Bump aiobotocore from 3.7.0 to 3.8.0

[dependabot]

Bumps aiobotocore from 3.7.0 to 3.8.0.

Release notes

Sourced from aiobotocore's releases.

3.8.0

• bump botocore dependency specification to support "botocore >= 1.43.3, < 1.43.47" (#1605, #1606, #1635, #1651, #1655)
• port botocore 1.43.24's long-polling no-retry signal (handler_response is False) through the async retry path so retries don't block the event loop with a synchronous sleep during backoff (#1606)
• fix AIOHTTPSession/HttpxSession blocking the event loop on the first request per proxy: SSL context creation (certificate loading via load_verify_locations/load_cert_chain) now runs in a thread via asyncio.to_thread instead of directly on the loop (closes #1469) (#1587)
• restructure StreamingBody to subclass botocore.response.StreamingBody (dropping the wrapt.ObjectProxy wrapper) and add full httpx API parity — read(amt), readinto(), readlines(), async iteration, iter_lines()/iter_chunks(), tell(), close() — where read(amt) previously raised ValueError; note that AioStreamingBody.__aenter__ now returns self instead of the raw aiohttp ClientResponse (use .raw_stream for the underlying response) (closes #1365) (#1539)

Changelog

Sourced from aiobotocore's changelog.

3.8.0 (2026-07-17) ^^^^^^^^^^^^^^^^^^

• bump botocore dependency specification to support "botocore >= 1.43.3, < 1.43.47" (#1605, #1606, #1635, #1651, #1655)
• port botocore 1.43.24's long-polling no-retry signal (handler_response is False) through the async retry path so retries don't block the event loop with a synchronous sleep during backoff (#1606)
• fix AIOHTTPSession/HttpxSession blocking the event loop on the first request per proxy: SSL context creation (certificate loading via load_verify_locations/load_cert_chain) now runs in a thread via asyncio.to_thread instead of directly on the loop (closes #1469) (#1587)
• restructure StreamingBody to subclass botocore.response.StreamingBody (dropping the wrapt.ObjectProxy wrapper) and add full httpx API parity — read(amt), readinto(), readlines(), async iteration, iter_lines()/iter_chunks(), tell(), close() — where read(amt) previously raised ValueError; note that AioStreamingBody.__aenter__ now returns self instead of the raw aiohttp ClientResponse (use .raw_stream for the underlying response) (closes #1365) (#1539)

Commits

• 7f4d930 Release v3.8.0 (#1663)
• 52de892 fix(draft-release): commit to the release branch, not main (#1662)
• 72814ab chore: bump eval model pins to Opus 4.8 / Sonnet 5 and refresh stale cost rat...
• eb08507 Define explicit StreamingBody API, add httpx read(amt) support (#1539)
• c0287ba Bump botocore dependency specification (#1655)
• 9a40733 build(deps-dev): bump anthropic from 0.111.0 to 0.116.0 (#1653)
• 9d013d1 build(deps): bump astral-sh/setup-uv from 8.2.0 to 8.3.2 (#1657)
• 95a7fc2 build(deps-dev): bump docker from 7.1.0 to 7.2.0 (#1659)
• 47b1f00 build(deps): bump anthropics/claude-code-action from 1.0.152 to 1.0.170 (#1658)
• d5b0eec build(deps-dev): bump pytest-rerunfailures from 16.3 to 16.4 (#1654)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Superseded by #1798.