Skip to content

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Oct 10, 2025

Bumps the pip-deps group with 5 updates:

Package From To
pymongo 4.15.2 4.15.3
botocore 1.40.46 1.40.49
boto3 1.40.46 1.40.49
types-python-dateutil 2.9.0.20250822 2.9.0.20251008
pytest-rerunfailures 16.0.1 16.1

Updates pymongo from 4.15.2 to 4.15.3

Release notes

Sourced from pymongo's releases.

PyMongo 4.15.3

Community notes: https://www.mongodb.com/community/forums/t/pymongo-4-15-3-released/329778

Changelog

Sourced from pymongo's changelog.

Changes in Version 4.15.3 (2025/10/07)

Version 4.15.3 is a bug fix release.

  • Fixed a memory leak when raising :class:bson.errors.InvalidDocument with C extensions.
  • Fixed the return type of the :meth:~pymongo.asynchronous.collection.AsyncCollection.distinct, :meth:~pymongo.synchronous.collection.Collection.distinct, :meth:pymongo.asynchronous.cursor.AsyncCursor.distinct, and :meth:pymongo.asynchronous.cursor.AsyncCursor.distinct methods.

Issues Resolved ...............

See the PyMongo 4.15.3 release notes in JIRA_ for the list of resolved issues in this release.

.. _PyMongo 4.15.3 release notes in JIRA: https://jira.mongodb.org/secure/ReleaseNote.jspa?projectId=10004&version=47293

Commits
  • 6116811 PYTHON-5609 Prepare for 4.15.3 Release (#2584)
  • fef10d2 PYTHON-5596 Fix return type for distinct methods (#2576) [v4.15] (#2583)
  • 039c35b [v4.15] PYTHON-5571 - Fix memory leak when raising InvalidDocument with C ext...
  • a71c96d BUMP 4.15.3.dev0
  • See full diff in compare view

Updates botocore from 1.40.46 to 1.40.49

Commits
  • dc8eb09 Merge branch 'release-1.40.49'
  • 59b8492 Bumping version to 1.40.49
  • fbc40ba Update endpoints model
  • 2bd0a4c Update to latest models
  • 0d7239e Merge customizations for QuickSight
  • 9fbad5a Merge branch 'release-1.40.48'
  • 96cb85e Merge branch 'release-1.40.48' into develop
  • 08ee812 Bumping version to 1.40.48
  • 5b36463 Update endpoints model
  • cb48cd7 Update to latest models
  • Additional commits viewable in compare view

Updates boto3 from 1.40.46 to 1.40.49

Commits
  • 660a1ec Merge branch 'release-1.40.49'
  • a06ac9e Bumping version to 1.40.49
  • 4dd0569 Add changelog entries from botocore
  • 5ad0248 Merge branch 'release-1.40.48'
  • 578c49e Merge branch 'release-1.40.48' into develop
  • 01618f3 Bumping version to 1.40.48
  • f405a62 Add changelog entries from botocore
  • 215c521 Merge branch 'release-1.40.47'
  • f060117 Merge branch 'release-1.40.47' into develop
  • 8613b80 Bumping version to 1.40.47
  • Additional commits viewable in compare view

Updates types-python-dateutil from 2.9.0.20250822 to 2.9.0.20251008

Commits

Updates pytest-rerunfailures from 16.0.1 to 16.1

Changelog

Sourced from pytest-rerunfailures's changelog.

16.1 (2025-10-10)

  • Drop support for Python 3.9.

  • Changed "localhost" to "127.0.0.1" to avoid bad hostname resolution.

  • Added --force-reruns to override rerun count globally. Fixes [#306](https://github.com/pytest-dev/pytest-rerunfailures/issues/306) <https://github.com/pytest-dev/pytest-rerunfailures/issues/306>_.

Commits
  • b015092 Preparing release 16.1
  • c1666dd Prepare release.
  • 8d04ad9 Fix NotImplementedError crash when using xdist schedulers without `mark_tes...
  • cb8ede7 Add a --force-reruns to override rerun count globally (#307)
  • 5e01132 Bump actions/setup-python from 5 to 6 in the actions group (#310)
  • 88e0023 Drop support for Python 3.9. (#308)
  • df47974 Change 'localhost' to '127.0.0.1' (#305)
  • f149c7d Back to development: 16.1
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the pip-deps group with 5 updates:

| Package | From | To |
| --- | --- | --- |
| [pymongo](https://github.com/mongodb/mongo-python-driver) | `4.15.2` | `4.15.3` |
| [botocore](https://github.com/boto/botocore) | `1.40.46` | `1.40.49` |
| [boto3](https://github.com/boto/boto3) | `1.40.46` | `1.40.49` |
| [types-python-dateutil](https://github.com/typeshed-internal/stub_uploader) | `2.9.0.20250822` | `2.9.0.20251008` |
| [pytest-rerunfailures](https://github.com/pytest-dev/pytest-rerunfailures) | `16.0.1` | `16.1` |


Updates `pymongo` from 4.15.2 to 4.15.3
- [Release notes](https://github.com/mongodb/mongo-python-driver/releases)
- [Changelog](https://github.com/mongodb/mongo-python-driver/blob/master/doc/changelog.rst)
- [Commits](mongodb/mongo-python-driver@4.15.2...4.15.3)

Updates `botocore` from 1.40.46 to 1.40.49
- [Commits](boto/botocore@1.40.46...1.40.49)

Updates `boto3` from 1.40.46 to 1.40.49
- [Release notes](https://github.com/boto/boto3/releases)
- [Commits](boto/boto3@1.40.46...1.40.49)

Updates `types-python-dateutil` from 2.9.0.20250822 to 2.9.0.20251008
- [Commits](https://github.com/typeshed-internal/stub_uploader/commits)

Updates `pytest-rerunfailures` from 16.0.1 to 16.1
- [Changelog](https://github.com/pytest-dev/pytest-rerunfailures/blob/master/CHANGES.rst)
- [Commits](pytest-dev/pytest-rerunfailures@16.0.1...16.1)

---
updated-dependencies:
- dependency-name: pymongo
  dependency-version: 4.15.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: pip-deps
- dependency-name: botocore
  dependency-version: 1.40.49
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: pip-deps
- dependency-name: boto3
  dependency-version: 1.40.49
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: pip-deps
- dependency-name: types-python-dateutil
  dependency-version: 2.9.0.20251008
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: pip-deps
- dependency-name: pytest-rerunfailures
  dependency-version: '16.1'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pip-deps
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update python code skip-changelog Use this label in Pull Request to not require new changelog entry file labels Oct 10, 2025
@dependabot dependabot bot requested a review from a team as a code owner October 10, 2025 13:24
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update python code skip-changelog Use this label in Pull Request to not require new changelog entry file labels Oct 10, 2025
Copy link

⚠️ (this preview might not be accurate if the PR is not rebased on current master branch)

MCK 1.5.0 Release Notes

New Features

  • Improve automation agent certificate rotation: the agent now restarts automatically when its certificate is renewed, ensuring smooth operation without manual intervention and allowing seamless certificate updates without requiring manual Pod restarts.

Bug Fixes

  • MongoDBMultiCluster: fix resource stuck in Pending state if any clusterSpecList item has 0 members. After the fix, a value of 0 members is handled correctly, similarly to how it's done in the MongoDB resource.
  • MultiClusterSharded: Blocked removing non-zero member cluster from MongoDB resource. This prevents from scaling down member cluster without current configuration available, which could lead to unexpected issues.

Copy link
Contributor Author

dependabot bot commented on behalf of github Oct 13, 2025

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot bot closed this Oct 13, 2025
@dependabot dependabot bot deleted the dependabot/pip/pip-deps-068781daa4 branch October 13, 2025 23:19
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Pull requests that update python code skip-changelog Use this label in Pull Request to not require new changelog entry file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant