build: bump the npm group across 1 directory with 109 updates

[dependabot]

Bumps the npm group with 45 updates in the / directory:

Package	From	To
@salesforce/core	9.1.2	9.1.4
@salesforce/sf-plugins-core	13.0.0	13.0.3
@biomejs/biome	2.5.8	2.5.9
@vitest/coverage-v8	4.1.10	4.1.11
jscpd	5.0.15	5.0.16
vitest	4.1.10	4.1.11
@aws-sdk/checksums	3.1000.23	3.1000.29
@aws-sdk/client-cloudfront	3.1098.0	3.1116.0
@aws-sdk/client-s3	3.1098.0	3.1116.0
@conventional-changelog/git-client	3.1.0	3.1.2
@conventional-changelog/template	1.3.0	1.4.0
@napi-rs/wasm-runtime	1.2.1	1.2.3
@oclif/core	4.13.2	4.14.0
@oclif/plugin-not-found	3.2.90	3.2.93
@oclif/plugin-warn-if-update-available	3.1.70	3.1.73
@smithy/fetch-http-handler	5.6.13	5.7.2
@smithy/node-http-handler	4.9.13	4.11.3
@smithy/signature-v4	5.6.12	5.7.3
@types/estree	1.0.8	1.0.9
ast-v8-to-istanbul	1.0.0	1.0.5
baseline-browser-mapping	2.11.14	2.11.19
chardet	2.1.1	2.2.0
conventional-changelog-angular	9.3.0	9.4.0
conventional-changelog-conventionalcommits	10.3.0	10.4.0
electron-to-chromium	1.5.408	1.5.413
es-module-lexer	2.1.0	2.3.2
expect-type	1.3.0	1.4.0
fast-wrap-ansi	0.2.0	0.2.2
iconv-lite	0.7.2	0.7.3
ip-address	10.3.1	10.5.0
is-core-module	2.16.1	2.16.2
magicast	0.5.2	0.5.4
negotiator	1.0.0	1.1.0
obug	2.1.1	2.1.4
postcss-selector-parser	7.1.4	7.1.5
process-warning	5.0.0	5.1.0
smol-toml	1.7.1	1.8.0
std-env	4.1.0	4.2.0
thingies	2.6.0	2.6.1
thread-stream	3.1.0	3.2.0
tinyexec	1.1.2	1.3.0
tinyrainbow	3.1.0	3.1.1
ws	8.21.1	8.21.3
yargs	18.0.0	18.1.0
yoctocolors	2.1.2	2.2.0

Updates @salesforce/core from 9.1.2 to 9.1.4

Release notes

Sourced from @​salesforce/core's releases.

9.1.4

Bug Fixes

• update to jsforce-node 3.10.22 to pick up bug fix (c2f31a5)

9.1.3

Bug Fixes

• testing the script for res (bcfbf98)
• update clear error (89a374b)
• update features (ddad141)
• update the fetchJson (43ccfb5)

Changelog

Sourced from @​salesforce/core's changelog.

9.1.4 (2026-08-18)

Bug Fixes

• update to jsforce-node 3.10.22 to pick up bug fix (c2f31a5)

9.1.3 (2026-08-18)

Bug Fixes

• testing the script for res (bcfbf98)
• update clear error (89a374b)
• update features (ddad141)
• update the fetchJson (43ccfb5)

Commits

• b13d584 chore(release): 9.1.4 [skip ci]
• c6487e9 Merge pull request #1328 from forcedotcom/k80/url-normalization
• c779434 Revert "fix: additional hardening for frontdoor_uri"
• b56ef8d chore(release): 9.1.3 [skip ci]
• 056767d Merge pull request #1327 from forcedotcom/sl/fix-ci
• 24c1e4b fix: additional hardening for frontdoor_uri
• c2f31a5 fix: update to jsforce-node 3.10.22 to pick up bug fix
• 89a374b fix: update clear error
• ddad141 fix: update features
• 99aa366 chore: update features and settings from docs [no ci]
• Additional commits viewable in compare view

Updates @salesforce/sf-plugins-core from 13.0.0 to 13.0.3

Release notes

Sourced from @​salesforce/sf-plugins-core's releases.

13.0.3

Bug Fixes

• bump @​salesforce/core to v9.1.4 (f3d918f)

13.0.2

Bug Fixes

• bump core lib:latest (4492a1a)

13.0.1

No release notes provided.

Changelog

Sourced from @​salesforce/sf-plugins-core's changelog.

13.0.3 (2026-08-18)

Bug Fixes

• bump @​salesforce/core to v9.1.4 (f3d918f)

13.0.2 (2026-08-18)

Bug Fixes

• bump core lib:latest (4492a1a)

13.0.1 (2026-08-18)

Commits

• b572790 chore(release): 13.0.3 [skip ci]
• b6cd8d6 Merge pull request #734 from salesforcecli/k80/bump-sfdx-core
• f3d918f fix: bump @​salesforce/core to v9.1.4
• fa06130 chore(release): 13.0.2 [skip ci]
• a082771 Merge pull request #733 from salesforcecli/sl/bump-core
• 4492a1a fix: bump core lib:latest
• 7d93166 chore(release): 13.0.1 [skip ci]
• b955165 Merge pull request #732 from salesforcecli/devScripts2026-08-16
• 6a3bb03 chore: updates from devScripts
• dead4bf Merge pull request #731 from salesforcecli/devScripts2026-08-10
• Additional commits viewable in compare view

Updates @biomejs/biome from 2.5.8 to 2.5.9

Release notes

Sourced from @​biomejs/biome's releases.

Biome CLI v2.5.9

2.5.9

Patch Changes

• #11321 41386f3 Thanks @​dyc3! - Fixed #11315: The CSS parser now recovers at declaration boundaries after bogus declarations, allowing subsequent valid declarations to be parsed.

• #11248 57b197e Thanks @​yanthomasdev! - Expanded the environment variable metadata used by biome rage to include BIOME_BINARY, BIOME_LOG_FILE, and RUST_BACKTRACE as well as reworded explanations for better readability.

• #11377 a8798ea Thanks @​Netail! - Added a new nursery rule useNamedLayer which disallows anonymous cascade layers.

  @layer {
    a {
      color: red;
    }
  }

• #11327 6771cf5 Thanks @​dyc3! - The HTML formatter now preserves meaningful blank lines in HTML, including spacing after elements with trailing spaces and blank lines between comment groups.

   <div>
     <!-- first group -->
  +
     <!-- second group -->
   </div>

• #10312 ba8aa18 Thanks @​dyc3! - Added the nursery rule useTailwindShorthandClasses, which suggests shorter Tailwind utility classes. For example, the rule suggests replacing w-4 h-4 with size-4.

• #11333 715e0cd Thanks @​kkkhs! - Fixed #11328: lint/nursery/useExpect now recognizes Vitest Browser Mode expect.element() calls as assertions.

• #11343 9b98211 Thanks @​johncarmack1984! - Fixed #11311: the CSS parser now accepts Tailwind container-query variant names in @variant, such as @xl and @max-xl. These previously produced a parse error and a noUnknownAtRules diagnostic.

  @variant @xl {
    div {
      background: red;
    }
  }

• #11220 3e8c488 Thanks @​santichausis! - Fixed #9541: noUndeclaredVariables, noUnusedImports, and noUnusedVariables now correctly recognise exported variables and functions declared in one embedded <script> block as usable from a sibling <script> block, in Svelte's <script module>/<script> pair and Vue's non-setup <script> blocks.

  For example, Biome no longer reports greet as undeclared in the following Svelte component:

  <script module>

... (truncated)

Changelog

Sourced from @​biomejs/biome's changelog.

2.5.9

Patch Changes

• #11321 41386f3 Thanks @​dyc3! - Fixed #11315: The CSS parser now recovers at declaration boundaries after bogus declarations, allowing subsequent valid declarations to be parsed.

• #11248 57b197e Thanks @​yanthomasdev! - Expanded the environment variable metadata used by biome rage to include BIOME_BINARY, BIOME_LOG_FILE, and RUST_BACKTRACE as well as reworded explanations for better readability.

• #11377 a8798ea Thanks @​Netail! - Added a new nursery rule useNamedLayer which disallows anonymous cascade layers.

  @layer {
    a {
      color: red;
    }
  }

• #11327 6771cf5 Thanks @​dyc3! - The HTML formatter now preserves meaningful blank lines in HTML, including spacing after elements with trailing spaces and blank lines between comment groups.

   <div>
     <!-- first group -->
  +
     <!-- second group -->
   </div>

• #10312 ba8aa18 Thanks @​dyc3! - Added the nursery rule useTailwindShorthandClasses, which suggests shorter Tailwind utility classes. For example, the rule suggests replacing w-4 h-4 with size-4.

• #11333 715e0cd Thanks @​kkkhs! - Fixed #11328: lint/nursery/useExpect now recognizes Vitest Browser Mode expect.element() calls as assertions.

• #11343 9b98211 Thanks @​johncarmack1984! - Fixed #11311: the CSS parser now accepts Tailwind container-query variant names in @variant, such as @xl and @max-xl. These previously produced a parse error and a noUnknownAtRules diagnostic.

  @variant @xl {
    div {
      background: red;
    }
  }

• #11220 3e8c488 Thanks @​santichausis! - Fixed #9541: noUndeclaredVariables, noUnusedImports, and noUnusedVariables now correctly recognise exported variables and functions declared in one embedded <script> block as usable from a sibling <script> block, in Svelte's <script module>/<script> pair and Vue's non-setup <script> blocks.

  For example, Biome no longer reports greet as undeclared in the following Svelte component:

  <script module>
    export function greet() {
      console.log("Hello!");

... (truncated)

Commits

• 2081460 ci: release (#11309)
• 6559e6c feat: adds the useAstroClientOnlyDirectiveValue rule for .astro files (#11299)
• a8798ea feat: useNamedLayer (#11377)
• 85aac73 feat(lint): add noUnsafeTypeAssertion rule (#11221)
• e65f07e feat(lint): nursery useControlLabel (#11312)
• ba8aa18 feat(lint): add useTailwindShorthandClasses (#10312)
• See full diff in compare view

Updates @vitest/coverage-v8 from 4.1.10 to 4.1.11

Release notes

Sourced from @​vitest/coverage-v8's releases.

v4.1.11

   🐞 Bug Fixes

• Revive global concurrency limit for test lifecycle [backport to v4]  -  by @​sheremet-va and @​hi-ogawa in vitest-dev/vitest#10992 (5146d)
• browser:
  • Encode iframeId in tester iframe URL [backport to v4]  -  by @​sheremet-va, Pduhard and Claude Opus 4.8 in vitest-dev/vitest#10955 (10b2c)
  • Trigger playwright/chromium gc on lower disk availability [backport to v4]  -  by @​hi-ogawa, Hiroshi Ogawa and OpenCode in vitest-dev/vitest#10951 (9851d)
• mocker:
  • Restrict redirect mocks to the fs allowlist [backport to v4]  -  by @​sheremet-va in vitest-dev/vitest#10974 (fe5a1)

    View changes on GitHub

Commits

• 9bd8d46 chore: release v4.1.11 (#10995)
• See full diff in compare view

Updates jscpd from 5.0.15 to 5.0.16

Release notes

Sourced from jscpd's releases.

Release v5.0.16

New Features

• MCP server over stdio (--mcp) — cpd --mcp /path/to/project serves the Model Context Protocol on stdin/stdout, the transport MCP clients spawn and manage themselves (no port, no network policy). The project is scanned once at startup and kept in memory as detection-ready token hashes, so check_duplication snippet checks answer in milliseconds. Tools: check_duplication (accepts format names or file extensions), get_file_clones (clones involving one file — new over the HTTP server), get_statistics, and check_current_directory (returns the clone list). All clone/match lists are sorted biggest-first and capped by an optional limit argument (default 100) with the untruncated total always reported. Implements protocol revision 2025-06-18 (accepting 2025-03-26 / 2024-11-05 clients); all standard detection options (--min-tokens, --format, --cross-formats, ...) apply to the scan and to snippet checks. (#891)
• Codebase summary (--summary) — opt-in refactoring-hotspot overview appended to the run output: top files and folders ranked by tokens, lines, size, or a token-based cyclomatic-complexity estimate, with each file's duplication share. --summary-top <n> sets the list length, --summary-by tokens|lines|size|complexity picks the ranking metric (config file: summary, summaryTop, summaryBy). Renders in console/console-full, as a compact one-line-per-entry block in the ai reporter, and as an additive summary key in the JSON report (absent when the flag is off, so the schema is unchanged for existing consumers). Computed after detection from data already in memory — runs without --summary are unaffected. (#934)
• Isolated folder groups (--skip-isolated) — skip duplication between monorepo folders owned by different teams: declare isolation groups as comma-separated lists of pipe-separated folders (--skip-isolated "packages/team-a|packages/team-b,libs/a|libs/b"), and clones whose two fragments fall under two different folders of the same group are dropped. Duplication inside a single folder, against shared code, or across unrelated groups is still reported. The config file accepts the nested-array shape "skipIsolated": [["packages/a", "packages/b"]] (kebab-case skip-isolated works too), and the option applies to MCP project scans as well. Ports #628 to the Rust engine. (#942)

Security

• Supply-chain hardening (OpenSSF Scorecard) — every GitHub Action in the release and CI pipelines is pinned to a full commit SHA (kept fresh by Dependabot), workflow tokens follow least privilege (top-level contents: read, write grants scoped to the jobs that need them), and the repository now has a SECURITY.md with private disclosure channels, private vulnerability reporting, and a protected master branch

Bug Fixes

• GitHub "Latest" release badge stays on v5 — Rust v5 releases are created with --latest; legacy TypeScript v4 and cpd v* releases explicitly opt out, so a v4 maintenance release can no longer take the Latest badge from the v5 line

Other

• npm package page polish — README links are absolute GitHub URLs so they resolve on npmjs.com, and the package description and keywords better describe what jscpd does

Dependencies

• Bump Rust toolchain to 1.97 and oxc crates to 0.144 in /rust
• Bump serde to 1.0.229 in /rust
• Bump clap to 4.6.6 in /rust
• Bump memchr to 2.8.3 in /rust
• Bump xxhash-rust to 0.8.18 in /rust

Thank You ❤️

• @​hanzhangyu for proposing isolated folder groups for monorepos and contributing the original skipIsolated implementation (#628), which this release ports to the Rust engine

Published Packages

• cpd-core@0.1.9 on crates.io
• cpd-finder@0.1.11 on crates.io
• cpd-reporter@0.1.9 on crates.io
• cpd-tokenizer@0.1.10 on crates.io
• jscpd@5.0.16 on crates.io
• cpd@5.0.16 on npm
• jscpd-darwin-arm64@5.0.16 on npm
• jscpd-darwin-x64@5.0.16 on npm
• jscpd-linux-x64-gnu@5.0.16 on npm
• jscpd-linux-arm64-gnu@5.0.16 on npm
• jscpd-linux-x64-musl@5.0.16 on npm
• jscpd-windows-x64-msvc@5.0.16 on npm

Not Yet Published

... (truncated)

Changelog

Sourced from jscpd's changelog.

5.0.16

New Features

• MCP server over stdio (--mcp) — cpd --mcp /path/to/project serves the Model Context Protocol on stdin/stdout; the project is scanned once at startup and kept in memory, so check_duplication snippet checks answer in milliseconds. Tools: check_duplication, get_file_clones, get_statistics, check_current_directory. (#891)
• Codebase summary (--summary) — opt-in refactoring-hotspot overview: top files and folders ranked by tokens, lines, size, or complexity, with each file's duplication share; --summary-top and --summary-by tune it. (#934)
• Isolated folder groups (--skip-isolated) — skip duplication between monorepo folders owned by different teams (--skip-isolated "packages/a|packages/b"); clones inside one folder or against shared code are still reported. Config file: "skipIsolated": [["packages/a", "packages/b"]]. (#628, #942)

Security

• Supply-chain hardening (OpenSSF Scorecard) — GitHub Actions pinned to commit SHAs, least-privilege workflow tokens, SECURITY.md with private vulnerability reporting, protected master branch

Bug Fixes

• GitHub "Latest" release badge stays on v5 — legacy v4 releases can no longer take the Latest badge from the v5 line

Thank You ❤️

• @​hanzhangyu for proposing isolated folder groups for monorepos and contributing the original skipIsolated implementation (#628), which this release ports to the Rust engine

---

Commits

• 2b08d13 release: cpd-v5.0.16
• 7a01672 chore: pin GitHub 'Latest' badge to v5 releases, polish npm package page
• See full diff in compare view

Updates vitest from 4.1.10 to 4.1.11

Release notes

Sourced from vitest's releases.

v4.1.11

   🐞 Bug Fixes

• Revive global concurrency limit for test lifecycle [backport to v4]  -  by @​sheremet-va and @​hi-ogawa in vitest-dev/vitest#10992 (5146d)
• browser:
  • Encode iframeId in tester iframe URL [backport to v4]  -  by @​sheremet-va, Pduhard and Claude Opus 4.8 in vitest-dev/vitest#10955 (10b2c)
  • Trigger playwright/chromium gc on lower disk availability [backport to v4]  -  by @​hi-ogawa, Hiroshi Ogawa and OpenCode in vitest-dev/vitest#10951 (9851d)
• mocker:
  • Restrict redirect mocks to the fs allowlist [backport to v4]  -  by @​sheremet-va in vitest-dev/vitest#10974 (fe5a1)

    View changes on GitHub

Commits

• 9bd8d46 chore: release v4.1.11 (#10995)
• 9851dbc fix(browser): trigger playwright/chromium gc on lower disk availability [back...
• See full diff in compare view

Updates @aws-sdk/checksums from 3.1000.23 to 3.1000.29

Changelog

Sourced from @​aws-sdk/checksums's changelog.

3.1000.29 (2026-08-20)

Chores

• codegen: update to sync with the latest smithy-ts (#8272) (8369ada)

3.1000.28 (2026-08-14)

Chores

• upgrade to typescript 7 (#8264) (ca81fbb)
• remove jest, use vitest for remaining test suites (#8263) (3a88aad)

3.1000.27 (2026-08-11)

Chores

• upgrade to typescript 6 (#8257) (edabd4a)

3.1000.26 (2026-08-04)

Chores

• checksums: update dependencies.

3.1000.25 (2026-07-31)

Docs

• checksums: populate readme with package overview (#8243) (353e67d)

3.1000.24 (2026-07-31)

Chores

• checksums: update dependencies.

Commits

• See full diff in compare view

Updates @aws-sdk/client-cloudfront from 3.1098.0 to 3.1116.0

Release notes

Sourced from @​aws-sdk/client-cloudfront's releases.

v3.1116.0

3.1116.0(2026-08-21)

Chores

• codegen:
  • bump smithyVersion to 1.73.0 (#8273) (64f21cd0)
  • update to sync with the latest smithy-ts (#8272) (8369ada7)

Documentation Changes

• client-backup: Updating CLI Docs for Backup Audit Manager List Job Summaries APIs. (98f47ffe)
• client-wafv2: DataProtectionConfig field Key Documentation Update (a8f1fb90)

New Features

• client-cloudwatch: Allows customers to specify an initial warm up period to wait for metrics to arrive when creating metric or log alarms (e354f162)
• client-device-farm: Added support to CreateRemoveAccessSession for selecting a server version on the mobile WebDriver endpoint. (d91e09c8)
• client-bedrock-agentcore: Increase spans count from 1k to 20k (e83264aa)
• client-kinesis: Generate account endpoint for Kinesis Data Streams requests when the account ID is available (ed9966e2)
• client-bedrock-agentcore-control: Update Dataset schema to THIRDPARTYEVALUATIONV1 (f0fe8db3)

---

For list of updated packages, view updated-packages.md in assets-3.1116.0.zip

v3.1115.0

3.1115.0(2026-08-20)

Documentation Changes

• client-pricing-plan-manager: Documentation update for the CreateSubscription API to correct the default value of the approval mode parameter. The default value for paid subscriptions is MANUAL, not IMMEDIATE as previously documented. The default value remains IMMEDIATE for FREE tier subscriptions. (50d16ae3)

New Features

• client-sesv2: Amazon SES now supports per-message tracking overrides. You can use the new ConfigurationOverrides parameter in SendEmail and SendBulkEmail to enable or disable open and click tracking for individual messages without changing your account-level or configuration set settings. (da56caa5)
• client-arc-region-switch: Adds support for Rds switchover read replica for Oracle databases in Region switch plans (85ffb20a)
• client-ec2: EC2 marks UEFI instance metadata field as sensitive. (c232746a)
• client-direct-connect: This release adds custom route prefix pool allocations for Direct Connect. You can set IPv4 and IPv6 route prefix counts on private and transit virtual interfaces, and view pool size and unallocated counts on connections and LAGs, plus direct connect gateway attachment prefix allocation totals. (a94fb978)
• client-amplify: Increased the maximum allowed length from 255 to 4,096 characters to support longer access tokens. (f7f8ecd1)
• client-batch: AWS Batch now supports a new compute environment type that provides fully managed EC2 capacity with broader compute flexibility than Fargate, including GPU instances, bare metal, and specific instance type selection, without infrastructure management overhead. (9c559a73)
• client-sagemaker: Added IAM Identity Center (IdC) support to CreatePartnerApp and UpdatePartnerApp APIs. Added Customer Managed Key (CMK) support to CreateMlflowApp and DescribeMlflowApp. (55485887)
• client-lambda: Adds support for full JSON resource-based policies, enabling customers to create, retrieve, update, and delete function resource policies as complete JSON documents. (72573a2a)
• client-cloudfront: Added SigV4a as a supported signing protocol for Origin Access Control (OAC), enabling CloudFront to sign requests to Amazon S3 Multi-Region Access Point (S3-MRAP) origins. (95476293)

---

For list of updated packages, view updated-packages.md in assets-3.1115.0.zip

... (truncated)

Changelog

Sourced from @​aws-sdk/client-cloudfront's changelog.

3.1116.0 (2026-08-21)

Note: Version bump only for package @​aws-sdk/client-cloudfront

3.1115.0 (2026-08-20)

Features

• client-cloudfront: Added SigV4a as a supported signing protocol for Origin Access Control (OAC), enabling CloudFront to sign requests to Amazon S3 Multi-Region Access Point (S3-MRAP) origins. (9547629)

3.1114.0 (2026-08-19)

Note: Version bump only for package @​aws-sdk/client-cloudfront

3.1113.0 (2026-08-18)

Note: Version bump only for package @​aws-sdk/client-cloudfront

3.1112.0 (2026-08-17)

Note: Version bump only for package @​aws-sdk/client-cloudfront

3.1111.0 (2026-08-14)

Note: Version bump only for package @​aws-sdk/client-cloudfront

... (truncated)

Commits

• d760a00 Publish v3.1116.0
• 8369ada chore(codegen): update to sync with the latest smithy-ts (#8272)
• efc86fc Publish v3.1115.0
• 9547629 feat(client-cloudfront): Added SigV4a as a supported signing protocol for Ori...
• 5318b44 Publish v3.1114.0
• 73a06d2 Publish v3.1113.0
• cb4ae76 Publish v3.1112.0
• c41e9a9 Publish v3.1111.0
• ca81fbb chore: upgrade to typescript 7 (#8264)
• 4efe5bc Publish v3.1110.0
• Additional commits viewable in compare view

Updates @aws-sdk/client-s3 from 3.1098.0 to 3.1116.0

Release notes

Sourced from @​aws-sdk/client-s3's releases.

v3.1116.0

3.1116.0(2026-08-21)

Chores

• codegen:
  • bump smithyVersion to 1.73.0 (#8273) (64f21cd0)
  • update to sync with the latest smithy-ts (#8272) (8369ada7)

Documentation Changes

• client-backup: Updating CLI Docs for Backup Audit Manager List Job Summaries APIs. (98f47ffe)
• client-wafv2: DataProtectionConfig field Key Documentation Update (a8f1fb90)

New Features

• client-cloudwatch: Allows customers to specify an initial warm up period to wait for metrics to arrive when creating metric or log alarms (e354f162)
• client-device-farm: Added support to CreateRemoveAccessSession for selecting a server version on the mobile WebDriver endpoint. (d91e09c8)
• client-bedrock-agentcore: Increase spans count from 1k to 20k (e83264aa)
• client-kinesis: Generate account endpoint for Kinesis Data Streams requests when the account ID is available (ed9966e2)
• client-bedrock-agentcore-control: Update Dataset schema to THIRDPARTYEVALUATIONV1 (f0fe8db3)

---

For list of updated packages, view updated-packages.md in assets-3.1116.0.zip

v3.1115.0

3.1115.0(2026-08-20)

Documentation Changes

• client-pricing-plan-manager: Documentation update for the CreateSubscription API to correct the default value of the approval mode parameter. The default value for paid subscriptions is MANUAL, not IMMEDIATE as previously documented. The default value remains IMMEDIATE for FREE tier subscriptions. (50d16ae3)

New Features

• client-sesv2: Amazon SES now supports per-message tracking overrides. You can use the new ConfigurationOverrides parameter in SendEmail and SendBulkEmail to enable or disable open and click tracking for individual messages without changing your account-level or configuration set settings. (da56caa5)
• client-arc-region-switch: Adds support for Rds switchover read replica for Oracle databases in Region switch plans (85ffb20a)
• client-ec2: EC2 marks UEFI instance metadata field as sensitive. (c232746a)
• client-direct-connect: This release adds custom route prefix pool allocations for Direct Connect. You can set IPv4 and IPv6 route prefix counts on private and transit virtual interfaces, and view pool size and unallocated counts on connections and LAGs, plus direct connect gateway attachment prefix allocation totals. (a94fb978)
• client-amplify: Increased the maximum allowed length from 255 to 4,096 characters to support longer access tokens. (f7f8ecd1)
• client-batch: AWS Batch now supports a new compute environment type that provides fully managed EC2 capacity with broader compute flexibility than Fargate, including GPU instances, bare metal, and specific instance type selection, without infrastructure management overhead. (9c559a73)
• client-sagemaker: Added IAM Identity Center (IdC) support to CreatePartnerApp and UpdatePartnerApp APIs. Added Customer Managed Key (CMK) support to CreateMlflowApp and DescribeMlflowApp. (55485887)
• client-lambda: Adds support for full JSON resource-based policies, enabling customers to create, retrieve, update, and delete function resource policies as complete JSON documents. (72573a2a)
• client-cloudfront: Added SigV4a as a supported signing protocol for Origin Access Control (OAC), enabling CloudFront to sign requests to Amazon S3 Multi-Region Access Point (S3-MRAP) origins. (95476293)

---

For list of updated packages, view updated-packages.md in assets-3.1115.0.zip

... (truncated)

Changelog

Sourced from @​aws-sdk/client-s3's changelog.

3.1116.0 (2026-08-21)

Note: Version bump only for package @​aws-sdk/client-s3

3.1115.0 (2026-08-20)

Note: Version bump only for package @​aws-sdk/client-s3

3.1114.0 (2026-08-19)

Note: Version bump only for package @​aws-sdk/client-s3

3.1113.0 (2026-08-18)

Note: Version bump only for package @​aws-sdk/client-s3

3.1112.0 (2026-08-17)

Note: Version bump only for package @​aws-sdk/client-s3

3.1111.0 (2026-08-14)

Note: Version bump only for package @​aws-sdk/client-s3

3.1110.0 (2026-08-13)

... (truncated)

Commits

• d760a00 Publish v3.1116.0
• 8369ada chore(codegen): update to sync with the latest smithy-ts (#8272)
• efc86fc Publish v3.1115.0
• 5318b44 Publish v3.1114.0
• 73a06d2 Publish v3.1113.0
• cb4ae76 Publish v3.1112.0
• c41e9a9 Publish v3.1111.0
• ca81fbb chore: upgrade to typescript 7 (#8264)
• 4efe5bc Publish v3.1110.0
• d2ee371 Publish v3.1109.0
• Additional commits viewable in compare view

Updates @aws-sdk/core from 3.977.3 to 3.977.8

Changelog

Sourced from @​aws-sdk/core's changelog.

3.977.8 (2026-08-14)

Chores

• upgrade to typescript 7 (#8264) (ca81fbb)

3.977.7 (2026-08-11)

Chores

• upgrade to typescript 6 (#8257) (edabd4a)

3.977.6 (2026-08-04)

Bug Fixes

• core/protocols: fix number precision check (#8252) (3ab3c0e)

3.977.5 (2026-08-03)

Bug Fixes

• core/protocols: document and number serialization fixes (#8245) (71d4384)

Chores

• core/protocols: switch to v2 JSON codecs (#8234) (54c1c23)

3.977.4 (2026-07-30)

Bug Fixes

• core/protocols: v2 JSON codec updates and JsonBytesStringAdapter (#8238) (a1001f4)

Commits

• See full diff in compare view

Updates @aws-sdk/credential-provider-env from 3.972.64 to 3.972.69

Changelog

Sourced from @​aws-sdk/credential-provider-env's changelog.

3.972.69 (2026-08-14)

Chores

• upgrade to typescript 7 (#8264) (

[github-actions]

Performance Comparison (same runner)

Stable

Benchmark	Base	PR	Ratio	Change
watermark-parse-valid	9127673	9237794	0.99	+1.2%
watermark-to-soql	9242164	9249886	1.00	+0.1%
watermark-store-create-5	1032936	1161684	0.89	+11.1%
watermark-store-get-5	18574125	18656370	1.00	+0.4%
watermark-store-set-5	2593591	2593107	1.00	-0.0%
watermark-store-create-20	195451	197679	0.99	+1.1%
watermark-store-get-20	18618070	18726052	0.99	+0.6%
watermark-store-set-20	826715	811367	1.02	-1.9%
watermark-store-create-50	82421	84004	0.98	+1.9%
watermark-store-get-50	18586826	18686985	0.99	+0.5%
watermark-store-set-50	376112	376101	1.00	-0.0%
throughput-gzip-chunking-small	2315	2276	1.02	-1.7%
throughput-gzip-chunking-medium	235	237	0.99	+0.8%
throughput-gzip-chunking-large	9	10	0.90	+10%
throughput-fanout-1-channels	16673	17942	0.93	+7.1%
throughput-fanout-3-channels	20622	20263	1.02	-1.8%
throughput-fanout-5-channels	17165	15470	1.11	-11.0%
throughput-augment-small	412112	412630	1.00	+0.1%
throughput-augment-medium	42666	42531	1.00	-0.3%
throughput-augment-large	3939	3932	1.00	-0.2%
throughput-channel-push-consume-1k	4946	5615	0.88	+11.9%
throughput-channel-push-consume-10k	496	555	0.89	+10.6%
watermark-parse-valid (mean)	0.0001ms	0.0001ms	1.00	-0%
watermark-to-soql (mean)	0.0001ms	0.0001ms	1.00	-0%
watermark-store-create-5 (mean)	0.001ms	0.0009ms	0.90	-10%
watermark-store-get-5 (mean)	0.0001ms	0.0001ms	1.00	-0%
watermark-store-set-5 (mean)	0.0004ms	0.0004ms	1.00	-0%
watermark-store-create-20 (mean)	0.0051ms	0.0051ms	1.00	-0%
watermark-store-get-20 (mean)	0.0001ms	0.0001ms	1.00	-0%
watermark-store-set-20 (mean)	0.0012ms	0.0012ms	1.00	-0%
watermark-store-create-50 (mean)	0.0121ms	0.0119ms	0.98	-1.7%
watermark-store-get-50 (mean)	0.0001ms	0.0001ms	1.00	-0%
watermark-store-set-50 (mean)	0.0027ms	0.0027ms	1.00	-0%
throughput-gzip-chunking-small (mean)	0.432ms	0.4394ms	1.02	+1.7%
throughput-gzip-chunking-medium (mean)	4.2518ms	4.2113ms	0.99	-1%
throughput-gzip-chunking-large (mean)	108.1658ms	99.2602ms	0.92	-8.2%
throughput-fanout-1-channels (mean)	0.06ms	0.0557ms	0.93	-7.2%
throughput-fanout-3-channels (mean)	0.0485ms	0.0494ms	1.02	+1.9%
throughput-fanout-5-channels (mean)	0.0583ms	0.0646ms	1.11	+10.8%
throughput-augment-small (mean)	0.0024ms	0.0024ms	1.00	-0%
throughput-augment-medium (mean)	0.0234ms	0.0235ms	1.00	+0.4%
throughput-augment-large (mean)	0.2539ms	0.2544ms	1.00	+0.2%
throughput-channel-push-consume-1k (mean)	0.2022ms	0.1781ms	0.88	-11.9%
throughput-channel-push-consume-10k (mean)	2.0164ms	1.8022ms	0.89	-10.6%

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.