Bump the all-dependencies group in /api with 5 updates

[dependabot]

Bumps the all-dependencies group in /api with 5 updates:

Package	From	To
boto3	1.28.62	1.28.63
botocore	1.31.62	1.31.63
sqlalchemy	2.0.21	2.0.22
pre-commit	3.4.0	3.5.0
pip	23.2.1	23.3

Updates boto3 from 1.28.62 to 1.28.63

Changelog

Sourced from boto3's changelog.

1.28.63

• api-change:auditmanager: [botocore] This release introduces a new limit to the awsAccounts parameter. When you create or update an assessment, there is now a limit of 200 AWS accounts that can be specified in the assessment scope.
• api-change:autoscaling: [botocore] Update the NotificationMetadata field to only allow visible ascii characters. Add paginators to DescribeInstanceRefreshes, DescribeLoadBalancers, and DescribeLoadBalancerTargetGroups
• api-change:config: [botocore] Add enums for resource types supported by Config
• api-change:controltower: [botocore] Added new EnabledControl resource details to ListEnabledControls API and added new GetEnabledControl API.
• api-change:customer-profiles: [botocore] Adds sensitive trait to various shapes in Customer Profiles Calculated Attribute API model.
• api-change:ec2: [botocore] This release adds Ubuntu Pro as a supported platform for On-Demand Capacity Reservations and adds support for setting an Amazon Machine Image (AMI) to disabled state. Disabling the AMI makes it private if it was previously shared, and prevents new EC2 instance launches from it.
• api-change:elbv2: [botocore] Update elbv2 client to latest version
• api-change:glue: [botocore] Extending version control support to GitLab and Bitbucket from AWSGlue
• api-change:inspector2: [botocore] Add MacOs ec2 platform support
• api-change:ivs-realtime: [botocore] Update GetParticipant to return additional metadata.
• api-change:lambda: [botocore] Adds support for Lambda functions to access Dual-Stack subnets over IPv6, via an opt-in flag in CreateFunction and UpdateFunctionConfiguration APIs
• api-change:location: [botocore] This release adds endpoint updates for all AWS Location resource operations.
• api-change:machinelearning: [botocore] This release marks Password field as sensitive
• api-change:pricing: [botocore] Documentation updates for Price List
• api-change:rds: [botocore] This release adds support for adding a dedicated log volume to open-source RDS instances.
• api-change:rekognition: [botocore] Amazon Rekognition introduces support for Custom Moderation. This allows the enhancement of accuracy for detect moderation labels operations by creating custom adapters tuned on customer data.
• api-change:sagemaker: [botocore] Amazon SageMaker Canvas adds KendraSettings and DirectDeploySettings support for CanvasAppSettings
• api-change:textract: [botocore] This release adds 9 new APIs for adapter and adapter version management, 3 new APIs for tagging, and updates AnalyzeDocument and StartDocumentAnalysis API parameters for using adapters.
• api-change:transcribe: [botocore] This release is to enable m4a format to customers
• api-change:workspaces: [botocore] Updated the CreateWorkspaces action documentation to clarify that the PCoIP protocol is only available for Windows bundles.

Commits

• d296dbc Merge branch 'release-1.28.63'
• 8d823b5 Bumping version to 1.28.63
• 782ca6f Add changelog entries from botocore
• 68c9879 Merge branch 'release-1.28.62' into develop
• See full diff in compare view

Updates botocore from 1.31.62 to 1.31.63

Changelog

Sourced from botocore's changelog.

1.31.63

• api-change:auditmanager: This release introduces a new limit to the awsAccounts parameter. When you create or update an assessment, there is now a limit of 200 AWS accounts that can be specified in the assessment scope.
• api-change:autoscaling: Update the NotificationMetadata field to only allow visible ascii characters. Add paginators to DescribeInstanceRefreshes, DescribeLoadBalancers, and DescribeLoadBalancerTargetGroups
• api-change:config: Add enums for resource types supported by Config
• api-change:controltower: Added new EnabledControl resource details to ListEnabledControls API and added new GetEnabledControl API.
• api-change:customer-profiles: Adds sensitive trait to various shapes in Customer Profiles Calculated Attribute API model.
• api-change:ec2: This release adds Ubuntu Pro as a supported platform for On-Demand Capacity Reservations and adds support for setting an Amazon Machine Image (AMI) to disabled state. Disabling the AMI makes it private if it was previously shared, and prevents new EC2 instance launches from it.
• api-change:elbv2: Update elbv2 client to latest version
• api-change:glue: Extending version control support to GitLab and Bitbucket from AWSGlue
• api-change:inspector2: Add MacOs ec2 platform support
• api-change:ivs-realtime: Update GetParticipant to return additional metadata.
• api-change:lambda: Adds support for Lambda functions to access Dual-Stack subnets over IPv6, via an opt-in flag in CreateFunction and UpdateFunctionConfiguration APIs
• api-change:location: This release adds endpoint updates for all AWS Location resource operations.
• api-change:machinelearning: This release marks Password field as sensitive
• api-change:pricing: Documentation updates for Price List
• api-change:rds: This release adds support for adding a dedicated log volume to open-source RDS instances.
• api-change:rekognition: Amazon Rekognition introduces support for Custom Moderation. This allows the enhancement of accuracy for detect moderation labels operations by creating custom adapters tuned on customer data.
• api-change:sagemaker: Amazon SageMaker Canvas adds KendraSettings and DirectDeploySettings support for CanvasAppSettings
• api-change:textract: This release adds 9 new APIs for adapter and adapter version management, 3 new APIs for tagging, and updates AnalyzeDocument and StartDocumentAnalysis API parameters for using adapters.
• api-change:transcribe: This release is to enable m4a format to customers
• api-change:workspaces: Updated the CreateWorkspaces action documentation to clarify that the PCoIP protocol is only available for Windows bundles.

Commits

• 8e4c2fe Merge branch 'release-1.31.63'
• ef4879c Bumping version to 1.31.63
• 3b029a4 Update to latest partitions and endpoints
• a53e124 Update to latest models
• f0ff061 Remove deprecated strict poolmanager kwarg (#3036)
• 9513529 Merge pull request #3035 from SamRemis/bugfix-accept-type-metadata
• 9b401c7 Merge branch 'release-1.31.62' into develop
• dccfc8d add back line
• 95f381b Sanitize __type metadata out of response parsing for tagged unions
• See full diff in compare view

Updates sqlalchemy from 2.0.21 to 2.0.22

Release notes

Sourced from sqlalchemy's releases.

2.0.22

Released: October 12, 2023

orm

• [orm] [usecase] Added method _orm.Session.get_one() that behaves like _orm.Session.get() but raises an exception instead of returning None if no instance was found with the provided primary key. Pull request courtesy of Carlos Sousa.

  References: #10202

• [orm] [usecase] Added an option to permanently close sessions. Set to False the new parameter _orm.Session.close_resets_only will prevent a _orm.Session from performing any other operation after _orm.Session.close() has been called.

  Added new method _orm.Session.reset() that will reset a _orm.Session to its initial state. This is an alias of _orm.Session.close(), unless _orm.Session.close_resets_only is set to False.

  References: #7787

• [orm] [bug] Fixed a wide range of _orm.mapped_column() parameters that were not being transferred when using the _orm.mapped_column() object inside of a pep-593 Annotated object, including _orm.mapped_column.sort_order, _orm.mapped_column.deferred, _orm.mapped_column.autoincrement, _orm.mapped_column.system, _orm.mapped_column.info etc.

  Additionally, it remains not supported to have dataclass arguments, such as _orm.mapped_column.kw_only, _orm.mapped_column.default_factory etc. indicated within the _orm.mapped_column() received by Annotated, as this is not supported with pep-681 Dataclass Transforms. A warning is now emitted when these parameters are used within Annotated in this way (and they continue to be ignored).

  References: #10046, #10369

• [orm] [bug] Fixed issue where calling _engine.Result.unique() with a new-style select() query in the ORM, where one or more columns yields values that are of "unknown hashability", typically when using JSON functions like func.json_build_object() without providing a type, would fail internally when the returned values were not actually hashable. The behavior is repaired to test the objects as they are received for

... (truncated)

Commits

• See full diff in compare view

Updates pre-commit from 3.4.0 to 3.5.0

Release notes

Sourced from pre-commit's releases.

pre-commit v3.5.0

Features

• Improve performance of check-hooks-apply and check-useless-excludes.
  • #2998 PR by @​mxr.
  • #2935 issue by @​mxr.

Fixes

• Use time.monotonic() for more accurate hook timing.
  • #3024 PR by @​adamchainz.

Migrating

• Require npm 6.x+ for language: node hooks.
  • #2996 PR by @​RoelAdriaans.
  • #1983 issue by @​henryiii.

Changelog

Sourced from pre-commit's changelog.

3.5.0 - 2023-10-13

Features

• Improve performance of check-hooks-apply and check-useless-excludes.
  • #2998 PR by @​mxr.
  • #2935 issue by @​mxr.

Fixes

• Use time.monotonic() for more accurate hook timing.
  • #3024 PR by @​adamchainz.

Migrating

• Require npm 6.x+ for language: node hooks.
  • #2996 PR by @​RoelAdriaans.
  • #1983 issue by @​henryiii.

Commits

• 61cc55a v3.5.0
• c9945b9 Merge pull request #3029 from adamchainz/improve_duration_timing
• d988767 Improve hook duration timing
• 0d8b245 Merge pull request #3023 from pre-commit/pre-commit-ci-update-config
• 155c521 [pre-commit.ci] pre-commit autoupdate
• 676e51a Merge pull request #3024 from pre-commit/pick-shebang-path-without-spaces
• 997ea0a use sys.executable instead of echo.exe in parse_shebang
• 19aa121 Merge pull request #3016 from pre-commit/pre-commit-ci-update-config
• a4ab977 [pre-commit.ci] pre-commit autoupdate
• 3f3760b Merge pull request #3011 from hack3ric/bump-node-and-go-version
• Additional commits viewable in compare view

Updates pip from 23.2.1 to 23.3

Changelog

Sourced from pip's changelog.

