chore(deps, pyamber): update pyamber minor updates

[renovate-bot]

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Confidence
SQLAlchemy (changelog)	==2.0.51 → ==2.1.3
bidict (changelog)	==0.22.0 → ==0.24.1
boto3	==1.42.90 → ==1.43.108
botocore	==1.42.90 → ==1.43.108
praw (changelog)	==7.6.1 → ==7.8.2
pyiceberg	==0.11.1 → ==0.12.0
pytest (changelog)	==9.0.3 → ==9.1.1
ruff (source, changelog)	==0.14.7 → ==0.16.10
s3fs	==2026.6.0 → ==2026.9.0
scikit-image	==0.25.2 → ==0.26.0
scikit-learn (changelog)	==1.7.2 → ==1.9.1
torch	==2.13.0 → ==2.14.1+cpu
torch	==2.13.0+cpu → ==2.14.1+cpu
transformers	==5.10.1 → ==5.19.0
typing_extensions (changelog)	==4.14.1 → ==4.16.0

---

Release Notes

jab/bidict (bidict)

v0.24.1

Compare Source

• Fix the RECORD file in the published 0.24.0 wheel
  by upgrading to a fixed version of uv_build.
  :issue:406

• Fix a test failure on Python 3.15
  caused by changes to :class:~collections.UserDict.
  :issue:407

v0.24.0

Compare Source

• Remove bidict.metadata and associated metadata from the
  :mod:bidict module (e.g. bidict.__version__).
  Use e.g. :func:importlib.metadata.metadata("bidict")["Version"] <importlib.metadata.metadata> instead.

• Fix a bug where pickling or :func:~copy.deepcopy\ing an instance of a
  dynamically-generated inverse class
  (see :ref:extending:Dynamic Inverse Class Generation)
  could change the order of its items.
  :issue:398

  Pickles written by bidict 0.23.1 and earlier can no longer be read.
  They call the private BidictBase._from_other()
  with an argument it no longer accepts,
  which was retained for no other purpose.
  Pickle compatibility across versions
  has never been guaranteed <https://docs.python.org/3/library/pickle.html#comparison-with-json>__,
  and dropping it here keeps
  :meth:~bidict.BidictBase.__reduce__ free of special cases.

• Fix a bug where a non-ordered bidict's
  :meth:~bidict.BidictBase.values view
  could yield its values in a different order than
  :meth:~bidict.BidictBase.keys yields the corresponding keys,
  so that e.g. zip(b.keys(), b.values())
  silently paired up the wrong keys and values.

• Fix a bug where :meth:~bidict.MutableBidict.putall
  and :meth:~bidict.MutableBidict.update
  could leave earlier items inserted when a later item in a bulk update
  raised a non-duplication exception,
  rather than failing clean.
  :issue:389

• Fix a bug where a bulk update did not fail clean at all
  when the :class:~bidict.OnDup in effect contained no
  :attr:~bidict.RAISE action –
  as with :meth:~bidict.MutableBidict.forceupdate,
  :meth:~bidict.MutableBidict.putall passed :attr:~bidict.ON_DUP_DROP_OLD,
  or :meth:~bidict.MutableBidict.update on a subclass
  that overrides :attr:~bidict.BidictBase.on_dup
  (e.g. the YoloBidict recipe in :doc:extending).
  Rollback was previously enabled only when a duplication error was possible,
  but a bulk update can also fail while unpacking an item,
  hashing a key or value, or writing to a backing mapping.
  Rollback is now always enabled for these methods.
  :issue:392

• Fix a bug where a write or removal that a custom backing mapping refused
  could leave a custom bidict's two backing mappings out of sync,
  breaking the bidirectional invariant,
  rather than failing clean.
  :issue:401
  :issue:403

• Fix a bug where mutating an :class:~bidict.OrderedBidict
  while iterating over it produced incorrect behavior
  rather than raising an error.
  :issue:393

• A bidict and its inverse now always refer to the same object
  for each contained key and value,
  rather than possibly to equivalent but distinct ones,
  so that e.g. b.inverse[b[key]] is key always holds.
  Writing an item whose key or value is equal to a contained one
  now keeps the object already contained,
  as :class:dict does when a key is overwritten,
  instead of keeping one object in each direction.
  See also :ref:addendum:Equivalent but distinct \:class\:\~collections.abc.Hashable`\s :issue:396`

• Fix a bug where setting an already-contained (key, value) pair
  spuriously raised :class:~bidict.KeyAndValueDuplicationError
  or AssertionError (rather than being a no-op, as documented)
  when the key or value has non-reflexive equality (e.g. nan)
  or asymmetric equality.
  :issue:377

• Fix a bug where set operations between an :class:~bidict.OrderedBidict's
  keys view and its items view (or vice versa) raised :class:TypeError
  (or, for ==, returned the wrong result)
  rather than behaving like the equivalent plain :class:dict views.
  :issue:376

• Single-item writes such as
  :meth:~bidict.MutableBidict.__setitem__,
  :meth:~bidict.MutableBidict.put, and
  :meth:~bidict.MutableBidict.forceput
  are now ~6x faster:
  most of what they cost was never the write itself,
  but typing machinery being re-evaluated on every call.
  Iterating an :class:~bidict.OrderedBidict is also ~1.2x faster.
  Everything else is within a couple of percent of 0.23.1.

• A bidict backed by a :class:dict subclass
  now gets that mapping's own views from
  :meth:~bidict.BidictBase.keys and :meth:~bidict.BidictBase.items,
  as a bidict backed by an exact :class:dict already did.
  Previously only an exact :class:dict qualified,
  so such a bidict got generic views instead,
  which were not :class:~collections.abc.Reversible
  (even when the bidict itself was),
  had no .mapping attribute,
  and performed their set operations in Python rather than in C.
  This affects every backing mapping used in the recipes in :doc:extending,
  since :class:collections.OrderedDict,
  :class:collections.defaultdict,
  and sortedcontainers.SortedDict
  are all :class:dict subclasses.

• Fix a bug where a subclass of a bidict class
  whose backing mappings are not :class:~collections.abc.Reversible
  could not itself be reversible,
  even when it specified backing mappings that are.

• Fix a bug where an :class:~bidict.OrderedBidictBase that is not an
  :class:~bidict.OrderedBidict
  could yield its items in the wrong order from
  :meth:~bidict.OrderedBidictBase.keys,
  :meth:~bidict.OrderedBidictBase.items,
  :meth:~bidict.BidictBase.values,
  :func:repr, and
  :meth:~bidict.BidictBase.equals_order_sensitive.

v0.23.1

Compare Source

Fix a regression in 0.23.0 that could defeat type inference
of a bidict's key type and value type when running in Python 3.8 or 3.9.
:issue:310

v0.23.0

Compare Source

Primarily, this release simplifies bidict by removing minor features
that are no longer necessary or that have little to no apparent usage,
and it also includes some performance optimizations.

Specifically, initializing or updating a bidict
is now up to 70% faster in microbenchmarks.

The changes in this release will also make it easier
to maintain and improve bidict in the future,
including further potential performance optimizations.

It also contains several other improvements.

• Drop support for Python 3.7,
  which reached end of life on 2023-06-27,
  and take advantage of features available in Python 3.8+.

• Remove FrozenOrderedBidict now that Python 3.7 is no longer supported.
  :class:~bidict.frozenbidict now provides everything
  that FrozenOrderedBidict provided
  (including :class:reversibility <collections.abc.Reversible>)
  on all supported Python versions,
  but with less space overhead.

• Remove namedbidict due to low usage.

• Remove the kv field of :class:~bidict.OnDup
  which specified the :class:~bidict.OnDupAction to take
  in the case of :ref:basic-usage:key and value duplication.
  The :attr:~bidict.OnDup.val field now specifies the action to take
  in the case of
  :ref:basic-usage:key and value duplication
  as well as
  :ref:just value duplication <basic-usage:values must be unique>.

• Improve type hints for the
  :attr:~bidict.BidictBase.inv shortcut alias
  for :attr:~bidict.BidictBase.inverse.

• Fix a bug where calls like
  bidict(None), bi.update(False), etc.
  would fail to raise a :class:TypeError.

• All :meth:~bidict.BidictBase.__init__,
  :meth:~bidict.MutableBidict.update,
  and related methods
  now handle SupportsKeysAndGetItem <https://github.com/python/typeshed/blob/3eb9ff/stdlib/_typeshed/__init__.pyi#L128-L131>__
  objects that are not :class:~collections.abc.Mapping\s
  the same way that MutableMapping.update() <https://github.com/python/cpython/blob/v3.11.5/Lib/_collections_abc.py#L943>__ does,
  before falling back to handling the provided object as an iterable of pairs.

• The :func:repr of ordered bidicts now matches that of regular bidicts,
  e.g. OrderedBidict({1: 1}) rather than OrderedBidict([(1, 1)]).

  (Accordingly, the bidict.__repr_delegate__ field has been removed
  now that it's no longer needed.)

  This tracks with the change to :class:collections.OrderedDict's :func:repr
in Python 3.12 <https://github.com/python/cpython/pull/101661>__.

• Test with Python 3.12 in CI.

  Note: Older versions of bidict also support Python 3.12,
  even though they don't explicitly declare support for it.

• Drop use of Trove classifiers <https://github.com/pypa/trove-classifiers>__
  that declare support for specific Python versions in package metadata.

v0.22.1

Compare Source

• Only include the source code in the source distribution.
  This reduces the size of the source distribution
  from ~200kB to ~30kB.

• Fix the return type hint of :func:bidict.inverted
  to return an :class:~collections.abc.Iterator,
  rather than an :class:~collections.abc.Iterable.

boto/boto3 (boto3)

v1.43.108

Compare Source

========

• api-change:cognito-idp: [botocore] Amazon Cognito User Pools now supports the OIDC-standard authentication context class reference (ACR) and authentication methods reference (AMR) claims on issued access and Id tokens. Amazon Cognito User Pools also now supports step-up authentication via our existing authentication APIs.
• api-change:glue: [botocore] Added refresh token grant type to Glue Connection supported OAuth 2.0 grant types
• api-change:invoicing: [botocore] API and doc updates related to adding MarketplacePunchOutEnabled and MarketplacePunchOutPreference fields to ProcurementPortalPreferences related APIs
• api-change:lambda-web: [botocore] Documentation update for AWS Lambda Web Functions, clarifies that the LambdaWeb APIs are experimental and not yet available to external customers.
• api-change:mediapackagev2: [botocore] Dynamic Multiview enables viewers to watch multiple live video streams in a single combined output. Static filter configuration allows users to configure endpoints with layouts and sources without using query parameters. The number of sources per multiview channel has been increased to 50.
• api-change:pinpoint-sms-voice-v2: [botocore] AWS End User Messaging SMS CarrierLookup API now supports phone number cleansing on customer opt-in. when selected, the response includes the additional field "OriginalPhoneNumber". It can also return additional PhoneNumberType enums, VOIP and PREPAID.
• api-change:securityagent: [botocore] Adds trigger filters that control which pull request events, target branches, and labels start an automatic code review.

v1.43.107

Compare Source

========

• api-change:bedrock-agent: [botocore] Adds an optional textReadyAt field to ListIngestionJobs and GetIngestionJob for Managed Knowledge Bases data source sync jobs. The field denotes the timestamp at which all the documents in the scope of a sync job had their text content indexed and are available for retrieval.
• api-change:cloudfront: [botocore] Added always-amz-auth as a supported signing behavior for Origin Access Control (OAC), enabling CloudFront to authenticate requests to Lambda-Web origins.
• api-change:ec2: [botocore] This release launches the AMI tag sharing feature, which lets AMI owners share tags alongside their AMIs, eliminating the need to build and maintain custom tag replication workflows.
• api-change:endpoint-rules: [botocore] Update endpoint-rules client to latest version
• api-change:endusermessaging: [botocore] AWS End User Messaging now supports Brand profiles and Notify code configurations. Brand profiles capture your sender details once to reuse across phone number registrations. Notify code configurations let you define your OTP policy and delivery settings to send passcodes in minutes.
• api-change:health: [botocore] Adds DescribeServiceLifecycle operation returning lifecycle information for AWS services, including end-of-support dates, version recommendations, and lifecycle events.
• api-change:lambda-web: [botocore] Lambda Web Functions GA launch. Lambda Web Functions enable customers to run web applications and API backends
• api-change:quicksight: [botocore] This release adds HierarchyFilter support for Amazon QuickSight analysis and dashboard and 2 legged OAuth for databricks datasources.
• api-change:sagemaker: [botocore] Release support for c8a.16xlarge and m8a.16xlarge instance types for SageMaker HyperPod
• api-change:securityhub: [botocore] Adds GetRemediationsV2 and ListExposuresByRemediationV2 APIs. This feature allows customers to see their highest priority remediations for their Exposure findings. Remediations target key changes customers can make to resources to drive finding resolution.
• api-change:transfer: [botocore] AWS Transfer Family Workflows adds support for the structuredLogDestinations option, enabling customers to specify a custom Amazon CloudWatch Logs log group for managed workflow execution logs.

v1.43.106

Compare Source

========

• api-change:account: [botocore] This release adds support for verifying an AWS account's primary contact phone number. SendPhoneNumberVerification sends a one-time code by SMS, VerifyPhoneNumber validates it, and GetContactInformation now returns the verification status.
• api-change:agent-registry: [botocore] Minor doc update for the AWS Agent Registry Custom metadata SearchDiscoverableRegistryRecords API
• api-change:batch: [botocore] AWS Batch adds support for Amazon EKS access entries on EKS compute environments through the new accessEntry setting in CreateComputeEnvironment and UpdateComputeEnvironment.
• api-change:bedrock: [botocore] Amazon Bedrock Automated Reasoning policies now accept Unicode letters in identifier names such as type names, type value names, and variable names. You can now author policies in non-English languages using accented or non-Latin characters.
• api-change:bedrock-agentcore-control: [botocore] This release adds support for private certificate authorities on Amazon Bedrock AgentCore Gateway targets. The new certificateConfigurations parameter on CreateGatewayTarget and UpdateGatewayTarget references a PEM-encoded CA certificate in Amazon S3 or AWS Secrets Manager.
• api-change:connect: [botocore] Amazon Connect Rules can now trigger in-app notifications to users as a rule action. Notification character limit was increased to 500 visible characters.
• api-change:datazone: [botocore] Support for setting notebook run notification configurations
• api-change:dynamodb: [botocore] Adds support for filtering exported table data using FilterExpression, ProjectionExpression and KeyConditionExpression with ExportTableToPointInTime.
• api-change:ecs: [botocore] Releasing VPCL for BlueGreen ecs deployments.
• api-change:globalaccelerator: [botocore] IpSets now include the Network Zone for each Static IP address.
• api-change:glue: [botocore] Enable Catalog ID for crawler, column statistics and materialized views.
• api-change:guardduty: [botocore] GuardDuty AWS Organizations policy integration. GetDetector and GetMemberDetectors now show whether a GuardDuty policy manages a feature.
• api-change:logs: [botocore] Amazon CloudWatch Logs now supports an optional roleArn parameter on PutDeliveryDestination for X-Ray trace delivery destinations, specifying the IAM role to assume when delivering traces.
• api-change:observabilityadmin: [botocore] Enablement for Bedrock PaymentManager logs via Observability Admin Telemetry Rule
• api-change:organizations: [botocore] Add support for policy operations on the GUARDDUTY POLICY policy type.
• api-change:s3: [botocore] Amazon S3 adds a new optional S3 Inventory field, IntelligentTieringReferenceDate, reporting the reference date S3 Intelligent-Tiering uses to evaluate an object's tier-transition eligibility. The value is populated for objects in the Intelligent-Tiering storage class and left blank for others.
• api-change:s3vectors: [botocore] Amazon S3 Vectors now supports metadata prefiltering, providing higher recall on filtered queries.
• api-change:sagemaker: [botocore] This feature enables customers to modify their accounting database via API.

v1.43.105

Compare Source

========

• api-change:appstream: [botocore] Add support for NVIDIA GRID driver version metadata in Workspace Applications image responses through the new ImageSoftwareMetadata field.
• api-change:bedrock-agent-runtime: [botocore] Amazon Bedrock Agentic Retrieve now supports the Bedrock Mantle (OpenAI Responses) endpoint via a new MantleFoundationModel configuration with an optional projectId.
• api-change:deadline: [botocore] AWS Deadline Cloud now supports Docker software add-ons on service-managed fleets. Adds support for Open Job Description EXPR and Feature Bundle 1 job templates with typed job parameters and job, step, and parameter names up to 512 characters.
• api-change:ec2: [botocore] Adds the LaunchStatus field to CapacityReservation in the DescribeCapacityReservations response. This field indicates whether you can currently launch instances into an UltraServer.
• api-change:elasticache: [botocore] Amazon ElastiCache Serverless now supports public endpoints for Valkey caches. With the new Connection Type parameter, you can create a serverless cache accessible over the internet without any VPC configuration. Public endpoint caches require IAM authentication.
• api-change:elementalinference: [botocore] Adds an extendedAnalysis setting to contextual metadata outputs to control detection of people, environments, brands, and on-screen text, and updates the summaryGeneration documentation.
• api-change:glue: [botocore] Add support for Glue system-managed materialized views.
• api-change:identitystore: [botocore] Add support for network access controls to restrict Identity Store API and SCIM access to trusted networks, optimistic locking for users and groups via resource revisions, and resource ARNs as identifiers in requests.
• api-change:inspector2: [botocore] The ListFindingAggregations API now includes Low, Informational, and Untriaged counts alongside the existing severity counts in SeverityCounts.
• api-change:mediatailor: [botocore] AWS Elemental MediaTailor now supports beaconing configuration on playback configurations. In Insights reporting mode, MediaTailor will now gather client side beaconing metrics. Set the reporting mode to Disabled to turn this off.
• api-change:opensearch: [botocore] Amazon OpenSearch Service now supports advisory pre-validations for domain config changes. Non-critical checks now surface as warnings you can acknowledge (via the new AcceptedWarnings parameter) and proceed, instead of hard-blocking. Severity is reported in change-progress and dry-run results.
• api-change:rds: [botocore] Adds the TargetResourceConfigurations parameter to CreateBlueGreenDeployment, letting you specify a target KMS key for each resource in the green environment.
• api-change:sagemaker: [botocore] Adds support for cpu flex type instances on SageMaker Training and Processing. Also contains minor updates to DescribeTrainingPlan to support ARN inputs.
• api-change:securityagent: [botocore] Adds support for Azure DevOps and Bitbucket Data Center integration providers.
• api-change:sesv2: [botocore] Added Filter support for ListTenants, ListEmailIdentities, and ListConfigurationSets APIs.
• api-change:transfer: [botocore] AWS Transfer Family now supports configuring up to three custom ports on public SFTP servers, instead of the single default port 22. You can also set each port's communication mode (server-talk-first or client-talk-first) so legacy and modern SFTP clients connect reliably.

v1.43.104

Compare Source

========

• api-change:agent-registry: [botocore] AWS Agent Registry adds support for custom metadata. Discovery APIs now return custom metadata on registry records and support filtering by metadata fields. Semantic search includes custom metadata for improved relevance. Filter customMetadata fields using eq, ne, and in operators.
• api-change:agent-registry-control: [botocore] AWS Agent Registry adds support for custom metadata. Define a typed metadata schema on your registry and attach structured key-value metadata to registry records. Schemas are additive only. Enforcement is progressive. Records show a compliance status computed against the current schema.
• api-change:bedrock-agentcore-control: [botocore] Amazon Bedrock AgentCore Gateway now supports returning the complete MCP tools list in a single response by disabling pagination for the tools list operation. This feature is available in limited preview.
• api-change:billing: [botocore] Adds support for (a) listing Business Support account charges via ListBusinessSupportAccountCharges and (b) subscription history via ListBusinessSupportSubscriptionHistory through the AWS Billing API.
• api-change:connect: [botocore] This release adds ConnectionTypes and ChatStreamingConfiguration to StartChatContact, and ConnectionCredentials, Websocket, and StreamingId to its response, so customers can request connection information and chat streaming in the same call that starts the chat.
• api-change:ec2: [botocore] API changes to AWS Client VPN to support device posture assessment and Cedar authorization policies
• api-change:eks: [botocore] An optional customer provided prefix used to construct the hostname of the Argo CD server endpoint for EKS Argo CD Capability.
• api-change:fsx: [botocore] Amazon FSx has expanded the model-level maximum on the ThroughputCapacity, ThroughputCapacityPerHAPair, and Iops API parameters. Actual supported values are unchanged and depend on file system type and configuration.
• api-change:glue: [botocore] Added a new exception to several batch APIs
• api-change:guardduty: [botocore] Adding awsServiceName field to GuardDuty Findings
• api-change:securityagent: [botocore] Run automated penetration tests directly from your CI-CD pipeline to scan code changes before they ship, gating deployments on the findings
• api-change:ssm: [botocore] Add support for sharing SSM documents with organizations and OUs using RAM.

v1.43.103

Compare Source

========

• api-change:arc-region-switch: [botocore] Adds a service quota checker to Region switch to verify quota parity between your primary and standby Region, and automatically submit quota limit increases. Adds an optional EC2 Auto Scaling and ECS setting that waits for instances or tasks in the scaled-up Region to be healthy in target groups.
• api-change:bedrock-agent: [botocore] Adds support for calling VPC configuration API's in Bedrock. These configurations allow the use of On Prem connectors in Bedrock Managed Knowledge bases
• api-change:bedrock-agentcore-control: [botocore] Amazon Bedrock AgentCore Payments now supports credential rotation for payment connectors, letting you rotate API and wallet secrets for Quick Create payment auths from the console. This release also adds Type and Creation type columns to the payment managers views.
• api-change:connect: [botocore] Agent Privacy During Hold is a new privacy capability for Amazon Connect Voice that prevents agent audio from being captured in call recordings or Contact Lens conversational analytics during hold. When enabled, agents are automatically muted on entering hold and unmuted on resuming the contact
• api-change:endpoint-rules: [botocore] Update endpoint-rules client to latest version
• api-change:glue: [botocore] add support for table level federation
• api-change:mediaconnect: [botocore] This release adds support for RTMP push router outputs in AWS Elemental MediaConnect.
• api-change:neptune-graph: [botocore] Add GraphIdentifier filter for ListImportTasks
• api-change:qconnect: [botocore] Release shapes for the proactive agentic recommendations and the multi-knowledge base search features. Increases the maximum length of QuickResponseContent.
• api-change:rekognition: [botocore] This release adds support for Feedback and Metadata in the GetFaceLivenessSessionResults response. Feedback returns codes explaining why a Face Liveness check produced its result. Metadata includes the client SDK type.
• api-change:securityagent: [botocore] This release adds the ListActorMessages operation, which returns the multi-factor authentication messages received at an actor's server-generated email address
• api-change:wellarchitected: [botocore] This change releases the Well-Architected Agent, a generative AI service that analyzes a customer's AWS environment and delivers personalized, prioritized recommendations across cost, security, performance, and resilience.

v1.43.102

Compare Source

========

• api-change:cloudwatch: [botocore] This release adds Create, Get, Update, and DeleteResourceMetricsConfiguration to enable detailed metric collection for an AWS resource, and adds UpdateOTelEnrichment plus include and exclude filters on StartOTelEnrichment so you can choose which metric namespaces CloudWatch enriches.
• api-change:datazone: [botocore] Amazon DataZone now supports the TOOLING blueprint category on CreateEnvironmentBlueprint, UpdateEnvironmentBlueprint, GetEnvironmentBlueprint, and ListEnvironmentBlueprints, for custom tooling blueprints. CreateConnection now accepts roleArn in iamProperties.
• api-change:elasticache: [botocore] Added tagging support for ElastiCache Global DataStore.
• api-change:endpoint-rules: [botocore] Update endpoint-rules client to latest version
• api-change:eventbridgev2: [botocore] Introducing Amazon EventBridge enhanced Custom event bus, a new shareable event bus for organizational-scale event-driven applications feature ordered delivery, deduplication, open event formats, and cross-account bus sharing.
• api-change:events: [botocore] Adds a ManagedBy field to the DescribeEventBus and ListEventBuses responses, identifying the AWS service that created an event bus on your behalf.
• api-change:iot: [botocore] Fixed ListV2LoggingLevels and DeleteV2LoggingLevel documentation to include all supported target-types
• api-change:marketplace-discovery: [botocore] AWS Marketplace Discovery API now supports localized responses and SigV4a request signing. It returns new fulfillment details, including AMI architecture, EBS volume and security group information, SaaS quick-launch status, and SageMaker input and output MIME types.
• api-change:redshift-data: [botocore] Updates to the ListDatabases and WorkgroupName validation
• api-change:route53resolver: [botocore] Documentation updates for Route 53 Resolver. Clarifies which Outpost Resolver operations apply to first-generation AWS Outposts and that Resolver is managed automatically on second-generation Outposts. Adds Local Network Interface subnet compatibility notes for Resolver endpoints.
• api-change:securityagent: [botocore] Added support for Confluence export, enabling customers to publish security findings to Confluence pages.

v1.43.101

Compare Source

========

• api-change:billing: [botocore] Added the ListBillingViewSegments API, which returns billing view segment information for a specified billing view ARN and time range. This API enables customers and integrated tools to programmatically determine the billing context of their accounts.
• api-change:connecthealth: [botocore] Multi language support with code switching, custom template sectionHeader now allows underscores.
• api-change:endpoint-rules: [botocore] Update endpoint-rules client to latest version
• api-change:imagebuilder: [botocore] Documentation update for EC2 Image Builder - adds API request and response examples for all operations, improves descriptions throughout, and corrects response field patterns for image versions and workflow ARNs.
• api-change:kinesis: [botocore] Amazon Kinesis Data Streams now supports service managed record distribution for on demand streams. Set the record distribution strategy to AUTO to evenly distribute records across shards. Configure it at stream creation with CreateStream or update anytime with UpdateStreamRecordDistributionStrategy
• api-change:lexv2-models: [botocore] Adds support for speaker diarization on Amazon Lex V2 bot locales. Speaker diarization keeps your bot on the primary (loudest) speaker during a streaming voice conversation, so background voices do not start a turn or interrupt a prompt.
• api-change:mediaconvert: [botocore] This release adds support for SMPTE 337M audio passthrough, compositing up to five motion graphic overlays in a single output, and controlling how passthrough video is segmented in ABR outputs. It also adds 3GP, 3G2, AAC, AC-3, and E-AC-3 as supported input containers for the Probe operation.
• api-change:mediapackagev2: [botocore] This release adds support for signalling start and end in the ContentKeyPeriod element in key request from MediaPackageV2
• api-change:network-security-manager: [botocore] AWS Network Security Manager is a new service that helps you centrally configure, deploy, and continuously enforce security policies on network security services across the accounts and resources in your AWS Organization.
• api-change:payment-cryptography-data: [botocore] Adds asymmetric key support to ReEncryptData for re-encrypting data between RSA and symmetric data encryption keys.

v1.43.100

Compare Source

========

• api-change:apigateway: [botocore] API Gateway now supports two new security policies for REST APIs and custom domain names, SecurityPolicy-TLS13-1-2-Ext2-PQ-2025-09 (TLS 1.3 1.2 with post-quantum cryptography) and SecurityPolicy-TLS13-1-2-Ext2-FIPS-PQ-2025-09 (adds FIPS). Both retain legacy algorithms for backward compatibility.
• api-change:cloudwatchomni: [botocore] Amazon CloudWatch Omni is now generally available, an AI-powered unified observability for AI agents, applications, and infrastructure. As part of it, organization centralization rules now support cross-account context graph centralization.
• api-change:ec2: [botocore] Amazon EC2 now supports quote-based start date changes for future-dated Capacity Reservations
• api-change:endpoint-rules: [botocore] Update endpoint-rules client to latest version
• api-change:glue: [botocore] Adding two new fields for Glue Materialized Views feature - (1) SubObjectsStatistics and (2) SparkPipelineInfo.
• api-change:observabilityadmin: [botocore] Amazon CloudWatch Omni is now generally available, an AI-powered unified observability for AI agents, applications, and infrastructure. Centralization now supports context graph for multi-account resource discovery, and dataset integrations makes logs available in CloudWatch datasets.
• api-change:quicksight: [botocore] Adds support for granular custom permissions on 28 action connectors, including Gmail, Google Drive, Google Sheets, Airtable, and Dropbox. Administrators can now allow or deny individual connector operations instead of all action connectors at once.
• api-change:sso-admin: [botocore] AWS IAM Identity Center now returns PrimaryRegion and Regions in the DescribeInstance response, providing information about replicated instances, and returns IdentityStoreArn in both the ListInstances and DescribeInstance responses.

v1.43.99

Compare Source

=======

• api-change:bedrock-agentcore: [botocore] Amazon Bedrock AgentCore Harness now supports lifecycle hooks for invocations and tool calls, with Lambda, SNS, and EventBridge targets. This release also adds apiBase for custom OpenAI-compatible endpoints.
• api-change:bedrock-agentcore-control: [botocore] Amazon Bedrock AgentCore Harness now supports lifecycle hooks for invocations and tool calls, with Lambda, SNS, and EventBridge targets. This release also adds apiBase for custom OpenAI-compatible endpoints
• api-change:billingconductor: [botocore] Launching Auto Billing Transfer Billing Group Creation Preference feature
• api-change:docdb: [botocore] Add support for CopyTagsToSnapshot field in CreateDbCluster, ModifyDbCluster, RestoreDbClusterFromSnapshot and RestoreDbClusterToPointInTime for DocumentDB.
• api-change:sagemaker: [botocore] Add support for r6i, m8i, c8i, r8i instance types in Training and Processing

v1.43.98

Compare Source

=======

• api-change:appintegrations: [botocore] This release adds support for A2A servers via the ApplicationType and AuthConfig fields, allowing customers to register their agent-to-agent servers with API key authentication.
• api-change:connect: [botocore] This release adds the ListSecurityProfileAIAgents API and updates the CreateSecurityProfile and UpdateSecurityProfile APIs to support the AllowedAIAgents field on security profiles, allowing customers to manage the 3P AI agents associated with a security profile for Agent-to-Agent interactions.
• api-change:datazone: [botocore] Adds support for specifying Notebook type
• api-change:ec2: [botocore] This release adds documentation for the T8i instance family to the EC2 ModifyDefaultCreditSpecification and GetDefaultCreditSpecification APIs.
• api-change:glue: [botocore] Introducing AWS Glue Data Quality advanced rule recommendations for faster recommendations. This capability uses Amazon Athena to analyze a sample of table data and Amazon Bedrock to recommend DQDL rules.
• api-change:ivs-realtime: [botocore] GetParticipant, ListParticipantEvents, ListParticipantReplicas, StartParticipantReplication, and StopParticipantReplication now accept participant IDs containing underscores.
• api-change:qconnect: [botocore] Amazon Connect AI Agents now support multi-agent orchestration and structured JSON input and output messaging for orchestration agents.
• api-change:sagemaker: [botocore] Adds support for the hub content resource in SageMaker Search.
• api-change:transcribe: [botocore] Amazon Transcribe now lets you encrypt your custom vocabularies, custom vocabulary filters, and custom language models with a customer managed AWS KMS key instead of an AWS owned key, and adds a new UpdateLanguageModel operation to transition CLM encryption to a different KMS key.

v1.43.97

Compare Source

=======

• api-change:bedrock-agentcore: [botocore] Batch evaluation now supports evaluating specific traces within a session. Each session can specify up to 100 trace IDs to evaluate.
• api-change:connect: [botocore] Made the replicaAlias attribute optional in the ReplicateInstance API to support Global routing for Amazon Connect Global Resiliency (ACGR) instances. This change maintains backward compatibility. When onboarding to ACGR without Global routing, you must specify a custom replicaAlias in your API call
• api-change:ec2: [botocore] Adding support for "Tunnel" VPC Endpoint
• api-change:guardduty: [botocore] This change surfaces AI Protection resources on existing public IAM attack sequences. Customers will now see which model was accessed and whether a guardrail intervened as part of the credential-compromise sequence.
• api-change:iotwireless: [botocore] Adds Multi-frame GNSS support to the AWS IoT Core Device Location GetPositionEstimate API. The new GnssMultiFrame measurement type improves location accuracy by combining multiple GNSS signal captures (2, 4, 8, 16, or 32) from the same device to estimate its position.
• api-change:notifications: [botocore] Added support for attachments on managed notification events. Added support to access and subscribe sensitive managed notification events.
• api-change:sesv2: [botocore] Added support to query the tenant name for BatchGetMetricData and CreateExportJob APIs to filter metrics and messages at the tenant level.
• api-change:sns: [botocore] SNS API reference documentation update
• api-change:socialmessaging: [botocore] Add support for WhatsApp Calling APIs.
• api-change:vpc-lattice: [botocore] Adding support for CIDR Resource Configuration
• enhancement:Checksums: [botocore] Expose the calculated checksum on StreamingChecksumBody and allow it to be constructed without an expected checksum value.

v1.43.96

Compare Source

=======

• api-change:bedrock-agentcore-control: [botocore] Adds support for a new DELETE FAILED status for Bedrock AgentCore Runtimes and Bedrock AgentCore Runtime Endpoints.
• api-change:connect: [botocore] Adds support for ContactAnalysis via ListContactReferences.
• api-change:customer-profiles: [botocore] This release introduces the SearchRecommendations API, which retrieves recommendations for a profile identified by a search key.
• api-change:ec2: [botocore] Releasing new EC2 R9g and R9gd memory-optimized instances powered by AWS Graviton5 processors, with up to 25 percent better compute performance than R8g instances, faster DDR5 memory, and up to 100 Gbps network and 72 Gbps EBS bandwidth. R9gd instances additionally provide local NVMe SSD storage.
• api-change:elasticbeanstalk: [botocore] Adds support to create and manage Elastic Beanstalk Cluster Environments.
• api-change:marketplace-catalog: [botocore] This release enhances the ListEntities API to support issuerAccountId and SourceAuthorization filter for ResaleAuthorization entity.
• api-change:resiliencehubv2: [botocore] Next Gen Resilience Hub now supports dependency insights (LLM-based insights about customer's service dependencies) and organization-level policy sharing (provision to share policy with member accounts for an organization)

v1.43.95

Compare Source

=======

• api-change:bedrock-agentcore-control: [botocore] Amazon Bedrock AgentCore Runtime now supports specifying the platform version of an agent runtime through the new platformVersion field on CreateAgentRuntime, UpdateAgentRuntime, and GetAgentRuntime.
• api-change:directconnect: [botocore] AWS Direct Connect is introducing flat-rate pricing, a simplified billing model that gives you a fixed monthly price for dedicated connectivity with no per-gigabyte data transfer out charges within the selected pricing tier.
• api-change:transfer: [botocore] AWS Transfer Family now preserves the original source IP address using Proxy Protocol v2 when you place a Network Load Balancer in front of your server for SFTP connections.
• api-change:workspaces: [botocore] Added support for 4 new graphics-optimized compute types - Graphics.g7 (2xlarge, 4xlarge, 8xlarge, 12xlarge).

v1.43.94

Compare Source

=======

• api-change:billing: [botocore] Increased the maximum number of services returned in the supportEligibleSpendByService field of ListEnterpriseSupportLinkedAccountCharges
• api-change:billingconductor: [botocore] This release adds support for custom volume tiering. You can now define custom tiers on a pricing rule's tiering configuration, where each tier specifies a usage range and the rate applied to usage in that range.
• api-change:codedeploy: [botocore] AWS CodeDeploy now returns the deployment mode on GetDeployment and BatchGetDeployments. The new deploymentMode field on DeploymentInfo indicates whether a deployment used the standard deployment process or restarted the application using a previously installed revision (RESTART mode).
• api-change:glue: [botocore] Amazon Glue releasing the new API ListIntegrationTableProperties and adding IntegrationArn to TargetTableConfig
• api-change:imagebuilder: [botocore] This release adds a dryRun option to Image Builder create APIs (except CreateImage), structured failure context on failed images including component and distribution failure details, and step retry attempt tracking.
• api-change:sts: [botocore] Increases the maximum session token size to 4,096 bytes and removes the packed policy size limit. Adds SessionTokenSize and SessionTokenUtilization fields and a new MinimumSessionTokenSize parameter. PackedPolicySize is deprecated.

v1.43.93

Compare Source

=======

• api-change:batch: [botocore] Added new bulk job APIs (CancelJobs, TerminateJobs, TerminateServiceJobs) and new fields on ListJobs and ListServiceJobs responses. This allows customers to cancel or terminate multiple jobs in a single request. ListJobs and ListServiceJobs responses now include isCancelled and isTerminated fields.
• api-change:ecs: [botocore] This feature adds support for setting the cpu architecture type that should be used to launch tasks for an Express Gateway Service.
• api-change:invoicing: [botocore] Add ListProcurementPortals and ListProcurementPortalSuppliers APIs to retrieve AWS-supported 3rd party procurement portals and their suppliers for e-invoice delivery and purchase order retrieval.
• api-change:lightsail: [botocore] Amazon Lightsail now lets you serve website content from a private Lightsail bucket through a Lightsail distribution. This release adds enablePrivateOriginAccess to the CreateDistribution and UpdateDistribution actions, plus new defaultRootObject and customErrorResponses options.
• api-change:mediaconvert: [botocore] Adds Dolby Vision metadata to Probe results, including profile, level, and presence of the RPU, base layer, and enhancement layer. Adds video sample and display aspect ratios. Adds the UnprocessableEntityException (HTTP 422) error to Probe for recognized but malformed or corrupt inputs.
• api-change:s3: [botocore] Updated S3 Object Lock Default Retention documentation.
• bugfix:Serialization: [botocore] Preserve sub-second precision when serializing unixTimestamp request parameters. Timestamps with a fractional component are now sent as a fractional value (e.g. 1704110400.123456) instead of being truncated to whole seconds (fixes #&#8203;3255 <https://github.com/boto/botocore/issues/3255>__). Whole-second timestamps are unchanged. The previous behavior can be restored by setting timestamp_precision to 'legacy' in a creating-serializer event handler.

v1.43.92

Compare Source

=======

• api-change:bedrock-agent: [botocore] TwelveLabs Marengo 3.0 is now an embedding model option in Amazon Bedrock Managed Knowledge Base. Create multimodal embeddings for video, audio, and image content that capture visual scenes, speech, and video cues, not just transcribed text.
• api-change:ec2: [botocore] The CreateImage API now supports a BootModeOverride parameter to explicitly set UEFI boot mode on a new AMI, overriding the source instance's inherited boot mode.
• api-change:outposts: [botocore] Added fields to identify Outpost generation and rack scaling configuration on Outpost and CatalogItem resources.
• api-change:resiliencehubv2: [botocore] This release adds the ListTestRunSourceEvents and ListTestRunDependencies APIs, which return the alarm state changes during a test run and the dependencies the run blocked.
• api-change:rtbfabric: [botocore] AWS RTB Fabric now lets you control how traffic is routed to your responder gateway across Availability Zones. Set the new clientRoutingPolicy parameter to keep traffic within the same Availability Zone or distribute traffic across all Availability Zones.
• api-change:sagemaker: [botocore] This release adds the ability for customers to attach customer owned Elastic Network Interfaces (ENIs) to HyperPod cluster nodes.

v1.43.91

Compare Source

=======

• api-change:connect: [botocore] Add metric configuration field to evaluation forms and ListEvaluationFormAIVersions API for retrieving AI-generated evaluation form versions
• api-change:ec2: [botocore] This release adds support for sharing Amazon EBS volumes across AWS accounts using AWS Resource Access Manager (RAM). Consuming accounts can view shared volume metadata and create copies of shared volumes within the same Availability Zone, with optional re-encryption using their own KMS key.
• api-change:elementalinference: [botocore] This release adds contextual metadata, a feed output type that generates a descriptive summary of your media content along with IAB taxonomy and GARM suitability classifications. It also adds feed resource policies for granting cross-account access to a feed.
• api-change:lambda: [botocore] Updates documentation for lambda function timeout.
• api-change:medialive: [botocore] MediaLive now supports Manual Style Control for vertical caption positioning in TTML, WebVTT, and Embedded captions, Contextual Metadata Enrichment via Elemental Inference, and an Output Usage field on MediaPackage v2 for Dynamic Multiview validation.
• api-change:mediapackagev2: [botocore] Dynamic Multiview enables viewers to watch multiple live video streams in a single combined output. Viewers can select from 6 preset tiled layouts. Create MediaPackage channels with Input Type MULTIVIEW and configure Available Layouts and Available Sources. See the API Documentation for details.
• api-change:mediatailor: [botocore] Added the AWS Service Request function type for MediaTailor Functions, enabling authenticated requests to AWS Elemental Inference for contextual ad targeting during ad insertion.
• api-change:pcs: [botocore] This release adds support for custom Gres.conf configuration and Slurm version 26.05 in AWS PCS. Customers can now specify generic resource (GRES) settings to control how GPUs and other resources are configured and shared on their compute node groups.

v1.43.90

Compare Source

=======

• api-change:appflow: [botocore] Amazon AppFlow now supports key pair (RSA private key) authentication for the Snowflake connector. You can provide a privateKey in SnowflakeConnectorProfileCredentials, and password is no longer required. This is a non-breaking, additive change available via the AWS SDK and CLI.
• api-change:cloudtrail: [botocore] Adds support for the RecursiveLogging trail setting, which suppresses recursive events generated when CloudTrail delivers logs to a trail's destinations.
• api-change:connect: [botocore] Releasing workload types feature. A proper launch announcement or details will follow up.
• api-change:ec2: [botocore] Adds the InterfaceTypes field to NetworkCardInfo in the DescribeInstanceTypes response. This field identifies the network interface types supported by each network card.
• api-change:mgn: [botocore] This release adds support for configuring the EBS volume initialization rate and delete on termination behavior in launch configuration template
• api-change:omics: [botocore] Added support for session policies in AWS HealthOmics Workflows, allowing customers to scope down IAM permissions for individual workflow runs without modifying the service role.
• api-change:pinpoint-sms-voice-v2: [botocore] This feature will allow customers to specify an area-code when requesting a 10DLC number. Why it matters- Customers can now select a number that matches where their business is located.
• api-change:s3: [botocore] Adds support for Amazon S3 Object Lock variable retention. Existing S3 APIs that support S3 Object Lock parameters now support two new parameters EventHold and EventHoldDuration at the object level, and DefaultEventHoldDuration at the bucket level.
• api-change:s3control: [botocore] Adds support for Amazon S3 Object Lock variable retention. Existing S3 APIs that support S3 Object Lock parameters now support two new parameters EventHold and EventHoldDuration at the object level, and DefaultEventHoldDuration at the bucket level.
• api-change:sagemaker: [botocore] Add support for InstancePreferences list for multiple instance type input support on SageMaker Training and Processing

v1.43.89

Compare Source

=======

• api-change:bedrock: [botocore] New AWS REVIEW mode as supported data retention mode for Bedrock models
• api-change:ec2: [botocore] Adds support for ValidateSecurityGroupQuotasForInterface, an API that specifically authorized AWS services use to validate security group rule quotas before creating an elastic network interface.
• api-change:mediatailor: [botocore] Elemental MediaTailor now supports two new Monetization Functions lifecycle hooks, Post Ads Response and Pre Manifest Insertion, and a VAST Request function type that calls a VAST or VMAP ad server. This release also adds Yield Optimization with demand from Amazon Publisher Services.
• api-change:service-quotas: [botocore] Service Quotas adds the AdjustableAtLevel property to QuotaContext, indicating whether a quota is adjustable at the account or resource level.

v1.43.88

[Compare Source](https://redirect.github.com/boto/boto3

❗ Important

✂ PR body was truncated to here.

[github-actions]

Automated Reviewer Suggestions

Based on the git blame history of the changed files, we recommend the following reviewers:

• Contributors with relevant context: @tanishqgandhi1908
  You can notify them by mentioning @tanishqgandhi1908 in a comment.

[codecov-commenter]

⚠️ JUnit XML file not found

The CLI was unable to find any JUnit XML files to upload.
For more help, visit our troubleshooting guide.