chore(deps): bump the go-minor-patch group with 6 updates

[dependabot]

Bumps the go-minor-patch group with 6 updates:

Package	From	To
github.com/aws/aws-sdk-go-v2	1.41.9	1.41.12
github.com/aws/aws-sdk-go-v2/config	1.32.20	1.32.23
github.com/aws/aws-sdk-go-v2/service/secretsmanager	1.41.9	1.42.2
github.com/getkin/kin-openapi	0.139.0	0.140.0
github.com/jackc/pgx/v5	5.9.2	5.10.0
github.com/oracle/oci-go-sdk/v65	65.116.0	65.117.0

Updates github.com/aws/aws-sdk-go-v2 from 1.41.9 to 1.41.12

Commits

• 7146c2b Release 2026-06-04
• 5aef2fd Regenerated Clients
• f94c044 Update API model
• f00b205 bump to smithy-go v1.27.1 (#3434)
• c4ad7de drop service/internal/benchmark (#3433)
• 91eca46 Release 2026-06-03.2
• e9d9e15 Regenerated Clients
• def6a3a Update API model
• fa369bd Release 2026-06-03
• 960ee4d Regenerated Clients
• Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/config from 1.32.20 to 1.32.23

Commits

• 7146c2b Release 2026-06-04
• 5aef2fd Regenerated Clients
• f94c044 Update API model
• f00b205 bump to smithy-go v1.27.1 (#3434)
• c4ad7de drop service/internal/benchmark (#3433)
• 91eca46 Release 2026-06-03.2
• e9d9e15 Regenerated Clients
• def6a3a Update API model
• fa369bd Release 2026-06-03
• 960ee4d Regenerated Clients
• Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/service/secretsmanager from 1.41.9 to 1.42.2

Commits

• 435199f Release 2023-11-15
• fb0b312 Regenerated Clients
• 4a54427 Update SDK's smithy-go dependency to v1.17.0
• 679c88c Update endpoints model
• e635726 Update API model
• cf022e8 feat: sra identity&auth refactor (#2364)
• 1433025 Release 2023-11-14
• 34bafde Regenerated Clients
• 0d10d76 Update endpoints model
• fe8a6c1 Update API model
• Additional commits viewable in compare view

Updates github.com/getkin/kin-openapi from 0.139.0 to 0.140.0

Release notes

Sourced from github.com/getkin/kin-openapi's releases.

v0.140.0

What's Changed

• openapi3: document that a custom ReadFromURIFunc bypasses IsExternalRefsAllowed by @​reuvenharrison in getkin/kin-openapi#1191
• openapi3: remove deepcopy dependency by @​alexandear in getkin/kin-openapi#1193
• openapi3: remove decimal128 dependency by @​alexandear in getkin/kin-openapi#1194
• refactor: apply modernize fixes by @​alexandear in getkin/kin-openapi#1195
• openapi2,openapi3: replace marshmallow with encoding/json by @​alexandear in getkin/kin-openapi#1196
• docs: update GoDoc links to Go Reference by @​alexandear in getkin/kin-openapi#1197
• chore: bump jsonpointer to v0.22.5 by @​alexandear in getkin/kin-openapi#1198

Full Changelog: getkin/kin-openapi@v0.139.0...v0.140.0

Commits

• 5124898 chore: bump jsonpointer to v0.22.5 (#1198)
• 5ece4a3 docs: update GoDoc links to Go Reference (#1197)
• b8600c5 openapi2,openapi3: remove marshmallow dependency (#1196)
• 3a5ddcd refactor: apply modernize fixes (#1195)
• 742704d openapi3: remove decimal128 dependency (#1194)
• 368327b openapi3: remove deepcopy dependency (#1193)
• 4dc207c openapi3: document that a custom ReadFromURIFunc bypasses IsExternalRefsAllow...
• See full diff in compare view

Updates github.com/jackc/pgx/v5 from 5.9.2 to 5.10.0

Changelog

Sourced from github.com/jackc/pgx/v5's changelog.

5.10.0 (June 3, 2026)

This release includes a significant amount of hardening against malicious or compromised PostgreSQL servers, contributed by Sean Chittenden at CrowdStrike, Inc. This work bounds binary decoders against attacker-controlled message sizes, caps server-supplied SCRAM iteration counts, adds require_auth to restrict which authentication methods a server may use (mitigating downgrade attacks under sslmode=prefer), and ensures cancellation requests are sent over TLS when the original connection used TLS.

Features

• Add require_auth to restrict accepted server authentication methods (Sean Chittenden at CrowdStrike, Inc.)
• Add ParseConfigOptions.ConnStringAllowedKeys to restrict allowed connection string keys (Sean Chittenden at CrowdStrike, Inc.)
• Add StructArgs and StrictStructArgs for @-named queries (Tubelight30)
• Add ErrConnClosed sentinel error and unwrap it from connLockError (Charlie Tonneslan)
• pgxpool: check if connection is expired before acquire (arthurdotwork)

Security Hardening

• Encrypt CancelRequest connection when the primary connection used TLS (Sean Chittenden at CrowdStrike, Inc.)
• Cap server-supplied SCRAM iteration count (Sean Chittenden at CrowdStrike, Inc.)
• Default Frontend max message body length to ~1 GiB (Sean Chittenden at CrowdStrike, Inc.)
• Bound hstore binary decode against malicious server input (Sean Chittenden at CrowdStrike, Inc.)
• Bound array binary decode element length against remaining message bytes (Sean Chittenden at CrowdStrike, Inc.)
• Bound array element count against remaining message bytes (Sean Chittenden at CrowdStrike, Inc.)
• Bound range, multirange, and tsvector binary decoders (Sean Chittenden at CrowdStrike, Inc.)
• Document secure connection configuration (Sean Chittenden at CrowdStrike, Inc.)
• Fix panic on malformed geometric text; return an error instead (MaIII)

Fixes

• Fix scanning "char" (OID 18) into *string in binary format (luongs3)
• Fix handling of typed-nil driver.Valuer in array and composite codecs (Donncha Fahy)
• Fix CopyData.Data hex decoding in UnmarshalJSON (Charlie Tonneslan)
• Fix data race when context is cancelled during connect
• Fix parseKeywordValueSettings rejecting trailing whitespace (alliasgher)
• pgconn: preserve full error chain in normalizeTimeoutError (Charlie Tonneslan)
• pgconn: use a fresh context for the fallback connection in connectPreferred (Charlie Tonneslan)
• pgxpool: fix MaxLifetimeDestroyCount and ping order for acquire-time expiry check
• Add missing error check of rows.Err to load types (Jen Altavilla)

Commits

• 7293fb1 Update changelog for v5.10.0
• 1ade285 pgconn: document secure connection configuration
• b4d6d4d pgtype: bound range, multirange, and tsvector binary decoders
• 0639b37 pgconn: add ParseConfigOptions.ConnStringAllowedKeys
• b28e65b pgtype: bound array element count against remaining message bytes
• cd1f389 pgtype: bound array binary decode element length against remaining bytes
• ff27b5b pgtype: bound hstore binary decode against malicious server input
• a6002e1 pgproto3: default Frontend max message body length to ~1 GiB
• 44f6173 pgconn: cap server-supplied SCRAM iteration count
• 1a976f7 pgconn: add require_auth to restrict accepted server auth methods
• Additional commits viewable in compare view

Updates github.com/oracle/oci-go-sdk/v65 from 65.116.0 to 65.117.0

Release notes

Sourced from github.com/oracle/oci-go-sdk/v65's releases.

65.117.0

Added

• Support for Zero Trust Packet Routing (ZPR) security attributes for private endpoints in the Operations Insights service

• Support for Zero Trust Packet Routing (ZPR) security attributes for private endpoints in the Database Management service

• Support for multimodal image input and flagged modalities when applying guardrails in the Generative AI service

• Support for filtering incidents by last update time in the Cloud Incident Management service

• Support for Cloud Incident Management APIs without Customer Support Identifier (CSI) parameters in the Cloud Incident Management service

• Support for site IDs when creating and updating VMware BYOL registrations in the Oracle Cloud VMware Provisioning service

• Support for VMware Cloud Foundation (VCF) BYOL allocation IDs during ESXi host replacement and in-place upgrades in the Oracle Cloud VMware Provisioning service  

Breaking Changes

• The field Csi has been removed from the models CreateUserDetails, User, ListIncidentResourceTypesRequest, PutAttachmentRequest, ValidateUserRequest, CreateIncident, GetIncidentRequest, UpdateIncidentRequest, and ListIncidentRequest in the Customer Incident Management service

• The field CustomerSupportKey has been removed from the model TenancyInformation in the Customer Incident Management service

File Checksums (SHA256)

oci-go-sdk-65.117.0.zip 2333e8c49d2c2ce405c218aed2a03210b78027e786f91963397c7437b10881e9

Changelog

Sourced from github.com/oracle/oci-go-sdk/v65's changelog.

65.117.0 - 2026-06-02

Added

• Support for Zero Trust Packet Routing (ZPR) security attributes for private endpoints in the Operations Insights service
• Support for Zero Trust Packet Routing (ZPR) security attributes for private endpoints in the Database Management service
• Support for multimodal image input and flagged modalities when applying guardrails in the Generative AI service
• Support for filtering incidents by last update time in the Cloud Incident Management service
• Support for Cloud Incident Management APIs without Customer Support Identifier (CSI) parameters in the Cloud Incident Management service
• Support for site IDs when creating and updating VMware BYOL registrations in the Oracle Cloud VMware Provisioning service
• Support for VMware Cloud Foundation (VCF) BYOL allocation IDs during ESXi host replacement and in-place upgrades in the Oracle Cloud VMware Provisioning service  

Breaking Changes

• The field Csi has been removed from the models CreateUserDetails, User, ListIncidentResourceTypesRequest, PutAttachmentRequest, ValidateUserRequest, CreateIncident, GetIncidentRequest, UpdateIncidentRequest, and ListIncidentRequest in the Customer Incident Management service
• The field CustomerSupportKey has been removed from the model TenancyInformation in the Customer Incident Management service

Commits

• 0f39871 Releasing version 65.117.0
• ee69691 Merge remote-tracking branch 'scm/github' into release_2026-06-02
• 6c9c3b2 Releasing version 65.117.0
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions