chore(deps): Update testing-tools

[github-actions]

This PR contains the following updates:

Package	Change	Age	Confidence	Type	Update	Pending
awscli (source, changelog)	1.45.40 → 1.45.41			testing_tools	patch	1.45.45 (+3)
ministackorg/ministack	1.3.71 → 1.3.72			testing_tools	patch	1.4.1 (+1)

---

Warning

Some dependencies could not be looked up. Check the warning logs for more information.

---

Release Notes

aws/aws-cli (awscli)

v1.45.41

Compare Source

=======

• api-change:billing: Adds support for managing AWS account credits and billing preferences, including retrieving credit details, viewing per-month credit allocation history, redeeming promotional codes, and configuring credit sharing and billing preferences.
• api-change:logs: Added PutStorageTierPolicy and GetStorageTierPolicy APIs to Amazon CloudWatch Logs. Customers can now configure account-level Intelligent Tiering to automatically optimize log storage costs by moving infrequently accessed data to lower-cost storage tiers.
• api-change:mailmanager: This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.0. The SDK will prioritize its most performant protocol.
• api-change:opensearch: This release introduces Saved Object Migration APIs, enabling users to migrate dashboards, visualizations, index patterns, and other saved objects from a data source into an Amazon OpenSearch Service application workspace with configurable export filters and conflict resolution strategies.

ministackorg/ministack (ministackorg/ministack)

v1.3.72

Compare Source

Added

• EC2 — placement group actions — CreatePlacementGroup, DeletePlacementGroup, and DescribePlacementGroups are implemented (they previously failed with InvalidAction: Unknown EC2 action), so aws_placement_group in Terraform/CDK creates, reads, and deletes against MiniStack. Groups are account-scoped and tagged like every other EC2 resource (pg- ids, CreateTags/DescribeTags, and tag: / group-name / state / strategy filters), duplicate names return InvalidPlacementGroup.Duplicate and unknown names return InvalidPlacementGroup.Unknown, and partitionCount is emitted only for the partition strategy — matching real EC2. Contributed by @​c-julin.
• Auto Scaling — groups report in-service instances so capacity waiters converge — CreateAutoScalingGroup, UpdateAutoScalingGroup, and a newly handled SetDesiredCapacity now materialize DesiredCapacity mock instances (InService / Healthy, round-robined across the group's Availability Zones), and DescribeAutoScalingGroups / DescribeAutoScalingInstances report them. Previously a group reported zero instances forever, so Terraform's aws_autoscaling_group capacity waiter blocked for the full wait_for_capacity_timeout and then failed on every apply; it now converges. Contributed by @​c-julin.

Fixed

• Router — access key extraction from presigned-URL query parameters — the per-request account (multi-tenancy) and CloudTrail attribution were read only from the Authorization header, so a presigned S3 URL created under a non-default account resolved to the default account and returned 404 on the bucket lookup. The access key is now also extracted from the SigV4 X-Amz-Credential and SigV2 AWSAccessKeyId query parameters, matching how AWS honors query-string credentials as a general signing mechanism. Contributed by @​neriyaco.
• EKS — OIDC issuer scheme follows the gateway protocol — the cluster OIDC issuer advertised by DescribeCluster and the discovery document was hardcoded to http, so Terraform's aws_iam_openid_connect_provider, which client-side rejects non-https urls, failed at plan time. The scheme now derives from USE_SSL: https when the gateway serves TLS, http otherwise, so the advertised issuer matches what MiniStack actually serves and IRSA Terraform applies against a TLS gateway.
• DynamoDB — UpdateItem validates values, and UPDATED_NEW / UPDATED_OLD match AWS — UpdateItem now runs the same attribute and item-size validation as PutItem (it skipped it before), and UPDATED_NEW / UPDATED_OLD report every attribute the update expression touched — including a SET that assigns the same value, which was previously omitted as a no-op and diverged from AWS. String-set validation no longer rejects empty-string members. Contributed by @​chincharjuin.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate.

[copy-pr-bot]

This pull request requires additional validation before any workflows can run on NVIDIA's runners.

Pull request vetters can view their responsibilities here.

Contributors can view more details about this message here.