23.3 (2023-10-15)

Process

• Added reference to vulnerability reporting guidelines <https://www.python.org/dev/security/>_ to pip's security policy.

Deprecations and Removals

• Drop a fallback to using SecureTransport on macOS. It was useful when pip detected OpenSSL older than 1.0.1, but the current pip does not support any Python version supporting such old OpenSSL versions. ([#12175](https://github.com/pypa/pip/issues/12175) <https://github.com/pypa/pip/issues/12175>_)

Features

• Improve extras resolution for multiple constraints on same base package. ([#11924](https://github.com/pypa/pip/issues/11924) <https://github.com/pypa/pip/issues/11924>_)
• Improve use of datastructures to make candidate selection 1.6x faster. ([#12204](https://github.com/pypa/pip/issues/12204) <https://github.com/pypa/pip/issues/12204>_)
• Allow pip install --dry-run to use platform and ABI overriding options. ([#12215](https://github.com/pypa/pip/issues/12215) <https://github.com/pypa/pip/issues/12215>_)
• Add is_yanked boolean entry to the installation report (--report) to indicate whether the requirement was yanked from the index, but was still selected by pip conform to :pep:592. ([#12224](https://github.com/pypa/pip/issues/12224) <https://github.com/pypa/pip/issues/12224>_)

Bug Fixes

• Ignore errors in temporary directory cleanup (show a warning instead). ([#11394](https://github.com/pypa/pip/issues/11394) <https://github.com/pypa/pip/issues/11394>_)
• Normalize extras according to :pep:685 from package metadata in the resolver for comparison. This ensures extras are correctly compared and merged as long as the package providing the extra(s) is built with values normalized according to the standard. Note, however, that this does not solve cases where the package itself contains unnormalized extra values in the metadata. ([#11649](https://github.com/pypa/pip/issues/11649) <https://github.com/pypa/pip/issues/11649>_)
• Prevent downloading sdists twice when :pep:658 metadata is present. ([#11847](https://github.com/pypa/pip/issues/11847) <https://github.com/pypa/pip/issues/11847>_)
• Include all requested extras in the install report (--report). ([#11924](https://github.com/pypa/pip/issues/11924) <https://github.com/pypa/pip/issues/11924>_)
• Removed uses of datetime.datetime.utcnow from non-vendored code. ([#12005](https://github.com/pypa/pip/issues/12005) <https://github.com/pypa/pip/issues/12005>_)
• Consistently report whether a dependency comes from an extra. ([#12095](https://github.com/pypa/pip/issues/12095) <https://github.com/pypa/pip/issues/12095>_)
• Fix completion script for zsh ([#12166](https://github.com/pypa/pip/issues/12166) <https://github.com/pypa/pip/issues/12166>_)
• Fix improper handling of the new onexc argument of shutil.rmtree() in Python 3.12. ([#12187](https://github.com/pypa/pip/issues/12187) <https://github.com/pypa/pip/issues/12187>_)
• Filter out yanked links from the available versions error message: "(from versions: 1.0, 2.0, 3.0)" will not contain yanked versions conform PEP 592. The yanked versions (if any) will be mentioned in a separate error message. ([#12225](https://github.com/pypa/pip/issues/12225) <https://github.com/pypa/pip/issues/12225>_)
• Fix crash when the git version number contains something else than digits and dots. ([#12280](https://github.com/pypa/pip/issues/12280) <https://github.com/pypa/pip/issues/12280>_)
• Use -r=... instead of -r ... to specify references with Mercurial. ([#12306](https://github.com/pypa/pip/issues/12306) <https://github.com/pypa/pip/issues/12306>_)
• Redact password from URLs in some additional places. ([#12350](https://github.com/pypa/pip/issues/12350) <https://github.com/pypa/pip/issues/12350>_)
• pip uses less memory when caching large packages. As a result, there is a new on-disk cache format stored in a new directory ($PIP_CACHE_DIR/http-v2). ([#2984](https://github.com/pypa/pip/issues/2984) <https://github.com/pypa/pip/issues/2984>_)

Vendored Libraries

• Upgrade certifi to 2023.7.22
• Add truststore 0.8.0
• Upgrade urllib3 to 1.26.17

Improved Documentation

... (truncated)

Commits

• e3dc91d Bump for release
• 3e85558 Update AUTHORS.txt
• 8d02787 Reclassify news fragment
• f6ecf40 Merge pull request #12350 from sbidoul/readact-collecting-url
• 3060865 Merge pull request #12335 from edmorley/patch-1
• 8f0ed32 Redact URLs in Collecting... logs
• d1659b8 Correct issue number for NEWS entry added by #12197
• 2333ef3 Upgrade urllib3 to 1.26.17 (#12343)
• 496b268 Update "Running Tests" documentation (#12334)
• d1f0981 Merge pull request #12331 from sbidoul/update-egg-deprecation-message
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions