Skip to content

build(deps): bump the npm_and_yarn group with 2 updates - #393

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm_and_yarn-d850621a83
Closed

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm_and_yarn-d850621a83

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 21, 2026

Copy link
Copy Markdown
Contributor

Bumps the npm_and_yarn group with 2 updates: turbo and @aws-sdk/client-s3.

Updates turbo from 2.10.13 to 2.11.2

Release notes

Sourced from turbo's releases.

Turborepo v2.11.2

What's Changed

Changelog

Full Changelog: vercel/turborepo@v2.11.1...v2.11.2

Turborepo v2.11.1

What's Changed

Changelog

Full Changelog: vercel/turborepo@v2.11.0...v2.11.1

Turborepo v2.11.0

What's Changed

Changelog

... (truncated)

Commits

Updates @aws-sdk/client-s3 from 3.1133.0 to 3.1136.0

Release notes

Sourced from @​aws-sdk/client-s3's releases.

v3.1136.0

3.1136.0(2026-09-18)

New Features
  • client-datazone: Adds support for specifying Notebook type (dfe90a44)
  • client-sagemaker: Adds support for the hub content resource in SageMaker Search. (5733f294)
  • client-glue: Introducing AWS Glue Data Quality advanced rule recommendations for faster recommendations. This capability uses Amazon Athena to analyze a sample of table data and Amazon Bedrock to recommend DQDL rules. (984a8422)
  • client-ec2: This release adds documentation for the T8i instance family to the EC2 ModifyDefaultCreditSpecification and GetDefaultCreditSpecification APIs. (27cc9e36)
  • client-appintegrations: This release adds support for A2A servers via the ApplicationType and AuthConfig fields, allowing customers to register their agent-to-agent servers with API key authentication. (6be76cb1)
  • client-transcribe: Amazon Transcribe now lets you encrypt your custom vocabularies, custom vocabulary filters, and custom language models with a customer managed AWS KMS key instead of an AWS owned key, and adds a new UpdateLanguageModel operation to transition CLM encryption to a different KMS key. (22124b1c)
  • client-qconnect: Amazon Connect AI Agents now support multi-agent orchestration and structured JSON input and output messaging for orchestration agents. (299b4e03)
  • client-connect: This release adds the ListSecurityProfileAIAgents API and updates the CreateSecurityProfile and UpdateSecurityProfile APIs to support the AllowedAIAgents field on security profiles, allowing customers to manage the 3P AI agents associated with a security profile for Agent-to-Agent interactions. (2c765d8d)
  • client-ivs-realtime: GetParticipant, ListParticipantEvents, ListParticipantReplicas, StartParticipantReplication, and StopParticipantReplication now accept participant IDs containing underscores. (dc23e6f2)
Tests
  • undici-http-handler: skip invokeModelWithBidirectionalStream test (#8309) (82637a1c)

For list of updated packages, view updated-packages.md in assets-3.1136.0.zip

v3.1135.0

3.1135.0(2026-09-17)

Documentation Changes
  • client-sns: SNS API reference documentation update (0e22e2d7)
New Features
  • client-connect: Made the replicaAlias attribute optional in the ReplicateInstance API to support Global routing for Amazon Connect Global Resiliency (ACGR) instances. This change maintains backward compatibility. When onboarding to ACGR without Global routing, you must specify a custom replicaAlias in your API call (f134c352)
  • client-ec2: Adding support for "Tunnel" VPC Endpoint (cb7c9bc5)
  • client-notifications: Added support for attachments on managed notification events. Added support to access and subscribe sensitive managed notification events. (c8a9cc10)
  • client-guardduty: This change surfaces AI Protection resources on existing public IAM attack sequences. Customers will now see which model was accessed and whether a guardrail intervened as part of the credential-compromise sequence. (854ccbfa)
  • client-sesv2: Added support to query the tenant name for BatchGetMetricData and CreateExportJob APIs to filter metrics and messages at the tenant level. (3beafcbc)
  • client-iot-wireless: Adds Multi-frame GNSS support to the AWS IoT Core Device Location GetPositionEstimate API. The new GnssMultiFrame measurement type improves location accuracy by combining multiple GNSS signal captures (2, 4, 8, 16, or 32) from the same device to estimate its position. (294ad0a3)
  • client-vpc-lattice: Adding support for CIDR Resource Configuration (46656caf)
  • client-socialmessaging: Add support for WhatsApp Calling APIs. (b897c28f)
  • client-bedrock-agentcore: Batch evaluation now supports evaluating specific traces within a session. Each session can specify up to 100 trace IDs to evaluate. (fac9ee4c)

For list of updated packages, view updated-packages.md in assets-3.1135.0.zip

v3.1134.0

3.1134.0(2026-09-16)

... (truncated)

Changelog

Sourced from @​aws-sdk/client-s3's changelog.

3.1136.0 (2026-09-18)

Note: Version bump only for package @​aws-sdk/client-s3

3.1135.0 (2026-09-17)

Note: Version bump only for package @​aws-sdk/client-s3

3.1134.0 (2026-09-16)

Note: Version bump only for package @​aws-sdk/client-s3

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the npm_and_yarn group with 2 updates: [turbo](https://github.com/vercel/turborepo) and [@aws-sdk/client-s3](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-s3).


Updates `turbo` from 2.10.13 to 2.11.2
- [Release notes](https://github.com/vercel/turborepo/releases)
- [Changelog](https://github.com/vercel/turborepo/blob/main/RELEASE.md)
- [Commits](vercel/turborepo@v2.10.13...v2.11.2)

Updates `@aws-sdk/client-s3` from 3.1133.0 to 3.1136.0
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases)
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-s3/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1136.0/clients/client-s3)

---
updated-dependencies:
- dependency-name: turbo
  dependency-version: 2.11.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm_and_yarn
- dependency-name: "@aws-sdk/client-s3"
  dependency-version: 3.1136.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 21, 2026
@github-actions
github-actions Bot enabled auto-merge (squash) September 21, 2026 23:46
@github-actions

Copy link
Copy Markdown

🤖 Auto-merge enabled (minor update). GitHub will squash-merge this automatically once the required CI checks pass.

@dependabot @github

dependabot Bot commented on behalf of github Sep 22, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Sep 22, 2026
auto-merge was automatically disabled September 22, 2026 23:45

Pull request was closed

@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/npm_and_yarn-d850621a83 branch September 22, 2026 23:45
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants