Bump the minor-bumps group with 11 updates

[dependabot]

Bumps the minor-bumps group with 11 updates:

Package	From	To
github.com/aws/aws-cdk-go/awscdk/v2	2.262.1	2.267.0
github.com/aws/aws-cdk-go/awscdklambdagoalpha/v2	2.262.1-alpha.0	2.267.0-alpha.0
github.com/aws/aws-lambda-go	1.54.0	1.55.0
github.com/aws/aws-sdk-go-v2	1.43.1	1.45.1
github.com/aws/aws-sdk-go-v2/config	1.32.32	1.33.1
github.com/aws/aws-sdk-go-v2/feature/dynamodb/attributevalue	1.20.55	1.21.1
github.com/aws/aws-sdk-go-v2/service/dynamodb	1.62.1	1.65.1
github.com/aws/aws-sdk-go-v2/service/s3	1.106.1	1.109.1
github.com/aws/constructs-go/constructs/v10	10.7.1	10.8.1
github.com/aws/jsii-runtime-go	1.138.0	1.139.0
github.com/oapi-codegen/runtime	1.6.0	1.7.0

Updates github.com/aws/aws-cdk-go/awscdk/v2 from 2.262.1 to 2.267.0

Commits

• deb0fc5 chore(release): appstagingsynthesizeralpha@v2.267.0-alpha.0
• 7408cda chore(release): appstagingsynthesizeralpha@v2.266.0-alpha.0
• 6c8b7a4 chore(release): appstagingsynthesizeralpha@v2.265.0-alpha.0
• a570007 chore(release): appstagingsynthesizeralpha@v2.264.0-alpha.0
• 4c60f3e chore(release): appstagingsynthesizeralpha@v2.263.0-alpha.0
• 4c6fa70 chore(release): appstagingsynthesizeralpha@v2.262.2-alpha.0
• See full diff in compare view

Updates github.com/aws/aws-cdk-go/awscdklambdagoalpha/v2 from 2.262.1-alpha.0 to 2.267.0-alpha.0

Commits

• deb0fc5 chore(release): appstagingsynthesizeralpha@v2.267.0-alpha.0
• 7408cda chore(release): appstagingsynthesizeralpha@v2.266.0-alpha.0
• 6c8b7a4 chore(release): appstagingsynthesizeralpha@v2.265.0-alpha.0
• a570007 chore(release): appstagingsynthesizeralpha@v2.264.0-alpha.0
• 4c60f3e chore(release): appstagingsynthesizeralpha@v2.263.0-alpha.0
• 4c6fa70 chore(release): appstagingsynthesizeralpha@v2.262.2-alpha.0
• See full diff in compare view

Updates github.com/aws/aws-lambda-go from 1.54.0 to 1.55.0

Release notes

Sourced from github.com/aws/aws-lambda-go's releases.

v1.55.0

What's changed

• Bump min go version to 1.26 (#638) — @​maxday
• Enable Go 1.27 compatibility & fix serialization test bugs (#637) — @​djedward
  • Fixed TestMalformedJson to correctly pass a pointer to json.Unmarshal, matching the intended behavior after Go 1.27's JSON library changes.
  • Relaxed error-message matching in tests so both Go 1.27 and earlier versions pass.
  • Hardened flaky integration tests (TestEnableSigterm, TestConcurrencyWithRIE) with polling and increased timeouts.
• Add missing userNotFound field to Cognito auth trigger requests (#630) — @​anzheyazzz
  • Adds 3 missing userNotFound fields to the Cognito auth trigger request events.
• Pin GitHub Actions to commit SHAs (#623) — @​maxday
  • Hardens CI supply-chain security by pinning actions to their SHAs.

Full changelog: aws/aws-lambda-go@v1.54.0...v1.55.0

Commits

• 6800157 feat: bump min go version to 1.26 (#638)
• f0e2311 Fix serialization test bugs and enable Go 1.27 compat (#637)
• 87e344b Merge pull request #630 from aws/fix/cognito-usernotfound-missing-fields
• d6f4d23 Add missing userNotFound field to Cognito auth trigger requests
• 815d21f fix: pin github actions sha (#623)
• See full diff in compare view

Updates github.com/aws/aws-sdk-go-v2 from 1.43.1 to 1.45.1

Commits

• 4164024 Release 2026-08-28
• 4defbf5 Fix getter partsizecorruption (#3537)
• d89aca4 fix downloadobject corruption caused by unequal part size (#3536)
• 8a0ed85 fix internal timeouts to not depend on the env (#3535)
• 893faa4 Release 2026-08-27
• 7263e51 Regenerated Clients
• 0d6ab44 Update API model
• f16c9f2 Fix route53 error close body (#3518)
• bc28b42 Move github workflows from inline scripts to actions (#3511)
• 7352017 support connection read timeouts (#3532)
• Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/config from 1.32.32 to 1.33.1

Commits

• 4164024 Release 2026-08-28
• 4defbf5 Fix getter partsizecorruption (#3537)
• d89aca4 fix downloadobject corruption caused by unequal part size (#3536)
• 8a0ed85 fix internal timeouts to not depend on the env (#3535)
• 893faa4 Release 2026-08-27
• 7263e51 Regenerated Clients
• 0d6ab44 Update API model
• f16c9f2 Fix route53 error close body (#3518)
• bc28b42 Move github workflows from inline scripts to actions (#3511)
• 7352017 support connection read timeouts (#3532)
• Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/feature/dynamodb/attributevalue from 1.20.55 to 1.21.1

Commits

• e155bb7 Release 2023-10-06
• 9d342ba Regenerated Clients
• 1df9914 Update SDK's smithy-go dependency to v1.15.0
• 32ada3a Update API model
• 12ba4ac Release 2023-10-05
• be8a8e0 Regenerated Clients
• dc38adb Update endpoints model
• a52086e Update API model
• 1ed22c1 Release 2023-10-04
• e007bcd Regenerated Clients
• Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/service/dynamodb from 1.62.1 to 1.65.1

Commits

• b737dc9 Release 2024-10-07
• 7279a51 Regenerated Clients
• a1b1f5a Update endpoints model
• 4853c41 Update API model
• 99e2be8 Allow empty values on prefix headers (#2816)
• 18e6b6e remove autoscaling smoke tests (#2817)
• 8200000 remove private metrics collection APIs (#2818)
• 7a76a2a Release 2024-10-04
• e35b8be Regenerated Clients
• 6e95871 Update endpoints model
• Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/service/s3 from 1.106.1 to 1.109.1

Commits

• 4164024 Release 2026-08-28
• 4defbf5 Fix getter partsizecorruption (#3537)
• d89aca4 fix downloadobject corruption caused by unequal part size (#3536)
• 8a0ed85 fix internal timeouts to not depend on the env (#3535)
• 893faa4 Release 2026-08-27
• 7263e51 Regenerated Clients
• 0d6ab44 Update API model
• f16c9f2 Fix route53 error close body (#3518)
• bc28b42 Move github workflows from inline scripts to actions (#3511)
• 7352017 support connection read timeouts (#3532)
• Additional commits viewable in compare view

Updates github.com/aws/constructs-go/constructs/v10 from 10.7.1 to 10.8.1

Commits

• 459b2f4 chore(release): v10.8.1
• 272f478 chore(release): v10.8.0
• dfc0506 chore(release): v10.7.2
• See full diff in compare view

Updates github.com/aws/jsii-runtime-go from 1.138.0 to 1.139.0

Commits

• 7c72cda chore(release): v1.139.0
• See full diff in compare view

Updates github.com/oapi-codegen/runtime from 1.6.0 to 1.7.0

Release notes

Sourced from github.com/oapi-codegen/runtime's releases.

v1.7.0: Extensions for OpenAPI 3.1 parameter binding

This release teaches the parameter binders about OpenAPI 3.1 multi-type unions, and fixes a long-standing panic on the request binding path. As with v1.6.0, new behavior is controlled by explicit settings rather than assumptions: binding stays exactly as it was unless the new options are used.

Notable Changes

Binding OpenAPI 3.1 multi-type union parameters

OpenAPI 3.1 allows a parameter's type to be a list, such as type: [string, integer]. Go has no type meaning "one of these", so generated code maps such parameters to any — which the binders previously rejected outright with can not bind to destination of type: interface, making these parameters unusable.

The binder options structs (BindStyledParameterOptions, BindQueryParameterOptions, BindStringToObjectOptions) gain a Types []string field carrying the union's member list. It is only consulted when the destination is an any; binding into every concrete Go type is completely unchanged. The value binds to the first member that parses, trying boolean, integer, number, then string — most restrictive first, since a string always parses. Member detection follows the JSON number grammar (RFC 8259), so values like 007 or +1 bind as strings rather than being silently reinterpreted as numbers.

The bound value's dynamic type is always one of bool, int64, float64, string, or (with format: byte) []byte, so a handler's type switch is stable regardless of what the spec's format says. Applications that want format: int32 / format: float to narrow the produced types to int32 / float32 can opt in via a new package-level setting, following the same pattern as DefaultQueryEncoder from v1.6.0:

func init() {
    runtime.NarrowUnionNumericFormats = true
}

Generator support for emitting Types is landing in oapi-codegen separately; the runtime side ships first so generated code can rely on it. Arrays of unions and deepObject-style parameters are not covered yet — see the Types field documentation for the exact scope.

Fix for a panic when binding numeric values into slice destinations

Since v1.2.0, binding a string that happens to parse as an integer into a non-[]byte slice destination panicked with reflect: call of reflect.Value.OverflowInt on slice Value, instead of returning an error. This was reachable from generated code on the request path: a nullable.Nullable[[]string] query parameter using the default form/explode serialization would panic on ?p=123 while returning a normal binding error on ?p=abc. These cases now return a clean can not bind to destination of type: slice error.

🚀 New features and improvements

• Bind OpenAPI 3.1 multi-type union parameters into any destinations (#154) @​mromaszewicz, @​claude

🐛 Bug fixes

• Fix panic binding numeric values into non-byte slice destinations (#156) @​mromaszewicz, @​claude

✍ Other changes

• chore: use go mod tidy instead of tidied (#148) @​alexandear

📦 Dependency updates

• chore(deps): update github/codeql-action action to v4.37.7 (#152) @​renovate[bot]
• chore(deps): update release-drafter/release-drafter action to v7.7.0 - autoclosed (#151) @​renovate[bot]
• chore(deps): update github/codeql-action action to v4.37.5 (#150) @​renovate[bot]
• fix(deps): update module github.com/labstack/echo/v5 to v5.3.1 - autoclosed (#149) @​renovate[bot]
• chore(deps): update release-drafter/release-drafter action to v7.6.0 (#147) @​renovate[bot]
• chore(deps): update github/codeql-action action to v4.37.2 (#146) @​renovate[bot]

... (truncated)

Commits

• 25e2d35 Fix panic binding numeric values into non-byte slice destinations (#156)
• f2e468c Bind OpenAPI 3.1 multi-type union parameters into any destinations (#154)
• 611503e chore(deps): update github/codeql-action action to v4.37.7 (#152)
• d8c6443 chore(deps): update release-drafter/release-drafter action to v7.7.0 (#151)
• 0caa035 chore(deps): update github/codeql-action action to v4.37.5 (#150)
• 95ed734 fix(deps): update module github.com/labstack/echo/v5 to v5.3.1 (#149)
• 2f68f55 chore: use go mod tidy instead of tidied (#148)
• 03f0d06 chore(deps): update release-drafter/release-drafter action to v7.6.0 (#147)
• 99e61d7 chore(deps): update github/codeql-action action to v4.37.2 (#146)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions