What's Changed

Patch ResponseParser and remaining subclasses by @jakob-keller in #1312, #1329
Patch ResponseParser.parse() and others to prepare for upstream bump by @jakob-keller in #1347
Bump botocore dependency specification by @stj in #1323, @jakob-keller in #1348

Internal Changes

Bump codecov/codecov-action from 5.4.0 to 5.4.2 by @dependabot in #1326
Use SPDX license identifier for project metadata by @cdce8p in #1325
Update sphinx from 8.1.3 to 8.3.0 by @jakob-keller in #1327
Prevent swallowing of test cases by @jakob-keller in #1330
Bump astral-sh/setup-uv from 5 to 6 by @dependabot in #1331
Avoid persisting credentials in CI/CD GitHub workflow by @jakob-keller in #1336
Prevent cache poisoning in CI/CD GitHub workflow by @jakob-keller in #1343
Prevent code injection via template expansion in CI/CD GitHub workflow by @jakob-keller in #1339
Fix code scanning alert - Workflow does not contain permissions by @jakob-keller in #1333
Pin non-trusted actions to a hash in CI/CD GitHub workflow by @jakob-keller in #1341
Zizmor integration by @jakob-keller in #1344
Bump dev dependencies by @jakob-keller in #1346
Refactor build and test CI/CD jobs into reusable workflows by @jakob-keller in #1345
Bump astral-sh/setup-uv from 6.0.0 to 6.0.1 by @dependabot in #1349

Full Changelog: 2.21.1...2.22.0