[dependabot]

Bumps the gomod group with 9 updates:

Package	From	To
cloud.google.com/go/storage	1.69.0	1.70.0
github.com/aws/aws-sdk-go-v2	1.47.3	1.47.4
github.com/aws/aws-sdk-go-v2/config	1.33.9	1.33.11
github.com/aws/aws-sdk-go-v2/credentials	1.20.9	1.20.11
github.com/aws/aws-sdk-go-v2/feature/s3/manager	1.23.14	1.23.17
github.com/aws/aws-sdk-go-v2/service/s3	1.114.3	1.114.5
github.com/aws/smithy-go	1.28.5	1.28.6
google.golang.org/api	0.306.0	0.307.0
google.golang.org/grpc	1.84.0	1.85.0

Updates cloud.google.com/go/storage from 1.69.0 to 1.70.0

Commits

• 8a17bee chore: release main (#20540)
• 0783130 chore(main): release agentplatform 0.22.0
• cc91d66 feat: update API sources and regenerate (#20570)
• d3974fa chore(spanner): generate private vtprotobuf copy of google.spanner.v1 under i...
• 39f0ea5 fix(auth): honor DisableAsyncRefresh and EarlyTokenRefresh consistently (#20564)
• 9b3c9a5 chore: update librarian version to v0.45.0 (#20565)
• 68b3f33 fix(bigtable): detect omitted MutateRows response entries in ApplyBulk (#20557)
• 17626fb test(spanner): unflake TestIntegration_ListDatabaseRoles (#20562)
• ec37b97 test(spanner): unflake TestIntegration_BatchQuery and TestIntegration… (#20560)
• d0df0a6 chore: remove unused .librarian directory (#20556)
• Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2 from 1.47.3 to 1.47.4

Commits

• 4aaad74 Release 2026-10-22
• 4c1f2f2 Regenerated Clients
• edb4ad6 Update endpoints model
• 414c9e4 Update API model
• 5bba534 Bump Smithy Go to 1.28.6 (#3600)
• 0d2e6fa Release 2026-10-21
• 0d7e55d Regenerated Clients
• d5bf455 Update endpoints model
• e92707e Update API model
• d980ed6 Enforce event stream header key value length limit instead of truncating (#3598)
• Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/config from 1.33.9 to 1.33.11

Commits

• 0d657c0 Release 2026-10-26
• 77b7742 Regenerated Clients
• 54f1f5e Update endpoints model
• 4099cd1 Update API model
• aae188a Download directory objects through DownloadObject instead of GetObject (#3560)
• 4aaad74 Release 2026-10-22
• 4c1f2f2 Regenerated Clients
• edb4ad6 Update endpoints model
• 414c9e4 Update API model
• 5bba534 Bump Smithy Go to 1.28.6 (#3600)
• Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/credentials from 1.20.9 to 1.20.11

Commits

• 9c92421 Release 2022-09-20
• 389c50b Regenerated Clients
• 834dd34 Update endpoints model
• d8d5446 Update API model
• 4c9dc4d Merge pull request #1847 from RanVaknin/documentation-update-config
• 72c90fe updated linting ignore
• 3f34bd0 added changelog statment
• 3938bb7 Release 2022-09-19
• c547650 Regenerated Clients
• 2d3bbde Update endpoints model
• Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/feature/s3/manager from 1.23.14 to 1.23.17

Commits

• 2223642 Release 2026-04-29
• 04c7e46 Regenerated Clients
• 5f56925 Update endpoints model
• aac6d2b Update API model
• bdaead7 upgrade to smithy-go v1.25.1 (#3399)
• 008e12c Release 2026-04-27
• ef109d9 Regenerated Clients
• 6411e63 Update API model
• e5bf970 Release 2026-04-24
• bdbb88c Regenerated Clients
• Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/service/s3 from 1.114.3 to 1.114.5

Commits

• 4aaad74 Release 2026-10-22
• 4c1f2f2 Regenerated Clients
• edb4ad6 Update endpoints model
• 414c9e4 Update API model
• 5bba534 Bump Smithy Go to 1.28.6 (#3600)
• 0d2e6fa Release 2026-10-21
• 0d7e55d Regenerated Clients
• d5bf455 Update endpoints model
• e92707e Update API model
• d980ed6 Enforce event stream header key value length limit instead of truncating (#3598)
• Additional commits viewable in compare view

Updates github.com/aws/smithy-go from 1.28.5 to 1.28.6

Changelog

Sourced from github.com/aws/smithy-go's changelog.

Release (2026-10-27)

General Highlights

• Dependency Update: Updated to the latest SDK module versions

Module Highlights

• github.com/aws/smithy-go: v1.28.7
  • Bug Fix: Fix a panic or EOF error when deserializing a JSON union that contains a member not modeled by the client and whose value is not null.
  • Bug Fix: Log the underlying error when dumping an HTTP request or response for logging fails

Release (2026-10-21)

General Highlights

• Dependency Update: Updated to the latest SDK module versions

Module Highlights

• github.com/aws/smithy-go: v1.28.6
  • Bug Fix: Enforce event stream header key value length limit instead of truncating
  • Bug Fix: Retain the value in a list with the zero value when encountering a null entry on a dense list. This matches how legacy code-generated JSON deserializers behaved.

Release (2026-10-09)

General Highlights

• Dependency Update: Updated to the latest SDK module versions

Module Highlights

• github.com/aws/smithy-go: v1.28.5
  • Bug Fix: Retain the key with the zero value when encountering a null-value key in a dense map. This matches how legacy code-generated JSON deserializers behaved.

Release (2026-10-07)

General Highlights

• Dependency Update: Updated to the latest SDK module versions

Module Highlights

• github.com/aws/smithy-go: v1.28.4
  • Bug Fix: Revert #698 that fixed JoinPath with trailing slash. This has a side effect on certain S3 API paths in the downstream SDK that need more consideration.

Release (2026-10-06)

General Highlights

• Dependency Update: Updated to the latest SDK module versions

Module Highlights

• github.com/aws/smithy-go: v1.28.3
  • Bug Fix: Accept either casing of message/Message on modeled JSON error structures in schema-based deserialization, and emit the smithy.api#error trait in generated schemas
  • Bug Fix: Include the underlying error when logging failures to discard or close an HTTP response body

Release (2026-09-18)

... (truncated)

Commits

• f0c489f Release 2026-10-21
• 43007bd Enforce event stream header key value length limit instead of truncating (#733)
• fc207dc Serialize null values in lists not marked with @​sparse with their zero value ...
• See full diff in compare view

Updates google.golang.org/api from 0.306.0 to 0.307.0

Release notes

Sourced from google.golang.org/api's releases.

v0.307.0

0.307.0 (2026-10-21)

Features

• all: Auto-regenerate discovery clients (#3785) (b2487a4)

Changelog

Sourced from google.golang.org/api's changelog.

0.307.0 (2026-10-21)

Features

• all: Auto-regenerate discovery clients (#3785) (b2487a4)

Commits

• fbb4c3c chore(main): release 0.307.0 (#3786)
• b2487a4 feat(all): auto-regenerate discovery clients (#3785)
• See full diff in compare view

Updates google.golang.org/grpc from 1.84.0 to 1.85.0

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.85.0

New Features

• stats: Expose the effective client authority (sent on the wire as the HTTP/2 :authority header) in client stats.OutHeader events. (#9296)
  • Special Thanks: @​aryansk
• metadata: Add ValueFromOutgoingContext, which reads a single metadata value from outgoing context without copying the entire outgoing metadata into a new map. (#9282)
  • Special Thanks: @​yuyangguo42

Bug Fixes

• transport: Refine control buffer throttling to only count peer-induced control frames, raise the default GRPC_GO_EXPERIMENTAL_CONTROL_BUFFER_THROTTLE_LIMIT from 100 to 10,000, and close client connections if reads remain throttled for 10s. (#9563)
• server: Ensure Stop() forcefully terminates the server while GracefulStop() is waiting for active handlers to complete. (#9394)
  • Special Thanks: @​stanhu
• server: Unconditionally increment the highest-seen stream ID on when handling HEADERS frames to comply with RFC 7540 §5.1.1. Previously, truncated HEADERS frames left the connection in an inconsistent state and allowed stream IDs to be reused by clients without resulting in a protocol error. (#9414)
• server: Terminate streams immediately when a HEADERS frame includes the EndStream bit. Previously, this caused server handlers to hang when reading a message. (#9391)
• server: Reject requests missing both :authority and Host headers with HTTP 400 and status Internal. (#9365)
• xds: Fix a bug where route header matchers with non-lowercase names failed to match routes. (#9353)
  • Special Thanks: @​winklemad
• client: Ensure retried RPCs use the correct :authority value specified by the LB policy instead of inheriting it from a previous attempt. (#9277)
  • Special Thanks: @​nvxbug
• transport: Fail streams with io.ErrUnexpectedEOF instead of io.EOF upon receiving truncated message headers or bodies after partial data has already been received. (#9204)
  • Special Thanks: @​buger

Commits

• c9ab42c Change version to 1.85.0 (#9434)
• bfb7561 cherry pick (#9433) and (#9563) (#9566)
• 46a2db2 *: update dockerfiles to build using go1.26 to match go.mod (#9548)
• 076bb1c Cherrypick #9533 to v1.85.x. (#9534)
• baaf083 *: update the net package and go version (#9506)
• 678b9b3 Cherrypick #9385 to v1.85.x (#9504)
• 705f9b9 Cherry-pick #9425 into v1.85.x (#9438)
• 1648161 transport: stop read throttling due to controlBuf size, on the client (#9431)
• 1863b59 protoc-gen-go-grpc: Update supported Edition to 2026 (#9426)
• d331f11 server: release mutex while waiting for handlers in stop() (#9394)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions