chore(deps): update all dependencies

[renovate]

This PR contains the following updates:

Package	Type	Update	Change	Age	Confidence
aws (source)	required_provider	minor	6.15.0 -> 6.16.0
boto3		patch	==1.40.48 -> ==1.40.50
botocore		patch	==1.40.48 -> ==1.40.50
github/codeql-action	action	patch	v4.30.7 -> v4.30.8

---

Release Notes

hashicorp/terraform-provider-aws (aws)

v6.16.0

Compare Source

FEATURES:

• New Action: aws_transcribe_start_transcription_job (#​44445)
• New Data Source: aws_odb_cloud_autonomous_vm_clusters (#​44336)
• New Data Source: aws_odb_cloud_exadata_infrastructures (#​44336)
• New Data Source: aws_odb_cloud_vm_clusters (#​44336)
• New Data Source: aws_odb_network_peering_connections (#​44336)
• New Data Source: aws_odb_networks (#​44336)
• New Resource: aws_prometheus_resource_policy (#​44256)
• New Resource: aws_transfer_host_key (#​44559)
• New Resource: aws_transfer_web_app (#​42708)
• New Resource: aws_transfer_web_app_customization (#​42708)

ENHANCEMENTS:

• resource/aws_codebuild_project: Add auto_retry_limit argument (#​40035)
• resource/aws_emrserverless_application: Add scheduler_configuration block (#​44589)
• resource/aws_lambda_event_source_mapping: Add schema_registry_config configuration blocks to amazon_managed_kafka_event_source_config and self_managed_kafka_event_source_config blocks (#​44540)
• resource/aws_ssmcontacts_contact: Add resource identity support (#​44548)
• resource/aws_vpclattice_resource_gateway: Add ipv4_addresses_per_eni argument (#​44560)

BUG FIXES:

• provider: Correctly validate AWS European Sovereign Cloud Regions in ARNs (#​44573)
• provider: Fix Missing Resource Identity After Update errors for non-refreshed and failed updates of Plugin Framework based resources (#​44518)
• provider: Fix Unexpected Identity Change errors when fully-null identity values in state are updated to valid values for Plugin Framework based resources (#​44518)
• resource/aws_datazone_environment: Correctly updates glossary_terms. (#​44491)
• resource/aws_datazone_environment: Prevents unknown value error when optional account_identifier is not specified. (#​44491)
• resource/aws_datazone_environment: Prevents unknown value error when optional account_region is not specified. (#​44491)
• resource/aws_datazone_environment: Prevents error when updating. (#​44491)
• resource/aws_datazone_environment: Prevents occasional unexpected state error when deleting. (#​44491)
• resource/aws_datazone_environment: Properly passes blueprint_identifier on creation. (#​44491)
• resource/aws_datazone_environment: Sets values for user_parameters when importing. (#​44491)
• resource/aws_datazone_environment: Values in user_parameters should not be updateable. (#​44491)
• resource/aws_datazone_project: No longer ignores errors when deleting. (#​44491)
• resource/aws_datazone_project: No longer returns error when already deleting. (#​44491)
• resource/aws_dynamodb_table: Do not retry on LimitExceededException (#​44576)
• resource/aws_ivschat_room: Set maximum_message_rate_per_second validation maximum to 100 (#​44572)
• resource/aws_launch_template: kms_key_id validation now accepts key ID, alias, and alias ARN in addition to key ARN (#​44505)
• resource/aws_servicecatalog_portfolio_share: Add global mutex lock around create and delete operations to prevent ThrottlingException errors (#​24730)

boto/boto3 (boto3)

v1.40.50

Compare Source

=======

• api-change:bedrock-agentcore: [botocore] Bedrock AgentCore release for Runtime, and Memory.
• api-change:bedrock-agentcore-control: [botocore] Bedrock AgentCore release for Gateway, and Memory including Self-Managed Strategies support for Memory.
• api-change:cloudfront: [botocore] Added new viewer security policy, TLSv1.2_2025, for CloudFront.
• api-change:glue: [botocore] Addition of AuditContext in GetTable/GetTables Request
• api-change:lambda: [botocore] Add InvokedViaFunctionUrl context key to limit invocations to only FURL invokes.
• api-change:odb: [botocore] This release adds APIs that allow you to specify CIDR ranges in your ODB peering connection.
• api-change:rds: [botocore] Updated the text in the Important section of the ModifyDBClusterParameterGroup page.

v1.40.49

Compare Source

=======

• api-change:quicksight: [botocore] This release adds support for ActionConnector and Flow, which are new resources associated with Amazon Quick Suite. Additional updates include expanded Data Source options, further branding customization, and new capabilities that can be restricted by Admins.
• api-change:wafv2: [botocore] This release adds the ability to throw WafLimitsExceededException when the maximum number of Application Load Balancer (ALB) associations per AWS WAF v2 WebACL is exceeded.

boto/botocore (botocore)

v1.40.50

Compare Source

=======

• api-change:bedrock-agentcore: Bedrock AgentCore release for Runtime, and Memory.
• api-change:bedrock-agentcore-control: Bedrock AgentCore release for Gateway, and Memory including Self-Managed Strategies support for Memory.
• api-change:cloudfront: Added new viewer security policy, TLSv1.2_2025, for CloudFront.
• api-change:glue: Addition of AuditContext in GetTable/GetTables Request
• api-change:lambda: Add InvokedViaFunctionUrl context key to limit invocations to only FURL invokes.
• api-change:odb: This release adds APIs that allow you to specify CIDR ranges in your ODB peering connection.
• api-change:rds: Updated the text in the Important section of the ModifyDBClusterParameterGroup page.

v1.40.49

Compare Source

=======

• api-change:quicksight: This release adds support for ActionConnector and Flow, which are new resources associated with Amazon Quick Suite. Additional updates include expanded Data Source options, further branding customization, and new capabilities that can be restricted by Admins.
• api-change:wafv2: This release adds the ability to throw WafLimitsExceededException when the maximum number of Application Load Balancer (ALB) associations per AWS WAF v2 WebACL is exceeded.

github/codeql-action (github/codeql-action)

v4.30.8

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

4.30.8 - 10 Oct 2025

No user facing changes.

See the full CHANGELOG.md for more information.

---

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, only on Monday ( * 0-3 * * 1 ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

Hey @renovate[bot]! 👋

Thank you for your contribution to the project. Please refer to the contribution rules for a quick overview of the process.

Make sure that this PR clearly explains:

• the problem being solved
• the best way a reviewer and you can test your changes

With submitting this PR you confirm that you hold the rights of the code added and agree that it will published under this LICENSE.

The following ChatOps commands are supported:

• /help: notifies a maintainer to help you out

Simply add a comment with the command in the first line. If you need to pass more information, separate it with a blank line from the command.

This message was generated automatically. You are welcome to improve it.

[kayman-mk]

Auto approved Renovate PR by organization

[github-actions]

✅MegaLinter analysis: Success

Descriptor	Linter	Files	Fixed	Errors	Warnings	Elapsed time
✅ ACTION	actionlint	1		0	0	0.26s
✅ COPYPASTE	jscpd	yes		no	no	1.46s
✅ REPOSITORY	dustilock	yes		no	no	2.52s
✅ REPOSITORY	gitleaks	yes		no	no	1.08s
✅ REPOSITORY	git_diff	yes		no	no	0.01s
✅ REPOSITORY	grype	yes		no	no	24.75s
✅ REPOSITORY	secretlint	yes		no	no	0.63s
✅ REPOSITORY	syft	yes		no	no	1.26s
✅ REPOSITORY	trivy-sbom	yes		no	no	0.13s
✅ REPOSITORY	trufflehog	yes		no	no	3.15s
✅ SPELL	cspell	2		0	0	2.39s
✅ YAML	prettier	1	0	0	0	0.39s
✅ YAML	v8r	1		0	0	2.02s
✅ YAML	yamllint	1		0	0	0.35s

See detailed reports in MegaLinter artifacts
Set VALIDATE_ALL_CODEBASE: true in mega-linter.yml to validate all sources, not only the diff