Bump the python-requirements group in /requirements with 9 updates

[dependabot]

Bumps the python-requirements group in /requirements with 9 updates:

Package	From	To
botocore	1.35.71	1.35.90
moto	5.0.21	5.0.25
mypy	1.13.0	1.14.1
pyright	1.1.389	1.1.391
pytest	8.3.3	8.3.4
types-boto3	1.35.71.post1	1.35.90
types-peewee	3.17.8.20241117	3.17.8.20241229
types-shapely	2.0.0.20241112	2.0.0.20241221
types-wtforms	3.2.1.20241025	3.2.1.20241221

Updates botocore from 1.35.71 to 1.35.90

Commits

• b6f01fb Merge branch 'release-1.35.90'
• 5093c63 Bumping version to 1.35.90
• 6d6990a Update to latest models
• 07276be Merge branch 'release-1.35.89'
• 5094241 Merge branch 'release-1.35.89' into develop
• 370edcc Bumping version to 1.35.89
• 9e70a33 Update to latest models
• ae6efd8 Merge branch 'release-1.35.88'
• 9d7efca Merge branch 'release-1.35.88' into develop
• 3608949 Bumping version to 1.35.88
• Additional commits viewable in compare view

Updates moto from 5.0.21 to 5.0.25

Changelog

Sourced from moto's changelog.

5.0.25

Docker Digest for 5.0.25: sha256:1ac2d89ce8c79a6cdfebffb37678a5bd8bb54a39dcbced069f6ac5e29e4cc752

New Services:
    * DSQL:
        * create_cluster()
        * get_cluster()
Miscellaneous:

* IOTData: update_thing_shadow() now better calculates the delta between the desired and reported values

* S3: select_object_content() now returns the proper Stats (BytesScanned, BytesReturned)

* StepFunctions: Various upgrades for the emulated parser

5.0.24

Docker Digest for 5.0.24: sha256:68042b17e9a55c7a32347f802b7a02f2793201b4f1c788ca0e85084f5218c233

Miscellaneous:
    * EC2: Terminating instances will now release private ip addresses from the NIC's attached to the interface
    * S3: Fixes a bug in complete_multipart_upload() where it was no longer possible to overwrite an earlier multipart upload (Broken in 5.0.23)
    * S3: get_object_cors() now correctly returns the ExposeHeader-value

5.0.23

Docker Digest for 5.0.23: sha256:d41e007bb1f7d41b530959ae9cbed1edf42737ee839faf8da7e925bf19f63105

New Services:
    * Kafka:
        * create_cluster()
        * create_cluster_v2()
        * describe_cluster()
        * describe_cluster_v2()
        * delete_cluster()
        * list_clusters()
        * list_clusters_v2()
        * list_tags_for_resource()
        * tag_resource()
        * untag_resource()
New Methods:

* DirectConnect:

* associate_mac_sec_key()

* create_lag()

* describe_lags()

* describe_settings()

* disassociate_mac_sec_key()

* update_settings()

... (truncated)

Commits

• 3f842a4 Pre-Release: Up Version Number
• 65df2be Prep release 5.0.25 (#8438)
• b307122 StepFunctions: Various upgrades (#8396)
• 5ab97e5 Admin: Increase SFN test duration (#8437)
• 0b2b687 S3: select_object_content() now returns the proper Stats (#8436)
• 9a62985 Directory Service: change settings to deep copy (#8434)
• 4bfdfaf Bump ruby/setup-ruby from 1.204.0 to 1.205.0 (#8433)
• 48f1e86 Admin: Fix mypy (#8435)
• 459c900 DSQL: implement get_cluster() (#8431)
• 827223d Add short project description in package metadata (#8430)
• Additional commits viewable in compare view

Updates mypy from 1.13.0 to 1.14.1

Changelog

Sourced from mypy's changelog.

Mypy Release Notes

Next release

Drop Support for Python 3.8

Mypy no longer supports running with Python 3.8, which has reached end-of-life. When running mypy with Python 3.9+, it is still possible to type check code that needs to support Python 3.8 with the --python-version 3.8 argument. Support for this will be dropped in the first half of 2025!

Contributed by Marc Mueller (PR 17492).

Mypyc accelerated mypy wheels for aarch64

Mypy can compile itself to C extension modules using mypyc. This makes mypy 3-5x faster than if mypy is interpreted with pure Python. We now build and upload mypyc accelerated mypy wheels for manylinux_aarch64 to PyPI, making it easy for users on such platforms to realise this speedup.

Contributed by Christian Bundy (PR mypy_mypyc-wheels#76)

--strict-bytes

By default, mypy treats an annotation of bytes as permitting bytearray and memoryview. PEP 688 specified the removal of this special case. Use this flag to disable this behavior. --strict-bytes will be enabled by default in mypy 2.0.

Contributed by Ali Hamdan (PR 18137) and Shantanu Jain (PR 13952).

Improvements to partial type handling in loops

This change results in mypy better modelling control flow within loops and hence detecting several issues it previously did not detect. In some cases, this change may require use of an additional explicit annotation of a variable.

Contributed by Christoph Tyralla (PR 18180).

(Speaking of partial types, another reminder that mypy plans on enabling --local-partial-types by default in mypy 2.0).

Mypy 1.14

We’ve just uploaded mypy 1.14 to the Python Package Index (PyPI). Mypy is a static type checker for Python. This release includes new features and bug fixes. You can install it as follows:

python3 -m pip install -U mypy

... (truncated)

Commits

• 251d12f Remove +dev from version for release 1.14.1
• 667e5f7 Revert "Remove redundant inheritances from Iterator in builtins" (#18324)
• 67f673a Fix enum truthiness for StrEnum (#18379)
• 3755abb Fix getargs argument passing (#18350)
• b9fa8ee Update version to 1.14.1+dev for point release
• 6f37859 Remove +dev from version for release 1.14
• 5a6a754 Minor updates to 1.14 changelog (#18310)
• 9772d48 Update changelog for release 1.14 (#18301)
• 92473c8 Warn about --follow-untyped-imports (#18249)
• e6ce8be PEP 702 (@​deprecated): descriptors (#18090)
• Additional commits viewable in compare view

Updates pyright from 1.1.389 to 1.1.391

Commits

• 3356df1 [pyright updated to 1.1.391] Update Version (#327)
• ee025bc Pyright NPM Package update to 1.1.390 (#325)
• See full diff in compare view

Updates pytest from 8.3.3 to 8.3.4

Release notes

Sourced from pytest's releases.

8.3.4

pytest 8.3.4 (2024-12-01)

Bug fixes

• #12592: Fixed KeyError{.interpreted-text role="class"} crash when using --import-mode=importlib in a directory layout where a directory contains a child directory with the same name.

• #12818: Assertion rewriting now preserves the source ranges of the original instructions, making it play well with tools that deal with the AST, like executing.

• #12849: ANSI escape codes for colored output now handled correctly in pytest.fail{.interpreted-text role="func"} with [pytrace=False]{.title-ref}.

• #9353: pytest.approx{.interpreted-text role="func"} now uses strict equality when given booleans.

Improved documentation

• #10558: Fix ambiguous docstring of pytest.Config.getoption{.interpreted-text role="func"}.

• #10829: Improve documentation on the current handling of the --basetemp option and its lack of retention functionality (temporary directory location and retention{.interpreted-text role="ref"}).

• #12866: Improved cross-references concerning the recwarn{.interpreted-text role="fixture"} fixture.

• #12966: Clarify filterwarnings{.interpreted-text role="ref"} docs on filter precedence/order when using multiple @pytest.mark.filterwarnings <pytest.mark.filterwarnings ref>{.interpreted-text role="ref"} marks.

Contributor-facing changes

• #12497: Fixed two failing pdb-related tests on Python 3.13.

Commits

• 53f8b4e Update pypa/gh-action-pypi-publish to v1.12.2
• 98dff36 Prepare release version 8.3.4
• 1b474e2 approx: use exact comparison for bool (#13013)
• b541721 docs: Fix wrong statement about sys.modules with importlib import mode (#1298...
• 16cb87b pytest.fail: fix ANSI escape codes for colored output (#12959) (#12990)
• be6bc81 Issue #12966 Clarify filterwarnings docs on precedence when using multiple ma...
• 7aeb72b Improve docs on basetemp and retention (#12912) (#12928)
• c875841 Merge pull request #12917 from pytest-dev/patchback/backports/8.3.x/ded1f44e5...
• 6502816 Merge pull request #12913 from jakkdl/dontfailonbadpath
• 52135b0 Merge pull request #12885 from The-Compiler/pdb-py311 (#12887)
• Additional commits viewable in compare view

Updates types-boto3 from 1.35.71.post1 to 1.35.90

Commits

• See full diff in compare view

Updates types-peewee from 3.17.8.20241117 to 3.17.8.20241229

Commits

• See full diff in compare view

Updates types-shapely from 2.0.0.20241112 to 2.0.0.20241221

Commits

• See full diff in compare view

Updates types-wtforms from 3.2.1.20241025 to 3.2.1.20241221

Commits

• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Superseded by #2591.