build(deps): bump the patches group across 1 directory with 4 updates by dependabot[bot] · Pull Request #134 · timpugh/lambda-powertools-reference

dependabot · 2026-07-20T13:10:19Z

Bumps the patches group with 4 updates in the /lambda directory: aws-lambda-powertools, boto3, botocore and s3transfer.

Updates aws-lambda-powertools from 3.31.0 to 3.31.1

Release notes

Sourced from aws-lambda-powertools's releases.

v3.31.1

Summary

This release fixes bugs across Circuit Breaker, Event Handler, Parser, and the Event Source data classes. Super thanks to @Iamrodos for running the Circuit Breaker alpha for real and finding the concurrency and configuration issues fixed here.

Changes

fix(event_handler): resolve dependency injection failure with arbitrary return types (#8334) by @leandrodamascena

fix(event_source): mypy strict mode compliance (#8332) by @stenczelt

fix(parser): fix DynamoDB Stream Lambda invocation record model (#8321) by @exg

fix(circuit_breaker): normalize handled/ignored exceptions to a validated tuple at construction (#8319) by @Iamrodos

fix: EventBridgeEvent data class (#8301) by @amin-farjadi

📜 Documentation updates

chore(deps): bump soupsieve from 2.7 to 2.8.4 in /docs (#8328) by @dependabot[bot]

fix(circuit_breaker): make probe election per-thread and synchronize local counters (#8323) by @Iamrodos

feat(circuit_breaker): support composite primary key in DynamoDB persistence (#8316) by @Iamrodos

🔧 Maintenance

chore(data-masking): bump encryption sdk version (#8335) by @leandrodamascena

chore(deps): bump soupsieve from 2.7 to 2.8.4 in /docs (#8328) by @dependabot[bot]

chore(deps-dev): bump soupsieve from 2.7 to 2.8.4 (#8329) by @dependabot[bot]

chore(deps-dev): bump requests from 2.33.1 to 2.34.2 (#8313) by @dependabot[bot]

chore(deps-dev): bump filelock from 3.29.0 to 3.29.7 (#8314) by @dependabot[bot]

chore(deps): bump protobuf from 7.34.1 to 7.35.1 (#8312) by @dependabot[bot]

chore(deps-dev): bump types-python-dateutil from 2.9.0.20260508 to 2.9.0.20260518 (#8311) by @dependabot[bot]

chore(deps-dev): bump aws-cdk from 2.1128.1 to 2.1129.0 in the aws-cdk group (#8324) by @dependabot[bot]

chore(deps): bump the github-actions group across 1 directory with 8 updates (#8327) by @dependabot[bot]

This release was made possible by the following contributors:

@Iamrodos, @amin-farjadi, @dependabot[bot], @exg, @github-actions[bot], @leandrodamascena, @stenczelt, dependabot[bot] and github-actions[bot]

Changelog

Sourced from aws-lambda-powertools's changelog.

[v3.31.1] - 2026-07-13

Maintenance

version bump

data-masking: bump encryption sdk version (#8335)

Commits

a75380a chore: version bump
71d58f1 chore(data-masking): bump encryption sdk version (#8335)
5bc8d00 fix(event_handler): resolve dependency injection failure with arbitrary retur...
a9fce32 fix(event_source): mypy strict mode compliance (#8332)
dd8918f chore(deps): bump soupsieve from 2.7 to 2.8.4 in /docs (#8328)
8a0ae64 chore(deps-dev): bump soupsieve from 2.7 to 2.8.4 (#8329)
2fd212d chore(deps-dev): bump requests from 2.33.1 to 2.34.2 (#8313)
3226710 chore(deps-dev): bump filelock from 3.29.0 to 3.29.7 (#8314)
6b41dc8 chore(deps): bump protobuf from 7.34.1 to 7.35.1 (#8312)
2a014a3 chore(deps-dev): bump types-python-dateutil from 2.9.0.20260508 to 2.9.0.2026...
Additional commits viewable in compare view

Updates boto3 from 1.43.41 to 1.43.51

Commits

09cf399 Merge branch 'release-1.43.51'
b8f600d Bumping version to 1.43.51
f0973ec Add changelog entries from botocore
a8ae7f0 Merge branch 'release-1.43.50'
acbe14c Merge branch 'release-1.43.50' into develop
b8c36a9 Bumping version to 1.43.50
fa19980 Add changelog entries from botocore
2ce2fd5 Merge branch 'release-1.43.49'
d2937da Merge branch 'release-1.43.49' into develop
159cb6a Bumping version to 1.43.49
Additional commits viewable in compare view

Updates botocore from 1.43.41 to 1.43.51

Commits

3328b3d Merge branch 'release-1.43.51'
0effec1 Bumping version to 1.43.51
dad7113 Update endpoints model
e18d2de Update to latest models
3ad2237 Update awscrt version to 0.36.0 (#3750)
42b0340 Merge branch 'release-1.43.50'
91a4146 Merge branch 'release-1.43.50' into develop
febd30f Bumping version to 1.43.50
31af253 Update endpoints model
e179889 Update to latest models
Additional commits viewable in compare view

Updates s3transfer from 0.19.0 to 0.19.1

Changelog

Sourced from s3transfer's changelog.

0.19.1

bugfix:s3: Only pin VersionId if supplied by caller instead of automatically using value from HeadObject response

Commits

71bdbb7 Merge branch 'release-0.19.1'
b51243d Bumping version to 0.19.1
9be530d Don't use VersionId from HeadObject for multipart copies (#407)
314b559 Bump https://github.com/astral-sh/ruff-pre-commit (#404)
5c8601f Bump actions/setup-python in the github-actions group (#405)
e934f9e Merge pull request #403 from cenedhryn/update-codeowners
71a58b1 Update CODEOWNERS to shared Python SDK and CLI team
dc65992 Add CODEOWNERS file for team review enforcement (#402)
6025c5b Bump actions/checkout from 6.0.2 to 7.0.0 in the github-actions group (#400)
aea15a2 Bump https://github.com/astral-sh/ruff-pre-commit (#399)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the patches group with 4 updates in the /lambda directory: [aws-lambda-powertools](https://github.com/aws-powertools/powertools-lambda-python), [boto3](https://github.com/boto/boto3), [botocore](https://github.com/boto/botocore) and [s3transfer](https://github.com/boto/s3transfer). Updates `aws-lambda-powertools` from 3.31.0 to 3.31.1 - [Release notes](https://github.com/aws-powertools/powertools-lambda-python/releases) - [Changelog](https://github.com/aws-powertools/powertools-lambda-python/blob/develop/CHANGELOG.md) - [Commits](aws-powertools/powertools-lambda-python@v3.31.0...v3.31.1) Updates `boto3` from 1.43.41 to 1.43.51 - [Release notes](https://github.com/boto/boto3/releases) - [Commits](boto/boto3@1.43.41...1.43.51) Updates `botocore` from 1.43.41 to 1.43.51 - [Commits](boto/botocore@1.43.41...1.43.51) Updates `s3transfer` from 0.19.0 to 0.19.1 - [Changelog](https://github.com/boto/s3transfer/blob/develop/CHANGELOG.rst) - [Commits](boto/s3transfer@0.19.0...0.19.1) --- updated-dependencies: - dependency-name: aws-lambda-powertools dependency-version: 3.31.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: patches - dependency-name: boto3 dependency-version: 1.43.51 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: patches - dependency-name: botocore dependency-version: 1.43.51 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: patches - dependency-name: s3transfer dependency-version: 0.19.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: patches ... Signed-off-by: dependabot[bot] <support@github.com>

github-actions · 2026-07-20T13:14:24Z

🏗️ CDK infra diff — PR vs `main`

ServerlessApp-us-east-1-stage/ServerlessAppBackend-us-east-1

Stack ServerlessApp-us-east-1-stage/ServerlessAppBackend-us-east-1 (ServerlessAppBackend-us-east-1)
Resources
[-] AWS::Lambda::Version ServerlessAppBackend-us-east-1/App/ApiFunction/CurrentVersion AppApiFunctionCurrentVersion01C510AC03ad93a9f883b9e343a3e09607673f76 destroy
[+] AWS::Lambda::Version ServerlessAppBackend-us-east-1/App/ApiFunction/CurrentVersion AppApiFunctionCurrentVersion01C510AC0eb2cd5841ef4465f1a9533d83c18465
[~] AWS::Lambda::Function ServerlessAppBackend-us-east-1/App/ApiFunction AppApiFunctionDE515850
 ├─ [~] Code
 │   └─ [~] .S3Key:
 │       ├─ [-] d4412f8dfbba9e24452e540894e597c50f7f8e442b0e0b68864df12e5aa6c25a.zip
 │       └─ [+] 5d74ffb23073217565eef25c672e02b62826d1573e877ea327577ac04a28668b.zip
 └─ [~] Metadata
     └─ [~] .aws:asset:path:
         ├─ [-] ../asset.d4412f8dfbba9e24452e540894e597c50f7f8e442b0e0b68864df12e5aa6c25a
         └─ [+] ../asset.5d74ffb23073217565eef25c672e02b62826d1573e877ea327577ac04a28668b
[~] AWS::Lambda::Alias ServerlessAppBackend-us-east-1/App/LiveAlias AppLiveAlias3872472E
 └─ [~] FunctionVersion
     └─ [~] .Fn::GetAtt:
         └─ @@ -1,4 +1,4 @@
            [ ] [
            [-]   "AppApiFunctionCurrentVersion01C510AC03ad93a9f883b9e343a3e09607673f76",
            [+]   "AppApiFunctionCurrentVersion01C510AC0eb2cd5841ef4465f1a9533d83c18465",
            [ ]   "Version"
            [ ] ]



✨  Number of stacks with differences: 1

dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Jul 20, 2026

dependabot Bot mentioned this pull request Jul 20, 2026

build(deps): bump s3transfer from 0.19.0 to 0.19.1 in /lambda in the aws group across 1 directory #119

Closed

github-actions Bot approved these changes Jul 20, 2026

View reviewed changes

github-actions Bot enabled auto-merge (squash) July 20, 2026 13:10

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

build(deps): bump the patches group across 1 directory with 4 updates#134

build(deps): bump the patches group across 1 directory with 4 updates#134
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/lambda/patches-d93851e426

dependabot Bot commented on behalf of github Jul 20, 2026

Uh oh!

github-actions Bot commented Jul 20, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Jul 20, 2026

v3.31.1

Summary

Changes

📜 Documentation updates

🔧 Maintenance

This release was made possible by the following contributors:

[v3.31.1] - 2026-07-13

Maintenance

0.19.1

Uh oh!

github-actions Bot commented Jul 20, 2026

🏗️ CDK infra diff — PR vs main

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

🏗️ CDK infra diff — PR vs `main`