Bump the dependencies group with 5 updates

[dependabot]

Bumps the dependencies group with 5 updates:

Package	From	To
aws-lambda-powertools	3.31.1	3.34.0
boto3	1.43.67	1.43.68
aws-cdk-lib	2.263.0	2.264.0
pre-commit	4.6.1	4.6.2
hypothesis	6.165.2	6.165.3

Updates aws-lambda-powertools from 3.31.1 to 3.34.0

Release notes

Sourced from aws-lambda-powertools's releases.

v3.34.0

Summary

We're really happy to say the Circuit Breaker utility is now GA. It shipped as alpha in 3.31.0 to collect real-world feedback, and that's exactly what happened, so it's time to drop the _alpha suffix and call it stable.

A big thank you to everyone who used it, reported issues and sent fixes during the alpha. It's in much better shape because of you.

Circuit Breaker is now GA

Docs

The only change you need to make is the import path. circuit_breaker_alpha becomes circuit_breaker:

from aws_lambda_powertools.utilities.circuit_breaker import circuit_breaker
from aws_lambda_powertools.utilities.circuit_breaker.persistence import (
    CircuitBreakerDynamoDBPersistence,
)
from aws_lambda_powertools.utilities.typing import LambdaContext
persistence = CircuitBreakerDynamoDBPersistence(table_name="CircuitBreakerState")
@​circuit_breaker(name="payment-backend", persistence_store=persistence)
def charge(order: dict) -> dict:
return payment_api.charge(order)
def lambda_handler(event: dict, context: LambdaContext) -> dict:
return charge(event)

Everything else stays the same. Same API, same defaults (open after 5 consecutive failures, probe after 30 seconds, close after 3 probe successes), same behaviour. If you were using it during the alpha, update the import and you're done.

A note on 3.32.0 and 3.33.0

You'll notice we jumped from 3.31.1 straight to 3.34.0. Nothing to worry about: our release pipeline accidentally skipped 3.32.0 and 3.33.0, so they were never built or published. No package went to PyPI and no Lambda layer was published for either of them, so there's no impact for anyone. Everything that was meant to go out in those two releases is included here in 3.34.0.

Changes

• fix(event_handler): omit Content-Type header from OpenAPI (#8374) by @​DebadityaHait
• fix(tracer): declare in_subsegment_async as an async context manager (#8367) by @​vishwakt

📜 Documentation updates

• feat: promote circuit breaker to GA (#8373) by @​leandrodamascena
• chore(deps): bump pymdown-extensions from 11.0 to 11.0.1 in /docs (#8370) by @dependabot[bot]
• chore(deps): bump gitpython from 3.1.57 to 3.1.58 in /docs (#8368) by @dependabot[bot]
• chore(deps): bump pymdown-extensions from 10.21.3 to 11.0 in /docs (#8358) by @dependabot[bot]
• chore(deps): bump gitpython from 3.1.50 to 3.1.57 in /docs (#8362) by @dependabot[bot]

... (truncated)

Changelog

Sourced from aws-lambda-powertools's changelog.

[v3.34.0] - 2026-08-10

Bug Fixes

• event_handler: omit Content-Type header from OpenAPI (#8374)

Maintenance

• version bump

Commits

• 3767571 chore: version bump
• 715012f fix(event_handler): omit Content-Type header from OpenAPI (#8374)
• ad15c7a fix(tracer): declare in_subsegment_async as an async context manager (#8367)
• dccd850 feat: promote circuit breaker to GA (#8373)
• 8de9a28 chore(deps): bump pymdown-extensions from 11.0 to 11.0.1 in /docs (#8370)
• 29e07ef chore(deps): bump gitpython from 3.1.57 to 3.1.58 in /docs (#8368)
• 4aae609 chore(deps-dev): bump gitpython from 3.1.57 to 3.1.58 (#8369)
• 957dde2 chore(deps-dev): bump pymdown-extensions from 11.0 to 11.0.1 (#8371)
• a129938 chore(deps-dev): bump pymdown-extensions from 10.21.3 to 11.0 (#8359)
• ec8cd72 chore(deps-dev): bump types-requests from 2.33.0.20260518 to 2.33.0.20260712 ...
• Additional commits viewable in compare view

Updates boto3 from 1.43.67 to 1.43.68

Commits

• 64ffe2a Merge branch 'release-1.43.68'
• 68d8cba Bumping version to 1.43.68
• 9cd72d4 Add changelog entries from botocore
• 04f44b8 Bump https://github.com/astral-sh/ruff-pre-commit (#4824)
• baf4372 Merge branch 'release-1.43.67' into develop
• See full diff in compare view

Updates aws-cdk-lib from 2.263.0 to 2.264.0

Release notes

Sourced from aws-cdk-lib's releases.

v2.264.0

⚠ BREAKING CHANGES

• bedrockagentcore: Gateway metric helpers now emit corrected CloudWatch dimensions per-gateway metrics use { Operation, Protocol, Resource } (was { Resource }). Alarms/dashboards built on the old dimensions must be updated.
• bedrockagentcore: RuntimeBase metric helpers now emit corrected CloudWatch dimensions per-resource metrics use { Operation, Name, Resource } (was { Resource }) and aggregated metrics use { AggregateOperation } (was { Resource: 'All' }). Alarms/dashboards built on the old dimensions must be updated.

Features

• update L1 CloudFormation resource definitions (#38526) (b5693cb)
• cloudwatch: support alarm mute rules (#37504) (c3540bb), closes #37502
• update L1 CloudFormation resource definitions (#38479) (279340d)

Bug Fixes

• bedrockagentcore: gateway metrics emit correct CloudWatch dimension (#38487) (5a7d360)
• bedrockagentcore: runtime metrics emit correct CloudWatch dimensions (#38486) (4e44f24)
• cloudfront: warn when minimumProtocolVersion is set without a certificate (#37250) (52ec5f7), closes #35404
• ec2: allow EBS gp3 and io2 volumes up to 64 TiB (#37049) (10711ba), closes #37045
• stepfunctions-tasks: call-rest-api CallApiGatewayRestApiEndpoint does not support JsonATA for api_path (#37738) (9f0afdc), closes #37728 /github.com/aws/aws-cdk/blob/e207b76cc2503701b3c4e2c87023617b485b2fde/packages/aws-cdk-lib/aws-stepfunctions/lib/private/jsonata.ts#L1

---

Alpha modules (2.264.0-alpha.0)

⚠ BREAKING CHANGES

• glue-alpha: IDatabase.catalogArn and IDatabase.catalogId were removed in factor of a type safe ICatalog, which has catalogArn and catalogId. Consumers and implementations were updated accordingly.

Features

• glue-alpha: new Catalog L2 (#38443) (6a8ba8e)
• glue-alpha: strengthen data encryption for S3Table (#38501) (eb81d5e), closes /docs.aws.amazon.com/securityhub/latest/userguide/s3-controls.html#s3-5

Bug Fixes

• glue-alpha: enable key rotation for security configuration encryption (#38512) (18560e0)
• mediaconnect-alpha: addOutput options and simplified VPC interface referencing (#38515) (3c71466), closes #38517

Changelog

Sourced from aws-cdk-lib's changelog.

Changelog

All notable changes to this project will be documented in this file. See standard-version for commit guidelines.

2.265.0-alpha.0 (2026-08-13)

⚠ BREAKING CHANGES

• glue-alpha: PySparkFlexEtlJob and ScalaSparkFlexEtlJob now default to GlueVersion.V5_0 instead of V3_0. Set glueVersion explicitly to keep the previous behavior.
• glue-alpha: removal policy of existing Database resources will change to RETAIN.

Features

• glue-alpha: default Flex jobs to Glue 5.0 (#38543) (36d4976)
• glue-alpha: removal policy is RETAIN for Database by default (#38535) (9669928)
• glue-alpha: warn on plaintext secrets (#38538) (10bf0b5)

Bug Fixes

• glue-alpha: warn when S3Table grants cover a shared bucket (#38542) (d81d2d6)
• mediaconnect-alpha: update validation to allow adding an underscore to name (#38539) (7c85994)

2.264.0-alpha.0 (2026-08-10)

⚠ BREAKING CHANGES

• glue-alpha: IDatabase.catalogArn and IDatabase.catalogId were removed in factor of a type safe ICatalog, which has catalogArn and catalogId. Consumers and implementations were updated accordingly.

Features

• glue-alpha: new Catalog L2 (#38443) (6a8ba8e)
• glue-alpha: strengthen data encryption for S3Table (#38501) (eb81d5e), closes /docs.aws.amazon.com/securityhub/latest/userguide/s3-controls.html#s3-5

Bug Fixes

• glue-alpha: enable key rotation for security configuration encryption (#38512) (18560e0)
• mediaconnect-alpha: addOutput options and simplified VPC interface referencing (#38515) (3c71466), closes #38517

2.263.0-alpha.0 (2026-07-31)

⚠ BREAKING CHANGES

• mediaconnect: removalPolicy prop removed from FlowProps, GatewayProps, and BridgeProps. These resources now follow CloudFormation's default deletion behaviour (Delete).

... (truncated)

Commits

• ab9348f chore(release): 2.264.0 (#38527)
• b0ebe17 chore: update analytics metadata blueprints
• 86f247e chore(release): 2.264.0
• b5693cb feat: update L1 CloudFormation resource definitions (#38526)
• c3540bb feat(cloudwatch): support alarm mute rules (#37504)
• c7e2529 chore(deps): bump the npm_and_yarn group across 1 directory with 2 updates (#...
• 3c71466 fix(mediaconnect-alpha): addOutput options and simplified VPC interface refer...
• ac72a07 docs(ec2): correct typo in security group egress rule error message (#37476)
• d9a67f2 chore(lambda): fix typo in local variable name resouceArns to `resourceArns...
• 1bfca07 docs(ecs): correct enableManagedDraining default value documentation (#37475)
• Additional commits viewable in compare view

Updates pre-commit from 4.6.1 to 4.6.2

Release notes

Sourced from pre-commit's releases.

pre-commit v4.6.2

Fixes

• Fix language: node hooks that contain "scripts": {"build": ...} with npm 11.x.
  • Regressed in 4.6.1.
  • #3737 issue by @​mheiges.
  • #3743 PR by @​asottile.

Changelog

Sourced from pre-commit's changelog.

4.6.2 - 2026-08-10

Fixes

• Fix language: node hooks that contain "scripts": {"build": ...} with npm 11.x.
  • Regressed in 4.6.1.
  • #3737 issue by @​mheiges.
  • #3743 PR by @​asottile.

Commits

• 9767b6c v4.6.2
• 42ee3ff Merge pull request #3743 from pre-commit/npm-build-scripts-11-x
• 3056619 fix language: node for hooks with build scripts and npm 11.x
• See full diff in compare view

Updates hypothesis from 6.165.2 to 6.165.3

Commits

• 0b818d6 Bump hypothesis version to 6.165.3 and update changelog
• 8388d0d Merge pull request #4846 from reachsridhard/fix/bytestring-provider-negative-...
• 219b2c1 Fix RELEASE.rst: use plain RST backticks instead of markdown links
• 1b028df Add RELEASE.rst for bytestring provider float fix
• 5520d9e fix: draw 65 bits in BytestringProvider.draw_float to support negative floats
• d139e32 Merge pull request #4844 from msimacek/msimacek/graalpy
• 850d0da Update PyO3 to 0.29.2
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions