Skip to content

deps(go): bump the go-minor-patch group with 6 updates - #465

Merged
ruaan-deysel merged 1 commit into
mainfrom
dependabot/go_modules/go-minor-patch-f3cf17b3c0
Oct 11, 2026
Merged

ruaan-deysel merged 1 commit into
mainfrom
dependabot/go_modules/go-minor-patch-f3cf17b3c0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 11, 2026 •

Copy link
Copy Markdown
Contributor

Bumps the go-minor-patch group with 6 updates:

Package From To
github.com/aws/aws-sdk-go-v2/config 1.33.6 1.33.7
github.com/aws/aws-sdk-go-v2/credentials 1.20.6 1.20.7
github.com/aws/aws-sdk-go-v2/feature/s3/manager 1.23.11 1.23.12
github.com/aws/aws-sdk-go-v2/service/s3 1.114.0 1.114.1
github.com/aws/smithy-go 1.28.2 1.28.4
golang.org/x/sys 0.48.0 0.49.0

Updates github.com/aws/aws-sdk-go-v2/config from 1.33.6 to 1.33.7

Commits

Updates github.com/aws/aws-sdk-go-v2/credentials from 1.20.6 to 1.20.7

Commits

Updates github.com/aws/aws-sdk-go-v2/feature/s3/manager from 1.23.11 to 1.23.12

Commits

Updates github.com/aws/aws-sdk-go-v2/service/s3 from 1.114.0 to 1.114.1

Commits

Updates github.com/aws/smithy-go from 1.28.2 to 1.28.4

Changelog

Sourced from github.com/aws/smithy-go's changelog.

Release (2026-10-09)

General Highlights

  • Dependency Update: Updated to the latest SDK module versions

Module Highlights

  • github.com/aws/smithy-go: v1.28.5
    • Bug Fix: Retain the key with the zero value when encountering a null-value key in a dense map. This matches how legacy code-generated JSON deserializers behaved.

Release (2026-10-07)

General Highlights

  • Dependency Update: Updated to the latest SDK module versions

Module Highlights

  • github.com/aws/smithy-go: v1.28.4
    • Bug Fix: Revert #698 that fixed JoinPath with trailing slash. This has a side effect on certain S3 API paths in the downstream SDK that need more consideration.

Release (2026-10-06)

General Highlights

  • Dependency Update: Updated to the latest SDK module versions

Module Highlights

  • github.com/aws/smithy-go: v1.28.3
    • Bug Fix: Accept either casing of message/Message on modeled JSON error structures in schema-based deserialization, and emit the smithy.api#error trait in generated schemas
    • Bug Fix: Include the underlying error when logging failures to discard or close an HTTP response body

Release (2026-09-18)

General Highlights

  • Dependency Update: Updated to the latest SDK module versions

Module Highlights

  • github.com/aws/smithy-go: v1.28.2
    • Bug Fix: Avoid allocating a slice in ValidateEndpointHost by indexing into the hostname instead of using strings.Split.
    • Bug Fix: Fix event stream decode panic on unknown header value type.
    • Bug Fix: Fix schema-serde CBOR decode panic on malformed string/blob length.
    • Bug Fix: JoinPath keeps a trailing slash when the added path is a slash.

Release (2026-08-26)

General Highlights

  • Dependency Update: Updated to the latest SDK module versions

Module Highlights

  • github.com/aws/smithy-go: v1.28.1
    • Bug Fix: Fix broken AddLogger middleware since its insert point was removed.

Release (2026-08-25.2)

... (truncated)

Commits

Updates golang.org/x/sys from 0.48.0 to 0.49.0

Commits
  • b6b8557 unix/linux: unify ppc64x syscall wrappers
  • aab6988 unix: add PrctlArg5Ptr
  • cdfd984 unix: pass fcntl data as unsafe.Pointer in FcntlF{lock,store} on darwin
  • 782b836 unix/linux: don't warn about closed stderr from child process
  • 61592fb unix: return syscall error in *listxattrNS on BSD
  • c136fda unix/linux/Dockerfile: update to Go 1.26.8
  • f1d0d79 unix: pass xattr data as unsafe.Pointer in BSD xattr syscalls
  • 67f850b unix: update linux to v7.2
  • eb1f659 unix: add O_EXEC and O_SEARCH on darwin
  • 51bc731 unix: add Mmsghdr for linux
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Summary by CodeRabbit

  • Chores
    • Updated several underlying components to newer patch releases. This maintenance update does not add or remove features, and no changes to public interfaces are included. No visible changes to the application are described in this update.

Bumps the go-minor-patch group with 6 updates:

| Package | From | To |
| --- | --- | --- |
| [github.com/aws/aws-sdk-go-v2/config](https://github.com/aws/aws-sdk-go-v2) | `1.33.6` | `1.33.7` |
| [github.com/aws/aws-sdk-go-v2/credentials](https://github.com/aws/aws-sdk-go-v2) | `1.20.6` | `1.20.7` |
| [github.com/aws/aws-sdk-go-v2/feature/s3/manager](https://github.com/aws/aws-sdk-go-v2) | `1.23.11` | `1.23.12` |
| [github.com/aws/aws-sdk-go-v2/service/s3](https://github.com/aws/aws-sdk-go-v2) | `1.114.0` | `1.114.1` |
| [github.com/aws/smithy-go](https://github.com/aws/smithy-go) | `1.28.2` | `1.28.4` |
| [golang.org/x/sys](https://github.com/golang/sys) | `0.48.0` | `0.49.0` |


Updates `github.com/aws/aws-sdk-go-v2/config` from 1.33.6 to 1.33.7
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@config/v1.33.6...config/v1.33.7)

Updates `github.com/aws/aws-sdk-go-v2/credentials` from 1.20.6 to 1.20.7
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@service/mq/v1.20.6...service/mq/v1.20.7)

Updates `github.com/aws/aws-sdk-go-v2/feature/s3/manager` from 1.23.11 to 1.23.12
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@service/oam/v1.23.11...service/oam/v1.23.12)

Updates `github.com/aws/aws-sdk-go-v2/service/s3` from 1.114.0 to 1.114.1
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@service/s3/v1.114.0...service/s3/v1.114.1)

Updates `github.com/aws/smithy-go` from 1.28.2 to 1.28.4
- [Release notes](https://github.com/aws/smithy-go/releases)
- [Changelog](https://github.com/aws/smithy-go/blob/main/CHANGELOG.md)
- [Commits](aws/smithy-go@v1.28.2...v1.28.4)

Updates `golang.org/x/sys` from 0.48.0 to 0.49.0
- [Commits](golang/sys@v0.48.0...v0.49.0)

---
updated-dependencies:
- dependency-name: github.com/aws/aws-sdk-go-v2/config
  dependency-version: 1.33.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-minor-patch
- dependency-name: github.com/aws/aws-sdk-go-v2/credentials
  dependency-version: 1.20.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-minor-patch
- dependency-name: github.com/aws/aws-sdk-go-v2/feature/s3/manager
  dependency-version: 1.23.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-minor-patch
- dependency-name: github.com/aws/aws-sdk-go-v2/service/s3
  dependency-version: 1.114.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-minor-patch
- dependency-name: github.com/aws/smithy-go
  dependency-version: 1.28.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-minor-patch
- dependency-name: golang.org/x/sys
  dependency-version: 0.49.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot requested a review from ruaan-deysel as a code owner October 11, 2026 05:34
@dependabot dependabot Bot added dependencies Dependency updates go Pull requests that update go code labels Oct 11, 2026
@coderabbitai

coderabbitai Bot commented Oct 11, 2026 •

Copy link
Copy Markdown
Contributor

Review in Change Stack →

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info
⚙️ Run configuration
  • Configuration used: Organization UI
  • Review profile: ASSERTIVE
  • Plan: Advanced
  • Run ID: f2510cb6-58d4-434b-b3a2-f2cdb9dfff5b

📥 Commits

Reviewing files that changed from the base of the PR and between a592989 and 956553e.


⛔ Files ignored due to path filters (1)
  • go.sum is excluded by !**/*.sum

📒 Files selected for processing (1)
  • go.mod

Limit details: You’ve used all 10 included reviews currently available.



📝 Walkthrough

Walkthrough

The go.mod dependency versions changed for five direct AWS SDK modules, four indirect AWS SDK modules, and golang.org/x/sys.

Changes

Dependency version updates

Layer / File(s) Summary
Module version updates
go.mod
Five direct and four indirect AWS SDK modules were upgraded to newer patch versions. golang.org/x/sys was upgraded from v0.48.0 to v0.49.0.

Priority: ⬇️ Low

Estimated code review effort: 1 (Trivial) | ~5 minutes

Change: Other


Merge Risk: ⚪ Minimal · up to 95655

The update changes the path used for path-style S3 list requests, but no supported-backend failure is established. No actionable merge blocker remains.

Architecture Summary

Architecture risk: 🔵 Low · up to 95655

The change affects 1 system.

Changed systems: go.mod

Architecture concerns
No architecture-level concerns identified.

Review details

Systems and components

  • observed — go.mod (service) was modified; 1 changed file maps to changed impact.

Before / after behavior

  • observed — Modified behavior in go.mod: The direct AWS SDK config, credentials, S3 manager, service/s3, and smithy-go dependencies were upgraded from v1.33.6, v1.20.6, v1.23.11, v1.114.0, and v1.28.2 to v1.33.7, v1.20.7, v1.23.12, v1.114.1, and v1.28.4, respectively.
  • observed — Modified behavior in go.mod: golang.org/x/sys was upgraded from v0.48.0 to v0.49.0.
  • observed — Modified behavior in go.mod: The indirect AWS SDK signin, sso, ssooidc, and sts dependencies were each upgraded by one patch version, from v1.10.1, v1.38.1, v1.43.1, and v1.51.1 to v1.10.2, v1.38.2, v1.43.2, and v1.51.2.

Pre-merge checks | Passed 4 | Failed 1

❌ Failed checks (1 warning)

Check name Status Explanation Resolution
Description check Warning The description accurately lists the dependency updates, but it does not follow the repository template. It omits the required sections for change type, governance, related issues, affected area, secu… Replace or extend the description with the repository template. Complete all mandatory governance and checklist items, identify the change as a dependency or chore update, state the affected area, record security and documentation decisions…
✅ Passed checks (4 passed)
Check name Status Explanation
Title check Passed The title clearly identifies a grouped Go dependency update and states that six updates are included.
Docstring Coverage Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…
Linked Issues check Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check Passed Check skipped because no linked issues were found for this pull request.

Full details: Description check

Explanation

The description accurately lists the dependency updates, but it does not follow the repository template. It omits the required sections for change type, governance, related issues, affected area, security review, testing results, documentation, breaking changes, and checklist completion.

Resolution

Replace or extend the description with the repository template. Complete all mandatory governance and checklist items, identify the change as a dependency or chore update, state the affected area, record security and documentation decisions, and provide real testing output or explain why the checks are not applicable.


  • Fix all pre-merge checks with AI
✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Commit to this branch
  • Create a new PR

  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Usage-based review receipt

  • Mode: Continue automatically
  • Reviewed files: 1
  • Waived: $0.25 (charged $0.00)
  • View usage details

Note

This review exceeded your plan’s limits and used usage-based reviews—free during trial, billed after paid activation unless disabled. Manage usage-based reviews.


Comment @coderabbitai help to get the list of available commands.

@ruaan-deysel
ruaan-deysel merged commit 6694dbe into main Oct 11, 2026
11 checks passed
@ruaan-deysel
ruaan-deysel deleted the dependabot/go_modules/go-minor-patch-f3cf17b3c0 branch October 11, 2026 06:26
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Dependency updates go Pull requests that update go code

Development

Successfully merging this pull request may close these issues.

1 participant