Bump the dependencies group with 5 updates

[dependabot]

Bumps the dependencies group with 5 updates:

Package	From	To
boto3	1.43.102	1.43.104
aws-cdk-lib	2.270.0	2.271.0
coverage	7.16.1	7.16.2
pytest-mock	3.15.1	3.16.0
hypothesis	6.168.1	6.168.3

Updates boto3 from 1.43.102 to 1.43.104

Commits

• ca37987 Merge branch 'release-1.43.104'
• c468e3d Bumping version to 1.43.104
• f2d1bac Add changelog entries from botocore
• 0470368 Merge branch 'release-1.43.103'
• 378d670 Merge branch 'release-1.43.103' into develop
• 1b65309 Bumping version to 1.43.103
• 655adc5 Add changelog entries from botocore
• 76d6266 Merge branch 'release-1.43.102' into develop
• See full diff in compare view

Updates aws-cdk-lib from 2.270.0 to 2.271.0

Release notes

Sourced from aws-cdk-lib's releases.

v2.271.0

Features

• codebuild: add hostKernel to build environment (#38513) (deec895), closes #38338 #38338 #38275 #38338
• kinesisanalytics-flink: add support for Flink 2.2 (#37914) (a719f53), closes #37915 #37915
• lambda: add s3 object storage mode (#38745) (7c429d9), closes #38260 aws/aws-cdk#38278
• s3tables: make tableBucketName optional on TableBucket (#37749) (90e1bea), closes #37747
• render property traces with 'cdk --debug' (#38844) (da68298)

Bug Fixes

• core: upgrade CloudFormation validation to latest version (#38884) (0c5e732)
• ecs: support digest references in TagParameterContainerImage via imageDigest option (#37868) (f482f4f), closes #37718
• ssm secret.fromSsmParameter introduces W2001 warning (#38833) (9526219), closes #38396
• telemetry numbers don't allow making a good model for synth time yet (#38889) (600ffc8)
• validating CloudAssembly throws Invalid URL error (#38867) (6eb07dd)
• cloudwatch: iqm alarms are not rendered correctly (#38834) (7f714ce), closes #28812
• core: resolveReferences should only update references that require updates on its second pass in nested stacks (#38813) (6cf5313)
• core: acknowledgeWarning before emit on same construct is ignored (#38821) (e840b92), closes #38820
• core: validations.acknowledge() does not respect scopes (#38789) (2f32847), closes #38495
• ec2: synth-time AMI lookup leads to W9010 (#38840) (0870fcf), closes #38390

---

Alpha modules (2.271.0-alpha.0)

Changelog

Sourced from aws-cdk-lib's changelog.

Changelog

All notable changes to this project will be documented in this file. See standard-version for commit guidelines.

2.272.0-alpha.0 (2026-09-30)

2.271.0-alpha.0 (2026-09-25)

2.270.0-alpha.0 (2026-09-17)

2.269.0-alpha.0 (2026-09-10)

⚠ BREAKING CHANGES

• glue-alpha: Glue job constructs now reject construct-managed and Glue-reserved arguments passed through defaultArguments. Previously, a managed argument set via defaultArguments was silently honored in SparkJob and PythonShellJob (customer value won over the construct default) and silently ignored in RayJob (construct default won). Both behaviors let a caller bypass the construct's security and observability defaults with no error. Passing any of the following through defaultArguments now throws a ValidationError at synthesis time:
• construct-managed arguments — --enable-continuous-cloudwatch-log, --continuous-log-logGroup, --continuous-log-logStreamPrefix, --continuous-log-conversionPattern, --enable-continuous-log-filter, --enable-metrics, --enable-observability-metrics, --enable-spark-ui, --spark-event-logs-path, --job-language, --class, --extra-jars, --user-jars-first, --extra-py-files, --extra-files, library-set
• Glue-reserved arguments — --debug, --mode, --JOB_NAME, --endpoint

A managed argument is rejected whether or not the current configuration emits it, so a disabled feature (e.g. enableMetrics: false) cannot be re-enabled through defaultArguments. Configure these through their dedicated props instead (continuousLogging, enableMetrics, enableObservabilityMetrics, sparkUI, className, extraJars, extraJarsFirst, extraPythonFiles, extraFiles). For example, replace defaultArguments: { '--enable-continuous-cloudwatch-log': 'false' } with continuousLogging: { enabled: false }. Arguments without a dedicated prop (e.g. --enable-glue-datacatalog) are unaffected and remain settable via defaultArguments.

The checkNoReservedArgs(defaultArguments?) method on the Job base class was removed. It is replaced by two protected members: setManagedArgument(key, value?), which each job class calls to declare (and, when a value is present, emit) a managed argument, and mergeDefaultArguments(defaultArguments?), which validates the caller-supplied defaultArguments against the accumulated reserved set and returns the merged map.

• route53resolver-alpha: FirewallRuleGroupAssociation now honors the previously-ignored mutationProtection and name props. Stacks that set mutationProtection: true will enable mutation protection on redeploy (which blocks further CloudFormation update/delete until it is set back to false); stacks that set name will write it to the template, which may replace the association.
• glue-alpha: trigger Action and Condition are no longer plain objects — use Action.job(...) / Action.crawler(...) and Condition.job(...) / Condition.crawler(...). Jobs are referenced via IJobRef and crawlers via ICrawlerRef (a CfnCrawler instance or CfnCrawler.fromCrawlerName(...)) instead of a CfnCrawler field or crawler-name string; IJob now extends the generated IJobRef. addDailyScheduledTrigger/addWeeklyScheduledTrigger/addCustomScheduledTrigger are replaced by addScheduledTrigger(id, { schedule, ... }) (use TriggerSchedule.daily()/weekly()/cron(...)). addNotifyEventTrigger is renamed addEventTrigger (NotifyEventTriggerOptions → EventTriggerOptions). All addXxxTrigger methods now return ITriggerRef instead of CfnTrigger.
• glue-alpha: PartitionProjectionConfiguration's variant fields (integerRange, dateRange, interval, digits, format, intervalUnit, values) are no longer public; DATE projection now takes step: { interval, intervalUnit } instead of top-level interval/intervalUnit.
• glue-alpha: ConnectionOptions no longer has subnet, vpc, or vpcSubnets; use network: ConnectionNetwork.subnet(...) or network: ConnectionNetwork.vpc(...) instead.

Features

... (truncated)

Commits

• cc4aec7 chore(release): 2.271.0 (#38893)
• 07201f6 Update CHANGELOG.v2.md
• e79e753 chore: update analytics metadata blueprints
• 6c10596 chore(release): 2.271.0
• 0c5e732 fix(core): upgrade CloudFormation validation to latest version (#38884)
• 90e1bea feat(s3tables): make tableBucketName optional on TableBucket (#37749)
• 40de511 chore: upgrade jsii tooling to 1.140.0 to fix failing docs build (#38891)
• a719f53 feat(kinesisanalytics-flink): add support for Flink 2.2 (#37914)
• f482f4f fix(ecs): support digest references in TagParameterContainerImage via imageDi...
• 600ffc8 fix: telemetry numbers don't allow making a good model for synth time yet (#3...
• Additional commits viewable in compare view

Updates coverage from 7.16.1 to 7.16.2

Release notes

Sourced from coverage's releases.

7.16.2

Version 7.16.2 — 2026-09-27

• Fix: on Python 3.14 and later, a for loop completing immediately before a function return could mistakenly report an uncovered branch. This is now fixed, closing issue 2168.
• Fix: on Python 3.14 and later, the else clause of a try whose body is a with statement could incorrectly be reported as covered when the with raised. This is now fixed, closing issue 2289.
• Fix: with dynamic_context = test_function, test methods written as @staticmethod or @classmethod were not given a context of their own. Now they are, on Python 3.11 and later. Closes issue 1923.

➡️  PyPI page: coverage 7.16.2. :arrow_right:  To install: python3 -m pip install coverage==7.16.2

Changelog

Sourced from coverage's changelog.

Version 7.16.2 — 2026-09-27

• Fix: on Python 3.14 and later, a for loop completing immediately before a function return could mistakenly report an uncovered branch. This is now fixed, closing issue 2168_.

• Fix: on Python 3.14 and later, the else clause of a try whose body is a with statement could incorrectly be reported as covered when the with raised. This is now fixed, closing issue 2289_.

• Fix: with dynamic_context = test_function, test methods written as @staticmethod or @classmethod were not given a context of their own. Now they are, on Python 3.11 and later. Closes issue 1923_.

.. _issue 1923: coveragepy/coveragepy#1923 .. _issue 2168: coveragepy/coveragepy#2168 .. _issue 2289: coveragepy/coveragepy#2289

.. _changes_7-16-1:

Commits

• 5643ae7 docs: prep for 7.16.2
• a3e969f fix: dynamic_context for @​staticmethod and @​classmethod tests (issue 1923) (#...
• 8ad7236 fix: stop counting the try/else line when a with statement raises (#2301)
• c6dab1f fix(debug): debug output doesn't mis-handle odd line separators #2296
• 08fbc32 style: Protocols should use ... for method bodies
• bc7b0e3 refactor: positional-only args are better than pragmas
• 52afd6b Document parallel tox coverage data files (#2284)
• f653aae fix: loop completion arcs on Python 3.14 (#2281)
• cc1ced4 test: PyPy still compiles comprehensions as functions
• 85a9088 chore: make upgrade
• Additional commits viewable in compare view

Updates pytest-mock from 3.15.1 to 3.16.0

Release notes

Sourced from pytest-mock's releases.

v3.16.0

2026-09-27

• #604: Fixed duplicate_iterators=True for async functions spied with mocker.spy.
• #611: Fixed async mock assertion introspection to use awaited arguments instead of the latest call's arguments.
• #606: mocker.resetall(return_value=True, side_effect=True) now also applies to non-callable mocks, such as those returned by mocker.create_autospec(SomeClass, instance=True). Previously both arguments were silently ignored for them.
• #547: Added SpyType for annotating mocker.spy results.
• Dropped support for EOL Python 3.9.
• #147: Removed handling of RuntimeError: stop called on unstarted patcher, which can no longer occur in the supported Python versions.
• Added support for Python 3.15.

Changelog

Sourced from pytest-mock's changelog.

3.16.0

2026-09-27

• [#604](https://github.com/pytest-dev/pytest-mock/issues/604) <https://github.com/pytest-dev/pytest-mock/pull/604>_: Fixed duplicate_iterators=True for async functions spied with mocker.spy.
• [#611](https://github.com/pytest-dev/pytest-mock/issues/611) <https://github.com/pytest-dev/pytest-mock/pull/611>_: Fixed async mock assertion introspection to use awaited arguments instead of the latest call's arguments.
• [#606](https://github.com/pytest-dev/pytest-mock/issues/606) <https://github.com/pytest-dev/pytest-mock/pull/606>_: mocker.resetall(return_value=True, side_effect=True) now also applies to non-callable mocks, such as those returned by mocker.create_autospec(SomeClass, instance=True). Previously both arguments were silently ignored for them.
• [#547](https://github.com/pytest-dev/pytest-mock/issues/547) <https://github.com/pytest-dev/pytest-mock/issues/547>_: Added SpyType for annotating mocker.spy results.
• Dropped support for EOL Python 3.9.
• [#147](https://github.com/pytest-dev/pytest-mock/issues/147) <https://github.com/pytest-dev/pytest-mock/issues/147>_: Removed handling of RuntimeError: stop called on unstarted patcher, which can no longer occur in the supported Python versions.
• Added support for Python 3.15.

Commits

• f3b531f Release 3.16.0
• 71ed673 Fix duplicate_iterators for async spies (#604)
• 0797e3d Fix async assertion argument introspection (#611)
• e24c334 docs: import os in the opening usage example (#612)
• 9e7eb7b [pre-commit.ci] pre-commit autoupdate (#613)
• 445fd4d [pre-commit.ci] pre-commit autoupdate (#610)
• a8bd0b1 Honour resetall() arguments for non-callable mocks (#606)
• 6559fdf [pre-commit.ci] pre-commit autoupdate (#608)
• 466d026 [pre-commit.ci] pre-commit autoupdate (#605)
• 164defe [pre-commit.ci] pre-commit autoupdate (#603)
• Additional commits viewable in compare view

Updates hypothesis from 6.168.1 to 6.168.3

Commits

• 44b82b2 Bump hypothesis version to 6.168.3 and update changelog
• aeaafb5 Merge pull request #4888 from gpacix/fix-quadratic-statistics
• f3f4a29 wording, remove hardcoded test
• 7fabb94 Add RELEASE.rst and AUTHORS.rst changes
• 0ab4e38 Summarize statistics events in linear time
• 32ebeb2 Bump hypothesis version to 6.168.2 and update changelog
• ff7e800 Merge pull request #4886 from pschanely/atomic-constants-cache
• e57fd12 Isolate the constants cache test from existing cache files
• c8981a0 Write the local constants cache atomically
• 9c55f97 Merge pull request #4877 from HypothesisWorks/create-pull-request/patch
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions