Update go deps by renovate[bot] · Pull Request #675 · livekit/livekit-cli

renovate · 2025-09-08T01:00:11Z

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Confidence
github.com/BurntSushi/toml	`v1.5.0` → `v1.6.0`
github.com/Masterminds/semver/v3	`v3.4.0` → `v3.5.0`
github.com/fsnotify/fsnotify	`v1.9.0` → `v1.10.1`
github.com/go-task/task/v3	`v3.49.1` → `v3.51.1`
github.com/google/go-containerregistry	`v0.20.6` → `v0.21.5`
github.com/mattn/go-isatty	`v0.0.21` → `v0.0.22`
github.com/modelcontextprotocol/go-sdk	`v1.4.1` → `v1.6.0`
github.com/urfave/cli/v3	`v3.4.1` → `v3.9.0`
k8s.io/apimachinery	`v0.34.1` → `v0.36.1`

Release Notes

BurntSushi/toml (github.com/BurntSushi/toml)

`v1.6.0`

Compare Source

TOML 1.1 is now enabled by default. The TOML changelog has an overview of changes: https://github.com/toml-lang/toml/blob/main/CHANGELOG.md

Also two small fixes:

Encode large floats as exponent syntax so that round-tripping things like 5e+22 is correct.
Using duplicate array keys would not give an error:
```
arr = [1]
arr = [2]
```
This will now correctly give a "Key 'arr' has already been defined" error.

Masterminds/semver (github.com/Masterminds/semver/v3)

`v3.5.0`

Compare Source

What's Changed

Adding more prerelease tests by @mattfarina in #273
Update constraint error messages by @mattfarina in #278
Fix edge cases by @mattfarina in #279
Adding some checks in by @mattfarina in #280
Updating deps by @mattfarina in #281
Bump github/codeql-action from 4.35.1 to 4.35.2 by @dependabot[bot] in #282
Bump actions/cache from 4.2.3 to 5.0.5 by @dependabot[bot] in #283
Bump golangci/golangci-lint-action from 7.0.1 to 9.2.0 by @dependabot[bot] in #284
Updating gitignore for devcontainers by @mattfarina in #286
Fixing some quality issues by @mattfarina in #287

New Contributors

@dependabot[bot] made their first contribution in #282

Full Changelog: Masterminds/semver@v3.4.0...v3.5.0

fsnotify/fsnotify (github.com/fsnotify/fsnotify)

`v1.10.1`

Compare Source

Changes and fixes

inotify: don't remove sibling watches sharing a path prefix (#754)
inotify, windows: don't rename sibling watches sharing a path prefix
(#755)

`v1.10.0`

Compare Source

This version of fsnotify needs Go 1.23.

Changes and fixes

inotify: improve initialization error message (#731)
inotify: send Rename event if recursive watch is renamed (#696)
inotify: avoid copying event buffers when reading names (#741)
kqueue: skip dangling symlinks (ENOENT) in watchDirectoryFiles, so a bad entry no longer aborts Watcher.Add for the whole directory (#748)
kqueue: drop watches directly in Close() to fix a file descriptor leak when recycling watchers (#740)
windows: fix nil pointer dereference in remWatch (#736)
windows: lock watch field updates against concurrent WatchList to fix a race introduced in v1.9.0 (#709, #749)

go-task/task (github.com/go-task/task/v3)

`v3.51.1`

A significant performance boost was achieved for large Taskfiles (monorepos)
by skipping templating altogether when the string is static (#2820 by @romnn).
Added absPath template function that resolves a path to its absolute form,
cleaning .. and . components (#2681, #2788 by @mateenanjum).
Added joinEnv function to join paths based on your oprating system: ; for
Windows and : elsewhere, and joinUrl to join URL paths. Also, added two
new special variables: FILE_PATH_SEPARATOR which returns \ on Windows
and / elsewhere, and PATH_LIST_SEPARATOR which returns ; on Windows and
: elsewhere (#2406, #2408 by @solvingj).
Update the shell interpreter with a regression fix (#2812, #2832 by
@andreynering).
Fix potential panic with the shell interpreter (#2810 by @trulede).

`v3.50.0`

Compare Source

Added enum.ref support in requires: enum constraints can now reference
variables or template pipelines (e.g., ref: .ALLOWED_ENVS) instead of
duplicating static lists. Combined with sh: variables, this enables fully
dynamic enum validation (#2678 by @vmaerten).
Fixed Fish completion using hardcoded task binary name instead of
$GO_TASK_PROGNAME for experiments cache (#2730, #2727 by @SergioChan).
Fixed watch mode ignoring SIGHUP signal, causing the watcher to exit instead
of restarting (#2764, #2642).
Fixed a long time bug where the task wouldn't re-run as it should when using
method: timestamp and the files listed on generates: were deleted.
This makes method: timestamp behaves the same as method: checksum
(#1230, #2716 by @drichardson).

google/go-containerregistry (github.com/google/go-containerregistry)

`v0.21.5`

Compare Source

What's Changed

Bump docker/cli v29.4.0, moby/api v1.54.1, moby/client v0.4.0 by @thaJeztah in #2254
update to Go 1.26.2 by @thaJeztah in #2255
Bump aws-actions/configure-aws-credentials from 6.0.0 to 6.1.0 in the actions group across 1 directory by @dependabot[bot] in #2257
build(deps): bump golang.org/x/tools from 0.43.0 to 0.44.0 in the go-deps group across 1 directory by @dependabot[bot] in #2260

Full Changelog: google/go-containerregistry@v0.21.4...v0.21.5

`v0.21.4`

Compare Source

What's Changed

go.mod: do not make a viral minimum go version by @howardjohn in #2237
Avoid pruning absolute links from extracted and flattened images by @Subserial in #2241
Bump the go-deps group across 3 directories with 5 updates by @dependabot[bot] in #2245
fix: update to go1.25.8, and use separate .go-version file by @thaJeztah in #2246
Bump CI go version to 1.26.1 by @Subserial in #2242
Bump codecov/codecov-action from 5.5.2 to 5.5.3 in the actions group by @dependabot[bot] in #2240
fork distribution client v3 auth-challenge as an internal package (squashed) by @thaJeztah in #2248
transport: validate Bearer realm URL to prevent SSRF by @evilgensec in #2243
revert path traversal and symlink escape from #2227 by @Subserial in #2250
Fix pkg/v1/google/auth tests for arm64 by @Subserial in #2085
goreleaser: Update goreleaser config and GH action by @Subserial in #2253

New Contributors

@evilgensec made their first contribution in #2243

Full Changelog: google/go-containerregistry@v0.21.3...v0.21.4

`v0.21.3`

Compare Source

What's Changed

Adds local file support to the crane index subcommand by @edwardthiele in #2223
migrate to github.com/moby/moby modules by @thaJeztah in #2228
Bump the go-deps group across 4 directories with 7 updates by @dependabot[bot] in #2233
Bump goreleaser/goreleaser-action from 6.4.0 to 7.0.0 in the actions group by @dependabot[bot] in #2220
mutate: reject path traversal and symlink escape in Extract by @KevinZhao in #2227
tarball: detect symlink cycles in extractFileFromTar by @vnykmshr in #2232
bump golang to 1.25.7 by @Subserial in #2236

New Contributors

@edwardthiele made their first contribution in #2223
@thaJeztah made their first contribution in #2228
@KevinZhao made their first contribution in #2227
@vnykmshr made their first contribution in #2232

Full Changelog: google/go-containerregistry@v0.21.2...v0.21.3

`v0.21.2`

Compare Source

What's Changed

Better handle redirects to https in ping by @jonjohnsonjr in #2225

Full Changelog: google/go-containerregistry@v0.21.1...v0.21.2

`v0.21.1`

Compare Source

This release fixes a regression in crane introduced in the previous release.

What's Changed

Add WithFileBufferedOpener for file-backed daemon image buffering by @twdamhore in #2214
crane: fix case in auth response json by @aelindeman in #2218

New Contributors

@twdamhore made their first contribution in #2214
@aelindeman made their first contribution in #2218

Full Changelog: google/go-containerregistry@v0.21.0...v0.21.1

`v0.21.0`

Compare Source

This release updates the minimum Go version to 1.25.6.

What's Changed

fix(mutate): don't skip dir replacements via whiteout in export by @r4f4 in #2191
Improve performance of v1.NewHash by @bmoylan in #2194
Bump the actions group across 1 directory with 4 updates by @dependabot[bot] in #2207
Bump the root-deps group across 1 directory with 7 updates by @dependabot[bot] in #2195
Fix error messages in crane_test.go by @jammie-jelly in #2189
Bump go version across packages to 1.25.6 by @Subserial in #2211
Join go.mod dependency updates by @Subserial in #2212
Bump the go-deps group across 3 directories with 3 updates by @dependabot[bot] in #2213
Disable taint gosec lints by @Subserial in #2215
Update go version used in goreleaser by @Subserial in #2216

New Contributors

@r4f4 made their first contribution in #2191
@jammie-jelly made their first contribution in #2189

Full Changelog: google/go-containerregistry@v0.20.7...v0.21.0

`v0.20.8`

Compare Source

`v0.20.7`

Compare Source

What's Changed

Fix ArgsEscaped lint directive by @Subserial in #2137
transport: Fix broken links to distribution docs by @guzalv in #2136
fix(remote): using customized retry predicate func if provided by @derekhjray in #2135
Adding docker file by @HassanJasim in #2138
crane: Add timestamp to flatten layer by @Stephanie0829 in #2117
feat(remote): pass retryBackoff option to transport by @aslafy-z in #1628
Expose clobber refusal error by @pjbgf in #2146
Build artifacts for riscv64 by @ffgan in #2159
Update dependencies and deprecate DockerVersion field by @Subserial in #2164

New Contributors

@guzalv made their first contribution in #2136
@derekhjray made their first contribution in #2135
@HassanJasim made their first contribution in #2138
@Stephanie0829 made their first contribution in #2117
@pjbgf made their first contribution in #2146
@ffgan made their first contribution in #2159

Full Changelog: google/go-containerregistry@v0.20.6...v0.20.7

mattn/go-isatty (github.com/mattn/go-isatty)

`v0.0.22`

Compare Source

modelcontextprotocol/go-sdk (github.com/modelcontextprotocol/go-sdk)

`v1.6.0`

Compare Source

This release is equivalent to v1.6.0-pre.1. Thank you to those who tested the pre-release.

In this release we introduce several smaller fixes and improvements, and we started working for release 2026-06-30. The main new feature is the introduction of ClientCredentialsHandler for OAuth client credentials grant.

Add `ClientCredentialsHandler` for OAuth client credentials grant

Added ClientCredentialsHandler implementing auth.OAuthHandler using the OAuth 2.0 Client Credentials grant (RFC 6749 Section 4.4) for service-to-service authentication with pre-registered credentials.

extauth: add ClientCredentialsHandler for OAuth client credentials grant by @ravyg in #895

2026-06-30 Release related PRs

feat: add automatic application_type inference by @guglielmo-san in #904

New application_type field is added to the ClientRegistrationMetadata for DynamicClientRegistration. If not specified, the application_type will be inferred from the RedirectURIs. This implements SEP-837.
feat: HTTP Header Standardization for method and name by @guglielmo-san in #907

By mirroring key fields from the JSON-RPC payload into HTTP headers, network intermediaries such as load balancers, proxies, and observability tools can route and process MCP traffic without deep packet inspection, reducing latency and computational overhead. This partially implements SEP-2243.

Behavior Changes

`SetError` Behavior Change

Previously the SetError method on CallToolResult always overwrote the Content field with the error text. Now SetError preserves the existing value if it has already been populated. You can restore the previous behavior by setting the environment variable seterroroverwrite=1.

mcp: preserve existing Content in SetError by @ravyg in #864

Cross-Origin Protection Default Change

Previously (v1.4.1-v1.5.0) default (zero-value) cross-origin protection was applied when CrossOriginProtection in StreamableHTTPOptions was nil. Now cross-origin protection is not enabled by default when CrossOriginProtection is nil.
You can restore the previous behavior (enable by default) by setting enableoriginverification=1.

mcp: remove default cross origin protection by @maciej-kisiel in #906

disablecrossoriginprotection was replaced by enableoriginverification after the default was changed to not enable cross-origin protection.

jsonescaping option was removed, according to plan.

Other Changes to the SDK

internal: remove unused util functions by @alexandear in #871
build(deps): bump github/codeql-action from 4.32.4 to 4.35.1 by @dependabot[bot] in #873
build(deps): bump actions/setup-go from 6.3.0 to 6.4.0 by @dependabot[bot] in #874
build(deps): bump actions/setup-node from 6.2.0 to 6.3.0 by @dependabot[bot] in #875
build(deps): bump dominikh/staticcheck-action from 1.4.0 to 1.4.1 by @dependabot[bot] in #872
oauthex: accept 200 in client registration by @MatyasVondraOutreach in #877
mcp: allow Content-Type parameters in streamable transport by @rafaeljusto in #878
mcp: preserve existing Content in SetError by @ravyg in #864
mcp: fix race condition in ServerSession.startKeepalive by @begelundmuller in #856
chore: preserve CNAME when deploying to GitHub pages by @maciej-kisiel in #884
extauth: refactor enterprise auth tests by @maciej-kisiel in #879
feat: Add Support for mkdocs by @Dinesht04 in #883
mcp: add DNS rebinding and cross origin protections to SSE transport by @maciej-kisiel in #891
mcp: log out-of-band errors instead of dropping them by @ravyg in #887
mcp: don't close session when keepalive ping returns method-not-found by @maciej-kisiel in #900
mcp: accept parameterized Content-Type types by @kalvinnchau in #890
mcp: remove default cross origin protection by @maciej-kisiel in #906
Update README.md by @N-Masi in #896
mcp: preserve transport errors in Write error chain by @jpugliesi in #888
mcp: do not re-prompt OAuth after cancelled Authorize by @ravyg in #885
mcp: Upgrade jsonschema-go by @rafaeljusto in #912
internal/jsonrpc2: remove unused code by @maciej-kisiel in #910
MCPGODEBUG update for 1.6.0 by @maciej-kisiel in #893

New Contributors

@MatyasVondraOutreach made their first contribution in #877
@rafaeljusto made their first contribution in #878
@begelundmuller made their first contribution in #856
@Dinesht04 made their first contribution in #883
@N-Masi made their first contribution in #896
@jpugliesi made their first contribution in #888
@guglielmo-san made their first contribution in #904

Full Changelog: modelcontextprotocol/go-sdk@v1.5.0...v1.6.0-pre.1

`v1.5.0`

Compare Source

This release is equivalent to v1.5.0-pre.1. Thank you to those who tested the pre-release.

In this release we introduce important enhancements to the client-side OAuth flows. We also introduce several smaller fixes and improvements.

Stabilization of client-side OAuth APIs

As previously communicated, we're stabilizing the client-side OAuth APIs in v1.5.0. This means that the mcp_go_client_oauth build tag will no longer be required to compile the functionality and standard backward compatibility guarantees apply from now on.

Compared to the experimental support published in v1.4.0, we made some backwards incompatible changes:

auth.AuthorizationCodeHandlerConfig.AuthorizationCodeFetcher's type was changed from func(context.Context, *auth.AuthorizationArgs) (*auth.AuthorizationResult, error) to auth.AuthorizationCodeFetcher which is a reusable definition carrying the same underlying function type.
auth.AuthorizationCodeHandlerConfig.PreregisteredClientConfig was removed and replaced with auth.AuthorizationCodeHandlerConfig.PreregisteredClient which uses a newly introduced oauthex.ClientCredentials type. The type used previously (auth.PreregisteredClientConfig) has been removed.
Deprecated functionality has been removed from both auth and oauthex packages.

all: stabilize client OAuth support by @maciej-kisiel in #861

Enterprise Managed Authorization support added

Support for Enterprise Managed Authorization has been added to auth/extauth package. Huge thanks to @radar07 for the implementation!

Enterprise managed authorization by @radar07 in #770

Note: this support is part of an official MCP extension and is not part of the core protocol. The support of this functionality is not covered by the principles defined in SDK tiers.

Other changes to the SDK

examples: fix OAuth client example after latest changes. by @maciej-kisiel in #820
build(deps): bump actions/upload-artifact from 4.6.1 to 7.0.0 by @dependabot[bot] in #824
build(deps): bump ossf/scorecard-action from 2.4.1 to 2.4.3 by @dependabot[bot] in #825
build(deps): bump actions/setup-go from 6.2.0 to 6.3.0 by @dependabot[bot] in #827
build(deps): bump actions/checkout from 4.2.2 to 6.0.2 by @dependabot[bot] in #826
mcp: simplify and unify unit tests introduced for sampling with tools. by @maciej-kisiel in #799
auth: fix 2025-03-26 backcompat by @maciej-kisiel in #821
chore: update deps after v1.4.0 release by @maciej-kisiel in #829
build(deps): bump github/codeql-action from 3 to 4 by @dependabot[bot] in #823
mcp: update latestProtocolVersion to 2025-11-25 by @findleyr in #724
mcp: protect ioConn.protocolVersion with a mutex by @maciej-kisiel in #832
examples: add an example that display header forwarding. by @maciej-kisiel in #836
internal: fix Unicode zero character handling by @maciej-kisiel in #841
auth: allow passing custom http.Client to AuthorizationCodeHandler by @maciej-kisiel in #840
mcp: verify 'Origin' and 'Content-Type' headers by @maciej-kisiel in #842
auth: return scope in WWW-Authenticate header. by @maciej-kisiel in #834
mcp: fix setProgressToken when Meta is nil by @StevenRChen in #846
all: clean up Go 1.24 specific code. by @maciej-kisiel in #850
mcp: re-enable race test after fixing data races by @maciej-kisiel in #851
mcp: handle empty chunks in MemoryEventStore by @jba in #862
oauthex: use internal JSON library for decoding. by @maciej-kisiel in #866
all: fix typos by @alexandear in #869
mcp: return input validation errors as tool results, not JSON-RPC errors by @ravyg in #863
all: modernize code by @alexandear in #868
mcp: accept parameterized Accept media types by @kalvinnchau in #853
mcp: use http.ResponseController to ensure writes are flushed by @toofishes in #870

New Contributors

@StevenRChen made their first contribution in #846
@radar07 made their first contribution in #770
@alexandear made their first contribution in #869
@ravyg made their first contribution in #863
@kalvinnchau made their first contribution in #853
@toofishes made their first contribution in #870

Full Changelog: modelcontextprotocol/go-sdk@v1.4.1...v1.5.0

urfave/cli (github.com/urfave/cli/v3)

`v3.9.0`

Compare Source

What's Changed

chore(deps): bump codecov/codecov-action from 5 to 6 by @dependabot[bot] in #2300
chore(deps): bump the python-packages group across 1 directory with 3 updates by @dependabot[bot] in #2301
docs: fix typo by @acrobatstick in #2299
feat: add descriptions for bash and powershell autocompletion by @gabelluardo in #2298
Made command help more consistent by @markshep-wbg in #2287
Fix:(issue_2285): correct function and variable naming in fish completion script by @TimSoethout in #2286
fix(ci): update docs after bash completion update by @gabelluardo in #2307
fix: apply SliceFlagSeparator to env var sources by @lawrence3699 in #2309
fix: don't print empty line to stderr when Exit message is empty by @Yanhu007 in #2310
flag: prevent BoolWithInverseFlag.String from panicking without a tab by @alliasgher in #2311
refactor: bash completion script by @gabelluardo in #2308
fix: drop shebang from bash completion template by @barry3406 in #2317
fix: show flag completions when completing a double-dash prefix by @morozov in #2316
fix: parse flags for help subcommand (#2271) by @barry3406 in #2319
fix: show BoolWithInverseFlag aliases in help text by @wucm667 in #2321

New Contributors

@gabelluardo made their first contribution in #2298
@markshep-wbg made their first contribution in #2287
@lawrence3699 made their first contribution in #2309
@Yanhu007 made their first contribution in #2310
@alliasgher made their first contribution in #2311
@barry3406 made their first contribution in #2317
@morozov made their first contribution in #2316
@wucm667 made their first contribution in #2321

Full Changelog: urfave/cli@v3.8.0...v3.9.0

`v3.8.0`

Compare Source

What's Changed

chore(deps): bump mkdocs-material from 9.7.1 to 9.7.2 in the python-packages group by @dependabot[bot] in #2267
chore(deps): bump mkdocs-material from 9.7.2 to 9.7.3 in the python-packages group by @dependabot[bot] in #2272
chore(deps): bump mkdocs-material from 9.7.3 to 9.7.4 in the python-packages group by @dependabot[bot] in #2276
Fix: check MutuallyExclusiveFlags across parent command chain by @siutsin in #2274
Modernize source code by @kolyshkin in #2289
flag: replace regexp use by @kolyshkin in #2288
chore(deps): bump mkdocs-material from 9.7.4 to 9.7.5 in the python-packages group by @dependabot[bot] in #2284
Fix:(issue_2281) Remove incorrect check for local flag for set by @dearchap in #2290
Fix:(issue_2275) Make flag action execution consistent by @dearchap in #2295
Fix:(issue_2293) --flag="" no longer rejected as missing argument by @idelchi in #2297
Fix:(issue_2292) Empty positional args no longer break parse loop by @idelchi in #2296

New Contributors

@idelchi made their first contribution in #2297

Full Changelog: urfave/cli@v3.7.0...v3.8.0

`v3.7.0`

Compare Source

What's Changed

Fix: use the correct type name in the tracef message by @icholy in #2251
chore(deps): bump mkdocs-git-revision-date-localized-plugin from 1.5.0 to 1.5.1 in the python-packages group by @dependabot[bot] in #2252
Fix:(issue_2254) Fix incorrect handling of arg after short option token by @dearchap in #2255
feat: ShellComplete for fish by @marcusramberg in #2256
Fix: propagate MutuallyExclusiveFlags persistent flags to subcommands by @siutsin in #2266
feat: support dynamic fish completion by @Maks1mS in #2270
fix(help): show GLOBAL OPTIONS for leaf subcommands when HideHelpCommand is true by @TimSoethout in #2269

New Contributors

@marcusramberg made their first contribution in #2256
@siutsin made their first contribution in #2266
@TimSoethout made their first contribution in #2269

Full Changelog: urfave/cli@v3.6.2...v3.7.0

`v3.6.2`

Compare Source

What's Changed

chore(deps): bump actions/checkout from 5 to 6 by @dependabot[bot] in #2230
chore(deps): bump mkdocs-material from 9.6.23 to 9.7.0 in the python-packages group by @dependabot[bot] in #2231
Improve test coverage by @dearchap in #2236
Add more tests to improve code coverage by @dearchap in #2237
Fix:(issue_2238) Dont process flags for completion command by @dearchap in #2239
Fix:(issue_2228) Fix for default command by @dearchap in #2232
chore(deps): bump mkdocs-material from 9.7.0 to 9.7.1 in the python-packages group by @dependabot[bot] in #2242
Docs: correct typo in migration guide by @kzygmans in #2243
Fix:(issue_2244) Dont check req flags for help and completion commands by @dearchap in #2245
Only show separator if command has usage text by @mikecluck in #2247

New Contributors

@kzygmans made their first contribution in #2243
@mikecluck made their first contribution in #2247

Full Changelog: urfave/cli@v3.6.1...v3.6.2

`v3.6.1`

Compare Source

What's Changed

chore(deps): bump golangci/golangci-lint-action from 8 to 9 by @dependabot[bot] in #2222
feat: add ability to override usage text of default help command by @Maks1mS in [#2196](https://redire

✂ Note

PR body was truncated to here.

Configuration

📅 Schedule: (UTC)

Branch creation
- "before 9am on monday"
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

renovate · 2025-09-08T01:00:13Z

ℹ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

5 additional dependencies were updated

Details:

Package	Change
`github.com/alecthomas/chroma/v2`	`v2.19.0` -> `v2.20.0`
`github.com/charmbracelet/bubbletea`	`v1.3.6` -> `v1.3.10`
`github.com/charmbracelet/x/ansi`	`v0.9.3` -> `v0.10.1`
`github.com/fxamacker/cbor/v2`	`v2.7.0` -> `v2.9.0`
`github.com/go-git/go-git/v5`	`v5.16.2` -> `v5.16.3`

renovate · 2025-12-10T10:54:51Z

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

18 additional dependencies were updated
The go directive was updated for compatibility reasons

Details:

Package	Change
`go`	`1.26` -> `1.26.0`
`google.golang.org/protobuf`	`v1.36.11` -> `v1.36.12-0.20260120151049-f2248ac996af`
`charm.land/bubbletea/v2`	`v2.0.2` -> `v2.0.6`
`charm.land/lipgloss/v2`	`v2.0.2` -> `v2.0.3`
`github.com/charmbracelet/ultraviolet`	`v0.0.0-20260330092749-0f94982c930b` -> `v0.0.0-20260416155717-489999b90468`
`github.com/charmbracelet/x/ansi`	`v0.11.6` -> `v0.11.7`
`github.com/containerd/stargz-snapshotter/estargz`	`v0.17.0` -> `v0.18.2`
`github.com/docker/cli`	`v29.0.0+incompatible` -> `v29.4.0+incompatible`
`github.com/google/jsonschema-go`	`v0.4.2` -> `v0.4.3`
`github.com/puzpuzpuz/xsync/v4`	`v4.4.0` -> `v4.5.0`
`github.com/sirupsen/logrus`	`v1.9.3` -> `v1.9.4`
`go.yaml.in/yaml/v2`	`v2.4.2` -> `v2.4.3`
`golang.org/x/crypto`	`v0.50.0` -> `v0.51.0`
`golang.org/x/net`	`v0.53.0` -> `v0.54.0`
`golang.org/x/sys`	`v0.43.0` -> `v0.44.0`
`golang.org/x/term`	`v0.42.0` -> `v0.43.0`
`golang.org/x/text`	`v0.36.0` -> `v0.37.0`
`mvdan.cc/sh/v3`	`v3.13.1` -> `v3.13.2-0.20260510185049-f5c6e2779117`
`sigs.k8s.io/json`	`v0.0.0-20241014173422-cfa47c3a1cc8` -> `v0.0.0-20250730193827-2d320260d730`

