AmazonBedrock: raise awscli/boto3/botocore pins (3 alerts)

[jason-anthropic]

Summary

Raises the exact pins in AmazonBedrock/requirements.txt for the AWS CLI/SDK trio to current patched releases: awscli 1.32.74 → 1.45.28, with the matching botocore 1.34.74 → 1.43.28 (awscli pins botocore exactly) and boto3 1.34.74 → 1.43.28. All same-major; no other lines or files change.

Deploy on merge: none — this is a tutorial requirements file; nothing is built or published from it.

Movers

package	from → to	mode	advisories closed
awscli	1.32.74 → 1.45.28	exact-pin raise	GHSA-747p-wmpv-9c78, CVE-2026-13769, CVE-2026-18654
botocore	1.34.74 → 1.43.28	required companion (awscli 1.45.28 declares botocore==1.43.28)	—
boto3	1.34.74 → 1.43.28	matching companion (boto3/botocore share a version line)	—

The notebooks use boto3 session/client calls for Bedrock, which are stable across this range.

Verification

• uv pip compile of the file at head (Python 3.11) resolves cleanly (36 packages; awscli 1.45.28 / boto3 1.43.28 / botocore 1.43.28 / s3transfer 0.18.0).
• awscli 1.45.28 was published 2026-06-11; OSV reports no advisories at the target versions (queried 2026-08-28).

Overlap

Supersedes Dependabot #73 (awscli 1.44.38, which leaves boto3/botocore at 1.34.74 and therefore cannot install); #82 also edits this file (model-alias change on other lines) — trivial to rebase either way.

History: cut 2026-08-28.