fix(deps): bump the all group with 3 updates

[dependabot]

Bumps the all group with 3 updates: @aws-sdk/client-cloudformation, @aws-sdk/client-s3 and commit-and-tag-version.

Updates @aws-sdk/client-cloudformation from 3.1090.0 to 3.1091.0

Release notes

Sourced from @​aws-sdk/client-cloudformation's releases.

v3.1091.0

3.1091.0(2026-07-20)

Documentation Changes

• client-organizations: Updated InvalidInputException error documentation to clarify that the service validates free-text field values against common cross-site scripting (XSS) patterns. (6ac1bf08)
• client-marketplace-metering: For new SaaS product integrations, CustomerIdentifier is not populated in ResolveCustomer responses and is not supported in BatchMeterUsage. Use CustomerAWSAccountId and LicenseArn instead. (f1ff8983)

New Features

• client-quicksight: Adds support for custom permissions for Triggers, allowing administrators to control user access to Schedule, Inbound Email and Quick Event triggers. (fbe7d94d)
• client-bedrock-agentcore: Add W3C trace context headers (traceparent, tracestate, baggage) and X-Amzn-Trace-Id to InvokeHarness request for end-to-end observability propagation. Add toolResultMetadata to the streaming content block delta for MCP tool result meta delivery without oversized SSE frames. (4cf22ef3)
• client-bedrock-agentcore-control: This release adds support for specifying a connector version on Gateway targets to pin the connector's tool schema. It also introduces web-search connector version 1.2.0, which adds agent-side domain filtering, published date range filtering, and admin-side domain allowlisting. (2c37055a)
• client-sesv2: Amazon SES introduces three new Pricing Plans (Essentials, Pro, Enterprise), which bundle SES features under one pricing umbrella. The new PutAccountPricingAttributes API lets the user set the account's plan, while current plan retrievalif done through the new PricingAttributes field on GetAccount. (751dc8df)
• client-mediatailor: This change adds api support for configuring ad decision server timeouts and concurrency fields on MediaTailor playback configurations (97ea965e)
• client-inspector2: Adds Windows path support for deep inspection. Fixes tag propagation for connector CloudFormation stack operations. (2263613f)

Tests

• middleware-sdk-route53: loosen date in path assertion (#8212) (e5225182)

---

For list of updated packages, view updated-packages.md in assets-3.1091.0.zip

Changelog

Sourced from @​aws-sdk/client-cloudformation's changelog.

3.1091.0 (2026-07-20)

Note: Version bump only for package @​aws-sdk/client-cloudformation

Commits

• a1269f7 Publish v3.1091.0
• See full diff in compare view

Updates @aws-sdk/client-s3 from 3.1090.0 to 3.1091.0

Release notes

Sourced from @​aws-sdk/client-s3's releases.

v3.1091.0

3.1091.0(2026-07-20)

Documentation Changes

• client-organizations: Updated InvalidInputException error documentation to clarify that the service validates free-text field values against common cross-site scripting (XSS) patterns. (6ac1bf08)
• client-marketplace-metering: For new SaaS product integrations, CustomerIdentifier is not populated in ResolveCustomer responses and is not supported in BatchMeterUsage. Use CustomerAWSAccountId and LicenseArn instead. (f1ff8983)

New Features

• client-quicksight: Adds support for custom permissions for Triggers, allowing administrators to control user access to Schedule, Inbound Email and Quick Event triggers. (fbe7d94d)
• client-bedrock-agentcore: Add W3C trace context headers (traceparent, tracestate, baggage) and X-Amzn-Trace-Id to InvokeHarness request for end-to-end observability propagation. Add toolResultMetadata to the streaming content block delta for MCP tool result meta delivery without oversized SSE frames. (4cf22ef3)
• client-bedrock-agentcore-control: This release adds support for specifying a connector version on Gateway targets to pin the connector's tool schema. It also introduces web-search connector version 1.2.0, which adds agent-side domain filtering, published date range filtering, and admin-side domain allowlisting. (2c37055a)
• client-sesv2: Amazon SES introduces three new Pricing Plans (Essentials, Pro, Enterprise), which bundle SES features under one pricing umbrella. The new PutAccountPricingAttributes API lets the user set the account's plan, while current plan retrievalif done through the new PricingAttributes field on GetAccount. (751dc8df)
• client-mediatailor: This change adds api support for configuring ad decision server timeouts and concurrency fields on MediaTailor playback configurations (97ea965e)
• client-inspector2: Adds Windows path support for deep inspection. Fixes tag propagation for connector CloudFormation stack operations. (2263613f)

Tests

• middleware-sdk-route53: loosen date in path assertion (#8212) (e5225182)

---

For list of updated packages, view updated-packages.md in assets-3.1091.0.zip

Changelog

Sourced from @​aws-sdk/client-s3's changelog.

3.1091.0 (2026-07-20)

Note: Version bump only for package @​aws-sdk/client-s3

Commits

• a1269f7 Publish v3.1091.0
• See full diff in compare view

Updates commit-and-tag-version from 12.7.3 to 13.0.0

Release notes

Sourced from commit-and-tag-version's releases.

v13.0.0

13.0.0 (2026-07-18)

⚠ BREAKING CHANGES

• Update all conventional-changelog dependencies to their modern version. There are a few breaking changes that will affect users with custom presets, please see MIGRATION.md. This also raises the node minimum to node 22.
• This package is now pure ESM. CLI uses should be unaffected. This raises the minimum engine to 20.19, and anyone using require will need to require('commit-and-tag-version').default

deps

• Update all conventional-changelog dependencies to their modern version. There are a few breaking changes that will affect users with custom presets, please see MIGRATION.md. This also raises the node minimum to node 22. (c2d26bf)

Bug Fixes

• maven: preserve comments in pom.xml (#294) (cbb6010)

Code Refactoring

• This package is now pure ESM. CLI uses should be unaffected. This raises the minimum engine to 20.19, and anyone using require will need to require('commit-and-tag-version').default (89ba82e)

Changelog

Sourced from commit-and-tag-version's changelog.

13.0.0 (2026-07-18)

⚠ BREAKING CHANGES

• Update all conventional-changelog dependencies to their modern version. There are a few breaking changes that will affect users with custom presets, please see MIGRATION.md. This also raises the node minimum to node 22.
• This package is now pure ESM. CLI uses should be unaffected. This raises the minimum engine to 20.19, and anyone using require will need to require('commit-and-tag-version').default

deps

• Update all conventional-changelog dependencies to their modern version. There are a few breaking changes that will affect users with custom presets, please see MIGRATION.md. This also raises the node minimum to node 22. (c2d26bf)

Bug Fixes

• maven: preserve comments in pom.xml (#294) (cbb6010)

Code Refactoring

• This package is now pure ESM. CLI uses should be unaffected. This raises the minimum engine to 20.19, and anyone using require will need to require('commit-and-tag-version').default (89ba82e)

Commits

• 1ac8d4d chore(master): release 13.0.0 (#301)
• 59ece91 build(deps): bump codecov/codecov-action from 6 to 7 (#297)
• eda9371 build(deps): bump actions/checkout from 6.0.2 to 7.0.0 (#298)
• c2d26bf deps!: Update all conventional-changelog dependencies to their modern version...
• e801e59 chore: Run audit fix
• 7ff8d63 chore: Resolve peer dependency warning
• 89ba82e refactor!: This package is now pure ESM. CLI uses should be unaffected. This ...
• 64cacd5 chore: Fix formatting
• a272cdd test: Migrate test suite from Jest to Vitest (#283)
• cbb6010 fix(maven): preserve comments in pom.xml (#294)
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for commit-and-tag-version since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.