chore(deps): bump the go-dependencies group with 7 updates

[dependabot]

Bumps the go-dependencies group with 7 updates:

Package	From	To
github.com/aws/aws-sdk-go-v2	1.43.4	1.43.5
github.com/aws/aws-sdk-go-v2/config	1.32.35	1.32.36
github.com/aws/aws-sdk-go-v2/credentials	1.19.34	1.19.35
github.com/aws/aws-sdk-go-v2/feature/s3/transfermanager	0.3.11	0.3.12
github.com/aws/aws-sdk-go-v2/service/ecs	1.90.0	1.90.1
github.com/aws/aws-sdk-go-v2/service/lambda	1.101.2	1.101.3
github.com/aws/aws-sdk-go-v2/service/s3	1.107.0	1.107.1

Updates github.com/aws/aws-sdk-go-v2 from 1.43.4 to 1.43.5

Commits

• a14f5f1 Release 2026-08-10
• 339f0b6 Regenerated Clients
• 0978e3d Update API model
• 3cc614d Fix codegen mp (#3508)
• 1434b18 generate response snapshots for json (#3507)
• ad58f77 Checkout smithy-go on PRs at the commit pointed out by SMITHY_GO_CODEGEN_VERS...
• c002860 feat: move close-body, logger, and service-metadata work out of the middlewar...
• f152336 Release 2026-08-07
• 37d88d7 Regenerated Clients
• c54b278 Update endpoints model
• Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/config from 1.32.35 to 1.32.36

Commits

• a14f5f1 Release 2026-08-10
• 339f0b6 Regenerated Clients
• 0978e3d Update API model
• 3cc614d Fix codegen mp (#3508)
• 1434b18 generate response snapshots for json (#3507)
• ad58f77 Checkout smithy-go on PRs at the commit pointed out by SMITHY_GO_CODEGEN_VERS...
• c002860 feat: move close-body, logger, and service-metadata work out of the middlewar...
• f152336 Release 2026-08-07
• 37d88d7 Regenerated Clients
• c54b278 Update endpoints model
• Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/credentials from 1.19.34 to 1.19.35

Commits

• a14f5f1 Release 2026-08-10
• 339f0b6 Regenerated Clients
• 0978e3d Update API model
• 3cc614d Fix codegen mp (#3508)
• 1434b18 generate response snapshots for json (#3507)
• ad58f77 Checkout smithy-go on PRs at the commit pointed out by SMITHY_GO_CODEGEN_VERS...
• c002860 feat: move close-body, logger, and service-metadata work out of the middlewar...
• f152336 Release 2026-08-07
• 37d88d7 Regenerated Clients
• c54b278 Update endpoints model
• Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/feature/s3/transfermanager from 0.3.11 to 0.3.12

Commits

• a14f5f1 Release 2026-08-10
• 339f0b6 Regenerated Clients
• 0978e3d Update API model
• 3cc614d Fix codegen mp (#3508)
• 1434b18 generate response snapshots for json (#3507)
• ad58f77 Checkout smithy-go on PRs at the commit pointed out by SMITHY_GO_CODEGEN_VERS...
• c002860 feat: move close-body, logger, and service-metadata work out of the middlewar...
• f152336 Release 2026-08-07
• 37d88d7 Regenerated Clients
• c54b278 Update endpoints model
• Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/service/ecs from 1.90.0 to 1.90.1

Commits

• ab56437 Release 2025-11-11
• 3dcd1d8 Regenerated Clients
• 51e8881 Update API model
• 1ed4f27 add MAINTAINERS.md
• a5136d5 host label
• 0bf4293 Feat ep region validation (#3225)
• 7f09d56 Release 2025-11-10
• f7d3676 Regenerated Clients
• f077cda Update API model
• a432037 Release 2025-11-07
• Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/service/lambda from 1.101.2 to 1.101.3

Commits

• 2732653 Release 2024-11-13
• 91f9f43 Regenerated Clients
• b95013d Update endpoints model
• 673ae94 Update API model
• 10b8b14 Release 2024-11-12
• c96e678 Regenerated Clients
• 8a44a42 Update endpoints model
• 49a6bb8 Update API model
• 58904b3 Release 2024-11-11
• f174447 Regenerated Clients
• Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/service/s3 from 1.107.0 to 1.107.1

Commits

• a14f5f1 Release 2026-08-10
• 339f0b6 Regenerated Clients
• 0978e3d Update API model
• 3cc614d Fix codegen mp (#3508)
• 1434b18 generate response snapshots for json (#3507)
• ad58f77 Checkout smithy-go on PRs at the commit pointed out by SMITHY_GO_CODEGEN_VERS...
• c002860 feat: move close-body, logger, and service-metadata work out of the middlewar...
• f152336 Release 2026-08-07
• 37d88d7 Regenerated Clients
• c54b278 Update endpoints model
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[claude]

Claude finished @dependabot[bot]'s task in 58s —— View job

---

Dependency upgrade review

• Identify changed dependencies (go.mod diff)
• Assess semver / breaking-change risk
• Check how the upgraded packages are used in the repo
• Post findings

Verdict: safe to merge. This is a routine, low-risk group bump. All seven direct dependencies (and the transitive aws-sdk-go-v2/* modules) are patch-level increments within the same minor line, so no API breakage is expected under semver.

Package	Change	Type
aws-sdk-go-v2	1.43.4 → 1.43.5	patch
aws-sdk-go-v2/config	1.32.35 → 1.32.36	patch
aws-sdk-go-v2/credentials	1.19.34 → 1.19.35	patch
aws-sdk-go-v2/feature/s3/transfermanager	0.3.11 → 0.3.12	patch (0.x)
aws-sdk-go-v2/service/ecs	1.90.0 → 1.90.1	patch
aws-sdk-go-v2/service/lambda	1.101.2 → 1.101.3	patch
aws-sdk-go-v2/service/s3	1.107.0 → 1.107.1	patch

These AWS SDK Go v2 patch releases are regenerated clients, endpoint/API model refreshes, and internal middleware refactors (e.g. moving close-body/logger/service-metadata out of the middleware stack) — none touch the public client surface.

Usage in the repo is confined to internal/aws/aws.go and its tests, and only exercises stable, long-standing APIs:

• Client construction: config.LoadDefaultConfig, credentials.NewStaticCredentialsProvider, s3.NewFromConfig, lambda.NewFromConfig, ecs.NewFromConfig, transfermanager.New.
• Operations: s3.ListObjectsV2 (+ paginator), transfermanager.DownloadObject, lambda.ListFunctions / GetFunctionConfiguration, ecs.ListClusters / DescribeClusters / ListServices / DescribeServices / ListTasks / DescribeTasks.

None of these signatures change across a patch bump, so no code changes are required.

Note: the transfermanager module is pre-1.0 (v0.3.x), where AWS does not guarantee API stability. The single call site (DownloadObject in aws.go:564) is well-isolated behind the S3DownloadAPI interface, so any future breakage would be easy to spot and contain — nothing to do now.

Suggested follow-up: let CI run make build + make test_integration (the local AWS/ECS/Lambda/S3 suites in internal/aws/) as the green light. I couldn't run the build here (the go build command required approval in this environment), so I verified via source inspection rather than compilation.
· dependabot/go_modules/go-dependencies-25389fe72c