build(deps): bump the aws group across 2 directories with 4 updates

[dependabot]

Bumps the aws group with 2 updates in the / directory: github.com/aws/aws-sdk-go-v2/service/ec2 and github.com/aws/aws-sdk-go-v2/service/s3.
Bumps the aws group with 3 updates in the /sidecar directory: github.com/aws/aws-sdk-go-v2/service/s3, github.com/aws/aws-sdk-go-v2/feature/s3/transfermanager and github.com/aws/smithy-go.

Updates github.com/aws/aws-sdk-go-v2/service/ec2 from 1.336.1 to 1.338.1

Commits

• 4e901eb Release 2026-10-01
• e65b6c6 Regenerated Clients
• 0fb4a76 Update endpoints model
• d4a0d30 Update API model
• 171d404 Add s3 transfermanager downloader fuzzy test (#3569)
• 2edd815 Parametrize which protocl we use on eventstream tests (#3573)
• 55377d1 Release 2026-09-30
• 7418acf Regenerated Clients
• 8e21aaa Update endpoints model
• 9b78075 Update API model
• Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/service/s3 from 1.113.4 to 1.114.0

Commits

• 55377d1 Release 2026-09-30
• 7418acf Regenerated Clients
• 8e21aaa Update endpoints model
• 9b78075 Update API model
• 404700d Release 2026-09-29
• bc6eb75 Regenerated Clients
• 51ae28b Update API model
• 2babe29 Update smithy-go workflow behavior for forks (#3566)
• 4b034e5 Release 2026-09-28
• f75fa56 Regenerated Clients
• Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/service/s3 from 1.113.4 to 1.114.0

Commits

• 55377d1 Release 2026-09-30
• 7418acf Regenerated Clients
• 8e21aaa Update endpoints model
• 9b78075 Update API model
• 404700d Release 2026-09-29
• bc6eb75 Regenerated Clients
• 51ae28b Update API model
• 2babe29 Update smithy-go workflow behavior for forks (#3566)
• 4b034e5 Release 2026-09-28
• f75fa56 Regenerated Clients
• Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/service/s3 from 1.113.4 to 1.114.0

Commits

• 55377d1 Release 2026-09-30
• 7418acf Regenerated Clients
• 8e21aaa Update endpoints model
• 9b78075 Update API model
• 404700d Release 2026-09-29
• bc6eb75 Regenerated Clients
• 51ae28b Update API model
• 2babe29 Update smithy-go workflow behavior for forks (#3566)
• 4b034e5 Release 2026-09-28
• f75fa56 Regenerated Clients
• Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/feature/s3/transfermanager from 0.4.10 to 0.4.13

Commits

• 4e901eb Release 2026-10-01
• e65b6c6 Regenerated Clients
• 0fb4a76 Update endpoints model
• d4a0d30 Update API model
• 171d404 Add s3 transfermanager downloader fuzzy test (#3569)
• 2edd815 Parametrize which protocl we use on eventstream tests (#3573)
• 55377d1 Release 2026-09-30
• 7418acf Regenerated Clients
• 8e21aaa Update endpoints model
• 9b78075 Update API model
• Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/service/s3 from 1.113.4 to 1.114.0

Commits

• 55377d1 Release 2026-09-30
• 7418acf Regenerated Clients
• 8e21aaa Update endpoints model
• 9b78075 Update API model
• 404700d Release 2026-09-29
• bc6eb75 Regenerated Clients
• 51ae28b Update API model
• 2babe29 Update smithy-go workflow behavior for forks (#3566)
• 4b034e5 Release 2026-09-28
• f75fa56 Regenerated Clients
• Additional commits viewable in compare view

Updates github.com/aws/smithy-go from 1.28.1 to 1.28.2

Changelog

Sourced from github.com/aws/smithy-go's changelog.

Release (2026-10-06)

General Highlights

• Dependency Update: Updated to the latest SDK module versions

Module Highlights

• github.com/aws/smithy-go: v1.28.3
  • Bug Fix: Accept either casing of message/Message on modeled JSON error structures in schema-based deserialization, and emit the smithy.api#error trait in generated schemas
  • Bug Fix: Include the underlying error when logging failures to discard or close an HTTP response body

Release (2026-09-18)

General Highlights

• Dependency Update: Updated to the latest SDK module versions

Module Highlights

• github.com/aws/smithy-go: v1.28.2
  • Bug Fix: Avoid allocating a slice in ValidateEndpointHost by indexing into the hostname instead of using strings.Split.
  • Bug Fix: Fix event stream decode panic on unknown header value type.
  • Bug Fix: Fix schema-serde CBOR decode panic on malformed string/blob length.
  • Bug Fix: JoinPath keeps a trailing slash when the added path is a slash.

Release (2026-08-26)

General Highlights

• Dependency Update: Updated to the latest SDK module versions

Module Highlights

• github.com/aws/smithy-go: v1.28.1
  • Bug Fix: Fix broken AddLogger middleware since its insert point was removed.

Release (2026-08-25.2)

General Highlights

• Dependency Update: Updated to the latest SDK module versions

Module Highlights

• github.com/aws/smithy-go: v1.28.0
  • Feature: Set Content-Length inline when the request body is set via SetStream. The ComputeContentLength middleware is now deprecated.

Release (2026-08-25)

General Highlights

• Dependency Update: Updated to the latest SDK module versions

Module Highlights

• github.com/aws/smithy-go: v1.27.10
  • Bug Fix: Fix a data race on the underlying writer when an event stream is closed while an event write is in flight.
  • Bug Fix: Restore draining the HTTP response body in CloseResponseBody to avoid issues with TCP connection reuse.

... (truncated)

Commits

• 9b28af0 Release 2026-09-18
• f59df88 Avoid slice allocation in ValidateEndpointHost (#705)
• 7c16d7f fix decode panic on event stream header type and bad cbor string/blob len (#713)
• c60819a fix initial-message race (#712)
• d05a672 fix v2 event streams orphaning the result channel on error paths in schema-se...
• fe95176 Revert "fix v2 event streams orphaning the result channel on error paths in s...
• 9847245 fix v2 event streams orphaning the result channel on error paths in schema-serde
• 9eba49f Print stacktrace when smithy-build fails (#708)
• 959c6ab Keep a trailing slash when JoinPath right operand is a slash. (#698)
• d253285 update README
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[cursor]

PR Summary

Low Risk
Patch/minor dependency-only updates with no logic changes; typical smoke tests on EC2 peering and S3 (controller + sidecar transfers) are sufficient.

Overview
This PR only bumps AWS SDK v2 dependency versions in the root module and sidecar module; there are no application or test code changes.

In the root go.mod/go.sum, it updates service/ec2 (1.336.1 → 1.338.1), service/s3 (1.113.4 → 1.114.0), and the indirect smithy-go runtime (1.28.1 → 1.28.2). Those clients back existing EC2 peering and S3 object-store usage in the controller.

In sidecar, it aligns service/s3 and smithy-go to the same versions and bumps feature/s3/transfermanager (0.4.10 → 0.4.13), which powers the sidecar’s S3 upload/download path.

^{Reviewed by Cursor Bugbot for commit 446dfa6. Bugbot is set up for automated code reviews on this repo. Configure here.}

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.