chore(deps-dev): bump the aws-sdk-js group in /infra-gen2 with 2 updates

[dependabot]

Bumps the aws-sdk-js group in /infra-gen2 with 2 updates: @aws-crypto/client-node and @aws-sdk/client-cognito-identity-provider.

Updates @aws-crypto/client-node from 4.2.1 to 5.0.2

Changelog

Sourced from @​aws-crypto/client-node's changelog.

5.0.2 (2026-07-23)

Note: Version bump only for package @​aws-crypto/client-node

5.0.1 (2026-07-23)

Note: Version bump only for package @​aws-crypto/client-node

5.0.0 (2026-04-23)

Bug Fixes

• add repository fields and enable npm provenance for Sigstore OIDC publishing (0105088)
• correct repository URLs from awslabs to aws org for npm provenance (f5699bc)

Reverts

• Revert "v5.0.0" (4c6f731)
• Revert "v5.0.0" (e3d58fb)
• Revert "v5.0.0" (0ee917e)

4.2.2 (2026-03-05)

Note: Version bump only for package @​aws-crypto/client-node

Commits

• a050295 v5.0.2
• 85636e1 v5.0.1
• 7074e37 v5.0.0
• f5699bc fix: correct repository URLs from awslabs to aws org for npm provenance
• 4c6f731 Revert "v5.0.0"
• 8292ddb v5.0.0
• 0105088 fix: add repository fields and enable npm provenance for Sigstore OIDC publis...
• e3d58fb Revert "v5.0.0"
• ea1a944 v5.0.0
• 0ee917e Revert "v5.0.0"
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​aws-crypto/client-node since your current version.

Updates @aws-sdk/client-cognito-identity-provider from 3.1035.0 to 3.1106.0

Release notes

Sourced from @​aws-sdk/client-cognito-identity-provider's releases.

v3.1106.0

3.1106.0(2026-08-07)

New Features

• clients: update client endpoints as of 2026-08-07 (c5d05426)
• client-amplify: Increased the maximum allowed length of the oauthToken parameter in the CreateApp and UpdateApp APIs to support longer OAuth tokens issued by third-party Git providers. (b239e292)
• client-healthlake: Adds provenanceEnabled to StartFHIRImportJob (18ac6efe)
• client-securityagent: Added enableEmailMfa input field on Actor to enable email-based MFA during penetration tests. When enabled, a server-generated mfaForwardingAddress is returned. Set up a forwarding rule in your email provider to forward MFA emails to this address so the agent can complete email-based MFA login flows (e21d3919)
• client-mediapackagev2: StreamNameOutputMode - a new optional field on MediaPackageV2 OriginEndpoints that lets customers choose whether egress manifests use numeric stream indices (default) or encoder-assigned stream names from the input (7f49cb06)
• client-sagemaker: Amazon SageMaker adds maintenance lifecycle statuses for Notebook Instances (6ce0f884)
• client-ec2: This release adds support for BGP route protection in Amazon VPC IP Address Manager (IPAM), including route discovery, RPKI route protection findings, and delegated RPKI (Internet Registry Associations, routing policy registrations, and ROA management) for BYOIP prefixes. (62f281df)
• client-mediatailor: Added support for inserting ads via the VAST Ad Buffet standard. You can now configure MediaTailor to insert ads in sequence order using the AdSequencingMode setting in your playback configuration. Standalone ads are used as fallbacks when a sequenced ad is unavailable. (7bebb1e5)
• client-connect: Supports updating the task template associated with in-progress task contacts using the new UpdateContactTaskTemplate API. This enables supervisors and developers to dynamically reassign task templates without creating a new task. (24f40416)

---

For list of updated packages, view updated-packages.md in assets-3.1106.0.zip

v3.1105.0

3.1105.0(2026-08-06)

Chores

• lib-dynamodb: add error msg and fallback when incompatible client is supplied (#8231) (e663d41f)

New Features

• clients: update client endpoints as of 2026-08-06 (e4f7b32f)
• client-cloudwatch-logs: This release adds index category support to the CloudWatch Logs DescribeFieldIndexes API. Customers can filter and identify DEFAULT, CUSTOM, AUTO, and INACTIVE field indexes. (e17fff6f)
• client-socialmessaging: Add support for WhatsApp Conversions APIs. (5c29a869)
• client-gamelift: Adds support for C8a, C8i, C9g, M8a, M8i, and M9g EC2 instance type families for managed EC2 and container fleets. Also adds explicit anchors on most string regexes. (30dfd63a)
• client-securityhub: Security Hub is adding a new public API, ListFreeTrialStatusesV2 to describe the free trial statuses of the Security Hub service and its opt-in features. (e44b3582)
• client-bedrock-agentcore-control: Add support for Gateway rate limits and Runtime instances in Amazon Bedrock AgentCore. Customers can now configure rate limits scoped to control request rates, token consumption rates, and active connection rates. Customers can now create capacity providers to launch runtimes on their EC2 instances. (865d21ef)
• client-device-farm: Adds support for service generated insights across runs, jobs, and tests. (6c601b71)
• client-sagemaker: Releases new Model Customization SequenceLength parameter for Training and g7 instance types for Training and Processing. (14bd2ac7)
• client-agent-registry-control: Agent Registry's Public Preview release (a137863d)
• client-backup: AWS Backup now lets you create read-only access points for Amazon S3 recovery points, enabling you to access backup data using S3 APIs without initiating a restore. (636228a9)
• client-mediatailor: AWS Elemental MediaTailor now supports concurrent function execution. The new Concurrent Executor function type runs multiple independent child functions in parallel within a single lifecycle hook, reducing pipeline latency to the duration of the slowest call instead of the sum of all calls. (1cf61475)
• client-marketplace-agreement: GetAgreementTerms now returns a new term variant in AcceptedTerm, netPaymentTerm, with a paymentDuePeriod field (example "P30D"). (50b0d6d5)
• client-agent-registry: Agent Registry's Public Preview release (632ae479)
• client-kafka: MSK Clusters can now deliver authorizer logs alongside broker logs to the destinations defined by you (b7e31937)
• client-bedrock-agentcore: Add support for capacity provider sessions in Amazon Bedrock AgentCore. Customers can now delete an active session running on a runtime instance launched through their capacity provider. (bd301533)
• client-auto-scaling: EC2 Auto Scaling now supports being managed by other AWS services via the operator field. (f5d54fce)
• client-ec2: Adds a new optional IncludeLocalZones parameter to the Spot Placement Score API that defaults to false. When set to true, the Spot Placement Score API will consider the relevant Local Zones with Spot capacity when computing the Spot Placement Score. (43673842)
• client-marketplace-discovery: GetOfferTerms now returns netPaymentTerm in offerTerms, specifying payment due period after invoice date. The paymentDuePeriod field uses ISO 8601 duration format (e.g., "P30D" for net 30 days). This is a backward-compatible addition. See API documentation for full structure and examples. (f4fd7ae7)
• client-s3: AWS Backup now lets you create read-only access points for Amazon S3 recovery points, enabling you to access backup data using S3 APIs without initiating a restore. (faf65602)

... (truncated)

Changelog

Sourced from @​aws-sdk/client-cognito-identity-provider's changelog.

3.1106.0 (2026-08-07)

Note: Version bump only for package @​aws-sdk/client-cognito-identity-provider

3.1105.0 (2026-08-06)

Note: Version bump only for package @​aws-sdk/client-cognito-identity-provider

3.1104.0 (2026-08-05)

Note: Version bump only for package @​aws-sdk/client-cognito-identity-provider

3.1103.0 (2026-08-04)

Note: Version bump only for package @​aws-sdk/client-cognito-identity-provider

3.1102.0 (2026-08-03)

Note: Version bump only for package @​aws-sdk/client-cognito-identity-provider

3.1101.0 (2026-07-31)

Note: Version bump only for package @​aws-sdk/client-cognito-identity-provider

3.1100.0 (2026-07-31)

... (truncated)

Commits

• 655d311 Publish v3.1106.0
• d6c0ea3 Publish v3.1105.0
• b3929bd Publish v3.1104.0
• 672c90d Publish v3.1103.0
• c528531 Publish v3.1102.0
• 272a6eb Publish v3.1101.0
• 6969cf9 Publish v3.1100.0
• 5b15ca7 Publish v3.1099.0
• ee76673 Publish v3.1098.0
• e40ebac chore(codegen): sync for CBOR v2 codec (#8233)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions