Skip to content

chore(go-deps): bump the go-dependencies group across 1 directory with 4 updates#440

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/go-dependencies-4b72f0f479
Open

chore(go-deps): bump the go-dependencies group across 1 directory with 4 updates#440
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/go-dependencies-4b72f0f479

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 28, 2026

Bumps the go-dependencies group with 3 updates in the / directory: github.com/cli/cli/v2, github.com/mark3labs/mcp-go and github.com/onsi/gomega.

Updates github.com/cli/cli/v2 from 2.92.0 to 2.93.0

Release notes

Sourced from github.com/cli/cli/v2's releases.

GitHub CLI 2.93.0

Security

A security vulnerability has been identified, and fixed, that would incorrectly include authorization header in API requests to TUF repository mirrors via gh attestation, gh release verify, and gh release verify-asset commands.

Users are advised to update gh to version v2.93.0 as soon as possible.

For more information see: GHSA-8xvp-7hj6-mcj9

Support agents in gh secret command set

The gh secret command set can now set agent secrets. For more information, see "Configuring secrets and variables for Copilot cloud agent".

What's Changed

✨ Features

🐛 Fixes

📚 Docs & Chores

... (truncated)

Commits
  • f96972c Merge pull request #13536 from cli/bagtoad/kw-fix-attestation-integration-tests
  • 98d91db test(attestation): align integration tests with new external HTTP client
  • 1f92732 Merge commit from fork
  • e6dfcd3 fix: use separate http client for non-github hosts
  • 9a593ce Merge pull request #13518 from cli/kw/immutable-releases-readme
  • a5be6be docs: note immutable releases starting v2.93.0
  • d2006fe Merge pull request #13510 from cli/bagtoad/bump-x-net-0-55-0
  • be4ad7e bump golang.org/x/net
  • e53ff32 Merge pull request #13457 from cli/dependabot/go_modules/github.com/google/go...
  • d99c18c Merge pull request #13462 from cli/dependabot/go_modules/github.com/theupdate...
  • Additional commits viewable in compare view

Updates github.com/mark3labs/mcp-go from 0.50.0 to 0.54.1

Release notes

Sourced from github.com/mark3labs/mcp-go's releases.

Release v0.54.1

No release notes provided.

Release v0.54.0

What's Changed

New Contributors

Full Changelog: mark3labs/mcp-go@v0.53.0...v0.54.0

Release v0.53.0

What's Changed

New Contributors

Full Changelog: mark3labs/mcp-go@v0.52.0...v0.53.0

Release v0.52.0

What's Changed

Full Changelog: mark3labs/mcp-go@v0.51.0...v0.52.0

Release v0.51.0

... (truncated)

Commits
  • 481f056 fix(tools): print errors to stderr for invalid jsonschema tags (#894)
  • 6e7859c perf(mcp): reduce content unmarshal allocations (#890)
  • 018f190 Add Title and Size to ResourceLink (match Resource / spec) (#887)
  • ca26738 cleanup
  • 76ea91b refactor(server): collapse client-info and writeJSONRPCError duplication (#886)
  • fac90b6 fmt
  • b817eff feat(mcp): add BaseMetadata.title, Icon.theme, Resource.size (#870) (#885)
  • 602478c fix: add panic recovery to session hook goroutines (#883)
  • 14ddeb3 feat: add OpenTelemetry tracing hooks to server and client (#856)
  • 3f8fc8e fix: add panic recovery to task goroutines, fix cleanup goroutine leak (#880)
  • Additional commits viewable in compare view

Updates github.com/onsi/gomega from 1.40.0 to 1.41.0

Changelog

Sourced from github.com/onsi/gomega's changelog.

1.41.0

Features

Add BeASlice and BeAnArray matchers

Fixes

Object formatting now detects pointer cycles to avoid runaway formatting output.

Commits
  • af2bccb v1.41.0
  • 73e81f6 v1.41.0 (full)
  • e35a84f feat: devcontainer configuration with local pkgsite and GH pages
  • f12e5e1 fix(format): detect pointer cycles to avoid runaway formatting output
  • e14831f Add optionalDescription docs to AsyncAssertion and Assertion interfaces
  • 344b94d Add BeASlice and BeAnArray matchers
  • See full diff in compare view

Updates golang.org/x/term from 0.42.0 to 0.43.0

Commits

@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label May 28, 2026
@dependabot dependabot Bot requested a review from a team as a code owner May 28, 2026 12:39
@dependabot dependabot Bot added go Pull requests that update go code dependencies Pull requests that update a dependency file labels May 28, 2026
…h 4 updates

Bumps the go-dependencies group with 3 updates in the / directory: [github.com/cli/cli/v2](https://github.com/cli/cli), [github.com/mark3labs/mcp-go](https://github.com/mark3labs/mcp-go) and [github.com/onsi/gomega](https://github.com/onsi/gomega).


Updates `github.com/cli/cli/v2` from 2.92.0 to 2.93.0
- [Release notes](https://github.com/cli/cli/releases)
- [Changelog](https://github.com/cli/cli/blob/trunk/docs/release-process-deep-dive.md)
- [Commits](cli/cli@v2.92.0...v2.93.0)

Updates `github.com/mark3labs/mcp-go` from 0.50.0 to 0.54.1
- [Release notes](https://github.com/mark3labs/mcp-go/releases)
- [Commits](mark3labs/mcp-go@v0.50.0...v0.54.1)

Updates `github.com/onsi/gomega` from 1.40.0 to 1.41.0
- [Release notes](https://github.com/onsi/gomega/releases)
- [Changelog](https://github.com/onsi/gomega/blob/master/CHANGELOG.md)
- [Commits](onsi/gomega@v1.40.0...v1.41.0)

Updates `golang.org/x/term` from 0.42.0 to 0.43.0
- [Commits](golang/term@v0.42.0...v0.43.0)

---
updated-dependencies:
- dependency-name: github.com/cli/cli/v2
  dependency-version: 2.93.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: github.com/mark3labs/mcp-go
  dependency-version: 0.54.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: github.com/onsi/gomega
  dependency-version: 1.41.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: golang.org/x/term
  dependency-version: 0.43.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/go_modules/go-dependencies-4b72f0f479 branch from 2b97ff2 to a644131 Compare June 4, 2026 00:10
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants