fix(deps): bump the production-deps group with 3 updates

[dependabot]

Bumps the production-deps group with 3 updates: @aws-sdk/client-s3, nodemailer and lucide-react.

Updates @aws-sdk/client-s3 from 3.1104.0 to 3.1106.0

Release notes

Sourced from @​aws-sdk/client-s3's releases.

v3.1106.0

3.1106.0(2026-08-07)

New Features

• clients: update client endpoints as of 2026-08-07 (c5d05426)
• client-amplify: Increased the maximum allowed length of the oauthToken parameter in the CreateApp and UpdateApp APIs to support longer OAuth tokens issued by third-party Git providers. (b239e292)
• client-healthlake: Adds provenanceEnabled to StartFHIRImportJob (18ac6efe)
• client-securityagent: Added enableEmailMfa input field on Actor to enable email-based MFA during penetration tests. When enabled, a server-generated mfaForwardingAddress is returned. Set up a forwarding rule in your email provider to forward MFA emails to this address so the agent can complete email-based MFA login flows (e21d3919)
• client-mediapackagev2: StreamNameOutputMode - a new optional field on MediaPackageV2 OriginEndpoints that lets customers choose whether egress manifests use numeric stream indices (default) or encoder-assigned stream names from the input (7f49cb06)
• client-sagemaker: Amazon SageMaker adds maintenance lifecycle statuses for Notebook Instances (6ce0f884)
• client-ec2: This release adds support for BGP route protection in Amazon VPC IP Address Manager (IPAM), including route discovery, RPKI route protection findings, and delegated RPKI (Internet Registry Associations, routing policy registrations, and ROA management) for BYOIP prefixes. (62f281df)
• client-mediatailor: Added support for inserting ads via the VAST Ad Buffet standard. You can now configure MediaTailor to insert ads in sequence order using the AdSequencingMode setting in your playback configuration. Standalone ads are used as fallbacks when a sequenced ad is unavailable. (7bebb1e5)
• client-connect: Supports updating the task template associated with in-progress task contacts using the new UpdateContactTaskTemplate API. This enables supervisors and developers to dynamically reassign task templates without creating a new task. (24f40416)

---

For list of updated packages, view updated-packages.md in assets-3.1106.0.zip

v3.1105.0

3.1105.0(2026-08-06)

Chores

• lib-dynamodb: add error msg and fallback when incompatible client is supplied (#8231) (e663d41f)

New Features

• clients: update client endpoints as of 2026-08-06 (e4f7b32f)
• client-cloudwatch-logs: This release adds index category support to the CloudWatch Logs DescribeFieldIndexes API. Customers can filter and identify DEFAULT, CUSTOM, AUTO, and INACTIVE field indexes. (e17fff6f)
• client-socialmessaging: Add support for WhatsApp Conversions APIs. (5c29a869)
• client-gamelift: Adds support for C8a, C8i, C9g, M8a, M8i, and M9g EC2 instance type families for managed EC2 and container fleets. Also adds explicit anchors on most string regexes. (30dfd63a)
• client-securityhub: Security Hub is adding a new public API, ListFreeTrialStatusesV2 to describe the free trial statuses of the Security Hub service and its opt-in features. (e44b3582)
• client-bedrock-agentcore-control: Add support for Gateway rate limits and Runtime instances in Amazon Bedrock AgentCore. Customers can now configure rate limits scoped to control request rates, token consumption rates, and active connection rates. Customers can now create capacity providers to launch runtimes on their EC2 instances. (865d21ef)
• client-device-farm: Adds support for service generated insights across runs, jobs, and tests. (6c601b71)
• client-sagemaker: Releases new Model Customization SequenceLength parameter for Training and g7 instance types for Training and Processing. (14bd2ac7)
• client-agent-registry-control: Agent Registry's Public Preview release (a137863d)
• client-backup: AWS Backup now lets you create read-only access points for Amazon S3 recovery points, enabling you to access backup data using S3 APIs without initiating a restore. (636228a9)
• client-mediatailor: AWS Elemental MediaTailor now supports concurrent function execution. The new Concurrent Executor function type runs multiple independent child functions in parallel within a single lifecycle hook, reducing pipeline latency to the duration of the slowest call instead of the sum of all calls. (1cf61475)
• client-marketplace-agreement: GetAgreementTerms now returns a new term variant in AcceptedTerm, netPaymentTerm, with a paymentDuePeriod field (example "P30D"). (50b0d6d5)
• client-agent-registry: Agent Registry's Public Preview release (632ae479)
• client-kafka: MSK Clusters can now deliver authorizer logs alongside broker logs to the destinations defined by you (b7e31937)
• client-bedrock-agentcore: Add support for capacity provider sessions in Amazon Bedrock AgentCore. Customers can now delete an active session running on a runtime instance launched through their capacity provider. (bd301533)
• client-auto-scaling: EC2 Auto Scaling now supports being managed by other AWS services via the operator field. (f5d54fce)
• client-ec2: Adds a new optional IncludeLocalZones parameter to the Spot Placement Score API that defaults to false. When set to true, the Spot Placement Score API will consider the relevant Local Zones with Spot capacity when computing the Spot Placement Score. (43673842)
• client-marketplace-discovery: GetOfferTerms now returns netPaymentTerm in offerTerms, specifying payment due period after invoice date. The paymentDuePeriod field uses ISO 8601 duration format (e.g., "P30D" for net 30 days). This is a backward-compatible addition. See API documentation for full structure and examples. (f4fd7ae7)
• client-s3: AWS Backup now lets you create read-only access points for Amazon S3 recovery points, enabling you to access backup data using S3 APIs without initiating a restore. (faf65602)

... (truncated)

Changelog

Sourced from @​aws-sdk/client-s3's changelog.

3.1106.0 (2026-08-07)

Note: Version bump only for package @​aws-sdk/client-s3

3.1105.0 (2026-08-06)

Features

• client-s3: AWS Backup now lets you create read-only access points for Amazon S3 recovery points, enabling you to access backup data using S3 APIs without initiating a restore. (faf6560)

Commits

• 655d311 Publish v3.1106.0
• d6c0ea3 Publish v3.1105.0
• faf6560 feat(client-s3): AWS Backup now lets you create read-only access points for A...
• See full diff in compare view

Updates nodemailer from 9.0.4 to 9.0.5

Release notes

Sourced from nodemailer's releases.

v9.0.5

9.0.5 (2026-08-07)

Bug Fixes

• ci: retrigger the workflows dropped during the Actions outage (85d16c1)
• mailer: escape specials in List-* header comments (#1842) (75913bb)
• mime-funcs: star the continuation key of a restarted parameter line (36bcf1a)
• mime-node: keep control chars out of header values and msg-id headers (15cf6d1)
• mime: encode DEL in header parameters and List-* comments (cf69430)
• mime: keep control chars out of the remaining header positions (5ed9d26)
• mime: normalize an address parsed out of a string as well (63685f7)
• mime: normalize an address so header and envelope agree (a9343b4)
• mime: stop a header key callback and the dkim tags from injecting (b7d772e)

Changelog

Sourced from nodemailer's changelog.

9.0.5 (2026-08-07)

Bug Fixes

• ci: retrigger the workflows dropped during the Actions outage (85d16c1)
• mailer: escape specials in List-* header comments (#1842) (75913bb)
• mime-funcs: star the continuation key of a restarted parameter line (36bcf1a)
• mime-node: keep control chars out of header values and msg-id headers (15cf6d1)
• mime: encode DEL in header parameters and List-* comments (cf69430)
• mime: keep control chars out of the remaining header positions (5ed9d26)
• mime: normalize an address parsed out of a string as well (63685f7)
• mime: normalize an address so header and envelope agree (a9343b4)
• mime: stop a header key callback and the dkim tags from injecting (b7d772e)

Commits

• 742cff9 chore(master): release 9.0.5 (#1843)
• 524f0af chore: apply prettier to the punycode decode loop
• 63685f7 fix(mime): normalize an address parsed out of a string as well
• d899213 test: cover the custom envelope path of every transport
• c4daee0 chore(ci): trigger the workflows now that the Actions outage is over
• 85d16c1 fix(ci): retrigger the workflows dropped during the Actions outage
• 76d0d92 chore(deps): update devDependencies
• a9343b4 fix(mime): normalize an address so header and envelope agree
• b7d772e fix(mime): stop a header key callback and the dkim tags from injecting
• 5ed9d26 fix(mime): keep control chars out of the remaining header positions
• Additional commits viewable in compare view

Updates lucide-react from 1.29.0 to 1.30.0

Release notes

Sourced from lucide-react's releases.

Version 1.30.0

What's Changed

• chore(icons): refine & rename various emoji icons by @​karsa-mistmere in lucide-icons/lucide#4606
• fix(scripts): removed toBeRemovedInVersion from all scripts and tools by @​karsa-mistmere in lucide-icons/lucide#4674
• feat(icons): added audio-lines-x icon by @​karsa-mistmere in lucide-icons/lucide#4590
• feat(lab): added chinese-character icon to lab by @​congemcd in lucide-icons/lucide#4212
• test(packages): updates unit test snapshots with face-slightly-smiling by @​karsa-mistmere in lucide-icons/lucide#4676
• ci(dev): fix post-release job by downloading lucide-font artifact by name by @​ericfennis with @​Copilot in lucide-icons/lucide#4675
• feat(icons): add shield-lock icon by @​Caisere in lucide-icons/lucide#3508
• ci(security): Pin sha actions by @​jguddas in lucide-icons/lucide#4678
• feat(icons): added broom icon by @​karsa-mistmere in lucide-icons/lucide#4683

New Contributors

• @​congemcd made their first contribution in lucide-icons/lucide#4212
• @​Caisere made their first contribution in lucide-icons/lucide#3508

Full Changelog: lucide-icons/lucide@1.29.0...1.30.0

Commits

• 0f8d48b test(packages): updates unit test snapshots with face-slightly-smiling (#4676)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions