Update Analytics

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
boto3	1.35.69 -> 1.35.70
boto3-stubs	1.35.69 -> 1.35.70
ruff (source, changelog)	^0.7.0 -> ^0.8.0
safety	3.2.9 -> 3.2.11

---

Release Notes

boto/boto3 (boto3)

v1.35.70

Compare Source

=======

• api-change:bedrock-agent: [botocore] Custom Orchestration API release for AWSBedrockAgents.
• api-change:bedrock-agent-runtime: [botocore] Custom Orchestration and Streaming configurations API release for AWSBedrockAgents.
• api-change:connect: [botocore] Enables access to ValueMap and ValueInteger types for SegmentAttributes and fixes deserialization bug for DescribeContactFlow in AmazonConnect Public API
• api-change:ec2: [botocore] Adds support for Time-based Copy for EBS Snapshots and Cross Region PrivateLink. Time-based Copy ensures that EBS Snapshots are copied within and across AWS Regions in a specified timeframe. Cross Region PrivateLink enables customers to connect to VPC endpoint services hosted in other AWS Regions.
• api-change:qapps: [botocore] Private sharing, file upload and data collection feature support for Q Apps

astral-sh/ruff (ruff)

v0.8.0

Compare Source

Check out the blog post for a migration guide and overview of the changes!

Breaking changes

See also, the "Remapped rules" section which may result in disabled rules.

• Default to Python 3.9

  Ruff now defaults to Python 3.9 instead of 3.8 if no explicit Python version is configured using ruff.target-version or project.requires-python (#​13896)

• Changed location of pydoclint diagnostics

  pydoclint diagnostics now point to the first-line of the problematic docstring. Previously, this was not the case.

  If you've opted into these preview rules but have them suppressed using
  noqa comments in
  some places, this change may mean that you need to move the noqa suppression
  comments. Most users should be unaffected by this change.

• Use XDG (i.e. ~/.local/bin) instead of the Cargo home directory in the standalone installer

  Previously, Ruff's installer used $CARGO_HOME or ~/.cargo/bin for its target install directory. Now, Ruff will be installed into $XDG_BIN_HOME, $XDG_DATA_HOME/../bin, or ~/.local/bin (in that order).

  This change is only relevant to users of the standalone Ruff installer (using the shell or PowerShell script). If you installed Ruff using uv or pip, you should be unaffected.

• Changes to the line width calculation

  Ruff now uses a new version of the unicode-width Rust crate to calculate the line width. In very rare cases, this may lead to lines containing Unicode characters being reformatted, or being considered too long when they were not before (E501).

Removed Rules

The following deprecated rules have been removed:

• missing-type-self (ANN101)
• missing-type-cls (ANN102)
• syntax-error (E999)
• pytest-missing-fixture-name-underscore (PT004)
• pytest-incorrect-fixture-name-underscore (PT005)
• unpacked-list-comprehension (UP027)

Remapped rules

The following rules have been remapped to new rule codes:

• flake8-type-checking: TCH to TC

Stabilization

The following rules have been stabilized and are no longer in preview:

• builtin-import-shadowing (A004)
• mutable-contextvar-default (B039)
• fast-api-redundant-response-model (FAST001)
• fast-api-non-annotated-dependency (FAST002)
• dict-index-missing-items (PLC0206)
• pep484-style-positional-only-argument (PYI063)
• redundant-final-literal (PYI064)
• bad-version-info-order (PYI066)
• parenthesize-chained-operators (RUF021)
• unsorted-dunder-all (RUF022)
• unsorted-dunder-slots (RUF023)
• assert-with-print-message (RUF030)
• unnecessary-default-type-args (UP043)

The following behaviors have been stabilized:

• ambiguous-variable-name (E741): Violations in stub files are now ignored. Stub authors typically don't control variable names.
• printf-string-formatting (UP031): Report all printf-like usages even if no autofix is available

The following fixes have been stabilized:

• zip-instead-of-pairwise (RUF007)

Preview features

• [flake8-datetimez] Exempt min.time() and max.time() (DTZ901) (#​14394)
• [flake8-pie] Mark fix as unsafe if the following statement is a string literal (PIE790) (#​14393)
• [flake8-pyi] New rule redundant-none-literal (PYI061) (#​14316)
• [flake8-pyi] Add autofix for redundant-numeric-union (PYI041) (#​14273)
• [ruff] New rule map-int-version-parsing (RUF048) (#​14373)
• [ruff] New rule redundant-bool-literal (RUF038) (#​14319)
• [ruff] New rule unraw-re-pattern (RUF039) (#​14446)
• [pycodestyle] Exempt pytest.importorskip() calls (E402) (#​14474)
• [pylint] Autofix suggests using sets when possible (PLR1714) (#​14372)

Rule changes

• invalid-pyproject-toml (RUF200): Updated to reflect the provisionally accepted PEP 639.
• [flake8-pyi] Avoid panic in unfixable case (PYI041) (#​14402)
• [flake8-type-checking] Correctly handle quotes in subscript expression when generating an autofix (#​14371)
• [pylint] Suggest correct autofix for __contains__ (PLC2801) (#​14424)

Configuration

• Ruff now emits a warning instead of an error when a configuration ignores a rule that has been removed (#​14435)
• Ruff now validates that lint.flake8-import-conventions.aliases only uses valid module names and aliases (#​14477)

pyupio/safety (safety)

v3.2.11

Compare Source

• chore/upgrade-dparse (#​633)
• Migrate to PyPI Trusted Publisher for Automated Package Deployment (#​632)
• fix/fix-test-validate-func (#​631)
• feat: api keys now work without specifying the env (#​630)
• fix:jupyter notebook rich format removal (#​628)

v3.2.10

Compare Source

• Support for scanning pyproject.toml files (#​625)
• Update safety-schemas version used (#​624)
• Fix basic poloicy test (#​622)

---

Configuration

📅 Schedule: Branch creation - "on the 2nd and 4th day instance on sunday after 9pm" in timezone America/New_York, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.