chore(deps)(deps): bump @aws-sdk/client-s3 from 3.1107.0 to 3.1131.0

[dependabot]

Bumps @aws-sdk/client-s3 from 3.1107.0 to 3.1131.0.

Release notes

Sourced from @​aws-sdk/client-s3's releases.

v3.1131.0

3.1131.0(2026-09-11)

Documentation Changes

• client-s3: Updated S3 Object Lock Default Retention documentation. (996d6642)

New Features

• clients: update client endpoints as of 2026-09-11 (036bf165)
• client-lightsail: Amazon Lightsail now lets you serve website content from a private Lightsail bucket through a Lightsail distribution. This release adds enablePrivateOriginAccess to the CreateDistribution and UpdateDistribution actions, plus new defaultRootObject and customErrorResponses options. (24e18ac6)
• client-batch: Added new bulk job APIs (CancelJobs, TerminateJobs, TerminateServiceJobs) and new fields on ListJobs and ListServiceJobs responses. This allows customers to cancel or terminate multiple jobs in a single request. ListJobs and ListServiceJobs responses now include isCancelled and isTerminated fields. (036dd996)
• client-ecs: This feature adds support for setting the cpu architecture type that should be used to launch tasks for an Express Gateway Service. (62bd9bf2)
• client-mediaconvert: Adds Dolby Vision metadata to Probe results, including profile, level, and presence of the RPU, base layer, and enhancement layer. Adds video sample and display aspect ratios. Adds the UnprocessableEntityException (HTTP 422) error to Probe for recognized but malformed or corrupt inputs. (32973df6)
• client-invoicing: Add ListProcurementPortals and ListProcurementPortalSuppliers APIs to retrieve AWS-supported 3rd party procurement portals and their suppliers for e-invoice delivery and purchase order retrieval. (2cf8ccd9)

---

For list of updated packages, view updated-packages.md in assets-3.1131.0.zip

v3.1130.0

3.1130.0(2026-09-10)

New Features

• clients: update client endpoints as of 2026-09-10 (96951f65)
• client-outposts: Added fields to identify Outpost generation and rack scaling configuration on Outpost and CatalogItem resources. (d6ec7dce)
• client-resiliencehubv2: This release adds the ListTestRunSourceEvents and ListTestRunDependencies APIs, which return the alarm state changes during a test run and the dependencies the run blocked. (b918658d)
• client-bedrock-agent: TwelveLabs Marengo 3.0 is now an embedding model option in Amazon Bedrock Managed Knowledge Base. Create multimodal embeddings for video, audio, and image content that capture visual scenes, speech, and video cues, not just transcribed text. (2671d465)
• client-ec2: The CreateImage API now supports a BootModeOverride parameter to explicitly set UEFI boot mode on a new AMI, overriding the source instance's inherited boot mode. (c47027fb)
• client-sagemaker: This release adds the ability for customers to attach customer owned Elastic Network Interfaces (ENIs) to HyperPod cluster nodes. (a7414730)
• client-rtbfabric: AWS RTB Fabric now lets you control how traffic is routed to your responder gateway across Availability Zones. Set the new clientRoutingPolicy parameter to keep traffic within the same Availability Zone or distribute traffic across all Availability Zones. (e3d270a9)

---

For list of updated packages, view updated-packages.md in assets-3.1130.0.zip

v3.1129.0

3.1129.0(2026-09-09)

New Features

• client-elementalinference: This release adds contextual metadata, a feed output type that generates a descriptive summary of your media content along with IAB taxonomy and GARM suitability classifications. It also adds feed resource policies for granting cross-account access to a feed. (249639c6)
• client-connect: Add metric configuration field to evaluation forms and ListEvaluationFormAIVersions API for retrieving AI-generated evaluation form versions (abf73c4a)
• client-ec2: This release adds support for sharing Amazon EBS volumes across AWS accounts using AWS Resource Access Manager (RAM). Consuming accounts can view shared volume metadata and create copies of shared volumes within the same Availability Zone, with optional re-encryption using their own KMS key. (2fd8923f)
• client-mediapackagev2: Dynamic Multiview enables viewers to watch multiple live video streams in a single combined output. Viewers can select from 6 preset tiled layouts. Create MediaPackage channels with Input Type MULTIVIEW and configure Available Layouts and Available Sources. See the API Documentation for details. (db6626ce)
• client-pcs: This release adds support for custom Gres.conf configuration and Slurm version 26.05 in AWS PCS. Customers can now specify generic resource (GRES) settings to control how GPUs and other resources are configured and shared on their compute node groups. (dd8afaa5)
• client-lambda: Updates documentation for lambda function timeout. (f268e066)

... (truncated)

Changelog

Sourced from @​aws-sdk/client-s3's changelog.

3.1131.0 (2026-09-11)

Note: Version bump only for package @​aws-sdk/client-s3

3.1130.0 (2026-09-10)

Note: Version bump only for package @​aws-sdk/client-s3

3.1129.0 (2026-09-09)

Note: Version bump only for package @​aws-sdk/client-s3

3.1128.0 (2026-09-08)

Features

• client-s3: Adds support for Amazon S3 Object Lock variable retention. Existing S3 APIs that support S3 Object Lock parameters now support two new parameters EventHold and EventHoldDuration at the object level, and DefaultEventHoldDuration at the bucket level. (8b58987)

3.1127.0 (2026-09-04)

Note: Version bump only for package @​aws-sdk/client-s3

3.1126.0 (2026-09-03)

Note: Version bump only for package @​aws-sdk/client-s3

... (truncated)

Commits

• 33f2cc7 Publish v3.1131.0
• 996d664 docs(client-s3): Updated S3 Object Lock Default Retention documentation.
• cd49ceb Publish v3.1130.0
• cece980 Publish v3.1129.0
• 523fff6 Publish v3.1128.0
• 8b58987 feat(client-s3): Adds support for Amazon S3 Object Lock variable retention. ...
• 8893344 Publish v3.1127.0
• 7131e74 Publish v3.1126.0
• 678282b Publish v3.1125.0
• e80cab3 Publish v3.1124.0
• Additional commits viewable in compare view

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

[dependabot]

Labels

The following labels could not be found: backend, frontend. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

[github-actions]

🔒 Supply Chain Security Review

Check	Status
Socket.dev malware scan	✅ success
Vulnerability audit	✅ success
Lockfile diff review	✅ success
OSSF Scorecard	✅ success

This review was automatically generated by the Supply Chain Review workflow.

[github-actions]

🔒 Supply Chain Security Review

Check	Status
Socket.dev malware scan	✅ success
Vulnerability audit	✅ success
Lockfile diff review	✅ success
OSSF Scorecard	✅ success

This review was automatically generated by the Supply Chain Review workflow.

[github-actions]

🔒 Supply Chain Security Review

Check	Status
Socket.dev malware scan	❌ failure
Vulnerability audit	❌ failure
Lockfile diff review	✅ success
OSSF Scorecard	✅ success

⚠️ Action Required

Critical or high severity vulnerabilities were found. Do not merge until verified.

⚠️ Action Required

Socket.dev flagged potential supply chain issues. Review the findings above.

This review was automatically generated by the Supply Chain Review workflow.

[github-actions]

🔒 Supply Chain Security Review

Check	Status
Socket.dev malware scan	✅ success
Vulnerability audit	✅ success
Lockfile diff review	✅ success
OSSF Scorecard	✅ success

This review was automatically generated by the Supply Chain Review workflow.

[github-actions]

🔒 Supply Chain Security Review

Check	Status
Socket.dev malware scan	✅ success
Vulnerability audit	✅ success
Lockfile diff review	✅ success
OSSF Scorecard	✅ success

This review was automatically generated by the Supply Chain Review workflow.

[github-actions]

🔒 Supply Chain Security Review

Check	Status
Socket.dev malware scan	✅ success
Vulnerability audit	✅ success
Lockfile diff review	✅ success
OSSF Scorecard	✅ success

This review was automatically generated by the Supply Chain Review workflow.