chore(deps): update go dependencies by renovate[bot] · Pull Request #2500 · stacklok/mecatl

renovate · 2026-10-24T06:03:45Z

Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Type	Update
github.com/anthropics/anthropic-sdk-go	`v1.73.0` → `v1.84.0`	require	minor
github.com/bmatcuk/doublestar/v4	`v4.10.2` → `v4.10.4`	require	patch
github.com/godbus/dbus/v5	`v5.2.2` → `v5.2.4`	require	patch
github.com/google/pprof	`7bae8d8` → `1facf8f`	require	digest
github.com/lestrrat-go/jwx/v4	`v4.5.0` → `v4.6.0`	require	minor
github.com/openai/openai-go/v3	`v3.61.0` → `v3.86.0`	require	minor
github.com/prometheus/procfs	`v0.22.0` → `v0.23.0`	require	minor
github.com/stacklok/mecatl	`v0.0.48` → `v0.0.50`	require	patch
github.com/stacklok/toolhive	`v0.55.1` → `v0.56.0`	require	minor
github.com/stacklok/toolhive-core	`v0.0.55` → `v0.0.57`	require	patch
github.com/stacklok/toolhive-core/redisconn	`v0.0.4` → `v0.0.57`	require	patch
github.com/tiktoken-go/tokenizer	`v0.8.1` → `v0.10.0`	require	minor
go.opentelemetry.io/contrib/instrumentation/runtime	`v0.69.0` → `v0.72.0`	require	minor
google.golang.org/genproto/googleapis/rpc	`4341edf` → `ce908d2`	require	digest
k8s.io/utils	`cf1189d` → `ca04ba5`	require	digest

Release Notes

anthropics/anthropic-sdk-go (github.com/anthropics/anthropic-sdk-go)

`v1.84.0`

Compare Source

Features

api: add org webhook endpoints and user profile enforcement events

Chores

ci: run the changelog check on a standard runner

`v1.83.0`

Compare Source

Features

api: add data_refreshed_at and has_more to analytics report pages
api: add workspace rate-limit updates to the Admin API
api: make User Profiles generally available
client: yield server-sent events with unrecognized event names
google-cloud: use the v1 endpoints and add the organization endpoint

Bug Fixes

client: close the response body of calls that discard the response
client: treat x-amz-security-token as a sensitive header

Chores

ci: fix Go cache restore when go.mod sets a newer toolchain
ci: skip the changelog check on draft pull requests
docs: add credential expiry descriptions to the Managed Agents API reference
docs: add Messages API request descriptions
docs: correct plugin manifest_version and reach descriptions
docs: improve Managed Agents memory store descriptions
docs: improve Managed Agents vault and credential descriptions

`v1.82.0`

Compare Source

Features

api: add between_tools to thinking types in model capabilities
api: add the speed parameter and usage.speed to Messages
api: return a Console organization's usage-tier spend cap as a read-only spend limit

Chores

ci: speed up breaking change detection
docs: describe headers on Managed Agents and telemetry endpoints
tests: add tests for custom HTTP clients and trace propagation

Documentation

api: note that some models need a beta header to use speed

`v1.81.0`

Compare Source

Features

api: add execution_identity to Managed Agents agents
api: add organization_type_not_supported error to spend limit lists
api: add telemetry destination test endpoint
api: add telemetry destinations to the Admin API
client: add native support for OpenTelemetry tracing

If your app registers a global tracer provider, the SDK will create spans with it after upgrading, and they'll be exported with the rest of your traces. Requests will also get trace context headers from the global propagator. To disable, pass option.WithoutOpenTelemetry() to the client or set ANTHROPIC_OPEN_TELEMETRY=false. Learn more in the documentation.

Bug Fixes

api: rename telemetry destination test response model
client: return a constant's value from a param union's getter
client: skip comment-only blocks when decoding event streams
client: treat proxy-authorization as a sensitive header
set the required type field in union param constructor helpers

Chores

docs: correct prefill, thinking, fallback and model descriptions
docs: document the scope required to assign the managed role
docs: update model examples
internal: narrow the tripwire test rule in the contributor guides
tests: stop listing the stream event types in the accumulator test

Documentation

api: clarify when custom tool results can be sent
api: say is_enabled is always true for user spend limits

`v1.80.0`

Compare Source

Features

api: add types for the Chat and Cowork unified analytics metrics
api: add workflows, multiagent configuration and thread status filtering to Managed Agents

`v1.79.1`

Compare Source

Chores

ci: check that pull requests update the changelog
docs: note that listing Claude Console spend limits is in early access

`v1.79.0`

Compare Source

Full Changelog: v1.78.0...v1.79.0

Features

api: add claude-haiku-5-5 and typed computer and browser toolset tool calls (1930a5e)
api: add disabled to thinking types in model capabilities (3b88a46)
api: add display_name to RBAC roles and deprecate name (e568369)
api: add include_default parameter to list workspaces (a2acfc6)
api: add lifecycle stage fields and filter to /v1/models (2b3ea06)
api: add line to model objects (24b1d56)
api: add url_sources to the Managed Agents web_fetch tool config (3b88a46)
api: add web search and code execution support to model capabilities (3b88a46)
client: add All() iterators to SSE streams and auto-pagers (b0d7423)

Bug Fixes

api: send the beta header by default when listing spend limits (b8bcfc7)
auth: require https or loopback at every token endpoint (#431) (3b88a46)
client: percent-encode path params and reject dot-segment values (3b88a46)
client: return the field error when a param union variant fails to decode (a59fef2)
client: send array header params as a single comma-separated header (dace66e)
client: send default and caller-provided array header values in a single header (1ca109c)
environments: keep a local edit made after a memory upload whose response was lost (#441) (3b88a46)
return unmodeled content blocks and citations from ToParam instead of panicking (#436) (3b88a46)

Chores

api: keep the MessageParam name and drop generated constructors (3b88a46)
api: mark the Text Completions API as deprecated (3b88a46)
docs: correct example groups in rate limit list description (a489eb3)
docs: correct when usage and cost report data becomes final (3b88a46)
docs: describe a federation rule's target by its type (3b88a46)
docs: fix example IDs in sessions, agents and vault credentials (3b88a46)
docs: update Managed Agents multiagent and thread descriptions (3b88a46)
docs: update the activity summaries endpoint description (86f2da1)
docs: update the description of the Model line field (ad2ed3e)
internal: add REVIEW.md with review instructions (3b88a46)
internal: make mock server spec updates smaller in git history (3b88a46)
internal: move the custom unmarshaler test into the param decode tests (#444) (3b88a46)
tests: run tests skipped for a query param bug that is now fixed (3a8025b)
tests: run tests that an older mock server could not serve (4735a5a)

Documentation

api: list streaming-only methods in api.md under their real names (3b88a46)
api: state the agent tools limit as 256 (cfd31a5)
beta: point structured-output helper docs at output_config.format (#429) (3b88a46)
client: remove outdated param.Field note from Execute (fce1d47)

`v1.78.0`

Compare Source

Full Changelog: v1.78.0...v1.79.0

Features

api: add claude-haiku-5-5 and typed computer and browser toolset tool calls (1930a5e)
api: add disabled to thinking types in model capabilities (3b88a46)
api: add display_name to RBAC roles and deprecate name (e568369)
api: add include_default parameter to list workspaces (a2acfc6)
api: add lifecycle stage fields and filter to /v1/models (2b3ea06)
api: add line to model objects (24b1d56)
api: add url_sources to the Managed Agents web_fetch tool config (3b88a46)
api: add web search and code execution support to model capabilities (3b88a46)
client: add All() iterators to SSE streams and auto-pagers (b0d7423)

Bug Fixes

api: send the beta header by default when listing spend limits (b8bcfc7)
auth: require https or loopback at every token endpoint (#431) (3b88a46)
client: percent-encode path params and reject dot-segment values (3b88a46)
client: return the field error when a param union variant fails to decode (a59fef2)
client: send array header params as a single comma-separated header (dace66e)
client: send default and caller-provided array header values in a single header (1ca109c)
environments: keep a local edit made after a memory upload whose response was lost (#441) (3b88a46)
return unmodeled content blocks and citations from ToParam instead of panicking (#436) (3b88a46)

Chores

api: keep the MessageParam name and drop generated constructors (3b88a46)
api: mark the Text Completions API as deprecated (3b88a46)
docs: correct example groups in rate limit list description (a489eb3)
docs: correct when usage and cost report data becomes final (3b88a46)
docs: describe a federation rule's target by its type (3b88a46)
docs: fix example IDs in sessions, agents and vault credentials (3b88a46)
docs: update Managed Agents multiagent and thread descriptions (3b88a46)
docs: update the activity summaries endpoint description (86f2da1)
docs: update the description of the Model line field (ad2ed3e)
internal: add REVIEW.md with review instructions (3b88a46)
internal: make mock server spec updates smaller in git history (3b88a46)
internal: move the custom unmarshaler test into the param decode tests (#444) (3b88a46)
tests: run tests skipped for a query param bug that is now fixed (3a8025b)
tests: run tests that an older mock server could not serve (4735a5a)

Documentation

api: list streaming-only methods in api.md under their real names (3b88a46)
api: state the agent tools limit as 256 (cfd31a5)
beta: point structured-output helper docs at output_config.format (#429) (3b88a46)
client: remove outdated param.Field note from Execute (fce1d47)

`v1.77.0`

Compare Source

Full Changelog: v1.77.0...v1.78.0

Features

api: add list spend limits endpoint (597ed95)

Chores

api: mark Claude Sonnet 4.5 as deprecated (end-of-life November 30, 2026) (5464a3e)

`v1.76.0`

Compare Source

Full Changelog: v1.76.0...v1.77.0

Features

analytics: keep the per-user report actor a union (#416) (03b3feb)
api: add a refusal stop reason and stop_details to Managed Agents session idle events (2225664)
api: add Claude Enterprise analytics, spend limits, and RBAC groups and roles to the Admin API (9039d31)
api: add per-user usage and cost reports to the Admin API analytics (14fa777)
api: add Plugins and Plugin Marketplaces to the Admin API (785997a)
api: add repository error types to Managed Agents session errors (9dfb79b)
api: allow removing a plugin's org-wide installation setting (ef365f2)
api: MCP tunnels beta: add read-only transport object to Tunnel and return the one-time relay token in the create response (f6572a5)
api: Organization API endpoints are now GA (4fc56d2)

Bug Fixes

api: make memory store description, metadata, archived_at required (b8bf04b)
api: type admin plugin preference and marketplace fields as enums (9e2de19)
client: redact sensitive headers in DumpRequest and DumpResponse (f57d275)
pagination: auto-paging continues past an empty page while next_page is set (2c8cdd7)
tools: stop the session tool runner after any idle that ends the turn (#413) (bb2421f)

Chores

api: update MCP Tunnels types and descriptions (1b0aac7)
docs: remove placeholder enum descriptions (d156e86)
tests: platform clients do not mirror the Organization service (#414) (108cfae)

`v1.75.0`

Compare Source

Full Changelog: v1.75.0...v1.76.0

Features

api: add between_tools thinking type (bc5be8f)
api: add claude-sonnet-5-5 (48993ca)
api: add include_inherited and source to workspace rate limits (bd6bb6d)
api: add typed event type values to the Managed Agents events list filter (019b05b)
api: cache diagnostics GA — diagnostics on Message / MessageCreateParams (4ea973c)

Bug Fixes

client: pass HTTP client when cloning request config (cd8f34f)
client: retry when the connection drops part-way through a response (4f7f317)
client: send no placeholder filename for unnamed file uploads (968849c)
helpers: degrade between_tools thinking to disabled on fallback hops (#410) (aa15d36)

Performance Improvements

client: decode SSE streams without per-event allocations (0f84503)

Chores

ci: choose the CI runner by repository (acb082a)
docs: clarify that stream: true returns the raw event stream (5fafdf0)
docs: make Managed Agents actor descriptions resource-neutral (ae3cc2f)
docs: restore the research-preview notice on the Dream type (d95f40a)
internal: simplify request execution (4a68721)

Documentation

api: prefer each field's own description over its shared type's (d05f55e)

`v1.74.0`

Compare Source

Full Changelog: v1.74.0...v1.75.0

Features

api: add support for claude-opus-5-5, inline tool definitions and MCP tool-list pinning (beta) (0a2186a)

Bug Fixes

api: share one evaluated_permission enum across Managed Agents events (30e2056)
client: preserve extra fields when unmarshalling open-object params (c29d53b)
tools: AddTools takes effect straight away (#406) (21e68b2)
tools: leave reply-only params off the tool runner's compaction request (#404) (79ed488)

Chores

docs: add descriptions to the Dreams API reference (f7b86c8)
docs: add descriptions to the User Profiles API reference (f7b86c8)
docs: add memory store descriptions to the Managed Agents API reference (f7b86c8)
docs: improve descriptions in the Dreams API reference (39392dc)
docs: update diagnostics field descriptions on beta messages (eb18011)

Documentation

add path and header parameter descriptions (09da68f)

bmatcuk/doublestar (github.com/bmatcuk/doublestar/v4)

`v4.10.4`: Preserves segment position across alternatives

Compare Source

Fixes patterns like x{**/a,b} which should be treated like x*/a and xb because the doublestar appears mid-pattern.

What's Changed

fix: preserve segment position across brace alternatives by @yuefdev in #125

New Contributors

@yuefdev made their first contribution in #125

Full Changelog: bmatcuk/doublestar@v4.10.3...v4.10.4

`v4.10.3`: Handles character ranges when using WithCaseInsensitive

Compare Source

Character ranges, such as [a-z] would not match things like A when using WithCaseInsensitive. This release fixes that.

Thanks to @bensynapse for bringing this to my attention.

Full Changelog: bmatcuk/doublestar@v4.10.2...v4.10.3

godbus/dbus (github.com/godbus/dbus/v5)

`v5.2.4`

Compare Source

What's Changed

conn: return the system bus error on every OS by @SashaMIT in #448

New Contributors

@SashaMIT made their first contribution in #448

Full Changelog: godbus/dbus@v5.2.3...v5.2.4

`v5.2.3`

Compare Source

What's Changed

README: update by @kolyshkin in #431
Switch from reflect.Ptr to reflect.Pointer by @kolyshkin in #430
mediakeys.go example: Fix error handling. by @smu-ggl in #433
Test/fix CI issues by @guelfey in #439
Misc CI bumps; replace cirrus freebsd with GHA; add all-done job by @kolyshkin in #420
make GOOS=js GOARCH=wasm go build ./... work by @eliasnaur in #435
Do not swallow non-error panics in Encode/Decode by @kolyshkin in #438
Fix panic in DecodeMessageWithFDs on read error by @kolyshkin in #437
Do not embed reflect.Value into exportedMethod by @kolyshkin in #436
Add godbus_no_tcp build tag to disable tcp transports by @kolyshkin in #444
CI: bump golangci-lint to 2.14 by @guelfey in #447
Do not trust lengths from the input when allocating by @kolyshkin in #442
conn: support /run and /var/run default addresses by @twilly in #424

New Contributors

@smu-ggl made their first contribution in #433
@eliasnaur made their first contribution in #435
@twilly made their first contribution in #424

Full Changelog: godbus/dbus@v5.2.2...v5.2.3

lestrrat-go/jwx (github.com/lestrrat-go/jwx/v4)

`v4.6.0`

Compare Source

For more detailed release notes, see Changes.

What's Changed

build(deps): bump github/codeql-action from 4.37.9 to 4.38.0 by @dependabot[bot] in #2354
build(deps): bump golang.org/x/crypto from 0.56.0 to 0.57.0 by @dependabot[bot] in #2353
update jwx v4 guide by @lestrrat in #2355
require guide skill tests after API changes by @lestrrat in #2356
build(deps): bump github/codeql-action from 4.38.0 to 4.38.1 by @dependabot[bot] in #2359
build(deps): bump github/codeql-action from 4.38.1 to 4.38.2 by @dependabot[bot] in #2362
jwt: reject overflowing NumericDate values by @lestrrat in #2368
jwt: require numbers for pedantic NumericDate by @lestrrat in #2369
jws: support strict ECDSA curve checking during verification by @skarm in #2367
[v4] replace fastjson header probes with jsontext by @lestrrat in #2379
[v4] allow jwk set mutation during iteration by @lestrrat in #2380
[v4] fix jwt.Parse fast path with multiple keys by @lestrrat in #2382
[v4] fix jwt.Equal for map claims and member order by @lestrrat in #2383
[v4] keep trying jwe key providers after errors by @lestrrat in #2384
[v4] allow empty jwe ciphertext in JSON form by @lestrrat in #2386
[v4] write jwe unprotected header as JSON object by @lestrrat in #2388
handle shrinking JWK sets in verify and decrypt by @lestrrat in #2394
[v4] jwsbb: size SignBuffer per encoded part by @lestrrat in #2400
[v4] docs: fix wrong names and links in jwe/jwt by @lestrrat in #2403
[v4] guide: add nested JWT section by @lestrrat in #2404
[v4] jwt: honor NumericDate format precision by @lestrrat in #2409
[v4] jwt: parse negative NumericDate values by @lestrrat in #2411
[v4] jwt: parse decimal NumericDate values exactly by @lestrrat in #2413
build(deps): bump github/codeql-action from 4.38.2 to 4.38.3 by @dependabot[bot] in #2421
build(deps): bump golang.org/x/crypto from 0.57.0 to 0.58.0 by @dependabot[bot] in #2420
[v4] jws: sign only the protected header in JSON by @lestrrat in #2415
[v4] jwt: retry missing alg through jws.Verify by @lestrrat in #2422
Fix typo in migration documentation link by @frostmar in #2425
build(deps): bump github/codeql-action from 4.38.3 to 4.39.0 by @dependabot[bot] in #2428
use crypto/pbkdf2 and drop x/crypto by @lestrrat in #2430
require latest go patch release by @lestrrat in #2432
use shields.io for the deepwiki badge by @lestrrat in #2433
[v4] jws: add WithVerifiedSignature verify option by @lestrrat in #2434
[v4] jwe: add WithDecryptedRecipient decrypt option by @lestrrat in #2438
[v4] jws: fix crit and multi-signature docs by @lestrrat in #2435
[v4] jwe: document per-recipient headers by @lestrrat in #2439
[v4] ci: run autodoc only for develop/v4 by @lestrrat in #2446
[v4] release v4.6.0 by @lestrrat in #2448

New Contributors

@skarm made their first contribution in #2367
@frostmar made their first contribution in #2425

Full Changelog: lestrrat-go/jwx@v4.5.0...v4.6.0

openai/openai-go (github.com/openai/openai-go/v3)

`v3.86.0`

Compare Source

Features

api: Breaking change in a minor release. Decisions and Live question Instructions fields now use typed unions to support a string or a list of text, image, or JSON parts. Existing Go code that assigns a string directly, such as Instructions: "check", no longer compiles; wrap it in the field’s union type, for example Instructions: openai.DecisionNewParamsQuestionPredicateInstructionsUnion{OfString: openai.String("check")}. For Live responses, check question.Instructions.JSON.OfString.Valid() before reading question.Instructions.OfString, and handle question.Instructions.OfArrayOfDecisionQuestionInputPartUnion for the list case. Decisions request inputs also support additional message roles and tool-history items; update code that assumes it knows every input type. String instructions remain supported through the union, and the existing DecisionInputMessageParam user-message input form still works. (#1147) (bc63762)

Chores

align generated SDK maintenance tooling (#1146) (bcb69a7)

`v3.85.1`

Compare Source

Bug Fixes

api: respect each WebSocket authentication attempt timeout (#1142) (e7c9fe9)

Chores

api: clarify service-account API key deletion (#1144) (58b1902)

`v3.85.0`

Compare Source

Features

add Vertex AI support for the Responses API (#1138) (7f77340)

`v3.84.1`

Compare Source

Bug Fixes

auth: avoid a race in X.509 HTTP/2 transport revalidation (#1128) (61e5e17)
responses: release failed WebSocket restoration on unwind (#1120) (bd4c06f)

Chores

api: clarify cache-write token totals (#1134) (75abc91)
api: maintain voice consent compatibility (#1136) (bffdaf6)

`v3.84.0`

Compare Source

Features

api: add custom voice consent management (#1133) (d012874)

Bug Fixes

api: preserve decoded request body fields (#1131) (80fc344)
auth: honor shared issuer retry delay before takeover (#1130) (194d75f)
auth: retry invalidated bearer followers immediately (#1132) (dd6cda6)
responses: preserve network policy parameter alias (#1126) (6eebb4d)

`v3.83.0`

Compare Source

Features

api: add 30-minute cache-write usage counts (#1103) (132dcbe)
api: add compaction trigger IDs (#1115) (252236f)
api: add raw WebSocket helpers and clarify key updates (#1119) (0427f24)

Bug Fixes

decode base64 embedding vectors (#1123) (55a8cc5)
preserve issuer retry and agent event contracts (#1124) (e1539de)
realtime: return terminal receive errors before transport cleanup (#1113) (ab4977a)
recognize null collection sentinels passed through interfaces (#1112) (9121982)
release Translation send admission if encoding panics (#1116) (9f7592c)

Chores

restore generated budget checker comment (#1110) (29e58b9)

Documentation

plan zero mixed Castiron customizations (#1106) (85be4f5)
track transition progress and s

[!IMPORTANT]
✂ PR body was truncated to here.

Configuration

📅 Schedule: (UTC)

Branch creation
- "every weekend"
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

renovate · 2026-10-24T06:03:48Z

ℹ️ Artifact update notice

File name: environment/microvm/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

4 additional dependencies were updated

Details:

Package	Change
`github.com/docker/cli`	`v29.9.0+incompatible` -> `v29.9.1+incompatible`
`github.com/go-openapi/strfmt`	`v0.27.3` -> `v0.27.4`
`github.com/grpc-ecosystem/grpc-gateway/v2`	`v2.31.0` -> `v2.32.0`
`github.com/sigstore/timestamp-authority/v2`	`v2.1.3` -> `v2.1.5`

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

4 additional dependencies were updated

Details:

Package	Change
`github.com/docker/cli`	`v29.9.0+incompatible` -> `v29.9.1+incompatible`
`github.com/grpc-ecosystem/grpc-gateway/v2`	`v2.31.0` -> `v2.32.0`
`github.com/lestrrat-go/jwx/v4`	`v4.5.0` -> `v4.6.0`
`github.com/stacklok/toolhive-core/redisconn`	`v0.0.4` -> `v0.0.57`

File name: integration/microvm/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

16 additional dependencies were updated

Details:

Package	Change
`github.com/anthropics/anthropic-sdk-go`	`v1.73.0` -> `v1.84.0`
`github.com/bmatcuk/doublestar/v4`	`v4.10.2` -> `v4.10.4`
`github.com/docker/cli`	`v29.9.0+incompatible` -> `v29.9.1+incompatible`
`github.com/go-openapi/strfmt`	`v0.27.3` -> `v0.27.4`
`github.com/godbus/dbus/v5`	`v5.2.2` -> `v5.2.4`
`github.com/grpc-ecosystem/grpc-gateway/v2`	`v2.31.0` -> `v2.32.0`
`github.com/lestrrat-go/jwx/v4`	`v4.5.0` -> `v4.6.0`
`github.com/openai/openai-go/v3`	`v3.61.0` -> `v3.86.0`
`github.com/prometheus/procfs`	`v0.22.0` -> `v0.23.0`
`github.com/sigstore/timestamp-authority/v2`	`v2.1.3` -> `v2.1.5`
`github.com/stacklok/toolhive`	`v0.55.1` -> `v0.56.0`
`github.com/stacklok/toolhive-core`	`v0.0.55` -> `v0.0.57`
`github.com/stacklok/toolhive-core/redisconn`	`v0.0.4` -> `v0.0.57`
`github.com/tiktoken-go/tokenizer`	`v0.8.1` -> `v0.10.0`
`google.golang.org/genproto/googleapis/rpc`	`v0.0.0-20261012220534-4341edf3f941` -> `v0.0.0-20261019180522-ce908d29299b`
`k8s.io/utils`	`v0.0.0-20260707023825-cf1189d6abe3` -> `v0.0.0-20261023123148-ca04ba58ecab`

…the Go dependency group Run `task tidy` to a fixed point so every module's go.mod and go.sum match what the module-metadata check expects. Two passes are needed: the root tidy reads the nested provider manifests through local replacements, so it only picks up their new requirements on the second pass. - provider/anthropic: anthropic-sdk-go v1.84.0 now imports OpenTelemetry and its test graph reaches the AWS, Google API and MCP SDKs, so tidy records them as indirect requirements (otel 1.33.0 -> 1.47.0 in this module's graph). None of them is newly linked into mecatl binaries except the otel API, which root already selects at 1.47.0. - provider/openai, provider/openaichat: openai-go v3.86.0 adds azcore, doublestar and x/text as indirect requirements and drops yaml/v3. - root, environment/microvm, internal/adaptersupport, generated driver: record the indirect requirements the PR bumps (genproto rpc, doublestar, godbus) and the google.golang.org/api graph reached through the Anthropic SDK. Update the Redis dependency floor test to toolhive-core v0.0.57 and redisconn v0.0.57. toolhive-core now tags all of its modules at one version; redisconn v0.0.57 is byte-identical to v0.0.4. The test still requires the released modules and forbids replacements. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

renovate · 2026-10-24T21:06:20Z

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

# Conflicts: # go.mod # go.sum # integration/microvm/go.mod # integration/microvm/go.sum # provider/anthropic/go.mod # provider/anthropic/go.sum

renovate Bot added the dependencies label Oct 24, 2026

chore(deps): update go dependencies

16ce504

renovate Bot force-pushed the renovate/go-dependencies branch from 9d183a6 to 16ce504 Compare October 24, 2026 17:16

rdimitrov and others added 3 commits October 24, 2026 23:15

Merge remote-tracking branch 'origin/main' into fix/2500

d11bc9f

Merge remote-tracking branch 'origin/main' into fix/2500

da442bc

Merge remote-tracking branch 'origin/main' into fix/2500

9e781f3

# Conflicts: # go.mod # go.sum # integration/microvm/go.mod # integration/microvm/go.sum # provider/anthropic/go.mod # provider/anthropic/go.sum

vercel Bot deployed to Preview October 24, 2026 21:18

View deployment

rdimitrov approved these changes Oct 24, 2026

View reviewed changes

rdimitrov merged commit 7436991 into main Oct 24, 2026
75 of 76 checks passed

rdimitrov deleted the renovate/go-dependencies branch October 24, 2026 21:44

Navigation Menu

Repository navigation

chore(deps): update go dependencies - #2500

chore(deps): update go dependencies#2500
rdimitrov merged 5 commits into
mainfrom
renovate/go-dependencies

renovate Bot commented Oct 24, 2026 •

edited

Loading

Uh oh!

renovate Bot commented Oct 24, 2026 •

edited

Loading

Uh oh!

renovate Bot commented Oct 24, 2026

Uh oh!

Uh oh!

This branch was successfully deployed

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

renovate Bot commented Oct 24, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

Features

Chores

Features

Bug Fixes

Chores

Features

Chores

Documentation

Features

Bug Fixes

Chores

Documentation

Features

Chores

Features

Bug Fixes

Chores

Documentation

Features

Bug Fixes

Chores

Documentation

Features

Chores

Features

Bug Fixes

Chores

Features

Bug Fixes

Performance Improvements

Chores

Documentation

Features

Bug Fixes

Chores

Documentation

v4.10.4: Preserves segment position across alternatives

What's Changed

New Contributors

v4.10.3: Handles character ranges when using WithCaseInsensitive

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

New Contributors

Features

Chores

Bug Fixes

Chores

Features

Bug Fixes

Chores

Features

Bug Fixes

Features

Bug Fixes

Chores

Documentation

Configuration

Uh oh!

renovate Bot commented Oct 24, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

ℹ️ Artifact update notice

File name: environment/microvm/go.mod

File name: go.mod

File name: integration/microvm/go.mod

Uh oh!

renovate Bot commented Oct 24, 2026

Edited/Blocked Notification

Uh oh!

Uh oh!

This branch was successfully deployed

Reviewers

Uh oh!

Assignees

renovate Bot commented Oct 24, 2026 •

edited

Loading

`v4.10.4`: Preserves segment position across alternatives

`v4.10.3`: Handles character ranges when using WithCaseInsensitive

renovate Bot commented Oct 24, 2026 •

edited

Loading