Skip to content

build(deps): bump the go group across 1 directory with 37 updates - #2865

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/go-238d96d27c
Open

build(deps): bump the go group across 1 directory with 37 updates#2865
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/go-238d96d27c

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 15, 2026

Copy link
Copy Markdown
Contributor

Bumps the go group with 37 updates in the / directory:

Package From To
github.com/Azure/azure-sdk-for-go/sdk/azcore 1.22.0 1.23.2
github.com/Azure/azure-sdk-for-go/sdk/azidentity 1.14.0 1.14.1
github.com/alecthomas/kong 1.15.0 1.16.1
github.com/andybalholm/brotli 1.2.2 1.2.6
github.com/anthropics/anthropic-sdk-go 1.52.0 1.78.0
github.com/aws/aws-sdk-go-v2 1.45.1 1.47.1
github.com/aws/aws-sdk-go-v2/config 1.32.25 1.33.6
github.com/aws/aws-sdk-go-v2/service/sts 1.47.1 1.51.1
github.com/bytedance/sonic 1.15.3 1.15.4
github.com/cohere-ai/cohere-go/v2 2.18.0 2.19.0
github.com/coreos/go-oidc/v3 3.19.0 3.21.0
github.com/envoyproxy/go-control-plane/envoy 1.37.1-0.20260729145720-a2d8c7492908 1.39.0
github.com/moby/moby/api 1.55.0 1.56.0
github.com/modelcontextprotocol/go-sdk 1.7.0 1.8.0
github.com/openai/openai-go/v3 3.41.0 3.68.0
github.com/prometheus/client_model 0.6.2 0.6.3
github.com/prometheus/common 0.70.1 0.72.0
github.com/testcontainers/testcontainers-go 0.43.0 0.44.0
go.opentelemetry.io/contrib/exporters/autoexport 0.69.0 0.71.0
go.opentelemetry.io/contrib/propagators/autoprop 0.69.0 0.71.0
go.opentelemetry.io/otel/exporters/stdout/stdouttrace 1.45.0 1.46.0
go.opentelemetry.io/proto/otlp 1.11.0 1.11.1
golang.org/x/exp 0.0.0-20260820142414-ca536658362e 0.0.0-20260908205506-85c1c2202aba
golang.org/x/net 0.58.0 0.59.0
golang.org/x/oauth2 0.36.0 0.37.0
golang.org/x/sync 0.23.0 0.24.0
golang.org/x/tools 0.49.0 0.50.0
google.golang.org/api 0.286.0 0.299.0
google.golang.org/genai 1.62.0 1.71.0
google.golang.org/genproto/googleapis/rpc 0.0.0-20260819154853-08b0e4226688 0.0.0-20260928230214-8a89bd6388cc
google.golang.org/grpc 1.83.2 1.84.0
k8s.io/api 0.37.0 0.37.1
k8s.io/apiextensions-apiserver 0.37.0 0.37.1
k8s.io/apimachinery 0.37.0 0.37.1
k8s.io/client-go 0.37.0 0.37.1
sigs.k8s.io/controller-runtime 0.24.1 0.25.2
sigs.k8s.io/gateway-api/conformance 1.6.1 1.6.2

Updates github.com/Azure/azure-sdk-for-go/sdk/azcore from 1.22.0 to 1.23.2

Release notes

Sourced from github.com/Azure/azure-sdk-for-go/sdk/azcore's releases.

sdk/azcore/v1.23.2

1.23.2 (2026-09-28)

Bugs Fixed

  • Fixed unmarshalling datetime.RFC7231 to use a fixed GMT zone.

sdk/azcore/v1.23.1

1.23.1 (2026-08-27)

Other Changes

  • Upgraded dependencies.

sdk/azcore/v1.23.0

1.23.0 (2026-08-11)

Features Added

  • Helper method runtime.NewRequestForNextLink for creating requests for pageable operations that uses a next link. It handles absolute and relative next links.

Bugs Fixed

  • Fixed an issue where runtime.Pager[T].More could return true indefinitely after NextPage failed to retrieve the first page, causing for pager.More() loops to spin. After a page fetch returns an error the Pager now enters a terminal state: More returns false and subsequent NextPage calls return the same error without invoking the fetcher again.
Commits
  • e6d2415 Unmarshalling RFC7231 sets GMT time zone (#27613)
  • 27cb570 Update dependencies (#27624)
  • 14e5800 Update CI to the latest two versions of Go (#27623)
  • f73af49 Configurations: 'specification/compute/resource-manager/Microsoft.Compute/Bu...
  • 339802c Add repository access guidance to deprecation guide (#27602)
  • a23355a [AutoPR sdk-resourcemanager/compute/armcompute]-generated-from-SDK Generation...
  • 1d0aa55 Remove feature branches from CI triggers [skip ci] (#27612)
  • a5cb5a0 Update storage CODEOWNERS: add Gunjan Singh, remove Sourav Gupta (#27607)
  • 31f47a8 [AutoPR sdk-resourcemanager/storage/armstorage]-generated-from-SDK Generation...
  • caa10be Deprecate armweightsandbiases (#27560)
  • Additional commits viewable in compare view

Updates github.com/Azure/azure-sdk-for-go/sdk/azidentity from 1.14.0 to 1.14.1

Release notes

Sourced from github.com/Azure/azure-sdk-for-go/sdk/azidentity's releases.

sdk/azidentity/v1.14.1

1.14.1 (2026-08-27)

Other Changes

  • Upgraded dependencies
Commits
  • 920e79a Prep azidentity for release (#27473)
  • d86ae78 Prep azcore for release (#27471)
  • 33dd768 [azwebpubsub] Fix GenerateClientAccessURL on the TokenCredential path (#27422)
  • a27ca57 Upgrade TypeSpec Go emitter dependencies (#27466)
  • af75eb0 [AutoPR sdk-resourcemanager/purestorageblock/armpurestorageblock]-generated-f...
  • 8dcff8c [AutoPR sdk-resourcemanager/redisenterprise/armredisenterprise]-generated-fro...
  • e4569f1 [AutoPR sdk-resourcemanager/chaos/armchaos]-generated-from-SDK Generation - G...
  • 7069bf8 [AutoPR sdk-resourcemanager/horizondb/armhorizondb]-generated-from-SDK Genera...
  • 5ceffce Bump gh-aw to v0.86.2 for mgmt review workflow (#27460)
  • 663b6ce Enhance azblob perf tests with OAuth, parallel setup, and profiling (#27324)
  • Additional commits viewable in compare view

Updates github.com/alecthomas/kong from 1.15.0 to 1.16.1

Commits
  • 0678fd3 Fix disabled DefaultEnvars help suffix (#638)
  • 33d3305 Fix single-character alias leaking between sibling commands (#637)
  • a5c9626 Fix counter panic on a uint or float field with an explicit --flag=N (#626)
  • b401ebf Fix filecontent mapper panicking on a non-[]byte target (#625)
  • 8cbde34 Fix panic when a float flag is resolved from an integer value (#621)
  • 649eaf2 chore(deps): update all non-major dependencies (#622)
  • ae4bfdd fix: correct typos in resolver.go and README.md (#617)
  • c2c0229 Fix env var validation conflicts (#619)
  • f95198e chore(deps): update all non-major dependencies (#608)
  • b03afc3 treat single-character aliases as short flags (#605)
  • Additional commits viewable in compare view

Updates github.com/andybalholm/brotli from 1.2.2 to 1.2.6

Commits
  • 451b9eb Improve Accept-Encoding negotiation
  • 3ecb1ba M4: Prevent spurious matches at distance 0.
  • 112bc8b FastEncoder: explicitly reject matches less than 4 bytes
  • 3995d4a Reader: clear input buffer on reset.
  • 078bdb0 ZM, Trio: update history even for very short blocks
  • 9140f7e flate: make the two copies of match splitting look alike
  • f88900b Remove test of implementation details.
  • 9933015 flate: split long matches in the statistics and token loops
  • 2e61b23 flate: split matches longer than 258 bytes
  • eede312 Fix problems found by go vet
  • Additional commits viewable in compare view

Updates github.com/anthropics/anthropic-sdk-go from 1.52.0 to 1.78.0

Release notes

Sourced from github.com/anthropics/anthropic-sdk-go's releases.

v1.78.0

1.78.0 (2026-09-30)

Full Changelog: v1.77.0...v1.78.0

Features

  • api: add list spend limits endpoint (597ed95)

Chores

  • api: mark Claude Sonnet 4.5 as deprecated (end-of-life November 30, 2026) (5464a3e)

v1.77.0

1.77.0 (2026-09-30)

Full Changelog: v1.76.0...v1.77.0

Features

  • analytics: keep the per-user report actor a union (#416) (03b3feb)
  • api: add a refusal stop reason and stop_details to Managed Agents session idle events (2225664)
  • api: add Claude Enterprise analytics, spend limits, and RBAC groups and roles to the Admin API (9039d31)
  • api: add per-user usage and cost reports to the Admin API analytics (14fa777)
  • api: add Plugins and Plugin Marketplaces to the Admin API (785997a)
  • api: add repository error types to Managed Agents session errors (9dfb79b)
  • api: allow removing a plugin's org-wide installation setting (ef365f2)
  • api: MCP tunnels beta: add read-only transport object to Tunnel and return the one-time relay token in the create response (f6572a5)
  • api: Organization API endpoints are now GA (4fc56d2)

Bug Fixes

  • api: make memory store description, metadata, archived_at required (b8bf04b)
  • api: type admin plugin preference and marketplace fields as enums (9e2de19)
  • client: redact sensitive headers in DumpRequest and DumpResponse (f57d275)
  • pagination: auto-paging continues past an empty page while next_page is set (2c8cdd7)
  • tools: stop the session tool runner after any idle that ends the turn (#413) (bb2421f)

Chores

  • api: update MCP Tunnels types and descriptions (1b0aac7)
  • docs: remove placeholder enum descriptions (d156e86)
  • tests: platform clients do not mirror the Organization service (#414) (108cfae)

v1.76.0

1.76.0 (2026-09-28)

... (truncated)

Changelog

Sourced from github.com/anthropics/anthropic-sdk-go's changelog.

1.78.0 (2026-09-30)

Full Changelog: v1.77.0...v1.78.0

Features

  • api: add list spend limits endpoint (597ed95)

Chores

  • api: mark Claude Sonnet 4.5 as deprecated (end-of-life November 30, 2026) (5464a3e)

1.77.0 (2026-09-30)

Full Changelog: v1.76.0...v1.77.0

Features

  • analytics: keep the per-user report actor a union (#416) (03b3feb)
  • api: add a refusal stop reason and stop_details to Managed Agents session idle events (2225664)
  • api: add Claude Enterprise analytics, spend limits, and RBAC groups and roles to the Admin API (9039d31)
  • api: add per-user usage and cost reports to the Admin API analytics (14fa777)
  • api: add Plugins and Plugin Marketplaces to the Admin API (785997a)
  • api: add repository error types to Managed Agents session errors (9dfb79b)
  • api: allow removing a plugin's org-wide installation setting (ef365f2)
  • api: MCP tunnels beta: add read-only transport object to Tunnel and return the one-time relay token in the create response (f6572a5)
  • api: Organization API endpoints are now GA (4fc56d2)

Bug Fixes

  • api: make memory store description, metadata, archived_at required (b8bf04b)
  • api: type admin plugin preference and marketplace fields as enums (9e2de19)
  • client: redact sensitive headers in DumpRequest and DumpResponse (f57d275)
  • pagination: auto-paging continues past an empty page while next_page is set (2c8cdd7)
  • tools: stop the session tool runner after any idle that ends the turn (#413) (bb2421f)

Chores

  • api: update MCP Tunnels types and descriptions (1b0aac7)
  • docs: remove placeholder enum descriptions (d156e86)
  • tests: platform clients do not mirror the Organization service (#414) (108cfae)

1.76.0 (2026-09-28)

Full Changelog: v1.75.0...v1.76.0

Features

... (truncated)

Commits
  • c9ebe44 Merge pull request #448 from anthropics/release-please--branches--main--chang...
  • 1e8c4aa release: 1.78.0
  • 5464a3e chore(api): mark Claude Sonnet 4.5 as deprecated (end-of-life November 30, 2026)
  • 597ed95 feat(api): add list spend limits endpoint
  • 4fb7c7f Merge branch 'main' into next
  • ccc5e06 Merge pull request #447 from anthropics/release-please--branches--main--chang...
  • 617823d release: 1.77.0
  • 03b3feb feat(analytics): keep the per-user report actor a union (#416)
  • bb2421f fix(tools): stop the session tool runner after any idle that ends the turn (#...
  • 108cfae chore(tests): platform clients do not mirror the Organization service (#414)
  • Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2 from 1.45.1 to 1.47.1
Updates github.com/aws/aws-sdk-go-v2/config from 1.32.25 to 1.33.6
Updates github.com/aws/aws-sdk-go-v2/service/sts from 1.47.1 to 1.51.1

Commits

Updates github.com/bytedance/sonic from 1.15.3 to 1.15.4

Release notes

Sourced from github.com/bytedance/sonic's releases.

v1.15.4

What's Changed

New Contributors

Full Changelog: bytedance/sonic@v1.15.3...v1.15.4

Commits
  • f1003e1 fix: trim fallback EncodeIndented newline
  • 298d563 docs(ast): fix path search comment spelling
  • 95a0ee5 fix(jitdec): prevent GC crashes when decoding full arrays
  • See full diff in compare view

Updates github.com/cohere-ai/cohere-go/v2 from 2.18.0 to 2.19.0

Release notes

Sourced from github.com/cohere-ai/cohere-go/v2's releases.

v2.19.0

What's Changed

Full Changelog: cohere-ai/cohere-go@v2.18.2...v2.19.0

v2.18.2

What's Changed

New Contributors

Full Changelog: cohere-ai/cohere-go@v2.17.0...v2.18.2

Commits

Updates github.com/coreos/go-oidc/v3 from 3.19.0 to 3.21.0

Release notes

Sourced from github.com/coreos/go-oidc/v3's releases.

v3.21.0

What's Changed

New Contributors

Full Changelog: coreos/go-oidc@v3.20.0...v3.21.0

v3.20.0

What's Changed

Full Changelog: coreos/go-oidc@v3.19.0...v3.20.0

Commits
  • c914bd3 oidc: ignore JWKs with unsupported key types rather than failing
  • 75dfa5c oidc: add constants for "email" and "profile" scopes
  • a89f046 oidc: add API for determining when issuer URLs mismatch
  • 6a69b6d readme: update README and docs
  • f9049c9 oidc: ignore JWKs with unknown signing algorithms rather than failing
  • 2f178e0 SECURITY.md: add a security policy and point to project-level reporting
  • b3bc7da oidc: improve documentation for APIs
  • 0db9053 oidc: modernize with new Go APIs
  • See full diff in compare view

Updates github.com/envoyproxy/go-control-plane/envoy from 1.37.1-0.20260729145720-a2d8c7492908 to 1.39.0

Release notes

Sourced from github.com/envoyproxy/go-control-plane/envoy's releases.

envoy/v1.39.0

Full Changelog: envoy/v1.38.0...envoy/v1.39.0

envoy/v1.38.0

Full Changelog: envoy/v1.37.0...envoy/v1.38.0

Commits

Updates github.com/moby/moby/api from 1.55.0 to 1.56.0

Release notes

Sourced from github.com/moby/moby/api's releases.

api/v1.56.0

1.56.0

Changelog

  • GET /containers/json now supports an annotation filter to filter containers by annotation, either by key (annotation=key) or by key and value (annotation="key=value"), similar to the existing label filter. moby/moby#53538
  • POST /containers/create now supports HostConfig.Umask to set the initial umask for a Unix container. When set, the daemon includes the value in the OCI process configuration for the container's entrypoint, exec processes, and healthchecks. When omitted, the runtime's default behavior applies.moby/moby#53463
  • api/docs: sync API docs v1.25 - v1.55. moby/moby#53246
  • api/swagger: Align Healthcheck name with Go struct. moby/moby#53567
  • api/types/plugin: Deprecated plugin.Privileges sorting methods in favor of slices.SortFunc. moby/moby#53511
  • api/types/plugin: fix Privileges Swap implementation. moby/moby#53510
  • api: Bump to 1.56. moby/moby#53425
  • api: document Task.NetworksAttachments in the swagger definition. moby/moby#53082
  • api: remove gotest.tools from tests. moby/moby#53535
  • api: swagger: Use int64 for build query params. moby/moby#53520
  • api: use blackbox testing. moby/moby#53525
  • Fix API reference documenting an unsupported names filter for GET /configs. moby/moby#53447
Commits
  • 9b2179d Merge pull request #53572 from vvoland/api-docs-cut
  • 575cf82 Merge pull request #53571 from thaJeztah/bump_tools
  • 20beedb api/docs: Cut v1.56
  • bb86302 Merge pull request #53569 from vvoland/afvsock-lsm
  • 65be55a Merge pull request #53513 from thaJeztah/daemon_fix_list
  • 0af79c4 Merge pull request #53570 from vvoland/process-release
  • 7d1ce6a Merge pull request #53568 from renovate-bot/renovate/github.com-mdlayher-sock...
  • 0df1a00 Dockerfile: update cli v29.7.2, compose v5.5.1, buildx v0.37.0
  • e1d06bd Drop replace rules
  • b40d37e Merge pull request #53359 from vvoland/ext-namegenerator
  • Additional commits viewable in compare view

Updates github.com/modelcontextprotocol/go-sdk from 1.7.0 to 1.8.0

Release notes

Sourced from github.com/modelcontextprotocol/go-sdk's releases.

v1.8.0

This release is equivalent to v1.8.0-pre.2. Thank you to those who tested the pre-release.

In this release we introduce several fixes and improvements on top of v1.7.0. It adds no new protocol revision: the supported set is unchanged, and 2026-07-28 remains the newest version the SDK negotiates.

The bulk of the work is hardening the transports against resource exhaustion, closing session leaks, deadlocks and teardown hangs found by users running the new protocol at scale, and giving servers explicit control over which protocol versions they advertise.

Two behavior changes are guarded by new MCPGODEBUG flags; see the section below.

Hardening against resource exhaustion

Every decoding path that buffers incoming input is now bounded. JSON payloads are rejected past 1000 levels of nesting, before the parser recurses. Both SSE readers cap the bytes buffered for a single event via MaxEventSize on SSEClientTransport and StreamableClientTransport, and the stdio transport caps a single JSON-RPC frame via StdioTransport.MaxLineLength.

On the OAuth side, dynamic client registration responses are bounded to 1 MB, and the discovery code now validates metadata documents rather than trusting them.

Restricting the protocol versions a server supports

ServerOptions.SupportedProtocolVersions lets a server narrow the set of versions it advertises and negotiates. The list can only narrow, never widen; naming a version the SDK does not implement panics at construction. Relatedly, a stateful streamable handler receiving a 2026-07-28 request now returns that same JSON-RPC error instead of a plain-text 400, so the client can renegotiate down instead of losing the connection.

Per-request cache control

ServerOptions.SetCacheable is a new hook that decides the ttlMs and cacheScope fields of every result carrying them: server/discover, the four list methods, and resources/read. It runs once per result, after the handler returns, with the values that handler produced, so it can set a policy globally while still letting an individual handler override it. Anything left unset falls back to the protocol default of public.

Behavior changes guarded by MCPGODEBUG

Two new escape-hatch flags restore the previous behavior of the changes above. Both will be removed in v1.9.0.

  • plaintextstatefulrejection=1 — restore the plain-text http.Error 400 body a stateful StreamableHTTPHandler previously returned for a request carrying per-request metadata. The default is now a JSON-RPC -32022 CodeUnsupportedProtocolVersion error with an UnsupportedProtocolVersionData payload advertising the legacy versions the server supports. Introduced by #1143.
  • blockingcancelnotify=1 — restore the previous behavior where a cancelled call waits synchronously for notifications/cancelled to be delivered (up to 5s) before returning, joining any delivery error into the caller's error. The default now retires the call immediately and sends the notification asynchronously. Introduced by #1151.

Options below were removed, according to plan:

  • seterroroverwrite
  • enableoriginverification
  • disablecontenttypecheck

... (truncated)

Commits
  • 3f3b699 refactor: remove legacy MCPGODEBUG compatibility for new protocol release (#1...
  • 830f0b7 mcp: update conformance tests (#1231)
  • 12cbafe oauthex: oauth discovery checks (#1220)
  • 3632967 mcp: add an sse event size cap (#1205)
  • 0d3036f mcp: allow per request Cacheable customization (#1203)
  • cb0de64 mcp: add a max request body size of the old transport (#1224)
  • 2fdabde mcp: do not check metatada on notifications (#1215)
  • 59185e6 build(deps): bump ossf/scorecard-action from 2.4.3 to 2.4.4 (#1217)
  • a6764cf build(deps): bump golang/govulncheck-action from 1.0.4 to 1.1.0 (#1218)
  • 8227246 fix: only subscribe when server advertises capability (#1221)
  • Additional commits viewable in compare view

Updates github.com/openai/openai-go/v3 from 3.41.0 to 3.68.0

Release notes

Sourced from github.com/openai/openai-go/v3's releases.

v3.68.0

3.68.0 (2026-09-29)

Features

  • api: add computer use to beta agents (#989) (a435999)

v3.67.0

3.67.0 (2026-09-29)

Features

  • api: add Agents credential and session options (#980) (a5955cc)
  • api: add Cyber access programs to Responses (#973) (399b02e)
  • api: add GPT-6.1 Sol model identifier (#988) (eb3c1db)
  • responses: add opt-in WebSocket text and tool-input snapshots (#982) (d7fd0c6)
  • responses: preserve provisional WebSocket accumulation details (#986) (e89227a)

Bug Fixes

  • honor Retry-After delays in line with the Python SDK (#987) (ba6afb0)
  • websocket: preserve safe close status across receivers and delivery errors (#985) (7c7af27)

Chores

  • api: clarify approximate web search location defaults (#971) (a9b3b22)
  • api: clarify documented API error responses (#979) (fefe204)
  • api: clarify Realtime modality array definitions (#972) (edc44ef)
  • api: correct fine-tuning bounds and Realtime response reference (#968) (69a8c4c)
  • api: document batch error responses (#976) (1ec6bf1)
  • api: document files and uploads error responses (#975) (f3489bf)
  • api: document fine-tuning and model errors (#978) (360fee6)
  • api: document Responses not-found errors (#974) (f7a713e)
  • api: document stored chat completion errors (#977) (db51851)

Documentation

  • clarify collaborator-only pull request policy (#966) (36662ee)

v3.66.0

3.66.0 (2026-09-23)

Features

... (truncated)

Changelog

Sourced from github.com/openai/openai-go/v3's changelog.

3.68.0 (2026-09-29)

Features

  • api: add computer use to beta agents (#989) (a435999)

3.67.0 (2026-09-29)

Features

  • api: add Agents credential and session options (#980) (a5955cc)
  • api: add Cyber access programs to Responses (#973) (399b02e)
  • api: add GPT-6.1 Sol model identifier (#988) (eb3c1db)
  • responses: add opt-in WebSocket text and tool-input snapshots (#982) (d7fd0c6)
  • responses: preserve provisional WebSocket accumulation details (#986) (e89227a)

Bug Fixes

  • honor Retry-After delays in line with the Python SDK (#987) (ba6afb0)
  • websocket: preserve safe close status across receivers and delivery errors (#985) (7c7af27)

Chores

  • api: clarify approximate web search location defaults (#971) (a9b3b22)
  • api: clarify documented API error responses (#979) (fefe204)
  • api: clarify Realtime modality array definitions (#972) (edc44ef)
  • api: correct fine-tuning bounds and Realtime response reference (#968) (69a8c4c)
  • api: document batch error responses (#976) (1ec6bf1)
  • api: document files and uploads error responses (#975) (f3489bf)
  • api: document fine-tuning and model errors (

@dependabot
build(deps): bump the go group across 1 directory with 37 updates
4247f59 
---
updated-dependencies:
- dependency-name: github.com/Azure/azure-sdk-for-go/sdk/azcore
  dependency-version: 1.23.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/Azure/azure-sdk-for-go/sdk/azidentity
  dependency-version: 1.14.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: github.com/alecthomas/kong
  dependency-version: 1.16.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/andybalholm/brotli
  dependency-version: 1.2.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: github.com/anthropics/anthropic-sdk-go
  dependency-version: 1.78.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/aws/aws-sdk-go-v2
  dependency-version: 1.47.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/aws/aws-sdk-go-v2/config
  dependency-version: 1.33.6
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/aws/aws-sdk-go-v2/service/sts
  dependency-version: 1.51.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/bytedance/sonic
  dependency-version: 1.15.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: github.com/cohere-ai/cohere-go/v2
  dependency-version: 2.19.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/coreos/go-oidc/v3
  dependency-version: 3.21.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/envoyproxy/go-control-plane/envoy
  dependency-version: 1.39.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/moby/moby/api
  dependency-version: 1.56.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/modelcontextprotocol/go-sdk
  dependency-version: 1.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/openai/openai-go/v3
  dependency-version: 3.68.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/prometheus/client_model
  dependency-version: 0.6.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: github.com/prometheus/common
  dependency-version: 0.72.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/testcontainers/testcontainers-go
  dependency-version: 0.44.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: go.opentelemetry.io/contrib/exporters/autoexport
  dependency-version: 0.71.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: go.opentelemetry.io/contrib/propagators/autoprop
  dependency-version: 0.71.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: go.opentelemetry.io/otel/exporters/stdout/stdouttrace
  dependency-version: 1.46.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: go.opentelemetry.io/proto/otlp
  dependency-version: 1.11.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: golang.org/x/exp
  dependency-version: 0.0.0-20260908205506-85c1c2202aba
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: golang.org/x/net
  dependency-version: 0.59.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: golang.org/x/oauth2
  dependency-version: 0.37.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: golang.org/x/sync
  dependency-version: 0.24.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: golang.org/x/tools
  dependency-version: 0.50.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: google.golang.org/api
  dependency-version: 0.299.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: google.golang.org/genai
  dependency-version: 1.71.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: google.golang.org/genproto/googleapis/rpc
  dependency-version: 0.0.0-20260928230214-8a89bd6388cc
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: google.golang.org/grpc
  dependency-version: 1.84.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: k8s.io/api
  dependency-version: 0.37.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: k8s.io/apiextensions-apiserver
  dependency-version: 0.37.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: k8s.io/apimachinery
  dependency-version: 0.37.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: k8s.io/client-go
  dependency-version: 0.37.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: sigs.k8s.io/controller-runtime
  dependency-version: 0.25.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: sigs.k8s.io/gateway-api/conformance
  dependency-version: 1.6.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot requested a review from a team as a code owner October 15, 2026 11:57
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Oct 15, 2026
@netlify

netlify Bot commented Oct 15, 2026 •
edited
Loading

Copy link
Copy Markdown

✅ Deploy Preview for theagentrouter canceled.

Name Link
🔨 Latest commit 4247f59
🔍 Latest deploy log https://app.netlify.com/projects/theagentrouter/deploys/6ad0bfcade304332a11e93fa

@codecov

codecov Bot commented Oct 15, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants