MESH-2092 py dev (deps): Bump the patch-and-minor group with 7 updates

[dependabot]

Bumps the patch-and-minor group with 7 updates:

Package	From	To
nhs-aws-helpers	0.8.11	0.8.28
aws-lambda-powertools	3.30.0	3.31.0
boto3	1.43.36	1.43.38
boto3-stubs	1.43.36	1.43.38
botocore	1.43.37	1.43.38
mypy-boto3-cloudwatch	1.43.37	1.43.38
mypy-boto3-ecs	1.43.37	1.43.38

Updates nhs-aws-helpers from 0.8.11 to 0.8.28

Commits

• See full diff in compare view

Updates aws-lambda-powertools from 3.30.0 to 3.31.0

Release notes

Sourced from aws-lambda-powertools's releases.

v3.31.0

Summary

This release adds a new Circuit Breaker utility (in alpha) that stops your Lambda from sending requests to an unhealthy downstream and gives it time to recover. We also made parameter validation in the Event Handler more flexible, so any Pydantic Field annotation now works with any parameter type.

A huge thanks to everyone who helped shape the Circuit Breaker RFC and reviewed this release!

Circuit Breaker (alpha)

Docs

When a downstream service is failing, retries and Lambda's scaling only make it worse: more clients sending requests to something that is already down. The Circuit Breaker stops sending traffic to an unhealthy dependency, then probes it to see when it is safe to resume.

It ships as circuit_breaker_alpha on purpose. We want about a month of real-world feedback before we lock the public API and promote it to GA.

The smallest setup is a persistence store and a name. You wrap the function that makes the downstream call:

from aws_lambda_powertools.utilities.circuit_breaker_alpha import circuit_breaker
from aws_lambda_powertools.utilities.circuit_breaker_alpha.persistence import (
    CircuitBreakerDynamoDBPersistence,
)
from aws_lambda_powertools.utilities.typing import LambdaContext
persistence = CircuitBreakerDynamoDBPersistence(table_name="CircuitBreakerState")
@​circuit_breaker(name="payment-backend", persistence_store=persistence)
def charge(order: dict) -> dict:
return payment_api.charge(order)
def lambda_handler(event: dict, context: LambdaContext) -> dict:
return charge(event)

With no config, sensible defaults apply: open after 5 failures in a row, probe after 30s, close after 3 successes, and treat any exception as a failure. A few things make it a good fit for Lambda:

• It's free when healthy. The failure counter lives in memory, so a healthy circuit writes nothing. We only save state when it changes, so you pay during an incident, which is when you want to.
• State is shared across environments. Circuit state lives in DynamoDB, so the first environment that opens the circuit protects all the others.
• It fails open. If the state store can't be reached, the request goes through. A circuit breaker should never become the outage it's meant to prevent.
• One probe on recovery. When the timer is up, only one environment is selected to test the backend, instead of all of them sending requests at the same time.

When the circuit is open, you decide what happens to the rejected request with an on_circuit_open callback (buffer it, drop it, return a cached value), or let it raise CircuitBreakerOpenError. You can also watch state changes with an on_transition hook to emit your own metrics.

import json
from uuid import uuid4
from aws_lambda_powertools.utilities.circuit_breaker_alpha import circuit_breaker
</tr></table>

... (truncated)

Changelog

Sourced from aws-lambda-powertools's changelog.

[v3.31.0] - 2026-06-29

Features

• event_handler: support any Pydantic Field annotation in parameter (#8305)

Maintenance

• version bump

Commits

• 676c7cd chore: version bump
• 2c6b5e0 feat(event_handler): support any Pydantic Field annotation in parameter (#8305)
• 6c203ea chore(deps): bump redis from 7.4.0 to 8.0.1 (#8297)
• a9cffe4 chore(deps-dev): bump sentry-sdk from 2.62.0 to 2.63.0 (#8296)
• 29c5dc8 chore(deps-dev): bump boto3-stubs from 1.43.29 to 1.43.36 (#8295)
• e7e6745 feat: adding circuit breaker feature (#8266)
• 01e1e88 chore(ci): bump version to 3.30.0 (#8302)
• 697c8d1 chore(ci): layer docs update (#8303)
• See full diff in compare view

Updates boto3 from 1.43.36 to 1.43.38

Commits

• efcfb65 Merge branch 'release-1.43.38'
• c5ccc0d Bumping version to 1.43.38
• 2f87c21 Add changelog entries from botocore
• af4ce8d Merge branch 'release-1.43.37'
• 1d2f989 Merge branch 'release-1.43.37' into develop
• d52c295 Bumping version to 1.43.37
• b926d8d Add changelog entries from botocore
• 08029bd Bump https://github.com/astral-sh/ruff-pre-commit (#4804)
• 1b11d8e Bump actions/checkout from 6.0.0 to 7.0.0 in the github-actions group (#4803)
• 76f3a99 Add CODEOWNERS file for team review enforcement (#4805)
• Additional commits viewable in compare view

Updates boto3-stubs from 1.43.36 to 1.43.38

Release notes

Sourced from boto3-stubs's releases.

8.8.0 - Python 3.8 runtime is back

Changed

• [services] install_requires section is calculated based on dependencies in use, so typing-extensions version is set properly
• [all] Replaced typing imports with collections.abc with a fallback to typing for Python <3.9
• [all] Added aliases for builtins.list, builtins.set, builtins.dict, and builtins.type, so Python 3.8 runtime should work as expected again (reported by @​YHallouard in #340 and @​Omri-Ben-Yair in #336)
• [all] Unions use the same type annotations as the rest of the structures due to proper fallbacks

Fixed

• [services] Universal input/output shapes were not replaced properly in service subresources
• [docs] Simplified doc links rendering for services
• [services] Cleaned up unnecessary imports in client.pyi
• [builder] Import records with fallback are always rendered

Commits

• See full diff in compare view

Updates botocore from 1.43.37 to 1.43.38

Commits

• 7ad90e5 Merge branch 'release-1.43.38'
• c006402 Bumping version to 1.43.38
• e7f2f13 Update endpoints model
• 58db4a7 Update to latest models
• f40dbf6 Service Removals (#3738)
• 624df7b Merge branch 'release-1.43.37' into develop
• See full diff in compare view

Updates mypy-boto3-cloudwatch from 1.43.37 to 1.43.38

Release notes

Sourced from mypy-boto3-cloudwatch's releases.

8.8.0 - Python 3.8 runtime is back

Changed

• [services] install_requires section is calculated based on dependencies in use, so typing-extensions version is set properly
• [all] Replaced typing imports with collections.abc with a fallback to typing for Python <3.9
• [all] Added aliases for builtins.list, builtins.set, builtins.dict, and builtins.type, so Python 3.8 runtime should work as expected again (reported by @​YHallouard in #340 and @​Omri-Ben-Yair in #336)
• [all] Unions use the same type annotations as the rest of the structures due to proper fallbacks

Fixed

• [services] Universal input/output shapes were not replaced properly in service subresources
• [docs] Simplified doc links rendering for services
• [services] Cleaned up unnecessary imports in client.pyi
• [builder] Import records with fallback are always rendered

Commits

• See full diff in compare view

Updates mypy-boto3-ecs from 1.43.37 to 1.43.38

Release notes

Sourced from mypy-boto3-ecs's releases.

8.8.0 - Python 3.8 runtime is back

Changed

• [services] install_requires section is calculated based on dependencies in use, so typing-extensions version is set properly
• [all] Replaced typing imports with collections.abc with a fallback to typing for Python <3.9
• [all] Added aliases for builtins.list, builtins.set, builtins.dict, and builtins.type, so Python 3.8 runtime should work as expected again (reported by @​YHallouard in #340 and @​Omri-Ben-Yair in #336)
• [all] Unions use the same type annotations as the rest of the structures due to proper fallbacks

Fixed

• [services] Universal input/output shapes were not replaced properly in service subresources
• [docs] Simplified doc links rendering for services
• [services] Cleaned up unnecessary imports in client.pyi
• [builder] Import records with fallback are always rendered

Commits

• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions