Skip to content

Commit 0cf7258

Browse files
author
Yuriy Bezsonov
committed
fix(thread-dump-lambda): Align awscli/boto3 and group them in Dependabot
awscli 1.x and boto3 share botocore/s3transfer, so Dependabot bumping either one alone caused pip ResolutionImpossible (awscli 1.45.25 needs s3transfer>=0.18 while boto3 1.43.14 needs <0.18). awscli is required (eks_client.py imports awscli.customizations.eks.get_token), so it cannot be removed. Bump both to the compatible .25 release (verified resolves: botocore 1.43.25, s3transfer 0.18.0) and add a Dependabot group so awscli and boto3 always update together, preventing recurrence. Supersedes #838 and #839.
1 parent b2bc079 commit 0cf7258

2 files changed

Lines changed: 11 additions & 2 deletions

File tree

.github/dependabot.yml

Lines changed: 9 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -24,6 +24,15 @@ updates:
2424
directory: "/infra/scripts/setup/thread-dump-lambda"
2525
schedule:
2626
interval: "monthly"
27+
groups:
28+
# awscli and boto3 share botocore/s3transfer; they must bump together
29+
# or pip resolution fails. Group them into a single PR.
30+
aws-python:
31+
patterns:
32+
- "awscli"
33+
- "boto3"
34+
- "botocore"
35+
- "s3transfer"
2736
- package-ecosystem: github-actions
2837
directory: "/"
2938
schedule:
Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,4 @@
1-
boto3==1.43.14
1+
boto3==1.43.25
22
kubernetes==36.0.0
3-
awscli==1.45.14
3+
awscli==1.45.25
44
requests==2.34.2

0 commit comments

Comments
 (0)