Skip to content

chore(deps): bump all dependencies - #25

Merged
thereisnotime merged 1 commit into
mainfrom
chore/deps-bump-20261004
Oct 6, 2026
Merged

thereisnotime merged 1 commit into
mainfrom
chore/deps-bump-20261004

Conversation

@thereisnotime

Copy link
Copy Markdown
Owner

Rolls up all pending dependency updates in one shot, superseding dependabot PRs #19, #21, #22, and #24.

Go modules

  • modelcontextprotocol/go-sdk v1.7.0 → v1.8.0 (hardening: resource exhaustion limits, session leak fixes, per-request cache control)
  • golang.org/x/oauth2 v0.36.0 → v0.37.0
  • golang.org/x/sync v0.22.0 → v0.23.0
  • golang.org/x/sys v0.47.0 → v0.48.0
  • golang.org/x/time v0.15.0 → v0.16.0

GitHub Actions

  • ossf/scorecard-action v2.4.3 → v2.4.4 (Scorecard v5.5.0, log POST failures instead of failing the action)
  • codecov/codecov-action v7.0.0 → v7.1.1
  • github/codeql-action/upload-sarif v4.37.8 → v4.38.2 (CodeQL bundle v2.27.1, Linux Arm64 support)

All action pins updated to full commit SHAs per repo conventions.

Go modules:
- modelcontextprotocol/go-sdk v1.7.0 -> v1.8.0
- golang.org/x/oauth2 v0.36.0 -> v0.37.0
- golang.org/x/sync v0.22.0 -> v0.23.0
- golang.org/x/sys v0.47.0 -> v0.48.0
- golang.org/x/time v0.15.0 -> v0.16.0

GitHub Actions:
- ossf/scorecard-action v2.4.3 -> v2.4.4
- codecov/codecov-action v7.0.0 -> v7.1.1
- github/codeql-action/upload-sarif v4.37.8 -> v4.38.2

Supersedes dependabot PRs #19, #21, #22, #24.
@codecov-commenter

Copy link
Copy Markdown

⚠️ Please install the 'codecov app svg image' to ensure uploads and comments are reliably processed by Codecov.

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!

@thereisnotime
thereisnotime merged commit e4bfcd1 into main Oct 6, 2026
6 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants