Unpin boto3 and botocore versions

[harryzcy]

User description

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.

Description

Unpin boto3 and botocore as the bug from botocore is marked as resolved. That issue is related to urllib3 2.2.0 specifically.

Previous PRs that pinned the version: #6011, #6016

Fix: #6050

---

Generated description

Below is a concise technical summary of the changes proposed in this PR:

Updates the version requirements for boto3 in both Pipfile and setup.py, changing from a pinned version "==1.35.49" to a more flexible range ">=1.35.49,<2.0.0". This modification allows for newer versions of boto3 while maintaining compatibility with the current major version. The change addresses a previously resolved bug in botocore related to urllib3 2.2.0, demonstrating proactive dependency management and system stability improvement.

Topic	Details
Dependency Update	Updates boto3 version requirements in dependency management files to improve flexibility and address resolved issues. Modified files (2) setup.py Pipfile Latest Contributors(2) User Commit Date omryMen chore-secrets-bump-det... November 21, 2024 tsmithv11 chore-general-bump-det... November 19, 2024
Other	Other files Modified files (1) Pipfile.lock Latest Contributors(2) User Commit Date omryMen chore-secrets-bump-det... November 21, 2024 tsmithv11 chore-general-bump-det... November 19, 2024
Build System Maint.	Maintains the integrity of the build system by ensuring consistency between Pipfile and setup.py. Modified files (2) setup.py Pipfile Latest Contributors(2) User Commit Date omryMen chore-secrets-bump-det... November 21, 2024 tsmithv11 chore-general-bump-det... November 19, 2024

This pull request is reviewed by Baz. Join @harryzcy and the rest of your team on (Baz).

[Saarett]

Hi @harryzcy ,
That’s a good input, although I’m not sure it really affects anything as it is right now. If you think it is necessary to have this change, I’d appreciate it if you could resolve the conflicts, and we will rerun our tests.

Thanks!

[SayantanKhanra10]

@Saarett it does create an issue while locking dependencies if i want to use a much more newer version of boto3 in my project. I am planning to implement checkov with cdktf in my project and un-pining this will help us move forward.

@harryzcy can you please resolve the conflicts?

[harryzcy]

@Saarett @SayantanKhanra10 merge conflicts fixed

[harryzcy]

Conflict resolved

[AdamDev]

Hi @harryzcy, can you please resolve the conflicts?

[harryzcy]

Hi @harryzcy, can you please resolve the conflicts?

Resolved

[gruebel]

this will not work. this lock file was created with Python 3.10+ therefore any CI jobs running on 3.8 or 3.9 will fail