build(deps-dev): bump aws-lambda-powertools from 3.27.0 to 3.28.0

[dependabot]

Bumps aws-lambda-powertools from 3.27.0 to 3.28.0.

Release notes

Sourced from aws-lambda-powertools's releases.

v3.28.0

Summary

This release brings dependency injection, an enriched Request object, OpenAPI improvements, and internal refactoring to the Event Handler.

• Dependency injection: type-safe Depends() with nested resolution, caching, and test overrides
• Enriched Request: resolved_event and context properties bridge middleware and dependencies
• OpenAPI status_code: set default response status code on route decorators
• Query string fix: parameters no longer dropped when both single and multi-value query strings are present

A huge thanks to @​JustinBerger, @​Iamrodos, and @​ran-isenberg for their contributions!

Dependency injection with Depends()

Docs

You can now use Depends() to declare typed dependencies directly in route handler signatures: no decorators, no global state. Dependencies are resolved automatically, cached per invocation, and support nested dependency trees.

import os
from typing import Any
import boto3
from typing_extensions import Annotated
from aws_lambda_powertools.event_handler import APIGatewayHttpResolver
from aws_lambda_powertools.event_handler.depends import Depends
from aws_lambda_powertools.utilities.typing import LambdaContext
app = APIGatewayHttpResolver()
def get_dynamodb_table():
dynamodb = boto3.resource("dynamodb")
return dynamodb.Table(os.environ["TABLE_NAME"])
@​app.get("/orders")
def list_orders(table: Annotated[Any, Depends(get_dynamodb_table)]):
return table.scan()["Items"]

For testing, swap any dependency without monkeypatching:

app.dependency_overrides[get_dynamodb_table] = lambda: mock_table

Enriched Request object

... (truncated)

Changelog

Sourced from aws-lambda-powertools's changelog.

[v3.28.0] - 2026-04-14

Bug Fixes

• data_class: merge querystring parameters in ALB/APIGW classes (#8154)

Maintenance

• version bump

Commits

• 9f2c57d chore: version bump
• 7fc9efb fix(data_class): merge querystring parameters in ALB/APIGW classes (#8154)
• cd8829b feat(event_handler): enrich request object (#8153)
• 6bcb8a3 chore: bump dependabot dependencies. (#8152)
• f06db0a chore(deps-dev): bump aws-cdk from 2.1117.0 to 2.1118.0 in the aws-cdk group ...
• 8673ede chore(deps): bump cryptography from 46.0.6 to 46.0.7 (#8132)
• 45d25e9 feat(event_handler): adding status_code OpenAPI field (#8130)
• d488548 docs: adding new Lambda features (#7917)
• 4cb9997 feat(event_handler): add Dependency injection with Depends() (#8128)
• f1d07ab fix(event_handler): read swagger files with UTF-8 encoding (#8131)
• Additional commits viewable in compare view

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud