diff --git a/.changes/1.28.38.json b/.changes/1.28.38.json
new file mode 100644
index 0000000000..9f9d908539
--- /dev/null
+++ b/.changes/1.28.38.json
@@ -0,0 +1,47 @@
+[
+  {
+    "category": "``appflow``",
+    "description": "[``botocore``] Add SAP source connector parallel and pagination feature",
+    "type": "api-change"
+  },
+  {
+    "category": "``apprunner``",
+    "description": "[``botocore``] App Runner adds support for Bitbucket. You can now create App Runner connection that connects to your Bitbucket repositories and deploy App Runner service with the source code stored in a Bitbucket repository.",
+    "type": "api-change"
+  },
+  {
+    "category": "``auditmanager``",
+    "description": "[``botocore``] This release marks some assessment metadata as sensitive. We added a sensitive trait to the following attributes: assessmentName, emailAddress, scope, createdBy, lastUpdatedBy, and userName.",
+    "type": "api-change"
+  },
+  {
+    "category": "``cleanrooms``",
+    "description": "[``botocore``] This release decouples member abilities in a collaboration. With this change, the member who can run queries no longer needs to be the same as the member who can receive results.",
+    "type": "api-change"
+  },
+  {
+    "category": "``datasync``",
+    "description": "[``botocore``] AWS DataSync introduces Task Reports, a new feature that provides detailed reports of data transfer operations for each task execution.",
+    "type": "api-change"
+  },
+  {
+    "category": "``neptunedata``",
+    "description": "[``botocore``] Allows customers to execute data plane actions like bulk loading graphs, issuing graph queries using Gremlin and openCypher directly from the SDK.",
+    "type": "api-change"
+  },
+  {
+    "category": "``network-firewall``",
+    "description": "[``botocore``] Network Firewall increasing pagination token string length",
+    "type": "api-change"
+  },
+  {
+    "category": "``pca-connector-ad``",
+    "description": "[``botocore``] The Connector for AD allows you to use a fully-managed AWS Private CA as a drop-in replacement for your self-managed enterprise CAs without local agents or proxy servers. Enterprises that use AD to manage Windows environments can reduce their private certificate authority (CA) costs and complexity.",
+    "type": "api-change"
+  },
+  {
+    "category": "``sagemaker``",
+    "description": "[``botocore``] Amazon SageMaker Canvas adds IdentityProviderOAuthSettings support for CanvasAppSettings",
+    "type": "api-change"
+  }
+]
\ No newline at end of file
diff --git a/CHANGELOG.rst b/CHANGELOG.rst
index 3ecc26561f..1ff9621264 100644
--- a/CHANGELOG.rst
+++ b/CHANGELOG.rst
@@ -2,6 +2,20 @@
 CHANGELOG
 =========
 
+1.28.38
+=======
+
+* api-change:``appflow``: [``botocore``] Add SAP source connector parallel and pagination feature
+* api-change:``apprunner``: [``botocore``] App Runner adds support for Bitbucket. You can now create App Runner connection that connects to your Bitbucket repositories and deploy App Runner service with the source code stored in a Bitbucket repository.
+* api-change:``auditmanager``: [``botocore``] This release marks some assessment metadata as sensitive. We added a sensitive trait to the following attributes: assessmentName, emailAddress, scope, createdBy, lastUpdatedBy, and userName.
+* api-change:``cleanrooms``: [``botocore``] This release decouples member abilities in a collaboration. With this change, the member who can run queries no longer needs to be the same as the member who can receive results.
+* api-change:``datasync``: [``botocore``] AWS DataSync introduces Task Reports, a new feature that provides detailed reports of data transfer operations for each task execution.
+* api-change:``neptunedata``: [``botocore``] Allows customers to execute data plane actions like bulk loading graphs, issuing graph queries using Gremlin and openCypher directly from the SDK.
+* api-change:``network-firewall``: [``botocore``] Network Firewall increasing pagination token string length
+* api-change:``pca-connector-ad``: [``botocore``] The Connector for AD allows you to use a fully-managed AWS Private CA as a drop-in replacement for your self-managed enterprise CAs without local agents or proxy servers. Enterprises that use AD to manage Windows environments can reduce their private certificate authority (CA) costs and complexity.
+* api-change:``sagemaker``: [``botocore``] Amazon SageMaker Canvas adds IdentityProviderOAuthSettings support for CanvasAppSettings
+
+
 1.28.37
 =======
 
diff --git a/boto3/__init__.py b/boto3/__init__.py
index a8a7aa8f23..be51626f3a 100644
--- a/boto3/__init__.py
+++ b/boto3/__init__.py
@@ -17,7 +17,7 @@
 from boto3.session import Session
 
 __author__ = 'Amazon Web Services'
-__version__ = '1.28.37'
+__version__ = '1.28.38'
 
 
 # The default Boto3 session; autoloaded when needed.
diff --git a/setup.cfg b/setup.cfg
index 324a8ac77c..695dba8c6f 100644
--- a/setup.cfg
+++ b/setup.cfg
@@ -3,7 +3,7 @@ universal = 0
 
 [metadata]
 requires_dist =
-    botocore>=1.31.37,<1.32.0
+    botocore>=1.31.38,<1.32.0
     jmespath>=0.7.1,<2.0.0
     s3transfer>=0.6.0,<0.7.0
 
diff --git a/setup.py b/setup.py
index cce8117aa2..91c605bc0e 100644
--- a/setup.py
+++ b/setup.py
@@ -13,7 +13,7 @@
 
 
 requires = [
-    'botocore>=1.31.37,<1.32.0',
+    'botocore>=1.31.38,<1.32.0',
     'jmespath>=0.7.1,<2.0.0',
     's3transfer>=0.6.0,<0.7.0',
 ]