Skip to content

chore(deps): bump the go-dependencies group across 1 directory with 6 updates - #591

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/go-dependencies-bd63c791ee
Open

chore(deps): bump the go-dependencies group across 1 directory with 6 updates#591
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/go-dependencies-bd63c791ee

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 29, 2026

Copy link
Copy Markdown
Contributor

Bumps the go-dependencies group with 6 updates in the / directory:

Package From To
charm.land/bubbles/v2 2.1.0 2.1.1
charm.land/bubbletea/v2 2.0.7 2.0.8
charm.land/lipgloss/v2 2.0.4 2.0.5
github.com/anthropics/anthropic-sdk-go 1.55.1 1.61.0
github.com/modelcontextprotocol/go-sdk 1.6.1 1.7.0
github.com/openai/openai-go/v3 3.41.0 3.47.0

Updates charm.land/bubbles/v2 from 2.1.0 to 2.1.1

Release notes

Sourced from charm.land/bubbles/v2's releases.

v2.1.1

Lil’ Textarea Fix

This is a tiny patch to fix a bug in textarea where the prompt character could be missing styling on empty lines. That’s all for now!

Thanks for using Bubbles, Charm 🌞

Changelog

Fixed

  • d2b2217d6352ce04183623d66d4266115419733c: fix(textarea): apply prompt style on all lines, including fillers (@​meowgorithm)

Docs

Thoughts? Questions? We love hearing from you. Feel free to reach out on X, Discord, Slack, The Fediverse, Bluesky.

Commits
  • d2b2217 fix(textarea): apply prompt style on all lines, including fillers
  • 0dafc72 chore(deps): bump actions/checkout from 6 to 7 in the all group (#1006)
  • 492ed7d chore(deps): bump the all group with 2 updates (#1004)
  • 40d145e chore(deps): bump the all group with 2 updates (#996)
  • 8585ef8 chore(deps): bump github.com/sahilm/fuzzy in the all group (#969)
  • ef0090e chore: remove CODEOWNERS
  • 6feda24 chore(deps): bump the all group with 3 updates (#958)
  • 42130e8 chore(deps): bump github.com/mattn/go-runewidth in the all group (#952)
  • 0d62ce2 chore(deps): bump dependabot/fetch-metadata from 2 to 3 in the all group (#953)
  • 204774b chore(deps): bump github.com/mattn/go-runewidth in the all group (#945)
  • Additional commits viewable in compare view

Updates charm.land/bubbletea/v2 from 2.0.7 to 2.0.8

Release notes

Sourced from charm.land/bubbletea/v2's releases.

v2.0.8

Graphemes, schmraphemes

No terminal can render emojis perfectly, but we can try. This release improves some very specific edge cases around emoji rendering. Enjoy!

Changelog

  • db569adcb41d0eae251587e6a5f0cc3c7d77e8eb: fix(deps): bump ultraviolet for emoji-related rendering improvements

Thoughts? Questions? We love hearing from you. Feel free to reach out on X, Discord, Slack, The Fediverse, Bluesky.

Commits
  • fc707bb chore(examples): go mod tidy
  • db569ad chore(deps): bump ultraviolet for emoji-related rendering fixes
  • See full diff in compare view

Updates charm.land/lipgloss/v2 from 2.0.4 to 2.0.5

Release notes

Sourced from charm.land/lipgloss/v2's releases.

v2.0.5

Graphemes, Schmraphemes

If you’re using emojis in the terminal you're in for a rough ride. That said, we do what we can. This release brings some in some very specific edge case rendering improvements. Enjoy.

Enjoy!

Changelog

  • 10f9584edb197ddbbfc789081d33b6fadaea5742: chore(deps): bump ultraviolet for emoji-related improvements

Thoughts? Questions? We love hearing from you. Feel free to reach out on X, Discord, Slack, The Fediverse, Bluesky.

Commits
  • 5bd778d chore(deps): bump actions/checkout from 6 to 7 in the all group (#703)
  • f2a46ba chore(deps): bump golang.org/x/sys in the all group (#701)
  • See full diff in compare view

Updates github.com/anthropics/anthropic-sdk-go from 1.55.1 to 1.61.0

Release notes

Sourced from github.com/anthropics/anthropic-sdk-go's releases.

v1.61.0

1.61.0 (2026-07-24)

Full Changelog: v1.60.0...v1.61.0

Features

  • api: add claude-opus-5 model (bb7dc83)
  • api: add tool addition/removal blocks and tool_change events (bb7dc83)
  • api: expand client-side fallback credit token types and add server-side fallbacks default option (bb7dc83)

v1.60.0

1.60.0 (2026-07-23)

Full Changelog: v1.59.0...v1.60.0

Features

  • api: add new stop reason 'model_context_window_exceeded' (94caa5d)

Bug Fixes

  • apijson: correct unmarshaling for param types (#73) (661be2e)
  • client: escape HTML in RawJSON overrides of nested properties (3b163e2)
  • refer to the CLI as ant in auth error messages (#194) (d6508c7)

v1.59.0

1.59.0 (2026-07-22)

Full Changelog: v1.58.1...v1.59.0

Features

  • api: add support for Managed Agents model effort, initial session events, and threads delta streaming (abca19a)

v1.58.1

1.58.1 (2026-07-21)

Full Changelog: v1.58.0...v1.58.1

Bug Fixes

  • client: copy all citation fields in ToParam conversions (#191) (26ac1f9)
  • vertex: default to the cloud-platform scope in WithGoogleAuth (#190) (7931e70)

Chores

  • api: add support for new refusal category (f77159c)

... (truncated)

Changelog

Sourced from github.com/anthropics/anthropic-sdk-go's changelog.

1.61.0 (2026-07-24)

Full Changelog: v1.60.0...v1.61.0

Features

  • api: add claude-opus-5 model (bb7dc83)
  • api: add tool addition/removal blocks and tool_change events (bb7dc83)
  • api: expand client-side fallback credit token types and add server-side fallbacks default option (bb7dc83)

1.60.0 (2026-07-23)

Full Changelog: v1.59.0...v1.60.0

Features

  • api: add new stop reason 'model_context_window_exceeded' (94caa5d)

Bug Fixes

  • apijson: correct unmarshaling for param types (#73) (661be2e)
  • client: escape HTML in RawJSON overrides of nested properties (3b163e2)
  • refer to the CLI as ant in auth error messages (#194) (d6508c7)

1.59.0 (2026-07-22)

Full Changelog: v1.58.1...v1.59.0

Features

  • api: add support for Managed Agents model effort, initial session events, and threads delta streaming (abca19a)

1.58.1 (2026-07-21)

Full Changelog: v1.58.0...v1.58.1

Bug Fixes

  • client: copy all citation fields in ToParam conversions (#191) (26ac1f9)
  • vertex: default to the cloud-platform scope in WithGoogleAuth (#190) (7931e70)

Chores

  • api: add support for new refusal category (f77159c)
  • docs: small updates (576dc36)
  • docs: small updates (f618082)
  • internal: codegen related update (03fee5d)

... (truncated)

Commits
  • 0303a85 release: 1.61.0
  • c59176b feat(api): add claude-opus-5 model
  • b43f0d7 release: 1.60.0
  • cae5e28 feat(api): add new stop reason 'model_context_window_exceeded'
  • 8f01993 fix(client): escape HTML in RawJSON overrides of nested properties
  • f963063 fix(apijson): correct unmarshaling for param types (#73)
  • d69fb61 fix: refer to the CLI as ant in auth error messages (#194)
  • 160315a release: 1.59.0
  • 832a54d feat(api): add support for Managed Agents model effort, initial session event...
  • 777d4a8 release: 1.58.1
  • Additional commits viewable in compare view

Updates github.com/modelcontextprotocol/go-sdk from 1.6.1 to 1.7.0

Release notes

Sourced from github.com/modelcontextprotocol/go-sdk's releases.

v1.7.0

This release brings full support for protocol version 2026-07-28. The wire protocol is largely rewritten: a stateless model with per-request _meta, a new server/discover RPC replacing the initialize handshake, multi-round-trip requests (MRTR) replacing server-initiated calls, a unified subscriptions/listen stream replacing free-floating change notifications, standardised HTTP headers, and the formal deprecation of the roots, sampling, and logging features.

The streamable HTTP transport accepts requests at protocol version 2026-07-28 only when StreamableHTTPOptions.Stateless = true. If you want to expose the new protocol over HTTP, set Stateless = true; if you want to keep stateful sessions, your clients will negotiate down to 2025-11-25.

Backward compatibility with 2025-11-25 and earlier is preserved on every endpoint. The SDK negotiates the highest mutually-supported version at connect time. The new protocol is enabled by default for new clients; existing legacy clients and servers continue to work unchanged.

This release consolidates everything shipped in v1.7.0-pre.1, v1.7.0-pre.2, and v1.7.0-pre.3. Thank you to everyone who exercised the pre-releases and filed feedback.

v1.7.0-pre.3 is already successfully used by GitHub, serving more than half a million users.

Make MCP Stateless (SEP-2575) & Sessionless (SEP-2567)

The initialize/notifications/initialized handshake is removed in 2026-07-28. Each request now carries _meta.io.modelcontextprotocol/{protocolVersion,clientInfo,clientCapabilities} so the server can validate the peer without state. A new server/discover RPC lets clients learn the server's supported versions and capabilities up front; the SDK falls back to legacy initialize if discover fails. Resumability (Last-Event-ID, standalone GET) is removed; ping, logging/setLevel, resources/subscribe, and resources/unsubscribe are also removed on this revision and rejected with MethodNotFound.

Subscriptions listen (SEP-2575)

The legacy tools/list_changed, prompts/list_changed, resources/list_changed, and resources/updated notifications are replaced by a single long-lived subscriptions/listen request whose response stream multiplexes every change notification the client opted into, each tagged with io.modelcontextprotocol/subscriptionId. The SDK opens this stream automatically on Client.Connect when the corresponding list-changed handler is set; servers route notifications only to subscribed sessions.

Multi Round-Trip Requests (SEP-2322)

Server-to-client requests for elicitation, sampling, and roots are no longer issued as fresh JSON-RPC requests. Instead a tool/prompt/resource handler returns an InputRequiredResult whose inputRequests field carries the requests; the client fulfils each and retries the original call with inputResponses populated. The SDK ships client- and server-side middleware that handles this transparently in both directions, including a server-side compatibility shim that lets MRTR handlers also work against legacy clients.

Cacheable list results (SEP-2549)

tools/list, prompts/list, resources/list, resources/templates/list, resources/read, and server/discover results now carry ttlMs and cacheScope fields. Clients honour them as freshness hints to reduce polling; shared intermediaries use cacheScope to decide whether responses may be cached.

HTTP standardization (SEP-2243)

The streamable HTTP transport now mirrors selected fields from the JSON-RPC body into HTTP headers (Mcp-Method, Mcp-Name, Mcp-Protocol-Version, Mcp-Param-*) so network intermediaries can route and observe MCP traffic without deep packet inspection. Tools can declare per-parameter passthrough via x-mcp-header annotations on their input schema. Body↔header mismatches return -32020 HeaderMismatch.

... (truncated)

Commits

Updates github.com/openai/openai-go/v3 from 3.41.0 to 3.47.0

Release notes

Sourced from github.com/openai/openai-go/v3's releases.

v3.47.0

3.47.0 (2026-07-28)

Full Changelog: v3.46.0...v3.47.0

Features

  • api: transcription model updates (1707706)

Bug Fixes

  • windows platform header normalization (#674) (706d3a8)

Build System

  • deps: bump actions/download-artifact from 7.0.0 to 8.0.1 (#739) (2c2a363)
  • deps: bump actions/setup-go from 6.4.0 to 7.0.0 (#737) (1fcc7ce)
  • deps: bump actions/setup-node from 6.3.0 to 7.0.0 (#734) (15562ec)
  • deps: bump actions/upload-artifact from 6.0.0 to 7.0.1 (#738) (16fcc6a)
  • deps: bump github.com/aws/aws-sdk-go-v2/config in / (#733) (279abc1)
  • deps: bump github/codeql-action from 4.37.2 to 4.37.3 (#736) (6032a46)

v3.46.0

3.46.0 (2026-07-23)

Full Changelog: v3.45.0...v3.46.0

Features

  • api: add support for spend_limit admin apis (8de8d9b)

Bug Fixes

  • api: safely format project spend limit paths (ac981e4)

v3.45.0

3.45.0 (2026-07-22)

Full Changelog: v3.44.0...v3.45.0

Go version requirement

openai-go v3.45.0 requires Go 1.25 or newer. This release upgrades golang.org/x/net to v0.57.0 to address security findings and aligns the SDK with supported Go toolchains. v3.44.0 is the final release that builds with Go 1.22–1.24; older SDK releases do not receive guaranteed security backports. No exported SDK API or /v3 import path changes are included.

... (truncated)

Changelog

Sourced from github.com/openai/openai-go/v3's changelog.

3.47.0 (2026-07-28)

Full Changelog: v3.46.0...v3.47.0

Features

  • api: transcription model updates (1707706)

Bug Fixes

  • windows platform header normalization (#674) (706d3a8)

Build System

  • deps: bump actions/download-artifact from 7.0.0 to 8.0.1 (#739) (2c2a363)
  • deps: bump actions/setup-go from 6.4.0 to 7.0.0 (#737) (1fcc7ce)
  • deps: bump actions/setup-node from 6.3.0 to 7.0.0 (#734) (15562ec)
  • deps: bump actions/upload-artifact from 6.0.0 to 7.0.1 (#738) (16fcc6a)
  • deps: bump github.com/aws/aws-sdk-go-v2/config in / (#733) (279abc1)
  • deps: bump github/codeql-action from 4.37.2 to 4.37.3 (#736) (6032a46)

3.46.0 (2026-07-23)

Full Changelog: v3.45.0...v3.46.0

Features

  • api: add support for spend_limit admin apis (8de8d9b)

Bug Fixes

  • api: safely format project spend limit paths (ac981e4)

3.45.0 (2026-07-22)

Full Changelog: v3.44.0...v3.45.0

Go version requirement

openai-go v3.45.0 requires Go 1.25 or newer. This release upgrades golang.org/x/net to v0.57.0 to address security findings and aligns the SDK with supported Go toolchains. v3.44.0 is the final release that builds with Go 1.22–1.24; older SDK releases do not receive guaranteed security backports. No exported SDK API or /v3 import path changes are included.

Features

... (truncated)

Commits
  • 51b70dc release: 3.47.0
  • 0e1eb3b feat(api): transcription model updates
  • 706d3a8 fix: windows platform header normalization (#674)
  • fde01fc test: support a hermetic local API reference (#731)
  • 2c2a363 build(deps): bump actions/download-artifact from 7.0.0 to 8.0.1 (#739)
  • 6032a46 build(deps): bump github/codeql-action from 4.37.2 to 4.37.3 (#736)
  • 279abc1 build(deps): bump github.com/aws/aws-sdk-go-v2/config in / (#733)
  • 15562ec build(deps): bump actions/setup-node from 6.3.0 to 7.0.0 (#734)
  • 1fcc7ce build(deps): bump actions/setup-go from 6.4.0 to 7.0.0 (#737)
  • 16fcc6a build(deps): bump actions/upload-artifact from 6.0.0 to 7.0.1 (#738)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps): bump the go-dependencies group across 1 directory with 6…
bb12be0 
… updates

Bumps the go-dependencies group with 6 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [charm.land/bubbles/v2](https://github.com/charmbracelet/bubbles) | `2.1.0` | `2.1.1` |
| [charm.land/bubbletea/v2](https://github.com/charmbracelet/bubbletea) | `2.0.7` | `2.0.8` |
| [charm.land/lipgloss/v2](https://github.com/charmbracelet/lipgloss) | `2.0.4` | `2.0.5` |
| [github.com/anthropics/anthropic-sdk-go](https://github.com/anthropics/anthropic-sdk-go) | `1.55.1` | `1.61.0` |
| [github.com/modelcontextprotocol/go-sdk](https://github.com/modelcontextprotocol/go-sdk) | `1.6.1` | `1.7.0` |
| [github.com/openai/openai-go/v3](https://github.com/openai/openai-go) | `3.41.0` | `3.47.0` |



Updates `charm.land/bubbles/v2` from 2.1.0 to 2.1.1
- [Release notes](https://github.com/charmbracelet/bubbles/releases)
- [Commits](charmbracelet/bubbles@v2.1.0...v2.1.1)

Updates `charm.land/bubbletea/v2` from 2.0.7 to 2.0.8
- [Release notes](https://github.com/charmbracelet/bubbletea/releases)
- [Commits](charmbracelet/bubbletea@v2.0.7...v2.0.8)

Updates `charm.land/lipgloss/v2` from 2.0.4 to 2.0.5
- [Release notes](https://github.com/charmbracelet/lipgloss/releases)
- [Commits](charmbracelet/lipgloss@v2.0.4...v2.0.5)

Updates `github.com/anthropics/anthropic-sdk-go` from 1.55.1 to 1.61.0
- [Release notes](https://github.com/anthropics/anthropic-sdk-go/releases)
- [Changelog](https://github.com/anthropics/anthropic-sdk-go/blob/main/CHANGELOG.md)
- [Commits](anthropics/anthropic-sdk-go@v1.55.1...v1.61.0)

Updates `github.com/modelcontextprotocol/go-sdk` from 1.6.1 to 1.7.0
- [Release notes](https://github.com/modelcontextprotocol/go-sdk/releases)
- [Commits](modelcontextprotocol/go-sdk@v1.6.1...v1.7.0)

Updates `github.com/openai/openai-go/v3` from 3.41.0 to 3.47.0
- [Release notes](https://github.com/openai/openai-go/releases)
- [Changelog](https://github.com/openai/openai-go/blob/main/CHANGELOG.md)
- [Commits](openai/openai-go@v3.41.0...v3.47.0)

---
updated-dependencies:
- dependency-name: charm.land/bubbles/v2
  dependency-version: 2.1.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-dependencies
- dependency-name: charm.land/bubbletea/v2
  dependency-version: 2.0.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-dependencies
- dependency-name: charm.land/lipgloss/v2
  dependency-version: 2.0.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-dependencies
- dependency-name: github.com/anthropics/anthropic-sdk-go
  dependency-version: 1.61.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: github.com/modelcontextprotocol/go-sdk
  dependency-version: 1.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: github.com/openai/openai-go/v3
  dependency-version: 3.47.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Jul 29, 2026
@github-actions

github-actions Bot commented Jul 29, 2026

Copy link
Copy Markdown
Contributor

✅ OpenCodeReview: No supported files changed.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants