aws-sdk-core 3.258.0 → 3.260.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: bc80ef2341af204770ef52ad2e5699cd177f6f843dc9a44af41368b7db1ecb16
-  data.tar.gz: 563107c56918f9b729c31acca7e26ba0cc22f86c1411d7d45458b7601f00f5da
+  metadata.gz: fdf3489f3be6d6fe071ddf109dc612c7049e906ef12f425d009e7a58bfc746bb
+  data.tar.gz: a0cfa6a42abe97a7cf38238ab4ad6b3a29aabd5d9f6f18532460595a9af9aeac
 SHA512:
-  metadata.gz: b4afb42315071ab7fb70196c9e51e58c5c7791b7fb07e0c68fa896c7cd46c40a4aa50d05e8ac0783a1f5c5ba53c77229b4883409f41d4a0eca7763c5f88f4084
-  data.tar.gz: '059b9e1fd9813fc6f228ea2a7123b9cb05a883b910829ff04f535c0dfea2ac581e078cae3b4271f4a5672e0a4d1cccee25a6ff303ac14fd5d5ce68040d0a6bb8'
+  metadata.gz: bd1b2e75d6997cd9474986a6dffb87adee2d9aecfcdaf85f70ed9633a3cb4bb21e30bc11faea17e68b945a6aa180c23e900ed95c256b68f56f09cdd86f35d974
+  data.tar.gz: 6f126a87838230567b55780f57e6ad85019480cea159b9b7f504ed9309d8e7675adf0232ec60fdaeb583b4117aadab4fa8e36fed111ec42a0026f3e53c60df13

data/CHANGELOG.md

@@ -1,6 +1,26 @@
 Unreleased Changes
 ------------------
 
+3.260.0 (2026-10-21)
+------------------
+
+* Issue - Remove the `AAA Certificate Services` root from the bundled CA file. It cross-signed eMudhra intermediate CAs whose private keys were compromised. This only affects applications that opt in with `Aws.use_bundled_cert!` and use it to reach non-AWS endpoints; AWS service endpoints are not affected.
+
+* Feature - Bump the minimum version of the aws-eventstream dependency.
+
+3.259.0 (2026-10-20)
+------------------
+
+* Feature - Updated Aws::STS::Client with the latest API changes.
+
+* Feature - Updated Aws::SSOOIDC::Client with the latest API changes.
+
+* Feature - Updated Aws::SSO::Client with the latest API changes.
+
+* Feature - Updated Aws::Signin::Client with the latest API changes.
+
+* Feature - Standardize clock skew correction: use a 4 minute detection threshold and an NTP-style midpoint calculation, refresh the stored correction from every response so a stale value can heal, and ignore cached (`Age` header) and slow (over 15 minute) responses. Add a `disable_clock_skew_correction` option (`AWS_DISABLE_CLOCK_SKEW_CORRECTION`) that takes precedence over `correct_clock_skew`, which continues to work when the new option is unset.
+
 3.258.0 (2026-10-19)
 ------------------
 

data/VERSION

@@ -1 +1 @@
-3.258.0
+3.260.0

data/ca-bundle.crt

@@ -851,32 +851,6 @@ fhiYtUU79nm06PcaewaD+9CL2rvHvRirCG88gGtAPxkZumWK5r7VXNM21+9AUiRg
 OGcEMeyP84LG3rlV8zsxkVrctQgVrXYlCg17LofiDKYGvCYQbTed7N14jHyAxfDZ
 d0jQ
 -----END CERTIFICATE-----
-# CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
------BEGIN CERTIFICATE-----
-MIIEMjCCAxqgAwIBAgIBATANBgkqhkiG9w0BAQUFADB7MQswCQYDVQQGEwJHQjEb
-MBkGA1UECAwSR3JlYXRlciBNYW5jaGVzdGVyMRAwDgYDVQQHDAdTYWxmb3JkMRow
-GAYDVQQKDBFDb21vZG8gQ0EgTGltaXRlZDEhMB8GA1UEAwwYQUFBIENlcnRpZmlj
-YXRlIFNlcnZpY2VzMB4XDTA0MDEwMTAwMDAwMFoXDTI4MTIzMTIzNTk1OVowezEL
-MAkGA1UEBhMCR0IxGzAZBgNVBAgMEkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4GA1UE
-BwwHU2FsZm9yZDEaMBgGA1UECgwRQ29tb2RvIENBIExpbWl0ZWQxITAfBgNVBAMM
-GEFBQSBDZXJ0aWZpY2F0ZSBTZXJ2aWNlczCCASIwDQYJKoZIhvcNAQEBBQADggEP
-ADCCAQoCggEBAL5AnfRu4ep2hxxNRUSOvkbIgwadwSr+GB+O5AL686tdUIoWMQua
-BtDFcCLNSS1UY8y2bmhGC1Pqy0wkwLxyTurxFa70VJoSCsN6sjNg4tqJVfMiWPPe
-3M/vg4aijJRPn2jymJBGhCfHdr/jzDUsi14HZGWCwEiwqJH5YZ92IFCokcdmtet4
-YgNW8IoaE+oxox6gmf049vYnMlhvB/VruPsUK6+3qszWY19zjNoFmag4qMsXeDZR
-rOme9Hg6jc8P2ULimAyrL58OAd7vn5lJ8S3frHRNG5i1R8XlKdH5kBjHYpy+g8cm
-ez6KJcfA3Z3mNWgQIJ2P2N7Sw4ScDV7oL8kCAwEAAaOBwDCBvTAdBgNVHQ4EFgQU
-oBEKIz6W8Qfs4q8p74Klf9AwpLQwDgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQF
-MAMBAf8wewYDVR0fBHQwcjA4oDagNIYyaHR0cDovL2NybC5jb21vZG9jYS5jb20v
-QUFBQ2VydGlmaWNhdGVTZXJ2aWNlcy5jcmwwNqA0oDKGMGh0dHA6Ly9jcmwuY29t
-b2RvLm5ldC9BQUFDZXJ0aWZpY2F0ZVNlcnZpY2VzLmNybDANBgkqhkiG9w0BAQUF
-AAOCAQEACFb8AvCb6P+k+tZ7xkSAzk/ExfYAWMymtrwUSWgEdujm7l3sAg9g1o1Q
-GE8mTgHj5rCl7r+8dFRBv/38ErjHT1r0iWAFf2C3BUrz9vHCv8S5dIa2LX1rzNLz
-Rt0vxuBqw8M0Ayx9lt1awg6nCpnBBYurDC/zXDrPbDdVCYfeU0BsWO/8tqtlbgT2
-G9w84FoVxp7Z8VlIMCFlA2zs6SFz7JsDoeA3raAVGI/6ugLOpyypEBMs1OUIJqsi
-l2D4kF501KKaU73yqWjgom7C12yxow+ev+to51byrvLjKzg6CYG1a4XXvi3tPxq3
-smPi9WIsgtRqAEFQ8TmDn5XpNpaYbg==
------END CERTIFICATE-----
 # CN=COMODO Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
 -----BEGIN CERTIFICATE-----
 MIIEHTCCAwWgAwIBAgIQToEtioJl4AsC7j41AkblPTANBgkqhkiG9w0BAQUFADCB

data/lib/aws-sdk-core/plugins/retries/clock_skew.rb

@@ -5,17 +5,18 @@ module Aws
     module Retries
       # @api private
       class ClockSkew
-        CLOCK_SKEW_THRESHOLD = 5 * 60 # five minutes
+        # Skew detection threshold in seconds (4 minutes).
+        CLOCK_SKEW_THRESHOLD = 4 * 60
+
+        # Longest request round trip whose skew measurement is trusted (15 minutes).
+        MAX_TRUSTED_REQUEST_DURATION = 15 * 60
 
         def initialize
           @mutex = Mutex.new
-          # clock_corrections are recorded only on errors
-          # and only when time difference is greater than the
-          # CLOCK_SKEW_THRESHOLD
+          # Clock corrections applied to the signing timestamp, recorded on every response.
           @endpoint_clock_corrections = Hash.new(0)
 
-          # estimated_skew is calculated on every request
-          # and is used to estimate a TTL for requests
+          # Estimated skew, calculated on every request and used only to estimate a TTL.
           @endpoint_estimated_skews = Hash.new(nil)
         end
 
@@ -36,26 +37,23 @@ module Aws
           @mutex.synchronize { @endpoint_estimated_skews[normalized_endpoint(endpoint)] }
         end
 
-        # Determines whether a request has clock skew by comparing
-        # the current time against the server's time in the response
+        # Whether a response indicates skew large enough to warrant a retry; records nothing.
         # @param context [Seahorse::Client::RequestContext]
-        def clock_skewed?(context)
-          server_time = server_time(context.http_response)
-          !!server_time &&
-            (Time.now.utc - server_time).abs > CLOCK_SKEW_THRESHOLD
+        # @param sent_at [Time, nil] raw (pre-skew) send time, for the midpoint calculation
+        def clock_skewed?(context, sent_at = nil)
+          candidate = candidate_skew(context, sent_at)
+          !!candidate && candidate.abs > CLOCK_SKEW_THRESHOLD
         end
 
-        # Called only on clock skew related errors
-        # Update the stored clock skew correction value for an endpoint
-        # from the server's time in the response
+        # Called on every response; records the skew candidate when one can be computed.
         # @param context [Seahorse::Client::RequestContext]
-        def update_clock_correction(context)
-          endpoint = context.http_request.endpoint
-          now_utc = Time.now.utc
-          server_time = server_time(context.http_response)
-          return unless server_time && (now_utc - server_time).abs > CLOCK_SKEW_THRESHOLD
+        # @param sent_at [Time, nil] raw (pre-skew) send time, for the midpoint calculation
+        def update_clock_correction(context, sent_at = nil)
+          candidate = candidate_skew(context, sent_at)
+          return if candidate.nil?
 
-          set_clock_correction(normalized_endpoint(endpoint), server_time - now_utc)
+          endpoint = context.http_request.endpoint
+          set_clock_correction(normalized_endpoint(endpoint), candidate)
         end
 
         # Called for every request
@@ -75,6 +73,26 @@ module Aws
 
         private
 
+        # Single source of truth for skew computation; returns a Float skew or nil.
+        # @param context [Seahorse::Client::RequestContext]
+        # @param sent_at [Time, nil] raw (pre-skew) send time; midpoint when present, else server - now
+        # @return [Float, nil]
+        def candidate_skew(context, sent_at = nil)
+          response = context.http_response
+          server_time = server_time(response)
+          # No candidate if the Date header is absent/unparseable or the response was cached.
+          return nil if server_time.nil? || response.headers['age']
+          return server_time - Time.now.utc unless sent_at
+
+          received_at = Time.now.utc
+          elapsed = received_at - sent_at
+          # Discard if the request was too slow for the measurement to be trusted.
+          return nil if elapsed > MAX_TRUSTED_REQUEST_DURATION
+
+          # Midpoint formula (NTP clock offset, RFC 5905 section 8).
+          server_time - (sent_at + (elapsed / 2.0))
+        end
+
         ##
         # @param endpoint [URI, String]
         #     the endpoint to normalize

data/lib/aws-sdk-core/plugins/retries/error_inspector.rb

@@ -53,7 +53,8 @@ module Aws
           ]
         )
 
-        # See: https://github.com/aws/aws-sdk-net/blob/5810dfe401e0eac2e59d02276d4b479224b4538e/sdk/src/Core/Amazon.Runtime/Pipeline/RetryHandler/RetryPolicy.cs#L78
+        # Error codes that may indicate clock skew; retryable only when the
+        # computed skew exceeds the detection threshold.
         CLOCK_SKEW_ERRORS = Set.new(
           [
             'RequestTimeTooSkewed',
@@ -61,6 +62,7 @@ module Aws
             'InvalidSignatureException',
             'SignatureDoesNotMatch',
             'AuthFailure',
+            'AccessDeniedException',
             'RequestInTheFuture'
           ]
         )
@@ -113,8 +115,11 @@ module Aws
         end
 
         def clock_skew?(context)
+          return false if clock_skew_correction_disabled?(context.config)
+
+          sent_at = context.metadata[:clock_skew_request_sent_at]
           CLOCK_SKEW_ERRORS.include?(@name) &&
-            context.config.clock_skew.clock_skewed?(context)
+            context.config.clock_skew.clock_skewed?(context, sent_at)
         end
 
         def retryable?(context)
@@ -130,6 +135,11 @@ module Aws
 
         private
 
+        def clock_skew_correction_disabled?(config)
+          config.respond_to?(:disable_clock_skew_correction) &&
+            config.disable_clock_skew_correction
+        end
+
         def refreshable_credentials?(context)
           context.config.credentials.respond_to?(:refresh!)
         end

data/lib/aws-sdk-core/plugins/retry_errors.rb

@@ -146,12 +146,25 @@ module Aws
         default: true,
         doc_type: 'Boolean',
         docstring: <<~DOCS) do |cfg|
-          Used only in `standard` and `adaptive` retry modes. Specifies whether to apply
-          a clock skew correction and retry requests with skewed client clocks.
+          Used only in `standard` and `adaptive` retry modes. Specifies whether
+          to apply a clock skew correction and retry requests with skewed client
+          clocks. Takes effect only when `disable_clock_skew_correction` is not set.
         DOCS
         resolve_correct_clock_skew(cfg)
       end
 
+      option(
+        :disable_clock_skew_correction,
+        doc_type: 'Boolean',
+        docstring: <<~DOCS) do |cfg|
+          Used only in `standard` and `adaptive` retry modes. When `true`, the
+          SDK does not apply a clock skew correction, does not update its stored
+          skew from responses, and does not retry clock skew errors. Clock skew
+          correction is enabled by default.
+        DOCS
+        resolve_disable_clock_skew_correction(cfg)
+      end
+
       # @api private undocumented
       option(:client_rate_limiter) { Retries::ClientRateLimiter.new }
 
@@ -246,6 +259,23 @@ module Aws
           end
           value == 'true'
         end
+
+        def resolve_disable_clock_skew_correction(cfg)
+          value = ENV['AWS_DISABLE_CLOCK_SKEW_CORRECTION'] ||
+                  Aws.shared_config.disable_clock_skew_correction(profile: cfg.profile)
+          # When the canonical option is unset, fall back to the
+          # correct_clock_skew option (disabled == !correct_clock_skew).
+          return !cfg.correct_clock_skew if value.nil?
+
+          # Raise if provided value is not true or false
+          if value != 'true' && value != 'false'
+            raise ArgumentError,
+                  'Must provide either `true` or `false` for '\
+                    'disable_clock_skew_correction profile option or for '\
+                    'ENV[\'AWS_DISABLE_CLOCK_SKEW_CORRECTION\']'
+          end
+          value == 'true'
+        end
       end
 
       class Handler < Seahorse::Client::Handler
@@ -279,11 +309,12 @@ module Aws
             config.endpoint_cache.delete(key)
           end
 
-          # Clock correction needs to be updated from the response even when
-          # the request is not retryable but should only be updated
-          # in the case of clock skew errors
-          if error_inspector.clock_skew?(context)
-            config.clock_skew.update_clock_correction(context)
+          # Record clock correction and estimated skew from every response
+          # (success or error) unless correction is disabled. Recording on every
+          # response lets a stale or bad value be healed by the next response.
+          unless clock_skew_correction_disabled?(config)
+            sent_at = context.metadata[:clock_skew_request_sent_at]
+            config.clock_skew.update_clock_correction(context, sent_at)
           end
 
           # Estimated skew needs to be updated on every request
@@ -321,6 +352,13 @@ module Aws
           RetryErrors.new_retries?
         end
 
+        # True when clock skew correction is turned off. The fallback
+        # correct_clock_skew option is folded in by the option resolver.
+        def clock_skew_correction_disabled?(config)
+          config.respond_to?(:disable_clock_skew_correction) &&
+            config.disable_clock_skew_correction
+        end
+
         def with_metric(retry_mode, &block)
           Aws::Plugins::UserAgent.metric("RETRY_MODE_#{retry_mode.upcase}", &block)
         end

data/lib/aws-sdk-core/plugins/sign.rb

@@ -190,19 +190,30 @@ module Aws
         end
 
         def apply_clock_skew(context, req)
-          if context.config.respond_to?(:clock_skew) &&
-             context.config.clock_skew &&
-             context.config.correct_clock_skew
-
-            endpoint = context.http_request.endpoint
-            skew = context.config.clock_skew.clock_correction(endpoint)
-            if skew.abs.positive?
-              req.headers['X-Amz-Date'] =
-                (Time.now.utc + skew).strftime('%Y%m%dT%H%M%SZ')
-            end
+          return unless context.config.respond_to?(:clock_skew) &&
+                        context.config.clock_skew &&
+                        clock_skew_correction_enabled?(context.config)
+
+          # Capture the raw, pre-skew send time for this attempt for the midpoint calculation.
+          context.metadata[:clock_skew_request_sent_at] = Time.now.utc
+
+          endpoint = context.http_request.endpoint
+          skew = context.config.clock_skew.clock_correction(endpoint)
+          if skew.abs.positive?
+            req.headers['X-Amz-Date'] =
+              (Time.now.utc + skew).strftime('%Y%m%dT%H%M%SZ')
           end
         end
 
+        # Clock skew correction is on unless disabled by the option or the correct_clock_skew fallback.
+        def clock_skew_correction_enabled?(config)
+          if config.respond_to?(:disable_clock_skew_correction)
+            return !config.disable_clock_skew_correction
+          end
+
+          !config.respond_to?(:correct_clock_skew) || config.correct_clock_skew
+        end
+
       end
 
       # @api private

data/lib/aws-sdk-core/plugins/signature_v4.rb

@@ -109,7 +109,10 @@ module Aws
 
           if context.config.respond_to?(:clock_skew) &&
              context.config.clock_skew &&
-             context.config.correct_clock_skew
+             clock_skew_correction_enabled?(context.config)
+
+            # Capture the raw, pre-skew send time for this attempt.
+            context.metadata[:clock_skew_request_sent_at] = Time.now.utc
 
             endpoint = context.http_request.endpoint
             skew = context.config.clock_skew.clock_correction(endpoint)
@@ -138,6 +141,15 @@ module Aws
           context[:string_to_sign] = signature.string_to_sign
         end
 
+        # Clock skew correction is on unless disabled by the option or the correct_clock_skew fallback.
+        def clock_skew_correction_enabled?(config)
+          if config.respond_to?(:disable_clock_skew_correction)
+            return !config.disable_clock_skew_correction
+          end
+
+          !config.respond_to?(:correct_clock_skew) || config.correct_clock_skew
+        end
+
         # @api private
         def apply_authtype(context)
           if context.operation['authtype'].eql?('v4-unsigned-body') &&

data/lib/aws-sdk-core/shared_config.rb

@@ -228,6 +228,7 @@ module Aws
       :retry_mode,
       :adaptive_retry_wait_to_fill,
       :correct_clock_skew,
+      :disable_clock_skew_correction,
       :request_checksum_calculation,
       :response_checksum_validation,
       :csm_client_id,

data/lib/aws-sdk-signin/client.rb

@@ -199,13 +199,20 @@ module Aws::Signin
     #     the required types.
     #
     #   @option options [Boolean] :correct_clock_skew (true)
-    #     Used only in `standard` and `adaptive` retry modes. Specifies whether to apply
-    #     a clock skew correction and retry requests with skewed client clocks.
+    #     Used only in `standard` and `adaptive` retry modes. Specifies whether
+    #     to apply a clock skew correction and retry requests with skewed client
+    #     clocks. Takes effect only when `disable_clock_skew_correction` is not set.
     #
     #   @option options [String] :defaults_mode ("legacy")
     #     See {Aws::DefaultsModeConfiguration} for a list of the
     #     accepted modes and the configuration defaults that are included.
     #
+    #   @option options [Boolean] :disable_clock_skew_correction
+    #     Used only in `standard` and `adaptive` retry modes. When `true`, the
+    #     SDK does not apply a clock skew correction, does not update its stored
+    #     skew from responses, and does not retry clock skew errors. Clock skew
+    #     correction is enabled by default.
+    #
     #   @option options [Boolean] :disable_host_prefix_injection (false)
     #     When `true`, the SDK will not prepend the modeled host prefix to the endpoint.
     #
@@ -983,7 +990,7 @@ module Aws::Signin
         tracer: tracer
       )
       context[:gem_name] = 'aws-sdk-core'
-      context[:gem_version] = '3.258.0'
+      context[:gem_version] = '3.260.0'
       Seahorse::Client::Request.new(handlers, context)
     end
 

data/lib/aws-sdk-signin.rb

@@ -56,7 +56,7 @@ module Aws::Signin
   autoload :EndpointProvider, 'aws-sdk-signin/endpoint_provider'
   autoload :Endpoints, 'aws-sdk-signin/endpoints'
 
-  GEM_VERSION = '3.258.0'
+  GEM_VERSION = '3.260.0'
 
 end
 

data/lib/aws-sdk-sso/client.rb

@@ -199,13 +199,20 @@ module Aws::SSO
     #     the required types.
     #
     #   @option options [Boolean] :correct_clock_skew (true)
-    #     Used only in `standard` and `adaptive` retry modes. Specifies whether to apply
-    #     a clock skew correction and retry requests with skewed client clocks.
+    #     Used only in `standard` and `adaptive` retry modes. Specifies whether
+    #     to apply a clock skew correction and retry requests with skewed client
+    #     clocks. Takes effect only when `disable_clock_skew_correction` is not set.
     #
     #   @option options [String] :defaults_mode ("legacy")
     #     See {Aws::DefaultsModeConfiguration} for a list of the
     #     accepted modes and the configuration defaults that are included.
     #
+    #   @option options [Boolean] :disable_clock_skew_correction
+    #     Used only in `standard` and `adaptive` retry modes. When `true`, the
+    #     SDK does not apply a clock skew correction, does not update its stored
+    #     skew from responses, and does not retry clock skew errors. Clock skew
+    #     correction is enabled by default.
+    #
     #   @option options [Boolean] :disable_host_prefix_injection (false)
     #     When `true`, the SDK will not prepend the modeled host prefix to the endpoint.
     #
@@ -696,7 +703,7 @@ module Aws::SSO
         tracer: tracer
       )
       context[:gem_name] = 'aws-sdk-core'
-      context[:gem_version] = '3.258.0'
+      context[:gem_version] = '3.260.0'
       Seahorse::Client::Request.new(handlers, context)
     end
 

data/lib/aws-sdk-sso.rb

@@ -56,7 +56,7 @@ module Aws::SSO
   autoload :EndpointProvider, 'aws-sdk-sso/endpoint_provider'
   autoload :Endpoints, 'aws-sdk-sso/endpoints'
 
-  GEM_VERSION = '3.258.0'
+  GEM_VERSION = '3.260.0'
 
 end
 

data/lib/aws-sdk-ssooidc/client.rb

@@ -199,13 +199,20 @@ module Aws::SSOOIDC
     #     the required types.
     #
     #   @option options [Boolean] :correct_clock_skew (true)
-    #     Used only in `standard` and `adaptive` retry modes. Specifies whether to apply
-    #     a clock skew correction and retry requests with skewed client clocks.
+    #     Used only in `standard` and `adaptive` retry modes. Specifies whether
+    #     to apply a clock skew correction and retry requests with skewed client
+    #     clocks. Takes effect only when `disable_clock_skew_correction` is not set.
     #
     #   @option options [String] :defaults_mode ("legacy")
     #     See {Aws::DefaultsModeConfiguration} for a list of the
     #     accepted modes and the configuration defaults that are included.
     #
+    #   @option options [Boolean] :disable_clock_skew_correction
+    #     Used only in `standard` and `adaptive` retry modes. When `true`, the
+    #     SDK does not apply a clock skew correction, does not update its stored
+    #     skew from responses, and does not retry clock skew errors. Clock skew
+    #     correction is enabled by default.
+    #
     #   @option options [Boolean] :disable_host_prefix_injection (false)
     #     When `true`, the SDK will not prepend the modeled host prefix to the endpoint.
     #
@@ -1079,7 +1086,7 @@ module Aws::SSOOIDC
         tracer: tracer
       )
       context[:gem_name] = 'aws-sdk-core'
-      context[:gem_version] = '3.258.0'
+      context[:gem_version] = '3.260.0'
       Seahorse::Client::Request.new(handlers, context)
     end
 

data/lib/aws-sdk-ssooidc.rb

@@ -56,7 +56,7 @@ module Aws::SSOOIDC
   autoload :EndpointProvider, 'aws-sdk-ssooidc/endpoint_provider'
   autoload :Endpoints, 'aws-sdk-ssooidc/endpoints'
 
-  GEM_VERSION = '3.258.0'
+  GEM_VERSION = '3.260.0'
 
 end
 

data/lib/aws-sdk-sts/client.rb

@@ -201,13 +201,20 @@ module Aws::STS
     #     the required types.
     #
     #   @option options [Boolean] :correct_clock_skew (true)
-    #     Used only in `standard` and `adaptive` retry modes. Specifies whether to apply
-    #     a clock skew correction and retry requests with skewed client clocks.
+    #     Used only in `standard` and `adaptive` retry modes. Specifies whether
+    #     to apply a clock skew correction and retry requests with skewed client
+    #     clocks. Takes effect only when `disable_clock_skew_correction` is not set.
     #
     #   @option options [String] :defaults_mode ("legacy")
     #     See {Aws::DefaultsModeConfiguration} for a list of the
     #     accepted modes and the configuration defaults that are included.
     #
+    #   @option options [Boolean] :disable_clock_skew_correction
+    #     Used only in `standard` and `adaptive` retry modes. When `true`, the
+    #     SDK does not apply a clock skew correction, does not update its stored
+    #     skew from responses, and does not retry clock skew errors. Clock skew
+    #     correction is enabled by default.
+    #
     #   @option options [Boolean] :disable_host_prefix_injection (false)
     #     When `true`, the SDK will not prepend the modeled host prefix to the endpoint.
     #
@@ -2800,7 +2807,7 @@ module Aws::STS
         tracer: tracer
       )
       context[:gem_name] = 'aws-sdk-core'
-      context[:gem_version] = '3.258.0'
+      context[:gem_version] = '3.260.0'
       Seahorse::Client::Request.new(handlers, context)
     end
 

data/lib/aws-sdk-sts.rb

@@ -56,7 +56,7 @@ module Aws::STS
   autoload :EndpointProvider, 'aws-sdk-sts/endpoint_provider'
   autoload :Endpoints, 'aws-sdk-sts/endpoints'
 
-  GEM_VERSION = '3.258.0'
+  GEM_VERSION = '3.260.0'
 
 end
 

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: aws-sdk-core
 version: !ruby/object:Gem::Version
-  version: 3.258.0
+  version: 3.260.0
 platform: ruby
 authors:
 - Amazon Web Services
@@ -18,7 +18,7 @@ dependencies:
         version: '1'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 1.3.0
+        version: 1.4.1
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
@@ -28,7 +28,7 @@ dependencies:
         version: '1'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 1.3.0
+        version: 1.4.1
 - !ruby/object:Gem::Dependency
   name: aws-partitions
   requirement: !ruby/object:Gem::Requirement