[renovate]

Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Confidence	Type	Update
black (changelog)	==26.5.1 → ==26.10.1			project.optional-dependencies	minor
boto3	==1.43.89 → ==1.43.114			project.optional-dependencies	patch
build (changelog)	==1.6.0 → ==1.6.1			project.optional-dependencies	patch
bump-my-version	==1.5.1 → ==1.6.0			project.optional-dependencies	minor
coverage	==7.16.0 → ==7.16.2			project.optional-dependencies	patch
flake8 (changelog)	==7.3.0 → ==7.4.1			project.optional-dependencies	minor
mypy (changelog)	==2.3.1 → ==2.4.0			project.optional-dependencies	minor
pytest-mock (changelog)	==3.15.1 → ==3.16.0			project.optional-dependencies	minor
python	3.14 → 3.15			uses-with	minor
python (source)	3.14-slim → 3.15-slim			final	minor

---

Release Notes

psf/black (black)

v26.10.1

Compare Source

Highlights

This release fixes a security issue in Black's bundled GitHub Action. Repositories that
use the action are encouraged to update to the latest version of Black immediately. This
update is received automatically when using psf/black@stable, and is independent of
the version of Black installed by the action.

When the GitHub Action reads version specifiers from tool.black.required-version, it
now only accepts released versions of Black, as it already did for black requirements
in dependency lists. Other values, such as URL references, are now rejected. This issue
has been registered as GHSA-cg8m-r9f2-5wm2; a CVE identifier is pending.

Stable style

• Fix a long Jupyter notebook assignment magic (for example x = !ls -la) being wrapped
  in parentheses, which IPython can no longer run; such cells are now left unchanged
  (#​5481)
• Keep repeated lines outside the selected --line-ranges unchanged (#​5436)
• Fix --line-ranges formatting lines that follow a statement when formatting joins or
  re-indents that statement (#​5484)
• Fix --line-ranges crashing with an internal error when an unselected statement has a
  # fmt: skip comment on the last line before a closing bracket (#​5477)
• Prevent moving an encoding declaration (for example # -*- coding: latin-1 -*-) onto
  the first two lines of a file (#​5487)
• Fix adding an extra trailing blank line inside a multi-line module docstring when its
  last line is near the line length limit (#​5494)

Preview style

• Do not split short expressions on delimiters (such as binary operators, comparisons,
  or comprehensions) inside brackets when preceded by a standalone comment (#​5455)
• Fix the unstable string_processing feature removing backslash-newline sequences from
  raw strings, which changed their value (#​5482)
• Avoid adding unnecessary parentheses around unbreakable right-hand side expressions in
  assignments (such as annotated assignments or subscript targets) (#​5473)
• Parenthesize expressions with parameter comments when they exceed the line length
  under --preview (#​5442)
• Fix wrap_long_dict_values_in_parens dropping the parentheses around a right-hand
  side that contains a dictionary, leaving a line over the length limit (#​5492)
• Fix the unstable string_processing feature adding a space after * or ** in a PEP
  695 type parameter (* Ts = ...) when it splits a string in the parameter's default
  (#​5504)
• Avoid unnecessary line splits of trailers (such as indexing/subscripts) when an
  earlier bracket split exceeds the line length only due to a trailing comment (#​5498)

Configuration

• Add --cache-dir to configure the cache directory from the command line (#​5433)
• Don't cache a file as formatted after formatting or checking it with --line-ranges,
  which made a later full black --check pass and black skip the unformatted lines
  (#​5476)
• Respect a .gitignore that starts with a UTF-8 byte order mark. The mark became part
  of the first pattern, so that pattern never matched and Black formatted files that git
  ignores (#​5497)

Performance

• Avoid quadratic runtime when splitting very long lines with many trailing bracket
  pairs (such as consecutive subscripts) (#​5475)

Integrations

• Fix the GitHub Action crashing on dependency-group includes when use_pyproject is
  enabled (#​5479)
• When the GitHub Action reads version specifiers from tool.black.required-version, it
  now only accepts released versions of Black, as it already did for black
  requirements in dependency lists. Other values, such as URL references, are now
  rejected. (#​5510)

v26.10.0

Compare Source

Stable style

• --line-ranges no longer inserts an empty line after a docstring when the range
  covers only the docstring itself (#​5312)
• Fix # fmt: skip on a bracketed ternary turning the surrounding tuple into a call
  (#​5464)
• Fix crash when # fmt: skip is placed on a one-line function or class with PEP 695
  type parameters (#​5429)
• Fix an inline comment after the closing bracket of optional parentheses being moved
  inside the parentheses when the parenthesized expression contains own-line comments
  (#​5395)
• Fix unparseable output when # fmt: skip is placed on a bracket of an if, while,
  for, or with header (#​5401, #​5405)
• Fix crash when formatting parenthesized expressions with multiple inline comments and
  # fmt: skip (#​5414)
• Fix parsing Jupyter notebook assignment magics when non-ASCII characters appear
  earlier on the line (#​5381)
• Preserve blank lines that come immediately before a # fmt: on comment (#​5300)
• Keep the parentheses around the target of an annotated assignment (e.g.
  (x): int = 5), which prevent CPython from including the name in __annotations__
  (#​5321)
• Stop treating a t-string in docstring position as a docstring (e.g. t" spam " as
  the first statement of a module, class or function) (#​5287)
• Fix unparseable output for a t-string whose replacement field contains a quote (e.g.
  t'\'{a["b"]}\'') (#​5265)
• Fix unparseable output for a triple-quoted string whose body ends in an
  already-escaped double quote (e.g. '''\'''\"''') (#​5262)
• Fix --skip-magic-trailing-comma dropping the trailing comma from a split
  single-element tuple used as a lambda parameter default (#​5246)
• Fix unstable formatting when an inline comment sits on optional parentheses (e.g. a
  parenthesized assert message) (#​5241)
• Fix --skip-magic-trailing-comma dropping the trailing comma of a one-element
  subscript (a[x,]) when the line is long enough to be split and contains a power
  operator (#​5272)
• Fix crash when a standalone comment sits between tokens of a comprehension or lambda
  (#​5144)
• Fix inline comments on a bracket inside a comprehension being dropped (#​5330)
• Respect the magic trailing comma in a PEP 695 type parameter list containing a
  *TypeVarTuple or **ParamSpec (#​5244)
• Fix crash when a comment-only # fmt: off/# fmt: on block is followed by a with
  statement after another standalone comment (#​5189)
• Fix a crash when splitting case case if ... match patterns at very small line
  lengths (#​5147)
• Fix multiline docstring indentation when leading tabs are used inside indented
  docstrings (#​5148)
• Respect # fmt: skip on a line that opens a bracket (e.g.
  from x import ( # fmt: skip) when a standalone comment is among the bracket's
  contents (#​5161)
• Fix an AST safety error when separate # type: ignore comments in a parenthesized
  attribute chain were merged onto one physical line (#​5297)
• Preserve comments and blank lines outside requested ranges when formatting with
  --line-ranges (#​5175)
• Fix crash when # fmt: skip is used on one-line async def, async with, and
  async for statements containing a semicolon (#​5311)
• Stop converting form feeds or other similar characters in docstrings into newlines
  (#​5461)
• Fix --skip-source-first-line turning the skipped line's CRLF ending into \r\r\n
  when reformatting a file with CRLF line endings (#​5438)

Preview style

New preview features

• Add missing blank lines after classes whose last method has an ellipsis body (#​5439)
• Split only the brackets holding a magic trailing comma when more trailers follow them
  (e.g. stop splitting inside the [2] of [1,][2](3)) (#​5448)
• Keep dictionary keys containing operators together on one line when the value can be
  wrapped onto a new line instead (#​5435)
• Remove redundant parentheses around individual variables in unpacking targets (e.g.
  for (x), (y) in points: becomes for x, y in points:) (#​5416)
• Normalize uppercase T prefixes on t-strings to lowercase (#​5425)
• Remove redundant parentheses around generator expressions (#​5304, #​5369)
• Preserve two blank lines before a top-level class starting inside a # fmt: off block
  after an import (#​5238)
• Fix unnecessary parentheses around short right-hand expressions in indexed assignments
  (e.g. x[key] = expr) (#​5095)
• Parenthesize tuple expressions in yield statements for consistency with function
  calls and returns (#​5170)
• Stop splitting between a variable and its operator (not in, ==, is, ...) when
  the right-hand side is a bracketed expression, and instead split inside the brackets
  (#​5135)
• In .pyi stub files, enforce a blank line after a function or method that has a
  docstring-only body when another comment or statement follows it (#​5158)

Updates to existing preview features

• Fix crash in stub files when # fmt: skip is placed on a function in a group of
  same-name decorated functions (e.g. @overloads or a property setter) (#​5430)
• Keep the parentheses around a lambda used as the iterable of a comprehension (e.g.
  [x for x in (lambda: 0) if x]) (#​5176, #​5200)

Updates to existing unstable features

• Do not treat multi-line expressions with merged strings and trailing # type: ignore
  comments as single-line unsplittable expressions (#​5466)
• Fix duplicated inline comment when stripping the parentheses around a string or
  merging a backslash-continued string on the same line (#​5449)
• Split long stringified return annotations even when the function has parameters
  (#​5427)
• Don't hug brackets when doing so would join two # type: ignore comments onto one
  line (#​5271)
• Fix a crash when # type: ignore is lost during formatting of a long parenthesized
  string (#​5329)
• Fix only the first part of an implicitly concatenated unmergeable string (e.g.
  r"..." r"...") being wrapped in parentheses (#​5434)

Configuration

• Add support for NO_COLOR environment variable to disable ANSI output (#​5129)
• Remove spurious target version warning when runtime version is included in a
  --target-version flag (#​5167)
• Fix --force-exclude not excluding files whose path contains .. (e.g.
  black ../generated/file.py run from a subdirectory) (#​5471)
• Fall back to the default configuration, with a warning, when the given sources share
  no common project root (e.g. they are on different drives on Windows) instead of
  crashing (#​5386)
• Fix loading a stale cached pyproject.toml path when --code is used from different
  working directories in the same process (#​5152)
• Add validation for --line-ranges values (#​5107)
• Ignore empty cache files instead of raising an EOFError (#​5192)
• Reject non-string include and force-exclude values in pyproject.toml (#​5193)
• Validate BLACK_NUM_WORKERS values and report invalid values as usage errors instead
  of crashing (#​5211)
• Ignore permission errors when reading cache (#​5258)

Packaging

• Reduce the size of Linux standalone binaries by stripping debug symbols during the
  PyInstaller release build (#​5223)
• Black is now released using GitHub
  Immutable Releases
  (#​5296)

Performance

• Fix superlinear runtime growth with the number of input files (#​5450)
• Improve performance on strings containing many consecutive backslashes (#​5163)
• Improve performance on files with many # fmt: skip/# fmt: off/# fmt: on comments
  (#​5169, #​5190, #​5232)
• Improve performance on long calls and collections (#​5177)
• Improve performance on multiline strings inside large collections (e.g. a dict literal
  with triple-quoted strings as values) (#​5188)
• Improve performance on files with many soft keywords (e.g. match/case blocks)
  (#​5186)
• Improve performance on long semicolon-separated statements (in the stable style) and
  large dict literals (in --preview) (#​5184)
• Improve performance of --line-ranges on files with many sibling blocks (a long
  if/elif chain, a match with many cases, or many top-level definitions) (#​5213)
• Improve performance on deeply nested bracketed expressions (#​5171, #​5242)
• Improve performance on lists and subscripts holding one long expression without
  operators (e.g. a long run of implicitly concatenated strings inside []) (#​5239)
• Improve performance on deeply chained operations (e.g. a long a ** b ** c ** ...
  chain) (#​5235)
• Improve performance on long if/elif chains and other compound statements with many
  clauses (#​5322)
• Improve performance of string_processing:
  • when merging implicitly concatenated f-strings containing long string literals
    (#​5165)
  • when merging long implicitly concatenated strings (#​5173, #​5194)
  • when rewriting large nodes (e.g. "%s ..." % (a, b, c, ...)) (#​5178, #​5199, #​5220)
  • when splitting long string literals (#​5183)

Output

• Report parser failures using editor-friendly path:line:column locations (#​5237)
• Fix crash when writing formatted code or diffs to a sys.stdout that has no buffer
  attribute (e.g. in Jupyter notebooks) (#​5411)
• Report parse failures on Black's own output as internal errors (#​5383)

Blackd

• Return HTTP 400 instead of 500 when the X-Python-Variant header is empty or has an
  empty entry (e.g. a trailing comma) (#​5428)
• Allow optional whitespace around comma-separated versions and pyi in the
  X-Python-Variant header (#​5441)

Integrations

• Remove unused migrate-black script (#​5319)
• Support PEP 440 version specifiers in tool.black.required-version for the GitHub
  Action (#​5399)
• Add outputs (is_formatted, change_count, same_count, failure_count) to GitHub
  Action runs (#​5408)

Documentation

• Document vim-python-pep8-indent, which provides an indentexpr for Black-style
  insert-mode indentation (#​5288)

boto/boto3 (boto3)

v1.43.114

Compare Source

========

• api-change:arc-region-switch: [botocore] Features - Adds support for an optional payload to invoke the Lambda function with as part of the Custom action Lambda execution block
• api-change:bedrock-agentcore-control: [botocore] This release supports scoping Amazon Bedrock AgentCore Gateway rate limits by request header or request body field.
• api-change:cloudfront: [botocore] This release adds a new "IpAddressType" field to "VPCOriginEndpointConfig", allowing customers to specify whether their VPC origin accepts IPv4-only or dualstack connections.
• api-change:dynamodbstreams: [botocore] Add support for a new iterator type (AT TIMESTAMP) for DynamoDB Streams GetShardIterator API that allows reading from a specific point in time from the stream.
• api-change:ec2: [botocore] Adds T8i instance sizes to the InstanceType enum. T8i instances are low-cost burstable instances powered by custom sixth generation Intel Xeon 6 processors, available exclusively on AWS, and built on the latest sixth generation AWS Nitro cards
• api-change:endpoint-rules: [botocore] Update endpoint-rules client to latest version
• api-change:guardduty: [botocore] Releasing support for Custom Detection Rule Runtime Monitoring
• api-change:imagebuilder: [botocore] This release adds parentInstance to infrastructure configurations, so builds can use an already-running instance from an Amazon EC2 Auto Scaling group. It also adds terminateInstanceOnCompletion, which keeps build and test instances running after image creation ends.
• api-change:lambda: [botocore] AWS Lambda now supports an optional X-Ray trace header for chained invocations in durable executions, enabling child invocations to be linked to the initiating span.
• api-change:meteringmarketplace: [botocore] Documentation update - added a Get started pointer to the AWS Marketplace AI Metering Agent Skill in the BatchMeterUsage API reference. No API or behavior change.
• api-change:organizations: [botocore] With dual-stack enabled, all requests now resolve to the endpoint in the partition's primary Region (for example, organizations.us-east-1.api.aws) and are signed for that Region. Previously, requests from other Regions resolved to a nonexistent endpoint. No API changes.
• api-change:transfer: [botocore] AWS Transfer Family now lets you store SFTP server host keys in AWS Secrets Manager in your own AWS account. This gives you greater control over your server identity and helps simplify server migrations and failover.
• enhancement:Documentation: [botocore] Raise the Request Syntax and Response Syntax line limit in generated reference pages from 1,500 to 2,000 lines, so services such as MediaLive whose syntax sections fall just over the old limit render them again instead of the "too large to render" notice.

v1.43.113

Compare Source

========

• api-change:agent-registry-control: [botocore] AWS Agent Registry is improving recently launched custom metadata schema feature to make shared attributes easier to manage.
• api-change:appintegrations: [botocore] This release adds the Connect JWT authentication type and the AudienceOverride field to AuthConfig, letting A2A server applications authenticate with JWTs issued by Amazon Connect.
• api-change:appstream: [botocore] Adds support for administrators to require users to re-authenticate OneDrive and Google Drive storage connectors when a streaming session is reused.
• api-change:arc-region-switch: [botocore] Adds support for SSM Execution Block in Region switch plans
• api-change:connect: [botocore] New APIs to support aliases and versions for ContactFlow.
• api-change:datasync: [botocore] AWS DataSync Enhanced mode now supports FSx for OpenZFS, NFS 4.2, and object metadata controls
• api-change:gamelift: [botocore] Adds support for new instance types in the C8a, C8i, C9g, M8a, M8i, and M9g families for managed EC2 and container fleets
• api-change:glue: [botocore] Amazon Glue releasing support for adding custom namespace for S3 Tables in Glue zero-ETL integration
• api-change:lakeformation: [botocore] Added new LakeFormation APIs and documentation updates for Simple Row-level Security (RLS).
• api-change:lambda-web: [botocore] Documentation update to include common use cases.
• api-change:omics: [botocore] With Expanded container registry support, you can use container images from registries such as Seqera (Wave), NVIDIA NGC, and Google Artifact Registry with AWS HealthOmics private workflows, without manually migrating images into Amazon ECR or editing your workflow definitions.
• api-change:resiliencehubv2: [botocore] Adds support for DevOpsAgent integration where users can specify the agent space ARN at service level and launch investigations directly from Resilience Hub v2.
• api-change:route53domains: [botocore] Route 53 Domains now supports premium domains. This release adds consent objects to operations on premium domains and a new GetDomainPrices API. Also, the Flags and PublicKey fields were deprecated from the DnssecKey response.
• api-change:sagemaker: [botocore] Adds Amazon Athena, Cleanup, ForEach, and Amazon EMR Serverless step metadata, ForEach iteration context, and the CompletedWithFailures execution status to SageMaker Pipelines.
• api-change:securityhub: [botocore] Adds and updates APIs to support criticality. This feature allows customers to create automation rules to assign criticality to resources matching a criteria. With this release, resources and exposure findings will include the criticality.
• bugfix:Endpoints: [botocore] Ignore unrecognized top-level keys (such as serviceId) in endpoint ruleset files instead of failing client creation.

v1.43.112

Compare Source

========

• api-change:bedrock-agentcore: [botocore] AgentCore Memory now supports Long-Term Memory Time-to-Live on Batch APIs.
• api-change:bedrock-agentcore-control: [botocore] AgentCore Memory now supports configuring Long-Term Memory Time-to-Live (TTL) on Memory Strategies.
• api-change:cloudwatchomni: [botocore] Adds support for updating agentCoreEvaluationRoleArn in UpdateSpace API
• api-change:devops-agent: [botocore] Adds support for the includedData field in GetAgentSpace and ListAgentSpaces APIs
• api-change:endpoint-rules: [botocore] Update endpoint-rules client to latest version
• api-change:glue: [botocore] Adds new AWS Glue Data Quality APIs to retrieve and list data quality evaluation results. The new GetDataQualityResultV2, BatchGetDataQualityResultV2, and ListDataQualityResultsV2 operations return data quality results published from any supported data processing engine.
• api-change:lambda: [botocore] Doc updates to reposition Lambda Functions as Lambda Event Functions
• api-change:lambda-core: [botocore] Lambda Network Connector now supports Lambda Web Functions, letting them reach private VPC resources, and adds versioning, each connector update creates an immutable version that revisions pin to, so customers can roll out and roll back networking changes without affecting running workloads
• api-change:lambda-web: [botocore] Lambda Web Functions GA launch. Lambda Web Functions enable customers to run web applications and API backends
• api-change:mediaconnect: [botocore] This release adds support for MediaConnect Router high-bitrate tiers. It also adds a configurable audio reference level for NDI flows, and enhanced source metadata that includes color information and transport stream ID.
• api-change:observabilityadmin: [botocore] Adding support for TransactionSearch telemetry rules.
• api-change:omics: [botocore] AWS HealthOmics now supports private workflow runs using VPC resources shared across accounts via AWS RAM. A new optional vpcOwnerAccountId field in CreateConfiguration's VpcConfig allows customers to specify the account that owns the shared subnets and security groups.
• api-change:pcs: [botocore] Adding scheduler version to RegisterComputeNodeGroup API. A compute node uses this value to run the matching scheduler version.
• api-change:pinpoint-sms-voice-v2: [botocore] DescribePhoneNumbers and DescribeSenderIds now return an optional PricingTier field that indicates whether a phone number, sender ID, short code, or long code is classified as Domestic or International, enabling customers to identify origination identities eligible for local pricing.
• api-change:sagemaker: [botocore] Amazon SageMaker Training Session is a managed service for training on shared GPU infrastructure. It provides full lifecycle management of training sessions and exposes low-level primitive APIs for operations like forward-backward passes, optimizer steps, and state management.
• api-change:sagemakertrainingsessionruntime: [botocore] Amazon SageMaker Training Session Runtime provides APIs for executing operations within active training sessions, including asynchronous training operations, sampling and inference requests, and streaming real-time model responses, enabling programmatic control over the training loop.
• api-change:securityagent: [botocore] Adds support for Jira integration provider in AWS Security Agent.

v1.43.111

Compare Source

========

• api-change:deadline: [botocore] The new ListMemberships API enables users to discover their memberships across Deadline Cloud resources, enabling scoped users of Deadline resources to discover and interact with the resources they have been provided scoped access to.
• api-change:mediatailor: [botocore] Add caching settings to http functions
• api-change:meteringmarketplace: [botocore] AWS Marketplace Metering Service adds AgreementId to ResolveCustomer API response.
• api-change:quicksight: [botocore] Adds granular custom permissions for the Gong action connector (GongAction, CreateAndUpdateGongAction, ShareGongAction, UseGongAction) and for create, update, and share operations on 45 data source connectors, such as Amazon S3 and Snowflake, through the Custom Permissions APIs.
• api-change:securityagent: [botocore] Adds a test scope field to specify whether a pentest targets a web application or a generative AI application.

v1.43.110

Compare Source

========

• api-change:budgets: [botocore] Adds a product attribute dimension to CreateBudget and UpdateBudget, letting customers filter AWS Budgets costs by structured attributes such as Amazon Bedrock model, provider, inference type, and feature.
• api-change:ce: [botocore] Adds a product attribute dimension to GetCostAndUsage, GetCostAndUsageWithResources, and GetDimensionValues, letting customers group, filter, and discover Cost Explorer costs by structured attributes such as Amazon Bedrock model, provider, inference type, and feature.
• api-change:cloudformation: [botocore] CloudFormation introduces force rollback, a new opt-in capability that lets your stacks complete a rollback even when an individual resource cannot be reverted. Set ForceRollback on ContinueUpdateRollback and CloudFormation records each resource that fails as skipped, completing the rollback.
• api-change:codeconnections: [botocore] This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.0. The SDK will prioritize its most performant protocol.
• api-change:datazone: [botocore] Adds support for multi-file notebook import. StartNotebookImport now accepts an s3Files source location with an ordered list of Amazon S3 objects, creating one notebook cell per file, plus a type field to create either a DATA or SQL notebook.
• api-change:devops-agent: [botocore] Adds release management associations with private network access to AWS DevOps Agent, and a releaseManagementAssociationId field on GitHub and GitLab associations. This helps release management agents (Release-readiness review and Release Testing) access customer resources that are behind a VPC.
• api-change:eks: [botocore] Configurations support for EKS ACK Capabilities, including EnableCrossNamespace and DisableServices configuration.
• api-change:emr-serverless: [botocore] This release adds support for system profile logs for lakeformation enabled Spark connect sessions .
• api-change:fms: [botocore] This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.1. The SDK will prioritize its most performant protocol.
• api-change:gamelift: [botocore] Amazon GameLift Servers container fleets now support CPU bursting for game server container groups. The TotalVcpuLimit property of a game server container group definition is now optional. When you omit it, the group has no CPU cap and its containers can burst into unused CPU on the instance.
• api-change:glue: [botocore] Introduced GetSystemLogsForJobRun and GetSystemLogsForSession APIs, enabling account admins to retrieve system-space logs for FGAC-enabled Glue jobs and sessions.
• api-change:guardduty: [botocore] Added support for GuardDuty RDS Data Activity Monitoring
• api-change:health: [botocore] This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.1. The SDK will prioritize its most performant protocol.
• api-change:keyspaces: [botocore] This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.0. The SDK will prioritize its most performant protocol.
• api-change:lambda: [botocore] AWS Lambda now supports OAuth 2.0 (OAUTHBEARER), IAM, and IAM with OAUTHBEARER authentication for self-managed Apache Kafka event source mappings, including optional OAuth scope, audience, logical cluster, and identity pool parameters. OAuth 2.0 is also available for Confluent Schema Registry.
• api-change:marketplace-agreement: [botocore] This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.0. The SDK will prioritize its most performant protocol.
• api-change:medialive: [botocore] AWS Elemental MediaLive Workflow Monitor now supports AWS Elemental Inference feeds as a target resource type for CloudWatch alarm templates.
• api-change:opensearch: [botocore] This release adds a new EncryptionMode option (DISK or NATIVE) to EncryptionAtRestOptions for the CreateDomain and UpdateDomainConfig operations, enabling selection of engine-native index-level encryption on supported Amazon OpenSearch Service domains.
• api-change:pi: [botocore] This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.1. The SDK will prioritize its most performant protocol.
• api-change:securityagent: [botocore] Include model field for suggested remediation steps as part of findings
• api-change:securityhub: [botocore] Release findings export APIs - StartExportJobV2, GetExportJobV2, ListExportJobsV2, and CancelExportJobV2. This supports exporting findings from AWS Security Hub to Amazon S3 bucket.
• api-change:security-ir: [botocore] Adds support for retrieving finding-lifecycle metrics for an AWS Security Incident Response membership.
• api-change:sesv2: [botocore] SESV2 DEED - Documentation Update
• api-change:translate: [botocore] This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.1. The SDK will prioritize its most performant protocol.

