Skip to content

Repository navigation

chore(deps): bump the go-tools group across 1 directory with 14 updates - #889

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/tools/go-tools-b4471ee2e4
Open

chore(deps): bump the go-tools group across 1 directory with 14 updates#889
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/tools/go-tools-b4471ee2e4

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 14, 2026

Copy link
Copy Markdown
Contributor

Bumps the go-tools group with 14 updates in the /tools directory:

Package From To
cloud.google.com/go/auth 0.24.1 0.24.3
github.com/googleapis/enterprise-certificate-proxy 0.3.24 0.3.25
github.com/openai/openai-go/v3 3.86.0 3.96.0
github.com/tidwall/gjson 1.20.0 1.20.1
github.com/tidwall/sjson 1.2.5 1.2.7
github.com/xo/terminfo 1.2.0 1.3.1
go.yaml.in/yaml/v3 3.0.5 3.0.6
golang.org/x/net 0.61.0 0.62.0
golang.org/x/sync 0.24.0 0.25.0
golang.org/x/sys 0.49.0 0.50.0
google.golang.org/api 0.308.0 0.311.0
google.golang.org/genai 1.76.0 1.77.0
google.golang.org/genproto/googleapis/rpc 0.0.0-20261019180522-ce908d29299b 0.0.0-20261026165753-2ffab32bce7e
google.golang.org/grpc 1.84.0 1.85.0

Updates cloud.google.com/go/auth from 0.24.1 to 0.24.3

Release notes

Sourced from cloud.google.com/go/auth's releases.

auth: v0.24.3

0.24.3 (2026-11-05)

Bug Fixes

  • auth: Strip -fips suffix from AWS service name in SigV4 signer (#20805) (7a1474c)
Commits
  • 9a94cec chore: release main (#20851)
  • 1fad924 chore: remove legacy internal/carver tool (#20860)
  • 51c6cf6 fix: correct 'seperated' and 'paramters' typos in comments (#20828)
  • 7a1474c fix(auth): strip -fips suffix from AWS service name in SigV4 signer (#20805)
  • acd5cfc chore(bigtable): mark legacy handwritten admin types and constructors… (#20858)
  • cfa4d42 fix(bigtable): align accelerator fallback and checkout error codes (#20853)
  • 45fbb54 feat(google/cloud/saasplatform/saasservicemgmt/v1): add saasplatform (#20854)
  • 0acc33b chore(main): release pubsub 2.8.1 (#20852)
  • e4a62f6 chore(main): release pubsub 1.52.0 (#20733)
  • 831f6b3 fix(bigquery/storage/managedwriter): back off once per failed stream (#20809)
  • Additional commits viewable in compare view

Updates github.com/googleapis/enterprise-certificate-proxy from 0.3.24 to 0.3.25

Release notes

Sourced from github.com/googleapis/enterprise-certificate-proxy's releases.

v0.3.25

What's Changed

Full Changelog: googleapis/enterprise-certificate-proxy@v0.3.24...v0.3.25

Commits
  • 4ed9cfa feat: Bump version from v0.3.24 to v0.3.25 (#236)
  • 8710c41 fix: bind http_proxy to loopback and require shared-secret auth on proxied re...
  • See full diff in compare view

Updates github.com/openai/openai-go/v3 from 3.86.0 to 3.96.0

Release notes

Sourced from github.com/openai/openai-go/v3's releases.

v3.96.0

3.96.0 (2026-11-05)

Features

v3.95.0

3.95.0 (2026-11-05)

Features

  • api: add Australia, India, and Japan residency options (#1218) (6d16502)
  • api: add GPT-6 Rosalind to the model catalog (#1216) (a47bab2)
  • api: add image complexity and GIF and SVG output controls (#1219) (6e7ade4)

v3.94.0

3.94.0 (2026-11-04)

Features

  • api: add project service tier settings (#1212) (90fa868)
  • api: add Responses cache-write usage details (#1213) (d3c5a9a)

Documentation

Build System

  • deps: bump github.com/Azure/azure-sdk-for-go/sdk/azcore in / (#1096) (74ab0b2)

v3.93.0

3.93.0 (2026-11-03)

Features

  • api: add workload identity providers and federation rules (#1209) (6f36b01)

v3.92.0

3.92.0 (2026-11-03)

Features

... (truncated)

Changelog

Sourced from github.com/openai/openai-go/v3's changelog.

3.96.0 (2026-11-05)

Features

3.95.0 (2026-11-05)

Features

  • api: add Australia, India, and Japan residency options (#1218) (6d16502)
  • api: add GPT-6 Rosalind to the model catalog (#1216) (a47bab2)
  • api: add image complexity and GIF and SVG output controls (#1219) (6e7ade4)

3.94.0 (2026-11-04)

Features

  • api: add project service tier settings (#1212) (90fa868)
  • api: add Responses cache-write usage details (#1213) (d3c5a9a)

Documentation

Build System

  • deps: bump github.com/Azure/azure-sdk-for-go/sdk/azcore in / (#1096) (74ab0b2)

3.93.0 (2026-11-03)

Features

  • api: add workload identity providers and federation rules (#1209) (6f36b01)

3.92.0 (2026-11-03)

Features

  • api: expand Live Responses delegation tools (#1208) (b587c9d)
  • realtime: support typed existing-item references (#1202) (355b804)
  • responses: add opt-in WebSocket final response reconstruction (#1197) (cdd7106)
  • responses: collect MCP argument progress (#1198) (e54229a)

... (truncated)

Commits

Updates github.com/tidwall/gjson from 1.20.0 to 1.20.1

Commits

Updates github.com/tidwall/sjson from 1.2.5 to 1.2.7

Commits

Updates github.com/xo/terminfo from 1.2.0 to 1.3.1

Release notes

Sourced from github.com/xo/terminfo's releases.

terminfo v1.3.1

Fixed

  • Decode returns ErrInvalidHeader for a negative count in the main header, as ncurses does. Before, such a file panicked.
  • Decode no longer panics on an acs_chars value of odd length. The value now matches infocmp: an unpaired last byte stays at the end, and when a source character repeats, the last pair wins.
  • Printf reads a % format as ncurses tparm does. Before the verb, a format accepts only the flags, a width and a precision. A width or precision over 10000 drops the flags. Before, a 12-byte string such as %:%%999999XX returned 1 MB.

Changed

  • %c ignores its width, and %:+ is the + operator, as in ncurses.

Thanks to Andrei Beshkov (@​aibeshkov), who found these faults with fuzzing.

Full Changelog: xo/terminfo@v1.3.0...v1.3.1

terminfo v1.3.0

Added

  • Puts(w, s, lines, baud) writes a capability with its padding applied, as tputs in ncurses does. A padding marker, such as the $<100/> in the flash of xterm, now becomes a delay and is not printed (D23).

Changed

  • Load returns ErrFileNotFound when no directory holds the entry (D29).
  • ColorLevelFromEnv returns ColorLevelBasic for a terminal with 8 to 255 colors. It returned ColorLevelNone for 8 or 16 colors (D24).
  • StringCaps, StringCapsShort, ExtStringCaps and ExtStringCapsShort leave out each absent capability (D28).
  • capvals.go is generated from ncurses 6.6, and names the release (D26). The constants did not change.

Removed

  • ErrDatabaseDirectoryNotFound. A caller that compares with it must compare with ErrFileNotFound (D29).

Project

  • CI runs golangci-lint v2.14.0 (D25).
  • The README has the layout, badges and project links of the other xo packages.

The decisions are in docs/PLAN.md.

Full Changelog: xo/terminfo@v1.2.1...v1.3.0

terminfo v1.2.1

Full Changelog: xo/terminfo@v1.2.0...v1.2.1

Commits
  • fd69d4a Fix two crashes in Decode and bound the output of a Printf format
  • 41b695f Add Puts, lint with golangci-lint, and answer the open questions
  • 17127ac Read $HOME for ~/.terminfo, as ncurses does
  • 773318f Set terminfo up for coding agents as every xo repository is
  • See full diff in compare view

Updates go.yaml.in/yaml/v3 from 3.0.5 to 3.0.6

Commits
  • 5a62aba resolve: hint-class literal merge-key string "<<" so it's quoted on encode
  • See full diff in compare view

Updates golang.org/x/net from 0.61.0 to 0.62.0

Commits
  • 3de643d html: check all ancestor namespace transitions when rendering raw text
  • 05c76ee ipv4, ipv6: avoid slice bounds panics on empty batch or BPF filter
  • dad306f ipv6: avoid out-of-bounds panic in ICMPFilter
  • 9c0565a ipv4: fix TTL control message parsing on big-endian Linux and Solaris
  • 9425eb3 internal/socket, ipv4, ipv6: avoid panic on empty control message on non-Unix
  • 4b10404 ipv4, ipv6: avoid nil parse function call in ControlMessage.Parse
  • afcf8cd ipv4: fix several missing bounds checks
  • 4af4fce html: avoid quadratic complexity when coalescing text nodes
  • 7e56200 quic: per-path connection ids
  • See full diff in compare view

Updates golang.org/x/sync from 0.24.0 to 0.25.0

Commits

Updates golang.org/x/sys from 0.49.0 to 0.50.0

Commits
  • 00227f1 unix: avoid using stale written count from sendfile on freebsd/386 after EINVAL
  • aa1b965 unix: don't skip directory entries with zero inodes on Linux
  • 37845fb unix: reject a short SCM_CREDENTIALS payload in ParseUnixCredentials
  • 313c631 unix: add IoctlGetUint64
  • 4a36a34 cpu: add wasm32 "architecture"
  • 908ab59 windows: use SyscallN consistently for Windows system calls
  • f5cb030 unix: set R12 before the ppc64x syscall branch
  • 0e9e10f windows: remove MemoryBasicInformation.PartitionId field on windows/386
  • 9b24ac0 windows: fix PSAPI_WORKING_SET_EX_BLOCK bit accessors
  • 69a6691 windows/mkwinsyscall: read 32-bit results from the low half of the return reg...
  • See full diff in compare view

Updates google.golang.org/api from 0.308.0 to 0.311.0

Release notes

Sourced from google.golang.org/api's releases.

v0.311.0

0.311.0 (2026-11-04)

Features

v0.310.0

0.310.0 (2026-10-28)

Features

v0.309.0

0.309.0 (2026-10-25)

Features

Changelog

Sourced from google.golang.org/api's changelog.

0.311.0 (2026-11-04)

Features

0.310.0 (2026-10-28)

Features

0.309.0 (2026-10-25)

Features

Commits

Updates google.golang.org/genai from 1.76.0 to 1.77.0

Release notes

Sourced from google.golang.org/genai's releases.

v1.77.0

1.77.0 (2026-10-29)

Features

  • Add support for continuation_token and requires_continuation status (51d761f)
  • add video upscale task parameter (cab8bf7)
  • interactions: add AutomaticContinuation to Interactions.Create in the Go SDK (0a6da26)
  • interactions: declare continuation_ids on Interaction (5b54979)
  • support video understanding in Gemini Developer API (5407437)

Bug Fixes

  • interactions: align SDK User-Agent and x-goog-api-client headers (58187ad)
Changelog

Sourced from google.golang.org/genai's changelog.

1.77.0 (2026-10-29)

Features

  • Add support for continuation_token and requires_continuation status (51d761f)
  • add video upscale task parameter (cab8bf7)
  • interactions: add AutomaticContinuation to Interactions.Create in the Go SDK (0a6da26)
  • interactions: declare continuation_ids on Interaction (5b54979)
  • support video understanding in Gemini Developer API (5407437)

Bug Fixes

  • interactions: align SDK User-Agent and x-goog-api-client headers (58187ad)
Commits
  • 1a33369 chore(main): release 1.77.0 (#1027)
  • cab8bf7 feat: add video upscale task parameter
  • 0a6da26 feat(interactions): add AutomaticContinuation to Interactions.Create in the G...
  • 58187ad fix(interactions): align SDK User-Agent and x-goog-api-client headers
  • 5407437 feat: support video understanding in Gemini Developer API
  • 5b54979 feat(interactions): declare continuation_ids on Interaction
  • d386bce chore(cli): update Speakeasy OpenAPI generator to v2.952.4
  • 51d761f feat: Add support for continuation_token and requires_continuation status
  • 9ba857f chore: update Speakeasy OpenAPI generator to v2.950.11 and bump CLI to v0.4.4
  • See full diff in compare view

Updates google.golang.org/genproto/googleapis/rpc from 0.0.0-20261019180522-ce908d29299b to 0.0.0-20261026165753-2ffab32bce7e

Commits

Updates google.golang.org/grpc from 1.84.0 to 1.85.0

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.85.0

New Features

  • stats: Expose the effective client authority (sent on the wire as the HTTP/2 :authority header) in client stats.OutHeader events. (#9296)
  • metadata: Add ValueFromOutgoingContext, which reads a single metadata value from outgoing context without copying the entire outgoing metadata into a new map. (#9282)

Bug Fixes

  • transport: Refine control buffer throttling to only count peer-induced control frames, raise the default GRPC_GO_EXPERIMENTAL_CONTROL_BUFFER_THROTTLE_LIMIT from 100 to 10,000, and close client connections if reads remain throttled for 10s. (#9563)
  • server: Ensure Stop() forcefully terminates the server while GracefulStop() is waiting for active handlers to complete. (#9394)
  • server: Unconditionally increment the highest-seen stream ID on when handling HEADERS frames to comply with RFC 7540 §5.1.1. Previously, truncated HEADERS frames left the connection in an inconsistent state and allowed stream IDs to be reused by clients without resulting in a protocol error. (#9414)
  • server: Terminate streams immediately when a HEADERS frame includes the EndStream bit. Previously, this caused server handlers to hang when reading a message. (#9391)
  • server: Reject requests missing both :authority and Host headers with HTTP 400 and status Internal. (#9365)
  • xds: Fix a bug where route header matchers with non-lowercase names failed to match routes. (#9353)
  • client: Ensure retried RPCs use the correct :authority value specified by the LB policy instead of inheriting it from a previous attempt. (#9277)
  • transport: Fail streams with io.ErrUnexpectedEOF instead of io.EOF upon receiving truncated message headers or bodies after partial data has already been received. (#9204)
Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps): bump the go-tools group across 1 directory with 14 updates
b44d165 
Bumps the go-tools group with 14 updates in the /tools directory:

| Package | From | To |
| --- | --- | --- |
| [cloud.google.com/go/auth](https://github.com/googleapis/google-cloud-go) | `0.24.1` | `0.24.3` |
| [github.com/googleapis/enterprise-certificate-proxy](https://github.com/googleapis/enterprise-certificate-proxy) | `0.3.24` | `0.3.25` |
| [github.com/openai/openai-go/v3](https://github.com/openai/openai-go) | `3.86.0` | `3.96.0` |
| [github.com/tidwall/gjson](https://github.com/tidwall/gjson) | `1.20.0` | `1.20.1` |
| [github.com/tidwall/sjson](https://github.com/tidwall/sjson) | `1.2.5` | `1.2.7` |
| [github.com/xo/terminfo](https://github.com/xo/terminfo) | `1.2.0` | `1.3.1` |
| [go.yaml.in/yaml/v3](https://github.com/yaml/go-yaml) | `3.0.5` | `3.0.6` |
| [golang.org/x/net](https://github.com/golang/net) | `0.61.0` | `0.62.0` |
| [golang.org/x/sync](https://github.com/golang/sync) | `0.24.0` | `0.25.0` |
| [golang.org/x/sys](https://github.com/golang/sys) | `0.49.0` | `0.50.0` |
| [google.golang.org/api](https://github.com/googleapis/google-api-go-client) | `0.308.0` | `0.311.0` |
| [google.golang.org/genai](https://github.com/googleapis/go-genai) | `1.76.0` | `1.77.0` |
| [google.golang.org/genproto/googleapis/rpc](https://github.com/googleapis/go-genproto) | `0.0.0-20261019180522-ce908d29299b` | `0.0.0-20261026165753-2ffab32bce7e` |
| [google.golang.org/grpc](https://github.com/grpc/grpc-go) | `1.84.0` | `1.85.0` |



Updates `cloud.google.com/go/auth` from 0.24.1 to 0.24.3
- [Release notes](https://github.com/googleapis/google-cloud-go/releases)
- [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/CHANGES.md)
- [Commits](googleapis/google-cloud-go@auth/v0.24.1...auth/v0.24.3)

Updates `github.com/googleapis/enterprise-certificate-proxy` from 0.3.24 to 0.3.25
- [Release notes](https://github.com/googleapis/enterprise-certificate-proxy/releases)
- [Commits](googleapis/enterprise-certificate-proxy@v0.3.24...v0.3.25)

Updates `github.com/openai/openai-go/v3` from 3.86.0 to 3.96.0
- [Release notes](https://github.com/openai/openai-go/releases)
- [Changelog](https://github.com/openai/openai-go/blob/main/CHANGELOG.md)
- [Commits](openai/openai-go@v3.86.0...v3.96.0)

Updates `github.com/tidwall/gjson` from 1.20.0 to 1.20.1
- [Commits](tidwall/gjson@v1.20.0...v1.20.1)

Updates `github.com/tidwall/sjson` from 1.2.5 to 1.2.7
- [Commits](tidwall/sjson@v1.2.5...v1.2.7)

Updates `github.com/xo/terminfo` from 1.2.0 to 1.3.1
- [Release notes](https://github.com/xo/terminfo/releases)
- [Commits](xo/terminfo@v1.2.0...v1.3.1)

Updates `go.yaml.in/yaml/v3` from 3.0.5 to 3.0.6
- [Release notes](https://github.com/yaml/go-yaml/releases)
- [Commits](yaml/go-yaml@v3.0.5...v3.0.6)

Updates `golang.org/x/net` from 0.61.0 to 0.62.0
- [Commits](golang/net@v0.61.0...v0.62.0)

Updates `golang.org/x/sync` from 0.24.0 to 0.25.0
- [Commits](golang/sync@v0.24.0...v0.25.0)

Updates `golang.org/x/sys` from 0.49.0 to 0.50.0
- [Commits](golang/sys@v0.49.0...v0.50.0)

Updates `google.golang.org/api` from 0.308.0 to 0.311.0
- [Release notes](https://github.com/googleapis/google-api-go-client/releases)
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md)
- [Commits](googleapis/google-api-go-client@v0.308.0...v0.311.0)

Updates `google.golang.org/genai` from 1.76.0 to 1.77.0
- [Release notes](https://github.com/googleapis/go-genai/releases)
- [Changelog](https://github.com/googleapis/go-genai/blob/main/CHANGELOG.md)
- [Commits](googleapis/go-genai@v1.76.0...v1.77.0)

Updates `google.golang.org/genproto/googleapis/rpc` from 0.0.0-20261019180522-ce908d29299b to 0.0.0-20261026165753-2ffab32bce7e
- [Commits](https://github.com/googleapis/go-genproto/commits)

Updates `google.golang.org/grpc` from 1.84.0 to 1.85.0
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.84.0...v1.85.0)

---
updated-dependencies:
- dependency-name: cloud.google.com/go/auth
  dependency-version: 0.24.3
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-tools
- dependency-name: github.com/googleapis/enterprise-certificate-proxy
  dependency-version: 0.3.25
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-tools
- dependency-name: github.com/openai/openai-go/v3
  dependency-version: 3.96.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-tools
- dependency-name: github.com/tidwall/gjson
  dependency-version: 1.20.1
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-tools
- dependency-name: github.com/tidwall/sjson
  dependency-version: 1.2.7
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-tools
- dependency-name: github.com/xo/terminfo
  dependency-version: 1.3.1
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-tools
- dependency-name: go.yaml.in/yaml/v3
  dependency-version: 3.0.6
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-tools
- dependency-name: golang.org/x/net
  dependency-version: 0.62.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-tools
- dependency-name: golang.org/x/sync
  dependency-version: 0.25.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-tools
- dependency-name: golang.org/x/sys
  dependency-version: 0.50.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-tools
- dependency-name: google.golang.org/api
  dependency-version: 0.311.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-tools
- dependency-name: google.golang.org/genai
  dependency-version: 1.77.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-tools
- dependency-name: google.golang.org/genproto/googleapis/rpc
  dependency-version: 0.0.0-20261026165753-2ffab32bce7e
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-tools
- dependency-name: google.golang.org/grpc
  dependency-version: 1.85.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-tools
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Nov 14, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants