chore(deps): bump the python-dependencies group with 5 updates by dependabot[bot] · Pull Request #240 · AbsaOSS/EventGate

dependabot · 2026-10-11T23:54:13Z

Bumps the python-dependencies group with 5 updates:

Package	From	To
boto3	`1.43.107`	`1.43.110`
botocore	`1.43.107`	`1.43.110`
confluent-kafka	`2.15.1`	`2.16.0`
pylint	`4.1.1`	`4.1.2`
black	`26.5.1`	`26.10.0`

Updates boto3 from 1.43.107 to 1.43.110

Commits

d948ed5 Merge branch 'release-1.43.110'
dedcde7 Bumping version to 1.43.110
e09fb1d Add changelog entries from botocore
76f85a7 Bump https://github.com/astral-sh/ruff-pre-commit (#4856)
8afafec Merge branch 'release-1.43.109'
1a2fc5c Merge branch 'release-1.43.109' into develop
e1b096e Bumping version to 1.43.109
6e562a3 Add changelog entries from botocore
e19423d Merge branch 'release-1.43.108'
97c9426 Merge branch 'release-1.43.108' into develop
Additional commits viewable in compare view

Updates botocore from 1.43.107 to 1.43.110

Commits

6b8067a Merge branch 'release-1.43.110'
f657e28 Bumping version to 1.43.110
e89800d Update to latest models
fb2c9cb Bump https://github.com/astral-sh/ruff-pre-commit (#3816)
22be684 Merge branch 'release-1.43.109'
bfb412f Merge branch 'release-1.43.109' into develop
a9bac21 Bumping version to 1.43.109
f3f6058 Update endpoints model
116bfa7 Update to latest models
8c984ca Merge pull request #3814 from boto/kuhe/chore/lambdaweb
Additional commits viewable in compare view

Updates confluent-kafka from 2.15.1 to 2.16.0

Release notes

Sourced from confluent-kafka's releases.

v2.16.0 is a feature release with the following features, fixes and enhancements:

Enhancements

confluent_kafka now declares itself GIL-safe, enabling real multi-core parallelism on free-threaded CPython builds. See the Multithreading Guide for thread-safety details and free-threaded caveats. (#2347)

Add Python 3.14t wheels (#2352)

Add Linux s390x (IBM Z) wheels, including Python 3.14t (#2360)

Producer close() now aborts any open transaction (#2347)

Async IO Consumer's default worker pool size has been increased from 2 to 100 (#2347)

SerializingProducer and DeserializingConsumer accept a serde builder when not passing a ready-made serde, through the new key.serializer.builder / value.serializer.builder and key.deserializer.builder / value.deserializer.builder configuration properties. Serdes built this way, and any Schema Registry client the builder created for them, are owned by the client and closed by its close(); ready-made serdes remain the application's. This API is experimental (#2364).

Serdes that resolve subjects through the Schema Registry associated subject name strategy are now given the Kafka cluster id automatically. The id is resolved lazily, on the first subject lookup, so creating a client never waits on a broker, and concurrent lookups share a single cluster_id() call; until a broker has been reached the lookup raises a SerializationError naming subject.name.strategy.kafka.cluster.id, which can be set to supply the id explicitly. The new serde hooks (set_cluster_id_resolver(), close()) are experimental (#2364).

New Producer.cluster_id(), Consumer.cluster_id() and AdminClient.cluster_id() (also on AIOProducer and AIOConsumer), returning the id of the cluster the client is connected to. This API is experimental (#2364).

New asyncio clients AsyncSerializingProducer and AsyncDeserializingConsumer in confluent_kafka.aio, the counterparts of SerializingProducer and DeserializingConsumer built on AIOProducer / AIOConsumer, accepting the asyncio Schema Registry serdes and their builders. These classes are experimental (#2364).

New Message.deserialized_key() and Message.deserialized_value(), which return the same objects as key() and value() but are typed with the deserialized types on a DeserializingConsumer. SerializingProducer and DeserializingConsumer are now generic in their key and value types. This API is experimental (#2364).

Add support for saving Azure key version with DEK (#2306)

Pass context when clients make KEK calls to DEK Registry (#2308)

Schema Registry: add support for the DLQ (dead-letter-queue) rule action (DlqAction). When a rule fails, the record is teed to a configured DLQ topic and the original serialize/deserialize call still raises. With the default (global) RuleRegistry the DLQ is best-effort; set dlq.auto.flush=true or give the serde its own RuleRegistry (closable on shutdown) for durability.

Add support for inline validation rules (#2326)

Add Variant, Decimal, and Timestamp CEL functions (#2332)

Fixes

... (truncated)

Changelog

Sourced from confluent-kafka's changelog.

v2.16.0

v2.16.0 is a feature release with the following features, fixes and enhancements:

Enhancements

confluent_kafka now declares itself GIL-safe, enabling real multi-core parallelism on free-threaded CPython builds. See the Multithreading Guide for thread-safety details and free-threaded caveats. (#2347)

Add Python 3.14t wheels (#2352)

Add Linux s390x (IBM Z) wheels, including Python 3.14t (#2360)

Producer close() now aborts any open transaction (#2347)

Async IO Consumer's default worker pool size has been increased from 2 to 100 (#2347)

Add support for CPython free-threading (PEP 703) to enable true multi-core parallel execution in No-GIL environments (#2347)

SerializingProducer and DeserializingConsumer accept a serde builder when not passing a ready-made serde, through the new key.serializer.builder / value.serializer.builder and key.deserializer.builder / value.deserializer.builder configuration properties. Serdes built this way, and any Schema Registry client the builder created for them, are owned by the client and closed by its close(); ready-made serdes remain the application's. This API is experimental (#2364).

Serdes that resolve subjects through the Schema Registry associated subject name strategy are now given the Kafka cluster id automatically. The id is resolved lazily, on the first subject lookup, so creating a client never waits on a broker, and concurrent lookups share a single cluster_id() call; until a broker has been reached the lookup raises a SerializationError naming subject.name.strategy.kafka.cluster.id, which can be set to supply the id explicitly. The new serde hooks (set_cluster_id_resolver(), close()) are experimental (#2364).

New Producer.cluster_id(), Consumer.cluster_id() and AdminClient.cluster_id() (also on AIOProducer and AIOConsumer), returning the id of the cluster the client is connected to. This API is experimental (#2364).

New asyncio clients AsyncSerializingProducer and AsyncDeserializingConsumer in confluent_kafka.aio, the counterparts of SerializingProducer and DeserializingConsumer built on AIOProducer / AIOConsumer, accepting the asyncio Schema Registry serdes and their builders. These classes are experimental (#2364).

New Message.deserialized_key() and Message.deserialized_value(), which return the same objects as key() and value() but are typed with the deserialized types on a DeserializingConsumer. SerializingProducer and DeserializingConsumer are now generic in their key and value types. This API is experimental (#2364).

Add support for saving Azure key version with DEK (#2306)

Pass context when clients make KEK calls to DEK Registry (#2308)

Schema Registry: add support for the DLQ (dead-letter-queue) rule action (DlqAction). When a rule fails, the record is teed to a configured DLQ topic and the original serialize/deserialize call still raises. With the default (global) RuleRegistry the DLQ is best-effort; set dlq.auto.flush=true or give the serde its own RuleRegistry (closable on shutdown) for durability.

Add support for inline validation rules (#2326)

Add Variant, Decimal, and Timestamp CEL functions (#2332)

... (truncated)

Commits

4a1bcb0 Copy pyproject.toml into smoketest temp dir so asyncio_mode=auto applies (#2384)
16ba967 Fix Unicode errors in string serialization (#2379)
73a71f8 2.16.0 (#2380)
20614ae Integrate Schema Registry serdes into the Kafka clients: serde builders, clus...
7f2e72f Add s390x wheels to the build and verification matrix (#2360)
6a54a83 chore: normalize service.yml field names (#2193)
c57c5b8 Fix Producer.purge() ignoring boolean flags on big-endian platforms (#2345)
89c99e0 On Windows, the tag isn't currently given when building librdkafka, that affe...
cc1c970 v2.16.0rc2 (#2369)
d245efd Fix crash on nullable array of $ref items in JSON Schema CSFLE (#2370)
Additional commits viewable in compare view

Updates pylint from 4.1.1 to 4.1.2

Release notes

Sourced from pylint's releases.

v4.1.2

What's new in Pylint 4.1.2?

Release date: 2026-10-03

False Positives Fixed

Fixed a false positive unbalanced-tuple-unpacking when unpacking a tuple concatenation whose elements have several possible values.

Fixed by upgrading astroid to 4.3.3.

Closes #2621

Other Bug Fixes

Fixed a crash when calling __bases__ on a class.

Fixed by upgrading astroid to 4.3.3.

Closes #11491

Fix a crash (astroid-error) when the class of a called attribute cannot be fully inferred, for example when the attribute is used as a with statement target or inside a comprehension.

Closes #11492

Fix a crash when a name bound by a type statement (a TypeVar) is used in a with statement.

Closes #11510

Fixed a crash (TypeError) in the variables checker when checking a class whose metaclass name binding has no line number, for example a class defined with metaclass=__annotations__.

Closes #11511

Fix a crash in the using-final-decorator-in-unsupported-version check when import final is used.

Closes #11521

Fix a crash when a plugin passes confidence=None to add_message, as pylint-pytest does, for a message that is disabled. confidence=None is

... (truncated)

Commits

40be3a2 Bump pylint to 4.1.2, update changelog (#11536)
253023d [Backport maintenance/4.1.x] Revert confidence non nullable 11530 (#11535)
9b05c7a [Backport maintenance/4.1.x] Fix crash on TypeVar used as context manager in ...
e44b7a4 [Backport maintenance/4.1.x] Use is_typing_member to determine if a `typing...
aa353f9 [Backport maintenance/4.1.x] Fix TypeError crash on metaclass with lineno-les...
a787175 [Backport maintenance/4.1.x] Upgrade astroid to 4.3.3 (#11514)
5e1e72a [Backport maintenance/4.1.x] Fix crash (F0002) on call whose class lookup rai...
See full diff in compare view

Updates black from 26.5.1 to 26.10.0

Release notes

Sourced from black's releases.

26.10.0

Stable style

--line-ranges no longer inserts an empty line after a docstring when the range covers only the docstring itself (#5312)

Fix # fmt: skip on a bracketed ternary turning the surrounding tuple into a call (#5464)

Fix crash when # fmt: skip is placed on a one-line function or class with PEP 695 type parameters (#5429)

Fix an inline comment after the closing bracket of optional parentheses being moved inside the parentheses when the parenthesized expression contains own-line comments (#5395)

Fix unparseable output when # fmt: skip is placed on a bracket of an if, while, for, or with header (#5401, #5405)

Fix crash when formatting parenthesized expressions with multiple inline comments and # fmt: skip (#5414)

Fix parsing Jupyter notebook assignment magics when non-ASCII characters appear earlier on the line (#5381)

Preserve blank lines that come immediately before a # fmt: on comment (#5300)

Keep the parentheses around the target of an annotated assignment (e.g. (x): int = 5), which prevent CPython from including the name in __annotations__ (#5321)

Stop treating a t-string in docstring position as a docstring (e.g. t" spam " as the first statement of a module, class or function) (#5287)

Fix unparseable output for a t-string whose replacement field contains a quote (e.g. t'\'{a["b"]}\'') (#5265)

Fix unparseable output for a triple-quoted string whose body ends in an already-escaped double quote (e.g. '''\'''\"''') (#5262)

Fix --skip-magic-trailing-comma dropping the trailing comma from a split single-element tuple used as a lambda parameter default (#5246)

Fix unstable formatting when an inline comment sits on optional parentheses (e.g. a parenthesized assert message) (#5241)

Fix --skip-magic-trailing-comma dropping the trailing comma of a one-element subscript (a[x,]) when the line is long enough to be split and contains a power operator (#5272)

Fix crash when a standalone comment sits between tokens of a comprehension or lambda (#5144)

Fix inline comments on a bracket inside a comprehension being dropped (#5330)

Respect the magic trailing comma in a PEP 695 type parameter list containing a *TypeVarTuple or **ParamSpec (#5244)

Fix crash when a comment-only # fmt: off/# fmt: on block is followed by a with statement after another standalone comment (#5189)

Fix a crash when splitting case case if ... match patterns at very small line lengths (#5147)

Fix multiline docstring indentation when leading tabs are used inside indented docstrings (#5148)

Respect # fmt: skip on a line that opens a bracket (e.g. from x import ( # fmt: skip) when a standalone comment is among the bracket's contents (#5161)

Fix an AST safety error when separate # type: ignore comments in a parenthesized

... (truncated)

Changelog

Sourced from black's changelog.

Version 26.10.0

Stable style

--line-ranges no longer inserts an empty line after a docstring when the range covers only the docstring itself (#5312)

Fix # fmt: skip on a bracketed ternary turning the surrounding tuple into a call (#5464)

Fix crash when # fmt: skip is placed on a one-line function or class with PEP 695 type parameters (#5429)

Fix an inline comment after the closing bracket of optional parentheses being moved inside the parentheses when the parenthesized expression contains own-line comments (#5395)

Fix unparseable output when # fmt: skip is placed on a bracket of an if, while, for, or with header (#5401, #5405)

Fix crash when formatting parenthesized expressions with multiple inline comments and # fmt: skip (#5414)

Fix parsing Jupyter notebook assignment magics when non-ASCII characters appear earlier on the line (#5381)

Preserve blank lines that come immediately before a # fmt: on comment (#5300)

Keep the parentheses around the target of an annotated assignment (e.g. (x): int = 5), which prevent CPython from including the name in __annotations__ (#5321)

Stop treating a t-string in docstring position as a docstring (e.g. t" spam " as the first statement of a module, class or function) (#5287)

Fix unparseable output for a t-string whose replacement field contains a quote (e.g. t'\'{a["b"]}\'') (#5265)

Fix unparseable output for a triple-quoted string whose body ends in an already-escaped double quote (e.g. '''\'''\"''') (#5262)

Fix --skip-magic-trailing-comma dropping the trailing comma from a split single-element tuple used as a lambda parameter default (#5246)

Fix unstable formatting when an inline comment sits on optional parentheses (e.g. a parenthesized assert message) (#5241)

Fix --skip-magic-trailing-comma dropping the trailing comma of a one-element subscript (a[x,]) when the line is long enough to be split and contains a power operator (#5272)

Fix crash when a standalone comment sits between tokens of a comprehension or lambda (#5144)

Fix inline comments on a bracket inside a comprehension being dropped (#5330)

Respect the magic trailing comma in a PEP 695 type parameter list containing a *TypeVarTuple or **ParamSpec (#5244)

Fix crash when a comment-only # fmt: off/# fmt: on block is followed by a with statement after another standalone comment (#5189)

Fix a crash when splitting case case if ... match patterns at very small line lengths (#5147)

Fix multiline docstring indentation when leading tabs are used inside indented docstrings (#5148)

Respect # fmt: skip on a line that opens a bracket (e.g. from x import ( # fmt: skip) when a standalone comment is among the bracket's contents (#5161)

... (truncated)

Commits

4f1883b Prepare release 26.10.0 (#5478)
93e5c82 Do not split a docstring on non-newline characters (#5461)
2f3f992 Fix superlinear runtime growth with the number of input files (#5450)
d078e8e Refactor release process to be more automated and use immutable releases (#5296)
6408e69 Preserve leaf line numbers in append_leaves to prevent pragma line collapse (...
cf8560b Add is_formatted output to GitHub Action (#3526) (#5408)
9b65aa3 docs(contributing): fix two grammar typos in issue_triage.md (#5426)
e1c4783 Fix --force-exclude for paths containing .. (#5471)
34bfc69 Fix duplicated comments when string_processing rewrites a line (#5449)
5fe7881 Fix preview blank lines after a stub method (#5439)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the python-dependencies group with 5 updates: | Package | From | To | | --- | --- | --- | | [boto3](https://github.com/boto/boto3) | `1.43.107` | `1.43.110` | | [botocore](https://github.com/boto/botocore) | `1.43.107` | `1.43.110` | | [confluent-kafka](https://github.com/confluentinc/confluent-kafka-python) | `2.15.1` | `2.16.0` | | [pylint](https://github.com/pylint-dev/pylint) | `4.1.1` | `4.1.2` | | [black](https://github.com/psf/black) | `26.5.1` | `26.10.0` | Updates `boto3` from 1.43.107 to 1.43.110 - [Release notes](https://github.com/boto/boto3/releases) - [Commits](boto/boto3@1.43.107...1.43.110) Updates `botocore` from 1.43.107 to 1.43.110 - [Commits](boto/botocore@1.43.107...1.43.110) Updates `confluent-kafka` from 2.15.1 to 2.16.0 - [Release notes](https://github.com/confluentinc/confluent-kafka-python/releases) - [Changelog](https://github.com/confluentinc/confluent-kafka-python/blob/master/CHANGELOG.md) - [Commits](confluentinc/confluent-kafka-python@v2.15.1...v2.16.0) Updates `pylint` from 4.1.1 to 4.1.2 - [Release notes](https://github.com/pylint-dev/pylint/releases) - [Commits](pylint-dev/pylint@v4.1.1...v4.1.2) Updates `black` from 26.5.1 to 26.10.0 - [Release notes](https://github.com/psf/black/releases) - [Changelog](https://github.com/psf/black/blob/main/CHANGES.md) - [Commits](psf/black@26.5.1...26.10.0) --- updated-dependencies: - dependency-name: boto3 dependency-version: 1.43.110 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python-dependencies - dependency-name: botocore dependency-version: 1.43.110 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python-dependencies - dependency-name: confluent-kafka dependency-version: 2.16.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-dependencies - dependency-name: pylint dependency-version: 4.1.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: python-dependencies - dependency-name: black dependency-version: 26.10.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: python-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

coderabbitai · 2026-10-11T23:54:23Z

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Organization UI
Review profile: CHILL
Plan: Advanced
Run ID: 0e1c211e-739f-48e0-a315-dcc00fa57230

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

🔍 Trigger review

Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

_{Comment @coderabbitai help to get the list of available commands.}

dependabot Bot requested a review from oto-macenauer-absa as a code owner October 11, 2026 23:54

dependabot Bot added the auto update Changes by automated library update tool label Oct 11, 2026

dependabot Bot requested review from lsulak, petr-pokorny-absa and tmikula-dev as code owners October 11, 2026 23:54

dependabot Bot added infrastructure Project setup and deployment no RN No release notes required labels Oct 11, 2026

github-actions Bot approved these changes Oct 11, 2026

View reviewed changes

github-actions Bot enabled auto-merge (squash) October 11, 2026 23:54

lsulak approved these changes Oct 12, 2026

View reviewed changes

github-actions Bot merged commit 3bd1683 into master Oct 12, 2026
10 of 11 checks passed

github-actions Bot deleted the dependabot/pip/master/python-dependencies-11ceb218c6 branch October 12, 2026 15:22

Navigation Menu

Repository navigation

chore(deps): bump the python-dependencies group with 5 updates - #240

chore(deps): bump the python-dependencies group with 5 updates#240
github-actions[bot] merged 1 commit into
masterfrom
dependabot/pip/master/python-dependencies-11ceb218c6

dependabot Bot commented on behalf of github Oct 11, 2026

Uh oh!

coderabbitai Bot commented Oct 11, 2026

Review skipped

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Oct 11, 2026

Enhancements

Fixes

v2.16.0

Enhancements

v4.1.2

What's new in Pylint 4.1.2?

False Positives Fixed

Other Bug Fixes

26.10.0

Stable style

Version 26.10.0

Stable style

Uh oh!

coderabbitai Bot commented Oct 11, 2026

Review skipped

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant