build(deps): bump the root-go-modules group with 8 updates

[dependabot]

Bumps the root-go-modules group with 8 updates:

Package	From	To
github.com/aws/aws-sdk-go-v2	1.42.0	1.47.0
github.com/aws/aws-sdk-go-v2/config	1.32.24	1.33.5
github.com/aws/aws-sdk-go-v2/credentials	1.19.23	1.20.5
github.com/aws/aws-sdk-go-v2/service/s3	1.103.3	1.113.1
github.com/caddyserver/certmagic	0.25.3	0.25.4
go.uber.org/zap	1.27.1	1.28.0
golang.org/x/net	0.56.0	0.59.0
golang.org/x/sys	0.46.0	0.48.0

Updates github.com/aws/aws-sdk-go-v2 from 1.42.0 to 1.47.0

Commits

• b189f38 Release 2026-09-09
• 0905d5f Regenerated Clients
• 9cc4bc5 Update API model
• 126fe2d fix GetObject deadlock (#3554)
• 5126885 Remove retry metrics header middleware (#3546)
• bd8de4d Expand S3 operations that check for an error inside an HTTP 200 response (wav...
• 394ee64 Release 2026-09-08
• 3c9cb8b Regenerated Clients
• 6f85682 Update endpoints model
• cc3942b Update API model
• Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/config from 1.32.24 to 1.33.5

Commits

• 4e0240a Release 2026-09-14
• c2d42df Regenerated Clients
• 1548c19 Update endpoints model
• 9fab903 Update API model
• a7eaa10 Release 2026-09-11
• c6f53e8 Regenerated Clients
• e80f4fa Update endpoints model
• 55b26d7 Update API model
• 113bc91 Release 2026-09-10
• 0b5dc66 Regenerated Clients
• Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/credentials from 1.19.23 to 1.20.5

Commits

• f2706c8 Release 2023-12-08
• 1dac0c9 Regenerated Clients
• cbd9216 Update API model
• c7357bb fix: reinstate presence of retryer when functional opts run but still respect...
• c5c34b3 fix: translation of ini service sections into shared config (#2416)
• b3c7fbf update express cache key (#2414)
• 9b90af4 fix: add non-vhostable buckets to path when using legacy endpoint resolver (#...
• 0d643a8 Release 2023-12-07
• e38b534 Regenerated Clients
• f394daf Update SDK's smithy-go dependency to v1.19.0
• Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/service/s3 from 1.103.3 to 1.113.1

Commits

• a7eaa10 Release 2026-09-11
• c6f53e8 Regenerated Clients
• e80f4fa Update endpoints model
• 55b26d7 Update API model
• 113bc91 Release 2026-09-10
• 0b5dc66 Regenerated Clients
• 625a568 Update endpoints model
• 9ab2e92 Update API model
• f0c4cca Don't notify on draft PR until ready for review (#3549)
• b189f38 Release 2026-09-09
• Additional commits viewable in compare view

Updates github.com/caddyserver/certmagic from 0.25.3 to 0.25.4

Commits

• cf6f57d handshake: propagate leader load/obtain outcome to all waiters (#387)
• 7475593 Fix jm.names and jm.activeWorkees leak (#385)
• 9f98c96 Preserve DNS provider record data for cleanup (#382)
• 49b3509 ocsp: add responder authorization regression test (#383)
• 9b6be22 Support listening on file descriptors (#380)
• See full diff in compare view

Updates go.uber.org/zap from 1.27.1 to 1.28.0

Release notes

Sourced from go.uber.org/zap's releases.

v1.28.0

Enhancements:

• #1534[]: Add zapcore.CheckPreWriteHook and CheckedEntry.Before method for transforming entries before they are written to any Cores.

#1534: uber-go/zap#1534

Changelog

Sourced from go.uber.org/zap's changelog.

1.28.0 (27 Apr 2026)

Enhancements:

• #1534[]: Add zapcore.CheckPreWriteHook and CheckedEntry.Before method for transforming entries before they are written to any Cores.

Commits

• 5b81b37 release v1.28.0 (#1547)
• 0ab0d5a zapcore: Add PreWriteHook for transforming entries before write (#1534)
• d278c59 [chore] CI: test on Go 1.26 (#1535)
• 16fb16b chore(dep): replace archived gopkg.in/yaml.v3 with officially maintained go.y...
• See full diff in compare view

Updates golang.org/x/net from 0.56.0 to 0.59.0

Commits

• 540d04c go.mod: update golang.org/x dependencies
• 20eef7f quic: clear fast-path receive buffer on stream reset
• c23af1b internal/http3: fix compilation error due to missed symbol name update
• eda109f internal/http3: send appropriate error codes in STOP_SENDING frames
• 12e0501 internal/http3: server header size limits
• d89285e quic: add Stream.StopSending, and rework stream/application errors
• d34deae quic: ensure Endpoint.Close waits for connection loops to exit
• 55577aa http2: use IDNA Lookup profile, not raw Punycode translation
• b22627e internal/http3: handle a nil TLSConfig in newQUICConfig
• 6e98b0d internal/http3: report endpoint creation errors from initEndpoint
• Additional commits viewable in compare view

Updates golang.org/x/sys from 0.46.0 to 0.48.0

Commits

• 613e257 cpu: add riscv64 hwprobe drift test
• 6f7b10f unix: add MLOCK_ONFAULT constant
• 663e7c8 cpu: add basic support for GOARCH=sparc64
• de5f12f cpu: add ppc64le POWER10 detection
• 80e8acf unix: run go fix
• 1e3c182 unix: add IPMI interface
• d429e20 unix: stop generating sparc termbits from the generic header
• bd3bddf unix: add missing HWTSTAMP_* constants
• e812f53 windows: add SO_SNDTIMEO constant for socket options
• f6989c5 unix: align Ifreq so its union accessors cannot fault
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions