chore(deps): update backend

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence	Type	Update
Authlib	==0.14.3 -> ==1.4.0						major
Flask (changelog)	>=2.2.3, <3 -> >=3.1, <4						major
boto3	~=1.34.114 -> ~=1.35.96						minor
cellxgene-ontology-guide (changelog)	~=1.0.0 -> ~=1.3.1						minor
connexion	==2.14.2 -> ==3.2.0						major
connexion	~=2.14.2 -> ~=3.2.0						major
dataclasses-json (changelog)	==0.6.6 -> ==0.6.7						patch
datadog	==0.49.1 -> ==0.50.2						minor
ddtrace (changelog)	~=2.8.5 -> ~=2.18.1						minor
gunicorn (changelog)	==22.0.0 -> ==23.0.0						major
gunicorn (changelog)	~=22.0.0 -> ~=23.0.0						major
matplotlib	>=3.6.3, <3.7 -> >=3.10, <3.11						minor
numba	~=0.59.1 -> ~=0.60.0						minor
psutil	~=5.9.8 -> ~=6.1.1						major
psutil	>=5.9.5, <6 -> >=6.1.1, <7						major
pyarrow	==16.0.0 -> ==18.1.0						major
pydantic (changelog)	~=1.10.7 -> ~=2.10.5						major
pydantic (changelog)	>=1.10.7, <2 -> >=2.10.5, <3						major
scipy	~=1.13.1 -> ~=1.15.0						minor
swagger-ui (source)	3.23.11 -> 5.18.2						major
swagger-ui (source)	3.0.13 -> 5.18.2						major
ubuntu	22.04 -> 24.04					final	major

---

Release Notes

lepture/authlib (Authlib)

v1.4.0

Compare Source

v1.3.2: Version 1.3.2

Compare Source

• Prevent ever-growing session size for OAuth clients.
• Revert quote client id and secret.
• unquote basic auth header for authorization server.

v1.3.1: Version 1.3.1

Compare Source

Prevent OctKey to import ssh and PEM strings.

v1.3.0: Version 1.3.0

Compare Source

Bug fixes

• Restore AuthorizationServer.create_authorization_response behavior, via #​558 by @​TurnrDev
• Include leeway in validate_iat() for JWT, via #​565 by @​dhallam
• Fix encode_client_secret_basic, via #​594 by @​Prilkop
• Use single key in JWK if JWS does not specify kid, via #​596 by @​dklimpel
• Fix error when RFC9068 JWS has no scope field, via #​598 by @​tanguilp
• Get werkzeug version using importlib, via #​591 by @​Sparrow0hawk

Breaking changes

• RFC9068 implementation, via #​586 by @​azmeuk.

v1.2.1: Version 1.2.1

Compare Source

• Apply headers in ClientSecretJWT.sign method, via #​552
• Allow falsy but non-None grant uri params, via #​544
• Fixed authorize_redirect for Starlette v0.26.0, via #​533
• Removed has_client_secret method and documentation, via #​513
• Removed request_invalid and token_revoked remaining occurences
  and documentation. #​514
• Fixed RFC7591 grant_types and response_types default values, via #​509
• Add support for python 3.12, via #​590

v1.2.0: Version 1.2.0

Compare Source

• Not passing request.body to ResourceProtector, #​485.
• Use flask.g instead of _app_ctx_stack, #​482.
• Add headers parameter back to ClientSecretJWT, #​457.
• Always passing realm parameter in OAuth 1 clients, #​339.
• Implemented RFC7592 Dynamic Client Registration Management Protocol, #​505`
• Add default_timeout for requests OAuth2Session and AssertionSession.
• Deprecate jwk.loads and jwk.dumps

v1.1.0: Version 1.1.0

Compare Source

This release contains breaking changes and security fixes.

