Skip to content

chore(deps): bump the go-minor-patch group with 8 updates - #1125

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/go-minor-patch-a05b13bff3
Closed

chore(deps): bump the go-minor-patch group with 8 updates#1125
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/go-minor-patch-a05b13bff3

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 26, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the go-minor-patch group with 8 updates:

Package From To
github.com/anthropics/anthropic-sdk-go 1.82.0 1.84.0
github.com/aws/aws-sdk-go-v2 1.47.3 1.47.4
github.com/aws/aws-sdk-go-v2/config 1.33.9 1.33.10
github.com/aws/aws-sdk-go-v2/service/secretsmanager 1.50.4 1.50.6
github.com/getkin/kin-openapi 0.151.0 0.152.0
github.com/oapi-codegen/gin-middleware 1.1.0 1.2.1
github.com/openai/openai-go/v3 3.78.0 3.86.0
google.golang.org/api 0.304.0 0.308.0

Updates github.com/anthropics/anthropic-sdk-go from 1.82.0 to 1.84.0

Release notes

Sourced from github.com/anthropics/anthropic-sdk-go's releases.

v1.84.0

Features

  • api: add org webhook endpoints and user profile enforcement events

Chores

  • ci: run the changelog check on a standard runner

v1.83.0

Features

  • api: add data_refreshed_at and has_more to analytics report pages
  • api: add workspace rate-limit updates to the Admin API
  • api: make User Profiles generally available
  • client: yield server-sent events with unrecognized event names
  • google-cloud: use the v1 endpoints and add the organization endpoint

Bug Fixes

  • client: close the response body of calls that discard the response
  • client: treat x-amz-security-token as a sensitive header

Chores

  • ci: fix Go cache restore when go.mod sets a newer toolchain
  • ci: skip the changelog check on draft pull requests
  • docs: add credential expiry descriptions to the Managed Agents API reference
  • docs: add Messages API request descriptions
  • docs: correct plugin manifest_version and reach descriptions
  • docs: improve Managed Agents memory store descriptions
  • docs: improve Managed Agents vault and credential descriptions
Changelog

Sourced from github.com/anthropics/anthropic-sdk-go's changelog.

1.84.0 (2026-10-20)

Features

  • api: add org webhook endpoints and user profile enforcement events

Chores

  • ci: run the changelog check on a standard runner

1.83.0 (2026-10-20)

Features

  • api: add data_refreshed_at and has_more to analytics report pages
  • api: add workspace rate-limit updates to the Admin API
  • api: make User Profiles generally available
  • client: yield server-sent events with unrecognized event names
  • google-cloud: use the v1 endpoints and add the organization endpoint

Bug Fixes

  • client: close the response body of calls that discard the response
  • client: treat x-amz-security-token as a sensitive header

Chores

  • ci: fix Go cache restore when go.mod sets a newer toolchain
  • ci: skip the changelog check on draft pull requests
  • docs: add credential expiry descriptions to the Managed Agents API reference
  • docs: add Messages API request descriptions
  • docs: correct plugin manifest_version and reach descriptions
  • docs: improve Managed Agents memory store descriptions
  • docs: improve Managed Agents vault and credential descriptions
Commits
  • 1e8e13c release: 1.84.0
  • 3208f69 Merge pull request #502 from anthropics/synced/published
  • 8f7877b feat(api): add org webhook endpoints and user profile enforcement events
  • 4fadf22 codegen metadata
  • 26b6a77 codegen metadata
  • b632381 chore(ci): run the changelog check on a standard runner
  • 4ac8e6e fix(sessions): settle tool calls invalidated by a processed session-wide inte...
  • addf728 Merge branch 'main'
  • da9a9fb release: 1.83.0
  • 645b398 Merge pull request #485 from anthropics/synced/published
  • Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2 from 1.47.3 to 1.47.4

Commits

Updates github.com/aws/aws-sdk-go-v2/config from 1.33.9 to 1.33.10

Commits

Updates github.com/aws/aws-sdk-go-v2/service/secretsmanager from 1.50.4 to 1.50.6

Commits

Updates github.com/getkin/kin-openapi from 0.151.0 to 0.152.0

Release notes

Sourced from github.com/getkin/kin-openapi's releases.

v0.152.0

What's Changed

New Contributors

Full Changelog: getkin/kin-openapi@v0.151.0...v0.152.0

Commits
  • 2420538 changelog: fixup rebased messes (#1372)
  • 52aade8 openapi3: test $ref siblings with the cases of #1271
  • 98fd8d4 openapi3: internalize, version and locate the keywords next to a schema $ref
  • c59eda0 openapi3: merge the fields next to a path item's $ref with the item it points to
  • 11caa38 openapi3: tell apart a $ref being resolved as different kinds of objects
  • cb14646 openapi3: marshal the fields written next to a $ref
  • 0375a5d openapi3: apply a 3.1 schema's $ref siblings alongside the referenced schema
  • 79ac3c4 openapi3: ignore the fields next to a Reference Object's $ref in every version
  • 35b08af openapi3filter: honor ExcludeRequestQueryParams for path item parameters (#1365)
  • 1b2754d openapi3filter: validate response headers described with content (#1358)
  • Additional commits viewable in compare view

Updates github.com/oapi-codegen/gin-middleware from 1.1.0 to 1.2.1

Release notes

Sourced from github.com/oapi-codegen/gin-middleware's releases.

v1.2.1: keep the validated request body value by default

This release enables openapi3filter.Options.KeepValidatedValue by default. It was meant to ship in v1.2.0 together with the kin-openapi v0.152.0 update, but was merged after that release was published.

With it on, the validator leaves the request body readable exactly as before and additionally keeps the decoded, validated JSON value on the body, reachable through its ValidatedValue() any method. Upcoming oapi-codegen strict server templates use this to bind the value that was actually validated instead of decoding the body a second time, which closes the gap described in oapi-codegen/oapi-codegen#2605 (encoding/json matches member names case-insensitively, so a second decode can pick up a member the validator never saw).

Handlers that read the body see no difference. The only costs are that the decoded value stays in memory for the lifetime of the request, and that the body no longer implements optional interfaces such as io.WriterTo.

To opt out, set DiscardValidatedValue: true in this middleware's Options. This setting overrides KeepValidatedValue in the embedded openapi3filter.Options. Middleware that replaces the request body must run before the validator, otherwise the validated value is lost.

🚀 New features and improvements

Sponsors

We would like to thank our sponsors for their support during this release.

v1.2.0: kin-openapi v0.152.0 dependency update

This is a dependency update release. It moves the required kin-openapi version to v0.152.0, which also raises the minimum for every project using this middleware.

Behaviour changes that come with kin-openapi v0.150.0 to v0.152.0 and that users may notice:

  • JSON request bodies with duplicate member names are rejected when the binary is built with Go 1.27 and its default encoding/json (this is decided by the toolchain, not by this middleware).
  • In OpenAPI 3.0 documents, fields placed next to a $ref are ignored, as the specification requires.
  • Integer parameters are parsed as base 10 only.
  • spaceDelimited and pipeDelimited query parameters default to explode: false.
  • openapi3filter.Options.KeepValidatedValue is available for passing through Options.Options; it leaves the validated request body value on the request for handlers that can use it.

This release also picks up the kin-openapi security fix from v0.149.0 (GHSA-r277-6w6q-xmqw) for anyone still on an older version.

📦 Dependency updates

  • fix(deps): update module github.com/getkin/kin-openapi to v0.152.0 (#50) @renovate[bot]
  • chore(deps): update oapi-codegen/actions action to v0.9.2 (#49) @renovate[bot]

... (truncated)

Commits
  • 90822c6 Keep the validated request body value by default (#51)
  • 673f7d5 fix(deps): update module github.com/getkin/kin-openapi to v0.152.0 (#50)
  • 615607a chore(deps): update oapi-codegen/actions action to v0.9.2 (#49)
  • 096be36 chore(deps): update module github.com/golangci/golangci-lint to v2.15.0 (#48)
  • 9103ad5 fix(deps): update module github.com/getkin/kin-openapi to v0.149.0 [security]...
  • 22ea3eb fix(deps): update module github.com/getkin/kin-openapi to v0.143.0 (#45)
  • See full diff in compare view

Updates github.com/openai/openai-go/v3 from 3.78.0 to 3.86.0

Release notes

Sourced from github.com/openai/openai-go/v3's releases.

v3.86.0

3.86.0 (2026-10-23)

Features

  • api: Breaking change in a minor release. Decisions and Live question Instructions fields now use typed unions to support a string or a list of text, image, or JSON parts. Existing Go code that assigns a string directly, such as Instructions: "check", no longer compiles; wrap it in the field’s union type, for example Instructions: openai.DecisionNewParamsQuestionPredicateInstructionsUnion{OfString: openai.String("check")}. For Live responses, check question.Instructions.JSON.OfString.Valid() before reading question.Instructions.OfString, and handle question.Instructions.OfArrayOfDecisionQuestionInputPartUnion for the list case. Decisions request inputs also support additional message roles and tool-history items; update code that assumes it knows every input type. String instructions remain supported through the union, and the existing DecisionInputMessageParam user-message input form still works. (#1147) (bc63762)

Chores

v3.85.1

3.85.1 (2026-10-22)

Bug Fixes

  • api: respect each WebSocket authentication attempt timeout (#1142) (e7c9fe9)

Chores

  • api: clarify service-account API key deletion (#1144) (58b1902)

v3.85.0

3.85.0 (2026-10-21)

Features

  • add Vertex AI support for the Responses API (#1138) (7f77340)

v3.84.1

3.84.1 (2026-10-21)

Bug Fixes

  • auth: avoid a race in X.509 HTTP/2 transport revalidation (#1128) (61e5e17)
  • responses: release failed WebSocket restoration on unwind (#1120) (bd4c06f)

Chores

v3.84.0

... (truncated)

Changelog

Sourced from github.com/openai/openai-go/v3's changelog.

3.86.0 (2026-10-23)

Features

  • api: Breaking change in a minor release. Decisions and Live question Instructions fields now use typed unions to support a string or a list of text, image, or JSON parts. Existing Go code that assigns a string directly, such as Instructions: "check", no longer compiles; wrap it in the field’s union type, for example Instructions: openai.DecisionNewParamsQuestionPredicateInstructionsUnion{OfString: openai.String("check")}. For Live responses, check question.Instructions.JSON.OfString.Valid() before reading question.Instructions.OfString, and handle question.Instructions.OfArrayOfDecisionQuestionInputPartUnion for the list case. Decisions request inputs also support additional message roles and tool-history items; update code that assumes it knows every input type. String instructions remain supported through the union, and the existing DecisionInputMessageParam user-message input form still works. (#1147) (bc63762)

Chores

3.85.1 (2026-10-22)

Bug Fixes

  • api: respect each WebSocket authentication attempt timeout (#1142) (e7c9fe9)

Chores

  • api: clarify service-account API key deletion (#1144) (58b1902)

3.85.0 (2026-10-21)

Features

  • add Vertex AI support for the Responses API (#1138) (7f77340)

3.84.1 (2026-10-21)

Bug Fixes

  • auth: avoid a race in X.509 HTTP/2 transport revalidation (#1128) (61e5e17)
  • responses: release failed WebSocket restoration on unwind (#1120) (bd4c06f)

Chores

3.84.0 (2026-10-21)

Features

... (truncated)

Commits

Updates google.golang.org/api from 0.304.0 to 0.308.0

Release notes

Sourced from google.golang.org/api's releases.

v0.308.0

0.308.0 (2026-10-22)

Features

v0.307.0

0.307.0 (2026-10-21)

Features

v0.306.0

0.306.0 (2026-10-20)

Features

Bug Fixes

  • gensupport: Defer chunk context cancellation until response body is closed (#3782) (ef4e011)

v0.305.0

0.305.0 (2026-10-18)

Features

Changelog

Sourced from google.golang.org/api's changelog.

0.308.0 (2026-10-22)

Features

0.307.0 (2026-10-21)

Features

0.306.0 (2026-10-20)

Features

Bug Fixes

  • gensupport: Defer chunk context cancellation until response body is closed (#3782) (ef4e011)

0.305.0 (2026-10-18)

Features

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps): bump the go-minor-patch group with 8 updates
eee960a 
Bumps the go-minor-patch group with 8 updates:

| Package | From | To |
| --- | --- | --- |
| [github.com/anthropics/anthropic-sdk-go](https://github.com/anthropics/anthropic-sdk-go) | `1.82.0` | `1.84.0` |
| [github.com/aws/aws-sdk-go-v2](https://github.com/aws/aws-sdk-go-v2) | `1.47.3` | `1.47.4` |
| [github.com/aws/aws-sdk-go-v2/config](https://github.com/aws/aws-sdk-go-v2) | `1.33.9` | `1.33.10` |
| [github.com/aws/aws-sdk-go-v2/service/secretsmanager](https://github.com/aws/aws-sdk-go-v2) | `1.50.4` | `1.50.6` |
| [github.com/getkin/kin-openapi](https://github.com/getkin/kin-openapi) | `0.151.0` | `0.152.0` |
| [github.com/oapi-codegen/gin-middleware](https://github.com/oapi-codegen/gin-middleware) | `1.1.0` | `1.2.1` |
| [github.com/openai/openai-go/v3](https://github.com/openai/openai-go) | `3.78.0` | `3.86.0` |
| [google.golang.org/api](https://github.com/googleapis/google-api-go-client) | `0.304.0` | `0.308.0` |


Updates `github.com/anthropics/anthropic-sdk-go` from 1.82.0 to 1.84.0
- [Release notes](https://github.com/anthropics/anthropic-sdk-go/releases)
- [Changelog](https://github.com/anthropics/anthropic-sdk-go/blob/main/CHANGELOG.md)
- [Commits](anthropics/anthropic-sdk-go@v1.82.0...v1.84.0)

Updates `github.com/aws/aws-sdk-go-v2` from 1.47.3 to 1.47.4
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@v1.47.3...v1.47.4)

Updates `github.com/aws/aws-sdk-go-v2/config` from 1.33.9 to 1.33.10
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@config/v1.33.9...config/v1.33.10)

Updates `github.com/aws/aws-sdk-go-v2/service/secretsmanager` from 1.50.4 to 1.50.6
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@service/kms/v1.50.4...service/acm/v1.50.6)

Updates `github.com/getkin/kin-openapi` from 0.151.0 to 0.152.0
- [Release notes](https://github.com/getkin/kin-openapi/releases)
- [Commits](getkin/kin-openapi@v0.151.0...v0.152.0)

Updates `github.com/oapi-codegen/gin-middleware` from 1.1.0 to 1.2.1
- [Release notes](https://github.com/oapi-codegen/gin-middleware/releases)
- [Commits](oapi-codegen/gin-middleware@v1.1.0...v1.2.1)

Updates `github.com/openai/openai-go/v3` from 3.78.0 to 3.86.0
- [Release notes](https://github.com/openai/openai-go/releases)
- [Changelog](https://github.com/openai/openai-go/blob/main/CHANGELOG.md)
- [Commits](openai/openai-go@v3.78.0...v3.86.0)

Updates `google.golang.org/api` from 0.304.0 to 0.308.0
- [Release notes](https://github.com/googleapis/google-api-go-client/releases)
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md)
- [Commits](googleapis/google-api-go-client@v0.304.0...v0.308.0)

---
updated-dependencies:
- dependency-name: github.com/anthropics/anthropic-sdk-go
  dependency-version: 1.84.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-patch
- dependency-name: github.com/aws/aws-sdk-go-v2
  dependency-version: 1.47.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-minor-patch
- dependency-name: github.com/aws/aws-sdk-go-v2/config
  dependency-version: 1.33.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-minor-patch
- dependency-name: github.com/aws/aws-sdk-go-v2/service/secretsmanager
  dependency-version: 1.50.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-minor-patch
- dependency-name: github.com/getkin/kin-openapi
  dependency-version: 0.152.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-patch
- dependency-name: github.com/oapi-codegen/gin-middleware
  dependency-version: 1.2.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-patch
- dependency-name: github.com/openai/openai-go/v3
  dependency-version: 3.86.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-patch
- dependency-name: google.golang.org/api
  dependency-version: 0.308.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Oct 26, 2026
@github-actions
github-actions Bot enabled auto-merge (squash) October 26, 2026 04:58
@dependabot @github

dependabot Bot commented on behalf of github Oct 27, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are no longer updatable, so this is no longer needed.

@dependabot dependabot Bot closed this Oct 27, 2026
auto-merge was automatically disabled October 27, 2026 02:13

Pull request was closed

@dependabot
dependabot Bot deleted the dependabot/go_modules/go-minor-patch-a05b13bff3 branch October 27, 2026 02:13
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants