Your team pinned the AWS provider with the constraint "~> 4.20" several months ago, and a .terraform.lock.hcl file currently records version 4.22.0. A newer 4.35.0 release contains a bug fix you need. You update no configuration files but want Terraform to select the latest allowable version within the existing constraint and update the lock file. Which command accomplishes this?