Skip to content

chore(deps): bump the go-dependencies group across 1 directory with 7 updates - #636

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/go-dependencies-d58bf022d0
Open

chore(deps): bump the go-dependencies group across 1 directory with 7 updates#636
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/go-dependencies-d58bf022d0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 31, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the go-dependencies group with 7 updates in the / directory:

Package From To
charm.land/bubbles/v2 2.1.0 2.1.1
charm.land/bubbletea/v2 2.0.7 2.0.8
charm.land/lipgloss/v2 2.0.4 2.0.5
github.com/anthropics/anthropic-sdk-go 1.55.1 1.61.0
github.com/modelcontextprotocol/go-sdk 1.6.1 1.7.0
github.com/openai/openai-go/v3 3.41.0 3.49.0
github.com/spf13/pflag 1.0.9 1.0.10

Updates charm.land/bubbles/v2 from 2.1.0 to 2.1.1

Release notes

Sourced from charm.land/bubbles/v2's releases.

v2.1.1

Lil’ Textarea Fix

This is a tiny patch to fix a bug in textarea where the prompt character could be missing styling on empty lines. That’s all for now!

Thanks for using Bubbles, Charm 🌞

Changelog

Fixed

  • d2b2217d6352ce04183623d66d4266115419733c: fix(textarea): apply prompt style on all lines, including fillers (@​meowgorithm)

Docs

Thoughts? Questions? We love hearing from you. Feel free to reach out on X, Discord, Slack, The Fediverse, Bluesky.

Commits
  • d2b2217 fix(textarea): apply prompt style on all lines, including fillers
  • 0dafc72 chore(deps): bump actions/checkout from 6 to 7 in the all group (#1006)
  • 492ed7d chore(deps): bump the all group with 2 updates (#1004)
  • 40d145e chore(deps): bump the all group with 2 updates (#996)
  • 8585ef8 chore(deps): bump github.com/sahilm/fuzzy in the all group (#969)
  • ef0090e chore: remove CODEOWNERS
  • 6feda24 chore(deps): bump the all group with 3 updates (#958)
  • 42130e8 chore(deps): bump github.com/mattn/go-runewidth in the all group (#952)
  • 0d62ce2 chore(deps): bump dependabot/fetch-metadata from 2 to 3 in the all group (#953)
  • 204774b chore(deps): bump github.com/mattn/go-runewidth in the all group (#945)
  • Additional commits viewable in compare view

Updates charm.land/bubbletea/v2 from 2.0.7 to 2.0.8

Release notes

Sourced from charm.land/bubbletea/v2's releases.

v2.0.8

Graphemes, schmraphemes

No terminal can render emojis perfectly, but we can try. This release improves some very specific edge cases around emoji rendering. Enjoy!

Changelog

  • db569adcb41d0eae251587e6a5f0cc3c7d77e8eb: fix(deps): bump ultraviolet for emoji-related rendering improvements

Thoughts? Questions? We love hearing from you. Feel free to reach out on X, Discord, Slack, The Fediverse, Bluesky.

Commits
  • fc707bb chore(examples): go mod tidy
  • db569ad chore(deps): bump ultraviolet for emoji-related rendering fixes
  • See full diff in compare view

Updates charm.land/lipgloss/v2 from 2.0.4 to 2.0.5

Release notes

Sourced from charm.land/lipgloss/v2's releases.

v2.0.5

Graphemes, Schmraphemes

If you’re using emojis in the terminal you're in for a rough ride. That said, we do what we can. This release brings some in some very specific edge case rendering improvements. Enjoy.

Enjoy!

Changelog

  • 10f9584edb197ddbbfc789081d33b6fadaea5742: chore(deps): bump ultraviolet for emoji-related improvements

Thoughts? Questions? We love hearing from you. Feel free to reach out on X, Discord, Slack, The Fediverse, Bluesky.

Commits
  • 5bd778d chore(deps): bump actions/checkout from 6 to 7 in the all group (#703)
  • f2a46ba chore(deps): bump golang.org/x/sys in the all group (#701)
  • See full diff in compare view

Updates github.com/anthropics/anthropic-sdk-go from 1.55.1 to 1.61.0

Release notes

Sourced from github.com/anthropics/anthropic-sdk-go's releases.

v1.61.0

1.61.0 (2026-07-24)

Full Changelog: v1.60.0...v1.61.0

Features

  • api: add claude-opus-5 model (bb7dc83)
  • api: add tool addition/removal blocks and tool_change events (bb7dc83)
  • api: expand client-side fallback credit token types and add server-side fallbacks default option (bb7dc83)

v1.60.0

1.60.0 (2026-07-23)

Full Changelog: v1.59.0...v1.60.0

Features

  • api: add new stop reason 'model_context_window_exceeded' (94caa5d)

Bug Fixes

  • apijson: correct unmarshaling for param types (#73) (661be2e)
  • client: escape HTML in RawJSON overrides of nested properties (3b163e2)
  • refer to the CLI as ant in auth error messages (#194) (d6508c7)

v1.59.0

1.59.0 (2026-07-22)

Full Changelog: v1.58.1...v1.59.0

Features

  • api: add support for Managed Agents model effort, initial session events, and threads delta streaming (abca19a)

v1.58.1

1.58.1 (2026-07-21)

Full Changelog: v1.58.0...v1.58.1

Bug Fixes

  • client: copy all citation fields in ToParam conversions (#191) (26ac1f9)
  • vertex: default to the cloud-platform scope in WithGoogleAuth (#190) (7931e70)

Chores

  • api: add support for new refusal category (f77159c)

... (truncated)

Changelog

Sourced from github.com/anthropics/anthropic-sdk-go's changelog.

1.61.0 (2026-07-24)

Full Changelog: v1.60.0...v1.61.0

Features

  • api: add claude-opus-5 model (bb7dc83)
  • api: add tool addition/removal blocks and tool_change events (bb7dc83)
  • api: expand client-side fallback credit token types and add server-side fallbacks default option (bb7dc83)

1.60.0 (2026-07-23)

Full Changelog: v1.59.0...v1.60.0

Features

  • api: add new stop reason 'model_context_window_exceeded' (94caa5d)

Bug Fixes

  • apijson: correct unmarshaling for param types (#73) (661be2e)
  • client: escape HTML in RawJSON overrides of nested properties (3b163e2)
  • refer to the CLI as ant in auth error messages (#194) (d6508c7)

1.59.0 (2026-07-22)

Full Changelog: v1.58.1...v1.59.0

Features

  • api: add support for Managed Agents model effort, initial session events, and threads delta streaming (abca19a)

1.58.1 (2026-07-21)

Full Changelog: v1.58.0...v1.58.1

Bug Fixes

  • client: copy all citation fields in ToParam conversions (#191) (26ac1f9)
  • vertex: default to the cloud-platform scope in WithGoogleAuth (#190) (7931e70)

Chores

  • api: add support for new refusal category (f77159c)
  • docs: small updates (576dc36)
  • docs: small updates (f618082)
  • internal: codegen related update (03fee5d)

... (truncated)

Commits
  • 0303a85 release: 1.61.0
  • c59176b feat(api): add claude-opus-5 model
  • b43f0d7 release: 1.60.0
  • cae5e28 feat(api): add new stop reason 'model_context_window_exceeded'
  • 8f01993 fix(client): escape HTML in RawJSON overrides of nested properties
  • f963063 fix(apijson): correct unmarshaling for param types (#73)
  • d69fb61 fix: refer to the CLI as ant in auth error messages (#194)
  • 160315a release: 1.59.0
  • 832a54d feat(api): add support for Managed Agents model effort, initial session event...
  • 777d4a8 release: 1.58.1
  • Additional commits viewable in compare view

Updates github.com/modelcontextprotocol/go-sdk from 1.6.1 to 1.7.0

Release notes

Sourced from github.com/modelcontextprotocol/go-sdk's releases.

v1.7.0

This release brings full support for protocol version 2026-07-28. The wire protocol is largely rewritten: a stateless model with per-request _meta, a new server/discover RPC replacing the initialize handshake, multi-round-trip requests (MRTR) replacing server-initiated calls, a unified subscriptions/listen stream replacing free-floating change notifications, standardised HTTP headers, and the formal deprecation of the roots, sampling, and logging features.

The streamable HTTP transport accepts requests at protocol version 2026-07-28 only when StreamableHTTPOptions.Stateless = true. If you want to expose the new protocol over HTTP, set Stateless = true; if you want to keep stateful sessions, your clients will negotiate down to 2025-11-25.

Backward compatibility with 2025-11-25 and earlier is preserved on every endpoint. The SDK negotiates the highest mutually-supported version at connect time. The new protocol is enabled by default for new clients; existing legacy clients and servers continue to work unchanged.

This release consolidates everything shipped in v1.7.0-pre.1, v1.7.0-pre.2, and v1.7.0-pre.3. Thank you to everyone who exercised the pre-releases and filed feedback.

v1.7.0-pre.3 is already successfully used by GitHub, serving more than half a million users.

Make MCP Stateless (SEP-2575) & Sessionless (SEP-2567)

The initialize/notifications/initialized handshake is removed in 2026-07-28. Each request now carries _meta.io.modelcontextprotocol/{protocolVersion,clientInfo,clientCapabilities} so the server can validate the peer without state. A new server/discover RPC lets clients learn the server's supported versions and capabilities up front; the SDK falls back to legacy initialize if discover fails. Resumability (Last-Event-ID, standalone GET) is removed; ping, logging/setLevel, resources/subscribe, and resources/unsubscribe are also removed on this revision and rejected with MethodNotFound.

Subscriptions listen (SEP-2575)

The legacy tools/list_changed, prompts/list_changed, resources/list_changed, and resources/updated notifications are replaced by a single long-lived subscriptions/listen request whose response stream multiplexes every change notification the client opted into, each tagged with io.modelcontextprotocol/subscriptionId. The SDK opens this stream automatically on Client.Connect when the corresponding list-changed handler is set; servers route notifications only to subscribed sessions.

Multi Round-Trip Requests (SEP-2322)

Server-to-client requests for elicitation, sampling, and roots are no longer issued as fresh JSON-RPC requests. Instead a tool/prompt/resource handler returns an InputRequiredResult whose inputRequests field carries the requests; the client fulfils each and retries the original call with inputResponses populated. The SDK ships client- and server-side middleware that handles this transparently in both directions, including a server-side compatibility shim that lets MRTR handlers also work against legacy clients.

Cacheable list results (SEP-2549)

tools/list, prompts/list, resources/list, resources/templates/list, resources/read, and server/discover results now carry ttlMs and cacheScope fields. Clients honour them as freshness hints to reduce polling; shared intermediaries use cacheScope to decide whether responses may be cached.

HTTP standardization (SEP-2243)

The streamable HTTP transport now mirrors selected fields from the JSON-RPC body into HTTP headers (Mcp-Method, Mcp-Name, Mcp-Protocol-Version, Mcp-Param-*) so network intermediaries can route and observe MCP traffic without deep packet inspection. Tools can declare per-parameter passthrough via x-mcp-header annotations on their input schema. Body↔header mismatches return -32020 HeaderMismatch.

... (truncated)

Commits

Updates github.com/openai/openai-go/v3 from 3.41.0 to 3.49.0

Release notes

Sourced from github.com/openai/openai-go/v3's releases.

v3.49.0

3.49.0 (2026-07-31)

Full Changelog: v3.48.0...v3.49.0

Features

  • api: content provenance checks (5a46c55)

Documentation

  • demonstrate mutual TLS with custom HTTP client (#741) (e862c49)

v3.48.0

3.48.0 (2026-07-30)

Full Changelog: v3.47.0...v3.48.0

Features

v3.47.0

3.47.0 (2026-07-28)

Full Changelog: v3.46.0...v3.47.0

Features

  • api: transcription model updates (1707706)

Bug Fixes

  • windows platform header normalization (#674) (706d3a8)

Build System

  • deps: bump actions/download-artifact from 7.0.0 to 8.0.1 (#739) (2c2a363)
  • deps: bump actions/setup-go from 6.4.0 to 7.0.0 (#737) (1fcc7ce)
  • deps: bump actions/setup-node from 6.3.0 to 7.0.0 (#734) (15562ec)
  • deps: bump actions/upload-artifact from 6.0.0 to 7.0.1 (#738) (16fcc6a)
  • deps: bump github.com/aws/aws-sdk-go-v2/config in / (#733) (279abc1)
  • deps: bump github/codeql-action from 4.37.2 to 4.37.3 (#736) (6032a46)

v3.46.0

3.46.0 (2026-07-23)

... (truncated)

Changelog

Sourced from github.com/openai/openai-go/v3's changelog.

3.49.0 (2026-07-31)

Full Changelog: v3.48.0...v3.49.0

Features

  • api: content provenance checks (5a46c55)

Documentation

  • demonstrate mutual TLS with custom HTTP client (#741) (e862c49)

3.48.0 (2026-07-30)

Full Changelog: v3.47.0...v3.48.0

Features

3.47.0 (2026-07-28)

Full Changelog: v3.46.0...v3.47.0

Features

  • api: transcription model updates (1707706)

Bug Fixes

  • windows platform header normalization (#674) (706d3a8)

Build System

  • deps: bump actions/download-artifact from 7.0.0 to 8.0.1 (#739) (2c2a363)
  • deps: bump actions/setup-go from 6.4.0 to 7.0.0 (#737) (1fcc7ce)
  • deps: bump actions/setup-node from 6.3.0 to 7.0.0 (#734) (15562ec)
  • deps: bump actions/upload-artifact from 6.0.0 to 7.0.1 (#738) (16fcc6a)
  • deps: bump github.com/aws/aws-sdk-go-v2/config in / (#733) (279abc1)
  • deps: bump github/codeql-action from 4.37.2 to 4.37.3 (#736) (6032a46)

3.46.0 (2026-07-23)

Full Changelog: v3.45.0...v3.46.0

Features

... (truncated)

Commits
  • f0e6bff release: 3.49.0
  • 1849487 feat(api): content provenance checks
  • e862c49 docs: demonstrate mutual TLS with custom HTTP client (#741)
  • 6fe29b2 release: 3.48.0
  • 41a2223 feat(api): fast tier
  • 51b70dc release: 3.47.0
  • 0e1eb3b feat(api): transcription model updates
  • 706d3a8 fix: windows platform header normalization (#674)
  • fde01fc test: support a hermetic local API reference (#731)
  • 2c2a363 build(deps): bump actions/download-artifact from 7.0.0 to 8.0.1 (#739)
  • Additional commits viewable in compare view

Updates github.com/spf13/pflag from 1.0.9 to 1.0.10

Release notes

Sourced from github.com/spf13/pflag's releases.

v1.0.10

What's Changed

New Contributors

Full Changelog: spf13/pflag@v1.0.9...v1.0.10

Commits
  • 0491e57 Merge pull request #448 from thaJeztah/fix_go_version
  • 72abab1 Merge pull request #447 from thaJeztah/fix_deprecation_comment
  • 7e4dfb1 Test on Go 1.12
  • 18a9d17 move Func, BoolFunc, tests as they require go1.21
  • c5b9e98 remove uses of errors.Is, which requires go1.13
  • 45a4873 fix deprecation comment for (FlagSet.)ParseErrorsWhitelist
  • See full diff in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Jul 31, 2026
@github-actions

github-actions Bot commented Jul 31, 2026

Copy link
Copy Markdown
Contributor

✅ OpenCodeReview: No supported files changed.

@dependabot
chore(deps): bump the go-dependencies group across 1 directory with 7…
1f3d295 
… updates

Bumps the go-dependencies group with 7 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [charm.land/bubbles/v2](https://github.com/charmbracelet/bubbles) | `2.1.0` | `2.1.1` |
| [charm.land/bubbletea/v2](https://github.com/charmbracelet/bubbletea) | `2.0.7` | `2.0.8` |
| [charm.land/lipgloss/v2](https://github.com/charmbracelet/lipgloss) | `2.0.4` | `2.0.5` |
| [github.com/anthropics/anthropic-sdk-go](https://github.com/anthropics/anthropic-sdk-go) | `1.55.1` | `1.61.0` |
| [github.com/modelcontextprotocol/go-sdk](https://github.com/modelcontextprotocol/go-sdk) | `1.6.1` | `1.7.0` |
| [github.com/openai/openai-go/v3](https://github.com/openai/openai-go) | `3.41.0` | `3.49.0` |
| [github.com/spf13/pflag](https://github.com/spf13/pflag) | `1.0.9` | `1.0.10` |



Updates `charm.land/bubbles/v2` from 2.1.0 to 2.1.1
- [Release notes](https://github.com/charmbracelet/bubbles/releases)
- [Commits](charmbracelet/bubbles@v2.1.0...v2.1.1)

Updates `charm.land/bubbletea/v2` from 2.0.7 to 2.0.8
- [Release notes](https://github.com/charmbracelet/bubbletea/releases)
- [Commits](charmbracelet/bubbletea@v2.0.7...v2.0.8)

Updates `charm.land/lipgloss/v2` from 2.0.4 to 2.0.5
- [Release notes](https://github.com/charmbracelet/lipgloss/releases)
- [Commits](charmbracelet/lipgloss@v2.0.4...v2.0.5)

Updates `github.com/anthropics/anthropic-sdk-go` from 1.55.1 to 1.61.0
- [Release notes](https://github.com/anthropics/anthropic-sdk-go/releases)
- [Changelog](https://github.com/anthropics/anthropic-sdk-go/blob/main/CHANGELOG.md)
- [Commits](anthropics/anthropic-sdk-go@v1.55.1...v1.61.0)

Updates `github.com/modelcontextprotocol/go-sdk` from 1.6.1 to 1.7.0
- [Release notes](https://github.com/modelcontextprotocol/go-sdk/releases)
- [Commits](modelcontextprotocol/go-sdk@v1.6.1...v1.7.0)

Updates `github.com/openai/openai-go/v3` from 3.41.0 to 3.49.0
- [Release notes](https://github.com/openai/openai-go/releases)
- [Changelog](https://github.com/openai/openai-go/blob/main/CHANGELOG.md)
- [Commits](openai/openai-go@v3.41.0...v3.49.0)

Updates `github.com/spf13/pflag` from 1.0.9 to 1.0.10
- [Release notes](https://github.com/spf13/pflag/releases)
- [Commits](spf13/pflag@v1.0.9...v1.0.10)

---
updated-dependencies:
- dependency-name: charm.land/bubbles/v2
  dependency-version: 2.1.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-dependencies
- dependency-name: charm.land/bubbletea/v2
  dependency-version: 2.0.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-dependencies
- dependency-name: charm.land/lipgloss/v2
  dependency-version: 2.0.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-dependencies
- dependency-name: github.com/anthropics/anthropic-sdk-go
  dependency-version: 1.61.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: github.com/modelcontextprotocol/go-sdk
  dependency-version: 1.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: github.com/openai/openai-go/v3
  dependency-version: 3.46.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: github.com/spf13/pflag
  dependency-version: 1.0.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/go_modules/go-dependencies-d58bf022d0 branch from 9a7bb8f to 1f3d295 Compare August 5, 2026 20:34
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants