Upgrade: [dependabot] - bump @aws-sdk/client-cloudformation from 3.987.0 to 3.989.0 (#519)

Bumps
[@aws-sdk/client-cloudformation](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-cloudformation)
from 3.987.0 to 3.989.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/aws/aws-sdk-js-v3/releases"><code>@​aws-sdk/client-cloudformation</code>'s
releases</a>.</em></p>
<blockquote>
<h2>v3.989.0</h2>
<h4>3.989.0(2026-02-12)</h4>
<h5>Chores</h5>
<ul>
<li><strong>codegen:</strong> uprgade smithy to 1.67.0 (<a
href="https://redirect.github.com/aws/aws-sdk-js-v3/pull/7735">#7735</a>)
(<a
href="https://github.com/aws/aws-sdk-js-v3/commit/3d94ce9e82c8c301b5f3c852a848a652864903ac">3d94ce9e</a>)</li>
</ul>
<h5>New Features</h5>
<ul>
<li><strong>client-ec2:</strong> Launching nested virtualization. This
feature allows you to run nested VMs inside virtual (non-bare metal) EC2
instances. (<a
href="https://github.com/aws/aws-sdk-js-v3/commit/9541a839f1825bd6fbb29a8708813fff67ce26ff">9541a839</a>)</li>
</ul>
<h5>Bug Fixes</h5>
<ul>
<li><strong>client-ec2:</strong> fix ec2QueryName serialization (<a
href="https://redirect.github.com/aws/aws-sdk-js-v3/pull/7734">#7734</a>)
(<a
href="https://github.com/aws/aws-sdk-js-v3/commit/05e3a621a6d8d49a4d027638987326d9c850dbf3">05e3a621</a>)</li>
</ul>
<hr />
<p>For list of updated packages, view
<strong>updated-packages.md</strong> in
<strong>assets-3.989.0.zip</strong></p>
<h2>v3.988.0</h2>
<h4>3.988.0(2026-02-11)</h4>
<h5>Chores</h5>
<ul>
<li><strong>codegen:</strong> update for compositeErrorRegistries (<a
href="https://redirect.github.com/aws/aws-sdk-js-v3/pull/7728">#7728</a>)
(<a
href="https://github.com/aws/aws-sdk-js-v3/commit/d20ea16f8069517b7dc02c62f39afea11423f061">d20ea16f</a>)</li>
</ul>
<h5>New Features</h5>
<ul>
<li><strong>client-kafkaconnect:</strong> Support configurable upper
limits on task count during autoscaling operations via
maxAutoscalingTaskCount parameter. (<a
href="https://github.com/aws/aws-sdk-js-v3/commit/c996f67dda4fcfaa0006e77919c505ab554cbbd2">c996f67d</a>)</li>
<li><strong>client-batch:</strong> Add support for listing jobs by share
identifier and getting snapshots of active capacity utilization by job
queue and share. (<a
href="https://github.com/aws/aws-sdk-js-v3/commit/951d36346b42cbb57be81880dad529808985145a">951d3634</a>)</li>
<li><strong>client-eks:</strong> This release adds support for Windows
Server 2025 in Amazon EKS Managed Node Groups. (<a
href="https://github.com/aws/aws-sdk-js-v3/commit/6af8b6b969e7205044c3dc0f87d630e732ba0a35">6af8b6b9</a>)</li>
<li><strong>client-s3tables:</strong> S3 Tables now supports setting
partition specifications and sort orders on tables. Partition specs
allow users to define how data is organized using transform functions.
Sort order configurations enable users to specify sort directions and
null ordering preferences for optimized data layout. (<a
href="https://github.com/aws/aws-sdk-js-v3/commit/e6b5be094895d5341684473063b45bc2d9eec336">e6b5be09</a>)</li>
<li><strong>client-ec2:</strong> R8i instances powered by custom Intel
Xeon 6 processors available only on AWS with sustained all-core 3.9 GHz
turbo frequency (<a
href="https://github.com/aws/aws-sdk-js-v3/commit/72ad52628aea8adb0a856d5bc9ab7a09bd5f9fb7">72ad5262</a>)</li>
</ul>
<hr />
<p>For list of updated packages, view
<strong>updated-packages.md</strong> in
<strong>assets-3.988.0.zip</strong></p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-cloudformation/CHANGELOG.md"><code>@​aws-sdk/client-cloudformation</code>'s
changelog</a>.</em></p>
<blockquote>
<h1><a
href="https://github.com/aws/aws-sdk-js-v3/compare/v3.988.0...v3.989.0">3.989.0</a>
(2026-02-12)</h1>
<p><strong>Note:</strong> Version bump only for package
<code>@​aws-sdk/client-cloudformation</code></p>
<h1><a
href="https://github.com/aws/aws-sdk-js-v3/compare/v3.987.0...v3.988.0">3.988.0</a>
(2026-02-11)</h1>
<p><strong>Note:</strong> Version bump only for package
<code>@​aws-sdk/client-cloudformation</code></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/aws/aws-sdk-js-v3/commit/92253a3a6463bf96a0729b1223c37b3336c0989a"><code>92253a3</code></a>
Publish v3.989.0</li>
<li><a
href="https://github.com/aws/aws-sdk-js-v3/commit/223d2fbb5cecd43edfe1a3fde2b5460974e325eb"><code>223d2fb</code></a>
Publish v3.988.0</li>
<li><a
href="https://github.com/aws/aws-sdk-js-v3/commit/d20ea16f8069517b7dc02c62f39afea11423f061"><code>d20ea16</code></a>
chore(codegen): update for compositeErrorRegistries (<a
href="https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-cloudformation/issues/7728">#7728</a>)</li>
<li>See full diff in <a
href="https://github.com/aws/aws-sdk-js-v3/commits/v3.989.0/clients/client-cloudformation">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=@aws-sdk/client-cloudformation&package-manager=npm_and_yarn&previous-version=3.987.0&new-version=3.989.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: anthony-nhs <121869075+anthony-nhs@users.noreply.github.com>
Co-authored-by: Anthony Brown <anthony.brown8@nhs.net>

Author: dependabot[bot]

.pre-commit-config.yaml

@@ -1,6 +1,6 @@
 repos:
   - repo: https://github.com/pre-commit/pre-commit-hooks
-    rev: v4.4.0
+    rev: v6.0.0
     hooks:
       - id: check-merge-conflict
         name: Check for merge conflict strings

.trivyignore.yaml

@@ -41,3 +41,12 @@ vulnerabilities:
   - id: CVE-2025-68121
     statement: downstream dependency for asdf/go - waiting for new asdf release
     expired_at: 2026-06-01
+  - id: CVE-2026-26278
+    statement: fast-xml-parser node module
+    expired_at: 2026-06-01
+  - id: CVE-2026-26996
+    statement: minimatch node module
+    expired_at: 2026-06-01
+  - id: CVE-2026-26960
+    statement: tar node module
+    expired_at: 2026-06-01