build(deps): bump the main group with 8 updates

[dependabot]

Bumps the main group with 8 updates:

Package	From	To
github.com/aws/aws-sdk-go-v2	1.41.5	1.41.6
github.com/aws/aws-sdk-go-v2/credentials	1.19.14	1.19.15
github.com/aws/aws-sdk-go-v2/service/iam	1.53.7	1.53.8
github.com/aws/aws-sdk-go-v2/service/sts	1.41.10	1.42.0
github.com/jackc/pgx/v5	5.9.1	5.9.2
k8s.io/api	0.35.3	0.35.4
k8s.io/apimachinery	0.35.3	0.35.4
k8s.io/client-go	0.35.3	0.35.4

Updates github.com/aws/aws-sdk-go-v2 from 1.41.5 to 1.41.6

Commits

• 9bc9c51 Release 2026-04-17
• 2b41455 Regenerated Clients
• 2327a1b Update endpoints model
• 9225797 Update API model
• 7b6f675 Bump smithy-go to 1.25 (again) (#3390)
• c8b6a97 Release 2026-04-16
• 4a05c2b Regenerated Clients
• 6cd4cc9 Update endpoints model
• 3153bed Update API model
• fe3cef6 Make AccountIDEndpointRouting aware of bdd endpoints (#3387)
• Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/credentials from 1.19.14 to 1.19.15

Commits

• 9bc9c51 Release 2026-04-17
• 2b41455 Regenerated Clients
• 2327a1b Update endpoints model
• 9225797 Update API model
• 7b6f675 Bump smithy-go to 1.25 (again) (#3390)
• c8b6a97 Release 2026-04-16
• 4a05c2b Regenerated Clients
• 6cd4cc9 Update endpoints model
• 3153bed Update API model
• fe3cef6 Make AccountIDEndpointRouting aware of bdd endpoints (#3387)
• Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/service/iam from 1.53.7 to 1.53.8

Commits

• fa8a15e Release 2025-01-17
• e08f26d Regenerated Clients
• 177bcda Update endpoints model
• a5b6a2f Update API model
• 74b33ba pull retry loop forward to cover everything from resolving auth scheme onward...
• 7ea97e5 Add integration test case for flex checksum (#2967)
• See full diff in compare view

Updates github.com/aws/aws-sdk-go-v2/service/sts from 1.41.10 to 1.42.0

Commits

• ee5e3f0 Release 2023-11-01
• b65c226 Regenerated Clients
• 7a194b9 Update API model
• 0cb924a Add support for configured endpoints. (#2328)
• 61039fe Release 2023-10-31
• 797e056 Regenerated Clients
• 822585d Update SDK's smithy-go dependency to v1.16.0
• abf753d Update API model
• 99861c0 lang: bump minimum go version to 1.19 (#2338)
• 2ac0a53 Release 2023-10-30
• Additional commits viewable in compare view

Updates github.com/jackc/pgx/v5 from 5.9.1 to 5.9.2

Changelog

Sourced from github.com/jackc/pgx/v5's changelog.

5.9.2 (April 18, 2026)

Fix SQL Injection via placeholder confusion with dollar quoted string literals (GHSA-j88v-2chj-qfwx)

SQL injection can occur when:

1. The non-default simple protocol is used.
2. A dollar quoted string literal is used in the SQL query.
3. That query contains text that would be would be interpreted outside as a placeholder outside of a string literal.
4. The value of that placeholder is controllable by the attacker.

e.g.

attackValue := `$tag$; drop table canary; --`
_, err = tx.Exec(ctx, `select $tag$ $1 $tag$, $1`, pgx.QueryExecModeSimpleProtocol, attackValue)

This is unlikely to occur outside of a contrived scenario.

Commits

• 0aeabbc Release v5.9.2
• 60644f8 Fix SQL sanitizer bugs with dollar-quoted strings and placeholder overflow
• a5680bc Merge pull request #2531 from dolmen-go/godoc-add-links
• e34e452 doc: Add godoc links
• 08c9bb1 Fix Stringer types encoded as text instead of numeric value in composite fields
• 96b4dbd Remove unstable test
• acf88e0 Merge pull request #2526 from abrightwell/abrightwell-min-proto
• 2f81f1f Update max_protocol_version and min_protocol_version defaults
• See full diff in compare view

Updates k8s.io/api from 0.35.3 to 0.35.4

Commits

• e8f0e9f Update dependencies to v0.35.4 tag
• 0b2a75e Merge pull request #138356 from dims/update-moby-spdystream-v0.5.1-1.35
• e1ef9bc Update github.com/moby/spdystream from v0.5.0 to v0.5.1
• See full diff in compare view

Updates k8s.io/apimachinery from 0.35.3 to 0.35.4

Commits

• 475c941 Merge pull request #138356 from dims/update-moby-spdystream-v0.5.1-1.35
• 6c08bb5 Update github.com/moby/spdystream from v0.5.0 to v0.5.1
• 45398ef Merge pull request #137927 from lalitc375/cherry-pick-137864
• b414b94 Fix backport differences for 1.35 (remove WithOrigin and MarkAlpha)
• f933a4d Add slice and map union member support with tests
• 977ad5b Use IsZero instead of IsNil for union ratcheting check
• a128230 Fix union validation ratcheting when oldObj is nil
• See full diff in compare view

Updates k8s.io/client-go from 0.35.3 to 0.35.4

Commits

• d43aed2 Update dependencies to v0.35.4 tag
• 8ebd9bb Merge pull request #138356 from dims/update-moby-spdystream-v0.5.1-1.35
• 00b2f2b Update github.com/moby/spdystream from v0.5.0 to v0.5.1
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions