OCM-00000 | ci: Update aws-sdk

[red-hat-konflux]

This PR contains the following updates:

Package	Change	Age	Confidence
github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs	v1.75.2 → v1.78.0
github.com/aws/aws-sdk-go-v2/service/ec2	v1.307.0 → v1.308.0
github.com/aws/aws-sdk-go-v2/service/s3	v1.53.1 → v1.104.0
github.com/aws/smithy-go	v1.27.2 → v1.27.3

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

aws/aws-sdk-go-v2 (github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs)

v1.78.0

Module Highlights

• github.com/aws/aws-sdk-go-v2/service/applicationsignals: v1.23.0
  • Feature: Application Signals now supports dynamic instrumentation and Service Events telemetry. Add instrumentation at runtime without restarts, and use fine-grained profiling data to quickly pinpoint latency and error root causes.
• github.com/aws/aws-sdk-go-v2/service/bedrockagentcore: v1.32.0
  • Feature: Adds an optional extractionMode field to CreateEvent. SKIP retains the event in short-term memory but excludes it from long-term memory extraction.
• github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs: v1.78.0
  • Feature: CloudWatch Logs Updates - New APIs introduced to support syslog ingestion to a log group. For more information, see CloudWatch Logs API documentation.
• github.com/aws/aws-sdk-go-v2/service/directconnect: v1.41.0
  • Feature: Added VIF rate limiting support for AWS Direct Connect, allowing customers to set bandwidth allocations on virtual interfaces to manage traffic on dedicated connections.
• github.com/aws/aws-sdk-go-v2/service/ec2: v1.308.0
  • Feature: This release adds support for AMI Watermark and Allowed AMIs integration
• github.com/aws/aws-sdk-go-v2/service/guardduty: v1.80.0
  • Feature: Added AI-powered investigations that automatically analyze security findings, correlate related activity, and produce structured summaries with risk assessment, confidence scoring, MITRE technique classification, and actionable next steps.
• github.com/aws/aws-sdk-go-v2/service/kafka: v1.53.0
  • Feature: Amazon MSK Replicator now supports mTLS authentication when connecting to external Apache Kafka clusters, enabling customers to replicate data from clusters that require mutual TLS for client authentication. This capability is supported when replicating to Amazon MSK Express brokers.
• github.com/aws/aws-sdk-go-v2/service/lambdacore: v1.0.0
  • Release: New AWS service client module
  • Feature: Initial release of the AWS Lambda Core SDK with APIs to create, manage, and tag network connectors that enable Lambda compute resources to access private resources in your Amazon VPC.
• github.com/aws/aws-sdk-go-v2/service/lambdamicrovms: v1.0.0
  • Release: New AWS service client module
  • Feature: Lambda MicroVMs GA launch. Lambda MicroVMs enable isolated and highly responsive execution of user-supplied or LLM-generated code.
• github.com/aws/aws-sdk-go-v2/service/mediaconnect: v1.51.0
  • Feature: AWS MediaConnect now supports Content Quality Analysis for Router Inputs, enabling detection of black frames, frozen frames, and silent audio with configurable thresholds.
• github.com/aws/aws-sdk-go-v2/service/omics: v1.46.0
  • Feature: Adds support for scratch ephemeral storage mounted at tmp
• github.com/aws/aws-sdk-go-v2/service/quicksight: v1.115.0
  • Feature: Updated the Amazon Quick Spaces API to remove unsupported SPACE and ARTIFACT values from the SpaceQuickSightResourceType enum.

v1.77.0

Module Highlights

• github.com/aws/aws-sdk-go-v2/service/applicationautoscaling: v1.43.0
  • Feature: Adds support for ECS high-resolution predefined scaling metrics (ECSServiceAverageCPUUtilizationHighResolution, ECSServiceAverageMemoryUtilizationHighResolution) enabling 20-second metric periods for faster scaling
• github.com/aws/aws-sdk-go-v2/service/batch: v1.66.0
  • Feature: Adds Support for ordered allocation strategies- BEST-FIT-PROGRESSIVE-ORDERED or SPOT-CAPACITY-OPTIMIZED-PRIORITIZED
• github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs: v1.77.0
  • Feature: Added optional startFromHead parameter to FilterLogEvents enabling descending timestamp order (newest first) when set to false. Default true preserves existing ascending order. Reverse sorting requires a startTime on or after Jan 1, 2024.
• github.com/aws/aws-sdk-go-v2/service/cognitoidentityprovider: v1.62.0
  • Feature: In order to support the new TLS Self-Service feature, this change adds SecurityPolicyType to CustomDomainConfigType. During CreateUserPoolDomain and UpdateUserPoolDomain this is used to select a custom domain's TLS enforcement, and for DescribeUserPoolDomain it informs users about the current TLS.
• github.com/aws/aws-sdk-go-v2/service/computeoptimizer: v1.54.0
  • Feature: This release surfaces two new metrics Volume IOPS Exceeded and Volume Throughput Exceeded into EBS volume rightsizing recommendations.
• github.com/aws/aws-sdk-go-v2/service/ec2: v1.307.1
  • Documentation: Documentation updates clarifying CancelCapacityReservation cancellable states
• github.com/aws/aws-sdk-go-v2/service/ecs: v1.85.0
  • Feature: Amazon ECS services now support high resolution (20 second) CloudWatch metrics for CPUUtilization and MemoryUtilization. Use these metrics for faster service auto scaling.
• github.com/aws/aws-sdk-go-v2/service/eks: v1.87.0
  • Feature: Adds support for configurable control plane egress routing in Amazon EKS, allowing you to route control plane egress traffic through your VPC and control how the control plane reaches resources in your network such as webhook servers and OIDC providers.
• github.com/aws/aws-sdk-go-v2/service/gamelift: v1.56.0
  • Feature: Amazon GameLift Servers has launched support for customizing Linux capabilities in container fleets. You can now specify additional Linux capabilities for containers in a container group definition, giving you finer control over the default Docker capabilities available to your containers.
• github.com/aws/aws-sdk-go-v2/service/healthlake: v1.39.0
  • Feature: Adding New Configurations to the FHIR Create Datastore. The new configurations include NLP Configuration, AnalyticsConfiguration, ProfileConfiguration
• github.com/aws/aws-sdk-go-v2/service/lambda: v1.93.0
  • Feature: Converging and fixing existing documentation gaps in Lambda SDK
• github.com/aws/aws-sdk-go-v2/service/sagemaker: v1.256.0
  • Feature: Adds support for automatic AMI patching on HyperPod clusters. Customers can configure patching strategies to automatically apply security patch with zero job termination. Customers can also specify an AMI version at instance group level and update cluster software to a certain AMI version.
• github.com/aws/aws-sdk-go-v2/service/synthetics: v1.44.0
  • Feature: CloudWatch Synthetics adds support for multi-location canaries. Customers can now monitor their endpoints from multiple locations with centralized management from a primary location. The SDK includes new parameters for configuring multiple locations and tracking their state.

v1.76.0

General Highlights

• Dependency Update: Updated to the latest SDK module versions

Module Highlights

• github.com/aws/aws-sdk-go-v2/service/bedrockruntime: v1.54.0
  • Feature: InvokeGuardrailChecks API evaluates prompts and responses against safety checks (content filters, prompt attacks, sensitive info) without creating guardrail resources. It's a detect-only API, returning numeric scores so you can build adaptive logic as per your application.
• github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs: v1.76.0
  • Feature: Added endTimeOffset parameter to Scheduled Queries APIs (Create, Update, Get) enabling bounded time window configuration. Introduced scheduleType filter (CUSTOMER MANAGED, AWS MANAGED) for ListScheduledQueries and exposed it in Get and Update responses.
• github.com/aws/aws-sdk-go-v2/service/datazone: v1.63.0
  • Feature: Adds support for deleting lineage events in Amazon DataZone.
• github.com/aws/aws-sdk-go-v2/service/mgn: v1.46.0
  • Feature: AWS Transform for VMware now supports Amazon FSx for NetApp ONTAP as a target storage. Customers can migrate source server disks directly to FSx for NetApp ONTAP iSCSI LUNs. Target storage is configurable per source server, and compute, network, and storage migrate together in coordinated waves.
• github.com/aws/aws-sdk-go-v2/service/rds: v1.119.3
  • Documentation: Adding support for RDS SQL Server BYOM and DB2 Community Edition
• github.com/aws/aws-sdk-go-v2/service/wafv2: v1.73.0
  • Feature: AWS WAF now supports AI traffic monetization for CloudFront. Configure payment networks and pricing on your web ACL, use the new Monetize rule action to charge AI agents via x402, and monitor revenue with new GetRevenueStatisticsSummary, GetRevenueStatistics, and ListSettlementRecords APIs.
• github.com/aws/aws-sdk-go-v2/service/workspaces: v1.70.0
  • Feature: Added a validation for null check for ImageIds in DescribeWorkspaceImages API request parameters.

aws/smithy-go (github.com/aws/smithy-go)

v1.27.3

Compare Source

General Highlights

• Dependency Update: Updated to the latest SDK module versions

Module Highlights

• github.com/aws/smithy-go: v1.27.3
  • Bug Fix: Fix bug in JSON doc encoder and endpoint host label format validation

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

To execute skipped test pipelines write comment /ok-to-test.

---

Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.

[coderabbitai]

Note

Reviews paused

It looks like this branch is under active development. To avoid overwhelming you with review comments due to an influx of new commits, CodeRabbit has automatically paused this review. You can configure this behavior by changing the reviews.auto_review.auto_pause_after_reviewed_commits setting.

Use the following commands to manage reviews:

• @coderabbitai resume to resume automatic reviews.
• @coderabbitai review to trigger a single review.

Use the checkboxes below for quick actions:

• ▶️ Resume reviews
• 🔍 Trigger review

📝 Walkthrough

Walkthrough

The PR updates AWS SDK for Go v2 dependency versions in go.mod, including service/s3, service/cloudwatchlogs, service/internal/checksum, and service/internal/s3shared.

🚥 Pre-merge checks | ✅ 14 | ❌ 1

❌ Failed checks (1 warning)

Check name	Status	Explanation	Resolution
Description check	⚠️ Warning	The PR uses an automated dependency-update format but omits most required template sections, including issue context, testing, and change impact.	Add the required template sections: PR summary, issue/problem context, related issues, type of change, testing, proof, and breaking-change details if applicable.

✅ Passed checks (14 passed)

Check name	Status	Explanation
Title check	✅ Passed	The title is concise, specific, and accurately summarizes the AWS SDK dependency update.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Stable And Deterministic Test Names	✅ Passed	PR only updates go.mod dependency versions; no test files or Ginkgo titles were changed, so there are no dynamic test names to flag.
Test Structure And Quality	✅ Passed	Only go.mod dependency versions changed; no Ginkgo test files or test logic were modified, so the test-structure checklist is not applicable.
Microshift Test Compatibility	✅ Passed	Only go.mod/go.sum changed outside vendor; no new Ginkgo e2e tests or MicroShift-sensitive APIs were added.
Single Node Openshift (Sno) Test Compatibility	✅ Passed	Dependency-only go.mod update; no new Ginkgo e2e tests or SNO-sensitive test changes were introduced.
Topology-Aware Scheduling Compatibility	✅ Passed	Only dependency/vendor files changed; no deployment manifests, operator code, or controllers were modified, so the scheduling check is not applicable.
Ote Binary Stdout Contract	✅ Passed	PR only updates go.mod dependency versions; no main/init/TestMain/suite setup code was changed, so no new stdout writes were introduced.
Ipv6 And Disconnected Network Test Compatibility	✅ Passed	PR updates AWS SDK deps in go.mod/go.sum only; no new Ginkgo e2e tests or network code were added.
No-Weak-Crypto	✅ Passed	Only go.mod version bumps are present; non-vendor source scan found no new weak-crypto, custom-crypto, or unsafe secret comparisons.
Container-Privileges	✅ Passed	PR only updates go.mod/go.sum and vendored AWS SDK files; no K8s/container manifests or privilege settings were changed.
No-Sensitive-Data-In-Logs	✅ Passed	Changed files are dependency manifests only (go.mod/.bingo); they only bump versions and contain no logging code or sensitive-data literals.

✨ Finishing Touches

📝 Generate docstrings

• Create stacked PR
• Commit on current branch

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch konflux/mintmaker/master/aws-sdk

---

_{Comment @coderabbitai help to get the list of available commands.}

[openshift-ci]

Hi @red-hat-konflux[bot]. Thanks for your PR.

I'm waiting for a openshift member to verify that this patch is reasonable to test. If it is, they should reply with /ok-to-test on its own line. Until that is done, I will not automatically test new commits in this PR, but the usual testing commands by org members will still work.

Regular contributors should join the org to skip this step.

Once the patch is verified, the new status will be reflected by the ok-to-test label.

I understand the commands that are listed here.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 26.17%. Comparing base (80fd9fb) to head (2df8d90).

Additional details and impacted files

@@           Coverage Diff           @@
##           master    #3283   +/-   ##
=======================================
  Coverage   26.17%   26.17%           
=======================================
  Files         334      334           
  Lines       36704    36704           
=======================================
  Hits         9608     9608           
  Misses      26359    26359           
  Partials      737      737           

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

[amandahla]

/approve
/lgtm
/check-required-labels

[openshift-ci]

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: amandahla, red-hat-konflux[bot]

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details

Needs approval from an approver in each of these files:

• OWNERS [amandahla]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[openshift-ci]

New changes are detected. LGTM label has been removed.

[red-hat-konflux]

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 2 additional dependencies were updated

Details:

Package	Change
github.com/aws/aws-sdk-go-v2/service/internal/checksum	v1.3.7 -> v1.9.22
github.com/aws/aws-sdk-go-v2/service/internal/s3shared	v1.17.5 -> v1.19.29

[openshift-ci]

@red-hat-konflux[bot]: The following test failed, say /retest to rerun all failed tests or /retest-required to rerun all mandatory failed tests:

Test name	Commit	Details	Required	Rerun command
ci/prow/security	85858a2	link	false	/test security

Full PR test history. Your PR dashboard.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.