chore(deps): npm: bump the all-npm group across 4 directories with 47 updates

[dependabot]

Bumps the all-npm group with 44 updates in the / directory:

Package	From	To
knip	6.23.0	6.33.0
@aws-sdk/client-agent-registry-control	3.1116.0	3.1121.0
@aws-sdk/client-bedrock-agentcore	3.1078.0	3.1121.0
@aws-sdk/client-bedrock-agentcore-control	3.1078.0	3.1121.0
@aws-sdk/client-bedrock-runtime	3.1081.0	3.1121.0
@aws-sdk/client-dynamodb	3.1078.0	3.1121.0
@aws-sdk/client-ec2	3.1119.0	3.1121.0
@aws-sdk/client-ecs	3.1081.0	3.1121.0
@aws-sdk/client-lambda	3.1081.0	3.1121.0
@aws-sdk/client-lambda-microvms	3.1103.0	3.1121.0
@aws-sdk/client-s3	3.1081.0	3.1121.0
@aws-sdk/client-secrets-manager	3.1078.0	3.1121.0
@aws-sdk/client-sts	3.1119.0	3.1121.0
@aws-sdk/lib-dynamodb	3.1078.0	3.1121.0
@aws-sdk/s3-presigned-post	3.1081.0	3.1121.0
@aws-sdk/s3-request-presigner	3.1081.0	3.1121.0
@aws/durable-execution-sdk-js	2.1.0	2.3.0
@smithy/protocol-http	5.5.6	5.6.2
aws-cdk-lib	2.261.0	2.267.0
cdk-nag	2.38.2	3.0.2
constructs	10.6.0	10.8.1
ws	8.21.0	8.21.3
@aws-cdk/integ-runner	2.202.1	2.205.0
@cdklabs/eslint-plugin	2.0.13	2.0.18
@types/node	26.1.0	26.4.0
@typescript-eslint/eslint-plugin	8.63.0	8.68.0
@typescript-eslint/parser	8.63.0	8.68.0
aws-cdk	2.1129.0	2.1139.0
esbuild	0.28.1	0.28.2
eslint	10.6.0	10.9.1
eslint-plugin-jest	29.15.4	29.16.5
eslint-plugin-jsdoc	63.0.12	64.2.1
jest	30.4.2	30.5.0
ts-jest	29.4.11	29.4.12
typescript	6.0.3	7.0.2
@aws-sdk/client-bedrock	3.1078.0	3.1121.0
@aws-sdk/client-cloudformation	3.1078.0	3.1121.0
@aws-sdk/client-cognito-identity-provider	3.1078.0	3.1121.0
commander	14.0.3	15.0.0
retire	5.4.3	5.7.0
@astrojs/check	0.9.9	0.9.10
@astrojs/starlight	0.41.3	0.41.10
astro	7.1.3	7.2.9
markdown-link-check	3.14.2	3.15.0

Bumps the all-npm group with 5 updates in the /cdk directory:

Package	From	To
cdk-nag	2.38.2	3.0.2
js-yaml	4.3.2	5.4.1
@aws-cdk/integ-runner	2.202.1	2.205.0
eslint-plugin-jsdoc	63.3.3	64.2.1
typescript	6.0.3	7.0.2

Bumps the all-npm group with 11 updates in the /cli directory:

Package	From	To
@aws-sdk/client-bedrock-agentcore	3.1078.0	3.1121.0
@aws-sdk/client-bedrock-agentcore-control	3.1078.0	3.1121.0
@aws-sdk/client-dynamodb	3.1078.0	3.1121.0
@aws-sdk/client-secrets-manager	3.1078.0	3.1121.0
@aws-sdk/lib-dynamodb	3.1078.0	3.1121.0
eslint-plugin-jsdoc	63.3.3	64.2.1
typescript	6.0.3	7.0.2
@aws-sdk/client-bedrock	3.1078.0	3.1121.0
@aws-sdk/client-cloudformation	3.1078.0	3.1121.0
@aws-sdk/client-cognito-identity-provider	3.1078.0	3.1121.0
commander	14.0.3	15.0.0

Bumps the all-npm group with 2 updates in the /docs directory: typescript and astro.

Updates knip from 6.23.0 to 6.33.0

Release notes

Sourced from knip's releases.

