chore(deps): bump the go-dependencies group across 1 directory with 5 updates

[dependabot]

Bumps the go-dependencies group with 5 updates in the / directory:

Package	From	To
github.com/aws/aws-sdk-go-v2/service/ecs	1.84.0	1.85.0
github.com/aws/aws-sdk-go-v2/service/lambda	1.92.3	1.93.0
github.com/moby/moby/api	1.54.2	1.55.0
github.com/moby/moby/client	0.4.1	0.5.0
google.golang.org/api	0.285.0	0.286.0

Updates github.com/aws/aws-sdk-go-v2/service/ecs from 1.84.0 to 1.85.0

Commits

• ebcf78d Release 2025-07-28
• e06fa53 Regenerated Clients
• f8cf88f Update endpoints model
• 4b21ea1 Update API model
• 97bf21a add interceptors (#3143)
• f82e8c9 Release 2025-07-25
• c7db467 Regenerated Clients
• a8b69ab Update API model
• 4f215b9 Release 2025-07-24
• 2dade39 Regenerated Clients
• Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/service/lambda from 1.92.3 to 1.93.0

Commits

• 09a5817 Release 2025-12-02
• 58d1759 Regenerated Clients
• 16ba34e Update endpoints model
• 7873bf4 Update API model
• 9b55b02 bump smithy-go to v1.24.0 (#3242)
• d8b0179 Release 2025-12-01
• e4405f0 Regenerated Clients
• 65d08b0 Update API model
• f6cc036 Release 2025-11-26
• deb353f Regenerated Clients
• Additional commits viewable in compare view

Updates github.com/moby/moby/api from 1.54.2 to 1.55.0

Release notes

Sourced from github.com/moby/moby/api's releases.

api/v1.55.0

1.55.0

Changelog

• POST /containers/{id}/update now supports per-device blkio resource settingss. moby/moby#52651
• The new GET /images/{name}/attestations endpoint returns in-toto attestation statements (such as SLSA provenance and SPDX SBOM) attached to an image, with optional platform selection, predicate type filtering, and an opt-in statement query parameter for retrieving the verbatim statement bodies. Tools can now retrieve attestation metadata and content directly from the daemon instead of performing additional registry round-trips. moby/moby#52636
• docs: clarify swarm join required fields. moby/moby#52763

api/v1.55.0-rc.1

1.55.0-rc.1

Changelog

• POST /containers/{id}/update now supports per-device blkio resource settingss. moby/moby#52651
• The new GET /images/{name}/attestations endpoint returns in-toto attestation statements (such as SLSA provenance and SPDX SBOM) attached to an image, with optional platform selection, predicate type filtering, and an opt-in statement query parameter for retrieving the verbatim statement bodies. Tools can now retrieve attestation metadata and content directly from the daemon instead of performing additional registry round-trips. moby/moby#52636
• docs: clarify swarm join required fields. moby/moby#52763

Commits

• b6c53c2 Merge pull request #52773 from vvoland/c8d-amd64-variants
• 01115e8 Merge pull request #52906 from vvoland/fix-TestContainerWithConflictingNoneNe...
• b36296f Merge pull request #52913 from thaJeztah/windows_does_stats
• a81aa78 TestContainerWithConflictingNoneNetwork: Extend Windows timeout
• 908a35a Merge pull request #52914 from thaJeztah/no_stderr
• 04d33b5 Merge pull request #52912 from thaJeztah/cleanup_GenerateRandomAlphaOnlyString
• 3b2f557 Merge pull request #52722 from notandruu/integration/migrate-TestInspectAPIIm...
• 62b3aae Merge pull request #52901 from vvoland/c8d-imageusage
• 11d3342 integration-cli: un-skip stats tests on Windows
• a47b1b2 Merge pull request #52891 from smerkviladze/attestations-clearer-blob-missing...
• Additional commits viewable in compare view

Updates github.com/moby/moby/client from 0.4.1 to 0.5.0

Release notes

Sourced from github.com/moby/moby/client's releases.

client/0.5.0

0.5.0

Changelog

• The new GET /images/{name}/attestations endpoint returns in-toto attestation statements (such as SLSA provenance and SPDX SBOM) attached to an image, with optional platform selection, predicate type filtering, and an opt-in statement query parameter for retrieving the verbatim statement bodies. Tools can now retrieve attestation metadata and content directly from the daemon instead of performing additional registry round-trips. moby/moby#52636

client/v0.5.0-rc.1

0.5.0-rc.1

Changelog

• The new GET /images/{name}/attestations endpoint returns in-toto attestation statements (such as SLSA provenance and SPDX SBOM) attached to an image, with optional platform selection, predicate type filtering, and an opt-in statement query parameter for retrieving the verbatim statement bodies. Tools can now retrieve attestation metadata and content directly from the daemon instead of performing additional registry round-trips. moby/moby#52636

Changelog

Sourced from github.com/moby/moby/client's changelog.

0.5.0 (2013-07-17)

• Runtime: List all processes running inside a container with 'docker top'
• Runtime: Host directories can be mounted as volumes with 'docker run -v'
• Runtime: Containers can expose public UDP ports (eg, '-p 123/udp')
• Runtime: Optionally specify an exact public port (eg. '-p 80:4500')
• Registry: New image naming scheme inspired by Go packaging convention allows arbitrary combinations of registries
• Builder: ENTRYPOINT instruction sets a default binary entry point to a container
• Builder: VOLUME instruction marks a part of the container as persistent data

• Builder: 'docker build' displays the full output of a build by default
• Runtime: 'docker login' supports additional options

• Runtime: Dont save a container's hostname when committing an image.
• Registry: Fix issues when uploading images to a private registry

0.4.8 (2013-07-01)

• Builder: New build operation ENTRYPOINT adds an executable entry point to the container.

• Runtime: Fix a bug which caused 'docker run -d' to no longer print the container ID.
• Tests: Fix issues in the test suite

0.4.7 (2013-06-28)

• Registry: easier push/pull to a custom registry
• Remote API: the progress bar updates faster when downloading and uploading large files

• Remote API: fix a bug in the optional unix socket transport

• Runtime: improve detection of kernel version

• Runtime: host directories can be mounted as volumes with 'docker run -b'

• Runtime: fix an issue when only attaching to stdin

• Runtime: use 'tar --numeric-owner' to avoid uid mismatch across multiple hosts
• Hack: improve test suite and dev environment
• Hack: remove dependency on unit tests on 'os/user'

• Documentation: add terminology section

0.4.6 (2013-06-22)

• Runtime: fix a bug which caused creation of empty images (and volumes) to crash.

0.4.5 (2013-06-21)

• Builder: 'docker build git://URL' fetches and builds a remote git repository

• Runtime: 'docker ps -s' optionally prints container size
• Tests: Improved and simplified

• Runtime: fix a regression introduced in 0.4.3 which caused the logs command to fail.
• Builder: fix a regression when using ADD with single regular file.

0.4.4 (2013-06-19)

• Builder: fix a regression introduced in 0.4.3 which caused builds to fail on new clients.

0.4.3 (2013-06-19)

• Builder: ADD of a local file will detect tar archives and unpack them

• Runtime: Remove bsdtar dependency
• Runtime: Add unix socket and multiple -H support
• Runtime: Prevent rm of running containers
• Runtime: Use go1.1 cookiejar
• Builder: ADD improvements: use tar for copy + automatically unpack local archives

... (truncated)

Commits

• 51f6c4a Merge pull request #1227 from dotcloud/bump_0.5.0
• f4eaec3 Merge pull request #1226 from metalivedev/easydockerfile
• b083418 change -b -> -v and add udp example
• 5794857 Merge pull request #1169 from crosbymichael/buildfile-tests
• e7f3f6f Add unit tests for buildfile config instructions
• aa56714 Make dockerfile docs easier to find. Clean up formatting.
• f8dfd0a Merge pull request #1225 from dotcloud/hotfix_docker_rmi
• 3dbf9c6 Merge pull request #1219 from metalivedev/docs-repoupdate
• de563a3 Merge pull request #1194 from crosbymichael/build-verbose
• 9cf2b41 change rm usage in docs
• Additional commits viewable in compare view

Updates google.golang.org/api from 0.285.0 to 0.286.0

Release notes

Sourced from google.golang.org/api's releases.

v0.286.0

0.286.0 (2026-06-22)

Features

• all: Auto-regenerate discovery clients (#3629) (f25a08b)
• all: Auto-regenerate discovery clients (#3631) (b3bb97f)
• all: Auto-regenerate discovery clients (#3632) (7332dd7)
• all: Auto-regenerate discovery clients (#3634) (36081a0)

Changelog

Sourced from google.golang.org/api's changelog.

0.286.0 (2026-06-22)

Features

• all: Auto-regenerate discovery clients (#3629) (f25a08b)
• all: Auto-regenerate discovery clients (#3631) (b3bb97f)
• all: Auto-regenerate discovery clients (#3632) (7332dd7)
• all: Auto-regenerate discovery clients (#3634) (36081a0)

Commits

• 94e4ed9 chore(main): release 0.286.0 (#3630)
• 36081a0 feat(all): auto-regenerate discovery clients (#3634)
• 7332dd7 feat(all): auto-regenerate discovery clients (#3632)
• b3bb97f feat(all): auto-regenerate discovery clients (#3631)
• f25a08b feat(all): auto-regenerate discovery clients (#3629)
• See full diff in compare view

[claude]

Claude finished @dependabot[bot]'s task in 1m 33s —— View job

---

Dependency upgrade review

• Identify changed dependencies
• Check changelogs/release notes & semver for breaking changes
• Search repo for usage of each upgraded dependency
• Flag risks & suggest follow-up checks

All five bumps are minor/patch version increments. I traced each upgraded module to its usage in the repo. No source changes are required, and no breaking API usage was found.

Package	From → To	Used in	Assessment
aws-sdk-go-v2/service/ecs	1.84.0 → 1.85.0	internal/aws/aws.go, ecs_services_test.go, fake_ecs.go	✅ Auto-generated SDK, additive (new API model fields + endpoints). No signature changes to the calls used.
aws-sdk-go-v2/service/lambda	1.92.3 → 1.93.0	internal/aws/aws.go, lambda_contract_test.go, fake_lambda.go	✅ Auto-generated SDK, additive. Pulls in smithy-go v1.24.0 upstream, but this repo already pins smithy-go v1.27.2, so no downgrade.
moby/moby/api	1.54.2 → 1.55.0	internal/docker/docker.go, cmd/kosli/snapshotDocker.go (types/container, types/registry)	✅ Changelog is additive (new GET /images/{name}/attestations endpoint, per-device blkio). The container/registry type structs used here are unchanged.
moby/moby/client	0.4.1 → 0.5.0	internal/docker/docker.go, internal/digest/digest.go, cmd/kosli/snapshotDocker.go	⚠️ Pre-1.0 minor bump (0.x → semver allows breaking changes). The release notes only add the attestations method, and the methods this repo calls — client.New, ImagePull/Push/Tag/Remove/Inspect, ContainerCreate/Start/Remove — are all stable. Lowest-confidence item; see note below.
google.golang.org/api	0.285.0 → 0.286.0	internal/cloudrun/cloudrun.go (api/iterator only)	✅ Only the stable iterator subpackage is imported. Bump is "auto-regenerate discovery clients" — additive, doesn't touch iterator.

Risks & follow-up

• moby/moby/client 0.4.1 → 0.5.0 is the only item warranting attention because it's a 0.x module where minor bumps may include breaking changes. The published changelog is additive only, and the API surface used in internal/docker and internal/digest is unchanged, so this should be safe — but it's the one to confirm via a green build.
• I was unable to run go build/go vet/tests locally (the commands require approval in this environment). The Main CI workflow on this PR compiles and runs the suite — rely on that as the authoritative compile/test check. It was still in progress at review time.
• Docker-touching suites worth confirming go green: TestSnapshotDocker* (cmd/kosli/snapshotDocker_test.go) and the digest tests (internal/digest), since these exercise the moby client upgrade most directly.

Verdict: Low risk, recommend merge once CI Main passes.

[mbevc1]

@dependabot rebase