[dependabot]

Bumps the all-dependencies group with 6 updates in the / directory:

Package	From	To
github.com/aws/aws-sdk-go-v2/config	1.33.4	1.33.5
github.com/aws/aws-sdk-go-v2/credentials	1.20.4	1.20.5
github.com/aws/aws-sdk-go-v2/service/kms	1.60.0	1.61.0
github.com/aws/aws-sdk-go-v2/service/secretsmanager	1.49.0	1.50.0
github.com/olekukonko/tablewriter	1.1.4	1.1.5
google.golang.org/grpc	1.83.2	1.84.0

Updates github.com/aws/aws-sdk-go-v2/config from 1.33.4 to 1.33.5

Commits

• 4e0240a Release 2026-09-14
• c2d42df Regenerated Clients
• 1548c19 Update endpoints model
• 9fab903 Update API model
• a7eaa10 Release 2026-09-11
• c6f53e8 Regenerated Clients
• e80f4fa Update endpoints model
• 55b26d7 Update API model
• 113bc91 Release 2026-09-10
• 0b5dc66 Regenerated Clients
• Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/credentials from 1.20.4 to 1.20.5

Commits

• f2706c8 Release 2023-12-08
• 1dac0c9 Regenerated Clients
• cbd9216 Update API model
• c7357bb fix: reinstate presence of retryer when functional opts run but still respect...
• c5c34b3 fix: translation of ini service sections into shared config (#2416)
• b3c7fbf update express cache key (#2414)
• 9b90af4 fix: add non-vhostable buckets to path when using legacy endpoint resolver (#...
• See full diff in compare view

Updates github.com/aws/aws-sdk-go-v2/service/kms from 1.60.0 to 1.61.0

Commits

• b4c0124 Release 2024-08-28
• 1cd39e0 Regenerated Clients
• 854f863 Update endpoints model
• 77152bc Update API model
• 9c621d1 Add a PresignPostObject to the PresignClient for s3.PutObject operation...
• 7e17fb5 Release 2024-08-27
• 8906cd2 Regenerated Clients
• 4acfe2e Update API model
• a6e48ac Release 2024-08-26
• 7d62062 Regenerated Clients
• Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/service/secretsmanager from 1.49.0 to 1.50.0

Commits

• 4334b43 Release 2024-02-16
• 9e29187 Regenerated Clients
• f672c49 Update endpoints model
• 7f93578 Update API model
• da7bcda feat: add client config passthrough to waiter opts (#2499)
• 1bb0482 Release 2024-02-15
• cc83a2b Regenerated Clients
• 7f44d99 Update endpoints model
• 4280ccb Update API model
• a264562 fix awsjson error deserialization to not expect string code (#2489)
• Additional commits viewable in compare view

Updates github.com/olekukonko/tablewriter from 1.1.4 to 1.1.5

Commits

• 5f0c87a change readme to v1.1.5
• 8535cd2 Merge pull request #331 from olekukonko/makawhy
• 8db545f markdown game
• 569d938 Merge pull request #330 from olekukonko/makawhy
• ce371fa Merge pull request #326 from olekukonko/makawhy
• e1d22bb Merge pull request #329 from team-humaki/fix/global-width-wrap-split
• c9a710f Merge pull request #327 from youdie006/wrapwords-last-word-hang
• cbd4eb4 wrap: split Widths.Global across columns
• 2a7896c Broaden the WrapWords table to the shapes around the last-word case
• cb595f4 Terminate WrapWords when the last word is wider than the limit
• Additional commits viewable in compare view

Updates google.golang.org/grpc from 1.83.2 to 1.84.0

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.84.0

Behavior Changes

• stats/otel: The grpc.lb.pick_first.* metrics have been removed and replaced with grpc.subchannel.* metrics. See gRFC A94 for more details. (#9215)

New Features

• xds: Add support for contains_match in route header matchers. (#9223)
  • Special Thanks: @​nvxbug

Bug Fixes

• client: Fix a bug where a ClientConn could get permanently stuck in IDLE when an RPC was canceled during stream creation. Previously, such cancellations triggered stream cleanup twice, corrupting the channel's idleness state and causing subsequent RPCs to fail with deadline exceeded errors. (#9191)
  • Special Thanks: @​utkuozdemir
• client: Fix a bug where non-gRPC HTTP responses ending with an empty DATA frame failed the RPC with status code Internal instead of preserving the HTTP-mapped status code and response body. (#9217)
  • Special Thanks: @​chengxilo
• credentials: Validate metadata returned by per-RPC credentials, failing the RPC with status code Internal if invalid keys or values are found. Previously, invalid metadata from credentials was sent to the server in outgoing HTTP/2 requests. (#9202)
  • Special Thanks: @​buger
• credentials/sts: Prevent potential token leakage by disallowing HTTP redirects during STS token exchange. Previously, 3xx redirects were followed automatically, replaying the request body containing authentication tokens to the redirect destination. (#9299)
  • Special Thanks: @​nvxbug
• randomsubsetting: Ignore endpoints that contain no addresses. Previously, this could cause the policy to panic while computing hashes. (#9259)
  • Special Thanks: @​fallintoplace
• stats/otel: Ensure method names are populated in trace spans when metrics are disabled. Previously, running with tracing enabled and metrics disabled resulted in server trace spans lacking the RPC method name (recording only "Recv."). (#9262)
• transport: Return io.ErrUnexpectedEOF when EOF is encountered after partial header or message body reads. Previously, partial reads could return a plain io.EOF, failing to distinguish truncated data from a clean end of stream. (#9204)
  • Special Thanks: @​buger
• transport: Validate metadata supplied by balancers (in PickResult.Metadata) and resolver addresses, failing the RPC with status code Internal if invalid keys or values are found. Previously, invalid metadata from these sources was sent to the server in outgoing HTTP/2 requests. (#9203)
  • Special Thanks: @​buger
• xds: Fix a rare corner case that could prevent a cluster from being removed when it is no longer in use. (#9140)
• xds: Fix panic during route matching for routes containing header matchers with empty exact_match strings. (#9223)
  • Special Thanks: @​nvxbug
• xds: Reject routes containing header matchers with empty prefix_match or suffix_match strings. Previously, this caused a panic during route matching. (#9223)
  • Special Thanks: @​nvxbug
• xds: Fix EDS drop policies being applied at a much lower rate than configured due to an integer overflow. (#9257)
  • Special Thanks: @​nvxbug
• xds: Reject EDS resources containing drop policies with unsupported denominators. Previously, such resources caused the client to panic when calculating drop rates. (#9218)
  • Special Thanks: @​nvxbug
• xds/rbac: Reject RBAC configurations containing nested Principal or Permission rules with :scheme or grpc- prefixed header matchers. Previously, such configurations could cause DENY policies to fail open. (#9258)
  • Special Thanks: @​nvxbug
• xds/rbac: Rewrite host header matchers to :authority in nested Principal and Permission rules. Previously, this rewrite only applied to top-level rules, causing nested host matchers to never match incoming requests and DENY policies to fail open. (#9258)
  • Special Thanks: @​nvxbug
• xds/rbac: Reject CidrRanges with an unset prefix length. Previously, an omitted prefix_len field caused a panic during RBAC configuration parsing. (#9250)
  • Special Thanks: @​nvxbug

Performance Improvements

• transport: Avoid a heap allocation when flushing shared write buffers. (#9233)
  • Special Thanks: @​zaidoon1
• credentials/alts: Support dynamic frame size negotiation and add the GRPC_GO_EXPERIMENTAL_ALTS_MAX_FRAME_SIZE environment variable (default 4KiB, max 512KiB) to configure the maximum ALTS record frame size. (#9268)

Commits

• e84aa5a Change version to 1.84.0 (#9324)
• c5ae88d Cherrypick #9204 and #9321 to v1.84.x (#9407)
• a592f6a Cherrypick #9351 and #9404 to v1.84.x (#9408)
• d5a4111 cherry-pick #9365 to v1.84.x (#9370)
• 89d55e0 cherry-pick #9346 to v1.84.x (#9372)
• 8a9f866 Cherry-pick #9332 to v1.84.x (#9338)
• f8b54e7 Cherry-pick #9331 to v1.84.x (#9334)
• 30ce1d5 xds: support injecting bootstrap and server config into HTTP filter config pa...
• 54c743e extproc : wait for async RPC to complete in test (#9311)
• 538bb2f endpointsharding: decouple locking, and simplify ChildState API (#9290)
• Additional commits viewable in compare view