v1.6.6

• Security: bump urllib3 floor to >=2.8.0 in boto3.in (distributed from
  canonical Installer/templates/boto3.in) to remediate CVE-2026-97687
  (HTTPS-proxy TLS configuration ignored or overridden), CVE-2026-97688
  (infinite loop on chunked Deflate responses) and CVE-2026-97689 (unbounded
  chunk-size-line buffering). All three are fixed in urllib3 2.8.0; the previous
  >=2.7.0 floor resolved to 2.7.0, which is affected by all three. Locks
  recompiled with --upgrade; other transitive deps refreshed to their latest
  in-range versions as a side effect (no code or behaviour change).

Full Changelog: v1.6.5...v1.6.6