dependabot[bot] opened a new pull request, #70606: URL: https://github.com/apache/airflow/pull/70606
Bumps the uv-dependency-updates group in /dev/breeze with 3 updates: [filelock](https://github.com/tox-dev/py-filelock), [gitpython](https://github.com/gitpython-developers/GitPython) and [boto3](https://github.com/boto/boto3). Updates `filelock` from 3.31.1 to 3.32.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/tox-dev/py-filelock/releases";>filelock's releases</a>.</em></p> <blockquote> <h2>3.32.0</h2> <!-- raw HTML omitted --> <h2>What's Changed</h2> <ul> <li>👷 ci: add Python 3.15 to the test matrix by <a href="https://github.com/gaborbernat";><code>@gaborbernat</code></a> in <a href="https://redirect.github.com/tox-dev/filelock/pull/683";>tox-dev/filelock#683</a></li> <li>🐛 fix(packaging): let an unpacked sdist run the test suite by <a href="https://github.com/gaborbernat";><code>@gaborbernat</code></a> in <a href="https://redirect.github.com/tox-dev/filelock/pull/685";>tox-dev/filelock#685</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/tox-dev/filelock/compare/3.31.2...3.32.0";>https://github.com/tox-dev/filelock/compare/3.31.2...3.32.0</a></p> <h2>3.31.2</h2> <!-- raw HTML omitted --> <h2>What's Changed</h2> <ul> <li>🐛 fix(strict): tolerate an errno without ENOTSUP by <a href="https://github.com/gaborbernat";><code>@gaborbernat</code></a> in <a href="https://redirect.github.com/tox-dev/filelock/pull/681";>tox-dev/filelock#681</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/tox-dev/filelock/compare/3.31.1...3.31.2";>https://github.com/tox-dev/filelock/compare/3.31.1...3.31.2</a></p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/tox-dev/filelock/blob/main/docs/changelog.rst";>filelock's changelog</a>.</em></p> <blockquote> <p>########### Changelog ###########</p> <p>.. towncrier-draft-entries:: Unreleased</p> <p>.. towncrier release notes start</p> <hr /> <p>3.32.1 (2026-07-26)</p> <hr /> <ul> <li>Canceling an <code>AsyncSoftReadWriteLock</code> acquire now releases the claim instead of leaking a marker whose heartbeat wedges every contender. :pr:<code>686</code></li> </ul> <hr /> <p>3.32.0 (2026-07-21)</p> <hr /> <ul> <li><code>SoftReadWriteLock</code> closes the directory handle it opens to scan for readers as soon as a scan stops early, rather than holding it until the generator is collected. :pr:<code>685</code></li> <li>Declare support for Python 3.15 and run the test suite against it and its free-threaded build, both currently in beta. :pr:<code>683</code></li> <li>The source distribution ships the capability probes the tests import, and reading one no longer needs <code>coverage</code> installed, so the suite runs from an unpacked sdist instead of failing on a missing <code>coverage_pragmas</code>. :pr:<code>685</code></li> </ul> <hr /> <p>3.31.2 (2026-07-21)</p> <hr /> <ul> <li><code>filelock</code> imports again on runtimes whose <code>errno</code> omits <code>ENOTSUP</code>, such as GraalPy, where importing the package raised <code>ImportError</code>. It probes the code instead, preferring <code>ENOTSUP</code>, falling back to <code>EOPNOTSUPP</code> where that name is absent, and dropping to <code>ENOSYS</code>/<code>EXDEV</code> where neither exists. Platforms defining <code>ENOTSUP</code> keep their behavior. :pr:<code>681</code></li> </ul> <hr /> <p>3.31.1 (2026-07-20)</p> <hr /> <ul> <li>A <code>SoftFileLease</code> acquired on one thread keeps its claim when another thread fails to acquire the same lease object, so its heartbeat carries on refreshing the marker instead of being torn down and letting a peer take the live claim. :pr:<code>680</code></li> </ul> <hr /> <p>3.31.0 (2026-07-18)</p> <hr /> <ul> <li>Support Termux/Android, whose CPython ships without <code>os.link</code> and reports <code>sys.platform == "android"</code>. <code>import filelock</code> and both <code>FileLock</code> and <code>SoftFileLock</code> now work there, <code>StrictSoftFileLock</code> reports its missing hard-link support only when acquired, and process liveness reads <code>/proc</code> on Android instead of PID-only checks. :pr:<code>678</code></li> <li><code>StrictSoftFileLock</code> no longer lets two processes hold the lock at once under heavy contention. A holder now keeps its intent claim for the whole hold, so a contender whose directory scan races the holder's freshly linked claim can no</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/tox-dev/filelock/commit/76525e6e5ca0fded86809d82096083c6c11b8b16";><code>76525e6</code></a> Release 3.32.0</li> <li><a href="https://github.com/tox-dev/filelock/commit/9824d15e01898b46231c174e06788b7469959079";><code>9824d15</code></a> 🐛 fix(packaging): let an unpacked sdist run the test suite (<a href="https://redirect.github.com/tox-dev/py-filelock/issues/685";>#685</a>)</li> <li><a href="https://github.com/tox-dev/filelock/commit/f6c41e9f467dd8483b05e1f9b04f0b0129d07fbe";><code>f6c41e9</code></a> 👷 ci: add Python 3.15 to the test matrix (<a href="https://redirect.github.com/tox-dev/py-filelock/issues/683";>#683</a>)</li> <li><a href="https://github.com/tox-dev/filelock/commit/caeb1c92f5eef9068ba8ed55cd2fb033a855ffe5";><code>caeb1c9</code></a> Release 3.31.2</li> <li><a href="https://github.com/tox-dev/filelock/commit/60eda0f9ec8b4b7efdcb429102ea8b3e7f9f9518";><code>60eda0f</code></a> 🐛 fix(strict): tolerate an errno without ENOTSUP (<a href="https://redirect.github.com/tox-dev/py-filelock/issues/681";>#681</a>)</li> <li>See full diff in <a href="https://github.com/tox-dev/py-filelock/compare/3.31.1...3.32.0";>compare view</a></li> </ul> </details> <br /> Updates `gitpython` from 3.1.53 to 3.1.55 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/gitpython-developers/GitPython/releases";>gitpython's releases</a>.</em></p> <blockquote> <h2>3.1.55 - Security</h2> <h2>What's Changed</h2> <ul> <li>fix: prevent environment expansion in remote URLs by <a href="https://github.com/Byron";><code>@Byron</code></a> in <a href="https://redirect.github.com/gitpython-developers/GitPython/pull/2181";>gitpython-developers/GitPython#2181</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/gitpython-developers/GitPython/compare/3.1.54...3.1.55";>https://github.com/gitpython-developers/GitPython/compare/3.1.54...3.1.55</a></p> <h2>3.1.54 - Security</h2> <h2>What's Changed</h2> <ul> <li>Harden unsafe Git option validation by <a href="https://github.com/Byron";><code>@Byron</code></a> in <a href="https://redirect.github.com/gitpython-developers/GitPython/pull/2180";>gitpython-developers/GitPython#2180</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/gitpython-developers/GitPython/compare/3.1.53...3.1.54";>https://github.com/gitpython-developers/GitPython/compare/3.1.53...3.1.54</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/gitpython-developers/GitPython/commit/681c82c9c296f934635c81fa8294d4b6b6791b7e";><code>681c82c</code></a> prepare release</li> <li><a href="https://github.com/gitpython-developers/GitPython/commit/e227e018661f6ff9569e2e161c326a14c6293571";><code>e227e01</code></a> Merge pull request <a href="https://redirect.github.com/gitpython-developers/GitPython/issues/2181";>#2181</a> from gitpython-developers/fix-env-var-exfiltration</li> <li><a href="https://github.com/gitpython-developers/GitPython/commit/863417457a0633db7ea5aed4fd01e0b291a41162";><code>8634174</code></a> fix: prevent environment expansion in remote URLs</li> <li><a href="https://github.com/gitpython-developers/GitPython/commit/e59d9bab02b095a97e179f47019afee95f4e3c18";><code>e59d9ba</code></a> prepare next release</li> <li><a href="https://github.com/gitpython-developers/GitPython/commit/a4dc70d4eec15825aac2dfd7484c961f6fc8491b";><code>a4dc70d</code></a> Merge pull request <a href="https://redirect.github.com/gitpython-developers/GitPython/issues/2180";>#2180</a> from gitpython-developers/single-char-kwarg</li> <li><a href="https://github.com/gitpython-developers/GitPython/commit/1d51b891d7f236044a6aa17498ec682b63dad6e6";><code>1d51b89</code></a> fix: guard diff output options</li> <li><a href="https://github.com/gitpython-developers/GitPython/commit/ffcb5359e87619f4fe4a70a4aff5f08c5580ba97";><code>ffcb535</code></a> fix: reject unsafe clone templates</li> <li><a href="https://github.com/gitpython-developers/GitPython/commit/e8d0fbf774d1f6baa3b481adfe48bd262e43b453";><code>e8d0fbf</code></a> fix: validate split short-option values</li> <li>See full diff in <a href="https://github.com/gitpython-developers/GitPython/compare/3.1.53...3.1.55";>compare view</a></li> </ul> </details> <br /> Updates `boto3` from 1.43.51 to 1.43.55 <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/boto/boto3/commit/2a09bb61f3d89224a4d9ceea1ac25320052d8592";><code>2a09bb6</code></a> Merge branch 'release-1.43.55'</li> <li><a href="https://github.com/boto/boto3/commit/ffe76ba3d1fd3c8b65d4622325f64ac9c744084a";><code>ffe76ba</code></a> Bumping version to 1.43.55</li> <li><a href="https://github.com/boto/boto3/commit/74d20c986a904773fe1b29e0773c9ba7e9c9582c";><code>74d20c9</code></a> Add changelog entries from botocore</li> <li><a href="https://github.com/boto/boto3/commit/c073381321bd3816f1af247b7e914b306597d939";><code>c073381</code></a> Merge branch 'release-1.43.54'</li> <li><a href="https://github.com/boto/boto3/commit/5e554e5a627172ba5ea27e04991ea03d62b293f2";><code>5e554e5</code></a> Merge branch 'release-1.43.54' into develop</li> <li><a href="https://github.com/boto/boto3/commit/2ad1683fd0c19f995e073ab4ebc1c4b1c465eb90";><code>2ad1683</code></a> Bumping version to 1.43.54</li> <li><a href="https://github.com/boto/boto3/commit/c613376945fa5c42bd2fbf266a17355863d929b2";><code>c613376</code></a> Add changelog entries from botocore</li> <li><a href="https://github.com/boto/boto3/commit/a939926a123d97bd842ffc6ec4a0affc35bf3d42";><code>a939926</code></a> Bump zizmorcore/zizmor-action in the github-actions group (<a href="https://redirect.github.com/boto/boto3/issues/4819";>#4819</a>)</li> <li><a href="https://github.com/boto/boto3/commit/b6042c3698a7d62da6159077fcbe984c0b02902d";><code>b6042c3</code></a> Bump <a href="https://github.com/astral-sh/ruff-pre-commit";>https://github.com/astral-sh/ruff-pre-commit</a> (<a href="https://redirect.github.com/boto/boto3/issues/4820";>#4820</a>)</li> <li><a href="https://github.com/boto/boto3/commit/d554104c35b28db00b8da474dc4d56a0703da31d";><code>d554104</code></a> Merge branch 'release-1.43.53'</li> <li>Additional commits viewable in <a href="https://github.com/boto/boto3/compare/1.43.51...1.43.55";>compare view</a></li> </ul> </details> <br /> Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions </details> -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
