Bump @aws-sdk/client-appsync from 3.1086.0 to 3.1091.0

[dependabot]

Bumps @aws-sdk/client-appsync from 3.1086.0 to 3.1091.0.

Release notes

Sourced from @​aws-sdk/client-appsync's releases.

v3.1091.0

3.1091.0(2026-07-20)

Documentation Changes

• client-organizations: Updated InvalidInputException error documentation to clarify that the service validates free-text field values against common cross-site scripting (XSS) patterns. (6ac1bf08)
• client-marketplace-metering: For new SaaS product integrations, CustomerIdentifier is not populated in ResolveCustomer responses and is not supported in BatchMeterUsage. Use CustomerAWSAccountId and LicenseArn instead. (f1ff8983)

New Features

• client-quicksight: Adds support for custom permissions for Triggers, allowing administrators to control user access to Schedule, Inbound Email and Quick Event triggers. (fbe7d94d)
• client-bedrock-agentcore: Add W3C trace context headers (traceparent, tracestate, baggage) and X-Amzn-Trace-Id to InvokeHarness request for end-to-end observability propagation. Add toolResultMetadata to the streaming content block delta for MCP tool result meta delivery without oversized SSE frames. (4cf22ef3)
• client-bedrock-agentcore-control: This release adds support for specifying a connector version on Gateway targets to pin the connector's tool schema. It also introduces web-search connector version 1.2.0, which adds agent-side domain filtering, published date range filtering, and admin-side domain allowlisting. (2c37055a)
• client-sesv2: Amazon SES introduces three new Pricing Plans (Essentials, Pro, Enterprise), which bundle SES features under one pricing umbrella. The new PutAccountPricingAttributes API lets the user set the account's plan, while current plan retrievalif done through the new PricingAttributes field on GetAccount. (751dc8df)
• client-mediatailor: This change adds api support for configuring ad decision server timeouts and concurrency fields on MediaTailor playback configurations (97ea965e)
• client-inspector2: Adds Windows path support for deep inspection. Fixes tag propagation for connector CloudFormation stack operations. (2263613f)

Tests

• middleware-sdk-route53: loosen date in path assertion (#8212) (e5225182)

---

For list of updated packages, view updated-packages.md in assets-3.1091.0.zip

v3.1090.0

3.1090.0(2026-07-17)

New Features

• clients: update client endpoints as of 2026-07-17 (857153f3)
• client-kinesis-analytics-v2: Support for Flink 2.3 in Managed Service for Apache Flink (1ad0421f)
• client-gameliftstreams: Amazon GameLift Streams now supports assigning an IAM role to a stream session, enabling your application to securely access resources in your AWS account, such as Amazon S3 buckets and DynamoDB tables. (cf945cdb)
• client-rds: Adds the AssociatedRoles parameter to CreateDBCluster, RestoreDBClusterFromSnapshot, RestoreDBClusterToPointInTime, and RestoreDBClusterFromS3, letting customers associate IAM roles with an Aurora DB cluster at create or restore time instead of calling AddRoleToDBCluster afterward. (48b74a43)
• client-odb: Adds support for sourcing Autonomous Database admin and wallet passwords from customer-managed AWS Secrets Manager secrets, including password source configuration and summaries, and enabling or disabling the OCI IAM service role for Secrets Manager integration via InitializeService. (d5619c8b)
• client-cognito-identity-provider: Amazon Cognito user pools now support sending SMS via AWS End User Messaging. A new EumsSms object in SmsConfigurationType lets you deliver MFA and verification texts through AWS End User Messaging, alongside the existing Amazon SNS option. (600cf8d5)

---

For list of updated packages, view updated-packages.md in assets-3.1090.0.zip

v3.1089.0

3.1089.0(2026-07-16)

Chores

• enable pkg json sorting (#8200) (926898ee)
• remove redundant type assertions (#8193) (b41fbb0e)

... (truncated)

Changelog

Sourced from @​aws-sdk/client-appsync's changelog.

3.1091.0 (2026-07-20)

Note: Version bump only for package @​aws-sdk/client-appsync

3.1090.0 (2026-07-17)

Note: Version bump only for package @​aws-sdk/client-appsync

3.1089.0 (2026-07-16)

Note: Version bump only for package @​aws-sdk/client-appsync

3.1088.0 (2026-07-15)

Note: Version bump only for package @​aws-sdk/client-appsync

3.1087.0 (2026-07-14)

Note: Version bump only for package @​aws-sdk/client-appsync

Commits

• a1269f7 Publish v3.1091.0
• eb268ed Publish v3.1090.0
• 60e8b54 Publish v3.1089.0
• 73de389 Publish v3.1088.0
• d43e5bf chore(codegen): sync to use typesVersions entries for submodules (#8195)
• ec24bb4 Publish v3.1087.0
• a20c28d chore(codegen): sync for codegen and include OAuthIAM operation for signin li...
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)