Skip to content

chore(deps): bump the boto group across 1 directory with 15 updates#8943

Open
dependabot[bot] wants to merge 1 commit intodevelopfrom
dependabot/pip/develop/boto-05add78db7
Open

chore(deps): bump the boto group across 1 directory with 15 updates#8943
dependabot[bot] wants to merge 1 commit intodevelopfrom
dependabot/pip/develop/boto-05add78db7

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Apr 30, 2026

Bumps the boto group with 15 updates in the / directory:

Package From To
boto3-stubs 1.42.83 1.43.4
mypy-boto3-apigateway 1.42.68 1.43.0
mypy-boto3-cloudformation 1.42.3 1.43.0
mypy-boto3-ecr 1.42.67 1.43.0
mypy-boto3-iam 1.42.64 1.43.2
mypy-boto3-kinesis 1.42.41 1.43.0
mypy-boto3-lambda 1.42.37 1.43.0
mypy-boto3-s3 1.42.80 1.43.0
mypy-boto3-schemas 1.42.3 1.43.0
mypy-boto3-secretsmanager 1.42.8 1.43.0
mypy-boto3-signer 1.42.7 1.43.0
mypy-boto3-sqs 1.42.3 1.43.0
mypy-boto3-stepfunctions 1.42.3 1.43.0
mypy-boto3-sts 1.42.3 1.43.0
mypy-boto3-xray 1.42.3 1.43.0

Updates boto3-stubs from 1.42.83 to 1.43.4

Release notes

Sourced from boto3-stubs's releases.

8.8.0 - Python 3.8 runtime is back

Changed

  • [services] install_requires section is calculated based on dependencies in use, so typing-extensions version is set properly
  • [all] Replaced typing imports with collections.abc with a fallback to typing for Python <3.9
  • [all] Added aliases for builtins.list, builtins.set, builtins.dict, and builtins.type, so Python 3.8 runtime should work as expected again (reported by @​YHallouard in #340 and @​Omri-Ben-Yair in #336)
  • [all] Unions use the same type annotations as the rest of the structures due to proper fallbacks

Fixed

  • [services] Universal input/output shapes were not replaced properly in service subresources
  • [docs] Simplified doc links rendering for services
  • [services] Cleaned up unnecessary imports in client.pyi
  • [builder] Import records with fallback are always rendered
Commits

Updates mypy-boto3-apigateway from 1.42.68 to 1.43.0

Release notes

Sourced from mypy-boto3-apigateway's releases.

8.8.0 - Python 3.8 runtime is back

Changed

  • [services] install_requires section is calculated based on dependencies in use, so typing-extensions version is set properly
  • [all] Replaced typing imports with collections.abc with a fallback to typing for Python <3.9
  • [all] Added aliases for builtins.list, builtins.set, builtins.dict, and builtins.type, so Python 3.8 runtime should work as expected again (reported by @​YHallouard in #340 and @​Omri-Ben-Yair in #336)
  • [all] Unions use the same type annotations as the rest of the structures due to proper fallbacks

Fixed

  • [services] Universal input/output shapes were not replaced properly in service subresources
  • [docs] Simplified doc links rendering for services
  • [services] Cleaned up unnecessary imports in client.pyi
  • [builder] Import records with fallback are always rendered
Commits

Updates mypy-boto3-cloudformation from 1.42.3 to 1.43.0

Release notes

Sourced from mypy-boto3-cloudformation's releases.

8.8.0 - Python 3.8 runtime is back

Changed

  • [services] install_requires section is calculated based on dependencies in use, so typing-extensions version is set properly
  • [all] Replaced typing imports with collections.abc with a fallback to typing for Python <3.9
  • [all] Added aliases for builtins.list, builtins.set, builtins.dict, and builtins.type, so Python 3.8 runtime should work as expected again (reported by @​YHallouard in #340 and @​Omri-Ben-Yair in #336)
  • [all] Unions use the same type annotations as the rest of the structures due to proper fallbacks

Fixed

  • [services] Universal input/output shapes were not replaced properly in service subresources
  • [docs] Simplified doc links rendering for services
  • [services] Cleaned up unnecessary imports in client.pyi
  • [builder] Import records with fallback are always rendered
Commits

Updates mypy-boto3-ecr from 1.42.67 to 1.43.0

Release notes

Sourced from mypy-boto3-ecr's releases.

8.8.0 - Python 3.8 runtime is back

Changed

  • [services] install_requires section is calculated based on dependencies in use, so typing-extensions version is set properly
  • [all] Replaced typing imports with collections.abc with a fallback to typing for Python <3.9
  • [all] Added aliases for builtins.list, builtins.set, builtins.dict, and builtins.type, so Python 3.8 runtime should work as expected again (reported by @​YHallouard in #340 and @​Omri-Ben-Yair in #336)
  • [all] Unions use the same type annotations as the rest of the structures due to proper fallbacks

Fixed

  • [services] Universal input/output shapes were not replaced properly in service subresources
  • [docs] Simplified doc links rendering for services
  • [services] Cleaned up unnecessary imports in client.pyi
  • [builder] Import records with fallback are always rendered
Commits

Updates mypy-boto3-iam from 1.42.64 to 1.43.2

Release notes

Sourced from mypy-boto3-iam's releases.

8.8.0 - Python 3.8 runtime is back

Changed

  • [services] install_requires section is calculated based on dependencies in use, so typing-extensions version is set properly
  • [all] Replaced typing imports with collections.abc with a fallback to typing for Python <3.9
  • [all] Added aliases for builtins.list, builtins.set, builtins.dict, and builtins.type, so Python 3.8 runtime should work as expected again (reported by @​YHallouard in #340 and @​Omri-Ben-Yair in #336)
  • [all] Unions use the same type annotations as the rest of the structures due to proper fallbacks

Fixed

  • [services] Universal input/output shapes were not replaced properly in service subresources
  • [docs] Simplified doc links rendering for services
  • [services] Cleaned up unnecessary imports in client.pyi
  • [builder] Import records with fallback are always rendered
Commits

Updates mypy-boto3-kinesis from 1.42.41 to 1.43.0

Release notes

Sourced from mypy-boto3-kinesis's releases.

8.8.0 - Python 3.8 runtime is back

Changed

  • [services] install_requires section is calculated based on dependencies in use, so typing-extensions version is set properly
  • [all] Replaced typing imports with collections.abc with a fallback to typing for Python <3.9
  • [all] Added aliases for builtins.list, builtins.set, builtins.dict, and builtins.type, so Python 3.8 runtime should work as expected again (reported by @​YHallouard in #340 and @​Omri-Ben-Yair in #336)
  • [all] Unions use the same type annotations as the rest of the structures due to proper fallbacks

Fixed

  • [services] Universal input/output shapes were not replaced properly in service subresources
  • [docs] Simplified doc links rendering for services
  • [services] Cleaned up unnecessary imports in client.pyi
  • [builder] Import records with fallback are always rendered
Commits

Updates mypy-boto3-lambda from 1.42.37 to 1.43.0

Release notes

Sourced from mypy-boto3-lambda's releases.

8.8.0 - Python 3.8 runtime is back

Changed

  • [services] install_requires section is calculated based on dependencies in use, so typing-extensions version is set properly
  • [all] Replaced typing imports with collections.abc with a fallback to typing for Python <3.9
  • [all] Added aliases for builtins.list, builtins.set, builtins.dict, and builtins.type, so Python 3.8 runtime should work as expected again (reported by @​YHallouard in #340 and @​Omri-Ben-Yair in #336)
  • [all] Unions use the same type annotations as the rest of the structures due to proper fallbacks

Fixed

  • [services] Universal input/output shapes were not replaced properly in service subresources
  • [docs] Simplified doc links rendering for services
  • [services] Cleaned up unnecessary imports in client.pyi
  • [builder] Import records with fallback are always rendered
Commits

Updates mypy-boto3-s3 from 1.42.80 to 1.43.0

Release notes

Sourced from mypy-boto3-s3's releases.

8.8.0 - Python 3.8 runtime is back

Changed

  • [services] install_requires section is calculated based on dependencies in use, so typing-extensions version is set properly
  • [all] Replaced typing imports with collections.abc with a fallback to typing for Python <3.9
  • [all] Added aliases for builtins.list, builtins.set, builtins.dict, and builtins.type, so Python 3.8 runtime should work as expected again (reported by @​YHallouard in #340 and @​Omri-Ben-Yair in #336)
  • [all] Unions use the same type annotations as the rest of the structures due to proper fallbacks

Fixed

  • [services] Universal input/output shapes were not replaced properly in service subresources
  • [docs] Simplified doc links rendering for services
  • [services] Cleaned up unnecessary imports in client.pyi
  • [builder] Import records with fallback are always rendered
Commits

Updates mypy-boto3-schemas from 1.42.3 to 1.43.0

Release notes

Sourced from mypy-boto3-schemas's releases.

8.8.0 - Python 3.8 runtime is back

Changed

  • [services] install_requires section is calculated based on dependencies in use, so typing-extensions version is set properly
  • [all] Replaced typing imports with collections.abc with a fallback to typing for Python <3.9
  • [all] Added aliases for builtins.list, builtins.set, builtins.dict, and builtins.type, so Python 3.8 runtime should work as expected again (reported by @​YHallouard in #340 and @​Omri-Ben-Yair in #336)
  • [all] Unions use the same type annotations as the rest of the structures due to proper fallbacks

Fixed

  • [services] Universal input/output shapes were not replaced properly in service subresources
  • [docs] Simplified doc links rendering for services
  • [services] Cleaned up unnecessary imports in client.pyi
  • [builder] Import records with fallback are always rendered
Commits

Updates mypy-boto3-secretsmanager from 1.42.8 to 1.43.0

Release notes

Sourced from mypy-boto3-secretsmanager's releases.

8.8.0 - Python 3.8 runtime is back

Changed

  • [services] install_requires section is calculated based on dependencies in use, so typing-extensions version is set properly
  • [all] Replaced typing imports with collections.abc with a fallback to typing for Python <3.9
  • [all] Added aliases for builtins.list, builtins.set, builtins.dict, and builtins.type, so Python 3.8 runtime should work as expected again (reported by @​YHallouard in #340 and @​Omri-Ben-Yair in #336)
  • [all] Unions use the same type annotations as the rest of the structures due to proper fallbacks

Fixed

  • [services] Universal input/output shapes were not replaced properly in service subresources
  • [docs] Simplified doc links rendering for services
  • [services] Cleaned up unnecessary imports in client.pyi
  • [builder] Import records with fallback are always rendered
Commits

Updates mypy-boto3-signer from 1.42.7 to 1.43.0

Release notes

Sourced from mypy-boto3-signer's releases.

8.8.0 - Python 3.8 runtime is back

Changed

  • [services] install_requires section is calculated based on dependencies in use, so typing-extensions version is set properly
  • [all] Replaced typing imports with collections.abc with a fallback to typing for Python <3.9
  • [all] Added aliases for builtins.list, builtins.set, builtins.dict, and builtins.type, so Python 3.8 runtime should work as expected again (reported by @​YHallouard in #340 and @​Omri-Ben-Yair in #336)
  • [all] Unions use the same type annotations as the rest of the structures due to proper fallbacks

Fixed

  • [services] Universal input/output shapes were not replaced properly in service subresources
  • [docs] Simplified doc links rendering for services
  • [services] Cleaned up unnecessary imports in client.pyi
  • [builder] Import records with fallback are always rendered
Commits

Updates mypy-boto3-sqs from 1.42.3 to 1.43.0

Release notes

Sourced from mypy-boto3-sqs's releases.

8.8.0 - Python 3.8 runtime is back

Changed

  • [services] install_requires section is calculated based on dependencies in use, so typing-extensions version is set properly
  • [all] Replaced typing imports with collections.abc with a fallback to typing for Python <3.9
  • [all] Added aliases for builtins.list, builtins.set, builtins.dict, and builtins.type, so Python 3.8 runtime should work as expected again (reported by @​YHallouard in #340 and @​Omri-Ben-Yair in #336)
  • [all] Unions use the same type annotations as the rest of the structures due to proper fallbacks

Fixed

  • [services] Universal input/output shapes were not replaced properly in service subresources
  • [docs] Simplified doc links rendering for services
  • [services] Cleaned up unnecessary imports in client.pyi
  • [builder] Import records with fallback are always rendered
Commits

Updates mypy-boto3-stepfunctions from 1.42.3 to 1.43.0

Release notes

Sourced from mypy-boto3-stepfunctions's releases.

8.8.0 - Python 3.8 runtime is back

Changed

  • [services] install_requires section is calculated based on dependencies in use, so typing-extensions version is set properly
  • [all] Replaced typing imports with collections.abc with a fallback to typing for Python <3.9
  • [all] Added aliases for builtins.list, builtins.set, builtins.dict, and builtins.type, so Python 3.8 runtime should work as expected again (reported by @​YHallouard in #340 and @​Omri-Ben-Yair in #336)
  • [all] Unions use the same type annotations as the rest of the structures due to proper fallbacks

Fixed

  • [services] Universal input/output shapes were not replaced properly in service subresources
  • [docs] Simplified doc links rendering for services
  • [services] Cleaned up unnecessary imports in client.pyi
  • [builder] Import records with fallback are always rendered
Commits

Updates mypy-boto3-sts from 1.42.3 to 1.43.0

Release notes

Sourced from mypy-boto3-sts's releases.

8.8.0 - Python 3.8 runtime is back

Changed

  • [services] install_requires section is calculated based on dependencies in use, so typing-extensions version is set properly
  • [all] Replaced typing imports with collections.abc with a fallback to typing for Python <3.9
  • [all] Added aliases for builtins.list, builtins.set, builtins.dict, and builtins.type, so Python 3.8 runtime should work as expected again (reported by @​YHallouard in #340 and @​Omri-Ben-Yair in #336)
  • [all] Unions use the same type annotations as the rest of the structures due to proper fallbacks

Fixed

  • [services] Universal input/output shapes were not replaced properly in service subresources
  • [docs] Simplified doc links rendering for services
  • [services] Cleaned up unnecessary imports in client.pyi
  • [builder] Import records with fallback are always rendered
Commits

Updates mypy-boto3-xray from 1.42.3 to 1.43.0

Release notes

Sourced from mypy-boto3-xray's releases.

8.8.0 - Python 3.8 runtime is back

Changed

  • [services] install_requires section is calculated based on dependencies in use, so typing-extensions version is set properly
  • [all] Replaced typing imports with collections.abc with a fallback to typing for Python <3.9
  • [all] Added aliases for builtins.list, builtins.set, builtins.dict, and builtins.type, so Python 3.8 runtime should work as expected again (reported by @​YHallouard in #340 and @​Omri-Ben-Yair in #336)
  • [all] Unions use the same type annotations as the rest of the structures due to proper fallbacks

Fixed

  • [services] Universal input/output shapes were not replaced properly in service subresources
  • [docs] Simplified doc links rendering for services
  • [services] Cleaned up unnecessary imports in client.pyi
  • [builder] Import records with fallback are always rendered
Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Apr 30, 2026
@dependabot dependabot Bot requested a review from a team as a code owner April 30, 2026 08:19
Copy link
Copy Markdown
Collaborator

@aws-sam-cli-bot aws-sam-cli-bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Code Review Results

Reviewed: a90d18f..3bf27f8
Files: 3
Comments: 1

Comment thread requirements/reproducible-linux.txt Outdated
boto3-stubs[apigateway, cloudformation, ecr, iam, kinesis, lambda, s3, schemas, secretsmanager, signer, sqs, stepfunctions, sts, xray]==1.42.83 \
--hash=sha256:06185ca5f11a1edc880286f5f33779a2b08be356bf270bf1ec128d0819782a20 \
--hash=sha256:1ecbd88f4ae35764b9ea3579ca1e851b67ea0a73a442cb406de277fc1478daeb
boto3-stubs[apigateway, cloudformation, ecr, iam, kinesis, lambda, s3, schemas, secretsmanager, signer, sqs, stepfunctions, sts, xray]==1.43.0 \
Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

[GENERAL] Version skew between boto3-stubs and boto3 runtime.

The boto3-stubs package (and all mypy-boto3-* sub-packages) is being bumped to 1.43.0, but the actual boto3 runtime dependency remains pinned at 1.42.70 (set in pyproject.toml line 38). This is a full minor version gap.

The boto3-stubs project versions its stubs to match specific boto3 releases. Using 1.43.0 stubs with a 1.42.70 runtime means:

  • Type stubs may reference new API methods, parameters, or return types added in boto3 1.43.x that don't exist in 1.42.70 — code could pass type checking but fail at runtime.
  • Stubs may omit deprecated signatures still present in 1.42.70 — type checking could flag valid code as errors.

The same skew applies identically in reproducible-mac.txt and reproducible-win.txt.

Consider either:

  • Bumping boto3[crt] to a compatible 1.43.x version alongside this stubs update, or
  • Keeping boto3-stubs at a version aligned with the pinned boto3==1.42.70 (e.g., boto3-stubs==1.42.70).

@dependabot dependabot Bot force-pushed the dependabot/pip/develop/boto-05add78db7 branch from 3bf27f8 to ffb0281 Compare May 4, 2026 09:18
Bumps the boto group with 15 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [boto3-stubs](https://github.com/youtype/mypy_boto3_builder) | `1.42.83` | `1.43.4` |
| [mypy-boto3-apigateway](https://github.com/youtype/mypy_boto3_builder) | `1.42.68` | `1.43.0` |
| [mypy-boto3-cloudformation](https://github.com/youtype/mypy_boto3_builder) | `1.42.3` | `1.43.0` |
| [mypy-boto3-ecr](https://github.com/youtype/mypy_boto3_builder) | `1.42.67` | `1.43.0` |
| [mypy-boto3-iam](https://github.com/youtype/mypy_boto3_builder) | `1.42.64` | `1.43.2` |
| [mypy-boto3-kinesis](https://github.com/youtype/mypy_boto3_builder) | `1.42.41` | `1.43.0` |
| [mypy-boto3-lambda](https://github.com/youtype/mypy_boto3_builder) | `1.42.37` | `1.43.0` |
| [mypy-boto3-s3](https://github.com/youtype/mypy_boto3_builder) | `1.42.80` | `1.43.0` |
| [mypy-boto3-schemas](https://github.com/youtype/mypy_boto3_builder) | `1.42.3` | `1.43.0` |
| [mypy-boto3-secretsmanager](https://github.com/youtype/mypy_boto3_builder) | `1.42.8` | `1.43.0` |
| [mypy-boto3-signer](https://github.com/youtype/mypy_boto3_builder) | `1.42.7` | `1.43.0` |
| [mypy-boto3-sqs](https://github.com/youtype/mypy_boto3_builder) | `1.42.3` | `1.43.0` |
| [mypy-boto3-stepfunctions](https://github.com/youtype/mypy_boto3_builder) | `1.42.3` | `1.43.0` |
| [mypy-boto3-sts](https://github.com/youtype/mypy_boto3_builder) | `1.42.3` | `1.43.0` |
| [mypy-boto3-xray](https://github.com/youtype/mypy_boto3_builder) | `1.42.3` | `1.43.0` |



Updates `boto3-stubs` from 1.42.83 to 1.43.4
- [Release notes](https://github.com/youtype/mypy_boto3_builder/releases)
- [Commits](https://github.com/youtype/mypy_boto3_builder/commits)

Updates `mypy-boto3-apigateway` from 1.42.68 to 1.43.0
- [Release notes](https://github.com/youtype/mypy_boto3_builder/releases)
- [Commits](https://github.com/youtype/mypy_boto3_builder/commits)

Updates `mypy-boto3-cloudformation` from 1.42.3 to 1.43.0
- [Release notes](https://github.com/youtype/mypy_boto3_builder/releases)
- [Commits](https://github.com/youtype/mypy_boto3_builder/commits)

Updates `mypy-boto3-ecr` from 1.42.67 to 1.43.0
- [Release notes](https://github.com/youtype/mypy_boto3_builder/releases)
- [Commits](https://github.com/youtype/mypy_boto3_builder/commits)

Updates `mypy-boto3-iam` from 1.42.64 to 1.43.2
- [Release notes](https://github.com/youtype/mypy_boto3_builder/releases)
- [Commits](https://github.com/youtype/mypy_boto3_builder/commits)

Updates `mypy-boto3-kinesis` from 1.42.41 to 1.43.0
- [Release notes](https://github.com/youtype/mypy_boto3_builder/releases)
- [Commits](https://github.com/youtype/mypy_boto3_builder/commits)

Updates `mypy-boto3-lambda` from 1.42.37 to 1.43.0
- [Release notes](https://github.com/youtype/mypy_boto3_builder/releases)
- [Commits](https://github.com/youtype/mypy_boto3_builder/commits)

Updates `mypy-boto3-s3` from 1.42.80 to 1.43.0
- [Release notes](https://github.com/youtype/mypy_boto3_builder/releases)
- [Commits](https://github.com/youtype/mypy_boto3_builder/commits)

Updates `mypy-boto3-schemas` from 1.42.3 to 1.43.0
- [Release notes](https://github.com/youtype/mypy_boto3_builder/releases)
- [Commits](https://github.com/youtype/mypy_boto3_builder/commits)

Updates `mypy-boto3-secretsmanager` from 1.42.8 to 1.43.0
- [Release notes](https://github.com/youtype/mypy_boto3_builder/releases)
- [Commits](https://github.com/youtype/mypy_boto3_builder/commits)

Updates `mypy-boto3-signer` from 1.42.7 to 1.43.0
- [Release notes](https://github.com/youtype/mypy_boto3_builder/releases)
- [Commits](https://github.com/youtype/mypy_boto3_builder/commits)

Updates `mypy-boto3-sqs` from 1.42.3 to 1.43.0
- [Release notes](https://github.com/youtype/mypy_boto3_builder/releases)
- [Commits](https://github.com/youtype/mypy_boto3_builder/commits)

Updates `mypy-boto3-stepfunctions` from 1.42.3 to 1.43.0
- [Release notes](https://github.com/youtype/mypy_boto3_builder/releases)
- [Commits](https://github.com/youtype/mypy_boto3_builder/commits)

Updates `mypy-boto3-sts` from 1.42.3 to 1.43.0
- [Release notes](https://github.com/youtype/mypy_boto3_builder/releases)
- [Commits](https://github.com/youtype/mypy_boto3_builder/commits)

Updates `mypy-boto3-xray` from 1.42.3 to 1.43.0
- [Release notes](https://github.com/youtype/mypy_boto3_builder/releases)
- [Commits](https://github.com/youtype/mypy_boto3_builder/commits)

---
updated-dependencies:
- dependency-name: boto3-stubs
  dependency-version: 1.43.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: boto
- dependency-name: mypy-boto3-apigateway
  dependency-version: 1.43.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: boto
- dependency-name: mypy-boto3-cloudformation
  dependency-version: 1.43.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: boto
- dependency-name: mypy-boto3-ecr
  dependency-version: 1.43.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: boto
- dependency-name: mypy-boto3-iam
  dependency-version: 1.43.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: boto
- dependency-name: mypy-boto3-kinesis
  dependency-version: 1.43.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: boto
- dependency-name: mypy-boto3-lambda
  dependency-version: 1.43.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: boto
- dependency-name: mypy-boto3-s3
  dependency-version: 1.43.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: boto
- dependency-name: mypy-boto3-schemas
  dependency-version: 1.43.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: boto
- dependency-name: mypy-boto3-secretsmanager
  dependency-version: 1.43.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: boto
- dependency-name: mypy-boto3-signer
  dependency-version: 1.43.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: boto
- dependency-name: mypy-boto3-sqs
  dependency-version: 1.43.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: boto
- dependency-name: mypy-boto3-stepfunctions
  dependency-version: 1.43.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: boto
- dependency-name: mypy-boto3-sts
  dependency-version: 1.43.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: boto
- dependency-name: mypy-boto3-xray
  dependency-version: 1.43.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: boto
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/pip/develop/boto-05add78db7 branch from ffb0281 to d9dde6c Compare May 6, 2026 08:20
Copy link
Copy Markdown
Collaborator

@aws-sam-cli-bot aws-sam-cli-bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Code Review Results

Reviewed: a905529..d9dde6c
Files: 3
Comments: 1

boto3-stubs[apigateway, cloudformation, ecr, iam, kinesis, lambda, s3, schemas, secretsmanager, signer, sqs, stepfunctions, sts, xray]==1.42.83 \
--hash=sha256:06185ca5f11a1edc880286f5f33779a2b08be356bf270bf1ec128d0819782a20 \
--hash=sha256:1ecbd88f4ae35764b9ea3579ca1e851b67ea0a73a442cb406de277fc1478daeb
boto3-stubs[apigateway, cloudformation, ecr, iam, kinesis, lambda, s3, schemas, secretsmanager, signer, sqs, stepfunctions, sts, xray]==1.43.4 \
Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

[GENERAL] Version skew between boto3-stubs 1.43.4 and boto3 runtime 1.42.70.

This PR bumps boto3-stubs to 1.43.4 and all mypy-boto3-* packages to 1.43.x, but the boto3 runtime remains pinned at 1.42.70 (in pyproject.toml line 38 and the lock files). The botocore package also remains at 1.42.85.

The boto3-stubs project versions its type stubs to correspond to specific boto3 releases. A full minor version gap (1.42 vs 1.43) means:

  • Type stubs may reference methods, parameters, or return types added in boto3 1.43.x that don't exist in the installed 1.42.70 runtime — causing type checking to pass for code that would fail at runtime (false negatives).
  • If method signatures changed between 1.42 and 1.43, valid runtime code could be flagged as type errors (false positives).

Either boto3 should be bumped to 1.43.x to match the stubs, or the stubs should stay aligned with the current boto3==1.42.70 pin.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file pr/internal python Pull requests that update Python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant