Skip to content

Bump the python-minor-and-patch group with 4 updates - #117

Merged
bencehezso merged 1 commit into
mainfrom
dependabot/pip/python-minor-and-patch-4cf5e5ecb2
Nov 2, 2026
Merged

Bump the python-minor-and-patch group with 4 updates#117
bencehezso merged 1 commit into
mainfrom
dependabot/pip/python-minor-and-patch-4cf5e5ecb2

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 2, 2026

Copy link
Copy Markdown
Contributor

Bumps the python-minor-and-patch group with 4 updates: azure-identity, boto3, botocore and pypdf.

Updates azure-identity from 1.26.0 to 1.27.0

Release notes

Sourced from azure-identity's releases.

azure-identity_1.27.0

1.27.0 (2026-10-26)

Features Added

  • Added support for WorkloadIdentityCredential identity binding mode in AKS environments. This feature uses an AKS proxy to handle FIC exchanges on behalf of pods, addressing Entra's limit on federated identity credentials per managed identity. Enable it by constructing WorkloadIdentityCredential directly with enable_azure_proxy=True. Identity binding mode isn't supported through DefaultAzureCredential. (#43287, #44147)

Bugs Fixed

  • Fixed AzureDeveloperCliCredential to correctly parse error messages from Azure Developer CLI v1.23.7 and later, which previously caused raw JSON to surface in ClientAuthenticationError instead of the underlying error text. (#46711)
  • Fixed persistent token cache isolation on macOS when using custom cache names or CAE-enabled caches. (#49314)
  • Fixed a regression in 1.26.0 where asynchronous OnBehalfOfCredential instances could not reuse access or refresh tokens cached by another instance with the same user assertion. Cache entries are now isolated by user assertion, allowing safe reuse across instances, including with TokenCachePersistenceOptions. Existing cache entries without assertion binding require a fresh token exchange. (#49533)
Commits
  • 8e13b5e Fix azure-identity 1.27.0 changelog release date (#49707)
  • e6e5e63 [AgentServer] Prepare Core 2.3.0b2 and Invocations 1.3.0b1 releases (#49704)
  • c76f466 [AutoPR azure-mgmt-containerservice]-generated-from-SDK Generation - Python-6...
  • a7dd9f3 AgentServer invocation-local original-subject attribution (#49679)
  • c17b3ab Skip spec-PR SDK breaking-change flags before first GA release (#49702)
  • 762d184 [Identity] Prepare 1.27.0 stable release with AKS identity bindings (#49612)
  • 2b95412 Add experimental feature flag (#49682)
  • fe53432 Sync eng/common directory with azure-sdk-tools for PR 17391 (#49683)
  • 0131b83 [AutoPR azure-mgmt-datatransfer]-generated-from-SDK Generation - Python-69719...
  • 335c8fa [AutoPR azure-mgmt-redhatopenshifthcp]-generated-from-SDK Generation - Python...
  • Additional commits viewable in compare view

Updates boto3 from 1.43.118 to 1.43.122

Commits

Updates botocore from 1.43.118 to 1.43.122

Commits
  • 76af6f8 Merge branch 'release-1.43.122'
  • 88fd8aa Bumping version to 1.43.122
  • f16acbc Update to latest models
  • 3c9efec fix(s3): prevent generate_presigned_post from mutating Conditions (#3847) (#3...
  • 750c41d Update awscrt version to 0.38.0 (#3850)
  • bdcc3b1 Merge branch 'release-1.43.121'
  • 5baea76 Merge branch 'release-1.43.121' into develop
  • af1200b Bumping version to 1.43.121
  • bb0f085 Update to latest models
  • 5c6356e Merge branch 'release-1.43.120'
  • Additional commits viewable in compare view

Updates pypdf from 6.21.2 to 6.21.4

Release notes

Sourced from pypdf's releases.

Version 6.21.4, 2026-10-28

What's new

Security (SEC)

Documentation (DOC)

Full Changelog

Version 6.21.3, 2026-10-27

What's new

Security (SEC)

Performance Improvements (PI)

Bug Fixes (BUG)

Documentation (DOC)

Developer Experience (DEV)

Maintenance (MAINT)

  • Revert: Reject unsupported key lengths in the /Encrypt dictionary by @​stefan6419846

Full Changelog

Changelog

Sourced from pypdf's changelog.

Version 6.21.4, 2026-10-28

Security (SEC)

  • Limit the number of copied page attributes during flattening (#4290)
  • Detect EOF when reading standard xref table trailer (#4289)
  • Fix loop detection when cloning DictionaryObject (#4288)

Documentation (DOC)

  • Exclude performance issues from security reports (#4280)

Full Changelog

Version 6.21.3, 2026-10-27

Security (SEC)

  • Use the validated page count after decrypting a document (#4270)
  • Limit total number of cross-reference stream entries (#4269)
  • Avoid excessive error messages (#4265)

Performance Improvements (PI)

  • Read flat page label number trees once for all pages (#4251)
  • Collect the named destinations once when resolving links (#4249)
  • Avoid scanning all objects in get_outline_root (#4245)

Bug Fixes (BUG)

  • Resolve indirect widths in CID font /W arrays (#4267)

Documentation (DOC)

  • Block incremental writes of encrypted documents (#4246)

Developer Experience (DEV)

  • Update to PyPy 3.12 and pinned requirements (#4244)

Maintenance (MAINT)

  • Revert: Reject unsupported key lengths in the /Encrypt dictionary

Full Changelog

Commits
  • b2c3fa2 REL: 6.21.4
  • ea4ac66 SEC: Limit the number of copied page attributes during flattening (#4290)
  • 06593f9 SEC: Detect EOF when reading standard xref table trailer (#4289)
  • f176db1 SEC: Fix loop detection when cloning DictionaryObject (#4288)
  • c7d391c PI: Speed up transformation matrix handling for layout mode text extraction (...
  • b330dcd DEV: Bump actions/setup-python from 7.0.0 to 7.1.0 (#4278)
  • 8901534 DOC: Exclude performance issues from security reports (#4280)
  • 70eab9b PI: Speed up parse_bfchar (#4273)
  • 4ef744f ROB: Skip an embedded file specification that is not a dictionary (#4256)
  • 945216f ROB: Keep the text state when a text state operator has no operand in layout ...
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the python-minor-and-patch group with 4 updates
4aa6f7e 
Bumps the python-minor-and-patch group with 4 updates: [azure-identity](https://github.com/Azure/azure-sdk-for-python), [boto3](https://github.com/boto/boto3), [botocore](https://github.com/boto/botocore) and [pypdf](https://github.com/py-pdf/pypdf).


Updates `azure-identity` from 1.26.0 to 1.27.0
- [Release notes](https://github.com/Azure/azure-sdk-for-python/releases)
- [Commits](Azure/azure-sdk-for-python@azure-identity_1.26.0...azure-identity_1.27.0)

Updates `boto3` from 1.43.118 to 1.43.122
- [Release notes](https://github.com/boto/boto3/releases)
- [Commits](boto/boto3@1.43.118...1.43.122)

Updates `botocore` from 1.43.118 to 1.43.122
- [Commits](boto/botocore@1.43.118...1.43.122)

Updates `pypdf` from 6.21.2 to 6.21.4
- [Release notes](https://github.com/py-pdf/pypdf/releases)
- [Changelog](https://github.com/py-pdf/pypdf/blob/main/CHANGELOG.md)
- [Commits](py-pdf/pypdf@6.21.2...6.21.4)

---
updated-dependencies:
- dependency-name: azure-identity
  dependency-version: 1.27.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-minor-and-patch
- dependency-name: boto3
  dependency-version: 1.43.122
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-minor-and-patch
- dependency-name: botocore
  dependency-version: 1.43.122
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-minor-and-patch
- dependency-name: pypdf
  dependency-version: 6.21.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python-minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Nov 2, 2026
@bencehezso
bencehezso merged commit 639a39e into main Nov 2, 2026
11 checks passed
@dependabot
dependabot Bot deleted the dependabot/pip/python-minor-and-patch-4cf5e5ecb2 branch November 2, 2026 13:18
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python Pull requests that update python code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@bencehezso