build(deps): bump the patches group across 1 directory with 6 updates

[dependabot]

Bumps the patches group with 6 updates in the /lambda directory:

Package	From	To
aws-encryption-sdk	4.0.6	4.0.7
boto3	1.43.41	1.43.111
botocore	1.43.41	1.43.111
python-dotenv	1.2.2	1.2.4
s3transfer	0.19.0	0.19.2
typing-inspection	0.4.2	0.4.4

Updates aws-encryption-sdk from 4.0.6 to 4.0.7

Release notes

Sourced from aws-encryption-sdk's releases.

4.0.7 -- 2026-09-04

Fixes

• fix: validate encryption context entry lengths (#813) Thanks to kiwigitops for the contribution.

• fix: preserve root-cause errors in KMSMasterKey exception chaining (#815) Thanks to @​arpitjain099 for the contribution.

Maintenance

• deps: Extend supported MPL versions to include v1.11.3 (#816)

Changelog

Sourced from aws-encryption-sdk's changelog.

4.0.7 -- 2026-08-31

Fixes

• fix: validate encryption context entry lengths (#813) [#813](https://github.com/aws/aws-encryption-sdk-python/issues/813) <https://github.com/aws/aws-encryption-sdk-python/pull/813>_

  Thanks to kiwigitops for the contribution.

• fix: preserve root-cause errors in KMSMasterKey exception chaining (#815) [#815](https://github.com/aws/aws-encryption-sdk-python/issues/815) <https://github.com/aws/aws-encryption-sdk-python/pull/815>_

  Thanks to @arpitjain099 <https://github.com/arpitjain099>_ for the contribution.

Maintenance

• deps: Extend supported MPL_ versions to include v1.11.3 [#816](https://github.com/aws/aws-encryption-sdk-python/issues/816) <https://github.com/aws/aws-encryption-sdk-python/pull/816>_

Commits

• 401c9bb chore: preflight 4.0.7 release (#816)
• 0697b56 fix: preserve root-cause errors in KMSMasterKey exception chaining
• 695c995 chore: revert "fix: preserve root-cause errors in KMSMasterKey exception chai...
• 556ea55 fix: validate encryption context entry lengths (#805)
• 2c0200b chore: bump upstream-requirements-py311 pytest version (#808)
• 81e6529 chore(ci): bump tox == 4.25.0 (#811)
• 6b7007a fix: preserve root-cause errors in KMSMasterKey exception chaining (#809)
• 61040db chore: Update support policy to make v3 end of support (#806)
• 04b001e chore(ci): replace Busy Engineer's Workshop validation with in-repo install-a...
• See full diff in compare view

Updates boto3 from 1.43.41 to 1.43.111

Commits

• c14ee96 Merge branch 'release-1.43.111'
• 2309640 Bumping version to 1.43.111
• 1d6d2d9 Add changelog entries from botocore
• d948ed5 Merge branch 'release-1.43.110'
• 9b19947 Merge branch 'release-1.43.110' into develop
• dedcde7 Bumping version to 1.43.110
• e09fb1d Add changelog entries from botocore
• 76f85a7 Bump https://github.com/astral-sh/ruff-pre-commit (#4856)
• 8afafec Merge branch 'release-1.43.109'
• 1a2fc5c Merge branch 'release-1.43.109' into develop
• Additional commits viewable in compare view

Updates botocore from 1.43.41 to 1.43.111

Commits

• 0723d72 Merge branch 'release-1.43.111'
• b275f3f Bumping version to 1.43.111
• 7e12f17 Update to latest models
• 6b8067a Merge branch 'release-1.43.110'
• f550641 Merge branch 'release-1.43.110' into develop
• f657e28 Bumping version to 1.43.110
• e89800d Update to latest models
• fb2c9cb Bump https://github.com/astral-sh/ruff-pre-commit (#3816)
• 22be684 Merge branch 'release-1.43.109'
• bfb412f Merge branch 'release-1.43.109' into develop
• Additional commits viewable in compare view

Updates python-dotenv from 1.2.2 to 1.2.4

Release notes

Sourced from python-dotenv's releases.

v1.2.4

Fixed

• dotenv get no longer exits with code 1 for empty string values (KEY=) by [@​ShamikOfficial] in #700
• An unquoted empty value followed by an inline comment (e.g. KEY= # comment) is now parsed as an empty string instead of the comment text by [@​Noethix55555] in #663
• dotenv run --no-override now expands variable references with the same precedence as load_dotenv(override=False), so a value like ${BASE}/suffix uses the existing BASE from the environment instead of the one from the .env file by [@​ROTl24] in #698

v1.2.3

Fixed

• Strip a leading UTF-8 BOM from .env file contents so the first variable is no longer silently lost when the file is saved with BOM (e.g. by some JetBrains IDEs on Windows) by [@​h1whelan] in #640
• set_key now escapes backslashes, so values containing them (Windows paths, regular expressions) survive a write/read round-trip. Quoted values ending in an escaped backslash are no longer mis-parsed as an escaped quote, which used to swallow the following lines by [@​dchaudhari7177] in #680
• dotenv run now prints a friendly error instead of a traceback when no command is given by [@​bbc2] in #606
• Cache the parsed result for empty .env files so repeated dotenv_values/load_dotenv calls no longer re-read the file by [@​ReinerBRO] in #638

Changelog

Sourced from python-dotenv's changelog.

[1.2.4] - 2026-10-01

Fixed

• dotenv get no longer exits with code 1 for empty string values (KEY=) by [@​ShamikOfficial] in #700
• An unquoted empty value followed by an inline comment (e.g. KEY= # comment) is now parsed as an empty string instead of the comment text by [@​Noethix55555] in #663
• dotenv run --no-override now expands variable references with the same precedence as load_dotenv(override=False), so a value like ${BASE}/suffix uses the existing BASE from the environment instead of the one from the .env file by [@​ROTl24] in #698

[1.2.3] - 2026-08-16

Fixed

• Strip a leading UTF-8 BOM from .env file contents so the first variable is no longer silently lost when the file is saved with BOM (e.g. by some JetBrains IDEs on Windows) by [@​h1whelan] in #640
• set_key now escapes backslashes, so values containing them (Windows paths, regular expressions) survive a write/read round-trip. Quoted values ending in an escaped backslash are no longer mis-parsed as an escaped quote, which used to swallow the following lines by [@​dchaudhari7177] in #680
• dotenv run now prints a friendly error instead of a traceback when no command is given by [@​bbc2] in #606
• Cache the parsed result for empty .env files so repeated dotenv_values/load_dotenv calls no longer re-read the file by [@​ReinerBRO] in #638

Commits

• a565c2c Bump version: 1.2.3 → 1.2.4
• 4a7abd0 docs: add 1.2.4 release notes (#663, #698, #700)
• f215c02 fix: dotenv get exits 0 for empty string values (#700)
• 58f2d7c test: make test_run_with_command_flags portable and meaningful (#709)
• e0310e5 fix: honor --no-override when expanding variables in dotenv run (#698)
• a00cb2e docs: add CHANGELOG entry for #663 (fix #600)
• f5485a6 fix: parse empty unquoted value with inline comment as empty string
• 49515af Bump version: 1.2.2 → 1.2.3
• 8ac846f chore: add release runbook (RELEASING.md) and make release target
• bb31c94 docs: add 1.2.3 release notes (#606, #638, #680)
• Additional commits viewable in compare view

Updates s3transfer from 0.19.0 to 0.19.2

Changelog

Sourced from s3transfer's changelog.

0.19.2

• bugfix:TLS: Return a configuration error when the CA bundle value (ca_bundle, AWS_CA_BUNDLE, REQUESTS_CA_BUNDLE, or verify) resolves to an empty or whitespace-only string.

0.19.1

• bugfix:s3: Only pin VersionId if supplied by caller instead of automatically using value from HeadObject response

Commits

• 467a752 Merge branch 'release-0.19.2'
• 3c4a70b Bumping version to 0.19.2
• 43e2978 Raise error on empty CA bundle value (#410)
• 992085b Bump the github-actions group with 3 updates (#409)
• 70d5f8b Bump https://github.com/astral-sh/ruff-pre-commit (#408)
• 71bdbb7 Merge branch 'release-0.19.1'
• 30b8295 Merge branch 'release-0.19.1' into develop
• b51243d Bumping version to 0.19.1
• 9be530d Don't use VersionId from HeadObject for multipart copies (#407)
• 314b559 Bump https://github.com/astral-sh/ruff-pre-commit (#404)
• Additional commits viewable in compare view

Updates typing-inspection from 0.4.2 to 0.4.4

Release notes

Sourced from typing-inspection's releases.

v0.4.3 2026-08-10

What's Changed

• Drop support for Python 3.9 by @​Viicos in #52
• Avoid module getattr() calls in typing_objects functions by @​Viicos in #57
• Add Python 3.15 support by @​Viicos in #59

Full Changelog: pydantic/typing-inspection@v0.4.2...v0.4.3

Changelog

Sourced from typing-inspection's changelog.

v0.4.4 (2026-08-12)

• Add typing_objects.DEPRECATED_ALIASES_ID by @​Viicos in #63

v0.4.3 (2026-08-10)

• Drop support for Python 3.9 by @​Viicos in #52
• Avoid module getattr() calls in typing_objects functions by @​Viicos in #57
• Add Python 3.15 support by @​Viicos in #59

Commits

• 83d4dbb Prepare release v0.4.4 (#64)
• 3ac9791 Fixes to DEPRECATED_ALIASES_IDS (#65)
• 382616c Add typing_objects.DEPRECATED_ALIASES_IDS (#63)
• cef71ba Fix docs publish CI job (#62)
• 7b09e7a Fix coverage CI job (#61)
• 2648bdf Prepare release 0.4.3 (#60)
• 7c14c75 Add Python 3.15 support (#59)
• 677b2ae Fix docs publish CI permissions (#58)
• 5e33e8d Avoid module getattr() calls in typing_objects functions (#57)
• f576d83 Fix Literal test (#56)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[github-actions]

🏗️ CDK infra diff — PR vs main

ServerlessApp-us-east-1-stage/ServerlessAppBackend-us-east-1

Stack ServerlessApp-us-east-1-stage/ServerlessAppBackend-us-east-1 (ServerlessAppBackend-us-east-1)
Resources
[-] AWS::Lambda::Version ServerlessAppBackend-us-east-1/App/ApiFunction/CurrentVersion AppApiFunctionCurrentVersion01C510AC03ad93a9f883b9e343a3e09607673f76 destroy
[+] AWS::Lambda::Version ServerlessAppBackend-us-east-1/App/ApiFunction/CurrentVersion AppApiFunctionCurrentVersion01C510AC81e036312ca5d2384dd20b82ce508844
[~] AWS::Lambda::Function ServerlessAppBackend-us-east-1/App/ApiFunction AppApiFunctionDE515850
 ├─ [~] Code
 │   └─ [~] .S3Key:
 │       ├─ [-] d4412f8dfbba9e24452e540894e597c50f7f8e442b0e0b68864df12e5aa6c25a.zip
 │       └─ [+] e63ee4622ec898d762e748637e4c3b45a0f9649d3770a5954f33cfaf2ac795b2.zip
 └─ [~] Metadata
     └─ [~] .aws:asset:path:
         ├─ [-] ../asset.d4412f8dfbba9e24452e540894e597c50f7f8e442b0e0b68864df12e5aa6c25a
         └─ [+] ../asset.e63ee4622ec898d762e748637e4c3b45a0f9649d3770a5954f33cfaf2ac795b2
[~] AWS::Lambda::Alias ServerlessAppBackend-us-east-1/App/LiveAlias AppLiveAlias3872472E
 └─ [~] FunctionVersion
     └─ [~] .Fn::GetAtt:
         └─ @@ -1,4 +1,4 @@
            [ ] [
            [-]   "AppApiFunctionCurrentVersion01C510AC03ad93a9f883b9e343a3e09607673f76",
            [+]   "AppApiFunctionCurrentVersion01C510AC81e036312ca5d2384dd20b82ce508844",
            [ ]   "Version"
            [ ] ]



✨  Number of stacks with differences: 1