build(deps): bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.107.0 to 1.111.0 - #7334
Conversation
Bumps [github.com/aws/aws-sdk-go-v2/service/s3](https://github.com/aws/aws-sdk-go-v2) from 1.107.0 to 1.111.0. - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@service/s3/v1.107.0...service/s3/v1.111.0) --- updated-dependencies: - dependency-name: github.com/aws/aws-sdk-go-v2/service/s3 dependency-version: 1.111.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
✅ Deploy Preview for pipecd-site canceled.
|
There was a problem hiding this comment.
🔵 Needs a closer look
Dependency bumps in core AWS SDK libraries can introduce behavioral changes and should be validated via CI/tests before approval.
Pull request overview
Updates AWS SDK v2 dependencies in the main Go module, primarily bumping github.com/aws/aws-sdk-go-v2/service/s3 to a newer minor release, along with the required transitive AWS SDK modules.
Changes:
- Bump
github.com/aws/aws-sdk-go-v2/service/s3fromv1.107.0tov1.111.0. - Update
github.com/aws/aws-sdk-go-v2core module and related AWS SDK transitive dependencies (eventstream/endpoints/v4a/smithy, etc.). - Refresh
go.sumto match the new resolved module graph and checksums.
File summaries
| File | Description |
|---|---|
| go.mod | Updates direct/indirect AWS SDK v2 module versions, including S3. |
| go.sum | Updates checksums for the bumped AWS SDK v2 modules and their transitive dependencies. |
Review details
- Files reviewed: 1/2 changed files
- Comments generated: 1
- Review effort level: Lite
💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.
| github.com/aws/aws-sdk-go-v2 v1.46.0 | ||
| github.com/aws/aws-sdk-go-v2/config v1.27.38 | ||
| github.com/aws/aws-sdk-go-v2/credentials v1.17.36 | ||
| github.com/aws/aws-sdk-go-v2/service/ecs v1.46.2 | ||
| github.com/aws/aws-sdk-go-v2/service/elasticloadbalancingv2 v1.38.2 | ||
| github.com/aws/aws-sdk-go-v2/service/lambda v1.88.5 | ||
| github.com/aws/aws-sdk-go-v2/service/s3 v1.107.0 | ||
| github.com/aws/aws-sdk-go-v2/service/s3 v1.111.0 |
Codecov Report✅ All modified and coverable lines are covered by tests. Additional details and impacted files@@ Coverage Diff @@
## master #7334 +/- ##
==========================================
- Coverage 29.75% 26.41% -3.34%
==========================================
Files 601 462 -139
Lines 64442 51778 -12664
==========================================
- Hits 19172 13678 -5494
+ Misses 43778 36967 -6811
+ Partials 1492 1133 -359 Flags with carried forward coverage won't be shown. Click here to find out more. ☔ View full report in Codecov by Harness. 🚀 New features to boost your workflow:
|
|
Superseded by #7370. |
Bumps github.com/aws/aws-sdk-go-v2/service/s3 from 1.107.0 to 1.111.0.
Commits
afdc89fRelease 2026-09-045875f61Regenerated Clients9d20eaaUpdate API model08c63d9Remove span retry loop middleware (#3543)99b223dRelease 2026-09-032d2fdf6Regenerated Clients093c165Update API model5b4cd6fRelease 2026-09-029e02039Regenerated Clientsb785dd9Update API modelDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)