[dependabot]

⚠️ Dependabot is rebasing this PR ⚠️

Rebasing might not happen immediately, so don't worry if this takes some time.

Note: if you make any changes to this PR yourself, they will take precedence over the rebase.

---

Bumps @aws-sdk/credential-providers from 3.1120.0 to 3.1154.0.

Release notes

Sourced from @​aws-sdk/credential-providers's releases.

v3.1154.0

3.1154.0(2026-10-20)

New Features

• client-cloudwatchomni: Updating max value for maxResults in SearchPrincipals API (b0304f53)
• client-rds: Amazon RDS now supports On-Demand Capacity Reservations for DB instances. (4a9c582b)
• client-cloudwatch: Amazon CloudWatch now supports two new anomaly detector settings. AdaptationSpeed (FAST, NORMAL, SLOW) controls how fast the model adapts to baseline changes, and OutlierFilteringStrength (MINIMAL, MODERATE, STRICT) controls how aggressively outliers are filtered. (4ab39261)
• client-dynamodb: Adds support for disassociating a replica from an Amazon DynamoDB multi-Region eventual consistency global table, so you can keep it as a single-Region table with its existing data. Also adds disassociation protection, on by default, to help prevent accidental disassociation. (47fab49d)
• client-bedrock: Amazon Bedrock Guardrails now supports a configurable tier for the contextual grounding policy via a new tier option. Select the Standard tier for grounding that better supports conversations and reasoning, with expanded language coverage. (7b180331)
• client-ecs: ECS Service Gateway makes it easier for developers to deploy ECS services without having to worry about complex ingress networking constructs. (db0d1430)
• client-s3files: S3 Files adds support for the "Misconfigured" file system status. (398f9d10)
• client-cleanrooms: This release allows customers and their partners to easily collaborate with data stored in Databricks, without having to move or share their underlying data among collaborators. (0d7bcd99)
• client-workspaces-instances: Documentation update release for AWS service (9dc12640)
• client-elasticache: LiveMigration enables customers to migrate from self-hosted EC2 Redis and Valkey clusters to ElastiCache Serverless with near-zero downtime. Customers control the migration through three API-driven phases (prepare, start, complete) that handle traffic proxying, data replication, and cutover. (eefeb2a2)
• client-marketplace-catalog: Adds ListEntities filter, sort, and summary support for the ExpressPrivateOfferConfiguration entity type, including filtering by ProductId. (eca81e1f)

---

For list of updated packages, view updated-packages.md in assets-3.1154.0.zip

v3.1153.0

3.1153.0(2026-10-19)

Chores

• core: consume JSON codec from @​smithy/core (#8335) (412d1362)
• update codeowners (#8365) (00c08848)
• codegen: sync for JSON codec and schema server plugin (#8353) (3e350b59)
• scripts: resolve changelog path by resolved location (#8356) (3f50ee08)

New Features

• client-codepipeline: Documentation update release for AWS service (75cdc917)
• client-devops-agent: Documentation update release for AWS service (5ff30e27)
• client-guardduty: Adding a new Expected Bucket Owner optional field for GuardDuty publishing destination APIs (2b62c860)
• client-cloudwatch: This release adds ActionConfiguration to PutMetricAlarm, PutCompositeAlarm and PutLogAlarm. It allows customers to include an alarm's tags in its notifications and alarm state change events (ae734907)
• client-observabilityadmin: Adding support for EKS Container Insights Telemetry Rules (3c63647d)
• client-xray: Adds support for encrypting the Transaction Search spans log group with a customer managed AWS KMS key. Pass the key ARN in the new CloudWatchLogsConfiguration.SpansLogGroupKmsKeyId field of UpdateTraceSegmentDestination. X-Ray applies the key when it creates the log group. (154d49fd)
• client-databrew: Documentation update release for AWS service (67b90539)
• client-bedrock-agent: Adds Retrieval Instructions for Amazon Bedrock Knowledge Bases. Create, get, update, delete, list, and version customer-authored instructions that guide how a knowledge base retrieves and answers, with content review before use. (d16d5176)
• client-emr-containers: Documentation update release for AWS service (4ba3e7bb)
• client-bedrock-agent-runtime: Adds support for applying a Retrieval Instruction, optionally by version, to AgenticRetrieveStream requests for Amazon Bedrock Knowledge Bases, and reports the applied instruction and version on the trace. (a065ceb4)
• client-dynamodb: Enable account endpoint generation for existing CN and GovCloud regions (ca19aa35)
• client-datazone: Adds SDK and CLI support for the Iceberg REST catalog connection types already available in Amazon SageMaker Unified Studio - ICEBERGRESTCATALOG, SNOWFLAKEICEBERGRESTCATALOG, and DATABRICKSICEBERGRESTCATALOG. (58940515)
• client-drs: Documentation update release for AWS service (50b058d1)
• client-amplify: Documentation update release for AWS service (7e7cacf5)
• client-bedrock-agentcore: Adds the Builtin.FailureAnalysis evaluator for batch evaluations. GetBatchEvaluation now returns insightResults that group session failures into insights with root causes and suggested fixes. (e34db602)
• client-codecommit: Documentation update release for AWS service (f6d27955)

... (truncated)

Changelog

Sourced from @​aws-sdk/credential-providers's changelog.

3.1154.0 (2026-10-20)

Note: Version bump only for package @​aws-sdk/credential-providers

3.1153.0 (2026-10-19)

Note: Version bump only for package @​aws-sdk/credential-providers

3.1152.0 (2026-10-14)

Note: Version bump only for package @​aws-sdk/credential-providers

3.1151.0 (2026-10-13)

Note: Version bump only for package @​aws-sdk/credential-providers

3.1150.0 (2026-10-12)

Note: Version bump only for package @​aws-sdk/credential-providers

3.1149.0 (2026-10-09)

Note: Version bump only for package @​aws-sdk/credential-providers

3.1148.0 (2026-10-08)

... (truncated)

Commits

• f6ff312 Publish v3.1154.0
• 3508584 Publish v3.1153.0
• 3e350b5 chore(codegen): sync for JSON codec and schema server plugin (#8353)
• 3ce8aa7 Publish v3.1152.0
• d6adfcb Publish v3.1151.0
• 4c9a334 Publish v3.1150.0
• a960c14 Publish v3.1149.0
• 5773a75 chore(codegen): sync for endpoint cache fix and pre-schema error fallback (#8...
• 1bc0425 Publish v3.1148.0
• 663046d Publish v3.1147.0
• Additional commits viewable in compare view

[coderabbitai]

No actionable comments were generated in the recent review.

Recent review info

Run configuration

• Source mode: Auto
• Repository: Unavailable
• Branch: Unavailable
• File: No configuration file from this repository applied
• Commit: Unavailable
• Layers: Organization UI
• Review profile: CHILL
• Plan: Advanced
• Run ID: e1487928-e8ca-4dc5-867a-ee6240d77a5b

Commits

Reviewing files that changed from the base of the PR and between 621fbb6 and 0e9ea4b.

Files ignored due to path filters: 1

• pnpm-lock.yaml is excluded by !**/pnpm-lock.yaml

Files selected for processing: 1

• package.json

Included review availability: This review used your included allowance. Your plan provides up to 10 included reviews per hour; 7 remain after this review.

Walkthrough

The @aws-sdk/credential-providers dependency range in package.json changed from ^3.1120.0 to ^3.1154.0.

Changes: AWS credential provider update

Layer / File(s)	Summary
Update credential provider range package.json	The dependency range for @aws-sdk/credential-providers changed from ^3.1120.0 to ^3.1154.0.

Priority: Low

Estimated code review effort: 1 (Trivial) | ~5 minutes

Change: Other

Suggested reviewers: dahlia

Merge Risk: Minimal · up to 0e9ea

The dependency update is consistent with the lockfile and existing S3 credential-provider usage.

Architecture risk: Low · up to 0e9ea

The change affects 1 system.

Changed systems: package.json

Architecture concerns
No architecture-level concerns identified.

Review details

Systems and components

• observed — package.json (service) was modified; 1 changed file maps to changed impact.

Before / after behavior

• observed — Modified behavior in package.json: Updated the @aws-sdk/credential-providers dependency range from ^3.1120.0 to ^3.1154.0.

Pre-merge checks: 5

Check name	Status	Explanation
Title check		The title clearly and concisely states the dependency being updated and the exact version change.
Description check		The description directly explains the dependency update and includes relevant release notes and changelog details.
Docstring Coverage		No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…
Linked Issues check		Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check		Check skipped because no linked issues were found for this pull request.

Full details: Docstring Coverage

Explanation

No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0 files. (1 skipped: 1 unsupported.)

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

_{Comment @coderabbitai help to get the list of available commands.}