chore(deps): bump the go-minor-patch group in /go with 9 updates by dependabot[bot] · Pull Request #1915 · kagent-dev/kagent

dependabot · 2026-05-25T10:56:12Z

Bumps the go-minor-patch group in /go with 9 updates:

Package	From	To
github.com/anthropics/anthropic-sdk-go	`1.43.0`	`1.45.0`
github.com/aws/aws-sdk-go-v2/config	`1.32.17`	`1.32.18`
github.com/modelcontextprotocol/go-sdk	`1.6.0`	`1.6.1`
github.com/openai/openai-go/v3	`3.36.0`	`3.37.0`
github.com/pgvector/pgvector-go	`0.3.0`	`0.4.0`
google.golang.org/adk	`1.2.0`	`1.3.0`
google.golang.org/genai	`1.57.0`	`1.58.0`
github.com/aws/aws-sdk-go-v2/service/bedrockruntime	`1.50.6`	`1.52.0`
golang.org/x/crypto	`0.51.0`	`0.52.0`

Updates github.com/anthropics/anthropic-sdk-go from 1.43.0 to 1.45.0

Release notes

Sourced from github.com/anthropics/anthropic-sdk-go's releases.

v1.45.0

1.45.0 (2026-05-21)

Full Changelog: v1.44.1...v1.45.0

Features

api: Add support for thinking-token-count beta for estimated tokens in thinking block deltas when streaming (dedeb6d)

v1.44.1

1.44.1 (2026-05-19)

Full Changelog: v1.44.0...v1.44.1

Bug Fixes

runner: skip tool calls SessionToolRunner does not own (93afc65)

v1.44.0

1.44.0 (2026-05-19)

Full Changelog: v1.43.0...v1.44.0

Features

client: Add support for self-hosted sandboxes in CMA with sandbox helpers (34354c4)

Changelog

Sourced from github.com/anthropics/anthropic-sdk-go's changelog.

1.45.0 (2026-05-21)

Full Changelog: v1.44.1...v1.45.0

Features

api: Add support for thinking-token-count beta for estimated tokens in thinking block deltas when streaming (dedeb6d)

1.44.1 (2026-05-19)

Full Changelog: v1.44.0...v1.44.1

Bug Fixes

runner: skip tool calls SessionToolRunner does not own (93afc65)

1.44.0 (2026-05-19)

Full Changelog: v1.43.0...v1.44.0

Features

client: Add support for self-hosted sandboxes in CMA with sandbox helpers (34354c4)

Commits

88310cc release: 1.45.0
4eb28e3 feat(api): Add support for thinking-token-count beta for estimated tokens in ...
d138190 release: 1.44.1
d0a73a5 fix(runner): skip tool calls SessionToolRunner does not own
2888573 release: 1.44.0 (#340)
See full diff in compare view

Updates github.com/aws/aws-sdk-go-v2/config from 1.32.17 to 1.32.18

Commits

db9f4e5 Release 2026-05-22
34e7ddc Regenerated Clients
f9db036 Update endpoints model
ae5eae1 Update API model
429dbdd Feat discover endpoint partition validation (#3410)
ab4f5b6 Release 2026-05-21
757a099 Regenerated Clients
02c8323 Update API model
f4ac954 Bump smithy-go version and update imports for evenstream protocoltests (#3420)
6d93700 Add replace for credentials dependency added on go.mod (#3419)
Additional commits viewable in compare view

Updates github.com/modelcontextprotocol/go-sdk from 1.6.0 to 1.6.1

Release notes

Sourced from github.com/modelcontextprotocol/go-sdk's releases.

v1.6.1

This release adds an MCPGODEBUG flag to opt out of the Content-Type check on POST requests.

Behavior Changes

Prior to v1.6.0 (v1.4.0...v1.5.0), the Content-Type check on POST requests was gated by the same disablecrossoriginprotection MCPGODEBUG flag as the cross-origin protection. In v1.6.0, the cross-origin protection was disabled by default (replaced by the opt-in enableoriginverification flag), but the Content-Type check was kept on unconditionally, leaving no way to disable it. This release restores an escape hatch for both the Streamable HTTP and SSE transports: setting MCPGODEBUG=disablecontenttypecheck=1 skips the Content-Type: application/json validation on POST requests. See #957.

What's Changed

mcp: add MCPGPDEBUG for opt-in Content-Type check by @guglielmo-san in modelcontextprotocol/go-sdk#972

Full Changelog: modelcontextprotocol/go-sdk@v1.6.0...v1.6.1

Commits

d454bba mcp: add MCPGPDEBUG for opt-in Content-Type check (#972)
See full diff in compare view

Updates github.com/openai/openai-go/v3 from 3.36.0 to 3.37.0

Release notes

Sourced from github.com/openai/openai-go/v3's releases.

v3.37.0

3.37.0 (2026-05-21)

Full Changelog: v3.36.0...v3.37.0

Features

api: api update (7f7416e)

api: manual updates (d646562)

api: update OpenAPI spec or Stainless config (b34b78a)

client: optimize json encoder for internal types (93adc6e)

Bug Fixes

go: format generated admin paths (1dd8f5e)

go: format generated project permission paths (b751c37)

Chores

api: docs updates (08bc80e)

Changelog

Sourced from github.com/openai/openai-go/v3's changelog.

3.37.0 (2026-05-21)

Full Changelog: v3.36.0...v3.37.0

Features

api: api update (7f7416e)

api: manual updates (d646562)

api: update OpenAPI spec or Stainless config (b34b78a)

client: optimize json encoder for internal types (93adc6e)

Bug Fixes

go: format generated admin paths (1dd8f5e)

go: format generated project permission paths (b751c37)

Chores

api: docs updates (08bc80e)

Commits

8f01a93 Merge pull request #676 from openai/release-please--branches--main--changes--...
2db0d86 release: 3.37.0
ea245d8 Merge pull request #991 from stainless-sdks/dev/xuanqi/public-api-docs-enterp...
1dd8f5e fix(go): format generated admin paths
7f7416e feat(api): api update
b751c37 fix(go): format generated project permission paths
08bc80e chore(api): docs updates
d646562 feat(api): manual updates
b34b78a feat(api): update OpenAPI spec or Stainless config
efa3cc0 codegen metadata
Additional commits viewable in compare view

Updates github.com/pgvector/pgvector-go from 0.3.0 to 0.4.0

Changelog

Sourced from github.com/pgvector/pgvector-go's changelog.

0.4.0 (2026-05-18)

Changed ent and pgx packages to modules

Dropped support for Go < 1.25

Commits

4bb5919 Version bump to 0.4.0 [skip ci]
804366c Updated readme [skip ci]
4d39ea6 Updated changelog [skip ci]
5f4af83 Fixed CI
971c54c Switched from packages to modules - resolves #28
b69346a Dropped support for Go < 1.25
e5e83fe Updated license year [skip ci]
cac570f Fixed tests on Linux ARM
c520a81 Test with Go 1.26 on CI
6cf38d3 Updated pgvector on CI
Additional commits viewable in compare view

Updates google.golang.org/adk from 1.2.0 to 1.3.0

Release notes

Sourced from google.golang.org/adk's releases.

v1.3.0

What's Changed

refactor: remove manual session ID input and enable auto-creation in runner by @hanorik in google/adk-go#754

feat: add support for updating existing Agent Engine instances by @hanorik in google/adk-go#755

Add support for simple text instead of full genai.Content for stream_query by @kdroste-google in google/adk-go#773

feat: make adk work with a2a-go/v2 by @yarolegovich in google/adk-go#701

refactor: rename experimental reasoning tokens attribute to gen_ai.usage.reasoning.output_tokens and change semantics of gen_ai.usage.output_tokens by @pigorski in google/adk-go#779

fix: propagate thought signature to first function call in mixed responses by @baptmont in google/adk-go#788

Added VertexAI MemoryBank support by @kdroste-google in google/adk-go#801

fix: the old adka2a public api depending on the new a2a-go/v2 by @yarolegovich in google/adk-go#813

ADK GO version update for LLM Request tagging by @kdroste-google in google/adk-go#816

Add parallel HITL function test by @baptmont in google/adk-go#817

chore: bump a2a-go version to have nil part fix by @yarolegovich in google/adk-go#827

Changed model for gemini API to gemini-3.1-flash-lite (in examples) by @kdroste-google in google/adk-go#839

feat(live): Add core bidirectional streaming support by @baptmont in google/adk-go#833

chore: add Dependabot config for automated dependency updates by @karolpiotrowicz in google/adk-go#843

feat(live): Add sequential agent live run by @baptmont in google/adk-go#835

feat(live): Add live example by @baptmont in google/adk-go#834

fix: Stop ignoring request Decode error in runtime. by @foxfrikses in google/adk-go#851

fix: Propagate StateDelta for non-streaming agent. by @foxfrikses in google/adk-go#854

fix: Prevent nil deref when a tool doesn't implement tool.Tool. by @foxfrikses in google/adk-go#855

feat(live): Add session resumption by @baptmont in google/adk-go#837

feat(live): Add streaming tools by @baptmont in google/adk-go#836

feat(live): Add audio cache for save artifact by @baptmont in google/adk-go#838

chore: fix folder name by @baptmont in google/adk-go#859

New Contributors

@karolpiotrowicz made their first contribution in google/adk-go#843

Full Changelog: google/adk-go@v1.2.0...v.1.3.0

Commits

428efad fix: user auth propagation not working in adka2a compat (#861)
f2aee53 chore: fix folder name (#859)
236cab7 feat(live): Add audio cache for save artifact (#838)
e5c3f51 feat(live): Add streaming tools (#836)
2b79d38 feat(live): Add session resumption (#837)
9eb7630 fix: Prevent nil deref when a tool doesn't implement tool.Tool interface. (#855)
ead8568 fix: Propagate StateDelta for non-streaming agent. (#854)
3954b83 fix: Stop ignoring request Decode error in runtime. (#851)
5fb72b9 feat(live): Add live example (#834)
8fb171b feat(live): Add sequential agent live run (#835)
Additional commits viewable in compare view

Updates google.golang.org/genai from 1.57.0 to 1.58.0

Release notes

Sourced from google.golang.org/genai's releases.

v1.58.0

1.58.0 (2026-05-21)

Features

add enable_prompt_injection_detection for Computer Use feature for the Gemini API. (19c2566)

add new fields (1608e80)

Changelog

Sourced from google.golang.org/genai's changelog.

1.58.0 (2026-05-21)

Features

add enable_prompt_injection_detection for Computer Use feature for the Gemini API. (19c2566)

add new fields (1608e80)

Commits

97ea31f chore(main): release 1.58.0 (#793)
19c2566 feat: add enable_prompt_injection_detection for Computer Use feature for th...
1608e80 feat: add new fields
843a665 chore: update comment in BatchJobOutputInfo to unblock javadoc generation
8b28bf8 chore: Throw fatals() instead of errors() in the replay_api_client when the i...
See full diff in compare view

Updates github.com/aws/aws-sdk-go-v2/service/bedrockruntime from 1.50.6 to 1.52.0

Commits

d7a7049 Release 2024-03-13
625e1e6 Regenerated Clients
1ed868a Update API model
e715922 Merge customizations for S3
b30a1cc Release 2024-03-12
71783e1 Regenerated Clients
f434ec2 Update API model
9bac90a Release 2024-03-11
c3c777b Regenerated Clients
2e16e91 Update API model
Additional commits viewable in compare view

Updates golang.org/x/crypto from 0.51.0 to 0.52.0

Commits

a1c0d99 go.mod: update golang.org/x dependencies
3c7c869 ssh: fix deadlock on unexpected channel responses
533fb3f ssh: fix source-address critical option bypass
abbc44d ssh: fix incorrect operator order
e052873 ssh: fix infinite loop on large channel writes due to integer overflow
b61cf85 ssh: enforce user presence verification for security keys
9c2cd33 ssh: enforce strict limits on DSA key parameters
8907318 ssh: reject RSA keys with excessively large moduli
ffd87b4 ssh: fix panic when authority callbacks are nil
4e7a738 ssh: fix deadlock on unexpected global responses
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the go-minor-patch group in /go with 9 updates: | Package | From | To | | --- | --- | --- | | [github.com/anthropics/anthropic-sdk-go](https://github.com/anthropics/anthropic-sdk-go) | `1.43.0` | `1.45.0` | | [github.com/aws/aws-sdk-go-v2/config](https://github.com/aws/aws-sdk-go-v2) | `1.32.17` | `1.32.18` | | [github.com/modelcontextprotocol/go-sdk](https://github.com/modelcontextprotocol/go-sdk) | `1.6.0` | `1.6.1` | | [github.com/openai/openai-go/v3](https://github.com/openai/openai-go) | `3.36.0` | `3.37.0` | | [github.com/pgvector/pgvector-go](https://github.com/pgvector/pgvector-go) | `0.3.0` | `0.4.0` | | [google.golang.org/adk](https://github.com/google/adk-go) | `1.2.0` | `1.3.0` | | [google.golang.org/genai](https://github.com/googleapis/go-genai) | `1.57.0` | `1.58.0` | | [github.com/aws/aws-sdk-go-v2/service/bedrockruntime](https://github.com/aws/aws-sdk-go-v2) | `1.50.6` | `1.52.0` | | [golang.org/x/crypto](https://github.com/golang/crypto) | `0.51.0` | `0.52.0` | Updates `github.com/anthropics/anthropic-sdk-go` from 1.43.0 to 1.45.0 - [Release notes](https://github.com/anthropics/anthropic-sdk-go/releases) - [Changelog](https://github.com/anthropics/anthropic-sdk-go/blob/main/CHANGELOG.md) - [Commits](anthropics/anthropic-sdk-go@v1.43.0...v1.45.0) Updates `github.com/aws/aws-sdk-go-v2/config` from 1.32.17 to 1.32.18 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@config/v1.32.17...config/v1.32.18) Updates `github.com/modelcontextprotocol/go-sdk` from 1.6.0 to 1.6.1 - [Release notes](https://github.com/modelcontextprotocol/go-sdk/releases) - [Commits](modelcontextprotocol/go-sdk@v1.6.0...v1.6.1) Updates `github.com/openai/openai-go/v3` from 3.36.0 to 3.37.0 - [Release notes](https://github.com/openai/openai-go/releases) - [Changelog](https://github.com/openai/openai-go/blob/main/CHANGELOG.md) - [Commits](openai/openai-go@v3.36.0...v3.37.0) Updates `github.com/pgvector/pgvector-go` from 0.3.0 to 0.4.0 - [Changelog](https://github.com/pgvector/pgvector-go/blob/master/CHANGELOG.md) - [Commits](pgvector/pgvector-go@v0.3.0...v0.4.0) Updates `google.golang.org/adk` from 1.2.0 to 1.3.0 - [Release notes](https://github.com/google/adk-go/releases) - [Commits](google/adk-go@v1.2.0...v1.3.0) Updates `google.golang.org/genai` from 1.57.0 to 1.58.0 - [Release notes](https://github.com/googleapis/go-genai/releases) - [Changelog](https://github.com/googleapis/go-genai/blob/main/CHANGELOG.md) - [Commits](googleapis/go-genai@v1.57.0...v1.58.0) Updates `github.com/aws/aws-sdk-go-v2/service/bedrockruntime` from 1.50.6 to 1.52.0 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@service/ecr/v1.50.6...service/s3/v1.52.0) Updates `golang.org/x/crypto` from 0.51.0 to 0.52.0 - [Commits](golang/crypto@v0.51.0...v0.52.0) --- updated-dependencies: - dependency-name: github.com/anthropics/anthropic-sdk-go dependency-version: 1.45.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-minor-patch - dependency-name: github.com/aws/aws-sdk-go-v2/config dependency-version: 1.32.18 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-minor-patch - dependency-name: github.com/modelcontextprotocol/go-sdk dependency-version: 1.6.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-minor-patch - dependency-name: github.com/openai/openai-go/v3 dependency-version: 3.37.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-minor-patch - dependency-name: github.com/pgvector/pgvector-go dependency-version: 0.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-minor-patch - dependency-name: google.golang.org/adk dependency-version: 1.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-minor-patch - dependency-name: google.golang.org/genai dependency-version: 1.58.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-minor-patch - dependency-name: github.com/aws/aws-sdk-go-v2/service/bedrockruntime dependency-version: 1.52.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-minor-patch - dependency-name: golang.org/x/crypto dependency-version: 0.52.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-minor-patch ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-05-25T10:56:13Z

Labels

The following labels could not be found: dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

Copilot

Copilot encountered an error and was unable to review this pull request. You can try again by re-requesting a review.

…4f3003

Copilot AI review requested due to automatic review settings May 25, 2026 10:56

dependabot Bot requested review from EItanya, ilackarms and yuval-k as code owners May 25, 2026 10:56

Copilot AI reviewed May 25, 2026

View reviewed changes

github-actions Bot added the ignore-for-release label May 25, 2026

Merge branch 'main' into dependabot/go_modules/go/go-minor-patch-3b50…

50caea3

…4f3003

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): bump the go-minor-patch group in /go with 9 updates#1915

chore(deps): bump the go-minor-patch group in /go with 9 updates#1915
dependabot[bot] wants to merge 2 commits into
mainfrom
dependabot/go_modules/go/go-minor-patch-3b504f3003

dependabot Bot commented on behalf of github May 25, 2026

Uh oh!

dependabot Bot commented on behalf of github May 25, 2026

Uh oh!

Copilot AI left a comment

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Conversation

dependabot Bot commented on behalf of github May 25, 2026

v1.45.0

1.45.0 (2026-05-21)

Features

v1.44.1

1.44.1 (2026-05-19)

Bug Fixes

v1.44.0

1.44.0 (2026-05-19)

Features

1.45.0 (2026-05-21)

Features

1.44.1 (2026-05-19)

Bug Fixes

1.44.0 (2026-05-19)

Features

v1.6.1

Behavior Changes

What's Changed

v3.37.0

3.37.0 (2026-05-21)

Features

Bug Fixes

Chores

3.37.0 (2026-05-21)

Features

Bug Fixes

Chores

0.4.0 (2026-05-18)

v1.3.0

What's Changed

New Contributors

v1.58.0

1.58.0 (2026-05-21)

Features

1.58.0 (2026-05-21)

Features

Uh oh!

dependabot Bot commented on behalf of github May 25, 2026

Labels

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants