Skip to content

Chore(deps): Bump the multi-account-python-minor-patch group across 4 directories with 4 updates - #1895

Merged
jlkravitz merged 1 commit into
mainfrom
dependabot/pip/backend/multi-account/multi-account-python-minor-patch-837766422a
Sep 8, 2026
Merged

Chore(deps): Bump the multi-account-python-minor-patch group across 4 directories with 4 updates#1895
jlkravitz merged 1 commit into
mainfrom
dependabot/pip/backend/multi-account/multi-account-python-minor-patch-837766422a

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 7, 2026

Copy link
Copy Markdown
Contributor

Bumps the multi-account-python-minor-patch group with 4 updates in the /backend/multi-account directory: aws-cdk-lib, coverage, ruff and moto.
Bumps the multi-account-python-minor-patch group with 2 updates in the /backend/multi-account/backups directory: aws-cdk-lib and moto.
Bumps the multi-account-python-minor-patch group with 3 updates in the /backend/multi-account/control-tower directory: aws-cdk-lib, coverage and ruff.
Bumps the multi-account-python-minor-patch group with 1 update in the /backend/multi-account/log-aggregation directory: aws-cdk-lib.

Updates aws-cdk-lib from 2.265.0 to 2.267.0

Release notes

Sourced from aws-cdk-lib's releases.

v2.267.0

⚠ BREAKING CHANGES

  • kinesisfirehose: After this change, specifying an unsupported timeZone on the Firehose S3Bucket destination now throws a ValidationError during synthesis instead of failing at CloudFormation deployment. Affected values: 3-letter IANA abbreviations (e.g. EST), Etc/UTC, Etc/GMT, Factory, and strings containing characters outside [a-zA-Z/_]+. Use a supported standard IANA identifier (e.g. America/New_York) or UTC for synth to pass.

Features

  • backup: add indexActions prop to BackupPlanRule (#34051) (b8be853), closes #34050
  • bedrockagentcore: add manageDeliveryResourcePolicy opt-out for runtime observability (#38372) (5fb086b), closes #38342
  • ci: integration test deployment on maintainer approval (#38519) (c5f6b4f), closes #37333
  • core: Size objects now properly stringify (#38662) (90fe151)
  • sqs: metricApproximateNumberOfMessagesOutstanding (#38661) (f29b27b)

Bug Fixes

  • assets: SymlinkFollowMode.BLOCK_EXTERNAL will throw errors while bundling (#38506) (a11e451)
  • bedrockagentcore: least-privilege browser recording S3 grant (#38604) (7e11d11)
  • ci: add environment for Atmosphere variables access (#38625) (785773e), closes #38519
  • cloudfront-origins: readTimeout and keepaliveTimeout reject valid values (#38432) (6251e1a), closes #38433 #18628
  • core: performance counters use too much memory (#38620) (d0ce23c)
  • core: single file bundled output should be file (#38548) (9e22774)
  • core: stack.node.addDependency gets slower as stacks grow (#38597) (2ab9be4), closes #38522
  • core: symlinks in directory bundling output (#38665) (8d8ae2c)
  • core: validation plugin check adds too much overhead (#38619) (df15b9f)
  • dynamodb: TableV2.grants.*Data does not include index resources (#37892) (e48a97f), closes #37569
  • dynamodb: TableV2MultiAccountReplica rejects imported tables with tokenized ARNs (#38365) (08f05e5), closes #38354
  • dynamodb: avoid TableGrantsProps deprecation warnings for TableV2 (#38399) (fb5c25b), closes #37221
  • ec2: NatInstanceProvider and NatInstanceProviderV2 always trigger the keyName deprecation warning (#38347) (47f2151), closes #30806
  • kinesisfirehose: add validation for customTimeZone in S3BucketProps (#38514) (8cf9f90), closes #36089
  • lambda: allow SnapStart for container image functions (#38680) (a5adc00), closes #38281 #38281 #38265
  • rds: serverlessV2 capacity props reject tokens at synth time (#38044) (b7880de), closes #38043 #9044 #31810 #32905
  • s3-deployment: increase default memory limit from 128MB to 1024MB (#35501) (7a04f32), closes #35487
  • stepfunctions-tasks: resolve EvaluateExpression paths via a values lookup (#38682) (02301ea)
  • stack.availabilityZones are not stable strings (#38580) (f89474a)

Alpha modules (2.267.0-alpha.0)

⚠ BREAKING CHANGES

  • glue-alpha: schema Type is now an opaque class; construct column types via the Schema factories or Schema.custom(...) rather than { isPrimitive, inputString } literals. StorageParameter.custom(key, value) requires a string value, and StorageParameter.writeKmsKeyId takes a kms.IKey instead of a string.
  • glue-alpha: S3TableProps.bucket/encryption/encryptionKey are removed. Use storage: S3TableStorage.managedBucket(S3TableEncryption.kms(key?)) / S3TableStorage.fromBucket(bucket) and clientSideEncryption: TableClientSideEncryption.kms(key?). S3Table.encryption/encryptionKey are removed (clientSideEncryptionKey exposes the client-side key; read bucket.encryptionKey for server-side). The TableEncryption enum and the deprecated Table/TableProps are removed — use S3Table.

Features

  • glue-alpha: add a typed secret input to Connection (#38585) (ede4a1c)
  • glue-alpha: add subnet selection to Connection (#38561) (f9d7eac)
  • glue-alpha: model S3Table storage/encryption as value objects (#38591) (9990e16)
  • glue-alpha: opaque Schema Type with Schema.custom, and stronger StorageParameter types (#38592) (5c45eb0)
  • msk-alpha: support Kafka 4.2 (#38323) (97b181c)
  • s3tables-alpha: add storage class configuration support (#37339) (63ccf6d)

... (truncated)

Changelog

Sourced from aws-cdk-lib's changelog.

Changelog

All notable changes to this project will be documented in this file. See standard-version for commit guidelines.

2.268.0-alpha.0 (2026-09-02)

⚠ BREAKING CHANGES

  • glue-alpha: DataQualityTargetTable's constructor is removed — use DataQualityTargetTable.fromTable(database, table) or fromTableName(database, tableName); IDatabase now extends IDatabaseRef.
  • glue-alpha: DataQualityRulesetProps.clientToken is removed; use the CfnDataQualityRuleset L1 for request-level idempotency.
  • glue-alpha: S3Table.clientSideEncryptionKey is now kms.IKeyRef instead of kms.IKey.
  • glue-alpha: DataQualityRulesetProps.rulesetName is now required. AWS::Glue::DataQualityRuleset made Name a required property, so the name can no longer be left for CloudFormation to generate.

Features

  • glue-alpha: reference-typed DataQualityTargetTable and remove clientToken (#38730) (c8fafbd)

Code Refactoring

  • glue-alpha: use kms.IKeyRef for KMS key inputs where possible (#38725) (604ac23)

2.267.0-alpha.0 (2026-08-27)

⚠ BREAKING CHANGES

  • glue-alpha: schema Type is now an opaque class; construct column types via the Schema factories or Schema.custom(...) rather than { isPrimitive, inputString } literals. StorageParameter.custom(key, value) requires a string value, and StorageParameter.writeKmsKeyId takes a kms.IKey instead of a string.
  • glue-alpha: S3TableProps.bucket/encryption/encryptionKey are removed. Use storage: S3TableStorage.managedBucket(S3TableEncryption.kms(key?)) / S3TableStorage.fromBucket(bucket) and clientSideEncryption: TableClientSideEncryption.kms(key?). S3Table.encryption/encryptionKey are removed (clientSideEncryptionKey exposes the client-side key; read bucket.encryptionKey for server-side). The TableEncryption enum and the deprecated Table/TableProps are removed — use S3Table.

Features

  • glue-alpha: add a typed secret input to Connection (#38585) (ede4a1c)
  • glue-alpha: add subnet selection to Connection (#38561) (f9d7eac)
  • glue-alpha: model S3Table storage/encryption as value objects (#38591) (9990e16)
  • glue-alpha: opaque Schema Type with Schema.custom, and stronger StorageParameter types (#38592) (5c45eb0)
  • msk-alpha: support Kafka 4.2 (#38323) (97b181c)
  • s3tables-alpha: add storage class configuration support (#37339) (63ccf6d)

Bug Fixes

  • glue-alpha: validate that DATE partition projection interval is set when required (#38594) (0e2b582)
  • lambda-python-alpha: escape Docker bundling command arguments (#38583) (f7ce07b)

2.266.0-alpha.0 (2026-08-19)

⚠ BREAKING CHANGES

... (truncated)

Commits
  • 7d1069e chore(release): 2.267.0 (#38683)
  • 7904d73 chore: update CHANGELOG.v2.alpha
  • 6dc1328 chore: update CHANGELOG.v2
  • 71747d9 chore: update analytics metadata blueprints
  • ccd4868 chore(release): 2.267.0
  • c32f62e chore(spec2cdk): do not export canned metrics from a new submodule index (#38...
  • 9195f79 chore(spec2cdk): resolve attribute name collisions instead of generating dupl...
  • 02301ea fix(stepfunctions-tasks): resolve EvaluateExpression paths via a values looku...
  • a5adc00 fix(lambda): allow SnapStart for container image functions (#38680)
  • b8be853 feat(backup): add indexActions prop to BackupPlanRule (#34051)
  • Additional commits viewable in compare view

Updates coverage from 7.15.4 to 7.16.0

Release notes

Sourced from coverage's releases.

7.16.0

Version 7.16.0 — 2026-08-28

  • When combining files, now path separator slashes will automatically be converted to the local file system style. This makes it less necessary to define [paths] configuration to combine data across operating systems. Fixes issue 2266.
  • The Coverage.switch_context() method now returns the previous context.
  • Fix: previously, a [paths] pattern would be replaced everywhere in a file path when it was only meant to be replaced once, in the leading portion of the path. This is now fixed, in pull 2268.
  • Fixes to validation of options and configuration settings:
    • Negative precision settings now always cause useful error messages (pull 2261).
    • An invalid regex in the --contexts option (or the [report] contexts setting) reported a confusing “Couldn’t use data file …: user-defined function raised exception” error. Now it raises a proper configuration error naming the bad regex, like other regex settings do (pull 2262).
    • Non-string values in TOML configuration settings now produce a helpful error message instead of a traceback. This affects list settings whose elements aren’t strings (like omit, exclude_lines, or a [paths] entry), file settings like data_file, and any wrong-typed value in the [paths] section (pull 2263).
    • coverage run refuses run-affecting command-line options like --branch alongside --concurrency=multiprocessing, since they can’t reach the subprocesses. The check only recognized multiprocessing as the entire option value, so --concurrency=multiprocessing,thread slipped through and failed later with “Can’t combine statement coverage data with branch data”. Each named concurrency library is now properly considered (pull 2270).
  • Fix: coverage annotate -d DIR raised an AssertionError if any measured file had an extension other than .py, such as a .pyw file on Windows. The original extension is now restored on the annotated copy (pull 2265).

➡️  PyPI page: coverage 7.16.0. :arrow_right:  To install: python3 -m pip install coverage==7.16.0

Changelog

Sourced from coverage's changelog.

Version 7.16.0 — 2026-08-28

  • When combining files, now path separator slashes will automatically be converted to the local file system style. This makes it less necessary to define [paths] configuration to combine data across operating systems. Fixes issue 2266_.

  • The :meth:.Coverage.switch_context method now returns the previous context.

  • Fix: previously, a [paths] pattern would be replaced everywhere in a file path when it was only meant to be replaced once, in the leading portion of the path. This is now fixed, in pull 2268_.

  • Fixes to validation of options and configuration settings:

    • Negative precision settings now always cause useful error messages (pull 2261_).

    • An invalid regex in the --contexts option (or the [report] contexts setting) reported a confusing "Couldn't use data file ...: user-defined function raised exception" error. Now it raises a proper configuration error naming the bad regex, like other regex settings do (pull 2262_).

    • Non-string values in TOML configuration settings now produce a helpful error message instead of a traceback. This affects list settings whose elements aren't strings (like omit, exclude_lines, or a [paths] entry), file settings like data_file, and any wrong-typed value in the [paths] section (pull 2263_).

    • coverage run refuses run-affecting command-line options like --branch alongside --concurrency=multiprocessing, since they can't reach the subprocesses. The check only recognized multiprocessing as the entire option value, so --concurrency=multiprocessing,thread slipped through and failed later with "Can't combine statement coverage data with branch data". Each named concurrency library is now properly considered (pull 2270_).

  • Fix: coverage annotate -d DIR raised an AssertionError if any measured file had an extension other than .py, such as a .pyw file on Windows. The original extension is now restored on the annotated copy (pull 2265_).

.. _pull 2261: coveragepy/coveragepy#2261 .. _pull 2262: coveragepy/coveragepy#2262 .. _pull 2263: coveragepy/coveragepy#2263 .. _pull 2265: coveragepy/coveragepy#2265 .. _issue 2266: coveragepy/coveragepy#2266 .. _pull 2268: coveragepy/coveragepy#2268

... (truncated)

Commits
  • 3e9fc16 docs: prep for 7.16.0
  • 38be8d1 build: control check-manifest explicitly
  • 8eb1266 docs(build): no longer commit sample_html
  • 1a8b3fa docs: remove sample_html
  • aeaa79b docs: linklint is now sphinx-linklint
  • d5eaf3f test: a branchless way to re-add extensions
  • 57e52fd docs: adjust CHANGES for #2270
  • b9d304d fix: check for multiprocessing in a --concurrency list (#2270)
  • a6ef928 chore: make upgrade
  • 070461f chore: bump the action-dependencies group with 4 updates (#2271)
  • Additional commits viewable in compare view

Updates ruff from 0.16.3 to 0.16.5

Release notes

Sourced from ruff's releases.

0.16.5

Release Notes

Released on 2026-08-27.

Preview features

  • Allow rules without codes (#28049)
  • Introduce category selectors (#27666)
  • Update preview default rules and categories (#27877)

Bug fixes

  • [flake8-async] Detect blocking generic HTTP requests (ASYNC210) (#28024)
  • [flake8-datetimez] Allow timezone-safe strptime chains (DTZ007) (#28023)
  • [flake8-simplify] Respect side effects in lambda defaults (SIM401) (#28000)

Server

  • Fix duplicated "of" in ClientOptions doc comment (#27978)

Documentation

  • Document rule acceptance guidelines (#27910)
  • Document the new category selectors (#27906)

Contributors

Install ruff 0.16.5

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/ruff/releases/download/0.16.5/ruff-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://releases.astral.sh/github/ruff/releases/download/0.16.5/ruff-installer.ps1 | iex"

Download ruff 0.16.5

... (truncated)

Changelog

Sourced from ruff's changelog.

0.16.5

Released on 2026-08-27.

Preview features

  • Allow rules without codes (#28049)
  • Introduce category selectors (#27666)
  • Update preview default rules and categories (#27877)

Bug fixes

  • [flake8-async] Detect blocking generic HTTP requests (ASYNC210) (#28024)
  • [flake8-datetimez] Allow timezone-safe strptime chains (DTZ007) (#28023)
  • [flake8-simplify] Respect side effects in lambda defaults (SIM401) (#28000)

Server

  • Fix duplicated "of" in ClientOptions doc comment (#27978)

Documentation

  • Document rule acceptance guidelines (#27910)
  • Document the new category selectors (#27906)

Contributors

0.16.4

Released on 2026-08-20.

Preview features

  • [flake8-use-pathlib] Add autofix for PTH116 (#26460)
  • [refurb] Restrict delete-full-slice to lists (FURB131) (#27711)
  • [refurb] Skip FURB101 and FURB103 when the open argument is a file descriptor (#27643)

Bug fixes

  • Fix InvalidInstruction on Windows CPUs that do not support POPCNT (#27803)
  • [pyflakes] Emit semantic syntax errors in string type definitions as F722 (#27835)
  • [pylint] Allow os._exit imports in import-private-name (PLC2701) (#27738)

... (truncated)

Commits

Updates moto from 5.2.2 to 5.2.3

Changelog

Sourced from moto's changelog.

5.2.3

Docker Digest for 5.2.3: sha256:91fd602a21f49cf9eb82fdf474015a3c131d40104c8297ea6a2ca920708ae32c

General:
    * Dropped support for the Panorama service, following the removal by botocore

New Services:
* Clean Rooms:
* create_collaboration()
* create_configured_table()
* create_membership()
* delete_collaboration()
* delete_configured_table()
* delete_membership()
* get_collaboration()
* get_configured_table()
* get_membership()
* list_collaborations()
* list_configured_tables()
* list_members()
* list_memberships()
* list_tags_for_resource()
* tag_resource()
* untag_resource()
* update_collaboration()
* update_configured_table()
* update_membership()


* DevOps Agent:
    * create_agent_space()
    * delete_agent_space()
    * get_agent_space()
    * list_agent_spaces()
    * list_tags_for_resource()
    * tag_resource()
    * update_agent_space()
    * untag_resource()

    

  • Payment Cryptography:

      

    • add_key_replication_regions()
      • 

    • create_alias()
      • 

    • create_key()
      • 

    • delete_alias()
      • 

    • delete_resource_policy()
      • 

    • disable_default_key_replication_regions()
      • 

    • enable_default_key_replication_regions()
      • 

    • get_alias()
      • 

    • get_default_key_replication_regions()
      • 

    • get_key()

... (truncated)

Commits

Updates aws-cdk-lib from 2.265.0 to 2.267.0

Release notes

Sourced from aws-cdk-lib's releases.

v2.267.0

⚠ BREAKING CHANGES

  • kinesisfirehose: After this change, specifying an unsupported timeZone on the Firehose S3Bucket destination now throws a ValidationError during synthesis instead of failing at CloudFormation deployment. Affected values: 3-letter IANA abbreviations (e.g. EST), Etc/UTC, Etc/GMT, Factory, and strings containing characters outside [a-zA-Z/_]+. Use a supported standard IANA identifier (e.g. America/New_York) or UTC for synth to pass.

Features

  • backup: add indexActions prop to BackupPlanRule (#34051) (b8be853), closes #34050
  • bedrockagentcore: add manageDeliveryResourcePolicy opt-out for runtime observability (#38372) (5fb086b), closes #38342
  • ci: integration test deployment on maintainer approval (#38519) (c5f6b4f), closes #37333
  • core: Size objects now properly stringify (#38662) (90fe151)
  • sqs: metricApproximateNumberOfMessagesOutstanding (#38661) (f29b27b)

Bug Fixes

  • assets: SymlinkFollowMode.BLOCK_EXTERNAL will throw errors while bundling (#38506) (a11e451)
  • bedrockagentcore: least-privilege browser recording S3 grant (#38604) (7e11d11)
  • ci: add environment for Atmosphere variables access (#38625) (785773e), closes #38519
  • cloudfront-origins: readTimeout and keepaliveTimeout reject valid values (#38432) (6251e1a), closes #38433 #18628
  • core: performance counters use too much memory (#38620) (d0ce23c)
  • core: single file bundled output should be file (#38548) (9e22774)
  • core: stack.node.addDependency gets slower as stacks grow (#38597) (2ab9be4), closes #38522
  • core: symlinks in directory bundling output (#38665) (8d8ae2c)
  • core: validation plugin check adds too much overhead (#38619) (df15b9f)
  • dynamodb: TableV2.grants.*Data does not include index resources (#37892) (e48a97f), closes #37569
  • dynamodb: TableV2MultiAccountReplica rejects imported tables with tokenized ARNs (#38365) (08f05e5), closes #38354
  • dynamodb: avoid TableGrantsProps deprecation warnings for TableV2 (#38399) (fb5c25b), closes #37221
  • ec2: NatInstanceProvider and NatInstanceProviderV2 always trigger the keyName deprecation warning (#38347) (47f2151), closes #30806
  • kinesisfirehose: add validation for customTimeZone in S3BucketProps (#38514) (8cf9f90), closes #36089
  • lambda: allow SnapStart for container image functions (#38680) (a5adc00), closes #38281 #38281 #38265
  • rds: serverlessV2 capacity props reject tokens at synth time (#38044) (b7880de), closes #38043 #9044 #31810 #32905
  • s3-deployment: increase default memory limit from 128MB to 1024MB (#35501) (7a04f32), closes #35487
  • stepfunctions-tasks: resolve EvaluateExpression paths via a values lookup (#38682) (02301ea)
  • stack.availabilityZones are not stable strings (#38580) (f89474a)

Alpha modules (2.267.0-alpha.0)

⚠ BREAKING CHANGES

  • glue-alpha: schema Type is now an opaque class; construct column types via the Schema factories or Schema.custom(...) rather than { isPrimitive, inputString } literals. StorageParameter.custom(key, value) requires a string value, and StorageParameter.writeKmsKeyId takes a kms.IKey instead of a string.
  • glue-alpha: S3TableProps.bucket/encryption/encryptionKey are removed. Use storage: S3TableStorage.managedBucket(S3TableEncryption.kms(key?)) / S3TableStorage.fromBucket(bucket) and clientSideEncryption: TableClientSideEncryption.kms(key?). S3Table.encryption/encryptionKey are removed (clientSideEncryptionKey exposes the client-side key; read bucket.encryptionKey for server-side). The TableEncryption enum and the deprecated Table/TableProps are removed — use S3Table.

Features

  • glue-alpha: add a typed secret input to Connection (#38585) (ede4a1c)
  • glue-alpha: add subnet selection to Connection (#38561) (f9d7eac)
  • glue-alpha: model S3Table storage/encryption as value objects (#38591) (9990e16)
  • glue-alpha: opaque Schema Type with Schema.custom, and stronger StorageParameter types (#38592) (5c45eb0)
  • msk-alpha: support Kafka 4.2 (#38323) (97b181c)
  • s3tables-alpha: add storage class configuration support (#37339) (63ccf6d)

... (truncated)

Changelog

Sourced from aws-cdk-lib's changelog.

Changelog

All notable changes to this project will be documented in this file. See standard-version for commit guidelines.

2.268.0-alpha.0 (2026-09-02)

⚠ BREAKING CHANGES

  • glue-alpha: DataQualityTargetTable's constructor is removed — use DataQualityTargetTable.fromTable(database, table) or fromTableName(database, tableName); IDatabase now extends IDatabaseRef.
  • glue-alpha: DataQualityRulesetProps.clientToken is removed; use the CfnDataQualityRuleset L1 for request-level idempotency.
  • glue-alpha: S3Table.clientSideEncryptionKey is now kms.IKeyRef instead of kms.IKey.
  • glue-alpha: DataQualityRulesetProps.rulesetName is now required. AWS::Glue::DataQualityRuleset made Name a required property, so the name can no longer be left for CloudFormation to generate.

Features

  • glue-alpha: reference-typed DataQualityTargetTable and remove clientToken (#38730) (c8fafbd)

Code Refactoring

  • glue-alpha: use kms.IKeyRef for KMS key inputs where possible (#38725) (604ac23)

2.267.0-alpha.0 (2026-08-27)

⚠ BREAKING CHANGES

  • glue-alpha: schema Type is now an opaque class; construct column types via the Schema factories or Schema.custom(...) rather than { isPrimitive, inputString } literals. StorageParameter.custom(key, value) requires a string value, and StorageParameter.writeKmsKeyId takes a kms.IKey instead of a string.
  • glue-alpha: S3TableProps.bucket/encryption/encryptionKey are removed. Use storage: S3TableStorage.managedBucket(S3TableEncryption.kms(key?)) / S3TableStorage.fromBucket(bucket) and clientSideEncryption: TableClientSideEncryption.kms(key?). S3Table.encryption/encryptionKey are removed (clientSideEncryptionKey exposes the client-side key; read bucket.encryptionKey for server-side). The TableEncryption enum and the deprecated Table/TableProps are removed — use S3Table.

Features

  • glue-alpha: add a typed secret input to Connection (#38585) (ede4a1c)
  • glue-alpha: add subnet selection to Connection (#38561) (f9d7eac)
  • glue-alpha: model S3Table storage/encryption as value objects (#38591) (9990e16)
  • glue-alpha: opaque Schema Type with Schema.custom, and stronger StorageParameter types (#38592) (5c45eb0)
  • msk-alpha: support Kafka 4.2 (#38323) (97b181c)
  • s3tables-alpha: add storage class configuration support (#37339) (63ccf6d)

Bug Fixes

  • glue-alpha: validate that DATE partition projection interval is set when required (#38594) (0e2b582)
  • lambda-python-alpha: escape Docker bundling command arguments (#38583) (f7ce07b)

2.266.0-alpha.0 (2026-08-19)

⚠ BREAKING CHANGES

... (truncated)

Commits
  • 7d1069e chore(release): 2.267.0 (#38683)
  • 7904d73 chore: update CHANGELOG.v2.alpha
  • 6dc1328 chore: update CHANGELOG.v2
  • 71747d9 chore: update analytics metadata blueprints
  • ccd4868 chore(release): 2.267.0
  • c32f62e chore(spec2cdk): do not export canned metrics from a new submodule index (#38...
  • 9195f79 chore(spec2cdk): resolve attribute name collisions instead of generating dupl...
  • 02301ea fix(stepfunctions-tasks): resolve EvaluateExpression paths via a values looku...
  • a5adc00 fix(lambda): allow SnapStart for container image functions (#38680)
  • b8be853 feat(backup): add indexActions prop to BackupPlanRule (#34051)
  • Additional commits viewable in compare view

Updates moto from 5.2.2 to 5.2.3

Changelog

Sourced from moto's changelog.

5.2.3

Docker Digest for 5.2.3: sha256:91fd602a21f49cf9eb82fdf474015a3c131d40104c8297ea6a2ca920708ae32c

General:
    * Dropped support for the Panorama service, following the removal by botocore

New Services:
* Clean Rooms:
* create_collaboration()
* create_configured_table()
* create_membership()
* delete_collaboration()
* delete_configured_table()
* delete_membership()
* get_collaboration()
* get_configured_table()
* get_membership()
* list_collaborations()
* list_configured_tables()
* list_members()
* list_memberships()
* list_tags_for_resource()
* tag_resource()
* untag_resource()
* update_collaboration()
* update_configured_table()
* update_membership()


* DevOps Agent:
    * create_agent_space()
    * delete_agent_space()
    * get_agent_space()
    * list_agent_spaces()
    * list_tags_for_resource()
    * tag_resource()
    * update_agent_space()
    * untag_resource()

    

  • Payment Cryptography:

      

    • add_key_replication_regions()
      • 

    • create_alias()
      • 

    • create_key()
      • 

    • delete_alias()
      • 

    • delete_resource_policy()
      • 

    • disable_default_key_replication_regions()
      • 

    • enable_default_key_replication_regions()
      • 

    • get_alias()
      • 

    • get_default_key_replication_regions()
      • 

    • get_key()

... (truncated)

Commits
  • 3acd662 Pre-Release: Up Version Number
  • 13036cf Prep release 5.2.3 (#10199)
  • 35e6424 DynamoDB: Bring parity with AWS in error messages (#10198)
  • 5b6aa9d ELBv2: Add support for FS policy (#10197)
  • 656b2b3 [FIS] - Most Methods Implemented (#10192)
  • 8e3cbeb Glue: Add MLTransform support and tagging for DevEndpoints/Workflows (#10181)
  • 62bf212 Payment-Cryptography: New Ser...

    Description has been truncated

@dependabot
Chore(deps): Bump the multi-account-python-minor-patch group across 4…
380ac7f 
… directories with 4 updates

Bumps the multi-account-python-minor-patch group with 4 updates in the /backend/multi-account directory: [aws-cdk-lib](https://github.com/aws/aws-cdk), [coverage](https://github.com/coveragepy/coveragepy), [ruff](https://github.com/astral-sh/ruff) and [moto](https://github.com/getmoto/moto).
Bumps the multi-account-python-minor-patch group with 2 updates in the /backend/multi-account/backups directory: [aws-cdk-lib](https://github.com/aws/aws-cdk) and [moto](https://github.com/getmoto/moto).
Bumps the multi-account-python-minor-patch group with 3 updates in the /backend/multi-account/control-tower directory: [aws-cdk-lib](https://github.com/aws/aws-cdk), [coverage](https://github.com/coveragepy/coveragepy) and [ruff](https://github.com/astral-sh/ruff).
Bumps the multi-account-python-minor-patch group with 1 update in the /backend/multi-account/log-aggregation directory: [aws-cdk-lib](https://github.com/aws/aws-cdk).


Updates `aws-cdk-lib` from 2.265.0 to 2.267.0
- [Release notes](https://github.com/aws/aws-cdk/releases)
- [Changelog](https://github.com/aws/aws-cdk/blob/main/CHANGELOG.v2.alpha.md)
- [Commits](aws/aws-cdk@v2.265.0...v2.267.0)

Updates `coverage` from 7.15.4 to 7.16.0
- [Release notes](https://github.com/coveragepy/coveragepy/releases)
- [Changelog](https://github.com/coveragepy/coveragepy/blob/main/CHANGES.rst)
- [Commits](coveragepy/coveragepy@7.15.4...7.16.0)

Updates `ruff` from 0.16.3 to 0.16.5
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.16.3...0.16.5)

Updates `moto` from 5.2.2 to 5.2.3
- [Release notes](https://github.com/getmoto/moto/releases)
- [Changelog](https://github.com/getmoto/moto/blob/master/CHANGELOG.md)
- [Commits](getmoto/moto@5.2.2...5.2.3)

Updates `aws-cdk-lib` from 2.265.0 to 2.267.0
- [Release notes](https://github.com/aws/aws-cdk/releases)
- [Changelog](https://github.com/aws/aws-cdk/blob/main/CHANGELOG.v2.alpha.md)
- [Commits](aws/aws-cdk@v2.265.0...v2.267.0)

Updates `moto` from 5.2.2 to 5.2.3
- [Release notes](https://github.com/getmoto/moto/releases)
- [Changelog](https://github.com/getmoto/moto/blob/master/CHANGELOG.md)
- [Commits](getmoto/moto@5.2.2...5.2.3)

Updates `aws-cdk-lib` from 2.265.0 to 2.267.0
- [Release notes](https://github.com/aws/aws-cdk/releases)
- [Changelog](https://github.com/aws/aws-cdk/blob/main/CHANGELOG.v2.alpha.md)
- [Commits](aws/aws-cdk@v2.265.0...v2.267.0)

Updates `coverage` from 7.15.4 to 7.16.0
- [Release notes](https://github.com/coveragepy/coveragepy/releases)
- [Changelog](https://github.com/coveragepy/coveragepy/blob/main/CHANGES.rst)
- [Commits](coveragepy/coveragepy@7.15.4...7.16.0)

Updates `ruff` from 0.16.3 to 0.16.5
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.16.3...0.16.5)

Updates `aws-cdk-lib` from 2.265.0 to 2.267.0
- [Release notes](https://github.com/aws/aws-cdk/releases)
- [Changelog](https://github.com/aws/aws-cdk/blob/main/CHANGELOG.v2.alpha.md)
- [Commits](aws/aws-cdk@v2.265.0...v2.267.0)

Updates `aws-cdk-lib` from 2.265.0 to 2.267.0
- [Release notes](https://github.com/aws/aws-cdk/releases)
- [Changelog](https://github.com/aws/aws-cdk/blob/main/CHANGELOG.v2.alpha.md)
- [Commits](aws/aws-cdk@v2.265.0...v2.267.0)

Updates `moto` from 5.2.2 to 5.2.3
- [Release notes](https://github.com/getmoto/moto/releases)
- [Changelog](https://github.com/getmoto/moto/blob/master/CHANGELOG.md)
- [Commits](getmoto/moto@5.2.2...5.2.3)

Updates `aws-cdk-lib` from 2.265.0 to 2.267.0
- [Release notes](https://github.com/aws/aws-cdk/releases)
- [Changelog](https://github.com/aws/aws-cdk/blob/main/CHANGELOG.v2.alpha.md)
- [Commits](aws/aws-cdk@v2.265.0...v2.267.0)

Updates `moto` from 5.2.2 to 5.2.3
- [Release notes](https://github.com/getmoto/moto/releases)
- [Changelog](https://github.com/getmoto/moto/blob/master/CHANGELOG.md)
- [Commits](getmoto/moto@5.2.2...5.2.3)

Updates `aws-cdk-lib` from 2.265.0 to 2.267.0
- [Release notes](https://github.com/aws/aws-cdk/releases)
- [Changelog](https://github.com/aws/aws-cdk/blob/main/CHANGELOG.v2.alpha.md)
- [Commits](aws/aws-cdk@v2.265.0...v2.267.0)

Updates `aws-cdk-lib` from 2.265.0 to 2.267.0
- [Release notes](https://github.com/aws/aws-cdk/releases)
- [Changelog](https://github.com/aws/aws-cdk/blob/main/CHANGELOG.v2.alpha.md)
- [Commits](aws/aws-cdk@v2.265.0...v2.267.0)

Updates `aws-cdk-lib` from 2.265.0 to 2.267.0
- [Release notes](https://github.com/aws/aws-cdk/releases)
- [Changelog](https://github.com/aws/aws-cdk/blob/main/CHANGELOG.v2.alpha.md)
- [Commits](aws/aws-cdk@v2.265.0...v2.267.0)

Updates `coverage` from 7.15.4 to 7.16.0
- [Release notes](https://github.com/coveragepy/coveragepy/releases)
- [Changelog](https://github.com/coveragepy/coveragepy/blob/main/CHANGES.rst)
- [Commits](coveragepy/coveragepy@7.15.4...7.16.0)

Updates `ruff` from 0.16.3 to 0.16.5
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.16.3...0.16.5)

Updates `aws-cdk-lib` from 2.265.0 to 2.267.0
- [Release notes](https://github.com/aws/aws-cdk/releases)
- [Changelog](https://github.com/aws/aws-cdk/blob/main/CHANGELOG.v2.alpha.md)
- [Commits](aws/aws-cdk@v2.265.0...v2.267.0)

Updates `aws-cdk-lib` from 2.265.0 to 2.267.0
- [Release notes](https://github.com/aws/aws-cdk/releases)
- [Changelog](https://github.com/aws/aws-cdk/blob/main/CHANGELOG.v2.alpha.md)
- [Commits](aws/aws-cdk@v2.265.0...v2.267.0)

Updates `coverage` from 7.15.4 to 7.16.0
- [Release notes](https://github.com/coveragepy/coveragepy/releases)
- [Changelog](https://github.com/coveragepy/coveragepy/blob/main/CHANGES.rst)
- [Commits](coveragepy/coveragepy@7.15.4...7.16.0)

Updates `ruff` from 0.16.3 to 0.16.5
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.16.3...0.16.5)

Updates `aws-cdk-lib` from 2.265.0 to 2.267.0
- [Release notes](https://github.com/aws/aws-cdk/releases)
- [Changelog](https://github.com/aws/aws-cdk/blob/main/CHANGELOG.v2.alpha.md)
- [Commits](aws/aws-cdk@v2.265.0...v2.267.0)

Updates `aws-cdk-lib` from 2.265.0 to 2.267.0
- [Release notes](https://github.com/aws/aws-cdk/releases)
- [Changelog](https://github.com/aws/aws-cdk/blob/main/CHANGELOG.v2.alpha.md)
- [Commits](aws/aws-cdk@v2.265.0...v2.267.0)

Updates `aws-cdk-lib` from 2.265.0 to 2.267.0
- [Release notes](https://github.com/aws/aws-cdk/releases)
- [Changelog](https://github.com/aws/aws-cdk/blob/main/CHANGELOG.v2.alpha.md)
- [Commits](aws/aws-cdk@v2.265.0...v2.267.0)

Updates `aws-cdk-lib` from 2.265.0 to 2.267.0
- [Release notes](https://github.com/aws/aws-cdk/releases)
- [Changelog](https://github.com/aws/aws-cdk/blob/main/CHANGELOG.v2.alpha.md)
- [Commits](aws/aws-cdk@v2.265.0...v2.267.0)

Updates `aws-cdk-lib` from 2.265.0 to 2.267.0
- [Release notes](https://github.com/aws/aws-cdk/releases)
- [Changelog](https://github.com/aws/aws-cdk/blob/main/CHANGELOG.v2.alpha.md)
- [Commits](aws/aws-cdk@v2.265.0...v2.267.0)

---
updated-dependencies:
- dependency-name: aws-cdk-lib
  dependency-version: 2.267.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: multi-account-python-minor-patch
- dependency-name: coverage
  dependency-version: 7.16.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: multi-account-python-minor-patch
- dependency-name: ruff
  dependency-version: 0.16.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: multi-account-python-minor-patch
- dependency-name: moto
  dependency-version: 5.2.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: multi-account-python-minor-patch
- dependency-name: aws-cdk-lib
  dependency-version: 2.267.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: multi-account-python-minor-patch
- dependency-name: moto
  dependency-version: 5.2.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: multi-account-python-minor-patch
- dependency-name: aws-cdk-lib
  dependency-version: 2.267.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: multi-account-python-minor-patch
- dependency-name: coverage
  dependency-version: 7.16.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: multi-account-python-minor-patch
- dependency-name: ruff
  dependency-version: 0.16.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: multi-account-python-minor-patch
- dependency-name: aws-cdk-lib
  dependency-version: 2.267.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: multi-account-python-minor-patch
- dependency-name: aws-cdk-lib
  dependency-version: 2.267.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: multi-account-python-minor-patch
- dependency-name: moto
  dependency-version: 5.2.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: multi-account-python-minor-patch
- dependency-name: aws-cdk-lib
  dependency-version: 2.267.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: multi-account-python-minor-patch
- dependency-name: moto
  dependency-version: 5.2.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: multi-account-python-minor-patch
- dependency-name: aws-cdk-lib
  dependency-version: 2.267.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: multi-account-python-minor-patch
- dependency-name: aws-cdk-lib
  dependency-version: 2.267.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: multi-account-python-minor-patch
- dependency-name: aws-cdk-lib
  dependency-version: 2.267.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: multi-account-python-minor-patch
- dependency-name: coverage
  dependency-version: 7.16.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: multi-account-python-minor-patch
- dependency-name: ruff
  dependency-version: 0.16.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: multi-account-python-minor-patch
- dependency-name: aws-cdk-lib
  dependency-version: 2.267.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: multi-account-python-minor-patch
- dependency-name: aws-cdk-lib
  dependency-version: 2.267.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: multi-account-python-minor-patch
- dependency-name: coverage
  dependency-version: 7.16.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: multi-account-python-minor-patch
- dependency-name: ruff
  dependency-version: 0.16.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: multi-account-python-minor-patch
- dependency-name: aws-cdk-lib
  dependency-version: 2.267.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: multi-account-python-minor-patch
- dependency-name: aws-cdk-lib
  dependency-version: 2.267.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: multi-account-python-minor-patch
- dependency-name: aws-cdk-lib
  dependency-version: 2.267.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: multi-account-python-minor-patch
- dependency-name: aws-cdk-lib
  dependency-version: 2.267.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: multi-account-python-minor-patch
- dependency-name: aws-cdk-lib
  dependency-version: 2.267.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: multi-account-python-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Sep 7, 2026
jlkravitz
jlkravitz approved these changes Sep 8, 2026
View reviewed changes

@jlkravitz jlkravitz left a comment

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

minor/patch updates, with passing tests. approving + merging per SOP.

@jlkravitz
jlkravitz merged commit e1c1771 into main Sep 8, 2026
3 checks passed
@dependabot
dependabot Bot deleted the dependabot/pip/backend/multi-account/multi-account-python-minor-patch-837766422a branch September 8, 2026 15:01
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@jlkravitz jlkravitz jlkravitz approved these changes

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python Pull requests that update python code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@jlkravitz