Features

Serverless Framework

• Added custom User-Agent header for AWS SDK requests. The framework now includes serverless-framework/<version> in the User-Agent header for all AWS SDK v3 API calls, improving request identification and diagnostics. (#13279, https://github.com/serverless/serverless/issues/13245)

Bug Fixes

Serverless Framework

• Fixed Lambda destinations error with per-function IAM roles. Resolved a TypeError that occurred when using Lambda destinations (onSuccess/onFailure) while provider.iam.role.mode: perFunction was enabled. The framework now correctly applies the required destination permissions to each function's individual IAM role. (#13293, #13292)
• Fixed custom domain security policy validation. Improved support for enhanced AWS security policies, specifically enabling TLS 1.3 policies like SecurityPolicy_TLS13_2025_EDGE. Legacy shorthand values (tls_1_0, tls_1_2) remain supported, while invalid tls_1_3 was removed. (#13294, #13290)
• Fixed file watching issues on macOS. Enabled polling mode in chokidar to prevent EMFILE: too many open files errors encountered on large projects after the recent chokidar v4 upgrade. (#13281, #13268)

Maintenance

• Updated multiple dependencies:
  • Upgraded eslint to v9 (#13258)
  • Bumped the AWS SDK group with 31 updates (#13287)
  • Upgraded lodash to v4.17.23 (#13288, #13289)
  • Updated the uv package group with 2 updates (#13277)
  • Updated actions/setup-node in the actions group (#13286)
  • Upgraded zod to v4 (https://github.com/serverless/serverless/pull/13274)