Python update

.gitea/actions/configure/action.yaml

@@ -16,13 +16,13 @@ runs:
       run: pip install cfn-lint cfn-lint-serverless
 
     - name: Setup NodeJS
-      uses: actions/setup-node@v5
+      uses: actions/setup-node@v6
       with:
         node-version: ${{ env.NODE_VERSION }}
     - run: 'echo "NodeJS version: $(node --version)"'
 
     - run: echo "**** Setup uv ****"
-    - uses: astral-sh/setup-uv@v6
+    - uses: astral-sh/setup-uv@v7
     - run: uv --version
 
     - run: echo "**** Install application dependencies ****"

.gitea/workflows/pipeline.yaml

@@ -112,8 +112,8 @@ jobs:
     runs-on: ubuntu-latest
     env:
       SERVICE_FOLDER: "unicorn_approvals"
-      PYTHON_VERSION: "3.12"
-      NODE_VERSION: "22.x"
+      PYTHON_VERSION: "3.13"
+      NODE_VERSION: "24.x"
     steps:
       - uses: actions/checkout@v5
 
@@ -193,8 +193,8 @@ jobs:
     runs-on: ubuntu-latest
     env:
       SERVICE_FOLDER: "unicorn_contracts"
-      PYTHON_VERSION: "3.12"
-      NODE_VERSION: "22.x"
+      PYTHON_VERSION: "3.13"
+      NODE_VERSION: "24.x"
     steps:
       - uses: actions/checkout@v5
 
@@ -297,8 +297,8 @@ jobs:
     runs-on: ubuntu-latest
     env:
       SERVICE_FOLDER: "unicorn_approvals"
-      PYTHON_VERSION: "3.12"
-      NODE_VERSION: "22.x"
+      PYTHON_VERSION: "3.13"
+      NODE_VERSION: "24.x"
     steps:
       - uses: actions/checkout@v5
 
@@ -445,8 +445,8 @@ jobs:
     runs-on: ubuntu-latest
     env:
       SERVICE_FOLDER: "unicorn_web"
-      PYTHON_VERSION: "3.12"
-      NODE_VERSION: "22.x"
+      PYTHON_VERSION: "3.13"
+      NODE_VERSION: "24.x"
     steps:
       - uses: actions/checkout@v5
 

.github/workflows/build.yml

@@ -30,15 +30,15 @@ jobs:
 
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
 
-      - name: Set up Python 3.12
-        uses: actions/setup-python@v4
+      - name: Set up Python 3.13
+        uses: actions/setup-python@v6
         with:
-          python-version: 3.12
+          python-version: 3.13
 
       - name: Install uv
-        uses: astral-sh/setup-uv@v5
+        uses: astral-sh/setup-uv@v7
         with:
           version: 0.7.8
 

.github/workflows/codeql-analysis.yml

@@ -25,11 +25,11 @@ jobs:
 
     steps:
     - name: Checkout repository
-      uses: actions/checkout@v4
+      uses: actions/checkout@v6
 
     # Initializes the CodeQL tools for scanning.
     - name: Initialize CodeQL
-      uses: github/codeql-action/init@v3
+      uses: github/codeql-action/init@v4
       with:
         languages: ${{ matrix.language }}
 
@@ -49,4 +49,4 @@ jobs:
     #   ./location_of_script_within_repo/buildscript.sh
 
     - name: Perform CodeQL Analysis
-      uses: github/codeql-action/analyze@v3
+      uses: github/codeql-action/analyze@v4

.github/workflows/label_pr_on_title.yml

@@ -22,7 +22,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
       - name: "Label PR based on title"
         uses: actions/github-script@v7
         env:

.github/workflows/on_label_added.yml

@@ -23,7 +23,7 @@ jobs:
       issues: write
       pull-requests: write
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
       # Maintenance: Persist state per PR as an artifact to avoid spam on label add
       - name: "Suggest split large Pull Request"
         uses: actions/github-script@v7

.github/workflows/on_merged_pr.yml

@@ -20,7 +20,7 @@ jobs:
     runs-on: ubuntu-latest
     if: needs.get_pr_details.outputs.prIsMerged == 'true'
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
       - name: "Label PR related issue for release"
         uses: actions/github-script@v7
         env:

.github/workflows/on_opened_pr.yml

@@ -19,7 +19,7 @@ jobs:
     needs: get_pr_details
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
       - name: "Ensure related issue is present"
         uses: actions/github-script@v7
         env:
@@ -36,7 +36,7 @@ jobs:
     needs: get_pr_details
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
       - name: "Ensure acknowledgement section is present"
         uses: actions/github-script@v7
         env:

.github/workflows/record_pr.yml

@@ -9,14 +9,14 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
       - name: "Extract PR details"
         uses: actions/github-script@v7
         with:
           script: |
             const script = require('.github/scripts/save_pr_details.js')
             await script({github, context, core})
-      - uses: actions/upload-artifact@v4
+      - uses: actions/upload-artifact@v6
         with:
           name: pr
           path: pr.txt

.github/workflows/reusable_unit_tests.yml

@@ -12,16 +12,22 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
 
-      - uses: actions/setup-python@v4
-        with: { python-version: 3.12 }
+      - uses: actions/setup-python@v6
+        with: { python-version: 3.13 }
 
       - name: Install uv
-        uses: astral-sh/setup-uv@v5
+        uses: astral-sh/setup-uv@v7
         with:
           version: 0.7.8
 
+      - name: Install dependencies
+        run: uv sync --all-extras --dev
+        working-directory: ./${{ inputs.service_directory }}
+
       - name: Run Unit tests
-        run: make test
+        run: make unit-test
         working-directory: ./${{ inputs.service_directory }}
+        env:
+          AWS_DEFAULT_REGION: us-east-1

.gitignore

@@ -1,5 +1,6 @@
 .DS_Store
 .idea/*
+.kiro/*
 **/.aws-sam/
 .vscode/*
 .vscode/settings.json

.python-version

@@ -1 +1 @@
-3.12.11
+3.13

pyproject.toml

@@ -2,5 +2,5 @@
 name = "aws-serverless-developer-experience-workshop-python"
 version = "0.1.0"
 description = "Add your description here"
-requires-python = ">=3.12"
+requires-python = ">=3.13"
 dependencies = []

unicorn_approvals/Makefile

@@ -99,6 +99,10 @@ test: ## Run tests
 	@echo "Running tests..."
 	@uv run pytest
 
+unit-test: ## Run unit tests only
+	@echo "Running unit tests..."
+	@uv run pytest tests/unit -v
+
 lint: ## Lint Python code and CloudFormation templates
 	@echo "Linting Python code..."
 	@uv run ruff check .

unicorn_approvals/infrastructure/approvals-service/template.yaml

@@ -48,7 +48,7 @@ Conditions:
 
 Globals:
   Function:
-    Runtime: python3.12
+    Runtime: python3.13
     MemorySize: 512
     Timeout: 10
     Tracing: Active

unicorn_approvals/pyproject.toml

@@ -6,24 +6,24 @@ authors = [
     {name = "Amazon Web Services"}
 ]
 readme = "README.md"
-requires-python = ">=3.12"
+requires-python = ">=3.13"
 
 dependencies = [
-    "aws-lambda-powertools[tracer]>=3.18.0",
-    "aws-xray-sdk>=2.14.0",
-    "boto3>=1.40.2",
+    "aws-lambda-powertools[tracer]>=3.24.0",
+    "aws-xray-sdk>=2.15.0",
+    "boto3>=1.42.43",
 ]
 
 [project.optional-dependencies]
 dev = [
-    "aws-lambda-powertools[all]>=3.18.0",
-    "requests>=2.32.3",
-    "moto[dynamodb,events,sqs]>=5.1.9",
-    "importlib-metadata>=8.4.0",
-    "pyyaml>=6.0.2",
+    "aws-lambda-powertools[all]>=3.24.0",
+    "requests>=2.32.5",
+    "moto[dynamodb,events,sqs]>=5.1.20",
+    "importlib-metadata>=8.7.1",
+    "pyyaml>=6.0.3",
     "arnparse>=0.0.2",
-    "pytest>=8.4.1",
-    "ruff>=0.12.7",
+    "pytest>=9.0.2",
+    "ruff>=0.15.0",
 ]
 
 [tool.setuptools]