Merge branch 'release-1.42.68' into develop

* release-1.42.68:
  Bumping version to 1.42.68
  Update endpoints model
  Update to latest models

Author: aws-sdk-python-automation

.changes/1.42.68.json

@@ -0,0 +1,52 @@
+[
+  {
+    "category": "``apigateway``",
+    "description": "API Gateway now supports an additional security policy \"SecurityPolicy-TLS13-1-2-FIPS-PFS-PQ-2025-09\" for REST APIs and custom domain names. The new policy is compliant with TLS 1.3, Federal Information Processing Standards (FIPS), Perfect Forward Secrecy (PFS), and post-quantum (PQ) cryptography",
+    "type": "api-change"
+  },
+  {
+    "category": "``config``",
+    "description": "Fix pagination support for DescribeConformancePackCompliance, and update OrganizationConfigRule InputParameters max length to match ConfigRule.",
+    "type": "api-change"
+  },
+  {
+    "category": "``connect``",
+    "description": "Deprecating PredefinedNotificationID field",
+    "type": "api-change"
+  },
+  {
+    "category": "``gameliftstreams``",
+    "description": "Feature launch that enables customers to connect streaming sessions to their own VPCs running in AWS.",
+    "type": "api-change"
+  },
+  {
+    "category": "``glue``",
+    "description": "Add QuerySessionContext to BatchGetPartitionRequest",
+    "type": "api-change"
+  },
+  {
+    "category": "``ivs-realtime``",
+    "description": "Updates maximum reconnect window seconds from 60 to 300 for participant replication",
+    "type": "api-change"
+  },
+  {
+    "category": "``mediaconvert``",
+    "description": "This update adds support for Dolby AC-4 audio output, frame rate conversion between non-Dolby Vision inputs to Dolby Vision outputs, and clear lead CMAF HLS output.",
+    "type": "api-change"
+  },
+  {
+    "category": "``medialive``",
+    "description": "Documents the VideoDescription.ScalingBehavior.SMART(underscore)CROP enum value.",
+    "type": "api-change"
+  },
+  {
+    "category": "``mgn``",
+    "description": "Network Migration APIs are now publicly available for direct programmatic access. Customers can now call Network Migration APIs directly without going through AWS Transform (ATX), enabling automation, integration with existing tools, and self-service migration workflows.",
+    "type": "api-change"
+  },
+  {
+    "category": "``quicksight``",
+    "description": "The change adds a new capability named ManageSharedFolders in Custom Permissions",
+    "type": "api-change"
+  }
+]

CHANGELOG.rst

@@ -2,6 +2,21 @@
 CHANGELOG
 =========
 
+1.42.68
+=======
+
+* api-change:``apigateway``: API Gateway now supports an additional security policy "SecurityPolicy-TLS13-1-2-FIPS-PFS-PQ-2025-09" for REST APIs and custom domain names. The new policy is compliant with TLS 1.3, Federal Information Processing Standards (FIPS), Perfect Forward Secrecy (PFS), and post-quantum (PQ) cryptography
+* api-change:``config``: Fix pagination support for DescribeConformancePackCompliance, and update OrganizationConfigRule InputParameters max length to match ConfigRule.
+* api-change:``connect``: Deprecating PredefinedNotificationID field
+* api-change:``gameliftstreams``: Feature launch that enables customers to connect streaming sessions to their own VPCs running in AWS.
+* api-change:``glue``: Add QuerySessionContext to BatchGetPartitionRequest
+* api-change:``ivs-realtime``: Updates maximum reconnect window seconds from 60 to 300 for participant replication
+* api-change:``mediaconvert``: This update adds support for Dolby AC-4 audio output, frame rate conversion between non-Dolby Vision inputs to Dolby Vision outputs, and clear lead CMAF HLS output.
+* api-change:``medialive``: Documents the VideoDescription.ScalingBehavior.SMART(underscore)CROP enum value.
+* api-change:``mgn``: Network Migration APIs are now publicly available for direct programmatic access. Customers can now call Network Migration APIs directly without going through AWS Transform (ATX), enabling automation, integration with existing tools, and self-service migration workflows.
+* api-change:``quicksight``: The change adds a new capability named ManageSharedFolders in Custom Permissions
+
+
 1.42.67
 =======
 

botocore/__init__.py

@@ -17,7 +17,7 @@
 import re
 from logging import NullHandler
 
-__version__ = '1.42.67'
+__version__ = '1.42.68'
 
 
 # Configure default logger to do nothing

botocore/data/apigateway/2015-07-09/service-2.json

@@ -6564,6 +6564,7 @@
         "SecurityPolicy_TLS13_1_3_FIPS_2025_09",
         "SecurityPolicy_TLS13_1_2_PFS_PQ_2025_09",
         "SecurityPolicy_TLS13_1_2_FIPS_PQ_2025_09",
+        "SecurityPolicy_TLS13_1_2_FIPS_PFS_PQ_2025_09",
         "SecurityPolicy_TLS13_1_2_PQ_2025_09",
         "SecurityPolicy_TLS13_1_2_2021_06",
         "SecurityPolicy_TLS13_2025_EDGE",

botocore/data/config/2014-11-12/paginators-1.json

@@ -193,6 +193,15 @@
       "limit_key": "MaxResults",
       "output_token": "NextToken",
       "result_key": "ConfigurationRecorderSummaries"
+    },
+    "DescribeConformancePackCompliance": {
+      "input_token": "NextToken",
+      "limit_key": "Limit",
+      "non_aggregate_keys": [
+        "ConformancePackName"
+      ],
+      "output_token": "NextToken",
+      "result_key": "ConformancePackRuleComplianceList"
     }
   }
 }

botocore/data/config/2014-11-12/service-2.json

@@ -6179,7 +6179,7 @@
           "documentation":"<p>The type of notification that initiates Config to run an evaluation for a rule. For Config Custom Policy rules, Config supports change-initiated notification types:</p> <ul> <li> <p> <code>ConfigurationItemChangeNotification</code> - Initiates an evaluation when Config delivers a configuration item as a result of a resource change.</p> </li> <li> <p> <code>OversizedConfigurationItemChangeNotification</code> - Initiates an evaluation when Config delivers an oversized configuration item. Config may generate this notification type when a resource changes and the notification exceeds the maximum size allowed by Amazon SNS.</p> </li> </ul>"
         },
         "InputParameters":{
-          "shape":"StringWithCharLimit2048",
+          "shape":"StringWithCharLimit1024",
           "documentation":"<p>A string, in JSON format, that is passed to your organization Config Custom Policy rule.</p>"
         },
         "MaximumExecutionFrequency":{
@@ -6229,7 +6229,7 @@
           "documentation":"<p>The type of notification that triggers Config to run an evaluation for a rule. For Config Custom Policy rules, Config supports change triggered notification types:</p> <ul> <li> <p> <code>ConfigurationItemChangeNotification</code> - Triggers an evaluation when Config delivers a configuration item as a result of a resource change.</p> </li> <li> <p> <code>OversizedConfigurationItemChangeNotification</code> - Triggers an evaluation when Config delivers an oversized configuration item. Config may generate this notification type when a resource changes and the notification exceeds the maximum size allowed by Amazon SNS.</p> </li> </ul>"
         },
         "InputParameters":{
-          "shape":"StringWithCharLimit2048",
+          "shape":"StringWithCharLimit1024",
           "documentation":"<p>A string, in JSON format, that is passed to your organization Config Custom Policy rule.</p>"
         },
         "MaximumExecutionFrequency":{
@@ -6283,7 +6283,7 @@
           "documentation":"<p>The type of notification that triggers Config to run an evaluation for a rule. You can specify the following notification types:</p> <ul> <li> <p> <code>ConfigurationItemChangeNotification</code> - Triggers an evaluation when Config delivers a configuration item as a result of a resource change.</p> </li> <li> <p> <code>OversizedConfigurationItemChangeNotification</code> - Triggers an evaluation when Config delivers an oversized configuration item. Config may generate this notification type when a resource changes and the notification exceeds the maximum size allowed by Amazon SNS.</p> </li> <li> <p> <code>ScheduledNotification</code> - Triggers a periodic evaluation at the frequency specified for <code>MaximumExecutionFrequency</code>.</p> </li> </ul>"
         },
         "InputParameters":{
-          "shape":"StringWithCharLimit2048",
+          "shape":"StringWithCharLimit1024",
           "documentation":"<p>A string, in JSON format, that is passed to your organization Config rule Lambda function.</p>"
         },
         "MaximumExecutionFrequency":{
@@ -6322,7 +6322,7 @@
           "documentation":"<p>For organization config managed rules, a predefined identifier from a list. For example, <code>IAM_PASSWORD_POLICY</code> is a managed rule. To reference a managed rule, see <a href=\"https://docs.aws.amazon.com/config/latest/developerguide/evaluate-config_use-managed-rules.html\">Using Config managed rules</a>.</p>"
         },
         "InputParameters":{
-          "shape":"StringWithCharLimit2048",
+          "shape":"StringWithCharLimit1024",
           "documentation":"<p>A string, in JSON format, that is passed to your organization Config rule Lambda function.</p>"
         },
         "MaximumExecutionFrequency":{
@@ -8630,11 +8630,6 @@
       "max":128,
       "min":1
     },
-    "StringWithCharLimit2048":{
-      "type":"string",
-      "max":2048,
-      "min":1
-    },
     "StringWithCharLimit256":{
       "type":"string",
       "max":256,

botocore/data/connect/2017-08-08/service-2.json

@@ -11652,7 +11652,12 @@
           "shape":"TagMap",
           "documentation":"<p>The tags used to organize, track, or control access for this resource. For example, <code>{ \"Tags\": {\"key1\":\"value1\", \"key2\":\"value2\"} }</code>.</p>"
         },
-        "PredefinedNotificationId":{"shape":"NotificationId"},
+        "PredefinedNotificationId":{
+          "shape":"NotificationId",
+          "deprecated":true,
+          "deprecatedMessage":"PredefinedNotificationId is deprecated. Use ClientToken for idempotency.",
+          "deprecatedSince":"3/13/2026"
+        },
         "ClientToken":{
           "shape":"ClientToken",
           "documentation":"<p>A unique, case-sensitive identifier that you provide to ensure the idempotency of the request. If not provided, the Amazon Web Services SDK populates this field. For more information about idempotency, see <a href=\"https://aws.amazon.com/builders-library/making-retries-safe-with-idempotent-APIs/\">Making retries safe with idempotent APIs</a>.</p>",

botocore/data/endpoints.json

@@ -26969,6 +26969,7 @@
               "tags" : [ "dualstack" ]
             } ]
           },
+          "eu-central-2" : { },
           "eu-north-1" : {
             "variants" : [ {
               "hostname" : "transcribe.eu-north-1.api.aws",
@@ -40602,6 +40603,11 @@
           "eusc-de-east-1" : { }
         }
       },
+      "network-firewall" : {
+        "endpoints" : {
+          "eusc-de-east-1" : { }
+        }
+      },
       "notifications" : {
         "endpoints" : {
           "eusc-de-east-1" : { }

botocore/data/gameliftstreams/2018-05-10/service-2.json

@@ -5600,7 +5600,9 @@
         "PartitionsToGet":{
           "shape":"BatchGetPartitionValueList",
           "documentation":"<p>A list of partition values identifying the partitions to retrieve.</p>"
-        }
+        },
+        "AuditContext":{"shape":"AuditContext"},
+        "QuerySessionContext":{"shape":"QuerySessionContext"}
       }
     },
     "BatchGetPartitionResponse":{