chore(deps): consolidate minor/patch dependency updates (2026-08-21)

[Umang01-hash]

Consolidated Dependabot updates (minor/patch)

Combines 64 individual Dependabot PRs (root module + 26 pkg/ submodules + 2 examples) into one. Only go.mod / go.sum / go.work.sum are touched — no source, no binaries. Every manifest is reproduced by go mod tidy (nothing hand-edited).

Headline updates

Package	Old	New	Scope
github.com/stretchr/testify	1.11.1	1.12.1	30 modules
go.opentelemetry.io/otel/trace (+ otel/otel, metric)	1.44.0	1.45.0	19 modules
github.com/aws/aws-sdk-go-v2/service/dynamodb	1.60.1	1.63.3	root, kv-store/dynamodb
github.com/aws/aws-sdk-go-v2/service/sqs	1.45.1	1.46.6	root, pubsub/sqs
github.com/nats-io/nats.go	1.52.0	1.53.1	root, kv-store/nats, pubsub/nats
github.com/Azure/azure-sdk-for-go/sdk/azcore	1.22.0	1.23.0	file/azure, pubsub/eventhub
github.com/godror/godror	0.51.0	0.51.4	oracle
github.com/elastic/go-elasticsearch/v8	8.19.6	8.19.7	root, elasticsearch
github.com/pkg/sftp	1.13.10	1.13.11	root, file/sftp

Transitives moved along by tidy (e.g. go-logr/logr 1.4.3→1.4.4, stretchr/objx 0.5.2→0.5.3, x/net, x/text).

Verification done locally

• ✅ go mod tidy -diff clean on all pkg/ submodules (matches the CI tidiness gate).
• ✅ go build ./... green on root + all 26 pkg/ library modules; go vet green on the two example modules.
• ✅ Guard: only go.mod/go.sum/go.work.sum in the diff — no source, no compiled binaries.

Not included here

• redis/go-redis/v9 (chore(deps): bump github.com/redis/go-redis/v9 from 9.21.0 to 9.22.0 #3987) — 9.22.0 adds BLMoveM to redis.Cmdable, which GoFr's Redis interface embeds, so the generated mock needs regeneration. Ships in its own PR.
• tj-actions/changed-files (chore(deps): bump tj-actions/changed-files from 47.0.0 to 47.0.6 in the actions group #3980) and zopdev/static-server docker (chore(deps): bump zopdev/static-server from v0.0.9 to v1.0.0 in /docs #3990) — not Go-module changes; separate PRs.
• Three lagging modules with no Dependabot PR this week (using-cloudsql, using-gcp-metrics, metrics/exporters/gcp) were intentionally left untouched to keep this diff scoped to the actual PRs.

Closes

#3981 #3982 #3983 #3984 #3985 #3986 #3988 #3989 #3991 #3992 #3993 #3994 #3995 #3996 #3997 #3998 #3999 #4000 #4001 #4002 #4003 #4004 #4005 #4006 #4007 #4008 #4009 #4010 #4011 #4012 #4013 #4014 #4015 #4016 #4017 #4018 #4019 #4020 #4021 #4022 #4023 #4024 #4025 #4026 #4027 #4028 #4029 #4030 #4031 #4032 #4033 #4034 #4035 #4036 #4037 #4038 #4039 #4040 #4041 #4042 #4043 #4044 #4045 #4046

🤖 Generated with claude-flow