chore(sdk): update dependency moto to v5.2.2

[renovate]

This PR contains the following updates:

Package	Type	Update	Change	OpenSSF
moto (changelog)	dependency-groups	minor	==5.1.11 → ==5.2.2

---

Release Notes

getmoto/moto (moto)

v5.2.2

Compare Source

Docker Digest for 5.2.2: sha256:d8ae5edc2bf080e7e4c13f9bd4b29b53ac3b4427e92956318db3dbe23ec43eb7

New Methods:
    * DS:
        * disable_radius()
        * enable_radius()

    * KinesisAnalyticsV2:
        * untag_resource()

    * Logs:
        * start_live_tail()

    * SESv2:
        * update_contact()
        * update_contact_list()

    * SWF:
        * tag_resource()
        * untag_resource()

Miscellaneous:
    * ACM: import_certificate() now accepts certificates without a CN
    * ACM: request_certificate() now preserves the default options when not all are provided
    * CloudFormation: Created Lambda resources now take the `use_docker`-configuration into account
    * CloudFormation: update_stack_instances() now validates that a StackInstance exists
    * Events: create_partner_event_source() now returns the EventSourceArn-attribute
    * Route53: list_resource_record_sets() no longer returns a TTL for aliases
    * S3: completed_multipart_upload() is now compatible with external tools like PyArrow
    * S3: get_object() now supports all Response* headers

v5.2.1

Compare Source

Docker Digest for 5.2.1: sha256:fe6575dcd878842124f05d20e4ffde2d1126e1e38ad03e196353b9e53649bcdf

Miscellaneous:
    * DynamoDB: batch_write_item() now correctly handles PUT requests with Binary (B) attributes (broken in 5.2.0)
    * S3: Uploading files no longer fails with 'Unsupported protocol' (broken in 5.2.0)
    * S3: create_multipart_upload() is now compatible with Java SDK again (broken in 5.2.0)
    * Route53: update_health_check() now correctly updates falsy values (broken in 5.2.0)

v5.2.0

Compare Source

Docker Digest for 5.2.0: sha256:d8d063e3e704d256cbe8165072fa273c17698be91311e49fc602b7716f459bea

General:
    * Drops support for Python 3.9
    * Lambda Containers now configure the AWS_ENDPOINT_URL, automatically intercepting requests to other AWS services

New Services:
    * Bedrock-AgentCore-Control:
        * create_agent_runtime()
        * create_agent_runtime_endpoint()
        * create_gateway()
        * create_gateway_target()
        * create_memory()
        * delete_agent_runtime()
        * delete_agent_runtime_endpoint()
        * delete_gateway()
        * delete_gateway_target()
        * delete_memory()
        * get_agent_runtime()
        * get_agent_runtime_endpoint()
        * get_gateway()
        * get_gateway_target()
        * get_memory()
        * list_agent_runtimes()
        * list_agent_runtime_endpoints()
        * list_agent_runtime_versions()
        * list_gateways()
        * list_gateway_targets()
        * list_memories()
        * list_tags_for_resource()
        * tag_resource()
        * update_agent_runtime()
        * update_agent_runtime_endpoint()
        * update_gateway()
        * update_gateway_target()
        * untag_resource()

    * Bedrock-Runtime:
        * invoke_model()

    * FIS:
        * create_experiment_template()
        * delete_experiment_template()
        * list_tags_for_resource()
        * tag_resource()
        * untag_resource()

New Methods:
    * Athena:
        * get_database()
        * list_databases()

    * DAX:
        * tag_resource()
        * untag_resource()

    * EC2:
        * create_traffic_mirror_filter()
        * create_traffic_mirror_target()
        * describe_traffic_mirror_filter()
        * describe_traffic_mirror_target()

    * Kafka:
        * delete_cluster_policy()
        * get_cluster_policy()
        * put_cluster_policy()

    * Pipes:
        * start_pipe()
        * stop_pipe()

    * StepFunctions:
        * create_state_machine_alias()
        * delete_state_machine_alias()
        * describe_state_machine_alias()
        * list_state_machine_aliases()
        * update_state_machine_alias()

    * SWF:
        * list_tags_for_resource()
        * tag_resource()
        * untag_resource()

    * Transfer:
        * create_connector()
        * delete_connector()
        * describe_connector()
        * list_connectors()
        * update_connector()

    * VPC Lattice:
        * create_listener()
        * create_target_group()
        * create_service_network_resource_association()
        * create_service_network_service_association()
        * get_listener()
        * get_target_group()
        * get_service_network_resource_association()
        * get_service_network_service_association()
        * list_listeners()
        * list_target_groups()
        * list_service_network_resource_associations()
        * list_service_network_service_associations()

Miscellaneous:
    * Autoscaling: delete_auto_scaling_group() now validates that the provided AutoScalingGroup exists
    * DMS: describe_replication_tasks() now behaves correctly without any Filters supplied
    * DynamoDB: ConditionExpressions are now validated for redundant parentheses, improving parity with AWS
    * DynamoDB: describe_export() now returns additional attributes: TableArn, S3Bucket and S3Prefix
    * DynamoDB: update_continuous_backups() now returns additional attributes: RecoveryPeriodInDays
    * DynamoDB: update_item() now correctly handles byte-records when throwing a `ConditionalCheckFailedException`
    * DynamoDB-Streams: get_records() now omits empty OldImage/NewImage records, improving parity with AWS
    * EC2: run_instances() now uses the following LaunchTemplateSpec-parameters: UserData, InstanceType, KeyName, SecurityGroups, SecurityGroupIds
    * ECS: describe_services() now returns the following attributes: rolloutState, rolloutStateReason and failedTasks (defaults to 0, configurable with env var `MOTO_ECS_SERVICE_FAILED_TASKS=1`
    * Events: list_rule_names_by_target() now deduplicates the results
    * KMS: generate_mac() now supports aliases
    * KMS: update_alias() now supports a full ARN as the TargetKeyId
    * Lambda now starts containers using shogo82148's images by default (https://hub.docker.com/r/shogo82148/lambda-python)
    * Logs: get_query_results() now returns the results in the correct order (either ascending or descending)
    * Pipes: The Pipe-class now supports 
    * RAM now accepts service principals and IAM ARNs as resource share principals
    * ResourceGroupsTaggingAPI: get_resources() now supports SWF domains
    * Route53Resolver: list_resolver_query_log_configs() now supports the Id-filter
    * S3 now correctly calculates checksums for individual MultiParts
    * S3 now supports the `use_dualstack_endpoint` and `use_fips_endpoint` configuration options
    * S3: create_bucket() now supports the parameter BucketNamespace="account-regional"
    * S3: complete_multipart_upload() now returns the attributes ChecksumAlgorithm and ChecksumType
    * S3: list_buckets() now supports the parameters BucketRegion, MaxBuckets and Prefix
    * SESv2: create_email_identity() now returns additional attributes: NextSigningKeyLength and SigningAttributesOrigin
    * SES: publish() now supports the `MessageGroupId`-parameter for standard queues, allowing use of SQS fair queues
    * SNS: Creation of FIFO queues with CloudFormation is now supported
    * SQS: receive_message() now supports additional `MessageAttributeNames`-patterns: ".*" and "<prefix>.*"
    * SWF: register_domain() now supports the tags-parameter
    * WAFv2: get_web_acl() now supports the ARN-parameter

v5.1.22

Compare Source

Docker Digest for 5.1.22: sha256:1e3802c95726373544967b428201c548f0247c15b00db2d96a5ba0a77d8643b8

New Methods:
    * APIGateway:
        * delete_model()

    * Athena:
        * tag_resource()
        * untag_resource()

    * Pipes:
        * list_tags_for_resource()

    * OSIS:
        * delete_resource_policy()
        * get_resource_policy()
        * put_resource_policy()

    * RDS:
        * copy_db_cluster_parameter_group()

    * STS:
        * get_access_key_info()

    * Transfer:
        * list_servers()

Miscellaneous:
    * CloudFormation now supports the creation/update/deletion of AWS::CloudWatch::Dashboard resources
    * CloudFormation now supports the creation/update/deletion of AWS::KMS::Alias resources
    * CloudFormation now supports the creation/update/deletion of AWS::SSM::Document resources
    * EC2: create_fleet() now supports the parameters DryRun and LaunchTemplateConfigs.Overrides
    * EC2: describe_network_interfaces() now supports the 'attachment.attachment-id'-filter
    * EC2: Instances created from a LaunchTemplate now have the 'aws:ec2launchtemplate:id' and 'aws:ec2launchtemplate:version' tags
    * RDS: create_db_cluster_parameter_group() now validates the provided group name/description/familiy
    * RDS: delete_db_cluster_parameter_group() now validates that the provided group exists
    * S3: delete_object() now supports IfMatch
    * SecretsManager: create-secret() now throw ResourceExistsException for duplicate requests with different token (broken since 5.1.11)
    * SQS: send_message() now returns the SequenceNumber-attribute
    * VPCLattice: list_access_log_subscriptions() now also supports arns as resourceIdentifiers

v5.1.21

Compare Source

Docker Digest for 5.1.21: sha256:93ad54da7badce7f9c13e5e6439c93564c764663c42872d2c39f718aa484047a

General:
    * Moto now supports the new AWS partition for the EU sovereign cloud ('eusc-de-east-1')

New Services:
    * Account:
        * delete_alternate_contact()
        * get_alternate_contact()
        * put_alternate_contact()

    * Connect:
        * associate_analytics_data_set()
        * create_instance()
        * delete_instance()
        * describe_instance()
        * disassociate_analytics_data_set()
        * list_analytics_data_associations()
        * list_instances()
        * list_tags_for_resource()
        * tag_resource()
        * untag_resource()

New Methods:
    * Backup:
        * create_report_plan()
        * delete_backup_vault()
        * delete_backup_vault_lock_configuration()
        * describe_backup_vault()
        * describe_report_plan()
        * list_report_plans()
        * put_backup_vault_lock_configuration()

    * EKS:
        * update_nodegroup_config()

    * Route53Resolver:
        * get_resolver_query_log_config_association()
        * list_resolver_query_log_configs()
        * list_resolver_query_log_config_associations()

    * SecurityHub:
        * get_master_account()

Miscellaneous:
    * DynamoDB now supports multi-attribute composite key support for GSIs
    * ELBv2: Internal load balancers can now be `dualstack`
    * IAM: Policy validation now correctly validates Boolean conditions and NULL-resources
    * Lambda: put_function_event_invoke_config() no longer requires the DestinationConfig-parameter
    * ResourceGroupsTaggingAPI: tag_resources() and untag_resources() now supports CloudFront resources
    * SageMaker: describe_domain() now returns the DomainSetting-attribute

v5.1.20

Compare Source

Docker Digest for 5.1.20: sha256:d2711655244df58411ce0be34236c95736390db17886370d21e12ae2b1e36f79

New Methods:
    * EC2:
        * create_subnet_cidr_reservation()
        * delete_subnet_cidr_reservation()
        * get_instance_uefi_data() (Just a stub, no actual data is returned)
        * get_subnet_cidr_reservations()

    * IOT:
        * list_thing_principals_v2()

    * ResourceGroups:
        * cancel_tag_sync_task()
        * get_tag_sync_task()
        * list_tag_sync_tasks()
        * start_tag_sync_task()

    * Route53Resolver:
        * get_resolver_dnssec_config()
        * list_resolver_dnssec_configs()
        * update_resolver_dnssec_config()

    * S3Control:
        * create_multi_region_access_point()
        * delete_multi_region_access_point()
        * delete_storage_lens_configuration()
        * describe_multi_region_access_point_operation()
        * get_multi_region_access_point()
        * get_multi_region_access_point_policy()
        * get_multi_region_access_point_policy_status()
        * list_multi_region_access_points()
        * put_multi_region_access_point_policy()

    * SecurityHub:
        * create_members()
        * get_members()
        * list_members()

Miscellaneous:
    * ACM: import_certificate() now supports all key types, RSA and EC
    * APIGateway: update_rest_api() now supports `/endpointConfiguration/types`
    * Autoscaling: update_auto_scaling_group() now supports the MixedInstancesPolicy-parameter
    * Batch: register_job_definition() now supports the eksProperties-parameter
    * DMS: create_replication_task() now supports the Tags-parameter
    * Organizations: list_policies() now support pagination
    * Organizations now supports Resource Control Policy
    * Redshift: describe_clusters() now supports the TagKeys-parameter
    * Logs: put_subscription_filter() now supports other LogGroups

v5.1.19

Compare Source

Docker Digest for 5.1.19: sha256:1bba01d147a15d14a5816b69ee6d346ba04bd43baab4a3a27a55c368ecc2bb90

General:
    * Removed support for ElasticTranscoder, now that AWS has also deprecated this service

New Methods:
    * ACM-PCA:
        * revoke_certificate()

    * DSQL:
        * delete_cluster()
        * get_vpc_endpoint_service_name()
        * list_tags_for_resource()

    * FSX:
        * describe_backups()

    * SESv2:
        * list_tags_for_resource()
        * tag_resource()
        * untag_resource()

    * VPC Lattice:
        * delete_auth_policy()
        * delete_resource_policy()
        * get_auth_policy()
        * get_resource_policy()
        * put_auth_policy()
        * put_resource_policy()

Miscellaneous:
    * DynamoDB: put_item() now correctly validates numeric and boolean values
    * EC2: describe_instances() now returns the correct status for BlockDeviceMappings.Ebs.Status (attached, instead of in-use)
    * EC2: describe_network_acls() now supports the 'association.association-id' Filter
    * ELBv2: modify_load_balancer_attributes() no longer fails when modifying the 'health_check_logs.s3.enabled' attribute
    * ResourceGroupsTaggingAPI: get_resources() now supports the SESv2 resources: ConfigurationSets, ContactLists, DedicatedIpPool, EmailIdentity
    * Route53: change_tags_for_resource() no longer throws an error for removing a non-existing tag
    * S3: list_object_versions() now correctly calculates the IsLatest-attribute
    * Scheduler: list_schedules() and list_schedule_groups() now support pagination
    * SecretsManager: batch_get_secret_value() now returns error handling for unknown secrets
    * SSM: put_parameter() now returns the Tier-attribute

v5.1.18

Compare Source

Docker Digest for 5.1.18: sha256:c99ea4ab0881e1d95af5601c2cd42ef4dac15eefdf6597532c59d9631068818a

General:
    * Introduces two methods for enabling and disabling IAM authentication:
        from moto.core import disable_iam_authentication, enable_iam_authentication
      They behave the same as the `@set_initial_no_auth_action_count`-decorator, but can be used as a fixture/context manager

New Services:
    * Pipes:
        * create_pipe()
        * delete_pipe()
        * describe_pipe()
        * list_pipes()
        * tag_resource()
        * untag_resource()

New Methods:
    * S3Control:
        * list_tags_for_resource()
        * tag_resource()
        * untag_resource()

    * S3Vectors:
        * delete_vector_bucket_policy()
        * delete_vectors()
        * get_vector_bucket_policy()
        * get_vectors()
        * list_vectors()
        * put_vector_bucket_policy()
        * put_vectors()

Miscellaneous:
    * APIGateway: put_rest_api() now correctly creates integrations
    * AutoScaling: create_auto_scaling_group() now correctly calculates the InstancesDistribution for MixedInstancesPolicies
    * ResourceGroupsTaggingAPI: get_resources() now supports filtering by `sqs:queue`
    * SecretsManager: put_secret_value() now adds the AWSCURRENT-label if it's the first version of the Secret being added

v5.1.17

Compare Source

Docker Digest for 5.1.17: sha256:0361ac8f0cc6687dcf3835da1d60e31cf457fb0d49229d56586f2aa5c510f170

General:
    * The MotoServer dashboard (available on http://localhost:5000/moto-api) now has an new and improved look, making it easier to search for and find your resources

New Methods:
    * CloudFront:
        * tag_resource()
        * untag_resource()

    * DMS:
        * create_replication_subnet_group()
        * describe_connection()
        * describe_replication_subnet_group()
        * delete_endpoint()
        * delete_replication_instance()
        * delete_replication_subnet_group()
        * test_endpoint()

    * EC2:
        * describe_reserved_instances_offerings()

    * RDS:
        * add_role_to_db_cluster()
        * add_role_to_db_instance()

    * S3Vectors:
        * create_index()
        * delete_index()
        * get_index()
        * list_indexes()

    * ServiceCatalog:
        * create_product()
        * describe_product()
        * delete_product()

Miscellaneous:
    * ACM-PCA: get_certificate() now returns the CertificateChain-attribute, if appropriate
    * DMS: Manual control of the State Transition is now available for the `dms:connection` and `dms:replicationinstance` models.
    * Organizations: describe_account() now returns the State-attribute.
    * ResourceGroupsTaggingAPI: get_resources() now supports all Comprehend models
    * StepFunctions: create_execution() now takes the execution input into account when checking idempotency.

v5.1.16

Compare Source

Docker Digest for 5.1.16: sha256:f78c8e0370cabe2516395f351fb27e1df1aa6dc2d728d6de16d5dfbc9ccf595d

General:
    * Removed support for the RoboMaker and QLDB, now that AWS has also deprecated these services

New Services:
    * S3Vectors:
        * create_vector_bucket()
        * delete_vector_bucket()
        * get_vector_bucket()
        * list_vector_buckets()

New Methods:
    * Glue:
        * create_security_configuration()
        * delete_security_configuration()
        * get_security_configuration()
        * get_security_configurations()

    * FSx:
        * create_backup()
        * delete_backup()
        * list_tags_for_resource()

    * VPCLattice:
        * get_service()
        * get_service_network()
        * list_services()
        * list_service_networks()
        * list_tags_for_resource()
        * tag_resource()
        * untag_resource()

Miscellaneous:
    * ACM: list_certificates() now supports the 'keyTypes'-filter
    * APIGateway: get_stage() now supports stages that are URL encoded, like '$default'
    * DynamoDB now supports the WarmThroughput parameter on Tables and Indexes
    * DynamoDB: execute_statement() now supports querying indexes (both GSI and LSI)
    * EC2: create_volume() now supports the MultiAttachEnabled-parameter
    * EC2: modify_volume() now supports the parameters Iops, Throughput and MultiAttachEnabled
    * ElastiCache: create_cache_cluster() now validates that the mandatory parameter CacheNodeType is provided
    * ELBv2: describe_listener_certificates() now returns the IsDefault-field
    * Glue: create_connection() now supports the parameters ConnectionProperties, SparkProperties, AthenaProperties and PythonProperties
    * ResourceGroupsTaggingAPI: get_resources() now supports FSx resource types (Backups and FileSystems)
    * ResourceGroupsTaggingAPI: get_resources() now supports VPCLattice resource types (Services and Service Networks)
    * ResourceGroupsTaggingAPI: untag_resources() now supports RDS resource types
    * S3: put_object_tagging() now throws MethodNotAllowed when trying to tag a DeleteMarker
    * SSM: get_parameters_by_path() now validates that the maxResults-parameter is 10 at most

v5.1.15

Compare Source

Docker Digest for 5.1.15: sha256:8860b18917e1ee4d067df19a406ae95dc26037e6965d5b499e1cffd33755b914

General:
    * Python 3.14 is now officially supported

New Methods:
    * IdentityStore:
        * get_user_id()

    * SESv2:
        * delete_email_identity()

    * VPCLattice:
        * create_access_log_subscription()
        * delete_access_log_subscription()
        * get_access_log_subscription()
        * list_access_log_subscriptions()
        * update_access_log_subscription()

Miscellaneous:
    * ACM: request_certificate() now supports the Option-parameter
    * ACM: list_certificates() now supports the Includes-parameter, supporting Exportable Public Certificates
    * APIGatewayV2: get_domain_name() now returns the DomainNameArn-attribute
    * Athena: Executions can now be delayed using state transitions
    * CloudFormation: validate_template() now supports short function refs (!Sub)
    * Config: Now supports "AWS::SNS::Topic"-resources
    * EC2: create_subnet() now supports the Ipv6Native-parameter
    * EC2: create_transit_gateway_vpc_attachment() now validates that the TransitGateway exists
    * EC2: create_transit_gateway_vpc_attachment() now validates that no other attachment to this VPC exists
    * EC2: create_transit_gateway_vpc_attachment() now automatically adds the attachment to the default RouteTable
    * EC2: create_transit_gateway_vpc_attachment() now correctly creates multiple attachments if called twice (for different VPC's)
    * EC2: create_vpn_connection() now validates that only one of [VPNGateway|TransitGateway] is provided
    * EC2: create_vpn_connection() now validates that the provided CustomerGateway and TransitGateway exists
    * EC2: create/modify/describe_vpc_endpoint_service_configuration now supports the SupportedRegions-param
    * EC2: describe_transit_gateway_attachments() now returns the correct RouteTableID
    * EC2: describe_vpc_endpoints() now supports the 'vpc-endpoint-state'-filter
    * Lambda: list_layer_versions() now returns the layers in the correct order - latest version first.
    * ResourceGroupsTaggingAPI: get_resources() now supports SSM Parameters
    * ResourceGroupsTaggingAPI: get_resources() now supports the 'kms:key' type
    * SESv2: send_email() can now use an email registered by `create_email_identity()`, instead of having the SESv1:verify_domain_identity()-method

v5.1.14

Compare Source

Docker Digest for 5.1.14: sha256:800719627036dc38dc699e9f314f624f2c98ac3d8bb754db078cb2698f08ee77

New Services:
    * CloudWatch-Synthetics:
        * create_canary()
        * get_canary()
        * describe_canaries()
        * list_tags_for_resource()

    * MediaPackageV2:
        * create_channel()
        * create_channel_group()
        * delete_channel()
        * delete_channel_group()
        * get_channel()
        * get_channel_group()
        * list_channel_groups()

    * VPCLattice:
        * create_service()
        * create_service_network()
        * create_service_network_vpc_association()
        * create_rule()

New Methods:
    * Kinesis:
        * describe_limits()

    * Macie2:
        * disassociate_member()
        * enable_organization_admin_account()
        * list_organization_admin_accounts()

    * SecurityHub:
        * describe_hub()
        * disable_security_hub()
        * enable_security_hub()

    * ServiceHub-AppRegistry:
        * get_configuration()
        * put_configuration()

Miscellaneous:
    * IOTData: update_thing_shadow() now supports state=None
    * ResourceGroupsTaggingAPI: list_tags_for_resource() now returns ARN's for Athena resources, instead of names
    * ResourceGroupsTaggingAPI: list_tags_for_resource() now supports Kinesis Firehose resources
    * S3: put_object() now stores the correct (actual) content when using the Java SDK, and no longer include the checksum headers in the body
    * Shield: create_protection() now only allows ARN's of Elastic IP Addresses, instead of all EC2 resources

v5.1.13

Compare Source

Docker Digest for 5.1.13: sha256:0503bdc569e122966fc5fceef43d4a9562ed21e4091cf865801dba90cbb62ea5

New Services:
    * Macie2:
        * accept_invitation()
        * create_invitations()
        * decline_invitations()
        * delete_member()
        * disable_macie()
        * enable_macie()
        * get_administrator_account()
        * get_macie_session()
        * list_invitations()
        * list_members()

New Methods:
    * Athena:
        * list_capacity_reservation()
        * update_capacity_reservation()

Miscellaneous:
    * CloudWatch: get_metric_data() now supports the ReturnData-parameter again (broken in 5.1.12)
    * CognitoIDP: admin_respond_to_auth_challenge() now returns the scope=aws.cognito.signin.user.admin in the AccessToken
    * ELB: modify_load_balancer_attributes() now supports the `secondary_ips.auto_assigned.per_subnet` attribute
    * IAM: get_server_certificate() now returns the CertificateChain-parameter
    * S3: put_bucket_lifecycle_configuration() now correctly processes a LifeCycleConfiguration with 0 Rules
    * SNS: publish_batch() now returns the original MessageAttributes provided by the user again (broken in 5.1.12)

v5.1.12

Compare Source

Docker Digest for 5.1.12: sha256:e1cf8b624019e6eba25cb5b37efdf95a463fc24691978540a1c7008b7d02fda0

General:
    * Removed support for OpsWorks, now that AWS has also deprecated this service.
      https://docs.aws.amazon.com/opsworks/latest/userguide/stacks-eol-faqs.html

New Methods:
    * Glue:
        * batch_get_workflows()
        * create_workflow()
        * delete_workflow()
        * get_workflow()
        * get_workflow_run()
        * get_workflow_runs()
        * get_workflow_run_properties()
        * list_workflows()
        * put_workflow_run_properties()
        * start_workflow_run()
        * stop_workflow_run()
        * update_workflow()

    * IOT:
        * add_thing_to_billing_group()
        * create_billing_group()
        * delete_billing_group()
        * describe_billing_group()
        * list_billing_groups()
        * list_things_in_billing_group()
        * remove_thing_from_billing_group()
        * update_billing_group()

    * SES:
        * clone_receipt_rule_set()

    * SSM:
        * create_data_source()
        * deregister_patch_baseline_for_patch_group()
        * delete_data_source()
        * describe_data_source()
        * get_patch_baseline_for_patch_group()
        * list_data_sources()
        * list_tags_for_resource()
        * register_patch_baseline_for_patch_group()
        * update_data_source()
        * tag_resource()
        * untag_resource()

Miscellaneous:
    * EC2: describe_network_interfaces() now returns the attributes PublicIP, PublicDNSName and IpOwnerId
    * IOT: search_index() now supports logical expression handling in the queryString-parameter, with NOT, AND, OR and parentheses for complex queries
    * IOT: search_index() now supports thingGroupNames in the queryString-parameter
    * ResourceGroupsTaggingAPI: list_tags_for_resource() now supports QuickSight resources
    * ResourceGroupsTaggingAPI: tag_resource() now supports QuickSight resources
    * ResourceGroupsTaggingAPI: untag_resource() now supports QuickSight resources
    * SES: create_receipt_rule() now contains additional validation around the RuleSetName and the provided rule-actions
    * SES: create_receipt_rule() now supports the After-parameter
    * STS: assume_role() now validates that the length of the roleSessionName-parameter is max 64 characters long
    * QuickSight: create_data_set() now supports the Tags-parameter

---

Configuration

📅 Schedule: (in timezone Europe/Madrid)

• Branch creation
  • At 10:00 PM through 11:59 PM and 12:00 AM through 05:59 AM, on day 8 of the month, every 3 months (* 22-23,0-5 8 */3 *)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

• any of the package files in this branch needs updating, or
• the branch becomes conflicted, or
• you click the rebase/retry checkbox if found above, or
• you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: uv.lock

Command failed: uv lock --upgrade-package moto
Using CPython 3.13.14 interpreter at: /opt/containerbase/tools/python/3.13.14/bin/python3
  × No solution found when resolving dependencies for split (markers:
  │ python_full_version == '3.13.*'):
  ╰─▶ Because prowler:dev depends on moto[all]==5.2.2 and moto==5.1.11, we can
      conclude that prowler:dev's requirements are unsatisfiable.
      And because your project requires prowler:dev, we can conclude that your
      project's requirements are unsatisfiable.

[github-actions]

⚠️ Changes detected in the following folders without a changelog fragment:

• prowler (root dependency files changed)

A changelog fragment is a small Markdown file named <slug>.<type>.md under <component>/changelog.d/, where <type> is one of added, changed, deprecated, removed, fixed or security. Its content is the changelog entry text, without the PR link (added automatically at release time) and without a trailing period. For example:

echo 'Entry text describing the change' > <component>/changelog.d/moto-5.x.fixed.md

If this PR does not need a changelog entry, add the no-changelog label instead.

[github-actions]

✅ No Conflicts

No conflict markers, and the branch merges cleanly into its base.