This is an automated email from the ASF dual-hosted git repository.
kevinjqliu pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/iceberg-python.git
The following commit(s) were added to refs/heads/main by this push:
new 99807016 Build: Bump boto3 from 1.36.1 to 1.36.3 (#1564)
99807016 is described below
commit 99807016fe54dd84509b2045099b8a3d073c64f7
Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
AuthorDate: Wed Jan 22 18:54:51 2025 -0500
Build: Bump boto3 from 1.36.1 to 1.36.3 (#1564)
Bumps [boto3](https://github.com/boto/boto3) from 1.36.1 to 1.36.3.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/boto/boto3/commit/50e6c29196fdb2ace0adc7ee65231b57ad8f1c74";><code>50e6c29</code></a>
Merge branch 'release-1.36.3'</li>
<li><a
href="https://github.com/boto/boto3/commit/0bdee9ac7b6aece498214c0e8051d87c0ad08376";><code>0bdee9a</code></a>
Bumping version to 1.36.3</li>
<li><a
href="https://github.com/boto/boto3/commit/974e85965b0ae72bf04e5f01d85e4b83f31b3273";><code>974e859</code></a>
Add changelog entries from botocore</li>
<li><a
href="https://github.com/boto/boto3/commit/1e2006c3c5b8d702b3ec21f939a684ed5f1ad666";><code>1e2006c</code></a>
Merge pull request <a
href="https://redirect.github.com/boto/boto3/issues/4404";>#4404</a> from
boto/dependabot/github_actions/github/codeql-ac...</li>
<li><a
href="https://github.com/boto/boto3/commit/f866568cbe3f5647623accd7742fbbe19779aa05";><code>f866568</code></a>
Merge pull request <a
href="https://redirect.github.com/boto/boto3/issues/4403";>#4403</a> from
boto/dependabot/github_actions/aws-actions/stal...</li>
<li><a
href="https://github.com/boto/boto3/commit/4b6d32a95a305f53362b2d113c965bf8ba8dc9b5";><code>4b6d32a</code></a>
Bump github/codeql-action from 3.27.0 to 3.28.1</li>
<li><a
href="https://github.com/boto/boto3/commit/216d62946961866d8f8ee12fe87536c1f75034e0";><code>216d629</code></a>
Bump aws-actions/stale-issue-cleanup</li>
<li><a
href="https://github.com/boto/boto3/commit/2d89f4d7782113d9387bb9b8f0b5b2c371a89098";><code>2d89f4d</code></a>
Merge branch 'release-1.36.2'</li>
<li><a
href="https://github.com/boto/boto3/commit/084e8029292ad9aaf30e7e7538caaa3a9151d2a6";><code>084e802</code></a>
Merge branch 'release-1.36.2' into develop</li>
<li><a
href="https://github.com/boto/boto3/commit/3632dae3e6d13cc2ec0698066de1156a503ecfd1";><code>3632dae</code></a>
Bumping version to 1.36.2</li>
<li>Additional commits viewable in <a
href="https://github.com/boto/boto3/compare/1.36.1...1.36.3";>compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot]
<49699333+dependabot[bot]@users.noreply.github.com>
---
poetry.lock | 26 +++++++++++++-------------
1 file changed, 13 insertions(+), 13 deletions(-)
diff --git a/poetry.lock b/poetry.lock
index fc857acb..6a8b250a 100644
--- a/poetry.lock
+++ b/poetry.lock
@@ -25,19 +25,19 @@ tests = ["arrow", "dask[dataframe]", "docker", "pytest",
"pytest-mock"]
[[package]]
name = "aiobotocore"
-version = "2.18.0"
+version = "2.19.0"
description = "Async client for aws services using botocore and aiohttp"
optional = true
python-versions = ">=3.8"
files = [
- {file = "aiobotocore-2.18.0-py3-none-any.whl", hash =
"sha256:89634470946944baf0a72fe2939cdd5f98b61335d400ca55f3032aca92989ec1"},
- {file = "aiobotocore-2.18.0.tar.gz", hash =
"sha256:c54db752c5a742bf1a05c8359a93f508b4bf702b0e6be253a4c9ef1f9c9b6706"},
+ {file = "aiobotocore-2.19.0-py3-none-any.whl", hash =
"sha256:12c2960a21472b8eb3452cde5eb31d541ca1464d236f4221556320fa8aed2ee8"},
+ {file = "aiobotocore-2.19.0.tar.gz", hash =
"sha256:552d5756989621b5274f1b4a4840cd76ae83dd930d0b1839af6443743a893faf"},
]
[package.dependencies]
aiohttp = ">=3.9.2,<4.0.0"
aioitertools = ">=0.5.1,<1.0.0"
-botocore = ">=1.36.0,<1.36.2"
+botocore = ">=1.36.0,<1.36.4"
jmespath = ">=0.7.1,<2.0.0"
multidict = ">=6.0.0,<7.0.0"
python-dateutil = ">=2.1,<3.0.0"
@@ -48,8 +48,8 @@ urllib3 = [
wrapt = ">=1.10.10,<2.0.0"
[package.extras]
-awscli = ["awscli (>=1.37.0,<1.37.2)"]
-boto3 = ["boto3 (>=1.36.0,<1.36.2)"]
+awscli = ["awscli (>=1.37.0,<1.37.4)"]
+boto3 = ["boto3 (>=1.36.0,<1.36.4)"]
[[package]]
name = "aiohappyeyeballs"
@@ -405,17 +405,17 @@ files = [
[[package]]
name = "boto3"
-version = "1.36.1"
+version = "1.36.3"
description = "The AWS SDK for Python"
optional = false
python-versions = ">=3.8"
files = [
- {file = "boto3-1.36.1-py3-none-any.whl", hash =
"sha256:eb21380d73fec6645439c0d802210f72a0cdb3295b02953f246ff53f512faa8f"},
- {file = "boto3-1.36.1.tar.gz", hash =
"sha256:258ab77225a81d3cf3029c9afe9920cd9dec317689dfadec6f6f0a23130bb60a"},
+ {file = "boto3-1.36.3-py3-none-any.whl", hash =
"sha256:f9843a5d06f501d66ada06f5a5417f671823af2cf319e36ceefa1bafaaaaa953"},
+ {file = "boto3-1.36.3.tar.gz", hash =
"sha256:53a5307f6a3526ee2f8590e3c45efa504a3ea4532c1bfe4926c0c19bf188d141"},
]
[package.dependencies]
-botocore = ">=1.36.1,<1.37.0"
+botocore = ">=1.36.3,<1.37.0"
jmespath = ">=0.7.1,<2.0.0"
s3transfer = ">=0.11.0,<0.12.0"
@@ -424,13 +424,13 @@ crt = ["botocore[crt] (>=1.21.0,<2.0a0)"]
[[package]]
name = "botocore"
-version = "1.36.1"
+version = "1.36.3"
description = "Low-level, data-driven core of boto 3."
optional = false
python-versions = ">=3.8"
files = [
- {file = "botocore-1.36.1-py3-none-any.whl", hash =
"sha256:dec513b4eb8a847d79bbefdcdd07040ed9d44c20b0001136f0890a03d595705a"},
- {file = "botocore-1.36.1.tar.gz", hash =
"sha256:f789a6f272b5b3d8f8756495019785e33868e5e00dd9662a3ee7959ac939bb12"},
+ {file = "botocore-1.36.3-py3-none-any.whl", hash =
"sha256:536ab828e6f90dbb000e3702ac45fd76642113ae2db1b7b1373ad24104e89255"},
+ {file = "botocore-1.36.3.tar.gz", hash =
"sha256:775b835e979da5c96548ed1a0b798101a145aec3cd46541d62e27dda5a94d7f8"},
]
[package.dependencies]
