Update boto3 requirement from >=1.43.6 to >=1.43.9 in /listener #33

Merged

dependabot[bot] merged 1 commit from dependabot/pip/listener/boto3-gte-1.43.9 into main

2026-05-16 16:23:34 +00:00

dependabot[bot] commented

2026-05-16 16:23:12 +00:00

(Migrated from github.com)

Updates the requirements on boto3 to permit the latest version.

Commits

6d47260 Merge branch 'release-1.43.9'
7fb9872 Bumping version to 1.43.9
1881c7f Add changelog entries from botocore
7a82579 Merge branch 'release-1.43.8'
9ff48ec Merge branch 'release-1.43.8' into develop
06a1d63 Bumping version to 1.43.8
2b6e7bd Add changelog entries from botocore
e6aee5d Merge branch 'release-1.43.7'
05566d2 Merge branch 'release-1.43.7' into develop
37e8136 Bumping version to 1.43.7
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Updates the requirements on [boto3](https://github.com/boto/boto3) to permit the latest version. <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/boto/boto3/commit/6d47260e8d2940d3fe3ad96bf5f2e2f0500dfacb"><code>6d47260</code></a> Merge branch 'release-1.43.9'</li> <li><a href="https://github.com/boto/boto3/commit/7fb98723970e63519544ad72418d7143eafe003d"><code>7fb9872</code></a> Bumping version to 1.43.9</li> <li><a href="https://github.com/boto/boto3/commit/1881c7fe7841268c90e15064c2719455193ae542"><code>1881c7f</code></a> Add changelog entries from botocore</li> <li><a href="https://github.com/boto/boto3/commit/7a82579873d86998d560b8d06b3564c743918cd8"><code>7a82579</code></a> Merge branch 'release-1.43.8'</li> <li><a href="https://github.com/boto/boto3/commit/9ff48ec5b860424918c9deed61b251a7bf5f55c0"><code>9ff48ec</code></a> Merge branch 'release-1.43.8' into develop</li> <li><a href="https://github.com/boto/boto3/commit/06a1d63a58620d394cc26a5e8582ed67eed3cb62"><code>06a1d63</code></a> Bumping version to 1.43.8</li> <li><a href="https://github.com/boto/boto3/commit/2b6e7bd9d0d24c20f02df91f161ef2214fb53628"><code>2b6e7bd</code></a> Add changelog entries from botocore</li> <li><a href="https://github.com/boto/boto3/commit/e6aee5dccd2169966814e328eaebdd14b742a0e2"><code>e6aee5d</code></a> Merge branch 'release-1.43.7'</li> <li><a href="https://github.com/boto/boto3/commit/05566d2cd7e3d191a37a663c842eb849418ae7e9"><code>05566d2</code></a> Merge branch 'release-1.43.7' into develop</li> <li><a href="https://github.com/boto/boto3/commit/37e8136684e7107a6f7343770873a3630d347731"><code>37e8136</code></a> Bumping version to 1.43.7</li> <li>Additional commits viewable in <a href="https://github.com/boto/boto3/compare/1.43.6...1.43.9">compare view</a></li> </ul> </details> <br /> Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details>

claude[bot] (Migrated from github.com) reviewed 2026-05-16 16:24:18 +00:00

claude[bot] (Migrated from github.com) left a comment

LGTM — straightforward Dependabot patch-level version bump for boto3.

Extended reasoning...

Overview

This PR updates a single line in listener/requirements.txt, bumping the boto3 minimum version constraint from >=1.43.6 to >=1.43.9. The change is a Dependabot patch-level update spanning three patch releases (1.43.7, 1.43.8, 1.43.9).

Security risks

None. This is a minimum-version bump in a requirements file. Patch-level boto3 releases typically include bug fixes and AWS service model updates rather than breaking changes or security-relevant API changes. If anything, picking up newer patch releases is generally beneficial for security.

Level of scrutiny

Minimal scrutiny is warranted. This is a one-line constraint loosening in a dependency manifest — exactly the pattern of routine Dependabot PRs that are safe to auto-merge. Recent commits show the same pattern (boto3 1.43.2 → 1.43.6, google-auth, google-api-python-client, python-ulid) being merged on this repo.

Other factors

The bug hunting system found no issues. No outstanding reviewer comments. The PR follows the established convention in the repo for dependency bumps.

LGTM — straightforward Dependabot patch-level version bump for boto3. <details> <summary>Extended reasoning...</summary> ### Overview This PR updates a single line in `listener/requirements.txt`, bumping the boto3 minimum version constraint from `>=1.43.6` to `>=1.43.9`. The change is a Dependabot patch-level update spanning three patch releases (1.43.7, 1.43.8, 1.43.9). ### Security risks None. This is a minimum-version bump in a requirements file. Patch-level boto3 releases typically include bug fixes and AWS service model updates rather than breaking changes or security-relevant API changes. If anything, picking up newer patch releases is generally beneficial for security. ### Level of scrutiny Minimal scrutiny is warranted. This is a one-line constraint loosening in a dependency manifest — exactly the pattern of routine Dependabot PRs that are safe to auto-merge. Recent commits show the same pattern (boto3 1.43.2 → 1.43.6, google-auth, google-api-python-client, python-ulid) being merged on this repo. ### Other factors The bug hunting system found no issues. No outstanding reviewer comments. The PR follows the established convention in the repo for dependency bumps. </details>

This repo is archived. You cannot comment on pull requests.

No reviewers