Skip to content

chore(deps): bump the aws-sdk group across 1 directory with 9 updates#72

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/aws-sdk-4917bc74a8
Open

chore(deps): bump the aws-sdk group across 1 directory with 9 updates#72
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/aws-sdk-4917bc74a8

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 8, 2026

Copy link
Copy Markdown
Contributor

Bumps the aws-sdk group with 6 updates in the / directory:

Package From To
github.com/aws/aws-sdk-go-v2 1.41.11 1.42.0
github.com/aws/aws-sdk-go-v2/config 1.32.22 1.32.25
github.com/aws/aws-sdk-go-v2/service/cloudformation 1.71.15 1.72.1
github.com/aws/aws-sdk-go-v2/service/ecr 1.58.2 1.58.4
github.com/aws/aws-sdk-go-v2/service/iam 1.54.2 1.54.5
github.com/aws/aws-sdk-go-v2/service/lambda 1.92.1 1.93.0

Updates github.com/aws/aws-sdk-go-v2 from 1.41.11 to 1.42.0

Commits

Updates github.com/aws/aws-sdk-go-v2/config from 1.32.22 to 1.32.25

Commits

Updates github.com/aws/aws-sdk-go-v2/credentials from 1.19.21 to 1.19.24

Commits

Updates github.com/aws/aws-sdk-go-v2/service/cloudformation from 1.71.15 to 1.72.1

Commits

Updates github.com/aws/aws-sdk-go-v2/service/ecr from 1.58.2 to 1.58.4

Commits

Updates github.com/aws/aws-sdk-go-v2/service/iam from 1.54.2 to 1.54.5

Commits

Updates github.com/aws/aws-sdk-go-v2/service/lambda from 1.92.1 to 1.93.0

Commits

Updates github.com/aws/aws-sdk-go-v2/service/sts from 1.43.1 to 1.43.3

Commits

Updates github.com/aws/smithy-go from 1.27.0 to 1.27.1

Changelog

Sourced from github.com/aws/smithy-go's changelog.

Release (2026-06-05)

General Highlights

  • Dependency Update: Updated to the latest SDK module versions

Module Highlights

  • github.com/aws/smithy-go: v1.27.2
    • Bug Fix: Fix incorrect serialization of unions in CBOR-based protocols.

Release (2026-06-04)

General Highlights

  • Dependency Update: Updated to the latest SDK module versions

Module Highlights

  • github.com/aws/smithy-go: v1.27.1
    • Bug Fix: Fixed a deserialization failure in all protocols when encountering a union with explicit null members.
    • Bug Fix: Fixed a panic when deserializing nested unions in JSON- and CBOR-based protocols.

Release (2026-06-02)

General Highlights

  • Dependency Update: Updated to the latest SDK module versions

Module Highlights

  • github.com/aws/smithy-go: v1.27.0
    • Feature: Add APIs for schema-based serialization.
    • Feature: Add support for all current AWS and Smithy protocols.
    • Bug Fix: Enforce max nesting depth of 128 on CBOR payloads.
  • github.com/aws/smithy-go/aws-http-auth: v1.2.0
    • Feature: Add event stream signer.

Release (2026-05-27)

General Highlights

  • Dependency Update: Updated to the latest SDK module versions

Module Highlights

  • github.com/aws/smithy-go: v1.26.0
    • Feature: Add StringSlice to endpoint rulesfn.

Release (2026-04-23)

General Highlights

  • Dependency Update: Updated to the latest SDK module versions

Module Highlights

  • github.com/aws/smithy-go: v1.25.1
    • Bug Fix: Fixed a memory leak in the LRU cache implementation used by some AWS services.

... (truncated)

Commits

Summary by CodeRabbit

  • Chores
    • Updated AWS SDK for Go v2 and related dependencies to newer versions.

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Jun 8, 2026
@openshift-ci openshift-ci Bot added the needs-ok-to-test Indicates a PR that requires an org member to verify it is safe to test. label Jun 8, 2026
@openshift-ci

openshift-ci Bot commented Jun 8, 2026

Copy link
Copy Markdown

Hi @dependabot[bot]. Thanks for your PR.

I'm waiting for a openshift-online member to verify that this patch is reasonable to test. If it is, they should reply with /ok-to-test on its own line. Until that is done, I will not automatically test new commits in this PR, but the usual testing commands by org members will still work.

Regular contributors should join the org to skip this step.

Once the patch is verified, the new status will be reflected by the ok-to-test label.

I understand the commands that are listed here.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

@coderabbitai

coderabbitai Bot commented Jun 8, 2026

Copy link
Copy Markdown

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info
⚙️ Run configuration

Configuration used: Repository: openshift-online/coderabbit/.coderabbit.yaml

Review profile: CHILL

Plan: Enterprise

Run ID: 04ce0def-6e65-46bf-804f-a6774485cc3f

📥 Commits

Reviewing files that changed from the base of the PR and between bed5c91 and be9614f.

⛔ Files ignored due to path filters (1)
  • go.sum is excluded by !**/*.sum
📒 Files selected for processing (1)
  • go.mod

Walkthrough

The PR updates go.mod to bump multiple github.com/aws/aws-sdk-go-v2 modules and transitive dependencies to newer patch versions, including the core SDK, service-specific packages (cloudformation, ecr, iam, lambda, sts), and smithy-go, while maintaining module structure and compatibility.

Changes

AWS SDK v2 Dependency Updates

Layer / File(s) Summary
AWS SDK v2 and transitive dependency version updates
go.mod
Direct AWS SDK v2 requirements are bumped from v1.41.11 to v1.42.0, with corresponding service modules (cloudformation, ecr, iam, lambda, sts) and internal indirect dependencies updated to newer patch versions across lines 7–32.

Estimated code review effort

🎯 2 (Simple) | ⏱️ ~10 minutes

🚥 Pre-merge checks | ✅ 11
✅ Passed checks (11 passed)
Check name Status Explanation
Description Check ✅ Passed Check skipped - CodeRabbit’s high-level summary is enabled.
Title check ✅ Passed The title clearly and specifically describes the main change: bumping AWS SDK dependencies across the repository with 9 updates.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check ✅ Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check ✅ Passed Check skipped because no linked issues were found for this pull request.
No-Weak-Crypto ✅ Passed PR is a dependency update with no weak crypto introduction. Existing code uses SHA-1 only for AWS IAM OIDC thumbprints (legitimate requirement) and SHA-256 for SigV4 signing. No MD5, RC4, DES, Blow...
Container-Privileges ✅ Passed The PR adds containers/compose configs with appropriate security. Dockerfile runs as non-root (UID 1001) with no privileged modes. docker-compose.localstack.yaml has privileged: true and user: 0, b...
No-Sensitive-Data-In-Logs ✅ Passed This PR only updates dependency versions in go.mod and go.sum; no sensitive data like passwords, tokens, API keys, or PII are exposed in these files or any logging statements.
No-Hardcoded-Secrets ✅ Passed PR contains only dependency version updates (go.mod/go.sum) and initial project files. No hardcoded secrets, API keys, tokens, passwords, private keys, or credentials detected anywhere in the chang...
No-Injection-Vectors ✅ Passed PR is a pure dependency version bump with no code changes. Only go.mod and go.sum were modified; no source code containing injection vectors was added or modified.
Ai-Attribution ✅ Passed This is a Dependabot-generated dependency update PR with no AI tool involvement. Author is dependabot[bot], not an AI tool. No AI attribution trailers are required.

✏️ Tip: You can configure your own custom pre-merge checks in the settings.

✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch dependabot/go_modules/aws-sdk-4917bc74a8

Comment @coderabbitai help to get the list of available commands.

@theautoroboto theautoroboto added ok-to-test Indicates a non-member PR verified by an org member that is safe to test. and removed needs-ok-to-test Indicates a PR that requires an org member to verify it is safe to test. labels Jun 11, 2026
@theautoroboto theautoroboto self-requested a review June 11, 2026 13:17
@theautoroboto

Copy link
Copy Markdown

/test on-demand-e2e

@openshift-ci

openshift-ci Bot commented Jun 11, 2026

Copy link
Copy Markdown

@theautoroboto: The specified target(s) for /test were not found.
The following commands are available to trigger required jobs:

/test lint
/test test
/test verify

Use /test all to run all jobs.

Details

In response to this:

/test on-demand-e2e

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

@theautoroboto

Copy link
Copy Markdown

/lgtm

@openshift-ci openshift-ci Bot added the lgtm Indicates that a PR is ready to be merged. label Jun 11, 2026
@dependabot dependabot Bot changed the title chore(deps): bump the aws-sdk group with 9 updates chore(deps): bump the aws-sdk group across 1 directory with 9 updates Jun 11, 2026
@dependabot dependabot Bot force-pushed the dependabot/go_modules/aws-sdk-4917bc74a8 branch from 6a9ddd4 to d6ed5a7 Compare June 11, 2026 14:30
@openshift-ci openshift-ci Bot removed the lgtm Indicates that a PR is ready to be merged. label Jun 11, 2026
@dependabot dependabot Bot force-pushed the dependabot/go_modules/aws-sdk-4917bc74a8 branch from d6ed5a7 to bed5c91 Compare June 15, 2026 23:36
@cdoan1

cdoan1 commented Jun 18, 2026

Copy link
Copy Markdown
Collaborator

/test

@openshift-ci

openshift-ci Bot commented Jun 18, 2026

Copy link
Copy Markdown

@cdoan1: The /test command needs one or more targets.
The following commands are available to trigger required jobs:

/test lint
/test test
/test verify

Use /test all to run all jobs.

Details

In response to this:

/test

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

@cdoan1

cdoan1 commented Jun 18, 2026

Copy link
Copy Markdown
Collaborator

/lgtm

@openshift-ci openshift-ci Bot added the lgtm Indicates that a PR is ready to be merged. label Jun 18, 2026
Bumps the aws-sdk group with 6 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [github.com/aws/aws-sdk-go-v2](https://github.com/aws/aws-sdk-go-v2) | `1.41.11` | `1.42.0` |
| [github.com/aws/aws-sdk-go-v2/config](https://github.com/aws/aws-sdk-go-v2) | `1.32.22` | `1.32.25` |
| [github.com/aws/aws-sdk-go-v2/service/cloudformation](https://github.com/aws/aws-sdk-go-v2) | `1.71.15` | `1.72.1` |
| [github.com/aws/aws-sdk-go-v2/service/ecr](https://github.com/aws/aws-sdk-go-v2) | `1.58.2` | `1.58.4` |
| [github.com/aws/aws-sdk-go-v2/service/iam](https://github.com/aws/aws-sdk-go-v2) | `1.54.2` | `1.54.5` |
| [github.com/aws/aws-sdk-go-v2/service/lambda](https://github.com/aws/aws-sdk-go-v2) | `1.92.1` | `1.93.0` |



Updates `github.com/aws/aws-sdk-go-v2` from 1.41.11 to 1.42.0
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@v1.41.11...v1.42.0)

Updates `github.com/aws/aws-sdk-go-v2/config` from 1.32.22 to 1.32.25
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@config/v1.32.22...config/v1.32.25)

Updates `github.com/aws/aws-sdk-go-v2/credentials` from 1.19.21 to 1.19.24
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@credentials/v1.19.21...credentials/v1.19.24)

Updates `github.com/aws/aws-sdk-go-v2/service/cloudformation` from 1.71.15 to 1.72.1
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@service/cloudformation/v1.71.15...service/s3/v1.72.1)

Updates `github.com/aws/aws-sdk-go-v2/service/ecr` from 1.58.2 to 1.58.4
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@service/s3/v1.58.2...service/ecr/v1.58.4)

Updates `github.com/aws/aws-sdk-go-v2/service/iam` from 1.54.2 to 1.54.5
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@service/s3/v1.54.2...service/ecs/v1.54.5)

Updates `github.com/aws/aws-sdk-go-v2/service/lambda` from 1.92.1 to 1.93.0
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@service/s3/v1.92.1...service/s3/v1.93.0)

Updates `github.com/aws/aws-sdk-go-v2/service/sts` from 1.43.1 to 1.43.3
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@service/s3/v1.43.1...service/amp/v1.43.3)

Updates `github.com/aws/smithy-go` from 1.27.0 to 1.27.1
- [Release notes](https://github.com/aws/smithy-go/releases)
- [Changelog](https://github.com/aws/smithy-go/blob/main/CHANGELOG.md)
- [Commits](aws/smithy-go@v1.27.0...v1.27.1)

---
updated-dependencies:
- dependency-name: github.com/aws/aws-sdk-go-v2
  dependency-version: 1.42.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: aws-sdk
- dependency-name: github.com/aws/aws-sdk-go-v2/config
  dependency-version: 1.32.24
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: aws-sdk
- dependency-name: github.com/aws/aws-sdk-go-v2/credentials
  dependency-version: 1.19.23
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: aws-sdk
- dependency-name: github.com/aws/aws-sdk-go-v2/service/cloudformation
  dependency-version: 1.72.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: aws-sdk
- dependency-name: github.com/aws/aws-sdk-go-v2/service/ecr
  dependency-version: 1.58.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: aws-sdk
- dependency-name: github.com/aws/aws-sdk-go-v2/service/iam
  dependency-version: 1.54.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: aws-sdk
- dependency-name: github.com/aws/aws-sdk-go-v2/service/lambda
  dependency-version: 1.92.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: aws-sdk
- dependency-name: github.com/aws/aws-sdk-go-v2/service/sts
  dependency-version: 1.43.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: aws-sdk
- dependency-name: github.com/aws/smithy-go
  dependency-version: 1.27.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: aws-sdk
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/go_modules/aws-sdk-4917bc74a8 branch from bed5c91 to be9614f Compare June 22, 2026 23:34
@openshift-ci openshift-ci Bot removed the lgtm Indicates that a PR is ready to be merged. label Jun 22, 2026
@openshift-ci

openshift-ci Bot commented Jun 22, 2026

Copy link
Copy Markdown

New changes are detected. LGTM label has been removed.

@openshift-ci

openshift-ci Bot commented Jun 22, 2026

Copy link
Copy Markdown

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: dependabot[bot]
Once this PR has been reviewed and has the lgtm label, please ask for approval from cdoan1. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code ok-to-test Indicates a non-member PR verified by an org member that is safe to test.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants