From f4e2aa137e0d140c84ed100a9978b3fd486eb030 Mon Sep 17 00:00:00 2001
From: "dudepls[bot]" <323171535+dudepls[bot]@users.noreply.github.com>
Date: Tue, 1 Sep 2026 23:16:27 +0200
Subject: [PATCH] [deps] chore: raise minimum versions of boto3, cryptography,
 requests (#11)

* chore(deps): raise minimum versions of boto3, cryptography, requests

Bump lower bounds to pick up current stable releases:
- boto3 >=1.40.0 (S3 express + latest session handling)
- cryptography >=44.0.0, cap <46.0.0 (current stable line)
- requests >=2.32.4 (CVE-2024-47081 netrc leak fix included in lower bound)

* fix(types): narrow metadata value to str in _first_metadata_value

Newer boto3-stubs (>=1.40 floor) types Object metadata values as Any, tripping mypy no-any-return. Narrow with isinstance(value, str).

---------

Co-authored-by: dudepls[bot] <323171535+dudepls[bot]@users.noreply.github.com>
---
 pyproject.toml                             | 6 +++---
 src/deltaglider/client_operations/stats.py | 2 +-
 2 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/pyproject.toml b/pyproject.toml
index 8415329..9c8d7f7 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -49,11 +49,11 @@ classifiers = [
 ]
 
 dependencies = [
-    "boto3>=1.35.0,<2.0.0",
+    "boto3>=1.40.0,<2.0.0",
     "click>=8.1.0,<9.0.0",
-    "cryptography>=42.0.0,<45.0.0",
+    "cryptography>=44.0.0,<46.0.0",
     "python-dateutil>=2.9.0,<3.0.0",
-    "requests>=2.32.0,<3.0.0",
+    "requests>=2.32.4,<3.0.0",
 ]
 
 [project.urls]
diff --git a/src/deltaglider/client_operations/stats.py b/src/deltaglider/client_operations/stats.py
index bf4c28c..74e9de5 100644
--- a/src/deltaglider/client_operations/stats.py
+++ b/src/deltaglider/client_operations/stats.py
@@ -40,7 +40,7 @@ def _first_metadata_value(metadata: dict[str, Any], *keys: str) -> str | None:
     """Return the first non-empty metadata value matching the provided keys."""
     for key in keys:
         value = metadata.get(key)
-        if value not in (None, ""):
+        if isinstance(value, str) and value:
             return value
     return None