chore(release): bump workspace to v0.45.0

[vieiralucas]

Bumps the workspace and every SDK from 0.44.10 to 0.45.0. Minor bump: 62 PRs merged since v0.44.10, 43 of them features (new services, operations and enforcement surfaces).

Highlights since v0.44.10:

• DynamoDB: IAM enforcement, resource-based policies and fine-grained access control (feat(dynamodb): IAM enforcement, resource-based policies and fine-grained access control #2529); cross-account tables and streams through ARNs (feat(dynamodb): cross-account table and stream access through ARNs #2532); vector indexes and SearchVectors (feat(dynamodb): implement vector indexes and SearchVectors #2500); O(1) item writes and O(log n) DeleteItem (fix(dynamodb): make the item write path O(1) instead of O(table size) #2505, fix(dynamodb): make DeleteItem O(log n) instead of O(table size) #2517).
• CloudFormation: stack set instances provisioned as real stacks (feat(cloudformation): provision stack set instances as real stacks #2534); AWS-style names for unnamed resources (fix(cloudformation): generate AWS-style names for unnamed resources #2536); ValidateTemplate / GetTemplateSummary (feat(cloudformation): implement ValidateTemplate and GetTemplateSummary #2508); DeletionPolicy and UpdateReplacePolicy (fix(cloudformation): honor DeletionPolicy and UpdateReplacePolicy #2472); YAML short-form intrinsic tags (fix(cloudformation): support YAML short-form intrinsic tags #2496).
• EC2: IPAM internet-registry associations and routing policy registrations (feat(ec2): implement IPAM internet-registry associations and routing policy registrations #2511, fix(ec2): close the gaps in the IPAM internet-registry operations #2533); application status checks (feat(ec2): implement application status checks #2507); security-group egress and ingress enforced as independent gates (fix(ec2): enforce security-group egress and ingress as independent gates #2525).
• IAM: policy variables and ForAllValues over keys with no values (feat(iam): policy variables and ForAllValues over keys with no values #2528).
• New surfaces: ACME certificate issuance and ARN-keyed tagging in ACM (feat(acm): implement the ACME certificate-issuance surface #2506, feat(acm): implement the ARN-keyed resource tagging operations #2489), third-party cloud connectors in Config (feat(config): implement third-party cloud connectors #2512), full Glue business-catalog conformance (feat(glue): complete the business catalog and reach full Glue conformance #2509), CloudWatch log alarms (feat(cloudwatch): implement log alarms #2499), WAFv2 monetization reporting (feat(wafv2): implement the monetization reporting operations #2503), S3 object annotations (feat(s3): implement object annotations #2491), Backup access points (feat(backup): implement backup access points #2495).
• Correctness: region-scoped ARNs and endpoints (fix: scope returned ARNs/endpoints to the request region, not frozen config #2476), request-path panic/overflow DoS hardening (fix: harden request-path panic/overflow DoS vectors #2474), RDS Filters support and undeclared error shapes removed (fix(rds): honor Filters on the Describe operations (#2481) #2492, fix(rds): return recorded backtracks and honor Filters on three more Describes #2497, fix(rds): stop putting undeclared error shapes on the wire #2501), CloudWatch Logs event-segment appends and expiry reclaim (fix(logs): append event segments and reclaim expired logs #2527).
• Security/CI: rustls bumped for RUSTSEC-2026-0285 (fix(ci): retry tfacc Go module downloads; bump rustls for RUSTSEC-2026-0285 #2531), bundled docker CLI on 29.8.0 to clear Go stdlib HIGHs (fix(docker): bump bundled docker CLI to 29.8.0 to clear Go stdlib HIGHs #2535), throttled-image-pull retries and container-sweep fixes (fix(ecs,lambda): a transient image pull failure no longer fails the launch #2516, fix(ec2,codebuild): retry a throttled first image pull instead of failing the launch #2519, fix(codebuild): sweep only build containers whose owning process is gone #2526).

Files touched are the canonical release set: Cargo.toml, Cargo.lock, and the TypeScript, Python, Java and .NET SDK manifests. PHP has no version field. scripts/publish-crates.sh --check passes (109 crates, dependency order valid).

Merging this does not publish anything: pushing the v0.45.0 tag at the merge commit triggers release.yml.

---

Summary by cubic

Bumps the workspace and all SDK manifests from 0.44.10 to 0.45.0, a minor release covering 62 PRs, 43 of them features.

Highlights

• DynamoDB gains IAM enforcement, resource-based policies, cross-account tables, vector indexes, and faster item writes.
• CloudFormation adds stack set instances, AWS-style naming, template validation, deletion policies, and YAML short-form intrinsics.
• EC2 adds IPAM associations, application status checks, and independent egress/ingress security-group gates.
• New surfaces: ACME certificates, Config connectors, Glue conformance, CloudWatch log alarms, WAFv2 reporting, S3 object annotations, and Backup access points.
• Correctness and security fixes include region-scoped ARNs, request-path DoS hardening, RDS filter support, a rustls bump for RUSTSEC-2026-0285, and a bundled docker CLI update.

Merging does not publish anything; pushing the v0.45.0 tag at the merge commit triggers release.yml.

^{Written for commit 3cbda02. Summary will update on new commits.}

[Copilot]

Copilot was unable to review this pull request because the user who requested the review has reached their quota limit.