </ul> <hr /> <p>3.31.2 (2026-07-21)</p> <hr /> <ul> <li><code>filelock</code> imports again on runtimes whose <code>errno</code> omits <code>ENOTSUP</code>, such as GraalPy, where importing the package raised <code>ImportError</code>. It probes the code instead, preferring <code>ENOTSUP</code>, falling back to <code>EOPNOTSUPP</code> where that name is absent, and dropping to <code>ENOSYS</code>/<code>EXDEV</code> where neither exists. Platforms defining <code>ENOTSUP</code> keep their behavior. :pr:<code>681</code></li> </ul> <hr /> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/tox-dev/filelock/commit/4aa742ca0992135fe21df290c8e9023f6981bb6f";><code>4aa742c</code></a> Release 3.32.3</li> <li><a href="https://github.com/tox-dev/filelock/commit/fb5ab3eee603f352772d33c01a3a319f10c54959";><code>fb5ab3e</code></a> 🐛 fix(fork): survive audit events during interpreter shutdown (<a href="https://redirect.github.com/tox-dev/py-filelock/issues/703";>#703</a>)</li> <li><a href="https://github.com/tox-dev/filelock/commit/35f759c93ec81aecf10d9e3cad5d20ec358f2b96";><code>35f759c</code></a> 📄 docs: publish llms.txt from the docs build (<a href="https://redirect.github.com/tox-dev/py-filelock/issues/700";>#700</a>)</li> <li><a href="https://github.com/tox-dev/filelock/commit/4b6e966a4488807e9148d28d539fe6093fd54362";><code>4b6e966</code></a> [pre-commit.ci] pre-commit autoupdate (<a href="https://redirect.github.com/tox-dev/py-filelock/issues/699";>#699</a>)</li> <li><a href="https://github.com/tox-dev/filelock/commit/0e0f666c7d5d0a2e8231eac3c463ecd6a05d3f73";><code>0e0f666</code></a> build(deps): bump pypa/gh-action-pypi-publish from 1.14.1 to 1.14.2 (<a href="https://redirect.github.com/tox-dev/py-filelock/issues/698";>#698</a>)</li> <li><a href="https://github.com/tox-dev/filelock/commit/6689d821726689295e62c59db2de00d05b6dae94";><code>6689d82</code></a> 🧪 test(strict): deflake close-fault injections on graalpy (<a href="https://redirect.github.com/tox-dev/py-filelock/issues/697";>#697</a>)</li> <li><a href="https://github.com/tox-dev/filelock/commit/df67bf7697c59e29faa40484d54488922a380cac";><code>df67bf7</code></a> [pre-commit.ci] pre-commit autoupdate (<a href="https://redirect.github.com/tox-dev/py-filelock/issues/696";>#696</a>)</li> <li>See full diff in <a href="https://github.com/tox-dev/py-filelock/compare/3.32.2...3.32.3";>compare view</a></li> </ul> </details> <br /> Updates `hatch` from 1.17.1 to 1.18.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/pypa/hatch/releases";>hatch's releases</a>.</em></p> <blockquote> <h2>Hatchling v1.18.0</h2> <p><em><strong>Changed:</strong></em></p> <ul> <li>Drop support for Python 3.7</li> </ul> <p><em><strong>Added:</strong></em></p> <ul> <li>Update the list of directories that are always excluded for builds</li> </ul> <h2>Hatch v1.18.0</h2> <p><em><strong>Changed:</strong></em></p> <ul> <li>Upgrade default CPython distributions to 20260807</li> </ul> <p><em><strong>Added:</strong></em></p> <ul> <li> <p>Add the <code>sources</code> environment option, which redirects dependencies to a local path, Git repository, URL, alternate index, or workspace member at install time without altering published metadata. The top-level <code>[tool.hatch.sources]</code> table is an alias for the <code>default</code> environment, environments inherit sources entry by entry, the <code>HATCH_NO_SOURCES</code> environment variable disables them, and <code>hatch dep show sources</code> reports what each source redirects</p> </li> <li> <p>Add the <code>--all</code>/<code>-a</code> flag to the <code>build</code> command to build the workspace root and every workspace member defined by the selected environment, consolidating artifacts in the workspace root's <code>dist</code> directory by default. A root that does not define a <code>project</code> table is skipped so that a top-level <code>pyproject.toml</code> may only contain workspace configuration</p> </li> <li> <p>Add the <code>tool.hatch.requires-hatch</code> field, a version specifier set that commands reading the project's metadata enforce against the running version of Hatch</p> </li> <li> <p>Add first-class support for free-threaded distribution names such as <code>3.13t</code> and <code>3.14t</code> to the <code>python</code> commands and environment <code>python</code> option, rather than requiring the <code>HATCH_PYTHON_VARIANT_GIL</code> environment variable</p> </li> <li> <p>The <code>version</code> command can now bump versions that are statically defined by the <code>project.version</code> field, updating <code>pyproject.toml</code> in place. Pass <code>--force</code> to allow an explicit downgrade</p> </li> <li> <p>Support managing Python 3.15 distributions, currently 3.15.0rc1</p> </li> </ul> <p><em><strong>Fixed:</strong></em></p> <ul> <li> <p>Erase stale coverage data before running <code>hatch test --cover</code>.</p> </li> <li> <p>Fix environment creation crashing when a metadata hook exists that doesn’t happen to be installed in the <code>hatch</code> CLI’s environment.</p> </li> <li> <p>Fix commands run by <code>hatch run</code> no longer being interruptible with Ctrl-C, which happened because the ignored <code>SIGINT</code> of the parent process was inherited by the child process.</p> </li> <li> <p>Fix the generated Pyrefly config being invalid on Windows, since backslashes in the absolute paths were interpreted as TOML escape sequences.</p> </li> <li> <p>Fix the hardcoded reliance on <code>pip</code> when installing dependencies internally by using <code>uv</code> instead.</p> </li> <li> <p>Fix environment creation silently installing a GIL-enabled Python distribution when Hatch itself runs on a free-threaded build. The distribution matching the running interpreter, such as <code>3.14t</code>, is now selected.</p> </li> <li> <p>Fix free-threaded selectors such as <code>3.14t</code> being rejected by an environment's <code>python</code> option, even though <code>hatch python install 3.14t</code> already accepted them.</p> </li> <li> <p>Never automatically select a prerelease Python distribution, such as 3.15.0rc1, when falling back to the latest compatible version. A prerelease is still installed when requested explicitly.</p> </li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/pypa/hatch/commit/558061c5ecbe7e9b10d81965d4cdc8df05832228";><code>558061c</code></a> Fix ci (<a href="https://redirect.github.com/pypa/hatch/issues/2377";>#2377</a>)</li> <li><a href="https://github.com/pypa/hatch/commit/bc6d1bc1347445dfad06e731d4ae50f562692683";><code>bc6d1bc</code></a> release Hatch v1.18.0 (<a href="https://redirect.github.com/pypa/hatch/issues/2376";>#2376</a>)</li> <li><a href="https://github.com/pypa/hatch/commit/8429e5d5bc84b2c9ace623b99518661e9032d422";><code>8429e5d</code></a> release Hatchling v1.32.0 (<a href="https://redirect.github.com/pypa/hatch/issues/2375";>#2375</a>)</li> <li><a href="https://github.com/pypa/hatch/commit/413b3a880cfa69cb5095a927a725b074be669930";><code>413b3a8</code></a> Prepare for release (<a href="https://redirect.github.com/pypa/hatch/issues/2374";>#2374</a>)</li> <li><a href="https://github.com/pypa/hatch/commit/4ccc9ea9cd2800c90549768f7eaa7dc9985b45e1";><code>4ccc9ea</code></a> Bug Fix - fix CTRL-C behavior to correctly handle signals (<a href="https://redirect.github.com/pypa/hatch/issues/2369";>#2369</a>)</li> <li><a href="https://github.com/pypa/hatch/commit/a8858032b372ad8e13950a06b1783e723ee892e5";><code>a885803</code></a> Add sources to enable other types of local dependencies (<a href="https://redirect.github.com/pypa/hatch/issues/2313";>#2313</a>)</li> <li><a href="https://github.com/pypa/hatch/commit/ab3e000585fc95c32196d406d0c224fca62ff1b1";><code>ab3e000</code></a> Add --all flag to hatch build for building all workspace members (<a href="https://redirect.github.com/pypa/hatch/issues/2352";>#2352</a>)</li> <li><a href="https://github.com/pypa/hatch/commit/bb9027761d1325a540ca1eda5aee067098249b41";><code>bb90277</code></a> fix: Allow the <code>; private</code> annotation in <code>import-names</code>/<code>import-namespaces</code> p...</li> <li><a href="https://github.com/pypa/hatch/commit/3a9d853a68d009db91e70e4271b1d688e5381d3b";><code>3a9d853</code></a> fix: prevent backward relative paths in readme (<a href="https://redirect.github.com/pypa/hatch/issues/2354";>#2354</a>)</li> <li><a href="https://github.com/pypa/hatch/commit/c4dc4f8ab4399a9f35b56c3367ff39d6fb09271c";><code>c4dc4f8</code></a> test: Fix test expectations for metadata generated by <code>flit-core</code> (<a href="https://redirect.github.com/pypa/hatch/issues/2365";>#2365</a>)</li> <li>Additional commits viewable in <a href="https://github.com/pypa/hatch/compare/hatch-v1.17.1...hatch-v1.18.0";>compare view</a></li> </ul> </details> <br /> Updates `boto3` from 1.43.67 to 1.43.72 <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/boto/boto3/commit/a3fc41f4709808012ad6053980a7a9422ed4d1a4";><code>a3fc41f</code></a> Merge branch 'release-1.43.72'</li> <li><a href="https://github.com/boto/boto3/commit/27a2636d3131c6511c153baef311ecdaf14c7070";><code>27a2636</code></a> Bumping version to 1.43.72</li> <li><a href="https://github.com/boto/boto3/commit/33a16717482a24cc7a619d62560d557b7b7dfb23";><code>33a1671</code></a> Add changelog entries from botocore</li> <li><a href="https://github.com/boto/boto3/commit/a0b0f504afaff6cf5798ccdde74088531bba833e";><code>a0b0f50</code></a> Merge branch 'release-1.43.71'</li> <li><a href="https://github.com/boto/boto3/commit/f1ea765d766c5b205c4b5f0e264691ca8cd1d940";><code>f1ea765</code></a> Merge branch 'release-1.43.71' into develop</li> <li><a href="https://github.com/boto/boto3/commit/3a070778717bd9993300bee4bde3d3bdb69cf086";><code>3a07077</code></a> Bumping version to 1.43.71</li> <li><a href="https://github.com/boto/boto3/commit/9886147be144238f0ff35ed00f5f82e4cbf1d6b8";><code>9886147</code></a> Add changelog entries from botocore</li> <li><a href="https://github.com/boto/boto3/commit/8c2ae687338ebadf80dfd92114e12708304a545d";><code>8c2ae68</code></a> Merge branch 'release-1.43.70'</li> <li><a href="https://github.com/boto/boto3/commit/116daa773813871800b49c6c7dd22605e34f30f1";><code>116daa7</code></a> Merge branch 'release-1.43.70' into develop</li> <li><a href="https://github.com/boto/boto3/commit/4901fc8c10cfc4d3b739009c34ea488e70bcc1e8";><code>4901fc8</code></a> Bumping version to 1.43.70</li> <li>Additional commits viewable in <a href="https://github.com/boto/boto3/compare/1.43.67...1.43.72";>compare view</a></li> </ul> </details> <br /> Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions </details> -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
