Skip to content

chore(deps): bump the go-minor-patch group in /go with 12 updates#1709

Merged
EItanya merged 1 commit intomainfrom
dependabot/go_modules/go/go-minor-patch-cab8af48af
Apr 20, 2026
Merged

chore(deps): bump the go-minor-patch group in /go with 12 updates#1709
EItanya merged 1 commit intomainfrom
dependabot/go_modules/go/go-minor-patch-cab8af48af

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Apr 20, 2026

Bumps the go-minor-patch group in /go with 12 updates:

Package From To
github.com/a2aproject/a2a-go 0.3.13 0.3.15
github.com/anthropics/anthropic-sdk-go 1.35.0 1.37.0
github.com/aws/aws-sdk-go-v2/config 1.32.14 1.32.16
github.com/openai/openai-go/v3 3.31.0 3.32.0
google.golang.org/genai 1.53.0 1.54.0
k8s.io/api 0.35.3 0.35.4
k8s.io/apimachinery 0.35.3 0.35.4
k8s.io/client-go 0.35.3 0.35.4
github.com/aws/aws-sdk-go-v2 1.41.5 1.41.6
github.com/aws/aws-sdk-go-v2/service/bedrockruntime 1.50.4 1.50.5
github.com/jackc/pgx/v5 5.9.1 5.9.2
github.com/ollama/ollama 0.20.5 0.21.0

Updates github.com/a2aproject/a2a-go from 0.3.13 to 0.3.15

Release notes

Sourced from github.com/a2aproject/a2a-go's releases.

v0.3.15

0.3.15 (2026-04-15)

Bug Fixes

  • fix message rejected during input_required resumption due to execution cleanup race (#303)

v0.3.14

0.3.14 (2026-04-15)

Bug Fixes

  • fix unnecessary task store get in local execution mode
Changelog

Sourced from github.com/a2aproject/a2a-go's changelog.

0.3.15 (2026-04-15)

Bug Fixes

  • fix message rejected during input_required resumption due to execution cleanup race (#303)

0.3.14 (2026-04-15)

Bug Fixes

  • fix unnecessary task store get in local execution mode
Commits
  • 081cf21 fix rejected during input_required resumption due to execution cleanup race #303
  • 730788c fix unnecessary task store get in local execution mode
  • 0a222de fix: drop original error after override (#304)
  • See full diff in compare view

Updates github.com/anthropics/anthropic-sdk-go from 1.35.0 to 1.37.0

Release notes

Sourced from github.com/anthropics/anthropic-sdk-go's releases.

v1.37.0

1.37.0 (2026-04-16)

Full Changelog: v1.36.0...v1.37.0

Features

  • api: add claude-opus-4-7, token budgets and user_profiles (6e758a9)

v1.36.0

1.36.0 (2026-04-14)

Full Changelog: v1.35.1...v1.36.0

Features

  • api: mark Sonnet and Opus 4 as deprecated (fc49d21)
  • bedrock: use auth header for mantle client (#734) (629eec1)

v1.35.1

1.35.1 (2026-04-13)

Full Changelog: v1.35.0...v1.35.1

Bug Fixes

  • streaming: add missing events (227b83e)
Changelog

Sourced from github.com/anthropics/anthropic-sdk-go's changelog.

1.37.0 (2026-04-16)

Full Changelog: v1.36.0...v1.37.0

Features

  • api: add claude-opus-4-7, token budgets and user_profiles (6e758a9)

1.36.0 (2026-04-14)

Full Changelog: v1.35.1...v1.36.0

Features

  • api: mark Sonnet and Opus 4 as deprecated (fc49d21)
  • bedrock: use auth header for mantle client (#734) (629eec1)

1.35.1 (2026-04-13)

Full Changelog: v1.35.0...v1.35.1

Bug Fixes

  • streaming: add missing events (227b83e)
Commits
  • b23d9dc release: 1.37.0
  • 62d0297 feat(api): add claude-opus-4-7, token budgets and user_profiles
  • 9a9dd58 release: 1.36.0
  • 702322c feat(bedrock): use auth header for mantle client (#734)
  • 1b7e4a5 feat(api): mark Sonnet and Opus 4 as deprecated
  • 53f1077 codegen metadata
  • 07302c8 release: 1.35.1
  • 1717fb8 fix(streaming): add missing events
  • See full diff in compare view

Updates github.com/aws/aws-sdk-go-v2/config from 1.32.14 to 1.32.16

Commits

Updates github.com/openai/openai-go/v3 from 3.31.0 to 3.32.0

Release notes

Sourced from github.com/openai/openai-go/v3's releases.

v3.32.0

3.32.0 (2026-04-16)

Full Changelog: v3.31.0...v3.32.0

Features

  • api: Add detail to InputFileContent (b8e782f)
  • api: add OAuthErrorCode type (d54fff1)
  • api: add prompt_cache_retention parameter to response compact (e2da10d)

Bug Fixes

  • fix for union type names (0bc8ad5)

Documentation

Changelog

Sourced from github.com/openai/openai-go/v3's changelog.

3.32.0 (2026-04-16)

Full Changelog: v3.31.0...v3.32.0

Features

  • api: Add detail to InputFileContent (b8e782f)
  • api: add OAuthErrorCode type (d54fff1)
  • api: add prompt_cache_retention parameter to response compact (e2da10d)

Bug Fixes

  • fix for union type names (0bc8ad5)

Documentation

Commits

Updates google.golang.org/genai from 1.53.0 to 1.54.0

Release notes

Sourced from google.golang.org/genai's releases.

v1.54.0

1.54.0 (2026-04-13)

Features

  • Add "eu" as a supported service location for Vertex AI platform. (9245aba)
  • Add Live Avatar new fields (2ae252c)
  • Add webhook_config to batches.create() and models.generate_videos() (4790027)
Changelog

Sourced from google.golang.org/genai's changelog.

1.54.0 (2026-04-13)

Features

  • Add "eu" as a supported service location for Vertex AI platform. (9245aba)
  • Add Live Avatar new fields (2ae252c)
  • Add webhook_config to batches.create() and models.generate_videos() (4790027)
Commits
  • 2abde7d chore(main): release 1.54.0 (#750)
  • 4790027 feat: Add webhook_config to batches.create() and models.generate_videos()
  • 2db1072 chore: support new config mappings and fields for gemini-embedding-2 on GenAI...
  • 5bc9bf4 No public description
  • 2ae252c feat: Add Live Avatar new fields
  • 6ccba36 chore: Clean up no-op converters
  • 9245aba feat: Add "eu" as a supported service location for Vertex AI platform.
  • See full diff in compare view

Updates k8s.io/api from 0.35.3 to 0.35.4

Commits
  • e8f0e9f Update dependencies to v0.35.4 tag
  • 0b2a75e Merge pull request #138356 from dims/update-moby-spdystream-v0.5.1-1.35
  • e1ef9bc Update github.com/moby/spdystream from v0.5.0 to v0.5.1
  • See full diff in compare view

Updates k8s.io/apimachinery from 0.35.3 to 0.35.4

Commits
  • 475c941 Merge pull request #138356 from dims/update-moby-spdystream-v0.5.1-1.35
  • 6c08bb5 Update github.com/moby/spdystream from v0.5.0 to v0.5.1
  • 45398ef Merge pull request #137927 from lalitc375/cherry-pick-137864
  • b414b94 Fix backport differences for 1.35 (remove WithOrigin and MarkAlpha)
  • f933a4d Add slice and map union member support with tests
  • 977ad5b Use IsZero instead of IsNil for union ratcheting check
  • a128230 Fix union validation ratcheting when oldObj is nil
  • See full diff in compare view

Updates k8s.io/client-go from 0.35.3 to 0.35.4

Commits
  • d43aed2 Update dependencies to v0.35.4 tag
  • 8ebd9bb Merge pull request #138356 from dims/update-moby-spdystream-v0.5.1-1.35
  • 00b2f2b Update github.com/moby/spdystream from v0.5.0 to v0.5.1
  • See full diff in compare view

Updates github.com/aws/aws-sdk-go-v2 from 1.41.5 to 1.41.6

Commits

Updates github.com/aws/aws-sdk-go-v2/service/bedrockruntime from 1.50.4 to 1.50.5

Commits

Updates github.com/jackc/pgx/v5 from 5.9.1 to 5.9.2

Changelog

Sourced from github.com/jackc/pgx/v5's changelog.

5.9.2 (April 18, 2026)

Fix SQL Injection via placeholder confusion with dollar quoted string literals (GHSA-j88v-2chj-qfwx)

SQL injection can occur when:

  1. The non-default simple protocol is used.
  2. A dollar quoted string literal is used in the SQL query.
  3. That query contains text that would be would be interpreted outside as a placeholder outside of a string literal.
  4. The value of that placeholder is controllable by the attacker.

e.g.

attackValue := `$tag$; drop table canary; --`
_, err = tx.Exec(ctx, `select $tag$ $1 $tag$, $1`, pgx.QueryExecModeSimpleProtocol, attackValue)

This is unlikely to occur outside of a contrived scenario.

Commits
  • 0aeabbc Release v5.9.2
  • 60644f8 Fix SQL sanitizer bugs with dollar-quoted strings and placeholder overflow
  • a5680bc Merge pull request #2531 from dolmen-go/godoc-add-links
  • e34e452 doc: Add godoc links
  • 08c9bb1 Fix Stringer types encoded as text instead of numeric value in composite fields
  • 96b4dbd Remove unstable test
  • acf88e0 Merge pull request #2526 from abrightwell/abrightwell-min-proto
  • 2f81f1f Update max_protocol_version and min_protocol_version defaults
  • See full diff in compare view

Updates github.com/ollama/ollama from 0.20.5 to 0.21.0

Release notes

Sourced from github.com/ollama/ollama's releases.

v0.21.0

Hermes Agent

ollama launch hermes

Hermes learns with you, automatically creating skills to better serve your workflows. Great for research and engineering tasks.

What's Changed

  • Gemma 4 on MLX. Added support for running Gemma 4 via MLX on Apple Silicon, including a text-only MLX runtime for the model. The MLX backend also picked up mixed-precision quantization, better capability detection, and a batch of new op wrappers (Conv2d, Pad, activations, trig, masked SDPA, and RoPE-with-freqs).
  • Hermes and GitHub Copilot CLI in ollama launch. Added both integrations, which can now be configured in one command alongside the rest of the supported coding agents.
  • OpenCode moved to inline config. ollama launch opencode now writes its config inline rather than to a separate file, matching how other integrations are handled.
  • ollama launch no longer rewrites config when nothing changed. Pressing → on a configured multi-model integration, or passing --model with the current primary, used to trigger a confirmation prompt and rewrite both the editor's config file and config.json. Now it's a no-op when the resolved model list matches what's already saved.
  • Fixed ollama launch openclaw --yes so it correctly skips the channels configuration step, so non-interactive setups complete cleanly.
  • Restored the Gemma 4 nothink renderer with the e2b-style prompt.
  • Fixed the Gemma 4 compiler error that was breaking Metal builds.
  • Fixed macOS cross-compiles so they no longer trigger generate, which was breaking cmake builds on some Xcode versions.
  • Quieted cgo builds by suppressing deprecated warnings during go build.

Full Changelog: ollama/ollama@v0.20.7...v0.21.0

v0.20.8

What's Changed

Full Changelog: ollama/ollama@v0.20.6...v0.20.8-rc0

v0.20.7

What's Changed

Full Changelog: ollama/ollama@v0.20.6...v0.20.7

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps): bump the go-minor-patch group in /go with 12 updates
d693326 
Bumps the go-minor-patch group in /go with 12 updates:

| Package | From | To |
| --- | --- | --- |
| [github.com/a2aproject/a2a-go](https://github.com/a2aproject/a2a-go) | `0.3.13` | `0.3.15` |
| [github.com/anthropics/anthropic-sdk-go](https://github.com/anthropics/anthropic-sdk-go) | `1.35.0` | `1.37.0` |
| [github.com/aws/aws-sdk-go-v2/config](https://github.com/aws/aws-sdk-go-v2) | `1.32.14` | `1.32.16` |
| [github.com/openai/openai-go/v3](https://github.com/openai/openai-go) | `3.31.0` | `3.32.0` |
| [google.golang.org/genai](https://github.com/googleapis/go-genai) | `1.53.0` | `1.54.0` |
| [k8s.io/api](https://github.com/kubernetes/api) | `0.35.3` | `0.35.4` |
| [k8s.io/apimachinery](https://github.com/kubernetes/apimachinery) | `0.35.3` | `0.35.4` |
| [k8s.io/client-go](https://github.com/kubernetes/client-go) | `0.35.3` | `0.35.4` |
| [github.com/aws/aws-sdk-go-v2](https://github.com/aws/aws-sdk-go-v2) | `1.41.5` | `1.41.6` |
| [github.com/aws/aws-sdk-go-v2/service/bedrockruntime](https://github.com/aws/aws-sdk-go-v2) | `1.50.4` | `1.50.5` |
| [github.com/jackc/pgx/v5](https://github.com/jackc/pgx) | `5.9.1` | `5.9.2` |
| [github.com/ollama/ollama](https://github.com/ollama/ollama) | `0.20.5` | `0.21.0` |


Updates `github.com/a2aproject/a2a-go` from 0.3.13 to 0.3.15
- [Release notes](https://github.com/a2aproject/a2a-go/releases)
- [Changelog](https://github.com/a2aproject/a2a-go/blob/v0.3.15/CHANGELOG.md)
- [Commits](a2aproject/a2a-go@v0.3.13...v0.3.15)

Updates `github.com/anthropics/anthropic-sdk-go` from 1.35.0 to 1.37.0
- [Release notes](https://github.com/anthropics/anthropic-sdk-go/releases)
- [Changelog](https://github.com/anthropics/anthropic-sdk-go/blob/main/CHANGELOG.md)
- [Commits](anthropics/anthropic-sdk-go@v1.35.0...v1.37.0)

Updates `github.com/aws/aws-sdk-go-v2/config` from 1.32.14 to 1.32.16
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@config/v1.32.14...config/v1.32.16)

Updates `github.com/openai/openai-go/v3` from 3.31.0 to 3.32.0
- [Release notes](https://github.com/openai/openai-go/releases)
- [Changelog](https://github.com/openai/openai-go/blob/main/CHANGELOG.md)
- [Commits](openai/openai-go@v3.31.0...v3.32.0)

Updates `google.golang.org/genai` from 1.53.0 to 1.54.0
- [Release notes](https://github.com/googleapis/go-genai/releases)
- [Changelog](https://github.com/googleapis/go-genai/blob/main/CHANGELOG.md)
- [Commits](googleapis/go-genai@v1.53.0...v1.54.0)

Updates `k8s.io/api` from 0.35.3 to 0.35.4
- [Commits](kubernetes/api@v0.35.3...v0.35.4)

Updates `k8s.io/apimachinery` from 0.35.3 to 0.35.4
- [Commits](kubernetes/apimachinery@v0.35.3...v0.35.4)

Updates `k8s.io/client-go` from 0.35.3 to 0.35.4
- [Changelog](https://github.com/kubernetes/client-go/blob/master/CHANGELOG.md)
- [Commits](kubernetes/client-go@v0.35.3...v0.35.4)

Updates `github.com/aws/aws-sdk-go-v2` from 1.41.5 to 1.41.6
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@v1.41.5...v1.41.6)

Updates `github.com/aws/aws-sdk-go-v2/service/bedrockruntime` from 1.50.4 to 1.50.5
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@service/ssm/v1.50.4...service/ssm/v1.50.5)

Updates `github.com/jackc/pgx/v5` from 5.9.1 to 5.9.2
- [Changelog](https://github.com/jackc/pgx/blob/master/CHANGELOG.md)
- [Commits](jackc/pgx@v5.9.1...v5.9.2)

Updates `github.com/ollama/ollama` from 0.20.5 to 0.21.0
- [Release notes](https://github.com/ollama/ollama/releases)
- [Commits](ollama/ollama@v0.20.5...v0.21.0)

---
updated-dependencies:
- dependency-name: github.com/a2aproject/a2a-go
  dependency-version: 0.3.15
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-minor-patch
- dependency-name: github.com/anthropics/anthropic-sdk-go
  dependency-version: 1.37.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-patch
- dependency-name: github.com/aws/aws-sdk-go-v2/config
  dependency-version: 1.32.16
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-minor-patch
- dependency-name: github.com/openai/openai-go/v3
  dependency-version: 3.32.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-patch
- dependency-name: google.golang.org/genai
  dependency-version: 1.54.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-patch
- dependency-name: k8s.io/api
  dependency-version: 0.35.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-minor-patch
- dependency-name: k8s.io/apimachinery
  dependency-version: 0.35.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-minor-patch
- dependency-name: k8s.io/client-go
  dependency-version: 0.35.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-minor-patch
- dependency-name: github.com/aws/aws-sdk-go-v2
  dependency-version: 1.41.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-minor-patch
- dependency-name: github.com/aws/aws-sdk-go-v2/service/bedrockruntime
  dependency-version: 1.50.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-minor-patch
- dependency-name: github.com/jackc/pgx/v5
  dependency-version: 5.9.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-minor-patch
- dependency-name: github.com/ollama/ollama
  dependency-version: 0.21.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot bot commented on behalf of github Apr 20, 2026

Labels

The following labels could not be found: dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

Copilot AI review requested due to automatic review settings April 20, 2026 07:56
@dependabot dependabot bot review requested due to automatic review settings April 20, 2026 07:56
@EItanya EItanya merged commit 9a78b47 into main Apr 20, 2026
23 checks passed
@EItanya EItanya deleted the dependabot/go_modules/go/go-minor-patch-cab8af48af branch April 20, 2026 18:49
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@EItanya EItanya EItanya approved these changes

@ilackarms ilackarms Awaiting requested review from ilackarms ilackarms is a code owner

@yuval-k yuval-k Awaiting requested review from yuval-k yuval-k is a code owner

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@EItanya