chore(deps): update all dependencies (#1300)

This PR contains the following updates:

| Package | Type | Update | Change | Age | Confidence |
|---|---|---|---|---|---|
| [aws](https://registry.terraform.io/providers/hashicorp/aws)
([source](https://redirect.github.com/hashicorp/terraform-provider-aws))
| required_provider | minor | `6.3.0` -> `6.4.0` |
[![age](https://developer.mend.io/api/mc/badges/age/terraform-provider/hashicorp%2faws/6.4.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/terraform-provider/hashicorp%2faws/6.3.0/6.4.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
| [boto3](https://redirect.github.com/boto/boto3) | | patch | `==1.39.4`
-> `==1.39.9` |
[![age](https://developer.mend.io/api/mc/badges/age/pypi/boto3/1.39.9?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/pypi/boto3/1.39.4/1.39.9?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
| [botocore](https://redirect.github.com/boto/botocore) | | patch |
`==1.39.4` -> `==1.39.9` |
[![age](https://developer.mend.io/api/mc/badges/age/pypi/botocore/1.39.9?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/pypi/botocore/1.39.4/1.39.9?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|

---

### Release Notes

<details>
<summary>hashicorp/terraform-provider-aws (aws)</summary>

###
[`v6.4.0`](https://redirect.github.com/hashicorp/terraform-provider-aws/blob/HEAD/CHANGELOG.md#640-July-17-2025)

[Compare
Source](https://redirect.github.com/hashicorp/terraform-provider-aws/compare/v6.3.0...v6.4.0)

FEATURES:

- **New Data Source:** `aws_s3_access_point`
([#&#8203;43391](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/43391))
- **New Resource:** `aws_bedrockagent_flow`
([#&#8203;42201](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/42201))
- **New Resource:** `aws_fsx_s3_access_point_attachment`
([#&#8203;43391](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/43391))

ENHANCEMENTS:

- data-source/aws\_bedrock\_inference\_profiles: Add `type` argument
([#&#8203;43150](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/43150))
- data-source/aws\_lakeformation\_resource: Support
`hybrid_access_enabled`, `with_federation` and `with_privileged_access`
attributes
([#&#8203;43377](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/43377))
- resource/aws\_acm\_certificate: Support `options.export` argument to
issue an exportable certificate
([#&#8203;43207](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/43207))
- resource/aws\_cloudwatch\_log\_metric\_filter: Add
`apply_on_transformed_logs` argument
([#&#8203;43381](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/43381))
- resource/aws\_datasync\_location\_object\_storage: Make `agent_arns`
optional
([#&#8203;43400](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/43400))
- resource/aws\_ecs\_service: Add `deployment_configuration` argument
([#&#8203;43434](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/43434))
- resource/aws\_ecs\_service: Add `load_balancer.advanced_configuration`
argument
([#&#8203;43434](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/43434))
- resource/aws\_ecs\_service: Add
`service.client_alias.test_traffic_rules` argument
([#&#8203;43434](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/43434))
- resource/aws\_ecs\_service: `deployment_controller.type` changes no
longer force a replacement
([#&#8203;43434](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/43434))
- resource/aws\_lakeformation\_resource: Support
`with_privileged_access` argument
([#&#8203;43377](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/43377))
- resource/aws\_s3\_bucket\_public\_access\_block: Add `skip_destroy`
argument
([#&#8203;43415](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/43415))

BUG FIXES:

- resource/aws\_bedrockagent\_agent\_action\_group: Correctly set
`parent_action_group_signature` on Read
([#&#8203;43355](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/43355))
- resource/aws\_datazone\_environment\_blueprint\_configuration: Fix
`Inappropriate value for attribute "regional_parameters"` errors during
planning. This fixes a regression introduced in
[v6.0.0](https://redirect.github.com/hashicorp/terraform-provider-aws/blob/main/CHANGELOG.md#600-june-18-2025)
([#&#8203;43382](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/43382))
- resource/aws\_ec2\_transit\_gateway\_route\_table\_propagation: Don't
mark `transit_gateway_attachment_id` as
[ForceNew](https://developer.hashicorp.com/terraform/plugin/sdkv2/schemas/schema-behaviors#forcenew)
if the value is known not to change
([#&#8203;43405](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/43405))
- resource/aws\_lambda\_function: Fix `waiting for Lambda Function (...)
version publish: unexpected state '', wanted target 'Successful'` errors
on Update. This fixes a regression introduced in
[v6.2.0](https://redirect.github.com/hashicorp/terraform-provider-aws/blob/main/CHANGELOG.md#620-july--2-2025)
([#&#8203;43416](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/43416))
- resource/aws\_lexv2models\_slot: Fix error when
`sub_slot_setting.slot_specification.value_elicitation_setting.prompt_specification.prompt_attempts_specification`
and
`value_elicitation_setting.prompt_specification.prompt_attempts_specification`
have default values
([#&#8203;43358](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/43358))
- resource/aws\_securitylake\_data\_lake: Allow `meta_store_role_arn` to
be updated in-place
([#&#8203;36874](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/36874))

</details>

<details>
<summary>boto/boto3 (boto3)</summary>

###
[`v1.39.9`](https://redirect.github.com/boto/boto3/blob/HEAD/CHANGELOG.rst#1399)

[Compare
Source](https://redirect.github.com/boto/boto3/compare/1.39.8...1.39.9)

\======

- api-change:`auditmanager`: \[`botocore`] Updated error handling for
RegisterOrganizationAdminAccount API to properly translate
TooManyExceptions to HTTP 429 status code. This enhancement improves
error handling consistency and provides clearer feedback when request
limits are exceeded.
- api-change:`logs`: \[`botocore`] CloudWatchLogs launches GetLogObject
API with streaming support for efficient log data retrieval. Logs added
support for new AccountPolicy type METRIC\_EXTRACTION\_POLICY. For more
information, see CloudWatch Logs API documentation
- api-change:`mediaconvert`: \[`botocore`] This release adds support for
TAMS server integration with MediaConvert inputs.
- api-change:`outposts`: \[`botocore`] Add AWS Outposts API to surface
customer billing information
- api-change:`sesv2`: \[`botocore`] Added IP Visibility support for
managed dedicated pools. Enhanced GetDedicatedIp and GetDedicatedIps
APIs to return managed IP addresses.
- api-change:`ssm`: \[`botocore`] July 2025 doc-only updates for Systems
Manager.
- enhancement:Python: Added provisional support for the upcoming Python
3.14 release
- enhancement:Python: \[`botocore`] Added provisional support for the
upcoming Python 3.14 release

###
[`v1.39.8`](https://redirect.github.com/boto/boto3/blob/HEAD/CHANGELOG.rst#1398)

[Compare
Source](https://redirect.github.com/boto/boto3/compare/1.39.7...1.39.8)

\======

- api-change:`cleanroomsml`: \[`botocore`] This release introduces
Parquet result format support for ML Input Channel models in AWS Clean
Rooms ML.
- api-change:`cloudfront`: \[`botocore`] Doc only update for CloudFront
that fixes some customer-reported issues
- api-change:`ec2`: \[`botocore`] AWS Free Tier Version2 Support
- api-change:`keyspacesstreams`: \[`botocore`] Doc only update for the
Amazon Keyspaces Streams API.
- api-change:`mailmanager`: \[`botocore`] Allow underscores in the local
part of the input of the "Email recipients rewrite" action in rule sets.
- api-change:`mediaconvert`: \[`botocore`] This release expands the
range of supported audio outputs to include xHE, 192khz FLAC and the
deprecation of dual mono for AC3.
- api-change:`stepfunctions`: \[`botocore`] Align input with style
guidelines.
- api-change:`synthetics`: \[`botocore`] This feature allows AWS
Synthetics customers to provide code dependencies using lambda layer
while creating a canary

###
[`v1.39.7`](https://redirect.github.com/boto/boto3/blob/HEAD/CHANGELOG.rst#1397)

[Compare
Source](https://redirect.github.com/boto/boto3/compare/1.39.6...1.39.7)

\======

- api-change:`bedrock`: \[`botocore`] This release adds support for
on-demand custom model inference through CustomModelDeployment APIs for
Amazon Bedrock.
- api-change:`bedrock-agentcore`: \[`botocore`] Initial release of
Amazon Bedrock AgentCore SDK including Runtime, Built-In Tools, Memory,
Gateway and Identity.
- api-change:`bedrock-agentcore-control`: \[`botocore`] Initial release
of Amazon Bedrock AgentCore SDK including Runtime, Built-In Tools,
Memory, Gateway and Identity.
- api-change:`bedrock-runtime`: \[`botocore`] document update to support
on demand custom model.
- api-change:`datasync`: \[`botocore`] AWS DataSync now supports IPv6
address inputs and outputs in create, update, and describe operations
for NFS, SMB, and Object Storage locations
- api-change:`glue`: \[`botocore`] AWS Glue now supports schema,
partition and sort management of Apache Iceberg tables using Glue SDK
- api-change:`guardduty`: \[`botocore`] Add expectedBucketOwner
parameter to ThreatIntel and IPSet APIs.
- api-change:`iotwireless`: \[`botocore`] FuotaTaskId is not a valid
IdentifierType for EventConfiguration and is being removed from possible
IdentifierType values.
- api-change:`logs`: \[`botocore`] CloudWatch Logs updates: Added X-Ray
tracing for Amazon Bedrock Agent resources. Logs introduced Log Group
level resource policies (managed through Put/Delete/Describe Resource
Policy APIs). For more information, see CloudWatch Logs API
documentation.
- api-change:`mediapackagev2`: \[`botocore`] This release adds support
for CDN Authentication using Static Headers in MediaPackage v2.
- api-change:`networkflowmonitor`: \[`botocore`] Introducing 2 new scope
status types - DEACTIVATING and DEACTIVATED.
- api-change:`payment-cryptography-data`: \[`botocore`] Expand length of
message data field for Mac generation and validation to 8192 characters.
- api-change:`stepfunctions`: \[`botocore`] Doc-only update to
introduction, and edits to clarify input parameter and the set of
control characters.

###
[`v1.39.6`](https://redirect.github.com/boto/boto3/blob/HEAD/CHANGELOG.rst#1396)

[Compare
Source](https://redirect.github.com/boto/boto3/compare/1.39.5...1.39.6)

\======

- api-change:`ecs`: \[`botocore`] This release removes hookDetails for
the Amazon ECS native blue/green deployments.

###
[`v1.39.5`](https://redirect.github.com/boto/boto3/blob/HEAD/CHANGELOG.rst#1395)

[Compare
Source](https://redirect.github.com/boto/boto3/compare/1.39.4...1.39.5)

\======

- api-change:`bedrock-agent`: \[`botocore`] Add support for S3 Vectors
as a vector store.
- api-change:`datazone`: \[`botocore`] Removing restriction of
environment profile identifier as required field, S3 feature release
- api-change:`dynamodbstreams`: \[`botocore`] Added support for optional
shard filter parameter in DescribeStream api that allows customers to
fetch child shards of a read\_only parent shard.
- api-change:`ec2`: \[`botocore`] This release adds support for volume
initialization status, which enables you to monitor when the
initialization process for an EBS volume is completed. This release also
adds IPv6 support to EC2 Instance Connect Endpoints, allowing you to
connect to your EC2 Instance via a private IPv6 address.
- api-change:`ecs`: \[`botocore`] Amazon ECS supports native blue/green
deployments, allowing you to validate new service revisions before
directing production traffic to them.
- api-change:`events`: \[`botocore`] Add customer-facing logging for the
EventBridge Event Bus, enabling customers to better observe their events
and extract insights about their EventBridge usage.
- api-change:`opensearch`: \[`botocore`] AWS Opensearch adds support for
enabling s3 vector engine options. After enabling this option, customers
will be able to create indices with s3 vector engine.
- api-change:`pricing`: \[`botocore`] This release adds support for new
filter types in GetProducts API, including EQUALS, CONTAINS, ANY\_OF,
and NONE\_OF.
- api-change:`quicksight`: \[`botocore`] Introduced custom instructions
for topics.
- api-change:`repostspace`: \[`botocore`] This release introduces
Channels functionality with CreateChannel, GetChannel, ListChannels, and
UpdateChannel operations. Channels provide dedicated collaboration
spaces where teams can organize discussions and knowledge by projects,
business units, or areas of responsibility.
- api-change:`s3`: \[`botocore`] Amazon S3 Metadata live inventory
tables provide a queryable inventory of all the objects in your general
purpose bucket so that you can determine the latest state of your data.
To help minimize your storage costs, use journal table record expiration
to set a retention period for your records.
- api-change:`s3tables`: \[`botocore`] Adds table bucket type to
ListTableBucket and GetTableBucket API operations
- api-change:`s3vectors`: \[`botocore`] Amazon S3 Vectors provides
cost-effective, elastic, and durable vector storage for queries based on
semantic meaning and similarity.
- api-change:`sagemaker`: \[`botocore`] This release adds support for a
new Restricted instance group type to enable a specialized environment
for running Nova customization jobs on SageMaker HyperPod clusters. This
release also adds support for SageMaker pipeline versioning.

</details>

<details>
<summary>boto/botocore (botocore)</summary>

###
[`v1.39.9`](https://redirect.github.com/boto/botocore/blob/HEAD/CHANGELOG.rst#1399)

[Compare
Source](https://redirect.github.com/boto/botocore/compare/1.39.8...1.39.9)

\======

- api-change:`auditmanager`: Updated error handling for
RegisterOrganizationAdminAccount API to properly translate
TooManyExceptions to HTTP 429 status code. This enhancement improves
error handling consistency and provides clearer feedback when request
limits are exceeded.
- api-change:`logs`: CloudWatchLogs launches GetLogObject API with
streaming support for efficient log data retrieval. Logs added support
for new AccountPolicy type METRIC\_EXTRACTION\_POLICY. For more
information, see CloudWatch Logs API documentation
- api-change:`mediaconvert`: This release adds support for TAMS server
integration with MediaConvert inputs.
- api-change:`outposts`: Add AWS Outposts API to surface customer
billing information
- api-change:`sesv2`: Added IP Visibility support for managed dedicated
pools. Enhanced GetDedicatedIp and GetDedicatedIps APIs to return
managed IP addresses.
- api-change:`ssm`: July 2025 doc-only updates for Systems Manager.
- enhancement:Python: Added provisional support for the upcoming Python
3.14 release

###
[`v1.39.8`](https://redirect.github.com/boto/botocore/blob/HEAD/CHANGELOG.rst#1398)

[Compare
Source](https://redirect.github.com/boto/botocore/compare/1.39.7...1.39.8)

\======

- api-change:`cleanroomsml`: This release introduces Parquet result
format support for ML Input Channel models in AWS Clean Rooms ML.
- api-change:`cloudfront`: Doc only update for CloudFront that fixes
some customer-reported issues
- api-change:`ec2`: AWS Free Tier Version2 Support
- api-change:`keyspacesstreams`: Doc only update for the Amazon
Keyspaces Streams API.
- api-change:`mailmanager`: Allow underscores in the local part of the
input of the "Email recipients rewrite" action in rule sets.
- api-change:`mediaconvert`: This release expands the range of supported
audio outputs to include xHE, 192khz FLAC and the deprecation of dual
mono for AC3.
- api-change:`stepfunctions`: Align input with style guidelines.
- api-change:`synthetics`: This feature allows AWS Synthetics customers
to provide code dependencies using lambda layer while creating a canary

###
[`v1.39.7`](https://redirect.github.com/boto/botocore/blob/HEAD/CHANGELOG.rst#1397)

[Compare
Source](https://redirect.github.com/boto/botocore/compare/1.39.6...1.39.7)

\======

- api-change:`bedrock`: This release adds support for on-demand custom
model inference through CustomModelDeployment APIs for Amazon Bedrock.
- api-change:`bedrock-agentcore`: Initial release of Amazon Bedrock
AgentCore SDK including Runtime, Built-In Tools, Memory, Gateway and
Identity.
- api-change:`bedrock-agentcore-control`: Initial release of Amazon
Bedrock AgentCore SDK including Runtime, Built-In Tools, Memory, Gateway
and Identity.
- api-change:`bedrock-runtime`: document update to support on demand
custom model.
- api-change:`datasync`: AWS DataSync now supports IPv6 address inputs
and outputs in create, update, and describe operations for NFS, SMB, and
Object Storage locations
- api-change:`glue`: AWS Glue now supports schema, partition and sort
management of Apache Iceberg tables using Glue SDK
- api-change:`guardduty`: Add expectedBucketOwner parameter to
ThreatIntel and IPSet APIs.
- api-change:`iotwireless`: FuotaTaskId is not a valid IdentifierType
for EventConfiguration and is being removed from possible IdentifierType
values.
- api-change:`logs`: CloudWatch Logs updates: Added X-Ray tracing for
Amazon Bedrock Agent resources. Logs introduced Log Group level resource
policies (managed through Put/Delete/Describe Resource Policy APIs). For
more information, see CloudWatch Logs API documentation.
- api-change:`mediapackagev2`: This release adds support for CDN
Authentication using Static Headers in MediaPackage v2.
- api-change:`networkflowmonitor`: Introducing 2 new scope status types
- DEACTIVATING and DEACTIVATED.
- api-change:`payment-cryptography-data`: Expand length of message data
field for Mac generation and validation to 8192 characters.
- api-change:`stepfunctions`: Doc-only update to introduction, and edits
to clarify input parameter and the set of control characters.

###
[`v1.39.6`](https://redirect.github.com/boto/botocore/blob/HEAD/CHANGELOG.rst#1396)

[Compare
Source](https://redirect.github.com/boto/botocore/compare/1.39.5...1.39.6)

\======

- api-change:`ecs`: This release removes hookDetails for the Amazon ECS
native blue/green deployments.

###
[`v1.39.5`](https://redirect.github.com/boto/botocore/blob/HEAD/CHANGELOG.rst#1395)

[Compare
Source](https://redirect.github.com/boto/botocore/compare/1.39.4...1.39.5)

\======

- api-change:`bedrock-agent`: Add support for S3 Vectors as a vector
store.
- api-change:`datazone`: Removing restriction of environment profile
identifier as required field, S3 feature release
- api-change:`dynamodbstreams`: Added support for optional shard filter
parameter in DescribeStream api that allows customers to fetch child
shards of a read\_only parent shard.
- api-change:`ec2`: This release adds support for volume initialization
status, which enables you to monitor when the initialization process for
an EBS volume is completed. This release also adds IPv6 support to EC2
Instance Connect Endpoints, allowing you to connect to your EC2 Instance
via a private IPv6 address.
- api-change:`ecs`: Amazon ECS supports native blue/green deployments,
allowing you to validate new service revisions before directing
production traffic to them.
- api-change:`events`: Add customer-facing logging for the EventBridge
Event Bus, enabling customers to better observe their events and extract
insights about their EventBridge usage.
- api-change:`opensearch`: AWS Opensearch adds support for enabling s3
vector engine options. After enabling this option, customers will be
able to create indices with s3 vector engine.
- api-change:`pricing`: This release adds support for new filter types
in GetProducts API, including EQUALS, CONTAINS, ANY\_OF, and NONE\_OF.
- api-change:`quicksight`: Introduced custom instructions for topics.
- api-change:`repostspace`: This release introduces Channels
functionality with CreateChannel, GetChannel, ListChannels, and
UpdateChannel operations. Channels provide dedicated collaboration
spaces where teams can organize discussions and knowledge by projects,
business units, or areas of responsibility.
- api-change:`s3`: Amazon S3 Metadata live inventory tables provide a
queryable inventory of all the objects in your general purpose bucket so
that you can determine the latest state of your data. To help minimize
your storage costs, use journal table record expiration to set a
retention period for your records.
- api-change:`s3tables`: Adds table bucket type to ListTableBucket and
GetTableBucket API operations
- api-change:`s3vectors`: Amazon S3 Vectors provides cost-effective,
elastic, and durable vector storage for queries based on semantic
meaning and similarity.
- api-change:`sagemaker`: This release adds support for a new Restricted
instance group type to enable a specialized environment for running Nova
customization jobs on SageMaker HyperPod clusters. This release also
adds support for SageMaker pipeline versioning.

</details>

---

### Configuration

📅 **Schedule**: Branch creation - Between 12:00 AM and 03:59 AM, only on
Monday ( * 0-3 * * 1 ) (UTC), Automerge - At any time (no schedule
defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config
help](https://redirect.github.com/renovatebot/renovate/discussions) if
that's undesired.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/cattle-ops/terraform-aws-gitlab-runner).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS4yMy4yIiwidXBkYXRlZEluVmVyIjoiNDEuMjMuMiIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

Author: renovate[bot]

modules/terminate-agent-hook/lambda/requirements.txt

@@ -1,2 +1,2 @@
-boto3 ==1.39.4
-botocore ==1.39.4
+boto3 ==1.39.9
+botocore ==1.39.9