Bump github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream from 1.6.7 to 1.7.8

[dependabot]

Bumps github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream from 1.6.7 to 1.7.8.

Commits

• e3b97d2 Release 2023-10-12
• 863010d Regenerated Clients
• 6946ef8 Update endpoints model
• 6d93ded Update API model
• bebc232 fix: fail to load config if configured profile doesn't exist (#2309)
• 5de4674 fix DNS timeout error not retried (#2300)
• e155bb7 Release 2023-10-06
• 9d342ba Regenerated Clients
• 1df9914 Update SDK's smithy-go dependency to v1.15.0
• 32ada3a Update API model
• Additional commits viewable in compare view

[kusari-inspector]

Kusari Analysis Results:

✅ No Flagged Issues Detected
All values appear to be within acceptable risk parameters.

Both dependency and code security analyses independently recommend merging this PR. The dependency update remediates a known Medium severity DoS vulnerability (GHSA-xmrv-pmrh-hhx2) in github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream by upgrading from v1.6.7 to v1.7.8, which carries no active advisories. The accompanying smithy-go update (v1.22.1 to v1.24.2) introduces no new vulnerabilities. Both packages are well-maintained, carry permissive licenses (Apache-2.0, BSD-3-Clause), and are not deprecated. The code analysis returned zero findings across all categories — no code issues, no exposed secrets, and no workflow concerns. The scanned go.mod and go.sum files are clean. Merging this PR strictly improves the security posture of the repository with no new risk introduced.

Note

View full detailed analysis result for more information on the output and the checks that were run.

---

@kusari-inspector rerun - Trigger a re-analysis of this PR
@kusari-inspector feedback [your message] - Send feedback to our AI and team
See Kusari's documentation for setup and configuration.
Commit: 0995e98, performed at: 2026-05-15T00:59:23Z

Found this helpful? Give it a 👍 or 👎 reaction!

[kusari-inspector]

Kusari PR Analysis rerun based on - 0995e98 performed at: 2026-05-15T00:32:56Z - link to updated analysis

[dependabot]

Looks like github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream is up-to-date now, so this is no longer needed.

[kusari-inspector]

Kusari PR Analysis rerun based on - 0995e98 performed at: 2026-05-15T00:59:42Z - link to updated analysis