[dependabot]

Bumps the npm-minor-patch group with 4 updates: @aws-sdk/client-s3, marked, mysql2 and undici.

Updates @aws-sdk/client-s3 from 3.1149.0 to 3.1152.0

Release notes

Sourced from @​aws-sdk/client-s3's releases.

v3.1152.0

3.1152.0(2026-10-14)

Documentation Changes

• client-marketplace-metering: Documentation update - added a Get started pointer to the AWS Marketplace AI Metering Agent Skill in the BatchMeterUsage API reference. No API or behavior change. (c97db282)

New Features

• clients: update client endpoints as of 2026-10-14 (91a8a07c)
• client-imagebuilder: This release adds parentInstance to infrastructure configurations, so builds can use an already-running instance from an Amazon EC2 Auto Scaling group. It also adds terminateInstanceOnCompletion, which keeps build and test instances running after image creation ends. (e8a5e26b)
• client-cloudfront: This release adds a new "IpAddressType" field to "VPCOriginEndpointConfig", allowing customers to specify whether their VPC origin accepts IPv4-only or dualstack connections. (6bae6413)
• client-transfer: AWS Transfer Family now lets you store SFTP server host keys in AWS Secrets Manager in your own AWS account. This gives you greater control over your server identity and helps simplify server migrations and failover. (9d0e8866)
• client-dynamodb-streams: Add support for a new iterator type (AT TIMESTAMP) for DynamoDB Streams GetShardIterator API that allows reading from a specific point in time from the stream. (150e6ae3)
• client-ec2: Adds T8i instance sizes to the InstanceType enum. T8i instances are low-cost burstable instances powered by custom sixth generation Intel Xeon 6 processors, available exclusively on AWS, and built on the latest sixth generation AWS Nitro cards (65c6056b)
• client-arc-region-switch: Features - Adds support for an optional payload to invoke the Lambda function with as part of the Custom action Lambda execution block (d21aa72b)
• client-organizations: With dual-stack enabled, all requests now resolve to the endpoint in the partition's primary Region (for example, organizations.us-east-1.api.aws) and are signed for that Region. Previously, requests from other Regions resolved to a nonexistent endpoint. No API changes. (9324745e)
• client-bedrock-agentcore-control: This release supports scoping Amazon Bedrock AgentCore Gateway rate limits by request header or request body field. (30c5bca2)
• client-lambda: AWS Lambda now supports an optional X-Ray trace header for chained invocations in durable executions, enabling child invocations to be linked to the initiating span. (08219be0)
• client-guardduty: Releasing support for Custom Detection Rule Runtime Monitoring (0cb32b8f)
• lib-transfer-manager: publish as a preview package (#8355) (41080929)

---

For list of updated packages, view updated-packages.md in assets-3.1152.0.zip

v3.1151.0

3.1151.0(2026-10-13)

Chores

• lib-transfer-manager: move lib-transfer-manager to preview/ folder (#8351) (5037a006)
• scripts: add preview/ folder to build tooling (#8350) (a922905a)

Documentation Changes

• client-lambda-web: Documentation update to include common use cases. (643507a0)

New Features

• clients: update client endpoints as of 2026-10-13 (d3994582)
• client-lakeformation: Added new LakeFormation APIs and documentation updates for Simple Row-level Security (RLS). (c7a586fc)
• client-agent-registry-control: AWS Agent Registry is improving recently launched custom metadata schema feature to make shared attributes easier to manage. (ed00d0bb)
• client-omics: With Expanded container registry support, you can use container images from registries such as Seqera (Wave), NVIDIA NGC, and Google Artifact Registry with AWS HealthOmics private workflows, without manually migrating images into Amazon ECR or editing your workflow definitions. (db382740)
• client-route-53-domains: Route 53 Domains now supports premium domains. This release adds consent objects to operations on premium domains and a new GetDomainPrices API. Also, the Flags and PublicKey fields were deprecated from the DnssecKey response. (c5cc6f50)
• client-gamelift: Adds support for new instance types in the C8a, C8i, C9g, M8a, M8i, and M9g families for managed EC2 and container fleets (51456772)
• client-appstream: Adds support for administrators to require users to re-authenticate OneDrive and Google Drive storage connectors when a streaming session is reused. (2b6f2af5)
• client-connect: New APIs to support aliases and versions for ContactFlow. (39466baa)
• client-appintegrations: This release adds the Connect JWT authentication type and the AudienceOverride field to AuthConfig, letting A2A server applications authenticate with JWTs issued by Amazon Connect. (3b212b20)

... (truncated)

Changelog

Sourced from @​aws-sdk/client-s3's changelog.

3.1152.0 (2026-10-14)

Note: Version bump only for package @​aws-sdk/client-s3

3.1151.0 (2026-10-13)

Note: Version bump only for package @​aws-sdk/client-s3

3.1150.0 (2026-10-12)

Note: Version bump only for package @​aws-sdk/client-s3

Commits

• 3ce8aa7 Publish v3.1152.0
• d6adfcb Publish v3.1151.0
• 4c9a334 Publish v3.1150.0
• See full diff in compare view

Updates marked from 18.1.0 to 18.1.1

Release notes

Sourced from marked's releases.

v18.1.1

18.1.1 (2026-10-12)

Bug Fixes

• cli: honor an explicitly empty string input (#4113) (ec3a4e5)
• end blockquote before a lazy line after a heading, hr or html block (#4115) (9e64a6a)
• keep a backslash in a code span from hiding emphasis (#4117) (6a57018)
• keep a decoded character reference from forming a new one (#4111) (6bbac0c), closes #38 #112
• let indented and type 3-5 html blocks interrupt a paragraph (#4124) (eaa1fff)
• make walkTokens linear by appending values in place (#4121) (627d9ae), closes #4120
• match pre, script, style and textarea as whole tag names (#4114) (0db74cb)
• preserve enclosing link state after parsing images (#4123) (cc07bb9)
• respect tab stops in list continuation indentation (#4119) (4bd2528)

Performance Improvements

• avoid repeated raw string copies in nested lists (#4082) (7e8754d)

Commits

• cdbdc01 chore(release): 18.1.1 [skip ci]
• 2134976 docs: add AGENTS.md (#4125)
• 699a969 chore(deps-dev): bump handlebars from 4.7.9 to 4.7.10 (#4133)
• 6a57018 fix: keep a backslash in a code span from hiding emphasis (#4117)
• eaa1fff fix: let indented and type 3-5 html blocks interrupt a paragraph (#4124)
• 7e8754d perf: avoid repeated raw string copies in nested lists (#4082)
• cc07bb9 fix: preserve enclosing link state after parsing images (#4123)
• 627d9ae fix: make walkTokens linear by appending values in place (#4121)
• 4bd2528 fix: respect tab stops in list continuation indentation (#4119)
• 9e64a6a fix: end blockquote before a lazy line after a heading, hr or html block (#4115)
• Additional commits viewable in compare view

Updates mysql2 from 3.24.5 to 3.24.6

Release notes

Sourced from mysql2's releases.

v3.24.6

3.24.6 (2026-10-13)

Bug Fixes

• allocate a new LOCAL INFILE terminator packet per write (#4580) (8c068ef), closes #4568

Changelog

Sourced from mysql2's changelog.

3.24.6 (2026-10-13)

Bug Fixes

• allocate a new LOCAL INFILE terminator packet per write (#4580) (8c068ef), closes #4568

Commits

• 7f65d9a chore(master): release 3.24.6 (#4592)
• ded9be2 build(deps-dev): bump rollup from 4.64.0 to 4.64.4 in the rollup group (#4605)
• 30201a2 build(deps-dev): bump @​types/node from 26.6.4 to 26.6.5 (#4606)
• 5eb21f4 build(deps-dev): bump prettier (#4604)
• 477ca97 build(deps): bump lucide-react from 1.52.0 to 1.55.0 in /website (#4609)
• 9ea9345 build(deps-dev): bump prettier from 3.9.9 to 3.9.10 in /website (#4608)
• c52e961 build(deps-dev): bump @​types/node from 26.6.4 to 26.6.5 in /website (#4607)
• 1cdba3c build(deps-dev): bump @​biomejs/biome from 2.5.14 to 2.5.15 (#4585)
• a270608 build(deps-dev): bump @​types/node from 26.6.3 to 26.6.4 (#4584)
• 51e02b3 build(deps-dev): bump brace-expansion from 5.0.9 to 5.0.12 (#4601)
• Additional commits viewable in compare view

Updates undici from 8.11.2 to 8.12.2

Release notes

Sourced from undici's releases.

v8.12.2

Security fixes

High severity

Denial of service via TLS 1.2 certificate-changing renegotiation

CVE-2026-87018 · GHSA-qrxm-fqhp-jwvm

A malicious or compromised HTTPS server could crash the Node.js process by initiating TLS 1.2 renegotiation and presenting a different, CA-trusted certificate whose hostname did not match the requested host. The resulting socket error reached an assertion in undici's HTTP/1.1 and HTTP/2 connection handling. This release handles post-connect certificate errors without terminating the process.

TLS certificate validation bypass through dropped Agent options

CVE-2026-109383 · GHSA-2m5v-pch6-74hx

Agent used a JSON-based clone for constructor options, which silently removed function-valued TLS options such as checkServerIdentity. Applications relying on custom certificate or public-key verification could therefore accept a certificate that the callback was intended to reject. This release preserves TLS options when creating per-origin dispatchers.

Cache poisoning and cross-user disclosure through cross-origin redirects

CVE-2026-109829 · GHSA-4w7w-5xrc-9h26

When an originless Agent combined redirect and shared-cache interceptors as compose(redirect(), cache()), a response from a cross-origin redirect could be stored under the original URL. This could allow persistent cache poisoning or disclosure of user-specific responses to later callers. This release verifies the response origin before caching and preserves redirect-hop cache-control policy.

Denial of service through excessive Content-Encoding values

CVE-2026-109869 · GHSA-xjj6-f33q-929c

A malicious HTTP server could crash the Node.js process by returning more than five content codings and closing the connection before sending the body. Although fetch() rejected the response, an error from an orphaned internal stream could remain unhandled. This release validates the content-encoding chain before creating the body stream and aborts oversized chains safely.

Medium severity

Denial of service through the decompress interceptor

CVE-2026-87029 · GHSA-55wc-3pg8-jfw6

An exception thrown by a downstream response handler from an asynchronous decompression callback could escape as an uncaught exception. A server could trigger this when decompress was composed with a handler such as dump with a size limit. This release converts downstream handler exceptions into per-request errors.

Subresource Integrity bypass with non-lowercase algorithm tokens

CVE-2026-109841 · GHSA-f72v-6w45-q472

fetch() treated valid mixed-case or uppercase SRI algorithm tokens, such as SHA256, as unknown and could accept a response whose body did not match the configured digest. This release normalizes algorithm tokens before validation and digest selection.

Denial of service through unbounded EventSource parser state

CVE-2026-109924 · GHSA-4qv8-2p9j-2685

A malicious Server-Sent Events endpoint could exhaust process memory by sending many tiny data: fields without completing an event, or by splitting an unfinished line across many chunks. This release bounds retained EventSource parser state, including field counts, buffered chunks, unfinished-line length, and retained field data.

... (truncated)

Commits

• bb6cc0a Bumped v8.12.2 (#6021)
• b217373 fix(websocket): bound automatic PONG writes under backpressure
• 789ef26 fix(eventsource): bound retained SSE parser state
• 4f7ef68 fix(sri): accept non-lowercase algorithm tokens
• f851f31 fix(decompress): converge downstream handler throws to per-request errors
• b5084c7 fix(fetch): abort excessive content encoding responses
• 26c2bfb fix(cache): prevent cross-origin redirect cache confusion
• f75eac0 fix: preserve Agent connection options
• e257e9f fix: handle post-connect TLS certificate errors
• a65ec32 Bumped v8.12.1 (#6010)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions