chore(deps): update dependency botocore to v1.43.56

[dreadnode-renovate-bot]

This PR contains the following updates:

Package	Change	Age	Confidence
botocore	==1.43.42 → ==1.43.56

---

Release Notes

boto/botocore (botocore)

v1.43.56

Compare Source

=======

• api-change:application-insights: This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.1. The SDK will prioritize its most performant protocol.
• api-change:artifact: Added the PutComplianceInquiryFeedback API, enabling customers to submit feedback on compliance inquiry responses. Customers can rate responses as helpful or not helpful and provide optional reason codes and comments.
• api-change:cognito-idp: Amazon Cognito user pools now support the AdminGetUserAuthFactors operation, which lets administrators retrieve the configured authentication factors (such as password, SMS, email, and TOTP) available for a specific user in a user pool.
• api-change:endpoint-rules: Update endpoint-rules client to latest version
• api-change:neptune-graph: Update validations for Tag Keys and KMS Key ARNs.
• api-change:odb: Documentation-only update to clarify the operation-specific valid values for the externalIdType field.
• api-change:rtbfabric: The deprecated inboundLinksCount field has been removed from the GetResponderGateway API response. Customers who previously relied on this field should use linksRequestedCount instead.

v1.43.55

Compare Source

=======

• api-change:appstream: This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.1. The SDK will prioritize its most performant protocol.
• api-change:backup-gateway: This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.0. The SDK will prioritize its most performant protocol.
• api-change:bcm-pricing-calculator: This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.0. The SDK will prioritize its most performant protocol.
• api-change:bcm-recommended-actions: This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.0. The SDK will prioritize its most performant protocol.
• api-change:bedrock-agentcore: Adds support for the Bring Your Own Storage(BYOS) feature in AgentCore Browser and Code Interpreter. Enables mounting S3Files and EFS File Systems via Access points.
• api-change:bedrock-agentcore-control: Adds support for the Bring Your Own Storage(BYOS) feature in AgentCore Browser and Code Interpreter. Enables mounting S3Files and EFS File Systems via Access points.
• api-change:datazone: Adds support for notebook sync with S3 ipynb files
• api-change:gameliftstreams: GameLift Streams now supports configuring a custom aspect ratio per stream session to accommodate different player devices. Supported aspect ratios include landscape, portrait, and square - delivering a full-screen experience without letterboxing or cropping.
• api-change:kendra-ranking: This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.0. The SDK will prioritize its most performant protocol.
• api-change:mediapackagev2: This release adds support for non-epoch-locked CMAF ingest in MediaPackageV2 channels.
• api-change:quicksight: Added new capabilities to custom permissions profiles to control access to Amazon Quick through the browser extension and Microsoft Word, Outlook, Excel, and PowerPoint add-ins.
• api-change:redshift-data: This release include long polling provids a new parameter wait-time-seconds to 5 API operations, new API ListSessions, and a new parameter execution-mode to BatchExecuteStatement
• api-change:sagemaker: Release support for c6a, m6a, m6g, m7g, m8g instance types for SageMaker HyperPod
• api-change:workspaces-instances: This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.0. The SDK will prioritize its most performant protocol.

v1.43.54

Compare Source

=======

• api-change:amp: Add CloudWatch dataset destinations for Amazon Managed Service for Prometheus collectors.
• api-change:arc-region-switch: Adds support for a client token in StartPlanExecution to make plan execution requests idempotent for safe retries.
• api-change:cloudwatch: Adds documented value constraints for CloudWatch Log Alarm scheduled query configuration fields, and makes LogGroupIdentifiers optional for log alarms.
• api-change:elbv2: This adds CLI examples for the IpAddressType field on SourceIpConfig, enabling Network Load Balancer listener rules to match traffic based on whether the source IP is IPv4 or IPv6.
• api-change:endpoint-rules: Update endpoint-rules client to latest version
• api-change:guardduty: Amazon GuardDuty now returns filter lifecycle metadata in GetFilter responses. The response includes createdAt and updatedAt timestamps and a version number that increments on each update, giving you visibility into when a filter was created and last modified.
• api-change:observabilityadmin: Enablement for ALB and Bedrock Knowledge Base logs via Observability Admin Telemetry Rule for account and organization level
• api-change:partnercentral-account: Adds Qualifications Association APIs that enable partners to associate a subsidiary account's qualifications with a primary account. Once associated, qualifications are shared across all connected accounts and scorecards are consolidated. Partners can start and track association and disassociation.
• api-change:pcs: AWS PCS Node Lifecycle Actions provides a structured way to run custom scripts at defined points in a compute node's lifecycle directly through the AWS PCS compute node group API.
• api-change:sesv2: Launching DEED and MREP in US GOV
• bugfix:TLS: Raise a configuration error when the CA bundle value (ca_bundle, AWS_CA_BUNDLE, REQUESTS_CA_BUNDLE, or the client verify parameter) resolves to an empty or whitespace-only string.

v1.43.53

Compare Source

=======

• api-change:emr-containers: Added support for the DeleteSecurityConfiguration API, which allows customers to delete security configurations in Amazon EMR on EKS. Also added authenticationConfiguration in securityConfigurationdata structure.
• api-change:entityresolution: Add support for real time matching with AWS Entity Resolution matching workflows with advanced rule sets.
• api-change:inspector2: GA date - July 21st 2026, remove Tags field from ListCodeSecurityIntegration and ListCodeSecurityScanConfiguration.
• api-change:invoicing: Added the SendProcurementPortalValidation and VerifyProcurementPortalValidation APIs. You can use the AWS SDKs to self-service activate your Procurement Portal Preferences created on the Billing Preferences page with a one-time-passcode (OTP) delivered to your portal.
• api-change:redshift: Amazon Redshift - Added support for managing Query Editor V2 IAM Identity Center applications via new CreateQev2IdcApplication, DescribeQev2IdcApplications, ModifyQev2IdcApplication, and DeleteQev2IdcApplication API operations.
• api-change:redshift-data: update the workgroupArn to include EUSC partition, tests in THF Gamma and Prod no issue
• api-change:ssm: Added a WarningMessage field to Automation along with corresponding public documentation.
• api-change:timestream-influxdb: This release adds support for custom plugins in Amazon Timestream for InfluxDB. InfluxDB 3 Core and Enterprise DB parameter groups now accept a plugin repository URL and optional AWS Secrets Manager secret ARN, so the Processing Engine loads your Python plugins from a public or private repository.

v1.43.52

Compare Source

=======

• api-change:bedrock-agentcore: Add W3C trace context headers (traceparent, tracestate, baggage) and X-Amzn-Trace-Id to InvokeHarness request for end-to-end observability propagation. Add toolResultMetadata to the streaming content block delta for MCP tool result meta delivery without oversized SSE frames.
• api-change:bedrock-agentcore-control: This release adds support for specifying a connector version on Gateway targets to pin the connector's tool schema. It also introduces web-search connector version 1.2.0, which adds agent-side domain filtering, published date range filtering, and admin-side domain allowlisting.
• api-change:endpoint-rules: Update endpoint-rules client to latest version
• api-change:inspector2: Adds Windows path support for deep inspection. Fixes tag propagation for connector CloudFormation stack operations.
• api-change:mediatailor: This change adds api support for configuring ad decision server timeouts and concurrency fields on MediaTailor playback configurations
• api-change:meteringmarketplace: For new SaaS product integrations, CustomerIdentifier is not populated in ResolveCustomer responses and is not supported in BatchMeterUsage. Use CustomerAWSAccountId and LicenseArn instead.
• api-change:organizations: Updated InvalidInputException error documentation to clarify that the service validates free-text field values against common cross-site scripting (XSS) patterns.
• api-change:quicksight: Adds support for custom permissions for Triggers, allowing administrators to control user access to Schedule, Inbound Email and Quick Event triggers.
• api-change:sesv2: Amazon SES introduces three new Pricing Plans (Essentials, Pro, Enterprise), which bundle SES features under one pricing umbrella. The new PutAccountPricingAttributes API lets the user set the account's plan, while current plan retrievalif done through the new PricingAttributes field on GetAccount.

v1.43.51

Compare Source

=======

• api-change:cognito-idp: Amazon Cognito user pools now support sending SMS via AWS End User Messaging. A new EumsSms object in SmsConfigurationType lets you deliver MFA and verification texts through AWS End User Messaging, alongside the existing Amazon SNS option.
• api-change:gameliftstreams: Amazon GameLift Streams now supports assigning an IAM role to a stream session, enabling your application to securely access resources in your AWS account, such as Amazon S3 buckets and DynamoDB tables.
• api-change:kinesisanalyticsv2: Support for Flink 2.3 in Managed Service for Apache Flink
• api-change:odb: Adds support for sourcing Autonomous Database admin and wallet passwords from customer-managed AWS Secrets Manager secrets, including password source configuration and summaries, and enabling or disabling the OCI IAM service role for Secrets Manager integration via InitializeService.
• api-change:rds: Adds the AssociatedRoles parameter to CreateDBCluster, RestoreDBClusterFromSnapshot, RestoreDBClusterToPointInTime, and RestoreDBClusterFromS3, letting customers associate IAM roles with an Aurora DB cluster at create or restore time instead of calling AddRoleToDBCluster afterward.
• enhancement:AWSCRT: Update awscrt version to 0.36.0

v1.43.50

Compare Source

=======

• api-change:chime-sdk-voice: Marked CreateProxySession, DeleteProxySession, GetProxySession, ListProxySessions, UpdateProxySession, PutVoiceConnectorProxy, DeleteVoiceConnectorProxy, and GetVoiceConnectorProxy as deprecated.
• api-change:emr: Amazon EMR updates the Session object returned by GetSession API
• api-change:endpoint-rules: Update endpoint-rules client to latest version
• api-change:omics: Adds support for returning the task UUID (universally unique identifier) in GetRunTask and ListRunTasks responses
• api-change:redshift: Amazon Redshift - Added support for rg.large and rg.12xlarge node types in CreateCluster, ModifyCluster, and ResizeCluster API operations.
• api-change:s3: Documentation update for removing the 30 day minimum restriction for transition to Standard-IA or OneZone-IA storage classes
• api-change:sagemaker: Release support for g7 instance type for SageMaker inference endpoints.
• api-change:sustainability: Adds support for retrieving estimated water allocation data.

v1.43.49

Compare Source

=======

• api-change:bedrock-agentcore-control: Fix HarnessEndpointArn pattern to match the actual service-emitted ARN format ('harness-endpoint' instead of 'endpoint'). Add additionalParams to Gemini model configuration for passing provider-specific parameters through to the model unchanged.
• api-change:elbv2: This release adds support for the IpAddressType field on SourceIpConfig, enabling Network Load Balancer listener rules to match traffic based on whether the source IP is IPv4 or IPv6.
• api-change:healthlake: AWS HealthLake now offers data transformation in Preview to convert CSV and C-CDA data to FHIR R4. Customers can maintain reusable mapping profiles, run sync or async jobs with provenance tracking and drift detection, and use an AI agent to build and edit mapping logic from natural language.
• api-change:payment-cryptography-data: Adds support for UnionPay session key derivation to the GenerateAuthRequestCryptogram, VerifyAuthRequestCryptogram, GenerateMac, and VerifyMac APIs.
• api-change:rds: Adds support for modifying EngineLifecycleSupport on DB instances and DB clusters through ModifyDBInstance and ModifyDBCluster.

v1.43.48

Compare Source

=======

• api-change:connect: This release adds SearchRules API which can be used to search for rules within an Amazon Connect instance.
• api-change:drs: Fast recovery of EC2 based drs workloads by skipping the conversion step
• api-change:emr-containers: Introduced 5 new fields across 3 APIs as part of Spark Connect server launch for EMR on EKS. The fields added are sessionIdleTimeoutInMinutes, sessionEnabled, endpointToken, authProxyUrl and encryptionKeyArn.
• api-change:endpoint-rules: Update endpoint-rules client to latest version
• api-change:lambda: AWS Lambda now returns a new DependencyError value in StateReasonCode and LastUpdateStatusReasonCode to provide more actionable information when a function reaches a failed state due to an error from an upstream dependency or service.
• api-change:mq: This release adds storage size parameter for Amazon MQ for RabbitMQ cluster deployment broker on engine version RabbitMQ 4.2. You can now set a configurable storage size within a range of sizes dependent on broker instance size.
• api-change:securityhub: AWS Security Hub now provides an AI inventory, giving central security teams a continuously updated, organization-wide view of AI assets and their security posture
• api-change:servicediscovery: Fixed Cloud Map endpoint resolution to correctly route to the dualstack endpoint when dualstack is enabled.
• api-change:ssm: Update AWS Systems Manager Automation Targets to be correct max value.

v1.43.47

Compare Source

=======

• api-change:es: Adds support for the EngineMode and UseCase parameters on Amazon Elasticsearch Service domains, enabling GENERAL or OPTIMIZED engine modes and SEARCH, VECTOR, OBSERVABILITY, or MIXED usecases when creating and updating domain configurations.
• api-change:gamelift: Amazon GameLift Servers now includes fleet expiration for managed fleets. A managed fleet expires one year after creation, transitioning to EXPIRED status, emitting a FLEET EXPIRED event, and scaling to zero instances. Expired fleets cannot host new game sessions or increase capacity.
• api-change:guardduty: GuardDuty AI Protection is now publicly available. Findings include Bedrock guardrail details, model details, observation numbers, and continuous scan details. GuardrailArn and GuardrailVersion are deprecated in favor of the guardrails list.
• api-change:lambda: Add Java 8, 11 and 17 on AL2023 (java8.al2023, java11.al2023, java17.al2023) support to AWS Lambda.
• api-change:redshift-serverless: Add support for preserving datasharing, zero-ETL and S3 event integrations on snapshot restore to serverless namespace.

v1.43.46

Compare Source

=======

• api-change:cloudwatch: CloudWatch now assigns a unique identifier to each anomaly detector. PutAnomalyDetector and DescribeAnomalyDetectors return this AnomalyDetectorId, which you can use to describe or delete a specific anomaly detector directly.
• api-change:ec2: New Amazon EC2 instances. M9g, M9gd, C9g, and C9gd on AWS Graviton5. C8in, M8in, and R8in add 600 Gbps network. C8ib, M8ib, and R8ib add 300 Gbps EBS. C8ine, M8ine, M8idn, R8idn, M8idb, and R8idb round out Intel Xeon 6. Mac-m3ultra with Apple M3 Ultra. G7 with NVIDIA RTX PRO 4500 Blackwell GPUs.
• api-change:inspector2: Support for 3 day and 7 day ECR re-scan durations
• api-change:lambda: Added TelemetryConfig support for Managed Instances Capacity Provider, enabling customers to configure system log level and custom log group for managed instance logging.
• api-change:license-manager: Added the ResetUsage field to the CreateLicenseVersion API. When set to true, the entitlement usage counts for the license are reset to 0. If it is false or not specified, entitlement usage is left unchanged.
• api-change:quicksight: Provides CreateKnowledgeBase and UpdateKnowledgeBase APIs
• api-change:sagemaker: Release support for g4d, c6g, c7g, c8g instance types for SageMaker HyperPod

v1.43.45

Compare Source

=======

• api-change:connect: Amazon Connect - Added DeleteContactData API to support PII deletion of customer endpoint, additional email recipients and email subject.
• api-change:ec2: Added support for additional override parameters in CreateFleet, including LaunchTemplateSpecificationUserData, KeyName, IamInstanceProfile, and MetadataOptions. The CreateFleet response now also includes SubnetId, AvailabilityZone, and AvailabilityZoneId for launched instances.
• api-change:guardduty: Adding "AI Analyst" enum value for detector
• api-change:ivs: adds support for AWS IVS ad configuration APIs to allow for a postRollConfiguration object on the ad configuration resource
• api-change:synthetics: CloudWatch Synthetics adds support for customer managed KMS keys for canary environment variables. Customers can now encrypt their canary's Lambda function environment variables at rest using their own AWS KMS key, providing additional control over data protection.

v1.43.44

Compare Source

=======

• api-change:endpoint-rules: Update endpoint-rules client to latest version
• api-change:signin: Adds support for OAuth 2.0 token operations in AWS Sign-In, CreateOAuth2TokenWithIAM (client credentials flow), IntrospectOAuth2TokenWithIAM (token inspection), and RevokeOAuth2TokenWithIAM (token revocation).

v1.43.43

Compare Source

=======

• api-change:appconfig: Update ExperimentRun APIs to support ConflictExceptions.
• api-change:bedrock-agentcore-control: AgentCore Gateway now supports mapping allowed scopes to separate advertised scopes on the inbound authorizer.
• api-change:ec2: Replace Root Volume now supports a VolumeId parameter. This allows the customer to pass in a pre-prepared volume as the target root volume for an RRV workflow.
• api-change:ecs: Amazon ECS now automatically detects the correct CPU architecture for Express Mode services.
• api-change:geo-places: Added AddressNamesMode, AddressNameTranslations, MobilityMode, PostalCodeMode, SecondaryAddresses, and DriveThrough features across Places V2 APIs to support address name formatting, multilingual translations, travel-aware search, multi-city postal codes, and unit-level address resolution.
• api-change:iotwireless: Default session downlink transmission parameters have been added to the existing Multicast Group APIs. Explicit transmission parameters are no longer required when starting a multicast session during the FUOTA procedure.
• api-change:resiliencehubv2: Next Generation Resilience Hub now supports filtering and sorting failure mode assessments, resource type filtering in ListResources, cross-region and cross-account topology edges, data recovery achievability status, and more granular dependency discovery progress tracking.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate.