build(deps): bump aws/aws-sdk-php from 3.376.2 to 3.391.1

[dependabot]

• server build(deps): bump aws/aws-sdk-php from 3.376.2 to 3.390.1 server#63030

---

Bumps aws/aws-sdk-php from 3.376.2 to 3.390.1.

Release notes

Sourced from aws/aws-sdk-php's releases.

Version 3.390.1

• Aws\BCMRecommendedActions - Removing Smithy RPC v2 CBOR support that was added in previous SDK release.
• Aws\BCMPricingCalculator - Removing Smithy RPC v2 CBOR support that was added in previous SDK release.

Version 3.390.0

• Aws\Crypto - Fixes issue with client material description decode.
• Aws\BedrockAgentCoreControl - Adds support for configuring models through the OpenResponses API for custom evaluators. CreateEvaluator and UpdateEvaluator now accept an OpenResponses model configuration for LLM-as-a-Judge evaluations.
• Aws\SageMaker - Adds support for g7 family instance types for SageMaker Studio JupyterLab and CodeEditor apps for IAD (us-east-1), PDX (us-west-2), CMH (us-east-2).
• Aws\Lambda - Add Python3.15 (python3.15) and NodeJs 26 (nodejs26.x) support to AWS Lambda
• Aws\Kafka - Amazon MSK Express brokers now support streaming tables for Apache Iceberg, continuously materializing Apache Kafka topics as Iceberg tables in Amazon S3 Tables. Express brokers also now support data delivery to Amazon S3 general purpose buckets.
• Aws\NetworkFirewall - Adds UPDATING field to Container Association Status
• Aws\IAM - Improved IAM Policy Simulator accuracy. Simulator now evaluates SCP conditions and resource scoping, returns explicitDeny for explicit SCP denials, and reports accurate cross-account decisions.
• Aws\SecurityAgent - Adds support for providing a branch override when configured integrated repositories
• Aws\PricingPlanManager - Adds support for Public PricingPlanManager SDK

Version 3.389.3

• Aws\EC2 - This release adds support for policy-based routing on AWS Transit Gateway, enabling you to route traffic based on 5-tuple matching (source IP, destination IP, source port, destination port, and protocol) using new policy table entry APIs that direct matching traffic to a target route table.
• Aws\GameLiftStreams - Adds ListApplicationShaderCaches API to retrieve shader cache metadata for applications and adds stream URLs, which give end users temporary, unauthenticated access to a stream session in their browser. Includes CreateStreamUrl, GetStreamUrl, ListStreamUrls, and RevokeStreamUrl operations.
• Aws\WAFV2 - AWS WAF now supports pre-parse text transformations, letting you normalize raw query strings before parsing, available on rule statements that use SingleQueryArgument or AllQueryArguments as the FieldToMatch. AWS WAF also added 10 new text transformations, including ModSecurity v3 parity options.
• Aws\Glue - Adding filtering, partitioning, and VPC support to AWS Glue REST API connector
• Aws\IoTSiteWise - We have released a new set of APIs in support of a major new feature within AWS IoT SiteWise called Scenario Discover. Please see user guide about the feature and the API guide in public documentation for new APIs.
• Aws\DatabaseMigrationService - Updated documentation for various DMS Schema Conversion operations

Version 3.389.2

• Aws\DataSync - Adds Enhanced mode support for EFS and FSx Lustre locations without an agent, and for HDFS (TDE), Azure Blob, and object storage locations with an agent. HDFS Enhanced mode supports multiple NameNodes for High Availability. Enhanced mode agents can now be deployed on Microsoft Hyper-V.
• Aws\BedrockAgentCoreControl - AgentCore Identity now supports Private Key JWT client authentication for OAuth 2.0 credential providers. Agents can authenticate to identity provider token endpoints with a JWT client assertion signed by a customer-managed AWS KMS asymmetric key, eliminating the need for client secrets.
• Aws\Connect - Documentation updates for SearchRules, AssociateRoutingProfileQueues, CreateRoutingProfile, AssociateContactWithUser CreateTaskTemplate, and UpdateTaskTemplate
• Aws\RolesAnywhere - Increases certificate string length for trust anchor source data to support new adjustable trust anchor limits.
• Aws\TrustedAdvisor - Adds ListRecommendationsForResource API and four CheckSummary fields (resourceArnQueryable, awsResourceTypes, checkGranularity, recommendationId) to retrieve recommendations for a given resource ARN.

Version 3.389.1

• Aws\CleanRoomsML - This release adds support for the CR.8X worker type for SQL (32 vCPU)
• Aws\PartnerCentralAccount - Adds optional headquarters location to StartProfileUpdateTask, letting partners record their headquarters as an ISO 3166 country and subdivision code on their profile. When headquarters is provided, both the country and subdivision codes are required.
• Aws\SecurityAgent - AWS Security Agent adds a new task hours field that reflects the active work done for a task.
• Aws\EMRContainers - With this launch, you can now set concurrent job limits on a virtual cluster, giving you fine-grained control over how many job runs execute at once and how many can wait in queue.
• Aws\CleanRooms - This release adds support for the CR.8X worker type for SQL (32 vCPU)
• Aws\QuickSight - Added new Governance fields to Custom Permissions API to support Deny By Default functionality.
• Aws\Account - This release adds support for the GetPrimaryEmailUpdateStatus API operation, which allows customers to retrieve the current status of a primary email address update request for an AWS account. The operation returns status information including whether the update is pending, completed, or failed.
• Aws\SageMaker - This release adds LoRA adapters, training plans, and new instance types to SageMaker inference optimization. CreateAIRecommendationJob accepts optional AdapterSource and CreateOptimizationJob accepts optional TrainingPlanArns and the ml.g7e and ml.p6-b200 families.
• Aws\Glue - Adds BatchGetDataQualityRulesetEvaluationRun API to retrieve multiple runs in one call, ObservationScope and ObservationMode parameters for anomaly detection, writing evaluation results to Data Catalog tables, and custom log group paths for recommendation runs.
• Aws\BCMDataExports - With this release, customers can configure their data exports to deliver CSV reports in ZIP compressed format.

Version 3.389.0

• Aws\Handler - Adds Guzzle 8 support.
• Aws\ApplicationInsights - This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.1. The SDK will prioritize its most performant protocol.
• Aws\Artifact - Added the PutComplianceInquiryFeedback API, enabling customers to submit feedback on compliance inquiry responses. Customers can rate responses as helpful or not helpful and provide optional reason codes and comments.
• Aws\RTBFabric - The deprecated inboundLinksCount field has been removed from the GetResponderGateway API response. Customers who previously relied on this field should use linksRequestedCount instead.
• Aws\DynamoDB - Endpoint test standardizations
• Aws\CognitoIdentityProvider - Amazon Cognito user pools now support the AdminGetUserAuthFactors operation, which lets administrators retrieve the configured authentication factors (such as password, SMS, email, and TOTP) available for a specific user in a user pool.
• Aws\NeptuneGraph - Update validations for Tag Keys and KMS Key ARNs.

... (truncated)

Commits

• c75d5f4 3.390.1 release
• e89deec Update models for release
• 1aaa45b 3.390.0 release
• a227b84 Update models for release
• 867c52d fix: S3 Encryption Client material description decode (#3333)
• 09bbb40 3.389.3 release
• dfac069 Update models for release
• 784e0fb 3.389.2 release
• 2124556 Update models for release
• 9850632 3.389.1 release
• Additional commits viewable in compare view

[susnux]

@dependabot rebase

[susnux]

/composer-update

[susnux]

Production Changes	From	To	Compare
aws/aws-sdk-php	3.376.2	3.391.1	...

[dependabot]

A newer version of aws/aws-sdk-php exists, but since this PR has been edited by someone other than Dependabot I haven't updated it. You'll get a PR for the updated version as normal once this PR is merged.