Skip to content

chore(deps): Bump the all-dependencies group across 1 directory with 13 updates - #1261

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/all-dependencies-b579ee6018
Open

chore(deps): Bump the all-dependencies group across 1 directory with 13 updates#1261
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/all-dependencies-b579ee6018

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 1, 2026

Copy link
Copy Markdown
Contributor

Bumps the all-dependencies group with 13 updates in the / directory:

Package From To
github.com/blevesearch/bleve/v2 2.6.0 2.6.1
github.com/charmbracelet/x/ansi 0.11.7 0.11.9
github.com/jackc/pgx/v5 5.9.2 5.11.0
github.com/modelcontextprotocol/go-sdk 1.6.1 1.8.0
github.com/sahilm/fuzzy 0.1.2 0.1.3
github.com/slack-go/slack 0.25.0 0.30.1
github.com/wailsapp/wails/v2 2.12.0 2.16.0
golang.org/x/net 0.60.0 0.61.0
golang.org/x/sync 0.23.0 0.24.0
golang.org/x/term 0.46.0 0.47.0
golang.org/x/text 0.42.0 0.43.0
google.golang.org/genai 1.58.0 1.73.0
modernc.org/sqlite 1.50.1 1.60.1

Updates github.com/blevesearch/bleve/v2 from 2.6.0 to 2.6.1

Release notes

Sourced from github.com/blevesearch/bleve/v2's releases.

v2.6.1

What's Changed

New Contributors

Full Changelog: blevesearch/bleve@v2.6.0...v2.6.1

Commits

Updates github.com/charmbracelet/x/ansi from 0.11.7 to 0.11.9

Commits
  • faa4adf ansi/v0.11.9
  • 09f7503 feat(ansi): OSC 7501 (#1004)
  • ad85c59 chore(powernap): update lsp configs from nvim-lspconfig
  • 953920d nerdfont/v0.1.0
  • 4edfc00 feat(nerdfont): overrides (#1000)
  • 7be62f4 chore(deps): bump golang.org/x/sys in /term in the all group (#996)
  • 29bfdbd feat: nerdfont
  • 9c77d67 chore(powernap): update lsp configs from nvim-lspconfig
  • d676b01 v0.1.0 for charmtone and slices
  • 53e2afe chore(powernap): update lsp configs from nvim-lspconfig
  • Additional commits viewable in compare view

Updates github.com/jackc/pgx/v5 from 5.9.2 to 5.11.0

Release notes

Sourced from github.com/jackc/pgx/v5's releases.

v5.11.0

This release adds direct PostgreSQL type scanning through database/sql on Go 1.27, improves compatibility with libpq connection strings and PostgreSQL date/time values, and includes further decoder hardening. See Changes for connection-string and date/time behavior changes that may affect existing applications.

Features

  • stdlib: support Go 1.27's driver.RowsColumnScanner, allowing PostgreSQL types such as arrays and ranges to be scanned directly into Go values without pgtype.Map.SQLScanner. Existing database/sql scalar conversions and sql.Scanner behavior are preserved. The minimum supported Go version remains 1.25.
  • Add Rows.TypeMap to expose the type map used to decode rows, including rows created by RowsFromResultReader that have no underlying Conn. Custom implementations of Rows, including mocks, must add this method.
  • pgconn: add Config.MaxProtocolMessageBodyLen to configure the maximum incoming protocol message body size (carter-ya)
  • pgconn: add ErrReadOnlyConnection, ErrReadWriteConnection, ErrPrimaryConnection, and ErrStandbyConnection sentinel errors for target_session_attrs validation, allowing callers to use errors.Is (Adrian-Stefan Mares)
  • pgxpool: accept pool_ping_timeout in connection strings to configure Config.PingTimeout. The default is zero; zero and negative durations mean no timeout (1991santhu)

Changes

  • Name-based row-to-struct mapping now matches explicit db tags case-insensitively, with exact matches taking precedence so tags can still distinguish quoted column names that differ only by case (AlisinaDevelo)

  • pgconn: resolve the OS user account only when no user is supplied by the connection string, environment, or service file, avoiding unnecessary account lookups and crashes in some restricted container environments. Home-directory defaults for password, service, and TLS files remain available independently of the account lookup. On Unix these now use $HOME rather than the OS account's home directory (Mohamed MAACHE)

  • pgtype: date, timestamp and timestamptz text values are now parsed and written by a hand-written parser and encoder for PostgreSQL's ISO date/time format instead of time.Parse and time.Format. Go's layout language cannot express a variable-width year or the BC era, which is the root of the bugs below. The text scan path is roughly 2.5x faster for timestamp and timestamptz. Bug fixes:

    • timestamp and timestamptz no longer silently move February 29 of a BC leap year to March 1 when encoding. time.Date(-4712, 2, 29, ...) was written as 4713-03-01 BC and is now written as 4713-02-29 BC. This affected ordinary four-digit BC years, not only extended-range ones. date was never affected.
    • timestamp and timestamptz can now scan BC leap days. 4713-02-29 BC previously failed with day out of range. date could already scan them.
    • Years past 9999 can now be scanned. 10000-01-02 03:04:05 previously failed to parse, so timestamp and timestamptz values at the high end of PostgreSQL's range were unreadable over the simple protocol and in any other text-format result.
    • time.Time arguments in the simple protocol now encode BC dates correctly, using the same timestamp encoder.
    • Fractional seconds beyond microsecond precision are rounded the way the server rounds them (round half to even, carrying into the rest of the value) instead of being kept at full precision. PostgreSQL never sends more than six fractional digits, so this only affects values from other sources.

    Behavior changes:

    • date now rejects impossible dates instead of normalizing them. 2024-02-30 returned 2024-03-01 and 2024-13-01 returned 2025-01-01; both are now errors. timestamp and timestamptz already rejected them.
    • All three types now reject values outside PostgreSQL's range for that type, in the binary format as well as the text format. PostgreSQL never sends out-of-range dates, so this only affects corrupt or hand-built input; the range

... (truncated)

Changelog

Sourced from github.com/jackc/pgx/v5's changelog.

5.11.0 (September 7, 2026)

This release adds direct PostgreSQL type scanning through database/sql on Go 1.27, improves compatibility with libpq connection strings and PostgreSQL date/time values, and includes further decoder hardening. See Changes for connection-string and date/time behavior changes that may affect existing applications.

Features

  • stdlib: support Go 1.27's driver.RowsColumnScanner, allowing PostgreSQL types such as arrays and ranges to be scanned directly into Go values without pgtype.Map.SQLScanner. Existing database/sql scalar conversions and sql.Scanner behavior are preserved. The minimum supported Go version remains 1.25.
  • Add Rows.TypeMap to expose the type map used to decode rows, including rows created by RowsFromResultReader that have no underlying Conn. Custom implementations of Rows, including mocks, must add this method.
  • pgconn: add Config.MaxProtocolMessageBodyLen to configure the maximum incoming protocol message body size (carter-ya)
  • pgconn: add ErrReadOnlyConnection, ErrReadWriteConnection, ErrPrimaryConnection, and ErrStandbyConnection sentinel errors for target_session_attrs validation, allowing callers to use errors.Is (Adrian-Stefan Mares)
  • pgxpool: accept pool_ping_timeout in connection strings to configure Config.PingTimeout. The default is zero; zero and negative durations mean no timeout (1991santhu)

Changes

  • Name-based row-to-struct mapping now matches explicit db tags case-insensitively, with exact matches taking precedence so tags can still distinguish quoted column names that differ only by case (AlisinaDevelo)

  • pgconn: resolve the OS user account only when no user is supplied by the connection string, environment, or service file, avoiding unnecessary account lookups and crashes in some restricted container environments. Home-directory defaults for password, service, and TLS files remain available independently of the account lookup. On Unix these now use $HOME rather than the OS account's home directory (Mohamed MAACHE)

  • pgtype: date, timestamp and timestamptz text values are now parsed and written by a hand-written parser and encoder for PostgreSQL's ISO date/time format instead of time.Parse and time.Format. Go's layout language cannot express a variable-width year or the BC era, which is the root of the bugs below. The text scan path is roughly 2.5x faster for timestamp and timestamptz. Bug fixes:

    • timestamp and timestamptz no longer silently move February 29 of a BC leap year to March 1 when encoding. time.Date(-4712, 2, 29, ...) was written as 4713-03-01 BC and is now written as 4713-02-29 BC. This affected ordinary four-digit BC years, not only extended-range ones. date was never affected.
    • timestamp and timestamptz can now scan BC leap days. 4713-02-29 BC previously failed with day out of range. date could already scan them.
    • Years past 9999 can now be scanned. 10000-01-02 03:04:05 previously failed to parse, so timestamp and timestamptz values at the high end of PostgreSQL's range were unreadable over the simple protocol and in any other text-format result.
    • time.Time arguments in the simple protocol now encode BC dates correctly, using the same timestamp encoder.
    • Fractional seconds beyond microsecond precision are rounded the way the server rounds them (round half to even, carrying into the rest of the value) instead of being kept at full precision. PostgreSQL never sends more than six fractional digits, so this only affects values from other sources.

    Behavior changes:

    • date now rejects impossible dates instead of normalizing them. 2024-02-30 returned 2024-03-01 and 2024-13-01 returned 2025-01-01; both are now errors. timestamp and timestamptz already rejected them.
    • All three types now reject values outside PostgreSQL's range for that type, in the binary format as well as the

... (truncated)

Commits
  • 5e583fa Update changelog for v5.11.0
  • 3927116 Apply gofumpt formatting required by lint
  • eb07165 Quote filesystem paths in development connection strings
  • cf5938f Allow unsigned digit counts in binary numeric encoding
  • 3930cf5 Accept PostgreSQL POSIX timezone offsets in text timestamps
  • 93261be Prefer exact db tag matches when mapping rows to structs
  • e8d8ad1 Merge pull request #2647 from sueun-dev/fix-range-text-quoting-20260906
  • 01d2fd3 Merge pull request #2644 from eliranbz/fix-failed-prepare-deallocation
  • 9b7e3be Merge pull request #2645 from ash2k/move-channel
  • 76d78f5 Merge pull request #2643 from AshSgDe29071999/fix/hstore-pairs-estimate-clamp
  • Additional commits viewable in compare view

Updates github.com/modelcontextprotocol/go-sdk from 1.6.1 to 1.8.0

Release notes

Sourced from github.com/modelcontextprotocol/go-sdk's releases.

v1.8.0

This release is equivalent to v1.8.0-pre.2. Thank you to those who tested the pre-release.

In this release we introduce several fixes and improvements on top of v1.7.0. It adds no new protocol revision: the supported set is unchanged, and 2026-07-28 remains the newest version the SDK negotiates.

The bulk of the work is hardening the transports against resource exhaustion, closing session leaks, deadlocks and teardown hangs found by users running the new protocol at scale, and giving servers explicit control over which protocol versions they advertise.

Two behavior changes are guarded by new MCPGODEBUG flags; see the section below.

Hardening against resource exhaustion

Every decoding path that buffers incoming input is now bounded. JSON payloads are rejected past 1000 levels of nesting, before the parser recurses. Both SSE readers cap the bytes buffered for a single event via MaxEventSize on SSEClientTransport and StreamableClientTransport, and the stdio transport caps a single JSON-RPC frame via StdioTransport.MaxLineLength.

On the OAuth side, dynamic client registration responses are bounded to 1 MB, and the discovery code now validates metadata documents rather than trusting them.

Restricting the protocol versions a server supports

ServerOptions.SupportedProtocolVersions lets a server narrow the set of versions it advertises and negotiates. The list can only narrow, never widen; naming a version the SDK does not implement panics at construction. Relatedly, a stateful streamable handler receiving a 2026-07-28 request now returns that same JSON-RPC error instead of a plain-text 400, so the client can renegotiate down instead of losing the connection.

Per-request cache control

ServerOptions.SetCacheable is a new hook that decides the ttlMs and cacheScope fields of every result carrying them: server/discover, the four list methods, and resources/read. It runs once per result, after the handler returns, with the values that handler produced, so it can set a policy globally while still letting an individual handler override it. Anything left unset falls back to the protocol default of public.

Behavior changes guarded by MCPGODEBUG

Two new escape-hatch flags restore the previous behavior of the changes above. Both will be removed in v1.9.0.

  • plaintextstatefulrejection=1 — restore the plain-text http.Error 400 body a stateful StreamableHTTPHandler previously returned for a request carrying per-request metadata. The default is now a JSON-RPC -32022 CodeUnsupportedProtocolVersion error with an UnsupportedProtocolVersionData payload advertising the legacy versions the server supports. Introduced by #1143.
  • blockingcancelnotify=1 — restore the previous behavior where a cancelled call waits synchronously for notifications/cancelled to be delivered (up to 5s) before returning, joining any delivery error into the caller's error. The default now retires the call immediately and sends the notification asynchronously. Introduced by #1151.

Options below were removed, according to plan:

  • seterroroverwrite
  • enableoriginverification
  • disablecontenttypecheck

... (truncated)

Commits
  • 3f3b699 refactor: remove legacy MCPGODEBUG compatibility for new protocol release (#1...
  • 830f0b7 mcp: update conformance tests (#1231)
  • 12cbafe oauthex: oauth discovery checks (#1220)
  • 3632967 mcp: add an sse event size cap (#1205)
  • 0d3036f mcp: allow per request Cacheable customization (#1203)
  • cb0de64 mcp: add a max request body size of the old transport (#1224)
  • 2fdabde mcp: do not check metatada on notifications (#1215)
  • 59185e6 build(deps): bump ossf/scorecard-action from 2.4.3 to 2.4.4 (#1217)
  • a6764cf build(deps): bump golang/govulncheck-action from 1.0.4 to 1.1.0 (#1218)
  • 8227246 fix: only subscribe when server advertises capability (#1221)
  • Additional commits viewable in compare view

Updates github.com/sahilm/fuzzy from 0.1.2 to 0.1.3

Release notes

Sourced from github.com/sahilm/fuzzy's releases.

v0.1.3

What's Changed

New Contributors

Full Changelog: sahilm/fuzzy@v0.1.2...v0.1.3

Commits

Updates github.com/slack-go/slack from 0.25.0 to 0.30.1

Release notes

Sourced from github.com/slack-go/slack's releases.

v0.30.1

[!IMPORTANT] This is a security release. Upgrade if your app passes file URLs from messages or events to GetFile. Full details are in CHANGELOG.md.

Security

GetFile, GetFileContext and UploadToURL now send the token only to https URLs on slack.com, slack-gov.com and their subdomains, and to the host set with OptionAPIURL. Any other URL returns an error before a request is made.

The url_private of a remote or external file (File.IsExternal) points outside Slack, so GetFile(file.URLPrivate) sent the token to that host. See GHSA-3q3v-34v2-g88f.

A test that points GetFile at an httptest server must also pass that server to OptionAPIURL:

api := slack.New("xoxb-test", slack.OptionAPIURL(ts.URL+"/"))
err := api.GetFile(ts.URL+"/files-pri/T1-F1/a.txt", &buf)

Thanks to @​Lordseriouspig (what a handle... 😂) for the report.

Full Changelog: slack-go/slack@v0.30.0...v0.30.1

v0.30.0

[!WARNING] This release has breaking changes. It needs Go 1.26 or later, DeleteFileComment takes its arguments in a new order, and four methods have new variadic signatures that break interfaces and mocks. Read Breaking changes before you upgrade. Full details are in CHANGELOG.md.

Breaking changes

DeleteFileComment takes (fileID, commentID)

DeleteFileComment now uses the same argument order as DeleteFileCommentContext (#1611). Swap the arguments of every call:

// Before
err := api.DeleteFileComment(commentID, fileID)
// After
err := api.DeleteFileComment(fileID, commentID)

The compiler cannot catch this because both arguments are strings. A call that still passes a comment ID (Fc…) will return an error in order to try to catch it. YMMV so please raise an issue if you encounter issues

Variadic options on CreateManifest and GetUserInfo

CreateManifest, CreateManifestContext, GetUserInfo and GetUserInfoContext now take variadic options. An interface or mock that declares the old signature needs the new parameter:

// Before
type slackAPI interface {
      GetUserInfo(user string) (*slack.User, error)
      CreateManifest(manifest *slack.Manifest, token string) (*slack.ManifestResponse, error)
}
</tr></table>

... (truncated)

Changelog

Sourced from github.com/slack-go/slack's changelog.

[0.30.1] - 2026-10-04

Security

  • GetFile, GetFileContext and UploadToURL now send the token only to https URLs on slack.com, slack-gov.com and their subdomains, and to the host set with OptionAPIURL. Any other URL returns an error before a request is made. The url_private of a remote or external file (File.IsExternal) points outside Slack, so GetFile(file.URLPrivate) sent the token to that host (GHSA-3q3v-34v2-g88f). A test that points GetFile at an httptest server must also pass that server to OptionAPIURL.

[0.30.0] - 2026-10-04

Added

  • slackevents: Add the Agent messaging events app_context_changed (AppContextChangedEvent), agent_session_stopped (AgentSessionStoppedEvent) and agent_session_title_changed (AgentSessionTitleChangedEvent). The shared AppContext object is also exposed as AppHomeOpenedEvent.Context and MessageEvent.AppContext, which Slack populates once the app subscribes to app_context_changed. An AppContextEntity carries a string Value for channel, canvas and list entities and a Message for message_context entities, whose value is an object.
  • slackevents: EventsAPICallbackEvent now unmarshals authorizations, so the installations an event was delivered for can be read without a second request.
  • Add SetAgentSessionStatus and RenameAgentSession (plus Context variants) for the agents.sessions.setStatus and agents.sessions.rename methods, with AgentSessionStatus* constants for the accepted statuses.
  • CreateManifest now returns the new app's AppId, Credentials and OAuthAuthorizeUrl from apps.manifest.create. Slack sends the credentials only in this response (#1587).
  • Add Features.AgentView and Features.AssistantView for the features.agent_view and features.assistant_view app manifest settings, so a typed export and update keeps them (#1588, #1589).
  • Add Features.UnfurlDomains, Features.RichPreviews, Features.Search, OAuthConfig.PKCEEnabled, OAuthConfig.TokenManagementEnabled, Settings.IsMCPEnabled, Settings.TokenRotationEnabled, Settings.IncomingWebhooks, Settings.FunctionRuntime, Settings.SIWSLinks, EventSubscriptions.MetadataSubscriptions and OutgoingDomains for the matching app manifest keys, so a typed export and update keeps them. Features.Search covers the two callback IDs, not slackbot_metadata (#1588).
  • Add Attachment.HideColor (hide_color), which removes the color bar from a file unfurl sent with chat.unfurl (#1590).
  • Block Kit: Add TaskCardBlock.HideTitle (hide_title) and WithHideTitle, which hide the

... (truncated)

Commits
  • a015532 chore: bump to v0.30.1
  • 3e2e96d security: send the token only to Slack hosts in GetFile and UploadToURL
  • 39e1829 chore: bump to v0.30.0
  • a76e4ab refactor(users): take a scoped GetUserInfoOption on GetUserInfo (#1613)
  • 81b481f feat(manifests): add raw manifest methods and a team_id option for create (#1...
  • 0dbdd91 feat(users): make include_locale configurable (#1603)
  • e1f05bb GetFile: error on HTML download responses (#1582)
  • 4bce1c2 fix(usergroups): support documented response variants (#1605)
  • 3e17228 feat(manifests): add more fields to manifests_test (#1612)
  • 92e8b00 fix(files)!: take DeleteFileComment arguments as (fileID, commentID) (#1611)
  • Additional commits viewable in compare view

Updates github.com/wailsapp/wails/v2 from 2.12.0 to 2.16.0

Release notes

Sourced from github.com/wailsapp/wails/v2's releases.

Wails v2.14.0

Installation

go install github.com/wailsapp/wails/v2/cmd/wails@v2.14.0

Changes

Fixed

  • Fixed nil pointer crash and swallowed network error when downloading the WebView2 bootstrapper, which made the app exit instead of showing the installation error dialog by @​jannskiee

Wails v2.13.0

Installation

go install github.com/wailsapp/wails/v2/cmd/wails@v2.13.0

Changes

Added

Added

Fixed

  • Fixed wake (experimental WAILS_USE_WAKE=true build runner) running precondition sh: strings without template expansion, causing a spurious "garble is required for obfuscated builds" error on every build by @​leaanthony
  • Fixed nil pointer crash in application.Quit when called before Run or after Run returned early #5452 by @​c-tonneslan
Commits
  • 457bf21 release: v2.16.0
  • 110571b chore: update sponsors.svg and contributors.svg [skip ci]
  • e9e3a8a chore(v3): bump to v3.0.0-beta.21 and update changelog
  • 16ba478 chore(changelog): auto-add entry for PR #6118 — docs: repair credits embeds a...
  • 8d8ce15 docs: repair credits SVG embeds in all languages
  • 43cdbe6 ci: read M-Press route metadata as JSON values
  • ae61034 chore(changelog): auto-add entry for PR #6116 —
  • ac1492a ci: build the changelog helper inside its Go module
  • 6be7874 Merge remote-tracking branch 'origin/master' into codex/wails-v3-mpress-current
  • 566c2a5 docs: prepare M-Press production builds and migrate release automation
  • Additional commits viewable in compare view

Updates golang.org/x/net from 0.60.0 to 0.61.0

Commits
  • c1d31df go.mod: update golang.org/x dependencies
  • 8456a20 quic: properly check for allowed frame types in a packet
  • See full diff in compare view

Updates golang.org/x/sync from 0.23.0 to 0.24.0

Commits
  • 36f2d70 errgroup: modernize the usage of closures in goroutines
  • See full diff in compare view

Updates golang.org/x/term from 0.46.0 to 0.47.0

Commits

Updates golang.org/x/text from 0.42.0 to 0.43.0

Commits
  • ac40b0f go.mod: update golang.org/x dependencies
  • 6dcc5b6 unicode/bidi: avoid quadratic behavior in Paragraph.Order and Paragraph.Line
  • d0ecd29 secure/bidirule: lazily precompute ASCII table
  • See full diff in compare view

Updates google.golang.org/genai from 1.58.0 to 1.73.0

Release notes

Sourced from google.golang.org/genai's releases.

v1.73.0

1.73.0 (2026-10-07)

Features

  • add lyria-3.5, gemini-omni-1.1-flash, and gemini-omni-flash-preview to Interactions Model enum (0a17bc3)
  • go: expose Voices service on genai.Client and add Voices examples (770093f)
  • Support "allowlist": "disabled" in environment network config. (3a7595e)
  • support continuation_token in Interactions (5fed937)
  • update discovery doc (aeef05c)

Bug Fixes

  • gemini-api-cli: remove unsupported 2.5 and 1.6 models from Interactions model options and CLI examples (b1c58b2)

v1.72.0

1.72.0 (2026-10-01)

Features

  • add gcs_metrics_uri for exporting tuning job metrics. (a2adbb5)
  • Add interactions (b85860b)
  • expose SpeechMetadata, VoiceConfig.voice, and SpeechAnnotation in public GenAI SDKs (c342626)
  • genai: refresh examples and add build tests for Go SDK examples (a8402d6)
  • implement environments files upload and download across .NET and Go SDKs (ee76a1c)
  • include labels for LiveClientSetup (69b3fa3)
  • support continuation_token in GenerateContent (3ecb7eb)
  • support labels for Gemini API GenerateContent (bf539c0)
  • update discovery doc (702e8d0)

Bug Fixes

  • interactions: ignore unchecked returns in mock server handlers in interaction_test.go (1617851)
  • Update GitHub Actions lint workflow for Node 24 compatibility (aeb441a)
  • use CreateAgentInteraction for Trigger.interaction and TriggerCreateParams.interaction (d918e85)

v1.71.0

1.71.0 (2026-08-31)

Features

  • Add translation_config SDK support for GEAP. (83c445d)

v1.70.0

1.70.0 (2026-08-25)

... (truncated)

Changelog

Sourced from google.golang.org/genai's changelog.

1.73.0 (2026-10-07)

Features

  • add lyria-3.5, gemini-omni-1.1-flash, and gemini-omni-flash-preview to Interactions Model enum (0a17bc3)
  • go: expose Voices service on genai.Client and add Voices examples (770093f)
  • Support "allowlist": "disabled" in environment network config. (3a7595e)
  • support continuation_token in Interactions (5fed937)
  • update discovery doc (aeef05c)

Bug Fixes

  • gemini-api-cli: remove unsupported 2.5 and 1.6 models from Interactions model options and CLI examples (b1c58b2)

1.72.0 (2026-10-01)

Features

  • add gcs_metrics_uri for exporting tuning job metrics. (a2adbb5)
  • Add interactions (b85860b)
  • expose SpeechMetadata, VoiceConfig.voice, and SpeechAnnotation in public GenAI SDKs (c342626)
  • genai: refresh examples and add build tests for Go SDK examples (a8402d6)
  • implement environments files upload and download across .NET and Go SDKs (ee76a1c)
  • include labels for LiveClientSetup (69b3fa3)
  • support continuation_token in GenerateContent (3ecb7eb)
  • support labels for Gemini API GenerateContent (bf539c0)
  • update discovery doc (702e8d0)

Bug Fixes

  • interactions: ignore unchecked returns in mock server handlers in interaction_test.go (1617851)
  • Update GitHub Actions lint workflow for Node 24 compatibility (aeb441a)
  • use CreateAgentInteraction for Trigger.interaction and TriggerCreateParams.interaction (d918e85)

1.71.0 (2026-08-31)

Features

  • Add translation_config SDK support for GEAP. (83c445d)

1.70.0 (2026-08-25)

Features

... (truncated)

Commits
  • 028b57e chore(main): release 1.73.0 (#948)
  • b1c58b2 fix(gemini-api-cli): remove unsupported 2.5 and 1.6 mo...

    Description has been truncated

@dependabot
chore(deps): Bump the all-dependencies group across 1 directory with …
2b37a13 
…13 updates

Bumps the all-dependencies group with 13 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [github.com/blevesearch/bleve/v2](https://github.com/blevesearch/bleve) | `2.6.0` | `2.6.1` |
| [github.com/charmbracelet/x/ansi](https://github.com/charmbracelet/x) | `0.11.7` | `0.11.9` |
| [github.com/jackc/pgx/v5](https://github.com/jackc/pgx) | `5.9.2` | `5.11.0` |
| [github.com/modelcontextprotocol/go-sdk](https://github.com/modelcontextprotocol/go-sdk) | `1.6.1` | `1.8.0` |
| [github.com/sahilm/fuzzy](https://github.com/sahilm/fuzzy) | `0.1.2` | `0.1.3` |
| [github.com/slack-go/slack](https://github.com/slack-go/slack) | `0.25.0` | `0.30.1` |
| [github.com/wailsapp/wails/v2](https://github.com/wailsapp/wails) | `2.12.0` | `2.16.0` |
| [golang.org/x/net](https://github.com/golang/net) | `0.60.0` | `0.61.0` |
| [golang.org/x/sync](https://github.com/golang/sync) | `0.23.0` | `0.24.0` |
| [golang.org/x/term](https://github.com/golang/term) | `0.46.0` | `0.47.0` |
| [golang.org/x/text](https://github.com/golang/text) | `0.42.0` | `0.43.0` |
| [google.golang.org/genai](https://github.com/googleapis/go-genai) | `1.58.0` | `1.73.0` |
| [modernc.org/sqlite](https://gitlab.com/cznic/sqlite) | `1.50.1` | `1.60.1` |



Updates `github.com/blevesearch/bleve/v2` from 2.6.0 to 2.6.1
- [Release notes](https://github.com/blevesearch/bleve/releases)
- [Commits](blevesearch/bleve@v2.6.0...v2.6.1)

Updates `github.com/charmbracelet/x/ansi` from 0.11.7 to 0.11.9
- [Commits](charmbracelet/x@ansi/v0.11.7...ansi/v0.11.9)

Updates `github.com/jackc/pgx/v5` from 5.9.2 to 5.11.0
- [Release notes](https://github.com/jackc/pgx/releases)
- [Changelog](https://github.com/jackc/pgx/blob/master/CHANGELOG.md)
- [Commits](jackc/pgx@v5.9.2...v5.11.0)

Updates `github.com/modelcontextprotocol/go-sdk` from 1.6.1 to 1.8.0
- [Release notes](https://github.com/modelcontextprotocol/go-sdk/releases)
- [Commits](modelcontextprotocol/go-sdk@v1.6.1...v1.8.0)

Updates `github.com/sahilm/fuzzy` from 0.1.2 to 0.1.3
- [Release notes](https://github.com/sahilm/fuzzy/releases)
- [Commits](sahilm/fuzzy@v0.1.2...v0.1.3)

Updates `github.com/slack-go/slack` from 0.25.0 to 0.30.1
- [Release notes](https://github.com/slack-go/slack/releases)
- [Changelog](https://github.com/slack-go/slack/blob/master/CHANGELOG.md)
- [Commits](slack-go/slack@v0.25.0...v0.30.1)

Updates `github.com/wailsapp/wails/v2` from 2.12.0 to 2.16.0
- [Release notes](https://github.com/wailsapp/wails/releases)
- [Commits](wailsapp/wails@v2.12.0...v2.16.0)

Updates `golang.org/x/net` from 0.60.0 to 0.61.0
- [Commits](golang/net@v0.60.0...v0.61.0)

Updates `golang.org/x/sync` from 0.23.0 to 0.24.0
- [Commits](golang/sync@v0.23.0...v0.24.0)

Updates `golang.org/x/term` from 0.46.0 to 0.47.0
- [Commits](golang/term@v0.46.0...v0.47.0)

Updates `golang.org/x/text` from 0.42.0 to 0.43.0
- [Release notes](https://github.com/golang/text/releases)
- [Commits](golang/text@v0.42.0...v0.43.0)

Updates `google.golang.org/genai` from 1.58.0 to 1.73.0
- [Release notes](https://github.com/googleapis/go-genai/releases)
- [Changelog](https://github.com/googleapis/go-genai/blob/main/CHANGELOG.md)
- [Commits](googleapis/go-genai@v1.58.0...v1.73.0)

Updates `modernc.org/sqlite` from 1.50.1 to 1.60.1
- [Release notes](https://gitlab.com/cznic/sqlite/tags)
- [Changelog](https://gitlab.com/cznic/sqlite/blob/master/CHANGELOG.md)
- [Commits](https://gitlab.com/cznic/sqlite/compare/v1.50.1...v1.60.1)

---
updated-dependencies:
- dependency-name: github.com/blevesearch/bleve/v2
  dependency-version: 2.6.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: github.com/charmbracelet/x/ansi
  dependency-version: 0.11.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: github.com/jackc/pgx/v5
  dependency-version: 5.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: github.com/modelcontextprotocol/go-sdk
  dependency-version: 1.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: github.com/sahilm/fuzzy
  dependency-version: 0.1.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: github.com/slack-go/slack
  dependency-version: 0.30.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: github.com/wailsapp/wails/v2
  dependency-version: 2.16.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: golang.org/x/net
  dependency-version: 0.61.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: golang.org/x/sync
  dependency-version: 0.24.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: golang.org/x/term
  dependency-version: 0.47.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: golang.org/x/text
  dependency-version: 0.43.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: google.golang.org/genai
  dependency-version: 1.73.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: modernc.org/sqlite
  dependency-version: 1.60.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Nov 1, 2026

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants