chore(deps): update dependency @aws-sdk/client-s3 to v3.998.0

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
@aws-sdk/client-s3 (source)	3.967.0 → 3.998.0

---

Release Notes

aws/aws-sdk-js-v3 (@​aws-sdk/client-s3)

v3.998.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-s3

v3.997.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-s3

v3.996.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-s3

v3.995.0

Compare Source

3.995.0(2026-02-20)

Chores

• codegen: bump codegen version to 0.45.0 (#​7752) (3c93f8ab)
• util-user-agent-node: populate metadata of alternative JavaScript runtimes (#​7754) (79d2c235)
• make PR template checklist easier to edit (#​7753) (be25ea35)

New Features

• clients: update client endpoints as of 2026-02-20 (aa23f1e0)
• client-appstream: Adding new attribute to disable IMDS v1 APIs for fleet, Image Builder and AppBlockBuilder instances. (72021889)
• client-sagemaker-runtime: Added support for S3OutputPathExtension and Filename parameters to the InvokeEndpointAsync API to allow users to customize the S3 output path and file name for async inference response payloads. (edac3d73)
• client-trustedadvisor: Adding a new enum attribute(statusReason) to TrustedAdvisorAPI response. This attribute explains reasoning behind check status for certain specific scenarios. (2d4a1eb4)
• client-ecs: Migrated to Smithy. No functional changes (20258a5f)
• client-ssm: Add support for AssociationDispatchAssumeRole in AWS SSM State Manager. (83535fc8)
• client-signer-data: This release introduces AWS Signer Data Plane SDK client supporting GetRevocationStatus API. The new client enables AWS PrivateLink connectivity with both private DNS and VPC endpoint URLs. (b03b059d)

---

For list of updated packages, view updated-packages.md in assets-3.995.0.zip

v3.994.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-s3

v3.993.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-s3

v3.992.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-s3

v3.991.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-s3

v3.990.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-s3

v3.989.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-s3

v3.988.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-s3

v3.987.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-s3

v3.986.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-s3

v3.985.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-s3

v3.984.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-s3

v3.983.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-s3

v3.982.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-s3

v3.981.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-s3

v3.980.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-s3

v3.978.0

Compare Source

Features

• client-s3: Adds support for the UpdateObjectEncryption API to change the server-side encryption type of objects in general purpose buckets. (b56cea5)

v3.975.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-s3

v3.974.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-s3

v3.972.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-s3

v3.971.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-s3

v3.970.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-s3

v3.969.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-s3

v3.968.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-s3

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

Renovate PR Review Results

⚖️ Safety Assessment: ⚠️ Needs Manual Migration

🔍 Release Content Analysis

Version Range: v3.967.0 → v3.998.0 (31 patch/minor version increments)

Key Changes Identified:

1. Node.js Engine Requirement Change (BREAKING)

   • Previous: node >= 18.0.0
   • New: node >= 20.0.0
   • This is the most significant change requiring attention

2. New Features (Non-Breaking)

   • v3.978.0: Added UpdateObjectEncryption API for S3 - allows changing server-side encryption type of objects in general purpose buckets without object replacement
   • This feature does NOT affect existing APIs used in the codebase

3. Dependency Updates

   • Multiple Smithy-related packages updated (v4.2.x → v4.2.10+, v4.3.x → v4.4.x, v5.3.x → v5.3.10+)
   • Core AWS SDK packages updated with version bumps
   • All changes marked as "version bump only" or "no functional changes"

4. No Breaking API Changes

   • The APIs used in this codebase (S3Client, PutObjectCommand, HeadObjectCommand) remain backward compatible
   • No changes to method signatures, parameters, or behavior

5. No Security Fixes Mentioned

   • Release notes do not indicate security vulnerabilities addressed in this range

🎯 Impact Scope Investigation

Usage Location Analysis:

1. Primary Usage: tools/r2-sync/main.ts:11

   • Imports: S3Client, PutObjectCommand, HeadObjectCommand
   • Usage pattern:
     • Creates S3Client with Cloudflare R2 endpoint configuration
     • Uses HeadObjectCommand for ETag comparison (line 72-77)
     • Uses PutObjectCommand for file uploads (line 98-104)
   • Impact: ✅ No code changes required - APIs are fully compatible

2. Package Location: package.json:51 (devDependencies)

   • Used exclusively in the r2-sync build tool
   • Not part of production runtime dependencies
   • Executed during GitHub Actions workflows (sync-with-notion.yml:46)

3. Execution Environments:

   • GitHub Actions: Uses .node-version file (Node.js 24.13.0) ✅ Compatible
   • Local Development: Current runner uses Node.js v18.20.8 ❌ Incompatible
   • Production Docker: Uses node:lts-alpine (Node.js 22.x/24.x) ✅ Compatible

Dependency Impact:

• No transitive dependency conflicts identified
• Only package in pnpm-lock.yaml requiring updates is @aws-sdk/client-s3 and its dependencies
• All Smithy and AWS SDK dependency updates are internal to the SDK

Configuration Impact:

• ✅ No environment variable changes required
• ✅ No API endpoint changes
• ✅ Cloudflare R2 compatibility maintained (S3-compatible API)

💡 Recommended Actions

Required Actions:

1. Update Local Development Environment

   • Developers using Node.js < 20.0.0 must upgrade to Node.js 20+ or 24+ (per CLAUDE.md specification: "Node.js 24+")
   • The project already specifies Node.js 24.13.0 in .node-version, so this is already the standard

2. Verify CI/CD Compatibility

   • ✅ GitHub Actions workflows already use .node-version file (24.13.0)
   • ✅ Production Dockerfile uses node:lts-alpine (currently Node.js 22.x or 24.x)
   • No changes needed to workflow files

3. Update Documentation (Optional)

   • Consider documenting minimum Node.js version in README if not already present

Merge Process:

1. Pre-merge verification: None required - CI will validate
2. Post-merge verification: Monitor the next sync-with-notion workflow execution to confirm r2-sync functionality
3. Rollback plan: If issues arise, revert the PR (standard Renovate rollback)

No Code Changes Required:

• ✅ All API usage is backward compatible
• ✅ No migration code needed
• ✅ No configuration updates needed

🔗 Reference Links

• AWS SDK JS v3.998.0 Changelog
• AWS SDK JS v3.978.0 Release (UpdateObjectEncryption API)
• AWS SDK JS v3.995.0 Release
• AWS SDK JS v3 Repository
• Renovate Merge Confidence

Generated by koki-develop/claude-renovate-review

[github-actions]

🚀 Preview deployment ready!

✅ Preview URL: https://pr-1306---web-njpdbbjcea-an.a.run.app
📝 Commit SHA: 083b31d (view commit)

This comment was automatically generated by the deploy-preview workflow.