[dependabot]

⚠️ Dependabot is rebasing this PR ⚠️

Rebasing might not happen immediately, so don't worry if this takes some time.

Note: if you make any changes to this PR yourself, they will take precedence over the rebase.

---

Bumps the dependencies group with 5 updates in the /cdn directory:

Package	From	To
boto3	1.40.64	1.43.116
botocore	1.40.64	1.43.116
click	8.3.0	8.5.0
jmespath	1.0.1	1.1.0
s3transfer	0.14.0	0.19.3

Updates boto3 from 1.40.64 to 1.43.116

Commits

• dbaa95d Merge branch 'release-1.43.116'
• 032daaa Bumping version to 1.43.116
• 1c24b37 Add changelog entries from botocore
• 2f9e300 Merge branch 'release-1.43.115'
• ca7458b Merge branch 'release-1.43.115' into develop
• 4587ee6 Bumping version to 1.43.115
• ec8fad0 Add changelog entries from botocore
• 3701f39 Bump https://github.com/astral-sh/ruff-pre-commit (#4859)
• 432fa17 Merge branch 'release-1.43.114'
• 899bd85 Merge branch 'release-1.43.114' into develop
• Additional commits viewable in compare view

Updates botocore from 1.40.64 to 1.43.116

Commits

• c13b91b Merge branch 'release-1.43.116'
• b03145c Bumping version to 1.43.116
• 4cee49b Update to latest models
• 626f4f2 Merge branch 'release-1.43.115'
• 4d9f375 Merge branch 'release-1.43.115' into develop
• e56ef0c Bumping version to 1.43.115
• 053d776 Update to latest models
• 34d8a32 Fix race when publishing refreshed credentials (#3835)
• 4de93ab Bump urllib3 from 2.7.0 to 2.8.0 (#3813)
• b8d0418 Move Content-Length validation back to botocore (#3831)
• Additional commits viewable in compare view

Updates click from 8.3.0 to 8.5.0

Release notes

Sourced from click's releases.

8.5.0

This is the Click 8.5.0 feature release. A feature release may include new features, remove previously deprecated code, add new deprecation, or introduce potentially breaking changes.

We encourage everyone to upgrade. You can read more about our Version Support Policy on our website.

PyPI: https://pypi.org/project/click/8.5.0/ Changes: https://click.palletsprojects.com/page/changes/#version-8-5-0 Milestone https://github.com/pallets/click/milestone/33

• Add built-in shell completion support for PowerShell (Windows PowerShell 5.1+ and pwsh 7+) alongside the existing bash, zsh, and fish completers. Use _FOO_BAR_COMPLETE=powershell_source foo-bar to generate the completion script. #2672 #3637
• Supported versions of Windows enable ANSI terminal styles by default. Colorama is no longer a dependency and is not used. #2986 #3505
• {class}Argument accepts a help parameter, and help output includes a Positional arguments section when argument help is available. #2983 #3473
• confirm() and prompt() strip ANSI color and style codes from the prompt when the output stream does not support them, matching echo(). This stripping was lost in 8.4.0 when #2969 began writing the prompt with input() directly. #3572 #3653
• {class}Path with allow_dash=True no longer triggers a BytesWarning, an error under python -bb, when checking a value against the - convention. #2877 #3642
• Add {func}custom_version_option, a --version option whose output is produced by a callback, covering cases {func}version_option intentionally does not. The feature set of {func}version_option is now frozen; see [discussion #3527](https://github.com/pallets/click/discussions/3527). #3581
• style() and secho() no longer silently drop the 256-color index 0 (black) passed as fg or bg, and now validate color arguments. Invalid colors raise a ValueError instead of a TypeError. #3677
• The automatic help option stores its value under the reserved name _click_default_help instead of help, so a parameter named help no longer breaks parsing. The new name is visible in {meth}Command.to_info_dict output. Parameters that overwrite each other's value trigger a warning: an argument sharing its name with another parameter, or any parameter claiming the reserved name. Options may still share a name to compete for the same value (feature switches). #2819 #3678
• unstyle and the ANSI handling behind help-text wrapping now strip the full CSI escape-sequence grammar. #3681
• Streamline Option flag handling: the flag-kind, type, lazy-default and validation steps in Option.__init__ move into focused helpers, and flag_value and default keep their unset sentinel at construction (resolved lazily on read) so is UNSET reliably tells a user-supplied value from an auto-derived one. Runtime behavior is unchanged, but {meth}Parameter.to_info_dict now resolves default=True on a feature switch to its flag_value, matching what the function receives at call

... (truncated)

Changelog

Sourced from click's changelog.

Version 8.5.0

Released 2026-08-24

• Add built-in shell completion support for PowerShell (Windows PowerShell 5.1+ and pwsh 7+) alongside the existing bash, zsh, and fish completers. Use _FOO_BAR_COMPLETE=powershell_source foo-bar to generate the completion script. {issue}2672 {pr}3637
• Supported versions of Windows enable ANSI terminal styles by default. Colorama is no longer a dependency and is not used. {issue}2986 {pr}3505
• {class}Argument accepts a help parameter, and help output includes a Positional arguments section when argument help is available. {issue}2983 {pr}3473
• confirm() and prompt() strip ANSI color and style codes from the prompt when the output stream does not support them, matching echo(). This stripping was lost in 8.4.0 when {pr}2969 began writing the prompt with input() directly. {issue}3572 {pr}3653
• Fix test failures when using pytest >= 9.1. {pr}3656
• {class}Path with allow_dash=True no longer triggers a BytesWarning, an error under python -bb, when checking a value against the - convention. {issue}2877 {pr}3642
• Add {func}custom_version_option, a --version option whose output is produced by a callback, covering cases {func}version_option intentionally does not. The feature set of {func}version_option is now frozen; see [discussion #3527](https://github.com/pallets/click/discussions/3527). {pr}3581
• style() and secho() no longer silently drop the 256-color index 0 (black) passed as fg or bg, and now validate color arguments. Invalid colors raise a ValueError instead of a TypeError. {pr}3677
• The automatic help option stores its value under the reserved name _click_default_help instead of help, so a parameter named help no longer breaks parsing. The new name is visible in {meth}Command.to_info_dict output. Parameters that overwrite each other's value trigger a warning: an argument sharing its name with another parameter, or any parameter claiming the reserved name. Options may still share a name to compete for the same value (feature switches). {issue}2819 {pr}3678
• unstyle and the ANSI handling behind help-text wrapping now strip the full CSI escape-sequence grammar. {pr}3681
• Streamline Option flag handling: the flag-kind, type, lazy-default and validation steps in Option.__init__ move into focused helpers, and flag_value and default keep their unset sentinel at construction (resolved lazily on read) so is UNSET reliably tells a user-supplied value from an auto-derived one. Runtime behavior is unchanged, but {meth}Parameter.to_info_dict now resolves default=True on a feature switch to its flag_value, matching what the function receives at call time. {pr}3641
• {func}get_binary_stream and {func}get_text_stream are deprecated and will be removed in Click 9.0. {issue}3481 {pr}3695
• The following click.utils names were never intentionally public and are now private (_-prefixed). The old names remain available with a DeprecationWarning until Click 9.0: LazyFile, KeepOpenFile,

... (truncated)

Commits

• 8b19813 Release version 8.5.0
• 2c8cd3a Add FAQ entry about UnicodeEncodeError on Windows (#3778)
• 131c86a Add FAQ entry about UnicodeEncodeError on Windows
• e1fd594 Add support of pathlib.Path to edit (#3781)
• a1d8785 Add support of pathlib.Path to edit
• 2103e15 Forward all user's parameters set in PAGER and improve flag detection (#3777)
• a6256bf Forwards all user's parameters set in PAGER
• 61b69e9 Resolve the pager command once, in _pager_contextmanager (#3776)
• 9835b0f Resolve the pager command once, in _pager_contextmanager
• f36d58b Refactor pager stream handling (#3767)
• Additional commits viewable in compare view

Updates jmespath from 1.0.1 to 1.1.0

Changelog

Sourced from jmespath's changelog.

1.1.0

• Fix concurrency issue with cache (pr [#335](https://github.com/jmespath/jmespath.py/issues/335) <https://github.com/jmespath/jmespath.py/pull/335>__)
• Added support for Python 3.12-3.14 (pr [#331](https://github.com/jmespath/jmespath.py/issues/331) <https://github.com/jmespath/jmespath.py/pull/331>__)
• Removed support for Python 3.7-3.8 (pr [#335](https://github.com/jmespath/jmespath.py/issues/335) <https://github.com/jmespath/jmespath.py/pull/335>__)

Commits

• 6ff419a Merge branch 'release-1.1.0'
• 17e964f Bump version to 1.1.0
• 5ce13aa Merge branch 'v1.1.0' into develop
• d8f0457 Revert versions back to current version
• 8cb3082 1.1.0
• 6e37991 Update permissions in codeql.yml workflow (#338)
• 141734d Bring .github settings up-to-date (#336)
• 07e30cf Merge pull request #337 from nateprewitt/python_changelog
• 9170711 Add missing changelog entries for Python support
• cdb9327 Fix file encoding for Windows
• Additional commits viewable in compare view

Updates s3transfer from 0.14.0 to 0.19.3

Changelog

Sourced from s3transfer's changelog.

0.19.3

• bugfix:ReadFileChunk: Keep reads with a negative size within the chunk bounds.

0.19.2

• bugfix:TLS: Return a configuration error when the CA bundle value (ca_bundle, AWS_CA_BUNDLE, REQUESTS_CA_BUNDLE, or verify) resolves to an empty or whitespace-only string.

0.19.1

• bugfix:s3: Only pin VersionId if supplied by caller instead of automatically using value from HeadObject response

0.19.0

• feature:s3: Update multi-part copy logic to match single-part behavior for TaggingDirective and AnnotationDirective
• enhancement:s3: Warn when Metadata or Tagging is supplied to a copy without the corresponding directive set to REPLACE, in which case the supplied value is silently ignored. This matches the CopyObject behavior.

0.18.0

• feature:Copy: By default, preserve source object metadata during multipart copies to match single CopyObject behavior.

0.17.1

• enhancement:s3: Skip the HEAD request during S3 downloads when the client is configured with response_checksum_validation='when_required', reducing latency for small-object transfers. The HEAD request remains in place by default to enable full-object checksum validation.

0.17.0

• feature:Python: End of support for Python 3.9

0.16.1

• enhancement:TransferManager: Add support for customer-provided full-object checksums using the SHA512, MD5, XXHASH3, XXHASH64, and XXHASH128 algorithms.

0.16.0

... (truncated)

Commits

• bd79b57 Merge branch 'release-0.19.3'
• 311135b Bumping version to 0.19.3
• cddafab Keep negative-size reads within upload chunk boundaries (#423)
• 0ab921d Merge pull request #424 from boto/add-issue-templates
• d0dd1f6 Add GitHub issue templates
• 5d042fb Bump https://github.com/astral-sh/ruff-pre-commit (#421)
• e6a7675 Bump https://github.com/astral-sh/ruff-pre-commit (#414)
• 379338c Bump the github-actions group across 1 directory with 6 updates (#420)
• c3beff1 Bump zizmorcore/zizmor-action in the github-actions group (#412)
• a00a60d Bump https://github.com/astral-sh/ruff-pre-commit (#411)
• Additional commits viewable in compare view

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

[LordAro]

@dependabot rebase

[dependabot]

Looks like this PR is already up-to-date with main! If you'd still like to recreate it from scratch, overwriting any edits, you can request @dependabot recreate.

[LordAro]

@dependabot recreate

[LordAro]

@dependabot rebase