coderabbitai · 2026-01-17T06:25:30Z

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

🔍 Trigger a full review

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

Generated by renovateBot

renovate Bot force-pushed the renovate/go-deps branch 5 times, most recently from cfe5463 to 1d00451 Compare September 15, 2025 05:46

renovate Bot force-pushed the renovate/go-deps branch 3 times, most recently from 3a3cde4 to 454732b Compare September 22, 2025 09:47

renovate Bot force-pushed the renovate/go-deps branch 4 times, most recently from 7414232 to 9d84f67 Compare September 29, 2025 09:59

renovate Bot force-pushed the renovate/go-deps branch 9 times, most recently from d203676 to 2a00a77 Compare October 5, 2025 16:42

renovate Bot force-pushed the renovate/go-deps branch 5 times, most recently from 73f7ae5 to a28c63b Compare October 14, 2025 11:07

renovate Bot force-pushed the renovate/go-deps branch 3 times, most recently from a2927db to 2a88f28 Compare October 21, 2025 19:12

renovate Bot force-pushed the renovate/go-deps branch from 8b855dd to 839e1a0 Compare December 10, 2025 10:54

renovate Bot force-pushed the renovate/go-deps branch 7 times, most recently from ea032b5 to 1e8f609 Compare December 19, 2025 00:48

renovate Bot force-pushed the renovate/go-deps branch 2 times, most recently from b02c775 to 48f2fa8 Compare December 25, 2025 02:08

renovate Bot force-pushed the renovate/go-deps branch from 48f2fa8 to 7b45b9d Compare January 17, 2026 06:25

renovate Bot force-pushed the renovate/go-deps branch 6 times, most recently from 350aeb8 to 3af717d Compare January 23, 2026 14:40

renovate Bot force-pushed the renovate/go-deps branch 2 times, most recently from 34294f2 to f28d9eb Compare January 26, 2026 14:00

renovate Bot force-pushed the renovate/go-deps branch 4 times, most recently from 5e18c33 to 1c89754 Compare February 9, 2026 10:04

renovate Bot force-pushed the renovate/go-deps branch 4 times, most recently from 7feeab4 to 8ec32e9 Compare February 16, 2026 13:11

Update go deps

8ecc215

Generated by renovateBot

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Update go deps#675

Update go deps#675
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/go-deps

renovate Bot commented Sep 8, 2025 •

edited

Loading

Uh oh!

renovate Bot commented Sep 8, 2025 •

edited

Loading

Uh oh!

renovate Bot commented Dec 10, 2025 •

edited

Loading

Uh oh!

coderabbitai Bot commented Jan 17, 2026 •

edited

Loading

Review skipped

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

renovate Bot commented Sep 8, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

What's Changed

New Contributors

Changes and fixes

Changes and fixes

What's Changed

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

New Contributors

Add ClientCredentialsHandler for OAuth client credentials grant

2026-06-30 Release related PRs

Behavior Changes

SetError Behavior Change

Cross-Origin Protection Default Change

Other Changes to the SDK

New Contributors

Stabilization of client-side OAuth APIs

Enterprise Managed Authorization support added

Other changes to the SDK

New Contributors

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

Configuration

Uh oh!

renovate Bot commented Sep 8, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

ℹ Artifact update notice

File name: go.mod

Uh oh!

renovate Bot commented Dec 10, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

ℹ️ Artifact update notice

File name: go.mod

Uh oh!

coderabbitai Bot commented Jan 17, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Review skipped

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

renovate Bot commented Sep 8, 2025 •

edited

Loading

Add `ClientCredentialsHandler` for OAuth client credentials grant

`SetError` Behavior Change

renovate Bot commented Sep 8, 2025 •

edited

Loading

renovate Bot commented Dec 10, 2025 •

edited

Loading

coderabbitai Bot commented Jan 17, 2026 •

edited

Loading