Chore(deps): Bump the multi-account-python-minor-patch group across 4 directories with 3 updates by dependabot[bot] · Pull Request #1870 · csg-org/CompactConnect

dependabot · 2026-08-31T01:17:18Z

Bumps the multi-account-python-minor-patch group with 3 updates in the /backend/multi-account directory: ruff, aws-cdk-lib and moto.
Bumps the multi-account-python-minor-patch group with 2 updates in the /backend/multi-account/backups directory: aws-cdk-lib and moto.
Bumps the multi-account-python-minor-patch group with 2 updates in the /backend/multi-account/control-tower directory: ruff and aws-cdk-lib.
Bumps the multi-account-python-minor-patch group with 1 update in the /backend/multi-account/log-aggregation directory: aws-cdk-lib.

Updates ruff from 0.16.3 to 0.16.4

Release notes

Sourced from ruff's releases.

0.16.4

Release Notes

Released on 2026-08-20.

Preview features

[flake8-use-pathlib] Add autofix for PTH116 (#26460)

[refurb] Restrict delete-full-slice to lists (FURB131) (#27711)

[refurb] Skip FURB101 and FURB103 when the open argument is a file descriptor (#27643)

Bug fixes

Fix InvalidInstruction on Windows CPUs that do not support POPCNT (#27803)

[pyflakes] Emit semantic syntax errors in string type definitions as F722 (#27835)

[pylint] Allow os._exit imports in import-private-name (PLC2701) (#27738)

Rule changes

[syntax-errors] Align mixed t-string/bytes error message with CPython 3.14 (#27766)

[ruff] Add ctypes.LittleEndianStructure and related types to existing exception (RUF012) (#27753)

[syntax-errors] Detect duplicate keyword arguments (#17804)

[syntax-errors] Detect parameters declared nonlocal (#27628)

Server

Offer display-only fixes and mark safe fixes preferred (#27807)

Support pull diagnostics for notebook cells (#27779)

Documentation

Add default indicator to rules table (#27724)

Fix broken link to Python docs (#27757)

Other changes

Fix s390x stacker assembly in release builds (#27776)

Guarantee minimum stack size when parsing a module, standalone expression, and suites (#25464)

Reduce configuration deserialization code size (#27924)

Check packed AST index bounds (#27849)

Contributors

@AbhinavMir

@eduardorittner

@royb3

@MichaReiser

@carljm

@rosstitmarsh

@ntBre

... (truncated)

Changelog

Sourced from ruff's changelog.

0.16.4

Released on 2026-08-20.

Preview features

[flake8-use-pathlib] Add autofix for PTH116 (#26460)

[refurb] Restrict delete-full-slice to lists (FURB131) (#27711)

[refurb] Skip FURB101 and FURB103 when the open argument is a file descriptor (#27643)

Bug fixes

Fix InvalidInstruction on Windows CPUs that do not support POPCNT (#27803)

[pyflakes] Emit semantic syntax errors in string type definitions as F722 (#27835)

[pylint] Allow os._exit imports in import-private-name (PLC2701) (#27738)

Rule changes

[syntax-errors] Align mixed t-string/bytes error message with CPython 3.14 (#27766)

[ruff] Add ctypes.LittleEndianStructure and related types to existing exception (RUF012) (#27753)

[syntax-errors] Detect duplicate keyword arguments (#17804)

[syntax-errors] Detect parameters declared nonlocal (#27628)

Server

Offer display-only fixes and mark safe fixes preferred (#27807)

Support pull diagnostics for notebook cells (#27779)

Documentation

Add default indicator to rules table (#27724)

Fix broken link to Python docs (#27757)

Other changes

Fix s390x stacker assembly in release builds (#27776)

Guarantee minimum stack size when parsing a module, standalone expression, and suites (#25464)

Reduce configuration deserialization code size (#27924)

Check packed AST index bounds (#27849)

Contributors

@AbhinavMir

@eduardorittner

@royb3

@MichaReiser

@carljm

@rosstitmarsh

@ntBre

@zaniebot

... (truncated)

Commits

11c76bf Bump 0.16.4 (#27937)
d53c8c5 Isolate playground builds from deployment credentials (#27839)
cab001e Disable uv preview for releases and pre-commit hooks (#27939)
f8d575f [ty] Clarify writing guidance for human readers (#27912)
ca45fae Set --preview and --default-index for the uv-lock hook (#27935)
4827bf7 Export UV_DEFAULT_INDEX in release.sh (#27934)
d1087a4 [ty] Handle assignment expressions in string annotations (#27921)
680cce4 [ty] Optimize inherited recursive protocol comparisons (#27922)
974d3cb Upgrade ecosystem-analyzer and mypy_primer to the latest upstream pins (#27932)
b169b40 Install cargo tools locked (#27929)
Additional commits viewable in compare view

Updates aws-cdk-lib from 2.265.0 to 2.266.0

Release notes

Sourced from aws-cdk-lib's releases.

v2.266.0

Features

adding controlPlaneScalingConfig to Cluster (#36863) (94e5c1a)

update L1 CloudFormation resource definitions (#38578) (ccd2633)

Bug Fixes

ec2: add DependsOn VPCGatewayAttachment to IPv6 default route (#37893) (ab272bc), closes #37853

sns-subscriptions: use regionalized service principal for opt-in region SQS subscriptions (#38339) (67a7eb1), closes #32526

Alpha modules (2.266.0-alpha.0)

⚠ BREAKING CHANGES

glue-alpha: DataQualityRulesetProps.rulesetDqdl: string is replaced by dqdl: Dqdl. Build it with Dqdl.fromString('Rules = [ ... ]').

glue-alpha: s3Encryption, cloudWatchEncryption, and jobBookmarksEncryption are no longer object literals. Use S3Encryption.s3Managed() / S3Encryption.kms(key?), CloudWatchEncryption.kms(key?), and JobBookmarksEncryption.clientSideKms(key?). The CloudWatchEncryptionMode and JobBookmarksEncryptionMode enums are removed (their mode is now implicit); S3EncryptionMode is retained.

glue-alpha: this is a corrective breaking change. Apps that leaned on the bug, and did things like InputFormat x = OutputFormat.AVRO; will get a compilation error in other jsii languages. The intended usage, on the other hand, was broken before and works now.

glue-alpha: workerType and numberOfWorkers are no longer top-level job props. For Spark jobs, pass them together via workerConfiguration: { workerType, numberOfWorkers }. PythonShellJob no longer accepts them (it is sized by maxCapacity). RayJob no longer accepts workerType (it is fixed to Z.2X).

glue-alpha: SparkJobProps.enableMetrics removed, which will cause a compilation error for any app using it. But there is no behavior change, since this is a dead prop.

glue-alpha: a differing/tokenized has_encrypted_data supplied via parameters now throws.

Features

glue-alpha: add warning for maxRetries when job run queuing is enabled (#38575) (09ae11e)

glue-alpha: model SecurityConfiguration encryption as factory subtypes (#38586) (e37e7a6)

glue-alpha: new hasEncryptedData property (#38511) (c977e36)

glue-alpha: pair workerType and numberOfWorkers into a required workerConfiguration (#38576) (5f3b1b6)

glue-alpha: wrap DataQualityRuleset DQDL in a typed value object (#38587) (fd01268)

Bug Fixes

glue-alpha: correct OutputFormat.AVRO/ORC type and tidy GA-hygiene items (#38593) (35aefaf)

glue-alpha: omit comments from struct type strings (#38008) (5f16a86), closes #26935

mediapackagev2-alpha: add GetChannel grant on MediaPackageV2 (#38582) (74d922c), closes #38581

Changelog

Sourced from aws-cdk-lib's changelog.

Changelog

All notable changes to this project will be documented in this file. See standard-version for commit guidelines.

2.267.0-alpha.0 (2026-08-27)

⚠ BREAKING CHANGES

glue-alpha: schema Type is now an opaque class; construct column types via the Schema factories or Schema.custom(...) rather than { isPrimitive, inputString } literals. StorageParameter.custom(key, value) requires a string value, and StorageParameter.writeKmsKeyId takes a kms.IKey instead of a string.

glue-alpha: S3TableProps.bucket/encryption/encryptionKey are removed. Use storage: S3TableStorage.managedBucket(S3TableEncryption.kms(key?)) / S3TableStorage.fromBucket(bucket) and clientSideEncryption: TableClientSideEncryption.kms(key?). S3Table.encryption/encryptionKey are removed (clientSideEncryptionKey exposes the client-side key; read bucket.encryptionKey for server-side). The TableEncryption enum and the deprecated Table/TableProps are removed — use S3Table.

Features

glue-alpha: add a typed secret input to Connection (#38585) (ede4a1c)

glue-alpha: add subnet selection to Connection (#38561) (f9d7eac)

glue-alpha: model S3Table storage/encryption as value objects (#38591) (9990e16)

glue-alpha: opaque Schema Type with Schema.custom, and stronger StorageParameter types (#38592) (5c45eb0)

msk-alpha: support Kafka 4.2 (#38323) (97b181c)

s3tables-alpha: add storage class configuration support (#37339) (63ccf6d)

Bug Fixes

glue-alpha: validate that DATE partition projection interval is set when required (#38594) (0e2b582)

lambda-python-alpha: escape Docker bundling command arguments (#38583) (f7ce07b)

2.266.0-alpha.0 (2026-08-19)

⚠ BREAKING CHANGES

glue-alpha: DataQualityRulesetProps.rulesetDqdl: string is replaced by dqdl: Dqdl. Build it with Dqdl.fromString('Rules = [ ... ]').

glue-alpha: s3Encryption, cloudWatchEncryption, and jobBookmarksEncryption are no longer object literals. Use S3Encryption.s3Managed() / S3Encryption.kms(key?), CloudWatchEncryption.kms(key?), and JobBookmarksEncryption.clientSideKms(key?). The CloudWatchEncryptionMode and JobBookmarksEncryptionMode enums are removed (their mode is now implicit); S3EncryptionMode is retained.

glue-alpha: this is a corrective breaking change. Apps that leaned on the bug, and did things like InputFormat x = OutputFormat.AVRO; will get a compilation error in other jsii languages. The intended usage, on the other hand, was broken before and works now.

glue-alpha: workerType and numberOfWorkers are no longer top-level job props. For Spark jobs, pass them together via workerConfiguration: { workerType, numberOfWorkers }. PythonShellJob no longer accepts them (it is sized by maxCapacity). RayJob no longer accepts workerType (it is fixed to Z.2X).

glue-alpha: SparkJobProps.enableMetrics removed, which will cause a compilation error for any app using it. But there is no behavior change, since this is a dead prop.

glue-alpha: a differing/tokenized has_encrypted_data supplied via parameters now throws.

Features

glue-alpha: add warning for maxRetries when job run queuing is enabled (#38575) (09ae11e)

glue-alpha: model SecurityConfiguration encryption as factory subtypes (#38586) (e37e7a6)

glue-alpha: new hasEncryptedData property (#38511) (c977e36)

glue-alpha: pair workerType and numberOfWorkers into a required workerConfiguration (#38576) (5f3b1b6)

glue-alpha: wrap DataQualityRuleset DQDL in a typed value object (#38587) (fd01268)

Bug Fixes

... (truncated)

Commits

e8d9160 chore(release): 2.266.0 (#38602)
0163b4c chore: update analytics metadata blueprints
317c276 chore(release): 2.266.0
a2eafa0 chore(s3): add integ test for cross-account replication with an imported dest...
74d922c fix(mediapackagev2-alpha): add GetChannel grant on MediaPackageV2 (#38582)
ccd2633 feat: update L1 CloudFormation resource definitions (#38578)
fd01268 feat(glue-alpha): wrap DataQualityRuleset DQDL in a typed value object (#38587)
e37e7a6 feat(glue-alpha): model SecurityConfiguration encryption as factory subtypes ...
35aefaf fix(glue-alpha): correct OutputFormat.AVRO/ORC type and tidy GA-hygiene items...
5f3b1b6 feat(glue-alpha): pair workerType and numberOfWorkers into a required workerC...
Additional commits viewable in compare view

Updates moto from 5.2.2 to 5.2.3

Changelog

Sourced from moto's changelog.

5.2.3

Docker Digest for 5.2.3: sha256:91fd602a21f49cf9eb82fdf474015a3c131d40104c8297ea6a2ca920708ae32c

General:
    * Dropped support for the Panorama service, following the removal by botocore
New Services:
* Clean Rooms:
* create_collaboration()
* create_configured_table()
* create_membership()
* delete_collaboration()
* delete_configured_table()
* delete_membership()
* get_collaboration()
* get_configured_table()
* get_membership()
* list_collaborations()
* list_configured_tables()
* list_members()
* list_memberships()
* list_tags_for_resource()
* tag_resource()
* untag_resource()
* update_collaboration()
* update_configured_table()
* update_membership()
* DevOps Agent:
    * create_agent_space()
    * delete_agent_space()
    * get_agent_space()
    * list_agent_spaces()
    * list_tags_for_resource()
    * tag_resource()
    * update_agent_space()
    * untag_resource()

Payment Cryptography:

add_key_replication_regions()
create_alias()
create_key()
delete_alias()
delete_resource_policy()
disable_default_key_replication_regions()
enable_default_key_replication_regions()
get_alias()
get_default_key_replication_regions()
get_key()

... (truncated)

Commits

3acd662 Pre-Release: Up Version Number
13036cf Prep release 5.2.3 (#10199)
35e6424 DynamoDB: Bring parity with AWS in error messages (#10198)
5b6aa9d ELBv2: Add support for FS policy (#10197)
656b2b3 [FIS] - Most Methods Implemented (#10192)
8e3cbeb Glue: Add MLTransform support and tagging for DevEndpoints/Workflows (#10181)
62bf212 Payment-Cryptography: New Service Methods (#10129)
7ffce30 EMRServerless: add executionRole to GetJobRun response (#10189)
55e2fbc RDS: extract ARN parsing into dedicated helper (#10180)
bef4271 fix(dynamodb): validate Select and honor Scan COUNT (#10175)
Additional commits viewable in compare view

Updates aws-cdk-lib from 2.265.0 to 2.266.0

Release notes

Sourced from aws-cdk-lib's releases.

v2.266.0

Features

adding controlPlaneScalingConfig to Cluster (#36863) (94e5c1a)

update L1 CloudFormation resource definitions (#38578) (ccd2633)

Bug Fixes

ec2: add DependsOn VPCGatewayAttachment to IPv6 default route (#37893) (ab272bc), closes #37853

sns-subscriptions: use regionalized service principal for opt-in region SQS subscriptions (#38339) (67a7eb1), closes #32526

Alpha modules (2.266.0-alpha.0)

⚠ BREAKING CHANGES

glue-alpha: DataQualityRulesetProps.rulesetDqdl: string is replaced by dqdl: Dqdl. Build it with Dqdl.fromString('Rules = [ ... ]').

glue-alpha: s3Encryption, cloudWatchEncryption, and jobBookmarksEncryption are no longer object literals. Use S3Encryption.s3Managed() / S3Encryption.kms(key?), CloudWatchEncryption.kms(key?), and JobBookmarksEncryption.clientSideKms(key?). The CloudWatchEncryptionMode and JobBookmarksEncryptionMode enums are removed (their mode is now implicit); S3EncryptionMode is retained.

glue-alpha: this is a corrective breaking change. Apps that leaned on the bug, and did things like InputFormat x = OutputFormat.AVRO; will get a compilation error in other jsii languages. The intended usage, on the other hand, was broken before and works now.

glue-alpha: workerType and numberOfWorkers are no longer top-level job props. For Spark jobs, pass them together via workerConfiguration: { workerType, numberOfWorkers }. PythonShellJob no longer accepts them (it is sized by maxCapacity). RayJob no longer accepts workerType (it is fixed to Z.2X).

glue-alpha: SparkJobProps.enableMetrics removed, which will cause a compilation error for any app using it. But there is no behavior change, since this is a dead prop.

glue-alpha: a differing/tokenized has_encrypted_data supplied via parameters now throws.

Features

glue-alpha: add warning for maxRetries when job run queuing is enabled (#38575) (09ae11e)

glue-alpha: model SecurityConfiguration encryption as factory subtypes (#38586) (e37e7a6)

glue-alpha: new hasEncryptedData property (#38511) (c977e36)

glue-alpha: pair workerType and numberOfWorkers into a required workerConfiguration (#38576) (5f3b1b6)

glue-alpha: wrap DataQualityRuleset DQDL in a typed value object (#38587) (fd01268)

Bug Fixes

glue-alpha: correct OutputFormat.AVRO/ORC type and tidy GA-hygiene items (#38593) (35aefaf)

glue-alpha: omit comments from struct type strings (#38008) (5f16a86), closes #26935

mediapackagev2-alpha: add GetChannel grant on MediaPackageV2 (#38582) (74d922c), closes #38581

Changelog

Sourced from aws-cdk-lib's changelog.

Changelog

All notable changes to this project will be documented in this file. See standard-version for commit guidelines.

2.267.0-alpha.0 (2026-08-27)

⚠ BREAKING CHANGES

glue-alpha: schema Type is now an opaque class; construct column types via the Schema factories or Schema.custom(...) rather than { isPrimitive, inputString } literals. StorageParameter.custom(key, value) requires a string value, and StorageParameter.writeKmsKeyId takes a kms.IKey instead of a string.

glue-alpha: S3TableProps.bucket/encryption/encryptionKey are removed. Use storage: S3TableStorage.managedBucket(S3TableEncryption.kms(key?)) / S3TableStorage.fromBucket(bucket) and clientSideEncryption: TableClientSideEncryption.kms(key?). S3Table.encryption/encryptionKey are removed (clientSideEncryptionKey exposes the client-side key; read bucket.encryptionKey for server-side). The TableEncryption enum and the deprecated Table/TableProps are removed — use S3Table.

Features

glue-alpha: add a typed secret input to Connection (#38585) (ede4a1c)

glue-alpha: add subnet selection to Connection (#38561) (f9d7eac)

glue-alpha: model S3Table storage/encryption as value objects (#38591) (9990e16)

glue-alpha: opaque Schema Type with Schema.custom, and stronger StorageParameter types (#38592) (5c45eb0)

msk-alpha: support Kafka 4.2 (#38323) (97b181c)

s3tables-alpha: add storage class configuration support (#37339) (63ccf6d)

Bug Fixes

glue-alpha: validate that DATE partition projection interval is set when required (#38594) (0e2b582)

lambda-python-alpha: escape Docker bundling command arguments (#38583) (f7ce07b)

2.266.0-alpha.0 (2026-08-19)

⚠ BREAKING CHANGES

glue-alpha: DataQualityRulesetProps.rulesetDqdl: string is replaced by dqdl: Dqdl. Build it with Dqdl.fromString('Rules = [ ... ]').

glue-alpha: s3Encryption, cloudWatchEncryption, and jobBookmarksEncryption are no longer object literals. Use S3Encryption.s3Managed() / S3Encryption.kms(key?), CloudWatchEncryption.kms(key?), and JobBookmarksEncryption.clientSideKms(key?). The CloudWatchEncryptionMode and JobBookmarksEncryptionMode enums are removed (their mode is now implicit); S3EncryptionMode is retained.

glue-alpha: this is a corrective breaking change. Apps that leaned on the bug, and did things like InputFormat x = OutputFormat.AVRO; will get a compilation error in other jsii languages. The intended usage, on the other hand, was broken before and works now.

glue-alpha: workerType and numberOfWorkers are no longer top-level job props. For Spark jobs, pass them together via workerConfiguration: { workerType, numberOfWorkers }. PythonShellJob no longer accepts them (it is sized by maxCapacity). RayJob no longer accepts workerType (it is fixed to Z.2X).

glue-alpha: SparkJobProps.enableMetrics removed, which will cause a compilation error for any app using it. But there is no behavior change, since this is a dead prop.

glue-alpha: a differing/tokenized has_encrypted_data supplied via parameters now throws.

Features

glue-alpha: add warning for maxRetries when job run queuing is enabled (#38575) (09ae11e)

glue-alpha: model SecurityConfiguration encryption as factory subtypes (#38586) (e37e7a6)

glue-alpha: new hasEncryptedData property (#38511) (c977e36)

glue-alpha: pair workerType and numberOfWorkers into a required workerConfiguration (#38576) (5f3b1b6)

glue-alpha: wrap DataQualityRuleset DQDL in a typed value object (#38587) (fd01268)

Bug Fixes

... (truncated)

Commits

e8d9160 chore(release): 2.266.0 (#38602)
0163b4c chore: update analytics metadata blueprints
317c276 chore(release): 2.266.0
a2eafa0 chore(s3): add integ test for cross-account replication with an imported dest...
74d922c fix(mediapackagev2-alpha): add GetChannel grant on MediaPackageV2 (#38582)
ccd2633 feat: update L1 CloudFormation resource definitions (#38578)
fd01268 feat(glue-alpha): wrap DataQualityRuleset DQDL in a typed value object (#38587)
e37e7a6 feat(glue-alpha): model SecurityConfiguration encryption as factory subtypes ...
35aefaf fix(glue-alpha): correct OutputFormat.AVRO/ORC type and tidy GA-hygiene items...
5f3b1b6 feat(glue-alpha): pair workerType and numberOfWorkers into a required workerC...
Additional commits viewable in compare view

Updates moto from 5.2.2 to 5.2.3

Changelog

Sourced from moto's changelog.

5.2.3

Docker Digest for 5.2.3: sha256:91fd602a21f49cf9eb82fdf474015a3c131d40104c8297ea6a2ca920708ae32c

General:
    * Dropped support for the Panorama service, following the removal by botocore
New Services:
* Clean Rooms:
* create_collaboration()
* create_configured_table()
* create_membership()
* delete_collaboration()
* delete_configured_table()
* delete_membership()
* get_collaboration()
* get_configured_table()
* get_membership()
* list_collaborations()
* list_configured_tables()
* list_members()
* list_memberships()
* list_tags_for_resource()
* tag_resource()
* untag_resource()
* update_collaboration()
* update_configured_table()
* update_membership()
* DevOps Agent:
    * create_agent_space()
    * delete_agent_space()
    * get_agent_space()
    * list_agent_spaces()
    * list_tags_for_resource()
    * tag_resource()
    * update_agent_space()
    * untag_resource()

Payment Cryptography:

add_key_replication_regions()
create_alias()
create_key()
delete_alias()
delete_resource_policy()
disable_default_key_replication_regions()
enable_default_key_replication_regions()
get_alias()
get_default_key_replication_regions()
get_key()

... (truncated)

Commits

3acd662 Pre-Release: Up Version Number
13036cf Prep release 5.2.3 (#10199)
35e6424 DynamoDB: Bring parity with AWS in error messages (#10198)
5b6aa9d ELBv2: Add support for FS policy (#10197)
656b2b3 [FIS] - Most Methods Implemented (#10192)
8e3cbeb Glue: Add MLTransform support and tagging for DevEndpoints/Workflows (#10181)
62bf212 Payment-Cryptography: New Service Methods (#10129)
7ffce30 EMRServerless: add executionRole to GetJobRun response (#10189)
55e2fbc RDS: extract ARN parsing into dedicated helper (#10180)
bef4271 fix(dynamodb): validate Select and honor Scan COUNT (#10175)
Additional commits viewable in compare view

Updates ruff from 0.16.3 to 0.16.4

Release notes

Sourced from ruff's releases.

0.16.4

Release Notes

Released on 2026-08-20.

Preview features

[flake8-use-pathlib] Add autofix for PTH116 (#26460)

[refurb] Restrict delete-full-slice to lists (FURB131) (#27711)

[refurb] Skip FURB101 and FURB103 when the open argument is a file descriptor (#27643)

Bug fixes

Fix InvalidInstruction on Windows CPUs that do not support POPCNT (#27803)

[pyflakes] Emit semantic syntax errors in string type definitions as F722 (#27835)

[pylint] Allow os._exit imports in import-private-name (PLC2701) (#27738)

Rule changes

[syntax-errors] Align mixed t-string/bytes error message with CPython 3.14 (#27766)

[ruff] Add ctypes.LittleEndianStructure and related types to existing exception (RUF012) (#27753)

[syntax-errors] Detect duplicate keyword arguments (#17804)

[syntax-errors] Detect parameters declared nonlocal (#27628)

Server

Offer display-only fixes and mark safe fixes preferred (#27807)

Support pull diagnostics for notebook cells (#27779)

Documentation

Add default indicator to rules table (#27724)

Fix broken link to Python docs (#27757)

Other changes

Fix s390x stacker assembly in release builds (#27776)

Guarantee minimum stack size when parsing a module, standalone expression, and suites (#25464)

Reduce configuration deserialization code size (#27924)

Check packed AST index bounds (#27849)

Contributors

@AbhinavMir

@eduardorittner

@royb3

@MichaReiser

@carljm

@rosstitmarsh

@ntBre

... (truncated)

Changelog

Sourced from ruff's changelog.

0.16.4

Released on 2026-08-20.

Preview features

[flake8-use-pathlib] Add autofix for PTH116 (#26460)

[refurb] Restrict delete-full-slice to lists (FURB131) (#27711)

[refurb] Skip FURB101 and FURB103 when the open argument is a file descriptor (#27643)

Bug fixes

Fix InvalidInstruction on Windows CPUs that do not support POPCNT (#27803)

[pyflakes] Emit semantic syntax errors in string type definitions as F722 (#27835)

[pylint] Allow os._exit imports in import-private-name (PLC2701) (#27738)

Rule changes

[syntax-errors] Align mixed t-string/bytes error message with CPython 3.14 (#27766)

[ruff] Add ctypes.LittleEndianStructure and related types to existing exception (RUF012) (#27753)

[syntax-errors] Detect duplicate keyword arguments (#17804)

[syntax-errors] Detect parameters declared nonlocal (#27628)

Server

Offer display-only fixes and mark safe fixes preferred (#27807)

Support pull diagnostics for notebook cells (#27779)

Documentation

Add default indicator to rules table (#27724)

Fix broken link to Python docs (#27757)

Other changes

Fix s390x stacker assembly in release builds (#27776)

Guarantee minimum stack size when parsing a module, standalone expression, and suites (#25464)

Reduce configuration deserialization code size (#27924)

Check packed AST index bounds (#27849)

Contributors

@AbhinavMir

@eduardorittner

@royb3

@MichaReiser

@carljm

@rosstitmarsh

@ntBre

@zaniebot

... (truncated)

Commits

11c76bf Bump 0.16.4 (#27937)
d53c8c5 Isolate playground builds from deployment credentials (#27839)
cab001e Disable uv preview for releases and pre-commit hooks (#27939)
f8d575f [ty] Clarify writing guidance for human readers (#27912)
ca45fae Set --preview and --default-index for the uv-lock hook (#27935)
4827bf7 Export UV_DEFAULT_INDEX in release.sh (#27934)
d1087a4 [ty] Handle assignment expressions in string annotations (#27921)
680cce4 [ty] Optimize inherited recursive protocol comparisons (#27922)
974d3cb Upgrade ecosystem-analyzer and mypy_primer to the latest upstream pins (#27932)
b169b40 Install cargo tools locked (#27929)
Additional commits viewable in compare view

Updates aws-cdk-lib from 2.265.0 to 2.266.0

Release notes

Sourced from aws-cdk-lib's releases.

v2.266.0

Features

adding controlPlaneScalingConfig to Cluster (#36863) (94e5c1a)

update L1 CloudFormation resource definitions (#38578) (ccd2633)

Bug Fixes

ec2: add DependsOn VPCGatewayAttachment to IPv6 default route (#37893) (ab272bc), closes #37853

sns-subscriptions: use regionalized service principal for opt-in region SQS subscriptions (#38339) (67a7eb1), closes #32526

Alpha modules (2.266.0-alpha.0)

⚠ BREAKING CHANGES

glue-alpha: DataQualityRulesetProps.rulesetDqdl: string is replaced by dqdl: Dqdl. Build it with Dqdl.fromString('Rules = [ ... ]').

glue-alpha: s3Encryption, cloudWatchEncryption, and jobBookmarksEncryption are no longer object literals. Use S3Encryption.s3Managed() / S3Encryption.kms(key?), CloudWatchEncryption.kms(key?), and JobBookmarksEncryption.clientSideKms(key?). The CloudWatchEncryptionMode and JobBookmarksEncryptionMode enums are removed (their mode is now implicit); S3EncryptionMode is retained.

glue-alpha: this is a corrective breaking change. Apps that leaned on the bug, and did things like InputFormat x = OutputFormat.AVRO; will get a compilation error in other jsii languages. The intended usage, on the other hand, was broken before and works now.

glue-alpha: workerType and numberOfWorkers are no longer top-level job props. For Spark jobs, pass them together via workerConfiguration: { workerType, numberOfWorkers }. PythonShellJob no longer accepts them (it is sized by maxCapacity). RayJob no longer accepts workerType (it is fixed to Z.2X).

glue-alpha: SparkJobProps.enableMetrics removed, which will cause a compilation error for any app using it. But there is no behavior change, since this is a dead prop.

glue-alpha: a differing/tokenized has_encrypted_data supplied via parameters now throws.

Features

glue-alpha: add warning for maxRetries when job run queuing is enabled (#38575) (09ae11e)

glue-alpha: model SecurityConfiguration encryption as factory subtypes (#38586) (e37e7a6)

glue-alpha: new hasEncryptedData property (Description has been truncated

… directories with 3 updates Bumps the multi-account-python-minor-patch group with 3 updates in the /backend/multi-account directory: [ruff](https://github.com/astral-sh/ruff), [aws-cdk-lib](https://github.com/aws/aws-cdk) and [moto](https://github.com/getmoto/moto). Bumps the multi-account-python-minor-patch group with 2 updates in the /backend/multi-account/backups directory: [aws-cdk-lib](https://github.com/aws/aws-cdk) and [moto](https://github.com/getmoto/moto). Bumps the multi-account-python-minor-patch group with 2 updates in the /backend/multi-account/control-tower directory: [ruff](https://github.com/astral-sh/ruff) and [aws-cdk-lib](https://github.com/aws/aws-cdk). Bumps the multi-account-python-minor-patch group with 1 update in the /backend/multi-account/log-aggregation directory: [aws-cdk-lib](https://github.com/aws/aws-cdk). Updates `ruff` from 0.16.3 to 0.16.4 - [Release notes](https://github.com/astral-sh/ruff/releases) - [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md) - [Commits](astral-sh/ruff@0.16.3...0.16.4) Updates `aws-cdk-lib` from 2.265.0 to 2.266.0 - [Release notes](https://github.com/aws/aws-cdk/releases) - [Changelog](https://github.com/aws/aws-cdk/blob/main/CHANGELOG.v2.alpha.md) - [Commits](aws/aws-cdk@v2.265.0...v2.266.0) Updates `moto` from 5.2.2 to 5.2.3 - [Release notes](https://github.com/getmoto/moto/releases) - [Changelog](https://github.com/getmoto/moto/blob/master/CHANGELOG.md) - [Commits](getmoto/moto@5.2.2...5.2.3) Updates `aws-cdk-lib` from 2.265.0 to 2.266.0 - [Release notes](https://github.com/aws/aws-cdk/releases) - [Changelog](https://github.com/aws/aws-cdk/blob/main/CHANGELOG.v2.alpha.md) - [Commits](aws/aws-cdk@v2.265.0...v2.266.0) Updates `moto` from 5.2.2 to 5.2.3 - [Release notes](https://github.com/getmoto/moto/releases) - [Changelog](https://github.com/getmoto/moto/blob/master/CHANGELOG.md) - [Commits](getmoto/moto@5.2.2...5.2.3) Updates `ruff` from 0.16.3 to 0.16.4 - [Release notes](https://github.com/astral-sh/ruff/releases) - [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md) - [Commits](astral-sh/ruff@0.16.3...0.16.4) Updates `aws-cdk-lib` from 2.265.0 to 2.266.0 - [Release notes](https://github.com/aws/aws-cdk/releases) - [Changelog](https://github.com/aws/aws-cdk/blob/main/CHANGELOG.v2.alpha.md) - [Commits](aws/aws-cdk@v2.265.0...v2.266.0) Updates `aws-cdk-lib` from 2.265.0 to 2.266.0 - [Release notes](https://github.com/aws/aws-cdk/releases) - [Changelog](https://github.com/aws/aws-cdk/blob/main/CHANGELOG.v2.alpha.md) - [Commits](aws/aws-cdk@v2.265.0...v2.266.0) --- updated-dependencies: - dependency-name: ruff dependency-version: 0.16.4 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: multi-account-python-minor-patch - dependency-name: aws-cdk-lib dependency-version: 2.266.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: multi-account-python-minor-patch - dependency-name: moto dependency-version: 5.2.3 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: multi-account-python-minor-patch - dependency-name: aws-cdk-lib dependency-version: 2.266.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: multi-account-python-minor-patch - dependency-name: moto dependency-version: 5.2.3 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: multi-account-python-minor-patch - dependency-name: ruff dependency-version: 0.16.4 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: multi-account-python-minor-patch - dependency-name: aws-cdk-lib dependency-version: 2.266.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: multi-account-python-minor-patch - dependency-name: aws-cdk-lib dependency-version: 2.266.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: multi-account-python-minor-patch ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Aug 31, 2026

Navigation Menu

Uh oh!

Chore(deps): Bump the multi-account-python-minor-patch group across 4 directories with 3 updates - #1870

Chore(deps): Bump the multi-account-python-minor-patch group across 4 directories with 3 updates#1870
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/backend/multi-account/multi-account-python-minor-patch-de8e9510c6

dependabot Bot commented on behalf of github Aug 31, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Aug 31, 2026

0.16.4

Release Notes

Preview features

Bug fixes

Rule changes

Server

Documentation

Other changes

Contributors

0.16.4

Preview features

Bug fixes

Rule changes

Server

Documentation

Other changes

Contributors

v2.266.0

Features

Bug Fixes

Alpha modules (2.266.0-alpha.0)

⚠ BREAKING CHANGES

Features

Bug Fixes

Changelog

2.267.0-alpha.0 (2026-08-27)

⚠ BREAKING CHANGES

Features

Bug Fixes

2.266.0-alpha.0 (2026-08-19)

⚠ BREAKING CHANGES

Features

Bug Fixes

5.2.3

v2.266.0

Features

Bug Fixes

Alpha modules (2.266.0-alpha.0)

⚠ BREAKING CHANGES

Features

Bug Fixes

Changelog

2.267.0-alpha.0 (2026-08-27)

⚠ BREAKING CHANGES

Features

Bug Fixes

2.266.0-alpha.0 (2026-08-19)

⚠ BREAKING CHANGES

Features

Bug Fixes

5.2.3

0.16.4

Release Notes

Preview features

Bug fixes

Rule changes

Server

Documentation

Other changes

Contributors

0.16.4

Preview features

Bug fixes

Rule changes

Server

Documentation

Other changes

Contributors

v2.266.0

Features

Bug Fixes

Alpha modules (2.266.0-alpha.0)

⚠ BREAKING CHANGES

Features

Uh oh!

Reviewers

Assignees