build(deps): bump the gomod group across 1 directory with 30 updates

[dependabot]

Bumps the gomod group with 23 updates in the / directory:

Package	From	To
github.com/aws/aws-sdk-go-v2	1.41.7	1.42.1
github.com/aws/aws-sdk-go-v2/config	1.32.17	1.32.27
github.com/aws/aws-sdk-go-v2/feature/s3/manager	1.22.17	1.22.30
github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs	1.73.0	1.78.2
github.com/aws/aws-sdk-go-v2/service/kinesis	1.43.7	1.44.4
github.com/aws/aws-sdk-go-v2/service/sqs	1.42.27	1.44.2
github.com/evanw/esbuild	0.27.2	0.28.1
github.com/getkin/kin-openapi	0.137.0	0.140.0
github.com/go-co-op/gocron/v2	2.21.1	2.21.2
github.com/go-openapi/errors	0.22.7	0.22.8
github.com/go-openapi/strfmt	0.26.2	0.26.4
github.com/go-openapi/swag	0.26.0	0.27.0
github.com/go-openapi/validate	0.25.2	0.26.0
github.com/jedib0t/go-pretty/v6	6.7.10	6.8.2
github.com/moby/moby/api	1.54.2	1.55.0
github.com/moby/moby/client	0.4.1	0.5.0
github.com/prometheus/common	0.67.5	0.69.0
github.com/shirou/gopsutil/v4	4.26.4	4.26.6
github.com/slack-go/slack	0.23.0	0.27.0
github.com/tetratelabs/wazero	1.11.0	1.12.0
google.golang.org/grpc	1.81.0	1.82.0
k8s.io/apiserver	0.36.0	0.36.2
modernc.org/sqlite	1.50.0	1.53.0

Updates github.com/aws/aws-sdk-go-v2 from 1.41.7 to 1.42.1

Commits

• b4784c1 Release 2026-07-01
• 97c0201 Regenerated Clients
• 6687238 Update endpoints model
• 995297f Update API model
• c26cfc6 Fix bump smithy-go to cover multiple issues (#3461)
• fae66b8 Set transfer manager error as the first error seen, preventing race condition...
• cf0eabd Release 2026-06-30
• ad0c091 Regenerated Clients
• 196e961 Update endpoints model
• 1529ead Update API model
• Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/config from 1.32.17 to 1.32.27

Commits

• b4784c1 Release 2026-07-01
• 97c0201 Regenerated Clients
• 6687238 Update endpoints model
• 995297f Update API model
• c26cfc6 Fix bump smithy-go to cover multiple issues (#3461)
• fae66b8 Set transfer manager error as the first error seen, preventing race condition...
• cf0eabd Release 2026-06-30
• ad0c091 Regenerated Clients
• 196e961 Update endpoints model
• 1529ead Update API model
• Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/feature/s3/manager from 1.22.17 to 1.22.30

Commits

• b4784c1 Release 2026-07-01
• 97c0201 Regenerated Clients
• 6687238 Update endpoints model
• 995297f Update API model
• c26cfc6 Fix bump smithy-go to cover multiple issues (#3461)
• fae66b8 Set transfer manager error as the first error seen, preventing race condition...
• cf0eabd Release 2026-06-30
• ad0c091 Regenerated Clients
• 196e961 Update endpoints model
• 1529ead Update API model
• Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs from 1.73.0 to 1.78.2

Commits

• 6d110cb Release 2025-03-11
• 0a916fa Regenerated Clients
• 5945692 Update endpoints model
• e856ab0 Update API model
• 7aec2ed Merge pull request #3034 from aws/feat-skip-nilbody-checksumvalidation
• b468d87 add check for non-exist object
• a56c483 add changelog
• 59e14e3 only log checksum validation skipped when object is fetched
• d807b46 Release 2025-03-10
• 41c3e99 Regenerated Clients
• Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/service/kinesis from 1.43.7 to 1.44.4

Commits

• bf186e4 Release 2025-09-23
• 2a07c38 Regenerated Clients
• fa42fab Update partitions file
• 379a2ca Update endpoints model
• 81d1020 Update API model
• f26b32c Release 2025-09-22
• 820fa2e Regenerated Clients
• 1245a24 Update endpoints model
• 6d014ab Update API model
• 69ff935 Release 2025-09-19
• Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/service/s3 from 1.100.1 to 1.104.2

Commits

• b4784c1 Release 2026-07-01
• 97c0201 Regenerated Clients
• 6687238 Update endpoints model
• 995297f Update API model
• c26cfc6 Fix bump smithy-go to cover multiple issues (#3461)
• fae66b8 Set transfer manager error as the first error seen, preventing race condition...
• cf0eabd Release 2026-06-30
• ad0c091 Regenerated Clients
• 196e961 Update endpoints model
• 1529ead Update API model
• Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/service/sqs from 1.42.27 to 1.44.2

Commits

• 648027e Release 2025-09-08
• a3b9b7b Regenerated Clients
• 67dad83 Update endpoints model
• 2bfe86a Update API model
• 59e7410 add businessmetrics feature ID for env-based bearer token (#3182)
• 1cdc158 Patching override s3expire shape (#3180)
• 1745ede Release 2025-09-05
• f84de53 Regenerated Clients
• 7cdaa31 Update API model
• 498b5c4 remove service/sms (#3177)
• Additional commits viewable in compare view

Updates github.com/evanw/esbuild from 0.27.2 to 0.28.1

Release notes

Sourced from github.com/evanw/esbuild's releases.

v0.28.1

• Disallow \ in local development server HTTP requests (GHSA-g7r4-m6w7-qqqr)

  This release fixes a security issue where HTTP requests to esbuild's local development server could traverse outside of the serve directory on Windows using a \ backslash character. It happened due to the use of Go's path.Clean() function, which only handles Unix-style / characters. HTTP requests with paths containing \ are no longer allowed.

  Thanks to @​dellalibera for reporting this issue.

• Add integrity checks to the Deno API (GHSA-gv7w-rqvm-qjhr)

  The previous release of esbuild added integrity checks to esbuild's npm install script. This release also adds integrity checks to esbuild's Deno install script. Now esbuild's Deno API will also fail with an error if the downloaded esbuild binary contains something other than the expected content.

  Note that esbuild's Deno API installs from registry.npmjs.org by default, but allows the NPM_CONFIG_REGISTRY environment variable to override this with a custom package registry. This change means that the esbuild executable served by NPM_CONFIG_REGISTRY must now match the expected content.

  Thanks to @​sondt99 for reporting this issue.

• Avoid inlining using and await using declarations (#4482)

  Previously esbuild's minifier sometimes incorrectly inlined using and await using declarations into subsequent uses of that declaration, which then fails to dispose of the resource correctly. This bug happened because inlining was done for let and const declarations by avoiding doing it for var declarations, which no longer worked when more declaration types were added. Here's an example:

  // Original code
  {
    using x = new Resource()
    x.activate()
  }
  // Old output (with --minify)
  new Resource().activate();
  // New output (with --minify)
  {using e=new Resource;e.activate()}

• Fix module evaluation when an error is thrown (#4461, #4467)

  If an error is thrown during module evaluation, esbuild previously didn't preserve the state of the module for subsequent module references. This was observable if import() or require() is used to import a module multiple times. The thrown error is supposed to be thrown by every call to import() or require(), not just the first. With this release, esbuild will now throw the same error every time you call import() or require() on a module that throws during its evaluation.

• Fix some edge cases around the new operator (#4477)

  Previously esbuild incorrectly printed certain edge cases involving complex expressions inside the target of a new expression (specifically an optional chain and/or a tagged template literal). The generated code for the new target was not correctly wrapped with parentheses, and either contained a syntax error or had different semantics. These edge cases have been fixed so that they now correctly wrap the new target in parentheses. Here is an example of some affected code:

  // Original code
  new (foo()`bar`)()
  new (foo()?.bar)()
  // Old output
  new foo()bar();
  new (foo())?.bar();

... (truncated)

Changelog

Sourced from github.com/evanw/esbuild's changelog.

Changelog: 2025

This changelog documents all esbuild versions published in the year 2025 (versions 0.25.0 through 0.27.2).

Commits

• bb9db84 publish 0.28.1 to npm
• 9ff053e security: add integrity checks to the Deno API
• 0a9bf21 enforce non-negative size in gzip parser
• e2a1a71 security: forbid \\ in local dev server requests
• 83a2cbf fix #4482: don't inline using declarations
• 308ad74 fix #4471: renaming of nested var declarations
• f013f5f fix some typos
• aafd6e4 chore: fix some minor issues in comments (#4462)
• 15300c3 follow up: cjs evaluation fixes
• 1bda0c3 fix #4461, fix #4467: esm evaluation fixes
• Additional commits viewable in compare view

Updates github.com/getkin/kin-openapi from 0.137.0 to 0.140.0

Release notes

Sourced from github.com/getkin/kin-openapi's releases.

v0.140.0

What's Changed

• openapi3: document that a custom ReadFromURIFunc bypasses IsExternalRefsAllowed by @​reuvenharrison in getkin/kin-openapi#1191
• openapi3: remove deepcopy dependency by @​alexandear in getkin/kin-openapi#1193
• openapi3: remove decimal128 dependency by @​alexandear in getkin/kin-openapi#1194
• refactor: apply modernize fixes by @​alexandear in getkin/kin-openapi#1195
• openapi2,openapi3: replace marshmallow with encoding/json by @​alexandear in getkin/kin-openapi#1196
• docs: update GoDoc links to Go Reference by @​alexandear in getkin/kin-openapi#1197
• chore: bump jsonpointer to v0.22.5 by @​alexandear in getkin/kin-openapi#1198

Full Changelog: getkin/kin-openapi@v0.139.0...v0.140.0

v0.139.0

What's Changed

• feat(openapi3): batch-convert long-tail RequiredFieldError sites by @​reuvenharrison in getkin/kin-openapi#1170
• feat(openapi3): typed validation error clusters (combined: Improvement/crowdsec: add labels to decisions #1171-#1179) by @​reuvenharrison in getkin/kin-openapi#1180
• openapi3gen: skip component export for anonymous types by @​0-don in getkin/kin-openapi#1163
• feat: migrate to oasdiff/yaml v0.1.0 single Unmarshal API + enable DisableTimestamps by @​reuvenharrison in getkin/kin-openapi#1181
• openapi3: typed context errors for Validate() wrapper chain by @​reuvenharrison in getkin/kin-openapi#1183
• openapi3: track Origin on the document root (T) by @​reuvenharrison in getkin/kin-openapi#1184
• openapi3: tests flakiness corrected by @​fenollp in getkin/kin-openapi#1159
• openapi3: aggregate independent validation errors via EnableMultiError by @​reuvenharrison in getkin/kin-openapi#1185
• openapi3: fix validation of duplicated path templates by @​reuvenharrison in getkin/kin-openapi#1189
• openapi3: type the remaining bare-error validation sites by @​reuvenharrison in getkin/kin-openapi#1187

Full Changelog: getkin/kin-openapi@v0.138.0...v0.139.0

v0.138.0

What's Changed

• openapi3gen: clear nullable on exported component bodies by @​0-don in getkin/kin-openapi#1164
• openapi3: add test for issue #927 (nullable not respected on $ref schemas) by @​fenollp in getkin/kin-openapi#1165
• test: move public-API tests to external _test packages by @​fenollp in getkin/kin-openapi#1168
• feat(openapi3): add per-type validation errors with cluster wrappers by @​reuvenharrison in getkin/kin-openapi#1166
• feat(openapi3conv): canonicalization pass for 3.0 -> 3.x by @​reuvenharrison in getkin/kin-openapi#1162
• openapi3conv: test Upgrade on many documents by @​fenollp in getkin/kin-openapi#1169

Full Changelog: getkin/kin-openapi@v0.137.0...v0.138.0

Commits

• 5124898 chore: bump jsonpointer to v0.22.5 (#1198)
• 5ece4a3 docs: update GoDoc links to Go Reference (#1197)
• b8600c5 openapi2,openapi3: remove marshmallow dependency (#1196)
• 3a5ddcd refactor: apply modernize fixes (#1195)
• 742704d openapi3: remove decimal128 dependency (#1194)
• 368327b openapi3: remove deepcopy dependency (#1193)
• 4dc207c openapi3: document that a custom ReadFromURIFunc bypasses IsExternalRefsAllow...
• 8381bfc openapi3: type the remaining bare-error validation sites (#1187)
• d29b5c0 openapi3: fix validation of duplicated path templates (#1189)
• e56c2c7 openapi3: aggregate independent validation errors via EnableMultiError (#1185)
• Additional commits viewable in compare view

Updates github.com/go-co-op/gocron/v2 from 2.21.1 to 2.21.2

Release notes

Sourced from github.com/go-co-op/gocron/v2's releases.

v2.21.2

What's Changed

• fix: defer WithLimitedRuns job removal until task completes (#925) by @​SAY-5 in go-co-op/gocron#926

New Contributors

• @​SAY-5 made their first contribution in go-co-op/gocron#926

Full Changelog: go-co-op/gocron@v2.21.1...v2.21.2

Commits

• 629cfc5 fix: defer WithLimitedRuns job removal until task completes (#925) (#926)
• See full diff in compare view

Updates github.com/go-openapi/errors from 0.22.7 to 0.22.8

Release notes

Sourced from github.com/go-openapi/errors's releases.

v0.22.8

0.22.8 - 2026-05-31

Full Changelog: go-openapi/errors@v0.22.7...v0.22.8

13 commits in this release.

---

Implemented enhancements

• feat(ci): added shared workflow for bot-pr monitoring by @​fredbi ...

Documentation

• doc: updated contributors file by @​bot-go-openapi[bot] in #104 ...
• doc: update discord link by @​fredbi in #100 ...
• doc: updated contributors file by @​bot-go-openapi[bot] in #97 ...

Code quality

• doc: add portable agentic instructions by @​fredbi in #101 ...

Miscellaneous tasks

• chore: bump go directive to 1.25.0 by @​fredbi in #102 ...

Updates

• chore(deps): bump the development-dependencies group across 1 directory with 7 updates by @​dependabot[bot] in #108 ...
• chore(deps): bump github.com/go-openapi/testify/v2 from 2.5.0 to 2.5.1 in the go-openapi-dependencies group by @​dependabot[bot] in #107 ...
• chore(deps): bump github.com/go-openapi/testify/v2 from 2.4.2 to 2.5.0 in the go-openapi-dependencies group by @​dependabot[bot] in #106 ...
• chore(deps): bump the development-dependencies group with 7 updates by @​dependabot[bot] in #105 ...
• chore(deps): bump github.com/go-openapi/testify/v2 from 2.4.1 to 2.4.2 in the go-openapi-dependencies group by @​dependabot[bot] in #103 ...
• chore(deps): bump the development-dependencies group with 7 updates by @​dependabot[bot] in #99 ...
• chore(deps): bump github.com/go-openapi/testify/v2 from 2.4.0 to 2.4.1 in the go-openapi-dependencies group by @​dependabot[bot] in #98 ...

---

People who contributed to this release

• @​fredbi

---

errors license terms

... (truncated)

Commits

• a677038 feat(ci): added shared workflow for bot-pr monitoring
• 0cda362 chore(deps): bump the development-dependencies group across 1 directory with ...
• 7d9a134 chore(deps): bump github.com/go-openapi/testify/v2
• e810af9 chore(deps): bump github.com/go-openapi/testify/v2
• 921874f chore(deps): bump the development-dependencies group with 7 updates
• b78497c doc: updated contributors file
• e1888b7 chore(deps): bump github.com/go-openapi/testify/v2
• 3e93bcb chore(deps): bump the development-dependencies group with 7 updates
• b00e83e chore: bump go directive to 1.25.0 (#102)
• 53f8970 doc: add portable agentic instructions (#101)
• Additional commits viewable in compare view

Updates github.com/go-openapi/strfmt from 0.26.2 to 0.26.4

Release notes

Sourced from github.com/go-openapi/strfmt's releases.

v0.26.4

0.26.4 - 2026-06-29

Full Changelog: go-openapi/strfmt@v0.26.3...v0.26.4

14 commits in this release.

---

Fixed bugs

• fix: validate "uri" format for absolute URIs with a fragment (#131) by @​patchwright in #269 ...

Documentation

• ci: post README announcements to discord + bump ci-workflows to v0.4.0 by @​fredbi in #272 ...
• doc: updated contributors file by @​bot-go-openapi[bot] in #264 ...

Code quality

• chore: disabled goconst linter by @​fredbi in #271 ...

Miscellaneous tasks

• chore: prepare release v0.26.4 by @​bot-go-openapi[bot] in #274 ...
• chore(ci): run contributors workflow monthly instead of weekly by @​fredbi in #270 ...

Updates

• build(deps): bump the other-dependencies group across 3 directories with 1 update by @​dependabot[bot] in #268 ...
• build(deps): bump the go-openapi-dependencies group across 2 directories with 1 update by @​dependabot[bot] in #273 ...
• build(deps): bump the development-dependencies group with 2 updates by @​dependabot[bot] in #267 ...
• build(deps): bump golang.org/x/net from 0.55.0 to 0.56.0 in the golang-org-dependencies group across 1 directory by @​dependabot[bot] in #266 ...
• build(deps): bump the development-dependencies group with 9 updates by @​dependabot[bot] in #265 ...
• build(deps): bump the other-dependencies group across 2 directories with 1 update by @​dependabot[bot] in #263 ...
• build(deps): bump github.com/go-openapi/errors from 0.22.7 to 0.22.8 in the go-openapi-dependencies group across 1 directory by @​dependabot[bot] in #262 ...
• build(deps): bump the development-dependencies group with 9 updates by @​dependabot[bot] in #261 ...

---

People who contributed to this release

• @​fredbi
• @​patchwright

---

... (truncated)

Commits

• 09a3881 chore: prepare release v0.26.4
• 7dcda43 build(deps): bump the other-dependencies group across 3 directories with 1 up...
• 5b746cb build(deps): bump the go-openapi-dependencies group across 2 directories with...
• 708588c ci: post README announcements to discord + bump ci-workflows to v0.4.0 (#272)
• 06b6bb0 fix: validate "uri" format for absolute URIs with a fragment (#131) (#269)
• 64c4277 chore: disabled goconst linter (#271)
• a8a2d74 chore(ci): run contributors workflow monthly instead of weekly (#270)
• 00af19e build(deps): bump the development-dependencies group with 2 updates
• a3d472a build(deps): bump golang.org/x/net
• 1928b1d build(deps): bump the development-dependencies group with 9 updates
• Additional commits viewable in compare view

Updates github.com/go-openapi/swag from 0.26.0 to 0.27.0

Release notes

Sourced from github.com/go-openapi/swag's releases.

v0.27.0

0.27.0 - 2026-06-29

Pools utility module

Full Changelog: go-openapi/swag@v0.26.1...v0.27.0

9 commits in this release.

---

Implemented enhancements

• feat: factory for generic sync.Pool usage, with safety test mode by @​fredbi in #215 ...

Documentation

• ci: post README announcements to discord + bump ci-workflows to v0.4.0 by @​fredbi in #213 ...
• doc: updated contributors file by @​bot-go-openapi[bot] in #210 ...

Miscellaneous tasks

• chore: prepare release v0.27.0 by @​bot-go-openapi[bot] in #217 ...
• chore: deprecated the jsonname module (moved to jsonpointer) by @​fredbi in #216 ...
• chore(ci): run contributors workflow monthly instead of weekly by @​fredbi in #212 ...

Updates

• build(deps): bump the go-openapi-dependencies group across 15 directories with 2 updates by @​dependabot[bot] in #214 ...
• build(deps): bump go-openapi/ci-workflows/.github/workflows/monitor-bot-pr.yml from 93b16765c4045dbd4dac2372803294298aa7592a to 2e57e83146e049b5dfb8116ba16a09b2da27b3c5 in the development-dependencies group by @​dependabot[bot] in #211 ...
• build(deps): bump the development-dependencies group with 8 updates by @​dependabot[bot] in #209 ...

---

People who contributed to this release

• @​fredbi

---

swag license terms

[][license-url]

... (truncated)

Commits

• 4f9e718 chore: prepare release v0.27.0
• 014eae7 chore: deprecated the jsonname module (moved to jsonpointer) (#216)
• d4bd1af feat: factory for generic sync.Pool usage, with safety test mode. (#215)
• 23df065 build(deps): bump the go-openapi-dependencies group across 15 directories wit...
• ce8f066 ci: post README announcements to discord + bump ci-workflows to v0.4.0 (#213)
• ea59449 chore(ci): run contributors workflow monthly instead of weekly (#212)
• b623b89 build(deps): bump go-openapi/ci-workflows/.github/workflows/monitor-bot-pr.yml
• 3eac5b8 doc: updated contributors file
• 95a4653 build(deps): bump the development-dependencies group with 8 updates
• 85923a5 chore: prepare release v0.26.1
• Additional commits viewable in compare view

Updates github.com/go-openapi/validate from 0.25.2 to 0.26.0

Release notes

Sourced from github.com/go-openapi/validate's releases.

v0.26.0

0.26.0 - 2026-06-10

Full Changelog: go-openapi/validate@v0.25.3...v0.26.0

6 commits in this release.

---

Implemented enhancements

• feat(spec): warn on dubious $ref locations by @​fredbi in #258 ...

Documentation

• doc: updated contributors file by @​bot-go-openapi[bot] in #257 ...
• doc: aligned with org docs by @​fredbi in #256 ...

Miscellaneous tasks

• fix: read result validity before Merge redeems it to the pool by @​fredbi in #260 ...
• test: stop executing the live remote-URL doc examples by @​fredbi in #259 ...

Updates

• chore(deps): bump the go-openapi-dependencies group with 4 updates by @​dependabot[bot] in #255 ...

---

People who contributed to this release

• @​fredbi

---

validate license terms

v0.25.3

0.25.3 - 2026-05-31

... (truncated)

Commits

• 799b897 fix(race): read result validity before Merge redeems it to the pool (#260)
• e5b5ca2 test: stop executing the live remote-URL doc examples (#259)
• 84c917d feat(spec): warn on dubious $ref locations (#258)
• 64e54b4 doc: updated contributors file
• 0fa122c doc: aligned with org docs (#256)
• a62829b chore(deps): bump the go-openapi-dependencies group with 4 updates
• 5bff947 chore: updated deps (#254)
• 83c7e8d chore(deps): bump the development-dependencies group across 1 directory with ...
• 8434d39 feat(ci): added shared workflow for bot-pr monitoring
• 71d6405 chore(deps): bump github.com/go-openapi/analysis
• Additional commits viewable in compare view

Updates github.com/jedib0t/go-pretty/v6 from 6.7.10 to 6.8.2

Release notes

Sourced from github.com/jedib0t/go-pretty/v6's releases.

v6.8.2

What's Changed

• text: trim to display width so CJK content respects maxLen by @​greymoth-jp in jedib0t/go-pretty#410

New Contributors

• @​greymoth-jp made their first contribution in jedib0t/go-pretty#410

Full Changelog: jedib0t/go-pretty@v6.8.1...v6.8.2

v6.8.1

What's Changed

A hardening pass across the table, list, progress, and text packages, fixing security issues, crash/race bugs, and performance problems in the render hot paths, with benchmarks added to back the optimizations.

Security

• table/list (HTML): escape the title, caption, and CSS class names in RenderHTML() to prevent HTML/attribute injection.
• table (CSV): make RenderCSV() output RFC 4180 compliant, and add an opt-in Style().CSV.FieldProtection option that neutralizes spreadsheet formula-injection fields (=, +, -, @, tab, CR).
• text: sanitize hyperlink URLs and bound the escape-sequence parser buffer so adversarial input can't grow it without limit.

Correctness

• progress: fix a render panic on tiny tracker lengths, data races on tracker/indicator state, and a leaked time.Ticker in the terminal-size watcher.
• table: guard auto-index rendering against empty maxColumnLengths.
• text: prevent a panic in VAlign.Apply on negative maxLines.

Performance

• table: compile regex filters once per render; pre-size render builders.
• list: hoist repeated width math out of the render loops.
• text: speed up Align.Apply and StringWidthWithoutEscSequences.
• progress: build PacManChomp frames with a strings.Builder.

Tooling

• Moved root-level benchmarks into their packages and wired up make bench; added benchmarks for the table/text/list/progress render hot paths and tests covering the retained-done-tracker render paths.

Full Changelog: