deps(deps): bump the go-dependencies group with 11 updates (#5391)

Bumps the go-dependencies group with 11 updates:

| Package | From | To |
| --- | --- | --- |
|
[github.com/MicahParks/keyfunc/v3](https://github.com/MicahParks/keyfunc)
| `3.8.0` | `3.8.1` |
| [github.com/aws/aws-sdk-go-v2](https://github.com/aws/aws-sdk-go-v2) |
`1.43.0` | `1.43.2` |
|
[github.com/aws/aws-sdk-go-v2/config](https://github.com/aws/aws-sdk-go-v2)
| `1.32.31` | `1.32.33` |
|
[github.com/aws/aws-sdk-go-v2/feature/ec2/imds](https://github.com/aws/aws-sdk-go-v2)
| `1.18.31` | `1.18.33` |
|
[github.com/aws/aws-sdk-go-v2/feature/s3/manager](https://github.com/aws/aws-sdk-go-v2)
| `1.22.35` | `1.22.37` |
|
[github.com/aws/aws-sdk-go-v2/service/s3](https://github.com/aws/aws-sdk-go-v2)
| `1.106.0` | `1.106.2` |
| [github.com/aws/smithy-go](https://github.com/aws/smithy-go) |
`1.27.4` | `1.27.5` |
|
[github.com/docker/go-connections](https://github.com/docker/go-connections)
| `0.8.0` | `0.8.1` |
| [github.com/ipfs/boxo](https://github.com/ipfs/boxo) | `0.42.0` |
`0.42.1` |
| [github.com/ipfs/go-unixfsnode](https://github.com/ipfs/go-unixfsnode)
| `1.10.5` | `1.10.6` |
| [github.com/libp2p/go-libp2p](https://github.com/libp2p/go-libp2p) |
`0.48.1-0.20260709142922-ec408fcc60c9` | `0.49.0` |

Updates `github.com/MicahParks/keyfunc/v3` from 3.8.0 to 3.8.1
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/MicahParks/keyfunc/commit/39974f23fbc03a68b3786753ef633c16f75660f9"><code>39974f2</code></a>
Update deps (<a
href="https://redirect.github.com/MicahParks/keyfunc/issues/149">#149</a>)</li>
<li>See full diff in <a
href="https://github.com/MicahParks/keyfunc/compare/v3.8.0...v3.8.1">compare
view</a></li>
</ul>
</details>
<br />

Updates `github.com/aws/aws-sdk-go-v2` from 1.43.0 to 1.43.2
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/3bf9ef9dce470565ce8e4e5c2dbd673e72607b58"><code>3bf9ef9</code></a>
Release 2026-07-29</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/3f0db6548e7b6c89f528a532e4ba143aa4f171bc"><code>3f0db65</code></a>
Regenerated Clients</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/3212c1c038ad11fd9cfb21608a6ff5ee4d71e6a6"><code>3212c1c</code></a>
Update endpoints model</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/554a97c53e736eb0cccae164788d7f9199d314ab"><code>554a97c</code></a>
Update API model</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/789968e391cb7f4b67484af228624c0edd6e747a"><code>789968e</code></a>
Request compression content length test (<a
href="https://redirect.github.com/aws/aws-sdk-go-v2/issues/3497">#3497</a>)</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/70fc8199cf50c44a021e64a1be3a6f2f4fccc61a"><code>70fc819</code></a>
generate serde benchmarks (<a
href="https://redirect.github.com/aws/aws-sdk-go-v2/issues/3492">#3492</a>)</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/5cf37fbe56828695fbf39317f7a28a44334b1c18"><code>5cf37fb</code></a>
Release 2026-07-28</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/63ee6624bce62943e3ba93ec2a53af2be33c9672"><code>63ee662</code></a>
Regenerated Clients</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/c4668b795b151e5238c6ea7ebd008c39cfa53813"><code>c4668b7</code></a>
Update API model</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/8599448ad50a16eb6f491fa17f3dfd89e77e1168"><code>8599448</code></a>
Migrate serde2 kitchensink eventstream tests to smithy-go/eventstream
(<a
href="https://redirect.github.com/aws/aws-sdk-go-v2/issues/3498">#3498</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/aws/aws-sdk-go-v2/compare/v1.43.0...v1.43.2">compare
view</a></li>
</ul>
</details>
<br />

Updates `github.com/aws/aws-sdk-go-v2/config` from 1.32.31 to 1.32.33
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/3bf9ef9dce470565ce8e4e5c2dbd673e72607b58"><code>3bf9ef9</code></a>
Release 2026-07-29</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/3f0db6548e7b6c89f528a532e4ba143aa4f171bc"><code>3f0db65</code></a>
Regenerated Clients</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/3212c1c038ad11fd9cfb21608a6ff5ee4d71e6a6"><code>3212c1c</code></a>
Update endpoints model</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/554a97c53e736eb0cccae164788d7f9199d314ab"><code>554a97c</code></a>
Update API model</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/789968e391cb7f4b67484af228624c0edd6e747a"><code>789968e</code></a>
Request compression content length test (<a
href="https://redirect.github.com/aws/aws-sdk-go-v2/issues/3497">#3497</a>)</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/70fc8199cf50c44a021e64a1be3a6f2f4fccc61a"><code>70fc819</code></a>
generate serde benchmarks (<a
href="https://redirect.github.com/aws/aws-sdk-go-v2/issues/3492">#3492</a>)</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/5cf37fbe56828695fbf39317f7a28a44334b1c18"><code>5cf37fb</code></a>
Release 2026-07-28</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/63ee6624bce62943e3ba93ec2a53af2be33c9672"><code>63ee662</code></a>
Regenerated Clients</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/c4668b795b151e5238c6ea7ebd008c39cfa53813"><code>c4668b7</code></a>
Update API model</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/8599448ad50a16eb6f491fa17f3dfd89e77e1168"><code>8599448</code></a>
Migrate serde2 kitchensink eventstream tests to smithy-go/eventstream
(<a
href="https://redirect.github.com/aws/aws-sdk-go-v2/issues/3498">#3498</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/aws/aws-sdk-go-v2/compare/config/v1.32.31...config/v1.32.33">compare
view</a></li>
</ul>
</details>
<br />

