MESH-2092 py dev (deps): Bump the patch-and-minor group across 1 directory with 4 updates

[dependabot]

Bumps the patch-and-minor group with 4 updates in the / directory: nhs-aws-helpers, aws-lambda-powertools, ruff and tox.

Updates nhs-aws-helpers from 0.8.11 to 0.8.25

Commits

• See full diff in compare view

Updates aws-lambda-powertools from 3.29.0 to 3.30.0

Release notes

Sourced from aws-lambda-powertools's releases.

v3.30.0

Summary

This release adds a custom serializer option to the BedrockAgentResolver, plus documentation improvements and bug fixes across the Event Handler.

A huge thanks to @​kimnamu, @​Avinm and @​hirenkumar-n-dholariya for their contributions!

Custom serializer on BedrockAgentResolver

Docs

You can now pass your own serializer to BedrockAgentResolver, the same way the other resolvers already allow. This lets you control exactly how responses are serialized to JSON, for example to handle custom types or tune the output format.

import json
from decimal import Decimal
from aws_lambda_powertools.event_handler import BedrockAgentResolver
from aws_lambda_powertools.utilities.typing import LambdaContext
def custom_serializer(obj: dict) -> str:
return json.dumps(obj, default=str)
app = BedrockAgentResolver(serializer=custom_serializer)
@​app.get("/price", description="Returns the current price")
def get_price() -> dict:
return {"price": Decimal("9.99")}
def lambda_handler(event: dict, context: LambdaContext):
return app.resolve(event, context)

Changes

• feat(event_handler): allow custom serializer on BedrockAgentResolver (#8271) by @​kimnamu
• fix(event-handler): handle CORS preflight OPTIONS in HttpResolverLocal (#8268) by @​Avinm
• fix(event-handler): fix ruff lint violations in event_handler module (#8208) by @​hirenkumar-n-dholariya

📜 Documentation updates

• refactor(event_handler): promote HttpResolver to stable (#8289) by @​leandrodamascena
• fix(batch): add optional logger injection for BatchProcessors (#7553) (#8272) by @​Sujit-1509
• docs(event-handler): add import path gotcha for dependency_overrides testing (#8269) by @​hirenkumar-n-dholariya
• chore: fix minor typos and grammar in docs and comments (#8245) by @​Sujit-1509
• docs(metadata): fix broken Lambda Metadata Endpoint link (#8212) by @​derdelean

... (truncated)

Changelog

Sourced from aws-lambda-powertools's changelog.

[v3.30.0] - 2026-06-24

Bug Fixes

• batch: add optional logger injection for BatchProcessors (#7553) (#8272)
• docs: update broken AWS Lambda Metadata Endpoint link (#8209)
• event-handler: handle CORS preflight OPTIONS in HttpResolverLocal (#8268)
• event-handler: fix ruff lint violations in event_handler module (#8208)

Code Refactoring

• event_handler: promote HttpResolver to stable (#8289)

Documentation

• event-handler: add import path gotcha for dependency_overrides testing (#8269)
• metadata: fix broken Lambda Metadata Endpoint link (#8212)

Features

• event_handler: allow custom serializer on BedrockAgentResolver (#8271)

Maintenance

• version bump
• fix minor typos and grammar in docs and comments (#8245)
• deps: bump the github-actions group across 1 directory with 5 updates (#8256)
• deps: bump ujson from 5.12.1 to 5.13.0 (#8298)
• deps: bump pydantic-settings from 2.14.1 to 2.14.2 (#8299)
• deps: bump cryptography from 46.0.7 to 48.0.1 (#8286)
• deps: consolidate Dependabot dependency updates (#8285)
• deps: batch dependency updates (#8207)
• deps: bump gitpython from 3.1.47 to 3.1.50 in /docs (#8213)
• deps: bump urllib3 from 2.6.3 to 2.7.0 in /docs (#8216)
• deps: consolidate dependabot updates (13052026) (#8228)
• deps: bump the github-actions group with 3 updates (#8221)
• deps: bump codecov/codecov-action from 6.0.1 to 7.0.0 in the github-actions group (#8260)
• deps: consolidate all open Dependabot updates (#8241)
• deps: bump the github-actions group with 2 updates (#8292)
• deps: bump pydantic from 2.12.5 to 2.13.4 (#8252)
• deps: update requests requirement from >=2.33.1 to >=2.34.2 in /examples/event_handler_graphql/src (#8254)
• deps-dev: bump aws-cdk from 2.1127.0 to 2.1128.1 in the aws-cdk group (#8290)
• deps-dev: bump the dev-dependencies group across 1 directory with 2 updates (#8242)
• deps-dev: bump aws-cdk from 2.1122.0 to 2.1124.1 in the aws-cdk group across 1 directory (#8234)
• deps-dev: bump boto3-stubs from 1.43.3 to 1.43.24 (#8265)
• deps-dev: bump aws-cdk from 2.1124.1 to 2.1126.0 in the aws-cdk group across 1 directory (#8255)
• deps-dev: bump the dev-dependencies group with 3 updates (#8261)
• deps-dev: bump urllib3 from 2.6.3 to 2.7.0 in /layer_v3 (#8218)
• deps-dev: bump urllib3 from 2.6.3 to 2.7.0 (#8217)
• deps-dev: bump aws-cdk-aws-lambda-python-alpha from 2.251.0a0 to 2.259.0a0 (#8262)
• deps-dev: bump sentry-sdk from 2.57.0 to 2.62.0 (#8263)

... (truncated)

Commits

• 198b96d chore: version bump
• ea8f79e chore(deps-dev): bump aws-cdk-lib from 2.259.0 to 2.260.0 (#8294)
• b58376c chore(deps-dev): bump aws-cdk from 2.1127.0 to 2.1128.1 in the aws-cdk group ...
• e6f0e63 chore(deps): bump the github-actions group with 2 updates (#8292)
• e2aa10b chore(deps-dev): bump the dev-dependencies group across 1 directory with 3 up...
• 5b7cbd3 chore(deps): bump ujson from 5.12.1 to 5.13.0 (#8298)
• ef61980 chore(deps): bump pydantic-settings from 2.14.1 to 2.14.2 (#8299)
• 7634b2f refactor(event_handler): promote HttpResolver to stable (#8289)
• 50541fe fix(batch): add optional logger injection for BatchProcessors (#7553) (#8272)
• f7239b8 feat(event_handler): allow custom serializer on BedrockAgentResolver (#8271)
• Additional commits viewable in compare view

Updates ruff from 0.15.19 to 0.15.20

Release notes

Sourced from ruff's releases.

0.15.20

Release Notes

Released on 2026-06-25.

Preview features

• Allow human-readable names in rule selectors (#25887)
• Emit a warning instead of an error for unknown rule selectors (#26113)
• Match noqa shebang handling in ruff:ignore comments (#26286)
• [ruff] Remove pytest-fixture-autouse (RUF076) (#26240, #26371)

Documentation

• Add versioning sections to custom crate READMEs (#26317)
• Update ruff_python_parser README for crates.io (#26315)
• [perflint] Clarify that PERF402 applies to any iterable (#26242)

Contributors

• @​dhruvmanila
• @​MichaReiser
• @​ntBre
• @​trilamsr

Install ruff 0.15.20

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/ruff/releases/download/0.15.20/ruff-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://releases.astral.sh/github/ruff/releases/download/0.15.20/ruff-installer.ps1 | iex"

Download ruff 0.15.20

File	Platform	Checksum
ruff-aarch64-apple-darwin.tar.gz	Apple Silicon macOS	checksum
ruff-x86_64-apple-darwin.tar.gz	Intel macOS	checksum
ruff-aarch64-pc-windows-msvc.zip	ARM64 Windows	checksum
ruff-i686-pc-windows-msvc.zip	x86 Windows	checksum
ruff-x86_64-pc-windows-msvc.zip	x64 Windows	checksum
ruff-aarch64-unknown-linux-gnu.tar.gz	ARM64 Linux	checksum
ruff-i686-unknown-linux-gnu.tar.gz	x86 Linux	checksum

... (truncated)

Changelog

Sourced from ruff's changelog.

0.15.20

Released on 2026-06-25.

Preview features

• Allow human-readable names in rule selectors (#25887)
• Emit a warning instead of an error for unknown rule selectors (#26113)
• Match noqa shebang handling in ruff:ignore comments (#26286)
• [ruff] Remove pytest-fixture-autouse (RUF076) (#26240, #26371)

Documentation

• Add versioning sections to custom crate READMEs (#26317)
• Update ruff_python_parser README for crates.io (#26315)
• [perflint] Clarify that PERF402 applies to any iterable (#26242)

Contributors

• @​dhruvmanila
• @​MichaReiser
• @​ntBre
• @​trilamsr

Commits

• f82a36b Bump 0.15.20 (#26376)
• af32943 Improve the summarise-ecosystem-results skill (#26378)
• 485ebab Remove RUF076 name from schema (#26371)
• ef81835 [ty] Implement rust-analyzer's "Click for full compiler diagnostic" feature (...
• 572b31e [ruff] Remove pytest-fixture-autouse (RUF076) (#26240)
• f703f21 Allow human-readable names in rule selectors (#25887)
• 0d726b2 [ty] Reuse equality semantics for membership compatibility (#25955)
• dbe6e98 [ty] Infer definite equality comparison results (#26337)
• e700ea3 [ty] Prove TypedDict structural patterns exhaustive (#26285)
• 6a0d2ec [ty] Widen inferred class-valued instance attributes (#26338)
• Additional commits viewable in compare view

Updates tox from 4.56.0 to 4.56.1

Release notes

Sourced from tox's releases.

v4.56.1

What's Changed

• treat scalar string then/else as a single item in if-replace extend by @​HrachShah in tox-dev/tox#3969

New Contributors

• @​HrachShah made their first contribution in tox-dev/tox#3969

Full Changelog: tox-dev/tox@4.56.0...4.56.1

Changelog

Sourced from tox's changelog.

Bug fixes - 4.56.1

• Fix { replace = "if" ... extend = true } corrupting the resulting list when then or else is a scalar string (e.g. then = "-v"): a non-empty scalar string is now appended as a single element instead of being iterated character-by-character, while a false if with no else (yielding "") contributes nothing rather than an empty element, and list/set results are still spread into the parent. (:issue:3969)

---

v4.56.0 (2026-06-23)

---

Commits

• 4bb6421 release 4.56.1
• ca2f561 treat scalar string then/else as a single item in if-replace extend (#3969)
• f933bd2 build(deps): bump actions/checkout from 6.0.3 to 7.0.0 (#3968)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions