MESH-2092 py dev (deps): Bump the patch-and-minor group across 1 directory with 10 updates

[dependabot]

Bumps the patch-and-minor group with 10 updates in the / directory:

Package	From	To
nhs-aws-helpers	0.8.45	0.8.49
boto3	1.43.58	1.43.66
coverage	7.15.3	7.15.4
boto3-stubs	1.43.36	1.43.66
botocore	1.43.64	1.43.66
mypy-boto3-backup	1.43.15	1.43.66
mypy-boto3-ecs	1.43.43	1.43.65
mypy-boto3-glue	1.43.59	1.43.65
mypy-boto3-logs	1.43.62	1.43.66
mypy-boto3-s3	1.43.50	1.43.66

Updates nhs-aws-helpers from 0.8.45 to 0.8.49

Commits

• See full diff in compare view

Updates boto3 from 1.43.58 to 1.43.66

Commits

• f53e30a Merge branch 'release-1.43.66'
• 7ac6cf8 Bumping version to 1.43.66
• c69aee1 Add changelog entries from botocore
• b74eb20 Merge branch 'release-1.43.65'
• 75469d6 Merge branch 'release-1.43.65' into develop
• d25fa39 Bumping version to 1.43.65
• 6081dfd Add changelog entries from botocore
• 06a2e1b Merge branch 'release-1.43.64'
• c7b4afa Merge branch 'release-1.43.64' into develop
• f2f83e3 Bumping version to 1.43.64
• Additional commits viewable in compare view

Updates coverage from 7.15.3 to 7.15.4

Release notes

Sourced from coverage's releases.

7.15.4

Version 7.15.4 — 2026-08-06

• Fix: in the HTML report, a source file name containing a double quote (legal on POSIX) wasn’t escaped where it’s dropped into the href of the index and prev/next links, so it could close the attribute early and inject markup. Page URLs are now escaped. Thanks, Rajath Mohare.
• Fix: the LCOV report wrote file names and other fields into its line-oriented records without neutralizing control characters. A measured file whose name contained a newline (legal on POSIX) could forge extra records, inflating the coverage seen by tools that read the report. Control characters in a field are now replaced. Thanks, Rajath Mohare.
• Wheels are now provided for Python 3.15.

➡️  PyPI page: coverage 7.15.4. :arrow_right:  To install: python3 -m pip install coverage==7.15.4

Changelog

Sourced from coverage's changelog.

Version 7.15.4 — 2026-08-06

• Fix: in the HTML report, a source file name containing a double quote (legal on POSIX) wasn't escaped where it's dropped into the href of the index and prev/next links, so it could close the attribute early and inject markup. Page URLs are now escaped. Thanks, Rajath Mohare <pull 2227_>_.

• Fix: the LCOV report wrote file names and other fields into its line-oriented records without neutralizing control characters. A measured file whose name contained a newline (legal on POSIX) could forge extra records, inflating the coverage seen by tools that read the report. Control characters in a field are now replaced. Thanks, Rajath Mohare <pull 2226_>_.

• Wheels are now provided for Python 3.15.

.. _pull 2226: coveragepy/coveragepy#2226 .. _pull 2227: coveragepy/coveragepy#2227

.. _changes_7-15-3:

Commits

• 4c0e7ff docs: sample HTML for 7.15.4
• db4cc32 docs: prep for 7.15.4
• c33085c style: start gradual move to ruff 0.16
• 53a0fd5 fix: neutralize control characters in lcov report fields (#2226)
• b64d53d build: make 3.15 wheels
• 53792ab build: show the python version for kits
• f6b03c7 chore: make upgrade_one package=cibuildwheel
• d9b660a chore: make upgrade
• b128a31 docs: oops, move this entry to the correct place
• a7a2c15 fix: escape filename urls in html report href attributes (#2227)
• Additional commits viewable in compare view

Updates boto3-stubs from 1.43.36 to 1.43.66

Commits

• See full diff in compare view

Updates botocore from 1.43.64 to 1.43.66

Commits

• 32fa450 Merge branch 'release-1.43.66'
• 606f5ca Bumping version to 1.43.66
• 01ee980 Update endpoints model
• 30c7a2f Update to latest models
• 957ec6c Merge customizations for SocialMessaging
• d41c584 Include max attempts in the amz-sdk-request header on the initial attempt (#3...
• 7798ec9 Remove paginator tests specific to AWS CLI (#3766)
• f0f5280 Merge branch 'release-1.43.65'
• 9f58af2 Merge branch 'release-1.43.65' into develop
• 949c940 Bumping version to 1.43.65
• Additional commits viewable in compare view

Updates mypy-boto3-backup from 1.43.15 to 1.43.66

Commits

• See full diff in compare view

Updates mypy-boto3-ecs from 1.43.43 to 1.43.65

Commits

• See full diff in compare view

Updates mypy-boto3-glue from 1.43.59 to 1.43.65

Commits

• See full diff in compare view

Updates mypy-boto3-logs from 1.43.62 to 1.43.66

Commits

• See full diff in compare view

Updates mypy-boto3-s3 from 1.43.50 to 1.43.66

Commits

• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions