Update dependency aws/aws-sdk-php to v3.381.2

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
aws/aws-sdk-php (source)	3.379.9 → 3.381.2

---

Release Notes

aws/aws-sdk-php (aws/aws-sdk-php)

v3.381.2

Compare Source

• Aws\ - Fix circular reference cycles caused by non-static middleware closures implicitly capturing $this in AwsClient, GlacierClient, Route53Client, S3Client, S3MultiRegionClient, and Middleware.
• Aws\CloudWatchLogs - Updating the max limit for start query api parameter.
• Aws\PartnerCentralSelling - Enable TCV intake on Opportunity to improve Opportunities Hygiene and downstream revenue attribution.
• Aws\MediaPackageV2 - This release adds support for AvailabilityStartTimeConfiguration in MediaPackageV2 DASH manifests

v3.381.1

Compare Source

• Aws\ManagedGrafana - Adds support for dual-stack (IPv4 and IPv6) connectivity to Amazon Managed Grafana workspaces. Customers can configure the ipAddressType parameter when creating or updating a workspace to choose between IPv4-only or dual-stack (IPv4 and IPv6) access.
• Aws\QConnect - ListModels is an API that returns the available AI models for a Connect Assistant based on its region and AI prompt type.
• Aws\DataZone - Adds support for SageMaker Unified Studio notebook operations, including notebook import and export
• Aws\CloudFront - Adding a new boolean for OCSP Revocations in Viewer mTLS Create and Update APIs, and adding a new 'Passthrough' option for TrustStore modes
• Aws\Bedrock - Advanced Prompt Optimization (AdvPO) allows you to optimize and migrate your prompts for any model on Bedrock by automatically evaluating responses and rewriting prompts to improve performance. This release provides a programmatic way to create, get, list, stop, and delete AdvPO jobs.
• Aws\mgn - Introducing new option for security groups mapping - with MAP-DHCP the service translates security rules from your source environment with DHCP compatibility.
• Aws\DatabaseMigrationService - Add 9 SDK waiters for DMS Schema Conversion async operations. Eliminates manual polling for import, assessment, conversion, export, and creation jobs.
• Aws\Glue - Release --has-databases parameter for AWS Glue get-catalogs API, which filters catalog responses to include only those capable of containing databases, excluding parent catalogs that hold only other catalogs. Remove model-level validation on partition index list size for AWS Glue tables.

v3.381.0

Compare Source

• Aws\Endpoints - Introduces endpoint resolution through a BDD rules based evaluation.

• Add BDD-based endpoint resolution alongside the existing Tree Ruletset Evaluator.
• Introduce a Bdd package under EndpointV2 namespace containing utilities and components used for resolving an endpoint through BDDs.
• Enhance the EndpointDefinitionProvider to resolve the endpoint rule definitions by giving preference to BDDs "endpoint-bdd-1.json" rules over tree based rules.
• Enhance EndpointProviderV2 to support both, BDD endpoint resolution and Tree
  endpoint resolution but also giving preference to BDD resolution.
  How is it done?
  • The parameter $ruleset now supports instances of BddRuleset, besides of array to preserve existent behavior, and when an instance of BddRuleset is present then a BDD Evaluator is instantiated which will be used to resolve the endpoint.
  • Otherwise, if an array or an instance of Ruleset is passed in then, we resolve the endpoint with the Tree based endpoint resolution, which is the current behavior.
• Add a new method "getActiveParameters" in EndpointProviderV2 that is used by
  the EndpointV2Middleware to get the active parameters, which internally it just evaluates which rule set property we should be getting the parameters from, either from $bddRuleset if not null or from $ruleset.
• Enhance EndpointV2Middleware to consume the new getActiveParameters.

• Aws\ConnectCampaignsV2 - This release added support for Outbound Campaign timezone detection using all available contact methods
• Aws\Glue - AWS Glue now defaults the job timeout to 480 minutes for Glue version 5.0 and later when no timeout value is specified. The default remains 2,880 minutes for Glue version 4.0 and earlier.
• Aws\Batch - Adds a billing callout to docs regarding using the CE Scale Down Delay feature
• Aws\DSQL - Added support for Amazon Aurora DSQL change data capture (CDC) streams that deliver row-level database changes to Amazon Kinesis in JSON format. Includes CreateStream, GetStream, ListStreams, and DeleteStream operations.
• Aws\Lightsail - Added OriginIpAddressTypeEnum (ipv4, ipv6, dualstack) and ipAddressType field to Origin and InputOrigin structures for Lightsail CDN distributions. Allows customers to specify how the distribution connects to origins, using IPv4, IPv6, or dualstack networking
• Aws\BedrockAgentCoreControl - Adds support for read-only summary APIs for Policy Engine, Policy, and Policy Generation resources, enabling metadata retrieval without KMS decryption for AWS Config integration.
• Aws\BillingConductor - Add ConflictException to UpdateCustomLineItem operation.
• Aws\OpenSearchService - Adds support for AutomatedSnapshotPauseOptions.
• Aws\PartnerCentralAccount - Added ServiceQuotaExceededExceptions for Profile operations
• Aws\EC2 - Include length limits in the SDK and documentation for text fields in Image (AMI) APIs such as the image name and description
• Aws\SocialMessaging - Adds parameters to call the GetWhatsAppMessageTemplate and UpdateWhatsAppMessageTemplate APIs with a template name and language code in place of the template ID. Linked WhatsApp accounts also describe whether the WABA is onboarded to Meta's Marketing Messages API.
• Aws\Redshift - Added rg.xlarge and rg.4xlarge to valid NodeType values and updated documentation for CreateCluster, ModifyCluster, ResizeCluster, and RestoreFromClusterSnapshot APIs to reflect RG node type support.
• Aws\Connect - This change added three new EventSourceName for schedule notification feature
• Aws\SageMaker - Adds execution role session name mode to reflect user identity in Studio. Adds Flexible Training Plans on Studio apps. Adds restricted model packages to control access to proprietary model artifacts via IAM. Fixed instance type parity between inference endpoints and managed shadow tests.
• Aws\SecurityAgent - Add support for code reviews, a new resource type that enables automated security-focused static analysis of source code repositories.
• Aws\PCS - Add support for Amazon EC2 Interruptible-ODCR
• Aws\ConnectCases - Amazon Connect Cases now supports SLA durations of up to 2 years (1,051,200 minutes), increased from the previous maximum of 90 days (129,600 minutes). This enables you to track long-running service level agreements for cases that require extended resolution timelines.
• Aws\RTBFabric - Customers can now configure custom domain names for their RTB Fabric gateways. This enables partners to use their own branded domain for RTB traffic instead of the default rtbfabric endpoint
• Aws\ARCRegionSwitch - Adds support for enabling and disabling Lambda event source mappings in Region switch plans.
• Aws\ElasticsearchService - Adds support for AutomatedSnapshotPauseOptions.
• Aws\QuickSight - Adds five new custom permission option for Quick Apps so that these capabilities can be controlled by public SDK and CLI.
• Aws\SFN - Updated default SDK endpoints for AWS Step Functions in AWS GovCloud (US) regions. The default Dual-Stack endpoints now resolve to "states-fips" prefixed hostnames. There are no changes to service behavior. No customer action is required.

v3.380.3

Compare Source

• Aws\Route53Resolver - Adds supports for DNS64 on inbound endpoints and IPv6 forwarding through the internet gateway (IGW) on outbound endpoints, making it easier to manage hybrid DNS across IPv4 and IPv6 networks.
• Aws\BedrockAgentCoreControl - Launching AgentCore payments - a capability that provides secure, instant microtransaction payments for AI agents to access paid APIs, MCP servers, and content. It handles payment processing for x402 protocol, payment limits, and 3P wallet integrations with Coinbase CDP and Stripe (Privy).
• Aws\EC2 - DescribeInstanceTypes now accepts an IncludeUnsupportedInRegion parameter. When set, the response also lists instance types that are not available in the current Region. Each instance type includes a SupportedInRegion field indicating its regional availability.
• Aws\BedrockAgentCore - Launching AgentCore payments - a capability that provides secure, instant microtransaction payments for AI agents to access paid APIs, MCP servers, and content. It handles payment processing for x402 protocol, payment limits, and 3P wallet integrations with Coinbase CDP and Stripe (Privy).
• Aws\GuardDuty - This is a documentation update
• Aws\Invoicing - Updated ListInvoiceSummaries API to add new ReceiverRole filter in Request and Response
• Aws\BCMDataExports - With this release, customers can configure their data exports to generate additional integration artifacts for Athena and Redshift.

v3.380.2

Compare Source

• Aws\imagebuilder - The ImportDiskImage API now enforces a maximum character limit of 128 characters on the image name field.
• Aws\MWAA - Amazon MWAA now supports a PublicAndPrivate webserver access mode. The Airflow web server is accessible over both public and private endpoints, enabling workers in VPCs without internet access to reach the Task API privately while retaining public access to the Airflow UI.
• Aws\S3 - Validate outpost access point resource name
• Aws\BedrockAgentCoreControl - Adds support for bring-your-own file system in AgentCore Runtime. Developers can mount Amazon S3 Files and Amazon EFS access points directly into agent sessions using filesystemConfigurations.
• Aws\LexModelsV2 - Amazon Lex V2 introduces audio filler support for speech-to-speech bots. Configure melody or typing sounds that play during backend processing to reduce perceived latency and maintain a natural conversational experience for callers.
• Aws\Glue - Adds support for a CustomLogGroupPrefix parameter in StartDataQualityRulesetEvaluationRun to specify custom CloudWatch log group paths, and a RulesetName filter in ListDataQualityRulesetEvaluationRuns to filter evaluation runs by ruleset name.
• Aws\SageMaker - Amazon SageMaker HyperPod now returns ImageVersionStatus in DescribeCluster, DescribeClusterNode, and ListClusterNodes responses, indicating whether cluster instances are running the latest available image version.
• Aws\SecurityHub - Release GenerateRecommendedPolicyV2 and GetRecommendedPolicyV2 APIs. This supports generating and retrieving policy recommendations to remediate unused permissions findings that are now being supported on Security Hub.

v3.380.1

Compare Source

• Aws\CleanRoomsML - Increase max configurable output limits in the Clean Rooms ML configured model algorithm association resource.
• Aws\Route53Domains - This release adds the TLDInMaintenance exception.
• Aws\SageMaker - Adds support for ml.p5.4xlarge instance type for SageMaker Studio JupyterLab and CodeEditor apps for IAD (us-east-1), NRT (ap-northeast-1), BOM (ap-south-1), CGK (ap-southeast-3), GRU (sa-east-1), PDX (us-west-2), CMH (us-east-2).
• Aws\OpenSearchService - Amazon OpenSearch Service now supports VPC egress, enabling outbound traffic from your OpenSearch domain to route privately through your VPC instead of the public internet.
• Aws\MedicalImaging - Add support for DICOM Json Metadata Override features in startDICOMImportJob API
• Aws\MarketplaceAgreement - With this release, Agreements API provides a programmatic way to generate quotes, accept offers, track charges and entitlements, manage renewals and cancellations, and streamline operations entirely through APIs without navigating to the AWS Marketplace website or AWS Management Console.
• Aws\MediaTailor - Added support for Monetization Functions. Monetization Functions let you enrich ad requests with external data and transform session parameters using JSONata expressions, without deploying custom infrastructure.
• Aws\CloudFront - Adds support for tagging CloudFront Functions and KeyValueStores resources.

v3.380.0

Compare Source

• Aws\Retries - Adds an opt-in new retry behavior. Set AWS_NEW_RETRIES_2026=true to enable the new path. When the env var is unset (the default), retry behavior is unchanged from previous releases. With the flag enabled, the SDK switches the default retry mode from 'legacy' to 'standard', adopts a throttling-aware token-bucket retry quota (cost 14 for non-throttling, 5 for throttling), reduces the non-throttling base backoff to 50ms, checks max-attempts before quota, honors the x-amz-retry-after header, sleeps without retrying on long-polling operations (SQS, SFN, SWF) when the quota is exhausted, and lets custom deciders supplement (rather than replace) built-in retryability checks. DynamoDB defaults to 4 attempts with a 25ms base; STS treats IDPCommunicationError as transient; S3's existing custom decider keeps its socket carve-out. The flag is intended as an opt-in for early adopters and will become the default in a future release.
• Aws\GeoRoutes - Added support for TravelTimeExceedsDriverWorkHours, ViolatedBlockedRoad, and ViolatedVehicleRestriction notice codes to the CalculateRoutes API response.
• Aws\MediaLive - Updates the type of the MediaLiveRouterOutputConnectionMap.
• Aws\BedrockAgentCoreControl - Amazon Bedrock AgentCore gateways now support MCP Sessions and response streaming from MCP targets. Session timeouts can be set between 15 minutes and 8 hours, and response streaming enables forwarding stream events sent by MCP targets to gateway users.
• Aws\EC2 - This feature allows customers to change the tunnel bandwidth on existing VPN connections using the ModifyVpnConnectionOptions API
• Aws\CloudWatchLogs - Adding an additional optional deliverySourceConfiguration field to PutDeliverySource API. This enables customers to pass service-specific configurations through IngestionHub such as tracing enablement or sampling rates that will be propagated to the source resource.
• Aws\SecurityAgent - AWS Security Agent is adding a new target domain verification method for private VPC penetration testing. Additionally, the target domain resource will now have a verification status reason field to surface additional details about domain verification
• Aws\LexModelBuildingService - Lex V1 is deprecated, use Lex V2 instead
• Aws\VPCLattice - Amazon VPC Lattice now supports privately resolvable DNS resources

v3.379.11

Compare Source

• Aws\ - Use WeakReference in PresignUrlMiddleware and EndpointDiscoveryMiddleware to prevent circular reference memory leaks.
• Aws\QConnect - Added reasoning details, statusDescription, and timeToFirstTokenMs fields to the ListSpans response in Amazon Q in Connect to provide visibility into model thinking, error diagnostics, and inference latency metrics.
• Aws\CloudWatchLogs - Adds support for filtering log groups by tags in the ListLogGroups API via the new logGroupTags parameter.
• Aws\EntityResolution - Add support for transitive matching in AWS Entity Resolution rule-based matching workflows. When enabled, records that match through different rules are grouped together into the same match group, allowing related records to be connected across rule levels.
• Aws\CloudWatch - This release adds tag support for CloudWatch Dashboards. The PutDashboard API now accepts a Tags parameter, allowing you to tag dashboards at creation time. Additionally, the TagResource, UntagResource, and ListTagsForResource APIs now support dashboard ARNs as resources.
• Aws\QuickSight - Add IdentityProviderCACertificatesBundleS3Uri for private CA certs with OAuth datasources. 256-char limit for FontFamily in themes. ControlTitleFormatText on all 13 filters. ControlTitleFontConfiguration. ContextRegion for cross-region identity context. Story,scenario in CreateCustomCapability API.
• Aws\AppStream - Amazon WorkSpaces Applications now enables AI agents to securely operate desktop applications. Administrators configure stacks to provide agents access to WorkSpaces. Agents can click, type, and take screenshots. Agents authenticate with AWS IAM credentials with activity logged in AWS CloudTrail.
• Aws\IAM - Added guidance for CreateOpenIDConnectProvider to include multiple thumbprints when OIDC discovery and JWKS endpoints use different hosts or certificates
• Aws\IoT - AWS IoT HTTP rule actions now support cross-topic batching, combining messages from different MQTT topics into single HTTP requests.

v3.379.10

Compare Source

• Aws\BedrockAgentCore - AgentCore Identity now supports on-behalf-of token exchange OAuth2. AgentCore Memory now supports metadata for LongTerm Memory Records.
• Aws\EKS - Vended logs update param for capability vended logs feature
• Aws\ObservabilityAdmin - Observability Admin enablement launch for AWS Kafka, Bedrock Agent Core Workload Identity and OTel metric enablement.
• Aws\Kafka - Adds support for ZookeeperAccess field to control the Client-Zookeeper connectivity.
• Aws\DataZone - Adds support for asynchronous notebook runs
• Aws\PaymentCryptography - Adds support for resource-based policies on AWS Payment Cryptography keys, enabling cross-account key sharing. Also adds Multi-Party Approval (MPA) team association APIs for protecting sensitive import root public key operations.
• Aws\SSOAdmin - Add InstanceArn and IdentityStoreArn in the response of CreateApplication API and IdentityStoreArn in the response of DescribeApplication API
• Aws\SageMaker - Add InstancePools support to Endpoint for flexible provisioning across a prioritized list of instance types. Add Specifications support to InferenceComponent for per-instance-type model configurations.
• Aws\Route53GlobalResolver - Adds support for regions in the UpdateGlobalResolver input.
• Aws\BedrockAgentCoreControl - AgentCore Identity now supports on-behalf-of token exchange OAuth2. AgentCore Memory now supports metadata for LongTerm Memory Records.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • Between 12:00 AM and 03:59 AM, only on Monday (* 0-3 * * 1)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[deepsource-io]

DeepSource Code Review

We reviewed changes in 0416330...8f45b13 on this pull request. Below is the summary for the review, and you can see the individual issues we found as inline review comments.

See full review on DeepSource ↗

PR Report Card

Overall Grade

Security   Reliability   Complexity   Hygiene

Code Review Summary

Analyzer	Status	Updated (UTC)	Details
PHP		May 15, 2026 9:24p.m.	Review ↗

---

Important

AI Review is run only on demand for your team. We're only showing results of static analysis review right now. To trigger AI Review, comment @deepsourcebot review on this thread.