chore(deps): update aws sdk for the rustfs role to v1.43.112

[renovate]

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Confidence
boto3	1.43.91 → 1.43.112
botocore	1.43.91 → 1.43.112

---

Release Notes

boto/boto3 (boto3)

v1.43.112

Compare Source

========

• api-change:bedrock-agentcore: [botocore] AgentCore Memory now supports Long-Term Memory Time-to-Live on Batch APIs.
• api-change:bedrock-agentcore-control: [botocore] AgentCore Memory now supports configuring Long-Term Memory Time-to-Live (TTL) on Memory Strategies.
• api-change:cloudwatchomni: [botocore] Adds support for updating agentCoreEvaluationRoleArn in UpdateSpace API
• api-change:devops-agent: [botocore] Adds support for the includedData field in GetAgentSpace and ListAgentSpaces APIs
• api-change:endpoint-rules: [botocore] Update endpoint-rules client to latest version
• api-change:glue: [botocore] Adds new AWS Glue Data Quality APIs to retrieve and list data quality evaluation results. The new GetDataQualityResultV2, BatchGetDataQualityResultV2, and ListDataQualityResultsV2 operations return data quality results published from any supported data processing engine.
• api-change:lambda: [botocore] Doc updates to reposition Lambda Functions as Lambda Event Functions
• api-change:lambda-core: [botocore] Lambda Network Connector now supports Lambda Web Functions, letting them reach private VPC resources, and adds versioning, each connector update creates an immutable version that revisions pin to, so customers can roll out and roll back networking changes without affecting running workloads
• api-change:lambda-web: [botocore] Lambda Web Functions GA launch. Lambda Web Functions enable customers to run web applications and API backends
• api-change:mediaconnect: [botocore] This release adds support for MediaConnect Router high-bitrate tiers. It also adds a configurable audio reference level for NDI flows, and enhanced source metadata that includes color information and transport stream ID.
• api-change:observabilityadmin: [botocore] Adding support for TransactionSearch telemetry rules.
• api-change:omics: [botocore] AWS HealthOmics now supports private workflow runs using VPC resources shared across accounts via AWS RAM. A new optional vpcOwnerAccountId field in CreateConfiguration's VpcConfig allows customers to specify the account that owns the shared subnets and security groups.
• api-change:pcs: [botocore] Adding scheduler version to RegisterComputeNodeGroup API. A compute node uses this value to run the matching scheduler version.
• api-change:pinpoint-sms-voice-v2: [botocore] DescribePhoneNumbers and DescribeSenderIds now return an optional PricingTier field that indicates whether a phone number, sender ID, short code, or long code is classified as Domestic or International, enabling customers to identify origination identities eligible for local pricing.
• api-change:sagemaker: [botocore] Amazon SageMaker Training Session is a managed service for training on shared GPU infrastructure. It provides full lifecycle management of training sessions and exposes low-level primitive APIs for operations like forward-backward passes, optimizer steps, and state management.
• api-change:sagemakertrainingsessionruntime: [botocore] Amazon SageMaker Training Session Runtime provides APIs for executing operations within active training sessions, including asynchronous training operations, sampling and inference requests, and streaming real-time model responses, enabling programmatic control over the training loop.
• api-change:securityagent: [botocore] Adds support for Jira integration provider in AWS Security Agent.

v1.43.111

Compare Source

========

• api-change:deadline: [botocore] The new ListMemberships API enables users to discover their memberships across Deadline Cloud resources, enabling scoped users of Deadline resources to discover and interact with the resources they have been provided scoped access to.
• api-change:mediatailor: [botocore] Add caching settings to http functions
• api-change:meteringmarketplace: [botocore] AWS Marketplace Metering Service adds AgreementId to ResolveCustomer API response.
• api-change:quicksight: [botocore] Adds granular custom permissions for the Gong action connector (GongAction, CreateAndUpdateGongAction, ShareGongAction, UseGongAction) and for create, update, and share operations on 45 data source connectors, such as Amazon S3 and Snowflake, through the Custom Permissions APIs.
• api-change:securityagent: [botocore] Adds a test scope field to specify whether a pentest targets a web application or a generative AI application.

v1.43.110

Compare Source

========

• api-change:budgets: [botocore] Adds a product attribute dimension to CreateBudget and UpdateBudget, letting customers filter AWS Budgets costs by structured attributes such as Amazon Bedrock model, provider, inference type, and feature.
• api-change:ce: [botocore] Adds a product attribute dimension to GetCostAndUsage, GetCostAndUsageWithResources, and GetDimensionValues, letting customers group, filter, and discover Cost Explorer costs by structured attributes such as Amazon Bedrock model, provider, inference type, and feature.
• api-change:cloudformation: [botocore] CloudFormation introduces force rollback, a new opt-in capability that lets your stacks complete a rollback even when an individual resource cannot be reverted. Set ForceRollback on ContinueUpdateRollback and CloudFormation records each resource that fails as skipped, completing the rollback.
• api-change:codeconnections: [botocore] This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.0. The SDK will prioritize its most performant protocol.
• api-change:datazone: [botocore] Adds support for multi-file notebook import. StartNotebookImport now accepts an s3Files source location with an ordered list of Amazon S3 objects, creating one notebook cell per file, plus a type field to create either a DATA or SQL notebook.
• api-change:devops-agent: [botocore] Adds release management associations with private network access to AWS DevOps Agent, and a releaseManagementAssociationId field on GitHub and GitLab associations. This helps release management agents (Release-readiness review and Release Testing) access customer resources that are behind a VPC.
• api-change:eks: [botocore] Configurations support for EKS ACK Capabilities, including EnableCrossNamespace and DisableServices configuration.
• api-change:emr-serverless: [botocore] This release adds support for system profile logs for lakeformation enabled Spark connect sessions .
• api-change:fms: [botocore] This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.1. The SDK will prioritize its most performant protocol.
• api-change:gamelift: [botocore] Amazon GameLift Servers container fleets now support CPU bursting for game server container groups. The TotalVcpuLimit property of a game server container group definition is now optional. When you omit it, the group has no CPU cap and its containers can burst into unused CPU on the instance.
• api-change:glue: [botocore] Introduced GetSystemLogsForJobRun and GetSystemLogsForSession APIs, enabling account admins to retrieve system-space logs for FGAC-enabled Glue jobs and sessions.
• api-change:guardduty: [botocore] Added support for GuardDuty RDS Data Activity Monitoring
• api-change:health: [botocore] This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.1. The SDK will prioritize its most performant protocol.
• api-change:keyspaces: [botocore] This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.0. The SDK will prioritize its most performant protocol.
• api-change:lambda: [botocore] AWS Lambda now supports OAuth 2.0 (OAUTHBEARER), IAM, and IAM with OAUTHBEARER authentication for self-managed Apache Kafka event source mappings, including optional OAuth scope, audience, logical cluster, and identity pool parameters. OAuth 2.0 is also available for Confluent Schema Registry.
• api-change:marketplace-agreement: [botocore] This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.0. The SDK will prioritize its most performant protocol.
• api-change:medialive: [botocore] AWS Elemental MediaLive Workflow Monitor now supports AWS Elemental Inference feeds as a target resource type for CloudWatch alarm templates.
• api-change:opensearch: [botocore] This release adds a new EncryptionMode option (DISK or NATIVE) to EncryptionAtRestOptions for the CreateDomain and UpdateDomainConfig operations, enabling selection of engine-native index-level encryption on supported Amazon OpenSearch Service domains.
• api-change:pi: [botocore] This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.1. The SDK will prioritize its most performant protocol.
• api-change:securityagent: [botocore] Include model field for suggested remediation steps as part of findings
• api-change:securityhub: [botocore] Release findings export APIs - StartExportJobV2, GetExportJobV2, ListExportJobsV2, and CancelExportJobV2. This supports exporting findings from AWS Security Hub to Amazon S3 bucket.
• api-change:security-ir: [botocore] Adds support for retrieving finding-lifecycle metrics for an AWS Security Incident Response membership.
• api-change:sesv2: [botocore] SESV2 DEED - Documentation Update
• api-change:translate: [botocore] This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.1. The SDK will prioritize its most performant protocol.

v1.43.109

Compare Source

========

• api-change:lambda-web: [botocore] Removes operations that are not yet generally available from the Lambda Web.

v1.43.108

Compare Source

========

• api-change:cognito-idp: [botocore] Amazon Cognito User Pools now supports the OIDC-standard authentication context class reference (ACR) and authentication methods reference (AMR) claims on issued access and Id tokens. Amazon Cognito User Pools also now supports step-up authentication via our existing authentication APIs.
• api-change:glue: [botocore] Added refresh token grant type to Glue Connection supported OAuth 2.0 grant types
• api-change:invoicing: [botocore] API and doc updates related to adding MarketplacePunchOutEnabled and MarketplacePunchOutPreference fields to ProcurementPortalPreferences related APIs
• api-change:lambda-web: [botocore] Documentation update for AWS Lambda Web Functions, clarifies that the LambdaWeb APIs are experimental and not yet available to external customers.
• api-change:mediapackagev2: [botocore] Dynamic Multiview enables viewers to watch multiple live video streams in a single combined output. Static filter configuration allows users to configure endpoints with layouts and sources without using query parameters. The number of sources per multiview channel has been increased to 50.
• api-change:pinpoint-sms-voice-v2: [botocore] AWS End User Messaging SMS CarrierLookup API now supports phone number cleansing on customer opt-in. when selected, the response includes the additional field "OriginalPhoneNumber". It can also return additional PhoneNumberType enums, VOIP and PREPAID.
• api-change:securityagent: [botocore] Adds trigger filters that control which pull request events, target branches, and labels start an automatic code review.

v1.43.107

Compare Source

========

• api-change:bedrock-agent: [botocore] Adds an optional textReadyAt field to ListIngestionJobs and GetIngestionJob for Managed Knowledge Bases data source sync jobs. The field denotes the timestamp at which all the documents in the scope of a sync job had their text content indexed and are available for retrieval.
• api-change:cloudfront: [botocore] Added always-amz-auth as a supported signing behavior for Origin Access Control (OAC), enabling CloudFront to authenticate requests to Lambda-Web origins.
• api-change:ec2: [botocore] This release launches the AMI tag sharing feature, which lets AMI owners share tags alongside their AMIs, eliminating the need to build and maintain custom tag replication workflows.
• api-change:endpoint-rules: [botocore] Update endpoint-rules client to latest version
• api-change:endusermessaging: [botocore] AWS End User Messaging now supports Brand profiles and Notify code configurations. Brand profiles capture your sender details once to reuse across phone number registrations. Notify code configurations let you define your OTP policy and delivery settings to send passcodes in minutes.
• api-change:health: [botocore] Adds DescribeServiceLifecycle operation returning lifecycle information for AWS services, including end-of-support dates, version recommendations, and lifecycle events.
• api-change:lambda-web: [botocore] Lambda Web Functions GA launch. Lambda Web Functions enable customers to run web applications and API backends
• api-change:quicksight: [botocore] This release adds HierarchyFilter support for Amazon QuickSight analysis and dashboard and 2 legged OAuth for databricks datasources.
• api-change:sagemaker: [botocore] Release support for c8a.16xlarge and m8a.16xlarge instance types for SageMaker HyperPod
• api-change:securityhub: [botocore] Adds GetRemediationsV2 and ListExposuresByRemediationV2 APIs. This feature allows customers to see their highest priority remediations for their Exposure findings. Remediations target key changes customers can make to resources to drive finding resolution.
• api-change:transfer: [botocore] AWS Transfer Family Workflows adds support for the structuredLogDestinations option, enabling customers to specify a custom Amazon CloudWatch Logs log group for managed workflow execution logs.

v1.43.106

Compare Source

========

• api-change:account: [botocore] This release adds support for verifying an AWS account's primary contact phone number. SendPhoneNumberVerification sends a one-time code by SMS, VerifyPhoneNumber validates it, and GetContactInformation now returns the verification status.
• api-change:agent-registry: [botocore] Minor doc update for the AWS Agent Registry Custom metadata SearchDiscoverableRegistryRecords API
• api-change:batch: [botocore] AWS Batch adds support for Amazon EKS access entries on EKS compute environments through the new accessEntry setting in CreateComputeEnvironment and UpdateComputeEnvironment.
• api-change:bedrock: [botocore] Amazon Bedrock Automated Reasoning policies now accept Unicode letters in identifier names such as type names, type value names, and variable names. You can now author policies in non-English languages using accented or non-Latin characters.
• api-change:bedrock-agentcore-control: [botocore] This release adds support for private certificate authorities on Amazon Bedrock AgentCore Gateway targets. The new certificateConfigurations parameter on CreateGatewayTarget and UpdateGatewayTarget references a PEM-encoded CA certificate in Amazon S3 or AWS Secrets Manager.
• api-change:connect: [botocore] Amazon Connect Rules can now trigger in-app notifications to users as a rule action. Notification character limit was increased to 500 visible characters.
• api-change:datazone: [botocore] Support for setting notebook run notification configurations
• api-change:dynamodb: [botocore] Adds support for filtering exported table data using FilterExpression, ProjectionExpression and KeyConditionExpression with ExportTableToPointInTime.
• api-change:ecs: [botocore] Releasing VPCL for BlueGreen ecs deployments.
• api-change:globalaccelerator: [botocore] IpSets now include the Network Zone for each Static IP address.
• api-change:glue: [botocore] Enable Catalog ID for crawler, column statistics and materialized views.
• api-change:guardduty: [botocore] GuardDuty AWS Organizations policy integration. GetDetector and GetMemberDetectors now show whether a GuardDuty policy manages a feature.
• api-change:logs: [botocore] Amazon CloudWatch Logs now supports an optional roleArn parameter on PutDeliveryDestination for X-Ray trace delivery destinations, specifying the IAM role to assume when delivering traces.
• api-change:observabilityadmin: [botocore] Enablement for Bedrock PaymentManager logs via Observability Admin Telemetry Rule
• api-change:organizations: [botocore] Add support for policy operations on the GUARDDUTY POLICY policy type.
• api-change:s3: [botocore] Amazon S3 adds a new optional S3 Inventory field, IntelligentTieringReferenceDate, reporting the reference date S3 Intelligent-Tiering uses to evaluate an object's tier-transition eligibility. The value is populated for objects in the Intelligent-Tiering storage class and left blank for others.
• api-change:s3vectors: [botocore] Amazon S3 Vectors now supports metadata prefiltering, providing higher recall on filtered queries.
• api-change:sagemaker: [botocore] This feature enables customers to modify their accounting database via API.

v1.43.105

Compare Source

========

• api-change:appstream: [botocore] Add support for NVIDIA GRID driver version metadata in Workspace Applications image responses through the new ImageSoftwareMetadata field.
• api-change:bedrock-agent-runtime: [botocore] Amazon Bedrock Agentic Retrieve now supports the Bedrock Mantle (OpenAI Responses) endpoint via a new MantleFoundationModel configuration with an optional projectId.
• api-change:deadline: [botocore] AWS Deadline Cloud now supports Docker software add-ons on service-managed fleets. Adds support for Open Job Description EXPR and Feature Bundle 1 job templates with typed job parameters and job, step, and parameter names up to 512 characters.
• api-change:ec2: [botocore] Adds the LaunchStatus field to CapacityReservation in the DescribeCapacityReservations response. This field indicates whether you can currently launch instances into an UltraServer.
• api-change:elasticache: [botocore] Amazon ElastiCache Serverless now supports public endpoints for Valkey caches. With the new Connection Type parameter, you can create a serverless cache accessible over the internet without any VPC configuration. Public endpoint caches require IAM authentication.
• api-change:elementalinference: [botocore] Adds an extendedAnalysis setting to contextual metadata outputs to control detection of people, environments, brands, and on-screen text, and updates the summaryGeneration documentation.
• api-change:glue: [botocore] Add support for Glue system-managed materialized views.
• api-change:identitystore: [botocore] Add support for network access controls to restrict Identity Store API and SCIM access to trusted networks, optimistic locking for users and groups via resource revisions, and resource ARNs as identifiers in requests.
• api-change:inspector2: [botocore] The ListFindingAggregations API now includes Low, Informational, and Untriaged counts alongside the existing severity counts in SeverityCounts.
• api-change:mediatailor: [botocore] AWS Elemental MediaTailor now supports beaconing configuration on playback configurations. In Insights reporting mode, MediaTailor will now gather client side beaconing metrics. Set the reporting mode to Disabled to turn this off.
• api-change:opensearch: [botocore] Amazon OpenSearch Service now supports advisory pre-validations for domain config changes. Non-critical checks now surface as warnings you can acknowledge (via the new AcceptedWarnings parameter) and proceed, instead of hard-blocking. Severity is reported in change-progress and dry-run results.
• api-change:rds: [botocore] Adds the TargetResourceConfigurations parameter to CreateBlueGreenDeployment, letting you specify a target KMS key for each resource in the green environment.
• api-change:sagemaker: [botocore] Adds support for cpu flex type instances on SageMaker Training and Processing. Also contains minor updates to DescribeTrainingPlan to support ARN inputs.
• api-change:securityagent: [botocore] Adds support for Azure DevOps and Bitbucket Data Center integration providers.
• api-change:sesv2: [botocore] Added Filter support for ListTenants, ListEmailIdentities, and ListConfigurationSets APIs.
• api-change:transfer: [botocore] AWS Transfer Family now supports configuring up to three custom ports on public SFTP servers, instead of the single default port 22. You can also set each port's communication mode (server-talk-first or client-talk-first) so legacy and modern SFTP clients connect reliably.

v1.43.104

Compare Source

========

• api-change:agent-registry: [botocore] AWS Agent Registry adds support for custom metadata. Discovery APIs now return custom metadata on registry records and support filtering by metadata fields. Semantic search includes custom metadata for improved relevance. Filter customMetadata fields using eq, ne, and in operators.
• api-change:agent-registry-control: [botocore] AWS Agent Registry adds support for custom metadata. Define a typed metadata schema on your registry and attach structured key-value metadata to registry records. Schemas are additive only. Enforcement is progressive. Records show a compliance status computed against the current schema.
• api-change:bedrock-agentcore-control: [botocore] Amazon Bedrock AgentCore Gateway now supports returning the complete MCP tools list in a single response by disabling pagination for the tools list operation. This feature is available in limited preview.
• api-change:billing: [botocore] Adds support for (a) listing Business Support account charges via ListBusinessSupportAccountCharges and (b) subscription history via ListBusinessSupportSubscriptionHistory through the AWS Billing API.
• api-change:connect: [botocore] This release adds ConnectionTypes and ChatStreamingConfiguration to StartChatContact, and ConnectionCredentials, Websocket, and StreamingId to its response, so customers can request connection information and chat streaming in the same call that starts the chat.
• api-change:ec2: [botocore] API changes to AWS Client VPN to support device posture assessment and Cedar authorization policies
• api-change:eks: [botocore] An optional customer provided prefix used to construct the hostname of the Argo CD server endpoint for EKS Argo CD Capability.
• api-change:fsx: [botocore] Amazon FSx has expanded the model-level maximum on the ThroughputCapacity, ThroughputCapacityPerHAPair, and Iops API parameters. Actual supported values are unchanged and depend on file system type and configuration.
• api-change:glue: [botocore] Added a new exception to several batch APIs
• api-change:guardduty: [botocore] Adding awsServiceName field to GuardDuty Findings
• api-change:securityagent: [botocore] Run automated penetration tests directly from your CI-CD pipeline to scan code changes before they ship, gating deployments on the findings
• api-change:ssm: [botocore] Add support for sharing SSM documents with organizations and OUs using RAM.

v1.43.103

Compare Source

========

• api-change:arc-region-switch: [botocore] Adds a service quota checker to Region switch to verify quota parity between your primary and standby Region, and automatically submit quota limit increases. Adds an optional EC2 Auto Scaling and ECS setting that waits for instances or tasks in the scaled-up Region to be healthy in target groups.
• api-change:bedrock-agent: [botocore] Adds support for calling VPC configuration API's in Bedrock. These configurations allow the use of On Prem connectors in Bedrock Managed Knowledge bases
• api-change:bedrock-agentcore-control: [botocore] Amazon Bedrock AgentCore Payments now supports credential rotation for payment connectors, letting you rotate API and wallet secrets for Quick Create payment auths from the console. This release also adds Type and Creation type columns to the payment managers views.
• api-change:connect: [botocore] Agent Privacy During Hold is a new privacy capability for Amazon Connect Voice that prevents agent audio from being captured in call recordings or Contact Lens conversational analytics during hold. When enabled, agents are automatically muted on entering hold and unmuted on resuming the contact
• api-change:endpoint-rules: [botocore] Update endpoint-rules client to latest version
• api-change:glue: [botocore] add support for table level federation
• api-change:mediaconnect: [botocore] This release adds support for RTMP push router outputs in AWS Elemental MediaConnect.
• api-change:neptune-graph: [botocore] Add GraphIdentifier filter for ListImportTasks
• api-change:qconnect: [botocore] Release shapes for the proactive agentic recommendations and the multi-knowledge base search features. Increases the maximum length of QuickResponseContent.
• api-change:rekognition: [botocore] This release adds support for Feedback and Metadata in the GetFaceLivenessSessionResults response. Feedback returns codes explaining why a Face Liveness check produced its result. Metadata includes the client SDK type.
• api-change:securityagent: [botocore] This release adds the ListActorMessages operation, which returns the multi-factor authentication messages received at an actor's server-generated email address
• api-change:wellarchitected: [botocore] This change releases the Well-Architected Agent, a generative AI service that analyzes a customer's AWS environment and delivers personalized, prioritized recommendations across cost, security, performance, and resilience.

v1.43.102

Compare Source

========

• api-change:cloudwatch: [botocore] This release adds Create, Get, Update, and DeleteResourceMetricsConfiguration to enable detailed metric collection for an AWS resource, and adds UpdateOTelEnrichment plus include and exclude filters on StartOTelEnrichment so you can choose which metric namespaces CloudWatch enriches.
• api-change:datazone: [botocore] Amazon DataZone now supports the TOOLING blueprint category on CreateEnvironmentBlueprint, UpdateEnvironmentBlueprint, GetEnvironmentBlueprint, and ListEnvironmentBlueprints, for custom tooling blueprints. CreateConnection now accepts roleArn in iamProperties.
• api-change:elasticache: [botocore] Added tagging support for ElastiCache Global DataStore.
• api-change:endpoint-rules: [botocore] Update endpoint-rules client to latest version
• api-change:eventbridgev2: [botocore] Introducing Amazon EventBridge enhanced Custom event bus, a new shareable event bus for organizational-scale event-driven applications feature ordered delivery, deduplication, open event formats, and cross-account bus sharing.
• api-change:events: [botocore] Adds a ManagedBy field to the DescribeEventBus and ListEventBuses responses, identifying the AWS service that created an event bus on your behalf.
• api-change:iot: [botocore] Fixed ListV2LoggingLevels and DeleteV2LoggingLevel documentation to include all supported target-types
• api-change:marketplace-discovery: [botocore] AWS Marketplace Discovery API now supports localized responses and SigV4a request signing. It returns new fulfillment details, including AMI architecture, EBS volume and security group information, SaaS quick-launch status, and SageMaker input and output MIME types.
• api-change:redshift-data: [botocore] Updates to the ListDatabases and WorkgroupName validation
• api-change:route53resolver: [botocore] Documentation updates for Route 53 Resolver. Clarifies which Outpost Resolver operations apply to first-generation AWS Outposts and that Resolver is managed automatically on second-generation Outposts. Adds Local Network Interface subnet compatibility notes for Resolver endpoints.
• api-change:securityagent: [botocore] Added support for Confluence export, enabling customers to publish security findings to Confluence pages.

v1.43.101

Compare Source

========

• api-change:billing: [botocore] Added the ListBillingViewSegments API, which returns billing view segment information for a specified billing view ARN and time range. This API enables customers and integrated tools to programmatically determine the billing context of their accounts.
• api-change:connecthealth: [botocore] Multi language support with code switching, custom template sectionHeader now allows underscores.
• api-change:endpoint-rules: [botocore] Update endpoint-rules client to latest version
• api-change:imagebuilder: [botocore] Documentation update for EC2 Image Builder - adds API request and response examples for all operations, improves descriptions throughout, and corrects response field patterns for image versions and workflow ARNs.
• api-change:kinesis: [botocore] Amazon Kinesis Data Streams now supports service managed record distribution for on demand streams. Set the record distribution strategy to AUTO to evenly distribute records across shards. Configure it at stream creation with CreateStream or update anytime with UpdateStreamRecordDistributionStrategy
• api-change:lexv2-models: [botocore] Adds support for speaker diarization on Amazon Lex V2 bot locales. Speaker diarization keeps your bot on the primary (loudest) speaker during a streaming voice conversation, so background voices do not start a turn or interrupt a prompt.
• api-change:mediaconvert: [botocore] This release adds support for SMPTE 337M audio passthrough, compositing up to five motion graphic overlays in a single output, and controlling how passthrough video is segmented in ABR outputs. It also adds 3GP, 3G2, AAC, AC-3, and E-AC-3 as supported input containers for the Probe operation.
• api-change:mediapackagev2: [botocore] This release adds support for signalling start and end in the ContentKeyPeriod element in key request from MediaPackageV2
• api-change:network-security-manager: [botocore] AWS Network Security Manager is a new service that helps you centrally configure, deploy, and continuously enforce security policies on network security services across the accounts and resources in your AWS Organization.
• api-change:payment-cryptography-data: [botocore] Adds asymmetric key support to ReEncryptData for re-encrypting data between RSA and symmetric data encryption keys.

v1.43.100

Compare Source

========

• api-change:apigateway: [botocore] API Gateway now supports two new security policies for REST APIs and custom domain names, SecurityPolicy-TLS13-1-2-Ext2-PQ-2025-09 (TLS 1.3 1.2 with post-quantum cryptography) and SecurityPolicy-TLS13-1-2-Ext2-FIPS-PQ-2025-09 (adds FIPS). Both retain legacy algorithms for backward compatibility.
• api-change:cloudwatchomni: [botocore] Amazon CloudWatch Omni is now generally available, an AI-powered unified observability for AI agents, applications, and infrastructure. As part of it, organization centralization rules now support cross-account context graph centralization.
• api-change:ec2: [botocore] Amazon EC2 now supports quote-based start date changes for future-dated Capacity Reservations
• api-change:endpoint-rules: [botocore] Update endpoint-rules client to latest version
• api-change:glue: [botocore] Adding two new fields for Glue Materialized Views feature - (1) SubObjectsStatistics and (2) SparkPipelineInfo.
• api-change:observabilityadmin: [botocore] Amazon CloudWatch Omni is now generally available, an AI-powered unified observability for AI agents, applications, and infrastructure. Centralization now supports context graph for multi-account resource discovery, and dataset integrations makes logs available in CloudWatch datasets.
• api-change:quicksight: [botocore] Adds support for granular custom permissions on 28 action connectors, including Gmail, Google Drive, Google Sheets, Airtable, and Dropbox. Administrators can now allow or deny individual connector operations instead of all action connectors at once.
• api-change:sso-admin: [botocore] AWS IAM Identity Center now returns PrimaryRegion and Regions in the DescribeInstance response, providing information about replicated instances, and returns IdentityStoreArn in both the ListInstances and DescribeInstance responses.

v1.43.99

Compare Source

=======

• api-change:bedrock-agentcore: [botocore] Amazon Bedrock AgentCore Harness now supports lifecycle hooks for invocations and tool calls, with Lambda, SNS, and EventBridge targets. This release also adds apiBase for custom OpenAI-compatible endpoints.
• api-change:bedrock-agentcore-control: [botocore] Amazon Bedrock AgentCore Harness now supports lifecycle hooks for invocations and tool calls, with Lambda, SNS, and EventBridge targets. This release also adds apiBase for custom OpenAI-compatible endpoints
• api-change:billingconductor: [botocore] Launching Auto Billing Transfer Billing Group Creation Preference feature
• api-change:docdb: [botocore] Add support for CopyTagsToSnapshot field in CreateDbCluster, ModifyDbCluster, RestoreDbClusterFromSnapshot and RestoreDbClusterToPointInTime for DocumentDB.
• api-change:sagemaker: [botocore] Add support for r6i, m8i, c8i, r8i instance types in Training and Processing

v1.43.98

Compare Source

=======

• api-change:appintegrations: [botocore] This release adds support for A2A servers via the ApplicationType and AuthConfig fields, allowing customers to register their agent-to-agent servers with API key authentication.
• api-change:connect: [botocore] This release adds the ListSecurityProfileAIAgents API and updates the CreateSecurityProfile and UpdateSecurityProfile APIs to support the AllowedAIAgents field on security profiles, allowing customers to manage the 3P AI agents associated with a security profile for Agent-to-Agent interactions.
• api-change:datazone: [botocore] Adds support for specifying Notebook type
• api-change:ec2: [botocore] This release adds documentation for the T8i instance family to the EC2 ModifyDefaultCreditSpecification and GetDefaultCreditSpecification APIs.
• api-change:glue: [botocore] Introducing AWS Glue Data Quality advanced rule recommendations for faster recommendations. This capability uses Amazon Athena to analyze a sample of table data and Amazon Bedrock to recommend DQDL rules.
• api-change:ivs-realtime: [botocore] GetParticipant, ListParticipantEvents, ListParticipantReplicas, StartParticipantReplication, and StopParticipantReplication now accept participant IDs containing underscores.
• api-change:qconnect: [botocore] Amazon Connect AI Agents now support multi-agent orchestration and structured JSON input and output messaging for orchestration agents.
• api-change:sagemaker: [botocore] Adds support for the hub content resource in SageMaker Search.
• api-change:transcribe: [botocore] Amazon Transcribe now lets you encrypt your custom vocabularies, custom vocabulary filters, and custom language models with a customer managed AWS KMS key instead of an AWS owned key, and adds a new UpdateLanguageModel operation to transition CLM encryption to a different KMS key.

v1.43.97

Compare Source

=======

• api-change:bedrock-agentcore: [botocore] Batch evaluation now supports evaluating specific traces within a session. Each session can specify up to 100 trace IDs to evaluate.
• api-change:connect: [botocore] Made the replicaAlias attribute optional in the ReplicateInstance API to support Global routing for Amazon Connect Global Resiliency (ACGR) instances. This change maintains backward compatibility. When onboarding to ACGR without Global routing, you must specify a custom replicaAlias in your API call
• api-change:ec2: [botocore] Adding support for "Tunnel" VPC Endpoint
• api-change:guardduty: [botocore] This change surfaces AI Protection resources on existing public IAM attack sequences. Customers will now see which model was accessed and whether a guardrail intervened as part of the credential-compromise sequence.
• api-change:iotwireless: [botocore] Adds Multi-frame GNSS support to the AWS IoT Core Device Location GetPositionEstimate API. The new GnssMultiFrame measurement type improves location accuracy by combining multiple GNSS signal captures (2, 4, 8, 16, or 32) from the same device to estimate its position.
• api-change:notifications: [botocore] Added support for attachments on managed notification events. Added support to access and subscribe sensitive managed notification events.
• api-change:sesv2: [botocore] Added support to query the tenant name for BatchGetMetricData and CreateExportJob APIs to filter metrics and messages at the tenant level.
• api-change:sns: [botocore] SNS API reference documentation update
• api-change:socialmessaging: [botocore] Add support for WhatsApp Calling APIs.
• api-change:vpc-lattice: [botocore] Adding support for CIDR Resource Configuration
• enhancement:Checksums: [botocore] Expose the calculated checksum on StreamingChecksumBody and allow it to be constructed without an expected checksum value.

v1.43.96

Compare Source

=======

• api-change:bedrock-agentcore-control: [botocore] Adds support for a new DELETE FAILED status for Bedrock AgentCore Runtimes and Bedrock AgentCore Runtime Endpoints.
• api-change:connect: [botocore] Adds support for ContactAnalysis via ListContactReferences.
• api-change:customer-profiles: [botocore] This release introduces the SearchRecommendations API, which retrieves recommendations for a profile identified by a search key.
• api-change:ec2: [botocore] Releasing new EC2 R9g and R9gd memory-optimized instances powered by AWS Graviton5 processors, with up to 25 percent better compute performance than R8g instances, faster DDR5 memory, and up to 100 Gbps network and 72 Gbps EBS bandwidth. R9gd instances additionally provide local NVMe SSD storage.
• api-change:elasticbeanstalk: [botocore] Adds support to create and manage Elastic Beanstalk Cluster Environments.
• api-change:marketplace-catalog: [botocore] This release enhances the ListEntities API to support issuerAccountId and SourceAuthorization filter for ResaleAuthorization entity.
• api-change:resiliencehubv2: [botocore] Next Gen Resilience Hub now supports dependency insights (LLM-based insights about customer's service dependencies) and organization-level policy sharing (provision to share policy with member accounts for an organization)

v1.43.95

Compare Source

=======

• api-change:bedrock-agentcore-control: [botocore] Amazon Bedrock AgentCore Runtime now supports specifying the platform version of an agent runtime through the new platformVersion field on CreateAgentRuntime, UpdateAgentRuntime, and GetAgentRuntime.
• api-change:directconnect: [botocore] AWS Direct Connect is introducing flat-rate pricing, a simplified billing model that gives you a fixed monthly price for dedicated connectivity with no per-gigabyte data transfer out charges within the selected pricing tier.
• api-change:transfer: [botocore] AWS Transfer Family now preserves the original source IP address using Proxy Protocol v2 when you place a Network Load Balancer in front of your server for SFTP connections.
• api-change:workspaces: [botocore] Added support for 4 new graphics-optimized compute types - Graphics.g7 (2xlarge, 4xlarge, 8xlarge, 12xlarge).

v1.43.94

Compare Source

=======

• api-change:billing: [botocore] Increased the maximum number of services returned in the supportEligibleSpendByService field of ListEnterpriseSupportLinkedAccountCharges
• api-change:billingconductor: [botocore] This release adds support for custom volume tiering. You can now define custom tiers on a pricing rule's tiering configuration, where each tier specifies a usage range and the rate applied to usage in that range.
• api-change:codedeploy: [botocore] AWS CodeDeploy now returns the deployment mode on GetDeployment and BatchGetDeployments. The new deploymentMode field on DeploymentInfo indicates whether a deployment used the standard deployment process or restarted the application using a previously installed revision (RESTART mode).
• api-change:glue: [botocore] Amazon Glue releasing the new API ListIntegrationTableProperties and adding IntegrationArn to TargetTableConfig
• api-change:imagebuilder: [botocore] This release adds a dryRun option to Image Builder create APIs (except CreateImage), structured failure context on failed images including component and distribution failure details, and step retry attempt tracking.
• api-change:sts: [botocore] Increases the maximum session token size to 4,096 bytes and removes the packed policy size limit. Adds SessionTokenSize and SessionTokenUtilization fields and a new MinimumSessionTokenSize parameter. PackedPolicySize is deprecated.

v1.43.93

Compare Source

=======

• api-change:batch: [botocore] Added new bulk job APIs (CancelJobs, TerminateJobs, TerminateServiceJobs) and new fields on ListJobs and ListServiceJobs responses. This allows customers to cancel or terminate multiple jobs in a single request. ListJobs and ListServiceJobs responses now include isCancelled and isTerminated fields.
• api-change:ecs: [botocore] This feature adds support for setting the cpu architecture type that should be used to launch tasks for an Express Gateway Service.
• api-change:invoicing: [botocore] Add ListProcurementPortals and ListProcurementPortalSuppliers APIs to retrieve AWS-supported 3rd party procurement portals and their suppliers for e-invoice delivery and purchase order retrieval.
• api-change:lightsail: [botocore] Amazon Lightsail now lets you serve website content from a private Lightsail bucket through a Lightsail distribution. This release adds enablePrivateOriginAccess to the CreateDistribution and UpdateDistribution actions, plus new defaultRootObject and customErrorResponses options.
• api-change:mediaconvert: [botocore] Adds Dolby Vision metadata to Probe results, including profile, level, and presence of the RPU, base layer, and enhancement layer. Adds video sample and display aspect ratios. Adds the UnprocessableEntityException (HTTP 422) error to Probe for recognized but malformed or corrupt inputs.
• api-change:s3: [botocore] Updated S3 Object Lock Default Retention documentation.
• bugfix:Serialization: [botocore] Preserve sub-second precision when serializing unixTimestamp request parameters. Timestamps with a fractional component are now sent as a fractional value (e.g. 1704110400.123456) instead of being truncated to whole seconds (fixes #&#8203;3255 <https://github.com/boto/botocore/issues/3255>__). Whole-second timestamps are unchanged. The previous behavior can be restored by setting timestamp_precision to 'legacy' in a creating-serializer event handler.

v1.43.92

Compare Source

=======

• api-change:bedrock-agent: [botocore] TwelveLabs Marengo 3.0 is now an embedding model option in Amazon Bedrock Managed Knowledge Base. Create multimodal embeddings for video, audio, and image content that capture visual scenes, speech, and video cues, not just transcribed text.
• api-change:ec2: [botocore] The CreateImage API now supports a BootModeOverride parameter to explicitly set UEFI boot mode on a new AMI, overriding the source instance's inherited boot mode.
• api-change:outposts: [botocore] Added fields to identify Outpost generation and rack scaling configuration on Outpost and CatalogItem resources.
• api-change:resiliencehubv2: [botocore] This release adds the ListTestRunSourceEvents and ListTestRunDependencies APIs, which return the alarm state changes during a test run and the dependencies the run blocked.
• api-change:rtbfabric: [botocore] AWS RTB Fabric now lets you control how traffic is routed to your responder gateway across Availability Zones. Set the new clientRoutingPolicy parameter to keep traffic within the same Availability Zone or distribute traffic across all Availability Zones.
• api-change:sagemaker: [botocore] This release adds the ability for customers to attach customer owned Elastic Network Interfaces (ENIs) to HyperPod cluster nodes.

boto/botocore (botocore)

v1.43.112

Compare Source

========

• api-change:bedrock-agentcore: AgentCore Memory now supports Long-Term Memory Time-to-Live on Batch APIs.
• api-change:bedrock-agentcore-control: AgentCore Memory now supports configuring Long-Term Memory Time-to-Live (TTL) on Memory Strategies.
• api-change:cloudwatchomni: Adds support for updating agentCoreEvaluationRoleArn in UpdateSpace API
• api-change:devops-agent: Adds support for the includedData field in GetAgentSpace and ListAgentSpaces APIs
• api-change:endpoint-rules: Update endpoint-rules client to latest version
• api-change:glue: Adds new AWS Glue Data Quality APIs to retrieve and list data quality evaluation results. The new GetDataQualityResultV2, BatchGetDataQualityResultV2, and ListDataQualityResultsV2 operations return data quality results published from any supported data processing engine.
• api-change:lambda: Doc updates to reposition Lambda Functions as Lambda Event Functions
• api-change:lambda-core: Lambda Network Connector now supports Lambda Web Functions, letting them reach private VPC resources, and adds versioning, each connector update creates an immutable version that revisions pin to, so customers can roll out and roll back networking changes without affecting running workloads
• api-change:lambda-web: Lambda Web Functions GA launch. Lambda Web Functions enable customers to run web applications and API backends
• api-change:mediaconnect: This release adds support for MediaConnect Router high-bitrate tiers. It also adds a configurable audio reference level for NDI flows, and enhanced source metadata that includes color information and transport stream ID.
• api-change:observabilityadmin: Adding support for TransactionSearch telemetry rules.
• api-change:omics: AWS HealthOmics now supports private workflow runs using VPC resources shared across accounts via AWS RAM. A new optional vpcOwnerAccountId field in CreateConfiguration's VpcConfig allows customers to specify the account that owns the shared subnets and security groups.
• api-change:pcs: Adding scheduler version to RegisterComputeNodeGroup API. A compute node uses this value to run the matching scheduler version.
• api-change:pinpoint-sms-voice-v2: DescribePhoneNumbers and DescribeSenderIds now return an optional PricingTier field that indicates whether a phone number, sender ID, short code, or long code is classified as Domestic or International, enabling customers to identify origination identities eligible for local pricing.
• api-change:sagemaker: Amazon SageMaker Training Session is a managed service for training on shared GPU infrastructure. It provides full lifecycle management of training sessions and exposes low-level primitive APIs for operations like forward-backward passes, optimizer steps, and state management.
• api-change:sagemakertrainingsessionruntime: Amazon SageMaker Training Session Runtime provides APIs for executing operations within active training sessions, including asynchronous training operations, sampling and inference requests, and streaming real-time model responses, enabling programmatic control over the training loop.
• api-change:securityagent: Adds support for Jira integration provider in AWS Security Agent.

v1.43.111

Compare Source

========

• api-change:deadline: The new ListMemberships API enables users to discover their memberships across Deadline Cloud resources, enabling scoped users of Deadline resources to discover and interact with the resources they have been provided scoped access to.
• api-change:mediatailor: Add caching settings to http functions
• api-change:meteringmarketplace: AWS Marketplace Metering Service adds AgreementId to ResolveCustomer API response.
• api-change:quicksight: Adds granular custom permissions for the Gong action connector (GongAction, CreateAndUpdateGongAction, ShareGongAction, UseGongAction) and for create, update, and share operations on 45 data source connectors, such as Amazon S3 and Snowflake, through the Custom Permissions APIs.
• api-change:securityagent: Adds a test scope field to specify whether a pentest targets a web application or a generative AI application.

v1.43.110

Compare Source

========

• api-change:budgets: Adds a product attribute dimension to CreateBudget and UpdateBudget, letting customers filter AWS Budgets costs by structured attributes such as Amazon Bedrock model, provider, inference type, and feature.
• api-change:ce: Adds a product attribute dimension to GetCostAndUsage, GetCostAndUsageWithResources, and GetDimensionValues, letting customers group, filter, and discover Cost Explorer costs by structured attributes such as Amazon Bedrock model, provider, inference type, and feature.
• api-change:cloudformation: CloudFormation introduces force rollback, a new opt-in capability that lets your stacks complete a rollback even when an individual resource cannot be reverted. Set ForceRollback on ContinueUpdateRollback and CloudFormation records each resource that fails as skipped, completing the rollback.
• api-change:codeconnections: This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.0. The SDK will prioritize its most performant protocol.
• api-change:datazone: Adds support for multi-file notebook import. StartNotebookImport now accepts an s3Files source location with an ordered list of Amazon S3 objects, creating one notebook cell per file, plus a type field to create either a DATA or SQL notebook.
• api-change:devops-agent: Adds release management associations with private network access to AWS DevOps Agent, and a releaseManagementAssociationId field on GitHub and GitLab associations. This helps release management agents (Release-readiness review and Release Testing) access customer resources that are behind a VPC.
• api-change:eks: Configurations support for EKS ACK Capabilities, including EnableCrossNamespace and DisableServices configuration.
• api-change:emr-serverless: This release adds support for system profile logs for lakeformation enabled Spark connect sessions .
• api-change:fms: This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.1. The SDK will prioritize its most performant protocol.
• api-change:gamelift: Amazon GameLift Servers container fleets now support CPU bursting for game server container groups. The TotalVcpuLimit property of a game server container group definition is now optional. When you omit it, the group has no CPU cap and its containers can burst into unused CPU on the instance.
• api-change:glue: Introduced GetSystemLogsForJobRun and GetSystemLogsForSession APIs, enabling account admins to retrieve system-space logs for FGAC-enabled Glue jobs and sessions.
• api-change:guardduty: Added support for GuardDuty RDS Data Activity Monitoring
• api-change:health: This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.1. The SDK will prioritize its most performant protocol.
• api-change:keyspaces: This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.0. The SDK will prioritize its most performant protocol.
• api-change:lambda: AWS Lambda now supports OAuth 2.0 (OAUTHBEARER), IAM, and IAM with OAUTHBEARER authentication for self-managed Apache Kafka event source mappings, including optional OAuth scope, audience, logical cluster, and identity pool parameters. OAuth 2.0 is also available for Confluent Schema Registry.
• api-change:marketplace-agreement: This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.0. The SDK will prioritize its most performant protocol.
• api-change:medialive: AWS Elemental MediaLive Workflow Monitor now supports AWS Elemental Inference feeds as a target resource type for CloudWatch alarm templates.
• api-change:opensearch: This release adds a new EncryptionMode option (DISK or NATIVE) to EncryptionAtRestO

❗ Important

✂ PR body was truncated to here.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.