fix(deps): update package updates

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence	Type	Update
certifi	==2025.11.12 → ==2026.1.4				major
github.com/aws/aws-lambda-go	v1.51.1 → v1.52.0			require	minor
github.com/aws/aws-sdk-go-v2	v1.41.0 → v1.41.1			require	patch
github.com/aws/aws-sdk-go-v2/config	v1.32.6 → v1.32.7			require	patch
github.com/aws/aws-sdk-go-v2/service/sns	v1.39.10 → v1.39.11			require	patch
github.com/aws/aws-sdk-go-v2/service/sqs	v1.42.20 → v1.42.21			require	patch
github.com/aws/aws-sdk-go-v2/service/ssm	v1.67.7 → v1.67.8			require	patch
golangci/golangci-lint	v2.7.2 → v2.8.0			final	minor
protobuf	==6.33.2 → ==6.33.5				patch
urllib3 (changelog)	==2.6.2 → ==2.6.3				patch

---

Release Notes

certifi/python-certifi (certifi)

v2026.1.4

Compare Source

aws/aws-lambda-go (github.com/aws/aws-lambda-go)

v1.52.0

Compare Source

What's Changed

• lambdacontext feature: Adding structured logging helper by @​anzheyazzz in #​614

New Contributors

• @​anzheyazzz made their first contribution in #​614

Full Changelog: aws/aws-lambda-go@v1.51.2...v1.52.0

v1.51.2

Compare Source

What's Changed

• fix: always return PhysicalResourceID for CFn CustomResources by @​Youssef-Beltagy in #​613

New Contributors

• @​Youssef-Beltagy made their first contribution in #​613

Full Changelog: aws/aws-lambda-go@v1.51.1...v1.51.2

aws/aws-sdk-go-v2 (github.com/aws/aws-sdk-go-v2)

v1.41.1

Compare Source

General Highlights

• Dependency Update: Updated to the latest SDK module versions

Module Highlights

• github.com/aws/aws-sdk-go-v2: v1.39.5
  • Bug Fix: Deprecate http.AddResponseReadTimeoutMiddleware.
• github.com/aws/aws-sdk-go-v2/service/amp: v1.41.0
  • Feature: Add Anomaly Detection APIs for Amazon Managed Prometheus
• github.com/aws/aws-sdk-go-v2/service/apigateway: v1.36.0
  • Feature: Update endpoint ruleset parameters casing
• github.com/aws/aws-sdk-go-v2/service/appconfig: v1.43.0
  • Feature: Update endpoint ruleset parameters casing
• github.com/aws/aws-sdk-go-v2/service/appflow: v1.51.0
  • Feature: Update endpoint ruleset parameters casing
• github.com/aws/aws-sdk-go-v2/service/applicationcostprofiler: v1.27.0
  • Feature: Update endpoint ruleset parameters casing
• github.com/aws/aws-sdk-go-v2/service/appmesh: v1.35.0
  • Feature: Update endpoint ruleset parameters casing
• github.com/aws/aws-sdk-go-v2/service/appsync: v1.52.0
  • Feature: Update endpoint ruleset parameters casing
• github.com/aws/aws-sdk-go-v2/service/artifact: v1.14.0
  • Feature: Update endpoint ruleset parameters casing
• github.com/aws/aws-sdk-go-v2/service/auditmanager: v1.46.0
  • Feature: Update endpoint ruleset parameters casing
• github.com/aws/aws-sdk-go-v2/service/bedrockagent: v1.51.0
  • Feature: Update endpoint ruleset parameters casing
• github.com/aws/aws-sdk-go-v2/service/bedrockagentcorecontrol: v1.12.0
  • Feature: Web-Bot-Auth support for AgentCore Browser tool to help reduce captcha challenges.
• github.com/aws/aws-sdk-go-v2/service/chime: v1.41.0
  • Feature: Update endpoint ruleset parameters casing
• github.com/aws/aws-sdk-go-v2/service/cleanrooms: v1.37.0
  • Feature: Added support for advanced Spark configurations to optimize SQL performance
• github.com/aws/aws-sdk-go-v2/service/cloudcontrol: v1.29.0
  • Feature: Update endpoint ruleset parameters casing
• github.com/aws/aws-sdk-go-v2/service/clouddirectory: v1.30.0
  • Feature: Update endpoint ruleset parameters casing
• github.com/aws/aws-sdk-go-v2/service/cloudsearch: v1.32.0
  • Feature: Update endpoint ruleset parameters casing
• github.com/aws/aws-sdk-go-v2/service/cloudwatch: v1.52.0
  • Feature: Update endpoint ruleset parameters casing
• github.com/aws/aws-sdk-go-v2/service/codecatalyst: v1.21.0
  • Feature: Update endpoint ruleset parameters casing
• github.com/aws/aws-sdk-go-v2/service/codecommit: v1.33.0
  • Feature: Update endpoint ruleset parameters casing
• github.com/aws/aws-sdk-go-v2/service/codedeploy: v1.35.0
  • Feature: Update endpoint ruleset parameters casing
• github.com/aws/aws-sdk-go-v2/service/cognitosync: v1.29.0
  • Feature: Update endpoint ruleset parameters casing
• github.com/aws/aws-sdk-go-v2/service/computeoptimizer: v1.48.0
  • Feature: Update endpoint ruleset parameters casing
• github.com/aws/aws-sdk-go-v2/service/connectcases: v1.33.0
  • Feature: Update endpoint ruleset parameters casing
• github.com/aws/aws-sdk-go-v2/service/deadline: v1.22.0
  • Feature: Update endpoint ruleset parameters casing
• github.com/aws/aws-sdk-go-v2/service/devopsguru: v1.40.0
  • Feature: Update endpoint ruleset parameters casing
• github.com/aws/aws-sdk-go-v2/service/docdb: v1.48.0
  • Feature: Adding FailoverState and TagList to GlobalCluster and SynchronizationStatus to GlobalClusterMember.
• github.com/aws/aws-sdk-go-v2/service/ecs: v1.67.0
  • Feature: Amazon ECS Service Connect now supports Envoy access logs, providing deeper observability into request-level traffic patterns and service interactions.
• github.com/aws/aws-sdk-go-v2/service/eksauth: v1.12.0
  • Feature: Update endpoint ruleset parameters casing
• github.com/aws/aws-sdk-go-v2/service/elasticache: v1.51.0
  • Feature: Update endpoint ruleset parameters casing
• github.com/aws/aws-sdk-go-v2/service/emrserverless: v1.37.0
  • Feature: This release adds the capability to enable User Background Sessions for customers running Trusted Identity Propagation enabled Interactive Sessions on EMR Serverless Applications.
• github.com/aws/aws-sdk-go-v2/service/firehose: v1.42.0
  • Feature: Update endpoint ruleset parameters casing
• github.com/aws/aws-sdk-go-v2/service/frauddetector: v1.41.0
  • Feature: Update endpoint ruleset parameters casing
• github.com/aws/aws-sdk-go-v2/service/geoplaces: v1.7.0
  • Feature: Update endpoint ruleset parameters casing
• github.com/aws/aws-sdk-go-v2/service/glue: v1.132.0
  • Feature: This release adds the capability to enable User Background Sessions for customers running Trusted Identity Propagation enabled Interactive Sessions on AWS Glue.
• github.com/aws/aws-sdk-go-v2/service/greengrassv2: v1.42.0
  • Feature: Update endpoint ruleset parameters casing
• github.com/aws/aws-sdk-go-v2/service/ioteventsdata: v1.30.0
  • Feature: Update endpoint ruleset parameters casing
• github.com/aws/aws-sdk-go-v2/service/iotmanagedintegrations: v1.6.0
  • Feature: Add a new GetManagedThingCertificate API to expose Iot ManagedIntegrations (MI) device certificate, and add "-" support for name, properties, actions and events in the CapabilityReportCapability object.
• github.com/aws/aws-sdk-go-v2/service/keyspacesstreams: v1.5.0
  • Feature: Update endpoint ruleset parameters casing
• github.com/aws/aws-sdk-go-v2/service/kinesis: v1.41.1
  • Bug Fix: Remove arbitrary read timeout on GetRecords which was causing response read panic. See #​2752.
• github.com/aws/aws-sdk-go-v2/service/kms: v1.47.0
  • Feature: Add cross account VPC endpoint service connectivity support to CustomKeyStore.
• github.com/aws/aws-sdk-go-v2/service/licensemanagerlinuxsubscriptions: v1.20.0
  • Feature: Update endpoint ruleset parameters casing
• github.com/aws/aws-sdk-go-v2/service/marketplacereporting: v1.7.0
  • Feature: Update endpoint ruleset parameters casing
• github.com/aws/aws-sdk-go-v2/service/neptune: v1.43.0
  • Feature: Update endpoint ruleset parameters casing
• github.com/aws/aws-sdk-go-v2/service/rtbfabric: v1.1.1
  • Documentation: RTB Fabric documentation update.
• github.com/aws/aws-sdk-go-v2/service/s3outposts: v1.34.0
  • Feature: Update endpoint ruleset parameters casing
• github.com/aws/aws-sdk-go-v2/service/sagemakerruntime: v1.38.0
  • Feature: Update endpoint ruleset parameters casing
• github.com/aws/aws-sdk-go-v2/service/schemas: v1.34.0
  • Feature: Update endpoint ruleset parameters casing
• github.com/aws/aws-sdk-go-v2/service/serverlessapplicationrepository: v1.30.0
  • Feature: Update endpoint ruleset parameters casing
• github.com/aws/aws-sdk-go-v2/service/servicecatalog: v1.39.0
  • Feature: Update endpoint ruleset parameters casing
• github.com/aws/aws-sdk-go-v2/service/sso: v1.30.0
  • Feature: Update endpoint ruleset parameters casing
• github.com/aws/aws-sdk-go-v2/service/sts: v1.39.0
  • Feature: Update endpoint ruleset parameters casing

golangci/golangci-lint (golangci/golangci-lint)

v2.8.0

Compare Source

Released on 2026-01-07

1. Linters new features or changes
   • godoc-lint: from 0.10.2 to 0.11.1 (new rule: require-stdlib-doclink)
   • golines: from 442fd00 to 0.14.0
   • gomoddirectives: from 0.7.1 to 0.8.0
   • gosec: from daccba6 to 2.22.11 (new rule: G116)
   • modernize: from 0.39.0 to 0.40.0 (new analyzers: stringscut, unsafefuncs)
   • prealloc: from 1.0.0 to 1.0.1 (message changes)
   • unqueryvet: from 1.3.0 to 1.4.0 (new options: check-aliased-wildcard, check-string-concat, check-format-strings, check-string-builder, check-subqueries, ignored-functions, sql-builders)
2. Linters bug fixes
   • go-critic: from 0.14.2 to 0.14.3
   • go-errorlint: from 1.8.0 to 1.9.0
   • govet: from 0.39.0 to 0.40.0
   • protogetter: from 0.3.17 to 0.3.18
   • revive: add missing enable-default-rules setting
3. Documentation
   • docs: split installation page

urllib3/urllib3 (urllib3)

v2.6.3

Compare Source

==================

• Fixed a high-severity security issue where decompression-bomb safeguards of
  the streaming API were bypassed when HTTP redirects were followed.
  (GHSA-38jv-5279-wg99 <https://github.com/urllib3/urllib3/security/advisories/GHSA-38jv-5279-wg99>__)
• Started treating Retry-After times greater than 6 hours as 6 hours by
  default. (#&#8203;3743 <https://github.com/urllib3/urllib3/issues/3743>__)
• Fixed urllib3.connection.VerifiedHTTPSConnection on Emscripten.
  (#&#8203;3752 <https://github.com/urllib3/urllib3/issues/3752>__)

---

Configuration

📅 Schedule: Branch creation - On day 1 of the month ( * * 1 * * ) in timezone Australia/Sydney, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 9 additional dependencies were updated

Details:

Package	Change
github.com/aws/aws-sdk-go-v2/credentials	v1.19.6 -> v1.19.7
github.com/aws/aws-sdk-go-v2/feature/ec2/imds	v1.18.16 -> v1.18.17
github.com/aws/aws-sdk-go-v2/internal/configsources	v1.4.16 -> v1.4.17
github.com/aws/aws-sdk-go-v2/internal/endpoints/v2	v2.7.16 -> v2.7.17
github.com/aws/aws-sdk-go-v2/service/internal/presigned-url	v1.13.16 -> v1.13.17
github.com/aws/aws-sdk-go-v2/service/signin	v1.0.4 -> v1.0.5
github.com/aws/aws-sdk-go-v2/service/sso	v1.30.8 -> v1.30.9
github.com/aws/aws-sdk-go-v2/service/ssooidc	v1.35.12 -> v1.35.13
github.com/aws/aws-sdk-go-v2/service/sts	v1.41.5 -> v1.41.6