Update aws-sdk-sts requirement from 0.28 to 0.35 in /oktaws

[dependabot]

Updates the requirements on aws-sdk-sts to permit the latest version.

Changelog

Sourced from aws-sdk-sts's changelog.

November 2nd, 2023

Breaking Changes:

• ⚠️🎉 (smithy-rs#2916, aws-sdk-rust#536) Struct members modeled as required are no longer wrapped in Options when possible. For upgrade guidance and more info, see here.

• ⚠️🎉 (smithy-rs#1797) Add support for Sigv4A request signing. Sigv4a signing will be used automatically when appropriate for a given operation. Currently, it's used for S3 and EventBridge.

• 🐛⚠️🎉 (aws-sdk-rust#882, smithy-rs#3007) STS and SSO-based credential providers will now respect both use_fips and use_dual_stack when those settings are configured in a user's environment or profile.

• ⚠️🎉 (smithy-rs#2417, smithy-rs#3018) Retry classifiers are now configurable at the service and operation levels. Users may also define their own custom retry classifiers.

  For more information, see the guide.

• ⚠️ (smithy-rs#2917) (Behavior Break!) The SSO credentials provider is no longer enabled by default in aws-config, and so SSO profile config will no longer work out of box. The credentials-sso feature in aws-config was removed from the default features, and renamed to sso. If you need credentials from SSO, then enable the sso feature in aws-config.

• ⚠️ (smithy-rs#3011) HTTP connector configuration has changed significantly. See the upgrade guidance for details.

• ⚠️ (smithy-rs#2921) Several breaking changes were made to the aws-sigv4 API to remove the direct HTTP dependency:

  • The take_parameters and take_headers APIs were removed from SigningInstructions. Use into_parts() instead
  • The arguments of SignableRequest::new were changed to accept string types instead of types from the HTTP crate
  • SigningInstructions::apply_to_request was gated beyond an http0-compat feature flag for backwards compatibility. This API MAY be removed in a future release.
  • Several public accessors were removed from SigningInstructions.

• ⚠️ (smithy-rs#2911) In sigV4-related code, rename 'signing service' to 'signing name'. This aligns with the terminology used by the endpoint resolver.

• ⚠️ (smithy-rs#2913) All versions of SigningParams have been updated to contain an Identity as opposed to AWS credentials in &str form. Read more.

• ⚠️ (smithy-rs#2948) Update MSRV to Rust 1.70.0

• ⚠️ (smithy-rs#2973) Remove once_cell from public API.

• ⚠️ (smithy-rs#2995) Structure members with the type Option<Vec<T>> now produce an accessor with the type &[T] instead of Option<&[T]>. To determine if the field was actually set use .<field_name>.is_some().

• ⚠️ (smithy-rs#2978) The futures_core::stream::Stream trait has been removed from public API. It should not affect usual SDK use cases. If your code uses paginators, you do not need to use the Stream trait or its exntension traits, but only the next, try_next, collect, and try_collect methods are supported on PaginationStream. Other stream operations that were previously available through the trait or its extension traits can be added later in a backward compatible manner. Finally, fn_stream has been moved to be a child module of pagination_stream.

• ⚠️ (smithy-rs#2983) The futures_core::stream::Stream trait has been removed from ByteStream. The methods mentioned in the doc will continue to be supported. Other stream operations that were previously available through the trait or its extension traits can be added later in a backward compatible manner.

• ⚠️ (smithy-rs#2997) The IMDS Client builder's build() method is no longer async.

• ⚠️ (smithy-rs#3014) The API for AssumeRoleProvider has been updated to derive configuration from SdkConfig instead of ProviderConfig.

  For more information, see the Change Log Discussion

• ⚠️ (smithy-rs#3055) The future return types on traits EndpointResolver and IdentityResolver changed to new-types EndpointFuture and IdentityFuture respectively.

• ⚠️ (smithy-rs#3061) Lifetimes have been added to EndpointResolver and IdentityResolver traits.

• ⚠️ (smithy-rs#3065) Several traits have been renamed from noun form to verb form to be more idiomatic:

  • EndpointResolver -> ResolveEndpoint
  • Interceptor -> Intercept

• ⚠️ (smithy-rs#3059) PresignedRequest now returns standard-library types instead of types from the http crate. to_http_request has been renamed to_http_02x_request.

• ⚠️ (smithy-rs#3052) The credentials-process feature was added to aws-config. If you currently use no-default-features for aws-config, you MUST enable this feature to use the CredentialProcessProvider provider directly or via ~/.aws/config.

• ⚠️ (smithy-rs#3077) This change has detailed upgrade guidance. The AWS credentials cache has been replaced with a more generic identity cache.

New this release:

• 🎉 (smithy-rs#2917, aws-sdk-rust#703, aws-sdk-rust#699) The SsoCredentialsProvider now supports token refresh and is compatible with the token cache file paths the latest AWS CLI uses.
• 🐛 (smithy-rs#2958, aws-sdk-rust#873) Correctly identify HTTP 200 responses from S3 with <Error> as the root Element as errors. Note: This a behavior change and will change the error type returned by the SDK in some cases.
• 🐛 (smithy-rs#2955, aws-sdk-rust#878) Allow no_credentials to be used with all S3 operations.
• 🐛 (smithy-rs#2944, smithy-rs#2951) CustomizableOperation, created as a result of calling the .customize method on a fluent builder, ceased to be Send and Sync in the previous releases. It is now Send and Sync again.
• 🐛 (smithy-rs#1668, aws-sdk-rust#873, smithy-rs#2964) Make bucket required for request construction for S3. When bucket is not set, a different operation than intended can be triggered.
• 🐛 (smithy-rs#2926, smithy-rs#2972) Fix regression with redacting sensitive HTTP response bodies.
• 🐛 (smithy-rs#3052) A bug was fixed where the credentials-process provider was executing the subprocess in the worker thread, potentially stalling the runtime.

Crate Versions

... (truncated)

Commits

• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Superseded by #318.