update to aws-java-sdk 1.12.638+ to resolve CVE-2024-21634)

[antonmos]

Per aws/aws-sdk-java#3077, latest AWS SDK remove dependency on software.amazon.ion/ion-java that had the cause of CVE.

[shahceg]

can this be prioritised as the sdk has already integrated this?

[speque]

This would be a very nice upgrade.

[joekiller]

There's no reason why you cannot override your specific versions or exclude a dependency with an :exclusions clause.

:dependencies [
  [amazonica 0.3.167 :exclusions [software.amazon.ion/ion-java]]
  [com.amazonaws/aws-java-sdk-core 1.12.638 :exclusions [software.amazon.ion/ion-java]]
]