[dependabot]

Warning

Dependabot will stop supporting python v3.9!

Please upgrade to one of the following versions: v3.9, v3.10, v3.11, v3.12, v3.13, or v3.14.

Updates the requirements on pymongo-auth-aws to permit the latest version.

Release notes

Sourced from pymongo-auth-aws's releases.

pymongo-auth-aws 1.3.0

What's Changed

• PYTHON-4548 Test against Python 3.13 beta by @​blink1073 in mongodb/pymongo-auth-aws#34
• PYTHON-4541 Add attestations for Python Releases by @​blink1073 in mongodb/pymongo-auth-aws#35
• PYTHON-4761 Add support for Python 3.13 by @​blink1073 in mongodb/pymongo-auth-aws#36

Full Changelog: mongodb/pymongo-auth-aws@1.2.0...1.3.0

Changelog

Sourced from pymongo-auth-aws's changelog.

Changes in Version 1.3.0

• Add support for Python 3.13.

Changes in Version 1.2.0

• Support Python versions 3.8-3.12, to align with PyMongo 4 supported versions. Drop support for Python 2.7, 3.4, 3.5, 3.6, and 3.7.
• Add Secure Software Development Life Cycle automation to release process. GitHub Releases now include a Software Bill of Materials, and signature files corresponding to the distribution files released on PyPI.

Changes in Version 1.1.0

• Use boto3 to handle credentials, expanding and standardizing authorization capabilities. This includes EKS IAM credentials that use AssumeRoleWithWebIdentity.
• Enable opt-in caching of fetched on-demand credentials, to prevent rate limiting.
• Make the pymongo_auth_aws.auth.aws_temp_credentials function public so it can be used in pymongocrypt.

Notes ..... Because we are now using boto3 to handle credentials, the order and locations of credentials are slightly different from before. Particularly, if you have a shared AWS credentials or config file, then those credentials will be used by default if AWS auth environment variables are not set. To override this behavior, set AWS_SHARED_CREDENTIALS_FILE="" in your shell or add os.environ["AWS_SHARED_CREDENTIALS_FILE"] = "" to your script or application. Alternatively, you can create an AWS profile specifically for your MongoDB credentials and set AWS_PROFILE to that profile name.

Changes in Version 1.0.2

• Fix a bug which caused MONGODB-AWS authentication to fail in some EC2 Instance configurations. Previous versions incorrectly used a POST request when creating the session token for Instance Metadata Service Version 2 (IMDSv2).

Changes in Version 1.0.1

• Fix a bug which caused authentication to fail when using non-default STS hosts with more than one dot (.). For example,

... (truncated)

Commits

• 6ae9b51 BUMP 1.3.0
• adceb67 PYTHON-4761 Add support for Python 3.13 (#36)
• 890430b PYTHON-4541 Add attestations for Python Releases (#35)
• 53e5d18 PYTHON-4548 Test against Python 3.13 beta (#34)
• 5633908 BUMP 1.3.0.dev0
• cce03d3 BUMP 1.2.0
• 83a35c8 BUMP 1.2.0dev2
• 74664f0 BUMP 1.2.0rc2
• 000e2f7 BUMP 1.2.0rc1
• e19f56d BUMP 1.3.0.dev0
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[codecov-commenter]

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!