v1.3.3

• Security: bump urllib3 floor to >=2.7.0 in boto3.in (distributed from
  canonical Installer/templates/boto3.in) to remediate CVE-2026-44431 and
  CVE-2026-44432 (both affect urllib3 ≤ 2.6.3, fixed in 2.7.0). The pinned
  boto3==1.42.94 previously resolved urllib3 transitively to 2.6.3; the new
  floor forces resolution to 2.7.0. Locks recompiled with --upgrade; other
  transitive deps refreshed to their latest in-range versions as a side effect
  (no code or behaviour change).

Full Changelog: v1.3.2...v1.3.3