hapi-auth-oidc: bump the minor-and-patch group across 1 directory with 3 updates

[dependabot]

Bumps the minor-and-patch group with 3 updates in the /packages/hapi-auth-oidc directory: @aws-sdk/client-cognito-identity, openid-client and qs.

Updates @aws-sdk/client-cognito-identity from 3.980.0 to 3.1030.0

Release notes

Sourced from @​aws-sdk/client-cognito-identity's releases.

v3.1030.0

3.1030.0(2026-04-13)

Documentation Changes

• client-glue: AWS Glue now defaults to Glue version 5.1 for newly created jobs if the Glue version is not specified in the request, and UpdateJob now preserves the existing Glue version of a job when the Glue version is not specified in the update request. (3f133ce0)

New Features

• clients: update client endpoints as of 2026-04-13 (c2fd223d)
• client-macie2: This release adds an optional expectedBucketOwner field to the Macie S3 export configuration, allowing customers to verify bucket ownership before Macie writes results to the destination bucket. (4ce1dadc)
• client-securityhub: Provide organizational unit scoping capability for GetFindingsV2, GetFindingStatisticsV2, GetResourcesV2, GetResourcesStatisticsV2 APIs. (7dbb49e2)
• client-deadline: Adds GetMonitorSettings and UpdateMonitorSettings APIs to Deadline Cloud. Enables reading and writing monitor settings as key-value pairs (up to 64 keys per monitor). UpdateMonitorSettings supports upsert and delete (via empty value) semantics and is idempotent. (c21faa84)
• client-customer-profiles: This release introduces changes to SegmentDefinition APIs to support sorting by attributes. (c5c51968)
• client-interconnect: Initial release of AWS Interconnect -- a managed private connectivity service that enables you to create high-speed network connections between your AWS Virtual Private Clouds (VPCs) and your VPCs on other public clouds or your on-premise networks. (209d3633)

---

For list of updated packages, view updated-packages.md in assets-3.1030.0.zip

v3.1029.0

3.1029.0(2026-04-10)

New Features

• client-observabilityadmin: CloudWatch Observability Admin adds support for multi-region telemetry evaluation and telemetry enablement rules. (861e172a)
• client-rtbfabric: Adds optional health check configuration for Responder Gateways with ASG Managed Endpoints. When provided, RTB Fabric continuously probes customers' instance IPs and routes traffic only to healthy ones, reducing errors during deployments, scaling events, and instance failures. (3e890437)
• client-ecs: Minor updates to exceptions for completeness (788ab4a6)
• client-devops-agent: Devops Agent now supports associate Splunk, Datadog and custom MCP server to an Agent Space. (44503175)
• client-mediaconvert: Adds support for MV-HEVC video output and clear lead for AV1 DRM output. (812d3dad)
• client-imagebuilder: Image pipelines can now automatically apply tags to images they create. Set the imageTags property when creating or updating your pipelines to get started. (5eb366f5)
• client-sagemaker: Support new SageMaker StartClusterHealthCheck API for on-demand DHC on Hyperpod EKS cluster. Support updated CreateCluster, UpdateCluster, DescribeCluster, BatchAddClusterNodes APIs for flexible instance group on HyperPod cluster (dfcde032)
• client-connect: Conversational Analytics for Email (fd2820f8)

---

For list of updated packages, view updated-packages.md in assets-3.1029.0.zip

v3.1028.0

3.1028.0(2026-04-09)

Chores

• codegen: bump codegen version to 0.48.0 (#7924) (037593a7)

New Features

• client-bcm-dashboards: Scheduled email reports of Billing and Cost Management Dashboards (5e7231a1)

... (truncated)

Changelog

Sourced from @​aws-sdk/client-cognito-identity's changelog.

3.1030.0 (2026-04-13)

Note: Version bump only for package @​aws-sdk/client-cognito-identity

3.1029.0 (2026-04-10)

Note: Version bump only for package @​aws-sdk/client-cognito-identity

3.1028.0 (2026-04-09)

Note: Version bump only for package @​aws-sdk/client-cognito-identity

3.1027.0 (2026-04-08)

Note: Version bump only for package @​aws-sdk/client-cognito-identity

3.1026.0 (2026-04-07)

Note: Version bump only for package @​aws-sdk/client-cognito-identity

3.1025.0 (2026-04-06)

Note: Version bump only for package @​aws-sdk/client-cognito-identity

3.1024.0 (2026-04-03)

... (truncated)

Commits

• 5ae7dfb Publish v3.1030.0
• 5d5aaed Publish v3.1029.0
• edca62d Publish v3.1028.0
• 690d8d4 Publish v3.1027.0
• 67ea2f7 Publish v3.1026.0
• b19357a chore(codegen): update for sparse types and retry 2.1 updates (#7916)
• 8cfa946 Publish v3.1025.0
• 99bf9fc Publish v3.1024.0
• 34e7b07 Publish v3.1023.0
• e7e636a Publish v3.1022.0
• Additional commits viewable in compare view

Updates openid-client from 6.8.2 to 6.8.3

Release notes

Sourced from openid-client's releases.

v6.8.3

Documentation

• note a workaround for redirect_uri with query string or bare origin (e9689de), closes #868

Fixes

• passport: delete one-time state on callback (1e7dd2e)

Changelog

Sourced from openid-client's changelog.

6.8.3 (2026-04-13)

Documentation

• note a workaround for redirect_uri with query string or bare origin (e9689de), closes #868

Fixes

• passport: delete one-time state on callback (1e7dd2e)

Commits

• 66e4082 chore(release): 6.8.3
• fa292f2 test: fix typings build issues
• 0600c91 test: deflake pollBackchannelAuthenticationGrant
• 1e7dd2e fix(passport): delete one-time state on callback
• da961e2 test: add coverage the passport strategy
• 14a2d38 chore: bump packages
• c64adc8 chore: fix typings in the example
• 70cc56e chore: node --run format
• e9689de docs: note a workaround for redirect_uri with query string or bare origin
• a3ffaef example: update dpop example to respect the token_type
• Additional commits viewable in compare view

Updates qs from 6.14.1 to 6.15.1

Changelog

Sourced from qs's changelog.

6.15.1

• [Fix] parse: parameterLimit: Infinity with throwOnLimitExceeded: true silently drops all parameters
• [Deps] update @ljharb/eslint-config
• [Dev Deps] update @ljharb/eslint-config, iconv-lite
• [Tests] increase coverage

6.15.0

• [New] parse: add strictMerge option to wrap object/primitive conflicts in an array (#425, #122)
• [Fix] duplicates option should not apply to bracket notation keys (#514)

6.14.2

• [Fix] parse: mark overflow objects for indexed notation exceeding arrayLimit (#546)
• [Fix] arrayLimit means max count, not max index, in combine/merge/parseArrayValue
• [Fix] parse: throw on arrayLimit exceeded with indexed notation when throwOnLimitExceeded is true (#529)
• [Fix] parse: enforce arrayLimit on comma-parsed values
• [Fix] parse: fix error message to reflect arrayLimit as max index; remove extraneous comments (#545)
• [Robustness] avoid .push, use void
• [readme] document that addQueryPrefix does not add ? to empty output (#418)
• [readme] clarify parseArrays and arrayLimit documentation (#543)
• [readme] replace runkit CI badge with shields.io check-runs badge
• [meta] fix changelog typo (arrayLength → arrayLimit)
• [actions] fix rebase workflow permissions

Commits

• 3f5e1c5 v6.15.1
• c85b67f [Fix] parse: parameterLimit: Infinity with throwOnLimitExceeded: true s...
• 4dfa0f0 [Deps] update @ljharb/eslint-config
• dbb05d7 [Dev Deps] update @ljharb/eslint-config, iconv-lite
• b0cfe7c [Tests] increase coverage
• d9b4c66 v6.15.0
• cb41a54 [New] parse: add strictMerge option to wrap object/primitive conflicts in...
• 88e1563 [Fix] duplicates option should not apply to bracket notation keys
• 9d441d2 Merge backport release tags v6.0.6–v6.13.3 into main
• 85cc8ca v6.12.5
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions