Update dependency aws/aws-sdk-php to v3.373.3

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
aws/aws-sdk-php (source)	3.371.3 → 3.373.3

---

Release Notes

aws/aws-sdk-php (aws/aws-sdk-php)

v3.373.3

Compare Source

• Aws\ - Handles errors that comes in the error_description field, specifically how SSO-OIDC service has it modeled.
• Aws\BedrockAgentCore - Provide support to perform deterministic operations on agent runtime through shell command executions via the new InvokeAgentRuntimeCommand API
• Aws\Bedrock - You can now generate policy scenarios on demand using the new GENERATE POLICY SCENARIOS build workflow type. Scenarios will no longer be automatically generated during INGEST CONTENT, REFINE POLICY, and IMPORT POLICY workflows, resulting in faster completion times for these operations.
• Aws\BedrockAgentCoreControl - Supporting hosting of public ECR Container Images in AgentCore Runtime
• Aws\ECS - Amazon ECS now supports configuring whether tags are propagated to the EC2 Instance Metadata Service (IMDS) for instances launched by the Managed Instances capacity provider. This gives customers control over tag visibility in IMDS when using ECS Managed Instances.

v3.373.2

Compare Source

• Aws\ConfigService - Fix pagination support for DescribeConformancePackCompliance, and update OrganizationConfigRule InputParameters max length to match ConfigRule.
• Aws\mgn - Network Migration APIs are now publicly available for direct programmatic access. Customers can now call Network Migration APIs directly without going through AWS Transform (ATX), enabling automation, integration with existing tools, and self-service migration workflows.
• Aws\QuickSight - The change adds a new capability named ManageSharedFolders in Custom Permissions
• Aws\MediaConvert - This update adds support for Dolby AC-4 audio output, frame rate conversion between non-Dolby Vision inputs to Dolby Vision outputs, and clear lead CMAF HLS output.
• Aws\Glue - Add QuerySessionContext to BatchGetPartitionRequest
• Aws\IVSRealTime - Updates maximum reconnect window seconds from 60 to 300 for participant replication
• Aws\MediaLive - Documents the VideoDescription.ScalingBehavior.SMART(underscore)CROP enum value.
• Aws\Connect - Deprecating PredefinedNotificationID field
• Aws\GameLiftStreams - Feature launch that enables customers to connect streaming sessions to their own VPCs running in AWS.
• Aws\APIGateway - API Gateway now supports an additional security policy "SecurityPolicy-TLS13-1-2-FIPS-PFS-PQ-2025-09" for REST APIs and custom domain names. The new policy is compliant with TLS 1.3, Federal Information Processing Standards (FIPS), Perfect Forward Secrecy (PFS), and post-quantum (PQ) cryptography

v3.373.1

Compare Source

• Aws\ - Add support for PHPUnit v10.

• Make data provider static functions.
• Use class attributes instead of annotations for @​dataProvider, @​covers, and @​doesNotPerformAssertions.
• Remove/Replace the usage of expectDeprecation, expectDeprecationMessage, expectDeprecationMessageMatches, expectError, expectErrorMessage, expectNotice, expectNoticeMessage, expectWarning, and expectWarningMessage.
• Migrate phpunit xml config file.

• Aws\S3 - Adds support for account regional namespaces for general purpose buckets. The account regional namespace is a reserved subdivision of the global bucket namespace where only your account can create general purpose buckets.
• Aws\ECR - Add Chainguard to PTC upstreamRegistry enum
• Aws\DataSync - DataSync's 3 location types, Hadoop Distributed File System (HDFS), FSx for Windows File Server (FSx Windows), and FSx for NetApp ONTAP (FSx ONTAP) now have credentials managed via Secrets Manager, which may be encrypted with service keys or be configured to use customer-managed keys or secret.

v3.373.0

Compare Source

• Aws\WorkSpaces - Added WINDOWS SERVER 2025 OperatingSystemName.
• Aws\SimpleDBv2 - Introduced Amazon SimpleDB export functionality enabling domain data export to S3 in JSON format. Added three new APIs StartDomainExport, GetExport, and ListExports via SimpleDBv2 service. Supports cross-region exports and KMS encryption.
• Aws\Polly - Added support for the new voices - Ambre (fr-FR), Beatrice (it-IT), Florian (fr-FR), Lennart (de-DE), Lorenzo (it-IT) and Tiffany (en-US). They are available as a Generative voices only.
• Aws\CustomerProfiles - Today, Amazon Connect is announcing the ability to filter (include or exclude) recommendations based on properties of items and interactions.
• Aws\SageMaker - SageMaker training plans allow you to extend your existing training plans to avoid workload interruptions without workload reconfiguration. When a training plan is approaching expiration, you can extend it directly through the SageMaker AI console or programmatically using the API or AWS CLI.
• Aws\EKS - Adds support for a new tier in controlPlaneScalingConfig on EKS Clusters.

v3.372.3

Compare Source

• Aws\ - Sorts presigned headers alphabetically.
• Aws\Kafka - Add dual stack endpoint to SDK
• Aws\ConnectCases - Added functionality for the Required and Hidden case rule types to be conditionally evaluated on up to 5 conditions.
• Aws\DatabaseMigrationService - Not need to include to any release notes. The only change is to correct LoadTimeout unit from milliseconds to seconds in RedshiftSettings
• Aws\BedrockAgentCoreControl - Adding first class support for AG-UI protocol in AgentCore Runtime.
• Aws\LexModelsV2 - This release introduces a new generative AI feature called Lex Bot Analyzer. This feature leverage AI to analyze the bot configuration against AWS Lex best practices to identify configuration issues and provides recommendations.

v3.372.2

Compare Source

• Aws\Multipart - Fixes bug in AbstractUploadManager where valid falsy values are excluded.
• Aws\OpenSearchService - This change enables cross-account and cross-region access for DataSources. Customers can now define access policies on their datasources to allow other AWS accounts to access and query their data.
• Aws\IAM - Added support for CloudWatch Logs long-term API keys, currently available in Preview
• Aws\Route53GlobalResolver - Adds support for dual stack Global Resolvers and Dictionary-based Domain Generation Firewall Advanced Protection.
• Aws\mgn - Adds support for new storeSnapshotOnLocalZone field in ReplicationConfiguration and updateReplicationConfiguration

v3.372.1

Compare Source

• Aws\SESv2 - Adds support for longer email message header values, increasing the maximum length from 870 to 995 characters for RFC 5322 compliance.
• Aws\BedrockAgentCoreControl - Adds support for streaming memory records in AgentCore Memory
• Aws\AppIntegrationsService - This release adds support for webhooks, allowing customers to create an Event Integration with a webhook source.
• Aws\Deadline - AWS Deadline Cloud now supports cost scale factors for farms, enabling studios to adjust reported costs to reflect their actual rendering economics. Adjusted costs are reflected in Deadline Cloud's Usage Explorer and Budgets.
• Aws\BCMDataExports - Fixed wrong endpoint resolutions in few regions. Added AWS CFN resource schema for BCM Data Exports. Added max value validation for pagination parameter. Fixed ARN format validation for BCM Data Exports resources. Updated size constraints for table properties. Added AccessDeniedException error.
• Aws\Connect - Amazon Connect now supports the ability to programmatically configure and run automated tests for contact center experiences for Chat. Integrate testing into CICD pipelines, run multiple tests at scale, and retrieve results via API to automate validation of chat interactions and workflows.
• Aws\Bedrock - Amazon Bedrock Guardrails account-level enforcement APIs now support lists for model inclusion and exclusion from guardrail enforcement.
• Aws\GameLiftStreams - Added new Gen6 stream classes based on the EC2 G6f instance family. These stream classes provide cost-optimized options for streaming well-optimized or lower-fidelity games on Windows environments.

v3.372.0

Compare Source

• Aws\Api - Adds support for the Smithy RPC V2 CBOR protocol.
• Aws\EC2 - Added metadata field to CapacityAllocation.
• Aws\MPA - Updates to multi-party approval (MPA) service to add support for approval team baseline operations.
• Aws\ConnectHealth - Connect-Health SDK is AWS's unified SDK for the Amazon Connect Health offering. It allows healthcare developers to integrate purpose-built agents - such as patient insights, ambient documentation, and medical coding - into their existing applications, including EHRs, telehealth, and revenue cycle.
• Aws\SageMaker - Adds support for S3 Bucket Ownership validation for SageMaker Managed MLflow.
• Aws\SavingsPlans - Added support for OpenSearch and Neptune Analytics to Database Savings Plans.
• Aws\GuardDuty - Added MALICIOUS FILE to IndicatorType enum in MDC Sequence

v3.371.5

Compare Source

• Aws\ - Fixes how response with empty bodies for non-seekable streams are handled and adds streaming flag automatically based on the operation.
• Aws\QuickSight - Added several new values for Capabilities, increased visual limit per sheet from previous limit to 75, renamed Quick Suite to Quick in several places.
• Aws\OpenSearchService - Adding support for DeploymentStrategyOptions
• Aws\ElasticsearchService - Adds support for DeploymentStrategyOptions.
• Aws\GameLift - Amazon GameLift Servers now offers DDoS protection for Linux-based EC2 and Container Fleets on SDKv5. The player gateway proxy relay network provides traffic validation, per-player rate limiting, and game server IP address obfuscation all with negligible added latency and no additional cost.
• Aws\Connect - Added support for configuring additional email addresses on queues in Amazon Connect. Agents can now select an outbound email address and associate additional email addresses for replying to or initiating emails.
• Aws\ElasticBeanstalk - As part of this release, Beanstalk introduce a new info type - analyze for request environment info and retrieve environment info operations. When customers request an Al analysis, Elastic Beanstalk runs a script on an instance in their environment and returns an analysis of events, health and logs.

v3.371.4

Compare Source

• Aws\ - Add a validation for custom policies to make sure the property Resource has not a non allowed character.
• Aws\PartnerCentralChannel - Adds the Resold Unified Operations support plan and removes the Resold Business support plan in the CreateRelationship and UpdateRelationship APIs
• Aws\SageMaker - This release adds b300 and g7e instance types for SageMaker inference endpoints.
• Aws\DataZone - Adding QueryGraph operation to DataZone SDK
• Aws\CloudWatchLogs - CloudWatch Logs updates- Added support for the PutBearerTokenAuthentication API to enable or disable bearer token authentication on a log group. For more information, see CloudWatch Logs API documentation.
• Aws\BedrockAgentCoreControl - Support for AgentCore Policy GA

---

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, only on Monday ( * 0-3 * * 1 ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[deepsource-io]

DeepSource Code Review

We reviewed changes in e2e4314...e48215b on this pull request. Below is the summary for the review, and you can see the individual issues we found as inline review comments.

See full review on DeepSource ↗

PR Report Card

Overall Grade

Security   Reliability   Complexity   Hygiene

Code Review Summary

Analyzer	Status	Updated (UTC)	Details
PHP		Mar 16, 2026 9:48p.m.	Review ↗