Release 6.33.0

• Support package manifest resolution under Yarn PnP (#1946) (a82efb62b290e004bdabee40bcb337baf3701a1b) - thanks @​WooWan!
• Resolve oxlint jsPlugins from .oxlintrc.jsonc (#1973) (d055023182789555a574eaefde80dac997190437) - thanks @​DreierF!
• Update dependency bun to v1.4.0 (#1964) (937ab38ad514a00edafecff4ca04603b015bf921) - thanks @​renovate[bot]!
• Expose defineConfig on a ./config entrypoint (#1960) (17f7a6051d9781860f248cc2a745dbe837713cd9) - thanks @​theRizwan!
• Preserve all environment variables in exec.ts (#1979) (c0a9ecf8d1c0cdd7789c1e1bea893706c060239d) - thanks @​DreamLongYT!
• Add support for TypeScript content mappers (#1978) (db67f9bd8cebf0ea3c298690d462c154827aa462) - thanks @​remcohaszing!
• fix(vitest): resolve array entries and root-relative setup dependencies (#1982) (0ecf48538c339437e6f9dfe9a6013d307783cbd3) - thanks @​DreamLongYT!
• Fix type annotation in dynamic configuration function example (ada88c7f01563b73643af34a147a71fd9ab9d2dc)
• Format docs with remark (7764c2a4ebecdbf226c19494d255d9cb14550822)
• Throw on configuration that is not an object (d7ac0cf1de8f79be6ec53412cac9f7edf8f35ba7)
• Clarify dependency inputs, isTypeOnly and toConfig in plugin docs (2bd367961554ad1addb520bdfad5e31125885969)
• Resolve content mapper process from package.json#typescript.contentMapper.exec (74640c03e450624409692f4cc17699775108fd7e)
• Encode argv arrays before parsing them as shell commands (b79234c15153fbf592e82c94e4e4e9f41b4479e0)
• Update dependencies (28510146c2b97d88f7188f1239b9307aac7dbf0c)
• Replace non-breaking space in module graph comment (4e22bfcd09deccc92ed158f5554fe3e03f3a2c51)
• Update fix format test for oxfmt package.json key sorting (65011bf6054d03fb5580f3381867b07d1b8a9a0c)
• fix(webpack): resolve entry descriptors using import field (#1981) (cad8910e7fb89c2510fc9f5885289335dd4e60da) - thanks @​DreamLongYT!
• fix: count enum element access as a whole-object read (#1958) (5a47d603aa23b388ae7ce4fe301656f1abc43b14) - thanks @​addielaruee!
• Resolve oxlint/vite-plus import resolvers from settings (#1983) (c1165b70efe27398b86fa50bcea7d85c253d3ee7) - thanks @​DreierF!
• fix(nuxt): resolve string extends configs (#1984) (4a5d7068d6264ea45c78c832abe7ba052763517e) - thanks @​DreamLongYT!
• Wrap up webpack entry resolution (505decdb821f9b76d194742cee7e98c75ef7d8e9)
• Keep element access precise for number-like enum member names (bcbac3a8b8283da3b32256584b3cc6569ae5c02f)
• Resolve Object.* enum enumeration through import aliases (347967daaed817ca20e1ad6148388a66ec8b421b)
• Resolve named string-key access on namespace-qualified enums (2ac1fbc1e92f3dae662ca4d4701cf010346be49a)
• Normalize line endings in nuxt-config-string fixture (9fe2b2b2db8690685ec7c6cf8b3d39b9ed7b3fdc)
• Resolve nuxt layer sources from all extends entry shapes (db136151d9f98801837b33646ef7b02ae7b5a86d)
• Report unused exports behind Vitest module promise mocks (resolve #1966) (74954c219367ca1577184cca08c30dbb3fb6222e)
• Check line endings against .gitattributes in pnpm run ci (ddc9fd0cc3328260665203c8573702bb6c9d0dd6)

Release 6.32.3

• Update sentry production snapshot (9f18cba93c91de8554636b13692d6e7a937b7697)
• Pin TypeScript ecosystem test (de5162952d223050f3135afb02d4e8de6d46f381)
• Update query snapshot (f6964dd577d8f7967f9be6778f5c3953632e3c96)
• fix(tsup): match config files with .cts and .mts extensions (#1938) (68d6f52f7913cfa1e36618e6b03f90734da34149) - thanks @​codeAnqiang-ma!
• fix(lefthook): match all config file names and extensions (#1940) (4015ae0330c78e97360a2c8f697d17f82c5c24ae) - thanks @​codeAnqiang-ma!
• fix(binaries): resolve missing pnpm subcommands (#1945) (deedbf69dcbd6a59d6705a72cadb4e40ad9c8029) - thanks @​marcalexiei!
• Fix nested gitignore negation inside ignored dot-directories (#1913) (#1942) (0201641af48f52edfbe72076118944ee6273718e) - thanks @​DSeaStar!
• fix(webdriver-io): match all supported config file extensions (#1948) (dc7aca5a865d1762a41dd97493b73398ec3abc19) - thanks @​solomonaustin!
• Resolve vitest include patterns relative to test.dir (#1929) (ee555d227208dd6a34e002318bd6710dedb4d5ca) - thanks @​kirthi-b!
• Change GitHub stars badge style to flat (#1967) (ff0d791e8130430524dc88c4df73ad87f82879f7) - thanks @​DreamLongYT!
• Ignore printf as global binary (#1972) (a0c0b0805a8a26a6efdedfe2561b168da2a22b68) - thanks @​taracutie!
• fix: add bun 1.4 dedupe subcommand (#1969) (d1d5d4276ece6daf2215f5ff3f4224b5b50dcac3) - thanks @​NimmLor!
• Resolve Vitest mocks from test root (e655b0ba0192546a2688d702323c8e7c58fecde1)
• Resolve local Vitest reporters from test root (resolve #1953) (f4ff31ad0385c5955627ec1b3bed2bc0000b14fe)

Release 6.32.2

• Support oxfmt.config.mts (#1933) (795900191dc75eec8d1e717b866bf57e1e2912cc) - thanks @​joealden!
• Support oxlint.config.mts (#1934) (531e2dc7c1d8bf31babea0068c34391182ec2d50) - thanks @​joealden!
• Fix Supported lint-staged Configs (#1935) (f9c755e414ed10baa4d01af8ddac6d04cb8d5617) - thanks @​joealden!

... (truncated)

Commits

• fb25ece Release [email protected]
• 74954c2 Report unused exports behind Vitest module promise mocks (resolve #1966)
• db13615 Resolve nuxt layer sources from all extends entry shapes
• 9fe2b2b Normalize line endings in nuxt-config-string fixture
• 2ac1fbc Resolve named string-key access on namespace-qualified enums
• 347967d Resolve Object.* enum enumeration through import aliases
• bcbac3a Keep element access precise for number-like enum member names
• 505decd Wrap up webpack entry resolution
• 4a5d706 fix(nuxt): resolve string extends configs (#1984)
• c1165b7 Resolve oxlint/vite-plus import resolvers from settings (#1983)
• Additional commits viewable in compare view

Updates @aws-sdk/client-agent-registry-control from 3.1116.0 to 3.1121.0

Release notes

Sourced from @​aws-sdk/client-agent-registry-control's releases.

v3.1121.0

3.1121.0(2026-08-28)

New Features

• client-ecs: Amazon Elastic Container Service - This release adds support for early success criteria on ECS rolling deployments, letting deployment complete once a configurable percentage of tasks are healthy, with configurable BLOCKING (required) or DEFERRED (asynchronous) cleanup of previous service revisions. (ef22d750)
• client-healthlake: New HealthLake API, RestoreFHIRDatastore, providing the capability to restore active datastores to a point in time within the last 30 days or recover a deleted datastore from the delete snapshot. (62491742)
• client-bedrock-agentcore: AgentCore Memory now supports direct ingestion into long-term memory via IngestData API (20d652de)
• client-partnercentral-selling: Releasing PARC, new APN Program that lets sellers add solftware revenue details to aws opportunity summary (2b6350f0)
• client-cognito-identity-provider: Adds two new operations - GetClientToken which allows M2M auth through the SDK, and DescribeTermsByClient to find which Terms are associated with a user-pool client without knowing the Terms resource id. (86dffd28)
• client-bedrock-agent: Adds an optional syncSchedule field to CreateDataSource and UpdateDataSource for Managed Knowledge Bases data source connectors, so a data source can sync automatically on a daily, weekly, or monthly schedule. (a8d3714a)

---

For list of updated packages, view updated-packages.md in assets-3.1121.0.zip

v3.1120.0

3.1120.0(2026-08-27)

Documentation Changes

• client-opensearch: Updating SDK and CLI documentation for AttachDataSource API. (d696fe76)

New Features

• client-lambda-microvms: Added InsufficientCapacityException to RunMicrovm for capacity-related failures. Added lifecycle status field (AVAILABLE, DEPRECATED) to ListManagedMicrovmImageVersions. Added ConflictException to CreateMicrovmAuthToken and CreateMicrovmShellAuthToken for unregistered MicroVMs. (72a8ff80)
• client-codedeploy: Added a deploymentMode parameter to CreateDeployment. Set it to RESTART to restart an EC2 and on-premises fleet, using the last successful revision, honoring Deployment Configuration. (78d4f964)
• client-cloudwatch-logs: Added resultCount to QueryStatistics in GetQueryResults. This field returns the total number of output rows in the final result set, helping customers programmatically determine whether a query produced results after all operations including post-aggregation filters. (0e4d242b)
• client-datazone: Add cascadeDelete to DeleteDomain. When specified, DataZone recursively deletes all projects, environments, subscriptions, and their underlying AWS resources before removing the domain. Deletion progress is reported via deleteProgress and resource failures via failureReasons on GetDomain. (3a74dc4b)
• client-rds: Adding support for the full snapshot size, in bytes, of DB instance snapshots. (ab2f66f5)
• client-ec2: EC2 allows AMI owners to define compatible instance types on their AMIs, blocking RunInstances calls automatically for launches on non-permitted instance types. (311b3b26)
• client-cognito-identity-provider: Adds the AdminDeleteSoftwareToken API operation, enabling administrators to remove a user's registered TOTP (software token) MFA configuration from a user pool. (f661bebc)

---

For list of updated packages, view updated-packages.md in assets-3.1120.0.zip

v3.1119.0

3.1119.0(2026-08-26)

Chores

• codegen: smithy-aws-typescript-codegen 0.53.0 (#8276) (dffb383b)

New Features

• client-sagemaker: Amazon SageMaker AI now supports ml.g7 instances for model optimization. You can now run model optimization jobs on ml.g7 instances, in supported AWS Regions. (6d5e1066)
• client-devops-agent: AWS DevOps Agent now supports trigger filter groups for Release Readiness Review, letting you control when the capability auto-triggers based on webhook events and target branches. (bc3d53d5)

... (truncated)

Changelog

Sourced from @​aws-sdk/client-agent-registry-control's changelog.

3.1121.0 (2026-08-28)

Note: Version bump only for package @​aws-sdk/client-agent-registry-control

3.1120.0 (2026-08-27)

Note: Version bump only for package @​aws-sdk/client-agent-registry-control

3.1119.0 (2026-08-26)

Note: Version bump only for package @​aws-sdk/client-agent-registry-control

3.1118.0 (2026-08-25)

Note: Version bump only for package @​aws-sdk/client-agent-registry-control

3.1117.0 (2026-08-24)

Note: Version bump only for package @​aws-sdk/client-agent-registry-control

Commits

• e53a25a Publish v3.1121.0
• d6be6f8 Publish v3.1120.0
• ba4e449 Publish v3.1119.0
• c65dd65 Publish v3.1118.0
• 78b069a Publish v3.1117.0
• See full diff in compare view

Updates @aws-sdk/client-bedrock-agentcore from 3.1078.0 to 3.1121.0

Release notes

Sourced from @​aws-sdk/client-bedrock-agentcore's releases.

v3.1121.0

3.1121.0(2026-08-28)

New Features

• client-ecs: Amazon Elastic Container Service - This release adds support for early success criteria on ECS rolling deployments, letting deployment complete once a configurable percentage of tasks are healthy, with configurable BLOCKING (required) or DEFERRED (asynchronous) cleanup of previous service revisions. (ef22d750)
• client-healthlake: New HealthLake API, RestoreFHIRDatastore, providing the capability to restore active datastores to a point in time within the last 30 days or recover a deleted datastore from the delete snapshot. (62491742)
• client-bedrock-agentcore: AgentCore Memory now supports direct ingestion into long-term memory via IngestData API (20d652de)
• client-partnercentral-selling: Releasing PARC, new APN Program that lets sellers add solftware revenue details to aws opportunity summary (2b6350f0)
• client-cognito-identity-provider: Adds two new operations - GetClientToken which allows M2M auth through the SDK, and DescribeTermsByClient to find which Terms are associated with a user-pool client without knowing the Terms resource id. (86dffd28)
• client-bedrock-agent: Adds an optional syncSchedule field to CreateDataSource and UpdateDataSource for Managed Knowledge Bases data source connectors, so a data source can sync automatically on a daily, weekly, or monthly schedule. (a8d3714a)

---

For list of updated packages, view updated-packages.md in assets-3.1121.0.zip

v3.1120.0

3.1120.0(2026-08-27)

Documentation Changes

• client-opensearch: Updating SDK and CLI documentation for AttachDataSource API. (d696fe76)

New Features

• client-lambda-microvms: Added InsufficientCapacityException to RunMicrovm for capacity-related failures. Added lifecycle status field (AVAILABLE, DEPRECATED) to ListManagedMicrovmImageVersions. Added ConflictException to CreateMicrovmAuthToken and CreateMicrovmShellAuthToken for unregistered MicroVMs. (72a8ff80)
• client-codedeploy: Added a deploymentMode parameter to CreateDeployment. Set it to RESTART to restart an EC2 and on-premises fleet, using the last successful revision, honoring Deployment Configuration. (78d4f964)
• client-cloudwatch-logs: Added resultCount to QueryStatistics in GetQueryResults. This field returns the total number of output rows in the final result set, helping customers programmatically determine whether a query produced results after all operations including post-aggregation filters. (0e4d242b)
• client-datazone: Add cascadeDelete to DeleteDomain. When specified, DataZone recursively deletes all projects, environments, subscriptions, and their underlying AWS resources before removing the domain. Deletion progress is reported via deleteProgress and resource failures via failureReasons on GetDomain. (3a74dc4b)
• client-rds: Adding support for the full snapshot size, in bytes, of DB instance snapshots. (ab2f66f5)
• client-ec2: EC2 allows AMI owners to define compatible instance types on their AMIs, blocking RunInstances calls automatically for launches on non-permitted instance types. (311b3b26)
• client-cognito-identity-provider: Adds the AdminDeleteSoftwareToken API operation, enabling administrators to remove a user's registered TOTP (software token) MFA configuration from a user pool. (f661bebc)

---

For list of updated packages, view updated-packages.md in assets-3.1120.0.zip

v3.1119.0

3.1119.0(2026-08-26)

Chores

• codegen: smithy-aws-typescript-codegen 0.53.0 (#8276) (dffb383b)

New Features

• client-sagemaker: Amazon SageMaker AI now supports ml.g7 instances for model optimization. You can now run model optimization jobs on ml.g7 instances, in supported AWS Regions. (6d5e1066)
• client-devops-agent: AWS DevOps Agent now supports trigger filter groups for Release Readiness Review, letting you control when the capability auto-triggers based on webhook events and target branches. (bc3d53d5)

... (truncated)

Changelog

Sourced from @​aws-sdk/client-bedrock-agentcore's changelog.

3.1121.0 (2026-08-28)

Features

• client-bedrock-agentcore: AgentCore Memory now supports direct ingestion into long-term memory via IngestData API (20d652d)

3.1120.0 (2026-08-27)

Note: Version bump only for package @​aws-sdk/client-bedrock-agentcore

3.1119.0 (2026-08-26)

Note: Version bump only for package @​aws-sdk/client-bedrock-agentcore

3.1118.0 (2026-08-25)

Note: Version bump only for package @​aws-sdk/client-bedrock-agentcore

3.1117.0 (2026-08-24)

Note: Version bump only for package @​aws-sdk/client-bedrock-agentcore

3.1116.0 (2026-08-21)

Note: Version bump only for package @​aws-sdk/client-bedrock-agentcore

... (truncated)

Commits

• e53a25a Publish v3.1121.0
• 20d652d feat(client-bedrock-agentcore): AgentCore Memory now supports direct ingestio...
• d6be6f8 Publish v3.1120.0
• ba4e449 Publish v3.1119.0
• c65dd65 Publish v3.1118.0
• 78b069a Publish v3.1117.0
• d760a00 Publish v3.1116.0
• 8369ada chore(codegen): update to sync with the latest smithy-ts (#8272)
• efc86fc Publish v3.1115.0
• 5318b44 Publish v3.1114.0
• Additional commits viewable in compare view

Updates @aws-sdk/client-bedrock-agentcore-control from 3.1078.0 to 3.1121.0

Release notes

Sourced from @​aws-sdk/client-bedrock-agentcore-control's releases.

v3.1121.0

3.1121.0(2026-08-28)

New Features

• client-ecs: Amazon Elastic Container Service - This release adds support for early success criteria on ECS rolling deployments, letting deployment complete once a configurable percentage of tasks are healthy, with configurable BLOCKING (required) or DEFERRED (asynchronous) cleanup of previous service revisions. (ef22d750)
• client-healthlake: New HealthLake API, RestoreFHIRDatastore, providing the capability to restore active datastores to a point in time within the last 30 days or recover a deleted datastore from the delete snapshot. (62491742)
• client-bedrock-agentcore: AgentCore Memory now supports direct ingestion into long-term memory via IngestData API (20d652de)
• client-partnercentral-selling: Releasing PARC, new APN Program that lets sellers add solftware revenue details to aws opportunity summary (2b6350f0)
• client-cognito-identity-provider: Adds two new operations - GetClientToken which allows M2M auth through the SDK, and DescribeTermsByClient to find which Terms are associated with a user-pool client without knowing the Terms resource id. (86dffd28)
• client-bedrock-agent: Adds an optional syncSchedule field to CreateDataSource and UpdateDataSource for Managed Knowledge Bases data source connectors, so a data source can sync automatically on a daily, weekly, or monthly schedule. (a8d3714a)

---

For list of updated packages, view updated-packages.md in assets-3.1121.0.zip

v3.1120.0

3.1120.0(2026-08-27)

Documentation Changes

• client-opensearch: Updating SDK and CLI documentation for AttachDataSource API. (d696fe76)

New Features

• client-lambda-microvms: Added InsufficientCapacityException to RunMicrovm for capacity-related failures. Added lifecycle status field (AVAILABLE, DEPRECATED) to ListManagedMicrovmImageVersions. Added ConflictException to CreateMicrovmAuthToken and CreateMicrovmShellAuthToken for unregistered MicroVMs. (72a8ff80)
• client-codedeploy: Added a deploymentMode parameter to CreateDeployment. Set it to RESTART to restart an EC2 and on-premises fleet, using the last successful revision, honoring Deployment Configuration. (78d4f964)
• client-cloudwatch-logs: Added resultCount to QueryStatistics in GetQueryResults. This field returns the total number of output rows in the final result set, helping customers programmatically determine whether a query produced results after all operations including post-aggregation filters. (0e4d242b)
• client-datazone: Add cascadeDelete to DeleteDomain. When specified, DataZone recursively deletes all projects, environments, subscriptions, and their underlying AWS resources before removing the domain. Deletion progress is reported via deleteProgress and resource failures via failureReasons on GetDomain. (3a74dc4b)
• client-rds: Adding support for the full snapshot size, in bytes, of DB instance snapshots. (ab2f66f5)
• client-ec2: EC2 allows AMI owners to define compatible instance types on their AMIs, blocking RunInstances calls automatically for launches on non-permitted instance types. (311b3b26)
• client-cognito-identity-provider: Adds the AdminDeleteSoftwareToken API operation, enabling administrators to remove a user's registered TOTP (software token) MFA configuration from a user pool. (f661bebc)

---

For list of updated packages, view updated-packages.md in assets-3.1120.0.zip

v3.1119.0

3.1119.0(2026-08-26)

Chores

• codegen: smithy-aws-typescript-codegen 0.53.0 (#8276) (dffb383b)

New Features

• client-sagemaker: Amazon SageMaker AI now supports ml.g7 instances for model optimization. You can now run model optimization jobs on ml.g7 instances, in supported AWS Regions. (6d5e1066)
• client-devops-agent: AWS DevOps Agent now supports trigger filter groups for Release Readiness Review, letting you control when the capability auto-triggers based on webhook events and target branches. (bc3d53d5)

... (truncated)

Changelog

Sourced from @​aws-sdk/client-bedrock-agentcore-control's changelog.

3.1121.0 (2026-08-28)

Note: Version bump only for package @​aws-sdk/client-bedrock-agentcore-control

3.1120.0 (2026-08-27)

Note: Version bump only for package @​aws-sdk/client-bedrock-agentcore-control

3.1119.0 (2026-08-26)

Note: Version bump only for package @​aws-sdk/client-bedrock-agentcore-control

3.1118.0 (2026-08-25)

Note: Version bump only for package @​aws-sdk/client-bedrock-agentcore-control

3.1117.0 (2026-08-24)

Note: Version bump only for package @​aws-sdk/client-bedrock-agentcore-control

3.1116.0 (2026-08-21)

Features

• client-bedrock-agentcore-control: Update Dataset schema to THIRDPARTYEVALUATIONV1 (f0fe8db)

... (truncated)

Commits

• e53a25a Publish v3.1121.0
• d6be6f8 Publish v3.1120.0
• ba4e449 Publish v3.1119.0
• c65dd65 Publish v3.1118.0
• 78b069a Publish v3.1117.0
• d760a00 Publish v3.1116.0
• f0fe8db feat(client-bedrock-agentcore-control): Update Dataset schema to THIRDPARTYEV...
• 8369ada chore(codegen): update to sync with the latest smithy-ts (#8272)
• efc86fc Publish v3.1115.0
• 5318b44 Publish v3.1114.0
• Additional commits viewable in compare view

Updates @aws-sdk/client-bedrock-runtime from 3.1081.0 to 3.1121.0

Release notes

Sourced from @​aws-sdk/client-bedrock-runtime's releases.

v3.1121.0

3.1121.0(2026-08-28)

New Features

• client-ecs: Amazon Elastic Container Service - This release adds support for early success criteria on ECS rolling deployments, letting deployment complete once a configurable percentage of tasks are healthy, with configurable BLOCKING (required) or DEFERRED (asynchronous) cleanup of previous service revisions. (ef22d750)
• client-healthlake: New HealthLake API, RestoreFHIRDatastore, providing the capability to restore active datastores to a point in time within the last 30 days or recover a deleted datastore from the delete snapshot. (62491742)
• client-bedrock-agentcore: AgentCore Memory now supports direct ingestion into long-term memory via IngestData API (20d652de)
• client-partnercentral-selling: Releasing PARC, new APN Program that lets sellers add solftware revenue details to aws opportunity summary (2b6350f0)
• client-cognito-identity-provider: Adds two new operations - GetClientToken which allows M2M auth through the SDK, and DescribeTermsByClient to find which Terms are associated with a user-pool client without knowing the Terms resource id. (86dffd28)
• client-bedrock-agent: Adds an optional syncSchedule field to CreateDataSource and UpdateDataSource for Managed Knowledge Bases data source connectors, so a data source can sync automatically on a daily, weekly, or monthly schedule. (a8d3714a)

---

For list of updated packages, view updated-packages.md in assets-3.1121.0.zip

v3.1120.0

3.1120.0(2026-08-27)

Documentation Changes

• client-opensearch: Updating SDK and CLI documentation for AttachDataSource API. (d696fe76)

New Features

• client-lambda-microvms: Added InsufficientCapacityException to RunMicrovm for capacity-related failures. Added lifecycle status field (AVAILABLE, DEPRECATED) to ListManagedMicrovmImageVersions. Added ConflictException to CreateMicrovmAuthToken and CreateMicrovmShellAuthToken for unregistered MicroVMs. (72a8ff80)
• client-codedeploy: Added a deploymentMode parameter to CreateDeployment. Set it to RESTART to restart an EC2 and on-premises fleet, using the last successful revision, honoring Deployment Configuration. (78d4f964)
• client-cloudwatch-logs: Added resultCount to QueryStatistics in GetQueryResults. This field returns the total number of output rows in the final result set, helping customers programmatically determine whether a query produced results after all operations including post-aggregation filters. (0e4d242b)
• client-datazone: Add cascadeDelete to DeleteDomain. When specified, DataZone recursively deletes all projects, environments, subscriptions, and their underlying AWS resources before removing the domain. Deletion progress is reported via deleteProgress and resource failures via failureReasons on GetDomain. (3a74dc4b)
• client-rds: Adding support for the full snapshot size, in bytes, of DB instance snapshots. (ab2f66f5)
• client-ec2: EC2 allows AMI owners to define compatible instance types on their AMIs, blocking RunInstances calls automatically for launches on non-permitted instance types. (311b3b26)
• client-cognito-identity-provider: Adds the AdminDeleteSoftwareToken API operation, enabling administrators to remove a user's registered TOTP (software token) MFA configuration from a user pool. (f661bebc)

---

For list of updated packages, view updated-packages.md in assets-3.1120.0.zip

v3.1119.0

3.1119.0(2026-08-26)

Chores

• codegen: smithy-aws-typescript-codegen 0.53.0 (#8276) (dffb383b)

New Features

• client-sagemaker: Amazon SageMaker AI now supports ml.g7 instances for model optimization. You can now run model optimization jobs on ml.g7 instances, in supported AWS Regions. (6d5e1066)
• client-devops-agent: AWS DevOps Agent now supports trigger filter groups for Release Readiness Review, letting you control when the capability auto-triggers based on webhook events and target branches. (bc3d53d5)

... (truncated)

Changelog

Sourced from @​aws-sdk/client-bedrock-runtime's changelog.

3.1121.0 (2026-08-28)

Note: Version bump only for package @​aws-sdk/client-bedrock-runtime

3.1120.0 (2026-08-27)

Note: Version bump only for package @​aws-sdk/client-bedrock-runtime

3.1119.0 (2026-08-26)

Note: Version bump only for package @​aws-sdk/client-bedrock-runtime

3.1118.0 (2026-08-25)

Note: Version bump only for package @​aws-sdk/client-bedrock-runtime

3.1117.0 (2026-08-24)

Note: Version bump only for package @​aws-sdk/client-bedrock-runtime

3.1116.0 (2026-08-21)

Note: Version bump only for package @​aws-sdk/client-bedrock-runtime

3.1115.0 (2026-08-20)

... (truncated)

Commits

• e53a25a Publish v3.1121.0
• d6be6f8 Publish v3.1120.0
• ba4e449 Publish v3.1119.0
• c65dd65 Publish v3.1118.0
• 78b069a Publish v3.1117.0
• d760a00 Publish v3.1116.0
• 8369ada chore(codegen): update to sync with the latest smithy-ts (#8272)
• efc86fc Publish v3.1115.0
• 5318b44 Publish v3.1114.0
• 73a06d2 Publish v3.1113.0
• Additional commits viewable in compare view

Updates @aws-sdk/client-dynamodb from 3.1078.0 to 3.1121.0

Release notes

Sourced from @​aws-sdk/client-dynamodb's releases.

v3.1121.0

3.1121.0(2026-08-28)

New Features

• client-ecs: Amazon Elastic Container Service - This release adds support for early success criteria on ECS rolling deployments, letting deployment complete once a configurable percentage of tasks are healthy, with configurable BLOCKING (required) or DEFERRED (asynchronous) cleanup of previous service revisions. (ef22d750)
• client-healthlake: New HealthLake API, RestoreFHIRDatastore, providing the capability to restore active datastores to a point in time within the last 30 days or recover a deleted datastore from the delete snapshot. (62491742)
• client-bedrock-agentcore: AgentCore Memory now supports direct ingestion into long-term memory via IngestData API (20d652de)
• client-partnercentral-selling: Releasing PARC, new APN Program that lets sellers add solftware revenue details to aws opportunity summary (2b6350f0)
• client-cognito-identity-provider: Adds two new operations - GetClientToken which allows M2M auth through the SDK, and DescribeTermsByClient to find which Terms are associated with a user-pool client without knowing the Terms resource id. (86dffd28)
• client-bedrock-agent: Adds an optional syncSchedule field to CreateDataSource and UpdateDataSource for Managed Knowledge Bases data source connectors, so a data source can sync automatically on a daily, weekly, or monthly schedule. (a8d3714a)

---

For list of updated packages, view updated-packages.md in assets-3.1121.0.zip

v3.1120.0

3.1120.0(2026-08-27)

Documentation Changes

• client-opensearch: Updating SDK and CLI documentation for AttachDataSource API. (d696fe76)

New Features

• client-lambda-microvms: Added InsufficientCapacityException to RunMicrovm for capacity-related failures. Added lifecycle status field (AVAILABLE, DEPRECATED) to ListManagedMicrovmImageVersions. Added ConflictException to CreateMicrovmAuthToken and CreateMicrovmShellAuthToken for unregistered MicroVMs. (72a8ff80)
• client-codedeploy: Added a deploymentMode parameter to CreateDeployment. Set it to RESTART to restart an EC2 and on-premises fleet, using the last successful revision, honoring Deployment Configuration. (78d4f964)
• client-cloudwatch-logs: Added resultCount to QueryStatistics in GetQueryResults. This field returns the total number of output rows in the final result set, helping customers programmatically determine whether a query produced results after all operations including post-aggregation filters. (0e4d242b)
• client-datazone: Add cascadeDelete to DeleteDomain. When specified, DataZone recursively deletes all projects, environments, subscriptions, and their underlying AWS resources before removing the domain. Deletion progress is reported via deleteProgress and resource failures via failureReasons on GetDomain. (3a74dc4b)
• client-rds: Adding support for the full snapshot size, in bytes, of DB instance snapshots. (ab2f66f5)
• client-ec2: EC2 allows AMI owners to define compatible instance types on their AMIs, blocking RunInstances calls automatically for launches on non-permitted instance types. (311b3b26)
• client-cognito-identity-provider: Adds the AdminDeleteSoftwareToken API operation, enabling administrators to remove a user's registered TOTP (software token) MFA configuration from a user pool. (f661bebc)

---

For list of updated packages, view updated-packages.md in assets-3.1120.0.zip

v3.1119.0

3.1119.0(2026-08-26)

Chores

• codegen: smithy-aws-typescript-codegen 0.53.0 (#8276) (dffb383b)

New Features

• client-sagemaker: Amazon SageMaker AI now supports ml.g7 instances for model optimization. You can now run model optimization jobs on ml.g7 instances, in supported AWS Regions. (6d5e1066)
• client-devops-agent: AWS DevOps Agent now supports trigger filter groups for Release Readiness Review, letting you control when the capability auto-triggers based on webhook events and target branches. (bc3d53d5)

... (truncated)

Changelog

Sourced from

[vivibui]

Heads-up: this PR fixes 4 of the 6 advisories osv-scanner currently reports on main, but svgo is left behind, so mise run security:deps will still fail after merge.

The gap

From this branch's own yarn.lock:

svgo@^4.0.1:
  version "4.0.2"        ← unchanged; 4.1.0 is the fixed version

svgo is a transitive dependency of astro and the bump to 7.2.9 doesn't move it — astro 7.2.9 still declares svgo "^4.0.1", and the existing lock entry already satisfies that range, so nothing forces a re-resolve.

Two advisories survive:

advisory	CVSS	package	this branch	fixed in
GHSA-4vpr-x523-8j87	6.1	svgo	4.0.2	4.1.0
GHSA-w27v-7q3p-w38r	8.2	svgo	4.0.2	4.1.0

The other four are correctly handled here — astro 7.2.9, js-yaml 4.3.2, sharp 0.35.4.

One-line completion

^4.0.1 already admits 4.1.0, so no dependent needs changing — a root resolutions entry is enough to force the re-resolve:

"resolutions": {
  "svgo": "^4.1.0"
}

I verified this locally on top of the same three bumps this PR makes (astro 7.2.9 / js-yaml 4.3.2 / sharp 0.35.4, plus sharp and svgo as resolutions):

$ mise run security:deps
Scanned yarn.lock file and found 1210 packages
No issues found

and mise run build came out clean — exit 0, 0 task failures, 4,471 cdk + 903 cli tests, docs site builds on astro 7.2.9.

Also worth knowing

The Secrets, deps, and workflow scan result showing green on this PR is stale — it ran 2026-09-05, and these advisories were published after that. A re-run will go red on the svgo pair until the above lands. Same staleness applies to any other open PR still showing that check green.

Context for why I noticed: #867's scan is failing on these six, and I confirmed it's pre-existing by running the same scan against a clean origin/main at 12c9b63f — identical failure, and that PR touches no lockfile.

Happy to open a separate minimal PR for just the svgo resolution if that's easier than nudging dependabot, though folding it in here is obviously cleaner.