chore(deps): bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.103.3 to 1.104.0

[dependabot]

Bumps github.com/aws/aws-sdk-go-v2/service/s3 from 1.103.3 to 1.104.0.

Commits

• 99943aa Release 2026-06-16
• 8594135 Regenerated Clients
• 14151e5 Update endpoints model
• f43e77c Update API model
• 9fcc53a Release 2026-06-15
• 65154c1 Regenerated Clients
• b86c7b9 Update API model
• 750e42a Release 2026-06-12
• f64ce2c Regenerated Clients
• 04e9755 Update endpoints model
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

---

^{Need help on this PR? Tag /codesmith with what you need. Autofix is disabled.}

[zeabur-review-agent]

Note

Currently processing new changes in this PR, please wait...

📦 Commits (1)

Reviewed via multi-agent panel

📂 Files selected for processing (2)

Details available in the full review

[zeabur-review-agent]

🧙 Gandalf — Aggregated Review Synthesis

PR: #525 — Bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.103.3 to 1.104.0
Commit: 9584767
Quorum: 5/7 reviewers responded
Panel Verdict: APPROVE (4 approve, 1 request-changes)

---

Summary

This is a Dependabot semver-minor bump of the AWS SDK Go v2 S3 service module. The diff touches only go.mod and go.sum. The upstream v1.104.0 release is additive (S3 object-annotation APIs) with no breaking changes. zbpack's sole S3 consumer (internal/source/s3fs.go) uses only stable read-only APIs (GetObject, HeadObject, ListObjectsV2) and is unaffected. No transitive dependencies shifted.

---

Consensus Findings

#	Severity	Location	Finding	Raised By
F1	🟠 Suggested	gomod2nix.toml:49	Still pins v1.103.3 while go.mod moves to v1.104.0. flake.nix builds via this lock, so Nix devShell/checks compile against the stale SDK. Recommend regenerating in a follow-up. Not blocking — CI/release path uses go.mod directly, and prior Dependabot PRs (#523) follow the same two-file pattern.	Boromir, Sam

Informational Notes

• AWS SDK v1.104.0 changelog is purely additive (S3 annotations). No behavior change for existing callers.
• go.sum /go.mod hash is identical across both versions — the module's own dependency set is unchanged. Diff is internally consistent.
• No unit/integration tests exist for s3fs (pre-existing gap, not introduced here).
• CI status at review time: lint, gofumpt, e2e-test green; test pending.

---

Verdict: ✅ APPROVE

The panel recommends merging. The gomod2nix.toml drift is a pre-existing Dependabot pattern and does not affect CI or production builds — a fast follow-up to regenerate that file is suggested but not required for this PR.

[dependabot]

Superseded by #531.