chore(deps): bump the go-minor-patch group in /go with 11 updates

[dependabot]

Bumps the go-minor-patch group in /go with 11 updates:

Package	From	To
github.com/anthropics/anthropic-sdk-go	1.42.0	1.43.0
github.com/openai/openai-go/v3	3.35.0	3.36.0
google.golang.org/genai	1.56.0	1.57.0
k8s.io/api	0.36.0	0.36.1
k8s.io/apimachinery	0.36.0	0.36.1
k8s.io/client-go	0.36.0	0.36.1
sigs.k8s.io/agent-sandbox	0.4.5	0.4.6
sigs.k8s.io/controller-runtime	0.24.0	0.24.1
github.com/ollama/ollama	0.23.2	0.24.0
google.golang.org/grpc	1.81.0	1.81.1
k8s.io/apiextensions-apiserver	0.36.0	0.36.1

Updates github.com/anthropics/anthropic-sdk-go from 1.42.0 to 1.43.0

Release notes

Sourced from github.com/anthropics/anthropic-sdk-go's releases.

v1.43.0

1.43.0 (2026-05-13)

Full Changelog: v1.42.0...v1.43.0

Features

• api: Add BetaManagedAgentsSearchResultBlock types (498fafc)
• api: Add support for cache diagnostics beta (eac032f)
• client: add compatibility aliases for old type names (38e1f89)
• client: add compatibility aliases for old type names (a98b0fb)
• client: optimize json encoder for internal types (f379c42)

Bug Fixes

• structured outputs: allowlist enum, const, pattern, allOf in transformSchema (#823) (d368786)

Chores

• api: spec updates (502b9f1)
• fix standard webhooks version (#842) (1fdda46)
• internal: simplify release-please config (69da3d6)

Changelog

Sourced from github.com/anthropics/anthropic-sdk-go's changelog.

1.43.0 (2026-05-13)

Full Changelog: v1.42.0...v1.43.0

Features

• api: Add BetaManagedAgentsSearchResultBlock types (498fafc)
• api: Add support for cache diagnostics beta (eac032f)
• client: add compatibility aliases for old type names (38e1f89)
• client: add compatibility aliases for old type names (a98b0fb)
• client: optimize json encoder for internal types (f379c42)

Bug Fixes

• structured outputs: allowlist enum, const, pattern, allOf in transformSchema (#823) (d368786)

Chores

• api: spec updates (502b9f1)
• fix standard webhooks version (#842) (1fdda46)
• internal: simplify release-please config (69da3d6)

Commits

• 05700ac release: 1.43.0
• c5a8272 feat(api): Add support for cache diagnostics beta
• a235416 feat(client): optimize json encoder for internal types
• 2892c45 chore(api): spec updates
• e02171b codegen metadata
• 8a4cbf0 feat(api): Add BetaManagedAgentsSearchResultBlock types
• 3036341 ci: pin GitHub Actions to commit SHAs
• 81dd299 chore: fix standard webhooks version (#842)
• 438f43d feat(client): add compatibility aliases for old type names
• 0ece20f fix(structured outputs): allowlist enum, const, pattern, allOf in transformSc...
• Additional commits viewable in compare view

Updates github.com/openai/openai-go/v3 from 3.35.0 to 3.36.0

Release notes

Sourced from github.com/openai/openai-go/v3's releases.

v3.36.0

3.36.0 (2026-05-13)

Full Changelog: v3.35.0...v3.36.0

Features

• api: add service_tier parameter to response compact method (bacd2c0)

Bug Fixes

• go: avoid panic when http.DefaultTransport is wrapped (95a0250)

Changelog

Sourced from github.com/openai/openai-go/v3's changelog.

3.36.0 (2026-05-13)

Full Changelog: v3.35.0...v3.36.0

Features

• api: add service_tier parameter to response compact method (bacd2c0)

Bug Fixes

• go: avoid panic when http.DefaultTransport is wrapped (95a0250)

Commits

• 5234005 Merge pull request #659 from openai/release-please--branches--main--changes--...
• 49350ba release: 3.36.0
• e044efb Merge pull request #981 from stainless-sdks/dev/jtian/remove-unnecessary-params
• 82c0cc9 [feat] Remove client_id from required params during init
• bacd2c0 feat(api): add service_tier parameter to response compact method
• 95a0250 fix(go): avoid panic when http.DefaultTransport is wrapped
• See full diff in compare view

Updates google.golang.org/genai from 1.56.0 to 1.57.0

Release notes

Sourced from google.golang.org/genai's releases.

v1.57.0

1.57.0 (2026-05-12)

Features

• Expose Test and Server of the Replay API Client for the cross module usage in the AgentPlatform module. (27b142d)
• support Blocking FunctionCall in Live API in AgentPlatform (Vertex) (e5e653c)
• support speech to speech translation in Gemini Live (621b55d)

Bug Fixes

• Fix version redaction logic in the replay API client. (af4c931)

Changelog

Sourced from google.golang.org/genai's changelog.

1.57.0 (2026-05-12)

Features

• Expose Test and Server of the Replay API Client for the cross module usage in the AgentPlatform module. (27b142d)
• support Blocking FunctionCall in Live API in AgentPlatform (Vertex) (e5e653c)
• support speech to speech translation in Gemini Live (621b55d)

Bug Fixes

• Fix version redaction logic in the replay API client. (af4c931)

Commits

• c02ba4f chore(main): release 1.57.0 (#784)
• af4c931 fix: Fix version redaction logic in the replay API client.
• 621b55d feat: support speech to speech translation in Gemini Live
• 27b142d feat: Expose Test and Server of the Replay API Client for the cross module us...
• aec9d38 chore: update error messages to clarify which APIs support a feature.
• e5e653c feat: support Blocking FunctionCall in Live API in AgentPlatform (Vertex)
• 1ca15ba chore: Handle vertex-genai-modules user-agent header for the AgentPlatform SDK.
• afcab1d chore: Expose the Replay API client as an internal component only for the Age...
• See full diff in compare view

Updates k8s.io/api from 0.36.0 to 0.36.1

Commits

• 25001c8 Update dependencies to v0.36.1 tag
• See full diff in compare view

Updates k8s.io/apimachinery from 0.36.0 to 0.36.1

Commits

• 7af103a Update dependencies to v0.36.1 tag
• See full diff in compare view

Updates k8s.io/client-go from 0.36.0 to 0.36.1

Commits

• 55ef15a Update dependencies to v0.36.1 tag
• See full diff in compare view

Updates sigs.k8s.io/agent-sandbox from 0.4.5 to 0.4.6

Release notes

Sourced from sigs.k8s.io/agent-sandbox's releases.

v0.4.6

🚀 Announcing Agent Sandbox v0.4.6!

We're excited to announce the release of Agent Sandbox v0.4.6! This release introduces major scalability enhancements through opt-in Service management, robust developer guidance with AI agent skills, expanded API and Network Policy documentation, and new stateful AI agent examples.

⚠️ Breaking Changes / Action Required

• Service Creation Opt-In (#775, #800): The Sandbox controller no longer creates a headless Service by default for new Sandboxes. This architectural change significantly improves cluster scalability by eliminating kube-proxy and Kubernetes DNS overhead when scaling to thousands of pods. Existing Sandboxes with an auto-provisioned Service are preserved automatically.
  • Action Required: For new Sandboxes that require an auto-provisioned headless Service, explicitly set spec.service: true. To explicitly remove an existing Service, set spec.service: false.
  • New service field: Sandbox spec and SandboxTemplate spec now support the service boolean field to control the headless Service creation (default false). If omitted, existing services of Sandboxes will not be removed, to avoid disruption.
  • Python SDK & Router Integration: The Python SDK and sandbox-router have been updated to support direct Pod IP routing via the X-Sandbox-Pod-IP header, bypassing Service routing overhead. The SDK gracefully recovers from API server timeouts and disables Pod IP routing if permissions are lacking (falling back to Service routing).

Key Highlights

• Core Stability and Lifecycle Management Fixed an issue where the sandbox name hash (selector label) was unavailable when a sandbox was scaled down to zero replicas during suspension (#754). status.labelselector is no longer unset when replicas is 0. If the hash cannot be resolved, suspension fails gracefully with a clear error reason. Added integration tests for suspend/resume on new client instances.

• AI Agent Skills & Developer Guidelines Introduced specialized AI agent skills in .agents/skills/ (k8s-api-conventions and dev-rules) to guide AI coding assistants contributing to the repository (#766). Added AGENTS.md at the repo root covering project layout, build/test/lint flows, codegen rules, and GitHub Copilot/CLA guidelines (#707). Updated .github/copilot-instructions.md with Kubernetes API conventions and CLA reminders (#768).

• Enhanced Documentation and Examples Added comprehensive core API documentation in docs/api.md (#247) and detailed Network Policy management documentation explaining the capabilities and limitations of networkPolicyManagement in SandboxTemplate (#743). Added a new example demonstrating how to deploy the Hermes Agent (hermes-agent.nousresearch.com) inside the Kubernetes Agent Sandbox with persistent storage (volumeClaimTemplates) and custom skill injection via ConfigMaps (#774). Updated the OpenClaw sandbox example to demonstrate usage with the gVisor runtime class on GKE for enhanced sandbox isolation (#475). Added a release automation guide and updated the PR template for release notes (#748, #790).

• CI/CD and Release Automation Enabled an automated weekly release schedule (Thursdays at 9:00 AM UTC) using GitHub Actions workflows (#783). Migrated Gemini release note generation from static API keys to secure Vertex AI with short-lived Google Cloud IAM credentials (#783). Updated GitHub Actions dependencies (#788).

Installation

Core & Extensions

# To install only the core components:
kubectl apply -f https://github.com/kubernetes-sigs/agent-sandbox/releases/download/v0.4.6/manifest.yaml
To install the extensions components:
kubectl apply -f https://github.com/kubernetes-sigs/agent-sandbox/releases/download/v0.4.6/extensions.yaml

Python SDK

pip install k8s-agent-sandbox==0.4.6

---

Contributors

We extend our sincere thanks to all contributors to this release: @​aleks-stefanovic, @​dependabot[bot], @​drogovozDP, @​fedebongio, @​flpanbin, @​janetkuo, @​shrutiyam-glitch, @​vicentefb, @​volatilemolotov

... (truncated)

Commits

• d0c124d Use gvisor in openclaw example (#475)
• 636e032 feat: service creationg opt-in follow-up (#800)
• d02bf9d support automatic service creation opt-in (#775)
• e1d8898 Enable Scheduled release and use Vertex AI for Gemini Notes (#783)
• b591e91 build(deps): bump the github-actions group with 2 updates (#788)
• 473faf3 Preserve sandbox selector label when replicas is 0 (#754)
• d34c137 Agents.md (#707)
• e410921 remove duplicate folder (#790)
• 781e333 feat: add AI agent skills and guidelines (#766)
• b4ac1c9 Add Hermes Agent Sandbox example with persistence and custom skills (#774)
• Additional commits viewable in compare view

Updates sigs.k8s.io/controller-runtime from 0.24.0 to 0.24.1

Release notes

Sourced from sigs.k8s.io/controller-runtime's releases.

v0.24.1

What's Changed

• [release-0.24] 🐛 Fix regression in Apply typed error handling by @​k8s-infra-cherrypick-robot in kubernetes-sigs/controller-runtime#3516

Full Changelog: kubernetes-sigs/controller-runtime@v0.24.0...v0.24.1

Commits

• 3be3f1b Merge pull request #3516 from k8s-infra-cherrypick-robot/cherry-pick-3515-to-...
• 0f7b33d Fix regression in Apply typed error handling
• See full diff in compare view

Updates github.com/ollama/ollama from 0.23.2 to 0.24.0

Release notes

Sourced from github.com/ollama/ollama's releases.

v0.24.0

Codex App

Ollama 0.24 includes support for the Codex App, OpenAI's desktop experience for working on Codex threads in parallel with built-in worktree support and git functionality.

ollama launch codex-app

Built-in browser

Codex can load local servers and sites in its built-in browser, enabling you to directly annotate on the page to request changes.

Review mode

Review code inside the app, leave comments, and iterate without leaving your workspace.

Choosing a model

For difficult coding and agentic tasks:

• kimi-k2.6 (with vision support)
• glm-5.1

For local use without an Ollama Cloud subscription:

• nemotron-3-super
• gemma4:31b
• qwen3.6

Restore anytime

To restore the previous configuration of Codex App, run:

ollama launch codex-app --restore

What's Changed

• Reworked the MLX sampler for improved generation quality on Apple Silicon

Full Changelog: ollama/ollama@v0.23.0...v0.24.0

... (truncated)

Commits

• c28ddc0 launch: codex app restarts (#16155)
• 3ad2fa3 launch: update codex app UI copy (#16157)
• 6b6f45e docs: hide codex app till launch (#16153)
• 4860130 mlx: rework the MLX sampler (#16122)
• ac7295c launch: codex app integration (#16120)
• 6398cd5 mlx: add memory trace logging (#16131)
• 3af1a00 launch/opencode: add image modalities for vision models (#15922)
• 6bdb730 anthropic: Preserve Claude local image-path tool results in renderer-owned pr...
• 421faa0 mlx: fix macOS 26 target leakage in v3 metallib (#16053)
• 206b049 mlx: avoid status timeout during inference (#16086)
• Additional commits viewable in compare view

Updates google.golang.org/grpc from 1.81.0 to 1.81.1

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.81.1

Security

• xds/rbac: Fix a potential authorization bypass caused by incorrectly falling through URI/DNS SANs to Subject Distinguished Name (DN) when matching the authenticated principal name. With this fix, only the first non-empty identity source will be used, as per gRFC A41. (#9111)
  • Special Thanks: @​al4an444

Bug Fixes

• otel: Segregate client and server RPC information used for metrics and traces, to avoid one overwriting the other. (#9081)

Commits

• caf0772 Change version from 1.81.1-dev to 1.81.1 (#9122)
• 6ccbeeb Cherry-pick #9111 into v1.81.x (#9121)
• b33c29e Cherry-pick #9081 into v1.81.x (#9102)
• c45fae6 Change version to 1.81.1-dev (#9063)
• See full diff in compare view

Updates k8s.io/apiextensions-apiserver from 0.36.0 to 0.36.1

Commits

• 5b822b1 Update dependencies to v0.36.1 tag
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Labels

The following labels could not be found: dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

[Copilot]

Copilot encountered an error and was unable to review this pull request. You can try again by re-requesting a review.