[renovate]

This PR contains the following updates:

Package	Update	Change
aws/aws-cli	patch	2.39.1 → 2.39.4

---

Release Notes

aws/aws-cli

v2.39.4

Compare Source

======

• api-change:marketplace-discovery: GetListing and SearchListings APIs now return G2 and PeerSpot review sources in review summaries.
• api-change:connect-contact-lens: Rules TBAC GA (Contact Lens V1) - Adds an optional ListFilter (CategoriesAttributeFilter with OrConditions, AndCondition and TagCondition) to ListRealtimeContactAnalysisSegments. This filters matched categories by rule tags. It also adds an optional RuleId to CategoryDetails in the response.
• enhancement:crt: Stop adding a Content-Length: 0 header to GetObject requests made by the CRT transfer client.
• api-change:rolesanywhere: Adds the crlDpRevocationEnabled field to enable automatic revocation checking using CRL distribution points in X.509 certificates.
• api-change:workspaces: Add Ubuntu 24.04, Ubuntu 26.04, RHEL 9, RHEL10, Rocky 9 and Rocky 10 to OperatingSystemName and documentation update for WorkspaceProperties Protocols.
• api-change:ecs: Amazon ECS Managed Instances now supports the json-file log driver in task definitions. Daemon task definition volumes also support logDriverVolumeConfiguration, letting managed daemons read those logs.
• api-change:mwaa-serverless: Adding support to Environment Variables in MWAA Serverless
• api-change:ec2: Add the Unsupported SupportabilityScore to GetCapacityManagerSupportabilityScores.
• api-change:emr: Added StepAdditionalInfo on DescribeStep and ListSteps to surface YARN application IDs for steps.
• api-change:taxsettings: Adds Colombia additional information (responsibility codes, taxpayer type code, and RUT issue date) and a rejection reason (statusReason) to tax registration responses, and adds Argentina and Uruguay tax registration types.
• bugfix:auth: Require HTTPS when using bearer token authorization
• bugfix:crt: Apply --cli-connect-timeout to the CRT S3 transfer client
• api-change:lookoutequipment: Amazon Lookout for Equipment reached end of support on October 7, 2026. All Lookout for Equipment APIs are now marked as deprecated.
• api-change:mgn: This release adds Migration Planning artifacts as a source environment for network migration definitions, and an optional clientToken on CreateNetworkMigrationDefinition so that retried requests don't create duplicate definitions.
• api-change:polly: Amazon Polly now supports tagging lexicons. Use the new TagResource, UntagResource and ListTagsForResource APIs, or add tags when creating a lexicon with PutLexicon, to organize lexicons and control access with tag-based (ABAC) IAM policies.
• api-change:rds: Adding support for copying and tagging option groups with cross-Region DB snapshot copies, in the same account or across accounts.
• enhancement:crt: Fail CRT multipart downloads when ETag validation shows the object changed since it was listed or looked up, matching the classic transfer client.
• api-change:connect: Adds support for retrieving associated cases in contact responses. The Contact object now includes a Cases field containing case IDs and reference numbers linked to the contact.
• enhancement:crt: Avoid a redundant HeadObject request per CRT multipart download by reusing the full object checksum from the CLI's own HeadObject, or skipping the checksum lookup for objects without one.
• api-change:securityhub: Release Software APIs- GetSoftwareV2, GetSoftwareStatisticsV2 and GetSoftwareResourcesV2 to list software packages with aggregated resource count, get aggregated software statistics, and find the resources that contain a specific software package.
• api-change:iotsitewise: Adds support for an optional jobName on CreateDatasetExportJob. The jobName is returned by DescribeDatasetExportJob and ListDatasetExportJobs, making dataset export jobs easier to identify and track. If jobName is omitted, a default name is generated automatically.
• api-change:s3tables: Amazon S3 Tables now supports migrating AWS Glue Data Catalog tables into S3 Table buckets. This release adds the StartTableMigration, SyncTableMigration, UpdateTableMigration, CompleteTableMigration, GetTableMigration, and ListTableMigrations APIs.
• api-change:elasticbeanstalk: Adds DefaultAmiList to DescribePlatformVersion to return the default AMI for each processor architecture that a platform version supports.
• api-change:dynamodb: Adds StartBulkPutItems, DescribeBulkOperation, ListBulkOperations, and CancelBulkOperation for asynchronously loading Amazon S3 datasets into existing DynamoDB tables.
• bugfix:crt: Fail CRT downloads when ETag validation detects the object was modified mid-download, instead of silently skipping them.

v2.39.3

Compare Source

======

• api-change:bedrock-agent-runtime: Adds the CodeExecution step and codeExecution action to AgenticRetrieveStream trace events, showing when the agent runs code and which documents it reads.
• api-change:docdb: Amazon DocumentDB now returns ServerlessV2PlatformVersion in DBCluster API responses and adds the DescribeServerlessV2PlatformVersions API to discover available platform versions and their capabilities.
• api-change:omics: Adds the outputUriPrefixMode parameter to StartRun and GetRun. You can now write run outputs directly under outputUri, without the prefixes the service adds by default. When you opt in, outputs overwrite existing objects at the same keys.
• api-change:amp: Managed Prometheus collectors now support Amazon MSK consumer-group metrics for Amazon Managed Service for Prometheus and CloudWatch.
• api-change:timestream-influxdb: Add DeploymentConfiguration field to CreateDbCluster and UpdateDbCluster APIs to support creation of heterogenous InfluxDB v3 Enterprise clusters.
• api-change:sagemaker: Create endpoints with AcceleratorPartitionLayouts on ProductionVariant and deploy inference components with AcceleratorPartitionType in ComputeResourceRequirements to divide accelerators into hardware-isolated NVIDIA MIG partitions, running multiple models per GPU. P4d, P5, G7, G7e.
• api-change:logs: Adds support for account-level retention policies in Amazon CloudWatch Logs. Customers can now use PutAccountPolicy with the new RETENTION POLICY type to set default log retention across all log groups in an account. Includes dry-run mode to preview the impact of policy changes before applying them.
• api-change:lambda: Adds ConsumptionMode to SelfManagedKafkaEventSourceConfig, letting Lambda event source mappings consume self-managed Apache Kafka topics as a queue. Set ConsumptionMode to Queue when creating an event source mapping.
• api-change:connect: Amazon Connect adds tag-based access control for Contact Lens rules. ListRealtimeContactAnalysisSegmentsV2 adds a ListFilter to return only category segments whose rules match given tags. PreEvaluationFilter now supports contact evaluation resources for OnContactEvaluationSubmit rules.
• api-change:customer-profiles: Adds support for template ingestion controls in the GetProfileObjectTypeTemplate API response.

v2.39.2

Compare Source

======

• api-change:cleanrooms: Adds support for the PySpark 2.0 analysis template format and for choosing the file format (CSV or Parquet) of protected job results written to Amazon S3, including in a membership's default job result configuration.
• api-change:bedrock-agentcore-control: Adds Session Endpoint Feature on AgentCore Runtime
• api-change:wafv2: AWS WAF customers using Targeted Bot Control, ATP, or ACFP managed rule groups can now enable automatic Challenge JavaScript SDK injection. When enabled, Amazon CloudFront injects the script tag into HTML responses on your behalf, removing the need for manual integration.
• api-change:lightsail: This release adds support for instance health status checks and system status checks.
• bugfix:alias: Pass Windows external alias args to cmd.exe as literals
• api-change:imagebuilder: This release adds support for on-demand AMI scanning with Amazon Inspector.
• api-change:bedrock-agentcore: Adds AgentCore Runtime session endpoint support, including sessionEndpointUrl on the InvokeAgentRuntime response

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.