Skip to content

Chore(deps): Bump the cosmetology-python-minor-patch group across 7 directories with 10 updates - #1784

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/backend/cosmetology-app/cosmetology-python-minor-patch-1f4e52d8ce
Open

Chore(deps): Bump the cosmetology-python-minor-patch group across 7 directories with 10 updates#1784
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/backend/cosmetology-app/cosmetology-python-minor-patch-1f4e52d8ce

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 27, 2026

Copy link
Copy Markdown
Contributor

Bumps the cosmetology-python-minor-patch group with 5 updates in the /backend/cosmetology-app directory:

Package From To
constructs 10.6.0 10.7.0
coverage 7.15.1 7.15.2
faker 40.28.1 40.31.0
pip-tools 7.5.3 7.6.0
ruff 0.15.21 0.15.22

Bumps the cosmetology-python-minor-patch group with 5 updates in the /backend/cosmetology-app/lambdas/python directory:

Package From To
faker 40.28.1 40.31.0
boto3 1.43.46 1.43.51
aws-lambda-powertools 3.31.0 3.31.1
boto3-stubs 1.43.46 1.43.51
statsig-python-core 0.19.8 0.20.1

Bumps the cosmetology-python-minor-patch group with 2 updates in the /backend/cosmetology-app/lambdas/python/cognito-backup directory: boto3 and aws-lambda-powertools.
Bumps the cosmetology-python-minor-patch group with 4 updates in the /backend/cosmetology-app/lambdas/python/common directory: faker, boto3, aws-lambda-powertools and boto3-stubs.
Bumps the cosmetology-python-minor-patch group with 1 update in the /backend/cosmetology-app/lambdas/python/feature-flag directory: statsig-python-core.
Bumps the cosmetology-python-minor-patch group with 1 update in the /backend/cosmetology-app/lambdas/python/provider-data-v1 directory: faker.
Bumps the cosmetology-python-minor-patch group with 1 update in the /backend/cosmetology-app/lambdas/python/staff-users directory: faker.

Updates constructs from 10.6.0 to 10.7.0

Release notes

Sourced from constructs's releases.

v10.7.0

10.7.0 (2026-07-15)

Features

Commits

Updates coverage from 7.15.1 to 7.15.2

Release notes

Sourced from coverage's releases.

7.15.2

Version 7.15.2 — 2026-07-15

  • Fix: one of the performance improvements in 7.15.1 (pull 2215) dramatically increased memory use during reporting for large projects. Now we use a different approach that is both faster and slimmer than 7.15.0. Fixes issue 2229.

➡️  PyPI page: coverage 7.15.2. :arrow_right:  To install: python3 -m pip install coverage==7.15.2

Changelog

Sourced from coverage's changelog.

Version 7.15.2 — 2026-07-15

  • Fix: one of the performance improvements in 7.15.1 (pull 2215) dramatically increased memory use during reporting for large projects. Now we use a different approach that is both faster and slimmer than 7.15.0. Fixes issue 2229_.

.. _issue 2229: coveragepy/coveragepy#2229

.. _changes_7-15-1:

Commits

Updates faker from 40.28.1 to 40.31.0

Release notes

Sourced from faker's releases.

Release v40.31.0

See CHANGELOG.md.

Release v40.30.0

See CHANGELOG.md.

Release v40.29.0

See CHANGELOG.md.

Changelog

Sourced from faker's changelog.

v40.31.0 - 2026-07-14

  • Fix: correct BBAN length so pt_BR iban() generates valid Brazilian IBANs (#2410). Thanks @​CedricConday.

v40.30.0 - 2026-07-14

v40.29.0 - 2026-07-14

Commits
  • f4e52ff Bump version: 40.30.0 → 40.31.0
  • 04178ff 📝 Update CHANGELOG.md
  • ddc750d fix(pt_BR): correct BBAN length so iban() generates valid Brazilian IBANs (#2...
  • 9d50609 Bump version: 40.29.0 → 40.30.0
  • 69ac24f 📝 Update CHANGELOG.md
  • d705211 fix(nl_BE): generate valid Belgian bank codes so iban() passes stdnum validat...
  • ff430d7 Fix typo: seperator -> separator in file provider (#2423)
  • 902095d Docs: Add faker-observability-provider to community providers (#2421)
  • a3bd9d1 Bump version: 40.28.1 → 40.29.0
  • f22e79c 📝 Update CHANGELOG.md
  • Additional commits viewable in compare view

Updates pip-tools from 7.5.3 to 7.6.0

Release notes

Sourced from pip-tools's releases.

v7.6.0

2026-07-13

Features

  • The --help output for pip-compile and pip-sync commands has been extended to include usage examples -- by @​Dzhud.

    PRs and issues: #1142

  • Added --uploaded-prior-to as a passthrough option for pip-compile, allowing users to restrict package candidates to versions uploaded before a given datetime. Requires pip >= 26.0 -- by @​miettal.

    PRs and issues: #2288

  • pip-tools is now compatible with pip 26.1 -- @​gaborbernat.

    PRs and issues: #2379

Improved documentation

  • Fixed the contents sidebar for the index doc -- by @​sirosen.

    PRs and issues: #2169

  • pip-tools now has a policy regarding LLM-generated contributions, noted in the contributing documentation -- by @​sirosen.

    Thanks to @​0cjs, @​gpshead, mr-@​c, @​samdoran, @​webknjaz, and everyone else in the broader community who helped us to craft a policy which is considerate of contributors and protective of the project and its maintainers.

    PRs and issues: #2318

  • pip-tools' documentation now features a section titled "Reference" covering the CLI commands and configuration. Configuration documentation has been removed from the readme.

    -- by @​sirosen

Contributor-facing changes

  • CI testing now runs on Intel and ARM macOS runners, and is pinned to a specific macOS version -- by @​sirosen.

    PRs and issues: #2079, #2132, #2348

  • pip-tools now has a policy regarding LLM-generated contributions, noted in the contributing documentation -- by @​sirosen.

    Thanks to @​0cjs, @​gpshead, mr-@​c, @​samdoran, @​webknjaz, and everyone else in the broader community who helped us to craft a policy which is considerate of contributors and protective of the project and its maintainers.

    PRs and issues: #2278, #2318

  • Started running {pypi}zizmor as a part of CI pipelines to improve security of how we configure GitHub Actions CI/CD -- by @​webknjaz.

    PRs and issues: #2327

  • pip-tools docs now support GitHub Flavored Markdown admonition blocks -- by @​webknjaz.

... (truncated)

Changelog

Sourced from pip-tools's changelog.

v7.6.0

2026-07-13

Features

  • The --help output for pip-compile and pip-sync commands has been extended to include usage examples -- by {user}Dzhud.

    PRs and issues: {issue}1142

  • Added --uploaded-prior-to as a passthrough option for pip-compile, allowing users to restrict package candidates to versions uploaded before a given datetime. Requires pip >= 26.0 -- by {user}miettal.

    PRs and issues: {issue}2288

  • pip-tools is now compatible with pip 26.1 -- {user}gaborbernat.

    PRs and issues: {issue}2379

Improved documentation

  • Fixed the contents sidebar for the index doc -- by {user}sirosen.

    PRs and issues: {issue}2169

  • pip-tools now has a policy regarding LLM-generated contributions, noted in the contributing documentation -- by {user}sirosen.

    Thanks to {user}0cjs, {user}gpshead, {user}mr-c, {user}samdoran, {user}webknjaz, and everyone else in the broader community who helped us to craft a policy which is considerate of contributors and protective of the project and its maintainers.

    PRs and issues: {issue}2318

  • pip-tools' documentation now features a section titled "Reference" covering the CLI commands and configuration. Configuration documentation has been removed from the readme.

    -- by {user}sirosen

Contributor-facing changes

  • CI testing now runs on Intel and ARM macOS runners, and is pinned to a specific macOS version -- by {user}sirosen.

    PRs and issues: {issue}2079, {issue}2132, {issue}2348

... (truncated)

Commits
  • 27f6a96 Merge pull request #2420 from sirosen/release/v7.6.0
  • cbe77f0 Apply suggestions from code review
  • 015146e Update changelog for version 7.6.0
  • 9a2d2c1 Merge pull request #2414 from jazzband/pre-commit-ci-update-config
  • fc3f877 Merge pull request #2418 from jazzband/dependabot/pip/docs/soupsieve-2.8.4
  • 5247a6b [pre-commit.ci] pre-commit autoupdate
  • 3d1faf6 Bump soupsieve from 2.8.3 to 2.8.4 in /docs
  • 57637db Merge pull request #2419 from sirosen/fix-test-failure
  • 4695c37 Fix the fake_with_deps test package
  • 24f4230 Merge pull request #2413 from webknjaz/maintenance/nested-zizmor-gha-workflow...
  • Additional commits viewable in compare view

Updates ruff from 0.15.21 to 0.15.22

Release notes

Sourced from ruff's releases.

0.15.22

Release Notes

Released on 2026-07-16.

Preview features

  • [pycodestyle] Add an autofix for E402 (#22212)
  • [refurb] Allow subclassing builtins in stub files (FURB189) (#26812)
  • [ruff] Add rule to replace noqa comments with ruff:ignore (RUF105) (#26423)
  • [ruff] Add rule to use human-readable names in ruff:ignore comments (RUF106) (#26682)
  • [ruff] Add rule to use human-readable names in configuration selectors (RUF201) (#26772)

Bug fixes

  • [flake8-pyi] Fix false positive in __all__ (PYI053) (#26872)

Rule changes

  • [pylint] Ignore mutable type updates in redefined-loop-name (PLW2901) (#25733)

Performance

  • Avoid redundant lexer token bookkeeping (#26765)
  • Avoid redundant pending-indentation writes (#26774)
  • Avoid unnecessary identifier lookahead (#26525)
  • Reuse parser scratch buffers (#26798)

Documentation

  • Document argfile support (#26803)
  • [flake8-datetimez] Clarify naming guidance for datetime.today (DTZ002) (#26658)
  • [pycodestyle] Document E731 fix safety (#26847)
  • [ruff] Clarify intentional async contexts for unused-async (RUF029) (#26641)

Contributors

Install ruff 0.15.22

Install prebuilt binaries via shell script

</tr></table>

... (truncated)

Changelog

Sourced from ruff's changelog.

0.15.22

Released on 2026-07-16.

Preview features

  • [pycodestyle] Add an autofix for E402 (#22212)
  • [refurb] Allow subclassing builtins in stub files (FURB189) (#26812)
  • [ruff] Add rule to replace noqa comments with ruff:ignore (RUF105) (#26423)
  • [ruff] Add rule to use human-readable names in ruff:ignore comments (RUF106) (#26682)
  • [ruff] Add rule to use human-readable names in configuration selectors (RUF201) (#26772)

Bug fixes

  • [flake8-pyi] Fix false positive in __all__ (PYI053) (#26872)

Rule changes

  • [pylint] Ignore mutable type updates in redefined-loop-name (PLW2901) (#25733)

Performance

  • Avoid redundant lexer token bookkeeping (#26765)
  • Avoid redundant pending-indentation writes (#26774)
  • Avoid unnecessary identifier lookahead (#26525)
  • Reuse parser scratch buffers (#26798)

Documentation

  • Document argfile support (#26803)
  • [flake8-datetimez] Clarify naming guidance for datetime.today (DTZ002) (#26658)
  • [pycodestyle] Document E731 fix safety (#26847)
  • [ruff] Clarify intentional async contexts for unused-async (RUF029) (#26641)

Contributors

Commits

Updates faker from 40.28.1 to 40.31.0

Release notes

Sourced from faker's releases.

Release v40.31.0

See CHANGELOG.md.

Release v40.30.0

See CHANGELOG.md.

Release v40.29.0

See CHANGELOG.md.

Changelog

Sourced from faker's changelog.

v40.31.0 - 2026-07-14

  • Fix: correct BBAN length so pt_BR iban() generates valid Brazilian IBANs (#2410). Thanks @​CedricConday.

v40.30.0 - 2026-07-14

v40.29.0 - 2026-07-14

Commits
  • f4e52ff Bump version: 40.30.0 → 40.31.0
  • 04178ff 📝 Update CHANGELOG.md
  • ddc750d fix(pt_BR): correct BBAN length so iban() generates valid Brazilian IBANs (#2...
  • 9d50609 Bump version: 40.29.0 → 40.30.0
  • 69ac24f 📝 Update CHANGELOG.md
  • d705211 fix(nl_BE): generate valid Belgian bank codes so iban() passes stdnum validat...
  • ff430d7 Fix typo: seperator -> separator in file provider (#2423)
  • 902095d Docs: Add faker-observability-provider to community providers (#2421)
  • a3bd9d1 Bump version: 40.28.1 → 40.29.0
  • f22e79c 📝 Update CHANGELOG.md
  • Additional commits viewable in compare view

Updates boto3 from 1.43.46 to 1.43.51

Commits
  • 09cf399 Merge branch 'release-1.43.51'
  • b8f600d Bumping version to 1.43.51
  • f0973ec Add changelog entries from botocore
  • a8ae7f0 Merge branch 'release-1.43.50'
  • acbe14c Merge branch 'release-1.43.50' into develop
  • b8c36a9 Bumping version to 1.43.50
  • fa19980 Add changelog entries from botocore
  • 2ce2fd5 Merge branch 'release-1.43.49'
  • d2937da Merge branch 'release-1.43.49' into develop
  • 159cb6a Bumping version to 1.43.49
  • Additional commits viewable in compare view

Updates botocore from 1.43.46 to 1.43.51

Commits

Updates aws-lambda-powertools from 3.31.0 to 3.31.1

Release notes

Sourced from aws-lambda-powertools's releases.

v3.31.1

Summary

This release fixes bugs across Circuit Breaker, Event Handler, Parser, and the Event Source data classes. Super thanks to @​Iamrodos for running the Circuit Breaker alpha for real and finding the concurrency and configuration issues fixed here.

Changes

📜 Documentation updates

  • chore(deps): bump soupsieve from 2.7 to 2.8.4 in /docs (#8328) by @dependabot[bot]
  • fix(circuit_breaker): make probe election per-thread and synchronize local counters (#8323) by @​Iamrodos
  • feat(circuit_breaker): support composite primary key in DynamoDB persistence (#8316) by @​Iamrodos

🔧 Maintenance

This release was made possible by the following contributors:

@​Iamrodos, @​amin-farjadi, @​dependabot[bot], @​exg, @​github-actions[bot], @​leandrodamascena, @​stenczelt, dependabot[bot] and github-actions[bot]

Changelog

Sourced from aws-lambda-powertools's changelog.

[v3.31.1] - 2026-07-13

Maintenance

  • version bump
  • data-masking: bump encryption sdk version (#8335)

Commits
  • a75380a chore: version bump
  • 71d58f1 chore(data-masking): bump encryption sdk version (#8335)
  • 5bc8d00 fix(event_handler): resolve dependency injection failure with arbitrary retur...
  • a9fce32 fix(event_source): mypy strict mode compliance (#8332)
  • dd8918f chore(deps): bump soupsieve from 2.7 to 2.8.4 in /docs (#8328)
  • 8a0ae64 chore(deps-dev): bump soupsieve from 2.7 to 2.8.4 (#8329)
  • 2fd212d chore(deps-dev): bump requests from 2.33.1 to 2.34.2 (#8313)
  • 3226710 chore(deps-dev): bump filelock from 3.29.0 to 3.29.7 (#8314)
  • 6b41dc8 chore(deps): bump protobuf from 7.34.1 to 7.35.1 (#8312)
  • 2a014a3 chore(deps-dev): bump types-python-dateutil from 2.9.0.20260508 to 2.9.0.2026...
  • Additional commits viewable in compare view

Updates boto3-stubs from 1.43.46 to 1.43.51

Release notes

Sourced from boto3-stubs's releases.

8.8.0 - Python 3.8 runtime is back

Changed

  • [services] install_requires section is calculated based on dependencies in use, so typing-extensions version is set properly
  • [all] Replaced typing imports with collections.abc with a fallback to typing for Python <3.9
  • [all] Added aliases for builtins.list, builtins.set, builtins.dict, and builtins.type, so Python 3.8 runtime should work as expected again (reported by @​YHallouard in #340 and @​Omri-Ben-Yair in #336)
  • [all] Unions use the same type annotations as the rest of the structures due to proper fallbacks

Fixed

  • [services] Universal input/output shapes were not replaced properly in service subresources
  • [docs] Simplified doc links rendering for services
  • [services] Cleaned up unnecessary imports in client.pyi
  • [builder] Import records with fallback are always rendered
Commits

Updates statsig-python-core from 0.19.8 to 0.20.1

Release notes

Sourced from statsig-python-core's releases.

0.20.1 - -Free Evaluation Hot Path (High-Concurrency Perf), Sticky-Value Enforce Options (Rust/Java), Exposure Dedupe Cap in All Bindings

Breaking Changes

  • N/A

New Features

  • Rust:
    • enforce_overrides / enforce_targeting on ExperimentEvaluationOptions and LayerEvaluationOptions — when a user has a persisted sticky value, a matching console override rule (enforce_overrides) or a failed targeting re-check (enforce_targeting) now takes precedence over the persisted value, mirroring the legacy Java server SDK's sticky-evaluation behavior. Defaults unchanged (both off).
  • Java:
    • GetExperimentOptions / GetLayerOptions gain enforceOverrides + enforceTargeting (new four-arg constructor; existing constructors unchanged, flags default to false).
  • Node.js, Python, Java, .NET, PHP, Elixir, C++:
    • exposure_dedupe_max_keys StatsigOption — configurable cap (default 100_000) on the bounded LRU backing exposure dedupe. Previously only settable from Rust, Go, and the C FFI options JSON; now exposed in every binding.

Improvements & Fixes

  • Go: fixed a process-fatal SIGSEGV under concurrent evaluation (double-free/return-value swap in purego's FFI frame pooling) — bumped ebitengine/purego to v0.10.1; also nil-guard core responses in GetFeatureGate/GetDynamicConfig/GetExperiment/GetLayerstatsig-io/statsig-server-core#53
  • All SDKs (rust core): evaluation hot path is now lock-free — refcount-free interning and a sharded eval-hash cache remove the remaining serialization points under concurrent load. In a reproduced high-concurrency workload (4-CPU pod, production-scale ruleset), throughput improved from 36k evals/sec with p99 = 100ms to 80k evals/sec with p99 = 200µs. Resolves the reported Java Core SDK performance issue and incorporates the community-contributed intern-store sharding fix from the Elixir SDK.

Included In This Release

  • 8f97829a2230398e5e65c93b22928c680de4e1bc statsig-kong[bot]
    • chore: bump version to 0.20.1-rc.2607140133
  • b20f2063b923457a15f811a4a77b1738b9486643 Xin Li (Bot)
    • [automated] sync rc with main
  • ebe32f0760cddd980afd62242f32508724abe12e statsig-kong[bot]
    • [automated] chore: bump version to 0.20.1-rc.2607132133 (#3058)
  • b822d505fe5803451118c8efdab9e46bd44b5f02 statsig-kong[bot]
    • chore: bump version to 0.20.1-rc.2607132132
  • fa494e802dbf48c96afbab6aa1610af79a3d9621 statsig-kong[bot]
    • [automated] sync rc with main (#3057)
  • b267db8d6f9ca0718f51531f60f8cf48061af410 Xin Li (Bot)
    • [automated] sync rc with main
  • e636e62e2d3ae85ae4bfc85110609c495f35162a statsig-kong[bot]
    • [automated] chore: bump version to 0.20.0-rc.1 (#3056)
  • 76f7efc750650f7160229aa1e1e114a2e982f37e statsig-kong[bot]
    • [automated] chore: bump version to 0.19.9-beta.2607110300 (#3054)
  • 5232200585bc023527db212849bf9b0837ce462b Peter Zhu
    • [S2SDK-115] java: expose enforceOverrides + enforceTargeting persistent-assignment options (#3041)
  • b26a7649a84131af2cfd955d03d3124f66785eaf Sandeep Madugula
    • [S2SDK-140] Make the eval hot path lock-free: refcount-free interning, sharded eval-hash cache (#3040)
  • 52f6bcda664b0b2cfe70a585399cd8b22ff1e5f5 statsig-kong[bot]
    • [automated] chore: bump version to 0.19.9-beta.2607100302 (#3053)
  • 4401edfb6329fd74f51e75efcdc8770e9227567a Peter Zhu
    • [S2SDK-114] rust-core: add enforceOverrides + enforceTargeting persistent-assignment options (#3030)
  • ecd3da7ac4eb4d79e5a71123b275604fb810ce38 Peter Zhu
    • feat: expose exposure_dedupe_max_keys option in all SDK bindings (#3013)
  • 5fd8b51b3c5ab0ccff62ca8a8abde55a85458286 statsig-kong[bot]

... (truncated)

Commits
  • c51568b [release] 0.20.1 - -Free Evaluation Hot Path (High-Concurrency Perf), Sticky-...
  • 700027d [cherrypick][rc] fix(go): SIGSEGV under concurrent evaluation — bump purego t...
  • ef6a073 [cherrypick][rc] chore: silence clippy::question_mark for rustc 1.97 (#3074)
  • 8f97829 chore: bump version to 0.20.1-rc.2607140133
  • b20f206 [automated] sync rc with main
  • ebe32f0 [automated] chore: bump version to 0.20.1-rc.2607132133 (#3058)
  • b822d50 chore: bump version to 0.20.1-rc.2607132132
  • fa494e8 [automated] sync rc with main (#3057)
  • b267db8 [automated] sync rc with main
  • e636e62 [automated] chore: bump version to 0.20.0-rc.1 (#3056)
  • Additional commits viewable in compare view

Updates boto3 from 1.43.46 to 1.43.51

Commits
  • 09cf399 Merge branch 'release-1.43.51'
  • b8f600d Bumping version to 1.43.51
  • f0973ec Add changelog entries from botocore
  • a8ae7f0 Merge branch 'release-1.43.50'
  • acbe14c Merge branch 'release-1.43.50' into develop
  • b8c36a9 Bumping version to 1.43.50
  • fa19980 Add changelog entries from botocore
  • 2ce2fd5 Merge branch 'release-1.43.49'
  • d2937da Merge branch 'release-1.43.49' into develop
  • 159cb6a Bumping version to 1.43.49
  • Additional commits viewable in compare view

Updates botocore from 1.43.46 to 1.43.56

Commits

Updates aws-lambda-powertools from 3.31.0 to 3.31.1

Release notes

Sourced from aws-lambda-powertools's releases.

v3.31.1

Summary

This release fixes bugs across Circuit Breaker, Event Handler, Parser, and the Event Source data classes. Super thanks to @​Iamrodos for running the Circuit Breaker alpha for real and finding the concurrency and configuration issues fixed here.

Changes

📜 Documentation updates

  • chore(deps): bump soupsieve from 2.7 to 2.8.4 in /docs (#8328) by @dependabot[bot]
  • fix(circuit_breaker): make probe election per-thread and synchronize local counters (#8323) by @​Iamrodos
  • feat(circuit_breaker): support composite primary key in DynamoDB persistence (#8316) by @​Iamrodos

🔧 Maintenance

@dependabot
Chore(deps): Bump the cosmetology-python-minor-patch group across 7 d…
c34822b 
…irectories with 10 updates

Bumps the cosmetology-python-minor-patch group with 5 updates in the /backend/cosmetology-app directory:

| Package | From | To |
| --- | --- | --- |
| [constructs](https://github.com/aws/constructs) | `10.6.0` | `10.7.0` |
| [coverage](https://github.com/coveragepy/coveragepy) | `7.15.1` | `7.15.2` |
| [faker](https://github.com/joke2k/faker) | `40.28.1` | `40.31.0` |
| [pip-tools](https://github.com/jazzband/pip-tools) | `7.5.3` | `7.6.0` |
| [ruff](https://github.com/astral-sh/ruff) | `0.15.21` | `0.15.22` |

Bumps the cosmetology-python-minor-patch group with 5 updates in the /backend/cosmetology-app/lambdas/python directory:

| Package | From | To |
| --- | --- | --- |
| [faker](https://github.com/joke2k/faker) | `40.28.1` | `40.31.0` |
| [boto3](https://github.com/boto/boto3) | `1.43.46` | `1.43.51` |
| [aws-lambda-powertools](https://github.com/aws-powertools/powertools-lambda-python) | `3.31.0` | `3.31.1` |
| [boto3-stubs](https://github.com/youtype/mypy_boto3_builder) | `1.43.46` | `1.43.51` |
| [statsig-python-core](https://github.com/statsig-io/statsig-server-core) | `0.19.8` | `0.20.1` |

Bumps the cosmetology-python-minor-patch group with 2 updates in the /backend/cosmetology-app/lambdas/python/cognito-backup directory: [boto3](https://github.com/boto/boto3) and [aws-lambda-powertools](https://github.com/aws-powertools/powertools-lambda-python).
Bumps the cosmetology-python-minor-patch group with 4 updates in the /backend/cosmetology-app/lambdas/python/common directory: [faker](https://github.com/joke2k/faker), [boto3](https://github.com/boto/boto3), [aws-lambda-powertools](https://github.com/aws-powertools/powertools-lambda-python) and [boto3-stubs](https://github.com/youtype/mypy_boto3_builder).
Bumps the cosmetology-python-minor-patch group with 1 update in the /backend/cosmetology-app/lambdas/python/feature-flag directory: [statsig-python-core](https://github.com/statsig-io/statsig-server-core).
Bumps the cosmetology-python-minor-patch group with 1 update in the /backend/cosmetology-app/lambdas/python/provider-data-v1 directory: [faker](https://github.com/joke2k/faker).
Bumps the cosmetology-python-minor-patch group with 1 update in the /backend/cosmetology-app/lambdas/python/staff-users directory: [faker](https://github.com/joke2k/faker).


Updates `constructs` from 10.6.0 to 10.7.0
- [Release notes](https://github.com/aws/constructs/releases)
- [Commits](aws/constructs@v10.6.0...v10.7.0)

Updates `coverage` from 7.15.1 to 7.15.2
- [Release notes](https://github.com/coveragepy/coveragepy/releases)
- [Changelog](https://github.com/coveragepy/coveragepy/blob/main/CHANGES.rst)
- [Commits](coveragepy/coveragepy@7.15.1...7.15.2)

Updates `faker` from 40.28.1 to 40.31.0
- [Release notes](https://github.com/joke2k/faker/releases)
- [Changelog](https://github.com/joke2k/faker/blob/master/CHANGELOG.md)
- [Commits](joke2k/faker@v40.28.1...v40.31.0)

Updates `pip-tools` from 7.5.3 to 7.6.0
- [Release notes](https://github.com/jazzband/pip-tools/releases)
- [Changelog](https://github.com/jazzband/pip-tools/blob/main/CHANGELOG.md)
- [Commits](jazzband/pip-tools@v7.5.3...v7.6.0)

Updates `ruff` from 0.15.21 to 0.15.22
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/0.15.22/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.15.21...0.15.22)

Updates `faker` from 40.28.1 to 40.31.0
- [Release notes](https://github.com/joke2k/faker/releases)
- [Changelog](https://github.com/joke2k/faker/blob/master/CHANGELOG.md)
- [Commits](joke2k/faker@v40.28.1...v40.31.0)

Updates `boto3` from 1.43.46 to 1.43.51
- [Release notes](https://github.com/boto/boto3/releases)
- [Commits](boto/boto3@1.43.46...1.43.51)

Updates `botocore` from 1.43.46 to 1.43.51
- [Commits](boto/botocore@1.43.46...1.43.51)

Updates `aws-lambda-powertools` from 3.31.0 to 3.31.1
- [Release notes](https://github.com/aws-powertools/powertools-lambda-python/releases)
- [Changelog](https://github.com/aws-powertools/powertools-lambda-python/blob/develop/CHANGELOG.md)
- [Commits](aws-powertools/powertools-lambda-python@v3.31.0...v3.31.1)

Updates `boto3-stubs` from 1.43.46 to 1.43.51
- [Release notes](https://github.com/youtype/mypy_boto3_builder/releases)
- [Commits](https://github.com/youtype/mypy_boto3_builder/commits)

Updates `statsig-python-core` from 0.19.8 to 0.20.1
- [Release notes](https://github.com/statsig-io/statsig-server-core/releases)
- [Commits](statsig-io/statsig-server-core@0.19.8...0.20.1)

Updates `boto3` from 1.43.46 to 1.43.51
- [Release notes](https://github.com/boto/boto3/releases)
- [Commits](boto/boto3@1.43.46...1.43.51)

Updates `botocore` from 1.43.46 to 1.43.56
- [Commits](boto/botocore@1.43.46...1.43.51)

Updates `aws-lambda-powertools` from 3.31.0 to 3.31.1
- [Release notes](https://github.com/aws-powertools/powertools-lambda-python/releases)
- [Changelog](https://github.com/aws-powertools/powertools-lambda-python/blob/develop/CHANGELOG.md)
- [Commits](aws-powertools/powertools-lambda-python@v3.31.0...v3.31.1)

Updates `faker` from 40.28.1 to 40.31.0
- [Release notes](https://github.com/joke2k/faker/releases)
- [Changelog](https://github.com/joke2k/faker/blob/master/CHANGELOG.md)
- [Commits](joke2k/faker@v40.28.1...v40.31.0)

Updates `boto3` from 1.43.46 to 1.43.51
- [Release notes](https://github.com/boto/boto3/releases)
- [Commits](boto/boto3@1.43.46...1.43.51)

Updates `aws-lambda-powertools` from 3.31.0 to 3.31.1
- [Release notes](https://github.com/aws-powertools/powertools-lambda-python/releases)
- [Changelog](https://github.com/aws-powertools/powertools-lambda-python/blob/develop/CHANGELOG.md)
- [Commits](aws-powertools/powertools-lambda-python@v3.31.0...v3.31.1)

Updates `boto3-stubs` from 1.43.46 to 1.43.51
- [Release notes](https://github.com/youtype/mypy_boto3_builder/releases)
- [Commits](https://github.com/youtype/mypy_boto3_builder/commits)

Updates `statsig-python-core` from 0.19.8 to 0.20.1
- [Release notes](https://github.com/statsig-io/statsig-server-core/releases)
- [Commits](statsig-io/statsig-server-core@0.19.8...0.20.1)

Updates `faker` from 40.28.1 to 40.31.0
- [Release notes](https://github.com/joke2k/faker/releases)
- [Changelog](https://github.com/joke2k/faker/blob/master/CHANGELOG.md)
- [Commits](joke2k/faker@v40.28.1...v40.31.0)

Updates `faker` from 40.28.1 to 40.31.0
- [Release notes](https://github.com/joke2k/faker/releases)
- [Changelog](https://github.com/joke2k/faker/blob/master/CHANGELOG.md)
- [Commits](joke2k/faker@v40.28.1...v40.31.0)

---
updated-dependencies:
- dependency-name: constructs
  dependency-version: 10.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cosmetology-python-minor-patch
- dependency-name: coverage
  dependency-version: 7.15.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: cosmetology-python-minor-patch
- dependency-name: faker
  dependency-version: 40.31.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: cosmetology-python-minor-patch
- dependency-name: pip-tools
  dependency-version: 7.6.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: cosmetology-python-minor-patch
- dependency-name: ruff
  dependency-version: 0.15.22
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: cosmetology-python-minor-patch
- dependency-name: faker
  dependency-version: 40.31.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: cosmetology-python-minor-patch
- dependency-name: boto3
  dependency-version: 1.43.51
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cosmetology-python-minor-patch
- dependency-name: botocore
  dependency-version: 1.43.51
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cosmetology-python-minor-patch
- dependency-name: aws-lambda-powertools
  dependency-version: 3.31.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cosmetology-python-minor-patch
- dependency-name: boto3-stubs
  dependency-version: 1.43.51
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: cosmetology-python-minor-patch
- dependency-name: statsig-python-core
  dependency-version: 0.20.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cosmetology-python-minor-patch
- dependency-name: boto3
  dependency-version: 1.43.51
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cosmetology-python-minor-patch
- dependency-name: botocore
  dependency-version: 1.43.56
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cosmetology-python-minor-patch
- dependency-name: aws-lambda-powertools
  dependency-version: 3.31.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cosmetology-python-minor-patch
- dependency-name: faker
  dependency-version: 40.31.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: cosmetology-python-minor-patch
- dependency-name: boto3
  dependency-version: 1.43.51
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cosmetology-python-minor-patch
- dependency-name: aws-lambda-powertools
  dependency-version: 3.31.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cosmetology-python-minor-patch
- dependency-name: boto3-stubs
  dependency-version: 1.43.51
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: cosmetology-python-minor-patch
- dependency-name: statsig-python-core
  dependency-version: 0.20.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cosmetology-python-minor-patch
- dependency-name: faker
  dependency-version: 40.31.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: cosmetology-python-minor-patch
- dependency-name: faker
  dependency-version: 40.31.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: cosmetology-python-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Jul 27, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python Pull requests that update python code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants