Bump boto3 from 1.34.106 to 1.34.107

[dependabot]

Bumps boto3 from 1.34.106 to 1.34.107.

Changelog

Sourced from boto3's changelog.

1.34.107

• api-change:acm-pca: [botocore] This release adds support for waiters to fail on AccessDeniedException when having insufficient permissions
• api-change:connect: [botocore] Adding Contact Flow metrics to the GetMetricDataV2 API
• api-change:kafka: [botocore] AWS MSK support for Broker Removal.
• api-change:mwaa: [botocore] Amazon MWAA now supports Airflow web server auto scaling to automatically handle increased demand from REST APIs, Command Line Interface (CLI), or more Airflow User Interface (UI) users. Customers can specify maximum and minimum web server instances during environment creation and update workflow.
• api-change:quicksight: [botocore] This release adds DescribeKeyRegistration and UpdateKeyRegistration APIs to manage QuickSight Customer Managed Keys (CMK).
• api-change:sagemaker: [botocore] Introduced WorkerAccessConfiguration to SageMaker Workteam. This allows customers to configure resource access for workers in a workteam.
• api-change:secretsmanager: [botocore] Documentation updates for AWS Secrets Manager
• bugfix:retries: [botocore] Fix backoff calculation for truncated binary exponential backoff ([#3178](https://github.com/boto/boto3/issues/3178) <https://github.com/boto/botocore/issues/3178>__)

Commits

• b795355 Merge branch 'release-1.34.107'
• 8269cfb Bumping version to 1.34.107
• f5a56fb Add changelog entries from botocore
• 5eaa867 Merge branch 'release-1.34.106' into develop
• See full diff in compare view

Most Recent Ignore Conditions Applied to This Pull Request

Dependency Name	Ignore Conditions
boto3	[< 1.25, > 1.24.55]

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dryrunsecurity]

Hi there 👋, @DryRunSecurity here, below is a summary of our analysis and findings.

DryRun Security	Status	Findings
Configured Codepaths Analyzer	✅	0 findings
Sensitive Files Analyzer	❕	1 finding
AppSec Analyzer	✅	0 findings
Authn/Authz Analyzer	✅	0 findings
Secrets Analyzer	✅	0 findings

Note

🟢 Risk threshold not exceeded.

Change Summary (click to expand)

The following is a summary of changes in this pull request made by me, your security buddy 🤖. Note that this summary is auto-generated and not meant to be a definitive list of security issues but rather a helpful summary from a security perspective.

Summary:

The changes made in this pull request update the version of the boto3 library from 1.34.106 to 1.34.107. This library is required for the Celery Broker AWS (SQS) support in the application. From an application security perspective, the update to boto3 is a routine dependency update and does not appear to introduce any significant security concerns. Dependency updates are generally a good practice to ensure that known vulnerabilities in the dependencies are addressed. However, it's important to review the changelog or release notes of the updated dependency to ensure that there are no breaking changes or new security vulnerabilities introduced. In this case, the minor version update from 1.34.106 to 1.34.107 is unlikely to introduce any major changes, but it's still a good practice to verify the changes. Overall, this code change appears to be a routine dependency update and does not raise any immediate application security concerns.

Files Changed:

• requirements.txt: The changes in this file update the version of the boto3 library from 1.34.106 to 1.34.107. This library is required for the Celery Broker AWS (SQS) support in the application.

Powered by DryRun Security

[mtesauro]

Approved