• Allow to pass claims_options to Framework OpenID Connect clients, via #​446 by @​Galaxy102
• Fix .stream with context for HTTPX OAuth clients, via #​465 by @​bjoernmeier
• Fix Starlette OAuth client for cache store, via #​478 by @​haggen

Breaking changes:

• Raise InvalidGrantError for invalid code, redirect_uri and no user errors in OAuth 2.0 server.
• The default authlib.jose.jwt would only work with JSON Web Signature algorithms, if you would like to use JWT with JWE algorithms, please pass the algorithms parameter:

jwt = JsonWebToken(['A128KW', 'A128GCM', 'DEF'])

Security fixes for JOSE module

• CVE-2022-39175
• CVE-2022-39174

v1.0.1: Version 1.0.1

Compare Source

• Fix authenticate_none method, via #​438.
• Allow to pass in alternative signing algorithm to RFC7523 authentication methods via #​447.
• Fix missing_token for Flask OAuth client, via #​448.
• Allow openid in any place of the scope, via #​449.
• Security fix for validating essential value on blank value in JWT, via #​445.

v1.0.0: Version 1.0.0

Compare Source

We have dropped support for Python 2 in this release. We have removed
built-in SQLAlchemy integration.

OAuth Client Changes:

The whole framework client integrations have been restructured, if you are
using the client properly, e.g. oauth.register(...), it would work as
before.

OAuth Provider Changes:

In Flask OAuth 2.0 provider, we have removed the deprecated
OAUTH2_JWT_XXX configuration, instead, developers should define
.get_jwt_config on OpenID extensions and grant types.

SQLAlchemy integrations has been removed from Authlib. Developers
should define the database by themselves.

JOSE Changes

• JWS has been renamed to JsonWebSignature
• JWE has been renamed to JsonWebEncryption
• JWK has been renamed to JsonWebKey
• JWT has been renamed to JsonWebToken

The "Key" model has been re-designed, checkout the JSON Web Key for updates.

Added ES256K algorithm for JWS and JWT.

Breaking Changes: find how to solve the deprecate issues via https://git.io/JkY4f

v0.15.6

Compare Source

v0.15.5: Version 0.15.5

Compare Source

• Make Authlib compatible with latest httpx
• Make Authlib compatible with latest werkzeug
• Allow customize RFC7523 alg value

v0.15.4: Version 0.15.4

Compare Source

Security fix when JWT claims is None.

For example, JWT payload has iss=None:

{
  "iss": None,
  ...
}

But we need to decode it with claims:

claims_options = {
  'iss': {'essential': True, 'values': ['required']}
}
jwt.decode(token, key, claims_options=claims_options)

It didn't raise an error before this fix.

v0.15.3: Version 0.15.3

Compare Source

Fixed .authorize_access_token for OAuth 1.0 services, via https://github.com/lepture/authlib/issues/308

v0.15.2: Version 0.15.2

Compare Source

Fixed httpx authentication bug via #​283

v0.15.1: Version 0.15.1

Compare Source

Backward compitable fix for using JWKs in JWT, via #​280.

v0.15: Version 0.15

Compare Source

This is the last release before v1.0. In this release, we added more RFCs
implementations and did some refactors for JOSE:

• RFC8037: CFRG Elliptic Curve Diffie-Hellman (ECDH) and Signatures in JSON Object Signing and Encryption (JOSE)
• RFC7638: JSON Web Key (JWK) Thumbprint

We also fixed bugs for integrations:

• Fixed support for HTTPX>=0.14.3
• Added OAuth clients of HTTPX back via #​270
• Fixed parallel token refreshes for HTTPX async OAuth 2 client
• Raise OAuthError when callback contains errors via #​275

Breaking Change:

1. The parameter algorithms in JsonWebSignature and JsonWebEncryption
   are changed. Usually you don't have to care about it since you won't use it directly.
2. Whole JSON Web Key is refactored, please check JSON Web Key (JWK)

pallets/flask (Flask)

v3.1.0

Compare Source

Released 2024-11-13

• Drop support for Python 3.8. :pr:5623
• Update minimum dependency versions to latest feature releases.
  Werkzeug >= 3.1, ItsDangerous >= 2.2, Blinker >= 1.9. :pr:5624,5633
• Provide a configuration option to control automatic option
  responses. :pr:5496
• Flask.open_resource/open_instance_resource and
  Blueprint.open_resource take an encoding parameter to use when
  opening in text mode. It defaults to utf-8. :issue:5504
• Request.max_content_length can be customized per-request instead of only
  through the MAX_CONTENT_LENGTH config. Added
  MAX_FORM_MEMORY_SIZE and MAX_FORM_PARTS config. Added documentation
  about resource limits to the security page. :issue:5625
• Add support for the Partitioned cookie attribute (CHIPS), with the
  SESSION_COOKIE_PARTITIONED config. :issue:5472
• -e path takes precedence over default .env and .flaskenv files.
  load_dotenv loads default files in addition to a path unless
  load_defaults=False is passed. :issue:5628
• Support key rotation with the SECRET_KEY_FALLBACKS config, a list of old
  secret keys that can still be used for unsigning. Extensions will need to
  add support. :issue:5621
• Fix how setting host_matching=True or subdomain_matching=False
  interacts with SERVER_NAME. Setting SERVER_NAME no longer restricts
  requests to only that domain. :issue:5553
• Request.trusted_hosts is checked during routing, and can be set through
  the TRUSTED_HOSTS config. :issue:5636

v3.0.3

Compare Source

Released 2024-04-07

• The default hashlib.sha1 may not be available in FIPS builds. Don't
  access it at import time so the developer has time to change the default.
  :issue:5448
• Don't initialize the cli attribute in the sansio scaffold, but rather in
  the Flask concrete class. :pr:5270

v3.0.2

Compare Source

Released 2024-02-03

• Correct type for jinja_loader property. :issue:5388
• Fix error with --extra-files and --exclude-patterns CLI options.
  :issue:5391

v3.0.1

Compare Source

Released 2024-01-18

• Correct type for path argument to send_file. :issue:5230
• Fix a typo in an error message for the flask run --key option. :pr:5344
• Session data is untagged without relying on the built-in json.loads
object_hook. This allows other JSON providers that don't implement that.
  :issue:5381
• Address more type findings when using mypy strict mode. :pr:5383

v3.0.0

Compare Source

Released 2023-09-30

• Remove previously deprecated code. :pr:5223
• Deprecate the __version__ attribute. Use feature detection, or
  importlib.metadata.version("flask"), instead. :issue:5230
• Restructure the code such that the Flask (app) and Blueprint
  classes have Sans-IO bases. :pr:5127
• Allow self as an argument to url_for. :pr:5264
• Require Werkzeug >= 3.0.0.

boto/boto3 (boto3)

v1.35.96

Compare Source

=======

• api-change:codebuild: [botocore] AWS CodeBuild Now Supports BuildBatch in Reserved Capacity and Lambda
• api-change:compute-optimizer: [botocore] This release expands AWS Compute Optimizer rightsizing recommendation support for Amazon EC2 Auto Scaling groups to include those with scaling policies and multiple instance types.
• api-change:fms: [botocore] AWS Firewall Manager now lets you combine multiple resource tags using the logical AND operator or the logical OR operator.

v1.35.95

Compare Source

=======

• api-change:rds: [botocore] Updates Amazon RDS documentation to clarify the RestoreDBClusterToPointInTime description.
• api-change:route53: [botocore] Amazon Route 53 now supports the Asia Pacific (Thailand) Region (ap-southeast-7) for latency records, geoproximity records, and private DNS for Amazon VPCs in that region
• api-change:sagemaker: [botocore] Adds support for IPv6 for SageMaker HyperPod cluster nodes.

v1.35.94

Compare Source

=======

• api-change:cloudhsmv2: [botocore] Adds support to ModifyCluster for modifying a Cluster's Hsm Type.
• api-change:dynamodb: [botocore] This release makes Amazon DynamoDB point-in-time-recovery (PITR) to be configurable. You can set PITR recovery period for each table individually to between 1 and 35 days.
• api-change:imagebuilder: [botocore] This release adds support for importing images from ISO disk files. Added new ImportDiskImage API operation.

v1.35.93

Compare Source

=======

• api-change:iotsecuretunneling: [botocore] Adds dualstack endpoint support for IoT Secure Tunneling
• api-change:supplychain: [botocore] Allow vanity DNS domain when creating a new ASC instance

v1.35.92

Compare Source

=======

• api-change:ecs: [botocore] Adding SDK reference examples for Amazon ECS operations.
• api-change:route53domains: [botocore] Doc only update for Route 53 Domains that fixes several customer-reported issues
• api-change:s3: [botocore] This change is only for updating the model regexp of CopySource which is not for validation but only for documentation and user guide change.

v1.35.91

Compare Source

=======

• api-change:appsync: [botocore] Modify UpdateGraphQLAPI operation and flag authenticationType as required.
• api-change:gamelift: [botocore] Amazon GameLift releases a new game session shutdown feature. Use the Amazon GameLift console or AWS CLI to terminate an in-progress game session that's entered a bad state or is no longer needed.
• api-change:mediaconnect: [botocore] AWS Elemental MediaConnect now supports Content Quality Analysis for enhanced source stream monitoring. This enables you to track specific audio and video metrics in transport stream source flows, ensuring your content meets quality standards.
• api-change:mediaconvert: [botocore] This release adds support for the AVC3 codec and fixes an alignment issue with Japanese vertical captions.
• api-change:organizations: [botocore] Added ALL_FEATURES_MIGRATION_ORGANIZATION_SIZE_LIMIT_EXCEEDED to ConstraintViolationException for the EnableAllFeatures operation.
• api-change:sagemaker: [botocore] Adding ETag information with Model Artifacts for Model Registry
• api-change:sqs: [botocore] In-flight message typo fix from 20k to 120k.

v1.35.90

Compare Source

=======

• api-change:ecr: [botocore] Restoring custom endpoint functionality for ECR
• api-change:ecr-public: [botocore] Restoring custom endpoint functionality for ECR Public

v1.35.89

Compare Source

=======

• api-change:rds: [botocore] Updates Amazon RDS documentation to correct various descriptions.

v1.35.88

Compare Source

=======

• api-change:bcm-pricing-calculator: [botocore] Added ConflictException to DeleteBillEstimate.
• api-change:ecr: [botocore] Add support for Dualstack Endpoints
• api-change:network-firewall: [botocore] Dual-stack endpoints are now supported.
• api-change:securityhub: [botocore] Documentation updates for AWS Security Hub

v1.35.87

Compare Source

=======

• api-change:ecr: [botocore] Documentation update for ECR GetAccountSetting and PutAccountSetting APIs.
• api-change:ecr-public: [botocore] Add support for Dualstack endpoints
• api-change:eks: [botocore] This release adds support for DescribeClusterVersions API that provides important information about Kubernetes versions along with end of support dates
• api-change:glue: [botocore] Add IncludeRoot parameters to GetCatalogs API to return root catalog.

v1.35.86

Compare Source

=======

• api-change:bedrock-agent: [botocore] Support for custom user agent and max web pages crawled for web connector. Support app only credentials for SharePoint connector. Increase agents memory duration limit to 365 days. Support to specify max number of session summaries to include in agent invocation context.
• api-change:bedrock-agent-runtime: [botocore] bedrock agents now supports long term memory and performance configs. Invokeflow supports performance configs. RetrieveAndGenerate performance configs
• api-change:bedrock-data-automation: [botocore] Documentation update for Amazon Bedrock Data Automation
• api-change:bedrock-data-automation-runtime: [botocore] Documentation update for Amazon Bedrock Data Automation Runtime
• api-change:billing: [botocore] Added new API's for defining and fetching Billing Views.
• api-change:ce: [botocore] Support for retrieving cost, usage, and forecast for billing view.
• api-change:connect: [botocore] This release supports adding NotAttributeCondition and Range to the RoutingCriteria object.
• api-change:docdb: [botocore] Support AWS Secret Manager managed password for AWS DocumentDB instance-based cluster.
• api-change:eks: [botocore] This release expands the catalog of upgrade insight checks
• api-change:macie2: [botocore] This release adds support for identifying S3 general purpose buckets that exceed the Amazon Macie quota for preventative control monitoring.
• api-change:outposts: [botocore] Add CS8365C as a supported power connector for Outpost sites.
• api-change:sagemaker: [botocore] This release adds support for c6i, m6i and r6i instance on SageMaker Hyperpod and trn1 instances in batch

v1.35.85

Compare Source

=======

• api-change:appstream: [botocore] Added support for Rocky Linux 8 on Amazon AppStream 2.0
• api-change:mediaconvert: [botocore] This release adds support for inserting timecode tracks into MP4 container outputs.
• api-change:medialive: [botocore] MediaLive is releasing ListVersions api
• api-change:qconnect: [botocore] Amazon Q in Connect enables agents to ask Q for assistance in multiple languages and Q will provide answers and recommended step-by-step guides in those languages. Qs default language is English (United States) and you can switch this by setting the locale configuration on the AI Agent.
• api-change:ssm-sap: [botocore] AWS Systems Manager for SAP added support for registration and discovery of distributed ABAP applications
• api-change:workspaces: [botocore] Added AWS Global Accelerator (AGA) support for WorkSpaces Personal.

v1.35.84

Compare Source

=======

• api-change:amplify: [botocore] Added WAF Configuration to Amplify Apps
• api-change:budgets: [botocore] Releasing minor partition endpoint updates
• api-change:connect: [botocore] This release adds support for the UpdateParticipantAuthentication API used for customer authentication within Amazon Connect chats.
• api-change:connectparticipant: [botocore] This release adds support for the GetAuthenticationUrl and CancelParticipantAuthentication APIs used for customer authentication within Amazon Connect chats. There are also minor updates to the GetAttachment API.
• api-change:datasync: [botocore] AWS DataSync introduces the ability to update attributes for in-cloud locations.
• api-change:iot: [botocore] Release connectivity status query API which is a dedicated high throughput(TPS) API to query a specific device's most recent connectivity state and metadata.
• api-change:mwaa: [botocore] Added support for Apache Airflow version 2.10.3 to MWAA.
• api-change:quicksight: [botocore] Add support for PerformanceConfiguration attribute to Dataset entity. Allow PerformanceConfiguration specification in CreateDataset and UpdateDataset APIs.
• api-change:resiliencehub: [botocore] AWS Resilience Hub now automatically detects already configured CloudWatch alarms and FIS experiments as part of the assessment process and returns the discovered resources in the corresponding list API responses. It also allows you to include or exclude test recommendations for an AppComponent.
• api-change:transfer: [botocore] Added AS2 agreement configurations to control filename preservation and message signing enforcement. Added AS2 connector configuration to preserve content type from S3 objects.

v1.35.83

Compare Source

=======

• api-change:account: [botocore] Update endpoint configuration.
• api-change:backup: [botocore] Add Support for Backup Indexing
• api-change:backupsearch: [botocore] Add support for searching backups
• api-change:batch: [botocore] This feature allows AWS Batch on Amazon EKS to support configuration of Pod Annotations, overriding Namespace on which the Batch job's Pod runs on, and allows Subpath and Persistent Volume claim to be set for AWS Batch on Amazon EKS jobs.
• api-change:cleanroomsml: [botocore] Add support for SQL compute configuration for StartAudienceGenerationJob API.
• api-change:cloudfront: [botocore] Adds support for OriginReadTimeout and OriginKeepaliveTimeout to create CloudFront Distributions with VPC Origins.
• api-change:codepipeline: [botocore] AWS CodePipeline V2 type pipelines now support Managed Compute Rule.
• api-change:ecs: [botocore] Added support for enableFaultInjection task definition parameter which can be used to enable Fault Injection feature on ECS tasks.
• api-change:m2: [botocore] This release adds support for AWS Mainframe Modernization(M2) Service to allow specifying network type(ipv4, dual) for the environment instances. For dual network type, m2 environment applications will serve both IPv4 and IPv6 requests, whereas for ipv4 it will serve only IPv4 requests.
• api-change:synthetics: [botocore] Add support to toggle outbound IPv6 traffic on canaries connected to dualstack subnets. This behavior can be controlled via the new Ipv6AllowedForDualStack parameter of the VpcConfig input object in CreateCanary and UpdateCanary APIs.

v1.35.82

Compare Source

=======

• api-change:cloud9: [botocore] Added information about Ubuntu 18.04 will be removed from the available imageIds for Cloud9 because Ubuntu 18.04 has ended standard support on May 31, 2023.
• api-change:dlm: [botocore] This release adds support for Local Zones in Amazon Data Lifecycle Manager EBS snapshot lifecycle policies.
• api-change:ec2: [botocore] This release adds support for EBS local snapshots in AWS Dedicated Local Zones, which allows you to store snapshots of EBS volumes locally in Dedicated Local Zones.
• api-change:greengrassv2: [botocore] Add support for runtime in GetCoreDevice and ListCoreDevices APIs.
• api-change:medialive: [botocore] AWS Elemental MediaLive adds three new features: MediaPackage v2 endpoint support for live stream delivery, KLV metadata passthrough in CMAF Ingest output groups, and Metadata Name Modifier in CMAF Ingest output groups for customizing metadata track names in output streams.
• api-change:rds: [botocore] This release adds support for the "MYSQL_CACHING_SHA2_PASSWORD" enum value for RDS Proxy ClientPasswordAuthType.

v1.35.81

Compare Source

=======

• api-change:cloudhsmv2: [botocore] Add support for Dual-Stack hsm2m.medium clusters. The customers will now be able to create hsm2m.medium clusters having both IPv4 and IPv6 connection capabilities by specifying a new param called NetworkType=DUALSTACK during cluster creation.
• api-change:ec2: [botocore] This release adds GroupId to the response for DeleteSecurityGroup.
• api-change:eks: [botocore] Add NodeRepairConfig in CreateNodegroupRequest and UpdateNodegroupConfigRequest
• api-change:logs: [botocore] Limit PutIntegration IntegrationName and ListIntegrations IntegrationNamePrefix parameters to 50 characters
• api-change:mediaconnect: [botocore] AWS Elemental MediaConnect Gateway now supports Source Specific Multicast (SSM) for ingress bridges. This enables you to specify a source IP address in addition to a multicast IP when creating or updating an ingress bridge source.
• api-change:networkmanager: [botocore] There was a sentence fragment in UpdateDirectConnectGatewayAttachment that was causing customer confusion as to whether it's an incomplete sentence or if it was a typo. Removed the fragment.
• api-change:servicediscovery: [botocore] AWS Cloud Map now supports service-level attributes, allowing you to associate custom metadata directly with services. These attributes can be retrieved, updated, and deleted using the new GetServiceAttributes, UpdateServiceAttributes, and DeleteServiceAttributes API calls.

v1.35.80

Compare Source

=======

• api-change:connect: [botocore] Configure holidays and other overrides to hours of operation in advance. During contact handling, Amazon Connect automatically checks for overrides and provides customers with an appropriate flow path. After an override period passes call center automatically reverts to standard hours of operation.
• api-change:dms: [botocore] Add parameters to support for kerberos authentication. Add parameter for disabling the Unicode source filter with PostgreSQL settings. Add parameter to use large integer value with Kinesis/Kafka settings.
• api-change:glue: [botocore] To support customer-managed encryption in Data Quality to allow customers encrypt data with their own KMS key, we will add a DataQualityEncryption field to the SecurityConfiguration API where customers can provide their KMS keys.
• api-change:guardduty: [botocore] Improved descriptions for certain APIs.
• api-change:route53domains: [botocore] This release includes the following API updates: added the enumeration type RESTORE_DOMAIN to the OperationType; constrained the Price attribute to non-negative values; updated the LangCode to allow 2 or 3 alphabetical characters.

v1.35.79

Compare Source

=======

• api-change:artifact: [botocore] Add support for listing active customer agreements for the calling AWS Account.
• api-change:cloudtrail: [botocore] Doc-only updates for CloudTrail.
• api-change:cognito-idp: [botocore] Updated descriptions for some API operations and parameters, corrected some errors in Cognito user pools
• api-change:controlcatalog: [botocore] Minor documentation updates to the content of ImplementationDetails object part of the Control Catalog GetControl API
• api-change:emr-serverless: [botocore] This release adds support for accessing system profile logs in Lake Formation-enabled jobs.
• api-change:mgh: [botocore] API and documentation updates for AWS MigrationHub related to adding support for listing migration task updates and associating, disassociating and listing source resources
• api-change:sesv2: [botocore] Introduces support for multi-region endpoint.
• api-change:timestream-influxdb: [botocore] Adds networkType parameter to CreateDbInstance API which allows IPv6 support to the InfluxDB endpoint

v1.35.78

Compare Source

=======

• api-change:application-autoscaling: [botocore] Doc only update for AAS Predictive Scaling policy configuration API.
• api-change:bcm-pricing-calculator: [botocore] Updated condition key inference from Workload Estimate, Bill Scenario, and Bill Estimate resources. Updated documentation links.
• api-change:connect: [botocore] Add support for Push Notifications for Amazon Connect chat. With Push Notifications enabled an alert could be sent to customers about new messages even when they aren't actively using the mobile application.
• api-change:finspace: [botocore] Update KxCommandLineArgument value parameter regex to allow for spaces and semicolons
• api-change:ivs-realtime: [botocore] IVS Real-Time now offers customers the ability to customize thumbnails recording mode and interval for both Individual Participant Recording (IPR) and Server-Side Compositions (SSC).
• api-change:sesv2: [botocore] Introduces support for creating DEED (Deterministic Easy-DKIM) identities.

v1.35.77

Compare Source

=======

• api-change:appsync: [botocore] Provides description of new Amazon Bedrock runtime datasource.
• api-change:cognito-idp: [botocore] Change CustomDomainConfig from a required to an optional parameter for the UpdateUserPoolDomain operation.
• api-change:ec2: [botocore] This release includes a new API for modifying instance network-performance-options after launch.
• api-change:ecs: [botocore] This is a documentation only update to address various tickets for Amazon ECS.
• api-change:keyspaces: [botocore] Amazon Keyspaces: adding the list of IAM actions required by the UpdateKeyspace API.
• api-change:medialive: [botocore] H265 outputs now support disabling the deblocking filter.
• api-change:workspaces: [botocore] Added text to clarify case-sensitivity

v1.35.76

Compare Source

=======

• api-change:partnercentral-selling: [botocore] Introducing the preview of new partner central selling APIs designed to transform how AWS partners collaborate and co-sell with multiple partners. This enables multiple partners to seamlessly engage and jointly pursue customer opportunities, fostering a new era of collaborative selling.
• api-change:qbusiness: [botocore] This release removes the deprecated UserId and UserGroups fields from SearchRelevantContent api's request parameters.

v1.35.75

Compare Source

=======

• api-change:bedrock: [botocore] Introduced two APIs ListPromptRouters and GetPromptRouter for Intelligent Prompt Router feature. Add support for Bedrock Guardrails image content filter. New Bedrock Marketplace feature enabling a wider range of bedrock compatible models with self-hosted capability.
• api-change:bedrock-agent: [botocore] This release introduces the ability to generate SQL using natural language, through a new GenerateQuery API (with native integration into Knowledge Bases); ability to ingest and retrieve images through Bedrock Data Automation; and ability to create a Knowledge Base backed by Kendra GenAI Index.
• api-change:bedrock-agent-runtime: [botocore] This release introduces the ability to generate SQL using natural language, through a new GenerateQuery API (with native integration into Knowledge Bases); ability to ingest and retrieve images through Bedrock Data Automation; and ability to create a Knowledge Base backed by Kendra GenAI Index.
• api-change:bedrock-data-automation: [botocore] Release Bedrock Data Automation SDK
• api-change:bedrock-data-automation-runtime: [botocore] Release Bedrock Data Automation Runtime SDK
• api-change:bedrock-runtime: [botocore] Added support for Intelligent Prompt Router in Invoke, InvokeStream, Converse and ConverseStream. Add support for Bedrock Guardrails image content filter. New Bedrock Marketplace feature enabling a wider range of bedrock compatible models with self-hosted capability.
• api-change:kendra: [botocore] This release adds GenAI Index in Amazon Kendra for Retrieval Augmented Generation (RAG) and intelligent search. With the Kendra GenAI Index, customers get high retrieval accuracy powered by the latest information retrieval technologies and semantic models.
• api-change:sagemaker: [botocore] Amazon SageMaker HyperPod launched task governance to help customers maximize accelerator utilization for model development and flexible training plans to meet training timelines and budget while reducing weeks of training time. AI apps from AWS partner is now available in SageMaker.

v1.35.74

Compare Source

=======

• api-change:athena: [botocore] Add FEDERATED type to CreateDataCatalog. This creates Athena Data Catalog, AWS Lambda connector, and AWS Glue connection. Create/DeleteDataCatalog returns DataCatalog. Add Status, ConnectionType, and Error to DataCatalog and DataCatalogSummary. Add DeleteCatalogOnly to delete Athena Catalog only.
• api-change:bedrock: [botocore] Tagging support for Async Invoke resources. Added support for Distillation in CreateModelCustomizationJob API. Support for videoDataDeliveryEnabled flag in invocation logging.
• api-change:bedrock-agent: [botocore] Releasing SDK for Multi-Agent Collaboration.
• api-change:bedrock-agent-runtime: [botocore] Releasing SDK for multi agent collaboration
• api-change:bedrock-runtime: [botocore] Added support for Async Invoke Operations Start, List and Get. Support for invocation logs with requestMetadata field in Converse, ConverseStream, Invoke and InvokeStream. Video content blocks in Converse/ConverseStream accept raw bytes or S3 URI.
• api-change:cloudwatch: [botocore] Support for configuring AiOps investigation as alarm action
• api-change:datazone: [botocore] Adds support for Connections, ProjectProfiles, and JobRuns APIs. Supports the new Lineage feature at GA. Adjusts optionality of a parameter for DataSource and SubscriptionTarget APIs which may adjust types in some clients.
• api-change:dsql: [botocore] Add new API operations for Amazon Aurora DSQL. Amazon Aurora DSQL is a serverless, distributed SQL database with virtually unlimited scale, highest availability, and zero infrastructure management.
• api-change:dynamodb: [botocore] This change adds support for global tables with multi-Region strong consistency (in preview). The UpdateTable API now supports a new attribute MultiRegionConsistency to set consistency when creating global tables. The DescribeTable output now optionally includes the MultiRegionConsistency attribute.
• api-change:glue: [botocore] This release includes(1)Zero-ETL integration to ingest data from 3P SaaS and DynamoDB to Redshift/Redlake (2)new properties on Connections to enable reuse; new connection APIs for retrieve/preview metadata (3)support of CRUD operations for Multi-catalog (4)support of automatic statistics collections
• api-change:lakeformation: [botocore] This release added two new LakeFormation Permissions (CREATE_CATALOG, SUPER_USER) and added Id field for CatalogResource. It also added new conditon and expression field.
• api-change:qapps: [botocore] Add support for 11 new plugins as action cards to help automate repetitive tasks and improve productivity.
• api-change:qbusiness: [botocore] Amazon Q Business now supports customization options for your web experience, 11 new Plugins, and QuickSight support. Amazon Q index allows software providers to enrich their native generative AI experiences with their customer's enterprise knowledge and user context spanning multiple applications.
• api-change:quicksight: [botocore] This release includes API needed to support for Unstructured Data in Q in QuickSight Q&A (IDC).
• api-change:redshift: [botocore] Adds support for Amazon Redshift RegisterNamespace and DeregisterNamespace APIs to share data to AWS Glue Data Catalog.
• api-change:redshift-serverless: [botocore] Adds support for the ListManagedWorkgroups API to get an overview of existing managed workgroups.
• api-change:s3: [botocore] Amazon S3 Metadata stores object metadata in read-only, fully managed Apache Iceberg metadata tables that you can query. You can create metadata table configurations for S3 general purpose buckets.
• api-change:s3tables: [botocore] Amazon S3 Tables deliver the first cloud object store with built-in open table format support, and the easiest way to store tabular data at scale.

v1.35.73

Compare Source

=======

• api-change:`bedroc

---

Configuration

📅 Schedule: Branch creation - "every weekend" in timezone UTC, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

Deployment Summary

• backend_url: https://pr-7096-backend.rdev.single-cell.czi.technology
• frontend_url: https://pr-7096-frontend.rdev.single-cell.czi.technology
• delete_db_task_definition_arn: arn:aws:ecs:us-west-2:***:task-definition/dp-rdev-pr-7096-deletion:1
• migrate_db_task_definition_arn: arn:aws:ecs:us-west-2:***:task-definition/dp-rdev-pr-7096-migration:1