Updates `github.com/aws/aws-sdk-go-v2/feature/ec2/imds` from 1.18.31 to
1.18.33
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/0bcd933c546048915e0418a8e8f533a28af5f5c1"><code>0bcd933</code></a>
Release 2023-08-07</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/bbdb100ee1f96f41761ea9bf816e789fd45f3527"><code>bbdb100</code></a>
Regenerated Clients</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/3149717b99676ce86d6757fc8c7a7c5d75c69a17"><code>3149717</code></a>
Update SDK's smithy-go dependency to v1.14.1</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/43a8a6a61f0bea2fc59bff79df6b145c19485a60"><code>43a8a6a</code></a>
Update partitions file</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/2966ce7bdaca8b1c78b31019b4fb25c37cdcde09"><code>2966ce7</code></a>
Update endpoints model</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/dad4b722853265d5287566f716809f575ab45a7c"><code>dad4b72</code></a>
Update API model</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/165c8b26cb8dc3d30fcc3eb79e55503fd242e816"><code>165c8b2</code></a>
Release 2023-08-04</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/aefb878506a9d79f6bdb8095e0cf6cdd19e78ebe"><code>aefb878</code></a>
Regenerated Clients</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/e2be5393e1847de2d1144d40e3dcd2b343e68b39"><code>e2be539</code></a>
Update endpoints model</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/be8d8ed8accd053ea86706cd2edce7643c0dc224"><code>be8d8ed</code></a>
Update API model</li>
<li>Additional commits viewable in <a
href="https://github.com/aws/aws-sdk-go-v2/compare/config/v1.18.31...config/v1.18.33">compare
view</a></li>
</ul>
</details>
<br />

Updates `github.com/aws/aws-sdk-go-v2/feature/s3/manager` from 1.22.35
to 1.22.37
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/3bf9ef9dce470565ce8e4e5c2dbd673e72607b58"><code>3bf9ef9</code></a>
Release 2026-07-29</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/3f0db6548e7b6c89f528a532e4ba143aa4f171bc"><code>3f0db65</code></a>
Regenerated Clients</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/3212c1c038ad11fd9cfb21608a6ff5ee4d71e6a6"><code>3212c1c</code></a>
Update endpoints model</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/554a97c53e736eb0cccae164788d7f9199d314ab"><code>554a97c</code></a>
Update API model</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/789968e391cb7f4b67484af228624c0edd6e747a"><code>789968e</code></a>
Request compression content length test (<a
href="https://redirect.github.com/aws/aws-sdk-go-v2/issues/3497">#3497</a>)</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/70fc8199cf50c44a021e64a1be3a6f2f4fccc61a"><code>70fc819</code></a>
generate serde benchmarks (<a
href="https://redirect.github.com/aws/aws-sdk-go-v2/issues/3492">#3492</a>)</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/5cf37fbe56828695fbf39317f7a28a44334b1c18"><code>5cf37fb</code></a>
Release 2026-07-28</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/63ee6624bce62943e3ba93ec2a53af2be33c9672"><code>63ee662</code></a>
Regenerated Clients</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/c4668b795b151e5238c6ea7ebd008c39cfa53813"><code>c4668b7</code></a>
Update API model</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/8599448ad50a16eb6f491fa17f3dfd89e77e1168"><code>8599448</code></a>
Migrate serde2 kitchensink eventstream tests to smithy-go/eventstream
(<a
href="https://redirect.github.com/aws/aws-sdk-go-v2/issues/3498">#3498</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/aws/aws-sdk-go-v2/compare/feature/s3/manager/v1.22.35...feature/s3/manager/v1.22.37">compare
view</a></li>
</ul>
</details>
<br />

Updates `github.com/aws/aws-sdk-go-v2/service/s3` from 1.106.0 to
1.106.2
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/3bf9ef9dce470565ce8e4e5c2dbd673e72607b58"><code>3bf9ef9</code></a>
Release 2026-07-29</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/3f0db6548e7b6c89f528a532e4ba143aa4f171bc"><code>3f0db65</code></a>
Regenerated Clients</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/3212c1c038ad11fd9cfb21608a6ff5ee4d71e6a6"><code>3212c1c</code></a>
Update endpoints model</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/554a97c53e736eb0cccae164788d7f9199d314ab"><code>554a97c</code></a>
Update API model</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/789968e391cb7f4b67484af228624c0edd6e747a"><code>789968e</code></a>
Request compression content length test (<a
href="https://redirect.github.com/aws/aws-sdk-go-v2/issues/3497">#3497</a>)</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/70fc8199cf50c44a021e64a1be3a6f2f4fccc61a"><code>70fc819</code></a>
generate serde benchmarks (<a
href="https://redirect.github.com/aws/aws-sdk-go-v2/issues/3492">#3492</a>)</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/5cf37fbe56828695fbf39317f7a28a44334b1c18"><code>5cf37fb</code></a>
Release 2026-07-28</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/63ee6624bce62943e3ba93ec2a53af2be33c9672"><code>63ee662</code></a>
Regenerated Clients</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/c4668b795b151e5238c6ea7ebd008c39cfa53813"><code>c4668b7</code></a>
Update API model</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/8599448ad50a16eb6f491fa17f3dfd89e77e1168"><code>8599448</code></a>
Migrate serde2 kitchensink eventstream tests to smithy-go/eventstream
(<a
href="https://redirect.github.com/aws/aws-sdk-go-v2/issues/3498">#3498</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/aws/aws-sdk-go-v2/compare/service/s3/v1.106.0...service/s3/v1.106.2">compare
view</a></li>
</ul>
</details>
<br />

Updates `github.com/aws/smithy-go` from 1.27.4 to 1.27.5
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/aws/smithy-go/blob/main/CHANGELOG.md">github.com/aws/smithy-go's
changelog</a>.</em></p>
<blockquote>
<h1>Release (2026-07-31)</h1>
<h2>General Highlights</h2>
<ul>
<li><strong>Dependency Update</strong>: Updated to the latest SDK module
versions</li>
</ul>
<h2>Module Highlights</h2>
<ul>
<li><code>github.com/aws/smithy-go</code>: v1.27.6
<ul>
<li><strong>Bug Fix</strong>: Fix failure to deserialize any
<code>@httpPayload</code> struct with a non-string member.</li>
<li><strong>Bug Fix</strong>: Fix failure to serialize any
<code>@httpPayload</code> struct with a nested struct.</li>
</ul>
</li>
</ul>
<h1>Release (2026-07-27)</h1>
<h2>General Highlights</h2>
<ul>
<li><strong>Dependency Update</strong>: Updated to the latest SDK module
versions</li>
</ul>
<h2>Module Highlights</h2>
<ul>
<li><code>github.com/aws/smithy-go</code>: v1.27.5
<ul>
<li><strong>Bug Fix</strong>: Fix a performance issue in awsQuery with
large response payloads.</li>
</ul>
</li>
</ul>
<h1>Release (2026-07-16)</h1>
<h2>General Highlights</h2>
<ul>
<li><strong>Dependency Update</strong>: Updated to the latest SDK module
versions</li>
</ul>
<h2>Module Highlights</h2>
<ul>
<li><code>github.com/aws/smithy-go/aws-http-auth</code>: <a
href="https://github.com/aws/smithy-go/blob/main/aws-http-auth/CHANGELOG.md#v121-2026-07-16">v1.2.1</a>
<ul>
<li><strong>Bug Fix</strong>: Use r.URL.Host when r.Host is unset.</li>
</ul>
</li>
<li><code>github.com/aws/smithy-go/aws-http-auth-schemes</code>: <a
href="https://github.com/aws/smithy-go/blob/main/aws-http-auth-schemes/CHANGELOG.md#v100-2026-07-16">v1.0.0</a>
<ul>
<li><strong>Release</strong>: Module
<code>github.com/aws/smithy-go/aws-http-auth-schemes</code> adds generic
smithy-go client support for AWS Sigv4 and Sigv4a.</li>
</ul>
</li>
</ul>
<h1>Release (2026-06-26)</h1>
<h2>General Highlights</h2>
<ul>
<li><strong>Dependency Update</strong>: Updated to the latest SDK module
versions</li>
</ul>
<h2>Module Highlights</h2>
<ul>
<li><code>github.com/aws/smithy-go</code>: v1.27.3
<ul>
<li><strong>Bug Fix</strong>: Fix bug in JSON doc encoder and endpoint
host label format validation</li>
</ul>
</li>
</ul>
<h1>Release (2026-06-05)</h1>
<h2>General Highlights</h2>
<ul>
<li><strong>Dependency Update</strong>: Updated to the latest SDK module
versions</li>
</ul>
<h2>Module Highlights</h2>
<ul>
<li><code>github.com/aws/smithy-go</code>: v1.27.2
<ul>
<li><strong>Bug Fix</strong>: Fix incorrect serialization of unions in
CBOR-based protocols.</li>
</ul>
</li>
</ul>
<h1>Release (2026-06-04)</h1>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/aws/smithy-go/commit/7016ea047f6a4ff0d293ff395a9f4fd202223200"><code>7016ea0</code></a>
Release 2026-07-27</li>
<li><a
href="https://github.com/aws/smithy-go/commit/cb3e15cf659ff3449102137050f1ae4d5e1089fa"><code>cb3e15c</code></a>
add fine-grained benchmark codegen (<a
href="https://redirect.github.com/aws/smithy-go/issues/688">#688</a>)</li>
<li><a
href="https://github.com/aws/smithy-go/commit/f23de1afc3a006102ba99d451c08b33d948f7f5f"><code>f23de1a</code></a>
revert codegen version to 0.1.0</li>
<li><a
href="https://github.com/aws/smithy-go/commit/5dd90af25d0b29e2e3964e11f1567c0c8a65dcbb"><code>5dd90af</code></a>
update README</li>
<li><a
href="https://github.com/aws/smithy-go/commit/526ee947d96e9cc67d1fbafba6d86064e3ed7f6e"><code>526ee94</code></a>
remove wrapper and only sign release-built bundle</li>
<li>See full diff in <a
href="https://github.com/aws/smithy-go/compare/v1.27.4...v1.27.5">compare
view</a></li>
</ul>
</details>
<br />

Updates `github.com/docker/go-connections` from 0.8.0 to 0.8.1
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/docker/go-connections/commit/9c9e2db764937383effc099843914897c8838056"><code>9c9e2db</code></a>
Merge pull request <a
href="https://redirect.github.com/docker/go-connections/issues/167">#167</a>
from thaJeztah/fix_illumos</li>
<li><a
href="https://github.com/docker/go-connections/commit/de1f4dcb4634829798d122039091706d73793e76"><code>de1f4dc</code></a>
sockets: fix compilation on illumos</li>
<li><a
href="https://github.com/docker/go-connections/commit/4a7495ef2e23dac11fa3d650bef868c5eecd0be8"><code>4a7495e</code></a>
ci: add cross-build target</li>
<li>See full diff in <a
href="https://github.com/docker/go-connections/compare/v0.8.0...v0.8.1">compare
view</a></li>
</ul>
</details>
<br />

Updates `github.com/ipfs/boxo` from 0.42.0 to 0.42.1
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/ipfs/boxo/releases">github.com/ipfs/boxo's
releases</a>.</em></p>
<blockquote>
<h2>v0.42.1</h2>
<p><!-- raw HTML omitted --><!-- raw HTML omitted --><!-- raw HTML
omitted --></p>
<blockquote>
<p>[!NOTE]
This release was brought to you by the <a
href="https://ipshipyard.com/">Shipyard</a> team.</p>
</blockquote>
<h2>What's Changed</h2>
<h3>Added</h3>
<ul>
<li><code>gateway</code>: added <code>WithMaxTraversalDepth</code>. It
limits how deep <code>BlocksBackend</code> descends into a DAG while it
serves a CAR response. Traversal keeps per-level state, so its cost
grows with depth. The limit is on by default at
<code>DefaultMaxTraversalDepth</code> (1024), well above anything UnixFS
produces. A file reaches terabytes by depth 4, and a HAMT adds about 4
levels per million directory entries. Pass a positive value to set your
own limit, or <code>WithMaxTraversalDepth(0)</code> to remove the limit.
<a href="https://redirect.github.com/ipfs/boxo/pull/1197">#1197</a></li>
</ul>
<h3>Changed</h3>
<ul>
<li><code>gateway</code>: a CAR response that fails partway through now
ends with <code>[Gateway Error: CAR stream truncated, response is
incomplete]</code>. <code>withRetrievalTimeout</code> already uses the
same marker when it cuts a response short. The gateway sets
<code>X-Stream-Error</code> only once the body is streaming, so that
header rarely reaches the client. A truncated CAR was otherwise
indistinguishable from a complete one. The marker makes the trailing
bytes invalid CAR, so a reader stops with an error instead of accepting
a short DAG. This mostly helps operators. Gateways usually sit behind
reverse proxies and third-party CDNs, so a short response leaves you
guessing which hop cut it. Now the response says so itself. <a
href="https://redirect.github.com/ipfs/boxo/pull/1197">#1197</a></li>
<li><code>routing/http/server</code>: <code>/routing/v1</code> responses
no longer let a cache serve a two-day-old answer while the origin is
healthy. Peer addresses in routing results come from short-lived sources
such as relay reservations. A stale window measured in days handed
clients addresses that had stopped working long ago.
<code>stale-while-revalidate</code> is now 10 minutes for responses with
results, and 1 minute for empty ones. That covers a background refresh.
<code>stale-if-error</code> applies only when the origin is failing, so
responses with results keep the 48h Amino DHT expiration window. For
empty responses it is 1 hour. <code>max-age</code> is unchanged. <a
href="https://redirect.github.com/ipfs/boxo/pull/1195">#1195</a></li>
<li>upgrade to <code>go-libp2p</code> <a
href="https://github.com/libp2p/go-libp2p/releases/tag/v0.49.0">v0.49.0</a></li>
</ul>
<h3>Fixed</h3>
<ul>
<li><code>bitswap/network</code>: <code>ExtractHTTPAddress</code> now
brackets an IPv6 literal when it builds the provider URL. A peer that
announces <code>/ip6/&lt;addr&gt;/tcp/443/tls/http</code> is now usable
as an HTTP provider. Without brackets, <code>url.Parse</code> rejected
the address under Go 1.26 and later, and the peer was skipped. On
earlier versions it parsed, but the authority split at the last colon,
so the client dialed a host and port that do not exist. <a
href="https://redirect.github.com/ipfs/boxo/pull/1196">#1196</a></li>
</ul>
<h3>Security</h3>
<ul>
<li>The upgrade to go-libp2p v0.49.0 includes a security fix for
CVE-2026-57497: <a
href="https://github.com/advisories/GHSA-g35j-m5xg-vh3q">https://github.com/advisories/GHSA-g35j-m5xg-vh3q</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/ipfs/boxo/compare/v0.42.0...v0.42.1">https://github.com/ipfs/boxo/compare/v0.42.0...v0.42.1</a></p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/ipfs/boxo/blob/main/CHANGELOG.md">github.com/ipfs/boxo's
changelog</a>.</em></p>
<blockquote>
<h2>[v0.42.1]</h2>
<h3>Added</h3>
<ul>
<li><code>gateway</code>: added <code>WithMaxTraversalDepth</code>. It
limits how deep <code>BlocksBackend</code> descends into a DAG while it
serves a CAR response. Traversal keeps per-level state, so its cost
grows with depth. The limit is on by default at
<code>DefaultMaxTraversalDepth</code> (1024), well above anything UnixFS
produces. A file reaches terabytes by depth 4, and a HAMT adds about 4
levels per million directory entries. Pass a positive value to set your
own limit, or <code>WithMaxTraversalDepth(0)</code> to remove the limit.
<a href="https://redirect.github.com/ipfs/boxo/pull/1197">#1197</a></li>
</ul>
<h3>Changed</h3>
<ul>
<li><code>gateway</code>: a CAR response that fails partway through now
ends with <code>[Gateway Error: CAR stream truncated, response is
incomplete]</code>. <code>withRetrievalTimeout</code> already uses the
same marker when it cuts a response short. The gateway sets
<code>X-Stream-Error</code> only once the body is streaming, so that
header rarely reaches the client. A truncated CAR was otherwise
indistinguishable from a complete one. The marker makes the trailing
bytes invalid CAR, so a reader stops with an error instead of accepting
a short DAG. This mostly helps operators. Gateways usually sit behind
reverse proxies and third-party CDNs, so a short response leaves you
guessing which hop cut it. Now the response says so itself. <a
href="https://redirect.github.com/ipfs/boxo/pull/1197">#1197</a></li>
<li><code>routing/http/server</code>: <code>/routing/v1</code> responses
no longer let a cache serve a two-day-old answer while the origin is
healthy. Peer addresses in routing results come from short-lived sources
such as relay reservations. A stale window measured in days handed
clients addresses that had stopped working long ago.
<code>stale-while-revalidate</code> is now 10 minutes for responses with
results, and 1 minute for empty ones. That covers a background refresh.
<code>stale-if-error</code> applies only when the origin is failing, so
responses with results keep the 48h Amino DHT expiration window. For
empty responses it is 1 hour. <code>max-age</code> is unchanged. <a
href="https://redirect.github.com/ipfs/boxo/pull/1195">#1195</a></li>
<li>upgrade to <code>go-libp2p</code> <a
href="https://github.com/libp2p/go-libp2p/releases/tag/v0.49.0">v0.49.0</a></li>
</ul>
<h3>Fixed</h3>
<ul>
<li><code>bitswap/network</code>: <code>ExtractHTTPAddress</code> now
brackets an IPv6 literal when it builds the provider URL. A peer that
announces <code>/ip6/&lt;addr&gt;/tcp/443/tls/http</code> is now usable
as an HTTP provider. Without brackets, <code>url.Parse</code> rejected
the address under Go 1.26 and later, and the peer was skipped. On
earlier versions it parsed, but the authority split at the last colon,
so the client dialed a host and port that do not exist. <a
href="https://redirect.github.com/ipfs/boxo/pull/1196">#1196</a></li>
</ul>
<h3>Security</h3>
<ul>
<li>The upgrade to go-libp2p v0.49.0 includes a security fix for
CVE-2026-57497: <a
href="https://github.com/advisories/GHSA-g35j-m5xg-vh3q">https://github.com/advisories/GHSA-g35j-m5xg-vh3q</a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/ipfs/boxo/commit/3dcbf9bbcd2a0ffd1b1bbbb572549edfbbfdec1f"><code>3dcbf9b</code></a>
Merge pull request <a
href="https://redirect.github.com/ipfs/boxo/issues/1200">#1200</a> from
ipfs/release-v0.42.1</li>
<li><a
href="https://github.com/ipfs/boxo/commit/07ca276a3c797433d9c6dcff7012c436be26751a"><code>07ca276</code></a>
bump version</li>
<li><a
href="https://github.com/ipfs/boxo/commit/a7c0a87bc16c507ce564204045d5a6ceee2b4a86"><code>a7c0a87</code></a>
Release v0.42.1</li>
<li><a
href="https://github.com/ipfs/boxo/commit/e754a21751a6c46979188b402240c968b87ae706"><code>e754a21</code></a>
chore: upgrade to go-libp2p v0.49.0 (<a
href="https://redirect.github.com/ipfs/boxo/issues/1198">#1198</a>)</li>
<li><a
href="https://github.com/ipfs/boxo/commit/1c8cf646367f3d92b207863e26b5495429841925"><code>1c8cf64</code></a>
fix: shorten /routing/v1 stale windows (<a
href="https://redirect.github.com/ipfs/boxo/issues/1195">#1195</a>)</li>
<li><a
href="https://github.com/ipfs/boxo/commit/b5c1df79dbc09c84ef5bdb410437bcd4d41183d8"><code>b5c1df7</code></a>
fix(bitswap): bracket IPv6 hosts in provider URLs (<a
href="https://redirect.github.com/ipfs/boxo/issues/1196">#1196</a>)</li>
<li><a
href="https://github.com/ipfs/boxo/commit/c40e9163fa35da741e482d7c1d745f29210a0f12"><code>c40e916</code></a>
fix: harden dag traversal and CAR responses (<a
href="https://redirect.github.com/ipfs/boxo/issues/1197">#1197</a>)</li>
<li>See full diff in <a
href="https://github.com/ipfs/boxo/compare/v0.42.0...v0.42.1">compare
view</a></li>
</ul>
</details>
<br />

Updates `github.com/ipfs/go-unixfsnode` from 1.10.5 to 1.10.6
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/ipfs/go-unixfsnode/releases">github.com/ipfs/go-unixfsnode's
releases</a>.</em></p>
<blockquote>
<h2>v1.10.6</h2>
<h2>What's Changed</h2>
<ul>
<li>fix: use bitfield.FromBytes for HAMT bitmaps by <a
href="https://github.com/lidel"><code>@​lidel</code></a> in <a
href="https://redirect.github.com/ipfs/go-unixfsnode/pull/100">ipfs/go-unixfsnode#100</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/ipfs/go-unixfsnode/compare/v1.10.5...v1.10.6">https://github.com/ipfs/go-unixfsnode/compare/v1.10.5...v1.10.6</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/ipfs/go-unixfsnode/commit/4a71cacb869d29b428bc5f817872e0c0dbeab669"><code>4a71cac</code></a>
fix: use bitfield.FromBytes for HAMT bitmaps (<a
href="https://redirect.github.com/ipfs/go-unixfsnode/issues/100">#100</a>)</li>
<li>See full diff in <a
href="https://github.com/ipfs/go-unixfsnode/compare/v1.10.5...v1.10.6">compare
view</a></li>
</ul>
</details>
<br />

Updates `github.com/libp2p/go-libp2p` from
0.48.1-0.20260709142922-ec408fcc60c9 to 0.49.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/libp2p/go-libp2p/releases">github.com/libp2p/go-libp2p's
releases</a>.</em></p>
<blockquote>
<h2>v0.49.0</h2>
<h2>What's Changed</h2>
<ul>
<li>fix: relay candidate added into backoff list even if reservation on
that relay candidate success by <a
href="https://github.com/chiragsoni81245"><code>@​chiragsoni81245</code></a>
in <a
href="https://redirect.github.com/libp2p/go-libp2p/pull/3482">libp2p/go-libp2p#3482</a></li>
<li>feat: NonPublicAddrPublishing option by <a
href="https://github.com/lidel"><code>@​lidel</code></a> in <a
href="https://redirect.github.com/libp2p/go-libp2p/pull/3489">libp2p/go-libp2p#3489</a></li>
<li>fix(routing): prevent QueryEvent publish races by <a
href="https://github.com/lidel"><code>@​lidel</code></a> in <a
href="https://redirect.github.com/libp2p/go-libp2p/pull/3490">libp2p/go-libp2p#3490</a></li>
<li>fix(peer): drop empty addrs in peer records by <a
href="https://github.com/lidel"><code>@​lidel</code></a> in <a
href="https://redirect.github.com/libp2p/go-libp2p/pull/3494">libp2p/go-libp2p#3494</a></li>
<li>fix(peerstore): replace stale addrs on newer signed peer record by
<a href="https://github.com/lidel"><code>@​lidel</code></a> in <a
href="https://redirect.github.com/libp2p/go-libp2p/pull/3487">libp2p/go-libp2p#3487</a></li>
<li>feat(pstore): cap unconnected addrs per peer by <a
href="https://github.com/lidel"><code>@​lidel</code></a> in <a
href="https://redirect.github.com/libp2p/go-libp2p/pull/3486">libp2p/go-libp2p#3486</a></li>
<li>fix(config): emit fx DI registration events at debug level by <a
href="https://github.com/rvagg"><code>@​rvagg</code></a> in <a
href="https://redirect.github.com/libp2p/go-libp2p/pull/3498">libp2p/go-libp2p#3498</a></li>
<li>Interrupt websocket reads during close by <a
href="https://github.com/MarcoPolo"><code>@​MarcoPolo</code></a> in <a
href="https://redirect.github.com/libp2p/go-libp2p/pull/3496">libp2p/go-libp2p#3496</a></li>
<li>fix(webrtc): cap remote addresses per ufrag by <a
href="https://github.com/lidel"><code>@​lidel</code></a> in <a
href="https://redirect.github.com/libp2p/go-libp2p/pull/3500">libp2p/go-libp2p#3500</a></li>
<li>Add ability to pass through TLS options to the QUIC transport. by <a
href="https://github.com/MarcoPolo"><code>@​MarcoPolo</code></a> in <a
href="https://redirect.github.com/libp2p/go-libp2p/pull/3481">libp2p/go-libp2p#3481</a></li>
<li>p2p/protocol/identify: bound the number of protocols accepted from
peers by <a
href="https://github.com/Sahil-4555"><code>@​Sahil-4555</code></a> in <a
href="https://redirect.github.com/libp2p/go-libp2p/pull/3501">libp2p/go-libp2p#3501</a></li>
<li>fix holepunch shutdown deadlock on canceled address discovery by <a
href="https://github.com/Sahil-4555"><code>@​Sahil-4555</code></a> in <a
href="https://redirect.github.com/libp2p/go-libp2p/pull/3504">libp2p/go-libp2p#3504</a></li>
<li>refactor(swarm): move the connected / disconnected callbacks into
the events emitter by <a
href="https://github.com/sukunrt"><code>@​sukunrt</code></a> in <a
href="https://redirect.github.com/libp2p/go-libp2p/pull/3503">libp2p/go-libp2p#3503</a></li>
<li>feat(autonatv2): expose AllowPrivateAddrs via an Option by <a
href="https://github.com/gmelodie"><code>@​gmelodie</code></a> in <a
href="https://redirect.github.com/libp2p/go-libp2p/pull/3513">libp2p/go-libp2p#3513</a></li>
<li>feat(websocket): share port with HTTP handler by <a
href="https://github.com/lidel"><code>@​lidel</code></a> in <a
href="https://redirect.github.com/libp2p/go-libp2p/pull/3509">libp2p/go-libp2p#3509</a></li>
<li>http/auth: close intermediate peer ID auth handshake responses by <a
href="https://github.com/Sahil-4555"><code>@​Sahil-4555</code></a> in <a
href="https://redirect.github.com/libp2p/go-libp2p/pull/3510">libp2p/go-libp2p#3510</a></li>
<li>feat(webrtc): stable /certhash across restarts by <a
href="https://github.com/lidel"><code>@​lidel</code></a> in <a
href="https://redirect.github.com/libp2p/go-libp2p/pull/3512">libp2p/go-libp2p#3512</a></li>
<li>chore: update autotls example to p2p-forge v0.9.1 by <a
href="https://github.com/lidel"><code>@​lidel</code></a> in <a
href="https://redirect.github.com/libp2p/go-libp2p/pull/3521">libp2p/go-libp2p#3521</a></li>
<li>feat(webrtc): support webrtc-direct v2 by <a
href="https://github.com/lidel"><code>@​lidel</code></a> in <a
href="https://redirect.github.com/libp2p/go-libp2p/pull/3520">libp2p/go-libp2p#3520</a></li>
<li>fix: resolve concurrency bugs in eventbus and webtransport by <a
href="https://github.com/Sahil-4555"><code>@​Sahil-4555</code></a> in <a
href="https://redirect.github.com/libp2p/go-libp2p/pull/3518">libp2p/go-libp2p#3518</a></li>
<li>fix(basichost): sort confirmed addrs by <a
href="https://github.com/lidel"><code>@​lidel</code></a> in <a
href="https://redirect.github.com/libp2p/go-libp2p/pull/3526">libp2p/go-libp2p#3526</a></li>
<li>fix(basichost): fix some bugs in addrs reachability manager by <a
href="https://github.com/sukunrt"><code>@​sukunrt</code></a> in <a
href="https://redirect.github.com/libp2p/go-libp2p/pull/3528">libp2p/go-libp2p#3528</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a
href="https://github.com/chiragsoni81245"><code>@​chiragsoni81245</code></a>
made their first contribution in <a
href="https://redirect.github.com/libp2p/go-libp2p/pull/3482">libp2p/go-libp2p#3482</a></li>
<li><a href="https://github.com/rvagg"><code>@​rvagg</code></a> made
their first contribution in <a
href="https://redirect.github.com/libp2p/go-libp2p/pull/3498">libp2p/go-libp2p#3498</a></li>
<li><a
href="https://github.com/Sahil-4555"><code>@​Sahil-4555</code></a> made
their first contribution in <a
href="https://redirect.github.com/libp2p/go-libp2p/pull/3501">libp2p/go-libp2p#3501</a></li>
<li><a href="https://github.com/gmelodie"><code>@​gmelodie</code></a>
made their first contribution in <a
href="https://redirect.github.com/libp2p/go-libp2p/pull/3513">libp2p/go-libp2p#3513</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/libp2p/go-libp2p/compare/v0.48.0...v0.49.0">https://github.com/libp2p/go-libp2p/compare/v0.48.0...v0.49.0</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li>See full diff in <a
href="https://github.com/libp2p/go-libp2p/commits/v0.49.0">compare
view</a></li>
</ul>
</details>
<br />


Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

<!-- codesmith:footer -->
---
<a
href="https://app.blacksmith.sh/bacalhau-project/codesmith/bacalhau/pr/5391"><picture><source
media="(prefers-color-scheme: dark)"
srcset="https://pr-comments-assets.blacksmith.sh/codesmith/view-with-codesmith-dark-v2.svg"><source
media="(prefers-color-scheme: light)"
srcset="https://pr-comments-assets.blacksmith.sh/codesmith/view-with-codesmith-light-v2.svg"><img
alt="View with [code]smith"
src="https://pr-comments-assets.blacksmith.sh/codesmith/view-with-codesmith-dark-v2.svg"></picture></a>
<a
href="https://backend.blacksmith.sh/track/enable-autofix?expires=1788246566&installation_model_id=427922&pr_number=5391&repository=bacalhau-project%2Fbacalhau&return_to=https%3A%2F%2Fgithub.com%2Fbacalhau-project%2Fbacalhau%2Fpull%2F5391&signature=82014664b0399c6b40f90c58f74fe3b1fc7c60f2fdb639d8498e1685af47cfbe"><picture><source
media="(prefers-color-scheme: dark)"
srcset="https://pr-comments-assets.blacksmith.sh/codesmith/autofix-with-codesmith-dark.svg"><source
media="(prefers-color-scheme: light)"
srcset="https://pr-comments-assets.blacksmith.sh/codesmith/autofix-with-codesmith-light.svg"><img
alt="Autofix with [code]smith"
src="https://pr-comments-assets.blacksmith.sh/codesmith/autofix-with-codesmith-dark.svg"></picture></a>
<sup>Need help on this PR? Tag <code>@codesmith-bot</code> with what you
need. Autofix is disabled.</sup>

<!-- codesmith:autofix:disabled -->
<!-- /codesmith:footer -->

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Author: dependabot[bot]

go.mod

@@ -5,20 +5,20 @@ go 1.26.5
 require (
 	github.com/BTBurke/k8sresource v1.2.0
 	github.com/Masterminds/semver v1.5.0
-	github.com/MicahParks/keyfunc/v3 v3.8.0
-	github.com/aws/aws-sdk-go-v2 v1.43.0
-	github.com/aws/aws-sdk-go-v2/config v1.32.31
-	github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.18.31
-	github.com/aws/aws-sdk-go-v2/feature/s3/manager v1.22.35
-	github.com/aws/aws-sdk-go-v2/service/s3 v1.106.0
-	github.com/aws/smithy-go v1.27.4
+	github.com/MicahParks/keyfunc/v3 v3.8.1
+	github.com/aws/aws-sdk-go-v2 v1.43.2
+	github.com/aws/aws-sdk-go-v2/config v1.32.33
+	github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.18.33
+	github.com/aws/aws-sdk-go-v2/feature/s3/manager v1.22.37
+	github.com/aws/aws-sdk-go-v2/service/s3 v1.106.2
+	github.com/aws/smithy-go v1.27.5
 	github.com/bmatcuk/doublestar/v4 v4.10.0
 	github.com/c2h5oh/datasize v0.0.0-20220606134207-859f65c6625b
 	github.com/containerd/errdefs v1.0.0
 	github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc
 	github.com/denisbrodbeck/machineid v1.0.1
 	github.com/docker/docker v28.5.2+incompatible
-	github.com/docker/go-connections v0.8.0
+	github.com/docker/go-connections v0.8.1
 	github.com/dylibso/observe-sdk/go v0.0.0-20240828172851-9145d8ad07e1
 	github.com/fatih/structs v1.1.0
 	github.com/ghodss/yaml v1.0.0
@@ -30,10 +30,10 @@ require (
 	github.com/gorilla/websocket v1.5.4-0.20250319132907-e064f32e3674
 	github.com/hashicorp/go-retryablehttp v0.7.8
 	github.com/imdario/mergo v0.3.16
-	github.com/ipfs/boxo v0.42.0
+	github.com/ipfs/boxo v0.42.1
 	github.com/ipfs/go-cid v0.6.2
 	github.com/ipfs/go-ipld-format v0.6.4
-	github.com/ipfs/go-unixfsnode v1.10.5
+	github.com/ipfs/go-unixfsnode v1.10.6
 	github.com/ipfs/kubo v0.42.0
 	github.com/ipld/go-car/v2 v2.17.0
 	github.com/ipld/go-codec-dagpb v1.7.0
@@ -42,7 +42,7 @@ require (
 	github.com/joho/godotenv v1.5.1
 	github.com/labstack/echo/v4 v4.15.4
 	github.com/lestrrat-go/jwx v1.2.31
-	github.com/libp2p/go-libp2p v0.48.1-0.20260709142922-ec408fcc60c9
+	github.com/libp2p/go-libp2p v0.49.0
 	github.com/mattn/go-isatty v0.0.24
 	github.com/mitchellh/go-wordwrap v1.0.1
 	github.com/multiformats/go-multiaddr v0.16.1
@@ -89,23 +89,23 @@ require (
 
 require (
 	github.com/KyleBanks/depth v1.2.1 // indirect
-	github.com/MicahParks/jwkset v0.11.0 // indirect
+	github.com/MicahParks/jwkset v0.11.1 // indirect
 	github.com/agnivade/levenshtein v1.2.1 // indirect
 	github.com/andybalholm/brotli v1.1.1 // indirect
 	github.com/antithesishq/antithesis-sdk-go v0.7.0-default-no-op // indirect
-	github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream v1.7.14 // indirect
-	github.com/aws/aws-sdk-go-v2/credentials v1.19.30 // indirect
-	github.com/aws/aws-sdk-go-v2/internal/configsources v1.4.31 // indirect
-	github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.7.31 // indirect
-	github.com/aws/aws-sdk-go-v2/internal/v4a v1.4.32 // indirect
-	github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.13.13 // indirect
-	github.com/aws/aws-sdk-go-v2/service/internal/checksum v1.9.24 // indirect
-	github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.13.31 // indirect
-	github.com/aws/aws-sdk-go-v2/service/internal/s3shared v1.19.32 // indirect
-	github.com/aws/aws-sdk-go-v2/service/signin v1.5.0 // indirect
-	github.com/aws/aws-sdk-go-v2/service/sso v1.33.0 // indirect
-	github.com/aws/aws-sdk-go-v2/service/ssooidc v1.38.0 // indirect
-	github.com/aws/aws-sdk-go-v2/service/sts v1.45.0 // indirect
+	github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream v1.7.15 // indirect
+	github.com/aws/aws-sdk-go-v2/credentials v1.19.32 // indirect
+	github.com/aws/aws-sdk-go-v2/internal/configsources v1.4.33 // indirect
+	github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.7.33 // indirect
+	github.com/aws/aws-sdk-go-v2/internal/v4a v1.4.34 // indirect
+	github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.13.14 // indirect
+	github.com/aws/aws-sdk-go-v2/service/internal/checksum v1.9.26 // indirect
+	github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.13.33 // indirect
+	github.com/aws/aws-sdk-go-v2/service/internal/s3shared v1.19.34 // indirect
+	github.com/aws/aws-sdk-go-v2/service/signin v1.5.2 // indirect
+	github.com/aws/aws-sdk-go-v2/service/sso v1.33.2 // indirect
+	github.com/aws/aws-sdk-go-v2/service/ssooidc v1.38.2 // indirect
+	github.com/aws/aws-sdk-go-v2/service/sts v1.45.2 // indirect
 	github.com/cenkalti/backoff/v5 v5.0.3 // indirect
 	github.com/clipperhouse/uax29/v2 v2.6.0 // indirect
 	github.com/containerd/errdefs/pkg v0.3.0 // indirect
@@ -219,8 +219,8 @@ require (
 	github.com/ipfs/go-ipld-cbor v0.2.1 // indirect
 	github.com/ipfs/go-ipld-legacy v0.3.0 // indirect
 	github.com/ipfs/go-metrics-interface v0.3.0 // indirect
-	github.com/klauspost/compress v1.18.7 // indirect
-	github.com/klauspost/cpuid/v2 v2.3.0 // indirect
+	github.com/klauspost/compress v1.19.1 // indirect
+	github.com/klauspost/cpuid/v2 v2.4.0 // indirect
 	github.com/libp2p/go-buffer-pool v0.1.0 // indirect
 	github.com/libp2p/go-cidranger v1.1.0 // indirect
 	github.com/libp2p/go-libp2p-asn-util v0.4.1 // indirect
@@ -249,10 +249,10 @@ require (
 	github.com/petar/GoLLRB v0.0.0-20210522233825-ae3b015fd3e9 // indirect
 	github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2 // indirect
 	github.com/polydawn/refmt v0.90.0 // indirect
-	github.com/prometheus/client_golang v1.23.2 // indirect
+	github.com/prometheus/client_golang v1.24.1 // indirect
 	github.com/prometheus/client_model v0.6.2 // indirect
-	github.com/prometheus/common v0.67.5 // indirect
-	github.com/prometheus/procfs v0.20.1 // indirect
+	github.com/prometheus/common v0.70.1 // indirect
+	github.com/prometheus/procfs v0.21.1 // indirect
 	github.com/rs/cors v1.11.1 // indirect
 	github.com/samber/lo v1.53.0
 	github.com/spaolacci/murmur3 v1.1.0 // indirect