BAU: Bump the production-dependencies group with 4 updates

[dependabot]

Bumps the production-dependencies group with 4 updates: @aws-sdk/client-dynamodb, @aws-sdk/client-sqs, @aws-sdk/lib-dynamodb and valibot.

Updates @aws-sdk/client-dynamodb from 3.936.0 to 3.939.0

Release notes

Sourced from @​aws-sdk/client-dynamodb's releases.

v3.939.0

3.939.0(2025-11-24)

Chores

• scripts: reduce api validation to packages/lib only (#7519) (eb74d6a0)

New Features

• client-cloudwatch-logs: New CloudWatch Logs feature - LogGroup Deletion Protection, a capability that allows customers to safeguard their critical CloudWatch log groups from accidental or unintended deletion. (02360329)
• client-cloudfront: Add TrustStore, ConnectionFunction APIs to CloudFront SDK (168505ee)

Bug Fixes

• clients: export enum objects for string shapes (#7521) (62f648df)
• cloudfront-signer: skip extended encoding for query parameters in the base url (#7515) (954d411e)

Tests

• increase beforeAll hook timeouts (#7518) (720ba4cd)

---

For list of updated packages, view updated-packages.md in assets-3.939.0.zip

v3.938.0

3.938.0(2025-11-21)

Chores

• codegen: smithy-aws-typescript-codegen 0.38.0 (#7513) (cdb4d374)

Documentation Changes

• client-elastic-load-balancing-v2: This release adds the health check log feature in ALB, allowing customers to send detailed target health check log data directly to their designated Amazon S3 bucket. (d5c668b7)

New Features

• clients: update client endpoints as of 2025-11-21 (770cf0d9)
• client-redshift: Added support for Amazon Redshift Federated Permissions and AWS IAM Identity Center trusted identity propagation. (b030ee0c)
• client-invoicing: Added the CreateProcurementPortalPreference, GetProcurementPortalPreference, PutProcurementPortalPreference, UpdateProcurementPortalPreferenceStatus, ListProcurementPortalPreferences and DeleteProcurementPortalPreference APIs for procurement portal preference management. (612d1d7c)
• client-transfer: Adds support for creating Webapps accessible from a VPC. (b863762b)
• client-marketplace-entitlement-service: Endpoint update for new region (764e4bf5)
• client-sagemaker: Enhanced SageMaker HyperPod instance groups with support for MinInstanceCount, CapacityRequirements (Spot/On-Demand), and KubernetesConfig (labels and taints). Also Added speculative decoding and MaxInstanceCount for model optimization jobs. (86804322)
• client-quicksight: Amazon Quick Suite now supports QuickChat as an embedding type when calling the GenerateEmbedUrlForRegisteredUser API, enabling developers to embed conversational AI agents directly into their applications. (1fb46165)
• client-sagemaker-runtime-http2: Add support for bidirectional streaming invocations on SageMaker AI real-time endpoints (32887fca)
• client-lex-models-v2: Adds support for Intent Disambiguation, allowing resolution of ambiguous user inputs when multiple intents match by presenting clarifying questions to users. Also adds Speech Detection Sensitivity configuration for optimizing voice activity detection sensitivity levels in various noise environments. (7338fd92)
• client-redshift-serverless: Added UpdateLakehouseConfiguration API to manage Amazon Redshift Federated Permissions and AWS IAM Identity Center trusted identity propagation for namespaces. (e45c0a74)
• client-lambda: Launching Enhanced Error Handling and ESM Grouping capabilities for Kafka ESMs (adfe1d80)

... (truncated)

Changelog

Sourced from @​aws-sdk/client-dynamodb's changelog.

3.939.0 (2025-11-24)

Note: Version bump only for package @​aws-sdk/client-dynamodb

Commits

• 1592379 Publish v3.939.0
• See full diff in compare view

Updates @aws-sdk/client-sqs from 3.936.0 to 3.939.0

Release notes

Sourced from @​aws-sdk/client-sqs's releases.

v3.939.0

3.939.0(2025-11-24)

Chores

• scripts: reduce api validation to packages/lib only (#7519) (eb74d6a0)

New Features

• client-cloudwatch-logs: New CloudWatch Logs feature - LogGroup Deletion Protection, a capability that allows customers to safeguard their critical CloudWatch log groups from accidental or unintended deletion. (02360329)
• client-cloudfront: Add TrustStore, ConnectionFunction APIs to CloudFront SDK (168505ee)

Bug Fixes

• clients: export enum objects for string shapes (#7521) (62f648df)
• cloudfront-signer: skip extended encoding for query parameters in the base url (#7515) (954d411e)

Tests

• increase beforeAll hook timeouts (#7518) (720ba4cd)

---

For list of updated packages, view updated-packages.md in assets-3.939.0.zip

v3.938.0

3.938.0(2025-11-21)

Chores

• codegen: smithy-aws-typescript-codegen 0.38.0 (#7513) (cdb4d374)

Documentation Changes

• client-elastic-load-balancing-v2: This release adds the health check log feature in ALB, allowing customers to send detailed target health check log data directly to their designated Amazon S3 bucket. (d5c668b7)

New Features

• clients: update client endpoints as of 2025-11-21 (770cf0d9)
• client-redshift: Added support for Amazon Redshift Federated Permissions and AWS IAM Identity Center trusted identity propagation. (b030ee0c)
• client-invoicing: Added the CreateProcurementPortalPreference, GetProcurementPortalPreference, PutProcurementPortalPreference, UpdateProcurementPortalPreferenceStatus, ListProcurementPortalPreferences and DeleteProcurementPortalPreference APIs for procurement portal preference management. (612d1d7c)
• client-transfer: Adds support for creating Webapps accessible from a VPC. (b863762b)
• client-marketplace-entitlement-service: Endpoint update for new region (764e4bf5)
• client-sagemaker: Enhanced SageMaker HyperPod instance groups with support for MinInstanceCount, CapacityRequirements (Spot/On-Demand), and KubernetesConfig (labels and taints). Also Added speculative decoding and MaxInstanceCount for model optimization jobs. (86804322)
• client-quicksight: Amazon Quick Suite now supports QuickChat as an embedding type when calling the GenerateEmbedUrlForRegisteredUser API, enabling developers to embed conversational AI agents directly into their applications. (1fb46165)
• client-sagemaker-runtime-http2: Add support for bidirectional streaming invocations on SageMaker AI real-time endpoints (32887fca)
• client-lex-models-v2: Adds support for Intent Disambiguation, allowing resolution of ambiguous user inputs when multiple intents match by presenting clarifying questions to users. Also adds Speech Detection Sensitivity configuration for optimizing voice activity detection sensitivity levels in various noise environments. (7338fd92)
• client-redshift-serverless: Added UpdateLakehouseConfiguration API to manage Amazon Redshift Federated Permissions and AWS IAM Identity Center trusted identity propagation for namespaces. (e45c0a74)
• client-lambda: Launching Enhanced Error Handling and ESM Grouping capabilities for Kafka ESMs (adfe1d80)

... (truncated)

Changelog

Sourced from @​aws-sdk/client-sqs's changelog.

3.939.0 (2025-11-24)

Note: Version bump only for package @​aws-sdk/client-sqs

Commits

• 1592379 Publish v3.939.0
• See full diff in compare view

Updates @aws-sdk/lib-dynamodb from 3.936.0 to 3.939.0

Release notes

Sourced from @​aws-sdk/lib-dynamodb's releases.

v3.939.0

3.939.0(2025-11-24)

Chores

• scripts: reduce api validation to packages/lib only (#7519) (eb74d6a0)

New Features

• client-cloudwatch-logs: New CloudWatch Logs feature - LogGroup Deletion Protection, a capability that allows customers to safeguard their critical CloudWatch log groups from accidental or unintended deletion. (02360329)
• client-cloudfront: Add TrustStore, ConnectionFunction APIs to CloudFront SDK (168505ee)

Bug Fixes

• clients: export enum objects for string shapes (#7521) (62f648df)
• cloudfront-signer: skip extended encoding for query parameters in the base url (#7515) (954d411e)

Tests

• increase beforeAll hook timeouts (#7518) (720ba4cd)

---

For list of updated packages, view updated-packages.md in assets-3.939.0.zip

v3.938.0

3.938.0(2025-11-21)

Chores

• codegen: smithy-aws-typescript-codegen 0.38.0 (#7513) (cdb4d374)

Documentation Changes

• client-elastic-load-balancing-v2: This release adds the health check log feature in ALB, allowing customers to send detailed target health check log data directly to their designated Amazon S3 bucket. (d5c668b7)

New Features

• clients: update client endpoints as of 2025-11-21 (770cf0d9)
• client-redshift: Added support for Amazon Redshift Federated Permissions and AWS IAM Identity Center trusted identity propagation. (b030ee0c)
• client-invoicing: Added the CreateProcurementPortalPreference, GetProcurementPortalPreference, PutProcurementPortalPreference, UpdateProcurementPortalPreferenceStatus, ListProcurementPortalPreferences and DeleteProcurementPortalPreference APIs for procurement portal preference management. (612d1d7c)
• client-transfer: Adds support for creating Webapps accessible from a VPC. (b863762b)
• client-marketplace-entitlement-service: Endpoint update for new region (764e4bf5)
• client-sagemaker: Enhanced SageMaker HyperPod instance groups with support for MinInstanceCount, CapacityRequirements (Spot/On-Demand), and KubernetesConfig (labels and taints). Also Added speculative decoding and MaxInstanceCount for model optimization jobs. (86804322)
• client-quicksight: Amazon Quick Suite now supports QuickChat as an embedding type when calling the GenerateEmbedUrlForRegisteredUser API, enabling developers to embed conversational AI agents directly into their applications. (1fb46165)
• client-sagemaker-runtime-http2: Add support for bidirectional streaming invocations on SageMaker AI real-time endpoints (32887fca)
• client-lex-models-v2: Adds support for Intent Disambiguation, allowing resolution of ambiguous user inputs when multiple intents match by presenting clarifying questions to users. Also adds Speech Detection Sensitivity configuration for optimizing voice activity detection sensitivity levels in various noise environments. (7338fd92)
• client-redshift-serverless: Added UpdateLakehouseConfiguration API to manage Amazon Redshift Federated Permissions and AWS IAM Identity Center trusted identity propagation for namespaces. (e45c0a74)
• client-lambda: Launching Enhanced Error Handling and ESM Grouping capabilities for Kafka ESMs (adfe1d80)

... (truncated)

Changelog

Sourced from @​aws-sdk/lib-dynamodb's changelog.

3.939.0 (2025-11-24)

Note: Version bump only for package @​aws-sdk/lib-dynamodb

Commits

• 1592379 Publish v3.939.0
• See full diff in compare view

Updates valibot from 1.1.0 to 1.2.0

Release notes

Sourced from valibot's releases.

v1.2.0

Many thanks to @​EskiMojo14, @​makenowjust, @​ysknsid25 and @​jacekwilczynski for contributing to this release.

Read the release notes on our website for a quick overview of the most exciting new features in this release.

• Add toBigint, toBoolean, toDate, toNumber and toString transformation actions (pull request #1212)
• Add examples action to add example values to a schema (pull request #1199)
• Add getExamples method to extract example values from a schema (pull request #1199)
• Add isbn validation action to validate ISBN-10 and ISBN-13 strings (pull request #1097)
• Add exports for RawCheckAddIssue, RawCheckContext, RawCheckIssueInfo, RawTransformAddIssue, RawTransformContext and RawTransformIssueInfo types for better developer experience with rawCheck and rawTransform actions (pull request #1359)
• Change build step to tsdown
• Fix ReDoS vulnerability in EMOJI_REGEX used by emoji action

v1.2.0 (to-json-schema)

Many thanks to @​cruzdanilo and @​Xiot for contributing to this release.

• Add support for title, description and examples in metadata action (pull request #1189)
• Add new override configurations to override default behaviour of JSON Schema conversion (pull request #1197)
• Add storage for global definitions with addGlobalDefs and getGlobalDefs (pull request #1197)
• Add new toJsonSchemaDefs function to convert Valibot schema definitions to JSON Schema definitions (pull request #1197)

Commits

• 053ae97 Bump version to 1.2.0 and update changelog
• de76d7c Merge pull request #1361 from open-circle/v1.2-blog-post
• c14f092 Add security fix for ReDoS vulnerability in emoji action and update release n...
• cfb799d Merge commit from fork
• 36fafd0 Add release notes blog post for Valibot v1.2 to website
• 83c07ca Merge pull request #1097 from ysknsid25/feat/add-isbn-validation
• 6957e0d Add beta annotation to JSDoc comment of isbn action
• 6c7f9c0 Add docs for new isbn action to website
• ca902e6 Refactor ISBN regex constants and update validation logic
• e7a4f17 Refactor and improve new isbn action and update changelog
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.