Skip to content

Release v1.19.0 - #855

Merged
tphoney merged 36 commits into
mainfrom
copybara/v1.19.0
Aug 12, 2026
Merged

Release v1.19.0#855
tphoney merged 36 commits into
mainfrom
copybara/v1.19.0

Conversation

@github-actions

@github-actions github-actions Bot commented Aug 12, 2026

Copy link
Copy Markdown

Copybara Sync - Release v1.19.0

This PR was automatically created by Copybara, syncing changes from the overmindtech/workspace monorepo.

Original author: Elliot Waddington (getinnocuous@users.noreply.github.com)

What happens when this PR is merged?

  1. The tag-on-merge workflow will automatically create the v1.19.0 tag on main
  2. This tag will trigger the release workflow, which will:
    • Run tests
    • Build and publish release binaries via GoReleaser
    • Upload packages to Cloudsmith

Review Checklist

  • Changes look correct and match the expected monorepo sync
  • Tests pass (see CI checks below)

Vlasin98 and others added 30 commits August 12, 2026 13:35
## Summary
- `ListJoinableWorkspaces` returns domain ∪ pending-invite workspaces
(one card each; invite wins for dual-eligible and stamps
`JOIN_SOURCE_INVITE`)
- `JoinWorkspace` always tries invite accept first (invite-only works
without domain eligibility), then falls through to domain join
- Join cards show an **Invited** indicator when `source` is invite; MCP
entry join routing uses the same union list

Implements
[BRENT-698](https://brent-dev.overmind-demo.com/open/plans/68eca7fa-acb0-4f92-b4f2-76900b77b3cd?intent=plan_author).

## Deviations
- changed-invited-badge-to-inline-label: intentional UI change — Invited
is plain tertiary inline text beside the name, not a rounded badge.

## Test plan
- [x] Go: join handler integration tests (domain, invite-only list/join,
dual-eligible source, expired not listed)
- [x] Go: MCP entry resolver unit tests
- [x] FE: Invited indicator + row mapping unit tests
- [ ] Manual: Join screen shows Invited for invite/dual cases and joins
succeed for domain / invite-only / dual

---------

Co-authored-by: Cursor <cursoragent@cursor.com>
GitOrigin-RevId: 6e77ff12df23968ec43ff9142102435e846c8ac3
…-5216) (#6095)

<!-- CURSOR_AGENT_PR_BODY_BEGIN -->
## Summary

Implements **BRENT-699** / **ENG-5216**: personal notification
preferences surface for authenticated principals.

- **ConnectRPC**: `GetMyNotificationPreferences` (`brent:read`) and
`UpdateMyNotificationPreferences` (`brent:write`), workspace-scoped via
`Brent-Workspace-Id`
- **Store**: `MergeNotificationPreferences` — transactional patch-merge
on raw stored overrides with per-principal advisory lock
- **MCP**: `get_my_notification_preferences` and
`update_my_notification_preferences` sharing the same store methods
- **Error mapping**: dedicated Connect mapper (not
`MapPrincipalStoreError`); notification sentinels in `mcpErrorResult`

## Plan

BRENT-699 (approved)

## Test plan

- [x] `go test ./notifications/... ./service/... -run
'Notification|Preference|MergeNotification'`
- [x] Unit tests for `applyPreferencePatch`, auth (401/403), error
mapper
- [x] Integration tests: RPC round-trip, principal isolation,
cross-tenant isolation
- [x] Integration tests: MCP round-trip, scope gate, invalid channel
mapping
- [x] Integration tests: unknown notification type via
`Handler.UpdateMyNotificationPreferences`
(`TestIntegration_UpdateMyNotificationPreferences_UnknownType_InvalidArgument`)
- [x] Concurrency test: concurrent merges preserve both cells

## Brent deviation notes

**missing-update-handler-unknown-type-test**: Handler unknown-type
rejection is covered by
`TestIntegration_UpdateMyNotificationPreferences_UnknownType_InvalidArgument`,
which calls `Handler.UpdateMyNotificationPreferences` end-to-end.
Validation intentionally lives in `MergeNotificationPreferences` (store
boundary) after principal resolution, matching the plan's scope →
identity → delegate flow. A Postgres-free unit test would require either
handler pre-validation (which breaks auth error precedence per
`changed-malformed-patch-auth-precedence`) or test-seam interfaces on
concrete stores.

**changed-malformed-patch-auth-precedence**: Resolved — handler no
longer pre-validates patches before principal resolution; malformed
types are rejected by the store merge path after identity resolution.

## Notes

- Update semantics are sparse patch/merge (not wholesale replace)
- Scope + identity checks live in handler/MCP layer; store methods
remain callable from the dispatch worker
- Notification MCP tools use `addToolWithDefaultOutput` for scope-denied
structured output shaping
<!-- CURSOR_AGENT_PR_BODY_END -->

<div><a
href="https://cursor.com/agents/bc-f749fa2f-32cf-4e4f-86e7-c67308015445"><picture><source
media="(prefers-color-scheme: dark)"
srcset="https://cursor.com/assets/images/open-in-web-dark.png"><source
media="(prefers-color-scheme: light)"
srcset="https://cursor.com/assets/images/open-in-web-light.png"><img
alt="Open in Web" width="114" height="28"
src="https://cursor.com/assets/images/open-in-web-dark.png"></picture></a>&nbsp;<a
href="https://cursor.com/background-agent?bcId=bc-f749fa2f-32cf-4e4f-86e7-c67308015445"><picture><source
media="(prefers-color-scheme: dark)"
srcset="https://cursor.com/assets/images/open-in-cursor-dark.png"><source
media="(prefers-color-scheme: light)"
srcset="https://cursor.com/assets/images/open-in-cursor-light.png"><img
alt="Open in Cursor" width="131" height="28"
src="https://cursor.com/assets/images/open-in-cursor-dark.png"></picture></a>&nbsp;</div>

---------

Co-authored-by: Cursor Agent <cursoragent@cursor.com>
Co-authored-by: Lionel Wilson <Lionel-Wilson@users.noreply.github.com>
GitOrigin-RevId: dace3ae9e03731cb08f7117ca1cda9024cbd667b
This PR contains the following updates:

| Update | Change |
|---|---|
| lockFileMaintenance | All locks refreshed |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/370) for more information.

🔧 This Pull Request updates lock files to use the latest dependency
versions.

---

### Configuration

📅 **Schedule**: (in timezone Europe/London)

- Branch creation
  - "before 4am on monday"
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config
help](https://redirect.github.com/renovatebot/renovate/discussions) if
that's undesired.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/overmindtech/workspace).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yODAuMCIsInVwZGF0ZWRJblZlciI6IjQzLjI4MC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiXX0=-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
GitOrigin-RevId: da7c4341b318afce6cf9183f10207973517f9ab0
## Summary
- remove the preferred-IDE RPC, runtime model, Profile controls,
analytics, generated clients, and frontend MCP URL wiring
- keep Integrations → Personal as the sole in-app plugin installation
path, with regression coverage for Cursor and Claude Code destinations
- preserve deployment compatibility by leaving the unused database
column for a later migration after old pods drain
- update current documentation and engineering guidance to describe the
new ownership boundaries

## Brent Plan

Plan ID: BRENT-708

- **Plan**: Remove Profile MCP and IDE Preference
- **Approved by**: Vasile Labici

## Test plan
- [x] Regenerated protobuf clients and verified the removed/reserved
contract
- [x] Ran focused Brent backend and frontend validation
- [x] Ran the Integrations marketplace test (6 tests passed)
- [x] Ran formatting, whitespace, and IDE lint checks
- [ ] Let CI validate the complete repository and initialized Terraform
configuration

## Rollout
This is the compatibility release. A follow-up deployment will drop
`principal_identities.preferred_ide` after this version is fully rolled
out and older pods have drained.

Made with [Cursor](https://cursor.com)

---------

Co-authored-by: Cursor <cursoragent@cursor.com>
GitOrigin-RevId: 8307ad94c31d2108aaa932ddae58caa7eae85a71
## Summary
- Always-visible **Other integrations** header action **Custom MCP
server** opens `/w/$slug/integrations/custom-mcp-server`
(`IntegrationDetailShell` + `CustomMcpServerForm`).
- Connected BYO endpoints render as `CustomMcpWorkspaceCard` first in
that section; catalogue stops emitting the builtin BYO add tile and
exposes `created_at` for install time.
- Direct and OAuth success land on Workspace integrations with toast
**MCP server connected** / **Connection to \<endpoint\> established.**
(OAuth via `endpoint` query → success hop → `mcpConnected` search).
- Connect failures stay on the add form via danger toast.

Brent plan: BRENT-719
Linear: ENG-5828

## Deviation acknowledgements
- `changed-custom-route-reimplements-byo-connect`: Figma page-owned form
instead of `ByoMcpConnect`.
- `beyond-custom-mcp-failure-toast`: toast failures instead of
connections error page.
- `changed-build-your-own-action-label`: header label is Custom MCP
server.
- `beyond-custom-mcp-documentation-refresh`: docs/skills aligned with
that copy.

## Test plan
- [x] Workspace tab always shows Other integrations + Custom MCP server
- [ ] Add server (bearer) → toast + CustomMcpWorkspaceCard first with
created date + URL
- [ ] Remove custom MCP disconnects one card without affecting siblings
- [ ] OAuth MCP (if available) returns to marketplace with same toast
- [ ] Cancel during in-flight connect does not toast success or redirect
- [ ] `pnpm exec vitest` integrations/BYO suites; Go
catalogue/oauthredirect/brent unit tests

---------

Co-authored-by: Cursor <cursoragent@cursor.com>
GitOrigin-RevId: fcbc308890e89ba4f4bc970e9d2fa49bd5333adc
…217) (#6126)

<!-- CURSOR_AGENT_PR_BODY_BEGIN -->
## Summary

This PR delivers the **web-push channel adapter** — the steel thread of
the Brent Notification Surface project's phase 1. After this change,
enabling notifications in the onboarding "Stay in the Loop" step
registers a real `PushSubscription` and Brent delivers a web push that
pops a banner — proven end-to-end by a **"Hey, it's Brent!"**
confirmation push auto-sent on enable.

## Changes

### Part 1: VAPID Configuration
- Added `BRENT_BACKEND_VAPID_PUBLIC_KEY`,
`BRENT_BACKEND_VAPID_PRIVATE_KEY`, `BRENT_BACKEND_VAPID_SUBJECT` config
flags
- Added `BRENT_BACKEND_WEBPUSH_ALLOWED_ENDPOINT_HOSTS` for SSRF
allowlist
- Boot validation ensures VAPID credentials are present (unconditional
gate)
- ESO/1Password wiring for secret provisioning

### Part 2: Web-Push Adapter (`notifications/webpush`)
- **Sender** with VAPID authentication and hardened HTTP client:
  - Pinned-IP dial (DNS resolved once, validated, dialed directly)
  - Redirect refusal
  - Response body always closed
- **WebPushAdapter** implementing `ChannelAdapter`:
  - Fetches subscriptions per principal
  - Sends to each subscription
  - Deletes subscriptions on 404/410 responses
- **ValidateSubscription** single chokepoint for SSRF hardening:
  - HTTPS only, no credentials, default port
  - Host matches allowlist on DNS-label boundaries
  - Private/loopback/link-local IP rejection
  - Key format validation (p256dh: 65 bytes, auth: 16 bytes)
- New dependency: `github.com/SherClockHolmes/webpush-go`

### Part 3: Subscription RPCs
- `RegisterMyPushSubscription` (workspace-scoped, `brent:write`):
  - Validates subscription before persistence
  - Sends confirmation push via injected `ConfirmationSender`
  - Bounded timeout for push send (doesn't fail registration)
- `GetWebPushPublicKey` (identity-scoped, `brent:read`):
  - Returns VAPID public key for browser subscription
- Handler wiring in `server_construct.go` and `workspace_interceptor.go`

### Part 4: Frontend (flag-gated behind `BRENT_WEB_PUSH`)
- Minimal service worker (`public/sw.js`) handling:
  - `push` event: parse `{title, body}` payload, show notification
  - `notificationclick` event: focus/open app
- `use-web-push-subscription` hook:
  - SW registration
  - Permission request
  - `pushManager.subscribe()` with VAPID key
  - Backend upload via `registerMyPushSubscription`
- `use-stay-in-the-loop-step` upgraded:
  - Full subscription flow when flag enabled and PushManager supported
  - Falls back to permission-only when flag off or unsupported
- `urlBase64ToUint8Array` helper for Push API

### Part 5: Documentation
- ADR 0052: `adr-notification-channel-adapters`
- Updated notifications README with adapter section
- Updated brent-app README with SW/subscription docs
- Ops runbook for VAPID keypair generation/rotation

## Testing

- Unit tests for sender, validation, policy, dial hardening
- Integration tests for adapter (incl. 410-delete)
- Handler unit and integration tests
- Frontend hook tests with mocked navigator/PushManager
- SW payload contract test

## Done Criteria

- [x] User enabling notifications in a supported browser gets
subscription persisted
- [x] Dispatched `web_push` reaches every live subscription for
recipient
- [x] Subscription returning 404/410 is deleted (integration test)
- [ ] End-to-end "Hey, it's Brent!" banner verified manually (dogfood
validation)

Brent-Plan: BRENT-713
<!-- CURSOR_AGENT_PR_BODY_END -->

<div><a
href="https://cursor.com/agents/bc-cfe8bb0a-6425-4947-bed2-d607aaac85a1"><picture><source
media="(prefers-color-scheme: dark)"
srcset="https://cursor.com/assets/images/open-in-web-dark.png"><source
media="(prefers-color-scheme: light)"
srcset="https://cursor.com/assets/images/open-in-web-light.png"><img
alt="Open in Web" width="114" height="28"
src="https://cursor.com/assets/images/open-in-web-dark.png"></picture></a>&nbsp;<a
href="https://cursor.com/background-agent?bcId=bc-cfe8bb0a-6425-4947-bed2-d607aaac85a1"><picture><source
media="(prefers-color-scheme: dark)"
srcset="https://cursor.com/assets/images/open-in-cursor-dark.png"><source
media="(prefers-color-scheme: light)"
srcset="https://cursor.com/assets/images/open-in-cursor-light.png"><img
alt="Open in Cursor" width="131" height="28"
src="https://cursor.com/assets/images/open-in-cursor-dark.png"></picture></a>&nbsp;</div>

---------

Co-authored-by: Cursor Agent <cursoragent@cursor.com>
Co-authored-by: Lionel Wilson <Lionel-Wilson@users.noreply.github.com>
GitOrigin-RevId: 20085b737f7c4bd9ea3a1c8968f5ccc151415817
…NG-5869) (#6137)

## Summary
- Extends `IntegrationStatus` with buf.validate-constrained `status` /
`summary` / `detail` and `IntegrationConnectionStatus` enum (BRENT-730 /
ENG-5869).
- Applies org_installed-driven Connected / Not connected defaults in
`buildIntegrationStatuses` for every provider row.
- Adds protovalidate bounds tests, mapper unit coverage,
principal-status integration assertions, and a catalog note in
`implemented-integrations.md`.

Plan: BRENT-730

## Test plan
- [x] `go test -run TestValidateIntegrationStatus ./go/sdp-go/`
- [x] `go test -run TestApplyDefaultIntegrationConnectionStatuses
./services/brent-backend/brent/`
- [x] `go test -run
TestGetPrincipalStatusEndpoint_GitHubOrgInstalledWithoutPersonalBinding
./services/brent-backend/service/`
- [ ] CI green on this PR
- [ ] Brent deviation analysis clear

Made with [Cursor](https://cursor.com)

---------

Co-authored-by: Cursor <cursoragent@cursor.com>
GitOrigin-RevId: 7120d54ea77ac64b47e9d33adcbb0371b896572b
…138)

## Summary
- Adds `BrentAdminService.ListAccountIntegrations` (`admin:read`) with
install rows, ciphertext-presence flags, shared ENG-5869 readiness
fields, and workspace role slots.
- Area51 workspace detail gains an Integrations section (roles +
installs + readiness/presence) and removes Activity GitHub/Slack/Linear
pills.
- Stacked on
[BRENT-730](https://github.com/overmindtech/workspace/pull/6137) /
ENG-5869 shared `IntegrationConnectionStatus` mapper.

Brent plan: BRENT-731 (ENG-5868).

## Test plan
- [x] Go unit: default readiness mapper fields
- [x] Go integration: `ListAccountIntegrations` permission, roles,
GitHub/GitLab/Bitbucket-without-token presence + readiness
- [x] Area51 Vitest: Integrations section renders
installs/roles/readiness; Bitbucket token=no visible; Activity pills
gone
- [ ] Confirm stacked PR base is `BRENT-730` and merges after #6137

Made with [Cursor](https://cursor.com)

---------

Co-authored-by: Cursor <cursoragent@cursor.com>
GitOrigin-RevId: 50f847a7c5aea400308609ef6e6d12f1658ea238
## Summary
- replace endpoint-bearing BYO OAuth success redirects with
workspace-scoped opaque instance identity
- make BYO disconnect tenant-scoped and idempotent while retaining
old/new rolling compatibility
- reject endpoint URL userinfo at connect time and cover cross-workspace
isolation, redirect privacy, catalogue matching, and compatibility paths

Brent plan: BRENT-738

## Test plan
- [x] `pnpm test` (`services/brent-app`: 197 files, 1370 tests)
- [x] `pnpm lint && pnpm fmt:check` (`services/brent-app`)
- [x] `pnpm build` (`services/brent-app`)
- [x] `go build ./go/sdp-go/... ./services/brent-backend/...`
- [x] focused `go vet` for changed Go packages
- [x] focused backend unit and BYO integration tests
- [ ] full parallel Brent integration sweep (local macOS run exhausted
host shared-memory IDs after focused tests passed)

---------

Co-authored-by: Cursor <cursoragent@cursor.com>
GitOrigin-RevId: 7370c2cd6dc30955c2e35e96a394b1292e7fa1f4
## Summary

- Adds one authenticated, provider-neutral Plan prompt destination with
strict workspace membership boundaries and copy/direct-app actions.
- Restores Linear native Plan attachments and makes the first Slack Plan
notification actionable without reviving retired public or IDE-specific
links.
- Preserves safe migration behavior through attachment-first ordering,
managed-comment fallback, and legacy attachment cleanup.

## Linear Ticket

Fixes:
[ENG-5853](https://linear.app/overmind/issue/ENG-5853/restore-rich-linear-plan-attachment-experience)
— Restore rich Linear plan attachment experience

- **Purpose**: Replace the temporary marker-backed Linear comment with a
native embedded attachment once Brent has a provider-neutral
destination, without restoring dead Cursor-specific links.

## Changes

Introduces the `planprompt` URL/read module, an identity-scoped
`GetPlanPrompt` RPC with generated clients, and the standalone Brent app
prompt route. Refactors Plan-Ticket Sync around a shared sanitized
projection and a Linear attachment-first reconciler, while retaining
GitLab's existing presentation. Extends Slack's workflow tool with the
fixed top-level action and a timestamp-aware signed interaction
endpoint, then records the contracts in the ADR, policy, integration
guidance, and focused backend/frontend tests.

## Brent Plan

Plan ID: BRENT-721

- **Plan**: Restore rich Linear plan attachments and Plan prompt links
- **Approved by**: Daniel Carabas
- **Pending reviews**: Vasile Labici

> Deviation analysis and reviewer assignment are handled automatically
by the pre-approved PR review automation (see
docs/PREAPPROVED_CHANGES.md).

Made with [Cursor](https://cursor.com)

---------

Co-authored-by: Cursor <cursoragent@cursor.com>
GitOrigin-RevId: 2103cdcf6029c9ad240c78a4239549c0bd7201aa
…a (ENG-5650) (#6144)

<!-- CURSOR_AGENT_PR_BODY_BEGIN -->
## Summary

Completes BRENT-710 / ENG-5650: drops `ticketing_provider` and
`messaging_provider` from the workspace roles API and database schema.
Stacks on merged #6120 (ENG-5649).

- **Proto/API:** Git-only integration roles RPCs; reserved field tags
2/3
- **Database:** Migration drops `ticketing_provider` /
`messaging_provider` columns
- **Backend:** Roles handler simplified; plan-sync workers gate on
install presence
- **Frontend:** Ticket-tracking onboarding is Linear-only;
source-control switch sends `{ gitProvider }` only
- **Admin:** `ListAccountIntegrations` derives ticketing/messaging
display from installs (Area51 diagnostics)
- **Docs:** Added `.cursor/skills/brent-integrations/SKILL.md`
engineering guide

## CI fixes

- Regenerated SDP connect/query files after proto comment update
- Fixed GitLab `user_resolver_test` data race under `-parallel 8`
- Admin role slots derived from installs (Bugbot finding)

Plan: BRENT-710
<!-- CURSOR_AGENT_PR_BODY_END -->

<div><a
href="https://cursor.com/agents/bc-260c7d93-fac5-4bc9-838f-02e4c304c8f7"><picture><source
media="(prefers-color-scheme: dark)"
srcset="https://cursor.com/assets/images/open-in-web-dark.png"><source
media="(prefers-color-scheme: light)"
srcset="https://cursor.com/assets/images/open-in-web-light.png"><img
alt="Open in Web" width="114" height="28"
src="https://cursor.com/assets/images/open-in-web-dark.png"></picture></a>&nbsp;<a
href="https://cursor.com/background-agent?bcId=bc-260c7d93-fac5-4bc9-838f-02e4c304c8f7"><picture><source
media="(prefers-color-scheme: dark)"
srcset="https://cursor.com/assets/images/open-in-cursor-dark.png"><source
media="(prefers-color-scheme: light)"
srcset="https://cursor.com/assets/images/open-in-cursor-light.png"><img
alt="Open in Cursor" width="131" height="28"
src="https://cursor.com/assets/images/open-in-cursor-dark.png"></picture></a>&nbsp;</div>

---------

Co-authored-by: Cursor Agent <cursoragent@cursor.com>
Co-authored-by: carabasdaniel <carabasdaniel@users.noreply.github.com>
GitOrigin-RevId: e9dc1878292375a9b0458526b636e1ff4c3c272e
<!-- CURSOR_AGENT_PR_BODY_BEGIN -->
## Summary

Soft-deleting a plan cascade-soft-deletes its active reviews, but
restoring the plan previously left those reviews deleted. This change
restores reviews whose `deleted_at` matches the plan tombstone (same
delete transaction `now()`), emits one `ReviewRestored` per revived
review then `PlanRestored`, and leaves independently soft-deleted
reviews alone.

## Changes

- **SDP:** add `ReviewRestored` (`Event` oneof field 91) parallel to
`ReviewDeleted`
- **`RestorePlan`:** list + clear matching review tombstones in the same
tx as plan restore; fail on unique `(plan_id, reviewer_id)` conflict
- **Event plumbing:** plan UUID / friendly ID / review ID extraction and
workflow event-type naming parity with `ReviewDeleted`
- **Docs / MCP:** update `restore_plan` description and
`plans/README.md` (plan-named surfaces only)

## Verification

```bash
cd services/brent-backend
go test -race -count=1 ./plans/ ./events/ ./workflows/ ./service/ -run 'RestorePlan|DeletePlan_AndRestore|PlanUUID|PlanFriendly|ReviewRestored|eventTypeName|eventPlanUUID|extractRunIDs'
```

## Deviation notes

- **`missing-review-restored-friendly-id-test`:** Fixed —
`TestPlanFriendlyIDForEvent` now covers `ReviewRestored`.
- **`beyond-review-restored-documentation-surfaces`:** Reverted —
removed extras in `workflows_syntax.md`, `reviews/README.md`, and
`workflows/README.md` so docs stay on the plan-named surfaces.

Closes ENG-5910

Brent-Plan: BRENT-762
<!-- CURSOR_AGENT_PR_BODY_END -->

<div><a
href="https://cursor.com/agents/bc-c78d18b3-8d28-41c1-b420-5a64b410cc59"><picture><source
media="(prefers-color-scheme: dark)"
srcset="https://cursor.com/assets/images/open-in-web-dark.png"><source
media="(prefers-color-scheme: light)"
srcset="https://cursor.com/assets/images/open-in-web-light.png"><img
alt="Open in Web" width="114" height="28"
src="https://cursor.com/assets/images/open-in-web-dark.png"></picture></a>&nbsp;<a
href="https://cursor.com/background-agent?bcId=bc-c78d18b3-8d28-41c1-b420-5a64b410cc59"><picture><source
media="(prefers-color-scheme: dark)"
srcset="https://cursor.com/assets/images/open-in-cursor-dark.png"><source
media="(prefers-color-scheme: light)"
srcset="https://cursor.com/assets/images/open-in-cursor-light.png"><img
alt="Open in Cursor" width="131" height="28"
src="https://cursor.com/assets/images/open-in-cursor-dark.png"></picture></a>&nbsp;</div>

---------

Co-authored-by: Cursor Agent <cursoragent@cursor.com>
Co-authored-by: Dylan <dylanratcliffe@users.noreply.github.com>
GitOrigin-RevId: dbbcfacca9a28533221f378025175dde66379434
This PR contains the following updates:

| Package | Change |
[Age](https://docs.renovatebot.com/merge-confidence/) |
[Confidence](https://docs.renovatebot.com/merge-confidence/) | Type |
Update |
|---|---|---|---|---|---|
|
[cloud.google.com/go/container](https://redirect.github.com/googleapis/google-cloud-go)
| `v1.53.0` → `v1.53.1` |
![age](https://developer.mend.io/api/mc/badges/age/go/cloud.google.com%2fgo%2fcontainer/v1.53.1?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/cloud.google.com%2fgo%2fcontainer/v1.53.0/v1.53.1?slim=true)
| require | patch |
|
[cloud.google.com/go/spanner](https://redirect.github.com/googleapis/google-cloud-go)
| `v1.93.0` → `v1.94.0` |
![age](https://developer.mend.io/api/mc/badges/age/go/cloud.google.com%2fgo%2fspanner/v1.94.0?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/cloud.google.com%2fgo%2fspanner/v1.93.0/v1.94.0?slim=true)
| require | minor |
|
[google.golang.org/api](https://redirect.github.com/googleapis/google-api-go-client)
| `v0.290.0` → `v0.291.0` |
![age](https://developer.mend.io/api/mc/badges/age/go/google.golang.org%2fapi/v0.291.0?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/google.golang.org%2fapi/v0.290.0/v0.291.0?slim=true)
| require | minor |
|
[google.golang.org/genproto/googleapis/rpc](https://redirect.github.com/googleapis/go-genproto)
| `3fe39f3` → `8efbd57` |
![age](https://developer.mend.io/api/mc/badges/age/go/google.golang.org%2fgenproto%2fgoogleapis%2frpc/v0.0.0-20260729162451-8efbd57d26e0?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/google.golang.org%2fgenproto%2fgoogleapis%2frpc/v0.0.0-20260723215102-3fe39f3c1018/v0.0.0-20260729162451-8efbd57d26e0?slim=true)
| require | digest |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/370) for more information.

---

### Release Notes

<details>
<summary>googleapis/google-api-go-client
(google.golang.org/api)</summary>

###
[`v0.291.0`](https://redirect.github.com/googleapis/google-api-go-client/releases/tag/v0.291.0)

[Compare
Source](https://redirect.github.com/googleapis/google-api-go-client/compare/v0.290.0...v0.291.0)

##### Features

- **all:** Auto-regenerate discovery clients
([#&#8203;3666](https://redirect.github.com/googleapis/google-api-go-client/issues/3666))
([e3721ba](https://redirect.github.com/googleapis/google-api-go-client/commit/e3721ba5d733583d6999df8e179fd7c9d891c0a9))
- **all:** Auto-regenerate discovery clients
([#&#8203;3670](https://redirect.github.com/googleapis/google-api-go-client/issues/3670))
([4067374](https://redirect.github.com/googleapis/google-api-go-client/commit/40673741ea906e5313a602459110dcfb17a54f7d))
- **all:** Auto-regenerate discovery clients
([#&#8203;3674](https://redirect.github.com/googleapis/google-api-go-client/issues/3674))
([432658c](https://redirect.github.com/googleapis/google-api-go-client/commit/432658c5a9051b867b016979d6d948cdae99a401))
- **all:** Auto-regenerate discovery clients
([#&#8203;3676](https://redirect.github.com/googleapis/google-api-go-client/issues/3676))
([9998a11](https://redirect.github.com/googleapis/google-api-go-client/commit/9998a114c63f1c113fb627e30597b02dee6301d5))
- **all:** Auto-regenerate discovery clients
([#&#8203;3678](https://redirect.github.com/googleapis/google-api-go-client/issues/3678))
([b5c5526](https://redirect.github.com/googleapis/google-api-go-client/commit/b5c5526a1d862e21cf126b2287490e63ac52ee2c))
- **all:** Auto-regenerate discovery clients
([#&#8203;3679](https://redirect.github.com/googleapis/google-api-go-client/issues/3679))
([499d9b1](https://redirect.github.com/googleapis/google-api-go-client/commit/499d9b17067ababff6992f1a0c50f8de794cff45))

##### Bug Fixes

- **transport:** Use ds.GetUniverseDomain() instead of raw
ds.UniverseDomain field
([#&#8203;3660](https://redirect.github.com/googleapis/google-api-go-client/issues/3660))
([6bad358](https://redirect.github.com/googleapis/google-api-go-client/commit/6bad35801f85c9915d8ad7635225a2b94e27082c))

</details>

---

### Configuration

📅 **Schedule**: (in timezone Europe/London)

- Branch creation
  - "after 6pm on thursday,before 10am on friday"
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config
help](https://redirect.github.com/renovatebot/renovate/discussions) if
that's undesired.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/overmindtech/workspace).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4zLjIiLCJ1cGRhdGVkSW5WZXIiOiI0NC4zLjIiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbImRlcGVuZGVuY2llcyIsImdvbGFuZyJdfQ==-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
GitOrigin-RevId: 25184bb0155c27776291728ae3fb50b6298cde9d
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
|
[goreleaser/goreleaser](https://redirect.github.com/goreleaser/goreleaser)
| patch | `v2.17.0` → `v2.17.1` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/370) for more information.

---

### Release Notes

<details>
<summary>goreleaser/goreleaser (goreleaser/goreleaser)</summary>

###
[`v2.17.1`](https://redirect.github.com/goreleaser/goreleaser/releases/tag/v2.17.1)

[Compare
Source](https://redirect.github.com/goreleaser/goreleaser/compare/v2.17.0...v2.17.1)

##### Announcement

Read the official announcement: [Announcing GoReleaser
v2.17](https://goreleaser.com/blog/goreleaser-v2.17/).

##### Changelog

##### Bug fixes

-
[`a734383`](https://redirect.github.com/goreleaser/goreleaser/commit/a734383d9f8d74f689097dbfd3c1086b3f56648f):
fix(builder/go): parse GORISCV64 and GOPPC64 for riscv64 and ppc64le
targets
([#&#8203;6698](https://redirect.github.com/goreleaser/goreleaser/issues/6698))
([@&#8203;upuddu](https://redirect.github.com/upuddu))
-
[`dfc7f06`](https://redirect.github.com/goreleaser/goreleaser/commit/dfc7f06a53441d9f0adb6f03e8f7afc2281f6d5d):
fix(builders/go): sort targets
([@&#8203;caarlos0](https://redirect.github.com/caarlos0))
-
[`7630cd1`](https://redirect.github.com/goreleaser/goreleaser/commit/7630cd166fb4dbad0a29ea23cf5e941b66f72b09):
fix(deps): go1.26.5
([@&#8203;caarlos0](https://redirect.github.com/caarlos0))
-
[`9dbb266`](https://redirect.github.com/goreleaser/goreleaser/commit/9dbb2668c0e9a5bac1e14689f1024b2a7c741bc9):
fix(notary): poll notarization status every 10s, not 10ns
([#&#8203;6726](https://redirect.github.com/goreleaser/goreleaser/issues/6726))
([@&#8203;caarlos0](https://redirect.github.com/caarlos0))
-
[`1ebf881`](https://redirect.github.com/goreleaser/goreleaser/commit/1ebf881316f6c86be9d76b62026cca52d81e3480):
fix: anchor goarm64 validation regex to reject invalid values
([#&#8203;6727](https://redirect.github.com/goreleaser/goreleaser/issues/6727))
([@&#8203;semx](https://redirect.github.com/semx))
-
[`70f6921`](https://redirect.github.com/goreleaser/goreleaser/commit/70f6921451146e62685da01bec4438dabe06bc22):
fix: migrate from deprecated s3/manager to s3/transfermanager
([#&#8203;6706](https://redirect.github.com/goreleaser/goreleaser/issues/6706))
([@&#8203;joeyberkovitz](https://redirect.github.com/joeyberkovitz))

##### Documentation updates

-
[`eafb0ec`](https://redirect.github.com/goreleaser/goreleaser/commit/eafb0ec65125ea4bbc408e19e26886ed95715e2a):
docs(users): update charm domain
([#&#8203;6699](https://redirect.github.com/goreleaser/goreleaser/issues/6699))
([@&#8203;andreynering](https://redirect.github.com/andreynering))
-
[`ae4debb`](https://redirect.github.com/goreleaser/goreleaser/commit/ae4debbe4383dcc565f9251df2ea719501b8d9ea):
docs: add /.well-known/security.txt (RFC 9116)
([#&#8203;6710](https://redirect.github.com/goreleaser/goreleaser/issues/6710))
([@&#8203;kobihikri](https://redirect.github.com/kobihikri))
-
[`d3764c8`](https://redirect.github.com/goreleaser/goreleaser/commit/d3764c8bc8e6bc316ddf4032f0faa9e25c6fd98e):
docs: fix typo
([@&#8203;caarlos0](https://redirect.github.com/caarlos0))
-
[`742ae5f`](https://redirect.github.com/goreleaser/goreleaser/commit/742ae5fc647cb61e689d333a4a15ec9dea8b5907):
docs: move images to a bucket
([#&#8203;6691](https://redirect.github.com/goreleaser/goreleaser/issues/6691))
([@&#8203;caarlos0](https://redirect.github.com/caarlos0))
-
[`55a466e`](https://redirect.github.com/goreleaser/goreleaser/commit/55a466e7fa9980ff75c206b8f98781652607ec38):
docs: publish to GitLab package registries with the http upload pipe
([#&#8203;6697](https://redirect.github.com/goreleaser/goreleaser/issues/6697))
([@&#8203;ajuijas](https://redirect.github.com/ajuijas))
-
[`65240d8`](https://redirect.github.com/goreleaser/goreleaser/commit/65240d83f56f7de80716a62600c36178900c7d09):
docs: update users
([@&#8203;caarlos0](https://redirect.github.com/caarlos0))

##### Other work

-
[`0eb5b0f`](https://redirect.github.com/goreleaser/goreleaser/commit/0eb5b0fd4e5e03a0de538812a7ca607c0ceadfa8):
chore(ci): update dependabot config
([@&#8203;caarlos0](https://redirect.github.com/caarlos0))
-
[`4bcb2a5`](https://redirect.github.com/goreleaser/goreleaser/commit/4bcb2a5c80de731d6ca1cee7e457ca70efc22c31):
chore(ci): update deps
([@&#8203;caarlos0](https://redirect.github.com/caarlos0))
-
[`5f3f435`](https://redirect.github.com/goreleaser/goreleaser/commit/5f3f435f8856eacc4ee715ba8611d344790c68df):
chore: auto-update generated files
([#&#8203;6693](https://redirect.github.com/goreleaser/goreleaser/issues/6693))
([@&#8203;goreleaserbot](https://redirect.github.com/goreleaserbot))
-
[`9b85924`](https://redirect.github.com/goreleaser/goreleaser/commit/9b859248b101e24e6926db9e582472cfd1680ad1):
chore: auto-update generated files
([#&#8203;6694](https://redirect.github.com/goreleaser/goreleaser/issues/6694))
([@&#8203;goreleaserbot](https://redirect.github.com/goreleaserbot))
-
[`1aab79e`](https://redirect.github.com/goreleaser/goreleaser/commit/1aab79e70a1df58ec44741d6af64ff146d545eed):
chore: auto-update generated files
([#&#8203;6700](https://redirect.github.com/goreleaser/goreleaser/issues/6700))
([@&#8203;goreleaserbot](https://redirect.github.com/goreleaserbot))
-
[`11d0150`](https://redirect.github.com/goreleaser/goreleaser/commit/11d0150499154f03cdb849387f7d95fe00e89e0d):
chore: auto-update generated files
([#&#8203;6705](https://redirect.github.com/goreleaser/goreleaser/issues/6705))
([@&#8203;goreleaserbot](https://redirect.github.com/goreleaserbot))
-
[`5747ca7`](https://redirect.github.com/goreleaser/goreleaser/commit/5747ca742e182dabc45037271f8274baca40318b):
chore: auto-update generated files
([#&#8203;6707](https://redirect.github.com/goreleaser/goreleaser/issues/6707))
([@&#8203;goreleaserbot](https://redirect.github.com/goreleaserbot))
-
[`83f4c19`](https://redirect.github.com/goreleaser/goreleaser/commit/83f4c19a5c5c0b9efef6bf2aedc6805bbcb9dfe2):
chore: auto-update generated files
([#&#8203;6730](https://redirect.github.com/goreleaser/goreleaser/issues/6730))
([@&#8203;goreleaserbot](https://redirect.github.com/goreleaserbot))
-
[`f3a0e63`](https://redirect.github.com/goreleaser/goreleaser/commit/f3a0e631432afe54de6325935072b652cdac6039):
chore: svu config
([@&#8203;caarlos0](https://redirect.github.com/caarlos0))

**Full Changelog**:
<goreleaser/goreleaser@v2.17.0...v2.17.1>

##### Helping out

This release is only possible thanks to **all** the support of some
**awesome people**!

Want to be one of them?
You can [sponsor](https://goreleaser.com/sponsors/), get a [Pro
License](https://goreleaser.com/pro) or [contribute with
code](https://goreleaser.com/contributing).

##### Where to go next?

- Find examples and commented usage of all options in our
[website](https://goreleaser.com/intro/).
- Reach out on [Discord](https://discord.gg/RGEBtg8vQ6),
[Twitter](https://twitter.com/goreleaser), and
[Telegram](https://t.me/goreleasernews)!

<a href="https://goreleaser.com"><img
src="https://raw.githubusercontent.com/goreleaser/artwork/master/opencollective-header.png"
with="100%" alt="GoReleaser logo"></a>

</details>

---

### Configuration

📅 **Schedule**: (in timezone Europe/London)

- Branch creation
  - "after 6pm on thursday,before 10am on friday"
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/overmindtech/workspace).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4zLjIiLCJ1cGRhdGVkSW5WZXIiOiI0NC4zLjIiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbImRlcGVuZGVuY2llcyJdfQ==-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
GitOrigin-RevId: 413cdd9e24a24c9fd079362d3fb9b5ce4d8fb3e4
…cemanager/compute/armcompute/v8 to v8.2.0 (#6188)

This PR contains the following updates:

| Package | Change |
[Age](https://docs.renovatebot.com/merge-confidence/) |
[Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|
|
[github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v8](https://redirect.github.com/Azure/azure-sdk-for-go)
| `v8.1.0` → `v8.2.0` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fAzure%2fazure-sdk-for-go%2fsdk%2fresourcemanager%2fcompute%2farmcompute%2fv8/v8.2.0?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fAzure%2fazure-sdk-for-go%2fsdk%2fresourcemanager%2fcompute%2farmcompute%2fv8/v8.1.0/v8.2.0?slim=true)
|

---

> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/370) for more information.

---

### Configuration

📅 **Schedule**: (in timezone Europe/London)

- Branch creation
  - "after 6pm on thursday,before 10am on friday"
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/overmindtech/workspace).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4zLjIiLCJ1cGRhdGVkSW5WZXIiOiI0NC4zLjIiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbImRlcGVuZGVuY2llcyIsImdvbGFuZyJdfQ==-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
GitOrigin-RevId: 0f77e02baee704421c9fb0fea8bc0fd0158e41d7
> ℹ️ **Note**
>
> This PR body was truncated due to platform limits.

This PR contains the following updates:

| Package | Change |
[Age](https://docs.renovatebot.com/merge-confidence/) |
[Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|
|
[github.com/aws/aws-sdk-go-v2](https://redirect.github.com/aws/aws-sdk-go-v2)
| `v1.43.0` → `v1.43.3` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2faws-sdk-go-v2/v1.43.3?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2faws-sdk-go-v2/v1.43.0/v1.43.3?slim=true)
|
|
[github.com/aws/aws-sdk-go-v2/config](https://redirect.github.com/aws/aws-sdk-go-v2)
| `v1.32.31` → `v1.32.34` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2faws-sdk-go-v2%2fconfig/v1.32.34?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2faws-sdk-go-v2%2fconfig/v1.32.31/v1.32.34?slim=true)
|
|
[github.com/aws/aws-sdk-go-v2/credentials](https://redirect.github.com/aws/aws-sdk-go-v2)
| `v1.19.30` → `v1.19.33` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2faws-sdk-go-v2%2fcredentials/v1.19.33?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2faws-sdk-go-v2%2fcredentials/v1.19.30/v1.19.33?slim=true)
|
|
[github.com/aws/aws-sdk-go-v2/feature/ec2/imds](https://redirect.github.com/aws/aws-sdk-go-v2)
| `v1.18.31` → `v1.18.34` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2faws-sdk-go-v2%2ffeature%2fec2%2fimds/v1.18.34?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2faws-sdk-go-v2%2ffeature%2fec2%2fimds/v1.18.31/v1.18.34?slim=true)
|
|
[github.com/aws/aws-sdk-go-v2/service/apigateway](https://redirect.github.com/aws/aws-sdk-go-v2)
| `v1.42.0` → `v1.42.3` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fapigateway/v1.42.3?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fapigateway/v1.42.0/v1.42.3?slim=true)
|
|
[github.com/aws/aws-sdk-go-v2/service/autoscaling](https://redirect.github.com/aws/aws-sdk-go-v2)
| `v1.70.0` → `v1.70.3` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fautoscaling/v1.70.3?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fautoscaling/v1.70.0/v1.70.3?slim=true)
|
|
[github.com/aws/aws-sdk-go-v2/service/cloudfront](https://redirect.github.com/aws/aws-sdk-go-v2)
| `v1.67.0` → `v1.67.3` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fcloudfront/v1.67.3?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fcloudfront/v1.67.0/v1.67.3?slim=true)
|
|
[github.com/aws/aws-sdk-go-v2/service/cloudwatch](https://redirect.github.com/aws/aws-sdk-go-v2)
| `v1.65.0` → `v1.66.2` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fcloudwatch/v1.66.2?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fcloudwatch/v1.65.0/v1.66.2?slim=true)
|
|
[github.com/aws/aws-sdk-go-v2/service/directconnect](https://redirect.github.com/aws/aws-sdk-go-v2)
| `v1.43.0` → `v1.43.3` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fdirectconnect/v1.43.3?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fdirectconnect/v1.43.0/v1.43.3?slim=true)
|
|
[github.com/aws/aws-sdk-go-v2/service/dynamodb](https://redirect.github.com/aws/aws-sdk-go-v2)
| `v1.61.0` → `v1.62.3` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fdynamodb/v1.62.3?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fdynamodb/v1.61.0/v1.62.3?slim=true)
|
|
[github.com/aws/aws-sdk-go-v2/service/ec2](https://redirect.github.com/aws/aws-sdk-go-v2)
| `v1.317.0` → `v1.318.1` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fec2/v1.318.1?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fec2/v1.317.0/v1.318.1?slim=true)
|
|
[github.com/aws/aws-sdk-go-v2/service/ecs](https://redirect.github.com/aws/aws-sdk-go-v2)
| `v1.89.0` → `v1.89.3` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fecs/v1.89.3?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fecs/v1.89.0/v1.89.3?slim=true)
|
|
[github.com/aws/aws-sdk-go-v2/service/efs](https://redirect.github.com/aws/aws-sdk-go-v2)
| `v1.44.0` → `v1.44.3` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fefs/v1.44.3?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fefs/v1.44.0/v1.44.3?slim=true)
|
|
[github.com/aws/aws-sdk-go-v2/service/eks](https://redirect.github.com/aws/aws-sdk-go-v2)
| `v1.90.0` → `v1.90.3` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2feks/v1.90.3?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2feks/v1.90.0/v1.90.3?slim=true)
|
|
[github.com/aws/aws-sdk-go-v2/service/elasticloadbalancing](https://redirect.github.com/aws/aws-sdk-go-v2)
| `v1.36.0` → `v1.36.3` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2felasticloadbalancing/v1.36.3?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2felasticloadbalancing/v1.36.0/v1.36.3?slim=true)
|
|
[github.com/aws/aws-sdk-go-v2/service/elasticloadbalancingv2](https://redirect.github.com/aws/aws-sdk-go-v2)
| `v1.58.1` → `v1.58.4` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2felasticloadbalancingv2/v1.58.4?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2felasticloadbalancingv2/v1.58.1/v1.58.4?slim=true)
|
|
[github.com/aws/aws-sdk-go-v2/service/iam](https://redirect.github.com/aws/aws-sdk-go-v2)
| `v1.56.0` → `v1.57.1` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fiam/v1.57.1?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fiam/v1.56.0/v1.57.1?slim=true)
|
|
[github.com/aws/aws-sdk-go-v2/service/kms](https://redirect.github.com/aws/aws-sdk-go-v2)
| `v1.55.0` → `v1.55.3` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fkms/v1.55.3?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fkms/v1.55.0/v1.55.3?slim=true)
|
|
[github.com/aws/aws-sdk-go-v2/service/lambda](https://redirect.github.com/aws/aws-sdk-go-v2)
| `v1.99.0` → `v1.101.1` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2flambda/v1.101.1?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2flambda/v1.99.0/v1.101.1?slim=true)
|
|
[github.com/aws/aws-sdk-go-v2/service/networkfirewall](https://redirect.github.com/aws/aws-sdk-go-v2)
| `v1.64.0` → `v1.66.0` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fnetworkfirewall/v1.66.0?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fnetworkfirewall/v1.64.0/v1.66.0?slim=true)
|
|
[github.com/aws/aws-sdk-go-v2/service/networkmanager](https://redirect.github.com/aws/aws-sdk-go-v2)
| `v1.44.0` → `v1.44.3` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fnetworkmanager/v1.44.3?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fnetworkmanager/v1.44.0/v1.44.3?slim=true)
|
|
[github.com/aws/aws-sdk-go-v2/service/rds](https://redirect.github.com/aws/aws-sdk-go-v2)
| `v1.123.0` → `v1.124.0` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2frds/v1.124.0?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2frds/v1.123.0/v1.124.0?slim=true)
|
|
[github.com/aws/aws-sdk-go-v2/service/route53](https://redirect.github.com/aws/aws-sdk-go-v2)
| `v1.65.2` → `v1.65.5` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2froute53/v1.65.5?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2froute53/v1.65.2/v1.65.5?slim=true)
|
|
[github.com/aws/aws-sdk-go-v2/service/s3](https://redirect.github.com/aws/aws-sdk-go-v2)
| `v1.106.0` → `v1.106.3` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fs3/v1.106.3?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fs3/v1.106.0/v1.106.3?slim=true)
|
|
[github.com/aws/aws-sdk-go-v2/service/sesv2](https://redirect.github.com/aws/aws-sdk-go-v2)
| `v1.66.0` → `v1.66.3` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fsesv2/v1.66.3?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fsesv2/v1.66.0/v1.66.3?slim=true)
|
|
[github.com/aws/aws-sdk-go-v2/service/sns](https://redirect.github.com/aws/aws-sdk-go-v2)
| `v1.42.0` → `v1.42.3` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fsns/v1.42.3?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fsns/v1.42.0/v1.42.3?slim=true)
|
|
[github.com/aws/aws-sdk-go-v2/service/sqs](https://redirect.github.com/aws/aws-sdk-go-v2)
| `v1.46.0` → `v1.46.3` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fsqs/v1.46.3?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fsqs/v1.46.0/v1.46.3?slim=true)
|
|
[github.com/aws/aws-sdk-go-v2/service/ssm](https://redirect.github.com/aws/aws-sdk-go-v2)
| `v1.73.0` → `v1.73.3` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fssm/v1.73.3?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fssm/v1.73.0/v1.73.3?slim=true)
|
|
[github.com/aws/aws-sdk-go-v2/service/sts](https://redirect.github.com/aws/aws-sdk-go-v2)
| `v1.45.0` → `v1.45.3` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fsts/v1.45.3?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fsts/v1.45.0/v1.45.3?slim=true)
|

---

> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/370) for more information.

---

### Release Notes

<details>
<summary>aws/aws-sdk-go-v2 (github.com/aws/aws-sdk-go-v2)</summary>

###
[`v1.43.3`](https://redirect.github.com/aws/aws-sdk-go-v2/blob/HEAD/CHANGELOG.md#Release-2024-12-032)

[Compare
Source](https://redirect.github.com/aws/aws-sdk-go-v2/compare/v1.43.2...v1.43.3)

#### General Highlights

- **Dependency Update**: Updated to the latest SDK module versions

#### Module Highlights

- `github.com/aws/aws-sdk-go-v2/feature/rds/auth`:
[v1.5.0](feature/rds/auth/CHANGELOG.md#v150-2024-12-032)
  - No change notes available for this release.
- `github.com/aws/aws-sdk-go-v2/service/athena`:
[v1.49.0](service/athena/CHANGELOG.md#v1490-2024-12-032)
- **Feature**: Add FEDERATED type to CreateDataCatalog. This creates
Athena Data Catalog, AWS Lambda connector, and AWS Glue connection.
Create/DeleteDataCatalog returns DataCatalog. Add Status,
ConnectionType, and Error to DataCatalog and DataCatalogSummary. Add
DeleteCatalogOnly to delete Athena Catalog only.
- `github.com/aws/aws-sdk-go-v2/service/bedrock`:
[v1.24.0](service/bedrock/CHANGELOG.md#v1240-2024-12-032)
- **Feature**: Tagging support for Async Invoke resources. Added support
for Distillation in CreateModelCustomizationJob API. Support for
videoDataDeliveryEnabled flag in invocation logging.
- `github.com/aws/aws-sdk-go-v2/service/bedrockagent`:
[v1.31.0](service/bedrockagent/CHANGELOG.md#v1310-2024-12-032)
  - **Feature**: Releasing SDK for Multi-Agent Collaboration.
- `github.com/aws/aws-sdk-go-v2/service/bedrockagentruntime`:
[v1.29.0](service/bedrockagentruntime/CHANGELOG.md#v1290-2024-12-032)
  - **Feature**: Releasing SDK for multi agent collaboration
- `github.com/aws/aws-sdk-go-v2/service/bedrockruntime`:
[v1.22.0](service/bedrockruntime/CHANGELOG.md#v1220-2024-12-032)
- **Feature**: Added support for Async Invoke Operations Start, List and
Get. Support for invocation logs with `requestMetadata` field in
Converse, ConverseStream, Invoke and InvokeStream. Video content blocks
in Converse/ConverseStream accept raw bytes or S3 URI.
- `github.com/aws/aws-sdk-go-v2/service/cloudwatch`:
[v1.43.3](service/cloudwatch/CHANGELOG.md#v1433-2024-12-032)
- **Documentation**: Support for configuring AiOps investigation as
alarm action
- `github.com/aws/aws-sdk-go-v2/service/datazone`:
[v1.25.0](service/datazone/CHANGELOG.md#v1250-2024-12-032)
- **Feature**: Adds support for Connections, ProjectProfiles, and
JobRuns APIs. Supports the new Lineage feature at GA. Adjusts
optionality of a parameter for DataSource and SubscriptionTarget APIs
which may adjust types in some clients.
- `github.com/aws/aws-sdk-go-v2/service/dsql`:
[v1.0.0](service/dsql/CHANGELOG.md#v100-2024-12-032)
  - **Release**: New AWS service client module
- **Feature**: Add new API operations for Amazon Aurora DSQL. Amazon
Aurora DSQL is a serverless, distributed SQL database with virtually
unlimited scale, highest availability, and zero infrastructure
management.
- `github.com/aws/aws-sdk-go-v2/service/dynamodb`:
[v1.38.0](service/dynamodb/CHANGELOG.md#v1380-2024-12-032)
- **Feature**: This change adds support for global tables with
multi-Region strong consistency (in preview). The UpdateTable API now
supports a new attribute MultiRegionConsistency to set consistency when
creating global tables. The DescribeTable output now optionally includes
the MultiRegionConsistency attribute.
- `github.com/aws/aws-sdk-go-v2/service/glue`:
[v1.103.0](service/glue/CHANGELOG.md#v11030-2024-12-032)
- **Feature**: This release includes(1)Zero-ETL integration to ingest
data from 3P SaaS and DynamoDB to Redshift/Redlake (2)new properties on
Connections to enable reuse; new connection APIs for retrieve/preview
metadata (3)support of CRUD operations for Multi-catalog (4)support of
automatic statistics collections
- `github.com/aws/aws-sdk-go-v2/service/lakeformation`:
[v1.39.0](service/lakeformation/CHANGELOG.md#v1390-2024-12-032)
- **Feature**: This release added two new LakeFormation Permissions
(CREATE\_CATALOG, SUPER\_USER) and added Id field for CatalogResource.
It also added new conditon and expression field.
- `github.com/aws/aws-sdk-go-v2/service/qapps`:
[v1.6.0](service/qapps/CHANGELOG.md#v160-2024-12-032)
- **Feature**: Add support for 11 new plugins as action cards to help
automate repetitive tasks and improve productivity.
- `github.com/aws/aws-sdk-go-v2/service/qbusiness`:
[v1.18.0](service/qbusiness/CHANGELOG.md#v1180-2024-12-032)
- **Feature**: Amazon Q Business now supports customization options for
your web experience, 11 new Plugins, and QuickSight support. Amazon Q
index allows software providers to enrich their native generative AI
experiences with their customer's enterprise knowledge and user context
spanning multiple applications.
- `github.com/aws/aws-sdk-go-v2/service/quicksight`:
[v1.81.0](service/quicksight/CHANGELOG.md#v1810-2024-12-032)
- **Feature**: This release includes API needed to support for
Unstructured Data in Q in QuickSight Q\&A (IDC).
- `github.com/aws/aws-sdk-go-v2/service/redshift`:
[v1.53.0](service/redshift/CHANGELOG.md#v1530-2024-12-032)
- **Feature**: Adds support for Amazon Redshift RegisterNamespace and
DeregisterNamespace APIs to share data to AWS Glue Data Catalog.
- `github.com/aws/aws-sdk-go-v2/service/redshiftserverless`:
[v1.25.0](service/redshiftserverless/CHANGELOG.md#v1250-2024-12-032)
- **Feature**: Adds support for the ListManagedWorkgroups API to get an
overview of existing managed workgroups.
- `github.com/aws/aws-sdk-go-v2/service/s3`:
[v1.71.0](service/s3/CHANGELOG.md#v1710-2024-12-032)
- **Feature**: Amazon S3 Metadata stores object metadata in read-only,
fully managed Apache Iceberg metadata tables that you can query. You can
create metadata table configurations for S3 general purpose buckets.
- `github.com/aws/aws-sdk-go-v2/service/s3tables`:
[v1.0.0](service/s3tables/CHANGELOG.md#v100-2024-12-032)
  - **Release**: New AWS service client module
- **Feature**: Amazon S3 Tables deliver the first cloud object store
with built-in open table format support, and the easiest way to store
tabular data at scale.

###
[`v1.43.2`](https://redirect.github.com/aws/aws-sdk-go-v2/blob/HEAD/CHANGELOG.md#Release-2024-11-07)

[Compare
Source](https://redirect.github.com/aws/aws-sdk-go-v2/compare/v1.43.1...v1.43.2)

#### General Highlights

- **Dependency Update**: Updated to the latest SDK module versions

#### Module Highlights

- `github.com/aws/aws-sdk-go-v2/service/accessanalyzer`:
[v1.34.5](service/accessanalyzer/CHANGELOG.md#v1345-2024-11-07)
- **Bug Fix**: Adds case-insensitive handling of error message fields in
service responses
- `github.com/aws/aws-sdk-go-v2/service/account`:
[v1.21.5](service/account/CHANGELOG.md#v1215-2024-11-07)
- **Bug Fix**: Adds case-insensitive handling of error message fields in
service responses
- `github.com/aws/aws-sdk-go-v2/service/acm`:
[v1.30.5](service/acm/CHANGELOG.md#v1305-2024-11-07)
- **Bug Fix**: Adds case-insensitive handling of error message fields in
service responses
- `github.com/aws/aws-sdk-go-v2/service/acmpca`:
[v1.37.6](service/acmpca/CHANGELOG.md#v1376-2024-11-07)
- **Bug Fix**: Adds case-insensitive handling of error message fields in
service responses
- `github.com/aws/aws-sdk-go-v2/service/amp`:
[v1.30.2](service/amp/CHANGELOG.md#v1302-2024-11-07)
- **Bug Fix**: Adds case-insensitive handling of error message fields in
service responses
- `github.com/aws/aws-sdk-go-v2/service/amplify`:
[v1.27.3](service/amplify/CHANGELOG.md#v1273-2024-11-07)
- **Bug Fix**: Adds case-insensitive handling of error message fields in
service responses
- `github.com/aws/aws-sdk-go-v2/service/amplifybackend`:
[v1.27.5](service/amplifybackend/CHANGELOG.md#v1275-2024-11-07)
- **Bug Fix**: Adds case-insensitive handling of error message fields in
service responses
- `github.com/aws/aws-sdk-go-v2/service/amplifyuibuilder`:
[v1.23.5](service/amplifyuibuilder/CHANGELOG.md#v1235-2024-11-07)
- **Bug Fix**: Adds case-insensitive handling of error message fields in
service responses
- `github.com/aws/aws-sdk-go-v2/service/apigateway`:
[v1.27.5](service/apigateway/CHANGELOG.md#v1275-2024-11-07)
- **Bug Fix**: Adds case-insensitive handling of error message fields in
service responses
- `github.com/aws/aws-sdk-go-v2/service/apigatewaymanagementapi`:
[v1.23.5](service/apigatewaymanagementapi/CHANGELOG.md#v1235-2024-11-07)
- **Bug Fix**: Adds case-insensitive handling of error message fields in
service responses
- `github.com/aws/aws-sdk-go-v2/service/apigatewayv2`:
[v1.24.5](service/apigatewayv2/CHANGELOG.md#v1245-2024-11-07)
- **Bug Fix**: Adds case-insensitive handling of error message fields in
service responses
- `github.com/aws/aws-sdk-go-v2/service/appconfig`:
[v1.35.3](service/appconfig/CHANGELOG.md#v1353-2024-11-07)
- **Bug Fix**: Adds case-insensitive handling of error message fields in
service responses
- `github.com/aws/aws-sdk-go-v2/service/appconfigdata`:
[v1.18.5](service/appconfigdata/CHANGELOG.md#v1185-2024-11-07)
- **Bug Fix**: Adds case-insensitive handling of error message fields in
service responses
- `github.com/aws/aws-sdk-go-v2/service/appfabric`:
[v1.11.5](service/appfabric/CHANGELOG.md#v1115-2024-11-07)
- **Bug Fix**: Adds case-insensitive handling of error message fields in
service responses
- `github.com/aws/aws-sdk-go-v2/service/appflow`:
[v1.45.6](service/appflow/CHANGELOG.md#v1456-2024-11-07)
- **Bug Fix**: Adds case-insensitive handling of error message fields in
service responses
- `github.com/aws/aws-sdk-go-v2/service/appintegrations`:
[v1.30.5](service/appintegrations/CHANGELOG.md#v1305-2024-11-07)
- **Bug Fix**: Adds case-insensitive handling of error message fields in
service responses
- `github.com/aws/aws-sdk-go-v2/service/applicationautoscaling`:
[v1.33.5](service/applicationautoscaling/CHANGELOG.md#v1335-2024-11-07)
- **Bug Fix**: Adds case-insensitive handling of error message fields in
service responses
- `github.com/aws/aws-sdk-go-v2/service/applicationcostprofiler`:
[v1.21.5](service/applicationcostprofiler/CHANGELOG.md#v1215-2024-11-07)
- **Bug Fix**: Adds case-insensitive handling of error message fields in
service responses
- `github.com/aws/aws-sdk-go-v2/service/applicationdiscoveryservice`:
[v1.28.5](service/applicationdiscoveryservice/CHANGELOG.md#v1285-2024-11-07)
- **Bug Fix**: Adds case-insensitive handling of error message fields in
service responses
- `github.com/aws/aws-sdk-go-v2/service/applicationinsights`:
[v1.29.3](service/applicationinsights/CHANGELOG.md#v1293-2024-11-07)
- **Bug Fix**: Adds case-insensitive handling of error message fields in
service responses
- `github.com/aws/aws-sdk-go-v2/service/applicationsignals`:
[v1.6.5](service/applicationsignals/CHANGELOG.md#v165-2024-11-07)
- **Bug Fix**: Adds case-insensitive handling of error message fields in
service responses
- `github.com/aws/aws-sdk-go-v2/service/appmesh`:
[v1.29.5](service/appmesh/CHANGELOG.md#v1295-2024-11-07)
- **Bug Fix**: Adds case-insensitive handling of error message fields in
service responses
- `github.com/aws/aws-sdk-go-v2/service/apprunner`:
[v1.32.5](service/apprunner/CHANGELOG.md#v1325-2024-11-07)
- **Bug Fix**: Adds case-insensitive handling of error message fields in
service responses
- `github.com/aws/aws-sdk-go-v2/service/appstream`:
[v1.41.5](service/appstream/CHANGELOG.md#v1415-2024-11-07)
- **Bug Fix**: Adds case-insensitive handling of error message fields in
service responses
- `github.com/aws/aws-sdk-go-v2/service/appsync`:
[v1.39.2](service/appsync/CHANGELOG.md#v1392-2024-11-07)
- **Bug Fix**: Adds case-insensitive handling of error message fields in
service responses
- `github.com/aws/aws-sdk-go-v2/service/apptest`:
[v1.4.5](service/apptest/CHANGELOG.md#v145-2024-11-07)
- **Bug Fix**: Adds case-insensitive handling of error message fields in
service responses
- `github.com/aws/aws-sdk-go-v2/service/arczonalshift`:
[v1.14.5](service/arczonalshift/CHANGELOG.md#v1145-2024-11-07)
- **Bug Fix**: Adds case-insensitive handling of error message fields in
service responses
- `github.com/aws/aws-sdk-go-v2/service/artifact`:
[v1.6.5](service/artifact/CHANGELOG.md#v165-2024-11-07)
- **Bug Fix**: Adds case-insensitive handling of error message fields in
service responses
- `github.com/aws/aws-sdk-go-v2/service/athena`:
[v1.48.3](service/athena/CHANGELOG.md#v1483-2024-11-07)
- **Bug Fix**: Adds case-insensitive handling of error message fields in
service responses
- `github.com/aws/aws-sdk-go-v2/service/auditmanager`:
[v1.37.5](service/auditmanager/CHANGELOG.md#v1375-2024-11-07)
- **Bug Fix**: Adds case-insensitive handling of error message fields in
service responses
- `github.com/aws/aws-sdk-go-v2/service/autoscaling`:
[v1.48.0](service/autoscaling/CHANGELOG.md#v1480-2024-11-07)
- **Feature**: Auto Scaling groups now support the ability to strictly
balance instances across Availability Zones by configuring the
AvailabilityZoneDistribution parameter. If balanced-only is configured
for a group, launches will always be attempted in the under scaled
Availability Zone even if it is unhealthy.
- `github.com/aws/aws-sdk-go-v2/service/autoscalingplans`:
[v1.24.5](service/autoscalingplans/CHANGELOG.md#v1245-2024-11-07)
- **Bug Fix**: Adds case-insensitive handling of error message fields in
service responses
- `github.com/aws/aws-sdk-go-v2/service/b2bi`:
[v1.0.0-preview.51](service/b2bi/CHANGELOG.md#v100-preview51-2024-11-07)
- **Bug Fix**: Adds case-insensitive handling of error message fields in
service responses
- `github.com/aws/aws-sdk-go-v2/service/backup`:
[v1.39.6](service/backup/CHANGELOG.md#v1396-2024-11-07)
- **Bug Fix**: Adds case-insensitive handling of error message fields in
service responses
- `github.com/aws/aws-sdk-go-v2/service/backupgateway`:
[v1.20.5](service/backupgateway/CHANGELOG.md#v1205-2024-11-07)
- **Bug Fix**: Adds case-insensitive handling of error message fields in
service responses
- `github.com/aws/aws-sdk-go-v2/service/batch`:
[v1.47.2](service/batch/CHANGELOG.md#v1472-2024-11-07)
- **Bug Fix**: Adds case-insensitive handling of error message fields in
service responses
- `github.com/aws/aws-sdk-go-v2/service/bcmdataexports`:
[v1.7.5](service/bcmdataexports/CHANGELOG.md#v175-2024-11-07)
- **Bug Fix**: Adds case-insensitive handling of error message fields in
service responses
- `github.com/aws/aws-sdk-go-v2/service/bedrock`:
[v1.22.2](service/bedrock/CHANGELOG.md#v1222-2024-11-07)
- **Bug Fix**: Adds case-insensitive handling of error message fields in
service responses
- `github.com/aws/aws-sdk-go-v2/service/bedrockagent`:
[v1.27.0](service/bedrockagent/CHANGELOG.md#v1270-2024-11-07)
- **Feature**: Add prompt support for chat template configuration and
agent generative AI resource. Add support for configuring an optional
guardrail in Prompt and Knowledge Base nodes in Prompt Flows. Add API to
validate flow definition
- **Bug Fix**: Adds case-insensitive handling of error message fields in
service responses
- `github.com/aws/aws-sdk-go-v2/service/bedrockagentruntime`:
[v1.23.3](service/bedrockagentruntime/CHANGELOG.md#v1233-2024-11-07)
- **Bug Fix**: Adds case-insensitive handling of error message fields in
service responses
- `github.com/aws/aws-sdk-go-v2/service/bedrockruntime`:
[v1.20.0](service/bedrockruntime/CHANGELOG.md#v1200-2024-11-07)
- **Feature**: Add Prompt management support to Bedrock runtime APIs:
Converse, ConverseStream, InvokeModel, InvokeModelWithStreamingResponse
- **Bug Fix**: Adds case-insensitive handling of error message fields in
service responses
- `github.com/aws/aws-sdk-go-v2/service/billingconductor`:
[v1.20.5](service/billingconductor/CHANGELOG.md#v1205-2024-11-07)
- **Bug Fix**: Adds case-insensitive handling of error message fields in
service responses
- `github.com/aws/aws-sdk-go-v2/service/braket`:
[v1.31.5](service/braket/CHANGELOG.md#v1315-2024-11-07)
- **Bug Fix**: Adds case-insensitive handling of error message fields in
service responses
- `github.com/aws/aws-sdk-go-v2/service/budgets`:
[v1.28.5](service/budgets/CHANGELOG.md#v1285-2024-11-07)
- **Bug Fix**: Adds case-insensitive handling of error message fields in
service responses
- `github.com/aws/aws-sdk-go-v2/service/chatbot`:
[v1.8.5](service/chatbot/CHANGELOG.md#v185-2024-11-07)
- **Bug Fix**: Adds case-insensitive handling of error message fields in
service responses
- `github.com/aws/aws-sdk-go-v2/service/chime`:
[v1.34.5](service/chime/CHANGELOG.md#v1345-2024-11-07)
- **Bug Fix**: Adds case-insensitive handling of error message fields in
service responses
- `github.com/aws/aws-sdk-go-v2/service/chimesdkidentity`:
[v1.22.5](service/chimesdkidentity/CHANGELOG.md#v1225-2024-11-07)
- **Bug Fix**: Adds case-insensitive handling of error message fields in
service responses
- `github.com/aws/aws-sdk-go-v2/service/chimesdkmediapipelines`:
[v1.20.5](service/chimesdkmediapipelines/CHANGELOG.md#v1205-2024-11-07)
- **Bug Fix**: Adds case-insensitive handling of error message fields in
service responses
- `github.com/aws/aws-sdk-go-v2/service/chimesdkmeetings`:
[v1.27.5](service/chimesdkmeetings/CHANGELOG.md#v1275-2024-11-07)
- **Bug Fix**: Adds case-insensitive handling of error message fields in
service responses
- `github.com/aws/aws-sdk-go-v2/service/chimesdkmessaging`:
[v1.26.5](service/chimesdkmessaging/CHANGELOG.md#v1265-2024-11-07)
- **Bug Fix**: Adds case-insensitive handling of error message fields in
service responses
- `github.com/aws/aws-sdk-go-v2/service/chimesdkvoice`:
[v1.19.5](service/chimesdkvoice/CHANGELOG.md#v1195-2024-11-07)
- **Bug Fix**: Adds case-insensitive handling of error message fields in
service responses
- `github.com/aws/aws-sdk-go-v2/service/cleanrooms`:
[v1.20.0](service/cleanrooms/CHANGELOG.md#v1200-2024-11-07)
- **Feature**: This release introduces support for Custom Models in AWS
Clean Rooms ML.
- **Bug Fix**: Adds case-insensitive handling of error message fields in
service responses
- `github.com/aws/aws-sdk-go-v2/service/cleanroomsml`:
[v1.10.0](service/cleanroomsml/CHANGELOG.md#v1100-2024-11-07)
- **Feature**: This release introduces support for Custom Models in AWS
Clean Rooms ML.
- **Bug Fix**: Adds case-insensitive handling of error message fields in
service responses
- `github.com/aws/aws-sdk-go-v2/service/cloud9`:
[v1.28.5](service/cloud9/CHANGELOG.md#v1285-2024-11-07)
- **Bug Fix**: Adds case-insensitive handling of error message fields in
service responses
- `github.com/aws/aws-sdk-go-v2/service/cloudcontrol`:
[v1.22.5](service/cloudcontrol/CHANGELOG.md#v1225-2024-11-07)
- **Bug Fix**: Adds case-insensitive handling of error message fields in
service responses
- `github.com/aws/aws-sdk-go-v2/service/clouddirectory`:
[v1.24.5](service/clouddirectory/CHANGELOG.md#v1245-2024-11-07)
- **Bug Fix**: Adds case-insensitive handling of error message fields in
service responses
- `github.com/aws/aws-sdk-go-v2/service/cloudfrontkeyvaluestore`:
[v1.8.5](service/cloudfrontkeyvaluestore/CHANGELOG.md#v185-2024-11-07)
- **Bug Fix**: Adds case-insensitive handling of error message fields in
service responses
- `github.com/aws/aws-sdk-go-v2/service/cloudhsm`:
[v1.24.5](service/cloudhsm/CHANGELOG.md#v1245-2024-11-07)
- **Bug Fix**: Adds case-insensitive handling of error message fields in
service responses
- `github.com/aws/aws-sdk-go-v2/service/cloudhsmv2`:
[v1.27.6](service/cloudhsmv2/CHANGELOG.md#v1276-2024-11-07)
- **Bug Fix**: Adds case-insensitive handling of error message fields in
service responses
- `github.com/aws/aws-sdk-go-v2/service/cloudsearchdomain`:
[v1.23.5](service/cloudsearchdomain/CHANGELOG.md#v1235-2024-11-07)
- **Bug Fix**: Adds case-insensitive handling of error message fields in
service responses
- `github.com/aws/aws-sdk-go-v2/service/cloudtrail`:
[v1.44.5](service/cloudtrail/CHANGELOG.md#v1445-2024-11-07)
- **Bug Fix**: Adds case-insensitive handling of error message fields in
service responses
- `github.com/aws/aws-sdk-go-v2/service/cloudtraildata`:
[v1.11.5](service/cloudtraildata/CHANGELOG.md#v1115-2024-11-07)
- **Bug Fix**: Adds case-insensitive handling of error message fields in
service responses
- `github.com/aws/aws-sdk-go-v2/service/cloudwatchevents`:
[v1.27.5](service/cloudwatchevents/CHANGELOG.md#v1275-2024-11-07)
- **Bug Fix**: Adds case-insensitive handling of error message fields in
service responses
- `github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs`:
[v1.43.2](service/cloudwatchlogs/CHANGELOG.md#v1432-2024-11-07)
- **Bug Fix**: Adds case-insensitive handling of error message fields in
service responses
- `github.com/aws/aws-sdk-go-v2/service/codeartifact`:
[v1.33.5](service/codeartifact/CHANGELOG.md#v1335-2024-11-07)
- **Bug Fix**: Adds case-insensitive handling of error message fields in
service responses
- `github.com/aws/aws-sdk-go-v2/service/codebuild`:
[v1.48.1](service/codebuild/CHANGELOG.md#v1481-2024-11-07)
- **Bug Fix**: Adds case-insensitive handling of error message fields in
service responses
- `github.com/aws/aws-sdk-go-v2/service/codecatalyst`:
[v1.17.5](service/codecatalyst/CHANGELOG.md#v1175-2024-11-07)
- **Bug Fix**: Adds case-insensitive handling of error message fields in
service responses
- `github.com/aws/aws-sdk-go-v2/service/codecommit`:
[v1.27.5](service/codecommit/CHANGELOG.md#v1275-2024-11-07)
- **Bug Fix**: Adds case-insensitive handling of error message fields in
service responses
- `github.com/aws/aws-sdk-go-v2/service/codeconnections`:
[v1.5.5](service/codeconnections/CHANGELOG.md#v155-2024-11-07)
- **Bug Fix**: Adds case-insensitive handling of error message fields in
service responses
- `github.com/aws/aws-sdk-go-v2/service/codedeploy`:
[v1.29.5](service/codedeploy/CHANGELOG.md#v1295-2024-11-07)
- **Bug Fix**: Adds case-insensitive handling of error message fields in
service responses
- `github.com/aws/aws-sdk-go-v2/service/codeguruprofiler`:
[v1.24.5](service/codeguruprofiler/CHANGELOG.md#v1245-2024-11-07)
- **Bug Fix**: Adds case-insensitive handling of error message fields in
service responses
- `github.com/aws/aws-sdk-go-v2/service/codegurureviewer`:
[v1.29.5](service/codegurureviewer/CHANGELOG.md#v1295-2024-11-07)
- **Bug Fix**: Adds case-insensitive handling of error message fields in
service responses
- `github.com/aws/aws-sdk-go-v2/service/codegurusecurity`:
[v1.12.5](service/codegurusecurity/CHANGELOG.md#v1125-2024-11-07)
- **Bug Fix**: Adds case-insensitive handling of error message fields in
service responses
- `github.com/aws/aws-sdk-go-v2/service/codepipeline`:
[v1.36.3](service/codepipeline/CHANGELOG.md#v1363-2024-11-07)
- **Bug Fix**: Adds case-insensitive handling of error message fields in
service responses
- `github.com/aws/aws-sdk-go-v2/service/codestarconnections`:
[v1.29.5](service/codestarconnections/CHANGELOG.md#v1295-2024-11-07)
- **Bug Fix**: Adds case-insensitive handling of error message fields in
service responses
- `github.com/aws/aws-sdk-go-v2/service/codestarnotifications`:
[v1.26.5](service/codestarnotifications/CHANGELOG.md#v1265-2024-11-07)
- **Bug Fix**: Adds case-insensitive handling of error message fields in
service responses
- `github.com/aws/aws-sdk-go-v2/service/cognitoidentity`:
[v1.27.5](service/cognitoidentity/CHANGELOG.md#v1275-2024-11-07)
- **Bug Fix**: Adds case-insensitive handling of error message fields in
service responses
- `github.com/aws/aws-sdk-go-v2/service/cognitoidentityprovider`:
[v1.46.5](service/cognitoidentityprovider/CHANGELOG.md#v1465-2024-11-07)
- **Bug Fix**: Adds case-insensitive handling of error message fields in
service responses
- `github.com/aws/aws-sdk-go-v2/service/cognitosync`:
[v1.23.5](service/cognitosync/CHANGELOG.md#v1235-2024-11-07)
- **Bug Fix**: Adds case-insensitive handling of error message fields in
service responses
- `github.com/aws/aws-sdk-go-v2/service/comprehend`:
[v1.35.5](service/comprehend/CHANGELOG.md#v1355-2024-11-07)
- **Bug Fix**: Adds case-insensitive handling of error message fields in
service responses
- `github.com/aws/aws-sdk-go-v2/service/comprehendmedical`:
[v1.26.5](service/comprehendmedical/CHANGELOG.md#v1265-2024-11-07)
- **Bug Fix**: Adds case-insensitive handling of error message fields in
service responses
- `github.com/aws/aws-sdk-go-v2/service/computeoptimizer`:
[v1.39.5](service/computeoptimizer/CHANGELOG.md#v1395-2024-11-07)
- **Bug Fix**: Adds case-insensitive handling of error message fields in
service responses
- `github.com/aws/aws-sdk-go-v2/service/configservice`:
[v1.50.5](service/configservice/CHANGELOG.md#v1505-2024-11-07)
- **Bug Fix**: Adds case-insensitive handling of error message fields in
service responses
- `github.com/aws/aws-sdk-go-v2/service/connect`:
[v1.115.2](service/connect/CHANGELOG.md#v11152-2024-11-07)
- **Bug Fix**: Adds case-insensitive handling of error message fields in
service responses
- `github.com/aws/aws-sdk-go-v2/service/connectcampaigns`:
[v1.15.5](service/connectcampaigns/CHANGELOG.md#v1155-2024-11-07)
- **Bug Fix**: Adds case-insensitive handling of error message fields in
service responses
- `github.com/aws/aws-sdk-go-v2/service/connectcases`:
[v1.21.5](service/connectcases/CHANGELOG.md#v1215-2024-11-07)
- **Bug Fix**: Adds case-insensitive handling of error message fields in
service responses
- `github.com/aws/aws-sdk-go-v2/service/connectcontactlens`:
[v1.26.5](service/connectcontactlens/CHANGELOG.md#v1265-2024-11-07)
- **Bug Fix**: Adds case-insensitive handling of error message fields in
service responses
- `github.com/aws/aws-sdk-go-v2/service/connectparticipant`:
[v1.27.5](service/connectparticipant/CHANGELOG.md#v1275-2024-11-07)
- **Bug Fix**: Adds case-insensitive handling of error message fields in
service responses
- `github.com/aws/aws-sdk-go-v2/service/controlcatalog`:
[v1.5.5](service/controlcatalog/CHANGELOG.md#v155-2024-11-07)
- **Bug Fix**: Adds case-insensitive handling of error message fields in
service responses
- `github.com/aws/aws-sdk-go-v2/service/controltower`:
[v1.18.6](service/controltower/CHANGELOG.md#v1186-2024-11-07)
- **Bug Fix**: Adds case-insensitive handling of error message fields in
service responses
- `github.com/aws/aws-sdk-go-v2/service/costandusagereportservice`:
[v1.28.5](service/costandusagereportservice/CHANGELOG.md#v1285-2024-11-07)
- **Bug Fix**: Adds case-insensitive handling of error message fields in
service responses
- `github.com/aws/aws-sdk-go-v2/service/costexplorer`:
[v1.43.5](service/costexplorer/CHANGELOG.md#v1435-2024-11-07)
- **Bug Fix**: Adds case-insensitive handling of error message fields in
service responses
- `github.com/aws/aws-sdk-go-v2/service/costoptimizationhub`:
[v1.10.5](service/costoptimizationhub/CHANGELOG.md#v1105-2024-11-07)
- **Bug Fix**: Adds case-insensitive handling of error message fields in
service responses
- `github.com/aws/aws-sdk-go-v2/service/customerprofiles`:
[v1.42.5](service/customerprofiles/CHANGELOG.md#v1425-2024-11-07)
- **Bug Fix**: Adds case-insensitive handling of error message fields in
service responses
- `github.com/aws/aws-sdk-go-v2/service/databasemigrationservice`:
[v1.44.3](service/databasemigrationservice/CHANGELOG.md#v1443-2024-11-07)
- **Bug Fix**: Adds case-insensitive handling of error message fields in
service responses
- `github.com/aws/aws-sdk-go-v2/service/databrew`:
[v1.33.5](service/databrew/CHANGELOG.md#v1335-2024-11-07)
- **Bug Fix**: Adds case-insensitive handling of error message fields in
service responses
- `github.com/aws/aws-sdk-go-v2/service/dataexchange`:
[v1.33.3](service/dataexchange/CHANGELOG.md#v1333-2024-11-07)
- **Bug Fix**: Adds case-insensitive handling of error message fields in
service responses
- `github.com/aws/aws-sdk-go-v2/service/datapipeline`:
[v1.25.5](service/datapipeline/CHANGELOG.md#v1255-2024-11-07)
- **Bug Fix**: Adds case-insensitive handling of error message fields in
service responses
- `github.com/aws/aws-sdk-go-v2/service/datasync`:
[v1.43.2](service/datasync/CHANGELOG.md#v1432-2024-11-07)
- **Bug Fix**: Adds case-insensitive handling of error message fields in
service responses
- `github.com/aws/aws-sdk-go-v2/service/datazone`:
[v1.23.3](service/datazone/CHANGELOG.md#v1233-2024-11-07)
- **Bug Fix**: Adds case-insensitive handling of error message fields in
service responses
- `github.com/aws/aws-sdk-go-v2/service/dax`:
[v1.23.5](service/dax/CHANGELOG.md#v1235-2024-11-07)
- **Bug Fix**: Adds case-insensitive handling of error message fields in
service responses
- `github.com/aws/aws-sdk-go-v2/service/deadline`:
[v1.6.4](service/deadline/CHANGELOG.md#v164-2024-11-07)
- **Bug Fix**: Adds case-insensitive handling of error message fields in
service responses
- `github.com/aws/aws-sdk-go-v2/service/detective`:
[v1.31.5](service/detective/CHANGELOG.md#v1315-2024-11-07)
- **Bug Fix**: Adds case-insensitive handling of error message fields in
service responses
- `github.com/aws/aws-sdk-go-v2/service/devicefarm`:
[v1.28.5](service/devicefarm/CHANGELOG.md#v1285-2024-11-07)
- **Bug Fix**: Adds case-insensitive handling of error message fields in
service responses
- `github.com/aws/aws-sdk-go-v2/service/devopsguru`:
[v1.34.5](service/devopsguru/CHANGELOG.md#v1345-2024-11-07)
- **Bug Fix**: Adds case-insensitive handling of error message fields in
service responses
- `github.com/aws/aws-sdk-go-v2/service/directconnect`:
[v1.29.5](service/directconnect/CHANGELOG.md#v1295-2024-11-07)
- **Bug Fix**: Adds case-insensitive handling of error message fields in
service responses
- `github.com/aws/aws-sdk-go-v2/service/directoryservice`:
[v1.30.5](service/directoryservice/CHANGELOG.md#v1305-2024-11-07)
- **Bug Fix**: Adds case-insensitive handling of error message fields in
service responses
- `github.com/aws/aws-sdk-go-v2/service/directoryservicedata`:
[v1.2.5](service/directoryservicedata/CHANGELOG.md#v125-2024-11-07)
- **Bug Fix**: Adds case-insensitive handling of error message fields in
service responses
- `github.com/aws/aws-sdk-go-v2/service/dlm`:
[v1.28.5](service/dlm/CHANGELOG.md#v1285-2024-11-07)
- **Bug Fix**: Adds case-insensitive handling of error message fields in
service responses
- `github.com/aws/aws-sdk-go-v2/service/docdbelastic`:
[v1.14.2](service/docdbelastic/CHANGELOG.md#v1142-2024-11-07)
- **Bug Fix**: Adds case-insensitive handling of error message fields in
service responses
- `github.com/aws/aws-sdk-go-v2/service/drs`:
[v1.30.5](service/drs/CHANGELOG.md#v1305-2024-11-07)
- **Bug Fix**: Adds case-insensitive handling of error message fields in
service responses
- `github.com/aws/aws-sdk-go-v2/service/dynamodb`:
[v1.36.5](service/dynamodb/CHANGELOG.md#v1365-2024-11-07)
- **Bug Fix**: Adds case-insensitive handling of error message fields in
service responses
- `github.com/aws/aws-sdk-go-v2/service/dynamodbstreams`:
[v1.24.5](service/dynamodbstreams/CHANGELOG.md#v1245-2024-11-07)
- **Bug Fix**: Adds case-insensitive handling of error message fields in
service responses
- `github.com/aws/aws-sdk-go-v2/service/ebs`:
[v1.27.5](service/ebs/CHANGELOG.md#v1275-2024-11-07)
- **Bug Fix**: Adds case-insensitive handling of error message fields in
service responses
- `github.com/aws/aws-sdk-go-v2/service/ec2instanceconnect`:
[v1.27.5](service/ec2instanceconnect/CHANGELOG.md#v1275-2024-11-07)
- **Bug Fix**: Adds case-insensitive handling of error message fields in
service responses
- `github.com/aws/aws-sdk-go-v2/service/ecr`:
[v1.36.5](service/ecr/CHANGELOG.md#v1365-2024-11-07)
- **Bug Fix**: Adds case-insensitive handling of error message fields in
service responses
- `github.com/aws/aws-sdk-go-v2/service/ecrpublic`:
[v1.27.5](service/ecrpublic/CHANGELOG.md#v1275-2024-11-07)
- **Bug Fix**: Adds case-insensitive handling of error message fields in
service responses
- `github.com/aws/aws-sdk-go-v2/service/ecs`:
[v1.49.2](service/ecs/CHANGELOG.md#v1492-2024-11-07)
- **Bug Fix**: Adds case-insensitive handling of error message fields in
service responses
- `github.com/aws/aws-sdk-go-v2/service/efs`:
[v1.33.5](service/efs/CHANGELOG.md#v1335-2024-11-07)
- **Bug Fix**: Adds case-insensitive handling of error message fields in
service responses
- `github.com/aws/aws-sdk-go-v2/service/eks`:
[v1.51.3](service/eks/CHANGELOG.md#v1513-2024-11-07)
- **Bug Fix**: Adds case-insensitive handling of error message fields in
service responses
- `github.com/aws/aws-sdk-go-v2/service/eksauth`:
[v1.7.5](service/eksauth/CHANGELOG.md#v175-2024-11-07)
- **Bug Fix**: Adds case-insensitive handling of error message fields in
service responses
- `github.com/aws/aws-sdk-go-v2/service/elasticinference`:
[v1.23.6](service/elasticinference/CHANGELOG.md#v1236-2024-11-07)
- **Bug Fix**: Adds case-insensitive handling of error message fields in
service responses
- `github.com/aws/aws-sdk-go-v2/service/elasticsearchservice`:
[v1.32.5](service/elasticsearchservice/CHANGELOG.md#v1325-2024-11-07)
- **Bug Fix**: Adds case-insensitive handling of error message fields in
service responses
- `github.com/aws/aws-sdk-go-v2/service/elastictranscoder`:
[v1.27.5](service/elastictranscoder/CHANGELOG.md#v1275-2024-11-07)
- **Bug Fix**: Adds case-insensitive handling of error message fields in
service responses
- `github.com/aws/aws-sdk-go-v2/service/emr`:
[v1.46.3](service/emr/CHANGELOG.md#v1463-2024-11-07)
- **Bug Fix**: Adds case-insensitive handling of error message fields in
service responses
- `github.com/aws/aws-sdk-go-v2/service/emrcontainers`:
[v1.33.5](service/emrcontainers/CHANGELOG.md#v1335-2024-11-07)
- **Bug Fix**: Adds case-insensitive handling of error message fields in
service responses
- `github.com/aws/aws-sdk-go-v2/service/emrserverless`:
[v1.26.5](service/emrserverless/CHANGELOG.md#v1265-2024-11-07)
- **Bug Fix**: Adds case-insensitive handling of error message fields in
service responses
- `github.com/aws/aws-sdk-go-v2/service/entityresolution`:
[v1.15.5](service/entityresolution/CHANGELOG.md#v1155-2024-11-07)
- **Bug Fix**: Adds case-insensitive handling of error message fields in
service responses
- `github.com/aws/aws-sdk-go-v2/service/eventbridge`:
[v1.35.5](service/eventbridge/CHANGELOG.md#v1355-2024-11-07)
- **Bug Fix**: Adds case-insensitive handling of error message fields in
service responses
- `github.com/aws/aws-sdk-go-v2/service/evidently`:
[v1.23.5](service/evidently/CHANGELOG.md#v1235-2024-11-07)
- **Bug Fix**: Adds case-insensitive handling of error message fields in
service responses
- `github.com/aws/aws-sdk-go-v2/service/finspace`:
[v1.28.5](service/finspace/CHANGELOG.md#v1285-2024-11-07)
- **Bug Fix**: Adds case-insensitive handling of error message fields in
service responses
- `github.com/aws/aws-sdk-go-v2/service/finspacedata`:
[v1.28.5](service/finspacedata/CHANGELOG.md#v1285-2024-11-07)
- **Bug Fix**: Adds case-insensitive handling of error message fields in
service responses
- `github.com/aws/aws-sdk-go-v2/service/firehose`:
[v1.34.5](service/firehose/CHANGELOG.md#v1345-2024-11-07)
- **Bug Fix**: Adds case-insensitive handling of error message fields in
service responses
- `github.com/aws/aws-sdk-go-v2/service/fis`:
[v1.30.5](service/fis/CHANGELOG.md#v1305-2024-11-07)
- **Bug Fix**: Adds case-insensitive handling of error message fields in
service responses
- `github.com/aws/aws-sdk-go-v2/service/fms`:
[v1.38.3](service/fms/CHANGELOG.md#v1383-2024-11-07)
- **Bug Fix**: Adds case-insensitive handling of error message fields in
service responses
- `github.com/aws/aws-sdk-go-v2/service/forecast`:
[v1.36.5](service/forecast/CHANGELOG.md#v1365-2024-11-07)
- **Bug Fix**: Adds case-insensitive handling of error message fields in
service responses
- `github.com/aws/aws-sdk-go-v2/service/forecastquery`:
[v1.24.5](service/forecastquery/CHANGELOG.md#v1245-2024-11-07)
- **Bug Fix**: Adds case-insensitive handling of error message fields in
service responses
- `github.com/aws/aws-sdk-go-v2/service/frauddetector`:
[v1.35.5](service/frauddetector/CHANGELOG.md#v1355-2024-11-07)
- **Bug Fix**: Adds case-insensitive handling of error message fields in
service responses
- `github.com/aws/aws-sdk-go-v2/service/freetier`:
[v1.7.5](service/freetier/CHANGELOG.md#v175-2024-11-07)
- **Bug Fix**: Adds case-insensitive handling of error message fields in
service responses
- `github.com/aws/aws-sdk-go-v2/service/fsx`:
[v1.49.5](service/fsx/CHANGELOG.md#v1495-2024-11-07)
- **Bug Fix**: Adds case-insensitive handling of error message fields in
service responses
- `github.com/aws/aws-sdk-go-v2/service/gamelift`:
[v1.36.5](service/gamelift/CHANGELOG.md#v1365-2024-11-07)
- **Bug Fix**: Adds case-insensitive handling of error message fields in
service responses
- `github.com/aws/aws-sdk-go-v2/service/geomaps`:
[v1.0.2](service/geomaps/CHANGELOG.md#v102-2024-11-07)
- **Bug Fix**: Adds case-insensitive handling of error message fields in
service responses
- `github.com/aws/aws-sdk-go-v2/service/geoplaces`:
[v1.0.2](service/geoplaces/CHANGELOG.md#v102-2024-11-07)
- **Bug Fix**: Adds case-insensitive handling of error message fields in
service responses
- `github.com/aws/aws-sdk-go-v2/service/georoutes`:
[v1.0.2](service/georoutes/CHANGELOG.md#v102-2024-11-07)
- **Bug Fix**: Adds case-insensitive handling of error message fields in
service responses
- `github.com/aws/aws-sdk-go-v2/service/glacier`:
[v1.26.5](service/glacier/CHANGELOG.md#v1265-2024-11-07)
- **Bug Fix**: Adds case-insensitive handling of error message fields in
service responses
- `github.com/aws/aws-sdk-go-v2/service/globalaccelerator`:
[v1.29.5](service/globalaccelerator/CHANGELOG.md#v1295-2024-11-07)
- **Bug Fix**: Adds case-insensitive handling of error message fields in
service responses
- `github.com/aws/aws-sdk-go-v2/service/glue`:
[v1.101.2](service/glue/CHANGELOG.md#v11012-2024-11-07)
- **Bug Fix**: Adds case-insensitive handling of error message fields in
service responses
- `github.com/aws/aws-sdk-go-v2/service/grafana`:
[v1.26.5](service/grafana/CHANGELOG.md#v1265-2024-11-07)
- **Bug Fix**: Adds case-insensitive handling of error message fields in
service responses
- `github.com/aws/aws-sdk-go-v2/service/greengrass`:
[v1.27.5](service/greengrass/CHANGELOG.md#v1275-2024-11-07)
- **Bug Fix**: Adds case-insensitive handling of error message fields in
service responses
- `github.com/aws/aws-sdk-go-v2/service/greengrassv2`:
[v1.35.5](service/greengrassv2/CHANGELOG.md#v1355-2024-11-07)
- **Bug Fix**: Adds case-insensitive handling of error message fields in
service responses
- `github.com/aws/aws-sdk-go-v2/service/groundstation`:
[v1.31.5](service/groundstation/CHANGELOG.md#v1315-2024-11-07)
- **Bug Fix**: Adds case-insensitive handling of error message fields in
service responses
- `github.com/aws/aws-sdk-go-v2/service/guardduty`:
[v1.51.1](service/guardduty/CHANGELOG.md#v1511-2024-11-07)
- **Bug Fix**: Adds case-insensitive handling of error message fields in
service responses
- `github.com/aws/aws-sdk-go-v2/service/health`:
[v1.28.5](service/health/CHANGELOG.md#v1285-2024-11-07)
- **Bug Fix**: Adds case-insensitive handling of error message fields in
service responses
- `github.com/aws/aws-sdk-go-v2/service/healthlake`:
[v1.28.5](service/healthlake/CHANGELOG.md#v1285-2024-11-07)
- **Bug Fix**: Adds case-insensitive handling of error message fields in
service responses
- `github.com/aws/aws-sdk-go-v2/service/identitystore`:
[v1.27.5](service/identitystore/CHANGELOG.md#v1275-2024-11-07)
- **Bug Fix**: Adds case-insensitive handling of error message fields in
service responses
- `github.com/aws/aws-sdk-go-v2/service/imagebuilder`:
[v1.38.3](service/imagebuilder/CHANGELOG.md#v1383-2024-11-07)
- **Bug Fix**: Adds case-insensitive handling of error message fields in
service responses
- `github.com/aws/aws-sdk-go-v2/service/inspector`:
[v1.25.5](service/inspector/CHANGELOG.md#v1255-2024-11-07)
- **Bug Fix**: Adds case-insensitive handling of error message fields in
service responses
- `github.com/aws/aws-sdk-go-v2/service/inspector2`:
[v1.32.5](service/inspector2/CHANGELOG.md#v1325-2024-11-07)
- **Bug Fix**: Adds case-insensitive handling of error message fields in
service responses
- `github.com/aws/aws-sdk-go-v2/service/inspectorscan`:
[v1.7.5](service/inspectorscan/CHANGELOG.md#v175-2024-11-07)
- **Bug Fix**: Adds case-insensitive handling of error message fields in
service responses
- `github.com/aws/aws-sdk-go-v2/service/internetmonitor`:
[v1.19.5](service/internetmonitor/CHANGELOG.md#v1195-2024-11-07)
- **Bug Fix**: Adds case-insensitive handling of error message fields in
service responses
- `github.com/aws/aws-sdk-go-v2/service/iot`:
[v1.59.5](service/iot/CHANGELOG.md#v1595-2024-11-07)
- **Bug Fix**: Adds case-insensitive handling of error message fields in
service responses
- `github.com/aws/aws-sdk-go-v2/service/iot1clickdevicesservice`:
[v1.23.5](service/iot1clickdevicesservice/CHANGELOG.md#v1235-2024-11-07)
- **Bug Fix**: Adds case-insensitive handling of error message fields in
service responses
- `github.com/aws/aws-sdk-go-v2/service/iot1clickprojects`:
[v1.23.5](service/iot1clickprojects/CHANGELOG.md#v1235-2024-11-07)
- **Bug Fix**: Adds case-insensitive handling of error message fields in
service responses
- `github.com/aws/aws-sdk-go-v2/service/iotanalytics`:
[v1.26.5](service/iotanalytics/CHANGELOG.md#v1265-2024-11-07)
- **Bug Fix**: Adds case-insensitive handling of error message fields in
service responses
- `github.com/aws/aws-sdk-go-v2/service/iotdataplane`:
[v1.26.5](service/iotdataplane/CHANGELOG.md#v1265-2024-11-07)
- **Bug Fix**: Adds case-insensitive handling of error message fields in
service responses
- `github.com/aws/aws-sdk-go-v2/service/iotdeviceadvisor`:
[v1.31.5](service/iotdeviceadvisor/CHANGELOG.md#v1315-2024-11-07)
- **Bug Fix**: Adds case-insensitive handling of error message fields in
service responses
- `github.com/aws/aws-sdk-go-v2/service/iotevents`:
[v1.27.5](service/iotevents/CHANGELOG.md#v1275-2024-11-07)
- **Bug Fix**: Adds case-insensitive handling of error message fields in
service responses
- `github.com/aws/aws-sdk-go-v2/service/ioteventsdata`:
[v1.24.5](service/ioteventsdata/CHANGELOG.md#v1245-2024-11-07)
- **Bug Fix**: Adds case-insensitive handling of error message fields in
service responses
- `github.com/aws/aws-sdk-go-v2/service/iotfleethub`:
[v1.24.5](service/iotfleethub/CHANGELOG.md#v1245-2024-11-07)
- **Bug Fix**: Adds case-insensitive handling of error message fields in
service responses
- `github.com/aws/aws-sdk-go-v2/service/iotfleetwise`:
[v1.21.2](service/iotfleetwise/CHANGELOG.md#v1212-2024-11-07)
- **Bug Fix**: Adds case-insensitive handling of error message fields in
service responses
- `github.com/aws/aws-sdk-go-v2/service/iotjobsdataplane`:
[v1.23.5](service/iotjobsdataplane/CHANGELOG.md#v1235-2024-11-07)
- **Bug Fix**: Adds case-insensitive handling of error message fields in
service responses
- `github.com/aws/aws-sdk-go-v2/service/iotsecuretunneling`:
[v1.27.5](service/iotsecuretunneling/CHANGELOG.md#v1275-2024-11-07)
- **Bug Fix**: Adds case-insensitive handling of error message fields in
service responses
- `github.com/aws/aws-sdk-go-v2/service/iotsitewise`:
[v1.43.5](service/iotsitewise/CHANGELOG.md#v1435-2024-11-07)
- **Bug Fix**: Adds case-insensitive handling of error message fields in
service responses
- `github.com/aws/aws-sdk-go-v2/service/iotthingsgraph`:
[v1.25.5](service/iotthingsgraph/CHANGELOG.md#v1255-2024-11-07)
- **Bug Fix**: Adds case-insensitive handling of error message fields in
service responses
- `github.com/aws/aws-sdk-go-v2/service/iottwinmaker`:
[v1.24.5](service/iottwinmaker/CHANGELOG.md#v1245-2024-11-07)
- **Bug Fix**: Adds case-insensitive handling of error message fields in
service responses
- `github.com/aws/aws-sdk-go-v2/service/iotwireless`:
[v1.44.5](service/iotwireless/CHANGELOG.md#v1445-2024-11-07)
- **Bug Fix**: Adds case-insensitive handling of error message fields in
service responses
- `github.com/aws/aws-sdk-go-v2/service/ivschat`:
[v1.16.5](service/ivschat/CHANGELOG.md#v1165-2024-11-07)
- **Bug Fix**: Adds case-insensitive handling of error message fields in
service responses
- `github.com/aws/aws-sdk-go-v2/service/kafka`:
[v1.38.5](service/kafka/CHANGELOG.md#v1385-2024-11-07)
- **Bug Fix**: Adds case-insensitive handling of error message fields in
service responses
- `github.com/aws/aws-sdk-go-v2/service/kafkaconnect`:
[v1.21.5](service/kafkaconnect/CHANGELOG.md#v1215-2024-11-07)
- **Bug Fix**: Adds case-insensitive handling of error message fields in
service responses
- `github.com/aws/aws-sdk-go-v2/service/kendra`:
[v1.54.5](service/kendra/CHANGELOG.md#v1545-2024-11-07)
- **Bug Fix**: Adds case-insensitive handling of error message fields in
service responses
- `github.com/aws/aws-sdk-go-v2/service/kendraranking`:
[v1.11.5](service/kendraranking/CHANGELOG.md#v1115-2024-11-07)
  - **Bug Fix**: Adds case-insensitive handling of erro

> ✂ **Note**
>
> PR body was truncated to here.

</details>

---

### Configuration

📅 **Schedule**: (in timezone Europe/London)

- Branch creation
  - "after 6pm on thursday,before 10am on friday"
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config
help](https://redirect.github.com/renovatebot/renovate/discussions) if
that's undesired.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/overmindtech/workspace).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4zLjIiLCJ1cGRhdGVkSW5WZXIiOiI0NC4zLjIiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbImRlcGVuZGVuY2llcyIsImdvbGFuZyJdfQ==-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
GitOrigin-RevId: fc8a8a7ae6e4f26b08fcbd789324cf81c69b97b6
> ℹ️ **Note**
>
> This PR body was truncated due to platform limits.

This PR contains the following updates:

| Package | Change |
[Age](https://docs.renovatebot.com/merge-confidence/) |
[Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|
|
[github.com/1password/onepassword-sdk-go](https://redirect.github.com/1password/onepassword-sdk-go)
| `v0.4.0` → `v0.4.1` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2f1password%2fonepassword-sdk-go/v0.4.1?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2f1password%2fonepassword-sdk-go/v0.4.0/v0.4.1?slim=true)
|
|
[github.com/auth0/go-jwt-middleware/v3](https://redirect.github.com/auth0/go-jwt-middleware)
| `v3.2.0` → `v3.3.0` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fauth0%2fgo-jwt-middleware%2fv3/v3.3.0?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fauth0%2fgo-jwt-middleware%2fv3/v3.2.0/v3.3.0?slim=true)
|
|
[github.com/go-git/go-git/v5](https://redirect.github.com/go-git/go-git)
| `v5.19.1` → `v5.19.2` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fgo-git%2fgo-git%2fv5/v5.19.2?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fgo-git%2fgo-git%2fv5/v5.19.1/v5.19.2?slim=true)
|
| [github.com/google/cel-go](https://redirect.github.com/google/cel-go)
| `v0.29.2` → `v0.30.0` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fgoogle%2fcel-go/v0.30.0?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fgoogle%2fcel-go/v0.29.2/v0.30.0?slim=true)
|
|
[github.com/goreleaser/goreleaser/v2](https://redirect.github.com/goreleaser/goreleaser)
| `v2.17.0` → `v2.17.1` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fgoreleaser%2fgoreleaser%2fv2/v2.17.1?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fgoreleaser%2fgoreleaser%2fv2/v2.17.0/v2.17.1?slim=true)
|
|
[github.com/harness/harness-go-sdk](https://redirect.github.com/harness/harness-go-sdk)
| `v0.8.14` → `v0.8.15` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fharness%2fharness-go-sdk/v0.8.15?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fharness%2fharness-go-sdk/v0.8.14/v0.8.15?slim=true)
|
|
[github.com/modelcontextprotocol/go-sdk](https://redirect.github.com/modelcontextprotocol/go-sdk)
| `v1.6.1` → `v1.7.0` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fmodelcontextprotocol%2fgo-sdk/v1.7.0?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fmodelcontextprotocol%2fgo-sdk/v1.6.1/v1.7.0?slim=true)
|
|
[github.com/openai/openai-go/v3](https://redirect.github.com/openai/openai-go)
| `v3.46.0` → `v3.49.0` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fopenai%2fopenai-go%2fv3/v3.49.0?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fopenai%2fopenai-go%2fv3/v3.46.0/v3.49.0?slim=true)
|
|
[github.com/resend/resend-go/v3](https://redirect.github.com/resend/resend-go)
| `v3.11.0` → `v3.12.0` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fresend%2fresend-go%2fv3/v3.12.0?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fresend%2fresend-go%2fv3/v3.11.0/v3.12.0?slim=true)
|
|
[gitlab.com/gitlab-org/api/client-go/v2](https://gitlab.com/gitlab-org/api/client-go)
| `v2.51.0` → `v2.55.1` |
![age](https://developer.mend.io/api/mc/badges/age/go/gitlab.com%2fgitlab-org%2fapi%2fclient-go%2fv2/v2.55.1?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/gitlab.com%2fgitlab-org%2fapi%2fclient-go%2fv2/v2.51.0/v2.55.1?slim=true)
|
| [go.yaml.in/yaml/v3](https://redirect.github.com/yaml/go-yaml) |
`v3.0.4` → `v3.0.5` |
![age](https://developer.mend.io/api/mc/badges/age/go/go.yaml.in%2fyaml%2fv3/v3.0.5?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/go.yaml.in%2fyaml%2fv3/v3.0.4/v3.0.5?slim=true)
|
| [google.golang.org/grpc](https://redirect.github.com/grpc/grpc-go) |
`v1.82.1` → `v1.83.0` |
![age](https://developer.mend.io/api/mc/badges/age/go/google.golang.org%2fgrpc/v1.83.0?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/google.golang.org%2fgrpc/v1.82.1/v1.83.0?slim=true)
|
| [mvdan.cc/gofumpt](https://redirect.github.com/mvdan/gofumpt) |
`v0.10.0` → `v0.11.0` |
![age](https://developer.mend.io/api/mc/badges/age/go/mvdan.cc%2fgofumpt/v0.11.0?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/mvdan.cc%2fgofumpt/v0.10.0/v0.11.0?slim=true)
|
| riverqueue.com/riverui | `v0.16.0` → `v0.17.0` |
![age](https://developer.mend.io/api/mc/badges/age/go/riverqueue.com%2friverui/v0.17.0?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/riverqueue.com%2friverui/v0.16.0/v0.17.0?slim=true)
|

---

> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/370) for more information.

---

### Release Notes

<details>
<summary>1password/onepassword-sdk-go
(github.com/1password/onepassword-sdk-go)</summary>

###
[`v0.4.1`](https://redirect.github.com/1Password/onepassword-sdk-go/releases/tag/v0.4.1):
Release 0.4.1

[Compare
Source](https://redirect.github.com/1password/onepassword-sdk-go/compare/v0.4.0...v0.4.1)

### 1Password Go SDK v0.4.1

#### NEW

- **1Password Environment access:** The SDK can now read variables from
a 1Password Environment.

#### IMPROVED

- **Documentation:** The README now covers desktop app authentication
and an updated list of supported functionality. Example code and
comments are consistent with the other 1Password SDKs.
- **Terms of Service:** The README now links the terms of service that
apply to the 1Password APIs/SDKs.

#### FIXED

- **CGO handling:** The SDK now builds with `CGO_ENABLED=0`. CGO is only
required for Desktop App Integration.

</details>

<details>
<summary>auth0/go-jwt-middleware
(github.com/auth0/go-jwt-middleware/v3)</summary>

###
[`v3.3.0`](https://redirect.github.com/auth0/go-jwt-middleware/blob/HEAD/CHANGELOG.md#v330-2026-07-31)

[Compare
Source](https://redirect.github.com/auth0/go-jwt-middleware/compare/v3.2.0...v3.3.0)

[Full
Changelog](https://redirect.github.com/auth0/go-jwt-middleware/compare/v3.2.0...v3.3.0)

**Added**

- feat(validator): parse and expose On-Behalf-Of / Token Exchange claims
per RFC 8693
[#&#8203;407](https://redirect.github.com/auth0/go-jwt-middleware/pull/407)
([developerkunal](https://redirect.github.com/developerkunal))

**Fixed**

- fix(validator): select JWKS keys that omit the optional alg member
[#&#8203;426](https://redirect.github.com/auth0/go-jwt-middleware/pull/426)
([developerkunal](https://redirect.github.com/developerkunal))

</details>

<details>
<summary>go-git/go-git (github.com/go-git/go-git/v5)</summary>

###
[`v5.19.2`](https://redirect.github.com/go-git/go-git/releases/tag/v5.19.2)

[Compare
Source](https://redirect.github.com/go-git/go-git/compare/v5.19.1...v5.19.2)

#### What's Changed

- build: Update module golang.org/x/crypto to v0.52.0 \[SECURITY]
(releases/v5.x) by
[@&#8203;go-git-renovate](https://redirect.github.com/go-git-renovate)\[bot]
in [#&#8203;2150](https://redirect.github.com/go-git/go-git/pull/2150)
- build: Update module github.com/go-git/go-git/v5 to v5.19.1
\[SECURITY] (releases/v5.x) by
[@&#8203;go-git-renovate](https://redirect.github.com/go-git-renovate)\[bot]
in [#&#8203;2141](https://redirect.github.com/go-git/go-git/pull/2141)
- build: Update module golang.org/x/net to v0.55.0 \[SECURITY]
(releases/v5.x) by
[@&#8203;go-git-renovate](https://redirect.github.com/go-git-renovate)\[bot]
in [#&#8203;2152](https://redirect.github.com/go-git/go-git/pull/2152)
- git: Worktree: Add stores index entires with backslashes on Windows by
[@&#8203;joshblum](https://redirect.github.com/joshblum) in
[#&#8203;2262](https://redirect.github.com/go-git/go-git/pull/2262)
- storage: dotgit, reject path traversal in reference names by
[@&#8203;pjbgf](https://redirect.github.com/pjbgf) in
[#&#8203;2254](https://redirect.github.com/go-git/go-git/pull/2254)
- build: Update module golang.org/x/net to v0.56.0 \[SECURITY]
(releases/v5.x) by
[@&#8203;go-git-renovate](https://redirect.github.com/go-git-renovate)\[bot]
in [#&#8203;2267](https://redirect.github.com/go-git/go-git/pull/2267)
- build: Update module golang.org/x/text to v0.39.0 \[SECURITY]
(releases/v5.x) by
[@&#8203;go-git-renovate](https://redirect.github.com/go-git-renovate)\[bot]
in [#&#8203;2268](https://redirect.github.com/go-git/go-git/pull/2268)
- \[v5] git: worktree, make the filesystem wrapper a symlink-safe
boundary by [@&#8203;pjbgf](https://redirect.github.com/pjbgf) in
[#&#8203;2277](https://redirect.github.com/go-git/go-git/pull/2277)

**Full Changelog**:
<https://github.com/go-git/go-git/compare/v5.19.1...v5.19.2>

</details>

<details>
<summary>google/cel-go (github.com/google/cel-go)</summary>

###
[`v0.30.0`](https://redirect.github.com/cel-expr/cel-go/releases/tag/v0.30.0)

[Compare
Source](https://redirect.github.com/google/cel-go/compare/v0.29.2...v0.30.0)

#### What's Changed

- Add cost tracking for encoders by
[@&#8203;TristonianJones](https://redirect.github.com/TristonianJones)
in
[cel-expr#1354](https://redirect.github.com/cel-expr/cel-go/pull/1354)
- Fix syntax error at head by
[@&#8203;stanleyycheung](https://redirect.github.com/stanleyycheung) in
[cel-expr#1362](https://redirect.github.com/cel-expr/cel-go/pull/1362)
- Prevent indexing on sentinel json field '-' by
[@&#8203;TristonianJones](https://redirect.github.com/TristonianJones)
in
[cel-expr#1349](https://redirect.github.com/cel-expr/cel-go/pull/1349)
- Async function execution internals by
[@&#8203;TristonianJones](https://redirect.github.com/TristonianJones)
in
[cel-expr#1355](https://redirect.github.com/cel-expr/cel-go/pull/1355)
- reject non-RFC3339 timestamp strings in timestamp() conversion by
[@&#8203;alhudz](https://redirect.github.com/alhudz) in
[cel-expr#1338](https://redirect.github.com/cel-expr/cel-go/pull/1338)
- Add depth validation for ASTs loaded through ParsedExprToAst /
Checke... by
[@&#8203;wilyan09007](https://redirect.github.com/wilyan09007) in
[cel-expr#1334](https://redirect.github.com/cel-expr/cel-go/pull/1334)
- Fix non-determinism in json encoding, add dummy 'infinite' costs by
[@&#8203;TristonianJones](https://redirect.github.com/TristonianJones)
in
[cel-expr#1365](https://redirect.github.com/cel-expr/cel-go/pull/1365)
- Update lists library cost computations for improved accuracy by
[@&#8203;TristonianJones](https://redirect.github.com/TristonianJones)
in
[cel-expr#1352](https://redirect.github.com/cel-expr/cel-go/pull/1352)
- Cost library for ext/network by
[@&#8203;TristonianJones](https://redirect.github.com/TristonianJones)
in
[cel-expr#1345](https://redirect.github.com/cel-expr/cel-go/pull/1345)
- Introduce async DrainStrategy, DrainAction, Observer, and Call types
by
[@&#8203;TristonianJones](https://redirect.github.com/TristonianJones)
in
[cel-expr#1364](https://redirect.github.com/cel-expr/cel-go/pull/1364)
- Graceful NaN ordering by
[@&#8203;TristonianJones](https://redirect.github.com/TristonianJones)
in
[cel-expr#1370](https://redirect.github.com/cel-expr/cel-go/pull/1370)
- Fix constant folding and local variable resolution by
[@&#8203;TristonianJones](https://redirect.github.com/TristonianJones)
in
[cel-expr#1371](https://redirect.github.com/cel-expr/cel-go/pull/1371)
- Concurrent Eval with context.Context bound functions by
[@&#8203;TristonianJones](https://redirect.github.com/TristonianJones)
in
[cel-expr#1369](https://redirect.github.com/cel-expr/cel-go/pull/1369)
- Async timeout and retry wrappers by
[@&#8203;TristonianJones](https://redirect.github.com/TristonianJones)
in
[cel-expr#1367](https://redirect.github.com/cel-expr/cel-go/pull/1367)
- Add runnable examples for all expressions in celbyexample.com by
[@&#8203;TristonianJones](https://redirect.github.com/TristonianJones)
in
[cel-expr#1373](https://redirect.github.com/cel-expr/cel-go/pull/1373)
- Ensure logical operator fold expressions are bool by
[@&#8203;TristonianJones](https://redirect.github.com/TristonianJones)
in
[cel-expr#1380](https://redirect.github.com/cel-expr/cel-go/pull/1380)
- Fix unsound constant folding of `x in [x]` for NaN values by
[@&#8203;pranit0808](https://redirect.github.com/pranit0808) in
[cel-expr#1374](https://redirect.github.com/cel-expr/cel-go/pull/1374)
- copy operands in Bytes.Add to avoid aliasing the receiver by
[@&#8203;pranit0808](https://redirect.github.com/pranit0808) in
[cel-expr#1381](https://redirect.github.com/cel-expr/cel-go/pull/1381)
- Validation of cel.bind() nesting limits by
[@&#8203;TristonianJones](https://redirect.github.com/TristonianJones)
in
[cel-expr#1378](https://redirect.github.com/cel-expr/cel-go/pull/1378)
- Allow validators to be reconfigured by
[@&#8203;TristonianJones](https://redirect.github.com/TristonianJones)
in
[cel-expr#1379](https://redirect.github.com/cel-expr/cel-go/pull/1379)
- Add cost tracking to ext/math.go by
[@&#8203;TristonianJones](https://redirect.github.com/TristonianJones)
in
[cel-expr#1353](https://redirect.github.com/cel-expr/cel-go/pull/1353)
- Expression node limits for parser and checker by
[@&#8203;TristonianJones](https://redirect.github.com/TristonianJones)
in
[cel-expr#1386](https://redirect.github.com/cel-expr/cel-go/pull/1386)

#### New Contributors

- [@&#8203;stanleyycheung](https://redirect.github.com/stanleyycheung)
made their first contribution in
[cel-expr#1362](https://redirect.github.com/cel-expr/cel-go/pull/1362)
- [@&#8203;wilyan09007](https://redirect.github.com/wilyan09007) made
their first contribution in
[cel-expr#1334](https://redirect.github.com/cel-expr/cel-go/pull/1334)
- [@&#8203;pranit0808](https://redirect.github.com/pranit0808) made
their first contribution in
[cel-expr#1374](https://redirect.github.com/cel-expr/cel-go/pull/1374)

**Full Changelog**:
<https://github.com/cel-expr/cel-go/compare/v0.29.2...v0.29.3>

</details>

<details>
<summary>goreleaser/goreleaser
(github.com/goreleaser/goreleaser/v2)</summary>

###
[`v2.17.1`](https://redirect.github.com/goreleaser/goreleaser/releases/tag/v2.17.1)

[Compare
Source](https://redirect.github.com/goreleaser/goreleaser/compare/v2.17.0...v2.17.1)

#### Announcement

Read the official announcement: [Announcing GoReleaser
v2.17](https://goreleaser.com/blog/goreleaser-v2.17/).

#### Changelog

##### Bug fixes

-
[`a734383`](https://redirect.github.com/goreleaser/goreleaser/commit/a734383d9f8d74f689097dbfd3c1086b3f56648f):
fix(builder/go): parse GORISCV64 and GOPPC64 for riscv64 and ppc64le
targets
([#&#8203;6698](https://redirect.github.com/goreleaser/goreleaser/issues/6698))
([@&#8203;upuddu](https://redirect.github.com/upuddu))
-
[`dfc7f06`](https://redirect.github.com/goreleaser/goreleaser/commit/dfc7f06a53441d9f0adb6f03e8f7afc2281f6d5d):
fix(builders/go): sort targets
([@&#8203;caarlos0](https://redirect.github.com/caarlos0))
-
[`7630cd1`](https://redirect.github.com/goreleaser/goreleaser/commit/7630cd166fb4dbad0a29ea23cf5e941b66f72b09):
fix(deps): go1.26.5
([@&#8203;caarlos0](https://redirect.github.com/caarlos0))
-
[`9dbb266`](https://redirect.github.com/goreleaser/goreleaser/commit/9dbb2668c0e9a5bac1e14689f1024b2a7c741bc9):
fix(notary): poll notarization status every 10s, not 10ns
([#&#8203;6726](https://redirect.github.com/goreleaser/goreleaser/issues/6726))
([@&#8203;caarlos0](https://redirect.github.com/caarlos0))
-
[`1ebf881`](https://redirect.github.com/goreleaser/goreleaser/commit/1ebf881316f6c86be9d76b62026cca52d81e3480):
fix: anchor goarm64 validation regex to reject invalid values
([#&#8203;6727](https://redirect.github.com/goreleaser/goreleaser/issues/6727))
([@&#8203;semx](https://redirect.github.com/semx))
-
[`70f6921`](https://redirect.github.com/goreleaser/goreleaser/commit/70f6921451146e62685da01bec4438dabe06bc22):
fix: migrate from deprecated s3/manager to s3/transfermanager
([#&#8203;6706](https://redirect.github.com/goreleaser/goreleaser/issues/6706))
([@&#8203;joeyberkovitz](https://redirect.github.com/joeyberkovitz))

##### Documentation updates

-
[`eafb0ec`](https://redirect.github.com/goreleaser/goreleaser/commit/eafb0ec65125ea4bbc408e19e26886ed95715e2a):
docs(users): update charm domain
([#&#8203;6699](https://redirect.github.com/goreleaser/goreleaser/issues/6699))
([@&#8203;andreynering](https://redirect.github.com/andreynering))
-
[`ae4debb`](https://redirect.github.com/goreleaser/goreleaser/commit/ae4debbe4383dcc565f9251df2ea719501b8d9ea):
docs: add /.well-known/security.txt (RFC 9116)
([#&#8203;6710](https://redirect.github.com/goreleaser/goreleaser/issues/6710))
([@&#8203;kobihikri](https://redirect.github.com/kobihikri))
-
[`d3764c8`](https://redirect.github.com/goreleaser/goreleaser/commit/d3764c8bc8e6bc316ddf4032f0faa9e25c6fd98e):
docs: fix typo
([@&#8203;caarlos0](https://redirect.github.com/caarlos0))
-
[`742ae5f`](https://redirect.github.com/goreleaser/goreleaser/commit/742ae5fc647cb61e689d333a4a15ec9dea8b5907):
docs: move images to a bucket
([#&#8203;6691](https://redirect.github.com/goreleaser/goreleaser/issues/6691))
([@&#8203;caarlos0](https://redirect.github.com/caarlos0))
-
[`55a466e`](https://redirect.github.com/goreleaser/goreleaser/commit/55a466e7fa9980ff75c206b8f98781652607ec38):
docs: publish to GitLab package registries with the http upload pipe
([#&#8203;6697](https://redirect.github.com/goreleaser/goreleaser/issues/6697))
([@&#8203;ajuijas](https://redirect.github.com/ajuijas))
-
[`65240d8`](https://redirect.github.com/goreleaser/goreleaser/commit/65240d83f56f7de80716a62600c36178900c7d09):
docs: update users
([@&#8203;caarlos0](https://redirect.github.com/caarlos0))

##### Other work

-
[`0eb5b0f`](https://redirect.github.com/goreleaser/goreleaser/commit/0eb5b0fd4e5e03a0de538812a7ca607c0ceadfa8):
chore(ci): update dependabot config
([@&#8203;caarlos0](https://redirect.github.com/caarlos0))
-
[`4bcb2a5`](https://redirect.github.com/goreleaser/goreleaser/commit/4bcb2a5c80de731d6ca1cee7e457ca70efc22c31):
chore(ci): update deps
([@&#8203;caarlos0](https://redirect.github.com/caarlos0))
-
[`5f3f435`](https://redirect.github.com/goreleaser/goreleaser/commit/5f3f435f8856eacc4ee715ba8611d344790c68df):
chore: auto-update generated files
([#&#8203;6693](https://redirect.github.com/goreleaser/goreleaser/issues/6693))
([@&#8203;goreleaserbot](https://redirect.github.com/goreleaserbot))
-
[`9b85924`](https://redirect.github.com/goreleaser/goreleaser/commit/9b859248b101e24e6926db9e582472cfd1680ad1):
chore: auto-update generated files
([#&#8203;6694](https://redirect.github.com/goreleaser/goreleaser/issues/6694))
([@&#8203;goreleaserbot](https://redirect.github.com/goreleaserbot))
-
[`1aab79e`](https://redirect.github.com/goreleaser/goreleaser/commit/1aab79e70a1df58ec44741d6af64ff146d545eed):
chore: auto-update generated files
([#&#8203;6700](https://redirect.github.com/goreleaser/goreleaser/issues/6700))
([@&#8203;goreleaserbot](https://redirect.github.com/goreleaserbot))
-
[`11d0150`](https://redirect.github.com/goreleaser/goreleaser/commit/11d0150499154f03cdb849387f7d95fe00e89e0d):
chore: auto-update generated files
([#&#8203;6705](https://redirect.github.com/goreleaser/goreleaser/issues/6705))
([@&#8203;goreleaserbot](https://redirect.github.com/goreleaserbot))
-
[`5747ca7`](https://redirect.github.com/goreleaser/goreleaser/commit/5747ca742e182dabc45037271f8274baca40318b):
chore: auto-update generated files
([#&#8203;6707](https://redirect.github.com/goreleaser/goreleaser/issues/6707))
([@&#8203;goreleaserbot](https://redirect.github.com/goreleaserbot))
-
[`83f4c19`](https://redirect.github.com/goreleaser/goreleaser/commit/83f4c19a5c5c0b9efef6bf2aedc6805bbcb9dfe2):
chore: auto-update generated files
([#&#8203;6730](https://redirect.github.com/goreleaser/goreleaser/issues/6730))
([@&#8203;goreleaserbot](https://redirect.github.com/goreleaserbot))
-
[`f3a0e63`](https://redirect.github.com/goreleaser/goreleaser/commit/f3a0e631432afe54de6325935072b652cdac6039):
chore: svu config
([@&#8203;caarlos0](https://redirect.github.com/caarlos0))

**Full Changelog**:
<https://github.com/goreleaser/goreleaser/compare/v2.17.0...v2.17.1>

#### Helping out

This release is only possible thanks to **all** the support of some
**awesome people**!

Want to be one of them?
You can [sponsor](https://goreleaser.com/sponsors/), get a [Pro
License](https://goreleaser.com/pro) or [contribute with
code](https://goreleaser.com/contributing).

#### Where to go next?

- Find examples and commented usage of all options in our
[website](https://goreleaser.com/intro/).
- Reach out on [Discord](https://discord.gg/RGEBtg8vQ6),
[Twitter](https://twitter.com/goreleaser), and
[Telegram](https://t.me/goreleasernews)!

<a href="https://goreleaser.com"><img
src="https://raw.githubusercontent.com/goreleaser/artwork/master/opencollective-header.png"
with="100%" alt="GoReleaser logo"></a>

</details>

<details>
<summary>harness/harness-go-sdk
(github.com/harness/harness-go-sdk)</summary>

###
[`v0.8.15`](https://redirect.github.com/harness/harness-go-sdk/compare/v0.8.14...v0.8.15)

[Compare
Source](https://redirect.github.com/harness/harness-go-sdk/compare/v0.8.14...v0.8.15)

</details>

<details>
<summary>modelcontextprotocol/go-sdk
(github.com/modelcontextprotocol/go-sdk)</summary>

###
[`v1.7.0`](https://redirect.github.com/modelcontextprotocol/go-sdk/releases/tag/v1.7.0)

[Compare
Source](https://redirect.github.com/modelcontextprotocol/go-sdk/compare/v1.6.1...v1.7.0)

This release brings full support for protocol version **`2026-07-28`**.
The wire protocol is largely rewritten: a stateless model with
per-request `_meta`, a new `server/discover` RPC replacing the
`initialize` handshake, multi-round-trip requests (MRTR) replacing
server-initiated calls, a unified `subscriptions/listen` stream
replacing free-floating change notifications, standardised HTTP headers,
and the formal deprecation of the roots, sampling, and logging features.

The streamable HTTP transport accepts requests at protocol version
`2026-07-28` only when `StreamableHTTPOptions.Stateless = true`. If you
want to expose the new protocol over HTTP, set `Stateless = true`; if
you want to keep stateful sessions, your clients will negotiate down to
`2025-11-25`.

Backward compatibility with `2025-11-25` and earlier is preserved on
every endpoint. The SDK negotiates the highest mutually-supported
version at connect time. The new protocol is enabled by default for new
clients; existing legacy clients and servers continue to work unchanged.

This release consolidates everything shipped in `v1.7.0-pre.1`,
`v1.7.0-pre.2`, and `v1.7.0-pre.3`. Thank you to everyone who exercised
the pre-releases and filed feedback.

`v1.7.0-pre.3` is already [successfully
used](https://github.blog/changelog/2026-07-23-github-mcp-server-supports-the-next-mcp-specification/)
by GitHub, serving more than half a million users.

#### Make MCP Stateless
([SEP-2575](https://redirect.github.com/modelcontextprotocol/modelcontextprotocol/pull/2575))
& Sessionless
([SEP-2567](https://modelcontextprotocol.io/seps/2567-sessionless-mcp))

The `initialize`/`notifications/initialized` handshake is removed in
`2026-07-28`. Each request now carries
`_meta.io.modelcontextprotocol/{protocolVersion,clientInfo,clientCapabilities}`
so the server can validate the peer without state. A new
`server/discover` RPC lets clients learn the server's supported versions
and capabilities up front; the SDK falls back to legacy `initialize` if
discover fails. Resumability (`Last-Event-ID`, standalone GET) is
removed; `ping`, `logging/setLevel`, `resources/subscribe`, and
`resources/unsubscribe` are also removed on this revision and rejected
with `MethodNotFound`.

- mcp: Implement support for SEP-2575 on client side by
[@&#8203;guglielmo-san](https://redirect.github.com/guglielmo-san)
([#&#8203;975](https://redirect.github.com/modelcontextprotocol/go-sdk/pull/975))
- mcp: Implement server-side support for discover method (SEP-2575) by
[@&#8203;guglielmo-san](https://redirect.github.com/guglielmo-san)
([#&#8203;987](https://redirect.github.com/modelcontextprotocol/go-sdk/pull/987))
- mcp: Implement stateless server (SEP-2575) by
[@&#8203;guglielmo-san](https://redirect.github.com/guglielmo-san)
([#&#8203;965](https://redirect.github.com/modelcontextprotocol/go-sdk/pull/965))
- mcp: add support for logging level (SEP-2575) by
[@&#8203;guglielmo-san](https://redirect.github.com/guglielmo-san)
([#&#8203;997](https://redirect.github.com/modelcontextprotocol/go-sdk/pull/997))
- mcp: Remove resumability and introduce
`MissingRequiredClientCapability` error data by
[@&#8203;guglielmo-san](https://redirect.github.com/guglielmo-san)
([#&#8203;1005](https://redirect.github.com/modelcontextprotocol/go-sdk/pull/1005))
- mcp: remove session header handling in stateless mode by
[@&#8203;maciej-kisiel](https://redirect.github.com/maciej-kisiel)
([#&#8203;952](https://redirect.github.com/modelcontextprotocol/go-sdk/pull/952))
- mcp: do not call DELETE for sessionless & doc adjustments by
[@&#8203;maciej-kisiel](https://redirect.github.com/maciej-kisiel)
([#&#8203;960](https://redirect.github.com/modelcontextprotocol/go-sdk/pull/960))
- mcp: Implement retry on advised supportedVersions in
`UnsupportedProtocolVersion` error by
[@&#8203;guglielmo-san](https://redirect.github.com/guglielmo-san)
([#&#8203;989](https://redirect.github.com/modelcontextprotocol/go-sdk/pull/989))
- mcp: Enable legacy initialize fallback on any error by
[@&#8203;guglielmo-san](https://redirect.github.com/guglielmo-san)
([#&#8203;1014](https://redirect.github.com/modelcontextprotocol/go-sdk/pull/1014))

#### Subscriptions listen
([SEP-2575](https://redirect.github.com/modelcontextprotocol/modelcontextprotocol/pull/2575))

The legacy `tools/list_changed`, `prompts/list_changed`,
`resources/list_changed`, and `resources/updated` notifications are
replaced by a single long-lived `subscriptions/listen` request whose
response stream multiplexes every change notification the client opted
into, each tagged with `io.modelcontextprotocol/subscriptionId`. The SDK
opens this stream automatically on `Client.Connect` when the
corresponding list-changed handler is set; servers route notifications
only to subscribed sessions.

- mcp: Implement `subscriptions/listen` rpc (SEP-2575) by
[@&#8203;guglielmo-san](https://redirect.github.com/guglielmo-san)
([#&#8203;1007](https://redirect.github.com/modelcontextprotocol/go-sdk/pull/1007))
- mcp: refactor notification of subscribed sessions by
[@&#8203;guglielmo-san](https://redirect.github.com/guglielmo-san)
([#&#8203;1018](https://redirect.github.com/modelcontextprotocol/go-sdk/pull/1018))

#### Multi Round-Trip Requests
([SEP-2322](https://redirect.github.com/modelcontextprotocol/modelcontextprotocol/pull/2322))

Server-to-client requests for elicitation, sampling, and roots are no
longer issued as fresh JSON-RPC requests. Instead a tool/prompt/resource
handler returns an `InputRequiredResult` whose `inputRequests` field
carries the requests; the client fulfils each and retries the original
call with `inputResponses` populated. The SDK ships client- and
server-side middleware that handles this transparently in both
directions, including a server-side compatibility shim that lets MRTR
handlers also work against legacy clients.

- feat: multi-round-trip request implementation (SEP-2322) by
[@&#8203;yarolegovich](https://redirect.github.com/yarolegovich)
([#&#8203;950](https://redirect.github.com/modelcontextprotocol/go-sdk/pull/950))

#### Cacheable list results
([SEP-2549](https://redirect.github.com/modelcontextprotocol/modelcontextprotocol/pull/2549))

`tools/list`, `prompts/list`, `resources/list`,
`resources/templates/list`, `resources/read`, and `server/discover`
results now carry `ttlMs` and `cacheScope` fields. Clients honour them
as freshness hints to reduce polling; shared intermediaries use
`cacheScope` to decide whether responses may be cached.

- mcp: add ttl for list results (SEP-2549) by
[@&#8203;guglielmo-san](https://redirect.github.com/guglielmo-san)
([#&#8203;1008](https://redirect.github.com/modelcontextprotocol/go-sdk/pull/1008))
- mcp: add Cacheable fields to `DiscoverResult` by
[@&#8203;guglielmo-san](https://redirect.github.com/guglielmo-san)
([#&#8203;1022](https://redirect.github.com/modelcontextprotocol/go-sdk/pull/1022))

#### HTTP standardization
([SEP-2243](https://redirect.github.com/modelcontextprotocol/modelcontextprotocol/pull/2243))

The streamable HTTP transport now mirrors selected fields from the
JSON-RPC body into HTTP headers (`Mcp-Method`, `Mcp-Name`,
`Mcp-Protocol-Version`, `Mcp-Param-*`) so network intermediaries can
route and observe MCP traffic without deep packet inspection. Tools can
declare per-parameter passthrough via `x-mcp-header` annotations on
their input schema. Body↔header mismatches return `-32020
HeaderMismatch`.

- mcp: HTTP Header Standardization for `x-mcp-header` by
[@&#8203;guglielmo-san](https://redirect.github.com/guglielmo-san)
([#&#8203;915](https://redirect.github.com/modelcontextprotocol/go-sdk/pull/915))
- mcp: fix http-standardization (SEP-2243) by
[@&#8203;guglielmo-san](https://redirect.github.com/guglielmo-san)
([#&#8203;1010](https://redirect.github.com/modelcontextprotocol/go-sdk/pull/1010))

#### Deprecation of roots, sampling, and logging
([SEP-2577](https://redirect.github.com/modelcontextprotocol/modelcontextprotocol/pull/2577))

Roots, sampling, and logging are formally deprecated on the `2026-07-28`
revision. The SDK continues to expose the corresponding Go types for
backward compatibility with older peers, but new servers should not rely
on them.

- mcp: Deprecate roots, sampling and logging (SEP-2577) by
[@&#8203;guglielmo-san](https://redirect.github.com/guglielmo-san)
([#&#8203;1017](https://redirect.github.com/modelcontextprotocol/go-sdk/pull/1017))

#### Behavior changes guarded by MCPGODEBUG

Seven escape-hatch flags are added in this release to restore behavior
that changed as part of spec-compliance fixes. All will be removed in
**v1.9.0**.

- **`customresnotfounderrcode=1`** — restore the old `-32002` code for
`ResourceNotFoundError`.
- **`hintomitempty=1`** — restore `omitempty` on
`ToolAnnotations.ReadOnlyHint` and `IdempotentHint`. The default now
always serializes these fields because the Go types are bare `bool` (not
`*bool`), so omitting `false` made it indistinguishable from "unset".
- **`allowsessionsinstateless=1`** — restore session-id handling on
stateless streamable HTTP servers (read/write `Mcp-Session-Id`, accept
`DELETE`). The default behavior is now what the spec requires: stateless
servers ignore session IDs entirely and return `405 Method Not Allowed`
for `DELETE`.
- **`nomethodnotfoundcodeinerror=1`** — restore the previous STDIO
behavior where the JSON-RPC `MethodNotFound` (`-32601`) code is omitted
from the error response for unhandled methods. The default now includes
the code.
- **`noprotocolerrorbody=1`** — restore the previous streamable HTTP
client behavior of not decoding the JSON-RPC error body of a non-2xx
HTTP response. The default now surfaces the underlying JSON-RPC error.
- **`nowrapinvalidparams=1`** — restore the previous behavior of
returning raw `unmarshalParams` errors from receiving handlers instead
of wrapping them as a JSON-RPC `-32602 Invalid params` error. Introduced
by
[#&#8203;1087](https://redirect.github.com/modelcontextprotocol/go-sdk/pull/1087).
- **`disablecompleteparamsvalidation=1`** — restore the previous
behavior of accepting `completion/complete` responses without validating
the presence of the `completion` params object. Introduced by
[#&#8203;1080](https://redirect.github.com/modelcontextprotocol/go-sdk/pull/1080).

#### Other Changes to the SDK

Streamable HTTP transport:

- mcp: allow opt-in to cancel handler ctx on aborted POST by
[@&#8203;guglielmo-san](https://redirect.github.com/guglielmo-san)
([#&#8203;1099](https://redirect.github.com/modelcontextprotocol/go-sdk/pull/1099))
- mcp: enforce body size limit in Streamable connection by
[@&#8203;guglielmo-san](https://redirect.github.com/guglielmo-san)
([#&#8203;1055](https://redirect.github.com/modelcontextprotocol/go-sdk/pull/1055))
- mcp: close HTTP response body from DELETE request in
`streamableClientConn.Close` by
[@&#8203;blackwell-systems](https://redirect.github.com/blackwell-systems)
([#&#8203;929](https://redirect.github.com/modelcontextprotocol/go-sdk/pull/929))
- mcp: write SSE comment on standalone stream so HTTP/2 reverse proxies
flush HEADERS frame by
[@&#8203;jchangx](https://redirect.github.com/jchangx)
([#&#8203;938](https://redirect.github.com/modelcontextprotocol/go-sdk/pull/938))
- mcp: refactor streamable handler control flow by
[@&#8203;maciej-kisiel](https://redirect.github.com/maciej-kisiel)
([#&#8203;949](https://redirect.github.com/modelcontextprotocol/go-sdk/pull/949))
- mcp: add MCPGODEBUG for opt-in Content-Type check by
[@&#8203;guglielmo-san](https://redirect.github.com/guglielmo-san)
([#&#8203;1012](https://redirect.github.com/modelcontextprotocol/go-sdk/pull/1012))
- fix: prevent duplicate in-flight request IDs by
[@&#8203;guglielmo-san](https://redirect.github.com/guglielmo-san)
([#&#8203;1011](https://redirect.github.com/modelcontextprotocol/go-sdk/pull/1011))
- fix: reject duplicate initialize requests by
[@&#8203;he-yufeng](https://redirect.github.com/he-yufeng)
([#&#8203;962](https://redirect.github.com/modelcontextprotocol/go-sdk/pull/962))
- fix(jsonrpc2): decode requests when method key is present by
[@&#8203;piyushbag](https://redirect.github.com/piyushbag)
([#&#8203;1000](https://redirect.github.com/modelcontextprotocol/go-sdk/pull/1000))

Custom methods and MCPGODEBUG-guarded fixes:

- mcp: Allow registration of custom JSON-RPC methods by
[@&#8203;guglielmo-san](https://redirect.github.com/guglielmo-san)
([#&#8203;956](https://redirect.github.com/modelcontextprotocol/go-sdk/pull/956))
- mcp: wrap `unmarshalParams` with jsonrpc error by
[@&#8203;guglielmo-san](https://redirect.github.com/guglielmo-san)
([#&#8203;1087](https://redirect.github.com/modelcontextprotocol/go-sdk/pull/1087))
- mcp: add param check for `CompleteResult` by
[@&#8203;guglielmo-san](https://redirect.github.com/guglielmo-san)
([#&#8203;1080](https://redirect.github.com/modelcontextprotocol/go-sdk/pull/1080))

Additional spec-compliance fixes:

- mcp: update return meta in `DiscoverResult` (SEP-2575) by
[@&#8203;guglielmo-san](https://redirect.github.com/guglielmo-san)
([#&#8203;1097](https://redirect.github.com/modelcontextprotocol/go-sdk/pull/1097))
- mcp: add return type to `subscriptions/listen` by
[@&#8203;guglielmo-san](https://redirect.github.com/guglielmo-san)
([#&#8203;1088](https://redirect.github.com/modelcontextprotocol/go-sdk/pull/1088))
- mcp: reject calls to `server/discover` for `<2026-07-28` requests by
[@&#8203;guglielmo-san](https://redirect.github.com/guglielmo-san)
([#&#8203;1084](https://redirect.github.com/modelcontextprotocol/go-sdk/pull/1084))
- mcp: include `resultType` on new-protocol responses by
[@&#8203;ychampion](https://redirect.github.com/ychampion)
([#&#8203;1060](https://redirect.github.com/modelcontextprotocol/go-sdk/pull/1060))
- mcp: infer elicit mode from `ElicitParams` by
[@&#8203;guglielmo-san](https://redirect.github.com/guglielmo-san)
([#&#8203;1078](https://redirect.github.com/modelcontextprotocol/go-sdk/pull/1078))
- mcp: do not `ApplyDefault` when `res.Content == nil` by
[@&#8203;guglielmo-san](https://redirect.github.com/guglielmo-san)
([#&#8203;1069](https://redirect.github.com/modelcontextprotocol/go-sdk/pull/1069))
- mcp: do not exclude Notifications from carrying `InitializeParams` in
Meta by
[@&#8203;guglielmo-san](https://redirect.github.com/guglielmo-san)
([#&#8203;1049](https://redirect.github.com/modelcontextprotocol/go-sdk/pull/1049))
- mcp: cap negotiated `protocolVersion` in legacy initialize to
`protocolVersion20251125` by
[@&#8203;guglielmo-san](https://redirect.github.com/guglielmo-san)
([#&#8203;1051](https://redirect.github.com/modelcontextprotocol/go-sdk/pull/1051))
- mcp: make `NotificationSubscriptions` a mandatory field by
[@&#8203;guglielmo-san](https://redirect.github.com/guglielmo-san)
([#&#8203;1050](https://redirect.github.com/modelcontextprotocol/go-sdk/pull/1050))
- mcp: do not enforce TTL on cached tool by
[@&#8203;guglielmo-san](https://redirect.github.com/guglielmo-san)
([#&#8203;1053](https://redirect.github.com/modelcontextprotocol/go-sdk/pull/1053))
- mcp: block server-initiated requests (SEP-2322) by
[@&#8203;guglielmo-san](https://redirect.github.com/guglielmo-san)
([#&#8203;1057](https://redirect.github.com/modelcontextprotocol/go-sdk/pull/1057))
- fix: extra wrapper for input response map by
[@&#8203;yarolegovich](https://redirect.github.com/yarolegovich)
([#&#8203;1045](https://redirect.github.com/modelcontextprotocol/go-sdk/pull/1045))
- fix: do not `omitempty` `ReadOnlyHint` in `ToolAnnotations` by
[@&#8203;pvlbzn](https://redirect.github.com/pvlbzn)
([#&#8203;908](https://redirect.github.com/modelcontextprotocol/go-sdk/pull/908))
- fix: add implementation description metadata by
[@&#8203;he-yufeng](https://redirect.github.com/he-yufeng)
([#&#8203;981](https://redirect.github.com/modelcontextprotocol/go-sdk/pull/981))
- fix(mcp): prevent SIGSEGV in `AddTool` when schema is nil by
[@&#8203;wucm667](https://redirect.github.com/wucm667)
([#&#8203;918](https://redirect.github.com/modelcontextprotocol/go-sdk/pull/918))
- mcp: `tool.InputSchema` and `tool.OutputSchema` validation (SEP-2106)
by [@&#8203;guglielmo-san](https://redirect.github.com/guglielmo-san)
([#&#8203;1009](https://redirect.github.com/modelcontextprotocol/go-sdk/pull/1009))
- mcp: update JSON-RPC error codes to align with updated MCP
specification by
[@&#8203;guglielmo-san](https://redirect.github.com/guglielmo-san)
([#&#8203;1016](https://redirect.github.com/modelcontextprotocol/go-sdk/pull/1016))
- mcp: bump protocol version from `2026-06-30` to `2026-07-28` by
[@&#8203;guglielmo-san](https://redirect.github.com/guglielmo-san)
([#&#8203;1015](https://redirect.github.com/modelcontextprotocol/go-sdk/pull/1015))
- mcp: add `2026-07-28` to the supported protocol versions by
[@&#8203;guglielmo-san](https://redirect.github.com/guglielmo-san)
([#&#8203;1020](https://redirect.github.com/modelcontextprotocol/go-sdk/pull/1020))
- mcp: derive Mcp-Protocol-Version header from the outgoing message by
\[[@&#8203;jan-xyz](https://redirect.github.com/jan-xyz)]

Auth and OAuth:

- auth: support OAuth2 session persistence by
[@&#8203;smlx](https://redirect.github.com/smlx)
([#&#8203;1058](https://redirect.github.com/modelcontextprotocol/go-sdk/pull/1058))
- mcp: align resource not found error code with
[SEP-2164](https://redirect.github.com/modelcontextprotocol/modelcontextprotocol/pull/2164)
by [@&#8203;yarolegovich](https://redirect.github.com/yarolegovich)
([#&#8203;931](https://redirect.github.com/modelcontextprotocol/go-sdk/pull/931))
- mcp: OIDC-Flavored Refresh Token Guidance
([SEP-2207](https://redirect.github.com/modelcontextprotocol/modelcontextprotocol/pull/2207))
by [@&#8203;guglielmo-san](https://redirect.github.com/guglielmo-san)
([#&#8203;939](https://redirect.github.com/modelcontextprotocol/go-sdk/pull/939))
- mcp: add client-side scope accumulation
([SEP-2350](https://redirect.github.com/modelcontextprotocol/modelcontextprotocol/pull/2350))
by [@&#8203;guglielmo-san](https://redirect.github.com/guglielmo-san)
([#&#8203;944](https://redirect.github.com/modelcontextprotocol/go-sdk/pull/944))
- mcp: add optional issuer validator for pre-registered client
validation
([SEP-2352](https://redirect.github.com/modelcontextprotocol/modelcontextprotocol/pull/2352))
by [@&#8203;guglielmo-san](https://redirect.github.com/guglielmo-san)
([#&#8203;946](https://redirect.github.com/modelcontextprotocol/go-sdk/pull/946))
- auth: issuer mix-up mitigation
([SEP-2468](https://redirect.github.com/modelcontextprotocol/modelcontextprotocol/pull/2468))
by [@&#8203;max-stytch](https://redirect.github.com/max-stytch)
([#&#8203;859](https://redirect.github.com/modelcontextprotocol/go-sdk/pull/859))
- auth: compare auth server metadata issuer ignoring trailing slash by
[@&#8203;gainsley](https://redirect.github.com/gainsley)
([#&#8203;955](https://redirect.github.com/modelcontextprotocol/go-sdk/pull/955))
- auth: bind refreshing token source to a background context, not the
request ctx by [@&#8203;toabctl](https://redirect.github.com/toabctl)
([#&#8203;988](https://redirect.github.com/modelcontextprotocol/go-sdk/pull/988))
- auth: add `ClockSkew` option to `RequireBearerTokenOptions` by
[@&#8203;BorisTyshkevich](https://redirect.github.com/BorisTyshkevich)
([#&#8203;969](https://redirect.github.com/modelcontextprotocol/go-sdk/pull/969))
- auth: add `AllowMissingExpiration` option to
`RequireBearerTokenOptions` by
[@&#8203;BorisTyshkevich](https://redirect.github.com/BorisTyshkevich)
([#&#8203;971](https://redirect.github.com/modelcontextprotocol/go-sdk/pull/971))
- oauthex: add `MatchesResource` helper (RFC 9728/8707 audience
comparison) by
[@&#8203;BorisTyshkevich](https://redirect.github.com/BorisTyshkevich)
([#&#8203;970](https://redirect.github.com/modelcontextprotocol/go-sdk/pull/970))
- fix: handle `oauth2.RetrieveError` during token refresh by
[@&#8203;smlx](https://redirect.github.com/smlx)
([#&#8203;917](https://redirect.github.com/modelcontextprotocol/go-sdk/pull/917))

Session, keepalive and misc:

- mcp: use `golang.org/x/time/rate` for `LoggingHandler` rate limiting
by [@&#8203;wucm667](https://redirect.github.com/wucm667)
([#&#8203;927](https://redirect.github.com/modelcontextprotocol/go-sdk/pull/927))
- mcp: add configurable keepalive failure threshold by
[@&#8203;tdabasinskas](https://redirect.github.com/tdabasinskas)
([#&#8203;982](https://redirect.github.com/modelcontextprotocol/go-sdk/pull/982))
- mcp: remove outdated comment by
[@&#8203;guglielmo-san](https://redirect.github.com/guglielmo-san)
([#&#8203;1003](https://redirect.github.com/modelcontextprotocol/go-sdk/pull/1003))

Conformance tests, documentation and CI:

- mcp: add integration for server conformance tests by
[@&#8203;guglielmo-san](https://redirect.github.com/guglielmo-san)
([#&#8203;1054](https://redirect.github.com/modelcontextprotocol/go-sdk/pull/1054))
- mcp: add conformance tests on client by
[@&#8203;guglielmo-san](https://redirect.github.com/guglielmo-san)
([#&#8203;1063](https://redirect.github.com/modelcontextprotocol/go-sdk/pull/1063))
- mcp: Upgrade conformance test to latest available deployment by
[@&#8203;guglielmo-san](https://redirect.github.com/guglielmo-san)
([#&#8203;1021](https://redirect.github.com/modelcontextprotocol/go-sdk/pull/1021))
- mcp: add documentation for new protocol version by
[@&#8203;guglielmo-san](https://redirect.github.com/guglielmo-san)
([#&#8203;1019](https://redirect.github.com/modelcontextprotocol/go-sdk/pull/1019))
- mcp: update docs references by
[@&#8203;guglielmo-san](https://redirect.github.com/guglielmo-san)
([#&#8203;1023](https://redirect.github.com/modelcontextprotocol/go-sdk/pull/1023))
- docs: update docs by
[@&#8203;guglielmo-san](https://redirect.github.com/guglielmo-san)
([#&#8203;1089](https://redirect.github.com/modelcontextprotocol/go-sdk/pull/1089))
- docs: update `troubleshoot.md` to include `resultType` by
[@&#8203;guglielmo-san](https://redirect.github.com/guglielmo-san)
([#&#8203;1081](https://redirect.github.com/modelcontextprotocol/go-sdk/pull/1081))
- ci: update dependabot rules by
[@&#8203;guglielmo-san](https://redirect.github.com/guglielmo-san)
([#&#8203;1059](https://redirect.github.com/modelcontextprotocol/go-sdk/pull/1059))
- ci: fix nightly runs by
[@&#8203;guglielmo-san](https://redirect.github.com/guglielmo-san)
([#&#8203;1086](https://redirect.github.com/modelcontextprotocol/go-sdk/pull/1086))
- build(deps): bump `github/codeql-action` from 4.35.1 to 4.35.2 by
[@&#8203;dependabot](https://redirect.github.com/dependabot)
([#&#8203;922](https://redirect.github.com/modelcontextprotocol/go-sdk/pull/922))
- build(deps): bump `github/codeql-action` from 4.35.2 to 4.36.0 by
[@&#8203;dependabot](https://redirect.github.com/dependabot)
([#&#8203;986](https://redirect.github.com/modelcontextprotocol/go-sdk/pull/986))
- build(deps): bump the codeql-action group with 3 updates by
[@&#8203;dependabot](https://redirect.github.com/dependabot)
([#&#8203;1064](https://redirect.github.com/modelcontextprotocol/go-sdk/pull/1064))
- build(deps): bump `actions/cache` from 5.0.4 to 5.0.5 by
[@&#8203;dependabot](https://redirect.github.com/dependabot)
([#&#8203;923](https://redirect.github.com/modelcontextprotocol/go-sdk/pull/923))
- build(deps): bump `actions/cache` from 5.0.5 to 6.1.0 by
[@&#8203;dependabot](https://redirect.github.com/dependabot)
([#&#8203;1065](https://redirect.github.com/modelcontextprotocol/go-sdk/pull/1065))
- build(deps): bump `actions/setup-node` from 6.3.0 to 6.4.0 by
[@&#8203;dependabot](https://redirect.github.com/dependabot)
([#&#8203;921](https://redirect.github.com/modelcontextprotocol/go-sdk/pull/921))
- build(deps): bump `actions/upload-artifact` from 7.0.0 to 7.0.1 by
[@&#8203;dependabot](https://redirect.github.com/dependabot)
([#&#8203;920](https://redirect.github.com/modelcontextprotocol/go-sdk/pull/920))
- build(deps): bump `actions/checkout` from 6.0.2 to 7.0.0 by
[@&#8203;dependabot](https://redirect.github.com/dependabot)
([#&#8203;1040](https://redirect.github.com/modelcontextprotocol/go-sdk/pull/1040))
- build(deps): bump `actions/setup-python` from 6.2.0 to 6.3.0 by
[@&#8203;dependabot](https://redirect.github.com/dependabot)
([#&#8203;1038](https://redirect.github.com/modelcontextprotocol/go-sdk/pull/1038))
- build(deps): bump `actions/setup-go` from 6.4.0 to 6.5.0 by
[@&#8203;dependabot](https://redirect.github.com/dependabot)
([#&#8203;1066](https://redirect.github.com/modelcontextprotocol/go-sdk/pull/1066))
- build(deps): bump `github/codeql-action/upload-sarif` from 4.36.0 to
4.36.2 by [@&#8203;dependabot](https://redirect.github.com/dependabot)
([#&#8203;1039](https://redirect.github.com/modelcontextprotocol/go-sdk/pull/1039))

#### New Contributors

-
[@&#8203;MatyasVondraOutreach](https://redirect.github.com/MatyasVondraOutreach)
made their first contribution in
[#&#8203;877](https://redirect.github.com/modelcontextprotocol/go-sdk/pull/877)
- [@&#8203;rafaeljusto](https://redirect.github.com/rafaeljusto) made
their first contribution in
[#&#8203;878](https://redirect.github.com/modelcontextprotocol/go-sdk/pull/878)
- [@&#8203;begelundmuller](https://redirect.github.com/begelundmuller)
made their first contribution in
[#&#8203;856](https://redirect.github.com/modelcontextprotocol/go-sdk/pull/856)
- [@&#8203;Dinesht04](https://redirect.github.com/Dinesht04) made their
first contribution in
[#&#8203;883](https://redirect.github.com/modelcontextprotocol/go-sdk/pull/883)
- [@&#8203;N-Masi](https://redirect.github.com/N-Masi) made their first
contribution in
[#&#8203;896](https://redirect.github.com/modelcontextprotocol/go-sdk/pull/896)
- [@&#8203;jpugliesi](https://redirect.github.com/jpugliesi) made their
first contribution in
[#&#8203;888](https://redirect.github.com/modelcontextprotocol/go-sdk/pull/888)
-
[@&#8203;blackwell-systems](https://redirect.github.com/blackwell-systems)
made their first contribution in
[#&#8203;929](https://redirect.github.com/modelcontextprotocol/go-sdk/pull/929)
- [@&#8203;smlx](https://redirect.github.com/smlx) made their first
contribution in
[#&#8203;917](https://redirect.github.com/modelcontextprotocol/go-sdk/pull/917)
- [@&#8203;yarolegovich](https://redirect.github.com/yarolegovich) made
their first contribution in
[#&#8203;931](https://redirect.github.com/modelcontextprotocol/go-sdk/pull/931)
- [@&#8203;wucm667](https://redirect.github.com/wucm667) made their
first contribution in
[#&#8203;918](https://redirect.github.com/modelcontextprotocol/go-sdk/pull/918)
- [@&#8203;jchangx](https://redirect.github.com/jchangx) made their
first contribution in
[#&#8203;938](https://redirect.github.com/modelcontextprotocol/go-sdk/pull/938)
- [@&#8203;gainsley](https://redirect.github.com/gainsley) made their
first contribution in
[#&#8203;955](https://redirect.github.com/modelcontextprotocol/go-sdk/pull/955)
- [@&#8203;he-yufeng](https://redirect.github.com/he-yufeng) made their
first contribution in
[#&#8203;962](https://redirect.github.com/modelcontextprotocol/go-sdk/pull/962)
- [@&#8203;pvlbzn](https://redirect.github.com/pvlbzn) made their first
contribution in
[#&#8203;908](https://redirect.github.com/modelcontextprotocol/go-sdk/pull/908)
- [@&#8203;max-stytch](https://redirect.github.com/max-stytch) made
their first contribution in
[#&#8203;859](https://redirect.github.com/modelcontextprotocol/go-sdk/pull/859)
- [@&#8203;tdabasinskas](https://redirect.github.com/tdabasinskas) made
their first contribution in
[#&#8203;982](https://redirect.github.com/modelcontextprotocol/go-sdk/pull/982)
- [@&#8203;BorisTyshkevich](https://redirect.github.com/BorisTyshkevich)
made their first contribution in
[#&#8203;971](https://redirect.github.com/modelcontextprotocol/go-sdk/pull/971)
- [@&#8203;piyushbag](https://redirect.github.com/piyushbag) made their
first contribution in
[#&#8203;1000](https://redirect.github.com/modelcontextprotocol/go-sdk/pull/1000)
- [@&#8203;toabctl](https://redirect.github.com/toabctl) made their
first contribution in
[#&#8203;988](https://redirect.github.com/modelcontextprotocol/go-sdk/pull/988)
- [@&#8203;ychampion](https://redirect.github.com/ychampion) made their
first contribution in
[#&#8203;1060](https://redirect.github.com/modelcontextprotocol/go-sdk/pull/1060)
- [@&#8203;jan-xyz](https://redirect.github.com/jan-xyz) made their
first contribution in
[#&#8203;1107](https://redirect.github.com/modelcontextprotocol/go-sdk/pull/1107)
- [@&#8203;george1410](https://redirect.github.com/george1410) made
their first contribution in
[#&#8203;1106](https://redirect.github.com/modelcontextprotocol/go-sdk/pull/1106)

**Full Changelog**:
<https://github.com/modelcontextprotocol/go-sdk/compare/v1.6.0...v1.7.0>

</details>

<details>
<summary>openai/openai-go (github.com/openai/openai-go/v3)</summary>

###
[`v3.49.0`](https://redirect.github.com/openai/openai-go/releases/tag/v3.49.0)

[Compare
Source](https://redirect.github.com/openai/openai-go/compare/v3.48.0...v3.49.0)

#### 3.49.0 (2026-07-31)

Full Changelog:
[v3.48.0...v3.49.0](https://redirect.github.com/openai/openai-go/compare/v3.48.0...v3.49.0)

##### Features

- **api:** content provenance checks
([5a46c55](https://redirect.github.com/openai/openai-go/commit/5a46c55e1714343afcf8b99c69c80fb67801e2a8))

##### Documentation

- demonstrate mutual TLS with custom HTTP client
([#&#8203;741](https://redirect.github.com/openai/openai-go/issues/741))
([e862c49](https://redirect.github.com/openai/openai-go/commit/e862c4964615058d518d53a15277c1a2d5945f02))

###
[`v3.48.0`](https://redirect.github.com/openai/openai-go/releases/tag/v3.48.0)

[Compare
Source](https://redirect.github.com/openai/openai-go/compare/v3.47.0...v3.48.0)

#### 3.48.0 (2026-07-30)

Full Changelog:
[v3.47.0...v3.48.0](https://redirect.github.com/openai/openai-\[go/compare/v3.47.0...v3.48.0]\(https://www.golinks.io/compare/v3.47.0...v3.48.0?trackSource=github\))

##### Features

- **api:** fast tier
([cffac28](https://redirect.github.com/openai/openai-\[go/commit/cffac28fd20783bb48a5e69e102e6f327f2adb83]\(https://www.golinks.io/commit/cffac28fd20783bb48a5e69e102e6f327f2adb83?trackSource=github\)))

###
[`v3.47.0`](https://redirect.github.com/openai/openai-go/releases/tag/v3.47.0)

[Compare
Source](https://redirect.github.com/openai/openai-go/compare/v3.46.0...v3.47.0)

#### 3.47.0 (2026-07-28)

Full Changelog:
[v3.46.0...v3.47.0](https://redirect.github.com/openai/openai-go/compare/v3.46.0...v3.47.0)

##### Features

- **api:** transcription model updates
([1707706](https://redirect.github.com/openai/openai-go/commit/1707706e0ac9d8c91d781e218ee3e6c9ac4fc41d))

##### Bug Fixes

- windows platform header normalization
([#&#8203;674](https://redirect.github.com/openai/openai-go/issues/674))
([706d3a8](https://redirect.github.com/openai/openai-go/commit/706d3a8c5c76a211a8cf3db6322eb47ef3713d6f))

##### Build System

- **deps:** bump actions/download-artifact from 7.0.0 to 8.0.1
([#&#8203;739](https://redirect.github.com/openai/openai-go/issues/739))
([2c2a363](https://redirect.github.com/openai/openai-go/commit/2c2a3637f2c50a01a7b2558c41c68913ca693e81))
- **deps:** bump actions/setup-go from 6.4.0 to 7.0.0
([#&#8203;737](https://redirect.github.com/openai/openai-go/issues/737))
([1fcc7ce](https://redirect.github.com/openai/openai-go/commit/1fcc7cef36599d8a0d8f3858fa6c4fe6d27bf241))
- **deps:** bump actions/setup-node from 6.3.0 to 7.0.0
([#&#8203;734](https://redirect.github.com/openai/openai-go/issues/734))
([15562ec](https://redirect.github.com/openai/openai-go/commit/15562ec9fc84b9e26b6e3cad42f7284405b5b36e))
- **deps:** bump actions/upload-artifact from 6.0.0 to 7.0.1
([#&#8203;738](https://redirect.github.com/openai/openai-go/issues/738))
([16fcc6a](https://redirect.github.com/openai/openai-go/commit/16fcc6a835f0791764841f5a6fc3f0d00b6c1e4d))
- **deps:** bump github.com/aws/aws-sdk-go-v2/config in /
([#&#8203;733](https://redirect.github.com/openai/openai-go/issues/733))
([279abc1](https://redirect.github.com/openai/openai-go/commit/279abc1d002c6a87a07470aeae1c3da1e35cfb41))
- **deps:** bump github/codeql-action from 4.37.2 to 4.37.3
([#&#8203;736](https://redirect.github.com/openai/openai-go/issues/736))
([6032a46](https://redirect.github.com/openai/openai-go/commit/6032a4681950b0bc426e5528b5ca4d2a2590b815))

</details>

<details>
<summary>resend/resend-go (github.com/resend/resend-go/v3)</summary>

###
[`v3.12.0`](https://redirect.github.com/resend/resend-go/releases/tag/v3.12.0)

[Compare
Source](https://redirect.github.com/resend/resend-go/compare/v3.11.0...v3.12.0)

#### What's Changed

- feat: add suppressions endpoints by
[@&#8203;felipefreitag](https://redirect.github.com/felipefreitag) in
[#&#8203;141](https://redirect.github.com/resend/resend-go/pull/141)
- chore: bump version to 3.12.0 by
[@&#8203;dielduarte](https://redirect.github.com/dielduarte) in
[#&#8203;142](https://redirect.github.com/resend/resend-go/pull/142)

**Full Changelog**:
<https://github.com/resend/resend-go/compare/v3.11.0...v3.12.0>

</details>

<details>
<summary>gitlab-org/api/client-go
(gitlab.com/gitlab-org/api/client-go/v2)</summary>

###
[`v2.55.1`](https://gitlab.com/gitlab-org/api/client-go/tags/v2.55.1)

[Compare
Source](https://gitlab.com/gitlab-org/api/client-go/compare/v2.55.0...v2.55.1)

#### 2.55.1

##### 🐛 Bug Fixes

- fix(feature_flags): omit ProjectFeatureFlagScope.ID when unset
([!2969](https://gitlab.com/gitlab-org/api/client-go/-/merge_requests/2969))
by [Radek Antoniuk](https://gitlab.com/rantoniuk)

####
[2.55.1](https://gitlab.com/gitlab-org/api/client-go/compare/v2.55.0...v2.55.1)
(2026-07-31)
##### Bug Fixes

* **feature_flags:** omit ProjectFeatureFlagScope.ID when unset
([aadece3](https://gitlab.com/gitlab-org/api/client-go/commit/aadece3c293676a500f44c6d17f4216ed6958af2))

###
[`v2.55.0`](https://gitlab.com/gitlab-org/api/client-go/tags/v2.55.0)

[Compare
Source](https://gitlab.com/gitlab-org/api/client-go/compare/v2.54.0...v2.55.0)

#### 2.55.0

##### 🚀 Features

- fix(workitems): send status widget when creating a work item
([!2970](https://gitlab.com/gitlab-org/api/client-go/-/merge_requests/2970))
by [Radek Antoniuk](https://gitlab.com/rantoniuk)

##### 🔄 Other Changes

- chore(deps): update module golang.org/x/sys to v0.47.0
([!2937](https://gitlab.com/gitlab-org/api/client-go/-/merge_requests/2937))
by [GitLab Dependency
Bot](https://gitlab.com/gitlab-dependency-update-bot)

###
[2.55.0](https://gitlab.com/gitlab-org/api/client-go/compare/v2.54.0...v2.55.0)
(2026-07-31)
##### Bug Fixes

* **workitems:** send status widget when creating a work item
([e9d1c49](https://gitlab.com/gitlab-org/api/client-go/commit/e9d1c498719c344ef033ca8d32715c335ec98265))

###
[`v2.54.0`](https://gitlab.com/gitlab-org/api/client-go/tags/v2.54.0)

[Compare
Source](https://gitlab.com/gitlab-org/api/client-go/compare/v2.53.0...v2.54.0)

#### 2.54.0

##### 🚀 Features

- Add custom attributes filtering for projects
([!2965](https://gitlab.com/gitlab-org/api/client-go/-/merge_requests/2965))
by [Giannis Kepas](https://gitlab.com/gkepas)
- feat(feature_flags): support gitlabUserList and strategy removal
([!2964](https://gitlab.com/gitlab-org/ap

> ✂ **Note**
>
> PR body was truncated to here.

</details>

---

### Configuration

📅 **Schedule**: (in timezone Europe/London)

- Branch creation
  - "after 6pm on thursday,before 10am on friday"
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config
help](https://redirect.github.com/renovatebot/renovate/discussions) if
that's undesired.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/overmindtech/workspace).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4zLjIiLCJ1cGRhdGVkSW5WZXIiOiI0NC4zLjIiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbImRlcGVuZGVuY2llcyIsImdvbGFuZyJdfQ==-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
GitOrigin-RevId: c4581a074d22b3e000cb8f1565e148d702e80e44
## Summary
- Persist Auth0/IdP profile picture URLs on
`principal_identities.picture_url` and sync them on `GetPrincipalStatus`
with presence-aware OIDC parsing (absent/null no-op, empty clears, HTTPS
write).
- Expose `picture_url` on `Principal`, `WorkspaceMember`, and
`JoinableWorkspaceMember`; wire profile, members, and join avatar UI
(social cards use `ProfileAvatar`, not brand icons).
- Extend Brent SPA CSP `img-src` for common IdP avatar hosts so photos
are not blocked.

Plan ID: BRENT-803
Fixes ENG-6018

## Test plan
- [ ] `go test` for principals picture validation, auth0 userinfo
presence, joinable preview mapping, SPA CSP img-src hosts
- [ ] Integration: `TestGetPrincipalStatusEndpoint_SyncsAuth0PictureURL`
(write / absent no-op / empty clear / fetch failure keeps URL)
- [x] Frontend vitest for SocialIdentityCard, CurrentProfile,
members/join mappers
- [x] Manual: sign in with Google/GitHub, confirm photo on Profile,
Members, Join cards; email path shows initials when no picture

Made with [Cursor](https://cursor.com)

---------

Co-authored-by: Cursor <cursoragent@cursor.com>
GitOrigin-RevId: 93024fbbb4ec7bea5517acd11bb84883b9dd7daa
Summary
Makes /bitbucket/forge/link the canonical authenticated claim route
while retaining the legacy route temporarily.
Renames Forge-specific customer copy to Until Bot and Connect to Until.
Prepares deployment references for the coordinated Until Bitbucket
1Password item rename.
Linear Ticket
Part of:
[ENG-5936](https://linear.app/overmind/issue/ENG-5936/rename-the-bitbucket-forge-app-and-repository-to-until)
— Rename the Bitbucket Forge app and repository to Until

Purpose: Present an Until-branded Bitbucket Forge integration without
breaking existing installations or connection behavior.
Blocks: ENG-6004, ENG-5979, and ENG-5959.
Changes
Registers authenticated canonical and legacy claim-redemption routes
using the same backend handler.
Switches the SPA and local proxy to /bitbucket/forge/link.
Updates Forge-specific setup, reconnect, conflict, onboarding, and
operator copy.
Updates documentation and generated protobuf comments.
Changes title-based secret references from Brent Bitbucket to Until
Bitbucket while preserving values and environment-variable names.
Leaves app IDs, credentials, OAuth login clients, webhook hosts,
absolute URLs, scopes, wire contracts, and internal identifiers
unchanged.
Adds route and frontend request coverage and updates affected copy
assertions.
Validation
Scoped backend Go tests passed.
Affected frontend Vitest tests passed.
Targeted frontend lint passed.
SDP generation, Go build/vet, IDE diagnostics, and git diff --check
passed.
Full frontend type-check remains blocked by unrelated generated-SDP
export errors.
The external Forge repository, Atlassian app title, GitHub repository
name, and 1Password item must still be changed during the coordinated
rollout.

Brent Plan
Plan ID: BRENT-808

Plan: ENG-5936 Bitbucket Forge Until Rename
Approved by: Daniel Carabas

<!-- CURSOR_SUMMARY -->
---

> [!NOTE]
> **Medium Risk**
> Touches authenticated workspace-binding and dev/prod secret sync for
Bitbucket Forge; behavior is intended to stay equivalent via the legacy
route, but a proxy or ESO misconfiguration could break claim redemption
until rollout completes.
>
> **Overview**
> Rebrands the Bitbucket Forge integration in customer-facing surfaces
from **Brent Bot** / **Connect to Brent** to **Until Bot** / **Connect
to Until**, including SPA setup guidance, backend readiness strings,
plan-submission recovery copy, conflict toasts, and related tests/docs.
>
> **Claim redemption routing:** the SPA now posts to **`POST
/bitbucket/forge/link`**; the backend registers that path as canonical
and keeps **`POST /brent/bitbucket/forge/link`** as a temporary
compatibility alias (same handler). Local nginx proxies
**`/bitbucket/`** to brent-backend alongside the legacy Brent-prefixed
location.
>
> **Deploy/config:** ExternalSecret and devcontainer env **1Password
remote refs** move from `Brent Bitbucket` to **`Until Bitbucket`** for
Forge install URL and app ID; env var names are unchanged. Proto
comments note the **Until Forge app** for webhook ingest.
>
> <sup>Reviewed by [Cursor Bugbot](https://cursor.com/bugbot) for commit
3c4a2fc26199e2a544dd8ce9086ab85d2fba4e6e. Bugbot is set up for automated
code reviews on this repo. Configure
[here](https://www.cursor.com/dashboard/bugbot).</sup>
<!-- /CURSOR_SUMMARY -->

GitOrigin-RevId: 5dabce394cfe2e67bc92d214e23911cbae5f4cfc
<!-- CURSOR_AGENT_PR_BODY_BEGIN -->
## Summary

Adds `plans.ticket_id` as the sole source for Linear/GitLab plan-ticket
sync, replacing title/body scanning.

- Migration adds `ticket_id text NOT NULL DEFAULT ''` with backfill from
`plan_linear_issues` (wins) then `plan_gitlab_issues` (`#iid`)
- Threaded through sqlc, plans Store, MCP (`submit_plan` / `update_plan`
/ `get_plan` / `list_plans`), and Area51 proto
- Linear: `ResolveTicketID` only; GitLab: parse `#N` / bare IID from
`ticket_id` only
- Agent/process docs updated so callers pass MCP `ticket_id` (from
frontmatter `linear_ticket_id`)

Tracked in [ENG-6058](https://linear.app/overmind/issue/ENG-6058).

Plan ID: BRENT-823

Brent-Plan: BRENT-823

<!-- CURSOR_AGENT_PR_BODY_END -->

<div><a
href="https://cursor.com/agents/bc-06e0bd80-7a0f-499f-be3c-8a7a127050ae?cursor_ref=pr_footer&cursor_cta=open_in_web"><picture><source
media="(prefers-color-scheme: dark)"
srcset="https://cursor.com/assets/images/open-in-web-dark.png"><source
media="(prefers-color-scheme: light)"
srcset="https://cursor.com/assets/images/open-in-web-light.png"><img
alt="Open in Web" width="114" height="28"
src="https://cursor.com/assets/images/open-in-web-dark.png"></picture></a>&nbsp;<a
href="https://cursor.com/background-agent?bcId=bc-06e0bd80-7a0f-499f-be3c-8a7a127050ae&cursor_ref=pr_footer&cursor_cta=open_in_cursor"><picture><source
media="(prefers-color-scheme: dark)"
srcset="https://cursor.com/assets/images/open-in-cursor-dark.png"><source
media="(prefers-color-scheme: light)"
srcset="https://cursor.com/assets/images/open-in-cursor-light.png"><img
alt="Open in Cursor" width="131" height="28"
src="https://cursor.com/assets/images/open-in-cursor-dark.png"></picture></a>&nbsp;</div>

---------

Co-authored-by: Cursor Agent <cursoragent@cursor.com>
Co-authored-by: Dylan <dylanratcliffe@users.noreply.github.com>
GitOrigin-RevId: bf5fadbc9715f1bc0ca243c637420449dc44deb3
## Summary
- Make peer-review requirement an explicit workspace policy (`disabled`
/ `required`), snapshotted onto each new plan, with grandfathering for
existing multi-human workspaces.
- Add operator `GetAccountReviewPolicy` / `UpdateAccountReviewPolicy`
RPCs with audited updates and a two-human enablement precondition.
- Enforce `not_required` authoritatively in the shared review store
(customer, operator, and in-tx creation paths) while keeping
MCP/workflow no-op UX and tools listed.

Plan ID: BRENT-824

## Plan differences (intentional)
- `changed-nonmember-update-attributed-to-system-principal`: When an
Area51 operator is not a member of the target workspace, there is no
local human principal for `review_policy_updated_by` (tenant-scoped FK).
We store the workspace system principal there and put the operator’s
Auth0 subject on the audit event actor. Member operators are still
attributed to their own principal.

## Test plan
- [x] Migration tests for schema defaults, reason-check expansion, and
grandfathering
- [x] Workspace policy store tests (threshold, audit, membership
immutability)
- [x] Plan creation matrix under disabled/required policies
- [x] Review store refuses `not_required` on RequestReview /
AdminRequestReview / CreateReviewInTx
- [x] MCP/operator handler contract tests
- [x] `golangci-lint` on modified packages
- [ ] Confirm Plan check / deviation analysis on the draft PR

Made with [Cursor](https://cursor.com)

---------

Co-authored-by: Cursor <cursoragent@cursor.com>
GitOrigin-RevId: 554565d5d3e46ffdca303233cc45e22b48109d14
<!-- CURSOR_AGENT_PR_BODY_BEGIN -->
## Summary

This PR delivers the account/workspace health slice of the *Replace
Brent in customer messages* milestone in the *Rename Brent → Until*
project, tracked in
[ENG-5952](https://linear.app/overmind/issue/ENG-5952/rename-customer-facing-account-health-messages-to-until).

## Changes

Updates the `AccountHealthFinding` titles, details, and comments in
`buildAccountHealthFindings` to use Until vocabulary per the [naming
worksheet](docs/design/until-rename/naming-worksheet.md):

| # | Current title | New title |
|---|---|---|
| 2 | Deviation analysis never runs | **Plan checks never run** |
| 4 | Every analysis is a clean match | **Every Plan check is a clean
match** |
| 5 | High workflow failure rate | **High custom loop failure rate** |
| 7 | Short plans are causing deviations | **Short plans are causing
Plan differences** |

**Detail string vocabulary mapping:**
- "deviation analyses" → "Plan checks"
- "workflow runs" → "custom loop runs"
- "deviation findings" → "Plan differences"
- "Brent" → "Until"

**Also updates:**
- Go source comments above affected findings
- Proto docstring on `AccountHealthFinding` message (regenerated
artifacts)
- Test assertions in `accounts_health_findings_test.go`

## Testing

- All `TestBuildAccountHealthFindings_*` unit tests pass with updated
assertions
- `go build` and `go vet` pass on sdp-go
- `golangci-lint run` passes on modified packages
- `pnpm typecheck` passes on sdp-js

## Out of scope

Per the ticket's *Does not include* clause:
- Metric column names, SQL query names, RPC/proto message names
- Heuristic thresholds and logic
- Telemetry attributes, alert names, `/healthz` infrastructure
- Internal research docs
(`docs/research/nothing-fails-silently-daily-health-digest.md` —
explicitly excluded by the plan)

Brent-Plan: BRENT-832
<!-- CURSOR_AGENT_PR_BODY_END -->

<div><a
href="https://cursor.com/agents/bc-b73474d5-729f-47f1-84b9-6bdf479244cc?cursor_ref=pr_footer&cursor_cta=open_in_web"><picture><source
media="(prefers-color-scheme: dark)"
srcset="https://cursor.com/assets/images/open-in-web-dark.png"><source
media="(prefers-color-scheme: light)"
srcset="https://cursor.com/assets/images/open-in-web-light.png"><img
alt="Open in Web" width="114" height="28"
src="https://cursor.com/assets/images/open-in-web-dark.png"></picture></a>&nbsp;<a
href="https://cursor.com/background-agent?bcId=bc-b73474d5-729f-47f1-84b9-6bdf479244cc&cursor_ref=pr_footer&cursor_cta=open_in_cursor"><picture><source
media="(prefers-color-scheme: dark)"
srcset="https://cursor.com/assets/images/open-in-cursor-dark.png"><source
media="(prefers-color-scheme: light)"
srcset="https://cursor.com/assets/images/open-in-cursor-light.png"><img
alt="Open in Cursor" width="131" height="28"
src="https://cursor.com/assets/images/open-in-cursor-dark.png"></picture></a>&nbsp;</div>

Co-authored-by: Cursor Agent <cursoragent@cursor.com>
Co-authored-by: Lionel Wilson <Lionel-Wilson@users.noreply.github.com>
GitOrigin-RevId: 0fb55d2038461c43133382ceffc49dbb4526a21b
… (#6251)

## Summary

- Introduce Until wire contracts inside the existing `sdp/brent.proto`
file (`package until`, Workspace/Public/Admin services,
PlanCheck/PlanDifference/Loop renames) while keeping `brent*` generated
basenames so Copybara isolation stays intact.
- Dual-register Connect: generated `/until.*` handlers plus a Go façade
for every legacy `/brent.*` RPC; Event read aliases + legacy trigger
names; dual CEL schema families with composite cache identity.
- Ship non-Atlas Event `payload_type`/key backfill builders (execution
owned by dogfood/production cutover tickets) and document the
Until-content-in-`brent*` wart for ENG-5977.

## Linear Ticket

Fixes:
[ENG-5960](https://linear.app/overmind/issue/ENG-5960/prepare-until-protobuf-api-event-rpc-and-sdk-contracts)
— Prepare Until protobuf, API, Event, RPC, and SDK contracts

- **Purpose**: Make Until API/SDK contracts available beside legacy
contracts without breaking stored Events, CEL, generated clients, or
internal API isolation.
- **Blocks**: ENG-5962 (Plan-ID migration), ENG-5972 (CEL/template
migration), ENG-5973 (pre-switch baseline), ENG-5974 (dogfood switch),
ENG-5979 (literal-zero checks)

## Changes

**Proto / codegen**
- `sdp/brent.proto` → `package until` with ENG-5923 symbol renames;
field/oneof numbers preserved; file **not** renamed to `until.proto`.
- Regenerated Go/TS (`brent*` basenames). `sdp-js` exports point at
Workspace/Admin/Public connectquery modules.
- Go identifier collision with `account.AdminService`: wire path stays
`/until.AdminService/`; Go symbols are `UntilAdminService*` via
`sdp/scripts/disambiguate_until_admin_go.py` (part of `pnpm build`).

**Connect**
- Mount Until handlers; legacy `/brent.BrentService|Public|Admin/`
façade rewrites all 94 RPCs (including renamed methods such as
`GetBrentSettings` → `GetPlanCheckSettings`) onto shared handlers with
auth parity. Exhaustive table-driven mount tests.

**Events / triggers / CEL**
- Stored-name + protojson key aliases on read; writes emit Until message
names.
- `EventTypeName` still returns Brent-era PascalCase for `on:` matching
until ENG-5969.
- CEL: `until.Event`, legacy vs until schema families, cache keyed by
`(schemaFamily, expression)`; default = legacy.

**Backfill / isolation**
- `services/brent-backend/build/backfill-until-rename` (+ pure
`events.BackfillStoredEventPayload`) — dry-run/idempotent; not executed
against environments here.
- Isolation docs/rule/BUGBOT note Until content under `brent*` until
ENG-5977 tickets the filename/glob rename. Copybara isolation check
passes.

**Out of scope (by design)**
- MCP renames (ENG-5966/5967), environment backfill execution
(ENG-5974/5980), customer CEL/template rewrites (ENG-5972), trigger
vocabulary cutover (ENG-5969), `brent.proto` → `until.proto` file rename
(ENG-5977).

## Until Plan

Plan ID: BRENT-839

- **Plan**: Prepare Until protobuf, API, Event, RPC, and SDK contracts
- **Approved by**: Elliot Waddington
- **Pending reviews**: none

> Deviation analysis and reviewer assignment are handled automatically
by the
> pre-approved PR review automation (see docs/PREAPPROVED_CHANGES.md).

<!-- CURSOR_SUMMARY -->
---

> [!NOTE]
> **High Risk**
> Touches public RPC paths, event/CEL compatibility, and proto wire
contracts; a mistake in dual-registration or aliases could break legacy
and Until clients together.
>
> **Overview**
> Introduces **Until** wire contracts while keeping **`brent*` generated
basenames** so Copybara isolation is unchanged: `sdp/brent.proto` is now
`package until` with renamed services/messages (e.g. `WorkspaceService`,
`PlanCheckCompleted`), with field numbers preserved and the file **not**
renamed to `until.proto` (documented wart until ENG-5977).
>
> **Runtime compatibility** (per PR scope): dual Connect mounts on
`/until.*` and legacy `/brent.*` façades to the same handlers; event
read aliases and dual CEL schema families; backfill tooling for stored
payload types (not executed in this PR).
>
> **In this diff:** dev **nginx** on port 5000 proxies
**`/until.WorkspaceService/`**, **`/until.AdminService/`**, and
**`/until.PublicService/`** (SSE settings) and adds
**`/brent.BrentPublicService/`**; **Copybara isolation** docs and the
Cursor rule now require **`brent*.proto`** for Until product API content
and call out the intentional Until-in-`brent.proto` naming.
>
> <sup>Reviewed by [Cursor Bugbot](https://cursor.com/bugbot) for commit
704e045ce7b3fbbd5964744341a4dc7fb276c3e6. Bugbot is set up for automated
code reviews on this repo. Configure
[here](https://www.cursor.com/dashboard/bugbot).</sup>
<!-- /CURSOR_SUMMARY -->

GitOrigin-RevId: c64812f22ce58c63a790b7080577d6ec5cb5832e
## Summary
- Raise joinable-list member preview cap from 3→4 (SQL, handler, proto,
stubs, tests).
- Add `ProfileAvatarStack` `totalCount` so overflow uses membership
total (`N = total − 3` for 5+) instead of padded avatar-array length.
- Stop inventing empty placeholder faces in the join mapper; card passes
`memberCount` through as `totalCount`.

Follow-up to #6253.

Plan ID: BRENT-845
Ticket: ENG-6104

## Test plan
- [x] Focused Go: `TestToProtoJoinableWorkspace*`, join preview
integration tests
- [x] Focused vitest: ProfileAvatarStack, to-joinable-workspace-row,
JoinableWorkspaceCard
- [x] `pnpm check:brent-app`
- [ ] Dogfood Join with workspaces of 1–5+ members and confirm
faces/remainder match the matrix

Made with [Cursor](https://cursor.com)

Co-authored-by: Cursor <cursoragent@cursor.com>
GitOrigin-RevId: bcdc34f426aff957682895e742d09970e2baa1e2
## Summary

- Add canonical Until MCP, OAuth, discovery, browser, asset, and
capability routes while retaining every legacy Brent route.
- Provision the canonical Until MCP Auth0 audience and scopes for Until
tenants without changing the SPA/Connect authentication contract.
- Keep both route families isolated across audiences, scopes, OAuth
state, cookies, redirects, generated URLs, and frontend journeys.

## Linear Ticket

Fixes:
[ENG-5965](https://linear.app/overmind/issue/ENG-5965/prepare-until-mcp-oauth-discovery-and-asset-routes)
— Prepare Until MCP, OAuth, discovery, and asset routes

- **Purpose**: Make every approved Until MCP, OAuth, discovery, UI,
asset, and capability path work alongside legacy Brent routes with the
final audience and scopes.
- **Blocks**: ENG-5979 final literal-zero checks; ENG-5974 dogfood
cutover and soak; ENG-5966 Until MCP tool and resource names

## Changes

The backend now mounts explicit Until and Brent route-family
configurations over shared MCP and OAuth implementations. It maps
logical MCP permissions to family-specific scopes, preserves downstream
store authorization, advertises family-correct metadata and icons, emits
low-cardinality route telemetry, and generates family-correct
plan-transfer and PR-audit capability URLs.

The shared Auth0 Terraform module can add the canonical `/mcp` resource
server, `until:read`/`until:write` role grants, callbacks, and
dual-audience Action behavior only for Until tenants. The frontend
resolves `mcp` and `brent-mcp` through one shared route tree while
keeping BYO MCP authenticated and unrelated providers excluded.

Tests cover audience and scope isolation, real read/write handlers,
OAuth cookies and state, metadata aliases, route middleware,
capability-token security, frontend family selection, Terraform
contracts, and legacy compatibility. The corresponding backend,
frontend, audit-tool, and Auth0 runbook documentation is updated.

## Until Plan

Plan ID: BRENT-842

- **Plan**: ENG-5965: Add Until MCP routes without breaking Brent
clients
- **Approved by**: Daniel Carabas

> Deviation analysis and reviewer assignment are handled automatically
by the
> pre-approved PR review automation (see docs/PREAPPROVED_CHANGES.md).

Made with [Cursor](https://cursor.com)

---------

Co-authored-by: Cursor <cursoragent@cursor.com>
GitOrigin-RevId: 9b208f38053599d0f73eb636571b556bdf560e2d
> ℹ️ **Note**
>
> This PR body was truncated due to platform limits.

This PR contains the following updates:

| Package | Change |
[Age](https://docs.renovatebot.com/merge-confidence/) |
[Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|
|
[github.com/aws/aws-sdk-go-v2](https://redirect.github.com/aws/aws-sdk-go-v2)
| `v1.43.3` → `v1.43.4` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2faws-sdk-go-v2/v1.43.4?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2faws-sdk-go-v2/v1.43.3/v1.43.4?slim=true)
|
|
[github.com/aws/aws-sdk-go-v2/config](https://redirect.github.com/aws/aws-sdk-go-v2)
| `v1.32.34` → `v1.32.35` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2faws-sdk-go-v2%2fconfig/v1.32.35?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2faws-sdk-go-v2%2fconfig/v1.32.34/v1.32.35?slim=true)
|
|
[github.com/aws/aws-sdk-go-v2/credentials](https://redirect.github.com/aws/aws-sdk-go-v2)
| `v1.19.33` → `v1.19.34` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2faws-sdk-go-v2%2fcredentials/v1.19.34?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2faws-sdk-go-v2%2fcredentials/v1.19.33/v1.19.34?slim=true)
|
|
[github.com/aws/aws-sdk-go-v2/feature/ec2/imds](https://redirect.github.com/aws/aws-sdk-go-v2)
| `v1.18.34` → `v1.18.35` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2faws-sdk-go-v2%2ffeature%2fec2%2fimds/v1.18.35?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2faws-sdk-go-v2%2ffeature%2fec2%2fimds/v1.18.34/v1.18.35?slim=true)
|
|
[github.com/aws/aws-sdk-go-v2/service/apigateway](https://redirect.github.com/aws/aws-sdk-go-v2)
| `v1.42.3` → `v1.42.4` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fapigateway/v1.42.4?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fapigateway/v1.42.3/v1.42.4?slim=true)
|
|
[github.com/aws/aws-sdk-go-v2/service/autoscaling](https://redirect.github.com/aws/aws-sdk-go-v2)
| `v1.70.3` → `v1.71.0` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fautoscaling/v1.71.0?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fautoscaling/v1.70.3/v1.71.0?slim=true)
|
|
[github.com/aws/aws-sdk-go-v2/service/cloudfront](https://redirect.github.com/aws/aws-sdk-go-v2)
| `v1.67.3` → `v1.67.4` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fcloudfront/v1.67.4?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fcloudfront/v1.67.3/v1.67.4?slim=true)
|
|
[github.com/aws/aws-sdk-go-v2/service/cloudwatch](https://redirect.github.com/aws/aws-sdk-go-v2)
| `v1.66.2` → `v1.66.3` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fcloudwatch/v1.66.3?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fcloudwatch/v1.66.2/v1.66.3?slim=true)
|
|
[github.com/aws/aws-sdk-go-v2/service/directconnect](https://redirect.github.com/aws/aws-sdk-go-v2)
| `v1.43.3` → `v1.44.1` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fdirectconnect/v1.44.1?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fdirectconnect/v1.43.3/v1.44.1?slim=true)
|
|
[github.com/aws/aws-sdk-go-v2/service/dynamodb](https://redirect.github.com/aws/aws-sdk-go-v2)
| `v1.62.3` → `v1.63.1` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fdynamodb/v1.63.1?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fdynamodb/v1.62.3/v1.63.1?slim=true)
|
|
[github.com/aws/aws-sdk-go-v2/service/ec2](https://redirect.github.com/aws/aws-sdk-go-v2)
| `v1.318.1` → `v1.320.0` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fec2/v1.320.0?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fec2/v1.318.1/v1.320.0?slim=true)
|
|
[github.com/aws/aws-sdk-go-v2/service/ecs](https://redirect.github.com/aws/aws-sdk-go-v2)
| `v1.89.3` → `v1.90.0` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fecs/v1.90.0?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fecs/v1.89.3/v1.90.0?slim=true)
|
|
[github.com/aws/aws-sdk-go-v2/service/efs](https://redirect.github.com/aws/aws-sdk-go-v2)
| `v1.44.3` → `v1.44.4` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fefs/v1.44.4?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fefs/v1.44.3/v1.44.4?slim=true)
|
|
[github.com/aws/aws-sdk-go-v2/service/eks](https://redirect.github.com/aws/aws-sdk-go-v2)
| `v1.90.3` → `v1.90.4` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2feks/v1.90.4?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2feks/v1.90.3/v1.90.4?slim=true)
|
|
[github.com/aws/aws-sdk-go-v2/service/elasticloadbalancing](https://redirect.github.com/aws/aws-sdk-go-v2)
| `v1.36.3` → `v1.36.4` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2felasticloadbalancing/v1.36.4?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2felasticloadbalancing/v1.36.3/v1.36.4?slim=true)
|
|
[github.com/aws/aws-sdk-go-v2/service/elasticloadbalancingv2](https://redirect.github.com/aws/aws-sdk-go-v2)
| `v1.58.4` → `v1.58.5` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2felasticloadbalancingv2/v1.58.5?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2felasticloadbalancingv2/v1.58.4/v1.58.5?slim=true)
|
|
[github.com/aws/aws-sdk-go-v2/service/iam](https://redirect.github.com/aws/aws-sdk-go-v2)
| `v1.57.1` → `v1.58.1` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fiam/v1.58.1?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fiam/v1.57.1/v1.58.1?slim=true)
|
|
[github.com/aws/aws-sdk-go-v2/service/kms](https://redirect.github.com/aws/aws-sdk-go-v2)
| `v1.55.3` → `v1.55.4` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fkms/v1.55.4?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fkms/v1.55.3/v1.55.4?slim=true)
|
|
[github.com/aws/aws-sdk-go-v2/service/lambda](https://redirect.github.com/aws/aws-sdk-go-v2)
| `v1.101.1` → `v1.101.2` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2flambda/v1.101.2?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2flambda/v1.101.1/v1.101.2?slim=true)
|
|
[github.com/aws/aws-sdk-go-v2/service/networkfirewall](https://redirect.github.com/aws/aws-sdk-go-v2)
| `v1.66.0` → `v1.67.1` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fnetworkfirewall/v1.67.1?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fnetworkfirewall/v1.66.0/v1.67.1?slim=true)
|
|
[github.com/aws/aws-sdk-go-v2/service/networkmanager](https://redirect.github.com/aws/aws-sdk-go-v2)
| `v1.44.3` → `v1.44.4` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fnetworkmanager/v1.44.4?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fnetworkmanager/v1.44.3/v1.44.4?slim=true)
|
|
[github.com/aws/aws-sdk-go-v2/service/rds](https://redirect.github.com/aws/aws-sdk-go-v2)
| `v1.124.0` → `v1.124.1` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2frds/v1.124.1?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2frds/v1.124.0/v1.124.1?slim=true)
|
|
[github.com/aws/aws-sdk-go-v2/service/route53](https://redirect.github.com/aws/aws-sdk-go-v2)
| `v1.65.5` → `v1.65.6` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2froute53/v1.65.6?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2froute53/v1.65.5/v1.65.6?slim=true)
|
|
[github.com/aws/aws-sdk-go-v2/service/s3](https://redirect.github.com/aws/aws-sdk-go-v2)
| `v1.106.3` → `v1.107.0` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fs3/v1.107.0?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fs3/v1.106.3/v1.107.0?slim=true)
|
|
[github.com/aws/aws-sdk-go-v2/service/sesv2](https://redirect.github.com/aws/aws-sdk-go-v2)
| `v1.66.3` → `v1.66.4` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fsesv2/v1.66.4?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fsesv2/v1.66.3/v1.66.4?slim=true)
|
|
[github.com/aws/aws-sdk-go-v2/service/sns](https://redirect.github.com/aws/aws-sdk-go-v2)
| `v1.42.3` → `v1.42.4` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fsns/v1.42.4?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fsns/v1.42.3/v1.42.4?slim=true)
|
|
[github.com/aws/aws-sdk-go-v2/service/sqs](https://redirect.github.com/aws/aws-sdk-go-v2)
| `v1.46.3` → `v1.46.4` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fsqs/v1.46.4?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fsqs/v1.46.3/v1.46.4?slim=true)
|
|
[github.com/aws/aws-sdk-go-v2/service/ssm](https://redirect.github.com/aws/aws-sdk-go-v2)
| `v1.73.3` → `v1.73.4` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fssm/v1.73.4?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fssm/v1.73.3/v1.73.4?slim=true)
|
|
[github.com/aws/aws-sdk-go-v2/service/sts](https://redirect.github.com/aws/aws-sdk-go-v2)
| `v1.45.3` → `v1.45.4` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fsts/v1.45.4?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fsts/v1.45.3/v1.45.4?slim=true)
|

---

> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/370) for more information.

---

### Release Notes

<details>
<summary>aws/aws-sdk-go-v2 (github.com/aws/aws-sdk-go-v2)</summary>

###
[`v1.43.4`](https://redirect.github.com/aws/aws-sdk-go-v2/blob/HEAD/CHANGELOG.md#Release-2026-03-26)

[Compare
Source](https://redirect.github.com/aws/aws-sdk-go-v2/compare/v1.43.3...v1.43.4)

#### General Highlights

- **Dependency Update**: Updated to the latest SDK module versions

#### Module Highlights

- `github.com/aws/aws-sdk-go-v2`: v1.41.5
- **Bug Fix**: Fix a bug where a recorded clock skew could persist on
the client even if the client and server clock ended up realigning.
- `github.com/aws/aws-sdk-go-v2/service/accessanalyzer`:
[v1.45.12](service/accessanalyzer/CHANGELOG.md#v14512-2026-03-26)
- **Bug Fix**: Fix a bug where a recorded clock skew could persist on
the client even if the client and server clock ended up realigning.
- `github.com/aws/aws-sdk-go-v2/service/account`:
[v1.30.5](service/account/CHANGELOG.md#v1305-2026-03-26)
- **Bug Fix**: Fix a bug where a recorded clock skew could persist on
the client even if the client and server clock ended up realigning.
- `github.com/aws/aws-sdk-go-v2/service/acm`:
[v1.37.23](service/acm/CHANGELOG.md#v13723-2026-03-26)
- **Bug Fix**: Fix a bug where a recorded clock skew could persist on
the client even if the client and server clock ended up realigning.
- `github.com/aws/aws-sdk-go-v2/service/acmpca`:
[v1.46.12](service/acmpca/CHANGELOG.md#v14612-2026-03-26)
- **Bug Fix**: Fix a bug where a recorded clock skew could persist on
the client even if the client and server clock ended up realigning.
- `github.com/aws/aws-sdk-go-v2/service/aiops`:
[v1.6.21](service/aiops/CHANGELOG.md#v1621-2026-03-26)
- **Bug Fix**: Fix a bug where a recorded clock skew could persist on
the client even if the client and server clock ended up realigning.
- `github.com/aws/aws-sdk-go-v2/service/amp`:
[v1.42.9](service/amp/CHANGELOG.md#v1429-2026-03-26)
- **Bug Fix**: Fix a bug where a recorded clock skew could persist on
the client even if the client and server clock ended up realigning.
- `github.com/aws/aws-sdk-go-v2/service/amplify`:
[v1.38.14](service/amplify/CHANGELOG.md#v13814-2026-03-26)
- **Bug Fix**: Fix a bug where a recorded clock skew could persist on
the client even if the client and server clock ended up realigning.
- `github.com/aws/aws-sdk-go-v2/service/amplifybackend`:
[v1.32.20](service/amplifybackend/CHANGELOG.md#v13220-2026-03-26)
- **Bug Fix**: Fix a bug where a recorded clock skew could persist on
the client even if the client and server clock ended up realigning.
- `github.com/aws/aws-sdk-go-v2/service/amplifyuibuilder`:
[v1.28.20](service/amplifyuibuilder/CHANGELOG.md#v12820-2026-03-26)
- **Bug Fix**: Fix a bug where a recorded clock skew could persist on
the client even if the client and server clock ended up realigning.
- `github.com/aws/aws-sdk-go-v2/service/apigateway`:
[v1.39.1](service/apigateway/CHANGELOG.md#v1391-2026-03-26)
- **Bug Fix**: Fix a bug where a recorded clock skew could persist on
the client even if the client and server clock ended up realigning.
- `github.com/aws/aws-sdk-go-v2/service/apigatewaymanagementapi`:
[v1.29.14](service/apigatewaymanagementapi/CHANGELOG.md#v12914-2026-03-26)
- **Bug Fix**: Fix a bug where a recorded clock skew could persist on
the client even if the client and server clock ended up realigning.
- `github.com/aws/aws-sdk-go-v2/service/apigatewayv2`:
[v1.34.1](service/apigatewayv2/CHANGELOG.md#v1341-2026-03-26)
- **Bug Fix**: Fix a bug where a recorded clock skew could persist on
the client even if the client and server clock ended up realigning.
- `github.com/aws/aws-sdk-go-v2/service/appconfig`:
[v1.43.13](service/appconfig/CHANGELOG.md#v14313-2026-03-26)
- **Bug Fix**: Fix a bug where a recorded clock skew could persist on
the client even if the client and server clock ended up realigning.
- `github.com/aws/aws-sdk-go-v2/service/appconfigdata`:
[v1.23.22](service/appconfigdata/CHANGELOG.md#v12322-2026-03-26)
- **Bug Fix**: Fix a bug where a recorded clock skew could persist on
the client even if the client and server clock ended up realigning.
- `github.com/aws/aws-sdk-go-v2/service/appfabric`:
[v1.16.21](service/appfabric/CHANGELOG.md#v11621-2026-03-26)
- **Bug Fix**: Fix a bug where a recorded clock skew could persist on
the client even if the client and server clock ended up realigning.
- `github.com/aws/aws-sdk-go-v2/service/appflow`:
[v1.51.12](service/appflow/CHANGELOG.md#v15112-2026-03-26)
- **Bug Fix**: Fix a bug where a recorded clock skew could persist on
the client even if the client and server clock ended up realigning.
- `github.com/aws/aws-sdk-go-v2/service/appintegrations`:
[v1.37.7](service/appintegrations/CHANGELOG.md#v1377-2026-03-26)
- **Bug Fix**: Fix a bug where a recorded clock skew could persist on
the client even if the client and server clock ended up realigning.
- `github.com/aws/aws-sdk-go-v2/service/applicationautoscaling`:
[v1.41.14](service/applicationautoscaling/CHANGELOG.md#v14114-2026-03-26)
- **Bug Fix**: Fix a bug where a recorded clock skew could persist on
the client even if the client and server clock ended up realigning.
- `github.com/aws/aws-sdk-go-v2/service/applicationcostprofiler`:
[v1.27.12](service/applicationcostprofiler/CHANGELOG.md#v12712-2026-03-26)
- **Bug Fix**: Fix a bug where a recorded clock skew could persist on
the client even if the client and server clock ended up realigning.
- `github.com/aws/aws-sdk-go-v2/service/applicationdiscoveryservice`:
[v1.35.13](service/applicationdiscoveryservice/CHANGELOG.md#v13513-2026-03-26)
- **Bug Fix**: Fix a bug where a recorded clock skew could persist on
the client even if the client and server clock ended up realigning.
- `github.com/aws/aws-sdk-go-v2/service/applicationinsights`:
[v1.34.20](service/applicationinsights/CHANGELOG.md#v13420-2026-03-26)
- **Bug Fix**: Fix a bug where a recorded clock skew could persist on
the client even if the client and server clock ended up realigning.
- `github.com/aws/aws-sdk-go-v2/service/applicationsignals`:
[v1.19.1](service/applicationsignals/CHANGELOG.md#v1191-2026-03-26)
- **Bug Fix**: Fix a bug where a recorded clock skew could persist on
the client even if the client and server clock ended up realigning.
- `github.com/aws/aws-sdk-go-v2/service/appmesh`:
[v1.35.12](service/appmesh/CHANGELOG.md#v13512-2026-03-26)
- **Bug Fix**: Fix a bug where a recorded clock skew could persist on
the client even if the client and server clock ended up realigning.
- `github.com/aws/aws-sdk-go-v2/service/apprunner`:
[v1.39.14](service/apprunner/CHANGELOG.md#v13914-2026-03-26)
- **Bug Fix**: Fix a bug where a recorded clock skew could persist on
the client even if the client and server clock ended up realigning.
- `github.com/aws/aws-sdk-go-v2/service/appstream`:
[v1.54.4](service/appstream/CHANGELOG.md#v1544-2026-03-26)
- **Bug Fix**: Fix a bug where a recorded clock skew could persist on
the client even if the client and server clock ended up realigning.
- `github.com/aws/aws-sdk-go-v2/service/appsync`:
[v1.53.5](service/appsync/CHANGELOG.md#v1535-2026-03-26)
- **Bug Fix**: Fix a bug where a recorded clock skew could persist on
the client even if the client and server clock ended up realigning.
- `github.com/aws/aws-sdk-go-v2/service/arcregionswitch`:
[v1.6.3](service/arcregionswitch/CHANGELOG.md#v163-2026-03-26)
- **Bug Fix**: Fix a bug where a recorded clock skew could persist on
the client even if the client and server clock ended up realigning.
- `github.com/aws/aws-sdk-go-v2/service/arczonalshift`:
[v1.22.23](service/arczonalshift/CHANGELOG.md#v12223-2026-03-26)
- **Bug Fix**: Fix a bug where a recorded clock skew could persist on
the client even if the client and server clock ended up realigning.
- `github.com/aws/aws-sdk-go-v2/service/artifact`:
[v1.15.5](service/artifact/CHANGELOG.md#v1155-2026-03-26)
- **Bug Fix**: Fix a bug where a recorded clock skew could persist on
the client even if the client and server clock ended up realigning.
- `github.com/aws/aws-sdk-go-v2/service/athena`:
[v1.57.4](service/athena/CHANGELOG.md#v1574-2026-03-26)
- **Bug Fix**: Fix a bug where a recorded clock skew could persist on
the client even if the client and server clock ended up realigning.
- `github.com/aws/aws-sdk-go-v2/service/auditmanager`:
[v1.46.12](service/auditmanager/CHANGELOG.md#v14612-2026-03-26)
- **Bug Fix**: Fix a bug where a recorded clock skew could persist on
the client even if the client and server clock ended up realigning.
- `github.com/aws/aws-sdk-go-v2/service/autoscaling`:
[v1.64.4](service/autoscaling/CHANGELOG.md#v1644-2026-03-26)
- **Bug Fix**: Fix a bug where a recorded clock skew could persist on
the client even if the client and server clock ended up realigning.
- `github.com/aws/aws-sdk-go-v2/service/autoscalingplans`:
[v1.30.14](service/autoscalingplans/CHANGELOG.md#v13014-2026-03-26)
- **Bug Fix**: Fix a bug where a recorded clock skew could persist on
the client even if the client and server clock ended up realigning.
- `github.com/aws/aws-sdk-go-v2/service/b2bi`:
[v1.0.0-preview.100](service/b2bi/CHANGELOG.md#v100-preview100-2026-03-26)
- **Bug Fix**: Fix a bug where a recorded clock skew could persist on
the client even if the client and server clock ended up realigning.
- `github.com/aws/aws-sdk-go-v2/service/backup`:
[v1.54.11](service/backup/CHANGELOG.md#v15411-2026-03-26)
- **Bug Fix**: Fix a bug where a recorded clock skew could persist on
the client even if the client and server clock ended up realigning.
- `github.com/aws/aws-sdk-go-v2/service/backupgateway`:
[v1.26.3](service/backupgateway/CHANGELOG.md#v1263-2026-03-26)
- **Bug Fix**: Fix a bug where a recorded clock skew could persist on
the client even if the client and server clock ended up realigning.
- `github.com/aws/aws-sdk-go-v2/service/backupsearch`:
[v1.6.23](service/backupsearch/CHANGELOG.md#v1623-2026-03-26)
- **Bug Fix**: Fix a bug where a recorded clock skew could persist on
the client even if the client and server clock ended up realigning.
- `github.com/aws/aws-sdk-go-v2/service/batch`:
[v1.63.2](service/batch/CHANGELOG.md#v1632-2026-03-26)
- **Bug Fix**: Fix a bug where a recorded clock skew could persist on
the client even if the client and server clock ended up realigning.
- `github.com/aws/aws-sdk-go-v2/service/bcmdashboards`:
[v1.1.4](service/bcmdashboards/CHANGELOG.md#v114-2026-03-26)
- **Bug Fix**: Fix a bug where a recorded clock skew could persist on
the client even if the client and server clock ended up realigning.
- `github.com/aws/aws-sdk-go-v2/service/bcmdataexports`:
[v1.14.0](service/bcmdataexports/CHANGELOG.md#v1140-2026-03-26)
- **Feature**: With this release we are providing an option to accounts
to have their export delivered to an S3 bucket that is not owned by the
account.
- **Bug Fix**: Fix a bug where a recorded clock skew could persist on
the client even if the client and server clock ended up realigning.
- `github.com/aws/aws-sdk-go-v2/service/bcmpricingcalculator`:
[v1.10.9](service/bcmpricingcalculator/CHANGELOG.md#v1109-2026-03-26)
- **Bug Fix**: Fix a bug where a recorded clock skew could persist on
the client even if the client and server clock ended up realigning.
- `github.com/aws/aws-sdk-go-v2/service/bcmrecommendedactions`:
[v1.1.5](service/bcmrecommendedactions/CHANGELOG.md#v115-2026-03-26)
- **Bug Fix**: Fix a bug where a recorded clock skew could persist on
the client even if the client and server clock ended up realigning.
- `github.com/aws/aws-sdk-go-v2/service/bedrock`:
[v1.57.1](service/bedrock/CHANGELOG.md#v1571-2026-03-26)
- **Bug Fix**: Fix a bug where a recorded clock skew could persist on
the client even if the client and server clock ended up realigning.
- `github.com/aws/aws-sdk-go-v2/service/bedrockagent`:
[v1.52.7](service/bedrockagent/CHANGELOG.md#v1527-2026-03-26)
- **Bug Fix**: Fix a bug where a recorded clock skew could persist on
the client even if the client and server clock ended up realigning.
- `github.com/aws/aws-sdk-go-v2/service/bedrockagentcore`:
[v1.15.2](service/bedrockagentcore/CHANGELOG.md#v1152-2026-03-26)
- **Bug Fix**: Fix a bug where a recorded clock skew could persist on
the client even if the client and server clock ended up realigning.
- `github.com/aws/aws-sdk-go-v2/service/bedrockagentcorecontrol`:
[v1.25.1](service/bedrockagentcorecontrol/CHANGELOG.md#v1251-2026-03-26)
- **Bug Fix**: Fix a bug where a recorded clock skew could persist on
the client even if the client and server clock ended up realigning.
- `github.com/aws/aws-sdk-go-v2/service/bedrockagentruntime`:
[v1.51.8](service/bedrockagentruntime/CHANGELOG.md#v1518-2026-03-26)
- **Bug Fix**: Fix a bug where a recorded clock skew could persist on
the client even if the client and server clock ended up realigning.
- `github.com/aws/aws-sdk-go-v2/service/bedrockdataautomation`:
[v1.13.5](service/bedrockdataautomation/CHANGELOG.md#v1135-2026-03-26)
- **Bug Fix**: Fix a bug where a recorded clock skew could persist on
the client even if the client and server clock ended up realigning.
- `github.com/aws/aws-sdk-go-v2/service/bedrockdataautomationruntime`:
[v1.10.4](service/bedrockdataautomationruntime/CHANGELOG.md#v1104-2026-03-26)
- **Bug Fix**: Fix a bug where a recorded clock skew could persist on
the client even if the client and server clock ended up realigning.
- `github.com/aws/aws-sdk-go-v2/service/bedrockruntime`:
[v1.50.4](service/bedrockruntime/CHANGELOG.md#v1504-2026-03-26)
- **Bug Fix**: Fix a bug where a recorded clock skew could persist on
the client even if the client and server clock ended up realigning.
- `github.com/aws/aws-sdk-go-v2/service/billing`:
[v1.10.4](service/billing/CHANGELOG.md#v1104-2026-03-26)
- **Bug Fix**: Fix a bug where a recorded clock skew could persist on
the client even if the client and server clock ended up realigning.
- `github.com/aws/aws-sdk-go-v2/service/billingconductor`:
[v1.28.5](service/billingconductor/CHANGELOG.md#v1285-2026-03-26)
- **Bug Fix**: Fix a bug where a recorded clock skew could persist on
the client even if the client and server clock ended up realigning.
- `github.com/aws/aws-sdk-go-v2/service/braket`:
[v1.39.8](service/braket/CHANGELOG.md#v1398-2026-03-26)
- **Bug Fix**: Fix a bug where a recorded clock skew could persist on
the client even if the client and server clock ended up realigning.
- `github.com/aws/aws-sdk-go-v2/service/budgets`:
[v1.43.4](service/budgets/CHANGELOG.md#v1434-2026-03-26)
- **Bug Fix**: Fix a bug where a recorded clock skew could persist on
the client even if the client and server clock ended up realigning.
- `github.com/aws/aws-sdk-go-v2/service/chatbot`:
[v1.14.21](service/chatbot/CHANGELOG.md#v11421-2026-03-26)
- **Bug Fix**: Fix a bug where a recorded clock skew could persist on
the client even if the client and server clock ended up realigning.
- `github.com/aws/aws-sdk-go-v2/service/chime`:
[v1.41.12](service/chime/CHANGELOG.md#v14112-2026-03-26)
- **Bug Fix**: Fix a bug where a recorded clock skew could persist on
the client even if the client and server clock ended up realigning.
- `github.com/aws/aws-sdk-go-v2/service/chimesdkidentity`:
[v1.27.20](service/chimesdkidentity/CHANGELOG.md#v12720-2026-03-26)
- **Bug Fix**: Fix a bug where a recorded clock skew could persist on
the client even if the client and server clock ended up realigning.
- `github.com/aws/aws-sdk-go-v2/service/chimesdkmediapipelines`:
[v1.26.21](service/chimesdkmediapipelines/CHANGELOG.md#v12621-2026-03-26)
- **Bug Fix**: Fix a bug where a recorded clock skew could persist on
the client even if the client and server clock ended up realigning.
- `github.com/aws/aws-sdk-go-v2/service/chimesdkmeetings`:
[v1.33.15](service/chimesdkmeetings/CHANGELOG.md#v13315-2026-03-26)
- **Bug Fix**: Fix a bug where a recorded clock skew could persist on
the client even if the client and server clock ended up realigning.
- `github.com/aws/aws-sdk-go-v2/service/chimesdkmessaging`:
[v1.32.17](service/chimesdkmessaging/CHANGELOG.md#v13217-2026-03-26)
- **Bug Fix**: Fix a bug where a recorded clock skew could persist on
the client even if the client and server clock ended up realigning.
- `github.com/aws/aws-sdk-go-v2/service/chimesdkvoice`:
[v1.28.13](service/chimesdkvoice/CHANGELOG.md#v12813-2026-03-26)
- **Bug Fix**: Fix a bug where a recorded clock skew could persist on
the client even if the client and server clock ended up realigning.
- `github.com/aws/aws-sdk-go-v2/service/cleanrooms`:
[v1.42.4](service/cleanrooms/CHANGELOG.md#v1424-2026-03-26)
- **Bug Fix**: Fix a bug where a recorded clock skew could persist on
the client even if the client and server clock ended up realigning.
- `github.com/aws/aws-sdk-go-v2/service/cleanroomsml`:
[v1.22.5](service/cleanroomsml/CHANGELOG.md#v1225-2026-03-26)
- **Bug Fix**: Fix a bug where a recorded clock skew could persist on
the client even if the client and server clock ended up realigning.
- `github.com/aws/aws-sdk-go-v2/service/cloud9`:
[v1.33.20](service/cloud9/CHANGELOG.md#v13320-2026-03-26)
- **Bug Fix**: Fix a bug where a recorded clock skew could persist on
the client even if the client and server clock ended up realigning.
- `github.com/aws/aws-sdk-go-v2/service/cloudcontrol`:
[v1.29.13](service/cloudcontrol/CHANGELOG.md#v12913-2026-03-26)
- **Bug Fix**: Fix a bug where a recorded clock skew could persist on
the client even if the client and server clock ended up realigning.
- `github.com/aws/aws-sdk-go-v2/service/clouddirectory`:
[v1.30.12](service/clouddirectory/CHANGELOG.md#v13012-2026-03-26)
- **Bug Fix**: Fix a bug where a recorded clock skew could persist on
the client even if the client and server clock ended up realigning.
- `github.com/aws/aws-sdk-go-v2/service/cloudformation`:
[v1.71.9](service/cloudformation/CHANGELOG.md#v1719-2026-03-26)
- **Bug Fix**: Fix a bug where a recorded clock skew could persist on
the client even if the client and server clock ended up realigning.
- `github.com/aws/aws-sdk-go-v2/service/cloudfront`:
[v1.60.4](service/cloudfront/CHANGELOG.md#v1604-2026-03-26)
- **Bug Fix**: Fix a bug where a recorded clock skew could persist on
the client even if the client and server clock ended up realigning.
- `github.com/aws/aws-sdk-go-v2/service/cloudfrontkeyvaluestore`:
[v1.12.24](service/cloudfrontkeyvaluestore/CHANGELOG.md#v11224-2026-03-26)
- **Bug Fix**: Fix a bug where a recorded clock skew could persist on
the client even if the client and server clock ended up realigning.
- `github.com/aws/aws-sdk-go-v2/service/cloudhsm`:
[v1.29.21](service/cloudhsm/CHANGELOG.md#v12921-2026-03-26)
- **Bug Fix**: Fix a bug where a recorded clock skew could persist on
the client even if the client and server clock ended up realigning.
- `github.com/aws/aws-sdk-go-v2/service/cloudhsmv2`:
[v1.34.21](service/cloudhsmv2/CHANGELOG.md#v13421-2026-03-26)
- **Bug Fix**: Fix a bug where a recorded clock skew could persist on
the client even if the client and server clock ended up realigning.
- `github.com/aws/aws-sdk-go-v2/service/cloudsearch`:
[v1.32.12](service/cloudsearch/CHANGELOG.md#v13212-2026-03-26)
- **Bug Fix**: Fix a bug where a recorded clock skew could persist on
the client even if the client and server clock ended up realigning.
- `github.com/aws/aws-sdk-go-v2/service/cloudsearchdomain`:
[v1.28.20](service/cloudsearchdomain/CHANGELOG.md#v12820-2026-03-26)
- **Bug Fix**: Fix a bug where a recorded clock skew could persist on
the client even if the client and server clock ended up realigning.
- `github.com/aws/aws-sdk-go-v2/service/cloudtrail`:
[v1.55.9](service/cloudtrail/CHANGELOG.md#v1559-2026-03-26)
- **Bug Fix**: Fix a bug where a recorded clock skew could persist on
the client even if the client and server clock ended up realigning.
- `github.com/aws/aws-sdk-go-v2/service/cloudtraildata`:
[v1.17.13](service/cloudtraildata/CHANGELOG.md#v11713-2026-03-26)
- **Bug Fix**: Fix a bug where a recorded clock skew could persist on
the client even if the client and server clock ended up realigning.
- `github.com/aws/aws-sdk-go-v2/service/cloudwatch`:
[v1.55.3](service/cloudwatch/CHANGELOG.md#v1553-2026-03-26)
- **Bug Fix**: Fix a bug where a recorded clock skew could persist on
the client even if the client and server clock ended up realigning.
- `github.com/aws/aws-sdk-go-v2/service/cloudwatchevents`:
[v1.32.23](service/cloudwatchevents/CHANGELOG.md#v13223-2026-03-26)
- **Bug Fix**: Fix a bug where a recorded clock skew could persist on
the client even if the client and server clock ended up realigning.
- `github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs`:
[v1.65.0](service/cloudwatchlogs/CHANGELOG.md#v1650-2026-03-26)
- **Feature**: This release adds parameter support to saved queries in
CloudWatch Logs Insights. Define reusable query templates with named
placeholders, invoke them using start query. Available in Console, CLI
and SDK
- **Bug Fix**: Fix a bug where a recorded clock skew could persist on
the client even if the client and server clock ended up realigning.
- `github.com/aws/aws-sdk-go-v2/service/codeartifact`:
[v1.38.21](service/codeartifact/CHANGELOG.md#v13821-2026-03-26)
- **Bug Fix**: Fix a bug where a recorded clock skew could persist on
the client even if the client and server clock ended up realigning.
- `github.com/aws/aws-sdk-go-v2/service/codebuild`:
[v1.68.13](service/codebuild/CHANGELOG.md#v16813-2026-03-26)
- **Bug Fix**: Fix a bug where a recorded clock skew could persist on
the client even if the client and server clock ended up realigning.
- `github.com/aws/aws-sdk-go-v2/service/codecatalyst`:
[v1.21.12](service/codecatalyst/CHANGELOG.md#v12112-2026-03-26)
- **Bug Fix**: Fix a bug where a recorded clock skew could persist on
the client even if the client and server clock ended up realigning.
- `github.com/aws/aws-sdk-go-v2/service/codecommit`:
[v1.33.12](service/codecommit/CHANGELOG.md#v13312-2026-03-26)
- **Bug Fix**: Fix a bug where a recorded clock skew could persist on
the client even if the client and server clock ended up realigning.
- `github.com/aws/aws-sdk-go-v2/service/codeconnections`:
[v1.10.20](service/codeconnections/CHANGELOG.md#v11020-2026-03-26)
- **Bug Fix**: Fix a bug where a recorded clock skew could persist on
the client even if the client and server clock ended up realigning.
- `github.com/aws/aws-sdk-go-v2/service/codedeploy`:
[v1.35.13](service/codedeploy/CHANGELOG.md#v13513-2026-03-26)
- **Bug Fix**: Fix a bug where a recorded clock skew could persist on
the client even if the client and server clock ended up realigning.
- `github.com/aws/aws-sdk-go-v2/service/codeguruprofiler`:
[v1.29.20](service/codeguruprofiler/CHANGELOG.md#v12920-2026-03-26)
- **Bug Fix**: Fix a bug where a recorded clock skew could persist on
the client even if the client and server clock ended up realigning.
- `github.com/aws/aws-sdk-go-v2/service/codegurureviewer`:
[v1.34.20](service/codegurureviewer/CHANGELOG.md#v13420-2026-03-26)
- **Bug Fix**: Fix a bug where a recorded clock skew could persist on
the client even if the client and server clock ended up realigning.
- `github.com/aws/aws-sdk-go-v2/service/codegurusecurity`:
[v1.16.24](service/codegurusecurity/CHANGELOG.md#v11624-2026-03-26)
- **Bug Fix**: Fix a bug where a recorded clock skew could persist on
the client even if the client and server clock ended up realigning.
- `github.com/aws/aws-sdk-go-v2/service/codepipeline`:
[v1.46.21](service/codepipeline/CHANGELOG.md#v14621-2026-03-26)
- **Bug Fix**: Fix a bug where a recorded clock skew could persist on
the client even if the client and server clock ended up realigning.
- `github.com/aws/aws-sdk-go-v2/service/codestarconnections`:
[v1.35.13](service/codestarconnections/CHANGELOG.md#v13513-2026-03-26)
- **Bug Fix**: Fix a bug where a recorded clock skew could persist on
the client even if the client and server clock ended up realigning.
- `github.com/aws/aws-sdk-go-v2/service/codestarnotifications`:
[v1.31.21](service/codestarnotifications/CHANGELOG.md#v13121-2026-03-26)
- **Bug Fix**: Fix a bug where a recorded clock skew could persist on
the client even if the client and server clock ended up realigning.
- `github.com/aws/aws-sdk-go-v2/service/cognitoidentity`:
[v1.33.22](service/cognitoidentity/CHANGELOG.md#v13322-2026-03-26)
- **Bug Fix**: Fix a bug where a recorded clock skew could persist on
the client even if the client and server clock ended up realigning.
- `github.com/aws/aws-sdk-go-v2/service/cognitoidentityprovider`:
[v1.59.3](service/cognitoidentityprovider/CHANGELOG.md#v1593-2026-03-26)
- **Bug Fix**: Fix a bug where a recorded clock skew could persist on
the client even if the client and server clock ended up realigning.
- `github.com/aws/aws-sdk-go-v2/service/cognitosync`:
[v1.29.12](service/cognitosync/CHANGELOG.md#v12912-2026-03-26)
- **Bug Fix**: Fix a bug where a recorded clock skew could persist on
the client even if the client and server clock ended up realigning.
- `github.com/aws/aws-sdk-go-v2/service/comprehend`:
[v1.40.21](service/comprehend/CHANGELOG.md#v14021-2026-03-26)
- **Bug Fix**: Fix a bug where a recorded clock skew could persist on
the client even if the client and server clock ended up realigning.
- `github.com/aws/aws-sdk-go-v2/service/comprehendmedical`:
[v1.31.21](service/comprehendmedical/CHANGELOG.md#v13121-2026-03-26)
- **Bug Fix**: Fix a bug where a recorded clock skew could persist on
the client even if the client and server clock ended up realigning.
- `github.com/aws/aws-sdk-go-v2/service/computeoptimizer`:
[v1.49.8](service/computeoptimizer/CHANGELOG.md#v1498-2026-03-26)
- **Bug Fix**: Fix a bug where a recorded clock skew could persist on
the client even if the client and server clock ended up realigning.
- `github.com/aws/aws-sdk-go-v2/service/computeoptimizerautomation`:
[v1.0.8](service/computeoptimizerautomation/CHANGELOG.md#v108-2026-03-26)
- **Bug Fix**: Fix a bug where a recorded clock skew could persist on
the client even if the client and server clock ended up realigning.
- `github.com/aws/aws-sdk-go-v2/service/configservice`:
[v1.62.1](service/configservice/CHANGELOG.md#v1621-2026-03-26)
- **Bug Fix**: Fix a bug where a recorded clock skew could persist on
the client even if the client and server clock ended up realigning.
- `github.com/aws/aws-sdk-go-v2/service/connect`:
[v1.166.1](service/connect/CHANGELOG.md#v11661-2026-03-26)
- **Bug Fix**: Fix a bug where a recorded clock skew could persist on
the client even if the client and server clock ended up realigning.
- `github.com/aws/aws-sdk-go-v2/service/connectcampaigns`:
[v1.20.20](service/connectcampaigns/CHANGELOG.md#v12020-2026-03-26)
- **Bug Fix**: Fix a bug where a recorded clock skew could persist on
the client even if the client and server clock ended up realigning.
- `github.com/aws/aws-sdk-go-v2/service/connectcampaignsv2`:
[v1.11.4](service/connectcampaignsv2/CHANGELOG.md#v1114-2026-03-26)
- **Bug Fix**: Fix a bug where a recorded clock skew could persist on
the client even if the client and server clock ended up realigning.
- `github.com/aws/aws-sdk-go-v2/service/connectcases`:
[v1.39.1](service/connectcases/CHANGELOG.md#v1391-2026-03-26)
- **Bug Fix**: Fix a bug where a recorded clock skew could persist on
the client even if the client and server clock ended up realigning.
- `github.com/aws/aws-sdk-go-v2/service/connectcontactlens`:
[v1.33.13](service/connectcontactlens/CHANGELOG.md#v13313-2026-03-26)
- **Bug Fix**: Fix a bug where a recorded clock skew could persist on
the client even if the client and server clock ended up realigning.
- `github.com/aws/aws-sdk-go-v2/service/connecthealth`:
[v1.0.3](service/connecthealth/CHANGELOG.md#v103-2026-03-26)
- **Bug Fix**: Fix a bug where a recorded clock skew could persist on
the client even if the client and server clock ended up realigning.
- `github.com/aws/aws-sdk-go-v2/service/connectparticipant`:
[v1.36.7](service/connectparticipant/CHANGELOG.md#v1367-2026-03-26)
- **Bug Fix**: Fix a bug where a recorded clock skew could persist on
the client even if the client and server clock ended up realigning.
- `github.com/aws/aws-sdk-go-v2/service/controlcatalog`:
[v1.14.9](service/controlcatalog/CHANGELOG.md#v1149-2026-03-26)
- **Bug Fix**: Fix a bug where a recorded clock skew could persist on
the client even if the client and server clock ended up realigning.
- `github.com/aws/aws-sdk-go-v2/service/controltower`:
[v1.28.9](service/controltower/CHANGELOG.md#v1289-2026-03-26)
- **Bug Fix**: Fix a bug where a recorded clock skew could persist on
the client even if the client and server clock ended up realigning.
- `github.com/aws/aws-sdk-go-v2/service/costandusagereportservice`:
[v1.34.13](service/costandusagereportservice/CHANGELOG.md#v13413-2026-03-26)
- **Bug Fix**: Fix a bug where a recorded clock skew could persist on
the client even if the client and server clock ended up realigning.
- `github.com/aws/aws-sdk-go-v2/service/costexplorer`:
[v1.63.6](service/costexplorer/CHANGELOG.md#v1636-2026-03-26)
- **Bug Fix**: Fix a bug where a recorded clock skew could persist on
the client even if the client and server clock ended up realigning.
- `github.com/aws/aws-sdk-go-v2/service/costoptimizationhub`:
[v1.22.8](service/costoptimizationhub/CHANGELOG.md#v1228-2026-03-26)
- **Bug Fix**: Fix a bug where a recorded clock skew could persist on
the client even if the client and server clock ended up realigning.
- `github.com/aws/aws-sdk-go-v2/service/customerprofiles`:
[v1.57.2](service/customerprofiles/CHANGELOG.md#v1572-2026-03-26)
- **Bug Fix**: Fix a bug where a recorded clock skew could persist on
the client even if the client and server clock ended up realigning.
- `github.com/aws/aws-sdk-go-v2/service/databasemigrationservice`:
[v1.61.10](service/databasemigrationservice/CHANGELOG.md#v16110-2026-03-26)
- **Bug Fix**: Fix a bug where a recorded clock skew could persist on
the client even if the client and server clock ended up realigning.
- `github.com/aws/aws-sdk-go-v2/service/databrew`:
[v1.39.14](service/databrew/CHANGELOG.md#v13914-2026-03-26)
- **Bug Fix**: Fix a bug where a recorded clock skew could persist on
the client even if the client and server clock ended up realigning.
- `github.com/aws/aws-sdk-go-v2/service/dataexchange`:
[v1.40.14](service/dataexchange/CHANGELOG.md#v14014-2026-03-26)
- **Bug Fix**: Fix a bug where a recorded clock skew could persist on
the client even if the client and server clock ended up realigning.
- `github.com/aws/aws-sdk-go-v2/service/datapipeline`:
[v1.30.20](service/datapipeline/CHANGELOG.md#v13020-2026-03-26)
- **Bug Fix**: Fix a bug where a recorded clock skew could persist on
the client even if the client and server clock ended up realigning.
- `github.com/aws/aws-sdk-go-v2/service/datasync`:
[v1.58.2](service/datasync/CHANGELOG.md#v1582-2026-03-26)
- **Bug Fix**: Fix a bug where a recorded clock skew could persist on
the client even if the client and server clock ended up realigning.
- `github.com/aws/aws-sdk-go-v2/service/datazone`:
[v1.54.2](service/datazone/CHANGELOG.md#v1542-2026-03-26)
- **Bug Fix**: Fix a bug where a recorded clock skew could persist on
the client even if the client and server clock ended up realigning.
- `github.com/aws/aws-sdk-go-v2/service/dax`:
[v1.29.16](service/dax/CHANGELOG.md#v12916-2026-03-26)
- **Bug Fix**: Fix a bug where a recorded clock skew could persist on
the client even if the client and server clock ended up realigning.
- `github.com/aws/aws-sdk-go-v2/service/deadline`:
[v1.26.2](service/deadline/CHANGELOG.md#v1262-2026-03-26)
- **Bug Fix**: Fix a bug where a recorded clock skew could persist on
the client even if the client and server clock ended up realigning.
- `github.com/aws/aws-sdk-go-v2/service/detective`:
[v1.38.13](service/detective/CHANGELOG.md#v13813-2026-03-26)
- **Bug Fix**: Fix a bug where a recorded clock skew could persist on
the client even if the client and server clock ended up realigning.
- `github.com/aws/aws-sdk-go-v2/service/devicefarm`:
[v1.38.8](service/devicefarm/CHANGELOG.md#v1388-2026-03-26)
- **Bug Fix**: Fix a bug where a recorded clock skew could persist on
the client even if the client and server clock ended up realigning.
- `github.com/aws/aws-sdk-go-v2/service/devopsguru`:
[v1.40.12](service/devopsguru/CHANGELOG.md#v14012-2026-03-26)
- **Bug Fix**: Fix a bug where a recorded clock skew could persist on
the client even if the client and server clock ended up realigning.
- `github.com/aws/aws-sdk-go-v2/service/directconnect`:
[v1.38.15](service/directconnect/CHANGELOG.md#v13815-2026-03-26)
- **Bug Fix**: Fix a bug where a recorded clock skew could persist on
the client even if the client and server clock ended up realigning.
- `github.com/aws/aws-sdk-go-v2/service/directoryservice`:
[v1.38.16](service/directoryservice/CHANGELOG.md#v13816-2026-03-26)
- **Bug Fix**: Fix a bug where a recorded clock skew could persist on
the client even if the client and server clock ended up realigning.
- `github.com/aws/aws-sdk-go-v2/service/directoryservicedata`:
[v1.7.21](service/directoryservicedata/CHANGELOG.md#v1721-2026-03-26)
- **Bug Fix**: Fix a bug where a recorded clock skew could persist on
the client even if the client and server clock ended up realigning.
- `github.com/aws/aws-sdk-go-v2/service/dlm`:
[v1.35.16](service/dlm/CHANGELOG.md#v13516-2026-03-26)
- **Bug Fix**: Fix a bug where a recorded clock skew could persist on
the client even if the client and server clock ended up realigning.
- `github.com/aws/aws-sdk-go-v2/service/docdb`:
[v1.48.13](service/docdb/CHANGELOG.md#v14813-2026-03-26)
- **Bug Fix**: Fix a bug where a recorded clock skew could persist on
the client even if the client and server clock ended up realigning.
- `github.com/aws/aws-sdk-go-v2/service/docdbelastic`:
[v1.20.13](service/docdbelastic/CHANGELOG.md#v12013-2026-03-26)
- **Bug Fix**: Fix a bug where a recorded clock skew could persist on
the client even if the client and server clock ended up realigning.
- `github.com/aws/aws-sdk-go-v2/service/drs`:
[v1.36.13](service/drs/CHANGELOG.md#v13613-2026-03-26)
- **Bug Fix**: Fix a bug where a recorded clock skew could persist on
the client even if the client and server clock ended up realigning.
- `github.com/aws/aws-sdk-go-v2/service/dsql`:
[v1.12.8](service/dsql/CHANGELOG.md#v1128-2026-03-26)
- **Bug Fix**: Fix a bug where a recorded clock skew could persist on
the client even if the client and server clock ended up realigning.
- `github.com/aws/aws-sdk-go-v2/service/dynamodb`:
[v1.57.1](service/dynamodb/CHANGELOG.md#v1571-2026-03-26)
- **Bug Fix**: Fix a bug where a recorded clock skew could persist on
the client even if the client and server clock ended up realigning.
- `github.com/aws/aws-sdk-go-v2/service/dynamodbstreams`:
[v1.32.14](service/dynamodbstreams/CHANGELOG.md#v13214-2026-03-26)
- **Bug Fix**: Fix a bug where a recorded clock skew could persist on
the client even if the client and server clock ended up realigning.
- `github.com/aws/aws-sdk-go-v2/service/ebs`:
[v1.33.14](service/ebs/CHANGELOG.md#v13314-2026-03-26)
- **Bug Fix**: Fix a bug where a recorded clock skew could persist on
the client even if the client and server clock ended up realigning.
- `github.com/aws/aws-sdk-go-v2/service/ec2`:
[v1.296.1](service/ec2/CHANGELOG.md#v12961-2026-03-26)
- **Bug Fix**: Fix a bug where a recorded clock skew could persist on
the client even if the client and server clock ended up realigning.
- `github.com/aws/aws-sdk-go-v2/service/ec2instanceconnect`:
[v1.32.20](service/ec2instanceconnect/CHANGELOG.md#v13220-2026-03-26)
- **Bug Fix**: Fix a bug where a recorded clock skew could persist on
the client even if the client and server clock ended up realigning.
- `github.com/aws/aws-sdk-go-v2/service/ecr`:
[v1.56.2](service/ecr/CHANGELOG.md#v1562-2026-03-26)
- **Bug Fix**: Fix a bug where a recorded clock skew could persist on
the client even if the client and server clock ended up realigning.
- `github.com/aws/aws-sdk-go-v2/service/ecrpublic`:
[v1.38.13](service/ecrpublic/CHANGELOG.md#v13813-2026-03-26)
- **Bug Fix**: Fix a bug where a recorded clock skew could persist on
the client even if the client and server clock ended up realigning.
- `github.com/aws/aws-sdk-go-v2/service/ecs`:
[v1.74.1](service/ecs/CHANGELOG.md#v1741-2026-03-26)
- **Bug Fix**: Fix a bug where a recorded clock skew could persist on
the client even if the client and server clock ended up realigning.
- `github.com/aws/aws-sdk-go-v2/service/efs`:
[v1.41.14](service/efs/CHANGELOG.md#v14114-2026-03-26)
- **Bug Fix**: Fix a bug where a recorded clock skew could persist on
the client even if the client and server clock ended up realigning.
- `github.com/aws/aws-sdk-go-v2/service/eks`:
[v1.81.2](service/eks/CHANGELOG.md#v1812-2026-03-26)
- **Bug Fix**: Fix a bug where a recorded clock skew could persist on
the client even if the client and server clock ended up realigning.
- `github.com/aws/aws-sdk-go-v2/service/eksauth`:
[v1.12.13](service/eksauth/CHANGELOG.md#v11213-2026-03-26)
- **Bug Fix**: Fix a bug where a recorded clock skew could persist on
the client even if the client and server clock ended up realigning.
- `github.com/aws/aws-sdk-go-v2/service/elasticache`:
[v1.51.13](service/elasticache/CHANGELOG.md#v15113-2026-03-26)
- **Bug Fix**: Fix a bug where a recorded clock skew could persist on
the client even if the client and server clock ended up realigning.
- `github.com/aws/aws-sdk-go-v2/service/elasticbeanstalk`:
[v1.34.2](service/elasticbeanstalk/CHANGELOG.md#v1342-2026-03-26)
- **Bug Fix**: Fix a bug where a recorded clock skew could persist on
the client even if the client and server clock ended up realigning.
- `github.com/aws/aws-sdk-go-v2/service/elasticloadbalancing`:
[v1.33.23](service/elasticloadbalancing/CHANGELOG.md#v13323-2026-03-26)
- **Bug Fix**: Fix a bug where a recorded clock skew could persist on
the client even if the client and server clock ended up realigning.
- `github.com/aws/aws-sdk-go-v2/service/elasticloadbalancingv2`:
[v1.54.10](service/elasticloadbalancingv2/CHANGELOG.md#v15410-2026-03-26)
- **Bug Fix**: Fix a bug where a recorded clock skew could persist on
the client even if the client and server clock ended up realigning.
- `github.com/aws/aws-sdk-go-v2/service/elasticsearchservice`:
[v1.39.2](service/elasticsearchservice/CHANGELOG.md#v1392-2026-03-26)
- **Bug Fix**: Fix a bug where a recorded clock skew could persist on
the client even if the client and server clock ended up realigning.
- `github.com/aws/aws-sdk-go-v2/service/elementalinference`:
[v1.0.3](service/elementalinference/CHANGELOG.md#v103-2026-03-26)
- **Bug Fix**: Fix a bug where a recorded clock skew could persist on
the client even if the client and server clock ended up realigning.
- `github.com/aws/aws-sdk-go-v2/service/emr`:
[v1.59.0](service/emr/CHANGELOG.md#v1590-2026-03-26)
  - **Feature**: Add StepExecutionRoleArn to RunJobFlow API
- **Bug Fix**: Fix a bug where a recorded clock skew could persist on
the client even if the client and server clock ended up realigning.
- `github.com/aws/aws-sdk-go-v2/service/emrcontainers`:
[v1.40.17](service/emrcontainers/CHANGELOG.md#v14017-2026-03-26)
- **Bug Fix**: Fix a bug where a recorded clock skew could persist on
the client even if the client and server clock ended up realigning.
- `github.com/aws/aws-sdk-go-v2/service/emrserverless`:
[v1.39.6](service/emrserverless/CHANGELOG.md#v1396-2026-03-26)
- **Bug Fix**: Fix a bug where a recorded clock skew could persist on
the client even if the client and server clock ended up realigning.
- `github.com/aws/aws-sdk-go-v2/service/entityresolution`:
[v1.26.5](service/entityresolution/CHANGELOG.md#v1265-2026-03-26)
- **Bug Fix**: Fix a bug where a recorded clock skew could persist on
the client even if the client and server clock ended up realigning.
- `github.com/aws/aws-sdk-go-v2/service/eventbridge`:
[v1.45.23](service/eventbridge/CHANGELOG.md#v14523-2026-03-26)
- **Bug Fix**: Fix a bug where a recorded clock skew could persist on
the client even if the client and server clock ended up realigning.
- `github.com/aws/aws-sdk-go-v2/service/evs`:
[v1.6.4](service/evs/CHANGELOG.md#v164-2026-03-26)
- **Bug Fix**: Fix a bug where a recorded clock skew could persist on
the client even if the client and server clock ended up realigning.
- `github.com/aws/aws-sdk-go-v2/service/finspace`:
[v1.33.21](service/finspace/CHANGELOG.md#v13321-2026-03-26)
- **Bug Fix**: Fix a bug where a recorded clock skew could persist on
the client even if the client and server clock ended up realigning.
- `github.com/aws/aws-sdk-go-v2/service/finspacedata`:
[v1.33.21](service/finspacedata/CHANGELOG.md#v13321-2026-03-26)
- **Bug Fix**: Fix a bug where a recorded clock skew could persist on
the client even if the client and server clock ended up realigning.
- `github.com/aws/aws-sdk-go-v2/service/firehose`:
[v1.42.13](service/firehose/CHANGELOG.md#v14213-2026-03-26)
- **Bug Fix**: Fix a bug where a recorded clock skew could persist on
the client even if the client and server clock ended up realigning.
- `github.com/aws/aws-sdk-go-v2/service/fis`:
[v1.37.20](service/fis/CHANGELOG.md#v13720-2026-03-26)
- **Bug Fix**: Fix a bug where a recorded clock skew could persist on
the client even if the client and server clock ended up realigning.
- `github.com/aws/aws-sdk-go-v2/service/fms`:
[v1.44.22](service/fms/CHANGELOG.md#v14422-2026-03-26)
- **Bug Fix**: Fix a bug where a recorded clock skew could persist on
the client even if the client and server clock ended up realigning.
- `github.com/aws/aws-sdk-go-v2/service/forecast`:
[v1.41.21](service/forecast/CHANGELOG.md#v14121-2026-03-26)
- **Bug Fix**: Fix a bug where a recorded clock skew could persist on
the client even if the client and server clock ended up realigning.
- `github.com/aws/aws-sdk-go-v2/service/forecastquery`:
[v1.29.21](service/forecastquery/CHANGELOG.md#v12921-2026-03-26)
- **Bug Fix**: Fix a bug where a recorded clock skew could persist on
the client even if the client and server clock ended up realigning.
- `github.com/aws/aws-sdk-go-v2/service/frauddetector`:
[v1.41.12](service/frauddetector/CHANGELOG.md#v14112-2026-03-26)
- **Bug Fix**: Fix a bug where a recorded clock skew could persist on
the client even if the client and server clock ended up realigning.
- `github.com/aws/aws-sdk-go-v2/service/freetier`:
[v1.13.14](service/freetier/CHANGELOG.md#v11314-2026-03-26)
- **Bug Fix**: Fix a bug where a recorded clock skew could persist on
the client even if the client and server clock ended up realigning.
- `github.com/aws/aws-sdk-go-v2/service/fsx`:
[v1.65.7](service/fsx/CHANGELOG.md#v1657-2026-03-26)
- **Bug Fix**: Fix a bug where a recorded clock skew could persist on
the client even if the client and server clock ended up realigning.
- `github.com/aws/aws-sdk-go-v2/service/gamelift`:
[v1.51.3](service/gamelift/CHANGELOG.md#v1513-2026-03-26)
- **Bug Fix**: Fix a bug where a recorded clock skew could persist on
the client even if the client and server clock ended up realigning.
- `github.com/aws/aws-sdk-go-v2/service/gameliftstreams`:
[v1.11.1](service/gameliftstreams/CHANGELOG.md#v1111-2026-03-26)
- **Bug Fix**: Fix a bug where a recorded clock skew could persist on
the client even if the client and server clock ended up realigning.
- `github.com/aws/aws-sdk-go-v2/service/geomaps`:
[v1.9.4](service/geomaps/CHANGELOG.md#v194-2026-03-26)
- **Bug Fix**: Fix a bug where a recorded clock skew could persist on
the client even if the client and server clock ended up realigning.
- `github.com/aws/aws-sdk-go-v2/service/geoplaces`:
[v1.8.5](service/geoplaces/CHANGELOG.md#v185-2026-03-26)
- **Bug Fix**: Fix a bug where a recorded clock skew could persist on
the client even if the client and server clock ended up realigning.
- `github.com/aws/aws-sdk-go-v2/service/georoutes`:
[v1.7.14](service/georoutes/CHANGELOG.md#v1714-2026-03-26)
- **Bug Fix**: Fix a bug where a recorded clock skew could persist on
the client even if the client and server clock ended up realigning.
- `github.com/aws/aws-sdk-go-v2/service/glacier`:
[v1.32.6](service/glacier/CHANGELOG.md#v1326-2026-03-26)
- **Bug Fix**: Fix a bug where a recorded clock skew could persist on
the client even if the client and server clock ended up realigning.
- `github.com/aws/aws-sdk-go-v2/service/globalaccelerator`:
[v1.35.15](service/globalaccelerator/CHANGELOG.md#v13515-2026-03-26)
- **Bug Fix**: Fix a bug where a recorded clock skew could persist on
the client even if the client and server clock ended up realigning.
- `github.com/aws/aws-sdk-go-v2/service/glue`:
[v1.139.1](service/glue/CHANGELOG.md#v11391-2026-03-26)
  - **B

> ✂ **Note**
>
> PR body was truncated to here.

</details>

---

### Configuration

📅 **Schedule**: (in timezone Europe/London)

- Branch creation
  - "after 6pm on thursday,before 10am on friday"
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config
help](https://redirect.github.com/renovatebot/renovate/discussions) if
that's undesired.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/overmindtech/workspace).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xMi4wIiwidXBkYXRlZEluVmVyIjoiNDQuMTIuMCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiZGVwZW5kZW5jaWVzIiwiZ29sYW5nIl19-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
GitOrigin-RevId: 0500bb35ac432b638c4fa86d69905b515b0533e5
This PR contains the following updates:

| Package | Change |
[Age](https://docs.renovatebot.com/merge-confidence/) |
[Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|
|
[github.com/getsentry/sentry-go](https://redirect.github.com/getsentry/sentry-go)
| `v0.47.0` → `v0.48.0` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fgetsentry%2fsentry-go/v0.48.0?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fgetsentry%2fsentry-go/v0.47.0/v0.48.0?slim=true)
|
|
[go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp](https://redirect.github.com/open-telemetry/opentelemetry-go-contrib)
| `v0.69.0` → `v0.70.0` |
![age](https://developer.mend.io/api/mc/badges/age/go/go.opentelemetry.io%2fcontrib%2finstrumentation%2fnet%2fhttp%2fotelhttp/v0.70.0?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/go.opentelemetry.io%2fcontrib%2finstrumentation%2fnet%2fhttp%2fotelhttp/v0.69.0/v0.70.0?slim=true)
|
|
[go.opentelemetry.io/otel](https://redirect.github.com/open-telemetry/opentelemetry-go)
| `v1.44.0` → `v1.45.0` |
![age](https://developer.mend.io/api/mc/badges/age/go/go.opentelemetry.io%2fotel/v1.45.0?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/go.opentelemetry.io%2fotel/v1.44.0/v1.45.0?slim=true)
|
|
[go.opentelemetry.io/otel/exporters/otlp/otlptrace](https://redirect.github.com/open-telemetry/opentelemetry-go)
| `v1.44.0` → `v1.45.0` |
![age](https://developer.mend.io/api/mc/badges/age/go/go.opentelemetry.io%2fotel%2fexporters%2fotlp%2fotlptrace/v1.45.0?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/go.opentelemetry.io%2fotel%2fexporters%2fotlp%2fotlptrace/v1.44.0/v1.45.0?slim=true)
|
|
[go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp](https://redirect.github.com/open-telemetry/opentelemetry-go)
| `v1.44.0` → `v1.45.0` |
![age](https://developer.mend.io/api/mc/badges/age/go/go.opentelemetry.io%2fotel%2fexporters%2fotlp%2fotlptrace%2fotlptracehttp/v1.45.0?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/go.opentelemetry.io%2fotel%2fexporters%2fotlp%2fotlptrace%2fotlptracehttp/v1.44.0/v1.45.0?slim=true)
|
|
[go.opentelemetry.io/otel/exporters/stdout/stdouttrace](https://redirect.github.com/open-telemetry/opentelemetry-go)
| `v1.44.0` → `v1.45.0` |
![age](https://developer.mend.io/api/mc/badges/age/go/go.opentelemetry.io%2fotel%2fexporters%2fstdout%2fstdouttrace/v1.45.0?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/go.opentelemetry.io%2fotel%2fexporters%2fstdout%2fstdouttrace/v1.44.0/v1.45.0?slim=true)
|
|
[go.opentelemetry.io/otel/metric](https://redirect.github.com/open-telemetry/opentelemetry-go)
| `v1.44.0` → `v1.45.0` |
![age](https://developer.mend.io/api/mc/badges/age/go/go.opentelemetry.io%2fotel%2fmetric/v1.45.0?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/go.opentelemetry.io%2fotel%2fmetric/v1.44.0/v1.45.0?slim=true)
|
|
[go.opentelemetry.io/otel/sdk](https://redirect.github.com/open-telemetry/opentelemetry-go)
| `v1.44.0` → `v1.45.0` |
![age](https://developer.mend.io/api/mc/badges/age/go/go.opentelemetry.io%2fotel%2fsdk/v1.45.0?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/go.opentelemetry.io%2fotel%2fsdk/v1.44.0/v1.45.0?slim=true)
|
|
[go.opentelemetry.io/otel/trace](https://redirect.github.com/open-telemetry/opentelemetry-go)
| `v1.44.0` → `v1.45.0` |
![age](https://developer.mend.io/api/mc/badges/age/go/go.opentelemetry.io%2fotel%2ftrace/v1.45.0?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/go.opentelemetry.io%2fotel%2ftrace/v1.44.0/v1.45.0?slim=true)
|

---

> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/370) for more information.

---

### Release Notes

<details>
<summary>getsentry/sentry-go (github.com/getsentry/sentry-go)</summary>

###
[`v0.48.0`](https://redirect.github.com/getsentry/sentry-go/releases/tag/v0.48.0):
0.48.0

[Compare
Source](https://redirect.github.com/getsentry/sentry-go/compare/v0.47.0...v0.48.0)

##### Breaking Changes 🛠

- Remove issue creation from logging integrations by
[@&#8203;giortzisg](https://redirect.github.com/giortzisg) in
[#&#8203;1340](https://redirect.github.com/getsentry/sentry-go/pull/1340)

##### New Features ✨

- Add `ClientOptions.DataCollection` for granular control over data
collected by automatic instrumentation, replacing the broad
`SendDefaultPII` switch. `DataCollection` can independently configure
automatic `user.*` population, cookies, request/response headers, HTTP
bodies, and query parameters. When configured, it is the source of truth
and `SendDefaultPII` is ignored. by
[@&#8203;giortzisg](https://redirect.github.com/giortzisg) in
[#&#8203;1339](https://redirect.github.com/getsentry/sentry-go/pull/1339)
- For backwards compatibility, clients that do not configure
`DataCollection` keep a best-effort mapping of the previous
`SendDefaultPII` behavior. To opt in to the new defaults, pass an empty
`DataCollection` and then restrict individual categories as needed.
  ```go
  sentry.Init(sentry.ClientOptions{
      Dsn: "https://public@example.com/1",

// Opt in to the new data collection defaults. Omitted fields use their
// defaults: user info, cookies, headers, query params, and supported
HTTP
      // bodies are collected, with sensitive values filtered.
      DataCollection: &sentry.DataCollection{},
  })
  ```
- To opt in while disabling automatic user info and HTTP bodies,
configure those fields explicitly:
  ```go
  sentry.Init(sentry.ClientOptions{
      Dsn: "https://public@example.com/1",
      DataCollection: &sentry.DataCollection{
          UserInfo:   sentry.Set(false),
          HTTPBodies: []sentry.BodyType{},
      },
  })
  ```
- PushScope shorthand now returns the new scope reference by
[@&#8203;DoctorJohn](https://redirect.github.com/DoctorJohn) in
[#&#8203;1335](https://redirect.github.com/getsentry/sentry-go/pull/1335)

##### Bug Fixes 🐛

- Fix fiber route name when using middlewares by
[@&#8203;giortzisg](https://redirect.github.com/giortzisg) in
[#&#8203;1363](https://redirect.github.com/getsentry/sentry-go/pull/1363)
- Omit empty event id for standalone client reports by
[@&#8203;giortzisg](https://redirect.github.com/giortzisg) in
[#&#8203;1362](https://redirect.github.com/getsentry/sentry-go/pull/1362)
- Preserve '%' literal in log messages by
[@&#8203;giortzisg](https://redirect.github.com/giortzisg) in
[#&#8203;1358](https://redirect.github.com/getsentry/sentry-go/pull/1358)
- Unaligned 64-bit atomic panic on 32-bit platforms in telemetry buffers
by [@&#8203;Kirill-INQ](https://redirect.github.com/Kirill-INQ) in
[#&#8203;1355](https://redirect.github.com/getsentry/sentry-go/pull/1355)
- Isolate event processor across clones by
[@&#8203;giortzisg](https://redirect.github.com/giortzisg) in
[#&#8203;1337](https://redirect.github.com/getsentry/sentry-go/pull/1337)

##### Internal Changes 🔧

##### Deps

- Bump fiber/v2 to 2.52.14 by
[@&#8203;giortzisg](https://redirect.github.com/giortzisg) in
[#&#8203;1359](https://redirect.github.com/getsentry/sentry-go/pull/1359)
- Bump actions/checkout from 6.0.3 to 7.0.0 by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[#&#8203;1349](https://redirect.github.com/getsentry/sentry-go/pull/1349)
- Bump golangci/golangci-lint-action from 9.2.1 to 9.3.0 by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[#&#8203;1346](https://redirect.github.com/getsentry/sentry-go/pull/1346)
- Bump codecov/codecov-action from 6.0.0 to 7.0.0 by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[#&#8203;1347](https://redirect.github.com/getsentry/sentry-go/pull/1347)
- Bump actions/setup-go from 6.4.0 to 6.5.0 by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[#&#8203;1343](https://redirect.github.com/getsentry/sentry-go/pull/1343)
- Bump golang.org/x/crypto to 0.52.0 and golang/x/net to 0.55.0 by
[@&#8203;giortzisg](https://redirect.github.com/giortzisg) in
[#&#8203;1341](https://redirect.github.com/getsentry/sentry-go/pull/1341)
- Bump getsentry/github-workflows/validate-pr from
[`c802283`](https://redirect.github.com/getsentry/sentry-go/commit/c802283cd9075b7a2b7a32655019c21c21676e34)
to
[`4013fc6`](https://redirect.github.com/getsentry/sentry-go/commit/4013fc6e1aeb1be1f9d3b4d232624f0ec1afa613)
by [@&#8203;dependabot](https://redirect.github.com/dependabot) in
[#&#8203;1344](https://redirect.github.com/getsentry/sentry-go/pull/1344)

##### Other

- Remove changelog-preview and codecov actions by
[@&#8203;giortzisg](https://redirect.github.com/giortzisg) in
[#&#8203;1357](https://redirect.github.com/getsentry/sentry-go/pull/1357)
- Add govulncheck audit action by
[@&#8203;giortzisg](https://redirect.github.com/giortzisg) in
[#&#8203;1342](https://redirect.github.com/getsentry/sentry-go/pull/1342)
- Limit changelog-preview secret access by
[@&#8203;giortzisg](https://redirect.github.com/giortzisg) in
[#&#8203;1350](https://redirect.github.com/getsentry/sentry-go/pull/1350)
- Move limited buffer under utils by
[@&#8203;giortzisg](https://redirect.github.com/giortzisg) in
[#&#8203;1338](https://redirect.github.com/getsentry/sentry-go/pull/1338)

</details>

<details>
<summary>open-telemetry/opentelemetry-go
(go.opentelemetry.io/otel)</summary>

###
[`v1.45.0`](https://redirect.github.com/open-telemetry/opentelemetry-go/compare/v1.44.0...v1.45.0)

[Compare
Source](https://redirect.github.com/open-telemetry/opentelemetry-go/compare/v1.44.0...v1.45.0)

</details>

---

### Configuration

📅 **Schedule**: (in timezone Europe/London)

- Branch creation
  - "after 6pm on thursday,before 10am on friday"
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config
help](https://redirect.github.com/renovatebot/renovate/discussions) if
that's undesired.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/overmindtech/workspace).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xMi4wIiwidXBkYXRlZEluVmVyIjoiNDQuMTIuMCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiZGVwZW5kZW5jaWVzIiwiZ29sYW5nIiwib2JzZXJ2YWJpbGl0eSJdfQ==-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
GitOrigin-RevId: b4b878d1c0827fa41ad3e139cea4bbc5783d6593
This PR contains the following updates:

| Package | Change |
[Age](https://docs.renovatebot.com/merge-confidence/) |
[Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|
|
[cloud.google.com/go/bigtable](https://redirect.github.com/googleapis/google-cloud-go)
| `v1.51.0` → `v1.52.0` |
![age](https://developer.mend.io/api/mc/badges/age/go/cloud.google.com%2fgo%2fbigtable/v1.52.0?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/cloud.google.com%2fgo%2fbigtable/v1.51.0/v1.52.0?slim=true)
|
|
[google.golang.org/api](https://redirect.github.com/googleapis/google-api-go-client)
| `v0.291.0` → `v0.292.0` |
![age](https://developer.mend.io/api/mc/badges/age/go/google.golang.org%2fapi/v0.292.0?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/google.golang.org%2fapi/v0.291.0/v0.292.0?slim=true)
|

---

> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/370) for more information.

---

### Release Notes

<details>
<summary>googleapis/google-api-go-client
(google.golang.org/api)</summary>

###
[`v0.292.0`](https://redirect.github.com/googleapis/google-api-go-client/releases/tag/v0.292.0)

[Compare
Source](https://redirect.github.com/googleapis/google-api-go-client/compare/v0.291.0...v0.292.0)

##### Features

- **all:** Auto-regenerate discovery clients
([#&#8203;3682](https://redirect.github.com/googleapis/google-api-go-client/issues/3682))
([b70719b](https://redirect.github.com/googleapis/google-api-go-client/commit/b70719bb5600e7681c883946903c4e55c493c801))
- **all:** Auto-regenerate discovery clients
([#&#8203;3684](https://redirect.github.com/googleapis/google-api-go-client/issues/3684))
([c9bc778](https://redirect.github.com/googleapis/google-api-go-client/commit/c9bc778099e72798eef096de828fb333389f7010))
- **all:** Auto-regenerate discovery clients
([#&#8203;3685](https://redirect.github.com/googleapis/google-api-go-client/issues/3685))
([8140ddf](https://redirect.github.com/googleapis/google-api-go-client/commit/8140ddf12e1a5c4a54748a94b6655818fcc480ed))
- **all:** Auto-regenerate discovery clients
([#&#8203;3687](https://redirect.github.com/googleapis/google-api-go-client/issues/3687))
([57047fb](https://redirect.github.com/googleapis/google-api-go-client/commit/57047fb96a7bd29eea0bfed36a9207389f3cafcf))
- **all:** Auto-regenerate discovery clients
([#&#8203;3688](https://redirect.github.com/googleapis/google-api-go-client/issues/3688))
([256abd7](https://redirect.github.com/googleapis/google-api-go-client/commit/256abd760aedde96c6e73ecf11822ed4cb223469))

</details>

---

### Configuration

📅 **Schedule**: (in timezone Europe/London)

- Branch creation
  - "after 6pm on thursday,before 10am on friday"
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config
help](https://redirect.github.com/renovatebot/renovate/discussions) if
that's undesired.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/overmindtech/workspace).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xMi4wIiwidXBkYXRlZEluVmVyIjoiNDQuMTIuMCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiZGVwZW5kZW5jaWVzIiwiZ29sYW5nIl19-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
GitOrigin-RevId: bffb061c93a9f9c6b4c9c4acfdc7ac980fb8f31e
This PR contains the following updates:

| Package | Change |
[Age](https://docs.renovatebot.com/merge-confidence/) |
[Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|
| buf.build/gen/go/depot/api/connectrpc/go |
`v1.20.0-20260706220319-a3bcb894aab3.1` →
`v1.20.0-20260805103418-70b5c163d960.1` |
![age](https://developer.mend.io/api/mc/badges/age/go/buf.build%2fgen%2fgo%2fdepot%2fapi%2fconnectrpc%2fgo/v1.20.0-20260805103418-70b5c163d960.1?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/buf.build%2fgen%2fgo%2fdepot%2fapi%2fconnectrpc%2fgo/v1.20.0-20260706220319-a3bcb894aab3.1/v1.20.0-20260805103418-70b5c163d960.1?slim=true)
|
| buf.build/gen/go/depot/api/protocolbuffers/go |
`v1.36.11-20260706220319-a3bcb894aab3.1` →
`v1.36.11-20260805103418-70b5c163d960.1` |
![age](https://developer.mend.io/api/mc/badges/age/go/buf.build%2fgen%2fgo%2fdepot%2fapi%2fprotocolbuffers%2fgo/v1.36.11-20260805103418-70b5c163d960.1?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/buf.build%2fgen%2fgo%2fdepot%2fapi%2fprotocolbuffers%2fgo/v1.36.11-20260706220319-a3bcb894aab3.1/v1.36.11-20260805103418-70b5c163d960.1?slim=true)
|
| [github.com/aws/smithy-go](https://redirect.github.com/aws/smithy-go)
| `v1.27.6` → `v1.27.7` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2fsmithy-go/v1.27.7?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2fsmithy-go/v1.27.6/v1.27.7?slim=true)
|
| [github.com/google/cel-go](https://redirect.github.com/google/cel-go)
| `v0.30.0` → `v0.31.0` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fgoogle%2fcel-go/v0.31.0?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fgoogle%2fcel-go/v0.30.0/v0.31.0?slim=true)
|
|
[github.com/harness/harness-go-sdk](https://redirect.github.com/harness/harness-go-sdk)
| `v0.8.15` → `v0.8.19` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fharness%2fharness-go-sdk/v0.8.19?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fharness%2fharness-go-sdk/v0.8.15/v0.8.19?slim=true)
|
|
[github.com/openai/openai-go/v3](https://redirect.github.com/openai/openai-go)
| `v3.49.0` → `v3.50.0` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fopenai%2fopenai-go%2fv3/v3.50.0?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fopenai%2fopenai-go%2fv3/v3.49.0/v3.50.0?slim=true)
|
|
[github.com/posthog/posthog-go](https://redirect.github.com/posthog/posthog-go)
| `v1.22.0` → `v1.23.0` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fposthog%2fposthog-go/v1.23.0?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fposthog%2fposthog-go/v1.22.0/v1.23.0?slim=true)
|
|
[github.com/sashabaranov/go-openai](https://redirect.github.com/sashabaranov/go-openai)
| `v1.41.2` → `v1.42.0` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fsashabaranov%2fgo-openai/v1.42.0?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fsashabaranov%2fgo-openai/v1.41.2/v1.42.0?slim=true)
|
|
[gitlab.com/gitlab-org/api/client-go/v2](https://gitlab.com/gitlab-org/api/client-go)
| `v2.55.1` → `v2.56.0` |
![age](https://developer.mend.io/api/mc/badges/age/go/gitlab.com%2fgitlab-org%2fapi%2fclient-go%2fv2/v2.56.0?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/gitlab.com%2fgitlab-org%2fapi%2fclient-go%2fv2/v2.55.1/v2.56.0?slim=true)
|

---

> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/370) for more information.

---

### Release Notes

<details>
<summary>aws/smithy-go (github.com/aws/smithy-go)</summary>

###
[`v1.27.7`](https://redirect.github.com/aws/smithy-go/blob/HEAD/CHANGELOG.md#Release-2026-08-07)

[Compare
Source](https://redirect.github.com/aws/smithy-go/compare/v1.27.6...v1.27.7)

#### General Highlights

- **Dependency Update**: Updated to the latest SDK module versions

#### Module Highlights

- `github.com/aws/smithy-go`: v1.27.7
- **Bug Fix**: Don't serialize unset JSON documents as `nil` in
structure members.
- **Bug Fix**: Fix a deserialization panic around collection members in
recursive shape configs.

</details>

<details>
<summary>google/cel-go (github.com/google/cel-go)</summary>

###
[`v0.31.0`](https://redirect.github.com/cel-expr/cel-go/releases/tag/v0.31.0)

[Compare
Source](https://redirect.github.com/google/cel-go/compare/v0.30.0...v0.31.0)

This release introduces critical performance breakthroughs, simplifies
integration with native Go structures, and hardens the safety limits of
evaluated expressions.

**Features**

| Pull Request | Description and Impact |
|
:--------------------------------------------------------------------------------------------------------------
|
:---------------------------------------------------------------------------------------------------------------------------------------------------------------------------
|
| **Env copy on write**
([#&#8203;1405](https://redirect.github.com/google/cel-go/issues/1405))
| Introduces Copy-on-Write (COW) mechanics for environment definitions,
dramatically slashing CPU and memory allocation overhead when building
child or extended environments. |
| **Optimize NativeToValue call paths**
([#&#8203;1400](https://redirect.github.com/google/cel-go/issues/1400))
| Optimizes reflection-heavy conversion paths, significantly improving
evaluation speeds when feeding native Go types directly to the runtime
engine. |
| **Support self-describing, self-adapting struct types**
([#&#8203;1395](https://redirect.github.com/google/cel-go/issues/1395))
| Simplifies struct integration by enabling native Go struct types to
self-describe and adapt directly to the CEL type system without verbose
boilerplate. |
| **Move native type support into the Core CEL library**
([#&#8203;1396](https://redirect.github.com/google/cel-go/issues/1396))
| Moves native Go type mapping utilities directly into the Core CEL
package to unify dependency structure and improve native API access. |
| **Regex program plan size controls**
([#&#8203;1383](https://redirect.github.com/google/cel-go/issues/1383))
| Introduces critical compiled size constraints on regex expressions to
mitigate CPU/memory exhaustion vectors during evaluation. |
| **Simplify support for native object types**
([#&#8203;1393](https://redirect.github.com/google/cel-go/issues/1393))
| Streamlines setup workflows for mapping standard Go structures inside
the CEL compiler environment. |
| **Tag automation for go submodules**
([#&#8203;1401](https://redirect.github.com/google/cel-go/issues/1401))
| Automates the submodule tagging process to streamline multi-module
releases. |

**Fixes**

| Pull Request | Impact and Technical Details |
|
:---------------------------------------------------------------------------------------------------------------
|
:-------------------------------------------------------------------------------------------------------
|
| **Respect composed adapter for unregistered structs**
([#&#8203;1384](https://redirect.github.com/google/cel-go/issues/1384))
| Corrects behavior so that unregistered Go structs properly fall back
to composed adapter configurations. |
| **reject out-of-range hours in timezone offset parsing**
([#&#8203;1391](https://redirect.github.com/google/cel-go/issues/1391))
| Tightens datetime validation by rejecting invalid out-of-range hour
offsets during timezone parsing. |
| **Fix the expression limit node test**
([#&#8203;1390](https://redirect.github.com/google/cel-go/issues/1390))
| Restores stability to environment node test suites verifying
size-limit assertions. |
| **Correct documented default max value for lists.range**
([#&#8203;1392](https://redirect.github.com/google/cel-go/issues/1392))
| Resolves documentation drift regarding the default maximum limit for
the lists.range function. |

**Breaking Changes**

There are no breaking changes, but all `ext.NativeTypes` features are
now available via `cel.NativeTypes`

**Notes on Performance**

This release targets two primary computational bottlenecks in
high-throughput CEL environments: environment construction and
reflection-based type coercion.

##### **Expected Impact**

1. **Dynamic Environment Extension**: Applications that dynamically
extend a base CEL environment per request (e.g., policy validation
engines or API gateways adding request-scoped variables) will see
near-zero initialization costs. The **Copy-on-Write (COW)** optimization
prevents copying underlying maps of variables, functions, and adapters.
2. **Type Coercion Speed**: Bypassing heavy reflection paths during
NativeToValue conversions significantly cuts down CPU cycle usage and
drastically reduces garbage collection overhead in processing hot paths.
3. **AST Pruning**: Consolidating sequential list concatenations
([#&#8203;1406](https://redirect.github.com/google/cel-go/issues/1406))
and optimizing optional macros
([#&#8203;1387](https://redirect.github.com/google/cel-go/issues/1387))
ensures that generated program plans are leaner, reducing both
compilation and execution memory footprints.

##### **Go-lang Benchmark Citation (benchstat)**

The performance improvements can be verified running the repository's
native benchmark harness with benchstat:

`name                            old time/op    new time/op    delta`\
`BenchmarkEnvExtension/10_vars 3.56µs ± 1% 0.15µs ± 0% -95.79% (p=0.000
n=10+10)`\
`BenchmarkNativeToValue/struct 120ns ± 2% 42ns ± 1% -65.00% (p=0.000
n=10+10)`\
`BenchmarkOptionalMapEvaluation 245ns ± 1% 195ns ± 1% -20.41% (p=0.000
n=10+10)`

`name                            old allocs/op  new allocs/op  delta`\
`BenchmarkEnvExtension/10_vars 32.0 ± 0% 1.0 ± 0% -96.88% (p=0.000
n=10+10)`\
`BenchmarkNativeToValue/struct 3.00 ± 0% 1.00 ± 0% -66.67% (p=0.000
n=10+10)`

#### New Contributors

- [@&#8203;lopster568](https://redirect.github.com/lopster568) made
their first contribution in
[cel-expr#1384](https://redirect.github.com/cel-expr/cel-go/pull/1384)

**Full Changelog**:
<cel-expr/cel-go@v0.30.0...v0.31.0>

</details>

<details>
<summary>harness/harness-go-sdk
(github.com/harness/harness-go-sdk)</summary>

###
[`v0.8.19`](https://redirect.github.com/harness/harness-go-sdk/compare/v0.8.18...v0.8.19)

[Compare
Source](https://redirect.github.com/harness/harness-go-sdk/compare/v0.8.18...v0.8.19)

###
[`v0.8.18`](https://redirect.github.com/harness/harness-go-sdk/compare/v0.8.17...v0.8.18)

[Compare
Source](https://redirect.github.com/harness/harness-go-sdk/compare/v0.8.17...v0.8.18)

###
[`v0.8.17`](https://redirect.github.com/harness/harness-go-sdk/compare/v0.8.16...v0.8.17)

[Compare
Source](https://redirect.github.com/harness/harness-go-sdk/compare/v0.8.16...v0.8.17)

###
[`v0.8.16`](https://redirect.github.com/harness/harness-go-sdk/compare/v0.8.15...v0.8.16)

[Compare
Source](https://redirect.github.com/harness/harness-go-sdk/compare/v0.8.15...v0.8.16)

</details>

<details>
<summary>openai/openai-go (github.com/openai/openai-go/v3)</summary>

###
[`v3.50.0`](https://redirect.github.com/openai/openai-go/releases/tag/v3.50.0)

[Compare
Source](https://redirect.github.com/openai/openai-go/compare/v3.49.0...v3.50.0)

##### Features

- **api:** promote Go SDK changes
([#&#8203;748](https://redirect.github.com/openai/openai-go/issues/748))
([9e4b4d5](https://redirect.github.com/openai/openai-go/commit/9e4b4d5a5ccadc94ea8b8a54148e7a0e52797e94))

##### Build System

- **deps:** bump github.com/aws/aws-sdk-go-v2/config in /
([#&#8203;745](https://redirect.github.com/openai/openai-go/issues/745))
([af89b42](https://redirect.github.com/openai/openai-go/commit/af89b4276381d98193419f46429f79d74b490ec9))
- **deps:** bump the codeql group with 2 updates
([#&#8203;746](https://redirect.github.com/openai/openai-go/issues/746))
([41c8a70](https://redirect.github.com/openai/openai-go/commit/41c8a70fef4c2f7067a7eb6bc095c94d1782a2fe))

</details>

<details>
<summary>posthog/posthog-go (github.com/posthog/posthog-go)</summary>

###
[`v1.23.0`](https://redirect.github.com/PostHog/posthog-go/releases/tag/v1.23.0):
1.23.0

[Compare
Source](https://redirect.github.com/posthog/posthog-go/compare/v1.22.0...v1.23.0)

#### Unreleased

</details>

<details>
<summary>sashabaranov/go-openai
(github.com/sashabaranov/go-openai)</summary>

###
[`v1.42.0`](https://redirect.github.com/sashabaranov/go-openai/releases/tag/v1.42.0)

[Compare
Source](https://redirect.github.com/sashabaranov/go-openai/compare/v1.41.2...v1.42.0)

#### What's Changed

- \[BREAKING\_CHANGES] Stop stripping dots in azure model mapper by
[@&#8203;krissetto](https://redirect.github.com/krissetto) in
[#&#8203;1079](https://redirect.github.com/sashabaranov/go-openai/pull/1079)
- feat: add Responses API support by
[@&#8203;sashabaranov](https://redirect.github.com/sashabaranov) in
[#&#8203;1112](https://redirect.github.com/sashabaranov/go-openai/pull/1112)
- Modernize models, docs, and CI by
[@&#8203;sashabaranov](https://redirect.github.com/sashabaranov) in
[#&#8203;1114](https://redirect.github.com/sashabaranov/go-openai/pull/1114)
- fix(images): send omitted image edit fields by
[@&#8203;ShiroKSH](https://redirect.github.com/ShiroKSH) in
[#&#8203;1113](https://redirect.github.com/sashabaranov/go-openai/pull/1113)
- form\_builder: always set a Content-Type on reader-based form parts by
[@&#8203;c-tonneslan](https://redirect.github.com/c-tonneslan) in
[#&#8203;1108](https://redirect.github.com/sashabaranov/go-openai/pull/1108)
- stream\_reader: stop wrapping nil APIError into "error, <nil>" by
[@&#8203;c-tonneslan](https://redirect.github.com/c-tonneslan) in
[#&#8203;1107](https://redirect.github.com/sashabaranov/go-openai/pull/1107)
- fix: always serialize stream field in request JSON by
[@&#8203;blackwell-systems](https://redirect.github.com/blackwell-systems)
in
[#&#8203;1104](https://redirect.github.com/sashabaranov/go-openai/pull/1104)

#### New Contributors

- [@&#8203;krissetto](https://redirect.github.com/krissetto) made their
first contribution in
[#&#8203;1079](https://redirect.github.com/sashabaranov/go-openai/pull/1079)
- [@&#8203;ShiroKSH](https://redirect.github.com/ShiroKSH) made their
first contribution in
[#&#8203;1113](https://redirect.github.com/sashabaranov/go-openai/pull/1113)
- [@&#8203;c-tonneslan](https://redirect.github.com/c-tonneslan) made
their first contribution in
[#&#8203;1108](https://redirect.github.com/sashabaranov/go-openai/pull/1108)
-
[@&#8203;blackwell-systems](https://redirect.github.com/blackwell-systems)
made their first contribution in
[#&#8203;1104](https://redirect.github.com/sashabaranov/go-openai/pull/1104)

**Full Changelog**:
<sashabaranov/go-openai@v1.41.2...v1.42.0>

</details>

<details>
<summary>gitlab-org/api/client-go
(gitlab.com/gitlab-org/api/client-go/v2)</summary>

###
[`v2.56.0`](https://gitlab.com/gitlab-org/api/client-go/tags/v2.56.0)

[Compare
Source](https://gitlab.com/gitlab-org/api/client-go/compare/v2.55.1...v2.56.0)

#### 2.56.0

##### 🚀 Features

- Add StartDate to IssueEventObjectAttributes
([!2972](https://gitlab.com/gitlab-org/api/client-go/-/merge_requests/2972))
by [Brian](https://gitlab.com/mookwoo)

##### 🐛 Bug Fixes

- fix(event_webhook_types): Add StartDate to IssueCommentEventIssue
struct
([!2971](https://gitlab.com/gitlab-org/api/client-go/-/merge_requests/2971))
by [Cesar Hinojosa](https://gitlab.com/cesarihinojosa)

##### 🔄 Other Changes

- chore(deps): update module go.yaml.in/yaml/v3 to v3.0.5
([!2973](https://gitlab.com/gitlab-org/api/client-go/-/merge_requests/2973))
by [GitLab Dependency
Bot](https://gitlab.com/gitlab-dependency-update-bot)
- chore(deps): update module github.com/google/cel-go to v0.30.0
([!2974](https://gitlab.com/gitlab-org/api/client-go/-/merge_requests/2974))
by [GitLab Dependency
Bot](https://gitlab.com/gitlab-dependency-update-bot)

###
[2.56.0](https://gitlab.com/gitlab-org/api/client-go/compare/v2.55.1...v2.56.0)
(2026-08-05)
##### Bug Fixes

* **event_webhook_types:** Add StartDate to IssueCommentEventIssue
struct
([4e3accc](https://gitlab.com/gitlab-org/api/client-go/commit/4e3accce0bb8cd05689c70cba277b70c701dab90))

</details>

---

### Configuration

📅 **Schedule**: (in timezone Europe/London)

- Branch creation
  - "after 6pm on thursday,before 10am on friday"
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config
help](https://redirect.github.com/renovatebot/renovate/discussions) if
that's undesired.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/overmindtech/workspace).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xMi4wIiwidXBkYXRlZEluVmVyIjoiNDQuMTIuMCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiZGVwZW5kZW5jaWVzIiwiZ29sYW5nIl19-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
GitOrigin-RevId: 48b4142efa4e3cbdb154323be03c295bf6c396bb
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [google.golang.org/protobuf](https://go.googlesource.com/protobuf) |
require | digest | `f2248ac` → `644d026` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/370) for more information.

---

### Configuration

📅 **Schedule**: (in timezone Europe/London)

- Branch creation
  - "after 6pm on thursday,before 10am on friday"
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/overmindtech/workspace).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xMi4wIiwidXBkYXRlZEluVmVyIjoiNDQuMTIuMCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiZGVwZW5kZW5jaWVzIiwiZ29sYW5nIl19-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
GitOrigin-RevId: 4c9b5af2647dda6f9f2cf6fde1b64a96c37dbd1e
renovate Bot and others added 6 commits August 12, 2026 13:37
This PR contains the following updates:

| Package | Change |
[Age](https://docs.renovatebot.com/merge-confidence/) |
[Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|
|
[github.com/riverqueue/river](https://redirect.github.com/riverqueue/river)
| `v0.41.1` → `v0.43.0` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2friverqueue%2friver/v0.43.0?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2friverqueue%2friver/v0.41.1/v0.43.0?slim=true)
|
|
[github.com/riverqueue/river/riverdriver/riverpgxv5](https://redirect.github.com/riverqueue/river)
| `v0.41.1` → `v0.43.0` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2friverqueue%2friver%2friverdriver%2friverpgxv5/v0.43.0?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2friverqueue%2friver%2friverdriver%2friverpgxv5/v0.41.1/v0.43.0?slim=true)
|
|
[github.com/riverqueue/river/rivertype](https://redirect.github.com/riverqueue/river)
| `v0.41.1` → `v0.43.0` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2friverqueue%2friver%2frivertype/v0.43.0?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2friverqueue%2friver%2frivertype/v0.41.1/v0.43.0?slim=true)
|
|
[github.com/riverqueue/rivercontrib/otelriver](https://redirect.github.com/riverqueue/rivercontrib)
| `v0.10.0` → `v0.12.0` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2friverqueue%2frivercontrib%2fotelriver/v0.12.0?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2friverqueue%2frivercontrib%2fotelriver/v0.10.0/v0.12.0?slim=true)
|

---

> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/370) for more information.

## ⚠️ Warning

These modules contain database migrations that need to be added manually
to our atlas migrations. Check the contents of
https://github.com/riverqueue/river/tree/master/rivermigrate/migration
before merging this update.

---

### Release Notes

<details>
<summary>riverqueue/river (github.com/riverqueue/river)</summary>

###
[`v0.43.0`](https://redirect.github.com/riverqueue/river/releases/tag/v0.43.0)

[Compare
Source](https://redirect.github.com/riverqueue/river/compare/v0.42.0...v0.43.0)

##### Added

- Added `JobListParams.TagsAll` and `JobListParams.TagsAny` for
filtering jobs that match every or any exact tag, respectively. [PR
#&#8203;1339](https://redirect.github.com/riverqueue/river/pull/1339).

##### Fixed

- `testsignal` no longer imports `riversharedtest`, so testify, go-spew,
goleak, and yaml are no longer linked into production binaries that use
River. `WaitTimeout` moved to `rivershared/util/testutil`, with
`riversharedtest.WaitTimeout` kept as a wrapper around it. [PR
#&#8203;1342](https://redirect.github.com/riverqueue/river/pull/1342).

###
[`v0.42.0`](https://redirect.github.com/riverqueue/river/releases/tag/v0.42.0)

[Compare
Source](https://redirect.github.com/riverqueue/river/compare/v0.41.1...v0.42.0)

##### Added

- Added `JobArgsWithPlugins` for installing plugins that apply only to a
specific job type. [PR
#&#8203;1337](https://redirect.github.com/riverqueue/river/pull/1337).

</details>

<details>
<summary>riverqueue/rivercontrib
(github.com/riverqueue/rivercontrib/otelriver)</summary>

###
[`v0.12.0`](https://redirect.github.com/riverqueue/rivercontrib/releases/tag/v0.12.0)

[Compare
Source](https://redirect.github.com/riverqueue/rivercontrib/compare/v0.11.0...v0.12.0)

##### Added

- Add `otelriver` hook support for River producer metrics, including
`river.job_get_available_duration` and `river.job_get_available_count`.
[PR
#&#8203;64](https://redirect.github.com/riverqueue/rivercontrib/pull/64).

##### Changed

- Update River dependency to v0.41.0 in all subpackages. [PR
#&#8203;71](https://redirect.github.com/riverqueue/rivercontrib/pull/71).

###
[`v0.11.0`](https://redirect.github.com/riverqueue/rivercontrib/releases/tag/v0.11.0)

[Compare
Source](https://redirect.github.com/riverqueue/rivercontrib/compare/v0.10.0...v0.11.0)

##### Added

- Add `EnableTracePropagation` configuration method, which enables
linking river job spans to the span that enqueued them for tracing *why*
a job was enqueued. [PR
#&#8203;65](https://redirect.github.com/riverqueue/rivercontrib/pull/65)

</details>

---

### Configuration

📅 **Schedule**: (in timezone Europe/London)

- Branch creation
  - "after 6pm on thursday,before 10am on friday"
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config
help](https://redirect.github.com/renovatebot/renovate/discussions) if
that's undesired.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/overmindtech/workspace).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xMi4wIiwidXBkYXRlZEluVmVyIjoiNDQuMTIuMCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiZGVwZW5kZW5jaWVzIiwiZ29sYW5nIl19-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
GitOrigin-RevId: 57fdd20c7b5adb0db8720170c8f184a4935f4546
This PR contains the following updates:

| Package | Change |
[Age](https://docs.renovatebot.com/merge-confidence/) |
[Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|
|
[github.com/nats-io/nats-server/v2](https://redirect.github.com/nats-io/nats-server)
| `v2.14.3` → `v2.14.4` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fnats-io%2fnats-server%2fv2/v2.14.4?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fnats-io%2fnats-server%2fv2/v2.14.3/v2.14.4?slim=true)
|

---

> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/370) for more information.

---

### Release Notes

<details>
<summary>nats-io/nats-server
(github.com/nats-io/nats-server/v2)</summary>

###
[`v2.14.4`](https://redirect.github.com/nats-io/nats-server/releases/tag/v2.14.4)

[Compare
Source](https://redirect.github.com/nats-io/nats-server/compare/v2.14.3...v2.14.4)

#### Changelog

Refer to the [2.14 Upgrade
Guide](https://docs.nats.io/release-notes/whats_new/whats_new_214) for
backwards compatibility notes with 2.12.x. Please note that the 2.13.x
version was skipped.

##### Go Version

- 1.26.5
([#&#8203;8435](https://redirect.github.com/nats-io/nats-server/issues/8435))

##### Dependencies

- github.com/klauspost/compress v1.19.0
([#&#8203;8385](https://redirect.github.com/nats-io/nats-server/issues/8385))
- golang.org/x/crypto v0.54.0
([#&#8203;8385](https://redirect.github.com/nats-io/nats-server/issues/8385))
- golang.org/x/sys v0.47.0
([#&#8203;8385](https://redirect.github.com/nats-io/nats-server/issues/8385))
- github.com/antithesishq/antithesis-sdk-go v0.7.2-default-no-op
([#&#8203;8385](https://redirect.github.com/nats-io/nats-server/issues/8385))

##### Improved

JetStream

- The Raft transport layer has been decoupled, improves testing but does
not change server behaviour
([#&#8203;8181](https://redirect.github.com/nats-io/nats-server/issues/8181))
- The disk concurrency semaphore has been increased to 4096 slots, up
from the previous CPU-scaled count
([#&#8203;8336](https://redirect.github.com/nats-io/nats-server/issues/8336))
- The disk concurrency semaphore can now be configured with the
`max_concurrent_io` option in the `jetstream` config block
([#&#8203;8336](https://redirect.github.com/nats-io/nats-server/issues/8336))
- Filestore underlying block cache buffers are now recycled to the pool
when the weak reference is collected by the GC, which should smooth out
memory usage with some usage patterns
([#&#8203;8395](https://redirect.github.com/nats-io/nats-server/issues/8395))
- Calculating and looking up sequences in delete maps for file-backed
streams with large numbers of interior deletes is now faster and holds
locks for less time
([#&#8203;8403](https://redirect.github.com/nats-io/nats-server/issues/8403))
- Inserts, iterations and deletes in AVL sequence sets are now faster in
many cases, which speeds up the tracking of interior deletes
([#&#8203;8406](https://redirect.github.com/nats-io/nats-server/issues/8406))
- Stream snapshots now attempt to determine the correct encode buffer
size up front, avoiding many unnecessary allocations on streams with
large numbers of interior deletes
([#&#8203;8405](https://redirect.github.com/nats-io/nats-server/issues/8405))
- Reduced memory usage of the structure that is used to track subjects
within a stream
([#&#8203;8412](https://redirect.github.com/nats-io/nats-server/issues/8412))

##### Fixed

General

- `allow_non_tls` will no longer log an incorrect message at startup
claiming that TLS is required
([#&#8203;8420](https://redirect.github.com/nats-io/nats-server/issues/8420))
- Combining `no_auth_user` with auth callouts will no longer skip
authentication checks when no `CONNECT` message is sent
- JWT validation no longer crashes the server with whitespace-only
permissions
- Several paths that enforce the permissions of queue subscriptions no
longer treat the whole permission as a subject literal
- Several JetStream and MQTT endpoints now correctly guard against null
values in JSON
- Fixed an authentication bypass with TLS `verify_and_map`
authenticating users with blank passwords

Monitoring

- The `healthz` endpoint will now skip and no longer report on expired
JWT accounts
([#&#8203;8379](https://redirect.github.com/nats-io/nats-server/issues/8379),
thanks to
[@&#8203;ByapakSigdel](https://redirect.github.com/ByapakSigdel))
- The `varz` endpoint will now correctly report JetStream limits after
they were changed via a config reload
([#&#8203;8394](https://redirect.github.com/nats-io/nats-server/issues/8394))

JetStream

- Malformed cluster replicated acks or delivered updates are now
correctly rejected by the decoder
([#&#8203;8284](https://redirect.github.com/nats-io/nats-server/issues/8284),
thanks to [@&#8203;uwezkhan](https://redirect.github.com/uwezkhan))
- Malformed cluster replicated skip or reset updates are now correctly
rejected by the decoder
([#&#8203;8345](https://redirect.github.com/nats-io/nats-server/issues/8345),
thanks to [@&#8203;uwezkhan](https://redirect.github.com/uwezkhan))
- Empty cluster replicated entries are now correctly ignored
([#&#8203;8347](https://redirect.github.com/nats-io/nats-server/issues/8347),
thanks to [@&#8203;uwezkhan](https://redirect.github.com/uwezkhan))
- Decoded AVL sequence set node counts are now validated correctly on
32-bit systems
([#&#8203;8355](https://redirect.github.com/nats-io/nats-server/issues/8355),
thanks to [@&#8203;uwezkhan](https://redirect.github.com/uwezkhan))
- Stale error responses on source or mirror creation are now dropped by
recreating the subscription
([#&#8203;8356](https://redirect.github.com/nats-io/nats-server/issues/8356))
- Oversized cluster replicated messages are now validated correctly on
32-bit systems
([#&#8203;8357](https://redirect.github.com/nats-io/nats-server/issues/8357),
thanks to [@&#8203;uwezkhan](https://redirect.github.com/uwezkhan))
- Raft elections now correctly ignore votes from removed peers
([#&#8203;8353](https://redirect.github.com/nats-io/nats-server/issues/8353))
- Filestore blocks with unsynced or truncated key files are now removed
and counted as lost data instead of failing to recover altogether
([#&#8203;8365](https://redirect.github.com/nats-io/nats-server/issues/8365))
- Filestore encryption key files are now synced to disk more
aggressively
([#&#8203;8366](https://redirect.github.com/nats-io/nats-server/issues/8366))
- Raft now handles the append entry iterator returning no more entries
correctly
([#&#8203;8372](https://redirect.github.com/nats-io/nats-server/issues/8372))
- Fixed string ownership when handling the expected last sequence per
subject in a batch
([#&#8203;8377](https://redirect.github.com/nats-io/nats-server/issues/8377))
- Fixed a race condition between concurrent message removals via limits
that could unexpectedly disable writes into a filestore
([#&#8203;8378](https://redirect.github.com/nats-io/nats-server/issues/8378))
- Fixed a bug in the filestore which could prevent some filestore block
cache references from being weakened correctly, which could result in
unexpected memory usage and GC pressure
([#&#8203;8380](https://redirect.github.com/nats-io/nats-server/issues/8380))
- Attempting to update the consumer storage type now correctly returns
an error
([#&#8203;8382](https://redirect.github.com/nats-io/nats-server/issues/8382))
- Stream publish checks will now correctly reject messages that exceed
the maximum store size before proposal
([#&#8203;8389](https://redirect.github.com/nats-io/nats-server/issues/8389))
- Fixed a race condition between storing messages in the filestore and
block compactions
([#&#8203;8400](https://redirect.github.com/nats-io/nats-server/issues/8400))
- The filestore no longer skips sparse delete blocks when processing
deletes from a snapshot
([#&#8203;8404](https://redirect.github.com/nats-io/nats-server/issues/8404))
- The consumer reset endpoint responses are no longer dropped when sent
through a service import
([#&#8203;8407](https://redirect.github.com/nats-io/nats-server/issues/8407))
- Creating a clustered consumer immediately after creating a clustered
stream should no longer respond with a `stream not found` error
([#&#8203;8410](https://redirect.github.com/nats-io/nats-server/issues/8410))
- Raft proposals now require the term to be passed down from JetStream,
preventing situations where stale proposals from a previous term could
make changes in a new term after a fast election
([#&#8203;8370](https://redirect.github.com/nats-io/nats-server/issues/8370))
- Replicated streams that were recreated while a node was down are no
longer treated as an update by a returning node processing a snapshot,
avoiding stale Raft groups from continuing to run and unexpected
behaviour with consumers
([#&#8203;8413](https://redirect.github.com/nats-io/nats-server/issues/8413))
- Stream snapshot endpoints now more strictly check the reply subject
for validity

MQTT

- Packet identifiers for QoS1 and QoS2 are now issued by a monotonic
counter, avoiding accidental ID reuse
([#&#8203;8358](https://redirect.github.com/nats-io/nats-server/issues/8358),
thanks to [@&#8203;nberlee](https://redirect.github.com/nberlee))
- Pending QoS1 and QoS2 deliveries should no longer leak when the
subscription is downgraded to QoS0
([#&#8203;8359](https://redirect.github.com/nats-io/nats-server/issues/8359),
thanks to [@&#8203;nberlee](https://redirect.github.com/nberlee))
- QoS2 messages released on a resumed sessions should no longer lose
their QoS or packet ID
([#&#8203;8414](https://redirect.github.com/nats-io/nats-server/issues/8414))
- MQTT clients can no longer subscribe to `$MQTT.>` subjects, closing a
potential permission bypass

##### Complete Changes

</details>

---

### Configuration

📅 **Schedule**: (in timezone Europe/London)

- Branch creation
  - "after 6pm on thursday,before 10am on friday"
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/overmindtech/workspace).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4zLjIiLCJ1cGRhdGVkSW5WZXIiOiI0NC4xMi4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJnb2xhbmciXX0=-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
GitOrigin-RevId: 2765a240302963ab544e83724f565973cd4b23f6
This PR contains the following updates:

| Update | Change |
|---|---|
| lockFileMaintenance | All locks refreshed |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/370) for more information.

🔧 This Pull Request updates lock files to use the latest dependency
versions.

---

### Configuration

📅 **Schedule**: (in timezone Europe/London)

- Branch creation
  - "before 4am on monday"
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config
help](https://redirect.github.com/renovatebot/renovate/discussions) if
that's undesired.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/overmindtech/workspace).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4zLjIiLCJ1cGRhdGVkSW5WZXIiOiI0NC4xMi4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiXX0=-->

<!-- CURSOR_SUMMARY -->
---

> [!NOTE]
> **Low Risk**
> Patch/minor provider lock updates only; no HCL resource changes.
Standard `terraform plan` in affected roots is still worth running
before apply because Auth0 and cloud providers touch production infra.
>
> **Overview**
> **Routine Terraform lock maintenance** across `cli/`, `deploy/`,
`deploy/meta/`, and module lock files, pinning newer provider builds
without changing Terraform resource definitions.
>
> **Provider version bumps in locks:** `hashicorp/aws` **6.56.0 →
6.58.0**, `hashicorp/google` **7.41.0 → 7.43.0**, `auth0/auth0` **1.53.0
→ 1.54.1**, and `honeycombio/honeycombio` **0.51.1 → 0.53.0** (with
updated checksums).
>
> **Honeycomb constraint alignment:** `required_providers` for
`honeycombio` changes from **`~> 0.51` to `~> 0.53`** in
`deploy/versions.tf`, `deploy/modules/brent/versions.tf`, and
`deploy/modules/ovm-infra/versions.tf`, matching the refreshed lock
entries (including `deploy/modules/brent/.terraform.lock.hcl`).
>
> <sup>Reviewed by [Cursor Bugbot](https://cursor.com/bugbot) for commit
e475a0ad63db150b8bfff4d80332674863f27170. Bugbot is set up for automated
code reviews on this repo. Configure
[here](https://www.cursor.com/dashboard/bugbot).</sup>
<!-- /CURSOR_SUMMARY -->

---------

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Cursor Agent <cursoragent@cursor.com>
Co-authored-by: Elliot Waddington <getinnocuous@users.noreply.github.com>
GitOrigin-RevId: c1c2873d8614c58bd961b1ca1e8fb9e3d7544fc4
## Summary

- Rename the Until protocol source and generated artifacts from Brent
basenames to Until (`sdp/until.proto`, `until*` Go/TS), and flip
`@overmindtech/sdp-js` exports to `/until*`.
- Update Copybara exclusions, the isolation CI check, frontend Docker
exclude, and CI codegen path filters in the same change so public repos
do not receive Until protocol Go.
- Area51 imports and isolation docs/rules are updated;
`services/brent-app` import rewrites are deferred until after ENG-6146
(`until-app`) lands and this branch is rebased.

## Linear Ticket

Fixes:
[ENG-6147](https://linear.app/overmind/issue/ENG-6147/rename-sdpbrentproto-and-copybara-isolation-atomically)
— Rename sdp/brent.proto and Copybara isolation atomically

- **Purpose**: Until-named protocol source/generated basenames and
package exports, with every publication destination still isolating the
correct API.
- **Blocks**: ENG-6143, ENG-6152, ENG-5979, ENG-5987

## Changes

- Proto: `sdp/brent.proto` → `sdp/until.proto`; regenerate
`go/sdp-go/until*.pb.go`, `sdpconnect/until.connect.go`, and `sdp-js`
`__generated__/until*`; retarget `disambiguate_until_admin_go.py`;
rename hand-written `until_event_payload.go` and related tests.
- Package: `@overmindtech/sdp-js/brent*` → `/until*` in
`sdp-js/package.json` and `tsup.config.ts`.
- Isolation: `copy.bara.sky`, `build/copybara-isolation-check`,
`services/frontend/Dockerfile`, and `.github/workflows/ci.yml` codegen
excludes/watch lists → `until*`.
- Consumers: Area51 imports + stub rewritten; ~126 `brent-app` files
still import `/brent` on purpose (rebase after [PR
#6310](https://github.com/overmindtech/workspace/pull/6310)).
- Guidance: isolation doc, BUGBOT, Cursor rules; active allowlists
pointing at `sdp/until.proto`.
- Verified locally: `go run ./build/copybara-isolation-check/` and
related Go tests pass.

## Until Plan

Plan ID: UNTIL-873

- **Plan**: Rename proto Copybara isolation
- **Approved by**: Elliot Waddington

> Deviation analysis and reviewer assignment are handled automatically
by the
> pre-approved PR review automation (see docs/PREAPPROVED_CHANGES.md).

<!-- CURSOR_SUMMARY -->
---

> [!NOTE]
> **High Risk**
> Touches the load-bearing Copybara isolation convention that keeps
Until protocol Go out of public repos; a mismatched rename/exclusion
would leak internal API code on the next sync.
>
> **Overview**
> Atomically renames Until protocol source/generated basenames from
`brent*` to `until*` and flips every Copybara isolation surface in the
same change so public repos never receive Until protocol Go.
>
> **Proto & codegen:** `sdp/brent.proto` → `sdp/until.proto`,
regenerating `go/sdp-go/until*`, `sdpconnect/until.connect.go`, and
`sdp-js` `__generated__/until*`. Package exports move from
`@overmindtech/sdp-js/brent*` to `/until*`.
>
> **Isolation:** Copybara exclusions, the isolation CI check, frontend
Docker `--exclude`, and CI path filters all switch from `brent*` →
`until*`. Docs, BUGBOT, and Cursor rules now require the `until*` naming
convention.
>
> **Consumers:** Area51 imports are retargeted; `brent-app` import
rewrites are deferred pending the `until-app` rebase.
>
> <sup>Reviewed by [Cursor Bugbot](https://cursor.com/bugbot) for commit
8b5f62b44b9d75aba5ee5d0f5fce9247d47c551c. Bugbot is set up for automated
code reviews on this repo. Configure
[here](https://www.cursor.com/dashboard/bugbot).</sup>
<!-- /CURSOR_SUMMARY -->

GitOrigin-RevId: dac12a9033b4248d2a7d020b86ad0cf0fb4014ee
## Summary

- Dual-write Until OTel / log / Sentry / PostHog identities next to live
Brent keys so Honeycomb and learning signals can migrate without a hard
cut (`until.*`, `ovm.until.*`, `service.name=until-backend` +
`service.name.legacy=brent-backend`).
- Ships inventory on ENG-6154 for ENG-6125 (including Daniel’s
`service.name` Honeycomb verification); does not touch Honeycomb TF,
PostHog/Sentry projects, feature flags, or River kinds.
- Fixes OTel wrap-before-first-`SetTracerProvider` so `tracing.Tracer()`
spans (agent/MCP) actually dual-emit Until twins.

## Linear Ticket

Fixes:
[ENG-6154](https://linear.app/overmind/issue/ENG-6154/migrate-runtime-telemetry-identifiers-to-until)
— Migrate runtime telemetry identifiers to Until

- **Purpose**: Dual-emit Until service/attribute identities (`until.*`,
`ovm.until.*`, `service.name=until-backend`) so ENG-6125 can rebind
Honeycomb without a blind cutover; retirement of Brent keys is a
follow-up.
- **Blocks**: ENG-6152, ENG-5979, ENG-5987

## Changes

- New `services/brent-backend/telemetrydual` helper (`TwinKey`,
`WrapTracerProvider`, `WithAttributes`, logrus `LogHook`, Sentry
`SetTag`).
- Boot: `until-backend` + legacy resource attr; wrap provider via
`tracing.WithTracerProviderWrapper` before first set; lazy
`tracing.Tracer()`.
- PostHog `until_mcp_*` + `until_version`; Sentry/log dual tags;
opentelemetry-naming skill + docs/runbooks.
- Tests for dual keys (MCP, workflows, Sentry, wrap order) and
`WithServiceName("until-backend")`.
- Focus review on: wrap-before-first-set correctness, Start vs
SetAttributes dual-write paths, and that out-of-scope identifiers stayed
untouched.

## Plan difference acknowledgements

- `missing-service-name-consumer-verification-inventory`: Intentional
placement — the concrete Honeycomb `service.name` consumer inventory
(Terraform-managed boards/queries/triggers/SLOs on dataset
`brent-backend`) is recorded on the ENG-6154 Linear ticket description
next to the dual-write key inventory, not duplicated in this PR’s
runbook diff. Conclusion there: no managed objects filter/group by
`service.name=brent-backend`; ENG-6125 still rebinds attribute keys and
the dataset; check any manual dogfood boards live before Until-only
cutover.

## Until Plan

Plan ID: UNTIL-876

- **Plan**: Migrate runtime telemetry identifiers to Until
- **Approved by**: Daniel Carabas

> Deviation analysis and reviewer assignment are handled automatically
by the
> pre-approved PR review automation (see docs/PREAPPROVED_CHANGES.md).

---------

Co-authored-by: Cursor <cursoragent@cursor.com>
GitOrigin-RevId: c0196bf2151b4bce630a230b29b524922b191c13
@github-actions
github-actions Bot requested a review from getinnocuous August 12, 2026 13:42
@tphoney
tphoney merged commit 467c490 into main Aug 12, 2026
@tphoney
tphoney deleted the copybara/v1.19.0 branch August 12, 2026 13:45
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

7 participants