Scheduled weekly dependency update for week 29

[pyup-bot]

Update amqp from 2.5.2 to 5.3.1.

The bot wasn't able to find a changelog for this release. Got an idea?

Links

• PyPI: https://pypi.org/project/amqp
• Repo: http://github.com/celery/py-amqp

Update asgiref from 3.2.5 to 3.12.1.

Changelog

3.12.1

-------------------

* Restored the previous SyncToAsync.__call__ internal code shape, which was
relied on by some APM services. (572)

Note, this change was available whilst maintaining the underlying fix (from
564). It does not constitute an API stability promise. Ideally APMs are
*not* monkey patching internal APIs, and future changes will be made here if
needed.

3.12.0

-------------------

* ``AsyncToSync`` no longer captures the running event loop on
instantiation. (562)

This resolves a series of deadlocks that users experienced after asgiref 3.9.0,
particularly with pytest-asyncio. pytest-asyncio stops the event loop between
tests, and long-running unawaited futures could find themselves trying to
schedule work onto a stopped loop, and so would never complete. Ideally, code
should be structured to await long-running futures before returning, but this
change should help users experiencing issues here.

The loop is now resolved when the callable is invoked rather than when it is
created. If ``async_to_sync`` is called from within ``sync_to_async``, the
parent event loop is still used, as before.

The possibility of deadlock therefore remains in some nested patterns. For
example, an async function may call a long-running ``sync_to_async`` function
that itself uses ``async_to_sync``; if the outer function returns before the
sync future completes, the parent event loop may already be stopped, and the
nested calls cannot be driven to completion.

This is not a bug in asgiref — the same patterns deadlock in plain asyncio. As
above, restructure your code to await the ``sync_to_async`` future before
exiting the driving coroutine.

* Fixed an event loop deadlock when exiting ``ThreadSensitiveContext``
while its executor thread was still blocked waiting on the event loop.
(535)

* Dropped support for EOL Python 3.9.

* Fixed ``StatelessServer.run()`` failing on Python 3.14, where
``asyncio.get_event_loop()`` no longer creates an event loop if none
exists. It now uses ``asyncio.run()``. (559)

* Fixed ``Local`` leaking data between unrelated sync threads when
``sys.flags.thread_inherit_context`` is enabled (Python 3.14+), so a newly
started thread inherits a copy of the spawning thread's context. This flag is
on by default on free-threaded builds and opt-in on the regular GIL build.
``Local`` storage is now tagged with its owning thread and re-homed only when
asgiref intentionally moves work across threads (in ``async_to_sync`` /
``sync_to_async``), restoring the documented thread-local behaviour in sync
threads.

* asgiref is now tested against the free-threaded builds of Python 3.13 and
3.14 in CI.

* The ``tests`` extra no longer installs ``mypy``; a new ``mypy`` extra is
available for type-checking the codebase.

3.11.1

-------------------

* SECURITY FIX CVE-2025-14550: There was a potential DoS vector for users of
the ``asgiref.wsgi.WsgiToAsgi`` adapter. Malicious requests, including an unreasonably
large number of values for the same header, could lead to resource exhaustion
when building the WSGI environment.

To mitigate this, the algorithm is changed to be more efficient, and
``WsgiToAsgi`` gains a new optional ``duplicate_header_limit`` parameter,
which defaults to 100. This specifies the number of times a single header may
be repeated before the request is rejected as malformed.

You may override ``duplicate_header_limit`` when configuring your application::

   application = WsgiToAsgi(wsgi_app, duplicate_header_limit=200)

Set ``duplicate_header_limit=None`` if you wish to disable this check.

* Fixed a regression in 3.11.0 in ``sync_to_async`` when wrapping a callable
with an attribute named ``context``. (537)

3.11.0

-------------------

* ``sync_to_async`` gains a ``context`` parameter, similar to those for
``asyncio.create_task``, ``TaskGroup`` &co, that can be used on Python 3.11+ to
control the context used by the underlying task.

The parent context is already propagated by default but the additional
control is useful if multiple ``sync_to_async`` calls need to share the same
context, e.g. when used with ``asyncio.gather()``.

3.10.0

-------------------

* Added AsyncSingleThreadContext context manager to ensure multiple AsyncToSync
invocations use the same thread. (511)

3.9.2

------------------

* Adds support for Python 3.14.

* Fixes wsgi.errors file descriptor in WsgiToAsgi adapter.

3.9.1

------------------

* Fixed deletion of Local values affecting other contexts. (523)

* Skip CPython specific garbage collection test on pypy. (521)

3.9.0

------------------

* Adds support for Python 3.13.

* Drops support for (end-of-life) Python 3.8.

* Fixes an error with conflicting kwargs between AsyncToSync and the wrapped
function. (471)

* Fixes Local isolation between asyncio Tasks. (478)

* Fixes a reference cycle in Local (508)

* Fixes a deadlock in CurrentThreadExecutor with nested async_to_sync →
sync_to_async → async_to_sync → create_task calls. (494)

* The ApplicationCommunicator testing utility will now return the task result
if it's already completed on send_input and receive_nothing. You may need to
catch (e.g.) the asyncio.exceptions.CancelledError if sending messages to
already finished consumers in your tests. (505)

3.8.1

------------------

* Fixes a regression in 3.8.0 affecting nested task cancellation inside
sync_to_async.

3.8.0

------------------

* Adds support for Python 3.12.

* Drops support for (end-of-life) Python 3.7.

* Fixes task cancellation propagation to subtasks when using synchronous Django
middleware.

* Allows nesting ``sync_to_async`` via ``asyncio.wait_for``.

* Corrects WSGI adapter handling of root path.

* Handles case where `"client"` is ``None`` in WsgiToAsgi adapter.

3.7.2

------------------

* The type annotations for SyncToAsync and AsyncToSync have been changed to
more accurately reflect the kind of callables they return.

3.7.1

------------------

* On Python 3.10 and below, the version of the "typing_extensions" package
is now constrained to be at least version 4 (as we depend on functionality
in that version and above)

3.7.0

------------------

* Contextvars are now required for the implementation of `sync` as Python 3.6
is now no longer a supported version.

* sync_to_async and async_to_sync now pass-through

* Debug and Lifespan State extensions have resulted in a typing change for some
request and response types. This change should be backwards-compatible.

* ``asgiref`` frames will now be hidden in Django tracebacks by default.

* Raw performance and garbage collection improvements in Local, SyncToAsync,
and AsyncToSync.

3.6.0

------------------

* Two new functions are added to the ``asgiref.sync`` module: ``iscoroutinefunction()``
and ``markcoroutinefunction()``.

Python 3.12 deprecates ``asyncio.iscoroutinefunction()`` as an alias for
``inspect.iscoroutinefunction()``, whilst also removing the ``_is_coroutine`` marker.
The latter is replaced with the ``inspect.markcoroutinefunction`` decorator.

The new ``asgiref.sync`` functions are compatibility shims for these
functions that can be used until Python 3.12 is the minimum supported
version.

**Note** that these functions are considered **beta**, and as such, whilst
not likely, are subject to change in a point release, until the final release
of Python 3.12. They are included in ``asgiref`` now so that they can be
adopted by Django 4.2, in preparation for support of Python 3.12.

* The ``loop`` argument to ``asgiref.timeout.timeout`` is deprecated. As per other
``asyncio`` based APIs, the running event loop is used by default. Note that
``asyncio`` provides timeout utilities from Python 3.11, and these should be
preferred where available.

* Support for the ``ASGI_THREADS`` environment variable, used by
``SyncToAsync``, is removed. In general, a running event-loop is not
available to `asgiref` at import time, and so the default thread pool
executor cannot be configured. Protocol servers, or applications, should set
the default executor as required when configuring the event loop at
application startup.

3.5.2

------------------

* Allow async-callables class instances to be passed to AsyncToSync
without warning

* Prevent giving async-callable class instances to SyncToAsync

3.5.1

------------------

* sync_to_async in thread-sensitive mode now works corectly when the
outermost thread is synchronous (214)

3.5.0

------------------

* Python 3.6 is no longer supported, and asyncio calls have been changed to
use only the modern versions of the APIs as a result

* Several causes of RuntimeErrors in cases where an event loop was assigned
to a thread but not running

* Speed improvements in the Local class

3.4.1

------------------

* Fixed an issue with the deadlock detection where it had false positives
during exception handling.

3.4.0

------------------

* Calling sync_to_async directly from inside itself (which causes a deadlock
when in the default, thread-sensitive mode) now has deadlock detection.

* asyncio usage has been updated to use the new versions of get_event_loop,
ensure_future, wait and gather, avoiding deprecation warnings in Python 3.10.
Python 3.6 installs continue to use the old versions; this is only for 3.7+

* sync_to_async and async_to_sync now have improved type hints that pass
through the underlying function type correctly.

* All Websocket* types are now spelled WebSocket, to match our specs and the
official spelling. The old names will work until release 3.5.0, but will
raise deprecation warnings.

* The typing for WebSocketScope and HTTPScope's `extensions` key has been
fixed.

3.3.4

------------------

* The async_to_sync type error is now a warning due the high false negative
rate when trying to detect coroutine-returning callables in Python.

3.3.3

------------------

* The sync conversion functions now correctly detect functools.partial and other
wrappers around async functions on earlier Python releases.

3.3.2

------------------

* SyncToAsync now takes an optional "executor" argument if you want to supply
your own executor rather than using the built-in one.

* async_to_sync and sync_to_async now check their arguments are functions of
the correct type.

* Raising CancelledError inside a SyncToAsync function no longer stops a future
call from functioning.

* ThreadSensitive now provides context hooks/override options so it can be
made to be sensitive in a unit smaller than threads (e.g. per request)

* Drop Python 3.5 support.

* Add type annotations.

3.3.1

------------------

* Updated StatelessServer to use ASGI v3 single-callable applications.

3.3.0

------------------

* sync_to_async now defaults to thread-sensitive mode being on
* async_to_sync now works inside of forked processes
* WsgiToAsgi now correctly clamps its response body when Content-Length is set

3.2.10

-------------------

* Fixed bugs due to bad WeakRef handling introduced in 3.2.8

3.2.9

------------------

* Fixed regression with exception handling in 3.2.8 related to the contextvars fix.

3.2.8

------------------

* Fixed small memory leak in local.Local
* contextvars are now persisted through AsyncToSync

3.2.7

------------------

* Bug fixed in local.Local where deleted Locals would occasionally inherit
their storage into new Locals due to memory reuse.

3.2.6

------------------

* local.Local now works in all threading situations, no longer requires
periodic garbage collection, and works with libraries that monkeypatch
threading (like gevent)

Links

• PyPI: https://pypi.org/project/asgiref
• Changelog: https://data.safetycli.com/changelogs/asgiref/
• Repo: https://github.com/django/asgiref/

Update billiard from 3.6.3.0 to 4.2.4.

Changelog

4.2.4

--------------------
- Eliminate usage of 'return' in 'finally' blocks (438)
- Prepare for release: v4.2.4 (439)

4.2.3

--------------------
- Ensure that task results are delivered during pool shutdown (435)
- Prepare for release: v4.2.3 (436)

4.2.0

--------------------
- Update process.py to close during join only if process has completed.
- Adjust the __repr__ in ApplyResult.
- Remove python 3.7 from CI.
- Added Python 3.12 support.
- Fixed (co_positions): resolve issue caused by absence co_positions (395).
- Fixed: Replaced mktemp usage for Python 3 from python 2.
- Changed nose test to pytest (397) in Integration test.
- Changed nose dependency for unit test (383).

4.1.0

--------------------
- Fixed a python 2 to 3 compat issue which was missed earlier (374).
- Adde Python 3.11 primary support

4.0.2

--------------------
- ExceptionWithTraceback should be an exception.

4.0.1

--------------------
- Add support for Python 3.11 _posixsubprocess.fork_exec() arguments.
- Keep exception traceback somehow (368).

4.0.0

--------------------
- Support Sphinx 4.x.
- Remove dependency to case.
- Drop support of Python < 3.7.
- Update to psutil 5.9.0.
- Add python_requires to enforce Python version.
- Replace deprecated threading Event.isSet with Event.is_set.
- Prevent segmentation fault in get_pdeathsig while using ctypes (361).
- Migrated CI to Github actions.
- Python 3.10 support added.

3.6.4.0

--------------------
- Issue 309: Add Python 3.9 support to spawnv_passfds()
- fix 314

Links

• PyPI: https://pypi.org/project/billiard
• Changelog: https://data.safetycli.com/changelogs/billiard/
• Repo: https://github.com/celery/billiard

Update boto3 from 1.12.26 to 1.43.51.

Changelog

1.43.51

=======

* api-change:``cognito-idp``: [``botocore``] Amazon Cognito user pools now support sending SMS via AWS End User Messaging. A new EumsSms object in SmsConfigurationType lets you deliver MFA and verification texts through AWS End User Messaging, alongside the existing Amazon SNS option.
* api-change:``gameliftstreams``: [``botocore``] Amazon GameLift Streams now supports assigning an IAM role to a stream session, enabling your application to securely access resources in your AWS account, such as Amazon S3 buckets and DynamoDB tables.
* api-change:``kinesisanalyticsv2``: [``botocore``] Support for Flink 2.3 in Managed Service for Apache Flink
* api-change:``odb``: [``botocore``] Adds support for sourcing Autonomous Database admin and wallet passwords from customer-managed AWS Secrets Manager secrets, including password source configuration and summaries, and enabling or disabling the OCI IAM service role for Secrets Manager integration via InitializeService.
* api-change:``rds``: [``botocore``] Adds the AssociatedRoles parameter to CreateDBCluster, RestoreDBClusterFromSnapshot, RestoreDBClusterToPointInTime, and RestoreDBClusterFromS3, letting customers associate IAM roles with an Aurora DB cluster at create or restore time instead of calling AddRoleToDBCluster afterward.
* enhancement:AWSCRT: [``botocore``] Update awscrt version to 0.36.0

1.43.50

=======

* api-change:``chime-sdk-voice``: [``botocore``] Marked CreateProxySession, DeleteProxySession, GetProxySession, ListProxySessions, UpdateProxySession, PutVoiceConnectorProxy, DeleteVoiceConnectorProxy, and GetVoiceConnectorProxy as deprecated.
* api-change:``emr``: [``botocore``] Amazon EMR updates the Session object returned by GetSession API
* api-change:``endpoint-rules``: [``botocore``] Update endpoint-rules client to latest version
* api-change:``omics``: [``botocore``] Adds support for returning the task UUID (universally unique identifier) in GetRunTask and ListRunTasks responses
* api-change:``redshift``: [``botocore``] Amazon Redshift - Added support for rg.large and rg.12xlarge node types in CreateCluster, ModifyCluster, and ResizeCluster API operations.
* api-change:``s3``: [``botocore``] Documentation update for removing the 30 day minimum restriction for transition to Standard-IA or OneZone-IA storage classes
* api-change:``sagemaker``: [``botocore``] Release support for g7 instance type for SageMaker inference endpoints.
* api-change:``sustainability``: [``botocore``] Adds support for retrieving estimated water allocation data.

1.43.49

=======

* api-change:``bedrock-agentcore-control``: [``botocore``] Fix HarnessEndpointArn pattern to match the actual service-emitted ARN format ('harness-endpoint' instead of 'endpoint'). Add additionalParams to Gemini model configuration for passing provider-specific parameters through to the model unchanged.
* api-change:``elbv2``: [``botocore``] This release adds support for the IpAddressType field on SourceIpConfig, enabling Network Load Balancer listener rules to match traffic based on whether the source IP is IPv4 or IPv6.
* api-change:``healthlake``: [``botocore``] AWS HealthLake now offers data transformation in Preview to convert CSV and C-CDA data to FHIR R4. Customers can maintain reusable mapping profiles, run sync or async jobs with provenance tracking and drift detection, and use an AI agent to build and edit mapping logic from natural language.
* api-change:``payment-cryptography-data``: [``botocore``] Adds support for UnionPay session key derivation to the GenerateAuthRequestCryptogram, VerifyAuthRequestCryptogram, GenerateMac, and VerifyMac APIs.
* api-change:``rds``: [``botocore``] Adds support for modifying EngineLifecycleSupport on DB instances and DB clusters through ModifyDBInstance and ModifyDBCluster.

1.43.48

=======

* api-change:``connect``: [``botocore``] This release adds SearchRules API which can be used to search for rules within an Amazon Connect instance.
* api-change:``drs``: [``botocore``] Fast recovery of EC2 based drs workloads by skipping the conversion step
* api-change:``emr-containers``: [``botocore``] Introduced 5 new fields across 3 APIs as part of Spark Connect server launch for EMR on EKS. The fields added are sessionIdleTimeoutInMinutes, sessionEnabled, endpointToken, authProxyUrl and encryptionKeyArn.
* api-change:``endpoint-rules``: [``botocore``] Update endpoint-rules client to latest version
* api-change:``lambda``: [``botocore``] AWS Lambda now returns a new DependencyError value in StateReasonCode and LastUpdateStatusReasonCode to provide more actionable information when a function reaches a failed state due to an error from an upstream dependency or service.
* api-change:``mq``: [``botocore``] This release adds storage size parameter for Amazon MQ for RabbitMQ cluster deployment broker on engine version RabbitMQ 4.2. You can now set a configurable storage size within a range of sizes dependent on broker instance size.
* api-change:``securityhub``: [``botocore``] AWS Security Hub now provides an AI inventory, giving central security teams a continuously updated, organization-wide view of AI assets and their security posture
* api-change:``servicediscovery``: [``botocore``] Fixed Cloud Map endpoint resolution to correctly route to the dualstack endpoint when dualstack is enabled.
* api-change:``ssm``: [``botocore``] Update AWS Systems Manager Automation Targets to be correct max value.

1.43.47

=======

* api-change:``es``: [``botocore``] Adds support for the EngineMode and UseCase parameters on Amazon Elasticsearch Service domains, enabling GENERAL or OPTIMIZED engine modes and SEARCH, VECTOR, OBSERVABILITY, or MIXED usecases when creating and updating domain configurations.
* api-change:``gamelift``: [``botocore``] Amazon GameLift Servers now includes fleet expiration for managed fleets. A managed fleet expires one year after creation, transitioning to EXPIRED status, emitting a FLEET EXPIRED event, and scaling to zero instances. Expired fleets cannot host new game sessions or increase capacity.
* api-change:``guardduty``: [``botocore``] GuardDuty AI Protection is now publicly available. Findings include Bedrock guardrail details, model details, observation numbers, and continuous scan details. GuardrailArn and GuardrailVersion are deprecated in favor of the guardrails list.
* api-change:``lambda``: [``botocore``] Add Java 8, 11 and 17 on AL2023 (java8.al2023, java11.al2023, java17.al2023) support to AWS Lambda.
* api-change:``redshift-serverless``: [``botocore``] Add support for preserving datasharing, zero-ETL and S3 event integrations on snapshot restore to serverless namespace.

1.43.46

=======

* api-change:``cloudwatch``: [``botocore``] CloudWatch now assigns a unique identifier to each anomaly detector. PutAnomalyDetector and DescribeAnomalyDetectors return this AnomalyDetectorId, which you can use to describe or delete a specific anomaly detector directly.
* api-change:``ec2``: [``botocore``] New Amazon EC2 instances. M9g, M9gd, C9g, and C9gd on AWS Graviton5. C8in, M8in, and R8in add 600 Gbps network. C8ib, M8ib, and R8ib add 300 Gbps EBS. C8ine, M8ine, M8idn, R8idn, M8idb, and R8idb round out Intel Xeon 6. Mac-m3ultra with Apple M3 Ultra. G7 with NVIDIA RTX PRO 4500 Blackwell GPUs.
* api-change:``inspector2``: [``botocore``] Support for 3 day and 7 day ECR re-scan durations
* api-change:``lambda``: [``botocore``] Added TelemetryConfig support for Managed Instances Capacity Provider, enabling customers to configure system log level and custom log group for managed instance logging.
* api-change:``license-manager``: [``botocore``] Added the ResetUsage field to the CreateLicenseVersion API. When set to true, the entitlement usage counts for the license are reset to 0. If it is false or not specified, entitlement usage is left unchanged.
* api-change:``quicksight``: [``botocore``] Provides CreateKnowledgeBase and UpdateKnowledgeBase APIs
* api-change:``sagemaker``: [``botocore``] Release support for g4d, c6g, c7g, c8g instance types for SageMaker HyperPod

1.43.45

=======

* api-change:``connect``: [``botocore``] Amazon Connect - Added DeleteContactData API to support PII deletion of customer endpoint, additional email recipients and email subject.
* api-change:``ec2``: [``botocore``] Added support for additional override parameters in CreateFleet, including LaunchTemplateSpecificationUserData, KeyName, IamInstanceProfile, and MetadataOptions. The CreateFleet response now also includes SubnetId, AvailabilityZone, and AvailabilityZoneId for launched instances.
* api-change:``guardduty``: [``botocore``] Adding "AI Analyst" enum value for detector
* api-change:``ivs``: [``botocore``] adds support for AWS IVS ad configuration APIs to allow for a postRollConfiguration object on the ad configuration resource
* api-change:``synthetics``: [``botocore``] CloudWatch Synthetics adds support for customer managed KMS keys for canary environment variables. Customers can now encrypt their canary's Lambda function environment variables at rest using their own AWS KMS key, providing additional control over data protection.

1.43.44

=======

* api-change:``endpoint-rules``: [``botocore``] Update endpoint-rules client to latest version
* api-change:``signin``: [``botocore``] Adds support for OAuth 2.0 token operations in AWS Sign-In, CreateOAuth2TokenWithIAM (client credentials flow), IntrospectOAuth2TokenWithIAM (token inspection), and RevokeOAuth2TokenWithIAM (token revocation).

1.43.43

=======

* api-change:``appconfig``: [``botocore``] Update ExperimentRun APIs to support ConflictExceptions.
* api-change:``bedrock-agentcore-control``: [``botocore``] AgentCore Gateway now supports mapping allowed scopes to separate advertised scopes on the inbound authorizer.
* api-change:``ec2``: [``botocore``] Replace Root Volume now supports a VolumeId parameter. This allows the customer to pass in a pre-prepared volume as the target root volume for an RRV workflow.
* api-change:``ecs``: [``botocore``] Amazon ECS now automatically detects the correct CPU architecture for Express Mode services.
* api-change:``geo-places``: [``botocore``] Added AddressNamesMode, AddressNameTranslations, MobilityMode, PostalCodeMode, SecondaryAddresses, and DriveThrough features across Places V2 APIs to support address name formatting,  multilingual translations, travel-aware search, multi-city postal codes, and unit-level address resolution.
* api-change:``iotwireless``: [``botocore``] Default session downlink transmission parameters have been added to the existing Multicast Group APIs. Explicit transmission parameters are no longer required when starting a multicast session during the FUOTA procedure.
* api-change:``resiliencehubv2``: [``botocore``] Next Generation Resilience Hub now supports filtering and sorting failure mode assessments, resource type filtering in ListResources, cross-region and cross-account topology edges, data recovery achievability status, and more granular dependency discovery progress tracking.

1.43.42

=======

* api-change:``config``: [``botocore``] Added support for connecting AWS Config to third-party cloud service providers. New APIs include PutConnector, GetConnector, DeleteConnector, and ListConnectors for managing connectors, and PutThirdPartyServiceLinkedConfigurationRecorder for creating third-party service-linked recorders.
* api-change:``connect``: [``botocore``] Adds support for CreateAuthCode and DeleteSession APIs.
* api-change:``ec2``: [``botocore``] This launch surfaces the public SSM parameter associated with public AMIs in the AMI metadata.
* api-change:``endpoint-rules``: [``botocore``] Update endpoint-rules client to latest version
* api-change:``inspector2``: [``botocore``] This release extends vulnerability management to Azure VM, container registries and function apps. Adds support for per-member-account scan configuration settings.
* api-change:``lambda``: [``botocore``] AWS Lambda Durable Functions now supports customer managed KMS keys. This allows customers to configure a KMS key in Durable Config to have all their durable execution data encrypted.
* api-change:``marketplace-catalog``: [``botocore``] This release enhances the ListEntities API to support ResellerRole filter for ResaleAuthorization entity.
* api-change:``meteringmarketplace``: [``botocore``] The usage reporting window for the BatchMeterUsage API has been extended from 6 hours to 24 hours. Sellers can now submit usage records for up to 24 hours after a metered event occurs. The existing 6-hour grace period at the end of a billing cycle still applies.
* api-change:``partnercentral-revenue-measurement``: [``botocore``] Add support for AWS Partner Central Revenue Measurement API for creating, managing, and tracking revenue attributions and marketplace revenue share allocations.
* api-change:``route53globalresolver``: [``botocore``] Adds ListSharedDNSViews operation to list all DNS Views shared with caller using AWS Resource Access Manager. Also updates ListHostedZoneAssociations operation so that resource ARN param is optional, allowing caller to list all HostedZoneAssociations in account.
* api-change:``securityhub``: [``botocore``] release SecurityHub MultiCloud integration with Azure
* api-change:``ssm``: [``botocore``] Adding SSM Cloud Connector to support Azure Virtual Machines onboarding to AWS Systems Manager

1.43.41

=======

* api-change:``billing``: [``botocore``] Adds support for managing AWS account credits and billing preferences, including retrieving credit details, viewing per-month credit allocation history, redeeming promotional codes, and configuring credit sharing and billing preferences.
* api-change:``logs``: [``botocore``] Added PutStorageTierPolicy and GetStorageTierPolicy APIs to Amazon CloudWatch Logs. Customers can now configure account-level Intelligent Tiering to automatically optimize log storage costs by moving infrequently accessed data to lower-cost storage tiers.
* api-change:``mailmanager``: [``botocore``] This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.0. The SDK will prioritize its most performant protocol.
* api-change:``opensearch``: [``botocore``] This release introduces Saved Object Migration APIs, enabling users to migrate dashboards, visualizations, index patterns, and other saved objects from a data source into an Amazon OpenSearch Service application workspace with configurable export filters and conflict resolution strategies.

1.43.40

=======

* api-change:``cognito-idp``: [``botocore``] Add support for provisioned limit management, enabling customers to view and update their provisioned API rate limits for Amazon Cognito User Pools programmatically through the new GetProvisionedLimit and UpdateProvisionedLimit APIs.
* api-change:``config``: [``botocore``] AWS Config now supports tag-on-create for organization-managed Config rules and conformance packs through the PutOrganizationConfigRule and PutOrganizationConformancePack APIs.
* api-change:``customer-profiles``: [``botocore``] Amazon Connect Customer Profiles adds support for diversityConfig to recommenderConfig which can be used for diversifying the recommendations. This release also includes model versioning support which helps customer to rollback trained models.
* api-change:``mediatailor``: [``botocore``] Added dual-stack (IPv4 and IPv6) endpoint fields to SSAI and Channel Assembly API responses.
* api-change:``outposts``: [``botocore``] Tighten Outpost site ContactPhoneNumber regex to perform phone number validation.

1.43.39

=======

* api-change:``artifact``: [``botocore``] Add support for Assurance Assistant APIs for managing compliance inquiries along with tagging features.
* api-change:``cloud9``: [``botocore``] Since Amazon Linux 2 (AL2) will reach its end-of-life (EOL) and stop receiving security updates on June 30, 2026, Cloud9 will remove AL2 from AMI options in public API create-environment-ec2.
* api-change:``connect``: [``botocore``] Adds a new Amazon Connect Service API, SendOutboundWebNotification, that delivers web notifications to end-customer chat widget sessions. Callable only by the Amazon Connect Outbound Campaigns service principal.
* api-change:``ec2``: [``botocore``] Use declarative policies to enable VPC Encryption Controls across your organization or select accounts. Added AMD SEV-SNP support for EC2 Dedicated Hosts. Managed resource visibility settings control whether AWS-provisioned resources in your account appear in console views and API list operations.
* api-change:``gameliftstreams``: [``botocore``] Added CreateStreamSessionAdminShell API operation to enable customers to establish secure terminal connections to the live runtime environment of streaming sessions for troubleshooting purposes.
* api-change:``mediaconvert``: [``botocore``] Adds support for integer-second duration normalization and the option to disable explicit weighted prediction.
* api-change:``meteringmarketplace``: [``botocore``] The usage reporting window for the BatchMeterUsage API has been extended from 6 hours to 24 hours. Sellers can now submit usage records for up to 24 hours after a metered event occurs.
* api-change:``opensearch``: [``botocore``] To create a Mustang domain via the AWS CLI, you must pass EngineMode OPTIMIZED (along with UseCase OBSERVABILITY or MIXED)  without it, the domain defaults to a regular (GENERAL) domain. Also this release includes Insights Feedback API which user can use to provide feedback for Insight API.
* api-change:``quicksight``: [``botocore``] Adding support for FileSource PhysicalTables.  This adds support for datasets with file sources.

1.43.38

=======

* api-change:``acm``: [``botocore``] AWS Certificate Manager now supports the Automatic Certificate Management Environment (ACME) protocol to issue public certificates. ACME is an industry-standard protocol for automating certificate lifecycle on customer-managed infrastructure such as on-premises servers and Kubernetes clusters.
* api-change:``autoscaling``: [``botocore``] This release adds support for a new reservations-then-balanced capacity distribution strategy, which first attempts to launch instances into your Capacity Reservations and then balances remaining capacity across healthy Availability Zones.
* api-change:``cleanrooms``: [``botocore``] Adds support for intermediate tables in AWS Clean Rooms collaborations.
* api-change:clients: [``botocore``] The following clients have been removed following the deprecation of the services - iotevents, iotevents-data, panorama, simspaceweaver
* api-change:``cloudformation``: [``botocore``] AWS CloudFormation adds a DeploymentConfig parameter to enable Express mode, which completes stack operations as soon as resource configuration is applied. Also adds a DisableValidation parameter to skip pre-deployment validation, which now runs automatically on CreateStack and UpdateStak.
* api-change:``cloudwatch``: [``botocore``] Customers can configure alarms with wall-clock-aligned evaluation windows instead of sliding windows, with optional timezone support for daily or weekly periods
* api-change:``codebuild``: [``botocore``] Adds support for host kernel selection for on-demand builds.
* api-change:``connect``: [``botocore``] Amazon Connect - Added CreateAttachedFile and StartContactConversationalAnalyticsJob APIs to import call recordings and run conversational analytics.
* api-change:``datazone``: [``botocore``] Amazon DataZone now supports SNOWFLAKE as a connection type in the CreateConnection API, enabling metadata and lineage retrieval from Snowflake databases. Specify snowflakeProperties with connection details, a Secrets Manager secret, an Athena spill bucket, and an identity mapping for Snowflake.
* api-change:``ec2``: [``botocore``] Adds ModifyVpcEndpointPayerResponsibility API, which enables VPC endpoint service owners to modify the billing account for VPC endpoint usage charges at the individual endpoint level
* api-change:``ecs``: [``botocore``] Updated threshold configuration documentation.
* api-change:``eks``: [``botocore``] Adds Kubernetes version rollback support, including the CancelUpdate operation to cancel an in-progress VersionRollback update, the RollbackConfig structure with a timeoutMinutes field, and the Cancellation structure surfaced via the new cancellation field on the Update object.
* api-change:``endpoint-rules``: [``botocore``] Update endpoint-rules client to latest version
* api-change:``network-firewall``: [``botocore``] AWS Network Firewall now supports container associations for monitoring ECS and EKS workloads. You can create container associations to dynamically track the IP addresses of running containers in your Amazon ECS and Amazon EKS clusters.
* api-change:``observabilityadmin``: [``botocore``] Organization and account level telemetry rule via Observability Admin and CloudWatch pipelines for metrics
* api-change:``partnercentral-selling``: [``botocore``] This release adds AwsMarketplaceSolutions and AwsMarketplaceProducts entity types to the Associate and Disassociate APIs, returns them in GetOpportunity, and adds AwsMarketplaceSolutionArn to ListSolutions ,letting partners link Marketplace listings directly to opportunities.
* api-change:``sso-admin``: [``botocore``] AWS IAM Identity Center now returns PrimaryRegion and Regions in the ListInstances response, providing information about replicated instances.
* api-change:``supportauthz``: [``botocore``] New SDK release for SupportAuthZ.

1.43.37

=======

* api-change:``appconfig``: [``botocore``] AWS AppConfig introduces Experimentation tools - enhanced capabilities within AWS AppConfig that enable you to run AB tests, multivariate tests, and gradual feature rollouts across your application stack.
* api-change:``cloudwatch``: [``botocore``] This release adds the API (PutLogAlarm) to manage a new CloudWatch resource, Log Based Alarms. Log Based Alarms allows customers to alarm directly on CloudWatch Logs query results.
* api-change:``connectcampaignsv2``: [``botocore``] Adding new attributes to PutProfileOutboundRequest API that will create an outbound request call for the customer's Web Notification outbound campaign.
* api-change:``connecthealth``: [``botocore``] Expand input validation to support Unicode characters and markdown table syntax.
* api-change:``ec2``: [``botocore``] Adds support for the precision time strategy and a parentGroupId parameter on CreatePlacementGroup and DescribePlacementGroups. Precision time placement groups and cluster placement groups with a parent precision time placement group ensure instances launch on precision time capable hardware.
* api-change:``ecs``: [``botocore``] Amazon ECS now supports customizable deployment circuit breaker configurations. Customers can now define the failure threshold or control the failure counting mechanism.
* api-change:``elasticache``: [``botocore``] Updated documentation for the ApplyImmediately parameter in ModifyCacheCluster and ModifyReplicationGroup to clarify modification behavior.
* api-change:``evs``: [``botocore``] Amazon EVS introduces a VMware Cloud Foundation (VCF) self-deployed mode, along with new connectors to VCF components such as the Operations and SDDC managers to monitor coverage and usage.
* api-change:``glue``: [``botocore``] Added the UpdateAsset operation to set the business name and description for an existing AWS Glue Data Catalog asset.
* api-change:``imagebuilder``: [``botocore``] Adds support for AMI watermarks in Image Builder.
* api-change:``lambda``: [``botocore``] Lambda now supports self-managed S3 buckets for Lambda code storage giving you the option for Lambda to reference a copy of your source code from your own S3 buckets. This allows you to maintain a single copy of your source code and manage your own code storage limits.
* api-change:``pcs``: [``botocore``] Add support for in-place Slurm version upgrades on existing clusters by accepting scheduler.version in UpdateCluster.
* api-change:``pinpoint-sms-voice-v2``: [``botocore``] This launch is an expansion of our Q1 RCS for business launch where we will release an API that supports rich media and interactive messaging elements.
* api-change:``rds-data``: [``botocore``] Updated documentation to remove Aurora Serverless V1 references.
* api-change:``resource-explorer-2``: [``botocore``] Added CFN resource type fields for Search and ListSupportedResourceTypes responses. Added SLRec field for ServiceView
* api-change:``sagemaker-featurestore-runtime``: [``botocore``] Add support for ListRecords and BatchWriteRecord APIs to Feature Store.
* api-change:``vpc-lattice``: [``botocore``] Amazon VPC Lattice now supports mutable idle timeout configuration on VPC Lattice Services
* api-change:``wafv2``: [``botocore``] AWS WAF added support for associating AWS WAF web ACLs with Amazon Bedrock AgentCore Gateway resources. You can now use AssociateWebACL, DisassociateWebACL, GetWebACLForResource, and ListResourcesForWebACL to protect your AgentCore Gateways with AWS WAF.
* enhancement:Identity: [``botocore``] Add public methods to insert, remove, and retrieve providers in the token provider chain.

1.43.36

=======

* api-change:``kafka``: [``botocore``] Amazon MSK Replicator now supports mTLS authentication when connecting to external Apache Kafka clusters, enabling customers to replicate data from clusters that require mutual TLS for client authentication. This capability is supported when replicating to Amazon MSK Express brokers.

1.43.35

=======

* api-change:``application-signals``: [``botocore``] Application Signals now supports dynamic instrumentation and Service Events telemetry. Add instrumentation at runtime without restarts, and use fine-grained profiling data to quickly pinpoint latency and error root causes.
* api-change:``bedrock-agentcore``: [``botocore``] Adds an optional extractionMode field to CreateEvent. SKIP retains the event in short-term memory but excludes it from long-term memory extraction.
* api-change:``directconnect``: [``botocore``] Added VIF rate limiting support for AWS Direct Connect, allowing customers to set bandwidth allocations on virtual interfaces to manage traffic on dedicated connections.
* api-change:``ec2``: [``botocore``] This release adds support for AMI Watermark and Allowed AMIs integration
* api-change:``endpoint-rules``: [``botocore``] Update endpoint-rules client to latest version
* api-change:``guardduty``: [``botocore``] Added AI-powered investigations that automatically analyze security findings, correlate related activity, and produce structured summaries with risk assessment, confidence scoring, MITRE technique classification, and actionable next steps.
* api-change:``kafka``: [``botocore``] Amazon MSK Replicator now supports mTLS authentication when connecting to external Apache Kafka clusters, enabling customers to replicate data from clusters that require mutual TLS for client authentication. This capability is supported when replicating to Amazon MSK Express brokers.
* api-change:``lambda``: [``botocore``] Add support for tagging Network Connector resources in AWS Lambda.
* api-change:``lambda-core``: [``botocore``] Initial release of the AWS Lambda Core SDK with APIs to create, manage, and tag network connectors that enable Lambda compute resources to access private resources in your Amazon VPC.
* api-change:``lambda-microvms``: [``botocore``] Lambda MicroVMs GA launch. Lambda MicroVMs enable isolated and highly responsive execution of user-supplied or LLM-generated code.
* api-change:``logs``: [``botocore``] CloudWatch Logs Updates - New APIs introduced to support syslog ingestion to a log group. For more information, see CloudWatch Logs API documentation.
* api-change:``mediaconnect``: [``botocore``] AWS MediaConnect now supports Content Quality Analysis for Router Inputs, enabling detection of black frames, frozen frames, and silent audio with configurable thresholds.
* api-change:``omics``: [``botocore``] Adds support for scratch ephemeral storage mounted at tmp
* api-change:``quicksight``: [``botocore``] Updated the Amazon Quick Spaces API to remove unsupported SPACE and ARTIFACT values from the SpaceQuickSightResourceType enum.

1.43.34

=======

* api-change:``appstream``: [``botocore``] Amazon WorkSpaces Agent Access now supports domain-joined fleets for enterprise identity integration, real-time agent observation with instant stop controls, and MCP tool forwarding for lower-latency, cost-effective desktop tool access.
* api-change:``bedrock-agent``: [``botocore``] Add support for metadata-only retrieval on GetFlow, GetFlowVersion, and GetPrompt APIs.
* api-change:``connect``: [``botocore``] This is the release for point based scoring system and the evaluation form validation project
* api-change:``glue``: [``botocore``] Adds the SearchAssets operation for discovering assets in the AWS Glue Data Catalog using full-text search and filters. Minor naming refinements across the Glossary Terms and Attachment APIs for consistency.
* api-change:``opensearch``: [``botocore``] This release introduces data source attachment APIs, enabling users to attach and detach Amazon OpenSearch Service domains and Amazon OpenSearch Serverless collections to an OpenSearch application.

1.43.33

=======

* api-change:``application-autoscaling``: [``botocore``] Adds support for ECS high-resolution predefined scaling metrics (ECSServiceAverageCPUUtilizationHighResolution, ECSServiceAverageMemoryUtilizationHighResolution) enabling 20-second metric periods for faster scaling
* api-change:``batch``: [``botocore``] Adds Support for ordered allocation strategies- BEST-FIT-PROGRESSIVE-ORDERED or SPOT-CAPACITY-OPTIMIZED-PRIORITIZED
* api-change:``cognito-idp``: [``botocore``] In order to support the new TLS Self-Service feature, this change adds SecurityPolicyType to CustomDomainConfigType. During CreateUserPoolDomain and UpdateUserPoolDomain this is used to select a custom domain's TLS enforcement, and for DescribeUserPoolDomain it informs users about the current TLS.
* api-change:``compute-optimizer``: [``botocore``] This release surfaces two new metrics Volume IOPS Exceeded and Volume Throughput Exceeded into EBS volume rightsizing recommendations.
* api-change:``ec2``: [``botocore``] Documentation updates clarifying CancelCapacityReservation cancellable states
* api-change:``ecs``: [``botocore``] Amazon ECS services now support high resolution (20 second) CloudWatch metrics for CPUUtilization and MemoryUtilization. Use these metrics for faster service auto scaling.
* api-change:``eks``: [``botocore``] Adds support for configurable control plane egress routing in Amazon EKS, allowing you to route control plane egress traffic through your VPC and control how the control plane reaches resources in your network such as webhook servers and OIDC providers.
* api-change:``gamelift``: [``botocore``] Amazon GameLift Servers has launched support for customizing Linux capabilities in container fleets. You can now specify additional Linux capabilities for containers in a container group definition, giving you finer control over the default Docker capabilities available to your containers.
* api-change:``healthlake``: [``botocore``] Adding New Configurations to the FHIR Create Datastore. The new configurations include NLP Configuration, AnalyticsConfiguration, ProfileConfiguration
* api-change:``lambda``: [``botocore``] Converging and fixing existing documentation gaps in Lambda SDK
* api-change:``logs``: [``botocore``] Added optional startFromHead parameter to FilterLogEvents enabling descending timestamp order (newest first) when set to false. Default true preserves existing ascending order. Reverse sorting requires a startTime on or after Jan 1, 2024.
* api-change:``sagemaker``: [``botocore``] Adds support for automatic AMI patching on HyperPod clusters. Customers can configure patching strategies to automatically apply security patch with zero job termination. Customers can also specify an AMI version at instance group level and update cluster software to a certain AMI version.
* api-change:``synthetics``: [``botocore``] CloudWatch Synthetics adds support for multi-location canaries. Customers can now monitor their endpoints from multiple locations with centralized management from a primary location. The SDK includes new parameters for configuring multiple locations and tracking their state.

1.43.32

=======

* api-change:``bedrock-agent``: [``botocore``] Launching Bedrock Managed Knowledge Bases. Added support for resource-based policies on Knowledge Base resources, enabling cross-account access for Managed Knowledge Bases.
* api-change:``bedrock-agentcore``: [``botocore``] AgentCore Harness service will be Generally Available at NYS 2026 with this Treb release. Harness will support invoking specific endpoints via the qualifier parameter, AWS Skills for pre-built agent capabilities, and improved validation for skill git source URLs.
* api-change:``bedrock-agentcore-control``: [``botocore``] AgentCore Gateway now supports inference targets to LLM providers (direct config or built-in connectors), HTTP passthrough targets with session stickiness, runtime target API schemas, AWS WAF web ACL association with configurable fail-open or fail-close modes, and interceptor payload filtering.
* api-change:``bedrock-agent-runtime``: [``botocore``] Adds new AgenticRetrieveStream API for managed knowledge bases to use conversation history and autonomously plan for multi-hop multi-KB reasoning with built-in evaluation and access-control. Updates Retrieve API for access-control-based filtering for managed knowledge bases.
* api-change:``compute-optimizer-automation``: [``botocore``] This launch adds IfExists comparison operators to Compute Optimizer Automation rule criteria, so a rule can include recommended actions whose specified attribute isn't present.
* api-change:``devops-agent``: [``botocore``] Adds support for Remote A2A (Agent-to-Agent) agent registration and management. Adds new Release Readiness Review and Release Testing capabilities. Adds support for Git managed skills in AWS DevOps Agent.
* api-change:``ecs``: [``botocore``] Releasing the ability to bring-your-own task-definition for CreateExpressGatewayService and UpdateGatewayExpressService
* api-change:``glue``: [``botocore``] This release adds support for Search and Discovery in AWS Glue, letting you and your applications search Data Catalog assets such as table and enrich them with business context and glossary terms.
* api-change:``mq``: [``botocore``] This release adds private networking support for Amazon MQ for RabbitMQ. You can now associate AWS RAM resource shares with your broker and retrieve shared resource details using the new DescribeSharedResources API.
* api-change:``opensearch``: [``botocore``] Adds support for configuring IAM Identity Center options on existing OpenSearch applications via the UpdateApplication API.
* api-change:``partnercentral-selling``: [``botocore``] Cosell Resonate AND Prospecing API Launch with ARN correction
* api-change:``securityagent``: [``botocore``] Updated AWS Security Agent SDK model with new APIs for threat modeling, code review, security requirements, and additional integration providers.

1.43.31

=======

* api-change:``directconnect``: [``botocore``] Added VIF rate limiting support for AWS Direct Connect, allowing customers to set bandwidth allocations on virtual interfaces to manage traffic on dedicated connections.
* api-change:``outposts``: [``botocore``] Adds support for creating an order from quotes.
* api-change:``partnercentral-selling``: [``botocore``] Added Prospecting APIs to convert engagements into AI-enriched leads with scoring insights. Extended Engagement APIs with ProspectingResult and Lead contexts. Added CoSell Scoring to GetAwsOpportunitySummary- quality score, trend, agent-driven recommendations, and engagement classification.
* api-change:``route53resolver``: [``botocore``] Adds supports for PartnerManagedRules
* api-change:``s3``: [``botocore``] Added support for annotations. You can now attach up to 1000 annotations (up to 1 MB each) directly to objects and create, retrieve, list, and delete them using new annotation APIs. Also added support for configuring an annotation table in S3 Metadata.
* api-change:``s3vectors``: [``botocore``] Amazon S3 Vectors now supports paginated QueryVectors requests, returning up to 10,000 results per query.
* api-change:``sagemaker``: [``botocore``] Add EnableDetailedObservability to Endpoint MetricsConfig. Publishes GPU, host, and framework-native inference metrics to CloudWatch with per-inference-component, availability-zone, and instance dimensions. Adds Inference Component provisioning lifecycle and multi-AZ placement metrics.

1.43.30

=======

* api-change:``bedrock-runtime``: [``botocore``] InvokeGuardrailChecks API evaluates prompts and responses against safety checks (content filters, prompt attacks, sensitive info) without creating guardrail resources. It's a detect-only API, returning numeric scores so you can build adaptive logic as per your application.
* api-change:``datazone``: [``botocore``] Adds support for deleting lineage events in Amazon DataZone.
* api-change:``logs``: [``botocore``] Added endTimeOffset parameter to Scheduled Queries APIs (Create, Update, Get) enabling bounded time window configuration. Introduced scheduleType filter (CUSTOMER MANAGED, AWS MANAGED) for ListScheduledQueries and exposed it in Get and Update responses.
* api-change:``mgn``: [``botocore``] AWS Transform for VMware now supports Amazon FSx for NetApp ONTAP as a target storage. Customers can migrate source server disks directly to FSx for NetApp ONTAP iSCSI LUNs. Target storage is configurable per source server, and compute, network, and storage migrate together in coordinated waves.
* api-change:``rds``: [``botocore``] Adding support for RDS SQL Server BYOM and DB2 Community Edition
* api-change:``wafv2``: [``botocore``] AWS WAF now supports AI traffic monetization for CloudFront. Configure payment networks and pricing on your web ACL, use the new Monetize rule action to charge AI agents via x402, and monitor revenue with new GetRevenueStatisticsSummary, GetRevenueStatistics, and ListSettlementRecords APIs.
* api-change:``workspaces``: [``botocore``] Added a validation for null check for ImageIds in DescribeWorkspaceImages API request parameters.

1.43.29

=======

* api-change:``acm``: [``botocore``] Certificate transparency logging opt-out is no longer available. Per compliance requirements, all public ACM certificates are automatically recorded in certificate transparency logs. The CertificateTransparencyLoggingPreference option is deprecated.
* api-change:``bedrock-agentcore``: [``botocore``] Added tagging and CMK support across optimization, an explanation field in recommendation output, and an insights feature to identify failure patterns, extract user intents, and summarize execution behavior
* api-change:``bedrock-agentcore-control``: [``botocore``] Added tagging and CMK support for optimizations and an insights feature to identify failure patterns, extract user intents, and summarize execution behavior
* api-change:``devops-agent``: [``botocore``] Adds support for Trigger CRUD APIs (CreateTrigger, GetTrigger, UpdateTrigger, DeleteTrigger, ListTriggers) for managing schedule-based automation triggers in DevOps Agent agent spaces.
* api-change:``eks``: [``botocore``] Patches missing enum values for EKS updates
* api-change:``firehose``: [``botocore``] Update KeyARN in DeliveryStreamEncryptionConfigurationInput to accept KMS key ARNs only (not alias ARNs), matching service behavior.
* api-change:``glue``: [``botocore``] Adds support for retrieving Apache Iceberg table metadata via GetTable. Use the new AttributesToGet parameter with LATEST ICEBERG METADATA to receive schema, partition specs, sort orders, and table properties in the response.
* api-change:``iam``: [``botocore``] Updating documentation for select service-specific credential APIs
* api-change:``sagemaker-runtime``: [``botocore``] Added support for inline request payloads to the InvokeEndpointAsync operation to allow users to provide the inference payload directly in the request Body (up to 128,000 bytes) as an alternative to uploading the payload to Amazon S3 and passing InputLocation.

1.43.28

=======

* api-change:``bedrock-agentcore``: [``botocore``] Adds support to perform cross account data plane actions on an AgentCore Memory resource
* api-change:``bedrock-agentcore-control``: [``botocore``] Supports deterministic metadata for AgentCore Memory
* api-change:``eks``: [``botocore``] Introduce new CreateCluster parameters for Amazon EKS local clusters on AWS Outposts. Added etcdInstanceType for configuring the EC2 instance type for dedicated etcd instances, and spreadLevel for configuring the placement group spread level for Kubernetes control plane and etcd instances.
* api-change:``healthlake``: [``botocore``] Adds the UpdateFHIRDatastore API and adds analytics, NLP, and profile configuration support to CreateFHIRDatastore and DescribeFHIRDatastore.
* api-change:``neptune``: [``botocore``] Amazon Neptune now supports IPv6 dual-stack networking. You can create and manage Neptune DB clusters accessible over both IPv4 and IPv6 by specifying NetworkType as DUAL in CreateDBCluster, ModifyDBCluster, RestoreDBClusterFromSnapshot, and RestoreDBClusterToPointInTime API operations
* api-change:``omics``: [``botocore``] Adds support for workflowName in the ListRuns API response.
* api-change:``support``: [``botocore``] Adding new BDD representation of endpoint ruleset

1.43.27

=======

* api-change:``amp``: [``botocore``] Adds supports for out-of-order sample ingestion (default 1-minute window) and a configurable rule query offset to reduce data loss and improve alerting accuracy.
* api-change:``connecthealth``: [``botocore``] Add support for MedicalScribeBinaryAudioEvent in the Medical Scribe streaming input. This new event type lets you send audio as a raw binary payload instead of a base64-encoded value
* api-change:``ec2``: [``botocore``] This release adds support for AMI Watermark which a structured identifier that helps in tracking AMI provenance
* api-change:``ecs``: [``botocore``] Amazon ECS Managed Daemon task definitions now support pidMode and ipcMode parameters. Set shared to allow daemons to share PID or IPC namespaces with co-located tasks on Managed Instances, enabling process tracing and shared memory communication.
* api-change:``endpoint-rules``: [``botocore``] Update endpoint-rules client to latest version
* api-change:``lightsail``: [``botocore``] This release adds support for Asia Pacific (Hong Kong) (ap-east-1), Europe (Spain) (eu-south-2) and South America (Sao Paulo) (sa-east-1) Regions.
* api-change:``medialive``: [``botocore``] Adding premixer settings to pid and track audio inputs in MediaLIve to allow greater control over mixing audio from multiple source streams including support for AudioPidSelectors made up of multiple audio PIDs.
* api-change:``sagemaker``: [``botocore``] Add support for G6e instances (ml.g6e.xlarge through ml.g6e.48xlarge) on Amazon SageMaker Notebook Instances.
* api-change:``signin``: [``botocore``] AWS Sign-In now allows customers to control access to the AWS Management Console using resource-based policies. With this release customers can restrict console access based on network perimeters such as VPC IDs, VPC endpoints, and IP addresses.

1.43.26

=======

* api-change:``bedrock``: [``botocore``] Adds support for the Amazon Bedrock account-level data retention APIs PutAccountDataRetention and GetAccountDataRetention.
* api-change:``bedrock-agentcore``: [``botocore``] Add RetryableConflictException (HTTP 409) to InvokeAgentRuntimeCommand and GetAgentCard to prevent orphaned VMs during concurrent session access. The SDK automatically retries this exception with backoff. Enforcement is not yet active and will be enabled in a future service update.
* api-change:``cloudwatch``: [``botocore``] This release adds the APIs (AssociateDatasetKmsKey, DisassociateDatasetKmsKey, GetDataset) to manage encryption at rest for OpenTelemetry metrics in CloudWatch using AWS KMS customer managed keys.
* api-change:``ec2``: [``botocore``] Added TagFieldSpecifications to CreateFlowLogs and DescribeFlowLogs APIs. Customers can now specify tag keys in their Flow Logs subscriptions to capture associated EC2 resource tag values in their logs, enabling tag-based visibility.
* api-change:``odb``: [``botocore``] Releases Autonomous Database Serverless APIs, autonomousDatabaseOciIntegrationIamRoles, linkedOciTenancyId, linkedOciCompartmentId, and subscriptionErrors fields in GetOciOnboardingStatus API response.
* api-change:``outposts``: [``botocore``] Added AWS Outposts APIs for self-service Outposts quoting and ordering. New operations include CreateQuote, GetQuote, UpdateQuote, DeleteQuote, ListQuotes, and ListOrderableInstanceTypes.

1.43.25

=======

* api-change:``compute-optimizer``: [``botocore``] Adds new Idle Recommendation Resource types in the AWS Compute Optimizer API
* api-change:``cost-optimization-hub``: [``botocore``] Adds new Idle Recommendation types in the Cost Optimization Hub API
* api-change:``deadline``: [``botocore``] Added optional identityCenterRegion parameter to AssociateMember APIs to allow managing memberships for users and groups in other regions.
* api-change:``devops-agent``: [``botocore``] Add Asset APIs for managing versioned assets and asset files in AWS DevOps Agent agent spaces.
* api-change:``mediapackagev2``: [``botocore``] Adds support for DASH Audio Timeline Patternization. This enables your DASH manifests to templatize the repeating patterns that emerge in audio segment timelines. This compacts the total timeline length, utilizing the repeat notation, such that manifests don't grow indefinitely long.
* api-change:``mgn``: [``botocore``] AWS Transform discovery tool now supported as network migration input source. You can now use the AWS Transform Discovery tool as a source for network migration alongside modelizeIT, enabling hybrid network migrations for environments running both VMware and non-VMware workloads.
* api-change:``observabilityadmin``: [``botocore``] CloudWatch Observability Admin extends CentralizationRuleForOrganization APIs to support metrics, enabling centralization of metrics across accounts and Regions alongside logs.
* api-change:``omics``: [``botocore``] StartRunBatch API - Add EngineSettings
* api-change:``taxsettings``: [``botocore``] Adds support for additional tax information fields for Philippines, Belgium, Chile, France, Poland, and Italy in the Tax Settings API.

1.43.24

=======

* api-change:``emr-serverless``: [``botocore``] Adds support for updating max capacity and custom fields while application is started
* api-change:``mediaconvert``: [``botocore``] Adds support for configurable number of Clear Lead segments at the beginning of encrypted output. Adds support for multiple trickplay variants.
* api-change:``payment-cryptography``: [``botocore``] Adds CloudFormation support for resource-based policies on AWS Payment Cryptography keys.
* api-change:``quicksight``: [``botocore``] Adds support for Knowledge Base APIs and Index Capacity API
* api-change:``sagemaker``: [``botocore``] This release adds support for MLflow experiment tracking in SageMaker inference optimization. CreateAIRecommendationJob and CreateAIBenchmarkJob now accept an optional OutputConfig.MlflowConfig (MLflow App ARN, experiment, run name) to stream benchmark metrics and artifacts to your own MLflow App.

1.43.23

=======

* api-change:``appflow``: [``botocore``] Adding new BDD representation of endpoint ruleset
* api-change:``appintegrations``: [``botocore``] Adding new BDD representation of endpoint ruleset
* api-change:``auditmanager``: [``botocore``] Adding new BDD representation of endpoint ruleset
* api-change:``chime-sdk-voice``: [``botocore``] Adding new BDD representation of endpoint ruleset
* api-change:``cloudformation``: [``botocore``] Adding new BDD representation of endpoint ruleset
* api-change:``config``: [``botocore``] AWS Config now supports internal service-linked rules, allowing AWS service partners to deploy Config rules for customers and use the evaluation results to build enhanced features.
* api-change:``connectparticipant``: [``botocore``] Adding new BDD representation of endpoint ruleset
* api-change:``efs``: [``botocore``] Adding new BDD representation of endpoint ruleset
* api-change:``emr``: [``botocore``] Added support for Spark Connect interactive sessions on 

[pyup-bot]

Closing this in favor of #324