chore(deps): bump the go-dependencies group with 2 updates

[dependabot]

Bumps the go-dependencies group with 2 updates: github.com/aws/smithy-go and github.com/moby/moby/client.

Updates github.com/aws/smithy-go from 1.27.4 to 1.27.5

Changelog

Sourced from github.com/aws/smithy-go's changelog.

Release (2026-07-27)

General Highlights

• Dependency Update: Updated to the latest SDK module versions

Module Highlights

• github.com/aws/smithy-go: v1.27.5
  • Bug Fix: Fix a performance issue in awsQuery with large response payloads.

Release (2026-07-16)

General Highlights

• Dependency Update: Updated to the latest SDK module versions

Module Highlights

• github.com/aws/smithy-go/aws-http-auth: v1.2.1
  • Bug Fix: Use r.URL.Host when r.Host is unset.
• github.com/aws/smithy-go/aws-http-auth-schemes: v1.0.0
  • Release: Module github.com/aws/smithy-go/aws-http-auth-schemes adds generic smithy-go client support for AWS Sigv4 and Sigv4a.

Release (2026-06-26)

General Highlights

• Dependency Update: Updated to the latest SDK module versions

Module Highlights

• github.com/aws/smithy-go: v1.27.3
  • Bug Fix: Fix bug in JSON doc encoder and endpoint host label format validation

Release (2026-06-05)

General Highlights

• Dependency Update: Updated to the latest SDK module versions

Module Highlights

• github.com/aws/smithy-go: v1.27.2
  • Bug Fix: Fix incorrect serialization of unions in CBOR-based protocols.

Release (2026-06-04)

General Highlights

• Dependency Update: Updated to the latest SDK module versions

Module Highlights

• github.com/aws/smithy-go: v1.27.1
  • Bug Fix: Fixed a deserialization failure in all protocols when encountering a union with explicit null members.
  • Bug Fix: Fixed a panic when deserializing nested unions in JSON- and CBOR-based protocols.

Release (2026-06-02)

... (truncated)

Commits

• 7016ea0 Release 2026-07-27
• cb3e15c add fine-grained benchmark codegen (#688)
• f23de1a revert codegen version to 0.1.0
• 5dd90af update README
• 526ee94 remove wrapper and only sign release-built bundle
• See full diff in compare view

Updates github.com/moby/moby/client from 0.5.0 to 0.5.1

Release notes

Sourced from github.com/moby/moby/client's releases.

client/v0.5.1

0.5.1

Changelog

• client/pkg/jsonmessage: Display: fix godoc link. moby/moby#53070
• client: ServiceCreate, ServiceUpdate: fix duplicate and 'unkown' platforms. moby/moby#53012
• client: ServiceInspect, ContainerCommit: omit optional query args if not set. moby/moby#53010
• golangci-lint: enable perfsprint linter. moby/moby#53016

Changelog

Sourced from github.com/moby/moby/client's changelog.

0.5.1 (2013-07-30)

• API: Docker client now sets useragent (RFC 2616)
• Runtime: Add ps args to docker top
• Runtime: Add support for container ID files (pidfile like)
• Runtime: Add container=lxc in default env
• Runtime: Support networkless containers with docker run -n and docker -d -b=none
• API: Add /events endpoint
• Builder: ADD command now understands URLs
• Builder: CmdAdd and CmdEnv now respect Dockerfile-set ENV variables

• Hack: Simplify unit tests with helpers
• Hack: Improve docker.upstart event
• Hack: Add coverage testing into docker-ci
• Runtime: Stdout/stderr logs are now stored in the same file as JSON
• Runtime: Allocate a /16 IP range by default, with fallback to /24. Try 12 ranges instead of 3.
• Runtime: Change .dockercfg format to json and support multiple auth remote

• Runtime: Do not override volumes from config
• Runtime: Fix issue with EXPOSE override
• Builder: Create directories with 755 instead of 700 within ADD instruction

Commits

• 3b89d13 Bump to v0.5.1
• 16225c4 Merge pull request #1291 from dotcloud/ensure_mount_commit
• dd2f0d8 Merge pull request #1238 from dotcloud/1237-improve_docker_top-feature
• 0b57e44 Merge branch 'master' into 1237-improve_docker_top-feature
• f2dc492 Merge pull request #1342 from dsissitka/patch-4
• a7ace53 Merge pull request #1339 from dhrp/docker-run-d-description
• c99e8de Merge branch 'cleanup_signal_handling' of https://github.com/calavera/docker ...
• c06aa62 Merge pull request #1306 from dotcloud/1294_fix_wrong_untag_using_id_rmi
• 9ba9983 Fixed a couple of minor syntax errors.
• 7d68afb Merge pull request #1209 from zimbatm/upstart-improvements
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[claude]

Claude finished @dependabot[bot]'s task in 1m 4s —— View job

---

Dependency upgrade review

• Identify changed dependencies
• Assess smithy-go 1.27.4 → 1.27.5
• Assess moby/moby/client 0.5.0 → 0.5.1
• Check repo usage of each
• Summarize

Two patch-level bumps in the go-dependencies group. Both look safe to merge. ✅

---

github.com/aws/smithy-go 1.27.4 → 1.27.5

• Change: single bug fix — "Fix a performance issue in awsQuery with large response payloads." No API changes (the /go.mod hash in go.sum is unchanged, so no transitive dependency changes either).
• Repo usage: only smithyTime "github.com/aws/smithy-go/time" in internal/azure/azure_apps.go:23. The fix touches the awsQuery protocol layer, not the time package, so it's unrelated to how we use smithy-go.
• Risk: none.

github.com/moby/moby/client 0.5.0 → 0.5.1

• Change: the accurate changelog is in the release notes (the "2013" changelog Dependabot rendered is a mis-fetched historical file — ignore it). Relevant fixes:
  • ServiceCreate / ServiceUpdate: duplicate/unknown platforms fix (Swarm services)
  • ServiceInspect / ContainerCommit: omit optional query args if unset
  • jsonmessage godoc link + a linter enablement (perfsprint)
• Repo usage: the client is used in internal/docker/docker.go, internal/digest/digest.go, and cmd/kosli/snapshotDocker.go. Calls are limited to image/container ops — ImagePull/Push/Tag/Remove, ContainerCreate/Start/Remove, client.New(client.FromEnv). None of the changed APIs (ServiceCreate/Update/Inspect, ContainerCommit) are used here.
• Risk: none for this codebase.

Follow-up

• CI (build + make test_integration) should confirm compilation, especially for the moby client whose /go.mod hash did change. I was unable to run go build locally (the command needs interactive approval in this environment), so I'm relying on CI to green-light the compile.

Verdict: Low-risk patch bumps with no touched surface in this repo. Recommend merge once CI is green.