[dependabot]

Bumps aws/aws-sdk-php from 3.398.3 to 3.402.0.

Release notes

Sourced from aws/aws-sdk-php's releases.

Version 3.402.0

• Aws\ - Updates the minimum required PHP version to 8.2, following the disclosure of CVE-2026-109618 and CVE-2026-109619.
• Aws\IVSRealTime - Adds RevokeConnectionToken operation for Amazon IVS Real-Time Streaming.
• Aws\Lambda - AWS Lambda durable functions now supports payloads up to 1 MB for checkpoints, callback completion, and error details.
• Aws\KafkaConnect - Amazon MSK Connect now supports pausing and resuming connectors via the asynchronous PauseConnector and ResumeConnector APIs. Paused connectors keep their configuration and committed offsets and resume where they left off. Each call returns an operation ARN to track with DescribeConnectorOperation.
• Aws\Glue - Add support for large worker types in AWS Glue
• Aws\ElementalInference - Elemental Inference now supports feed scheduling, letting you apply feed configuration changes at a time you choose instead of building your own automation.
• Aws\BedrockAgentCoreControl - Adds model-based routing and fallback to AgentCore Gateway rules. Rules can match the requested model, route to a specific model, and fall back across inference targets with an optional circuit breaker. Adds multi-dimensional rating scales for AgentCore Evaluations LLM-as-a-Judge evaluators.
• Aws\NetworkManager - AWS Cloud WAN now provides managed one-to-one NAT directly on it's core network attachments, through integration with Regional Private NAT Gateway. Use UpdateAttachmentNatConfiguration to enable NAT and configure NAT rules, and ListAttachmentNatConfigurations to view them.
• Aws\BedrockAgentCore - Adds the dimension name to evaluation results and batch evaluation summaries. For multi-dimensional LLM-as-a-Judge evaluators, each result and summary now identifies which dimension it corresponds to.
• Aws\EC2 - AWS Transit Gateway now provides managed one-to-one NAT directly on its attachments, through integration with Regional Private NAT Gateway. Use ModifyTransitGatewayAttachmentNatConfiguration to enable NAT and configure NAT rules, and GetTransitGatewayAttachmentNatConfiguration to view them.
• Aws\Connect - Adds support for customer queryable replication errors.
• Aws\Continuum - Releasing Continuum for Code Vulnerabilities APIs for SDKs
• Aws\OpenSearchServerless - Adds APIs to create, get, list, and cancel ingestion jobs, and to create, get, list, and delete ingestion streams, for ingesting data from Amazon S3 into OpenSearch Serverless collections.

Version 3.401.5

• Aws\ - Removes the FinSpace and FinSpaceData clients, which are no longer in service.
• Aws\MediaConvert - Adds AV1 CBR rate control and scene change detection. New sliding window peak bitrate setting for all codecs. DASH adaptation set grouping update. Option to disable the AV1 perceptual quality filter. Support for vertical (portrait) AV1 encoding.
• Aws\DevOpsAgent - Adds support for Microsoft Teams as a notification service. Associations can now be created and updated with a Microsoft Teams team and channel configuration using the DevOps Agent API and SDKs.
• Aws\RedshiftDataAPIService - Add Redshift QueryUUID field to DescribeStatement response
• Aws\LexModelsV2 - Adds support for Assisted NLU - Dialog Manager mode allowing usage of LLMs as the default NLU system and dialog management
• Aws\AutoScaling - EC2 Auto Scaling now supports account settings, letting you manage account-level configuration for Auto Scaling.
• Aws\Connect - Added support for AWS-managed security profiles.
• Aws\Polly - Added support for the new voices - Kenneth (en-US), Nate (en-US), Tina (de-DE), Carlos (es-US), Carolina (pt-BR), Leo (pt-BR), Curtis (en-AU), Kiara (en-IN), Arjun (en-IN) and Hyunduk (ko-KR). They are available as a Generative voices only.
• Aws\HealthLake - Update the UpdateProfileWithAgent API to return a streaming response to provide more frequent updates on what the agent is doing.
• Aws\Lightsail - This release adds support for metrics related to system-disk performance.
• Aws\EC2 - Adds new response fields to DescribeInstanceStatus and Network Insights analysis results.
• Aws\DataZone - Added custom designations support with new CRUD APIs. The designation field in project membership and policy grant APIs supports a new enum for custom designations. These APIs also support a new field for custom designation id.
• Aws\NetworkFirewall - Adds support for Network Firewall Resolved IP validation.
• Aws\SFN - Release minor updates to API model
• Aws\QuickSight - Adds support for SharePoint and OneDrive two-legged OAuth certificate credentials and Google Workspace service account credentials when creating data sources

Version 3.401.4

• Aws\ - Removes Tnb client, which is no longer in service.
• Aws\MarketplaceCatalog - Adds ListEntities filter, sort, and summary support for the ExpressPrivateOfferConfiguration entity type, including filtering by ProductId.
• Aws\ElastiCache - LiveMigration enables customers to migrate from self-hosted EC2 Redis and Valkey clusters to ElastiCache Serverless with near-zero downtime. Customers control the migration through three API-driven phases (prepare, start, complete) that handle traffic proxying, data replication, and cutover.
• Aws\WorkspacesInstances - Documentation update release for AWS service
• Aws\CleanRooms - This release allows customers and their partners to easily collaborate with data stored in Databricks, without having to move or share their underlying data among collaborators.
• Aws\S3Files - S3 Files adds support for the "Misconfigured" file system status.
• Aws\ECS - ECS Service Gateway makes it easier for developers to deploy ECS services without having to worry about complex ingress networking constructs.
• Aws\Bedrock - Amazon Bedrock Guardrails now supports a configurable tier for the contextual grounding policy via a new tier option. Select the Standard tier for grounding that better supports conversations and reasoning, with expanded language coverage.
• Aws\DynamoDB - Adds support for disassociating a replica from an Amazon DynamoDB multi-Region eventual consistency global table, so you can keep it as a single-Region table with its existing data. Also adds disassociation protection, on by default, to help prevent accidental disassociation.
• Aws\CloudWatch - Amazon CloudWatch now supports two new anomaly detector settings. AdaptationSpeed (FAST, NORMAL, SLOW) controls how fast the model adapts to baseline changes, and OutlierFilteringStrength (MINIMAL, MODERATE, STRICT) controls how aggressively outliers are filtered.
• Aws\RDS - Amazon RDS now supports On-Demand Capacity Reservations for DB instances.
• Aws\CloudWatchOmni - Updating max value for maxResults in SearchPrincipals API

Version 3.401.3

• Aws\EndpointV2 - EndpointDefinitionProvider now rejects service names and api versions that are not a single safe path segment, preventing path traversal through the version or service client options.
• Aws\IoTWireless - Documentation update release for AWS service
• Aws\WorkspacesInstances - ModifyVolume is a new public API for WorkSpaces Core Managed Instances. Customers can change the size, type, IOPS, or throughput of an existing managed volume online, with no stop required. Customers track progress by calling EC2 DescribeVolumesModifications directly.

... (truncated)

Commits

• 661f6a5 3.402.0 release
• fa234f9 Update models for release
• 530dbc1 bump runtime floors, remove 8.1 (#3384)
• 4d30466 3.401.5 release
• 65bebb1 Update models for release
• 729f0e5 remove finspace and finspace-data (#3380)
• b5941e2 3.401.4 release
• 68c9b38 Update models for release
• 11e950f remove Tnb (#3381)
• 7b8541e 3.401.3 release
• Additional commits viewable in compare view

You can trigger a rebase of this PR by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)