chore(deps): update all minor dependencies - #570
Open
renovate[bot] wants to merge 1 commit into
Open
Conversation
renovate
Bot
force-pushed
the
renovate/all-minor
branch
from
April 13, 2026 11:33
9be58f9 to
e7b3e94
Compare
renovate
Bot
changed the title
renovate
Bot
force-pushed
the
renovate/all-minor
branch
from
April 23, 2026 12:49
e7b3e94 to
b4e0bdd
Compare
renovate
Bot
changed the title
renovate
Bot
force-pushed
the
renovate/all-minor
branch
3 times, most recently
from
April 30, 2026 20:25
fbc1ccb to
df14697
Compare
renovate
Bot
force-pushed
the
renovate/all-minor
branch
6 times, most recently
from
May 13, 2026 22:33
36022ac to
bcd2f45
Compare
renovate
Bot
force-pushed
the
renovate/all-minor
branch
4 times, most recently
from
May 21, 2026 19:42
997ec0e to
008dd9c
Compare
renovate
Bot
force-pushed
the
renovate/all-minor
branch
8 times, most recently
from
May 29, 2026 19:51
7017dc3 to
116ee65
Compare
renovate
Bot
force-pushed
the
renovate/all-minor
branch
from
May 30, 2026 22:39
116ee65 to
c977044
Compare
renovate
Bot
force-pushed
the
renovate/all-minor
branch
8 times, most recently
from
June 19, 2026 20:34
36bfdd8 to
62b3045
Compare
renovate
Bot
force-pushed
the
renovate/all-minor
branch
14 times, most recently
from
June 28, 2026 11:06
20dbfe2 to
c1531fb
Compare
renovate
Bot
force-pushed
the
renovate/all-minor
branch
4 times, most recently
from
July 3, 2026 03:51
85c2080 to
3c01229
Compare
Production: alarms✅ Terraform Init: Plan: 0 to add, 4 to change, 0 to destroyShow summary
Show planResource actions are indicated with the following symbols:
~ update in-place
Terraform will perform the following actions:
# aws_cloudwatch_metric_alarm.api_error will be updated in-place
~ resource "aws_cloudwatch_metric_alarm" "api_error" {
id = "GitHub secret scanning: error"
~ tags = {
+ "CostCentre" = "github-secret-scanning-production"
+ "Terraform" = "true"
+ "ssc_cbrid" = "22DH"
}
~ tags_all = {
+ "CostCentre" = "github-secret-scanning-production"
+ "Terraform" = "true"
+ "ssc_cbrid" = "22DH"
}
# (18 unchanged attributes hidden)
}
# aws_cloudwatch_metric_alarm.api_secret_detected will be updated in-place
~ resource "aws_cloudwatch_metric_alarm" "api_secret_detected" {
id = "GitHub secret scanning: secret detected"
~ tags = {
+ "CostCentre" = "github-secret-scanning-production"
+ "Terraform" = "true"
+ "ssc_cbrid" = "22DH"
}
~ tags_all = {
+ "CostCentre" = "github-secret-scanning-production"
+ "Terraform" = "true"
+ "ssc_cbrid" = "22DH"
}
# (18 unchanged attributes hidden)
}
# aws_kms_key.sns_cloudwatch will be updated in-place
~ resource "aws_kms_key" "sns_cloudwatch" {
id = "17a3cee1-81fc-462c-99b7-e23b21612aa3"
~ tags = {
+ "ssc_cbrid" = "22DH"
# (2 unchanged elements hidden)
}
~ tags_all = {
+ "ssc_cbrid" = "22DH"
# (2 unchanged elements hidden)
}
# (12 unchanged attributes hidden)
}
# aws_sns_topic.cloudwatch_alarm will be updated in-place
~ resource "aws_sns_topic" "cloudwatch_alarm" {
id = "arn:aws:sns:ca-central-1:283582579564:github-secret-scanning-cloudwatch-alarm"
name = "github-secret-scanning-cloudwatch-alarm"
~ tags = {
+ "ssc_cbrid" = "22DH"
# (2 unchanged elements hidden)
}
~ tags_all = {
+ "ssc_cbrid" = "22DH"
# (2 unchanged elements hidden)
}
# (13 unchanged attributes hidden)
}
Plan: 0 to add, 4 to change, 0 to destroy.
─────────────────────────────────────────────────────────────────────────────
Saved the plan to: plan.tfplan
To perform exactly these actions, run the following command to apply:
terraform apply "plan.tfplan"
Show Conftest resultsWARN - plan.json - main - Cloudwatch log metric pattern is invalid: ["aws_cloudwatch_log_metric_filter.api_error"]
21 tests, 20 passed, 1 warning, 0 failures, 0 exceptions
|
Production: alert_compromise✅ Terraform Init: Plan: 0 to add, 3 to change, 0 to destroyShow summary
Show planResource actions are indicated with the following symbols:
~ update in-place
Terraform will perform the following actions:
# aws_iam_role.group_broadcast_alert_role will be updated in-place
~ resource "aws_iam_role" "group_broadcast_alert_role" {
id = "group_broadcast_alert_role"
name = "group_broadcast_alert_role"
~ tags = {
+ "CostCentre" = "github-secret-scanning-production"
+ "Terraform" = "true"
+ "ssc_cbrid" = "22DH"
}
~ tags_all = {
+ "CostCentre" = "github-secret-scanning-production"
+ "Terraform" = "true"
+ "ssc_cbrid" = "22DH"
}
# (8 unchanged attributes hidden)
# (3 unchanged blocks hidden)
}
# aws_lambda_function.broadcast_alert will be updated in-place
~ resource "aws_lambda_function" "broadcast_alert" {
id = "broadcast_alert"
tags = {}
~ tags_all = {
+ "ssc_cbrid" = "22DI"
}
# (31 unchanged attributes hidden)
# (4 unchanged blocks hidden)
}
# aws_ssm_parameter.notify_doc_api_key will be updated in-place
~ resource "aws_ssm_parameter" "notify_doc_api_key" {
id = "notify_doc_api_key"
name = "notify_doc_api_key"
~ tags = {
+ "ssc_cbrid" = "22DH"
# (2 unchanged elements hidden)
}
~ tags_all = {
+ "ssc_cbrid" = "22DH"
# (2 unchanged elements hidden)
}
# (10 unchanged attributes hidden)
}
Plan: 0 to add, 3 to change, 0 to destroy.
Warning: Argument is deprecated
with aws_iam_role.group_broadcast_alert_role,
on iam.tf line 4, in resource "aws_iam_role" "group_broadcast_alert_role":
4: managed_policy_arns = ["arn:aws:iam::aws:policy/service-role/AWSLambdaBasicExecutionRole"]
managed_policy_arns is deprecated. Use the aws_iam_role_policy_attachment
resource instead. If Terraform should exclusively manage all managed policy
attachments (the current behavior of this argument), use the
aws_iam_role_policy_attachments_exclusive resource as well.
(and one more similar warning elsewhere)
─────────────────────────────────────────────────────────────────────────────
Saved the plan to: plan.tfplan
To perform exactly these actions, run the following command to apply:
terraform apply "plan.tfplan"
Releasing state lock. This may take a few moments...
Show Conftest resultsWARN - plan.json - main - Missing Common Tags: ["aws_lambda_function.broadcast_alert"]
21 tests, 20 passed, 1 warning, 0 failures, 0 exceptions
|
Production: cloudfront✅ Terraform Init: Plan: 0 to add, 2 to change, 0 to destroyShow summary
Show planResource actions are indicated with the following symbols:
~ update in-place
Terraform will perform the following actions:
# aws_cloudfront_distribution.api will be updated in-place
~ resource "aws_cloudfront_distribution" "api" {
id = "E3JW0APMFZN4DN"
tags = {
"CostCentre" = "github-secret-scanning-production"
"Terraform" = "true"
}
~ tags_all = {
+ "ssc_cbrid" = "22DI"
# (2 unchanged elements hidden)
}
# (23 unchanged attributes hidden)
origin {
# At least one attribute in this block is (or was) sensitive,
# so its contents will not be displayed.
}
# (4 unchanged blocks hidden)
}
# aws_wafv2_web_acl.api will be updated in-place
~ resource "aws_wafv2_web_acl" "api" {
id = "ff46dbec-de07-4249-8a6f-bf03d8823194"
name = "github-secret-scanning"
~ tags = {
+ "ssc_cbrid" = "22DH"
# (2 unchanged elements hidden)
}
~ tags_all = {
+ "ssc_cbrid" = "22DH"
# (2 unchanged elements hidden)
}
# (7 unchanged attributes hidden)
# (8 unchanged blocks hidden)
}
Plan: 0 to add, 2 to change, 0 to destroy.
─────────────────────────────────────────────────────────────────────────────
Saved the plan to: plan.tfplan
To perform exactly these actions, run the following command to apply:
terraform apply "plan.tfplan"
Show Conftest results21 tests, 21 passed, 0 warnings, 0 failures, 0 exceptions
|
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
==26.3.1→==26.5.1==1.42.68→==1.43.57==7.13.4→==7.15.2==0.135.1→==0.140.7==9.0.3→==9.1.1==1.6.0→==1.7.0==2.33.0→==2.34.2==0.42.0→==0.51.0Review
Release Notes
psf/black (black)
v26.5.1Compare Source
Stable style
an inline comment (e.g.
x: list[ # pyright: ignore[...]) (#5130)# type: ignore) immediately before a# fmt: skipline, avoiding AST equivalence failures (#5139)Packaging
Documentation
(#5124)
v26.5.0Compare Source
Highlights
both new syntactic features in Python 3.15 (#5048)
performance may be slower than on existing Python versions. Wheels will be provided
once Python 3.15 is later in its release cycle. (#5127)
Stable style
# fmt: skipbeing ignored in nestedifexpressions with parenthesizedinclauses (#4903)
# fmt: offcomment inside brackets (#5097)# fmt: skipis placed on thecolon line (#5117)
Preview style
groups of same-name decorated functions (such as
@overloadgroups) in.pyistubfiles (#5021)
.pyistubfiles (#5092)
(e.g.
# type: ignore) follows the closing bracket (#5096)Packaging
Output
(#5068)
SourceASTParseErrorto distinguish source parse failures from internal safetyerrors, improving error reporting when Black's lenient parser accepts input that
ast.parse()rejects (#5080)Blackd
HTTP 500 only for genuine internal safety errors (#5080)
Integrations
match (#4916)
Documentation
(#5063)
sublackplugin is archived andunmaintained (#5082)
boto/boto3 (boto3)
v1.43.57Compare Source
=======
account: [botocore] This release adds support for the GetPrimaryEmailUpdateStatus API operation, which allows customers to retrieve the current status of a primary email address update request for an AWS account. The operation returns status information including whether the update is pending, completed, or failed.bcm-data-exports: [botocore] With this release, customers can configure their data exports to deliver CSV reports in ZIP compressed format.cleanrooms: [botocore] This release adds support for the CR.8X worker type for SQL (32 vCPU)cleanroomsml: [botocore] This release adds support for the CR.8X worker type for SQL (32 vCPU)emr-containers: [botocore] With this launch, you can now set concurrent job limits on a virtual cluster, giving you fine-grained control over how many job runs execute at once and how many can wait in queue.glue: [botocore] Adds BatchGetDataQualityRulesetEvaluationRun API to retrieve multiple runs in one call, ObservationScope and ObservationMode parameters for anomaly detection, writing evaluation results to Data Catalog tables, and custom log group paths for recommendation runs.partnercentral-account: [botocore] Adds optional headquarters location to StartProfileUpdateTask, letting partners record their headquarters as an ISO 3166 country and subdivision code on their profile. When headquarters is provided, both the country and subdivision codes are required.quicksight: [botocore] Added new Governance fields to Custom Permissions API to support Deny By Default functionality.sagemaker: [botocore] This release adds LoRA adapters, training plans, and new instance types to SageMaker inference optimization. CreateAIRecommendationJob accepts optional AdapterSource and CreateOptimizationJob accepts optional TrainingPlanArns and the ml.g7e and ml.p6-b200 families.securityagent: [botocore] AWS Security Agent adds a new task hours field that reflects the active work done for a task.v1.43.56Compare Source
=======
application-insights: [botocore] This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.1. The SDK will prioritize its most performant protocol.artifact: [botocore] Added the PutComplianceInquiryFeedback API, enabling customers to submit feedback on compliance inquiry responses. Customers can rate responses as helpful or not helpful and provide optional reason codes and comments.cognito-idp: [botocore] Amazon Cognito user pools now support the AdminGetUserAuthFactors operation, which lets administrators retrieve the configured authentication factors (such as password, SMS, email, and TOTP) available for a specific user in a user pool.endpoint-rules: [botocore] Update endpoint-rules client to latest versionneptune-graph: [botocore] Update validations for Tag Keys and KMS Key ARNs.odb: [botocore] Documentation-only update to clarify the operation-specific valid values for the externalIdType field.rtbfabric: [botocore] The deprecated inboundLinksCount field has been removed from the GetResponderGateway API response. Customers who previously relied on this field should use linksRequestedCount instead.v1.43.55Compare Source
=======
appstream: [botocore] This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.1. The SDK will prioritize its most performant protocol.backup-gateway: [botocore] This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.0. The SDK will prioritize its most performant protocol.bcm-pricing-calculator: [botocore] This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.0. The SDK will prioritize its most performant protocol.bcm-recommended-actions: [botocore] This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.0. The SDK will prioritize its most performant protocol.bedrock-agentcore: [botocore] Adds support for the Bring Your Own Storage(BYOS) feature in AgentCore Browser and Code Interpreter. Enables mounting S3Files and EFS File Systems via Access points.bedrock-agentcore-control: [botocore] Adds support for the Bring Your Own Storage(BYOS) feature in AgentCore Browser and Code Interpreter. Enables mounting S3Files and EFS File Systems via Access points.datazone: [botocore] Adds support for notebook sync with S3 ipynb filesgameliftstreams: [botocore] GameLift Streams now supports configuring a custom aspect ratio per stream session to accommodate different player devices. Supported aspect ratios include landscape, portrait, and square - delivering a full-screen experience without letterboxing or cropping.kendra-ranking: [botocore] This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.0. The SDK will prioritize its most performant protocol.mediapackagev2: [botocore] This release adds support for non-epoch-locked CMAF ingest in MediaPackageV2 channels.quicksight: [botocore] Added new capabilities to custom permissions profiles to control access to Amazon Quick through the browser extension and Microsoft Word, Outlook, Excel, and PowerPoint add-ins.redshift-data: [botocore] This release include long polling provids a new parameter wait-time-seconds to 5 API operations, new API ListSessions, and a new parameter execution-mode to BatchExecuteStatementsagemaker: [botocore] Release support for c6a, m6a, m6g, m7g, m8g instance types for SageMaker HyperPodworkspaces-instances: [botocore] This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.0. The SDK will prioritize its most performant protocol.v1.43.54Compare Source
=======
amp: [botocore] Add CloudWatch dataset destinations for Amazon Managed Service for Prometheus collectors.arc-region-switch: [botocore] Adds support for a client token in StartPlanExecution to make plan execution requests idempotent for safe retries.cloudwatch: [botocore] Adds documented value constraints for CloudWatch Log Alarm scheduled query configuration fields, and makes LogGroupIdentifiers optional for log alarms.elbv2: [botocore] This adds CLI examples for the IpAddressType field on SourceIpConfig, enabling Network Load Balancer listener rules to match traffic based on whether the source IP is IPv4 or IPv6.endpoint-rules: [botocore] Update endpoint-rules client to latest versionguardduty: [botocore] Amazon GuardDuty now returns filter lifecycle metadata in GetFilter responses. The response includes createdAt and updatedAt timestamps and a version number that increments on each update, giving you visibility into when a filter was created and last modified.observabilityadmin: [botocore] Enablement for ALB and Bedrock Knowledge Base logs via Observability Admin Telemetry Rule for account and organization levelpartnercentral-account: [botocore] Adds Qualifications Association APIs that enable partners to associate a subsidiary account's qualifications with a primary account. Once associated, qualifications are shared across all connected accounts and scorecards are consolidated. Partners can start and track association and disassociation.pcs: [botocore] AWS PCS Node Lifecycle Actions provides a structured way to run custom scripts at defined points in a compute node's lifecycle directly through the AWS PCS compute node group API.sesv2: [botocore] Launching DEED and MREP in US GOVbotocore] Raise a configuration error when the CA bundle value (ca_bundle, AWS_CA_BUNDLE, REQUESTS_CA_BUNDLE, or the client verify parameter) resolves to an empty or whitespace-only string.v1.43.53Compare Source
=======
emr-containers: [botocore] Added support for the DeleteSecurityConfiguration API, which allows customers to delete security configurations in Amazon EMR on EKS. Also added authenticationConfiguration in securityConfigurationdata structure.entityresolution: [botocore] Add support for real time matching with AWS Entity Resolution matching workflows with advanced rule sets.inspector2: [botocore] GA date - July 21st 2026, remove Tags field from ListCodeSecurityIntegration and ListCodeSecurityScanConfiguration.invoicing: [botocore] Added the SendProcurementPortalValidation and VerifyProcurementPortalValidation APIs. You can use the AWS SDKs to self-service activate your Procurement Portal Preferences created on the Billing Preferences page with a one-time-passcode (OTP) delivered to your portal.redshift: [botocore] Amazon Redshift - Added support for managing Query Editor V2 IAM Identity Center applications via new CreateQev2IdcApplication, DescribeQev2IdcApplications, ModifyQev2IdcApplication, and DeleteQev2IdcApplication API operations.redshift-data: [botocore] update the workgroupArn to include EUSC partition, tests in THF Gamma and Prod no issuessm: [botocore] Added a WarningMessage field to Automation along with corresponding public documentation.timestream-influxdb: [botocore] This release adds support for custom plugins in Amazon Timestream for InfluxDB. InfluxDB 3 Core and Enterprise DB parameter groups now accept a plugin repository URL and optional AWS Secrets Manager secret ARN, so the Processing Engine loads your Python plugins from a public or private repository.v1.43.52Compare Source
=======
bedrock-agentcore: [botocore] Add W3C trace context headers (traceparent, tracestate, baggage) and X-Amzn-Trace-Id to InvokeHarness request for end-to-end observability propagation. Add toolResultMetadata to the streaming content block delta for MCP tool result meta delivery without oversized SSE frames.bedrock-agentcore-control: [botocore] This release adds support for specifying a connector version on Gateway targets to pin the connector's tool schema. It also introduces web-search connector version 1.2.0, which adds agent-side domain filtering, published date range filtering, and admin-side domain allowlisting.endpoint-rules: [botocore] Update endpoint-rules client to latest versioninspector2: [botocore] Adds Windows path support for deep inspection. Fixes tag propagation for connector CloudFormation stack operations.mediatailor: [botocore] This change adds api support for configuring ad decision server timeouts and concurrency fields on MediaTailor playback configurationsmeteringmarketplace: [botocore] For new SaaS product integrations, CustomerIdentifier is not populated in ResolveCustomer responses and is not supported in BatchMeterUsage. Use CustomerAWSAccountId and LicenseArn instead.organizations: [botocore] Updated InvalidInputException error documentation to clarify that the service validates free-text field values against common cross-site scripting (XSS) patterns.quicksight: [botocore] Adds support for custom permissions for Triggers, allowing administrators to control user access to Schedule, Inbound Email and Quick Event triggers.sesv2: [botocore] Amazon SES introduces three new Pricing Plans (Essentials, Pro, Enterprise), which bundle SES features under one pricing umbrella. The new PutAccountPricingAttributes API lets the user set the account's plan, while current plan retrievalif done through the new PricingAttributes field on GetAccount.v1.43.51Compare Source
=======
cognito-idp: [botocore] Amazon Cognito user pools now support sending SMS via AWS End User Messaging. A new EumsSms object in SmsConfigurationType lets you deliver MFA and verification texts through AWS End User Messaging, alongside the existing Amazon SNS option.gameliftstreams: [botocore] Amazon GameLift Streams now supports assigning an IAM role to a stream session, enabling your application to securely access resources in your AWS account, such as Amazon S3 buckets and DynamoDB tables.kinesisanalyticsv2: [botocore] Support for Flink 2.3 in Managed Service for Apache Flinkodb: [botocore] Adds support for sourcing Autonomous Database admin and wallet passwords from customer-managed AWS Secrets Manager secrets, including password source configuration and summaries, and enabling or disabling the OCI IAM service role for Secrets Manager integration via InitializeService.rds: [botocore] Adds the AssociatedRoles parameter to CreateDBCluster, RestoreDBClusterFromSnapshot, RestoreDBClusterToPointInTime, and RestoreDBClusterFromS3, letting customers associate IAM roles with an Aurora DB cluster at create or restore time instead of calling AddRoleToDBCluster afterward.botocore] Update awscrt version to 0.36.0v1.43.50Compare Source
v1.43.49Compare Source
v1.43.48Compare Source
v1.43.47Compare Source
v1.43.46Compare Source
v1.43.45Compare Source
=======
connect: [botocore] Amazon Connect - Added DeleteContactData API to support PII deletion of customer endpoint, additional email recipients and email subject.ec2: [botocore] Added support for additional override parameters in CreateFleet, including LaunchTemplateSpecificationUserData, KeyName, IamInstanceProfile, and MetadataOptions. The CreateFleet response now also includes SubnetId, AvailabilityZone, and AvailabilityZoneId for launched instances.guardduty: [botocore] Adding "AI Analyst" enum value for detectorivs: [botocore] adds support for AWS IVS ad configuration APIs to allow for a postRollConfiguration object on the ad configuration resourcesynthetics: [botocore] CloudWatch Synthetics adds support for customer managed KMS keys for canary environment variables. Customers can now encrypt their canary's Lambda function environment variables at rest using their own AWS KMS key, providing additional control over data protection.v1.43.44Compare Source
=======
endpoint-rules: [botocore] Update endpoint-rules client to latest versionsignin: [botocore] Adds support for OAuth 2.0 token operations in AWS Sign-In, CreateOAuth2TokenWithIAM (client credentials flow), IntrospectOAuth2TokenWithIAM (token inspection), and RevokeOAuth2TokenWithIAM (token revocation).v1.43.43Compare Source
=======
appconfig: [botocore] Update ExperimentRun APIs to support ConflictExceptions.bedrock-agentcore-control: [botocore] AgentCore Gateway now supports mapping allowed scopes to separate advertised scopes on the inbound authorizer.ec2: [botocore] Replace Root Volume now supports a VolumeId parameter. This allows the customer to pass in a pre-prepared volume as the target root volume for an RRV workflow.ecs: [botocore] Amazon ECS now automatically detects the correct CPU architecture for Express Mode services.geo-places: [botocore] Added AddressNamesMode, AddressNameTranslations, MobilityMode, PostalCodeMode, SecondaryAddresses, and DriveThrough features across Places V2 APIs to support address name formatting, multilingual translations, travel-aware search, multi-city postal codes, and unit-level address resolution.iotwireless: [botocore] Default session downlink transmission parameters have been added to the existing Multicast Group APIs. Explicit transmission parameters are no longer required when starting a multicast session during the FUOTA procedure.resiliencehubv2: [botocore] Next Generation Resilience Hub now supports filtering and sorting failure mode assessments, resource type filtering in ListResources, cross-region and cross-account topology edges, data recovery achievability status, and more granular dependency discovery progress tracking.v1.43.42Compare Source
=======
config: [botocore] Added support for connecting AWS Config to third-party cloud service providers. New APIs include PutConnector, GetConnector, DeleteConnector, and ListConnectors for managing connectors, and PutThirdPartyServiceLinkedConfigurationRecorder for creating third-party service-linked recorders.connect: [botocore] Adds support for CreateAuthCode and DeleteSession APIs.ec2: [botocore] This launch surfaces the public SSM parameter associated with public AMIs in the AMI metadata.endpoint-rules: [botocore] Update endpoint-rules client to latest versioninspector2: [botocore] This release extends vulnerability management to Azure VM, container registries and function apps. Adds support for per-member-account scan configuration settings.lambda: [botocore] AWS Lambda Durable Functions now supports customer managed KMS keys. This allows customers to configure a KMS key in Durable Config to have all their durable execution data encrypted.marketplace-catalog: [botocore] This release enhances the ListEntities API to support ResellerRole filter for ResaleAuthorization entity.meteringmarketplace: [botocore] The usage reporting window for the BatchMeterUsage API has been extended from 6 hours to 24 hours. Sellers can now submit usage records for up to 24 hours after a metered event occurs. The existing 6-hour grace period at the end of a billing cycle still applies.partnercentral-revenue-measurement: [botocore] Add support for AWS Partner Central Revenue Measurement API for creating, managing, and tracking revenue attributions and marketplace revenue share allocations.route53globalresolver: [botocore] Adds ListSharedDNSViews operation to list all DNS Views shared with caller using AWS Resource Access Manager. Also updates ListHostedZoneAssociations operation so that resource ARN param is optional, allowing caller to list all HostedZoneAssociations in account.securityhub: [botocore] release SecurityHub MultiCloud integration with Azuressm: [botocore] Adding SSM Cloud Connector to support Azure Virtual Machines onboarding to AWS Systems Managerv1.43.41Compare Source
=======
billing: [botocore] Adds support for managing AWS account credits and billing preferences, including retrieving credit details, viewing per-month credit allocation history, redeeming promotional codes, and configuring credit sharing and billing preferences.logs: [botocore] Added PutStorageTierPolicy and GetStorageTierPolicy APIs to Amazon CloudWatch Logs. Customers can now configure account-level Intelligent Tiering to automatically optimize log storage costs by moving infrequently accessed data to lower-cost storage tiers.mailmanager: [botocore] This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.0. The SDK will prioritize its most performant protocol.opensearch: [botocore] This release introduces Saved Object Migration APIs, enabling users to migrate dashboards, visualizations, index patterns, and other saved objects from a data source into an Amazon OpenSearch Service application workspace with configurable export filters and conflict resolution strategies.v1.43.40Compare Source
=======
cognito-idp: [botocore] Add support for provisioned limit management, enabling customers to view and update their provisioned API rate limits for Amazon Cognito User Pools programmatically through the new GetProvisionedLimit and UpdateProvisionedLimit APIs.config: [botocore] AWS Config now supports tag-on-create for organization-managed Config rules and conformance packs through the PutOrganizationConfigRule and PutOrganizationConformancePack APIs.customer-profiles: [botocore] Amazon Connect Customer Profiles adds support for diversityConfig to recommenderConfig which can be used for diversifying the recommendations. This release also includes model versioning support which helps customer to rollback trained models.mediatailor: [botocore] Added dual-stack (IPv4 and IPv6) endpoint fields to SSAI and Channel Assembly API responses.outposts: [botocore] Tighten Outpost site ContactPhoneNumber regex to perform phone number validation.v1.43.39Compare Source
=======
artifact: [botocore] Add support for Assurance Assistant APIs for managing compliance inquiries along with tagging features.cloud9: [botocore] Since Amazon Linux 2 (AL2) will reach its end-of-life (EOL) and stop receiving security updates on June 30, 2026, Cloud9 will remove AL2 from AMI options in public API create-environment-ec2.connect: [botocore] Adds a new Amazon Connect Service API, SendOutboundWebNotification, that delivers web notifications to end-customer chat widget sessions. Callable only by the Amazon Connect Outbound Campaigns service principal.ec2: [botocore] Use declarative policies to enable VPC Encryption Controls across your organization or select accounts. Added AMD SEV-SNP support for EC2 Dedicated Hosts. Managed resource visibility settings control whether AWS-provisioned resources in your account appear in console views and API list operations.gameliftstreams: [botocore] Added CreateStreamSessionAdminShell API operation to enable customers to establish secure terminal connections to the live runtime environment of streaming sessions for troubleshooting purposes.mediaconvert: [botocore] Adds support for integer-second duration normalization and the option to disable explicit weighted prediction.meteringmarketplace: [botocore] The usage reporting window for the BatchMeterUsage API has been extended from 6 hours to 24 hours. Sellers can now submit usage records for up to 24 hours after a metered event occurs.opensearch: [botocore] To create a Mustang domain via the AWS CLI, you must pass EngineMode OPTIMIZED (along with UseCase OBSERVABILITY or MIXED) without it, the domain defaults to a regular (GENERAL) domain. Also this release includes Insights Feedback API which user can use to provide feedback for Insight API.quicksight: [botocore] Adding support for FileSource PhysicalTables. This adds support for datasets with file sources.v1.43.38Compare Source
=======
acm: [botocore] AWS Certificate Manager now supports the Automatic Certificate Management Environment (ACME) protocol to issue public certificates. ACME is an industry-standard protocol for automating certificate lifecycle on customer-managed infrastructure such as on-premises servers and Kubernetes clusters.autoscaling: [botocore] This release adds support for a new reservations-then-balanced capacity distribution strategy, which first attempts to launch instances into your Capacity Reservations and then balances remaining capacity across healthy Availability Zones.cleanrooms: [botocore] Adds support for intermediate tables in AWS Clean Rooms collaborations.botocore] The following clients have been removed following the deprecation of the services - iotevents, iotevents-data, panorama, simspaceweavercloudformation: [botocore] AWS CloudFormation adds a DeploymentConfig parameter to enable Express mode, which completes stack operations as soon as resource configuration is applied. Also adds a DisableValidation parameter to skip pre-deployment validation, which now runs automatically on CreateStack and UpdateStak.cloudwatch: [botocore] Customers can configure alarms with wall-clock-aligned evaluation windows instead of sliding windows, with optional timezone support for daily or weekly periodscodebuild: [botocore] Adds support for host kernel selection for on-demand builds.connect: [botocore] Amazon Connect - Added CreateAttachedFile and StartContactConversationalAnalyticsJob APIs to import call recordings and run conversational analytics.datazone: [botocore] Amazon DataZone now supports SNOWFLAKE as a connection type in the CreateConnection API, enabling metadata and lineage retrieval from Snowflake databases. Specify snowflakeProperties with connection details, a Secrets Manager secret, an Athena spill bucket, and an identity mapping for Snowflake.ec2: [botocore] Adds ModifyVpcEndpointPayerResponsibility API, which enables VPC endpoint service owners to modify the billing account for VPC endpoint usage charges at the individual endpoint levelecs: [botocore] Updated threshold configuration documentation.eks: [botocore] Adds Kubernetes version rollback support, including the CancelUpdate operation to cancel an in-progress VersionRollback update, the RollbackConfig structure with a timeoutMinutes field, and the Cancellation structure surfaced via the new cancellation field on the Update object.endpoint-rules: [botocore] Update endpoint-rules client to latest versionnetwork-firewall: [botocore] AWS Network Firewall now supports container associations for monitoring ECS and EKS workloads. You can create container associations to dynamically track the IP addresses of running containers in your Amazon ECS and Amazon EKS clusters.observabilityadmin: [botocore] Organization and account level telemetry rule via Observability Admin and CloudWatch pipelines for metricspartnercentral-selling: [botocore] This release adds AwsMarketplaceSolutions and AwsMarketplaceProducts entity types to the Associate and Disassociate APIs, returns them in GetOpportunity, and adds AwsMarketplaceSolutionArn to ListSolutions ,letting partners link Marketplace listings directly to opportunities.sso-admin: [botocore] AWS IAM Identity Center now returns PrimaryRegion and Regions in the ListInstances response, providing information about replicated instances.supportauthz: [botocore] New SDK release for SupportAuthZ.v1.43.37Compare Source
=======
appconfig: [botocore] AWS AppConfig introduces Experimentation tools - enhanced capabilities within AWS AppConfig that enable you to run AB tests, multivariate tests, and gradual feature rollouts across your application stack.cloudwatch: [botocore] This release adds the API (PutLogAlarm) to manage a new CloudWatch resource, Log Based Alarms. Log Based Alarms allows customers to alarm directly on CloudWatch Logs query results.connectcampaignsv2: [botocore] Adding new attributes to PutProfileOutboundRequest API that will create an outbound request call for the customer's Web Notification outbound campaign.connecthealth: [botocore] Expand input validation to support Unicode characters and markdown table syntax.ec2: [botocore] Adds support for the precision time strategy and a parentGroupId parameter on CreatePlacementGroup and DescribePlacementGroups. Precision time placement groups and cluster placement groups with a parent precision time placement group ensure instances launch on precision time capable hardware.ecs: [botocore] Amazon ECS now supports customizable deployment circuit breaker configurations. Customers can now define the failure threshold or control the failure counting mechanism.elasticache: [botocore] Updated documentation for the ApplyImmediately parameter in ModifyCacheCluster and ModifyReplicationGroup to clarify modification behavior.evs: [botocore] Amazon EVS introduces a VMware Cloud Foundation (VCF) self-deployed mode, along with new connectors to VCF components such as the Operations and SDDC managers to monitor coverage and usage.glue: [botocore] Added the UpdateAsset operation to set the business name and description for an existing AWS Glue Data Catalog asset.imagebuilder: [botocore] Adds support for AMI watermarks in Image Builder.lambda: [botocore] Lambda now supports self-managed S3 buckets for Lambda code storage giving you the option for Lambda to reference a copy of your source code from your own S3 buckets. This allows you to maintain a single copy of your source code and manage your own code storage limits.pcs: [botocore] Add support for in-place Slurm version upgrades on existing clusters by accepting scheduler.version in UpdateCluster.pinpoint-sms-voice-v2: [botocore] This launch is an expansion of our Q1 RCS for business launch where we will release an API that supports rich media and interactive messaging elements.rds-data: [botocore] Updated documentation to remove Aurora Serverless V1 references.resource-explorer-2: [botocore] Added CFN resource type fields for Search and ListSupportedResourceTypes responses. Added SLRec field for ServiceViewsagemaker-featurestore-runtime: [botocore] Add support for ListRecords and BatchWriteRecord APIs to Feature Store.vpc-lattice: [botocore] Amazon VPC Lattice now supports mutable idle timeout configuration on VPC Lattice Serviceswafv2: [botocore] AWS WAF added support for associating AWS WAF web ACLs with Amazon Bedrock AgentCore Gateway resources. You can now use AssociateWebACL, DisassociateWebACL, GetWebACLForResource, and ListResourcesForWebACL to protect your AgentCore Gateways with AWS WAF.botocore] Add public methods to insert, remove, and retrieve providers in the token provider chain.v1.43.36Compare Source
=======
kafka: [botocore] Amazon MSK Replicator now supports mTLS authentication when connecting to external Apache Kafka clusters, enabling customers to replicate data from clusters that require mutual TLS for client authentication. This capability is supported when replicating to Amazon MSK Express brokers.v1.43.35Compare Source
=======
application-signals: [botocore] Application Signals now supports dynamic instrumentation and Service Events telemetry. Add instrumentation at runtime without restarts, and use fine-grained profiling data to quickly pinpoint latency and error root causes.bedrock-agentcore: [botocore] Adds an optional extractionMode field to CreateEvent. SKIP retains the event in short-term memory but excludes it from long-term memory extraction.directconnect: [botocore] Added VIF rate limiting support for AWS Direct Connect, allowing customers to set bandwidth allocations on virtual interfaces to manage traffic on dedicated connections.ec2: [botocore] This release adds support for AMI Watermark and Allowed AMIs integrationendpoint-rules: [botocore] Update endpoint-rules client to latest versionguardduty: [botocore] Added AI-powered investigations that automatically analyze security findings, correlate related activity, and produce structured summaries with risk assessment, confidence scoring, MITRE technique classification, and actionable next steps.kafka: [botocore] Amazon MSK Replicator now supports mTLS authentication when connecting to external Apache Kafka clusters, enabling customers to replicate data from clusters that require mutual TLS for client authentication. This capability is supported when replicating to Amazon MSK Express brokers.lambda: [botocore] Add support for tagging Network Connector resources in AWS Lambda.lambda-core: [botocore] Initial release of the AWS Lambda Core SDK with APIs to create, manage, and tag network connectors that enable Lambda compute resources to access private resources in your Amazon VPC.lambda-microvms: [botocore] Lambda MicroVMs GA launch. Lambda MicroVMs enable isolated and highly responsive execution of user-supplied or LLM-generated code.logs: [botocore] CloudWatch Logs Updates - New APIs introduced to support syslog ingestion to a log group. For more information, see CloudWatch Logs API documentation.mediaconnect: [botocore] AWS MediaConnect now supports Content Quality Analysis for Router Inputs, enabling detection of black frames, frozen frames, and silent audio with configurable thresholds.omics: [botocore] Adds support for scratch ephemeral storage mounted at tmpquicksight: [botocore] Updated the Amazon Quick Spaces API to remove unsupported SPACE and ARTIFACT values from the SpaceQuickSightResourceType enum.v1.43.34Compare Source
=======
appstream: [botocore] Amazon WorkSpaces Agent Access now supports domain-joined fleets for enterprise identity integration, real-time agent observation with instant stop controls, and MCP tool forwarding for lower-latency, cost-effective desktop tool access.bedrock-agent: [botocore] Add support for metadata-only retrieval on GetFlow, GetFlowVersion, and GetPrompt APIs.connect: [botocore] This is the release for point based scoring system and the evaluation form validation projectglue: [botocore] Adds the SearchAssets operation for discovering assets in the AWS Glue Data Catalog using full-text search and filters. Minor naming refinements across the Glossary Terms and Attachment APIs for consistency.opensearch: [botocore] This release introduces data source attachment APIs, enabling users to attach and detach Amazon OpenSearch Service domains and Amazon OpenSearch Serverless collections to an OpenSearch application.v1.43.33Compare Source
=======
application-autoscaling: [botocore] Adds support for ECS high-resolution predefined scaling metrics (ECSServiceAverageCPUUtilizationHighResolution, ECSServiceAverageMemoryUtilizationHighResolution) enabling 20-second metric periods for faster scalingbatch: [botocore] Adds Support for ordered allocation strategies- BEST-FIT-PROGRESSIVE-ORDERED or SPOT-CAPACITY-OPTIMIZED-PRIORITIZEDcognito-idp: [botocore] In order to support the new TLS Self-Service feature, this change adds SecurityPolicyType to CustomDomainConfigType. During CreateUserPoolDomain and UpdateUserPoolDomain this is used to select a custom domain's TLS enforcement, and for DescribeUserPoolDomain it informs users about the current TLS.compute-optimizer: [botocore] This release surfaces two new metrics Volume IOPS Exceeded and Volume Throughput Exceeded into EBS volume rightsizing recommendations.ec2: [botocore] Documentation updates clarifying CancelCapacityReservation cancellable statesecs: [botocore] Amazon ECS services now support high resolution (20 second) CloudWatch metrics for CPUUtilization and MemoryUtilization. Use these metrics for faster service auto scaling.eks: [botocore] Adds support for configurable control plane egress routing in Amazon EKS, allowing you to route control plane egress traffic through your VPC and control how the control plane reaches resources in your network such as webhook servers and OIDC providers.gamelift: [botocore] Amazon GameLift Servers has launched support for customizing Linux capabilities in container fleets. You can now specify additional Linux capabilities for containers in a container group definition, giving you finer control over the default Docker capabilities available to your containers.healthlake: [botocore] Adding New Configurations to the FHIR Create Datastore. The new configurations include NLP Configuration, AnalyticsConfiguration, ProfileConfigurationlambda: [botocore] Converging and fixing existing documentation gaps in Lambda SDKlogs: [botocore] Added optional startFromHead parameter to FilterLogEvents enabling descending timestamp order (newest first) when set to false. Default true preserves existing ascending order. Reverse sorting requires a startTime on or after Jan 1, 2024.sagemaker: [botocore] Adds support for automatic AMI patching on HyperPod clusters. Customers can configure patching strategies to automatically apply security patch with zero job termination. Customers can also specify an AMI version at instance group level and update cluster software to a certain AMI version.synthetics: [botocore] CloudWatch Synthetics adds support for multi-location canaries. Customers can now monitor their endpoints from multiple locations with centralized management from a primary location. The SDK includes new parameters for configuring multiple locations and tracking their state.v1.43.32Compare Source
=======
bedrock-agent: [botocore] Launching Bedrock Managed Knowledge Bases. Added support for resource-based policies on Knowledge Base resources, enabling cross-account access for Managed Knowledge Bases.bedrock-agentcore: [botocore] AgentCore Harness service will be Generally Available at NYS 2026 with this Treb release. Harness will support invoking specific endpoints via the qualifier parameter, AWS Skills for pre-built agent capabilities, and improved validation for skill git source URLs.bedrock-agentcore-control: [botocore] AgentCore Gateway now supports inference targets to LLM providers (direct config or built-in connectors), HTTP passthrough targets with session stickiness, runtime target API schemas, AWS WAF web ACL association with configurable fail-open or fail-close modes, and interceptor payload filtering.bedrock-agent-runtime: [botocore] Adds new AgenticRetrieveStream API for managed knowledge bases to use conversation history and autonomously plan for multi-hop multi-KB reasoning with built-in evaluation and access-control. Updates Retrieve API for access-control-based filtering for managed knowledge bases.compute-optimizer-automation: [botocore] This launch adds IfExists comparison operators to Compute Optimizer Automation rule criteria, so a rule can include recommended actions whose specified attribute isn't present.devops-agent: [botocore] Adds support for Remote A2A (Agent-to-Agent) agent registration and management. Adds new Release Readiness Review and Release Testing capabilities. Adds support for Git managed skills in AWS DevOps Agent.ecs: [botocore] Releasing the ability to bring-your-own task-definition for CreateExpressGatewayService and UpdateGatewayExpressServiceglue: [botocore] This release adds support for Search and Discovery in AWS Glue, letting you and your applications search Data Catalog assets such as table and enrich them with business context and glossary terms.mq: [botocore] This release adds private networking support for Amazon MQ for RabbitMQ. You can now associate AWS RAM resource shares with your broker and retrieve shared resource details using the new DescribeSharedResources API.opensearch: [botocore] Adds support for configuring IAM Identity Center options on existing OpenSearch applications via the UpdateApplication API.partnercentral-selling: [botocore] Cosell Resonate AND Prospecing API Launch with ARN correctionsecurityagent: [botocore] Updated AWS Security Agent SDK model with new APIs for threat modeling, code review, security requirements, and additional integration providers.v1.43.31Compare Source
=======
directconnect: [botocore] Added VIF rate limiting support for AWS Direct Connect, allowing customers to set bandwidth allocations on virtual interfaces to manage traffic on dedicated connections.outposts: [botocore] Adds support for creating an order from quotes.partnercentral-selling: [botocore] Added Prospecting APIs to convert engagements into AI-enriched leads with scoring insights. Extended Engagement APIs with ProspectingResult and Lead contexts. Added CoSell Scoring to GetAwsOpportunitySummary- quality score, trend, agent-driven recommendations, and engagement classification.route53resolver: [botocore] Adds supports for PartnerManagedRuless3: [botocore] Added support for annotations. You can now attach up to 1000 annotations (up to 1 MB each) directly to objects and create, retrieve, list, and delete them using new annotation APIs. Also added support for configuring an annotation table in S3 Metadata.s3vectors: [botocore] Amazon S3 Vectors now supports paginated QueryVectors requests, returning up to 10,000 results per query.sagemaker: [botocore] Add EnableDetailedObservability to Endpoint MetricsConfig. Publishes GPU, host, and framework-native inference metrics to CloudWatch with per-inference-component, availability-zone, and instance dimensions. Adds Inference Component provisioning lifecycle and multi-AZ placement metrics.v1.43.30Compare Source
=======
bedrock-runtime: [botocore] InvokeGuardrailChecks API evaluates prompts and responses against safety checks (content filters, prompt attacks, sensitive info) without creating guardrail resources. It's a detect-only API, returning numeric scores so you can build adaptive logic as per your application.datazone: [botocore] Adds support for deleting lineage events in Amazon DataZone.logs: [botocore] Added endTimeOffset parameter to Scheduled Queries APIs (Create, Update, Get) enabling bounded time window configuration. Introduced scheduleType filter (CUSTOMER MANAGED, AWS MANAGED) for ListScheduledQueries and exposed it in Get and Update responses.mgn: [botocore] AWS Transform for VMware now supports Amazon FSx for NetApp ONTAP as a target storage. Customers can migrate source server disks directly to FSx for NetApp ONTAP iSCSI LUNs. Target storage is configurable per source server, and compute, network, and storage migrate together in coordinated waves.rds: [botocore] Adding support for RDS SQL Server BYOM and DB2 Community Editionwafv2: [botocore] AWS WAF now supports AI traffic monetization for CloudFront. Configure payment networks and pricing on your web ACL, use the new Monetize rule action to charge AI agents via x402, and monitor revenue with new GetRevenueStatisticsSummary, GetRevenueStatistics, and ListSettlementRecords APIs.workspaces: [botocore] Added a validation for null check for ImageIds in DescribeWorkspaceImages API request parameters.v1.43.29Compare Source
=======
acm: [botocore] Certificate transparency logging opt-out is no longer available. Per compliance requirements, all public ACM certificates are automatically recorded in certificate transparency logs. The CertificateTransparencyLoggingPreference option is deprecated.bedrock-agentcore: [botocore] Added tagging and CMK support across optimization, an explanation field in recommendation output, and an insights feature to identify failure patterns, extract user intents, and summarize execution behaviorbedrock-agentcore-control: [botocore] Added tagging and CMK support for optimizations and an insights feature to identify failure patterns, extract user intents, and summarize execution behaviordevops-agent: [botocore] Adds support for Trigger CRUD APIs (CreateTrigger, GetTrigger, UpdateTrigger, DeleteTrigger, ListTriggers) for managing schedule-based automation triggers in DevOps Agent agent spaces.eks: [botocore] Patches missing enum values for EKS updatesfirehose: [botocore] Update KeyARN in DeliveryStreamEncryptionConfigurationInput to accept KMS key ARNs only (not alias ARNs), matching service behavior.glue: [botocore] Adds support for retrieving Apache Iceberg table metadata via GetTable. Use the new AttributesToGet parameteConfiguration
📅 Schedule: (in timezone America/Montreal)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.