compatibility with aiobotocore 3.0.0

[bmillwood-aisi]

This package pins an exact version of the aiobotocore dependency, so I can't upgrade to aiobotocore 3.0.0 until a new version of this package is released.

To be honest, this is a transitive dependency of mine from Inspect, so I actually don't use this library directly and don't know much about what new functionality the upgrade brings. I just noticed that the version pin was preventing the upgrade and thought I should at least ensure you're aware.

By the sounds of it, allowing 2.25.2 and 2.26.0 would be very low risk (I don't really understand why that second upgrade is even a minor version bump instead of patch-level), but 3.0.0 has these marked as breaking changes:

• It is no longer possible to create "loose" sessions after the client context has exited.
• Instead of pip install aiobotocore[awscli], use pip install aiobotocore awscli or similar to install compatible versions of aiobotocore, botocore and awscli.
• Instead of pip install aiobotocore[boto3], use pip install aiobotocore boto3 or similar to install compatible versions of aiobotocore, botocore and boto3.

[casellimarco]

@terricain, it would be ideal if we could move away from a pinned exact dependency for aiobotocore, do you plan to move away from it soon?

[steventen]

Can we fix this?

[corona10]

Hi I sent a PR for this.

[ChuckJonas]

I'm also dealing with this as a blocker... Need to access a key feature in bedrock. Anything we can do to help move this PR along?

[casellimarco]

It's not a real solution, it is more a hack, but if you use uv you can override the dependencies. Other package managers, for instance Poetry, are strongly against this freedom but to me it's a life-saver feature.

[corona10]

Just sharing our situation: we’re currently solving this by maintaining an internal downstream fork, but it would be great if there were a better solution than the current approach.

[rhysemmerson]

I've been able to work around this by adding constraint overrides.

Our uv config includes this:

# pyproject.toml 

[tool.uv]
override-dependencies = [
    "aiobotocore>=3.1.2,<4",
    "boto3>=1.41.0,<2",
    "botocore>=1.41.0,<2",
    "aiofiles>=23.2.1",
]

[szabi]

The exact pin prevents us from using newer libraries which transitively also depend on boto3.

Merging PR #401 would really help.