Bump the non-cdk-dependencies group across 1 directory with 7 updates

[dependabot]

Bumps the non-cdk-dependencies group with 7 updates in the / directory:

Package	From	To
@guardian/eslint-config	13.0.2	14.0.0
esbuild	0.27.2	0.27.4
eslint	9.39.2	10.0.3
jest	30.2.0	30.3.0
@aws-sdk/client-cloudwatch	3.995.0	3.1010.0
@aws-sdk/client-s3	3.991.0	3.1010.0
@aws-sdk/client-secrets-manager	3.991.0	3.1010.0

Updates @guardian/eslint-config from 13.0.2 to 14.0.0

Release notes

Sourced from @​guardian/eslint-config's releases.

@​guardian/eslint-config@​14.0.0

Major Changes

• c267f87: Make eslint-plugin-storybook into an optional peer dependency

  tl;dr if using the storybook config from @guardian/eslint-config, then you must have both eslint-plugin-storybook and storybook installed. If you are not using the storybook config, then you do not need to have either of these installed.

  • Issue was found that since eslint-plugin-storybook is a direct dependency of @guardian/eslint-config, and that storybook is a peer dependency of eslint-plugin-storybook, then storybook is always installed as a transitive dependency of @guardian/eslint-config. This causes issues for projects that use @guardian/eslint-config but do not use Storybook, as they will have an unnecessary dependency on Storybook and may encounter issues if they have a different version of Storybook installed.
  • Now we've moved eslint-plugin-storybook from dependencies to peerDependencies and mark it as optional via peerDependenciesMeta. This means that projects that use @guardian/eslint-config but do not use Storybook will not have eslint-plugin-storybook or storybook installed, and will not encounter any issues. Projects that do use the storybook config from @guardian/eslint-config will need to have both eslint-plugin-storybook and storybook installed as direct dependencies.

@​guardian/eslint-config@​13.0.7

Patch Changes

• 9e96546: bump storybook to 10.2.13

@​guardian/eslint-config@​13.0.6

Patch Changes

• 6c80178: Update transitive deps to fix vuln in minimatch

@​guardian/eslint-config@​13.0.5

Patch Changes

• d8e3ce5: bump dependencies

@​guardian/eslint-config@​13.0.4

Patch Changes

• accf6d8: update deps: eslint-plugin-storybook from 10.1.10 to 10.2.0, globals from 17.0.0 to 17.1.0

@​guardian/eslint-config@​13.0.3

Patch Changes

• a79dc08: Fix ERR_MODULE_NOT_FOUND when importing @​guardian/eslint-config in a project that does not have Storybook.

Changelog

Sourced from @​guardian/eslint-config's changelog.

14.0.0

Major Changes

• c267f87: Make eslint-plugin-storybook into an optional peer dependency

  tl;dr if using the storybook config from @guardian/eslint-config, then you must have both eslint-plugin-storybook and storybook installed. If you are not using the storybook config, then you do not need to have either of these installed.

  • Issue was found that since eslint-plugin-storybook is a direct dependency of @guardian/eslint-config, and that storybook is a peer dependency of eslint-plugin-storybook, then storybook is always installed as a transitive dependency of @guardian/eslint-config. This causes issues for projects that use @guardian/eslint-config but do not use Storybook, as they will have an unnecessary dependency on Storybook and may encounter issues if they have a different version of Storybook installed.
  • Now we've moved eslint-plugin-storybook from dependencies to peerDependencies and mark it as optional via peerDependenciesMeta. This means that projects that use @guardian/eslint-config but do not use Storybook will not have eslint-plugin-storybook or storybook installed, and will not encounter any issues. Projects that do use the storybook config from @guardian/eslint-config will need to have both eslint-plugin-storybook and storybook installed as direct dependencies.

13.0.7

Patch Changes

• 9e96546: bump storybook to 10.2.13

13.0.6

Patch Changes

• 6c80178: Update transitive deps to fix vuln in minimatch

13.0.5

Patch Changes

• d8e3ce5: bump dependencies

13.0.4

Patch Changes

• accf6d8: update deps: eslint-plugin-storybook from 10.1.10 to 10.2.0, globals from 17.0.0 to 17.1.0

13.0.3

Patch Changes

• a79dc08: Fix ERR_MODULE_NOT_FOUND when importing @​guardian/eslint-config in a project that does not have Storybook.

Commits

• 6ae3b4d Bump package versions
• c267f87 chore(eslint-config): remove storybook as transitive dep
• a374baf Bump package versions
• 9e96546 chore(deps): update storybook to 10.2.13, override minimatch to 10.2.3
• ce187b5 Bump package versions
• c3d6185 Bump package versions
• d8e3ce5 Chore(deps): Bump the dependencies group across 1 directory with 3 updates
• c8746f7 Bump package versions
• accf6d8 Chore(deps): Bump the dependencies group with 2 updates
• 21b5b2e Bump package versions
• Additional commits viewable in compare view

Updates esbuild from 0.27.2 to 0.27.4

Release notes

Sourced from esbuild's releases.

v0.27.4

• Fix a regression with CSS media queries (#4395, #4405, #4406)

  Version 0.25.11 of esbuild introduced support for parsing media queries. This unintentionally introduced a regression with printing media queries that use the <media-type> and <media-condition-without-or> grammar. Specifically, esbuild was failing to wrap an or clause with parentheses when inside <media-condition-without-or>. This release fixes the regression.

  Here is an example:

  /* Original code */
  @media only screen and ((min-width: 10px) or (min-height: 10px)) {
    a { color: red }
  }
  /* Old output (incorrect) */
  @​media only screen and (min-width: 10px) or (min-height: 10px) {
  a {
  color: red;
  }
  }
  /* New output (correct) */
  @​media only screen and ((min-width: 10px) or (min-height: 10px)) {
  a {
  color: red;
  }
  }

• Fix an edge case with the inject feature (#4407)

  This release fixes an edge case where esbuild's inject feature could not be used with arbitrary module namespace names exported using an export {} from statement with bundling disabled and a target environment where arbitrary module namespace names is unsupported.

  With the fix, the following inject file:

  import jquery from 'jquery';
  export { jquery as 'window.jQuery' };

  Can now always be rewritten as this without esbuild sometimes incorrectly generating an error:

  export { default as 'window.jQuery' } from 'jquery';

• Attempt to improve API handling of huge metafiles (#4329, #4415)

  This release contains a few changes that attempt to improve the behavior of esbuild's JavaScript API with huge metafiles (esbuild's name for the build metadata, formatted as a JSON object). The JavaScript API is designed to return the metafile JSON as a JavaScript object in memory, which makes it easy to access from within a JavaScript-based plugin. Multiple people have encountered issues where this API breaks down with a pathologically-large metafile.

  The primary issue is that V8 has an implementation-specific maximum string length, so using the JSON.parse API with large enough strings is impossible. This release will now attempt to use a fallback JavaScript-based JSON parser that operates directly on the UTF8-encoded JSON bytes instead of using JSON.parse when the JSON metafile is too big to fit in a JavaScript string. The new fallback path has not yet been heavily-tested. The metafile will also now be generated with whitespace removed if the bundle is significantly large, which will reduce the size of the metafile JSON slightly.

... (truncated)

Changelog

Sourced from esbuild's changelog.

0.27.4

• Fix a regression with CSS media queries (#4395, #4405, #4406)

  Version 0.25.11 of esbuild introduced support for parsing media queries. This unintentionally introduced a regression with printing media queries that use the <media-type> and <media-condition-without-or> grammar. Specifically, esbuild was failing to wrap an or clause with parentheses when inside <media-condition-without-or>. This release fixes the regression.

  Here is an example:

  /* Original code */
  @media only screen and ((min-width: 10px) or (min-height: 10px)) {
    a { color: red }
  }
  /* Old output (incorrect) */
  @​media only screen and (min-width: 10px) or (min-height: 10px) {
  a {
  color: red;
  }
  }
  /* New output (correct) */
  @​media only screen and ((min-width: 10px) or (min-height: 10px)) {
  a {
  color: red;
  }
  }

• Fix an edge case with the inject feature (#4407)

  This release fixes an edge case where esbuild's inject feature could not be used with arbitrary module namespace names exported using an export {} from statement with bundling disabled and a target environment where arbitrary module namespace names is unsupported.

  With the fix, the following inject file:

  import jquery from 'jquery';
  export { jquery as 'window.jQuery' };

  Can now always be rewritten as this without esbuild sometimes incorrectly generating an error:

  export { default as 'window.jQuery' } from 'jquery';

• Attempt to improve API handling of huge metafiles (#4329, #4415)

  This release contains a few changes that attempt to improve the behavior of esbuild's JavaScript API with huge metafiles (esbuild's name for the build metadata, formatted as a JSON object). The JavaScript API is designed to return the metafile JSON as a JavaScript object in memory, which makes it easy to access from within a JavaScript-based plugin. Multiple people have encountered issues where this API breaks down with a pathologically-large metafile.

... (truncated)

Commits

• f9c9012 publish 0.27.4 to npm
• 207dbc7 js api: fall back to js-based metafile json parser
• 1ca56dc fix #4329: auto-minify metafile for large bundles
• e3823aa fix #4415: add uint cast to stdio int parser
• d50e88c chore: correct copy&paste panic message (#4399)
• 8b829b1 fix #4407: incorrect error for inject edge case
• 4384bad fix #4395 close #4405 close #4406: parens for or
• 9129e00 publish 0.27.3 to npm
• e20e411 small fix to release notes
• 0dc0f2d fix #4322: parse and print CSS @scope rules
• Additional commits viewable in compare view

Updates eslint from 9.39.2 to 10.0.3

Release notes

Sourced from eslint's releases.

v10.0.3

Bug Fixes

• e511b58 fix: update eslint (#20595) (renovate[bot])
• f4c9cf9 fix: include variable name in no-useless-assignment message (#20581) (sethamus)
• ee9ff31 fix: update dependency minimatch to ^10.2.4 (#20562) (Milos Djermanovic)

Documentation

• 9fc31b0 docs: Update README (GitHub Actions Bot)
• 4efaa36 docs: add info box for eslint-plugin-eslint-comments (#20570) (DesselBane)
• 23b2759 docs: add v10 migration guide link to Use docs index (#20577) (Pixel998)
• 80259a9 docs: Remove deprecated eslintrc documentation files (#20472) (Copilot)
• 9b9b4ba docs: fix typo in no-await-in-loop documentation (#20575) (Pixel998)
• e7d72a7 docs: document TypeScript 5.3 minimum supported version (#20547) (sethamus)

Chores

• ef8fb92 chore: package.json update for eslint-config-eslint release (Jenkins)
• e8f2104 chore: updates for v9.39.4 release (Jenkins)
• 5cd1604 refactor: simplify isCombiningCharacter helper (#20524) (Huáng Jùnliàng)
• 70ff1d0 chore: eslint-config-eslint require Node ^20.19.0 || ^22.13.0 || >=24 (#20586) (Milos Djermanovic)
• e32df71 chore: update eslint-plugin-eslint-comments, remove legacy-peer-deps (#20576) (Milos Djermanovic)
• 53ca6ee chore: disable eslint-comments/no-unused-disable rule (#20578) (Milos Djermanovic)
• e121895 ci: pin Node.js 25.6.1 (#20559) (Milos Djermanovic)
• efc5aef chore: update tsconfig.json in eslint-config-eslint (#20551) (Francesco Trotta)

v10.0.2

Bug Fixes

• 2b72361 fix: update ajv to 6.14.0 to address security vulnerabilities (#20537) (루밀LuMir)

Documentation

• 13eeedb docs: link rule type explanation to CLI option --fix-type (#20548) (Mike McCready)
• 98cbf6b docs: update migration guide per Program range change (#20534) (Huáng Jùnliàng)
• 61a2405 docs: add missing semicolon in vars-on-top rule example (#20533) (Abilash)

Chores

• 951223b chore: update dependency @​eslint/eslintrc to ^3.3.4 (#20553) (renovate[bot])
• 6aa1afe chore: update dependency eslint-plugin-jsdoc to ^62.7.0 (#20536) (Milos Djermanovic)

v10.0.1

Bug Fixes

• c87d5bd fix: update eslint (#20531) (renovate[bot])
• d841001 fix: update minimatch to 10.2.1 to address security vulnerabilities (#20519) (루밀LuMir)
• 04c2147 fix: update error message for unused suppressions (#20496) (fnx)
• 38b089c fix: update dependency @​eslint/config-array to ^0.23.1 (#20484) (renovate[bot])

Documentation

• 5b3dbce docs: add AI acknowledgement section to templates (#20431) (루밀LuMir)
• 6f23076 docs: toggle nav in no-JS mode (#20476) (Tanuj Kanti)
• b69cfb3 docs: Update README (GitHub Actions Bot)

Chores

... (truncated)

Commits

• bfce7ea 10.0.3
• d44ced8 Build: changelog update for 10.0.3
• e511b58 fix: update eslint (#20595)
• ef8fb92 chore: package.json update for eslint-config-eslint release
• e8f2104 chore: updates for v9.39.4 release
• 5cd1604 refactor: simplify isCombiningCharacter helper (#20524)
• 9fc31b0 docs: Update README
• 70ff1d0 chore: eslint-config-eslint require Node ^20.19.0 || ^22.13.0 || >=24 (#20586)
• f4c9cf9 fix: include variable name in no-useless-assignment message (#20581)
• 4efaa36 docs: add info box for eslint-plugin-eslint-comments (#20570)
• Additional commits viewable in compare view

Updates jest from 30.2.0 to 30.3.0

Release notes

Sourced from jest's releases.

v30.3.0

Features

• [jest-config] Add defineConfig and mergeConfig helpers for type-safe Jest config (#15844)
• [jest-fake-timers] Add setTimerTickMode to configure how timers advance
• [*] Reduce token usage when run through LLMs (3f17932)

Fixes

• [jest-config] Keep CLI coverage output when using --json with --outputFile (#15918)
• [jest-mock] Use Symbol from test environment (#15858)
• [jest-reporters] Fix issue where console output not displayed for GHA reporter even with silent: false option (#15864)
• [jest-runtime] Fix issue where user cannot utilize dynamic import despite specifying --experimental-vm-modules Node option (#15842)
• [jest-test-sequencer] Fix issue where failed tests due to compilation errors not getting re-executed even with --onlyFailures CLI option (#15851)
• [jest-util] Make sure process.features.require_module is false (#15867)

Chore & Maintenance

• [*] Replace remaining micromatch uses with picomatch
• [deps] Update to sinon/fake-timers v15
• [docs] Update V30 migration guide to notify users on jest.mock() work with case-sensitive path (#15849)
• Updated Twitter icon to match the latest brand guidelines (#15869)

Changelog

Sourced from jest's changelog.

30.3.0

Features

• [jest-config] Add defineConfig and mergeConfig helpers for type-safe Jest config (#15844)
• [jest-fake-timers] Add setTimerTickMode to configure how timers advance
• [*] Reduce token usage when run through LLMs (3f17932)

Fixes

• [jest-config] Keep CLI coverage output when using --json with --outputFile (#15918)
• [jest-mock] Use Symbol from test environment (#15858)
• [jest-reporters] Fix issue where console output not displayed for GHA reporter even with silent: false option (#15864)
• [jest-runtime] Fix issue where user cannot utilize dynamic import despite specifying --experimental-vm-modules Node option (#15842)
• [jest-test-sequencer] Fix issue where failed tests due to compilation errors not getting re-executed even with --onlyFailures CLI option (#15851)
• [jest-util] Make sure process.features.require_module is false (#15867)

Chore & Maintenance

• [*] Replace remaining micromatch uses with picomatch
• [deps] Update to sinon/fake-timers v15
• [docs] Update V30 migration guide to notify users on jest.mock() work with case-sensitive path (#15849)
• Updated Twitter icon to match the latest brand guidelines (#15869)

Commits

• efb59c2 v30.3.0
• 96c53d3 feat(jest-config): add defineConfig and mergeConfig functions (#15844)
• See full diff in compare view

Updates @aws-sdk/client-cloudwatch from 3.995.0 to 3.1010.0

Release notes

Sourced from @​aws-sdk/client-cloudwatch's releases.

v3.1010.0

3.1010.0(2026-03-16)

New Features

• clients: update client endpoints as of 2026-03-16 (6ae1dd8a)
• client-ecs: Amazon ECS now supports configuring whether tags are propagated to the EC2 Instance Metadata Service (IMDS) for instances launched by the Managed Instances capacity provider. This gives customers control over tag visibility in IMDS when using ECS Managed Instances. (f165f183)
• client-bedrock-agentcore-control: Supporting hosting of public ECR Container Images in AgentCore Runtime (a3ca4b6e)
• client-bedrock: You can now generate policy scenarios on demand using the new GENERATE POLICY SCENARIOS build workflow type. Scenarios will no longer be automatically generated during INGEST CONTENT, REFINE POLICY, and IMPORT POLICY workflows, resulting in faster completion times for these operations. (e9c8b9ce)
• client-bedrock-agentcore: Provide support to perform deterministic operations on agent runtime through shell command executions via the new InvokeAgentRuntimeCommand API (14fb5577)
• middleware-flexible-checksums: allow custom checksums to be used in responses (#7849) (213defa2)

Tests

• canary: use vitest 4.0.17 in canary tests (#7848) (bda6c45a)

---

For list of updated packages, view updated-packages.md in assets-3.1010.0.zip

v3.1009.0

3.1009.0(2026-03-13)

Chores

• codegen: sync for retry strategy lifecycle fix (#7842) (7bf8888b)

Documentation Changes

• client-medialive: Documents the VideoDescription.ScalingBehavior.SMART(underscore)CROP enum value. (fa49aa1b)
• client-sqs: document that SQS supports AWS Query protocol, non-default (#7847) (90772af6)
• clients: generate readme block about protocols (#7839) (21ffcafc)

New Features

• clients: update client endpoints as of 2026-03-13 (079cb594)
• client-api-gateway: API Gateway now supports an additional security policy "SecurityPolicy-TLS13-1-2-FIPS-PFS-PQ-2025-09" for REST APIs and custom domain names. The new policy is compliant with TLS 1.3, Federal Information Processing Standards (FIPS), Perfect Forward Secrecy (PFS), and post-quantum (PQ) cryptography (663ec588)
• client-gameliftstreams: Feature launch that enables customers to connect streaming sessions to their own VPCs running in AWS. (9b2dfe80)
• client-connect: Deprecating PredefinedNotificationID field (20194f10)
• client-ivs-realtime: Updates maximum reconnect window seconds from 60 to 300 for participant replication (e384ea14)
• client-glue: Add QuerySessionContext to BatchGetPartitionRequest (e39731fa)
• client-mediaconvert: This update adds support for Dolby AC-4 audio output, frame rate conversion between non-Dolby Vision inputs to Dolby Vision outputs, and clear lead CMAF HLS output. (11615b9f)
• client-quicksight: The change adds a new capability named ManageSharedFolders in Custom Permissions (cffca16f)
• client-mgn: Network Migration APIs are now publicly available for direct programmatic access. Customers can now call Network Migration APIs directly without going through AWS Transform (ATX), enabling automation, integration with existing tools, and self-service migration workflows. (2c814ea8)
• client-config-service: Fix pagination support for DescribeConformancePackCompliance, and update OrganizationConfigRule InputParameters max length to match ConfigRule. (469faf6f)

---

... (truncated)

Changelog

Sourced from @​aws-sdk/client-cloudwatch's changelog.

3.1010.0 (2026-03-16)

Note: Version bump only for package @​aws-sdk/client-cloudwatch

3.1009.0 (2026-03-13)

Note: Version bump only for package @​aws-sdk/client-cloudwatch

3.1008.0 (2026-03-12)

Note: Version bump only for package @​aws-sdk/client-cloudwatch

3.1007.0 (2026-03-11)

Note: Version bump only for package @​aws-sdk/client-cloudwatch

3.1006.0 (2026-03-10)

Note: Version bump only for package @​aws-sdk/client-cloudwatch

3.1005.0 (2026-03-09)

Note: Version bump only for package @​aws-sdk/client-cloudwatch

3.1004.0 (2026-03-06)

... (truncated)

Commits

• 2aa1e6c Publish v3.1010.0
• 7888030 Publish v3.1009.0
• 7bf8888 chore(codegen): sync for retry strategy lifecycle fix (#7842)
• 21ffcaf docs(clients): generate readme block about protocols (#7839)
• 543c385 Publish v3.1008.0
• 7718940 Publish v3.1007.0
• fa4dc50 Publish v3.1006.0
• 0e58193 test(snapshot-testing): error response snapshots (#7836)
• e692718 Publish v3.1005.0
• 2b96330 test(snapshot-testing): implement response snapshots (#7803)
• Additional commits viewable in compare view

Updates @aws-sdk/client-s3 from 3.991.0 to 3.1010.0

Release notes

Sourced from @​aws-sdk/client-s3's releases.

v3.1010.0

3.1010.0(2026-03-16)

New Features

• clients: update client endpoints as of 2026-03-16 (6ae1dd8a)
• client-ecs: Amazon ECS now supports configuring whether tags are propagated to the EC2 Instance Metadata Service (IMDS) for instances launched by the Managed Instances capacity provider. This gives customers control over tag visibility in IMDS when using ECS Managed Instances. (f165f183)
• client-bedrock-agentcore-control: Supporting hosting of public ECR Container Images in AgentCore Runtime (a3ca4b6e)
• client-bedrock: You can now generate policy scenarios on demand using the new GENERATE POLICY SCENARIOS build workflow type. Scenarios will no longer be automatically generated during INGEST CONTENT, REFINE POLICY, and IMPORT POLICY workflows, resulting in faster completion times for these operations. (e9c8b9ce)
• client-bedrock-agentcore: Provide support to perform deterministic operations on agent runtime through shell command executions via the new InvokeAgentRuntimeCommand API (14fb5577)
• middleware-flexible-checksums: allow custom checksums to be used in responses (#7849) (213defa2)

Tests

• canary: use vitest 4.0.17 in canary tests (#7848) (bda6c45a)

---

For list of updated packages, view updated-packages.md in assets-3.1010.0.zip

v3.1009.0

3.1009.0(2026-03-13)

Chores

• codegen: sync for retry strategy lifecycle fix (#7842) (7bf8888b)

Documentation Changes

• client-medialive: Documents the VideoDescription.ScalingBehavior.SMART(underscore)CROP enum value. (fa49aa1b)
• client-sqs: document that SQS supports AWS Query protocol, non-default (#7847) (90772af6)
• clients: generate readme block about protocols (#7839) (21ffcafc)

New Features

• clients: update client endpoints as of 2026-03-13 (079cb594)
• client-api-gateway: API Gateway now supports an additional security policy "SecurityPolicy-TLS13-1-2-FIPS-PFS-PQ-2025-09" for REST APIs and custom domain names. The new policy is compliant with TLS 1.3, Federal Information Processing Standards (FIPS), Perfect Forward Secrecy (PFS), and post-quantum (PQ) cryptography (663ec588)
• client-gameliftstreams: Feature launch that enables customers to connect streaming sessions to their own VPCs running in AWS. (9b2dfe80)
• client-connect: Deprecating PredefinedNotificationID field (20194f10)
• client-ivs-realtime: Updates maximum reconnect window seconds from 60 to 300 for participant replication (e384ea14)
• client-glue: Add QuerySessionContext to BatchGetPartitionRequest (e39731fa)
• client-mediaconvert: This update adds support for Dolby AC-4 audio output, frame rate conversion between non-Dolby Vision inputs to Dolby Vision outputs, and clear lead CMAF HLS output. (11615b9f)
• client-quicksight: The change adds a new capability named ManageSharedFolders in Custom Permissions (cffca16f)
• client-mgn: Network Migration APIs are now publicly available for direct programmatic access. Customers can now call Network Migration APIs directly without going through AWS Transform (ATX), enabling automation, integration with existing tools, and self-service migration workflows. (2c814ea8)
• client-config-service: Fix pagination support for DescribeConformancePackCompliance, and update OrganizationConfigRule InputParameters max length to match ConfigRule. (469faf6f)

---

... (truncated)

Changelog

Sourced from @​aws-sdk/client-s3's changelog.

3.1010.0 (2026-03-16)

Note: Version bump only for package @​aws-sdk/client-s3

3.1009.0 (2026-03-13)

Note: Version bump only for package @​aws-sdk/client-s3

3.1008.0 (2026-03-12)

Features

• client-s3: Adds support for account regional namespaces for general purpose buckets. The account regional namespace is a reserved subdivision of the global bucket namespace where only your account can create general purpose buckets. (1791028)

3.1007.0 (2026-03-11)

Note: Version bump only for package @​aws-sdk/client-s3

3.1006.0 (2026-03-10)

Note: Version bump only for package @​aws-sdk/client-s3

3.1005.0 (2026-03-09)

Note: Version bump only for package @​aws-sdk/client-s3

... (truncated)

Commits

• 2aa1e6c Publish v3.1010.0
• 7888030 Publish v3.1009.0
• 7bf8888 chore(codegen): sync for retry strategy lifecycle fix (#7842)
• 21ffcaf docs(clients): generate readme block about protocols (#7839)
• 543c385 Publish v3.1008.0
• 1791028 feat(client-s3): Adds support for account regional namespaces for general pur...
• 7718940 Publish v3.1007.0
• fa4dc50 Publish v3.1006.0
• 0e58193 test(snapshot-testing): error response snapshots (#7836)
• e692718 Publish v3.1005.0
• Additional commits viewable in compare view

Updates @aws-sdk/client-secrets-manager from 3.991.0 to 3.1010.0

Release notes

Sourced from @​aws-sdk/client-secrets-manager's releases.

v3.1010.0

3.1010.0(2026-03-16)

New Features

• clients: update client endpoints as of 2026-03-16 (6ae1dd8a)
• client-ecs: Amazon ECS now supports configuring whether tags are propagated to the EC2 Instance Metadata Service (IMDS) for instances launched by the Managed Instances capacity provider. This gives customers control over tag visibility in IMDS when using ECS Managed Instances. (f165f183)
• client-bedrock-agentcore-control: Supporting hosting of public ECR Container Images in AgentCore Runtime (a3ca4b6e)
• client-bedrock: You can now generate policy scenarios on demand using the new GENERATE POLICY SCENARIOS build workflow type. Scenarios will no longer be automatically generated during INGEST CONTENT, REFINE POLICY, and IMPORT POLICY workflows, resulting in faster completion times for these operations. (e9c8b9ce)
• client-bedrock-agentcore: Provide support to perform deterministic operations on agent runtime through shell command executions via the new InvokeAgentRuntimeCommand API (14fb5577)
• middleware-flexible-checksums: allow custom checksums to be used in responses (#7849) (213defa2)

Tests

• canary: use vitest 4.0.17 in canary tests (#7848) (bda6c45a)

---

For list of updated packages, view updated-packages.md in assets-3.1010.0.zip

v3.1009.0

3.1009.0(2026-03-13)

Chores

• codegen: sync for retry strategy lifecycle fix (#7842) (7bf8888b)

Documentation Changes

• client-medialive: Documents the VideoDescription.ScalingBehavior.SMART(underscore)CROP enum value. (fa49aa1b)
• client-sqs: document that SQS supports AWS Query protocol, non-default (#7847) (90772af6)
• clients: generate readme block about protocols (#7839) (21ffcafc)

New Features

• clients: update client endpoints as of 2026-03-13 (079cb594)
• client-api-gateway: API Gateway now supports an additional security policy "SecurityPolicy-TLS13-1-2-FIPS-PFS-PQ-2025-09" for REST APIs and custom domain names. The new policy is compliant with TLS 1.3, Federal Information Processing Standards (FIPS), Perfect Forward Secrecy (PFS), and post-quantum (PQ) cryptography (663ec588)
• client-gameliftstreams: Feature launch that enables customers to connect streaming sessions to their own VPCs running in AWS. (9b2dfe80)
• client-connect: Deprecating PredefinedNotificationID field (20194f10)
• client-ivs-realtime: Updates maximum reconnect window seconds from 60 to 300 for participant replication (e384ea14)
• client-glue: Add QuerySessionContext to BatchGetPartitionRequest (e39731fa)
• client-mediaconvert: This update adds support for Dolby AC-4 audio output, frame rate conversion between non-Dolby Vision inputs to Dolby Vision outputs, and clear lead CMAF HLS output. (11615b9f)
• client-quicksight: The change adds a new capability named ManageSharedFolders in Custom Permissions (cffca16f)
• client-mgn: Network Migration APIs are now publicly available for direct programmatic access. Customers can now call Network Migration APIs directly without going through AWS Transform (ATX), enabling automation, integration with existing tools, and self-service migration workflows. (2c814ea8)
• client-config-service: Fix pagination support for DescribeConformancePackCompliance, and update OrganizationConfigRule InputParameters max length to match ConfigRule. (469faf6f)

---

... (truncated)

Changelog

Sourced from @​aws-sdk/client-secrets-manager's changelog.

3.1010.0 (2026-03-16)

Note: Version bump only for package @​aws-sdk/client-secrets-manager

3.1009.0 (2026-03-13)

Note: Version bump only for package @​aws-sdk/client-secrets-manager

3.1008.0 (2026-03-12)

Note: Version bump only for package @​aws-sdk/client-secrets-manager

3.1007.0 (2026-03-11)

Note: Version bump only for package @​aws-sdk/client-secrets-manager

3.1006.0 (2026-03-10)

Note: Version bump only for package @​aws-sdk/client-secrets-manager

3.1005.0 (2026-03-09)

Note: Version bump only for package @​aws-sdk/client-secrets-manager

3.1004.0 (2026-03-06)

... (truncated)

Commits

• 2aa1e6c Publish v3.1010.0
• 7888030 Publish v3.1009.0
• 7bf8888 chore(codegen): sync for retry strategy lifecycle fix (#7842)
• 21ffcaf docs(clients): generate readme block about protocols (#7839)
• 543c385 Publish v3.1008.0
• 7718940 Publish v3.1007.0
• fa4dc50 Publish v3.1006.0
• 0e58193 test(snapshot-testing): error re...

  Description has been truncated