Repository navigation
chore(deps): update all non-major dependencies - #73
renovate[bot] wants to merge 1 commit into
Conversation
a13e20f to
dc97dda
Compare
dc97dda to
59667d8
Compare
a2c8a6a to
06faf4d
Compare
379dd41 to
bd03940
Compare
bd03940 to
1aa2729
Compare
5c2c2c6 to
4218c02
Compare
4cafc9f to
a822bbd
Compare
ebadc6a to
db4b1ca
Compare
75d78bf to
2cb317a
Compare
83b3087 to
473fa37
Compare
cde9bbc to
a3d30de
Compare
7c1ab52 to
a59d533
Compare
016cb7b to
11c6c02
Compare
dc4ef3e to
eda5215
Compare
767b1f0 to
eccf668
Compare
eccf668 to
1893761
Compare
There was a problem hiding this comment.
🔵 Needs a closer look
The Python upgrade conflicts with locked dependencies, and broader runtime and infrastructure compatibility still needs validation.
1 open issue
1 file not reviewed
infra/terraform/.terraform.lock.hcl: Generated file
What changed in this PR
This PR updates non-major dependencies used to build, deploy, and release RAJA.
Changes:
- Updates GitHub Actions and the
uv_buildbuild backend. - Advances Python defaults to 3.15 and the Envoy image to 1.40.
- Updates Terraform provider versions and checksums.
| File | Description |
|---|---|
pyproject.toml |
Updates the uv_build requirement. |
lambda_handlers/authorizer/Dockerfile |
Changes the Python base image to 3.15-slim. |
infra/terraform/.terraform.lock.hcl |
Updates archive, AWS, and random provider locks. |
infra/envoy/Dockerfile |
Updates the Envoy base image to 1.40. |
.python-version |
Changes the default Python interpreter to 3.15. |
.github/workflows/release.yml |
Updates the PyPI publishing action. |
.github/actions/setup-raja/action.yml |
Updates the UV setup action. |
Review effort: Balanced
| @@ -1 +1 @@ | |||
| 3.14 | |||
| 3.15 | |||
There was a problem hiding this comment.
🔵 Needs a closer look
The Python 3.15 default is incompatible with locked pydantic-core 2.41.5, causing dependency installation to fail and blocking fresh development environments and project tasks.
1 file not reviewed
infra/terraform/.terraform.lock.hcl: Generated file
Review effort: Balanced
There was a problem hiding this comment.
🟡 Changes recommended
The Python 3.15 default breaks clean uv sync installations because locked pydantic-core==2.41.5 has neither compatible wheels nor a source build that supports Python 3.15.
2 open issues
1 file not reviewed
infra/terraform/.terraform.lock.hcl: Generated file
Review effort: Balanced
| @@ -1 +1 @@ | |||
| 3.14 | |||
| 3.15 | |||
There was a problem hiding this comment.
🔵 Needs a closer look
The Python 3.15 default is incompatible with the locked pydantic-core dependency, which lacks compatible wheels and rejects source builds on 3.15, causing fresh uv sync installations to fail.
2 open issues
1 file not reviewed
infra/terraform/.terraform.lock.hcl: Generated file
Review effort: Balanced
There was a problem hiding this comment.
🔵 Needs a closer look
The Python 3.15 pin is incompatible with locked pydantic-core 2.41.5, causing fresh uv sync installations to fail and blocking local setup and CI.
2 open issues
1 file not reviewed
infra/terraform/.terraform.lock.hcl: Generated file
Review effort: Balanced
There was a problem hiding this comment.
🔵 Needs a closer look
The Python 3.15 pin is incompatible with the locked pydantic-core release, causing clean dependency installation to fail and blocking project setup and uv run commands.
2 open issues
1 file not reviewed
infra/terraform/.terraform.lock.hcl: Generated file
Review effort: Balanced
Note
This PR body was truncated due to platform limits.
This PR contains the following updates:
2.7.1→2.8.1v8.1.0→v8.3.26.44.0→6.72.0v1.38-latest→v1.40-latest3.14→3.153.14-slim→3.15-slim3.8.1→3.9.1>=0.11.1,<0.12.0→>=0.13.7,<0.14.0Release Notes
hashicorp/terraform-provider-archive (archive)
v2.8.1Compare Source
NOTES:
v2.8.0Compare Source
ENHANCEMENTS:
astral-sh/setup-uv
v8.3.2: 🌈 update known checksums for 0.11.28Compare Source
Changes
Just a maintenance release
🧰 Maintenance
📚 Documentation
⬆️ Dependency updates
v8.3.1: 🌈 update known checksums for 0.11.27Compare Source
Changes
Just a maintenance release
🧰 Maintenance
📚 Documentation
v8.3.0: 🌈 Support uv.lock as a version-file sourceCompare Source
Changes
Thanks to @somaz94 you can now use the pinned version of uv itself in
uv.lock. It gets picked up automatically.If you have pinned another version of uv in your
uv.lockyou can use the inputsversionorversion-sourceto override this.🐛 Bug fixes
🚀 Enhancements
🧰 Maintenance
📚 Documentation
⬆️ Dependency updates
v8.2.0: 🌈 New inputsquietanddownload-from-astral-mirrorCompare Source
Changes
This release brings two new inputs and a few bug fixes.
New inputs
Lets talk about the new inputs first.
quiet
Pretty simple. It turns of all
infologgings. Useful if you use this in a composite action and are not interested in all the details.In the upcoming releases we will add log groups to fully implement support for "less noise"
download-from-astral-mirror
In some cases you may want to directly use the fallback of checking for available versions and downloading releases from GitHub instead of using the astral.sh mirror. Setting
download-from-astral-mirror: falseallows you to do that.Bugfixes
When using the astral.sh mirror to query available versions and download releases (done by default) we now stop sending the GitHub token in the header. The mirror never looked at it but we shouldn't be handing out that data even if it is just a short lived token.
All other bugfixes try to limit the impact of failed GitHub queries due to retries and other faults.
We couldn't pinpoint all rootcauses yet but added more logging for error cases to track them down.
🐛 Bug fixes
🚀 Enhancements
download-from-astral-mirrorinput @eifinger (#897)🧰 Maintenance
⬆️ Dependency updates
hashicorp/terraform-provider-aws (aws)
v6.72.0Compare Source
FEATURES:
aws_lambdaweb_function(#50452)aws_lambdaweb_function_endpoint(#50452)aws_bedrockdataautomation_blueprint(#50695)aws_bedrockdataautomation_library(#50727)aws_bedrockdataautomation_project(#50725)aws_lambdaweb_function(#50452)aws_lambdaweb_function_endpoint(#50452)aws_lambdaweb_function_revision(#50452)aws_networksecuritymanager_rule(#50734)aws_quicksight_account_custom_permission(#50670)aws_rds_tenant_database(#50605)aws_s3_bucket_cors_configuration(#50680)aws_bedrockdataautomation_blueprint(#50695)aws_bedrockdataautomation_library(#50727)aws_bedrockdataautomation_project(#50725)aws_ec2_capacity_manager(#48336)aws_lambdaweb_function(#50452)aws_lambdaweb_function_endpoint(#50452)aws_lambdaweb_function_revision(#50452)aws_lambdaweb_resource_policy(#50452)aws_networksecuritymanager_rule(#50734)aws_quicksight_account_custom_permission(#50670)aws_rds_tenant_database(#50605)ENHANCEMENTS:
unmanaged_vcpusattribute (#49386)skip_region_validationistrue(#50701)skip_region_validationistrue(#50701)unmanaged_vcpusargument (#49386)recursive_loggingargument (#50580)tagsandtags_allattributes (#50520)latest_versionandlatest_version_arnattributes (#50452)BUG FIXES:
access_tokenandoauth_tokenmaximum length being lower than the AWS API limit (#49642)v6.71.0Compare Source
NOTES:
FEATURES:
aws_observabilityadmin_dataset_integration(#50529)aws_sagemaker_hub_content(#50659)aws_cloudwatchomni_dashboard(#50482)aws_cloudwatchomni_organization_domain(#50551)aws_devopsagent_asset(#50479)aws_cloudwatchomni_dashboard(#50482)aws_cloudwatchomni_organization_domain(#50551)aws_devopsagent_asset(#50479)aws_observabilityadmin_dataset_integration(#50529)ENHANCEMENTS:
rule.rule_idattribute (#47749)multi_tenantattribute (#50585)kms_key_arnattribute to thedurable_configblock (#50614)firewall_policy.route53_resolved_ip_validationattribute (#50592)MaxResultsonec2:DescribeNetworkInterfacesrequests so that results are paginated, reducing throttling and timeouts in accounts with many network interfaces (#50647)rule.rule_idattribute (#47749)s3_bucket_ownertodestination_configurations.s3_destination(#47958)multi_tenantargument (#50585)updatetimeout. Defaults to the previously hard-coded value of10m. (#50602)createtimeout. Defaults to the previously hard-coded value of10m. (#50602)cpu_architectureargument (#50456)placement_group,placement_group_id, andplacement_partition_numberto be updated in-place with instance stop/start rather than being replaced. Spot Instances and instances withdisable_api_stopandforce_destroyenabled are still replaced (#50417)kms_key_arnargument to thedurable_configconfiguration block (#50614)encoder_settings.thumbnail_configurationargument (#50203)firewall_policy.route53_resolved_ip_validationargument (#50592)AWS_ROUTE_53_RESOLVED_DOMAINas a valid value forrule_group.rules_source.rules_source_list.target_types(#50592)versioned_hub_content_arnattribute (#50657)hub_access_configargument toprimary_container.model_data_source.s3_data_source,primary_container.additional_model_data_source.s3_data_source,container.model_data_source.s3_data_source, andcontainer.additional_model_data_source.s3_data_source(#50653)TunnelVPC endpoint type (#50553)resource_configuration_definition.cidr_resourceconfiguration block to supportCIDRtype resource configurations (#50533)BUG FIXES:
ThrottlingExceptionerrors (#50667)db_nameandusernameforcing replacement after an RDS for Oracle CDB instance is converted to the multi-tenant configuration outside of Terraform (#50585)scope_down_statementnot supporting logical statements (and_statement,not_statement,or_statement), includingnot_statementnested insideand_statement(#50519)managed_rule_group_statement,rate_based_statementandrule_group_reference_statementnested inand_statement,not_statementoror_statement,and_statementdirectly inand_statement,or_statementdirectly inor_statement, andand_statementoror_statementwith fewer than 2 statements at validation time, in bothstatementandscope_down_statement, matching AWS WAF (#50519)v6.70.0Compare Source
BREAKING CHANGES:
domain_name,dnssec_key_idtodomain_name,flags,algorithm,public_key. This is acceptable in a minor version because AWS no longer return DNSKEY flags and delegation signer records can no longer reliably be found by domain name and key ID (#50522)NOTES:
FEATURES:
aws_cloudwatchomni_access_grant(#50483)aws_cloudwatchomni_access_profile(#50471)aws_cloudwatchomni_view(#50428)aws_directory_service_directory_setting(#50145)aws_directoryservicedata_group(#50221)aws_bedrock_enforced_guardrail_configuration(#47408)aws_cloudwatchomni_access_grant(#50483)aws_cloudwatchomni_access_profile(#50471)aws_cloudwatchomni_view(#50428)aws_directory_service_directory_setting(#50145)aws_directoryservicedata_group(#50221)ENHANCEMENTS:
step.rds_switchover_read_replica_configargument (#49675)cak_wo,cak_wo_version,ckn_wo, andckn_wo_versionarguments (#50559)primary_replication_group_idno longer replaces resource. (#47913)RDS_DATA_RISKas a valid value foradditional_configuration.name(#50445)RDS_DATA_RISKas a valid value foradditional_configuration.name(#50445)RDS_DATA_RISKas a valid value foradditional_configuration.name(#50445)network_typeargument (#50331)BUG FIXES:
additional_configurationis omitted and AWS returns default entries such asRDS_DATA_RISK(#50445)additional_configurationis omitted and AWS returns default entries such asRDS_DATA_RISK(#50445)additional_configurationis omitted and AWS returns default entries such asRDS_DATA_RISK(#50445)destinationfrom update requests (#50463).uk/.co.ukdomain registries which caused resources to be removed from state when they existed at AWS (#50522)v6.69.1Compare Source
BUG FIXES:
bufio.Scanner: token too longwhen logging requests or responses with long lines (#50501)v6.69.0Compare Source
FEATURES:
aws_cloudwatchomni_domain(#50329)aws_cloudwatchomni_space(#50385)aws_devopsagent_agent_space(#47795)aws_pricingplanmanager_subscription(#49235)aws_ram_principal_association(#50427)aws_ssm_service_setting(#50359)aws_cloudwatch_resource_metrics_configuration(#50254)aws_cloudwatchomni_domain(#50329)aws_cloudwatchomni_space(#50385)aws_devopsagent_agent_space(#47795)aws_pricingplanmanager_subscription(#49235)ENHANCEMENTS:
sharing_enabledattribute (#50241)data_source_configuration.managed_knowledge_base_connector_configuration.sync_scheduleconfiguration block (#50276)vector_ingestion_configuration.context_enrichment_configurationconfiguration block (#50276)evaluation_windowargument to support wall clock evaluation windows (#50373)include_filterandexclude_filterarguments (#50390)all_regionsandregionsattributes (#50402)timeouts.deletevalue to120m(#46969)action,analysis,automate,chat_agent,create_chat_agents,dashboard,flow,knowledge_base,perform_flow_ui_task,publish_without_approval,research,space,use_agent_web_search, anduse_bedrock_modelstocapabilitiesconfiguration block (#47135)publicly_accessibleargument (#50354)resource_configuration.eks.label_selectorargument (#50075)sharing_enabledargument (#50241)misconfiguredlifecycle state during create and delete (#50336)monetizeaction to the ruleactionblock and add themonetization_configargument (#48419)monetizeaction to the ruleactionblock and add themonetization_configargument (#48419)BUG FIXES:
custom_claim-only custom JWT authorizers (#50298)deserialization failed, expected string, got nullfailure during Read (#50444)DescribeTransitGatewayPeeringAttachmentsAPI returns a present-but-emptyOptionsobject (#50405)all_regionsis enabled (#50150)cluster_config.warm_typeto support newer instance types (e.g.,oi2.large.search) (#46969)v6.68.0Compare Source
BREAKING CHANGES:
availability_zonesnow validates that at most 3 items are provided at plan time. This is acceptable in a minor version because AWS would always reject requests with more than 3 availability zones at apply time. (#50015)availability_zonesnow validates that at most 3 items are provided at plan time. This is acceptable in a minor version because AWS would always reject requests with more than 3 availability zones at apply time. (#50014)FEATURES:
aws_lambdamicrovms_image_version(#50299)aws_odb_autonomous_database(#48991)aws_ec2_transit_gateway_route(#50202)aws_ram_resource_association(#49901)aws_odb_autonomous_database(#48991)aws_odb_autonomous_database_secrets_manager_integration(#48991)ENHANCEMENTS:
platform_versionargument (#50081)availability_zonescontains at most 3 items, failing at plan time instead of forcing a destructive replacement (#50015)grafana_versionargument to support v13.2 (#50234)connection_tracking_specificationargument (#50119)availability_zonescontains at most 3 items, failing at plan time instead of forcing a destructive replacement (#50014)BUG FIXES:
config_parameterwhen not specified (#50255)v6.67.0Compare Source
NOTES:
FEATURES:
aws_bedrockruntime_apply_guardrail(#50155)aws_default_security_group(#50120)aws_directory_service_ip_route(#50138)aws_directoryservicedata_user(#50001)aws_ec2_transit_gateway_route_table_propagation([#50193](https://redirect.github.com/hashicorp/terraform-provi