chore(deps): bump the go-dependencies group with 3 updates

[dependabot]

Bumps the go-dependencies group with 3 updates: github.com/aws/aws-sdk-go-v2/service/ecs, google.golang.org/api and google.golang.org/grpc.

Updates github.com/aws/aws-sdk-go-v2/service/ecs from 1.79.1 to 1.80.0

Commits

• c69bd7e Release 2025-05-29
• 21fdc96 Regenerated Clients
• 2a4ab82 Update API model
• f444129 Release 2025-05-28
• 4ba713d Regenerated Clients
• 9846278 Update endpoints model
• f1b0017 Update API model
• 223d488 Remove smoke tests on sunset service (#3098)
• 1cfa85a Release 2025-05-27
• d078e8a Regenerated Clients
• Additional commits viewable in compare view

Updates google.golang.org/api from 0.278.0 to 0.279.0

Release notes

Sourced from google.golang.org/api's releases.

v0.279.0

0.279.0 (2026-05-12)

Features

• all: Auto-regenerate discovery clients (#3585) (09db0e3)
• all: Auto-regenerate discovery clients (#3587) (e87e376)
• all: Auto-regenerate discovery clients (#3590) (d4241ea)

Changelog

Sourced from google.golang.org/api's changelog.

0.279.0 (2026-05-12)

Features

• all: Auto-regenerate discovery clients (#3585) (09db0e3)
• all: Auto-regenerate discovery clients (#3587) (e87e376)
• all: Auto-regenerate discovery clients (#3590) (d4241ea)

Commits

• e446d4c chore(main): release 0.279.0 (#3586)
• d4241ea feat(all): auto-regenerate discovery clients (#3590)
• 8452ed1 chore(all): update module github.com/go-git/go-git/v5 to v5.19.0 [SECURITY] (...
• e87e376 feat(all): auto-regenerate discovery clients (#3587)
• 09db0e3 feat(all): auto-regenerate discovery clients (#3585)
• See full diff in compare view

Updates google.golang.org/grpc from 1.81.0 to 1.81.1

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.81.1

Security

• xds/rbac: Fix a potential authorization bypass caused by incorrectly falling through URI/DNS SANs to Subject Distinguished Name (DN) when matching the authenticated principal name. With this fix, only the first non-empty identity source will be used, as per gRFC A41. (#9111)
  • Special Thanks: @​al4an444

Bug Fixes

• otel: Segregate client and server RPC information used for metrics and traces, to avoid one overwriting the other. (#9081)

Commits

• caf0772 Change version from 1.81.1-dev to 1.81.1 (#9122)
• 6ccbeeb Cherry-pick #9111 into v1.81.x (#9121)
• b33c29e Cherry-pick #9081 into v1.81.x (#9102)
• c45fae6 Change version to 1.81.1-dev (#9063)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[claude]

Claude finished @dependabot[bot]'s task in 56s —— View job

---

Dependency Upgrade Review

• Review changed files (go.mod, go.sum)
• Analyze each dependency upgrade for breaking changes
• Search codebase for usage of each dependency
• Post final review

---

All three upgrades look safe to merge. Here's the breakdown:

1. aws-sdk-go-v2/service/ecs v1.79.1 → v1.80.0 (minor) — ✅ Safe

Used in internal/aws/aws.go for ECS snapshot operations (ListClusters, DescribeClusters, ListServices, DescribeServices, ListTasks, DescribeTasks). The AWS SDK Go v2 follows strict semver — minor bumps only add new API operations or fields. The commits are "Regenerated Clients" and "Update API model" with no breaking changes. No action needed.

2. google.golang.org/api v0.278.0 → v0.279.0 (minor) — ✅ Safe

Used only in internal/cloudrun/cloudrun.go via google.golang.org/api/iterator (specifically iterator.Done). The release notes show only auto-regenerated discovery clients. The iterator package surface is extremely stable and untouched by this release.

3. google.golang.org/grpc v1.81.0 → v1.81.1 (patch) — ✅ Safe (security fix)

Used in internal/cloudrun/errors.go and tests via grpc/codes and grpc/status (specifically status.FromError() and code constants like codes.Unauthenticated, codes.PermissionDenied, codes.NotFound). This is a security patch fixing an xds/rbac authorization bypass (URI/DNS SAN fallthrough to Subject DN). While this repo doesn't use xds/rbac directly, the patch is low-risk and good practice to adopt. Also includes an otel client/server metrics segregation bug fix.

No breaking changes, no API surface changes, no new defaults that could affect behavior. Standard dependency hygiene — approve and merge.