chore(deps): bump the go-dependencies group across 1 directory with 5 updates

[dependabot]

Bumps the go-dependencies group with 4 updates in the / directory: github.com/aws/aws-sdk-go-v2/feature/s3/transfermanager, github.com/aws/aws-sdk-go-v2/service/ecs, github.com/aws/aws-sdk-go-v2/service/lambda and github.com/aws/smithy-go.

Updates github.com/aws/aws-sdk-go-v2/feature/s3/transfermanager from 0.1.17 to 0.1.18

Commits

• 18fee87 Release 2026-04-22
• 0ce157c Regenerated Clients
• 68cdb4a Update API model
• f399972 Bump Smithy from 1.67.0 to 1.69.0 (#3394)
• 3c19a9b Release 2026-04-21
• 1dfac3e Regenerated Clients
• d842df6 Update API model
• ffeb52a bump to latest smithy-go codegen (#3393)
• e839880 Release 2026-04-20
• 4c898c8 Regenerated Clients
• Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/service/ecs from 1.78.1 to 1.79.0

Commits

• 2fc9c3b Release 2025-03-31
• 3cb015d Regenerated Clients
• a26a81a Update endpoints model
• 5f89f10 Update API model
• 64a2f06 Release 2025-03-28
• 6f3c0dc Regenerated Clients
• 80a776e Update endpoints model
• 5cdfc30 Update API model
• 90e7778 chore: reorganize codegen customizations by service (#3042)
• a5686f5 Release 2025-03-27
• Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/service/lambda from 1.89.1 to 1.90.0

Commits

• f4b6813 Release 2025-11-05
• 2d7b311 Regenerated Clients
• 9e31119 Update API model
• aacca0a Release 2025-11-04
• f2f7085 Regenerated Clients
• 98ac357 Update endpoints model
• 545573f Update API model
• 0c4b1ae upgrade to smithy-go v1.23.2 to track allocation improvements (#3222)
• bae1d68 Release 2025-11-03
• 67d7b9c Regenerated Clients
• Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/service/s3 from 1.99.1 to 1.100.0

Commits

• 18fee87 Release 2026-04-22
• 0ce157c Regenerated Clients
• 68cdb4a Update API model
• f399972 Bump Smithy from 1.67.0 to 1.69.0 (#3394)
• 3c19a9b Release 2026-04-21
• 1dfac3e Regenerated Clients
• d842df6 Update API model
• ffeb52a bump to latest smithy-go codegen (#3393)
• e839880 Release 2026-04-20
• 4c898c8 Regenerated Clients
• Additional commits viewable in compare view

Updates github.com/aws/smithy-go from 1.25.0 to 1.25.1

Changelog

Sourced from github.com/aws/smithy-go's changelog.

Release (2026-04-23)

General Highlights

• Dependency Update: Updated to the latest SDK module versions

Module Highlights

• github.com/aws/smithy-go: v1.25.1
  • Bug Fix: Fixed a memory leak in the LRU cache implementation used by some AWS services.

Release (2026-04-15)

General Highlights

• Dependency Update: Updated to the latest SDK module versions

Module Highlights

• github.com/aws/smithy-go: v1.25.0
  • Feature: Add support for endpointBdd trait

Release (2026-04-02)

General Highlights

• Dependency Update: Updated to the latest SDK module versions

Module Highlights

• github.com/aws/smithy-go: v1.24.3
  • Bug Fix: Add additional sigv4 configuration.
• github.com/aws/smithy-go/aws-http-auth: v1.1.3
  • Bug Fix: Add additional sigv4 configuration.

Release (2026-02-27)

General Highlights

• Dependency Update: Bump minimum go version to 1.24.

Release (2026-02-20)

General Highlights

• Dependency Update: Updated to the latest SDK module versions

Module Highlights

• github.com/aws/smithy-go: v1.24.1
  • Feature: Add new middleware functions to get event stream output from middleware

Release (2025-12-01)

General Highlights

• Dependency Update: Updated to the latest SDK module versions

Module Highlights

• github.com/aws/smithy-go: v1.24.0

... (truncated)

Commits

• e094f45 Release 2026-04-23
• 214d45b changelog
• 3477da0 fix lrucache memory leak on existing item put (#652)
• 0d0b4d0 Bump Smithy version to 1.69.0 (#650)
• be5e5ef check @​enum on strings for cbor (#649)
• 5beb80e Ensure javadoc uses utf-8 (#648)
• See full diff in compare view

[claude]

Claude finished @dependabot[bot]'s task in 1m 12s —— View job

---

Dependency Upgrade Review

• Identify changed dependencies
• Review changelogs for breaking changes
• Search codebase for usage of each dependency
• Assess upgrade risk and post findings

---

Dependencies Changed

Package	From	To	Semver	Risk
aws-sdk-go-v2/feature/s3/transfermanager	0.1.17	0.1.18	patch (pre-1.0)	Low
aws-sdk-go-v2/service/ecs	1.78.1	1.79.0	minor	Low
aws-sdk-go-v2/service/lambda	1.89.1	1.90.0	minor	Low
aws-sdk-go-v2/service/s3	1.99.1	1.100.0	minor	Low
aws/smithy-go	1.25.0	1.25.1	patch	Low

Analysis

smithy-go v1.25.1 — Fixes a memory leak in the LRU cache implementation. This is the most impactful change for this codebase. The repo uses smithyTime.ParseDateTime directly in internal/azure/azure_apps.go:592,597 and smithy-go transitively through all AWS SDK clients. The LRU cache fix is purely beneficial with no API changes.

ECS v1.79.0 — Minor version bump adding new API models/endpoints. The codebase uses ListClusters, DescribeClusters, ListServices, DescribeServices, ListTasks, and DescribeTasks (internal/aws/aws.go). These are stable, well-established ECS APIs — minor bumps only add new operations and types, they don't change existing ones.

Lambda v1.90.0 — Minor version bump. The codebase uses ListFunctions and GetFunctionConfiguration (internal/aws/aws.go:145-146). Same pattern — new API operations only, no changes to existing ones.

S3 v1.100.0 — Minor version bump with regenerated clients. Usage is ListObjectsV2 (via paginator) and NewFromConfig (internal/aws/aws.go:392-399). No risk to existing API surface.

S3 transfermanager v0.1.18 — Pre-1.0 but only a patch bump. Usage is limited to transfermanager.New(client) and DownloadObject (internal/aws/aws.go:396,463). The commits are regenerated clients and Smithy version bumps — no API-level changes.

Verdict

Safe to merge. All upgrades are minor/patch bumps with no breaking changes. The commit logs show only regenerated clients, new API models, and a beneficial smithy-go memory leak fix. The APIs this codebase actually uses (ListFunctions, GetFunctionConfiguration, ListClusters, DescribeClusters, ListServices, DescribeServices, ListTasks, DescribeTasks, ListObjectsV2, DownloadObject) are all stable and unchanged across these versions.

No follow-up actions needed.

[mbevc1]

@dependabot rebase