build(deps): bump the aws-sdk group across 2 directories with 9 updates by dependabot[bot] · Pull Request #7370 · pipe-cd/pipecd

dependabot · 2026-09-10T13:57:56Z

Bumps the aws-sdk group with 8 updates in the / directory:

Package	From	To
github.com/aws/aws-sdk-go-v2	`1.43.4`	`1.46.0`
github.com/aws/aws-sdk-go-v2/config	`1.27.38`	`1.33.3`
github.com/aws/aws-sdk-go-v2/service/ecs	`1.46.2`	`1.96.0`
github.com/aws/aws-sdk-go-v2/service/elasticloadbalancingv2	`1.38.2`	`1.62.0`
github.com/aws/aws-sdk-go-v2/service/lambda	`1.88.5`	`1.107.0`
github.com/aws/aws-sdk-go-v2/service/s3	`1.107.0`	`1.111.0`
github.com/aws/aws-sdk-go-v2/service/secretsmanager	`1.33.2`	`1.48.0`
github.com/aws/aws-sdk-go-v2/service/ssm	`1.54.3`	`1.77.0`

Bumps the aws-sdk group with 4 updates in the /pkg/app/pipedv1/plugin/ecs directory: github.com/aws/aws-sdk-go-v2, github.com/aws/aws-sdk-go-v2/config, github.com/aws/aws-sdk-go-v2/service/ecs and github.com/aws/aws-sdk-go-v2/service/elasticloadbalancingv2.

Updates github.com/aws/aws-sdk-go-v2 from 1.43.4 to 1.46.0

Commits

afdc89f Release 2026-09-04
5875f61 Regenerated Clients
9d20eaa Update API model
08c63d9 Remove span retry loop middleware (#3543)
99b223d Release 2026-09-03
2d2fdf6 Regenerated Clients
093c165 Update API model
5b4cd6f Release 2026-09-02
9e02039 Regenerated Clients
b785dd9 Update API model
Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/config from 1.27.38 to 1.33.3

Commits

afdc89f Release 2026-09-04
5875f61 Regenerated Clients
9d20eaa Update API model
08c63d9 Remove span retry loop middleware (#3543)
99b223d Release 2026-09-03
2d2fdf6 Regenerated Clients
093c165 Update API model
5b4cd6f Release 2026-09-02
9e02039 Regenerated Clients
b785dd9 Update API model
Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/credentials from 1.17.36 to 1.20.3

Commits

396f97a Release 2023-08-18
08ab454 Regenerated Clients
b50999b Update SDK's smithy-go dependency to v1.14.2
d05e372 Update endpoints model
26ccae9 Update API model
5d3382b Merge pull request #2243 from aws/feat-protocol-test-2
f58ddae update time to ancient (#2133)
65023f3 Release 2023-08-17
0742a92 Regenerated Clients
0e3340f Update endpoints model
Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/service/ecs from 1.46.2 to 1.96.0

Commits

bdb98c5 Release 2026-01-28
c878d57 Regenerated Clients
4f5d503 Update API model
b7bf952 Feat release s3 transfer manager v2 (#3293)
0baa1dc Release 2026-01-27
11eae4b Regenerated Clients
297caa5 Update endpoints model
43d96e4 Update API model
de58dc6 Release 2026-01-26
dba39e6 Regenerated Clients
Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/service/elasticloadbalancingv2 from 1.38.2 to 1.62.0

Commits

98ae688 Release 2024-09-18
222928c Regenerated Clients
887c4de Update API model
13c3784 Release 2024-09-17
0097c82 Regenerated Clients
590384d Update API model
6a28d22 BREAKFIX: Only generate AccountIDEndpointMode config for services that use it...
0d08ea0 Release 2024-09-16
83c15f1 Regenerated Clients
093ffb6 Update endpoints model
Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/service/lambda from 1.88.5 to 1.107.0

Commits

8e53001 Release 2026-08-06
c1512a0 Regenerated Clients
655c574 Update endpoints model
22a51fa Update API model
ebd1f6a Release 2026-08-05
bc99825 Regenerated Clients
8868ff7 Update API model
9604fe3 Set FIPS-approved TLS curve preferences when the FIPS module is active (#3499)
4af61eb Release 2026-08-04
73d66ab Regenerated Clients
Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/service/s3 from 1.107.0 to 1.111.0

Commits

afdc89f Release 2026-09-04
5875f61 Regenerated Clients
9d20eaa Update API model
08c63d9 Remove span retry loop middleware (#3543)
99b223d Release 2026-09-03
2d2fdf6 Regenerated Clients
093c165 Update API model
5b4cd6f Release 2026-09-02
9e02039 Regenerated Clients
b785dd9 Update API model
Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/service/secretsmanager from 1.33.2 to 1.48.0

Commits

4ba3705 Release 2024-01-05
c49b153 Regenerated Clients
80508f5 Update API model
686a64c codegen: track upstream sigv4a trait changes (#2442)
47dd1b1 Release 2024-01-04
23145e3 Regenerated Clients
00e57bb Update API model
73e1a99 Merge pull request #2441 from RanVaknin/fix-documentation-config
0f8ad11 Fix SRA auth trailing checksum retry bug (#2438)
efbc5aa Release 2024-01-03
Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/service/ssm from 1.54.3 to 1.77.0

Commits

5c34f50 Release 2025-02-14
9f9feba Regenerated Clients
0a277d8 Update API model
11e6ab9 Remove max limit on event stream messages (#3009)
ccde625 Release 2025-02-13
97cd707 Regenerated Clients
a153c09 Update API model
147ea96 Release 2025-02-12
036ff43 Regenerated Clients
81a152e Update API model
Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2 from 1.43.4 to 1.46.0

Commits

afdc89f Release 2026-09-04
5875f61 Regenerated Clients
9d20eaa Update API model
08c63d9 Remove span retry loop middleware (#3543)
99b223d Release 2026-09-03
2d2fdf6 Regenerated Clients
093c165 Update API model
5b4cd6f Release 2026-09-02
9e02039 Regenerated Clients
b785dd9 Update API model
Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/config from 1.27.38 to 1.33.3

Commits

afdc89f Release 2026-09-04
5875f61 Regenerated Clients
9d20eaa Update API model
08c63d9 Remove span retry loop middleware (#3543)
99b223d Release 2026-09-03
2d2fdf6 Regenerated Clients
093c165 Update API model
5b4cd6f Release 2026-09-02
9e02039 Regenerated Clients
b785dd9 Update API model
Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/credentials from 1.17.36 to 1.20.3

Commits

396f97a Release 2023-08-18
08ab454 Regenerated Clients
b50999b Update SDK's smithy-go dependency to v1.14.2
d05e372 Update endpoints model
26ccae9 Update API model
5d3382b Merge pull request #2243 from aws/feat-protocol-test-2
f58ddae update time to ancient (#2133)
65023f3 Release 2023-08-17
0742a92 Regenerated Clients
0e3340f Update endpoints model
Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/service/ecs from 1.90.0 to 1.96.0

Commits

bdb98c5 Release 2026-01-28
c878d57 Regenerated Clients
4f5d503 Update API model
b7bf952 Feat release s3 transfer manager v2 (#3293)
0baa1dc Release 2026-01-27
11eae4b Regenerated Clients
297caa5 Update endpoints model
43d96e4 Update API model
de58dc6 Release 2026-01-26
dba39e6 Regenerated Clients
Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/service/elasticloadbalancingv2 from 1.38.2 to 1.62.0

Commits

98ae688 Release 2024-09-18
222928c Regenerated Clients
887c4de Update API model
13c3784 Release 2024-09-17
0097c82 Regenerated Clients
590384d Update API model
6a28d22 BREAKFIX: Only generate AccountIDEndpointMode config for services that use it...
0d08ea0 Release 2024-09-16
83c15f1 Regenerated Clients
093ffb6 Update endpoints model
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the aws-sdk group with 8 updates in the / directory: | Package | From | To | | --- | --- | --- | | [github.com/aws/aws-sdk-go-v2](https://github.com/aws/aws-sdk-go-v2) | `1.43.4` | `1.46.0` | | [github.com/aws/aws-sdk-go-v2/config](https://github.com/aws/aws-sdk-go-v2) | `1.27.38` | `1.33.3` | | [github.com/aws/aws-sdk-go-v2/service/ecs](https://github.com/aws/aws-sdk-go-v2) | `1.46.2` | `1.96.0` | | [github.com/aws/aws-sdk-go-v2/service/elasticloadbalancingv2](https://github.com/aws/aws-sdk-go-v2) | `1.38.2` | `1.62.0` | | [github.com/aws/aws-sdk-go-v2/service/lambda](https://github.com/aws/aws-sdk-go-v2) | `1.88.5` | `1.107.0` | | [github.com/aws/aws-sdk-go-v2/service/s3](https://github.com/aws/aws-sdk-go-v2) | `1.107.0` | `1.111.0` | | [github.com/aws/aws-sdk-go-v2/service/secretsmanager](https://github.com/aws/aws-sdk-go-v2) | `1.33.2` | `1.48.0` | | [github.com/aws/aws-sdk-go-v2/service/ssm](https://github.com/aws/aws-sdk-go-v2) | `1.54.3` | `1.77.0` | Bumps the aws-sdk group with 4 updates in the /pkg/app/pipedv1/plugin/ecs directory: [github.com/aws/aws-sdk-go-v2](https://github.com/aws/aws-sdk-go-v2), [github.com/aws/aws-sdk-go-v2/config](https://github.com/aws/aws-sdk-go-v2), [github.com/aws/aws-sdk-go-v2/service/ecs](https://github.com/aws/aws-sdk-go-v2) and [github.com/aws/aws-sdk-go-v2/service/elasticloadbalancingv2](https://github.com/aws/aws-sdk-go-v2). Updates `github.com/aws/aws-sdk-go-v2` from 1.43.4 to 1.46.0 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@v1.43.4...v1.46.0) Updates `github.com/aws/aws-sdk-go-v2/config` from 1.27.38 to 1.33.3 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@config/v1.27.38...config/v1.33.3) Updates `github.com/aws/aws-sdk-go-v2/credentials` from 1.17.36 to 1.20.3 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@credentials/v1.17.36...v1.20.3) Updates `github.com/aws/aws-sdk-go-v2/service/ecs` from 1.46.2 to 1.96.0 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@service/iot/v1.46.2...service/s3/v1.96.0) Updates `github.com/aws/aws-sdk-go-v2/service/elasticloadbalancingv2` from 1.38.2 to 1.62.0 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@v1.38.2...service/s3/v1.62.0) Updates `github.com/aws/aws-sdk-go-v2/service/lambda` from 1.88.5 to 1.107.0 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@service/s3/v1.88.5...service/s3/v1.107.0) Updates `github.com/aws/aws-sdk-go-v2/service/s3` from 1.107.0 to 1.111.0 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@service/s3/v1.107.0...service/s3/v1.111.0) Updates `github.com/aws/aws-sdk-go-v2/service/secretsmanager` from 1.33.2 to 1.48.0 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@config/v1.33.2...service/s3/v1.48.0) Updates `github.com/aws/aws-sdk-go-v2/service/ssm` from 1.54.3 to 1.77.0 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@service/s3/v1.54.3...service/s3/v1.77.0) Updates `github.com/aws/aws-sdk-go-v2` from 1.43.4 to 1.46.0 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@v1.43.4...v1.46.0) Updates `github.com/aws/aws-sdk-go-v2/config` from 1.27.38 to 1.33.3 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@config/v1.27.38...config/v1.33.3) Updates `github.com/aws/aws-sdk-go-v2/credentials` from 1.17.36 to 1.20.3 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@credentials/v1.17.36...v1.20.3) Updates `github.com/aws/aws-sdk-go-v2/service/ecs` from 1.90.0 to 1.96.0 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@service/iot/v1.46.2...service/s3/v1.96.0) Updates `github.com/aws/aws-sdk-go-v2/service/elasticloadbalancingv2` from 1.38.2 to 1.62.0 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@v1.38.2...service/s3/v1.62.0) --- updated-dependencies: - dependency-name: github.com/aws/aws-sdk-go-v2 dependency-version: 1.46.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: aws-sdk - dependency-name: github.com/aws/aws-sdk-go-v2/config dependency-version: 1.33.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: aws-sdk - dependency-name: github.com/aws/aws-sdk-go-v2/credentials dependency-version: 1.20.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: aws-sdk - dependency-name: github.com/aws/aws-sdk-go-v2/service/ecs dependency-version: 1.96.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: aws-sdk - dependency-name: github.com/aws/aws-sdk-go-v2/service/elasticloadbalancingv2 dependency-version: 1.62.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: aws-sdk - dependency-name: github.com/aws/aws-sdk-go-v2/service/lambda dependency-version: 1.107.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: aws-sdk - dependency-name: github.com/aws/aws-sdk-go-v2/service/s3 dependency-version: 1.111.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: aws-sdk - dependency-name: github.com/aws/aws-sdk-go-v2/service/secretsmanager dependency-version: 1.48.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: aws-sdk - dependency-name: github.com/aws/aws-sdk-go-v2/service/ssm dependency-version: 1.77.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: aws-sdk - dependency-name: github.com/aws/aws-sdk-go-v2 dependency-version: 1.46.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: aws-sdk - dependency-name: github.com/aws/aws-sdk-go-v2/config dependency-version: 1.33.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: aws-sdk - dependency-name: github.com/aws/aws-sdk-go-v2/credentials dependency-version: 1.20.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: aws-sdk - dependency-name: github.com/aws/aws-sdk-go-v2/service/ecs dependency-version: 1.96.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: aws-sdk - dependency-name: github.com/aws/aws-sdk-go-v2/service/elasticloadbalancingv2 dependency-version: 1.62.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: aws-sdk ... Signed-off-by: dependabot[bot] <support@github.com>

netlify · 2026-09-10T13:58:03Z

✅ Deploy Preview for pipecd-site canceled.

Name	Link
🔨 Latest commit	`8fc4135`
🔍 Latest deploy log	https://app.netlify.com/projects/pipecd-site/deploys/6aa2b767f287de0008ffa04c

Copilot

🔵 Needs a closer look

The PR performs large dependency upgrades across AWS SDK service clients, which can introduce subtle compile/runtime changes and should be validated by a full build/test run before approval.

Pull request overview

This PR updates the AWS SDK for Go v2 dependency set used by PipeCD’s main Go module and the ECS pipedv1 plugin module, aligning both modules on newer AWS client versions and their transitive dependencies.

Changes:

Bump github.com/aws/aws-sdk-go-v2 and core config/credential modules to newer releases.
Update AWS service clients (ECS, ELBv2, Lambda, S3, Secrets Manager, SSM) and refresh transitive SDK modules accordingly.
Regenerate go.sum entries consistent with the updated module graphs (including removal of now-unneeded indirect deps like jmespath).

File summaries

File	Description
go.mod	Updates AWS SDK v2 and related AWS service modules to newer versions in the main module.
go.sum	Refreshes checksums to match the updated AWS SDK v2 dependency graph in the main module.
pkg/app/pipedv1/plugin/ecs/go.mod	Updates AWS SDK v2 and ECS/ELBv2 dependencies used by the ECS plugin module.
pkg/app/pipedv1/plugin/ecs/go.sum	Refreshes checksums to match the updated AWS SDK v2 dependency graph in the ECS plugin module.

Review details

Suppressed comments (1)

pkg/app/pipedv1/plugin/ecs/go.mod:14

The ECS plugin module still requires github.com/pipe-cd/pipecd, and code under this module imports packages from that main module. This breaks the intended plugin boundary (plugins should depend on the plugin SDK and other external libs only), and makes the plugin harder to build/version independently.

	github.com/aws/aws-sdk-go-v2/service/elasticloadbalancingv2 v1.62.0
	github.com/creasty/defaults v1.6.0
	github.com/go-playground/assert/v2 v2.2.0
	github.com/pipe-cd/pipecd v0.54.0-rc1.0.20250912082650-0b949bb7aac9
	github.com/pipe-cd/piped-plugin-sdk-go v0.3.0

Files reviewed: 2/4 changed files
Comments generated: 0
Review effort level: Lite

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Sep 10, 2026

Copilot AI lite review requested due to automatic review settings September 10, 2026 13:57

dependabot Bot requested a review from a team as a code owner September 10, 2026 13:57

dependabot Bot added the dependencies Pull requests that update a dependency file label Sep 10, 2026

dependabot Bot requested a review from a team as a code owner September 10, 2026 13:57

dependabot Bot added the go Pull requests that update Go code label Sep 10, 2026

dependabot Bot requested review from Warashi, armistcxy and khanhtc1202 September 10, 2026 13:57

dependabot Bot mentioned this pull request Sep 10, 2026

build(deps): bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.107.0 to 1.111.0 #7334

Closed

Copilot started reviewing on behalf of pipe-cd September 10, 2026 13:58 View session

Copilot AI reviewed Sep 10, 2026

View reviewed changes

github-actions Bot added area/go area/pipedv1 labels Sep 10, 2026

Navigation Menu

Uh oh!

build(deps): bump the aws-sdk group across 2 directories with 9 updates - #7370

build(deps): bump the aws-sdk group across 2 directories with 9 updates#7370
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/go_modules/aws-sdk-7d681d19ee

dependabot Bot commented on behalf of github Sep 10, 2026

Uh oh!

netlify Bot commented Sep 10, 2026 •

edited

Loading

Uh oh!

Copilot AI left a comment

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

Conversation

dependabot Bot commented on behalf of github Sep 10, 2026

Uh oh!

netlify Bot commented Sep 10, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

✅ Deploy Preview for pipecd-site canceled.

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

🔵 Needs a closer look

Suppressed comments (1)

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

netlify Bot commented Sep 10, 2026 •

edited

Loading