[Snyk] Upgrade @aws-sdk/client-s3 from 3.901.0 to 3.943.0

[shobhitupadhyayy]

Snyk has created this PR to upgrade @aws-sdk/client-s3 from 3.901.0 to 3.943.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 30 versions ahead of your current version.

• The recommended version was released 22 days ago.

Issues fixed by the recommended upgrade:

	Issue	Score	Exploit Maturity
	Allocation of Resources Without Limits or Throttling SNYK-JS-BODYPARSER-14105059	345	No Known Exploit
	Prototype Pollution SNYK-JS-JSYAML-13961110	345	No Known Exploit

Release notes

Package name: @aws-sdk/client-s3

• 3.943.0 - 2025-12-02
  

  3.943.0(2025-12-02)

  Chores

  • core/protocols: dynamodb serde performance adjustments (#7536) (ae3e73d8)

  New Features

  • clients: update client endpoints as of 2025-12-02 (2f1ed327)
  • client-s3-control: Add support for S3 Storage Lens Advanced Performance Metrics, Expanded Prefixes metrics report, and export to S3 Tables. (a8737778)
  • client-observabilityadmin: CloudWatch Observability Admin adds pipelines configuration for third party log ingestion and transformation of all logs ingested, integration of CloudWatch logs with S3 Tables, and AWS account or organization level enablement for 7 AWS services. (1e20b0fe)
  • client-fsx: S3 Access Points support for FSx for NetApp ONTAP (cb2d0f30)
  • client-datazone: Amazon DataZone now supports exporting Catalog datasets as Amazon S3 tables, and provides automatic business glossary term suggestions for data assets. (f82c5bd4)
  • client-sagemaker: Added support for serverless MLflow Apps. (99cda6cb)
  • client-securityhub: ITSM enhancements: DRYRUN mode for testing ticket creation, ServiceNow now uses AWS Secrets Manager for credentials, ConnectorRegistrationsV2 renamed to RegisterConnectorV2, added ServiceQuotaExceededException error, and ConnectorStatus visibility in CreateConnectorV2. (45c4bd14)
  • client-bedrock-agentcore-control: Supports AgentCore Evaluations, Policy, Episodic Memory Strategy, Resource Based Policy for Runtime and Gateway APIs, API Gateway Rest API Targets and enhances JWT authorizer. (072c9ff2)
  • client-bedrock-runtime: Adds support for Audio Blocks and Streaming Image Output plus new Stop Reasons of malformed_model_output and malformed_tool_use. (57bdac08)
  • client-nova-act: Initial release of Nova Act SDK. The Nova Act service enables customers to build and manage fleets of agents for automating production UI workflows with high reliability, fastest time-to-value, and ease of implementation at scale. (f0544c31)
  • client-opensearch: GPU-acceleration helps you build large-scale vector databases faster and more efficiently. You can enable this feature on new OpenSearch domains and OpenSearch Serverless collections. This feature uses GPU-acceleration to reduce the time needed to index data into vector indexes. (263dd4ca)
  • client-cloudwatch-logs: CloudWatch Logs adds managed S3 Tables integration to access logs using other analytical tools, as well as facets and field indexing to simplify log analytics in CloudWatch Logs Insights. (f3383c4e)
  • client-bedrock: Adds the audioDataDeliveryEnabled boolean field to the Model Invocation Logging Configuration. (c3ccd65d)
  • client-guardduty: Adding support for extended threat detection for Amazon EC2 and Amazon ECS. Adding support for wild card suppression rules. (d338e8aa)
  • client-s3: New S3 Storage Class FSX_ONTAP (56ffa40a)
  • client-bedrock-agentcore: Support for AgentCore Evaluations and Episodic memory strategy for AgentCore Memory. (ff3003b7)
  • client-savingsplans: Added support for Amazon Database Savings Plans (d93e9c41)
  • client-opensearchserverless: GPU-acceleration helps you build large-scale vector databases faster and more efficiently. You can enable this feature on new OpenSearch domains and OpenSearch Serverless collections. This feature uses GPU-acceleration to reduce the time needed to index data into vector indexes. (ae1f36f7)
  • client-cost-explorer: This release updates existing Savings Plans Purchase Analyzer and Recommendations APIs to support Database Savings Plans. (4dd5ecaa)
  • client-lambda: Launching Lambda durable functions - a new feature to build reliable multi-step applications and AI workflows natively within the Lambda developer experience. (01476cf7)
  • client-s3vectors: Amazon S3 Vectors provides cost-effective, elastic, and durable vector storage for queries based on semantic meaning and similarity. (b9835814)
  • client-s3tables: Add storage class, replication, and table record expiration features to S3 Tables. (f73480a7)
  • client-rds: RDS Oracle and SQL Server: Add support for adding, modifying, and removing additional storage volumes, offering up to 256TiB storage; RDS SQL Server: Support Developer Edition via custom engine versions for development and testing purposes; M7i/R7i instances with Optimize CPU for cost savings. (0fc234af)

  Tests

  • core/protocols: add Query error deserialization unit test (#7535) (88074553)

  ---

  For list of updated packages, view updated-packages.md in assets-3.943.0.zip

• 3.940.0 - 2025-11-25
  

  3.940.0(2025-11-25)

  New Features

  • clients: update client endpoints as of 2025-11-25 (e2770904)
  • client-network-firewall: Network Firewall release of the Proxy feature. (0eb20e88)
  • client-organizations: Add support for policy operations on the S3_POLICY and BEDROCK_POLICY policy type. (75e196ee)
  • client-route-53: Adds support for new route53 feature: accelerated recovery. (dbe0a58f)
  • client-ec2: This release adds support to view Network firewall proxy appliances attached to an existing NAT Gateway via DescribeNatGateways API NatGatewayAttachedAppliance structure. (7d70b063)

  Bug Fixes

  • core/protocols: performance improvements for shape serde traversal (#7523) (b20a25ea)

  Tests

  • codegen: update codegen unit tests (#7525) (e43ff44c)

  ---

  For list of updated packages, view updated-packages.md in assets-3.940.0.zip

• 3.939.0 - 2025-11-24
  

  3.939.0(2025-11-24)

  Chores

  • scripts: reduce api validation to packages/lib only (#7519) (eb74d6a0)

  New Features

  • client-cloudwatch-logs: New CloudWatch Logs feature - LogGroup Deletion Protection, a capability that allows customers to safeguard their critical CloudWatch log groups from accidental or unintended deletion. (02360329)
  • client-cloudfront: Add TrustStore, ConnectionFunction APIs to CloudFront SDK (168505ee)

  Bug Fixes

  • clients: export enum objects for string shapes (#7521) (62f648df)
  • cloudfront-signer: skip extended encoding for query parameters in the base url (#7515) (954d411e)

  Tests

  • increase beforeAll hook timeouts (#7518) (720ba4cd)

  ---

  For list of updated packages, view updated-packages.md in assets-3.939.0.zip

• 3.937.0 - 2025-11-20
  

  3.937.0(2025-11-20)

  Chores

  • api record update (#7514) (8109474f)

  Documentation Changes

  • client-kinesis: Kinesis Data Streams now supports up to 50 Enhance Fan-out consumers for On-demand Advantage Streams. On-demand Standard and Provisioned streams will continue with the existing limit of 20 consumers for Enhanced Fan-out. (dc1ec575)

  New Features

  • clients: update client endpoints as of 2025-11-20 (a15a5b22)
  • client-dsql: Added clusterVpcEndpoint field to GetVpcEndpointServiceName API response, returning the VPC connection endpoint for the cluster (9fe2380d)
  • client-bedrock-data-automation: Added support for Synchronous project type and PII Detection and Redaction (fe8bca9f)
  • client-budgets: Add BillingViewHealthStatusException to DescribeBudgetPerformanceHistory and ServiceQuotaExceededException to UpdateBudget for improved error handling with Billing Views. (bdce2a67)
  • client-s3: Enable / Disable ABAC on a general purpose bucket. (9816b260)
  • client-networkmanager: This release adds support for Cloud WAN Routing Policy providing customers sophisticated routing controls to better manage their global networks (14daa70a)
  • client-redshift-data: Increasing the length limit of Statement Name from 500 to 2048. (3091e42a)
  • client-elastic-load-balancing-v2: This release adds the target optimizer feature in ALB, enabling strict concurrency enforcement on targets. (3da0b3fc)
  • client-lakeformation: Added ServiceIntegrations as a request parameter for CreateLakeFormationIdentityCenterConfigurationRequest and UpdateLakeFormationIdentityCenterConfigurationRequest and response parameter for DescribeLakeFormationIdentityCenterConfigurationResponse (7615a8bc)
  • client-braket: Add support for Braket spending limits. (13f6f508)
  • client-sagemaker: Added training plan support for inference endpoints. Added HyperPod task governance with accelerator partition-based quota allocation. Added BatchRebootClusterNodes and BatchReplaceClusterNodes APIs. Updated ListClusterNodes to include privateDnsHostName. (859f793a)
  • client-ec2: This release adds support for multiple features including: VPC Encryption Control for the status of traffic flow; S2S VPN BGP Logging; TGW Flexible Costs; IPAM allocation of static IPs from IPAM pools to CF Anycast IP lists used on CloudFront distribution; and EBS Volume Integration with Recycle Bin (6fdcb506)
  • client-cloudtrail: AWS launches CloudTrail aggregated events to simplify monitoring of data events at scale. This feature delivers both granular and summarized data events for resources like S3/Lambda, helping security teams identify patterns without custom aggregation logic. (d7c651c8)
  • client-emr: Add support for configuring S3 destination for step logs on a per-step basis. (b24d79f6)
  • client-datasync: The partition value "aws-eusc" is now permitted for ARN (Amazon Resource Name) fields. (8a6adcf7)
  • client-connect: Add optional ability to exclude users from send notification actions for Contact Lens Rules. (15d923a3)
  • client-ecs: Launching Amazon ECS Express Mode - a new feature that enables developers to quickly launch highly available, scalable containerized applications with a single command. (f77f87ba)
  • client-quicksight: Introducing comprehensive theme styling controls. New features include border customization (radius, width, color), flexible padding controls, background styling for cards and sheets, centralized typography management, and visual-level override support across layouts. (cd0d876d)
  • client-rbin: Add support for EBS volume in Recycle Bin (7fdeb129)
  • client-auto-scaling: This release adds support for three new features: 1) Image ID overrides in mixed instances policy, 2) Replace Root Volume - a new strategy for Instance Refresh, and 3) Instance Lifecycle Policy for enhanced instance lifecycle management. (fff870ea)
  • client-imagebuilder: EC2 Image Builder now enables the distribution of existing AMIs, retry distribution, and define distribution workflows. It also supports automatic versioning for recipes and components, allowing automatic version increments and dynamic referencing in pipelines. (0d2985c2)
  • client-bedrock-agentcore: Bedrock AgentCore Memory release for redriving memory extraction jobs (StartMemoryExtractionJob and ListMemoryExtractionJob) (e5cc06e3)
  • client-rds: Add support for VPC Encryption Controls. (e91f3548)
  • client-cloudfront: This release adds support for bring your own IP (BYOIP) to CloudFront's CreateAnycastIpList API through an optional IpamCidrConfigs field. (aa047c72)
  • client-bedrock-data-automation-runtime: Bedrock Data Automation Runtime Sync API (f14c750f)
  • client-license-manager: Added cross-account resource aggregation via license asset groups and expiry tracking for Self-Managed Licenses. Extended Org-Wide View to Self-Managed Licenses, added reporting for license asset groups, and removed Athena/Glue dependencies for cross-account resource discovery in commercial regions. (54276060)
  • client-glue: Added FunctionType parameter to Glue GetuserDefinedFunctions. (db36a145)
  • client-securityhub: Release Findings and Resources Trends APIs- GetFindingsTrendsV2 and GetResourcesTrendsV2. This supports time-series aggregated counts with composite filtering for 1-year of historical data analysis of Findings and Resources. (82511def)
  • client-application-signals: Amazon CloudWatch Application Signals now supports un-instrumented services discovery, cross-account views, and change history, helping SRE and DevOps teams monitor and troubleshoot their large-scale distributed applications. (0da48ba7)
  • client-database-migration-service: Added support for customer-managed KMS key (CMK) for encryption for import private key certificate. Additionally added Amazon SageMaker Lakehouse endpoint used for zero-ETL integrations with data warehouses. (7edb9744)
  • client-device-farm: Add support for environment variables and an IAM execution role. (3476f4df)
  • client-organizations: Added new APIs for Billing Transfer, new policy type INSPECTOR_POLICY, and allow an account to transfer between organizations (674519a3)

  ---

  For list of updated packages, view updated-packages.md in assets-3.937.0.zip

• 3.936.0 - 2025-11-19
  

  3.936.0(2025-11-19)

  New Features

  • credential-provider-login: add login credential provider (#7512) (2c08b1e0)

  ---

  For list of updated packages, view updated-packages.md in assets-3.936.0.zip

• 3.935.0 - 2025-11-19
• 3.934.0 - 2025-11-18
• 3.933.0 - 2025-11-17
• 3.932.0 - 2025-11-14
• 3.931.0 - 2025-11-13
• 3.930.0 - 2025-11-12
• 3.929.0 - 2025-11-11
• 3.928.0 - 2025-11-10
• 3.927.0 - 2025-11-07
• 3.926.0 - 2025-11-06
• 3.925.0 - 2025-11-05
• 3.922.0 - 2025-10-31
• 3.921.0 - 2025-10-30
• 3.920.0 - 2025-10-29
• 3.919.0 - 2025-10-28
• 3.918.0 - 2025-10-27
• 3.917.0 - 2025-10-24
• 3.916.0 - 2025-10-23
• 3.914.0 - 2025-10-21
• 3.913.0 - 2025-10-17
• 3.911.0 - 2025-10-15
• 3.910.0 - 2025-10-14
• 3.908.0 - 2025-10-10
• 3.907.0 - 2025-10-09
• 3.906.0 - 2025-10-08
• 3.901.0 - 2025-10-01

from @aws-sdk/client-s3 GitHub release notes

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• This PR was automatically created by Snyk using the credentials of a real user.
• Max score is 1000. Note that the real score may have changed since the PR was raised.
• Snyk has automatically assigned this pull request, set who gets assigned.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

• 🧐 View latest project report
• 👩‍💻 Set who automatically gets assigned
• 📜 Customise PR templates
• 🛠 Adjust upgrade PR settings
• 🔕 Ignore this dependency or unsubscribe from future upgrade PRs