Skip to content

chore(deps): bump the go-dependencies group with 8 updates - #1078

Merged
mbevc1 merged 1 commit into
mainfrom
dependabot/go_modules/go-dependencies-430d8fc627
Aug 4, 2026
Merged

chore(deps): bump the go-dependencies group with 8 updates#1078
mbevc1 merged 1 commit into
mainfrom
dependabot/go_modules/go-dependencies-430d8fc627

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 4, 2026

Copy link
Copy Markdown
Contributor

Bumps the go-dependencies group with 8 updates:

Package From To
github.com/aws/aws-sdk-go-v2 1.43.2 1.43.3
github.com/aws/aws-sdk-go-v2/config 1.32.33 1.32.34
github.com/aws/aws-sdk-go-v2/credentials 1.19.32 1.19.33
github.com/aws/aws-sdk-go-v2/feature/s3/transfermanager 0.3.7 0.3.8
github.com/aws/aws-sdk-go-v2/service/ecs 1.89.2 1.89.3
github.com/aws/aws-sdk-go-v2/service/lambda 1.101.0 1.101.1
github.com/aws/aws-sdk-go-v2/service/s3 1.106.2 1.106.3
github.com/aws/smithy-go 1.27.5 1.27.6

Updates github.com/aws/aws-sdk-go-v2 from 1.43.2 to 1.43.3

Commits

Updates github.com/aws/aws-sdk-go-v2/config from 1.32.33 to 1.32.34

Commits

Updates github.com/aws/aws-sdk-go-v2/credentials from 1.19.32 to 1.19.33

Commits

Updates github.com/aws/aws-sdk-go-v2/feature/s3/transfermanager from 0.3.7 to 0.3.8

Commits

Updates github.com/aws/aws-sdk-go-v2/service/ecs from 1.89.2 to 1.89.3

Commits

Updates github.com/aws/aws-sdk-go-v2/service/lambda from 1.101.0 to 1.101.1

Commits

Updates github.com/aws/aws-sdk-go-v2/service/s3 from 1.106.2 to 1.106.3

Commits

Updates github.com/aws/smithy-go from 1.27.5 to 1.27.6

Changelog

Sourced from github.com/aws/smithy-go's changelog.

Release (2026-07-31)

General Highlights

  • Dependency Update: Updated to the latest SDK module versions

Module Highlights

  • github.com/aws/smithy-go: v1.27.6
    • Bug Fix: Fix failure to deserialize any @httpPayload struct with a non-string member.
    • Bug Fix: Fix failure to serialize any @httpPayload struct with a nested struct.

Release (2026-07-27)

General Highlights

  • Dependency Update: Updated to the latest SDK module versions

Module Highlights

  • github.com/aws/smithy-go: v1.27.5
    • Bug Fix: Fix a performance issue in awsQuery with large response payloads.

Release (2026-07-16)

General Highlights

  • Dependency Update: Updated to the latest SDK module versions

Module Highlights

  • github.com/aws/smithy-go/aws-http-auth: v1.2.1
    • Bug Fix: Use r.URL.Host when r.Host is unset.
  • github.com/aws/smithy-go/aws-http-auth-schemes: v1.0.0
    • Release: Module github.com/aws/smithy-go/aws-http-auth-schemes adds generic smithy-go client support for AWS Sigv4 and Sigv4a.

Release (2026-06-26)

General Highlights

  • Dependency Update: Updated to the latest SDK module versions

Module Highlights

  • github.com/aws/smithy-go: v1.27.3
    • Bug Fix: Fix bug in JSON doc encoder and endpoint host label format validation

Release (2026-06-05)

General Highlights

  • Dependency Update: Updated to the latest SDK module versions

Module Highlights

  • github.com/aws/smithy-go: v1.27.2
    • Bug Fix: Fix incorrect serialization of unions in CBOR-based protocols.

Release (2026-06-04)

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps): bump the go-dependencies group with 8 updates
9e165a4 
Bumps the go-dependencies group with 8 updates:

| Package | From | To |
| --- | --- | --- |
| [github.com/aws/aws-sdk-go-v2](https://github.com/aws/aws-sdk-go-v2) | `1.43.2` | `1.43.3` |
| [github.com/aws/aws-sdk-go-v2/config](https://github.com/aws/aws-sdk-go-v2) | `1.32.33` | `1.32.34` |
| [github.com/aws/aws-sdk-go-v2/credentials](https://github.com/aws/aws-sdk-go-v2) | `1.19.32` | `1.19.33` |
| [github.com/aws/aws-sdk-go-v2/feature/s3/transfermanager](https://github.com/aws/aws-sdk-go-v2) | `0.3.7` | `0.3.8` |
| [github.com/aws/aws-sdk-go-v2/service/ecs](https://github.com/aws/aws-sdk-go-v2) | `1.89.2` | `1.89.3` |
| [github.com/aws/aws-sdk-go-v2/service/lambda](https://github.com/aws/aws-sdk-go-v2) | `1.101.0` | `1.101.1` |
| [github.com/aws/aws-sdk-go-v2/service/s3](https://github.com/aws/aws-sdk-go-v2) | `1.106.2` | `1.106.3` |
| [github.com/aws/smithy-go](https://github.com/aws/smithy-go) | `1.27.5` | `1.27.6` |


Updates `github.com/aws/aws-sdk-go-v2` from 1.43.2 to 1.43.3
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@v1.43.2...v1.43.3)

Updates `github.com/aws/aws-sdk-go-v2/config` from 1.32.33 to 1.32.34
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@config/v1.32.33...config/v1.32.34)

Updates `github.com/aws/aws-sdk-go-v2/credentials` from 1.19.32 to 1.19.33
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@credentials/v1.19.32...credentials/v1.19.33)

Updates `github.com/aws/aws-sdk-go-v2/feature/s3/transfermanager` from 0.3.7 to 0.3.8
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@feature/s3/transfermanager/v0.3.7...feature/s3/transfermanager/v0.3.8)

Updates `github.com/aws/aws-sdk-go-v2/service/ecs` from 1.89.2 to 1.89.3
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@service/s3/v1.89.2...service/ecs/v1.89.3)

Updates `github.com/aws/aws-sdk-go-v2/service/lambda` from 1.101.0 to 1.101.1
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@service/s3/v1.101.0...service/glue/v1.101.1)

Updates `github.com/aws/aws-sdk-go-v2/service/s3` from 1.106.2 to 1.106.3
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@service/s3/v1.106.2...service/s3/v1.106.3)

Updates `github.com/aws/smithy-go` from 1.27.5 to 1.27.6
- [Release notes](https://github.com/aws/smithy-go/releases)
- [Changelog](https://github.com/aws/smithy-go/blob/main/CHANGELOG.md)
- [Commits](aws/smithy-go@v1.27.5...v1.27.6)

---
updated-dependencies:
- dependency-name: github.com/aws/aws-sdk-go-v2
  dependency-version: 1.43.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-dependencies
- dependency-name: github.com/aws/aws-sdk-go-v2/config
  dependency-version: 1.32.34
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-dependencies
- dependency-name: github.com/aws/aws-sdk-go-v2/credentials
  dependency-version: 1.19.33
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-dependencies
- dependency-name: github.com/aws/aws-sdk-go-v2/feature/s3/transfermanager
  dependency-version: 0.3.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-dependencies
- dependency-name: github.com/aws/aws-sdk-go-v2/service/ecs
  dependency-version: 1.89.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-dependencies
- dependency-name: github.com/aws/aws-sdk-go-v2/service/lambda
  dependency-version: 1.101.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-dependencies
- dependency-name: github.com/aws/aws-sdk-go-v2/service/s3
  dependency-version: 1.106.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-dependencies
- dependency-name: github.com/aws/smithy-go
  dependency-version: 1.27.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Aug 4, 2026
@claude

claude Bot commented Aug 4, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Claude finished @dependabot[bot]'s task in 1m 0s —— View job

Dependency Upgrade Review

  • Identify changed dependencies
  • Check changelogs / semver for breaking changes
  • Review how these deps are used in the repo
  • Verify build compiles (couldn't run — see note)
  • Post findings

Verdict: ✅ Safe to merge. All updates are patch-level (x.y.Z) within the AWS SDK for Go v2 family plus smithy-go. No major/minor bumps, so no API-surface changes are expected.

What changed

8 direct deps + their transitive AWS/smithy modules, all patch bumps:

Package From → To
aws-sdk-go-v2 1.43.2 → 1.43.3
.../config 1.32.33 → 1.32.34
.../credentials 1.19.32 → 1.19.33
.../feature/s3/transfermanager 0.3.7 → 0.3.8
.../service/ecs 1.89.2 → 1.89.3
.../service/lambda 1.101.0 → 1.101.1
.../service/s3 1.106.2 → 1.106.3
smithy-go 1.27.5 → 1.27.6

Changelog highlights

  • smithy-go 1.27.6 — two bug fixes: deserialize @httpPayload structs with a non-string member, and serialize @httpPayload structs with a nested struct. These are corrections in the shared runtime; they don't change the public API.
  • The AWS service modules are regenerated-client releases (model/endpoint refreshes). No changelog entries indicate removed or renamed APIs at these patch levels.

Usage in this repo

All AWS usage is concentrated in internal/aws/aws.go and exercises only stable, high-level APIs:

  • S3: s3.NewFromConfig, ListObjectsV2 (+ paginator), and transfermanager.New(...).DownloadObject
  • Lambda: ListFunctions, GetFunctionConfiguration
  • ECS: ListClusters, ListServices, DescribeServices

None of these signatures are affected by patch releases. The feature/s3/transfermanager module is pre-1.0 (0.3.x), so it can technically break at minor bumps — but this is a patch bump (0.3.7 → 0.3.8) and the repo only calls New / DownloadObject, both unchanged.

Note / suggested follow-up

  • I was unable to run go build ./... or the AWS test suites in this environment (network/sandbox restrictions on module download). The AWS-touching tests (internal/aws/*_contract_test.go, cmd/kosli/snapshotLambda_test.go) should confirm correctness — please let CI verify the build and these suites pass before merging.

No code changes required.

@mbevc1
mbevc1 enabled auto-merge (squash) August 4, 2026 09:29
@mbevc1
mbevc1 merged commit 5244f1f into main Aug 4, 2026
11 checks passed
@mbevc1
mbevc1 deleted the dependabot/go_modules/go-dependencies-430d8fc627 branch August 4, 2026 09:31
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@mbevc1 mbevc1 mbevc1 approved these changes

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@mbevc1