Chore(deps): Bump the node-minor-patch group across 3 directories with 8 updates

[dependabot]

Bumps the node-minor-patch group with 4 updates in the /backend/compact-connect-ui-app/lambdas/nodejs directory: @aws-lambda-powertools/logger, @aws-sdk/client-dynamodb, @aws-sdk/client-s3 and eslint.
Bumps the node-minor-patch group with 8 updates in the /backend/compact-connect/lambdas/nodejs directory:

Package	From	To
@aws-lambda-powertools/logger	2.32.0	2.33.0
@aws-sdk/client-dynamodb	3.1029.0	3.1041.0
@aws-sdk/client-s3	3.1029.0	3.1041.0
eslint	10.2.1	10.3.0
@aws-sdk/client-sesv2	3.1029.0	3.1041.0
nodemailer	8.0.5	8.0.7
@typescript-eslint/eslint-plugin	8.58.1	8.59.1
@typescript-eslint/parser	8.58.1	8.59.1

Bumps the node-minor-patch group with 8 updates in the /backend/cosmetology-app/lambdas/nodejs directory:

Package	From	To
@aws-lambda-powertools/logger	2.32.0	2.33.0
@aws-sdk/client-dynamodb	3.1029.0	3.1041.0
@aws-sdk/client-s3	3.1029.0	3.1041.0
eslint	10.2.1	10.3.0
@aws-sdk/client-sesv2	3.1029.0	3.1041.0
nodemailer	8.0.5	8.0.7
@typescript-eslint/eslint-plugin	8.58.1	8.59.1
@typescript-eslint/parser	8.58.1	8.59.1

Updates @aws-lambda-powertools/logger from 2.32.0 to 2.33.0

Release notes

Sourced from @​aws-lambda-powertools/logger's releases.

v2.33.0

Summary

In this release, the HTTP event handler gains a new metrics middleware that lets you emit per-request latency, fault, and error metrics with a single line of configuration. The middleware automatically uses the matched route as a dimension and attaches request metadata like HTTP method, path, status code, and API Gateway request IDs.

We've also improved the parser package by exporting InferOutput from the public types entry point, resolving a TypeScript declaration emit error (TS2883) that affected consumers using safeParse mode — particularly those upgrading to TypeScript 6.

⭐ Congratulations to @​yashar-new10 and @​faberchri for their first PR merged in the project 🎉

Metrics Middleware

You can now use the Metrics utility with the HTTP event handler to automatically emit CloudWatch metrics for every request. The middleware:

• Adds the matched route as a metric dimension (e.g., GET /users/:id)
• Emits latency (Milliseconds), fault (Count), and error (Count) metrics
• Attaches request metadata including httpMethod, path, statusCode, userAgent, and ipAddress
• Adds API Gateway-specific metadata (apiGwRequestId, apiGwApiId) when available
• Uses NOT_FOUND as the route dimension when no route matches, preventing dimension explosion

import { Router } from '@aws-lambda-powertools/event-handler/http';
import { metrics as metricsMiddleware } from '@aws-lambda-powertools/event-handler/http/middleware/metrics';
import { Metrics } from '@aws-lambda-powertools/metrics;
import type { Context } from 'aws-lambda';
const metrics = new Metrics({ namespace: 'my-app', serviceName: 'my-service' });
const app = new Router();
app.use(metricsMiddleware(metrics));
app.get('/users/:id', async ({ params }) => {
return { id: params.id, name: 'Jane' };
});
export const handler = async (event: unknown, context: Context) =>
app.resolve(event, context);

Changes

• improv(parser): export InferOutput from public types entry point (#5175) by @​yashar-new10
• chore(deps): add esbuild as explicit devDependency (#5173) by @​sdangol
• chore: temporarily remove Bahrain (me-south-1) region from layer publishing (#5169) by @​svozza
• docs(commons): fix isStrictEqual and areArraysEqual JSDoc array comparison description (#5165) by @​Zelys-DFKH
• docs: fix dependencies & broken references (#5156) by @​dreamorosi
• docs: fix markdown table format (#5153) by @​dothomson
• style: remove useAwait linting rule (#5146) by @​dreamorosi
• docs(event-handler): update custom middleware example to use Store API (#5145) by @​svozza
• fix(commons): don't overwrite existing value with undefined in deepMerge (#5141) by @​faberchri
• fix(event-handler): http response body validation typings (#5125) by @​nateiler
• feat(event-handler): add metrics middleware for HTTP routes (#5086) by @​svozza

... (truncated)

Changelog

Sourced from @​aws-lambda-powertools/logger's changelog.

2.33.0 (2026-04-14)

Bug Fixes

• commons don't overwrite existing value with undefined in deepMerge (#5141) (c7c6c0f)
• commons rename AvailabilityZoneId to AvailabilityZoneID in docs and tests (#5118) (65c054c)
• event-handler http response body validation typings (#5125) (0805db9)

Improvements

• parser export InferOutput from public types entry point (#5175) (16c6de6)

Features

• event-handler add metrics middleware for HTTP routes (#5086) (5af28e8)

Commits

• 5765cc4 chore(ci): bump version to 2.33.0 (#5183)
• ad92246 chore(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 (#5181)
• ec7dc7e chore(deps-dev): bump typedoc from 0.28.18 to 0.28.19 in the typescript group...
• b6ae31b chore(deps): bump actions/github-script from 8.0.0 to 9.0.0 (#5177)
• a6368ad chore(deps): bump release-drafter/release-drafter from 7.1.1 to 7.2.0 (#5178)
• 0777d90 chore(deps-dev): bump @​biomejs/biome from 2.4.10 to 2.4.11 (#5179)
• fe45b4e chore(deps): bump @​types/node from 25.5.2 to 25.6.0 (#5180)
• 16c6de6 improv(parser): export InferOutput from public types entry point (#5175)
• 1e2f39f chore(deps): bump aws-actions/configure-aws-credentials from 6.0.0 to 6.1.0 (...
• e279e1b chore(deps-dev): bump the vitest group across 1 directory with 2 updates (#5176)
• Additional commits viewable in compare view

Updates @aws-sdk/client-dynamodb from 3.1029.0 to 3.1041.0

Release notes

Sourced from @​aws-sdk/client-dynamodb's releases.

v3.1041.0

3.1041.0(2026-05-01)

Chores

• core/client: emit warning for Node.js 20.x end-of-support (#7973) (00383767)
• workflows: migrate git-sync SSH key from GitHub secret to Secrets Manager via OIDC (#7978) (c056a2e3)
• codegen: smithy-aws-typescript-codegen 0.49.1 (#7980) (7bb42b39)

Documentation Changes

• client-iam: Added guidance for CreateOpenIDConnectProvider to include multiple thumbprints when OIDC discovery and JWKS endpoints use different hosts or certificates (b4bb6928)

New Features

• clients: update client endpoints as of 2026-05-01 (d48b40d5)
• client-iot: AWS IoT HTTP rule actions now support cross-topic batching, combining messages from different MQTT topics into single HTTP requests. (82edd29f)
• client-appstream: Amazon WorkSpaces Applications now enables AI agents to securely operate desktop applications. Administrators configure stacks to provide agents access to WorkSpaces. Agents can click, type, and take screenshots. Agents authenticate with AWS IAM credentials with activity logged in AWS CloudTrail. (5ca40b43)
• client-quicksight: Add IdentityProviderCACertificatesBundleS3Uri for private CA certs with OAuth datasources. 256-char limit for FontFamily in themes. ControlTitleFormatText on all 13 filters. ControlTitleFontConfiguration. ContextRegion for cross-region identity context. Story,scenario in CreateCustomCapability API. (a625879c)
• client-cloudwatch: This release adds tag support for CloudWatch Dashboards. The PutDashboard API now accepts a Tags parameter, allowing you to tag dashboards at creation time. Additionally, the TagResource, UntagResource, and ListTagsForResource APIs now support dashboard ARNs as resources. (e87c1479)
• client-entityresolution: Add support for transitive matching in AWS Entity Resolution rule-based matching workflows. When enabled, records that match through different rules are grouped together into the same match group, allowing related records to be connected across rule levels. (20487961)
• client-cloudwatch-logs: Adds support for filtering log groups by tags in the ListLogGroups API via the new logGroupTags parameter. (25dc6d23)
• client-qconnect: Added reasoning details, statusDescription, and timeToFirstTokenMs fields to the ListSpans response in Amazon Q in Connect to provide visibility into model thinking, error diagnostics, and inference latency metrics. (2c668c9d)

Bug Fixes

• lib-storage: use Math.ceil in default partSize calculation to prevent exceeding 10,000 parts (#7982) (8a58046b)

---

For list of updated packages, view updated-packages.md in assets-3.1041.0.zip

v3.1040.0

3.1040.0(2026-04-30)

New Features

• clients: update client endpoints as of 2026-04-30 (2620ccbd)
• client-bedrock-agentcore-control: AgentCore Identity now supports on-behalf-of token exchange OAuth2. AgentCore Memory now supports metadata for LongTerm Memory Records. (6b9d13e3)
• client-route53globalresolver: Adds support for regions in the UpdateGlobalResolver input. (84b15b2e)
• client-sagemaker: Add InstancePools support to Endpoint for flexible provisioning across a prioritized list of instance types. Add Specifications support to InferenceComponent for per-instance-type model configurations. (05c49aa9)
• client-sso-admin: Add InstanceArn and IdentityStoreArn in the response of CreateApplication API and IdentityStoreArn in the response of DescribeApplication API (d46aaf53)
• client-payment-cryptography: Adds support for resource-based policies on AWS Payment Cryptography keys, enabling cross-account key sharing. Also adds Multi-Party Approval (MPA) team association APIs for protecting sensitive import root public key operations. (4d7fdfa8)
• client-datazone: Adds support for asynchronous notebook runs (e562cc0f)
• client-kafka: Adds support for ZookeeperAccess field to control the Client-Zookeeper connectivity. (34de26bd)
• client-observabilityadmin: Observability Admin enablement launch for AWS Kafka, Bedrock Agent Core Workload Identity and OTel metric enablement. (8cea5eb6)
• client-eks: Vended logs update param for capability vended logs feature (7741c8f5)
• client-bedrock-agentcore: AgentCore Identity now supports on-behalf-of token exchange OAuth2. AgentCore Memory now supports metadata for LongTerm Memory Records. (948fd098)

... (truncated)

Changelog

Sourced from @​aws-sdk/client-dynamodb's changelog.

3.1041.0 (2026-05-01)

Note: Version bump only for package @​aws-sdk/client-dynamodb

3.1040.0 (2026-04-30)

Note: Version bump only for package @​aws-sdk/client-dynamodb

3.1039.0 (2026-04-29)

Note: Version bump only for package @​aws-sdk/client-dynamodb

3.1038.0 (2026-04-27)

Note: Version bump only for package @​aws-sdk/client-dynamodb

3.1037.0 (2026-04-24)

Note: Version bump only for package @​aws-sdk/client-dynamodb

3.1036.0 (2026-04-23)

Note: Version bump only for package @​aws-sdk/client-dynamodb

3.1035.0 (2026-04-22)

... (truncated)

Commits

• 5df4c01 Publish v3.1041.0
• 7736067 Publish v3.1040.0
• 856c9c0 test(client-dynamodb): fix table cleanup criteria (#7976)
• 51c8215 Publish v3.1039.0
• 97d9277 test(client-dynamodb): enable verbose e2e test mode (#7974)
• 8009782 test(client-dynamodb): e2e test table cleanup (#7971)
• 3dfb72b chore(codegen): sync for adaptive retry fixes (#7970)
• 3fbf6c5 Publish v3.1038.0
• e9f8d8a chore(codegen): sync for typed waiter-result values (#7965)
• 7babd8b Publish v3.1037.0
• Additional commits viewable in compare view

Updates @aws-sdk/client-s3 from 3.1029.0 to 3.1041.0

Release notes

Sourced from @​aws-sdk/client-s3's releases.

v3.1041.0

3.1041.0(2026-05-01)

Chores

• core/client: emit warning for Node.js 20.x end-of-support (#7973) (00383767)
• workflows: migrate git-sync SSH key from GitHub secret to Secrets Manager via OIDC (#7978) (c056a2e3)
• codegen: smithy-aws-typescript-codegen 0.49.1 (#7980) (7bb42b39)

Documentation Changes

• client-iam: Added guidance for CreateOpenIDConnectProvider to include multiple thumbprints when OIDC discovery and JWKS endpoints use different hosts or certificates (b4bb6928)

New Features

• clients: update client endpoints as of 2026-05-01 (d48b40d5)
• client-iot: AWS IoT HTTP rule actions now support cross-topic batching, combining messages from different MQTT topics into single HTTP requests. (82edd29f)
• client-appstream: Amazon WorkSpaces Applications now enables AI agents to securely operate desktop applications. Administrators configure stacks to provide agents access to WorkSpaces. Agents can click, type, and take screenshots. Agents authenticate with AWS IAM credentials with activity logged in AWS CloudTrail. (5ca40b43)
• client-quicksight: Add IdentityProviderCACertificatesBundleS3Uri for private CA certs with OAuth datasources. 256-char limit for FontFamily in themes. ControlTitleFormatText on all 13 filters. ControlTitleFontConfiguration. ContextRegion for cross-region identity context. Story,scenario in CreateCustomCapability API. (a625879c)
• client-cloudwatch: This release adds tag support for CloudWatch Dashboards. The PutDashboard API now accepts a Tags parameter, allowing you to tag dashboards at creation time. Additionally, the TagResource, UntagResource, and ListTagsForResource APIs now support dashboard ARNs as resources. (e87c1479)
• client-entityresolution: Add support for transitive matching in AWS Entity Resolution rule-based matching workflows. When enabled, records that match through different rules are grouped together into the same match group, allowing related records to be connected across rule levels. (20487961)
• client-cloudwatch-logs: Adds support for filtering log groups by tags in the ListLogGroups API via the new logGroupTags parameter. (25dc6d23)
• client-qconnect: Added reasoning details, statusDescription, and timeToFirstTokenMs fields to the ListSpans response in Amazon Q in Connect to provide visibility into model thinking, error diagnostics, and inference latency metrics. (2c668c9d)

Bug Fixes

• lib-storage: use Math.ceil in default partSize calculation to prevent exceeding 10,000 parts (#7982) (8a58046b)

---

For list of updated packages, view updated-packages.md in assets-3.1041.0.zip

v3.1040.0

3.1040.0(2026-04-30)

New Features

• clients: update client endpoints as of 2026-04-30 (2620ccbd)
• client-bedrock-agentcore-control: AgentCore Identity now supports on-behalf-of token exchange OAuth2. AgentCore Memory now supports metadata for LongTerm Memory Records. (6b9d13e3)
• client-route53globalresolver: Adds support for regions in the UpdateGlobalResolver input. (84b15b2e)
• client-sagemaker: Add InstancePools support to Endpoint for flexible provisioning across a prioritized list of instance types. Add Specifications support to InferenceComponent for per-instance-type model configurations. (05c49aa9)
• client-sso-admin: Add InstanceArn and IdentityStoreArn in the response of CreateApplication API and IdentityStoreArn in the response of DescribeApplication API (d46aaf53)
• client-payment-cryptography: Adds support for resource-based policies on AWS Payment Cryptography keys, enabling cross-account key sharing. Also adds Multi-Party Approval (MPA) team association APIs for protecting sensitive import root public key operations. (4d7fdfa8)
• client-datazone: Adds support for asynchronous notebook runs (e562cc0f)
• client-kafka: Adds support for ZookeeperAccess field to control the Client-Zookeeper connectivity. (34de26bd)
• client-observabilityadmin: Observability Admin enablement launch for AWS Kafka, Bedrock Agent Core Workload Identity and OTel metric enablement. (8cea5eb6)
• client-eks: Vended logs update param for capability vended logs feature (7741c8f5)
• client-bedrock-agentcore: AgentCore Identity now supports on-behalf-of token exchange OAuth2. AgentCore Memory now supports metadata for LongTerm Memory Records. (948fd098)

... (truncated)

Changelog

Sourced from @​aws-sdk/client-s3's changelog.

3.1041.0 (2026-05-01)

Note: Version bump only for package @​aws-sdk/client-s3

3.1040.0 (2026-04-30)

Note: Version bump only for package @​aws-sdk/client-s3

3.1039.0 (2026-04-29)

Note: Version bump only for package @​aws-sdk/client-s3

3.1038.0 (2026-04-27)

Bug Fixes

• xml-builder: use xml 1.1 parsing behavior for entities (#7964) (7a30bce)

3.1037.0 (2026-04-24)

Note: Version bump only for package @​aws-sdk/client-s3

3.1036.0 (2026-04-23)

Note: Version bump only for package @​aws-sdk/client-s3

... (truncated)

Commits

• 5df4c01 Publish v3.1041.0
• 7736067 Publish v3.1040.0
• 51c8215 Publish v3.1039.0
• 3dfb72b chore(codegen): sync for adaptive retry fixes (#7970)
• 3fbf6c5 Publish v3.1038.0
• e9f8d8a chore(codegen): sync for typed waiter-result values (#7965)
• 7a30bce fix(xml-builder): use xml 1.1 parsing behavior for entities (#7964)
• 7babd8b Publish v3.1037.0
• 46e4ac5 Publish v3.1036.0
• 107aefc chore(codegen): sync for http2 session closure, retry longpoll backoff, and f...
• Additional commits viewable in compare view

Updates eslint from 10.2.1 to 10.3.0

Release notes

Sourced from eslint's releases.

v10.3.0

Features

• 379571a feat: add suggestions for no-unused-private-class-members (#20773) (sethamus)

Bug Fixes

• b6ae5cf fix: handle unavailable require cache (#20812) (Simon Podlipsky)
• 6fb3685 fix: rule suggestions cause continuation in class body (#20787) (Milos Djermanovic)

Documentation

• 32cc7ab docs: fix typos in docs and comments (#20809) (Tanuj Kanti)
• 7f47937 docs: Update README (GitHub Actions Bot)

Chores

• d32235e ci: use pnpm in eslint-flat-config-utils type integration test (#20826) (Francesco Trotta)
• 3ffb14e chore: clean up typos in comments and JSDoc (#20821) (Pixel998)
• 22eb58a chore: add missing continue-on-error to ecosystem-tests.yml (#20818) (Josh Goldberg ✨)
• 88bf002 ci: bump pnpm/action-setup from 6.0.1 to 6.0.3 (#20815) (dependabot[bot])
• 97c8c33 chore: update ilshidur/action-discord action to v0.4.0 (#20811) (renovate[bot])
• 2f58136 chore: pin peter-evans/create-pull-request action to 5f6978f (#20810) (renovate[bot])
• 77add7f chore: add initial ecosystem plugin tests workflow (#19643) (Josh Goldberg ✨)
• 4023b55 test: Add unit tests for SuppressionsService.prune() (#20797) (kuldeep kumar)
• 54080da test: add unit tests for ForkContext (#20778) (kuldeep kumar)
• f0e2bcc test: add unit tests for SuppressionsService.suppress() method (#20765) (kuldeep kumar)
• a7f0b94 chore: update dependency prettier to v3.8.3 (#20782) (renovate[bot])
• 7bf93d9 chore: update TypeScript to v6 (#20677) (sethamus)
• b42dd72 ci: bump pnpm/action-setup from 6.0.0 to 6.0.1 (#20781) (dependabot[bot])
• 2b252be test: add unit tests for IdGenerator (#20775) (kuldeep kumar)

Commits

• 7889204 10.3.0
• 5b69b4f Build: changelog update for 10.3.0
• d32235e ci: use pnpm in eslint-flat-config-utils type integration test (#20826)
• b6ae5cf fix: handle unavailable require cache (#20812)
• 3ffb14e chore: clean up typos in comments and JSDoc (#20821)
• 6fb3685 fix: rule suggestions cause continuation in class body (#20787)
• 22eb58a chore: add missing continue-on-error to ecosystem-tests.yml (#20818)
• 88bf002 ci: bump pnpm/action-setup from 6.0.1 to 6.0.3 (#20815)
• 379571a feat: add suggestions for no-unused-private-class-members (#20773)
• 97c8c33 chore: update ilshidur/action-discord action to v0.4.0 (#20811)
• Additional commits viewable in compare view

Updates @aws-lambda-powertools/logger from 2.32.0 to 2.33.0

Release notes

Sourced from @​aws-lambda-powertools/logger's releases.

v2.33.0

Summary

In this release, the HTTP event handler gains a new metrics middleware that lets you emit per-request latency, fault, and error metrics with a single line of configuration. The middleware automatically uses the matched route as a dimension and attaches request metadata like HTTP method, path, status code, and API Gateway request IDs.

We've also improved the parser package by exporting InferOutput from the public types entry point, resolving a TypeScript declaration emit error (TS2883) that affected consumers using safeParse mode — particularly those upgrading to TypeScript 6.

⭐ Congratulations to @​yashar-new10 and @​faberchri for their first PR merged in the project 🎉

Metrics Middleware

You can now use the Metrics utility with the HTTP event handler to automatically emit CloudWatch metrics for every request. The middleware:

• Adds the matched route as a metric dimension (e.g., GET /users/:id)
• Emits latency (Milliseconds), fault (Count), and error (Count) metrics
• Attaches request metadata including httpMethod, path, statusCode, userAgent, and ipAddress
• Adds API Gateway-specific metadata (apiGwRequestId, apiGwApiId) when available
• Uses NOT_FOUND as the route dimension when no route matches, preventing dimension explosion

import { Router } from '@aws-lambda-powertools/event-handler/http';
import { metrics as metricsMiddleware } from '@aws-lambda-powertools/event-handler/http/middleware/metrics';
import { Metrics } from '@aws-lambda-powertools/metrics;
import type { Context } from 'aws-lambda';
const metrics = new Metrics({ namespace: 'my-app', serviceName: 'my-service' });
const app = new Router();
app.use(metricsMiddleware(metrics));
app.get('/users/:id', async ({ params }) => {
return { id: params.id, name: 'Jane' };
});
export const handler = async (event: unknown, context: Context) =>
app.resolve(event, context);

Changes

• improv(parser): export InferOutput from public types entry point (#5175) by @​yashar-new10
• chore(deps): add esbuild as explicit devDependency (#5173) by @​sdangol
• chore: temporarily remove Bahrain (me-south-1) region from layer publishing (#5169) by @​svozza
• docs(commons): fix isStrictEqual and areArraysEqual JSDoc array comparison description (#5165) by @​Zelys-DFKH
• docs: fix dependencies & broken references (#5156) by @​dreamorosi
• docs: fix markdown table format (#5153) by @​dothomson
• style: remove useAwait linting rule (#5146) by @​dreamorosi
• docs(event-handler): update custom middleware example to use Store API (#5145) by @​svozza
• fix(commons): don't overwrite existing value with undefined in deepMerge (#5141) by @​faberchri
• fix(event-handler): http response body validation typings (#5125) by @​nateiler
• feat(event-handler): add metrics middleware for HTTP routes (#5086) by @​svozza

... (truncated)

Changelog

Sourced from @​aws-lambda-powertools/logger's changelog.

2.33.0 (2026-04-14)

Bug Fixes

• commons don't overwrite existing value with undefined in deepMerge (#5141) (c7c6c0f)
• commons rename AvailabilityZoneId to AvailabilityZoneID in docs and tests (#5118) (65c054c)
• event-handler http response body validation typings (#5125) (0805db9)

Improvements

• parser export InferOutput from public types entry point (#5175) (16c6de6)

Features

• event-handler add metrics middleware for HTTP routes (#5086) (5af28e8)

Commits

• 5765cc4 chore(ci): bump version to 2.33.0 (#5183)
• ad92246 chore(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 (#5181)
• ec7dc7e chore(deps-dev): bump typedoc from 0.28.18 to 0.28.19 in the typescript group...
• b6ae31b chore(deps): bump actions/github-script from 8.0.0 to 9.0.0 (#5177)
• a6368ad chore(deps): bump release-drafter/release-drafter from 7.1.1 to 7.2.0 (#5178)
• 0777d90 chore(deps-dev): bump @​biomejs/biome from 2.4.10 to 2.4.11 (#5179)
• fe45b4e chore(deps): bump @​types/node from 25.5.2 to 25.6.0 (#5180)
• 16c6de6 improv(parser): export InferOutput from public types entry point (#5175)
• 1e2f39f chore(deps): bump aws-actions/configure-aws-credentials from 6.0.0 to 6.1.0 (...
• e279e1b chore(deps-dev): bump the vitest group across 1 directory with 2 updates (#5176)
• Additional commits viewable in compare view

Updates @aws-sdk/client-dynamodb from 3.1029.0 to 3.1041.0

Release notes

Sourced from @​aws-sdk/client-dynamodb's releases.

v3.1041.0

3.1041.0(2026-05-01)

Chores

• core/client: emit warning for Node.js 20.x end-of-support (#7973) (00383767)
• workflows: migrate git-sync SSH key from GitHub secret to Secrets Manager via OIDC (#7978) (c056a2e3)
• codegen: smithy-aws-typescript-codegen 0.49.1 (#7980) (7bb42b39)

Documentation Changes

• client-iam: Added guidance for CreateOpenIDConnectProvider to include multiple thumbprints when OIDC discovery and JWKS endpoints use different hosts or certificates (b4bb6928)

New Features

• clients: update client endpoints as of 2026-05-01 (d48b40d5)
• client-iot: AWS IoT HTTP rule actions now support cross-topic batching, combining messages from different MQTT topics into single HTTP requests. (82edd29f)
• client-appstream: Amazon WorkSpaces Applications now enables AI agents to securely operate desktop applications. Administrators configure stacks to provide agents access to WorkSpaces. Agents can click, type, and take screenshots. Agents authenticate with AWS IAM credentials with activity logged in AWS CloudTrail. (5ca40b43)
• client-quicksight: Add IdentityProviderCACertificatesBundleS3Uri for private CA certs with OAuth datasources. 256-char limit for FontFamily in themes. ControlTitleFormatText on all 13 filters. ControlTitleFontConfiguration. ContextRegion for cross-region identity context. Story,scenario in CreateCustomCapability API. (a625879c)
• client-cloudwatch: This release adds tag support for CloudWatch Dashboards. The PutDashboard API now accepts a Tags parameter, allowing you to tag dashboards at creation time. Additionally, the TagResource, UntagResource, and ListTagsForResource APIs now support dashboard ARNs as resources. (e87c1479)
• client-entityresolution: Add support for transitive matching in AWS Entity Resolution rule-based matching workflows. When enabled, records that match through different rules are grouped together into the same match group, allowing related records to be connected across rule levels. (20487961)
• client-cloudwatch-logs: Adds support for filtering log groups by tags in the ListLogGroups API via the new logGroupTags parameter. (25dc6d23)
• client-qconnect: Added reasoning details, statusDescription, and timeToFirstTokenMs fields to the ListSpans response in Amazon Q in Connect to provide visibility into model thinking, error diagnostics, and inference latency metrics. (2c668c9d)

Bug Fixes

• lib-storage: use Math.ceil in default partSize calculation to prevent exceeding 10,000 parts (#7982) (8a58046b)

---

For list of updated packages, view updated-packages.md in assets-3.1041.0.zip

v3.1040.0

3.1040.0(2026-04-30)

New Features

• clients: update client endpoints as of 2026-04-30 (2620ccbd)
• client-bedrock-agentcore-control: AgentCore Identity now supports on-behalf-of token exchange OAuth2. AgentCore Memory now supports metadata for LongTerm Memory Records. (6b9d13e3)
• client-route53globalresolver: Adds support for regions in the UpdateGlobalResolver input. (84b15b2e)
• client-sagemaker: Add InstancePools support to Endpoint for flexible provisioning across a prioritized list of instance types. Add Specifications support to InferenceComponent for per-instance-type model configurations. (05c49aa9)
• client-sso-admin: Add InstanceArn and IdentityStoreArn in the response of CreateApplication API and IdentityStoreArn in the response of DescribeApplication API (d46aaf53)
• client-payment-cryptography: Adds support for resource-based policies on AWS Payment Cryptography keys, enabling cross-account key sharing. Also adds Multi-Party Approval (MPA) team association APIs for protecting sensitive import root public key operations. (4d7fdfa8)
• client-datazone: Adds support for asynchronous notebook runs (e562cc0f)
• client-kafka: Adds support for ZookeeperAccess field to control the Client-Zookeeper connectivity. (34de26bd)
• client-observabilityadmin: Observability Admin enablement launch for AWS Kafka, Bedrock Agent Core Workload Identity and OTel metric enablement. (8cea5eb6)
• client-eks: Vended logs update param for capability vended logs feature (7741c8f5)
• client-bedrock-agentcore: AgentCore Identity now supports on-behalf-of token exchange OAuth2. AgentCore Memory now supports metadata for LongTerm Memory Records. (948fd098)

... (truncated)

Changelog

Sourced from @​aws-sdk/client-dynamodb's changelog.

3.1041.0 (2026-05-01)

Note: Version bump only for package @​aws-sdk/client-dynamodb

3.1040.0 (2026-04-30)

Note: Version bump only for package @​aws-sdk/client-dynamodb

3.1039.0 (2026-04-29)

Note: Version bump only for package @​aws-sdk/client-dynamodb

3.1038.0 (2026-04-27)

Note: Version bump only for package @​aws-sdk/client-dynamodb

3.1037.0 (2026-04-24)

Note: Version bump only for package @​aws-sdk/client-dynamodb

Description has been truncated