chore(deps): update boto3 requirement from <1.38,>=1.34 to >=1.34,<1.44

[dependabot]

Updates the requirements on boto3 to permit the latest version.

Commits

• 07953b0 Merge branch 'release-1.43.14'
• 25c77c3 Bumping version to 1.43.14
• 5e64afc Add changelog entries from botocore
• 97921f4 Merge branch 'release-1.43.13'
• 4e58a35 Merge branch 'release-1.43.13' into develop
• 1307ac2 Bumping version to 1.43.13
• c75c901 Add changelog entries from botocore
• d3f2433 Merge branch 'release-1.43.12'
• d5eddf9 Merge branch 'release-1.43.12' into develop
• 93f3a42 Bumping version to 1.43.12
• Additional commits viewable in compare view

You can trigger a rebase of this PR by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

[claude]

This widens boto3 to <1.44, but botocore on the next line stays capped at <1.38. boto3 requires a matching botocore minor internally (a boto3>=1.38 release will itself need botocore>=1.38), so this conflicts with the unchanged botocore cap — the resolver effectively can't select any boto3>=1.38 and this bump becomes a no-op (or worse, risks a mismatched pair with a laxer resolver). Bump botocore's upper bound in the same PR, e.g. botocore>=1.34,<1.44.

[claude]

Verdict: mostly harmless dependency bump, but likely ineffective as written.

This is a dependabot PR changing only one line in pyproject.toml: widening the boto3 upper bound from <1.38 to <1.44.

Should fix: the botocore constraint on the very next line is left at >=1.34,<1.38. boto3 pins a matching botocore minor version internally for each release (e.g. boto3 1.4x requires a botocore 1.4x), so any boto3 release ≥1.38 will itself require botocore>=1.38, which conflicts with this project's own <1.38 cap on botocore. In practice this means:

• With pip's dependency resolver, this widened range is a no-op — the resolver still can't select boto3>=1.38 because it would violate the botocore<1.38 constraint, so no newer boto3 actually gets installed.
• With a laxer/older resolver, you could end up with a mismatched boto3/botocore pair, which risks import errors or subtly broken AWS/Cognito calls in hive_auth_async.py at runtime.

Suggest bumping the botocore upper bound in the same PR (e.g. botocore>=1.34,<1.44) so the two stay in lockstep, or asking dependabot to handle both in one grouped update.

Not reviewed further since there is no application code change in this diff (only the version constraint in pyproject.toml).

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 99.96%. Comparing base (b9ff8c1) to head (e8241da).

Additional details and impacted files

@@           Coverage Diff           @@
##              dev     #143   +/-   ##
=======================================
  Coverage   99.96%   99.96%           
=======================================
  Files          30       30           
  Lines        2571     2571           
  Branches      297      297           
=======================================
  Hits         2570     2570           
  Partials        1        1           

Flag	Coverage Δ
unittests	99.96% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

[dependabot]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.