Bump aws/aws-sdk-php from 3.389.2 to 3.390.1 in /lam

[dependabot]

Bumps aws/aws-sdk-php from 3.389.2 to 3.390.1.

Release notes

Sourced from aws/aws-sdk-php's releases.

Version 3.390.1

• Aws\BCMRecommendedActions - Removing Smithy RPC v2 CBOR support that was added in previous SDK release.
• Aws\BCMPricingCalculator - Removing Smithy RPC v2 CBOR support that was added in previous SDK release.

Version 3.390.0

• Aws\Crypto - Fixes issue with client material description decode.
• Aws\BedrockAgentCoreControl - Adds support for configuring models through the OpenResponses API for custom evaluators. CreateEvaluator and UpdateEvaluator now accept an OpenResponses model configuration for LLM-as-a-Judge evaluations.
• Aws\SageMaker - Adds support for g7 family instance types for SageMaker Studio JupyterLab and CodeEditor apps for IAD (us-east-1), PDX (us-west-2), CMH (us-east-2).
• Aws\Lambda - Add Python3.15 (python3.15) and NodeJs 26 (nodejs26.x) support to AWS Lambda
• Aws\Kafka - Amazon MSK Express brokers now support streaming tables for Apache Iceberg, continuously materializing Apache Kafka topics as Iceberg tables in Amazon S3 Tables. Express brokers also now support data delivery to Amazon S3 general purpose buckets.
• Aws\NetworkFirewall - Adds UPDATING field to Container Association Status
• Aws\IAM - Improved IAM Policy Simulator accuracy. Simulator now evaluates SCP conditions and resource scoping, returns explicitDeny for explicit SCP denials, and reports accurate cross-account decisions.
• Aws\SecurityAgent - Adds support for providing a branch override when configured integrated repositories
• Aws\PricingPlanManager - Adds support for Public PricingPlanManager SDK

Version 3.389.3

• Aws\EC2 - This release adds support for policy-based routing on AWS Transit Gateway, enabling you to route traffic based on 5-tuple matching (source IP, destination IP, source port, destination port, and protocol) using new policy table entry APIs that direct matching traffic to a target route table.
• Aws\GameLiftStreams - Adds ListApplicationShaderCaches API to retrieve shader cache metadata for applications and adds stream URLs, which give end users temporary, unauthenticated access to a stream session in their browser. Includes CreateStreamUrl, GetStreamUrl, ListStreamUrls, and RevokeStreamUrl operations.
• Aws\WAFV2 - AWS WAF now supports pre-parse text transformations, letting you normalize raw query strings before parsing, available on rule statements that use SingleQueryArgument or AllQueryArguments as the FieldToMatch. AWS WAF also added 10 new text transformations, including ModSecurity v3 parity options.
• Aws\Glue - Adding filtering, partitioning, and VPC support to AWS Glue REST API connector
• Aws\IoTSiteWise - We have released a new set of APIs in support of a major new feature within AWS IoT SiteWise called Scenario Discover. Please see user guide about the feature and the API guide in public documentation for new APIs.
• Aws\DatabaseMigrationService - Updated documentation for various DMS Schema Conversion operations

Commits

• c75d5f4 3.390.1 release
• e89deec Update models for release
• 1aaa45b 3.390.0 release
• a227b84 Update models for release
• 867c52d fix: S3 Encryption Client material description decode (#3333)
• 09bbb40 3.389.3 release
• dfac069 Update models for release
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[deepsource-io]

DeepSource Code Review

We reviewed changes in 1274960...4d470bf on this pull request. Below is the summary for the review, and you can see the individual issues we found as inline review comments.

See full review on DeepSource ↗

PR Report Card

Overall Grade

Security   Reliability   Complexity   Hygiene

Code Review Summary

Analyzer	Status	Updated (UTC)	Details
PHP		Aug 3, 2026 5:32p.m.	Review ↗

---

Important

AI Review is run only on demand for your team. We're only showing results of static analysis review right now. To trigger AI Review, comment @deepsourcebot review on this thread.