chore(deps): update minor and patch#594
Open
renovate[bot] wants to merge 1 commit into
Open
Conversation
renovate
Bot
force-pushed
the
renovate/minor-and-patch
branch
14 times, most recently
from
eae6fe2 to
6c1f6f6
Compare
renovate
Bot
force-pushed
the
renovate/minor-and-patch
branch
9 times, most recently
from
ab56f7b to
03342aa
Compare
renovate
Bot
force-pushed
the
renovate/minor-and-patch
branch
6 times, most recently
from
4fba0b6 to
3d42177
Compare
renovate
Bot
force-pushed
the
renovate/minor-and-patch
branch
10 times, most recently
from
fc6e440 to
b600c32
Compare
renovate
Bot
force-pushed
the
renovate/minor-and-patch
branch
9 times, most recently
from
1c03fa0 to
9c4e572
Compare
renovate
Bot
force-pushed
the
renovate/minor-and-patch
branch
8 times, most recently
from
3839fc4 to
a9b7962
Compare
renovate
Bot
force-pushed
the
renovate/minor-and-patch
branch
2 times, most recently
from
990fb59 to
406e933
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
3.22→3.233.22.2→3.23.43.22→3.23==4.0.2→==4.1.2==1.41.4→==1.43.1829.0.4→29.5.2==0.22.3→==0.231.25-alpine3.22→1.26-alpine3.221.25.4-alpine→1.26.3-alpine1.25-alpine3.22→1.26-alpine3.22v2.6.2-alpine→v2.12.2-alpine3.0.0→3.0.61.14.3→1.15.31.14.0→1.15.51.21.1→1.21.4==1.0.1→==1.1.04.49.2→4.53.225.2-alpine3.22→25.9-alpine3.2225.2-alpine3.22→25.9-alpine3.22v0.29.0→v0.32.1v3.7.3→v3.12.0==0.23.1→==0.25.0==4.0.3→==4.0.5==0.15.0→==0.18.0==2.0.1→==2.2.1==1.37.1→==1.38.0Release Notes
pylint-dev/astroid (astroid)
v4.1.2Compare Source
============================
Release date: 2026-03-22
Fix crash accessing property
fsetin generic classes with type annotations.Closes #2996
Fix infinite recursion caused by cyclic inference in
Constraint.Fix
RecursionErrorin_compute_mro()when circular class hierarchiesare created through runtime name rebinding. Circular bases are now resolved
to the original class instead of recursing.
Closes #2967
Closes pylint-dev/pylint#10821
Fix
DuplicateBasesErrorcrash in dataclass transform when a class hasduplicate bases in its MRO (e.g.,
Protocolappearing both directly andindirectly). Catch
MroErrorat.mro()call sites inbrain_dataclasses.py, consistent with the existing pattern elsewhere.Closes #2628
Fix
FunctionModelreturning descriptor attributes for builtin functions.Closes #2743
Catch
MemoryErrorwhen inferring f-strings with extremely large formatwidths (e.g.
f'{0:11111111111}') so that inference yieldsUninferableinstead of crashing.
Closes #2762
Fix
ValueErrorin__str__/reprand error messages when nodes haveextreme values (very long identifiers or large integers). Clamp pprint width
to a minimum of 1 and truncate oversized values in error messages.
Closes #2764
v4.1.1Compare Source
============================
Release date: 2026-02-22
Let
UnboundMethodModelinherit fromFunctionModelto improve inference ofdunder methods for unbound methods.
Refs #2741
Filter
UnknownfromUnboundMethodandSuperspecial attributelookup to prevent placeholder nodes from leaking during inference.
Refs #2741
v4.1.0Compare Source
============================
Release date: 2026-02-08
Add support for equality constraints (
==,!=) in inference.Closes pylint-dev/pylint#3632
Closes pylint-dev/pylint#3633
Ensure
ast.JoinedStrnodes areUninferablewhen theast.FormattedValueisUninferable. This preventsunexpected-keyword-argmessages in Pylintwhere the
Uninferablestring appeared in function arguments that wereconstructed dynamically.
Closes pylint-dev/pylint#10822
Add support for type constraints (
isinstance(x, y)) in inference.Closes pylint-dev/pylint#1162
Closes pylint-dev/pylint#4635
Closes pylint-dev/pylint#10469
Make
type.__new__()raise clear errors instead of returningNoneMove object dunder methods from
FunctionModeltoObjectModelto make themavailable on all object types, not just functions.
Closes #2742
Closes #2741
Closes pylint-dev/pylint#6094
linenoandend_linenoare now available onArguments.Add helper to iterate over all annotations nodes of function arguments,
Arguments.get_annotations().Refs #2860
Skip direct parent when determining the
Decoratorframe.Refs pylint-dev/pylint#8425
Add simple command line interface for astroid to output generated AST.
Use with
python -m astroid.Fix incorrect type inference for
super().method()calls that returnSelf.Previously, astroid would infer the parent class type instead of the child class type,
causing pylint E1101 false positives in method chaining scenarios.
Closes #457
Add missing
dtypeandcastingparameters tonumpy.concatenatebrain.Closes #2870
Fix ability to detect .py modules inside PATH directories on Windows
described by a UNC path with a trailing backslash (
\)Fix
random.sampleinference crash when sequence contains uninferable elements.Closes #2518
Fix
random.samplecrash when cloningClassDeforFunctionDefnodes.Closes #2923
v4.0.4Compare Source
============================
Release date: 2026-02-07
Fix
is_namespace()crash when search locations containpathlib.Pathobjects.Closes #2942
v4.0.3Compare Source
============================
Release date: 2026-01-03
Fix inference of
IfExp(ternary expression) nodes to avoid prematurely narrowingresults in the face of inference ambiguity.
Closes #2899
Fix base class inference for dataclasses using the PEP 695 typing syntax.
Refs pylint-dev/pylint#10788
boto/botocore (botocore)
v1.43.18Compare Source
=======
bedrock: Automated Reasoning checks - Added two build workflows for policies. Iterative Refine Policy uses AI to update policy definitions based on test results and feedback. Resolve Policy Ambiguities consolidates ambiguous variables in Automated Reasoning policies, a common source of ambiguous validation.bedrock-agentcore-control: Reference your own AWS Secrets Manager secrets when configuring credential providers, giving you control over encryption, rotation, and access policies instead of using service-managed secrets.groundstation: Adds support for Alpha-5 satellite number encoding in the Two-Line Element ephemeris format.omics: Add engineSettings to StartRun and GetRun. Add profiles and profileParameterTemplates to GetWorkflow and GetWorkflowVersion.quicksight: Adds support for creating, updating, describing, listing, and deleting an OAuthClientApplication resource, a new quicksight resource that allows customers to store OAuth configurations to connect to their databases via 3 Legged OAuth.rds-data: RDS Data API arrays (longValues, doubleValues, stringValues, booleanValues) in ExecuteStatement responses now correctly support null elements. Runtime change for JS v3 and .NET. Compile-time change for C plus plus, .NET, Kotlin, Rust. No impact for Java, Python, Ruby, PHP, Go.route53resolver: Added BatchCreateFirewallRule, BatchUpdateFirewallRule, BatchDeleteFirewallRule, and ListFirewallRuleTypes APIs. Added FirewallRuleType support to Firewall Rule APIs.sesv2: This release introduces support for Tenant Suppression Listsv1.43.17Compare Source
=======
appstream: Amazon WorkSpaces Applications now supports BYOL (Bring Your Own License). This enables customers to import their own WorkSpaces images and use them in WorkSpaces Applications.bedrock: Add support for ModelPackageArn in Bedrock's CreateCustomModel APIbedrock-agentcore: Added Harness support for LiteLLM model configuration for third-party model providers. Added S3 and Git skill source types. Added Responses API format for OpenAI and Bedrock models. Added runtimeUserId and runtimeClientError to InvokeHarness.bedrock-agentcore-control: Added Harness support for LiteLLM model configuration for third-party model providers. Added S3 and Git skill source types. Added Responses API format for OpenAI and Bedrock models. Added runtimeUserId parameter to InvokeHarness for end-user identification.bedrock-runtime: Support system role in messagecontrolcatalog: AWS Control Catalog - Added GovernedProviders response field and inclusion filter to GetControl and ListControls APIs to identify and filter by cloud provider. Added ParameterRequirementSummary response field indicating parameter requirements.customer-profiles: BatchPutProfileObject API adds multiple profile objects to a domain of a given ObjectType in a single API call.deadline: Added support for persistent storage on Service-Managed Fleets, allowing customers to configure persistent storage that preserves data across worker sessions which reduces job startup times for workloads with large software installations or asset caches.endpoint-rules: Update endpoint-rules client to latest versioniot: Adds new connectivity-related fields to Fleet Indexing API requests and responses.iot-data: Adding GetConnection, ListSubscriptions, and SendDirectMessage APIs to IoT Data Planeopensearchserverless: Adds support for deletion protection on collections, ability to create NEXTGEN collection groups and autoscaling visibility for NEXTGEN collection groupspcs: This release adds support for configuring scaleDownIdleTimeInSeconds at the compute node group level, allowing customers to set different idle timeouts per node group. Previously this setting was only available at the cluster level.resiliencehubv2: This is the initial SDK release for the next generation of Resilience Hub.s3control: Update the minimum value of MinStorageBytesPercentage in StorageLensPrefixLevel.SelectionCriteria from 0.1 to 1, aligning the model with the documented contract.v1.43.16Compare Source
=======
bedrock-data-automation: Matcher Fallback extends the CustomOutputConfiguration for the Document modality in DataAutomationProjects, enabling a fallback blueprint when no match is found. A FALLBACK match status is returned, improving the matching experience and guaranteeing customers always receive CustomOutputResults.ecs: Add support for Neuron device resource requirements for Amazon ECSelementalinference: Added support for smart subtitles in Elemental Inference, enabling automatic generation of subtitles for media content. Available in English, Spanish, French, German, Italian, and Portuguese.medialive: AWS Elemental MediaLive now supports Smart Subtitles, a new caption source that uses AWS Elemental Inference to automatically generate WebVTT and TTML captions from source audio. Available in English, Spanish, French, German, Italian, and Portuguese.opensearch: OpenSearch will now support multi-segment paths in JWKS URLs.organizations: AWS Organizations now emits CloudTrail events (AccountJoinedOrganization, AccountDepartedOrganization) to the management account for membership changes, including join and departure method and timestamp.sagemaker: Adds shared environment support for Restricted Instance Groups (RIGs) on SageMaker HyperPod, enabling cross-RIG workload scheduling and FSx sharing. This unlocks shared CPU-GPU environments needed for cost-efficient RL training (e.g., Nova Forge). Adds p6 instance support for recommendation jobsv1.43.15Compare Source
=======
backup: Launching S3 PITR malware scanning support for AWS Backupbatch: Increase the maximum value of jobExecutionTimeoutMinutes to support longer job timeouts during compute environment infrastructure updates.budgets: AWS Budget Name Validation Documentation Updates.datazone: Added resourceConfigurations and allowUserProvidedConfigurations fields to environment blueprint configuration APIs, enabling customers who migrated from V1 to V2 domains to update resource configurations (such as lineage schedules) programmatically via the SDK.guardduty: Add malware scan support for Continuous Backups, also known as Point-In-Time Recovery Points (PITR).resourcegroupstaggingapi: The GetResources API now returns MissingTagKeys in ComplianceDetails, listing tag keys defined as required in the ReportRequiredTagBlock block of the effective tag policy that are absent from the resource.v1.43.14Compare Source
=======
datazone: Add support for VPC connectionec2: The ModifyInstanceAttribute API now supports modification of EnclaveOptions for the instance as a typed parameter.gameliftstreams: Added new Gen6 stream classes based on the EC2 G6e instance family. These classes are designed for streaming high-fidelity, graphically demanding games and applications that benefit from additional GPU memory and performance.invoicing: Adds support for idempotency with a new ClientToken field for the CreateInvoiceUnit, DeleteInvoiceUnit, UpdateInvoiceUnit, DeleteProcurementPortalPreference, PutProcurementPortalPreference, and UpdateProcurementPortalPreferenceStatus APIs.pi: Added ListPerformanceAnalysisReportRecommendations API to retrieve recommendations for a performance analysis report. Added analysis configuration support to CreatePerformanceAnalysisReport for enhanced analysis types such as vacuum analysis.qconnect: Added guardrail assessment results to inference spans in the ListSpans API. You can now see which AI Guardrail policies were evaluated, whether content was blocked or masked, and per-policy details for each Bedrock Converse callsecurityagent: Adds support for verification scripts on penetration test findings. Customers can now download executable scripts to independently reproduce confirmed vulnerabilities, with instructions and required environment variables provided for each finding.s3: Improve caching of S3 endpoints, which should improve performance when working with multiple keys in the same bucketv1.43.13Compare Source
=======
batch: Clarified CreateComputeEnvironment parameter requirements - serviceRole is required for UNMANAGED compute environments, allocationStrategy is required for EKS compute environments, and compute environments must be created in the ENABLED state.bedrock-agentcore-control: Adds dataset management APIs for creating, versioning, and managing evaluation datasets.cleanrooms: Collaboration creators can update payment configurations without recreating the collaboration. When multiple payer candidates are configured for a cost type, analysis runners can specify the actual payer at submission time, providing granular control over billing.cleanroomsml: Collaboration creators can update payment configurations without recreating the collaboration. When multiple payer candidates are configured for a cost type, analysis runners can specify the actual payer at submission time, providing granular control over billing.evs: A new GetDepotUrl API has been added to retrieve a URL for accessing Amazon EVS custom addon packages. Customers can use this URL to configure vSphere Lifecycle Manager (vLCM) as an online depot source, enabling upgrades of addon components across ESXi hosts.mediaconnect: Adds support for controlling the timecode source of NDI flow outputs.sagemaker: Add support for disabling home EFS file system creation on SageMaker domains.verifiedpermissions: Support hard deleting policy store aliases. Users can now delete an alias and immediately reassign it to a different policy store without waiting for the soft-delete retention period.v1.43.12Compare Source
=======
bedrock-runtime: Supporting Request Metadata for Invoke Model and Invoke Model with Response Streamcustomer-profiles: Amazon Connect Customer Profiles adds support for item catalog columns in RecommenderSchema, ExcludedColumns in Create and Update Recommender to specify columns to exclude from training, and the ability to disable automatic retraining by setting TrainingFrequency to 0.kms: AWS KMS now supports creating grants for AWS service principals using new GranteeServicePrincipal and RetiringServicePrincipal parameters. This release adds SourceArn grant constraint and three condition keys for controlling CreateGrant access. For more information, see Grants in AWS KMS.mwaa: Updated API documentation to describe the PublicAndPrivate webserver access mode.payment-cryptography-data: GenerateAuthRequestCryptogram API launch.v1.43.11Compare Source
=======
bedrock-agentcore: Add RetryableConflictException (HTTP 409) to InvokeAgentRuntime and StopRuntimeSession to prevent orphaned VMs during concurrent session access. The SDK automatically retries this exception with backoff. Enforcement is not yet active and will be enabled in a future service update.devops-agent: Added a new serviceType mcpserversigv4 service and association. This provides feature to register MCP sigv4 authorization based MCPsgrafana: Introduce degraded workspace status as a possible Amazon Managed Grafana workspace status, and a new field named degraded workspace reason which informs customers why the workspace is degraded in the DescribeWorkspace API response.guardduty: Adding support for exposure and vulnerability context from AWS Security Hub in GuardDuty Extended Threat Detection attack sequence findings.rtbfabric: This release is to deprecate 'inboundLinksCount' field in GetResponderGateway response and introduce the new field 'linksRequestedCount' to replace it.sagemaker: Add support for ml.p5.4xlarge and ml.p5en.48xlarge instances on SageMaker Notebook Instances Platform.v1.43.10Compare Source
=======
accessanalyzer: Services manage service-linked analyzers through dedicated APIs - CreateServiceLinkedAnalyzer and DeleteServiceLinkedAnalyzer that separate service-linked specific operations from customer-managed operations. It also shows up in ListAnalyzers and GetAnalyzer responses.connect: Amazon Connect Cases now supports SLA durations of up to 2 years (1,051,200 minutes), increased from the previous maximum of 90 days (129,600 minutes). This enables you to track long-running service level agreements for cases that require extended resolution timelines.ec2: Amazon VPC IP Address Manager (IPAM) now supports tags on IPAM pool allocations, enabling all standard tagging features for allocations including tag-on-create.ecs: Amazon ECS now supports Pause lifecycle hooks for service deployments, allowing customers to automatically pause deployments at specified stages and use the new ContinueServiceDeployment API to continue or roll back with confidence.evs: Amazon EVS now supports up to 32 hosts per EVS environment, increasing the previous host limit to allow a larger scale of VMware workload deployments and reduce operational overhead.ivs: Adds support for up to 3 mediaTailorPlaybackConfiguration objects in an ad configuration resourcequicksight: Support for dataset enrichment and geo spatial in new data preparation experiencev1.43.9Compare Source
======
logs: Updating the max limit for start query api parameter.mediapackagev2: This release adds support for AvailabilityStartTimeConfiguration in MediaPackageV2 DASH manifestspartnercentral-selling: Enable TCV intake on Opportunity to improve Opportunities Hygiene and downstream revenue attribution.v1.43.8Compare Source
======
bedrock: Advanced Prompt Optimization (AdvPO) allows you to optimize and migrate your prompts for any model on Bedrock by automatically evaluating responses and rewriting prompts to improve performance. This release provides a programmatic way to create, get, list, stop, and delete AdvPO jobs.cloudfront: Adding a new boolean for OCSP Revocations in Viewer mTLS Create and Update APIs, and adding a new 'Passthrough' option for TrustStore modesdatazone: Adds support for SageMaker Unified Studio notebook operations, including notebook import and exportdms: Add 9 SDK waiters for DMS Schema Conversion async operations. Eliminates manual polling for import, assessment, conversion, export, and creation jobs.glue: Release --has-databases parameter for AWS Glue get-catalogs API, which filters catalog responses to include only those capable of containing databases, excluding parent catalogs that hold only other catalogs. Remove model-level validation on partition index list size for AWS Glue tables.grafana: Adds support for dual-stack (IPv4 and IPv6) connectivity to Amazon Managed Grafana workspaces. Customers can configure the ipAddressType parameter when creating or updating a workspace to choose between IPv4-only or dual-stack (IPv4 and IPv6) access.mgn: Introducing new option for security groups mapping - with MAP-DHCP the service translates security rules from your source environment with DHCP compatibility.qconnect: ListModels is an API that returns the available AI models for a Connect Assistant based on its region and AI prompt type.v1.43.7Compare Source
======
arc-region-switch: Adds support for enabling and disabling Lambda event source mappings in Region switch plans.batch: Adds a billing callout to docs regarding using the CE Scale Down Delay featurebedrock-agentcore-control: Adds support for read-only summary APIs for Policy Engine, Policy, and Policy Generation resources, enabling metadata retrieval without KMS decryption for AWS Config integration.billingconductor: Add ConflictException to UpdateCustomLineItem operation.connect: This change added three new EventSourceName for schedule notification featureconnectcampaignsv2: This release added support for Outbound Campaign timezone detection using all available contact methodsconnectcases: Amazon Connect Cases now supports SLA durations of up to 2 years (1,051,200 minutes), increased from the previous maximum of 90 days (129,600 minutes). This enables you to track long-running service level agreements for cases that require extended resolution timelines.dsql: Added support for Amazon Aurora DSQL change data capture (CDC) streams that deliver row-level database changes to Amazon Kinesis in JSON format. Includes CreateStream, GetStream, ListStreams, and DeleteStream operations.ec2: Include length limits in the SDK and documentation for text fields in Image (AMI) APIs such as the image name and descriptionendpoint-rules: Update endpoint-rules client to latest versiones: Adds support for AutomatedSnapshotPauseOptions.glue: AWS Glue now defaults the job timeout to 480 minutes for Glue version 5.0 and later when no timeout value is specified. The default remains 2,880 minutes for Glue version 4.0 and earlier.lightsail: Added OriginIpAddressTypeEnum (ipv4, ipv6, dualstack) and ipAddressType field to Origin and InputOrigin structures for Lightsail CDN distributions. Allows customers to specify how the distribution connects to origins, using IPv4, IPv6, or dualstack networkingopensearch: Adds support for AutomatedSnapshotPauseOptions.partnercentral-account: Added ServiceQuotaExceededExceptions for Profile operationspcs: Add support for Amazon EC2 Interruptible-ODCRquicksight: Adds five new custom permission option for Quick Apps so that these capabilities can be controlled by public SDK and CLI.redshift: Added rg.xlarge and rg.4xlarge to valid NodeType values and updated documentation for CreateCluster, ModifyCluster, ResizeCluster, and RestoreFromClusterSnapshot APIs to reflect RG node type support.rtbfabric: Customers can now configure custom domain names for their RTB Fabric gateways. This enables partners to use their own branded domain for RTB traffic instead of the default rtbfabric endpointsagemaker: Adds execution role session name mode to reflect user identity in Studio. Adds Flexible Training Plans on Studio apps. Adds restricted model packages to control access to proprietary model artifacts via IAM. Fixed instance type parity between inference endpoints and managed shadow tests.securityagent: Add support for code reviews, a new resource type that enables automated security-focused static analysis of source code repositories.socialmessaging: Adds parameters to call the GetWhatsAppMessageTemplate and UpdateWhatsAppMessageTemplate APIs with a template name and language code in place of the template ID. Linked WhatsApp accounts also describe whether the WABA is onboarded to Meta's Marketing Messages API.stepfunctions: Updated default SDK endpoints for AWS Step Functions in AWS GovCloud (US) regions. The default Dual-Stack endpoints now resolve to "states-fips" prefixed hostnames. There are no changes to service behavior. No customer action is required.v1.43.6Compare Source
======
bcm-data-exports: With this release, customers can configure their data exports to generate additional integration artifacts for Athena and Redshift.bedrock-agentcore: Launching AgentCore payments - a capability that provides secure, instant microtransaction payments for AI agents to access paid APIs, MCP servers, and content. It handles payment processing for x402 protocol, payment limits, and 3P wallet integrations with Coinbase CDP and Stripe (Privy).bedrock-agentcore-control: Launching AgentCore payments - a capability that provides secure, instant microtransaction payments for AI agents to access paid APIs, MCP servers, and content. It handles payment processing for x402 protocol, payment limits, and 3P wallet integrations with Coinbase CDP and Stripe (Privy).ec2: DescribeInstanceTypes now accepts an IncludeUnsupportedInRegion parameter. When set, the response also lists instance types that are not available in the current Region. Each instance type includes a SupportedInRegion field indicating its regional availability.guardduty: This is a documentation updateinvoicing: Updated ListInvoiceSummaries API to add new ReceiverRole filter in Request and Responseroute53resolver: Adds supports for DNS64 on inbound endpoints and IPv6 forwarding through the internet gateway (IGW) on outbound endpoints, making it easier to manage hybrid DNS across IPv4 and IPv6 networks.v1.43.5Compare Source
======
bedrock-agentcore-control: Adds support for bring-your-own file system in AgentCore Runtime. Developers can mount Amazon S3 Files and Amazon EFS access points directly into agent sessions using filesystemConfigurations.endpoint-rules: Update endpoint-rules client to latest versionglue: Adds support for a CustomLogGroupPrefix parameter in StartDataQualityRulesetEvaluationRun to specify custom CloudWatch log group paths, and a RulesetName filter in ListDataQualityRulesetEvaluationRuns to filter evaluation runs by ruleset name.imagebuilder: The ImportDiskImage API now enforces a maximum character limit of 128 characters on the image name field.lexv2-models: Amazon Lex V2 introduces audio filler support for speech-to-speech bots. Configure melody or typing sounds that play during backend processing to reduce perceived latency and maintain a natural conversational experience for callers.mwaa: Amazon MWAA now supports a PublicAndPrivate webserver access mode. The Airflow web server is accessible over both public and private endpoints, enabling workers in VPCs without internet access to reach the Task API privately while retaining public access to the Airflow UI.s3: Validate outpost access point resource namesagemaker: Amazon SageMaker HyperPod now returns ImageVersionStatus in DescribeCluster, DescribeClusterNode, and ListClusterNodes responses, indicating whether cluster instances are running the latest available image version.securityhub: Release GenerateRecommendedPolicyV2 and GetRecommendedPolicyV2 APIs. This supports generating and retrieving policy recommendations to remediate unused permissions findings that are now being supported on Security Hub.v1.43.4Compare Source
======
cleanroomsml: Increase max configurable output limits in the Clean Rooms ML configured model algorithm association resource.cloudfront: Adds support for tagging CloudFront Functions and KeyValueStores resources.marketplace-agreement: With this release, Agreements API provides a programmatic way to generate quotes, accept offers, track charges and entitlements, manage renewals and cancellations, and streamline operations entirely through APIs without navigating to the AWS Marketplace website or AWS Management Console.mediatailor: Added support for Monetization Functions. Monetization Functions let you enrich ad requests with external data and transform session parameters using JSONata expressions, without deploying custom infrastructure.medical-imaging: Add support for DICOM Json Metadata Override features in startDICOMImportJob APIopensearch: Amazon OpenSearch Service now supports VPC egress, enabling outbound traffic from your OpenSearch domain to route privately through your VPC instead of the public internet.route53domains: This release adds the TLDInMaintenance exception.sagemaker: Adds support for ml.p5.4xlarge instance type for SageMaker Studio JupyterLab and CodeEditor apps for IAD (us-east-1), NRT (ap-northeast-1), BOM (ap-south-1), CGK (ap-southeast-3), GRU (sa-east-1), PDX (us-west-2), CMH (us-east-2).v1.43.3Compare Source
======
bedrock-agentcore-control: Amazon Bedrock AgentCore gateways now support MCP Sessions and response streaming from MCP targets. Session timeouts can be set between 15 minutes and 8 hours, and response streaming enables forwarding stream events sent by MCP targets to gateway users.ec2: This feature allows customers to change the tunnel bandwidth on existing VPN connections using the ModifyVpnConnectionOptions APIgeo-routes: Added support for TravelTimeExceedsDriverWorkHours, ViolatedBlockedRoad, and ViolatedVehicleRestriction notice codes to the CalculateRoutes API response.lex-models: Lex V1 is deprecated, use Lex V2 insteadlogs: Adding an additional optional deliverySourceConfiguration field to PutDeliverySource API. This enables customers to pass service-specific configurations through IngestionHub such as tracing enablement or sampling rates that will be propagated to the source resource.medialive: Updates the type of the MediaLiveRouterOutputConnectionMap.securityagent: AWS Security Agent is adding a new target domain verification method for private VPC penetration testing. Additionally, the target domain resource will now have a verification status reason field to surface additional details about domain verificationvpc-lattice: Amazon VPC Lattice now supports privately resolvable DNS resourcesv1.43.2Compare Source
======
appstream: Amazon WorkSpaces Applications now enables AI agents to securely operate desktop applications. Administrators configure stacks to provide agents access to WorkSpaces. Agents can click, type, and take screenshots. Agents authenticate with AWS IAM credentials with activity logged in AWS CloudTrail.cloudwatch: This release adds tag support for CloudWatch Dashboards. The PutDashboard API now accepts a Tags parameter, allowing you to tag dashboards at creation time. Additionally, the TagResource, UntagResource, and ListTagsForResource APIs now support dashboard ARNs as resources.entityresolution: Add support for transitive matching in AWS Entity Resolution rule-based matching workflows. When enabled, records that match through different rules are grouped together into the same match group, allowing related records to be connected across rule levels.iam: Added guidance for CreateOpenIDConnectProvider to include multiple thumbprints when OIDC discovery and JWKS endpoints use different hosts or certificatesiot: AWS IoT HTTP rule actions now support cross-topic batching, combining messages from different MQTT topics into single HTTP requests.logs: Adds support for filtering log groups by tags in the ListLogGroups API via the new logGroupTags parameter.qconnect: Added reasoning details, statusDescription, and timeToFirstTokenMs fields to the ListSpans response in Amazon Q in Connect to provide visibility into model thinking, error diagnostics, and inference latency metrics.quicksight: Add IdentityProviderCACertificatesBundleS3Uri for private CA certs with OAuth datasources. 256-char limit for FontFamily in themes. ControlTitleFormatText on all 13 filters. ControlTitleFontConfiguration. ContextRegion for cross-region identity context. Story,scenario in CreateCustomCapability API.v1.43.1Compare Source
======
bedrock-agentcore: AgentCore Identity now supports on-behalf-of token exchange OAuth2. AgentCore Memory now supports metadata for LongTerm Memory Records.bedrock-agentcore-control: AgentCore Identity now supports on-behalf-of token exchange OAuth2. AgentCore Memory now supports metadata for LongTerm Memory Records.datazone: Adds support for asynchronous notebook runseks: Vended logs update param for capability vended logs featurekafka: Adds support for ZookeeperAccess field to control the Client-Zookeeper connectivity.observabilityadmin: Observability Admin enablement launch for AWS Kafka, Bedrock Agent Core Workload Identity and OTel metric enablement.payment-cryptography: Adds support for resource-based policies on AWS Payment Cryptography keys, enabling cross-account key sharing. Also adds Multi-Party Approval (MPA) team association APIs for protecting sensitive import root public key operations.route53globalresolver: Adds support for regions in the UpdateGlobalResolver input.sagemaker: Add InstancePools support to Endpoint for flexible provisioning across a prioritized list of instance types. Add Specifications support to InferenceComponent for per-instance-type model configurations.sso-admin: Add InstanceArn and IdentityStoreArn in the response of CreateApplication API and IdentityStoreArn in the response of DescribeApplication APIv1.43.0Compare Source
======
account: Adds AccountState in the response for the GetAccountInformation API. Each state represents a specific phase in the account lifecycle. Use this information to manage account access, automate workflows, or trigger actions based on account state changes.bedrock-agentcore: Adds batch evaluation for running evaluators against multiple agent sessions with server-side orchestration, AI-powered recommendations for optimizing system prompts and tool descriptions, and AB testing with controlled traffic splitting and statistical significance reportingbedrock-agentcore-control: Adds configuration bundles for versioned, immutable agent configuration snapshots with branch-based lineagecloudfront: Amazon CloudFront now supports cache tag. Tag objects via response headers and invalidate all matching objects in a single request, replacing manual URL tracking and broad wildcards.deadline: Adds support for rtx-pro-server-6000 GPU accelerator for service-managed fleets.ecr: Removes support for registry policy V1gamelift: Amazon GameLift Servers adds a new DescribeContainerGroupPortMappings API for container fleets, making it easy to discover which connection ports map to your container ports without needing to remotely access the compute.mediapackagev2: This feature adds configuration for specifying SCTE marker handling and allow greater control over generated manifest and segment URIstransfer: This launch will increase the limits for customers to list the contents from the remote directories from 10k to 200k.workspaces-web: Allow admins to configure IPv6 ranges on IP Access Settings.v1.42.97Compare Source
=======
application-signals: Application Signals now supports creating composite Service Level Objectives on Service Operations. Users can now create service SLO on multiple operations.billingconductor: Add support for Passthrough pricing plangameliftstreams: Adds Proton 10.0-4 to the list of runtime environment options available when creating an Amazon GameLift Streams applicationglue: Addition of AdditionalAuditContext to GetPartition, GetPartitions, GetTableVersion, and GetTableVersionsivs: Adds tags parameter to the CreateAdConfiguration operationkms: KMS GetKeyLastUsage API provides information on the last successful cryptographic operation performed on KMS keys. This new API provides KMS customers with the last timestamp, CloudTrail eventId, and the cryptographic operation that was performed on the key.logs: Adds support for selecting all logs sources and types in a single association.mgn: Added network modernization support, enabling customers to edit, resize, merge, and split VPCs and subnets during migration while retaining functional, non-conflicting IP addresses.omics: Enable Public Internet orConfiguration
📅 Schedule: (UTC)
* * * * 0,6)🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.