chore(deps): bump the production-minor-patch group across 1 directory with 3 updates

[dependabot]

Bumps the production-minor-patch group with 3 updates in the / directory: @aws-sdk/client-s3, @tabler/icons-react and next.

Updates @aws-sdk/client-s3 from 3.1132.0 to 3.1140.0

Release notes

Sourced from @​aws-sdk/client-s3's releases.

v3.1140.0

3.1140.0(2026-09-24)

Documentation Changes

• client-route53resolver: Documentation updates for Route 53 Resolver. Clarifies which Outpost Resolver operations apply to first-generation AWS Outposts and that Resolver is managed automatically on second-generation Outposts. Adds Local Network Interface subnet compatibility notes for Resolver endpoints. (b4432aba)
• client-iot: Fixed ListV2LoggingLevels and DeleteV2LoggingLevel documentation to include all supported target-types (4dcf76d5)

New Features

• clients: update client endpoints as of 2026-09-24 (29a8566c)
• client-eventbridgev2: Introducing Amazon EventBridge enhanced Custom event bus, a new shareable event bus for organizational-scale event-driven applications feature ordered delivery, deduplication, open event formats, and cross-account bus sharing. (69fbe6a2)
• client-datazone: Amazon DataZone now supports the TOOLING blueprint category on CreateEnvironmentBlueprint, UpdateEnvironmentBlueprint, GetEnvironmentBlueprint, and ListEnvironmentBlueprints, for custom tooling blueprints. CreateConnection now accepts roleArn in iamProperties. (591cd6f5)
• client-elasticache: Added tagging support for ElastiCache Global DataStore. (0fa9da59)
• client-marketplace-discovery: AWS Marketplace Discovery API now supports localized responses and SigV4a request signing. It returns new fulfillment details, including AMI architecture, EBS volume and security group information, SaaS quick-launch status, and SageMaker input and output MIME types. (510673e3)
• client-redshift-data: Updates to the ListDatabases and WorkgroupName validation (218c24e1)
• client-securityagent: Added support for Confluence export, enabling customers to publish security findings to Confluence pages. (81408527)
• client-cloudwatch: This release adds Create, Get, Update, and DeleteResourceMetricsConfiguration to enable detailed metric collection for an AWS resource, and adds UpdateOTelEnrichment plus include and exclude filters on StartOTelEnrichment so you can choose which metric namespaces CloudWatch enriches. (765cc1ce)
• client-eventbridge: Adds a ManagedBy field to the DescribeEventBus and ListEventBuses responses, identifying the AWS service that created an event bus on your behalf. (28a639b2)

Tests

• undici-http-handler: update bidi stream e2e test to nova-2-sonic model (#8313) (d9a37d9d)

---

For list of updated packages, view updated-packages.md in assets-3.1140.0.zip

v3.1139.0

3.1139.0(2026-09-23)

New Features

• clients: update client endpoints as of 2026-09-23 (557cad53)
• client-billing: Added the ListBillingViewSegments API, which returns billing view segment information for a specified billing view ARN and time range. This API enables customers and integrated tools to programmatically determine the billing context of their accounts. (aa679a98)
• client-network-security-manager: AWS Network Security Manager is a new service that helps you centrally configure, deploy, and continuously enforce security policies on network security services across the accounts and resources in your AWS Organization. (e07a9b6d)
• client-payment-cryptography-data: Adds asymmetric key support to ReEncryptData for re-encrypting data between RSA and symmetric data encryption keys. (3ce62583)
• client-connecthealth: Multi language support with code switching, custom template sectionHeader now allows underscores. (b4256a32)
• client-mediaconvert: This release adds support for SMPTE 337M audio passthrough, compositing up to five motion graphic overlays in a single output, and controlling how passthrough video is segmented in ABR outputs. It also adds 3GP, 3G2, AAC, AC-3, and E-AC-3 as supported input containers for the Probe operation. (bed45e63)
• client-imagebuilder: Documentation update for EC2 Image Builder - adds API request and response examples for all operations, improves descriptions throughout, and corrects response field patterns for image versions and workflow ARNs. (12a03c02)
• client-kinesis: Amazon Kinesis Data Streams now supports service managed record distribution for on demand streams. Set the record distribution strategy to AUTO to evenly distribute records across shards. Configure it at stream creation with CreateStream or update anytime with UpdateStreamRecordDistributionStrategy (c556a9e4)
• client-mediapackagev2: This release adds support for signalling start and end in the ContentKeyPeriod element in key request from MediaPackageV2 (608b4b1e)
• client-lex-models-v2: Adds support for speaker diarization on Amazon Lex V2 bot locales. Speaker diarization keeps your bot on the primary (loudest) speaker during a streaming voice conversation, so background voices do not start a turn or interrupt a prompt. (6da33581)

---

For list of updated packages, view updated-packages.md in assets-3.1139.0.zip

... (truncated)

Changelog

Sourced from @​aws-sdk/client-s3's changelog.

3.1140.0 (2026-09-24)

Note: Version bump only for package @​aws-sdk/client-s3

3.1139.0 (2026-09-23)

Note: Version bump only for package @​aws-sdk/client-s3

3.1138.0 (2026-09-22)

Note: Version bump only for package @​aws-sdk/client-s3

3.1137.0 (2026-09-21)

Note: Version bump only for package @​aws-sdk/client-s3

3.1136.0 (2026-09-18)

Note: Version bump only for package @​aws-sdk/client-s3

3.1135.0 (2026-09-17)

Note: Version bump only for package @​aws-sdk/client-s3

3.1134.0 (2026-09-16)

... (truncated)

Commits

• 6050a38 Publish v3.1140.0
• 03d54a8 Publish v3.1139.0
• c68e50e Publish v3.1138.0
• 9a10476 chore(codegen): sync for MetricsRecorder support and core error/retry fixes (...
• 6b43247 Publish v3.1137.0
• d6b94db Publish v3.1136.0
• 2d5f18d Publish v3.1135.0
• 0d6310b Publish v3.1134.0
• 615a1ca Publish v3.1133.0
• See full diff in compare view

Updates @tabler/icons-react from 3.46.0 to 3.48.0

Release notes

Sourced from @​tabler/icons-react's releases.

Release 3.48.0

18 new icons:

• outline/duplicate
• outline/folder-ai
• outline/folder-sparkle
• outline/git-branch-check
• outline/git-branch-x
• outline/git-merge-queue
• outline/git-pull-request-locked
• outline/git-pull-request-unlisted
• outline/message-2-ai
• outline/message-2-sparkle
• outline/message-ai
• outline/message-sparkle
• outline/model-ai
• outline/pencil-ai
• outline/stack-check
• outline/stack-minus
• outline/stack-plus
• outline/stack-x

Release 3.47.0

18 new icons:

• outline/airpods-l
• outline/airpods-r
• outline/cash-coin
• outline/edit-bulk
• outline/folder-stats
• outline/folder-user
• outline/gpu-2
• outline/gpu
• outline/map-pinned
• outline/orbit-vertical
• outline/orbit
• outline/orbits
• outline/reduce-motion
• outline/reference-image
• outline/secret-phrases
• outline/sticker-smile
• outline/voice-2
• outline/voice

Fixed icon: outline/align-right-2

... (truncated)

Commits

• 0239805 Release 3.48.0
• 87e7c39 Release 3.47.0
• bbb9bdb Run tests in CI, fix ReactSVG type rot, add type and RSC guards (#1579)
• 45a7ca8 Remove trailing space from the icon class attribute (#1582)
• 55f87a7 Refresh package READMEs: fix wrong props, broken links and inconsistent struc...
• See full diff in compare view

Updates next from 16.3.5 to 16.3.6

Release notes

Sourced from next's releases.

v16.3.6

This release contains a security fix for GHSA-vcvr-r3jv-pc5j: Remote Code Execution in next/og ImageResponse

Commits

• a758ffc v16.3.6
• 868fad3 [active-lts] Harden next/og SVG serialization
• 8c81cbb [lts-active] test: remove unsupported deployment ID builder cases (#98821)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.