Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update moto requirement from <5,>=3 to >=3,<6 #1046

Merged
merged 2 commits into from
Mar 7, 2024

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Mar 5, 2024

Updates the requirements on moto to permit the latest version.

Changelog

Sourced from moto's changelog.

5.0.2

Docker Digest for 5.0.2: sha256:89cc6c764d714bf76e592a61f0c06fd142f672085e1dd3a53eb734aaeb4e14e2

General:
    * Removed the `python-jose` and `sshpubkeys` dependencies in favor of `joserfc`. This removes a transitive dependency on `ecdsa`, which contains a open security vulnerability

New Methods: * Autoscaling: * batch_put_scheduled_update_group_action() * batch_delete_scheduled_action()

* RDS:
    * create_db_proxy()
    * describe_db_proxies()

Miscellaneous: * AWSLambda: The ImageConfig.EntryPoint of a function is now used when invoking it in a Docker container * CognitoIDP now allows public actions even if IAM auth is enabled * DynamoDB: create_table() now validates the number of KeySchema-items * EC2: modify_image_attributes() now supports all LaunchPermissions * ECS: register_task_definition() now has improved validation around memory-parameters * Glue: create_database() now supports the tags-parameter * IAM: assume_user()/create_user()/get_caller_identity() now return the correct partition for China (aws-cn) when called from a Chinese region * ResourceGroupsTagging: get_resources() now supports ELB resources * Route53: list_hosted_zones() now supports pagination * S3: put_bucket_notification_configuration() now supports EventBridge-notifications * SES now returns errors in the correct format

5.0.1

Docker Digest for 5.0.1: sha256:b6004b2e112c0ba870b2103049548abecec476edeac7a724ed9c71249358e821

New Methods:
    * SecretsManager:
        * remove_regions_from_replication()
        * replicate_secret_to_regions()

Miscellaneous: * AWSLambda: create_event_source_mapping() now supports Kinesis streams as targets * CloudFront: Removed error handling for InvalidOriginServer, as our validation was too strict * DynamoDB: batch_execute_statement() now supports for Update/Insert/Delete-statements * DynamoDB: query() now correctly handles calls where both Limit and ScanIndexForward are supplied * EC2: Now supports availability zones for eu-central-2 (Zurich) * S3: list_objects_v2() can now return more then 1000 results max (again) * S3: copy_object() now allows in-place copies when bucket versioning is enabled * SecretsManager: create_secrets() now supports the parameters AddReplicaRegions and ForceOverwriteReplicaSecret * SecretsManager: list_secrets() now supports the filters primary-region and owning-service

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Mar 5, 2024
@dependabot dependabot bot force-pushed the dependabot/pip/moto-gte-3-and-lt-6 branch 3 times, most recently from 796f059 to c36396d Compare March 6, 2024 00:00
Updates the requirements on [moto](https://github.com/getmoto/moto) to permit the latest version.
- [Release notes](https://github.com/getmoto/moto/releases)
- [Changelog](https://github.com/getmoto/moto/blob/master/CHANGELOG.md)
- [Commits](getmoto/moto@3.0.0...5.0.2)

---
updated-dependencies:
- dependency-name: moto
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/pip/moto-gte-3-and-lt-6 branch from c36396d to 02955f9 Compare March 6, 2024 00:14
This change allows the import to use the old and new version of the dependency
Copy link

codecov bot commented Mar 6, 2024

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 91.76%. Comparing base (996f29f) to head (69c2015).

Additional details and impacted files
@@           Coverage Diff           @@
##             main    #1046   +/-   ##
=======================================
  Coverage   91.76%   91.76%           
=======================================
  Files         181      181           
  Lines        6312     6312           
=======================================
  Hits         5792     5792           
  Misses        520      520           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

@WilliamBergamin WilliamBergamin requested a review from seratch March 6, 2024 18:35
@WilliamBergamin
Copy link
Contributor

I've introduced similar changes brought to the python-slack-sdk in #1463 in order to adapt to code to the major version of moto

@seratch seratch merged commit b5e5439 into main Mar 7, 2024
12 checks passed
@seratch seratch deleted the dependabot/pip/moto-gte-3-and-lt-6 branch March 7, 2024 00:15
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file python Pull requests that update Python code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants