build(deps): bump the gomod-minor-and-patch group across 1 directory with 7 updates

[dependabot]

Bumps the gomod-minor-and-patch group with 7 updates in the / directory:

Package	From	To
github.com/klauspost/compress	1.20.0	1.20.1
github.com/RoaringBitmap/roaring/v2	2.28.0	2.29.0
github.com/aws/aws-sdk-go-v2	1.47.0	1.47.1
github.com/aws/aws-sdk-go-v2/config	1.33.5	1.33.6
github.com/aws/aws-sdk-go-v2/credentials	1.20.5	1.20.6
github.com/aws/aws-sdk-go-v2/service/s3	1.113.1	1.114.0
github.com/ohler55/ojg	1.28.6	1.28.7

Updates github.com/klauspost/compress from 1.20.0 to 1.20.1

Release notes

Sourced from github.com/klauspost/compress's releases.

v1.20.1

What's Changed

• zstd: apply reset options to reused frame decoders by @​pellared in klauspost/compress#1226
• flate: Report unexpected EOF for truncated Huffman extra bits by @​rupayon123 in klauspost/compress#1229
• flate: avoid FMA in EstimatedBits for portable rounding by @​malt3 in klauspost/compress#1224
• gzhttp: preserve caller request headers in Transport by @​jakezwang in klauspost/compress#1225
• gzhttp: only decompress a request when gzip is the outermost coding by @​youdie006 in klauspost/compress#1223
• zstd/huff0: Optimizations by @​lizthegrey in klauspost/compress#1203 klauspost/compress#1205 klauspost/compress#1207 klauspost/compress#1204 klauspost/compress#1208 klauspost/compress#1211 klauspost/compress#1209 klauspost/compress#1210
• flate: Speed improvements by @​alex in klauspost/compress#1220 klauspost/compress#1218 klauspost/compress#1216 klauspost/compress#1215 klauspost/compress#1214 klauspost/compress#1217

New Contributors

• @​xingyaner made their first contribution in klauspost/compress#1222
• @​jakezwang made their first contribution in klauspost/compress#1225
• @​youdie006 made their first contribution in klauspost/compress#1223
• @​pellared made their first contribution in klauspost/compress#1226
• @​malt3 made their first contribution in klauspost/compress#1224
• @​rupayon123 made their first contribution in klauspost/compress#1229

Full Changelog: klauspost/compress@v1.20.0...v1.20.1

Commits

• 5d880f2 tests: Pre-release cleanups (#1231)
• 5ed8a01 Report unexpected EOF for truncated Huffman extra bits (#1229)
• 0bed724 flate: avoid FMA in EstimatedBits for portable rounding (#1224)
• 147b531 zstd: apply reset options to reused frame decoders (#1226)
• 58dac78 gzhttp: only decompress a request when gzip is the outermost coding (#1223)
• 9b00a55 gzhttp: preserve caller request headers in Transport (#1225)
• de8f55d ossfuzz: include zstd seqdec path tests (#1222)
• a1c49c6 flate: precompute literal costs for findMatch (#1217)
• ebd8190 flate: avoid the hand-rolled sorts when generating Huffman codes (#1214)
• 4dc0d32 flate: use separate tables in histogramSplit (#1215)
• Additional commits viewable in compare view

Updates github.com/RoaringBitmap/roaring/v2 from 2.28.0 to 2.29.0

Release notes

Sourced from github.com/RoaringBitmap/roaring/v2's releases.

Version 2.29.0

What's Changed

• roaring64: preserve the sign plane when cloning BSIs by @​jakezwang in RoaringBitmap/roaring#573

New Contributors

• @​jakezwang made their first contribution in RoaringBitmap/roaring#573

Full Changelog: RoaringBitmap/roaring@v2.28.0...v2.29.0

Commits

• fb266c3 Merge pull request #573 from jakezwang/fix/bsi-clone-sign-plane
• 420547f roaring64: preserve the sign plane when cloning BSIs
• See full diff in compare view

Updates github.com/aws/aws-sdk-go-v2 from 1.47.0 to 1.47.1

Commits

• 52ba256 Release 2026-09-24
• 21223cd Regenerated Clients
• 84d89bd Update endpoints model
• d9c59ff Update API model
• 8fd86b1 feat: Add aws-chunked response decoding reader (#3563)
• ff3ac6f Release 2026-09-23
• e57d2ff Regenerated Clients
• ef6fdb9 Update endpoints model
• 385ab15 Update API model
• fafcb4f Checksum non-200 HTTP responses (#3564)
• Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/config from 1.33.5 to 1.33.6

Commits

• 52ba256 Release 2026-09-24
• 21223cd Regenerated Clients
• 84d89bd Update endpoints model
• d9c59ff Update API model
• 8fd86b1 feat: Add aws-chunked response decoding reader (#3563)
• ff3ac6f Release 2026-09-23
• e57d2ff Regenerated Clients
• ef6fdb9 Update endpoints model
• 385ab15 Update API model
• fafcb4f Checksum non-200 HTTP responses (#3564)
• Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/credentials from 1.20.5 to 1.20.6

Commits

• 27acb6b Release 2023-12-15
• d3d958f Regenerated Clients
• b9e42b1 Update endpoints model
• d61965f Update API model
• dca6a24 Release 2023-12-14
• 65183ed Regenerated Clients
• 9a01654 Update endpoints model
• 87eb076 Update API model
• aaea7b5 Release 2023-12-13
• 8b61d81 Regenerated Clients
• Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/service/s3 from 1.113.1 to 1.114.0

Commits

• 55377d1 Release 2026-09-30
• 7418acf Regenerated Clients
• 8e21aaa Update endpoints model
• 9b78075 Update API model
• 404700d Release 2026-09-29
• bc6eb75 Regenerated Clients
• 51ae28b Update API model
• 2babe29 Update smithy-go workflow behavior for forks (#3566)
• 4b034e5 Release 2026-09-28
• f75fa56 Regenerated Clients
• Additional commits viewable in compare view

Updates github.com/ohler55/ojg from 1.28.6 to 1.28.7

Release notes

Sourced from github.com/ohler55/ojg's releases.

v1.28.7

What's Changed

• Render non-string map keys instead of reflect's placeholder by @​youdie006 in ohler55/ojg#230
• jp: normalize the negative index Locate returns for a Go slice by @​NotAFlightRisk in ohler55/ojg#232
• jp: return an error instead of panicking on a nil map by @​pucedoteth in ohler55/ojg#231
• Handle nan by @​ohler55 in ohler55/ojg#235
• alt: key maps with ojg.KeyString so a Stringer key is not called by @​youdie006 in ohler55/ojg#234
• Return early on nil data by @​ohler55 in ohler55/ojg#236
• alt: key a reflected map with ojg.KeyString when recomposing by @​youdie006 in ohler55/ojg#237
• jp: stop Locate panicking on a nil pointer in Go data by @​NotAFlightRisk in ohler55/ojg#238

New Contributors

• @​youdie006 made their first contribution in ohler55/ojg#230
• @​pucedoteth made their first contribution in ohler55/ojg#231

Full Changelog: ohler55/ojg@v1.28.6...v1.28.7

Changelog

Sourced from github.com/ohler55/ojg's changelog.

[1.28.7] - 2026-09-28

Fixed

• Fixed handling of NaN and Inf writing.
• Moved strict option to Options to match documentation.
• oj.Unmarshal and sen.Unmarshal correctly use a provided alternative recomposer.
• Filter/script evaluation of nil data now returns nil and does not panic.
• jp.Locate and jp.Walk no longer panic on nil pointers in structs.
• ojg.KeyString is now used consistently with alt.Recompose.

Commits

• 49ab6ca Add release date for v1.28.7
• eecfe44 jp: stop Locate panicking on a nil pointer in Go data (#238)
• dc9ab77 alt: key a reflected map with ojg.KeyString when recomposing (#237)
• cb591c2 Return early on nil data (#236)
• c7e0262 alt: key maps with ojg.KeyString so a Stringer key is not called (#234)
• 275aabd Handle nan (#235)
• 1c79a23 jp: return an error instead of panicking on a nil map (#231)
• 720c111 jp: normalize the negative index Locate returns for a Go slice (#232)
• 753217f Render non-string map keys instead of reflect's placeholder (#230)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions