chore(deps): bump @aws-sdk/client-ecs from 3.1070.0 to 3.1136.0

[dependabot]

Bumps @aws-sdk/client-ecs from 3.1070.0 to 3.1136.0.

Release notes

Sourced from @​aws-sdk/client-ecs's releases.

v3.1136.0

3.1136.0(2026-09-18)

New Features

• client-datazone: Adds support for specifying Notebook type (dfe90a44)
• client-sagemaker: Adds support for the hub content resource in SageMaker Search. (5733f294)
• client-glue: Introducing AWS Glue Data Quality advanced rule recommendations for faster recommendations. This capability uses Amazon Athena to analyze a sample of table data and Amazon Bedrock to recommend DQDL rules. (984a8422)
• client-ec2: This release adds documentation for the T8i instance family to the EC2 ModifyDefaultCreditSpecification and GetDefaultCreditSpecification APIs. (27cc9e36)
• client-appintegrations: This release adds support for A2A servers via the ApplicationType and AuthConfig fields, allowing customers to register their agent-to-agent servers with API key authentication. (6be76cb1)
• client-transcribe: Amazon Transcribe now lets you encrypt your custom vocabularies, custom vocabulary filters, and custom language models with a customer managed AWS KMS key instead of an AWS owned key, and adds a new UpdateLanguageModel operation to transition CLM encryption to a different KMS key. (22124b1c)
• client-qconnect: Amazon Connect AI Agents now support multi-agent orchestration and structured JSON input and output messaging for orchestration agents. (299b4e03)
• client-connect: This release adds the ListSecurityProfileAIAgents API and updates the CreateSecurityProfile and UpdateSecurityProfile APIs to support the AllowedAIAgents field on security profiles, allowing customers to manage the 3P AI agents associated with a security profile for Agent-to-Agent interactions. (2c765d8d)
• client-ivs-realtime: GetParticipant, ListParticipantEvents, ListParticipantReplicas, StartParticipantReplication, and StopParticipantReplication now accept participant IDs containing underscores. (dc23e6f2)

Tests

• undici-http-handler: skip invokeModelWithBidirectionalStream test (#8309) (82637a1c)

---

For list of updated packages, view updated-packages.md in assets-3.1136.0.zip

v3.1135.0

3.1135.0(2026-09-17)

Documentation Changes

• client-sns: SNS API reference documentation update (0e22e2d7)

New Features

• client-connect: Made the replicaAlias attribute optional in the ReplicateInstance API to support Global routing for Amazon Connect Global Resiliency (ACGR) instances. This change maintains backward compatibility. When onboarding to ACGR without Global routing, you must specify a custom replicaAlias in your API call (f134c352)
• client-ec2: Adding support for "Tunnel" VPC Endpoint (cb7c9bc5)
• client-notifications: Added support for attachments on managed notification events. Added support to access and subscribe sensitive managed notification events. (c8a9cc10)
• client-guardduty: This change surfaces AI Protection resources on existing public IAM attack sequences. Customers will now see which model was accessed and whether a guardrail intervened as part of the credential-compromise sequence. (854ccbfa)
• client-sesv2: Added support to query the tenant name for BatchGetMetricData and CreateExportJob APIs to filter metrics and messages at the tenant level. (3beafcbc)
• client-iot-wireless: Adds Multi-frame GNSS support to the AWS IoT Core Device Location GetPositionEstimate API. The new GnssMultiFrame measurement type improves location accuracy by combining multiple GNSS signal captures (2, 4, 8, 16, or 32) from the same device to estimate its position. (294ad0a3)
• client-vpc-lattice: Adding support for CIDR Resource Configuration (46656caf)
• client-socialmessaging: Add support for WhatsApp Calling APIs. (b897c28f)
• client-bedrock-agentcore: Batch evaluation now supports evaluating specific traces within a session. Each session can specify up to 100 trace IDs to evaluate. (fac9ee4c)

---

For list of updated packages, view updated-packages.md in assets-3.1135.0.zip

v3.1134.0

3.1134.0(2026-09-16)

... (truncated)

Changelog

Sourced from @​aws-sdk/client-ecs's changelog.

3.1136.0 (2026-09-18)

Note: Version bump only for package @​aws-sdk/client-ecs

3.1135.0 (2026-09-17)

Note: Version bump only for package @​aws-sdk/client-ecs

3.1134.0 (2026-09-16)

Note: Version bump only for package @​aws-sdk/client-ecs

3.1133.0 (2026-09-15)

Note: Version bump only for package @​aws-sdk/client-ecs

3.1132.0 (2026-09-14)

Note: Version bump only for package @​aws-sdk/client-ecs

3.1131.0 (2026-09-11)

Features

• client-ecs: This feature adds support for setting the cpu architecture type that should be used to launch tasks for an Express Gateway Service. (62bd9bf)

... (truncated)

Commits

• d6b94db Publish v3.1136.0
• 2d5f18d Publish v3.1135.0
• 0d6310b Publish v3.1134.0
• 615a1ca Publish v3.1133.0
• 99b4bd0 Publish v3.1132.0
• 33f2cc7 Publish v3.1131.0
• 62bd9bf feat(client-ecs): This feature adds support for setting the cpu architecture ...
• cd49ceb Publish v3.1130.0
• cece980 Publish v3.1129.0
• 523fff6 Publish v3.1128.0
• Additional commits viewable in compare view

[claude]

LGTM, straightforward dependency version bump.

What was reviewed:

• package.json: single line change bumping @ aws-sdk/client-ecs from ^3.1070.0 to ^3.1132.0
• package-lock.json: regenerated lockfile reflecting the new resolved version and transitive dependency updates, consistent with the package.json change
• No other dependencies, source files, or configuration were touched

Extended reasoning...

Overview

This PR is a dependabot-generated dependency bump touching only two files: package.json and package-lock.json. The sole functional change is raising the pinned version range for @ aws-sdk/client-ecs from ^3.1070.0 to ^3.1132.0; the lockfile changes are the mechanical, expected regeneration that follows from that bump (updated resolved version and any transitive deps pulled in by that package).

Security risks

This is an official AWS SDK package published by AWS under the @ aws-sdk scope, going through 60+ incremental minor version releases with standard AWS release notes (new client features, endpoint updates, documentation fixes) and nothing indicating a supply-chain compromise or breaking security-relevant behavior change. No source code, auth logic, or permissions handling in this repository is touched — only the dependency manifest and lockfile.

Level of scrutiny

Low. This is exactly the kind of simple, mechanical, well-scoped change (a routine dependency version bump from an automated bot) that fits the approval guidelines: no ambiguity, no design decisions, small and self-contained.

Other factors

No bugs were reported by the bug hunting system, there is no PR conversation history with outstanding objections, and there are no CLAUDE.md conventions or CODEOWNERS constraints noted for these paths. I independently confirmed via git diff that the only change is the single dependency version line in package.json, matching the PR's stated description.

[coveralls]

Coverage Report for CI Build 35733286058

Warning

Build has drifted: This PR's base is out of sync with its target branch, so coverage data may include unrelated changes.
Quick fix: rebase this PR. Learn more →

Coverage increased (+0.02%) to 83.409%

Details

• Coverage increased (+0.02%) from the base build.
• Patch coverage: No coverable lines changed in this PR.
• No coverage regressions found.

Uncovered Changes

No uncovered changes found.

Coverage Regressions

No coverage regressions found.

---

Coverage Stats

Relevant Lines:	14201
Covered Lines:	12272
Line Coverage:	86.42%
Relevant Branches:	8697
Covered Branches:	6827
Branch Coverage:	78.5%
Branches in Coverage %:	Yes
Coverage Strength:	3090.81 hits per line

---

💛 - Coveralls