Chore(deps): Bump the node-minor-patch group across 4 directories with 13 updates

[dependabot]

Bumps the node-minor-patch group with 6 updates in the /backend/compact-connect-ui-app/lambdas/nodejs directory:

Package	From	To
@aws-lambda-powertools/logger	2.32.0	2.35.0
@aws-sdk/client-dynamodb	3.1029.0	3.1135.0
@aws-sdk/client-s3	3.1029.0	3.1135.0
@aws-sdk/util-dynamodb	3.996.2	3.996.9
esbuild	0.28.0	0.28.2
eslint	10.2.1	10.10.0
@aws-lambda-powertools/logger	2.32.0	2.35.0
@aws-sdk/client-dynamodb	3.1029.0	3.1135.0
@aws-sdk/client-s3	3.1029.0	3.1135.0
@aws-sdk/util-dynamodb	3.996.2	3.996.9
esbuild	0.28.0	0.28.2
eslint	10.2.1	10.10.0
@aws-lambda-powertools/logger	2.32.0	2.35.0
@aws-sdk/client-dynamodb	3.1029.0	3.1135.0
@aws-sdk/client-s3	3.1029.0	3.1135.0
@aws-sdk/util-dynamodb	3.996.2	3.996.9
esbuild	0.28.0	0.28.2
eslint	10.2.1	10.10.0
@aws-lambda-powertools/logger	2.32.0	2.35.0
@aws-sdk/client-dynamodb	3.1029.0	3.1135.0
@aws-sdk/client-s3	3.1029.0	3.1135.0
@aws-sdk/util-dynamodb	3.996.2	3.996.9
esbuild	0.28.0	0.28.2
eslint	10.2.1	10.10.0

Bumps the node-minor-patch group with 13 updates in the /backend/compact-connect/lambdas/nodejs directory:

Package	From	To
@aws-lambda-powertools/logger	2.32.0	2.35.0
@aws-sdk/client-dynamodb	3.1045.0	3.1135.0
@aws-sdk/client-s3	3.1045.0	3.1135.0
@aws-sdk/util-dynamodb	3.996.2	3.996.9
esbuild	0.28.0	0.28.2
eslint	10.2.1	10.10.0
@aws-lambda-powertools/logger	2.32.0	2.35.0
@aws-sdk/client-dynamodb	3.1045.0	3.1135.0
@aws-sdk/client-s3	3.1045.0	3.1135.0
@aws-sdk/client-sesv2	3.1045.0	3.1135.0
@aws-sdk/util-dynamodb	3.996.2	3.996.9
@types/aws-lambda	8.10.161	8.10.163
@typescript-eslint/eslint-plugin	8.58.1	8.70.0
@typescript-eslint/parser	8.58.1	8.70.0
esbuild	0.28.0	0.28.2
eslint	10.2.1	10.10.0
jest	30.4.2	30.5.2
ts-jest	29.4.9	29.4.12
tsx	4.21.0	4.23.13
@aws-lambda-powertools/logger	2.32.0	2.35.0
@aws-sdk/client-dynamodb	3.1045.0	3.1135.0
@aws-sdk/client-s3	3.1045.0	3.1135.0
@aws-sdk/client-sesv2	3.1045.0	3.1135.0
@aws-sdk/util-dynamodb	3.996.2	3.996.9
@types/aws-lambda	8.10.161	8.10.163
@typescript-eslint/eslint-plugin	8.58.1	8.70.0
@typescript-eslint/parser	8.58.1	8.70.0
esbuild	0.28.0	0.28.2
eslint	10.2.1	10.10.0
jest	30.4.2	30.5.2
ts-jest	29.4.9	29.4.12
tsx	4.21.0	4.23.13
@aws-lambda-powertools/logger	2.32.0	2.35.0
@aws-sdk/client-dynamodb	3.1045.0	3.1135.0
@aws-sdk/client-s3	3.1045.0	3.1135.0
@aws-sdk/client-sesv2	3.1045.0	3.1135.0
@aws-sdk/util-dynamodb	3.996.2	3.996.9
@types/aws-lambda	8.10.161	8.10.163
@typescript-eslint/eslint-plugin	8.58.1	8.70.0
@typescript-eslint/parser	8.58.1	8.70.0
esbuild	0.28.0	0.28.2
eslint	10.2.1	10.10.0
jest	30.4.2	30.5.2
ts-jest	29.4.9	29.4.12
tsx	4.21.0	4.23.13

Bumps the node-minor-patch group with 13 updates in the /backend/cosmetology-app/lambdas/nodejs directory:

Package	From	To
@aws-lambda-powertools/logger	2.32.0	2.35.0
@aws-sdk/client-dynamodb	3.1045.0	3.1135.0
@aws-sdk/client-s3	3.1045.0	3.1135.0
@aws-sdk/util-dynamodb	3.996.2	3.996.9
esbuild	0.28.0	0.28.2
eslint	10.2.1	10.10.0
@aws-lambda-powertools/logger	2.32.0	2.35.0
@aws-sdk/client-dynamodb	3.1045.0	3.1135.0
@aws-sdk/client-s3	3.1045.0	3.1135.0
@aws-sdk/client-sesv2	3.1045.0	3.1135.0
@aws-sdk/util-dynamodb	3.996.2	3.996.9
@types/aws-lambda	8.10.161	8.10.163
@typescript-eslint/eslint-plugin	8.58.1	8.70.0
@typescript-eslint/parser	8.58.1	8.70.0
esbuild	0.28.0	0.28.2
eslint	10.2.1	10.10.0
jest	30.4.2	30.5.2
ts-jest	29.4.9	29.4.12
tsx	4.21.0	4.23.13
@aws-lambda-powertools/logger	2.32.0	2.35.0
@aws-sdk/client-dynamodb	3.1045.0	3.1135.0
@aws-sdk/client-s3	3.1045.0	3.1135.0
@aws-sdk/client-sesv2	3.1045.0	3.1135.0
@aws-sdk/util-dynamodb	3.996.2	3.996.9
@types/aws-lambda	8.10.161	8.10.163
@typescript-eslint/eslint-plugin	8.58.1	8.70.0
@typescript-eslint/parser	8.58.1	8.70.0
esbuild	0.28.0	0.28.2
eslint	10.2.1	10.10.0
jest	30.4.2	30.5.2
ts-jest	29.4.9	29.4.12
tsx	4.21.0	4.23.13
@aws-lambda-powertools/logger	2.32.0	2.35.0
@aws-sdk/client-dynamodb	3.1045.0	3.1135.0
@aws-sdk/client-s3	3.1045.0	3.1135.0
@aws-sdk/client-sesv2	3.1045.0	3.1135.0
@aws-sdk/util-dynamodb	3.996.2	3.996.9
@types/aws-lambda	8.10.161	8.10.163
@typescript-eslint/eslint-plugin	8.58.1	8.70.0
@typescript-eslint/parser	8.58.1	8.70.0
esbuild	0.28.0	0.28.2
eslint	10.2.1	10.10.0
jest	30.4.2	30.5.2
ts-jest	29.4.9	29.4.12
tsx	4.21.0	4.23.13

Bumps the node-minor-patch group with 13 updates in the /backend/social-work-app/lambdas/nodejs directory:

Package	From	To
@aws-lambda-powertools/logger	2.32.0	2.35.0
@aws-sdk/client-dynamodb	3.1045.0	3.1135.0
@aws-sdk/client-s3	3.1045.0	3.1135.0
@aws-sdk/util-dynamodb	3.996.2	3.996.9
esbuild	0.28.0	0.28.2
eslint	10.2.1	10.10.0
@aws-lambda-powertools/logger	2.32.0	2.35.0
@aws-sdk/client-dynamodb	3.1045.0	3.1135.0
@aws-sdk/client-s3	3.1045.0	3.1135.0
@aws-sdk/client-sesv2	3.1045.0	3.1135.0
@aws-sdk/util-dynamodb	3.996.2	3.996.9
@types/aws-lambda	8.10.161	8.10.163
@typescript-eslint/eslint-plugin	8.58.1	8.70.0
@typescript-eslint/parser	8.58.1	8.70.0
esbuild	0.28.0	0.28.2
eslint	10.2.1	10.10.0
jest	30.4.2	30.5.2
ts-jest	29.4.9	29.4.12
tsx	4.21.0	4.23.13
@aws-lambda-powertools/logger	2.32.0	2.35.0
@aws-sdk/client-dynamodb	3.1045.0	3.1135.0
@aws-sdk/client-s3	3.1045.0	3.1135.0
@aws-sdk/client-sesv2	3.1045.0	3.1135.0
@aws-sdk/util-dynamodb	3.996.2	3.996.9
@types/aws-lambda	8.10.161	8.10.163
@typescript-eslint/eslint-plugin	8.58.1	8.70.0
@typescript-eslint/parser	8.58.1	8.70.0
esbuild	0.28.0	0.28.2
eslint	10.2.1	10.10.0
jest	30.4.2	30.5.2
ts-jest	29.4.9	29.4.12
tsx	4.21.0	4.23.13
@aws-lambda-powertools/logger	2.32.0	2.35.0
@aws-sdk/client-dynamodb	3.1045.0	3.1135.0
@aws-sdk/client-s3	3.1045.0	3.1135.0
@aws-sdk/client-sesv2	3.1045.0	3.1135.0
@aws-sdk/util-dynamodb	3.996.2	3.996.9
@types/aws-lambda	8.10.161	8.10.163
@typescript-eslint/eslint-plugin	8.58.1	8.70.0
@typescript-eslint/parser	8.58.1	8.70.0
esbuild	0.28.0	0.28.2
eslint	10.2.1	10.10.0
jest	30.4.2	30.5.2
ts-jest	29.4.9	29.4.12
tsx	4.21.0	4.23.13

Updates @aws-lambda-powertools/logger from 2.32.0 to 2.35.0

Release notes

Sourced from @​aws-lambda-powertools/logger's releases.

v2.35.0

Summary

In this release, the Parameters utility gains support for the AWS AppConfig Agent Lambda extension. A new getConfig function fetches application configurations from the agent's local HTTP endpoint, without the AWS SDK and without a cache to manage, since caching, polling, and prefetching are all handled by the agent.

In Logger, the log buffer and the debug sampling log level are now scoped per invocation under Lambda Managed Instances concurrency, so concurrent invocations no longer clear each other's buffered logs or override each other's sampling decision. Logger also now accepts IANA timezone aliases such as Asia/Kolkata in the TZ environment variable, which were previously rejected and produced timestamps for the wrong instant. When a timezone can't be resolved at all, Logger now falls back to UTC consistently and emits a warning, instead of doing so silently.

The Parser utility adds a schema for Amazon Connect Outbound Campaigns custom action events.

Finally, the documentation site has been restyled to match the AWS Developer Guide.

[!IMPORTANT] The project's Discord server has been shut down. Community conversations now happen in GitHub Discussions, and all Discord links in the READMEs, docs, and issue templates now point there.

⭐ Congratulations to @​leiwilson for their first PR merged in the project 🎉

AppConfig Agent support

If you use the AWS AppConfig Agent Lambda extension, you can now fetch application configurations from the agent's local HTTP endpoint with getConfig:

import { getConfig } from '@aws-lambda-powertools/parameters/appconfig-agent';
const config = await getConfig('my-configuration', {
environment: 'my-env',
application: 'my-app',
transform: 'json',
});
export const handler = async (): Promise<void> => {
console.log(config);
};

A few things to know:

• You must add the AppConfig Agent Lambda extension layer to your function. getConfig talks to it over the agent's local endpoint, so it doesn't need the AWS SDK.
• Because the agent handles caching, polling, and prefetching, the maxAge and forceFetch options don't apply. You can reduce cold start latency by setting AWS_APPCONFIG_EXTENSION_PREFETCH_LIST so the agent fetches your configuration before your handler runs.
• When the configuration doesn't exist, getConfig returns undefined, so you can fall back with ??, or set throwOnMissing to get a ParameterNotFoundError instead. Any other failure to reach the agent throws a GetParameterError.
• Outside of Lambda, or when POWERTOOLS_DEV is enabled, getConfig returns undefined without making a request, so your tests never need to mock the agent. Set POWERTOOLS_APPCONFIG_AGENT_RETURN_VALUE when you want it to return a value instead.

Changes

• refactor(logger): isolate log level InvokeStore access in a store (#5548) by @​vishwakt
• fix(logger): scope log buffer per invocation under LMI concurrency (#5543) by @​vishwakt
• fix(logger): scope debug sampling log level per invocation under LMI concurrency (#5544) by @​vishwakt
• chore(ci): remove boring-cyborg and semantic config files (#5535) by @​dreamorosi
• chore(ci): remove greetings now handled by oss-automation (#5532) by @​dreamorosi
• chore: replace Discord server with GitHub Discussions (#5530) by @​dreamorosi
• docs: restyle documentation to match AWS Developer Guide (#5426) by @​dreamorosi

... (truncated)

Changelog

Sourced from @​aws-lambda-powertools/logger's changelog.

2.35.0 (2026-08-18)

Improvements

• logger isolate log level InvokeStore access in a store (#5548) (a47c7a6)

Bug Fixes

• logger scope log buffer per invocation under LMI concurrency (#5543) (0d4071b)
• logger scope debug sampling log level per invocation under LMI concurrency (#5544) (1b4b013)
• logger accept resolvable IANA timezone aliases in timestamps (#5458) (4cdc936)

Features

• parameters add support for AppConfig Agent (#5399) (f1deacc)
• parser add schema for Amazon Connect Outbound Campaigns (#5502) (30d7beb)

2.34.0 (2026-07-10)

Improvements

• commons extract shared isRunningInLambda helper (#5424) (aec888b)
• logger remove unsafe context cast in createChild (#5443) (ac97f52)
• event-handler extract shared IP-extraction util for HTTP middleware (#5346) (3230ca7)

Maintenance

• commons bump @​aws/lambda-invoke-store from 0.2.4 to 0.3.0 (#5401) (0a05acd)
• commons guard UA string against duplicate PTEnv suffix (#5311) (6b59973)
• logger bump @​aws/lambda-invoke-store from 0.2.4 to 0.3.0 (#5401) (0a05acd)
• metrics bump @​aws/lambda-invoke-store from 0.2.4 to 0.3.0 (#5401) (0a05acd)
• tracer bump @​aws/lambda-invoke-store from 0.2.4 to 0.3.0 (#5401) (0a05acd)
• idempotency bump @​aws/durable-execution-sdk-js to ^1.1.6 (#5298) (dbc07c7)
• batch bump @​aws/lambda-invoke-store from 0.2.4 to 0.3.0 (#5401) (0a05acd)

Bug Fixes

• commons clear LRUCache pointers on eviction of last item (#5295) (acf1ba1)
• logger scope lambda context per invocation under LMI concurrency (#5430) (e5d2e69)
• metrics detect key collisions between dimensions, metrics, and metadata (#5240) (c1e62a6)
• tracer isolate active segment per invocation under LMI concurrency (#5446) (5890d94)
• tracer scope middy middleware segments per invocation (#5444) (14f68b1)
• idempotency recompute key prefix from base on each configure call (#5442) (a739c36)
• event-handler preserve original string for invalid Bedrock Agent number params (#5363) (9cce9f9)
• event-handler avoid runtime import of metrics package in HTTP metrics middleware (#5310) (f4a6752)
• event-handler correct InvalidHttpMethodError name (#5254) (7d410fc)
• event-handler normalize trailing slashes in HTTP Router prefix joining (#5255) (7a500a1)

Features

... (truncated)

Commits

• 7bcc27b chore(ci): bump version to 2.35.0 (#5563)
• 66e901c chore(deps): bump the aws-cdk group across 1 directory with 3 updates (#5524)
• 6bd97ae chore(deps-dev): bump @​valkey/valkey-glide from 2.5.0 to 2.5.1 (#5559)
• f100ced chore(deps): bump the codeql-action group across 1 directory with 3 updates (...
• b681b94 chore(deps-dev): bump @​biomejs/biome from 2.5.7 to 2.5.8 (#5560)
• 97581fd chore(deps-dev): bump @​redis/client from 6.2.0 to 6.2.1 (#5558)
• 4742290 chore(deps): bump the aws-sdk-v3 group across 1 directory with 48 updates (#5...
• 6c96925 chore(deps-dev): bump protobufjs from 8.7.1 to 8.7.2 (#5551)
• 347f60f chore(deps): bump esbuild from 0.28.1 to 0.28.2 (#5552)
• a47c7a6 refactor(logger): isolate log level InvokeStore access in a store (#5548)
• Additional commits viewable in compare view

Updates @aws-sdk/client-dynamodb from 3.1029.0 to 3.1135.0

Release notes

Sourced from @​aws-sdk/client-dynamodb's releases.

v3.1135.0

3.1135.0(2026-09-17)

Documentation Changes

• client-sns: SNS API reference documentation update (0e22e2d7)

New Features

• client-connect: Made the replicaAlias attribute optional in the ReplicateInstance API to support Global routing for Amazon Connect Global Resiliency (ACGR) instances. This change maintains backward compatibility. When onboarding to ACGR without Global routing, you must specify a custom replicaAlias in your API call (f134c352)
• client-ec2: Adding support for "Tunnel" VPC Endpoint (cb7c9bc5)
• client-notifications: Added support for attachments on managed notification events. Added support to access and subscribe sensitive managed notification events. (c8a9cc10)
• client-guardduty: This change surfaces AI Protection resources on existing public IAM attack sequences. Customers will now see which model was accessed and whether a guardrail intervened as part of the credential-compromise sequence. (854ccbfa)
• client-sesv2: Added support to query the tenant name for BatchGetMetricData and CreateExportJob APIs to filter metrics and messages at the tenant level. (3beafcbc)
• client-iot-wireless: Adds Multi-frame GNSS support to the AWS IoT Core Device Location GetPositionEstimate API. The new GnssMultiFrame measurement type improves location accuracy by combining multiple GNSS signal captures (2, 4, 8, 16, or 32) from the same device to estimate its position. (294ad0a3)
• client-vpc-lattice: Adding support for CIDR Resource Configuration (46656caf)
• client-socialmessaging: Add support for WhatsApp Calling APIs. (b897c28f)
• client-bedrock-agentcore: Batch evaluation now supports evaluating specific traces within a session. Each session can specify up to 100 trace IDs to evaluate. (fac9ee4c)

---

For list of updated packages, view updated-packages.md in assets-3.1135.0.zip

v3.1134.0

3.1134.0(2026-09-16)

Chores

• lib-transfer-manager: apply formatting (#8306) (b8f7c4e4)

New Features

• client-customer-profiles: This release introduces the SearchRecommendations API, which retrieves recommendations for a profile identified by a search key. (a0388656)
• client-marketplace-catalog: This release enhances the ListEntities API to support issuerAccountId and SourceAuthorization filter for ResaleAuthorization entity. (f2379c20)
• client-ec2: Releasing new EC2 R9g and R9gd memory-optimized instances powered by AWS Graviton5 processors, with up to 25 percent better compute performance than R8g instances, faster DDR5 memory, and up to 100 Gbps network and 72 Gbps EBS bandwidth. R9gd instances additionally provide local NVMe SSD storage. (30aea54d)
• client-connect: Adds support for ContactAnalysis via ListContactReferences. (983124f4)
• client-elastic-beanstalk: Adds support to create and manage Elastic Beanstalk Cluster Environments. (fc0ab53f)
• client-bedrock-agentcore-control: Adds support for a new DELETE FAILED status for Bedrock AgentCore Runtimes and Bedrock AgentCore Runtime Endpoints. (c5d84415)
• client-resiliencehubv2: Next Gen Resilience Hub now supports dependency insights (LLM-based insights about customer's service dependencies) and organization-level policy sharing (provision to share policy with member accounts for an organization) (4d415b51)

Bug Fixes

• lib-transfer-manager: update transfer progress events (#8292) (8c690c23)

---

For list of updated packages, view updated-packages.md in assets-3.1134.0.zip

... (truncated)

Changelog

Sourced from @​aws-sdk/client-dynamodb's changelog.

3.1135.0 (2026-09-17)

Note: Version bump only for package @​aws-sdk/client-dynamodb

3.1134.0 (2026-09-16)

Note: Version bump only for package @​aws-sdk/client-dynamodb

3.1133.0 (2026-09-15)

Note: Version bump only for package @​aws-sdk/client-dynamodb

3.1132.0 (2026-09-14)

Note: Version bump only for package @​aws-sdk/client-dynamodb

3.1131.0 (2026-09-11)

Note: Version bump only for package @​aws-sdk/client-dynamodb

3.1130.0 (2026-09-10)

Note: Version bump only for package @​aws-sdk/client-dynamodb

3.1129.0 (2026-09-09)

... (truncated)

Commits

• 2d5f18d Publish v3.1135.0
• 0d6310b Publish v3.1134.0
• 615a1ca Publish v3.1133.0
• 99b4bd0 Publish v3.1132.0
• 33f2cc7 Publish v3.1131.0
• cd49ceb Publish v3.1130.0
• cece980 Publish v3.1129.0
• 523fff6 Publish v3.1128.0
• 8893344 Publish v3.1127.0
• 7131e74 Publish v3.1126.0
• Additional commits viewable in compare view

Updates @aws-sdk/client-s3 from 3.1029.0 to 3.1135.0

Release notes

Sourced from @​aws-sdk/client-s3's releases.

v3.1135.0

3.1135.0(2026-09-17)

Documentation Changes

• client-sns: SNS API reference documentation update (0e22e2d7)

New Features

• client-connect: Made the replicaAlias attribute optional in the ReplicateInstance API to support Global routing for Amazon Connect Global Resiliency (ACGR) instances. This change maintains backward compatibility. When onboarding to ACGR without Global routing, you must specify a custom replicaAlias in your API call (f134c352)
• client-ec2: Adding support for "Tunnel" VPC Endpoint (cb7c9bc5)
• client-notifications: Added support for attachments on managed notification events. Added support to access and subscribe sensitive managed notification events. (c8a9cc10)
• client-guardduty: This change surfaces AI Protection resources on existing public IAM attack sequences. Customers will now see which model was accessed and whether a guardrail intervened as part of the credential-compromise sequence. (854ccbfa)
• client-sesv2: Added support to query the tenant name for BatchGetMetricData and CreateExportJob APIs to filter metrics and messages at the tenant level. (3beafcbc)
• client-iot-wireless: Adds Multi-frame GNSS support to the AWS IoT Core Device Location GetPositionEstimate API. The new GnssMultiFrame measurement type improves location accuracy by combining multiple GNSS signal captures (2, 4, 8, 16, or 32) from the same device to estimate its position. (294ad0a3)
• client-vpc-lattice: Adding support for CIDR Resource Configuration (46656caf)
• client-socialmessaging: Add support for WhatsApp Calling APIs. (b897c28f)
• client-bedrock-agentcore: Batch evaluation now supports evaluating specific traces within a session. Each session can specify up to 100 trace IDs to evaluate. (fac9ee4c)

---

For list of updated packages, view updated-packages.md in assets-3.1135.0.zip

v3.1134.0

3.1134.0(2026-09-16)

Chores

• lib-transfer-manager: apply formatting (#8306) (b8f7c4e4)

New Features

• client-customer-profiles: This release introduces the SearchRecommendations API, which retrieves recommendations for a profile identified by a search key. (a0388656)
• client-marketplace-catalog: This release enhances the ListEntities API to support issuerAccountId and SourceAuthorization filter for ResaleAuthorization entity. (f2379c20)
• client-ec2: Releasing new EC2 R9g and R9gd memory-optimized instances powered by AWS Graviton5 processors, with up to 25 percent better compute performance than R8g instances, faster DDR5 memory, and up to 100 Gbps network and 72 Gbps EBS bandwidth. R9gd instances additionally provide local NVMe SSD storage. (30aea54d)
• client-connect: Adds support for ContactAnalysis via ListContactReferences. (983124f4)
• client-elastic-beanstalk: Adds support to create and manage Elastic Beanstalk Cluster Environments. (fc0ab53f)
• client-bedrock-agentcore-control: Adds support for a new DELETE FAILED status for Bedrock AgentCore Runtimes and Bedrock AgentCore Runtime Endpoints. (c5d84415)
• client-resiliencehubv2: Next Gen Resilience Hub now supports dependency insights (LLM-based insights about customer's service dependencies) and organization-level policy sharing (provision to share policy with member accounts for an organization) (4d415b51)

Bug Fixes

• lib-transfer-manager: update transfer progress events (#8292) (8c690c23)

---

For list of updated packages, view updated-packages.md in assets-3.1134.0.zip

... (truncated)

Changelog

Sourced from @​aws-sdk/client-s3's changelog.

3.1135.0 (2026-09-17)

Note: Version bump only for package @​aws-sdk/client-s3

3.1134.0 (2026-09-16)

Note: Version bump only for package @​aws-sdk/client-s3

3.1133.0 (2026-09-15)

Note: Version bump only for package @​aws-sdk/client-s3

3.1132.0 (2026-09-14)

Note: Version bump only for package @​aws-sdk/client-s3

3.1131.0 (2026-09-11)

Note: Version bump only for package @​aws-sdk/client-s3

3.1130.0 (2026-09-10)

Note: Version bump only for package @​aws-sdk/client-s3

3.1129.0 (2026-09-09)

... (truncated)

Commits

• 2d5f18d Publish v3.1135.0
• 0d6310b Publish v3.1134.0
• 615a1ca Publish v3.1133.0
• 99b4bd0 Publish v3.1132.0
• 33f2cc7 Publish v3.1131.0
• 996d664 docs(client-s3): Updated S3 Object Lock Default Retention documentation.
• cd49ceb Publish v3.1130.0
• cece980 Publish v3.1129.0
• 523fff6 Publish v3.1128.0
• 8b58987 feat(client-s3): Adds support for Amazon S3 Object Lock variable retention. ...
• Additional commits viewable in compare view

Updates @aws-sdk/util-dynamodb from 3.996.2 to 3.996.9

Commits

• See full diff in compare view

Updates esbuild from 0.28.0 to 0.28.2

Release notes

Sourced from esbuild's releases.

v0.28.2

• Fix tree shaking bug due to TypeScript import alias (#4507)

  This release fixes a bug that could cause esbuild to incorrectly tree-shake imports that are used in a TypeScript type alias under certain circumstances. Affected code uses a TypeScript-specific import assignment and looks something like this:

  import Base from './dep.js';
  import Alias = Base.SomeType;

• Fix CSS minification bug involving & (#4497)

  This release fixes a bug where esbuild's CSS minifier incorrectly removed a & when it was unsafe to do so. Here is an example:

  /* Original code */
  .a .b {
    & .b:not(& .c) {
      color: red;
    }
  }
  /* Old output (with --minify) */
  .a .b{.b:not(& .c){color:red}}
  /* New output (with --minify) */
  .a .b{& .b:not(& .c){color:red}}

  This should match <span class="a"><span class="b"><span class="b">yes</span></span></span> but not <span class="a"><span class="b">no</span></span>. The old output incorrectly matched both.

• Avoid overwriting input files without --allow-overwrite (#4484)

  For example: esbuild input.js --outfile=input.js tells esbuild to overwrite input.js with the output of running esbuild on it. This was supposed to already be prevented by default, but it accidentally regressed in version 0.17.0 and apparently didn't have any test coverage. The error message was being printed but the input file was still being overwritten. Oops.

  This release puts the original behavior back. With this release, esbuild should now actually avoid overwriting input files unless --allow-overwrite is explicitly present. This is done by not writing out any files when a build error is encountered.

• Fix incorrect code generated when using top-level await (#4498)

  Previously esbuild could generate code containing a syntax error in complex scenarios involving top-level await used in a dependency cycle. The problem was a missing async on one or more module wrapper closures. With this release, esbuild now uses a fixed-point iteration algorithm to correctly annotate all dependencies in the cycle as needing an async module wrapper.

• Fix a minification bug with lowered logical assignment operators (#4508)

  This release fixes a bug that could cause esbuild to generate incorrect code for logical assignment operators when lowering them to an older target environment. Specifically the lowering process requires duplicating the left-hand side, but esbuild incorrectly failed to count the duplicate as a new usage when the left-hand side is an identifier. That then caused the minifier to believe that the left-hand side was only used once and could attempt to incorrectly inline an initializer into the first usage. This bug has now been fixed:

  // Original code
  function foo() {
    let x
    bar(x ||= {})

... (truncated)

Changelog

Sourced from esbuild's changelog.

0.28.2

• Fix tree shaking bug due to TypeScript import alias (#4507)

  This release fixes a bug that could cause esbuild to incorrectly tree-shake imports that are used in a TypeScript type alias under certain circumstances. Affected code uses a TypeScript-specific import assignment and looks something like this:

  import Base from './dep.js';
  import Alias = Base.SomeType;

• Fix CSS minification bug involving & (#4497)

  This release fixes a bug where esbuild's CSS minifier incorrectly removed a & when it was unsafe to do so. Here is an example:

  /* Original code */
  .a .b {
    & .b:not(& .c) {
      color: red;
    }
  }
  /* Old output (with --minify) */
  .a .b{.b:not(& .c){color:red}}
  /* New output (with --minify) */
  .a .b{& .b:not(& .c){color:red}}

  This should match <span class="a"><span class="b"><span class="b">yes</span></span></span> but not <span class="a"><span class="b">no</span></span>. The old output incorrectly matched both.

• Avoid overwriting input files without --allow-overwrite (#4484)

  For example: esbuild input.js --outfile=input.js tells esbuild to overwrite input.js with the output of running esbuild on it. This was supposed to already be prevented by default, but it accidentally regressed in version 0.17.0 and apparently didn't have any test coverage. The error message was being printed but the input file was still being overwritten. Oops.

  This release puts the original behavior back. With this release, esbuild should now actually avoid overwriting input files unless --allow-overwrite is explicitly present. This is done by not writing out any files when a build error is encountered.

• Fix incorrect code generated when using top-level await (#4498)

  Previously esbuild could generate code containing a syntax error in complex scenarios involving top-level await used in a dependency cycle. The problem was a missing async on one or more module wrapper closures. With this release, esbuild now uses a fixed-point iteration algorithm to correctly annotate all dependencies in the cycle as needing an async module wrapper.

• Fix a minification bug with lowered logical assignment operators (#4508)

  This release fixes a bug that could cause esbuild to generate incorrect code for logical assignment operators when lowering them to an older target environment. Specifically the lowering process requires duplicating the left-hand side, but esbuild incorrectly failed to count the duplicate as a new usage when the left-hand side is an identifier. That then caused the minifier to believe that the left-hand side was only used once and could attempt to incorrectly inline an initializer into the first usage. This bug has now been fixed:

  // Original code
  function foo() {
    let x

... (truncated)

Commits

• 609683d publish 0.28.2 to npm
• 11b1fe4 add to release notes
• ab50d91 css: fix green/blue channel swap in oklch gamut mapping (#4488)
• 04627b6 fix #4498: async TLA checks need a worklist
• 5c15177 disable gopls in the go folder
• fc2ee9b css: adjust parser to allow --foo: {...}
• 209db54 release notes for css nesting bugfix
• c625d31 fix #4497: preserve nested ampersands during minification (#4500)Description has been truncated

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Advanced

Run ID: 8e7bf327-af04-4b9a-9249-1287d877c1b9

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}