[dependabot]

Bumps the python group with 8 updates in the / directory:

Package	From	To
aws-cdk-lib	2.266.0	2.275.0
boto3	1.43.78	1.43.123
eoapi-cdk	11.6.4	11.8.1
pydantic-settings[yaml]	2.15.0	2.16.2
pydantic	2.13.4	2.14.2
pre-commit	4.6.2	4.7.0
pypgstac	0.9.11	0.10.0
pytest	9.1.1	9.2.0

Updates aws-cdk-lib from 2.266.0 to 2.275.0

Release notes

Sourced from aws-cdk-lib's releases.

v2.275.0

⚠ BREAKING CHANGES

• ** L1 resources are automatically generated from public CloudFormation Resource Schemas. They are built to closely reflect the real state of CloudFormation. Sometimes these updates can contain changes that are incompatible with previous types, but more accurately reflect reality. In this release we have changed:

aws-bedrockagentcore: AWS::BedrockAgentCore::Harness: HarnessAgentCoreMemoryRetrievalConfig.RelevanceScore type narrowed from number | string to number.
aws-bedrockagentcore: AWS::BedrockAgentCore::Harness: HarnessAgentCoreMemoryRetrievalConfig.TopK type narrowed from integer | string to integer.
aws-codebuild: AWS::CodeBuild::ReportGroup: Id attribute removed.
aws-dax: AWS::DAX::SubnetGroup: Id attribute removed.
aws-dms: AWS::DMS::MigrationProject: InstanceProfileArn property removed (now a read-only attribute).
aws-dms: AWS::DMS::MigrationProject: InstanceProfileName property removed (now a read-only attribute).
aws-dms: AWS::DMS::MigrationProject: MigrationProjectCreationTime property removed (now a read-only attribute).
aws-emr: AWS::EMR::InstanceFleetConfig: Id attribute removed.
aws-fsx: AWS::FSx::Volume: AggregateConfiguration.Aggregates property is now immutable.
aws-fsx: AWS::FSx::Volume: AggregateConfiguration.ConstituentsPerAggregate property is now immutable.
aws-fsx: AWS::FSx::Volume: OntapConfiguration.AggregateConfiguration property is now immutable.
aws-fsx: AWS::FSx::Volume: OntapConfiguration.VolumeStyle property is now immutable.
aws-medialive: AWS::MediaLive::Input: InputNetworkLocation property type narrowed to enum (AWS | ON_PREMISES).
aws-medialive: AWS::MediaLive::Input: Type property type narrowed to enum (16 values).
aws-medialive: AWS::MediaLive::Input: Tags property type narrowed from json to Map<string, string>.
aws-medialive: AWS::MediaLive::Input: RouterDestinationSettings.AvailabilityZoneName property is now required.
aws-medialive: AWS::MediaLive::Input: RouterSettings.EncryptionType property type narrowed to enum (AUTOMATIC | SECRETS_MANAGER).
aws-medialive: AWS::MediaLive::InputSecurityGroup: Tags property type narrowed from json to Map<string, string>.
aws-mediapackagev2: AWS::MediaPackageV2::OriginEndpoint: LowLatencyHlsManifestConfiguration.FilterConfiguration type narrowed to LowLatencyHlsFilterConfiguration.
aws-mediapackagev2: AWS::MediaPackageV2::OriginEndpoint: MssManifestConfiguration.FilterConfiguration type narrowed to MssFilterConfiguration.

Features

• cloudfront: add sigv4a always-amz-auth signing for origin access control (#39216) (d9505e0), closes #39195 #38629 #39196 #39195
• core: switch off built-in CloudFormation Validate using App prop (#39452) (5f51a82)
• lambda-nodejs: support repeated esbuild arguments (#39344) (d60598a), closes #32260 aws/aws-cdk#39344
• update L1 CloudFormation resource definitions (#39393) (8fb96fc)

Bug Fixes

• core: overly defensive plugin invocation leads to slowness (#39451) (783a981)
• stepfunctions-tasks: use a dedicated Lambda function for each EvaluateExpression task (#39436) (641ff6f)
• add graduate tool to lerna.json (#39423) (3d6f9d3)
• lambda-nodejs: preCompilation fails with TypeScript 6 or later (#39401) (8ce48a6)

---

Alpha modules (2.275.0-alpha.0)

v2.274.0

⚠ BREAKING CHANGES

• ** L1 resources are automatically generated from public CloudFormation Resource Schemas. They are built to closely reflect the real state of CloudFormation. Sometimes these updates can contain changes that are incompatible with previous types, but more accurately reflect reality. In this release we have changed:

aws-cloudwatch: AWS::CloudWatch::AnomalyDetector: Id attribute removed.
aws-glue: AWS::Glue::Table: Id attribute removed.

... (truncated)

Changelog

Sourced from aws-cdk-lib's changelog.

Changelog

All notable changes to this project will be documented in this file. See standard-version for commit guidelines.

2.275.0-alpha.0 (2026-10-26)

2.274.0-alpha.0 (2026-10-20)

Features

• bedrock-alpha: add VectorKnowledgeBase L2 construct for bedrock knowledge bases (#38883) (5041639), closes aws/aws-cdk-rfcs#686

Bug Fixes

• ec2-alpha: allow valid secondary CIDR blocks outside RFC 1918 (#36873) (8f48c90), closes #36111
• redshift-alpha: backslashes in user passwords and comments are not preserved (#39306) (1f752b6)

2.273.0-alpha.0 (2026-10-08)

⚠ BREAKING CHANGES

• redshift-alpha: PUBLIC in any ASCII letter case is rejected as the name of a created user, or of an imported user that is granted table privileges. Existing PUBLIC grants are not removed, but narrowing one is rejected. Migrating to an ordinary name still works.
• redshift-alpha: The loggingProperties prop on ClusterProps (and the LoggingProperties interface) has been removed from @aws-cdk/aws-redshift-alpha. Use the new logging prop with ClusterLogging.s3({ bucket, keyPrefix }) or ClusterLogging.cloudWatch({ logExports }) instead.

Features

• redshift-alpha: audit logging to cloudwatch (#36410) (f2bf5d3), closes #25755

Bug Fixes

• redshift-alpha: reject PUBLIC user names (#38935) (3335407)

2.272.0-alpha.0 (2026-09-30)

2.271.0-alpha.0 (2026-09-25)

2.270.0-alpha.0 (2026-09-17)

2.269.0-alpha.0 (2026-09-10)

⚠ BREAKING CHANGES

• glue-alpha: Glue job constructs now reject construct-managed and Glue-reserved arguments passed through defaultArguments. Previously, a managed argument set via defaultArguments was silently honored in SparkJob and PythonShellJob (customer

... (truncated)

Commits

• de53236 chore(release): 2.275.0 (#39493)
• b671f24 chore: update analytics metadata blueprints
• 7097b9e chore(release): 2.275.0
• 89a9e73 chore(bedrock-alpha): add Claude Sonnet 5 foundation model (#38557)
• a4d9f09 docs(eks): explain how to pass null helm chart values from non-typescript lan...
• d60598a feat(lambda-nodejs): support repeated esbuild arguments (#39344)
• 783a981 fix(core): overly defensive plugin invocation leads to slowness (#39451)
• cfda165 chore(enum-updater): exclude glue WorkerType Z.2X (#39417)
• 0106399 chore(custom-resource-handlers): remove unused aws-glue-alpha handler (#39438)
• 5f51a82 feat(core): switch off built-in CloudFormation Validate using App prop (#39452)
• Additional commits viewable in compare view

Updates boto3 from 1.43.78 to 1.43.123

Commits

• 6334d9f Merge branch 'release-1.43.123'
• 51224ed Bumping version to 1.43.123
• 3dfd2b6 Add changelog entries from botocore
• f89caef Merge branch 'release-1.43.122'
• f0464ef Merge branch 'release-1.43.122' into develop
• 5af8c5f Bumping version to 1.43.122
• 1af5d47 Add changelog entries from botocore
• cc2e975 Merge branch 'release-1.43.121'
• 807ecf8 Merge branch 'release-1.43.121' into develop
• 21a159b Bumping version to 1.43.121
• Additional commits viewable in compare view

Updates eoapi-cdk from 11.6.4 to 11.8.1

Release notes

Sourced from eoapi-cdk's releases.

v11.8.1

11.8.1 (2026-10-26)

Bug Fixes

• deps: update brotli to 1.2.1 in lockfiles (CVE-2026-111497) (#318) (50ef50f)

v11.8.0

11.8.0 (2026-09-30)

Features

• add s3Prefix for stac-browser (#314) (985aa22)

v11.7.1

11.7.1 (2026-09-19)

Bug Fixes

• ingest type=Catalog along with collections in stac-loader (#310) (2437790)

v11.7.0

11.7.0 (2026-09-10)

Features

• upgrade core runtime dependencies (stac-fastapi-pgstac 6.4, titiler-pgstac 3.1, tipg 1.6) (#302) (f9cccc0)

v11.6.5

11.6.5 (2026-09-09)

Bug Fixes

• pin to affine<3 in stactools item generator (#300) (81fe4a3)

Changelog

Sourced from eoapi-cdk's changelog.

11.8.1 (2026-10-26)

Bug Fixes

• deps: update brotli to 1.2.1 in lockfiles (CVE-2026-111497) (#318) (50ef50f)

11.8.0 (2026-09-30)

Features

• add s3Prefix for stac-browser (#314) (985aa22)

11.7.1 (2026-09-19)

Bug Fixes

• ingest type=Catalog along with collections in stac-loader (#310) (2437790)

11.7.0 (2026-09-10)

Features

• upgrade core runtime dependencies (stac-fastapi-pgstac 6.4, titiler-pgstac 3.1, tipg 1.6) (#302) (f9cccc0)

11.6.5 (2026-09-09)

Bug Fixes

• pin to affine<3 in stactools item generator (#300) (81fe4a3)

Commits

• e87e836 chore(main): release 11.8.1 (#319)
• 50ef50f fix(deps): update brotli to 1.2.1 in lockfiles (CVE-2026-111497) (#318)
• ca1a90c chore(main): release 11.8.0 (#315)
• 985aa22 feat: add s3Prefix for stac-browser (#314)
• ca0925c chore(main): release 11.7.1 (#312)
• 2437790 fix: ingest type=Catalog along with collections in stac-loader (#310)
• 48d214c chore(deps): bump the all-dependencies group across 2 directories with 4 upda...
• 5295d9d chore(main): release 11.7.0 (#304)
• 29cf622 chore(deps): remediate npm security advisories (#305)
• f9cccc0 feat: upgrade core runtime dependencies (stac-fastapi-pgstac 6.4, titiler-pgs...
• Additional commits viewable in compare view

Updates pydantic-settings[yaml] from 2.15.0 to 2.16.2

Release notes

Sourced from pydantic-settings[yaml]'s releases.

v2.16.1

Highlights

This patch release fixes two CLI regressions introduced in 2.16.0.

Bug fixes

CLI

• Fixed-length tuple positionals such as CliPositionalArg[tuple[int, int]] and NamedTuples are single-valued again (#1069). Since 2.16.0 they were treated as variadic, so a CLI either refused to start with a SettingsError or put the wrong argument into the tuple. Variable-length tuples (tuple[int, ...] and bare Tuple) are still variadic.
• A field typed as an alias of a list of dicts, e.g. type ListOfDict = list[dict[str, int]], accepts a JSON list again (#1049). Since 2.16.0, --xx '[{"a":1},{"b":2}]' was merged into the single dict {"a": 1, "b": 2} and failed validation.

What's Changed

• Harden CI by @​Viicos in pydantic/pydantic-settings#1044
• Keep list of dicts CLI values as lists by @​hramezani in pydantic/pydantic-settings#1049
• Keep fixed-length tuple CLI positionals single-valued by @​hramezani in pydantic/pydantic-settings#1069
• Prepare release 2.16.1 by @​hramezani in pydantic/pydantic-settings#1087
• build(deps): bump the python-packages group with 3 updates by @​dependabot[bot] in pydantic/pydantic-settings#1056

Full Changelog: pydantic/pydantic-settings@v2.16.0...v2.16.1

v2.16.0

Highlights

Breaking changes and behavior changes

• Python 3.10 is no longer supported (#1003). pydantic-settings now requires Python 3.11+, since 3.10 reaches end of life this month. The tomli fallback is gone in favor of stdlib tomllib; the toml extra is kept as an empty extra so pip install pydantic-settings[toml] keeps working.
• python-dotenv>=1.2.2 is now required (#971) to pick up the fix for CVE-2026-28684.
• Aliases are ignored in every source when validate_by_alias=False (#1033). Env vars, secrets, CLI flags and defaults now use only field names, matching pydantic. An env var named after the alias is now ignored instead of raising extra_forbidden, and the CLI exposes --apple rather than --pomo.
• validation_alias takes precedence over alias (#1038). When the two differ, values from JSON/YAML/TOML files and the CLI were silently ignored; they now load. CLI help lists the validation_alias flag first, and CliApp.serialize emits it.
• CLI case-insensitivity only lowercases registered options (#1036). With case_sensitive=False, args after -- and those captured by CliUnknownArgs keep their case (-Xmx4G no longer becomes -xmx4g). Unrecognized options are now reported as typed (--NOPE instead of --nope).
• JSON and YAML config files are read as UTF-8 by default (#955) instead of the locale encoding, completing the secrets-file fix from 2.15.0. json_file_encoding/yaml_file_encoding still override it.
• Discriminated union defaults are partially updated again (#997). This reverts the 2.15.0 regression with nested_model_default_partial_update=True: the default is only dropped when the incoming value selects a different union member.

New features

• Python 3.15 and pydantic 2.14 support (#1026, #1029, #1022). pydantic 2.14 broke CliApp.run and validate_by_alias=False handling; both are fixed.
• Cached settings instances via Settings.settings_cached() and Settings.settings_clear_cache() (#952). These give you a process-local singleton per settings class without hand-rolling lru_cache wrappers. Calling the class directly still builds a fresh instance.
• AWS Systems Manager Parameter Store source — AWSSystemsManagerSettingsSource (#941). It recursively reads every parameter under an ssm_path, with / mapping onto nested models. Install it with the new aws-systems-manager extra.
• env_file_depth (#940) lets a relative env_file be found in parent directories, mirroring pyproject_toml_depth. This is useful when scripts run from a subdirectory of a monorepo. It defaults to 0, which keeps the current behavior.
• CliVariadicArg for named variadic options (#949, #958). It accepts --param a b c in addition to repeated --param a --param b. Required fields need at least one value.

Bug fixes

CLI

... (truncated)

Commits

• 94150a0 Prepare release 2.16.2 (#1111)
• 9e02de0 Fix JSON decoding of nested dictionary environment values (#1109)
• 7e2dacb Fix CliApp reconstruction of AliasPath inputs (#1096)
• 2d1f924 Fix explicit nested secrets directory precedence (#1093)
• e9588ae Fix regressions from nested dict union value decoding (#1089) (#1097)
• e71a53e Decode nested dictionary values with complex union types (#1089)
• 8dc9e05 Resolve only the discriminator annotation of stdlib dataclass defaults (#1077)
• c50c853 Detect nested Field discriminators in default partial updates (#1076)
• 9aabb8a build(deps): bump the python-packages group with 3 updates (#1056)
• 4e286e2 Prepare release 2.16.1 (#1087)
• Additional commits viewable in compare view

Updates pydantic from 2.13.4 to 2.14.2

Release notes

Sourced from pydantic's releases.

v2.14.2 2026-10-29

v2.14.2 (2026-10-29)

This release addresses 2 security issues, GHSA-qpmf-fgh3-ff25 and GHSA-3r8g-cqwr-jr29.

Packaging

• Bump PyO3 to 0.30.1, jiter to 0.18.0, use PyFrozenDict by @​Viicos in #14003
• Bump speedate to v0.18.0 by @​Viicos in #14007
• Publish pydantic-core wheels for PyPy 8.0 (pp80 ABI) by @​Viicos in #14083

Performance

• Avoid Python tuple allocation during model fields validation by @​Viicos in #13955
• Lazily call repr of values during nested union serialization by @​Viicos in #14082
• Skip decorator field checks when no field decorators exist by @​alexmojaki in #14111
• Avoid heap allocation for small JSON model field buffers by @​alexmojaki in #14113

Fixes

• Make JSON validation by iteration consistent with Python approach by @​davidhewitt in #13275.

  JSON validation now handles field lookup and extra data the same way as Python validation. In particular, keys that only match an unused alias or field name are now treated as extra data, instead of being silently dropped:

  from pydantic import BaseModel, ConfigDict
  from pydantic.alias_generators import to_camel
  class Page(BaseModel):
  model_config = ConfigDict(extra='forbid', alias_generator=to_camel)
  page_size: int = 10
  
  Page.model_validate_json('{"page_size": 50}')
  Before: Page(page_size=10)
  After: ValidationError (extra_forbidden)

  See the pull request for the full list of behavior changes. This change addresses GHSA-qpmf-fgh3-ff25.

• Ignore extra data matching a field name in TypedDict and dataclasses with extra=allow by @​Viicos in #14090. Addresses GHSA-3r8g-cqwr-jr29.

• Fix unpickling of generic classes defined in separate module by @​Viicos in #13994

• Support explicit by_alias overriding validate_by_alias in validation JSON schemas by @​Viicos in #13997

• Fix mypy plugin crash on deferred empty model by @​ilevkivskyi in #14027

• Fix infinite recursion when validating an invalid default with PydanticUseDefault by @​Viicos in #14028

• Implement recursion guard for validate_strings() by @​Viicos in #14029

... (truncated)

Changelog

Sourced from pydantic's changelog.

v2.14.2 (2026-10-29)

GitHub release

What's Changed

Packaging

• Bump PyO3 to 0.30.1, jiter to 0.18.0, use PyFrozenDict by @​Viicos in #14003
• Bump speedate to v0.18.0 by @​Viicos in #14007
• Publish pydantic-core wheels for PyPy 8.0 (pp80 ABI) by @​Viicos in #14083

Performance

• Avoid Python tuple allocation during model fields validation by @​Viicos in #13955
• Lazily call repr of values during nested union serialization by @​Viicos in #14082
• Skip decorator field checks when no field decorators exist by @​alexmojaki in #14111
• Avoid heap allocation for small JSON model field buffers by @​alexmojaki in #14113

Fixes

• Make JSON validation by iteration consistent with Python approach by @​davidhewitt in #13275.

  JSON validation now handles field lookup and extra data the same way as Python validation. In particular, keys that only match an unused alias or field name are now treated as extra data, instead of being silently dropped:

  from pydantic import BaseModel, ConfigDict
  from pydantic.alias_generators import to_camel
  class Page(BaseModel):
  model_config = ConfigDict(extra='forbid', alias_generator=to_camel)
  page_size: int = 10
  
  Page.model_validate_json('{"page_size": 50}')
  Before: Page(page_size=10)
  After: ValidationError (extra_forbidden)

  See the pull request for the full list of behavior changes.

• Fix unpickling of generic classes defined in separate module by @​Viicos in #13994

• Support explicit by_alias overriding validate_by_alias in validation JSON schemas by @​Viicos in #13997

• Fix mypy plugin crash on deferred empty model by @​ilevkivskyi in #14027

• Fix infinite recursion when validating an invalid default with PydanticUseDefault by @​Viicos in #14028

• Implement recursion guard for validate_strings() by @​Viicos in #14029

• Support named tuples in Sequence serialization by @​Viicos in #14033

... (truncated)

Commits

• aa540ac Update changelog for v2.14.2
• 6cde12f Update changelog for v2.14.2
• 2db7c25 Fix deep copy of self-referential models
• d783154 Update changelog for v2.14.2
• df49b6c Avoid heap allocation for small JSON model field buffers
• cd93e69 Skip decorator field checks when no field decorators exist
• 2771e57 Make JSON validation by iteration consistent with Python approach
• 8102e3f Avoid Python tuple allocation during model fields validation
• dd139b5 Bump pydantic.v1 namespace to v1.10.27
• 66155f9 Prepare release v2.14.2
• Additional commits viewable in compare view

Updates pre-commit from 4.6.2 to 4.7.0

Release notes

Sourced from pre-commit's releases.

pre-commit v4.7.0

Fixes

• Fix language: node hooks during commit with -a or inside a submodule.
  • Regressed in 4.6.1.
  • #3773 issue by @​cbirkhold.
  • #3774 PR by @​cbirkhold.

Changelog

Sourced from pre-commit's changelog.

4.7.0 - 2026-10-12

Fixes

• Fix language: node hooks during commit with -a or inside a submodule.
  • Regressed in 4.6.1.
  • #3773 issue by @​cbirkhold.
  • #3774 PR by @​cbirkhold.

Commits

• 65bb884 v4.7.0
• 73926c1 Merge pull request #3774 from cbirkhold/node-no-git-env-npm-install
• 860d07d don't leak GIT_* env into npm install for language: node
• 9ad8a0a Merge pull request #3775 from pre-commit/contextlib-chdir
• 9905e88 use contextlib.chdir
• 59cb792 Merge pull request #3771 from pre-commit/all-repos_autofix_py311-plus
• 2be1701 remove triple-nested withs for 3.14 coverage
• 4c8d22a py311+
• c429238 Merge pull request #3770 from pre-commit/pre-commit-ci-update-config
• f49e251 [pre-commit.ci] pre-commit autoupdate
• Additional commits viewable in compare view

Updates pypgstac from 0.9.11 to 0.10.0

Release notes

Sourced from pypgstac's releases.

v0.10.0

Commits

• bc774b1: Move images to trixie, update CI actions and ruff (David W Bitner) #491
• 854fd97: Emit progress and trace messages at DEBUG instead of NOTICE (David W Bitner) #491
• b538cfb: Fix run_queued_queries error carry-over and live DROPs in 000_idempotent_pre (David W Bitner) #491
• 5e2429f: Retry queued statements instead of discarding them (David W Bitner) #491
• d2b8015: Queue partition maintenance during migration and drain it from pypgstac (David W Bitner) #491
• 68fb813: Read partition bounds under a pinned DateStyle and honour existing partition alignment (David W Bitner) #491
• 6664645: Version base items and fix collection delete for pgstac_ingest (David W Bitner) #491
• 9edd222: Manage queryables through functions and match indexes by definition (David W Bitner) #491
• affe101: Resolve CQL2 properties through queryable() and honour both temporal operands (David W Bitner) #491
• c727d00: Fix paging, default sort, limit validation, free text terms and collection_search prev link (David W Bitner) #491
• 1d9db70: Tag loaded items with their base item and load queryables through upsert_queryable (David W Bitner) #491
• 43cde41: Make makemigration wait for the database and keep generated .sql.out files (David W Bitner) #491
• 9e5c1e7: Finish 0.10.0 release notes (David W Bitner) #491
• e04c419: Stage the 0.10.0 release (David W Bitner) #491
• bc68ee4: update versions to get ci to pass when using python 3.13 (David W Bitner) #491
• 7a6f5bb: fix json schema pointer for geojson in queryables (David W Bitner) #491
• 3ea8fcd: add tests to verify that stac_items behaves as expected with the base_items table (David W Bitner) #491

v0.9.12

Commits

• 3c462c4: fixes for concurrency issues (#473) (David Bitner) #473

Changelog

Sourced from pypgstac's changelog.

[v0.10.0]

Upgrading

• 0.10.0 is a breaking release. Upgrade pypgstac and the database together: pypgstac 0.10.x refuses to load into a 0.9.x database, and vice versa.
• Deploy API instances that hydrate client-side (stac-fastapi-pgstac) onto a release that understands the pgstac:base_item tag before editing item_assets or stac_version on a collection that already has items.
• queryables rows are rewritten into one stored spelling: names lose the properties. prefix, an empty collection_ids becomes global, rows that now conflict are reduced to the oldest, and property_path is converted from a path expression to the keys it named. A queryable whose property_wrapper is not registered, or whose index PostgreSQL cannot build, halts the migration until it is fixed.
• Queryables scoped to collections that no longer exist are pruned, and one scoped only to such collections is removed. 0.9.12's collection delete did not touch queryables, so these are the ordinary state of a long-lived catalog.
• Where two rows now conflict the older survives, completed from the one being removed rather than replacing it: a bare stub is usually older than a hand-configured row.
• Indexes whose definition changed — dotted names, names read from the item root, and definitions with no explicit wrapper — are rebuilt correctly, and the old index is left as an orphan until maintain_partitions(dropindexes => true). Every other index is left alone. See Indexing.
• Paging tokens change format and a token issued by an earlier release is no longer accepted. Both halves are now hex-encoded, so a collection or item id containing a colon can no longer make a token ambiguous. A client holding a token across the upgrade has to start its paging again; tokens are cursors, not durable identifiers.
• Searches return different results where the fixes below change them.

Fixed

• Filters and sorts on start_datetime work again; cql2_query() resolves every property through queryable(), which also fixes properties.-prefixed spellings and geometry outside spatial operators. (#452)
• Temporal operators honour both operands. Every t_* operator hardcoded the item's datetime span as the left operand and ignored a literal in the first position, so a filter on any other property silently filtered on the item datetime, and t_overlaps failed outright. Intervals on either side, property-to-property comparisons and date-only operands all work; a non-temporal property now raises rather than producing a nonsense predicate. (#281)
• Queryables whose name contains a dot, or that name assets, links, bbox, stac_version or stac_extensions, are indexed on the path the filter actually reads. Such an index previously matched nothing and was duplicated on every maintain_partitions() run. A queryable with no explicit wrapper is indexed through the wrapper its filter uses, not to_text. (#483, #465)
• Paging no longer truncates a result set when the same item id exists in more than one collection, and a token whose collection id prefixes another, or whose item id contains a colon, can be read back. search() emits no paging link for an empty page, and a

... (truncated)

Commits

• 51b64ff update for ci release issue
• 3ea8fcd add tests to verify that stac_items behaves as expected with the base_items t...
• 7a6f5bb fix json schema pointer for geojson in queryables
• bc68ee4 update versions to get ci to pass when using python 3.13
• e04c419 Stage the 0.10.0 release
• 9e5c1e7 Finish 0.10.0 release notes
• 43cde41 Make makemigration wait for the database and keep generated .sql.out files
• 1d9db70 Tag loaded items with their base item and load queryables through upsert_quer...
• c727d00 Fix paging, default sort, limit validation, free text terms and collection_se...
• affe101 Resolve CQL2 properties through queryable() and honour both temporal operands
• Additional commits viewable in compare view

Updates pytest from 9.1.1 to 9.2.0

Release notes

Sourced from pytest's releases.

9.2.0

pytest 9.2.0 (2026-10-27)

Removals and backward incompatible breaking changes

• #14716: -c now raises a usage error for a path that does not exist, is a directory, or is in a format pytest has no loader for. Such paths were previously either ignored or reported as an unhandled FileNotFoundError.

• #8593: The indirect, ids and scope arguments of Metafunc.parametrize() <pytest.Metafunc.parametrize> -- and therefore of @pytest.mark.parametrize <pytest.mark.parametrize ref> -- are now keyword-only.

  Passing them positionally was a common source of confusing errors, e.g. parametrize("arg1", "arg2", [(1, 2)]) made the argvalues land in indirect and failed with indirect fixture '(1, 2)' doesn't exist; such mistakes now fail with an understandable TypeError. The type annotations have always declared these arguments as keyword-only.

• #993: Plugin import failures at startup are now reported and classified instead of escaping as a raw traceback with the accidental exit code 1:

  • a plugin that cannot be found -- via -p, pytest_plugins or PYTEST_PLUGINS -- exits with pytest.ExitCode USAGE_ERROR (4), like a conftest.py that fails to import;
  • a plugin that is found but raises while importing -- including a broken pytest11 entry point or a missing plugin dependency -- exits with pytest.ExitCode INTERNAL_ERROR (3), with the traceback preserved.

  pytest.main now returns these codes instead of raising ImportError. Also fixed an IndexError from pytest's own internals when the plugin raised an exception with no arguments.

Deprecations (removal in next major release)

• #14742: The private _pytest.python.CallSpec2 name has been renamed to CallSpec. The old CallSpec2 alias remains available for now and will be removed in pytest 10 or 11.

• #14755: Schedule yield_fixture decorator for removal in pytest 10 or 11.

• #14774: Similarly to the deprecation of class-scoped fixtures defined as instance methods in pytest 9.1, all higher-scoped fixtures (module, package, and session) defined as instance methods are now deprecated.

  They suffer from the same issue the original deprecation only fixed for class-scoped fixtures, see 10819 and 14011.

• #14808: Passing a non-string value to a string-typed ini option now emits a pytest.PytestRemovedIn10Warning. This affects [tool.pytest.ini_options] in pyproject.toml. In pytest 10 this will raise a TypeError, matching the behavior of the corresponding TOML config path.

• #7323: Passing bytes to TerminalReporter.write_line() is now deprecated, pass a str instead.

New features

• #14743: Full diff: now contains a legend explaining the + & - symbols in diff output.
• #2781: When strict_markers is enabled, marker names used in -m expressions are now validated against registered markers.
• #6881: Added the parametrize_long_str_id_strategy configuration option to control how long str/bytes parameter values are handled in auto-generated test IDs. Explicit IDs set via ids=[...] or pytest.param(..., id=...) are not affected. Available strategies: short (default, values over 100 chars fall back to argname+index), sha256 (SHA-256 hex digest), legacy (keep full value), and disallow (error requesting explicit IDs).

Improvements in existing functionality

• #10745: A RecursionError whose recursion origin cannot be located now shows only the first and last 10 stack frames, matching what pytest already did when locating the origin failed outright. Previously the full traceback -- often around a thousand near-identical frames -- was rendered, which was both slow and unreadable. Pass --full-trace to see every frame.

... (truncated)

Commits

• ae1d0ff Prepare release version 9.2.0
• 143ce31 pre-commit: exclude codespell on generated release announcements
• 532dc5f tox: add attrs dependency to regen, needed in reportingdemo.rst
• a7b2446 Merge pull request #15245 from pytest-dev/claude/project-thread-9jcf91
• Description has been truncated