chore(deps): bump the go-dependencies group with 7 updates

[dependabot]

Bumps the go-dependencies group with 7 updates:

Package	From	To
cloud.google.com/go/run	1.21.0	1.22.0
github.com/aws/aws-sdk-go-v2/config	1.32.29	1.32.30
github.com/aws/aws-sdk-go-v2/credentials	1.19.28	1.19.29
github.com/aws/aws-sdk-go-v2/feature/s3/transfermanager	0.3.1	0.3.2
github.com/aws/aws-sdk-go-v2/service/ecs	1.88.0	1.88.1
github.com/aws/aws-sdk-go-v2/service/lambda	1.96.0	1.98.0
github.com/aws/aws-sdk-go-v2/service/s3	1.105.0	1.105.1

Updates cloud.google.com/go/run from 1.21.0 to 1.22.0

Release notes

Sourced from cloud.google.com/go/run's releases.

osconfig: v1.22.0

1.22.0 (2026-07-13)

Features

• o11y: Regenerate clients for LRO tracing (#20107) (779074e)

run: v1.22.0

1.22.0 (2026-07-13)

Features

• o11y: Regenerate clients for LRO tracing (#20107) (779074e)

texttospeech: v1.22.0

1.22.0 (2026-07-13)

Features

• o11y: Regenerate clients for LRO tracing (#20107) (779074e)

Changelog

Sourced from cloud.google.com/go/run's changelog.

1.22.0 (2023-07-26)

Features

• documentai: Exposed Import PV external_processor_version_source to v1beta3 public (#8323) (08b151a)

Commits

• 31cd272 chore: release main (#11840)
• b680164 feat(bigtable): adding node scaling factor
• 587b5cc fix(third_party/pkgsite): increase comment size limit (#11877)
• 24c5ae0 feat(bigtable): Add Bind function to bind query params (#11862)
• c2ee207 feat(dlp): add sample findings for data profiles (#11869)
• 4b7209d feat(modelarmor): new client(s) (#11868)
• 6618039 feat(aiplatform): Add env variables and agent framework to ReasoningEngineSpe...
• 2fbecf4 chore: start generating modelarmor v1 (#11865)
• 8e05420 feat(alloydb): A new method ExportCluster is added to service `AlloyDBAdmin...
• f9c81d6 test(storage): extend timeout for tests to finish (#11784)
• Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/config from 1.32.29 to 1.32.30

Commits

• 2704503 Release 2026-07-13
• 2475fc6 Regenerated Clients
• 89ce46e Update endpoints model
• 97a7b55 Update API model
• 472756a add response snapshot tests for new wave 1 (partial cbor) (#3471)
• 3133b1d Release 2026-07-10
• 2d7d0f8 Regenerated Clients
• cdc7fe3 Update endpoints model
• d41266e Update API model
• d7ac1fc Release 2026-07-09
• Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/credentials from 1.19.28 to 1.19.29

Commits

• 2704503 Release 2026-07-13
• 2475fc6 Regenerated Clients
• 89ce46e Update endpoints model
• 97a7b55 Update API model
• 472756a add response snapshot tests for new wave 1 (partial cbor) (#3471)
• 3133b1d Release 2026-07-10
• 2d7d0f8 Regenerated Clients
• cdc7fe3 Update endpoints model
• d41266e Update API model
• d7ac1fc Release 2026-07-09
• Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/feature/s3/transfermanager from 0.3.1 to 0.3.2

Commits

• 2463dca Release 2020-11-30
• 0ec87c7 checkpoint for release metadata
• 1175c69 Merge pull request #935 from aws/syncModels
• dd10220 regenerate apis
• 8af445f Revert s3 model, and other model corrections
• 83d3be5 address go version conflict hardcoded
• 74da54b update hand written module dependencies for smithy-go and gocmp
• eeef617 Update API models
• 78a355a Add CHANGELOG.md entries for Logging and Paginators (#931)
• 82cb03f remove unused tooling (#928)
• Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/service/ecs from 1.88.0 to 1.88.1

Commits

• 70e9f3d Release 2025-09-10
• e620ecb Regenerated Clients
• b412203 Update endpoints model
• 89f42ef Update API model
• d71b109 Bump smithy go version to allow unused required parameter in endpoint rule se...
• f68827f Release 2025-09-09
• d1748bf Regenerated Clients
• 00307c0 Update endpoints model
• 424be93 Update API model
• See full diff in compare view

Updates github.com/aws/aws-sdk-go-v2/service/lambda from 1.96.0 to 1.98.0

Commits

• e4deb65 Release 2026-03-31
• 1f758f2 Regenerated Clients
• ba7e432 Update API model
• 607cb0a Release 2026-03-30
• a44005f Regenerated Clients
• dbbd846 Update API model
• 5b5c3f9 Revert "drop service/internal/benchmark (#3368)" (#3369)
• 7ca3f9d drop service/internal/benchmark (#3368)
• 338088b Release 2026-03-27
• f0e5f3d Regenerated Clients
• Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/service/s3 from 1.105.0 to 1.105.1

Commits

• 2704503 Release 2026-07-13
• 2475fc6 Regenerated Clients
• 89ce46e Update endpoints model
• 97a7b55 Update API model
• 472756a add response snapshot tests for new wave 1 (partial cbor) (#3471)
• 3133b1d Release 2026-07-10
• 2d7d0f8 Regenerated Clients
• cdc7fe3 Update endpoints model
• d41266e Update API model
• d7ac1fc Release 2026-07-09
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[claude]

Claude finished @dependabot[bot]'s task in 1m 6s —— View job

---

Dependency Upgrade Review

• Identify changed dependencies (go.mod/go.sum)
• Assess semver/breaking changes for each
• Search repo for usage of upgraded deps
• Flag risks & suggest follow-up checks
• Post review summary

---

Verdict: 🟢 Low risk — safe to merge once CI is green. All 7 direct updates are patch/minor bumps with no signature-breaking API changes affecting how this repo uses them.

Direct dependencies

Package	Bump	Type	Risk
cloud.google.com/go/run	1.21.0 → 1.22.0	minor	🟢 — release notes: only "Regenerate clients for LRO tracing", additive
aws-sdk-go-v2/config	1.32.29 → 1.32.30	patch	🟢
aws-sdk-go-v2/credentials	1.19.28 → 1.19.29	patch	🟢
aws-sdk-go-v2/feature/s3/transfermanager	0.3.1 → 0.3.2	patch (pre-1.0)	🟡 — see note
aws-sdk-go-v2/service/ecs	1.88.0 → 1.88.1	patch	🟢
aws-sdk-go-v2/service/lambda	1.96.0 → 1.98.0	minor ×2	🟢 — additive API-model regen
aws-sdk-go-v2/service/s3	1.105.0 → 1.105.1	patch	🟢

Transitive bumps (iam, longrunning, sso/ssooidc/sts/signin, gax-go, genproto/api) are the expected fallout of the above and are all forward-compatible.

How these are used in the repo

Usage is confined to internal/aws/aws.go and internal/cloudrun/cloudrun.go, and only touches stable, high-level APIs:

• Lambda: ListFunctions, GetFunctionConfiguration (aws.go:146-147, 184, 286)
• ECS: ListServices, DescribeServices, ListClusters, DescribeClusters, ListTasks, DescribeTasks (aws.go:168-169, 531-711)
• S3: ListObjectsV2 + paginator (aws.go:442-449)
• Transfer manager: transfermanager.New, DownloadObject (aws.go:446, 513)

None of these signatures change across the bumps. AWS SDK Go v2 per-service minor/patch releases are generated API-model updates (new optional fields), so no call sites break.

Notes / follow-up

• 🟡 feature/s3/transfermanager is still pre-1.0 (v0.x, experimental), so its API is not covered by semver stability guarantees. This bump is only a patch, but keep an eye on this module across future upgrades — the DownloadObject path (aws.go:502-527) is the surface to watch.
• ✅ Good coverage already exists: lambda_contract_test.go, ecs_services_test.go, and snapshotLambda_test.go exercise the affected clients. Confirming these pass in CI is sufficient validation for this PR.
• I couldn't run go build ./... locally (build commands not permitted in this environment), so I relied on static analysis of call sites. CI's build + integration suite is the authoritative check here.
  · dependabot/go_modules/go-dependencies-9086c69a7b