chore(deps): bump the boto group across 1 directory with 15 updates

[dependabot]

Bumps the boto group with 15 updates in the / directory:

Package	From	To
boto3-stubs	1.42.83	1.43.6
mypy-boto3-apigateway	1.42.68	1.43.0
mypy-boto3-cloudformation	1.42.3	1.43.0
mypy-boto3-ecr	1.42.67	1.43.0
mypy-boto3-iam	1.42.64	1.43.2
mypy-boto3-kinesis	1.42.41	1.43.0
mypy-boto3-lambda	1.42.37	1.43.0
mypy-boto3-s3	1.42.80	1.43.5
mypy-boto3-schemas	1.42.3	1.43.0
mypy-boto3-secretsmanager	1.42.8	1.43.0
mypy-boto3-signer	1.42.7	1.43.0
mypy-boto3-sqs	1.42.3	1.43.0
mypy-boto3-stepfunctions	1.42.3	1.43.0
mypy-boto3-sts	1.42.3	1.43.0
mypy-boto3-xray	1.42.3	1.43.0

Updates boto3-stubs from 1.42.83 to 1.43.6

Release notes

Sourced from boto3-stubs's releases.

8.8.0 - Python 3.8 runtime is back

Changed

• [services] install_requires section is calculated based on dependencies in use, so typing-extensions version is set properly
• [all] Replaced typing imports with collections.abc with a fallback to typing for Python <3.9
• [all] Added aliases for builtins.list, builtins.set, builtins.dict, and builtins.type, so Python 3.8 runtime should work as expected again (reported by @​YHallouard in #340 and @​Omri-Ben-Yair in #336)
• [all] Unions use the same type annotations as the rest of the structures due to proper fallbacks

Fixed

• [services] Universal input/output shapes were not replaced properly in service subresources
• [docs] Simplified doc links rendering for services
• [services] Cleaned up unnecessary imports in client.pyi
• [builder] Import records with fallback are always rendered

Commits

• See full diff in compare view

Updates mypy-boto3-apigateway from 1.42.68 to 1.43.0

Release notes

Sourced from mypy-boto3-apigateway's releases.

8.8.0 - Python 3.8 runtime is back

Changed

• [services] install_requires section is calculated based on dependencies in use, so typing-extensions version is set properly
• [all] Replaced typing imports with collections.abc with a fallback to typing for Python <3.9
• [all] Added aliases for builtins.list, builtins.set, builtins.dict, and builtins.type, so Python 3.8 runtime should work as expected again (reported by @​YHallouard in #340 and @​Omri-Ben-Yair in #336)
• [all] Unions use the same type annotations as the rest of the structures due to proper fallbacks

Fixed

• [services] Universal input/output shapes were not replaced properly in service subresources
• [docs] Simplified doc links rendering for services
• [services] Cleaned up unnecessary imports in client.pyi
• [builder] Import records with fallback are always rendered

Commits

• See full diff in compare view

Updates mypy-boto3-cloudformation from 1.42.3 to 1.43.0

Release notes

Sourced from mypy-boto3-cloudformation's releases.

8.8.0 - Python 3.8 runtime is back

Changed

• [services] install_requires section is calculated based on dependencies in use, so typing-extensions version is set properly
• [all] Replaced typing imports with collections.abc with a fallback to typing for Python <3.9
• [all] Added aliases for builtins.list, builtins.set, builtins.dict, and builtins.type, so Python 3.8 runtime should work as expected again (reported by @​YHallouard in #340 and @​Omri-Ben-Yair in #336)
• [all] Unions use the same type annotations as the rest of the structures due to proper fallbacks

Fixed

• [services] Universal input/output shapes were not replaced properly in service subresources
• [docs] Simplified doc links rendering for services
• [services] Cleaned up unnecessary imports in client.pyi
• [builder] Import records with fallback are always rendered

Commits

• See full diff in compare view

Updates mypy-boto3-ecr from 1.42.67 to 1.43.0

Release notes

Sourced from mypy-boto3-ecr's releases.

8.8.0 - Python 3.8 runtime is back

Changed

• [services] install_requires section is calculated based on dependencies in use, so typing-extensions version is set properly
• [all] Replaced typing imports with collections.abc with a fallback to typing for Python <3.9
• [all] Added aliases for builtins.list, builtins.set, builtins.dict, and builtins.type, so Python 3.8 runtime should work as expected again (reported by @​YHallouard in #340 and @​Omri-Ben-Yair in #336)
• [all] Unions use the same type annotations as the rest of the structures due to proper fallbacks

Fixed

• [services] Universal input/output shapes were not replaced properly in service subresources
• [docs] Simplified doc links rendering for services
• [services] Cleaned up unnecessary imports in client.pyi
• [builder] Import records with fallback are always rendered

Commits

• See full diff in compare view

Updates mypy-boto3-iam from 1.42.64 to 1.43.2

Release notes

Sourced from mypy-boto3-iam's releases.

8.8.0 - Python 3.8 runtime is back

Changed

• [services] install_requires section is calculated based on dependencies in use, so typing-extensions version is set properly
• [all] Replaced typing imports with collections.abc with a fallback to typing for Python <3.9
• [all] Added aliases for builtins.list, builtins.set, builtins.dict, and builtins.type, so Python 3.8 runtime should work as expected again (reported by @​YHallouard in #340 and @​Omri-Ben-Yair in #336)
• [all] Unions use the same type annotations as the rest of the structures due to proper fallbacks

Fixed

• [services] Universal input/output shapes were not replaced properly in service subresources
• [docs] Simplified doc links rendering for services
• [services] Cleaned up unnecessary imports in client.pyi
• [builder] Import records with fallback are always rendered

Commits

• See full diff in compare view

Updates mypy-boto3-kinesis from 1.42.41 to 1.43.0

Release notes

Sourced from mypy-boto3-kinesis's releases.

8.8.0 - Python 3.8 runtime is back

Changed

• [services] install_requires section is calculated based on dependencies in use, so typing-extensions version is set properly
• [all] Replaced typing imports with collections.abc with a fallback to typing for Python <3.9
• [all] Added aliases for builtins.list, builtins.set, builtins.dict, and builtins.type, so Python 3.8 runtime should work as expected again (reported by @​YHallouard in #340 and @​Omri-Ben-Yair in #336)
• [all] Unions use the same type annotations as the rest of the structures due to proper fallbacks

Fixed

• [services] Universal input/output shapes were not replaced properly in service subresources
• [docs] Simplified doc links rendering for services
• [services] Cleaned up unnecessary imports in client.pyi
• [builder] Import records with fallback are always rendered

Commits

• See full diff in compare view

Updates mypy-boto3-lambda from 1.42.37 to 1.43.0

Release notes

Sourced from mypy-boto3-lambda's releases.

8.8.0 - Python 3.8 runtime is back

Changed

• [services] install_requires section is calculated based on dependencies in use, so typing-extensions version is set properly
• [all] Replaced typing imports with collections.abc with a fallback to typing for Python <3.9
• [all] Added aliases for builtins.list, builtins.set, builtins.dict, and builtins.type, so Python 3.8 runtime should work as expected again (reported by @​YHallouard in #340 and @​Omri-Ben-Yair in #336)
• [all] Unions use the same type annotations as the rest of the structures due to proper fallbacks

Fixed

• [services] Universal input/output shapes were not replaced properly in service subresources
• [docs] Simplified doc links rendering for services
• [services] Cleaned up unnecessary imports in client.pyi
• [builder] Import records with fallback are always rendered

Commits

• See full diff in compare view

Updates mypy-boto3-s3 from 1.42.80 to 1.43.5

Release notes

Sourced from mypy-boto3-s3's releases.

8.8.0 - Python 3.8 runtime is back

Changed

• [services] install_requires section is calculated based on dependencies in use, so typing-extensions version is set properly
• [all] Replaced typing imports with collections.abc with a fallback to typing for Python <3.9
• [all] Added aliases for builtins.list, builtins.set, builtins.dict, and builtins.type, so Python 3.8 runtime should work as expected again (reported by @​YHallouard in #340 and @​Omri-Ben-Yair in #336)
• [all] Unions use the same type annotations as the rest of the structures due to proper fallbacks

Fixed

• [services] Universal input/output shapes were not replaced properly in service subresources
• [docs] Simplified doc links rendering for services
• [services] Cleaned up unnecessary imports in client.pyi
• [builder] Import records with fallback are always rendered

Commits

• See full diff in compare view

Updates mypy-boto3-schemas from 1.42.3 to 1.43.0

Release notes

Sourced from mypy-boto3-schemas's releases.

8.8.0 - Python 3.8 runtime is back

Changed

• [services] install_requires section is calculated based on dependencies in use, so typing-extensions version is set properly
• [all] Replaced typing imports with collections.abc with a fallback to typing for Python <3.9
• [all] Added aliases for builtins.list, builtins.set, builtins.dict, and builtins.type, so Python 3.8 runtime should work as expected again (reported by @​YHallouard in #340 and @​Omri-Ben-Yair in #336)
• [all] Unions use the same type annotations as the rest of the structures due to proper fallbacks

Fixed

• [services] Universal input/output shapes were not replaced properly in service subresources
• [docs] Simplified doc links rendering for services
• [services] Cleaned up unnecessary imports in client.pyi
• [builder] Import records with fallback are always rendered

Commits

• See full diff in compare view

Updates mypy-boto3-secretsmanager from 1.42.8 to 1.43.0

Release notes

Sourced from mypy-boto3-secretsmanager's releases.

8.8.0 - Python 3.8 runtime is back

Changed

• [services] install_requires section is calculated based on dependencies in use, so typing-extensions version is set properly
• [all] Replaced typing imports with collections.abc with a fallback to typing for Python <3.9
• [all] Added aliases for builtins.list, builtins.set, builtins.dict, and builtins.type, so Python 3.8 runtime should work as expected again (reported by @​YHallouard in #340 and @​Omri-Ben-Yair in #336)
• [all] Unions use the same type annotations as the rest of the structures due to proper fallbacks

Fixed

• [services] Universal input/output shapes were not replaced properly in service subresources
• [docs] Simplified doc links rendering for services
• [services] Cleaned up unnecessary imports in client.pyi
• [builder] Import records with fallback are always rendered

Commits

• See full diff in compare view

Updates mypy-boto3-signer from 1.42.7 to 1.43.0

Release notes

Sourced from mypy-boto3-signer's releases.

8.8.0 - Python 3.8 runtime is back

Changed

• [services] install_requires section is calculated based on dependencies in use, so typing-extensions version is set properly
• [all] Replaced typing imports with collections.abc with a fallback to typing for Python <3.9
• [all] Added aliases for builtins.list, builtins.set, builtins.dict, and builtins.type, so Python 3.8 runtime should work as expected again (reported by @​YHallouard in #340 and @​Omri-Ben-Yair in #336)
• [all] Unions use the same type annotations as the rest of the structures due to proper fallbacks

Fixed

• [services] Universal input/output shapes were not replaced properly in service subresources
• [docs] Simplified doc links rendering for services
• [services] Cleaned up unnecessary imports in client.pyi
• [builder] Import records with fallback are always rendered

Commits

• See full diff in compare view

Updates mypy-boto3-sqs from 1.42.3 to 1.43.0

Release notes

Sourced from mypy-boto3-sqs's releases.

8.8.0 - Python 3.8 runtime is back

Changed

• [services] install_requires section is calculated based on dependencies in use, so typing-extensions version is set properly
• [all] Replaced typing imports with collections.abc with a fallback to typing for Python <3.9
• [all] Added aliases for builtins.list, builtins.set, builtins.dict, and builtins.type, so Python 3.8 runtime should work as expected again (reported by @​YHallouard in #340 and @​Omri-Ben-Yair in #336)
• [all] Unions use the same type annotations as the rest of the structures due to proper fallbacks

Fixed

• [services] Universal input/output shapes were not replaced properly in service subresources
• [docs] Simplified doc links rendering for services
• [services] Cleaned up unnecessary imports in client.pyi
• [builder] Import records with fallback are always rendered

Commits

• See full diff in compare view

Updates mypy-boto3-stepfunctions from 1.42.3 to 1.43.0

Release notes

Sourced from mypy-boto3-stepfunctions's releases.

8.8.0 - Python 3.8 runtime is back

Changed

• [services] install_requires section is calculated based on dependencies in use, so typing-extensions version is set properly
• [all] Replaced typing imports with collections.abc with a fallback to typing for Python <3.9
• [all] Added aliases for builtins.list, builtins.set, builtins.dict, and builtins.type, so Python 3.8 runtime should work as expected again (reported by @​YHallouard in #340 and @​Omri-Ben-Yair in #336)
• [all] Unions use the same type annotations as the rest of the structures due to proper fallbacks

Fixed

• [services] Universal input/output shapes were not replaced properly in service subresources
• [docs] Simplified doc links rendering for services
• [services] Cleaned up unnecessary imports in client.pyi
• [builder] Import records with fallback are always rendered

Commits

• See full diff in compare view

Updates mypy-boto3-sts from 1.42.3 to 1.43.0

Release notes

Sourced from mypy-boto3-sts's releases.

8.8.0 - Python 3.8 runtime is back

Changed

• [services] install_requires section is calculated based on dependencies in use, so typing-extensions version is set properly
• [all] Replaced typing imports with collections.abc with a fallback to typing for Python <3.9
• [all] Added aliases for builtins.list, builtins.set, builtins.dict, and builtins.type, so Python 3.8 runtime should work as expected again (reported by @​YHallouard in #340 and @​Omri-Ben-Yair in #336)
• [all] Unions use the same type annotations as the rest of the structures due to proper fallbacks

Fixed

• [services] Universal input/output shapes were not replaced properly in service subresources
• [docs] Simplified doc links rendering for services
• [services] Cleaned up unnecessary imports in client.pyi
• [builder] Import records with fallback are always rendered

Commits

• See full diff in compare view

Updates mypy-boto3-xray from 1.42.3 to 1.43.0

Release notes

Sourced from mypy-boto3-xray's releases.

8.8.0 - Python 3.8 runtime is back

Changed

• [services] install_requires section is calculated based on dependencies in use, so typing-extensions version is set properly
• [all] Replaced typing imports with collections.abc with a fallback to typing for Python <3.9
• [all] Added aliases for builtins.list, builtins.set, builtins.dict, and builtins.type, so Python 3.8 runtime should work as expected again (reported by @​YHallouard in #340 and @​Omri-Ben-Yair in #336)
• [all] Unions use the same type annotations as the rest of the structures due to proper fallbacks

Fixed

• [services] Universal input/output shapes were not replaced properly in service subresources
• [docs] Simplified doc links rendering for services
• [services] Cleaned up unnecessary imports in client.pyi
• [builder] Import records with fallback are always rendered

Commits

• See full diff in compare view

[aws-sam-cli-bot]

Code Review Results

Reviewed: a90d18f..3bf27f8
Files: 3
Comments: 1

[aws-sam-cli-bot]

[GENERAL] Version skew between boto3-stubs and boto3 runtime.

The boto3-stubs package (and all mypy-boto3-* sub-packages) is being bumped to 1.43.0, but the actual boto3 runtime dependency remains pinned at 1.42.70 (set in pyproject.toml line 38). This is a full minor version gap.

The boto3-stubs project versions its stubs to match specific boto3 releases. Using 1.43.0 stubs with a 1.42.70 runtime means:

• Type stubs may reference new API methods, parameters, or return types added in boto3 1.43.x that don't exist in 1.42.70 — code could pass type checking but fail at runtime.
• Stubs may omit deprecated signatures still present in 1.42.70 — type checking could flag valid code as errors.

The same skew applies identically in reproducible-mac.txt and reproducible-win.txt.

Consider either:

• Bumping boto3[crt] to a compatible 1.43.x version alongside this stubs update, or
• Keeping boto3-stubs at a version aligned with the pinned boto3==1.42.70 (e.g., boto3-stubs==1.42.70).

[aws-sam-cli-bot]

Code Review Results

Reviewed: a905529..d9dde6c
Files: 3
Comments: 1

[aws-sam-cli-bot]

[GENERAL] Version skew between boto3-stubs 1.43.4 and boto3 runtime 1.42.70.

This PR bumps boto3-stubs to 1.43.4 and all mypy-boto3-* packages to 1.43.x, but the boto3 runtime remains pinned at 1.42.70 (in pyproject.toml line 38 and the lock files). The botocore package also remains at 1.42.85.

The boto3-stubs project versions its type stubs to correspond to specific boto3 releases. A full minor version gap (1.42 vs 1.43) means:

• Type stubs may reference methods, parameters, or return types added in boto3 1.43.x that don't exist in the installed 1.42.70 runtime — causing type checking to pass for code that would fail at runtime (false negatives).
• If method signatures changed between 1.42 and 1.43, valid runtime code could be flagged as type errors (false positives).

Either boto3 should be bumped to 1.43.x to match the stubs, or the stubs should stay aligned with the current boto3==1.42.70 pin.

[aws-sam-cli-bot]

Code Review Results

Reviewed: c96d66e..524d5cd
Files: 3
Comments: 1

[aws-sam-cli-bot]

[GENERAL] Version skew between boto3-stubs 1.43.5 and the pinned boto3 1.42.70 runtime.

This PR bumps boto3-stubs to 1.43.5 and all mypy-boto3-* subpackages to 1.43.x, while the corresponding runtime stays on the 1.42 series:

• boto3[crt]==1.42.70 — pinned in pyproject.toml line 38 and still shown as a context (unchanged) line at reproducible-linux.txt:77
• botocore[crt]==1.42.85 — context line at reproducible-linux.txt:87
• botocore-stubs==1.42.41 — context line at reproducible-linux.txt:93

The boto3-stubs project versions its stubs to correspond to specific boto3 releases (the stub version tracks the boto3 version whose API surface it describes). A full minor-version gap (1.43.x stubs vs 1.42.70 runtime) means:

• Type checking may silently approve code that calls attributes/parameters added in boto3 1.43 but not present at runtime in 1.42.70, producing AttributeError or unexpected TypeError when the code actually runs.
• Method signatures or TypedDict shapes that changed in the 1.43 cycle (added required keys, removed deprecated ones) will mypy-check against the wrong reality.
• The same mismatch exists for botocore-stubs==1.42.41, which is not being bumped here at all.

This was raised in prior automated reviews and has not been explicitly dismissed.

Two reasonable resolutions:

1. Hold boto3-stubs and the mypy-boto3-* subpackages on 1.42.x (matching the boto3/botocore runtime) until the runtime is bumped alongside them — e.g., adjust the Dependabot group or ignore rule so stub and runtime bumps are coupled.
2. In the same PR, bump boto3[crt], botocore[crt], and botocore-stubs to the matching 1.43 line (updating pyproject.toml and regenerating all three reproducible-*.txt lock files), so stubs and runtime stay in sync.

The same fix applies identically to requirements/reproducible-mac.txt and requirements/reproducible-win.txt, which carry the same version pattern.

[aws-sam-cli-bot]

Code Review Results

Reviewed: 1aeab0a..176d5ab
Files: 3
Comments: 1

[aws-sam-cli-bot]

[GENERAL] Version skew between boto3-stubs 1.43.6 and the pinned boto3 1.42.70 runtime.

This PR bumps boto3-stubs to 1.43.6 and every mypy-boto3-* subpackage to 1.43.x, but the corresponding runtime dependencies stay on the 1.42 series:

• boto3[crt]==1.42.70 — pinned in pyproject.toml line 38, still shown as an unchanged context line at requirements/reproducible-linux.txt:77 (and identically at lines 77 of reproducible-mac.txt / reproducible-win.txt).
• botocore[crt]==1.42.85 — unchanged context line at requirements/reproducible-linux.txt:87 (and same location in the mac/win files).

The boto3-stubs / mypy-boto3-* packages published by the mypy-boto3-builder project are regenerated to match specific boto3/botocore releases. Running 1.43.x stubs against a 1.42.70 runtime means the type checker sees a different surface than what actually executes:

• Stubs may declare new client methods, operation names, or parameter keys added in 1.43 that do not exist on the installed boto3 / botocore, so code that type-checks cleanly can still raise AttributeError / ParamValidationError at runtime.
• Stubs may tighten or drop signatures that the 1.42.70 runtime still accepts, producing false positives that obscure the real type errors these stubs exist to catch.
• The gap is a full minor version (and growing — boto3 ships new minor versions frequently), so drift is expected to get worse, not better.

Either bump boto3[crt] (and let botocore[crt] follow) in pyproject.toml to a matching 1.43.x release and regenerate all three reproducible lock files, or hold the stubs back so their major/minor line matches the pinned boto3. Bumping the stubs alone while keeping the runtime on 1.42.70 is the one combination you want to avoid.