mention renamed repos use the new immutable identifiers

Bumps [@aws-sdk/client-sts](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-sts) from 3.1111.0 to 3.1116.0.
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases)
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-sts/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1116.0/clients/client-sts)

---
updated-dependencies:
- dependency-name: "@aws-sdk/client-sts"
  dependency-version: 3.1116.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

.github/workflows/close-stale-issues.yml

@@ -15,7 +15,7 @@ jobs:
     runs-on: ubuntu-latest
     name: Stale issue job
     steps:
-    - uses: aws-actions/stale-issue-cleanup@v6
+    - uses: aws-actions/stale-issue-cleanup@v7
       with:
         # Setting messages to an empty string will cause the automation to skip
         # that category

CONTRIBUTING.md

@@ -28,6 +28,12 @@ these are incredibly useful:
 - Any modifications you've made relevant to the bug
 - Anything unusual about your environment or deployment
 
+We also ask that you refrain from opening issues via the `gh` CLI or GitHub
+API. These methods bypass our issue templates and therefore don't apply the
+proper labels or workflows that we use. Note that AI agents typically do not
+properly use issue templates. Issues that don't have the proper labels
+applied may be closed without comment.
+
 ## Contributing via Pull Requests
 
 Contributions via pull requests are much appreciated. Before sending us a pull

README.md

@@ -600,8 +600,9 @@ claims ([1][gh-blog-oidc], [2][sub-claim-custom]).
 
 #### Immutable subject claims
 
-Repositories created on github.com on or after 15 July 2026, and older
-repositories that have opted in, emit an [immutable `sub` claim][immutable-sub].
+Repositories created on github.com on or after 15 July 2026, older
+repositories that have opted in, and older repositories that have been renamed
+since 15 July 2026, emit an [immutable `sub` claim][immutable-sub].
 This claim appends the permanent numeric ID of the organization and of the
 repository after each name, separated by `@`, so that a recycled org or
 repository name cannot be used to mint tokens matching a stale trust policy.

THIRD-PARTY

@@ -222,7 +222,7 @@ OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
 
 The following npm package may be included in this product:
 
- - @aws-sdk/client-sts@3.1101.0
+ - @aws-sdk/client-sts@3.1116.0
 
 This package contains the following license:
 
@@ -432,9 +432,9 @@ Apache License
 
 The following npm packages may be included in this product:
 
- - @aws-sdk/signature-v4-multi-region@3.996.43
- - @smithy/core@3.31.1
- - @smithy/types@4.16.1
+ - @aws-sdk/signature-v4-multi-region@3.996.46
+ - @smithy/core@3.33.3
+ - @smithy/types@4.17.2
 
 These packages each contain the following license:
 
@@ -832,7 +832,7 @@ SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
 
 The following npm package may be included in this product:
 
- - @aws-sdk/core@3.977.5
+ - @aws-sdk/core@3.977.9
 
 This package contains the following license:
 
@@ -1042,15 +1042,15 @@ Apache License
 
 The following npm packages may be included in this product:
 
- - @aws-sdk/credential-provider-env@3.972.66
- - @aws-sdk/credential-provider-ini@3.973.11
- - @aws-sdk/credential-provider-node@3.972.77
- - @aws-sdk/token-providers@3.1102.0
- - @aws-sdk/types@3.974.2
- - @aws-sdk/xml-builder@3.972.37
- - @smithy/credential-provider-imds@4.4.16
- - @smithy/fetch-http-handler@5.6.13
- - @smithy/node-http-handler@4.9.13
+ - @aws-sdk/credential-provider-env@3.972.70
+ - @aws-sdk/credential-provider-ini@3.973.15
+ - @aws-sdk/credential-provider-node@3.972.81
+ - @aws-sdk/token-providers@3.1116.0
+ - @aws-sdk/types@3.974.5
+ - @aws-sdk/xml-builder@3.972.40
+ - @smithy/credential-provider-imds@4.5.2
+ - @smithy/fetch-http-handler@5.7.2
+ - @smithy/node-http-handler@4.11.3
  - @smithy/signature-v4@5.6.12
 
 These packages each contain the following license:
@@ -1261,9 +1261,9 @@ Apache License
 
 The following npm packages may be included in this product:
 
- - @aws-sdk/credential-provider-process@3.972.66
- - @aws-sdk/credential-provider-sso@3.973.10
- - @aws-sdk/credential-provider-web-identity@3.972.72
+ - @aws-sdk/credential-provider-process@3.972.70
+ - @aws-sdk/credential-provider-sso@3.973.14
+ - @aws-sdk/credential-provider-web-identity@3.972.76
 
 These packages each contain the following license:
 
@@ -1473,9 +1473,9 @@ Apache License
 
 The following npm packages may be included in this product:
 
- - @aws-sdk/credential-provider-http@3.972.68
- - @aws-sdk/credential-provider-login@3.972.73
- - @aws-sdk/nested-clients@3.997.40
+ - @aws-sdk/credential-provider-http@3.972.72
+ - @aws-sdk/credential-provider-login@3.972.77
+ - @aws-sdk/nested-clients@3.997.44
 
 These packages each contain the following license:
 

package.json

@@ -17,25 +17,25 @@
     "organization": true
   },
   "devDependencies": {
-    "@aws-sdk/credential-provider-env": "^3.972.65",
-    "@biomejs/biome": "2.5.6",
-    "@smithy/property-provider": "^4.4.16",
-    "@types/node": "^26.1.2",
+    "@aws-sdk/credential-provider-env": "^3.972.70",
+    "@biomejs/biome": "2.5.10",
+    "@smithy/property-provider": "^4.5.2",
+    "@types/node": "^26.2.0",
     "@vitest/coverage-v8": "4.1.10",
     "aws-sdk-client-mock": "^4.1.0",
-    "esbuild": "^0.28.1",
+    "esbuild": "^0.28.2",
     "generate-license-file": "^4.2.1",
     "json-schema": "^0.4.0",
     "markdownlint-cli": "^0.49.1",
-    "memfs": "^4.64.0",
+    "memfs": "^4.68.1",
     "standard-version": "^9.5.0",
     "typescript": "^7.0.2",
     "vitest": "4.1.10"
   },
   "dependencies": {
     "@actions/core": "^3.0.1",
-    "@aws-sdk/client-sts": "^3.1101.0",
-    "@smithy/node-http-handler": "^4.9.13",
+    "@aws-sdk/client-sts": "^3.1116.0",
+    "@smithy/node-http-handler": "^4.11.3",
     "proxy-agent": "^8.0.2"
   },
   "keywords": [