v1.43.109

Compare Source

========

• api-change:lambda-web: [botocore] Removes operations that are not yet generally available from the Lambda Web.

v1.43.108

Compare Source

========

• api-change:cognito-idp: [botocore] Amazon Cognito User Pools now supports the OIDC-standard authentication context class reference (ACR) and authentication methods reference (AMR) claims on issued access and Id tokens. Amazon Cognito User Pools also now supports step-up authentication via our existing authentication APIs.
• api-change:glue: [botocore] Added refresh token grant type to Glue Connection supported OAuth 2.0 grant types
• api-change:invoicing: [botocore] API and doc updates related to adding MarketplacePunchOutEnabled and MarketplacePunchOutPreference fields to ProcurementPortalPreferences related APIs
• api-change:lambda-web: [botocore] Documentation update for AWS Lambda Web Functions, clarifies that the LambdaWeb APIs are experimental and not yet available to external customers.
• api-change:mediapackagev2: [botocore] Dynamic Multiview enables viewers to watch multiple live video streams in a single combined output. Static filter configuration allows users to configure endpoints with layouts and sources without using query parameters. The number of sources per multiview channel has been increased to 50.
• api-change:pinpoint-sms-voice-v2: [botocore] AWS End User Messaging SMS CarrierLookup API now supports phone number cleansing on customer opt-in. when selected, the response includes the additional field "OriginalPhoneNumber". It can also return additional PhoneNumberType enums, VOIP and PREPAID.
• api-change:securityagent: [botocore] Adds trigger filters that control which pull request events, target branches, and labels start an automatic code review.

v1.43.107

Compare Source

========

• api-change:bedrock-agent: [botocore] Adds an optional textReadyAt field to ListIngestionJobs and GetIngestionJob for Managed Knowledge Bases data source sync jobs. The field denotes the timestamp at which all the documents in the scope of a sync job had their text content indexed and are available for retrieval.
• api-change:cloudfront: [botocore] Added always-amz-auth as a supported signing behavior for Origin Access Control (OAC), enabling CloudFront to authenticate requests to Lambda-Web origins.
• api-change:ec2: [botocore] This release launches the AMI tag sharing feature, which lets AMI owners share tags alongside their AMIs, eliminating the need to build and maintain custom tag replication workflows.
• api-change:endpoint-rules: [botocore] Update endpoint-rules client to latest version
• api-change:endusermessaging: [botocore] AWS End User Messaging now supports Brand profiles and Notify code configurations. Brand profiles capture your sender details once to reuse across phone number registrations. Notify code configurations let you define your OTP policy and delivery settings to send passcodes in minutes.
• api-change:health: [botocore] Adds DescribeServiceLifecycle operation returning lifecycle information for AWS services, including end-of-support dates, version recommendations, and lifecycle events.
• api-change:lambda-web: [botocore] Lambda Web Functions GA launch. Lambda Web Functions enable customers to run web applications and API backends
• api-change:quicksight: [botocore] This release adds HierarchyFilter support for Amazon QuickSight analysis and dashboard and 2 legged OAuth for databricks datasources.
• api-change:sagemaker: [botocore] Release support for c8a.16xlarge and m8a.16xlarge instance types for SageMaker HyperPod
• api-change:securityhub: [botocore] Adds GetRemediationsV2 and ListExposuresByRemediationV2 APIs. This feature allows customers to see their highest priority remediations for their Exposure findings. Remediations target key changes customers can make to resources to drive finding resolution.
• api-change:transfer: [botocore] AWS Transfer Family Workflows adds support for the structuredLogDestinations option, enabling customers to specify a custom Amazon CloudWatch Logs log group for managed workflow execution logs.

v1.43.106

Compare Source

========

• api-change:account: [botocore] This release adds support for verifying an AWS account's primary contact phone number. SendPhoneNumberVerification sends a one-time code by SMS, VerifyPhoneNumber validates it, and GetContactInformation now returns the verification status.
• api-change:agent-registry: [botocore] Minor doc update for the AWS Agent Registry Custom metadata SearchDiscoverableRegistryRecords API
• api-change:batch: [botocore] AWS Batch adds support for Amazon EKS access entries on EKS compute environments through the new accessEntry setting in CreateComputeEnvironment and UpdateComputeEnvironment.
• api-change:bedrock: [botocore] Amazon Bedrock Automated Reasoning policies now accept Unicode letters in identifier names such as type names, type value names, and variable names. You can now author policies in non-English languages using accented or non-Latin characters.
• api-change:bedrock-agentcore-control: [botocore] This release adds support for private certificate authorities on Amazon Bedrock AgentCore Gateway targets. The new certificateConfigurations parameter on CreateGatewayTarget and UpdateGatewayTarget references a PEM-encoded CA certificate in Amazon S3 or AWS Secrets Manager.
• api-change:connect: [botocore] Amazon Connect Rules can now trigger in-app notifications to users as a rule action. Notification character limit was increased to 500 visible characters.
• api-change:datazone: [botocore] Support for setting notebook run notification configurations
• api-change:dynamodb: [botocore] Adds support for filtering exported table data using FilterExpression, ProjectionExpression and KeyConditionExpression with ExportTableToPointInTime.
• api-change:ecs: [botocore] Releasing VPCL for BlueGreen ecs deployments.
• api-change:globalaccelerator: [botocore] IpSets now include the Network Zone for each Static IP address.
• api-change:glue: [botocore] Enable Catalog ID for crawler, column statistics and materialized views.
• api-change:guardduty: [botocore] GuardDuty AWS Organizations policy integration. GetDetector and GetMemberDetectors now show whether a GuardDuty policy manages a feature.
• api-change:logs: [botocore] Amazon CloudWatch Logs now supports an optional roleArn parameter on PutDeliveryDestination for X-Ray trace delivery destinations, specifying the IAM role to assume when delivering traces.
• api-change:observabilityadmin: [botocore] Enablement for Bedrock PaymentManager logs via Observability Admin Telemetry Rule
• api-change:organizations: [botocore] Add support for policy operations on the GUARDDUTY POLICY policy type.
• api-change:s3: [botocore] Amazon S3 adds a new optional S3 Inventory field, IntelligentTieringReferenceDate, reporting the reference date S3 Intelligent-Tiering uses to evaluate an object's tier-transition eligibility. The value is populated for objects in the Intelligent-Tiering storage class and left blank for others.
• api-change:s3vectors: [botocore] Amazon S3 Vectors now supports metadata prefiltering, providing higher recall on filtered queries.
• api-change:sagemaker: [botocore] This feature enables customers to modify their accounting database via API.

v1.43.105

Compare Source

========

• api-change:appstream: [botocore] Add support for NVIDIA GRID driver version metadata in Workspace Applications image responses through the new ImageSoftwareMetadata field.
• api-change:bedrock-agent-runtime: [botocore] Amazon Bedrock Agentic Retrieve now supports the Bedrock Mantle (OpenAI Responses) endpoint via a new MantleFoundationModel configuration with an optional projectId.
• api-change:deadline: [botocore] AWS Deadline Cloud now supports Docker software add-ons on service-managed fleets. Adds support for Open Job Description EXPR and Feature Bundle 1 job templates with typed job parameters and job, step, and parameter names up to 512 characters.
• api-change:ec2: [botocore] Adds the LaunchStatus field to CapacityReservation in the DescribeCapacityReservations response. This field indicates whether you can currently launch instances into an UltraServer.
• api-change:elasticache: [botocore] Amazon ElastiCache Serverless now supports public endpoints for Valkey caches. With the new Connection Type parameter, you can create a serverless cache accessible over the internet without any VPC configuration. Public endpoint caches require IAM authentication.
• api-change:elementalinference: [botocore] Adds an extendedAnalysis setting to contextual metadata outputs to control detection of people, environments, brands, and on-screen text, and updates the summaryGeneration documentation.
• api-change:glue: [botocore] Add support for Glue system-managed materialized views.
• api-change:identitystore: [botocore] Add support for network access controls to restrict Identity Store API and SCIM access to trusted networks, optimistic locking for users and groups via resource revisions, and resource ARNs as identifiers in requests.
• api-change:inspector2: [botocore] The ListFindingAggregations API now includes Low, Informational, and Untriaged counts alongside the existing severity counts in SeverityCounts.
• api-change:mediatailor: [botocore] AWS Elemental MediaTailor now supports beaconing configuration on playback configurations. In Insights reporting mode, MediaTailor will now gather client side beaconing metrics. Set the reporting mode to Disabled to turn this off.
• api-change:opensearch: [botocore] Amazon OpenSearch Service now supports advisory pre-validations for domain config changes. Non-critical checks now surface as warnings you can acknowledge (via the new AcceptedWarnings parameter) and proceed, instead of hard-blocking. Severity is reported in change-progress and dry-run results.
• api-change:rds: [botocore] Adds the TargetResourceConfigurations parameter to CreateBlueGreenDeployment, letting you specify a target KMS key for each resource in the green environment.
• api-change:sagemaker: [botocore] Adds support for cpu flex type instances on SageMaker Training and Processing. Also contains minor updates to DescribeTrainingPlan to support ARN inputs.
• api-change:securityagent: [botocore] Adds support for Azure DevOps and Bitbucket Data Center integration providers.
• api-change:sesv2: [botocore] Added Filter support for ListTenants, ListEmailIdentities, and ListConfigurationSets APIs.
• api-change:transfer: [botocore] AWS Transfer Family now supports configuring up to three custom ports on public SFTP servers, instead of the single default port 22. You can also set each port's communication mode (server-talk-first or client-talk-first) so legacy and modern SFTP clients connect reliably.

v1.43.104

Compare Source

========

• api-change:agent-registry: [botocore] AWS Agent Registry adds support for custom metadata. Discovery APIs now return custom metadata on registry records and support filtering by metadata fields. Semantic search includes custom metadata for improved relevance. Filter customMetadata fields using eq, ne, and in operators.
• api-change:agent-registry-control: [botocore] AWS Agent Registry adds support for custom metadata. Define a typed metadata schema on your registry and attach structured key-value metadata to registry records. Schemas are additive only. Enforcement is progressive. Records show a compliance status computed against the current schema.
• api-change:bedrock-agentcore-control: [botocore] Amazon Bedrock AgentCore Gateway now supports returning the complete MCP tools list in a single response by disabling pagination for the tools list operation. This feature is available in limited preview.
• api-change:billing: [botocore] Adds support for (a) listing Business Support account charges via ListBusinessSupportAccountCharges and (b) subscription history via ListBusinessSupportSubscriptionHistory through the AWS Billing API.
• api-change:connect: [botocore] This release adds ConnectionTypes and ChatStreamingConfiguration to StartChatContact, and ConnectionCredentials, Websocket, and StreamingId to its response, so customers can request connection information and chat streaming in the same call that starts the chat.
• api-change:ec2: [botocore] API changes to AWS Client VPN to support device posture assessment and Cedar authorization policies
• api-change:eks: [botocore] An optional customer provided prefix used to construct the hostname of the Argo CD server endpoint for EKS Argo CD Capability.
• api-change:fsx: [botocore] Amazon FSx has expanded the model-level maximum on the ThroughputCapacity, ThroughputCapacityPerHAPair, and Iops API parameters. Actual supported values are unchanged and depend on file system type and configuration.
• api-change:glue: [botocore] Added a new exception to several batch APIs
• api-change:guardduty: [botocore] Adding awsServiceName field to GuardDuty Findings
• api-change:securityagent: [botocore] Run automated penetration tests directly from your CI-CD pipeline to scan code changes before they ship, gating deployments on the findings
• api-change:ssm: [botocore] Add support for sharing SSM documents with organizations and OUs using RAM.

v1.43.103

Compare Source

========

• api-change:arc-region-switch: [botocore] Adds a service quota checker to Region switch to verify quota parity between your primary and standby Region, and automatically submit quota limit increases. Adds an optional EC2 Auto Scaling and ECS setting that waits for instances or tasks in the scaled-up Region to be healthy in target groups.
• api-change:bedrock-agent: [botocore] Adds support for calling VPC configuration API's in Bedrock. These configurations allow the use of On Prem connectors in Bedrock Managed Knowledge bases
• api-change:bedrock-agentcore-control: [botocore] Amazon Bedrock AgentCore Payments now supports credential rotation for payment connectors, letting you rotate API and wallet secrets for Quick Create payment auths from the console. This release also adds Type and Creation type columns to the payment managers views.
• api-change:connect: [botocore] Agent Privacy During Hold is a new privacy capability for Amazon Connect Voice that prevents agent audio from being captured in call recordings or Contact Lens conversational analytics during hold. When enabled, agents are automatically muted on entering hold and unmuted on resuming the contact
• api-change:endpoint-rules: [botocore] Update endpoint-rules client to latest version
• api-change:glue: [botocore] add support for table level federation
• api-change:mediaconnect: [botocore] This release adds support for RTMP push rout

[!IMPORTANT]
✂ PR body was truncated to here.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.