build(deps): bump software.amazon.msk:aws-msk-iam-auth from 2.3.8 to 2.3.9

[dependabot]

Bumps software.amazon.msk:aws-msk-iam-auth from 2.3.8 to 2.3.9.

Release notes

Sourced from software.amazon.msk:aws-msk-iam-auth's releases.

2.3.9

What's Changed

Bug fixes

• Fixed credential resolution failures when dualstack endpoints are enabled (AWS_USE_DUALSTACK_ENDPOINT, the aws.useDualstackEndpoint system property, or use_dualstack_endpoint in the AWS config profile). (#252, fixes #248)
  • Removed the explicit STS endpoint override. Endpoint resolution is now delegated to the AWS SDK's endpoint ruleset, which resolves regional, dualstack, and FIPS endpoints correctly. Resolved endpoints for existing non-dualstack regional configurations are unchanged.
  • With dualstack enabled and no awsStsRegion configured, provider construction now fails fast with an actionable error naming the awsStsRegion JAAS option, instead of repeatedly retrying the nonexistent sts.aws-global.api.aws hostname.
  • When the last configured credential provider (for example the awsRoleArn STS provider) fails and the chain falls back to the default providers, a WARN is now logged naming the failed provider, so the connection no longer silently authenticates as an unintended ambient identity. Setting awsAddDefaultProviders="false" remains the way to fail fast instead of falling back.
  • fipsEnabled is now set on the STS client only when the awsShouldUseFips JAAS option requests it, so ambient FIPS configuration is honored.

Commits

• 5ef1a55 Fix/issue 248 dualstack sts endpoint (#252)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)