chore(deps): bump the python-dependencies group with 4 updates

[dependabot]

Bumps the python-dependencies group with 4 updates: boto3, botocore, mypy and docker.

Updates boto3 from 1.43.40 to 1.43.46

Commits

• c7888d6 Merge branch 'release-1.43.46'
• 1479621 Bumping version to 1.43.46
• 54abdb4 Add changelog entries from botocore
• 75de637 Merge branch 'release-1.43.45'
• d3449aa Merge branch 'release-1.43.45' into develop
• 497253d Bumping version to 1.43.45
• 5e9768e Add changelog entries from botocore
• 19a915b Merge branch 'release-1.43.44'
• 1b69a06 Merge branch 'release-1.43.44' into develop
• b0e3f6a Bumping version to 1.43.44
• Additional commits viewable in compare view

Updates botocore from 1.43.40 to 1.43.46

Commits

• 4249fcd Merge branch 'release-1.43.46'
• 089203a Bumping version to 1.43.46
• 601925e Update endpoints model
• 7831fa1 Update to latest models
• af6622c Merge branch 'release-1.43.45'
• d65eb2a Merge branch 'release-1.43.45' into develop
• 98cb2a8 Bumping version to 1.43.45
• 2788423 Update to latest models
• c945566 Merge branch 'release-1.43.44'
• da12f11 Merge branch 'release-1.43.44' into develop
• Additional commits viewable in compare view

Updates mypy from 2.1.0 to 2.2.0

Changelog

Sourced from mypy's changelog.

Mypy Release Notes

Next Release

Mypy 2.2

We've just uploaded mypy 2.2.0 to the Python Package Index (PyPI). Mypy is a static type checker for Python. This release includes new features, performance improvements and bug fixes. You can install it as follows:

python3 -m pip install -U mypy

You can read the full documentation for this release on Read the Docs.

Support for Closed TypedDicts (PEP 728)

Mypy now supports closed TypedDicts as specified in PEP 728. A closed TypedDict cannot have extra keys beyond those explicitly defined. This allows the type checker to determine that certain operations are safe when they otherwise wouldn't be due to the potential presence of unknown keys.

You can use the closed keyword argument with TypedDict:

HasName = TypedDict("HasName", {"name": str})
HasOnlyName = TypedDict("HasOnlyName", {"name": str}, closed=True)
Movie = TypedDict("Movie", {"name": str, "year": int})
movie: Movie = {"name": "Nimona", "year": 2023}
has_name: HasName = movie  # OK: HasName is open (default)
has_only_name: HasOnlyName = movie  # Error: HasOnlyName is closed and Movie has extra "year" key

Closed TypedDicts enable more precise type checking because the type checker knows exactly which keys are present. This is particularly useful when working with TypedDict unions or when you want to ensure that a TypedDict conforms to an exact shape.

The closed keyword also enables safe type narrowing with in checks:

Book = TypedDict('Book', {'book': str}, closed=True)
DVD = TypedDict('DVD', {'dvd': str}, closed=True)
type Inventory = Book | DVD
def print_type(inventory: Inventory) -> None:
if "book" in inventory:
# Type is narrowed to Book here - safe because DVD is closed
print(inventory["book"])
else:
# Type is narrowed to DVD here
print(inventory["dvd"])
</tr></table>

... (truncated)

Commits

• b3c4a5b Mark release
• 396f508 [Chore] Update changelog for 2.2 (#21691)
• 9592a9e Upload wasm wheels to PyPI (#21671)
• 1dc6962 Bump ast-serialize to 0.6.0 (#21664)
• 96a7913 Bump librt to 0.12.0 (#21663)
• 5ef0902 Fix the exportjson tool (.ff cache to .json conversion) (#21628)
• 8d621ad Support --shadow-file with --native-parser (#21623)
• 74ecdd8 Sync typeshed (#21612)
• 0cd1541 [mypyc] Make function wrappers thread-safe on free-threaded builds (#21620)
• 22a9cfd [mypyc] Make list remove and index thread-safe on free-threaded builds (#21614)
• Additional commits viewable in compare view

Updates docker from 7.1.0 to 7.2.0

Release notes

Sourced from docker's releases.

7.2.0

Upgrade Notes

• docker.from_env() now honors the active Docker CLI context when DOCKER_HOST is not set.
  • This means the client may connect to the daemon selected by DOCKER_CONTEXT or the current context in ~/.docker/config.json, matching Docker CLI behavior more closely.
  • If your application relied on the previous default connection behavior, set DOCKER_HOST explicitly, set DOCKER_CONTEXT=default, or pass use_context=False to DockerClient.from_env().
• Added docker.from_context() / DockerClient.from_context() for explicitly creating a client from a Docker CLI context.

Features

• Added support for Docker contexts when creating the default client
• Added subpath support for volumes

Bugfixes

• Fixed exec_run documentation for the stream parameter
• Fixed image loading to avoid depending on the deprecated JSONMessage.error field
• Preserved the rotated unlock key in swarm integration tests
• Fixed SSL certificate generation in tests
• Fixed IPv6 integration tests by explicitly enabling IPv6 where required

Miscellaneous

• Updated tests for newer Docker Engine behavior
• CI and build updates

What's Changed

• tests/exec: expect 127 exit code for missing executable by @​laurazard in docker/docker-py#3290
• fixing doc for stream param in exec_run by @​yasonk in docker/docker-py#3292
• Bump default API version to 1.45 (Moby 26.0/26.1) by @​thaJeztah in docker/docker-py#3261
• Set a dummy-version if none set, and remove unused APT_MIRROR build-arg by @​thaJeztah in docker/docker-py#3267
• test_service_logs: stop testing experimental versions by @​thaJeztah in docker/docker-py#2442
• Makefile: fix circular reference for integration-dind by @​thaJeztah in docker/docker-py#3297
• image load: don't depend on deprecated JSONMessage.error field by @​thaJeztah in docker/docker-py#3307
• integration: test_create_volume_invalid_driver allow either 400 or 404 by @​thaJeztah in docker/docker-py#3296
• integration: adjust tests for omitted "OnBuild" by @​thaJeztah in docker/docker-py#3336
• Implement Subpath Support for Volumes in Docker-Py (#3243) by @​Khushiyant in docker/docker-py#3270
• tests: fix ssl generation by @​thaJeztah in docker/docker-py#3365
• test/integration: don't check for deprecated Networks field by @​thaJeztah in docker/docker-py#3362
• test: Skip from_env_unix tests if DOCKER_HOST is network socket by @​ricardobranco777 in docker/docker-py#3366
• test_connect_with_ipv6_address: enable IPv6 by @​robmry in docker/docker-py#3372
• test_create_with_ipv6_address: enable IPv6 by @​robmry in docker/docker-py#3373
• tests: Migrate off gpg2 and regenerate key ed25519 by @​vvoland in docker/docker-py#3399
• gha: Pin to digests by @​vvoland in docker/docker-py#3408
• Fix integration tests on non-amd64 hosts and add ARM64 CI by @​vvoland in docker/docker-py#3407
• integration/swarm: Preserve rotated unlock key by @​vvoland in docker/docker-py#3410
• [DKP-2535] Honour context if present for default client, add contexts support by @​ebriney in docker/docker-py#3401
• docs: 7.2.0 changelog by @​vvoland in docker/docker-py#3415

New Contributors

• @​laurazard made their first contribution in docker/docker-py#3290
• @​yasonk made their first contribution in docker/docker-py#3292
• @​ricardobranco777 made their first contribution in docker/docker-py#3366

... (truncated)

Commits

• 5ad5327 Merge pull request #3415 from vvoland/update-changelog
• d242230 docs: 7.2.0 changelog
• ba01cc7 Merge pull request #3401 from ebriney/client-from-context
• ae5dfe9 Merge pull request #3410 from vvoland/fix-flaky
• aa99999 integration/swarm: Preserve rotated unlock key
• 059d371 Merge pull request #3407 from vvoland/fix-arm64
• 9b4b9b8 gha: Add arm64 integration CI
• 9e9f8ff Skip tests incompatible with host architecture
• e0542d9 Merge pull request #3408 from vvoland/gha-pin
• 578a11d gha: Pin to digests
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions