Skip to content

build(deps): bump the go group across 1 directory with 34 updates - #2854

Closed
dependabot[bot] wants to merge 4 commits into
mainfrom
dependabot/go_modules/go-99c4540561
Closed

dependabot[bot] wants to merge 4 commits into
mainfrom
dependabot/go_modules/go-99c4540561

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 13, 2026 •

Copy link
Copy Markdown
Contributor

Bumps the go group with 34 updates in the / directory:

Package From To
github.com/Azure/azure-sdk-for-go/sdk/azcore 1.22.0 1.23.2
github.com/Azure/azure-sdk-for-go/sdk/azidentity 1.14.0 1.14.1
github.com/alecthomas/kong 1.15.0 1.16.1
github.com/andybalholm/brotli 1.2.2 1.2.5
github.com/anthropics/anthropic-sdk-go 1.52.0 1.76.0
github.com/aws/aws-sdk-go-v2 1.45.1 1.47.1
github.com/aws/aws-sdk-go-v2/config 1.32.25 1.33.6
github.com/aws/aws-sdk-go-v2/service/sts 1.47.1 1.51.1
github.com/bytedance/sonic 1.15.3 1.15.4
github.com/cohere-ai/cohere-go/v2 2.18.0 2.19.0
github.com/coreos/go-oidc/v3 3.19.0 3.21.0
github.com/moby/moby/api 1.55.0 1.56.0
github.com/modelcontextprotocol/go-sdk 1.7.0 1.8.0
github.com/openai/openai-go/v3 3.41.0 3.68.0
github.com/prometheus/client_model 0.6.2 0.6.3
github.com/prometheus/common 0.70.1 0.72.0
github.com/testcontainers/testcontainers-go 0.43.0 0.44.0
go.opentelemetry.io/contrib/exporters/autoexport 0.69.0 0.71.0
go.opentelemetry.io/contrib/propagators/autoprop 0.69.0 0.71.0
go.opentelemetry.io/otel/exporters/stdout/stdouttrace 1.45.0 1.46.0
golang.org/x/net 0.58.0 0.59.0
golang.org/x/oauth2 0.36.0 0.37.0
golang.org/x/sync 0.23.0 0.24.0
golang.org/x/tools 0.49.0 0.50.0
google.golang.org/api 0.286.0 0.299.0
google.golang.org/genai 1.62.0 1.71.0
google.golang.org/genproto/googleapis/rpc 0.0.0-20260819154853-08b0e4226688 0.0.0-20260921155816-b14227669459
google.golang.org/grpc 1.83.2 1.84.0
k8s.io/api 0.37.0 0.37.1
k8s.io/apiextensions-apiserver 0.37.0 0.37.1
k8s.io/apimachinery 0.37.0 0.37.1
k8s.io/client-go 0.37.0 0.37.1
sigs.k8s.io/controller-runtime 0.24.1 0.25.1
sigs.k8s.io/gateway-api/conformance 1.6.1 1.6.2

Updates github.com/Azure/azure-sdk-for-go/sdk/azcore from 1.22.0 to 1.23.2

Release notes

Sourced from github.com/Azure/azure-sdk-for-go/sdk/azcore's releases.

sdk/azcore/v1.23.2

1.23.2 (2026-09-28)

Bugs Fixed

  • Fixed unmarshalling datetime.RFC7231 to use a fixed GMT zone.

sdk/azcore/v1.23.1

1.23.1 (2026-08-27)

Other Changes

  • Upgraded dependencies.

sdk/azcore/v1.23.0

1.23.0 (2026-08-11)

Features Added

  • Helper method runtime.NewRequestForNextLink for creating requests for pageable operations that uses a next link. It handles absolute and relative next links.

Bugs Fixed

  • Fixed an issue where runtime.Pager[T].More could return true indefinitely after NextPage failed to retrieve the first page, causing for pager.More() loops to spin. After a page fetch returns an error the Pager now enters a terminal state: More returns false and subsequent NextPage calls return the same error without invoking the fetcher again.
Commits
  • e6d2415 Unmarshalling RFC7231 sets GMT time zone (#27613)
  • 27cb570 Update dependencies (#27624)
  • 14e5800 Update CI to the latest two versions of Go (#27623)
  • f73af49 Configurations: 'specification/compute/resource-manager/Microsoft.Compute/Bu...
  • 339802c Add repository access guidance to deprecation guide (#27602)
  • a23355a [AutoPR sdk-resourcemanager/compute/armcompute]-generated-from-SDK Generation...
  • 1d0aa55 Remove feature branches from CI triggers [skip ci] (#27612)
  • a5cb5a0 Update storage CODEOWNERS: add Gunjan Singh, remove Sourav Gupta (#27607)
  • 31f47a8 [AutoPR sdk-resourcemanager/storage/armstorage]-generated-from-SDK Generation...
  • caa10be Deprecate armweightsandbiases (#27560)
  • Additional commits viewable in compare view

Updates github.com/Azure/azure-sdk-for-go/sdk/azidentity from 1.14.0 to 1.14.1

Release notes

Sourced from github.com/Azure/azure-sdk-for-go/sdk/azidentity's releases.

sdk/azidentity/v1.14.1

1.14.1 (2026-08-27)

Other Changes

  • Upgraded dependencies
Commits
  • 920e79a Prep azidentity for release (#27473)
  • d86ae78 Prep azcore for release (#27471)
  • 33dd768 [azwebpubsub] Fix GenerateClientAccessURL on the TokenCredential path (#27422)
  • a27ca57 Upgrade TypeSpec Go emitter dependencies (#27466)
  • af75eb0 [AutoPR sdk-resourcemanager/purestorageblock/armpurestorageblock]-generated-f...
  • 8dcff8c [AutoPR sdk-resourcemanager/redisenterprise/armredisenterprise]-generated-fro...
  • e4569f1 [AutoPR sdk-resourcemanager/chaos/armchaos]-generated-from-SDK Generation - G...
  • 7069bf8 [AutoPR sdk-resourcemanager/horizondb/armhorizondb]-generated-from-SDK Genera...
  • 5ceffce Bump gh-aw to v0.86.2 for mgmt review workflow (#27460)
  • 663b6ce Enhance azblob perf tests with OAuth, parallel setup, and profiling (#27324)
  • Additional commits viewable in compare view

Updates github.com/alecthomas/kong from 1.15.0 to 1.16.1

Commits
  • 0678fd3 Fix disabled DefaultEnvars help suffix (#638)
  • 33d3305 Fix single-character alias leaking between sibling commands (#637)
  • a5c9626 Fix counter panic on a uint or float field with an explicit --flag=N (#626)
  • b401ebf Fix filecontent mapper panicking on a non-[]byte target (#625)
  • 8cbde34 Fix panic when a float flag is resolved from an integer value (#621)
  • 649eaf2 chore(deps): update all non-major dependencies (#622)
  • ae4bfdd fix: correct typos in resolver.go and README.md (#617)
  • c2c0229 Fix env var validation conflicts (#619)
  • f95198e chore(deps): update all non-major dependencies (#608)
  • b03afc3 treat single-character aliases as short flags (#605)
  • Additional commits viewable in compare view

Updates github.com/andybalholm/brotli from 1.2.2 to 1.2.5

Commits
  • 9140f7e flate: make the two copies of match splitting look alike
  • f88900b Remove test of implementation details.
  • 9933015 flate: split long matches in the statistics and token loops
  • 2e61b23 flate: split matches longer than 258 bytes
  • eede312 Fix problems found by go vet
  • fc20d30 reorder conditions for better performance
  • e50c2fb Fix false match at position 0 in ZDFast
  • a3e6528 Do not drop history that is shorter than MaxDistance
  • 621e17e Fix false match in ZFast.
  • 448f1a0 Add a utility for testing against multi-file compression corpora.
  • Additional commits viewable in compare view

Updates github.com/anthropics/anthropic-sdk-go from 1.52.0 to 1.76.0

Release notes

Sourced from github.com/anthropics/anthropic-sdk-go's releases.

v1.76.0

1.76.0 (2026-09-28)

Full Changelog: v1.75.0...v1.76.0

Features

  • api: add between_tools thinking type (bc5be8f)
  • api: add claude-sonnet-5-5 (48993ca)
  • api: add include_inherited and source to workspace rate limits (bd6bb6d)
  • api: add typed event type values to the Managed Agents events list filter (019b05b)
  • api: cache diagnostics GA — diagnostics on Message / MessageCreateParams (4ea973c)

Bug Fixes

  • client: pass HTTP client when cloning request config (cd8f34f)
  • client: retry when the connection drops part-way through a response (4f7f317)
  • client: send no placeholder filename for unnamed file uploads (968849c)
  • helpers: degrade between_tools thinking to disabled on fallback hops (#410) (aa15d36)

Performance Improvements

  • client: decode SSE streams without per-event allocations (0f84503)

Chores

  • ci: choose the CI runner by repository (acb082a)
  • docs: clarify that stream: true returns the raw event stream (5fafdf0)
  • docs: make Managed Agents actor descriptions resource-neutral (ae3cc2f)
  • docs: restore the research-preview notice on the Dream type (d95f40a)
  • internal: simplify request execution (4a68721)

Documentation

  • api: prefer each field's own description over its shared type's (d05f55e)

v1.75.0

1.75.0 (2026-09-22)

Full Changelog: v1.74.0...v1.75.0

Features

  • api: add support for claude-opus-5-5, inline tool definitions and MCP tool-list pinning (beta) (0a2186a)

... (truncated)

Changelog

Sourced from github.com/anthropics/anthropic-sdk-go's changelog.

1.76.0 (2026-09-28)

Full Changelog: v1.75.0...v1.76.0

Features

  • api: add between_tools thinking type (bc5be8f)
  • api: add claude-sonnet-5-5 (48993ca)
  • api: add include_inherited and source to workspace rate limits (bd6bb6d)
  • api: add typed event type values to the Managed Agents events list filter (019b05b)
  • api: cache diagnostics GA — diagnostics on Message / MessageCreateParams (4ea973c)

Bug Fixes

  • client: pass HTTP client when cloning request config (cd8f34f)
  • client: retry when the connection drops part-way through a response (4f7f317)
  • client: send no placeholder filename for unnamed file uploads (968849c)
  • helpers: degrade between_tools thinking to disabled on fallback hops (#410) (aa15d36)

Performance Improvements

  • client: decode SSE streams without per-event allocations (0f84503)

Chores

  • ci: choose the CI runner by repository (acb082a)
  • docs: clarify that stream: true returns the raw event stream (5fafdf0)
  • docs: make Managed Agents actor descriptions resource-neutral (ae3cc2f)
  • docs: restore the research-preview notice on the Dream type (d95f40a)
  • internal: simplify request execution (4a68721)

Documentation

  • api: prefer each field's own description over its shared type's (d05f55e)

1.75.0 (2026-09-22)

Full Changelog: v1.74.0...v1.75.0

Features

  • api: add support for claude-opus-5-5, inline tool definitions and MCP tool-list pinning (beta) (0a2186a)

Bug Fixes

... (truncated)

Commits
  • ad865df Merge pull request #446 from anthropics/release-please--branches--main--chang...
  • 78e786b release: 1.76.0
  • 8c99915 codegen metadata
  • 48993ca feat(api): add claude-sonnet-5-5
  • 365300b codegen metadata
  • 968849c fix(client): send no placeholder filename for unnamed file uploads
  • 019b05b feat(api): add typed event type values to the Managed Agents events list filter
  • 4a2df3b codegen metadata
  • aa15d36 fix(helpers): degrade between_tools thinking to disabled on fallback hops (#410)
  • 038b7b4 codegen metadata
  • Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2 from 1.45.1 to 1.47.1

Commits

Updates github.com/aws/aws-sdk-go-v2/config from 1.32.25 to 1.33.6

Commits

Updates github.com/aws/aws-sdk-go-v2/service/sts from 1.47.1 to 1.51.1

Commits

Updates github.com/bytedance/sonic from 1.15.3 to 1.15.4

Release notes

Sourced from github.com/bytedance/sonic's releases.

v1.15.4

What's Changed

New Contributors

Full Changelog: bytedance/sonic@v1.15.3...v1.15.4

Commits
  • f1003e1 fix: trim fallback EncodeIndented newline
  • 298d563 docs(ast): fix path search comment spelling
  • 95a0ee5 fix(jitdec): prevent GC crashes when decoding full arrays
  • See full diff in compare view

Updates github.com/cohere-ai/cohere-go/v2 from 2.18.0 to 2.19.0

Release notes

Sourced from github.com/cohere-ai/cohere-go/v2's releases.

v2.19.0

What's Changed

Full Changelog: cohere-ai/cohere-go@v2.18.2...v2.19.0

v2.18.2

What's Changed

New Contributors

Full Changelog: cohere-ai/cohere-go@v2.17.0...v2.18.2

Commits

Updates github.com/coreos/go-oidc/v3 from 3.19.0 to 3.21.0

Release notes

Sourced from github.com/coreos/go-oidc/v3's releases.

v3.21.0

What's Changed

New Contributors

Full Changelog: coreos/go-oidc@v3.20.0...v3.21.0

v3.20.0

What's Changed

Full Changelog: coreos/go-oidc@v3.19.0...v3.20.0

Commits
  • c914bd3 oidc: ignore JWKs with unsupported key types rather than failing
  • 75dfa5c oidc: add constants for "email" and "profile" scopes
  • a89f046 oidc: add API for determining when issuer URLs mismatch
  • 6a69b6d readme: update README and docs
  • f9049c9 oidc: ignore JWKs with unknown signing algorithms rather than failing
  • 2f178e0 SECURITY.md: add a security policy and point to project-level reporting
  • b3bc7da oidc: improve documentation for APIs
  • 0db9053 oidc: modernize with new Go APIs
  • See full diff in compare view

Updates github.com/moby/moby/api from 1.55.0 to 1.56.0

Release notes

Sourced from github.com/moby/moby/api's releases.

api/v1.56.0

1.56.0

Changelog

  • GET /containers/json now supports an annotation filter to filter containers by annotation, either by key (annotation=key) or by key and value (annotation="key=value"), similar to the existing label filter. moby/moby#53538
  • POST /containers/create now supports HostConfig.Umask to set the initial umask for a Unix container. When set, the daemon includes the value in the OCI process configuration for the container's entrypoint, exec processes, and healthchecks. When omitted, the runtime's default behavior applies.moby/moby#53463
  • api/docs: sync API docs v1.25 - v1.55. moby/moby#53246
  • api/swagger: Align Healthcheck name with Go struct. moby/moby#53567
  • api/types/plugin: Deprecated plugin.Privileges sorting methods in favor of slices.SortFunc. moby/moby#53511
  • api/types/plugin: fix Privileges Swap implementation. moby/moby#53510
  • api: Bump to 1.56. moby/moby#53425
  • api: document Task.NetworksAttachments in the swagger definition. moby/moby#53082
  • api: remove gotest.tools from tests. moby/moby#53535
  • api: swagger: Use int64 for build query params. moby/moby#53520
  • api: use blackbox testing. moby/moby#53525
  • Fix API reference documenting an unsupported names filter for GET /configs. moby/moby#53447
Commits
  • 9b2179d Merge pull request #53572 from vvoland/api-docs-cut
  • 575cf82 Merge pull request #53571 from thaJeztah/bump_tools
  • 20beedb api/docs: Cut v1.56
  • bb86302 Merge pull request #53569 from vvoland/afvsock-lsm
  • 65be55a Merge pull request #53513 from thaJeztah/daemon_fix_list
  • 0af79c4 Merge pull request #53570 from vvoland/process-release
  • 7d1ce6a Merge pull request #53568 from renovate-bot/renovate/github.com-mdlayher-sock...
  • 0df1a00 Dockerfile: update cli v29.7.2, compose v5.5.1, buildx v0.37.0
  • e1d06bd Drop replace rules
  • b40d37e Merge pull request #53359 from vvoland/ext-namegenerator
  • Additional commits viewable in compare view

Updates github.com/modelcontextprotocol/go-sdk from 1.7.0 to 1.8.0

Release notes

Sourced from github.com/modelcontextprotocol/go-sdk's releases.

v1.8.0

This release is equivalent to v1.8.0-pre.2. Thank you to those who tested the pre-release.

In this release we introduce several fixes and improvements on top of v1.7.0. It adds no new protocol revision: the supported set is unchanged, and 2026-07-28 remains the newest version the SDK negotiates.

The bulk of the work is hardening the transports against resource exhaustion, closing session leaks, deadlocks and teardown hangs found by users running the new protocol at scale, and giving servers explicit control over which protocol versions they advertise.

Two behavior changes are guarded by new MCPGODEBUG flags; see the section below.

Hardening against resource exhaustion

Every decoding path that buffers incoming input is now bounded. JSON payloads are rejected past 1000 levels of nesting, before the parser recurses. Both SSE readers cap the bytes buffered for a single event via MaxEventSize on SSEClientTransport and StreamableClientTransport, and the stdio transport caps a single JSON-RPC frame via StdioTransport.MaxLineLength.

On the OAuth side, dynamic client registration responses are bounded to 1 MB, and the discovery code now validates metadata documents rather than trusting them.

Restricting the protocol versions a server supports

ServerOptions.SupportedProtocolVersions lets a server narrow the set of versions it advertises and negotiates. The list can only narrow, never widen; naming a version the SDK does not implement panics at construction. Relatedly, a stateful streamable handler receiving a 2026-07-28 request now returns that same JSON-RPC error instead of a plain-text 400, so the client can renegotiate down instead of losing the connection.

Per-request cache control

ServerOptions.SetCacheable is a new hook that decides the ttlMs and cacheScope fields of every result carrying them: server/discover, the four list methods, and resources/read. It runs once per result, after the handler returns, with the values that handler produced, so it can set a policy globally while still letting an individual handler override it. Anything left unset falls back to the protocol default of public.

Behavior changes guarded by MCPGODEBUG

Two new escape-hatch flags restore the previous behavior of the changes above. Both will be removed in v1.9.0.

  • plaintextstatefulrejection=1 — restore the plain-text http.Error 400 body a stateful StreamableHTTPHandler previously returned for a request carrying per-request metadata. The default is now a JSON-RPC -32022 CodeUnsupportedProtocolVersion error with an UnsupportedProtocolVersionData payload advertising the legacy versions the server supports. Introduced by #1143.
  • blockingcancelnotify=1 — restore the previous behavior where a cancelled call waits synchronously for notifications/cancelled to be delivered (up to 5s) before returning, joining any delivery error into the caller's error. The default now retires the call immediately and sends the notification asynchronously. Introduced by #1151.

Options below were removed, according to plan:

  • seterroroverwrite
  • enableoriginverification
  • disablecontenttypecheck

... (truncated)

Commits
  • 3f3b699 refactor: remove legacy MCPGODEBUG compatibility for new protocol release (#1...
  • 830f0b7 mcp: update conformance tests (#1231)
  • 12cbafe oauthex: oauth discovery checks (#1220)
  • 3632967 mcp: add an sse event size cap (#1205)
  • 0d3036f mcp: allow per request Cacheable customization (#1203)
  • cb0de64 mcp: add a max request body size of the old transport (#1224)
  • 2fdabde mcp: do not check metatada on notifications (#1215)
  • 59185e6 build(deps): bump ossf/scorecard-action from 2.4.3 to 2.4.4 (#1217)
  • a6764cf build(deps): bump golang/govulncheck-action from 1.0.4 to 1.1.0 (#1218)
  • 8227246 fix: only subscribe when server advertises capability (#1221)
  • Additional commits viewable in compare view

Updates github.com/openai/openai-go/v3 from 3.41.0 to 3.68.0

Release notes

Sourced from github.com/openai/openai-go/v3's releases.

v3.68.0

3.68.0 (2026-09-29)

Features

  • api: add computer use to beta agents (#989) (a435999)

v3.67.0

3.67.0 (2026-09-29)

Features

  • api: add Agents credential and session options (#980) (a5955cc)
  • api: add Cyber access programs to Responses (#973) (399b02e)
  • api: add GPT-6.1 Sol model identifier (#988) (eb3c1db)
  • responses: add opt-in WebSocket text and tool-input snapshots (#982) (d7fd0c6)
  • responses: preserve provisional WebSocket accumulation details (#986) (e89227a)

Bug Fixes

  • honor Retry-After delays in line with the Python SDK (#987) (ba6afb0)
  • websocket: preserve safe close status across receivers and delivery errors (#985) (7c7af27)

Chores

  • api: clarify approximate web search location defaults (#971) (a9b3b22)
  • api: clarify documented API error responses (#979) (fefe204)
  • api: clarify Realtime modality array definitions (#972) (edc44ef)
  • api: correct fine-tuning bounds and Realtime response reference (#968) (69a8c4c)
  • api: document batch error responses (#976) (1ec6bf1)
  • api: document files and uploads error responses (#975) (f3489bf)
  • api: document fine-tuning and model errors (#978) (360fee6)
  • api: document Responses not-found errors (#974) (f7a713e)
  • api: document stored chat completion errors (#977) (db51851)

Documentation

  • clarify collaborator-only pull request policy (#966) (36662ee)

v3.66.0

3.66.0 (2026-09-23)

Features

... (truncated)

Changelog

Sourced from github.com/openai/openai-go/v3's changelog.

3.68.0 (2026-09-29)

Features

  • api: add computer use to beta agents (#989) (a435999)

3.67.0 (2026-09-29)

Features

  • api: add Agents credential and session options (#980) (a5955cc)
  • api: add Cyber access programs to Responses (#973) (399b02e)
  • api: add GPT-6.1 Sol model identifier (#988) (eb3c1db)
  • responses: add opt-in WebSocket text and tool-input snapshots (#982) (d7fd0c6)
  • responses: preserve provisional WebSocket accumulation details (#986) (e89227a)

Bug Fixes

  • honor Retry-After delays in line with the Python SDK (#987) (ba6afb0)
  • websocket: preserve safe close status across receivers and delivery errors (#985) (7c7af27)

Chores

  • api: clarify approximate web search location defaults (#971) (a9b3b22)
  • api: clarify documented API error responses (#979) (fefe204)
  • api: clarify Realtime modality array definitions (#972) (edc44ef)
  • api: correct fine-tuning bounds and Realtime response reference (#968) (69a8c4c)
  • api: document batch error responses (Description has been truncated

Bumps the go group with 34 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [github.com/Azure/azure-sdk-for-go/sdk/azcore](https://github.com/Azure/azure-sdk-for-go) | `1.22.0` | `1.23.2` |
| [github.com/Azure/azure-sdk-for-go/sdk/azidentity](https://github.com/Azure/azure-sdk-for-go) | `1.14.0` | `1.14.1` |
| [github.com/alecthomas/kong](https://github.com/alecthomas/kong) | `1.15.0` | `1.16.1` |
| [github.com/andybalholm/brotli](https://github.com/andybalholm/brotli) | `1.2.2` | `1.2.5` |
| [github.com/anthropics/anthropic-sdk-go](https://github.com/anthropics/anthropic-sdk-go) | `1.52.0` | `1.76.0` |
| [github.com/aws/aws-sdk-go-v2](https://github.com/aws/aws-sdk-go-v2) | `1.45.1` | `1.47.1` |
| [github.com/aws/aws-sdk-go-v2/config](https://github.com/aws/aws-sdk-go-v2) | `1.32.25` | `1.33.6` |
| [github.com/aws/aws-sdk-go-v2/service/sts](https://github.com/aws/aws-sdk-go-v2) | `1.47.1` | `1.51.1` |
| [github.com/bytedance/sonic](https://github.com/bytedance/sonic) | `1.15.3` | `1.15.4` |
| [github.com/cohere-ai/cohere-go/v2](https://github.com/cohere-ai/cohere-go) | `2.18.0` | `2.19.0` |
| [github.com/coreos/go-oidc/v3](https://github.com/coreos/go-oidc) | `3.19.0` | `3.21.0` |
| [github.com/moby/moby/api](https://github.com/moby/moby) | `1.55.0` | `1.56.0` |
| [github.com/modelcontextprotocol/go-sdk](https://github.com/modelcontextprotocol/go-sdk) | `1.7.0` | `1.8.0` |
| [github.com/openai/openai-go/v3](https://github.com/openai/openai-go) | `3.41.0` | `3.68.0` |
| [github.com/prometheus/client_model](https://github.com/prometheus/client_model) | `0.6.2` | `0.6.3` |
| [github.com/prometheus/common](https://github.com/prometheus/common) | `0.70.1` | `0.72.0` |
| [github.com/testcontainers/testcontainers-go](https://github.com/testcontainers/testcontainers-go) | `0.43.0` | `0.44.0` |
| [go.opentelemetry.io/contrib/exporters/autoexport](https://github.com/open-telemetry/opentelemetry-go-contrib) | `0.69.0` | `0.71.0` |
| [go.opentelemetry.io/contrib/propagators/autoprop](https://github.com/open-telemetry/opentelemetry-go-contrib) | `0.69.0` | `0.71.0` |
| [go.opentelemetry.io/otel/exporters/stdout/stdouttrace](https://github.com/open-telemetry/opentelemetry-go) | `1.45.0` | `1.46.0` |
| [golang.org/x/net](https://github.com/golang/net) | `0.58.0` | `0.59.0` |
| [golang.org/x/oauth2](https://github.com/golang/oauth2) | `0.36.0` | `0.37.0` |
| [golang.org/x/sync](https://github.com/golang/sync) | `0.23.0` | `0.24.0` |
| [golang.org/x/tools](https://github.com/golang/tools) | `0.49.0` | `0.50.0` |
| [google.golang.org/api](https://github.com/googleapis/google-api-go-client) | `0.286.0` | `0.299.0` |
| [google.golang.org/genai](https://github.com/googleapis/go-genai) | `1.62.0` | `1.71.0` |
| [google.golang.org/genproto/googleapis/rpc](https://github.com/googleapis/go-genproto) | `0.0.0-20260819154853-08b0e4226688` | `0.0.0-20260921155816-b14227669459` |
| [google.golang.org/grpc](https://github.com/grpc/grpc-go) | `1.83.2` | `1.84.0` |
| [k8s.io/api](https://github.com/kubernetes/api) | `0.37.0` | `0.37.1` |
| [k8s.io/apiextensions-apiserver](https://github.com/kubernetes/apiextensions-apiserver) | `0.37.0` | `0.37.1` |
| [k8s.io/apimachinery](https://github.com/kubernetes/apimachinery) | `0.37.0` | `0.37.1` |
| [k8s.io/client-go](https://github.com/kubernetes/client-go) | `0.37.0` | `0.37.1` |
| [sigs.k8s.io/controller-runtime](https://github.com/kubernetes-sigs/controller-runtime) | `0.24.1` | `0.25.1` |
| [sigs.k8s.io/gateway-api/conformance](https://github.com/kubernetes-sigs/gateway-api) | `1.6.1` | `1.6.2` |



Updates `github.com/Azure/azure-sdk-for-go/sdk/azcore` from 1.22.0 to 1.23.2
- [Release notes](https://github.com/Azure/azure-sdk-for-go/releases)
- [Commits](Azure/azure-sdk-for-go@sdk/azcore/v1.22.0...sdk/azcore/v1.23.2)

Updates `github.com/Azure/azure-sdk-for-go/sdk/azidentity` from 1.14.0 to 1.14.1
- [Release notes](https://github.com/Azure/azure-sdk-for-go/releases)
- [Commits](Azure/azure-sdk-for-go@sdk/azcore/v1.14.0...sdk/azidentity/v1.14.1)

Updates `github.com/alecthomas/kong` from 1.15.0 to 1.16.1
- [Commits](alecthomas/kong@v1.15.0...v1.16.1)

Updates `github.com/andybalholm/brotli` from 1.2.2 to 1.2.5
- [Commits](andybalholm/brotli@v1.2.2...v1.2.5)

Updates `github.com/anthropics/anthropic-sdk-go` from 1.52.0 to 1.76.0
- [Release notes](https://github.com/anthropics/anthropic-sdk-go/releases)
- [Changelog](https://github.com/anthropics/anthropic-sdk-go/blob/main/CHANGELOG.md)
- [Commits](anthropics/anthropic-sdk-go@v1.52.0...v1.76.0)

Updates `github.com/aws/aws-sdk-go-v2` from 1.45.1 to 1.47.1
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@v1.45.1...v1.47.1)

Updates `github.com/aws/aws-sdk-go-v2/config` from 1.32.25 to 1.33.6
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@config/v1.32.25...config/v1.33.6)

Updates `github.com/aws/aws-sdk-go-v2/service/sts` from 1.47.1 to 1.51.1
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@v1.47.1...service/s3/v1.51.1)

Updates `github.com/bytedance/sonic` from 1.15.3 to 1.15.4
- [Release notes](https://github.com/bytedance/sonic/releases)
- [Commits](bytedance/sonic@v1.15.3...v1.15.4)

Updates `github.com/cohere-ai/cohere-go/v2` from 2.18.0 to 2.19.0
- [Release notes](https://github.com/cohere-ai/cohere-go/releases)
- [Commits](cohere-ai/cohere-go@v2.18.0...v2.19.0)

Updates `github.com/coreos/go-oidc/v3` from 3.19.0 to 3.21.0
- [Release notes](https://github.com/coreos/go-oidc/releases)
- [Commits](coreos/go-oidc@v3.19.0...v3.21.0)

Updates `github.com/moby/moby/api` from 1.55.0 to 1.56.0
- [Release notes](https://github.com/moby/moby/releases)
- [Commits](moby/moby@api/v1.55.0...api/v1.56.0)

Updates `github.com/modelcontextprotocol/go-sdk` from 1.7.0 to 1.8.0
- [Release notes](https://github.com/modelcontextprotocol/go-sdk/releases)
- [Commits](modelcontextprotocol/go-sdk@v1.7.0...v1.8.0)

Updates `github.com/openai/openai-go/v3` from 3.41.0 to 3.68.0
- [Release notes](https://github.com/openai/openai-go/releases)
- [Changelog](https://github.com/openai/openai-go/blob/main/CHANGELOG.md)
- [Commits](openai/openai-go@v3.41.0...v3.68.0)

Updates `github.com/prometheus/client_model` from 0.6.2 to 0.6.3
- [Release notes](https://github.com/prometheus/client_model/releases)
- [Commits](prometheus/client_model@v0.6.2...v0.6.3)

Updates `github.com/prometheus/common` from 0.70.1 to 0.72.0
- [Release notes](https://github.com/prometheus/common/releases)
- [Changelog](https://github.com/prometheus/common/blob/main/CHANGELOG.md)
- [Commits](prometheus/common@v0.70.1...v0.72.0)

Updates `github.com/testcontainers/testcontainers-go` from 0.43.0 to 0.44.0
- [Release notes](https://github.com/testcontainers/testcontainers-go/releases)
- [Commits](testcontainers/testcontainers-go@v0.43.0...v0.44.0)

Updates `go.opentelemetry.io/contrib/exporters/autoexport` from 0.69.0 to 0.71.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go-contrib/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go-contrib/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go-contrib@zpages/v0.69.0...zpages/v0.71.0)

Updates `go.opentelemetry.io/contrib/propagators/autoprop` from 0.69.0 to 0.71.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go-contrib/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go-contrib/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go-contrib@zpages/v0.69.0...zpages/v0.71.0)

Updates `go.opentelemetry.io/otel/exporters/stdout/stdouttrace` from 1.45.0 to 1.46.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go@v1.45.0...v1.46.0)

Updates `golang.org/x/net` from 0.58.0 to 0.59.0
- [Commits](golang/net@v0.58.0...v0.59.0)

Updates `golang.org/x/oauth2` from 0.36.0 to 0.37.0
- [Commits](golang/oauth2@v0.36.0...v0.37.0)

Updates `golang.org/x/sync` from 0.23.0 to 0.24.0
- [Commits](golang/sync@v0.23.0...v0.24.0)

Updates `golang.org/x/tools` from 0.49.0 to 0.50.0
- [Release notes](https://github.com/golang/tools/releases)
- [Commits](golang/tools@v0.49.0...v0.50.0)

Updates `google.golang.org/api` from 0.286.0 to 0.299.0
- [Release notes](https://github.com/googleapis/google-api-go-client/releases)
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md)
- [Commits](googleapis/google-api-go-client@v0.286.0...v0.299.0)

Updates `google.golang.org/genai` from 1.62.0 to 1.71.0
- [Release notes](https://github.com/googleapis/go-genai/releases)
- [Changelog](https://github.com/googleapis/go-genai/blob/main/CHANGELOG.md)
- [Commits](googleapis/go-genai@v1.62.0...v1.71.0)

Updates `google.golang.org/genproto/googleapis/rpc` from 0.0.0-20260819154853-08b0e4226688 to 0.0.0-20260921155816-b14227669459
- [Commits](https://github.com/googleapis/go-genproto/commits)

Updates `google.golang.org/grpc` from 1.83.2 to 1.84.0
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.83.2...v1.84.0)

Updates `k8s.io/api` from 0.37.0 to 0.37.1
- [Commits](kubernetes/api@v0.37.0...v0.37.1)

Updates `k8s.io/apiextensions-apiserver` from 0.37.0 to 0.37.1
- [Release notes](https://github.com/kubernetes/apiextensions-apiserver/releases)
- [Commits](kubernetes/apiextensions-apiserver@v0.37.0...v0.37.1)

Updates `k8s.io/apimachinery` from 0.37.0 to 0.37.1
- [Commits](kubernetes/apimachinery@v0.37.0...v0.37.1)

Updates `k8s.io/client-go` from 0.37.0 to 0.37.1
- [Changelog](https://github.com/kubernetes/client-go/blob/master/CHANGELOG.md)
- [Commits](kubernetes/client-go@v0.37.0...v0.37.1)

Updates `sigs.k8s.io/controller-runtime` from 0.24.1 to 0.25.1
- [Release notes](https://github.com/kubernetes-sigs/controller-runtime/releases)
- [Changelog](https://github.com/kubernetes-sigs/controller-runtime/blob/main/RELEASE.md)
- [Commits](kubernetes-sigs/controller-runtime@v0.24.1...v0.25.1)

Updates `sigs.k8s.io/gateway-api/conformance` from 1.6.1 to 1.6.2
- [Release notes](https://github.com/kubernetes-sigs/gateway-api/releases)
- [Changelog](https://github.com/kubernetes-sigs/gateway-api/blob/main/RELEASE.md)
- [Commits](kubernetes-sigs/gateway-api@v1.6.1...v1.6.2)

---
updated-dependencies:
- dependency-name: github.com/Azure/azure-sdk-for-go/sdk/azcore
  dependency-version: 1.23.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/Azure/azure-sdk-for-go/sdk/azidentity
  dependency-version: 1.14.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: github.com/alecthomas/kong
  dependency-version: 1.16.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/andybalholm/brotli
  dependency-version: 1.2.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: github.com/anthropics/anthropic-sdk-go
  dependency-version: 1.76.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/aws/aws-sdk-go-v2
  dependency-version: 1.47.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/aws/aws-sdk-go-v2/config
  dependency-version: 1.33.6
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/aws/aws-sdk-go-v2/service/sts
  dependency-version: 1.51.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/bytedance/sonic
  dependency-version: 1.15.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: github.com/cohere-ai/cohere-go/v2
  dependency-version: 2.19.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/coreos/go-oidc/v3
  dependency-version: 3.21.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/moby/moby/api
  dependency-version: 1.56.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/modelcontextprotocol/go-sdk
  dependency-version: 1.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/openai/openai-go/v3
  dependency-version: 3.68.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/prometheus/client_model
  dependency-version: 0.6.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: github.com/prometheus/common
  dependency-version: 0.72.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/testcontainers/testcontainers-go
  dependency-version: 0.44.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: go.opentelemetry.io/contrib/exporters/autoexport
  dependency-version: 0.71.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: go.opentelemetry.io/contrib/propagators/autoprop
  dependency-version: 0.71.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: go.opentelemetry.io/otel/exporters/stdout/stdouttrace
  dependency-version: 1.46.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: golang.org/x/net
  dependency-version: 0.59.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: golang.org/x/oauth2
  dependency-version: 0.37.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: golang.org/x/sync
  dependency-version: 0.24.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: golang.org/x/tools
  dependency-version: 0.50.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: google.golang.org/api
  dependency-version: 0.299.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: google.golang.org/genai
  dependency-version: 1.71.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: google.golang.org/genproto/googleapis/rpc
  dependency-version: 0.0.0-20260921155816-b14227669459
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: google.golang.org/grpc
  dependency-version: 1.84.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: k8s.io/api
  dependency-version: 0.37.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: k8s.io/apiextensions-apiserver
  dependency-version: 0.37.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: k8s.io/apimachinery
  dependency-version: 0.37.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: k8s.io/client-go
  dependency-version: 0.37.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: sigs.k8s.io/controller-runtime
  dependency-version: 0.25.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: sigs.k8s.io/gateway-api/conformance
  dependency-version: 1.6.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot requested a review from a team as a code owner October 13, 2026 21:07
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Oct 13, 2026
@netlify

netlify Bot commented Oct 13, 2026 •

Copy link
Copy Markdown

✅ Deploy Preview for theagentrouter canceled.

Name Link
🔨 Latest commit 5c44d8a
🔍 Latest deploy log https://app.netlify.com/projects/theagentrouter/deploys/6acf69afc565b626f832e6b7

@codecov

codecov Bot commented Oct 13, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!

@dependabot @github

dependabot Bot commented on behalf of github Oct 15, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Oct 15, 2026
@dependabot
dependabot Bot deleted the dependabot/go_modules/go-99c4540561 branch October 15, 2026 11:54
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant