chore(deps): bump the aws-sdk group with 14 updates

[dependabot]

Bumps the aws-sdk group with 14 updates:

Package	From	To
github.com/aws/aws-lambda-go	1.54.0	1.55.0
github.com/aws/aws-sdk-go-v2	1.43.7	1.45.1
github.com/aws/aws-sdk-go-v2/config	1.32.38	1.33.1
github.com/aws/aws-sdk-go-v2/credentials	1.19.37	1.20.1
github.com/aws/aws-sdk-go-v2/service/cloudformation	1.76.4	1.78.1
github.com/aws/aws-sdk-go-v2/service/ec2	1.322.0	1.325.1
github.com/aws/aws-sdk-go-v2/service/ecr	1.60.7	1.62.1
github.com/aws/aws-sdk-go-v2/service/elasticloadbalancing	1.36.7	1.38.1
github.com/aws/aws-sdk-go-v2/service/elasticloadbalancingv2	1.58.8	1.60.1
github.com/aws/aws-sdk-go-v2/service/iam	1.59.2	1.61.1
github.com/aws/aws-sdk-go-v2/service/lambda	1.102.0	1.104.1
github.com/aws/aws-sdk-go-v2/service/route53	1.65.9	1.67.1
github.com/aws/aws-sdk-go-v2/service/sts	1.45.7	1.47.1
github.com/aws/smithy-go	1.27.8	1.28.1

Updates github.com/aws/aws-lambda-go from 1.54.0 to 1.55.0

Release notes

Sourced from github.com/aws/aws-lambda-go's releases.

v1.55.0

What's changed

• Bump min go version to 1.26 (#638) — @​maxday
• Enable Go 1.27 compatibility & fix serialization test bugs (#637) — @​djedward
  • Fixed TestMalformedJson to correctly pass a pointer to json.Unmarshal, matching the intended behavior after Go 1.27's JSON library changes.
  • Relaxed error-message matching in tests so both Go 1.27 and earlier versions pass.
  • Hardened flaky integration tests (TestEnableSigterm, TestConcurrencyWithRIE) with polling and increased timeouts.
• Add missing userNotFound field to Cognito auth trigger requests (#630) — @​anzheyazzz
  • Adds 3 missing userNotFound fields to the Cognito auth trigger request events.
• Pin GitHub Actions to commit SHAs (#623) — @​maxday
  • Hardens CI supply-chain security by pinning actions to their SHAs.

Full changelog: aws/aws-lambda-go@v1.54.0...v1.55.0

Commits

• 6800157 feat: bump min go version to 1.26 (#638)
• f0e2311 Fix serialization test bugs and enable Go 1.27 compat (#637)
• 87e344b Merge pull request #630 from aws/fix/cognito-usernotfound-missing-fields
• d6f4d23 Add missing userNotFound field to Cognito auth trigger requests
• 815d21f fix: pin github actions sha (#623)
• See full diff in compare view

Updates github.com/aws/aws-sdk-go-v2 from 1.43.7 to 1.45.1

Commits

• 4164024 Release 2026-08-28
• 4defbf5 Fix getter partsizecorruption (#3537)
• d89aca4 fix downloadobject corruption caused by unequal part size (#3536)
• 8a0ed85 fix internal timeouts to not depend on the env (#3535)
• 893faa4 Release 2026-08-27
• 7263e51 Regenerated Clients
• 0d6ab44 Update API model
• f16c9f2 Fix route53 error close body (#3518)
• bc28b42 Move github workflows from inline scripts to actions (#3511)
• 7352017 support connection read timeouts (#3532)
• Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/config from 1.32.38 to 1.33.1

Commits

• 4164024 Release 2026-08-28
• 4defbf5 Fix getter partsizecorruption (#3537)
• d89aca4 fix downloadobject corruption caused by unequal part size (#3536)
• 8a0ed85 fix internal timeouts to not depend on the env (#3535)
• 893faa4 Release 2026-08-27
• 7263e51 Regenerated Clients
• 0d6ab44 Update API model
• f16c9f2 Fix route53 error close body (#3518)
• bc28b42 Move github workflows from inline scripts to actions (#3511)
• 7352017 support connection read timeouts (#3532)
• Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/credentials from 1.19.37 to 1.20.1

Commits

• 0bcd933 Release 2023-08-07
• bbdb100 Regenerated Clients
• 3149717 Update SDK's smithy-go dependency to v1.14.1
• 43a8a6a Update partitions file
• 2966ce7 Update endpoints model
• dad4b72 Update API model
• 165c8b2 Release 2023-08-04
• aefb878 Regenerated Clients
• e2be539 Update endpoints model
• be8d8ed Update API model
• Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/service/cloudformation from 1.76.4 to 1.78.1

Commits

• 9bd153c Release 2025-03-04.2
• b967446 Regenerated Clients
• 188c52a Update endpoints model
• defaf5c Update API model
• 8f2dd23 add test that verifies SRA order of operations (#3025)
• 3d547b0 Release 2025-03-04
• 554a149 Regenerated Clients
• 3abb221 Update endpoints model
• 95ae39d Update API model
• c62ec38 create kitchen sink test service (#3023)
• Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/service/ec2 from 1.322.0 to 1.325.1

Commits

• 4164024 Release 2026-08-28
• 4defbf5 Fix getter partsizecorruption (#3537)
• d89aca4 fix downloadobject corruption caused by unequal part size (#3536)
• 8a0ed85 fix internal timeouts to not depend on the env (#3535)
• 893faa4 Release 2026-08-27
• 7263e51 Regenerated Clients
• 0d6ab44 Update API model
• f16c9f2 Fix route53 error close body (#3518)
• bc28b42 Move github workflows from inline scripts to actions (#3511)
• 7352017 support connection read timeouts (#3532)
• Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/service/ecr from 1.60.7 to 1.62.1

Commits

• 5a96470 Release 2024-12-19
• 653aa80 Regenerated Clients
• d02b239 Update endpoints model
• 698d709 Update API model
• 885de40 Fix improper use of Printf-style functions (#2934)
• 858298a Release 2024-12-18
• f58264a Regenerated Clients
• df31082 Update endpoints model
• 346690e Update API model
• 4515454 Release 2024-12-17
• Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/service/elasticloadbalancing from 1.36.7 to 1.38.1

Commits

• ba4ee4d Release 2025-08-21
• 40e3d87 Regenerated Clients
• b2be019 Update partitions file
• dece4e7 Update endpoints model
• 294af19 Update API model
• 0df860a changelog
• df2bca2 feature(s3/manager): add option to control default checksums (#3151)
• 315de9c Release 2025-08-20
• 1a9d79d Regenerated Clients
• 7959412 Update endpoints model
• Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/service/elasticloadbalancingv2 from 1.58.8 to 1.60.1

Commits

• d1d210d Release 2024-08-22
• afb0408 Regenerated Clients
• 05f4492 Update partitions file
• 600651a Update endpoints model
• ebaae40 Update API model
• 38fe812 Release 2024-08-21
• b504211 Regenerated Clients
• 02f3045 Update endpoints model
• f7d2cf6 Update API model
• 4d36126 Release 2024-08-20
• Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/service/iam from 1.59.2 to 1.61.1

Commits

• a2b751d Release 2024-09-03
• e22c249 Regenerated Clients
• ff0cf6f Update API model
• 3120376 refactoring of buildQuery to accept a list of maintained headers to l… (#2773)
• 4ed838e Merge pull request #2768 from bhavya2109sharma/presignedurl-requestpayer-change
• d4bd42f Merge branch 'main' into presignedurl-requestpayer-change
• 0353706 Added Changelog
• 97e2d3f Release 2024-08-30
• 4cca52b Regenerated Clients
• c8a5146 Update endpoints model
• Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/service/lambda from 1.102.0 to 1.104.1

Commits

• 26060c5 Release 2026-06-29
• 24e918a Regenerated Clients
• 334471f Update API model
• 96d81dc Deprecate iotevents, ioteventsdata, panorama and simspaceweaver (#3458)
• 30502cb feat: mark common plugins and fix per-op ordering for invokeOperation refacto...
• 8881653 Revert "feat: mark common plugins and fix per-op ordering for invokeOperation...
• eba2f01 feat: mark common plugins and fix per-op ordering for invokeOperation… (#3443)
• 2c5e1db Release 2026-06-23
• d09eeb5 Regenerated Clients
• 2f5f5f9 Update API model
• Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/service/route53 from 1.65.9 to 1.67.1

Commits

• d125de3 Release 2024-11-18
• fec51f3 Regenerated Clients
• fba5997 Update API model
• 0b8e5c8 Bump smithy-go dependency (#2902)
• 50ba45c Release 2024-11-15.2
• 444bdff Regenerated Clients
• 55ab381 Update endpoints model
• 94c0837 Update API model
• 2398a79 Remove elastictranscoder service's integration test (#2901)
• 93e0f29 Release 2024-11-15
• Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/service/sts from 1.45.7 to 1.47.1

Commits

• f3ea5b8 Release 2023-11-30
• bb44374 Regenerated Clients
• 1fd796c Update SDK's smithy-go dependency to v1.18.1
• 5e061f0 Update endpoints model
• e6de9ae Update API model
• a88ff68 Release 2023-11-29
• 023df35 Regenerated Clients
• 41f99ac Update SDK's smithy-go dependency to v1.18.0
• 72478fb Update API model
• 4c4b852 feat: add Options() getter to service clients (#2398)
• Additional commits viewable in compare view

Updates github.com/aws/smithy-go from 1.27.8 to 1.28.1

Changelog

Sourced from github.com/aws/smithy-go's changelog.

Release (2026-08-26)

General Highlights

• Dependency Update: Updated to the latest SDK module versions

Module Highlights

• github.com/aws/smithy-go: v1.28.1
  • Bug Fix: Fix broken AddLogger middleware since its insert point was removed.

Release (2026-08-25.2)

General Highlights

• Dependency Update: Updated to the latest SDK module versions

Module Highlights

• github.com/aws/smithy-go: v1.28.0
  • Feature: Set Content-Length inline when the request body is set via SetStream. The ComputeContentLength middleware is now deprecated.

Release (2026-08-25)

General Highlights

• Dependency Update: Updated to the latest SDK module versions

Module Highlights

• github.com/aws/smithy-go: v1.27.10
  • Bug Fix: Fix a data race on the underlying writer when an event stream is closed while an event write is in flight.
  • Bug Fix: Restore draining the HTTP response body in CloseResponseBody to avoid issues with TCP connection reuse.

Release (2026-08-21)

General Highlights

• Dependency Update: Updated to the latest SDK module versions

Module Highlights

• github.com/aws/smithy-go: v1.27.9
  • Bug Fix: Fix a generic event stream exception not carrying the error code and message from its payload.
  • Bug Fix: Fix an event stream not being closed when its connection is lost, which would cause a caller writing to the stream to block indefinitely.
  • Bug Fix: Fix deserialization of an empty list producing a nil slice instead of an empty one.
  • Bug Fix: Restore draining the HTTP response body in CloseResponseBody to avoid issues with TCP connection reuse.

Release (2026-08-14)

General Highlights

• Dependency Update: Updated to the latest SDK module versions

Module Highlights

• github.com/aws/smithy-go: v1.27.8
  • Bug Fix: Restore draining the HTTP response body in CloseResponseBody to avoid issues with TCP connection reuse.

Release (2026-08-07)

... (truncated)

Commits

• 73ba51d Release 2026-08-26
• 4f48688 fix bad AddLogger insert (#701)
• 761f1cf Release 2026-08-25.2
• 5370784 Set Content-Length when the request body is set instead of via middleware (#694)
• 0bcd162 fixup some warnings
• 08e8d12 remove changelog
• 3c4a597 Release 2026-08-25
• 7e0c199 fix data race on stream (#700)
• 95f86a6 Release 2026-08-21
• 1ee11d1 fix event stream and empty collection serde (#699)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Summary by CodeRabbit

• Chores
  • Updated AWS Go module dependencies to newer versions.
  • No user-facing features or behavior changes.

[openshift-ci]

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: dependabot[bot]
Once this PR has been reviewed and has the lgtm label, please assign mitalibhalla for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Details

Needs approval from an approver in each of these files:

• OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Repository: openshift-online/coderabbit/.coderabbit.yaml

Review profile: CHILL

Plan: Enterprise

Run ID: 27727011-8dad-4bfd-b233-9632ad891dee

📥 Commits

Reviewing files that changed from the base of the PR and between 82b3f74 and 67096a4.

⛔ Files ignored due to path filters (1)

• go.sum is excluded by !**/*.sum

📒 Files selected for processing (1)

• go.mod

Included review availability: Your plan provides up to 12 included reviews per hour; 10 remain after this review.

---

Walkthrough

The pull request updates direct and indirect AWS Go module dependencies in go.mod. It does not add or remove dependency entries or alter exported entities.

Changes

AWS dependency refresh

Layer / File(s)	Summary
Update AWS module versions go.mod	The direct AWS Lambda, AWS SDK v2, and Smithy Go dependencies were updated. Indirect AWS protocol, endpoint, signing, SSO, and SSO OIDC dependencies were also updated.

Estimated code review effort: 1 (Trivial) | ~5 minutes

Merge Risk: ⚪ Minimal · up to 67096

This PR updates AWS SDK dependencies without introducing an actionable merge-blocking risk; it is merge-ready after normal checks and review.

Suggested reviewers: cdoan1, typeid

🚥 Pre-merge checks | ✅ 11

✅ Passed checks (11 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title clearly and concisely describes the main change: updating the grouped AWS SDK dependencies across 14 modules.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.
No-Weak-Crypto	✅ Passed	PASS. The pull request changes only go.mod and go.sum; it does not change application crypto code. The existing SHA-1 use in internal/crypto/thumbprint.go is byte-identical in the base and head …
Container-Privileges	✅ Passed	PASS. The pull request changes only go.mod and go.sum. No container or Kubernetes manifest changed. Existing docker-compose.localstack.yaml settings include privileged: true and root user, but…
No-Sensitive-Data-In-Logs	✅ Passed	PASS: The PR changes only go.mod and go.sum. The diff updates AWS module versions and checksums; it adds no logging statements, log arguments, or sensitive data. The PR source diff contains no app…
No-Hardcoded-Secrets	✅ Passed	PASS. The pull request changes only go.mod and go.sum dependency metadata. The go.mod changes are version updates. The 48 new 44-character base64-like values in go.sum are standard Go h1: mo…
No-Injection-Vectors	✅ Passed	PASS. The pull request changes only go.mod and go.sum. The diff contains AWS module version replacements and corresponding checksums. It adds no source code, shell commands, SQL construction, `eva…
Ai-Attribution	✅ Passed	No AI tool use is mentioned in the contributor-authored PR description or the single PR commit. The commit is authored by dependabot[bot] and contains only a Signed-off-by trailer; it has no Assisted-…

Full details: Docstring Coverage

Explanation

No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0 files. (1 skipped: 1 unsupported.)

Full details: No-Weak-Crypto

Explanation

PASS. The pull request changes only go.mod and go.sum; it does not change application crypto code. The existing SHA-1 use in internal/crypto/thumbprint.go is byte-identical in the base and head revisions. The selected AWS sources contain an SSO cache-key SHA-1 and Smithy MD5 checksum code, but both are also present unchanged in the exact previous versions. No DES, RC4, Blowfish, ECB, custom crypto, or non-constant-time secret comparison was introduced.

Full details: Container-Privileges

Explanation

PASS. The pull request changes only go.mod and go.sum. No container or Kubernetes manifest changed. Existing docker-compose.localstack.yaml settings include privileged: true and root user, but both are unchanged from the parent revision. The Dockerfile's root user is limited to the build stage and has an explicit setup comment; its runtime stage uses USER 1001. No hostPID, hostNetwork, hostIPC, SYS_ADMIN, or allowPrivilegeEscalation match was introduced.

Full details: No-Sensitive-Data-In-Logs

Explanation

PASS: The PR changes only go.mod and go.sum. The diff updates AWS module versions and checksums; it adds no logging statements, log arguments, or sensitive data. The PR source diff contains no application code changes. Existing output, including the token command's intentional credential output, is unchanged and therefore is not introduced by this PR.

Full details: No-Hardcoded-Secrets

Explanation

PASS. The pull request changes only go.mod and go.sum dependency metadata. The go.mod changes are version updates. The 48 new 44-character base64-like values in go.sum are standard Go h1: module integrity checksums, not configuration secrets. Scans of added lines found no API keys, tokens, passwords, private-key markers, credential URLs, or secret-like literal assignments.

Full details: No-Injection-Vectors

Explanation

PASS. The pull request changes only go.mod and go.sum. The diff contains AWS module version replacements and corresponding checksums. It adds no source code, shell commands, SQL construction, eval/exec, pickle.loads, unsafe YAML loading, os.system, or dangerouslySetInnerHTML. The only sql text is part of a checksum string in go.sum, not SQL code.

Full details: Ai-Attribution

Explanation

No AI tool use is mentioned in the contributor-authored PR description or the single PR commit. The commit is authored by dependabot[bot] and contains only a Signed-off-by trailer; it has no Assisted-by, Generated-by, or Co-Authored-By trailer. Therefore, the AI attribution condition is not triggered.

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch dependabot/go_modules/aws-sdk-96549b2582

---

_{Comment @coderabbitai help to get the list of available commands.}