Bump @aws-sdk/credential-providers from 3.1120.0 to 3.1149.0

[dependabot]

Bumps @aws-sdk/credential-providers from 3.1120.0 to 3.1149.0.

Release notes

Sourced from @​aws-sdk/credential-providers's releases.

v3.1149.0

3.1149.0(2026-10-09)

Chores

• codegen: sync for endpoint cache fix and pre-schema error fallback (#8341) (5773a751)

New Features

• client-quicksight: Adds granular custom permissions for the Gong action connector (GongAction, CreateAndUpdateGongAction, ShareGongAction, UseGongAction) and for create, update, and share operations on 45 data source connectors, such as Amazon S3 and Snowflake, through the Custom Permissions APIs. (c5d26e39)
• client-deadline: The new ListMemberships API enables users to discover their memberships across Deadline Cloud resources, enabling scoped users of Deadline resources to discover and interact with the resources they have been provided scoped access to. (0d7406c7)
• client-marketplace-metering: AWS Marketplace Metering Service adds AgreementId to ResolveCustomer API response. (9653f5cc)
• client-mediatailor: Add caching settings to http functions (7ac7530b)
• client-securityagent: Adds a test scope field to specify whether a pentest targets a web application or a generative AI application. (1cc5ba6a)

Bug Fixes

• lib-transfer-manager:
  • retry UploadPart on worker-thread upload path (#8345) (0e357d90)
  • avoid full-body copy for SharedArrayBuffer uploads (#8338) (5473caf9)

---

For list of updated packages, view updated-packages.md in assets-3.1149.0.zip

v3.1148.0

3.1148.0(2026-10-08)

Documentation Changes

• client-sesv2: SESV2 DEED - Documentation Update (3d227df4)

New Features

• client-pi: This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.1. The SDK will prioritize its most performant protocol. (1d99c7c8)
• client-marketplace-agreement: This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.0. The SDK will prioritize its most performant protocol. (404943ce)
• client-emr-serverless: This release adds support for system profile logs for lakeformation enabled Spark connect sessions . (f9ed2f83)
• client-cost-explorer: Adds a product attribute dimension to GetCostAndUsage, GetCostAndUsageWithResources, and GetDimensionValues, letting customers group, filter, and discover Cost Explorer costs by structured attributes such as Amazon Bedrock model, provider, inference type, and feature. (7e0afd11)
• client-guardduty: Added support for GuardDuty RDS Data Activity Monitoring (aa200020)
• client-gamelift: Amazon GameLift Servers container fleets now support CPU bursting for game server container groups. The TotalVcpuLimit property of a game server container group definition is now optional. When you omit it, the group has no CPU cap and its containers can burst into unused CPU on the instance. (18121840)
• client-datazone: Adds support for multi-file notebook import. StartNotebookImport now accepts an s3Files source location with an ordered list of Amazon S3 objects, creating one notebook cell per file, plus a type field to create either a DATA or SQL notebook. (37214f3f)
• client-devops-agent: Adds release management associations with private network access to AWS DevOps Agent, and a releaseManagementAssociationId field on GitHub and GitLab associations. This helps release management agents (Release-readiness review and Release Testing) access customer resources that are behind a VPC. (55b389d1)
• client-security-ir: Adds support for retrieving finding-lifecycle metrics for an AWS Security Incident Response membership. (f4f6dfe5)
• client-cloudformation: CloudFormation introduces force rollback, a new opt-in capability that lets your stacks complete a rollback even when an individual resource cannot be reverted. Set ForceRollback on ContinueUpdateRollback and CloudFormation records each resource that fails as skipped, completing the rollback. (07e146a5)
• client-opensearch: This release adds a new EncryptionMode option (DISK or NATIVE) to EncryptionAtRestOptions for the CreateDomain and UpdateDomainConfig operations, enabling selection of engine-native index-level encryption on supported Amazon OpenSearch Service domains. (393fb011)
• client-lambda: AWS Lambda now supports OAuth 2.0 (OAUTHBEARER), IAM, and IAM with OAUTHBEARER authentication for self-managed Apache Kafka event source mappings, including optional OAuth scope, audience, logical cluster, and identity pool parameters. OAuth 2.0 is also available for Confluent Schema Registry. (c7696bfa)
• client-securityhub: Release findings export APIs - StartExportJobV2, GetExportJobV2, ListExportJobsV2, and CancelExportJobV2. This supports exporting findings from AWS Security Hub to Amazon S3 bucket. (f53e8a2a)
• client-medialive: AWS Elemental MediaLive Workflow Monitor now supports AWS Elemental Inference feeds as a target resource type for CloudWatch alarm templates. (e335e5dc)
• client-eks: Configurations support for EKS ACK Capabilities, including EnableCrossNamespace and DisableServices configuration. (82f87e7c)

... (truncated)

Changelog

Sourced from @​aws-sdk/credential-providers's changelog.

3.1149.0 (2026-10-09)

Note: Version bump only for package @​aws-sdk/credential-providers

3.1148.0 (2026-10-08)

Note: Version bump only for package @​aws-sdk/credential-providers

3.1147.0 (2026-10-06)

Note: Version bump only for package @​aws-sdk/credential-providers

3.1146.0 (2026-10-02)

Note: Version bump only for package @​aws-sdk/credential-providers

3.1145.0 (2026-10-01)

Note: Version bump only for package @​aws-sdk/credential-providers

3.1144.0 (2026-09-30)

Note: Version bump only for package @​aws-sdk/credential-providers

3.1143.0 (2026-09-29)

... (truncated)

Commits

• a960c14 Publish v3.1149.0
• 5773a75 chore(codegen): sync for endpoint cache fix and pre-schema error fallback (#8...
• 1bc0425 Publish v3.1148.0
• 663046d Publish v3.1147.0
• 054298b Publish v3.1146.0
• 0199117 Publish v3.1145.0
• ce26281 Publish v3.1144.0
• 81afad0 Publish v3.1143.0
• c935fdd Publish v3.1142.0
• 5bc8d9a Publish v3.1141.0
• Additional commits viewable in compare view

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

• Configuration used: Organization UI
• Review profile: CHILL
• Plan: Advanced
• Run ID: 412865c1-d532-4bc6-8b21-81b499b60483

📥 Commits

Reviewing files that changed from the base of the PR and between 1f32f28 and 0d15c6a.

⛔ Files ignored due to path filters (1)

• pnpm-lock.yaml is excluded by !**/pnpm-lock.yaml

📒 Files selected for processing (1)

• package.json

Included review availability: This review used your included allowance. Your plan provides up to 10 included reviews per hour; 9 remain after this review.

📝 Walkthrough

The @aws-sdk/credential-providers dependency range in package.json changed from ^3.1120.0 to ^3.1149.0.

Changes: AWS Credential Provider Update

Layer / File(s)	Summary
Update the credential provider dependency package.json	The dependency range for @aws-sdk/credential-providers changed from ^3.1120.0 to ^3.1149.0.

Priority: ⬇️ Low

Estimated code review effort: 1 (Trivial) | ~5 minutes

Change: Other

Suggested reviewers: dahlia

Merge Risk: ⚪ Minimal · up to 0d15c

The S3 storage path continues to obtain credentials from the expected environment variables, with its configuration unchanged. No actionable merge-blocking risk is evident.

### Architecture Summary

Architecture risk: 🔵 Low · up to 0d15c

The change affects 1 system.

Changed systems: package.json

Architecture concerns
No architecture-level concerns identified.

Review details

Systems and components

• observed — package.json (service) was modified; 1 changed file maps to changed impact.

Before / after behavior

• observed — Modified behavior in package.json: Updated the @aws-sdk/credential-providers dependency version range from ^3.1120.0 to ^3.1149.0.

Pre-merge checks · 5

Passed checks (5 passed)

Check name	Status	Explanation
Title check		The title clearly and concisely describes the dependency version update in the pull request.
Description check		The description explains the dependency update and includes relevant release notes and changelog context.
Docstring Coverage		No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…
Linked Issues check		Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check		Check skipped because no linked issues were found for this pull request.

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

_{Comment @coderabbitai help to get the list of available commands.}