[dependabot]

Bumps the gomod-minor-and-patch group with 22 updates in the / directory:

Package	From	To
github.com/bits-and-blooms/bitset	1.25.0	1.29.0
github.com/gkampitakis/go-snaps	0.5.23	0.5.25
github.com/hashicorp/hcl/v2	2.24.0	2.25.0
github.com/itchyny/gojq	0.12.19	0.12.20
github.com/posthog/posthog-go	1.23.1	1.42.0
github.com/sourcegraph/jsonrpc2	0.2.2	0.2.3
github.com/speakeasy-api/jsonpath	0.6.3	0.7.0
github.com/speakeasy-api/openapi	1.24.1	1.25.7-0.20261016002657-683982d5baaf
github.com/speakeasy-api/sdk-gen-config	1.60.0	1.61.0
github.com/speakeasy-api/speakeasy-client-sdk-go/v3	3.26.7	3.28.1
github.com/stretchr/testify	1.12.0	1.12.1
github.com/testcontainers/testcontainers-go	0.44.0	0.45.0
github.com/zclconf/go-cty	1.19.0	1.20.0
go.opentelemetry.io/otel	1.45.0	1.47.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace	1.45.0	1.47.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc	1.45.0	1.47.0
go.opentelemetry.io/otel/exporters/stdout/stdouttrace	1.45.0	1.47.0
go.opentelemetry.io/otel/sdk	1.45.0	1.47.0
go.opentelemetry.io/otel/trace	1.45.0	1.47.0
golang.org/x/sync	0.22.0	0.24.0
golang.org/x/text	0.41.0	0.43.0
golang.org/x/mod	0.38.0	0.41.0
github.com/speakeasy-api/openapi	1.24.1	1.25.7-0.20261016002657-683982d5baaf
github.com/speakeasy-api/sdk-gen-config	1.60.0	1.61.0
github.com/speakeasy-api/jsonpath	0.6.3	0.7.0
github.com/speakeasy-api/openapi	1.24.1	1.25.7-0.20261016002657-683982d5baaf

Bumps the gomod-minor-and-patch group with 1 update in the /cmd/wasm/ast directory: github.com/speakeasy-api/openapi.
Bumps the gomod-minor-and-patch group with 1 update in the /cmd/wasm/full-stack directory: github.com/speakeasy-api/sdk-gen-config.
Bumps the gomod-minor-and-patch group with 2 updates in the /cmd/wasm/overlay directory: github.com/speakeasy-api/jsonpath and github.com/speakeasy-api/openapi.
Bumps the gomod-minor-and-patch group with 1 update in the /services/speakeasy-api-test-service directory: github.com/brianvoe/gofakeit/v7.

Updates github.com/bits-and-blooms/bitset from 1.25.0 to 1.29.0

Release notes

Sourced from github.com/bits-and-blooms/bitset's releases.

Version 1.29.0

What's Changed

• fix InsertAt corrupting first word in some cases by @​whisk in bits-and-blooms/bitset#240

Full Changelog: bits-and-blooms/bitset@v1.28.0...v1.29.0

Version 1.28.0

What's Changed

• replace allocation with ClearAll() by @​whisk in bits-and-blooms/bitset#238
• fix ShiftRight changes length by @​whisk in bits-and-blooms/bitset#237
• Add regression tests for Shrink overflow and Compact growth by @​lemire in bits-and-blooms/bitset#239

Full Changelog: bits-and-blooms/bitset@v1.27.0...v1.28.0

Version 1.27.0

What's Changed

• Keep PreviousClear within the bitset length by @​yuefdev in bits-and-blooms/bitset#235
• add missing cleanLastWord() in ReadFrom() by @​whisk in bits-and-blooms/bitset#236
• fix words are not zeroed after resize by @​whisk in bits-and-blooms/bitset#234

New Contributors

• @​yuefdev made their first contribution in bits-and-blooms/bitset#235

Full Changelog: bits-and-blooms/bitset@v1.26.0...v1.27.0

Version 1.26.0

What's Changed

• Clamp OnesBetween to the bitset length by @​youdie006 in bits-and-blooms/bitset#229
• Handle maximum uint indices in Rank by @​mikamikasuki in bits-and-blooms/bitset#233

New Contributors

• @​youdie006 made their first contribution in bits-and-blooms/bitset#229
• @​mikamikasuki made their first contribution in bits-and-blooms/bitset#233

Full Changelog: bits-and-blooms/bitset@v1.25.0...v1.26.0

Commits

• 172b3d0 Merge pull request #240 from whisk/fix/InsertAt
• fba2a93 fix InsertAt corrupting first word in some cases
• 8b0f5f6 Merge pull request #239 from bits-and-blooms/test/shrink-compact-edge-cases
• 79e2721 Add regression tests for Shrink overflow and Compact growth
• 609dd37 Merge pull request #237 from whisk/fix/ShiftRight-length
• 1431ed1 Merge pull request #238 from whisk/fix/ShiftRight-allocation
• ed84b0d fix edge cases in Shrink and DeleteAt where bits >= last bit index
• 8814497 replace allocation with ClearAll()
• 1eb0193 fix ShiftRight changes length
• 3f783f1 Merge pull request #232 from bits-and-blooms/dependabot/github_actions/github...
• Additional commits viewable in compare view

Updates github.com/gkampitakis/go-snaps from 0.5.23 to 0.5.25

Release notes

Sourced from github.com/gkampitakis/go-snaps's releases.

v0.5.25

What's Changed

• fix: recognise snapshot labels that contain " - " by @​youdie006 in gkampitakis/go-snaps#163

New Contributors

• @​youdie006 made their first contribution in gkampitakis/go-snaps#163

Full Changelog: gkampitakis/go-snaps@v0.5.24...v0.5.25

Commits

• 3ef35b6 fix: recognise snapshot labels that contain " - " (#163)
• daee863 fix: sanitize standalone snapshot file names (#162)
• See full diff in compare view

Updates github.com/hashicorp/hcl/v2 from 2.24.0 to 2.25.0

Release notes

Sourced from github.com/hashicorp/hcl/v2's releases.

v2.25.0

Enhancements

• Go: Upgrade compatibility from 1.24 to 1.25 (#798)
• hclwrite: Export LeadComments()/LineComments() (#807)
• hclwrite: body.SetAttribute* return new attribute (#806)
• hclwrite: Block.SetType sets type (#808)
• Prepare for Unicode 17 support in Go 1.27 (#814)

Bug Fixes

• DiagnosticWriter: Skip marked values when writing diagnostics (#739)
• hclsyntax: Set CloseBraceRange to last label in error-recovered blocks (#786)
• hclsyntax: Add partially complete items in nested ObjectConsItem on error (#785)

Internal

• deps: bump golang.org/x/crypto from 0.38.0 to 0.45.0 (#774)

Changelog

Sourced from github.com/hashicorp/hcl/v2's changelog.

HCL Changelog

Commits

• 00057cf Prepare for Unicode 17 support in Go 1.27 (#814)
• 7338a7d github: Add consistency test for generated code (#834)
• 2f8831b github: Filter out Ragel files from coverage report (#833)
• d9882d1 hclsyntax: Update copyright year in generated files (#832)
• 6032923 hclsyntax: Re-run stringer to update generated comments (#831)
• 6abbb08 Merge pull request #827 from hashicorp/james-warren0/security-doc-tweaks
• 425fdf9 Implement feedback provided in hashicorp/hcl#826
• 2a3b672 Merge pull request #826 from hashicorp/james-warren0/security-model
• 42ccbc0 Add security model documentation
• 6bf1a67 Merge pull request #808 from hashicorp/bbasata/set-type
• Additional commits viewable in compare view

Updates github.com/itchyny/gojq from 0.12.19 to 0.12.20

Release notes

Sourced from github.com/itchyny/gojq's releases.

Release v0.12.20

• implement gojq.ToInt and gojq.ToFloat64 for converting number values
• fix destructuring alternative operator (?//) to reset variables of later alternatives, and to propagate break and halt errors
• fix update-assignment operator against object with overlapping paths
• fix delpaths function to delete ancestor paths before descendant paths
• fix getpath function against string input
• fix indexing and slicing a number literal written after a unary operator
• fix slice indices of floating point numbers for jq compatibility
• fix date and time functions against fractional, non-finite, and out of range numbers
• fix strptime function to accept the zero time instant
• fix match, test, and capture functions to support array arguments
• fix match function to report an empty match after a non-empty one
• fix split/1 function against empty input string
• fix math functions against large number literals like 1e1000
• fix jn/2 and yn/2 functions to avoid long recurrence on large orders
• fix abs function against non-numbers for jq compatibility
• fix isnan function to return false for non-numbers for jq compatibility
• fix halt_error function not to print a newline after non-string values
• fix --argjson and --jsonargs options to reject empty and multiple JSON values
• fix --stream option error message against unterminated input
• fix JSON parse error message after a large value in non-seekable input like stdin
• fix offset of YAML parse error on multi-byte characters
• fix panic on continuing iteration after an invalid path error
• fix data race on input iterator when running code concurrently
• fix add function to handle a nil map and slice as the first value
• support destructuring alternative operator (?//) in reduce and foreach syntax
• allow optional operator followed by alternative operator without spaces (.a?//1)
• improve performance of function calls by avoiding copies of scope values, and path tracking in path, paths, |=, and del by reducing allocations

Changelog

Sourced from github.com/itchyny/gojq's changelog.

v0.12.20 (2026-11-01)

• implement gojq.ToInt and gojq.ToFloat64 for converting number values
• fix destructuring alternative operator (?//) to reset variables of later alternatives, and to propagate break and halt errors
• fix update-assignment operator against object with overlapping paths
• fix delpaths function to delete ancestor paths before descendant paths
• fix getpath function against string input
• fix indexing and slicing a number literal written after a unary operator
• fix slice indices of floating point numbers for jq compatibility
• fix date and time functions against fractional, non-finite, and out of range numbers
• fix strptime function to accept the zero time instant
• fix match, test, and capture functions to support array arguments
• fix match function to report an empty match after a non-empty one
• fix split/1 function against empty input string
• fix math functions against large number literals like 1e1000
• fix jn/2 and yn/2 functions to avoid long recurrence on large orders
• fix abs function against non-numbers for jq compatibility
• fix isnan function to return false for non-numbers for jq compatibility
• fix halt_error function not to print a newline after non-string values
• fix --argjson and --jsonargs options to reject empty and multiple JSON values
• fix --stream option error message against unterminated input
• fix JSON parse error message after a large value in non-seekable input like stdin
• fix offset of YAML parse error on multi-byte characters
• fix panic on continuing iteration after an invalid path error
• fix data race on input iterator when running code concurrently
• fix add function to handle a nil map and slice as the first value
• support destructuring alternative operator (?//) in reduce and foreach syntax
• allow optional operator followed by alternative operator without spaces (.a?//1)
• improve performance of function calls by avoiding copies of scope values, and path tracking in path, paths, |=, and del by reducing allocations

Commits

• e7c14ec bump up version to 0.12.20
• b326bdd update CHANGELOG.md for v0.12.20
• e8319c4 use $(MAKE) instead of make in Makefile
• e169ed9 fix strptime to accept the zero time instant (#333)
• 806d7bd improve test coverage of query string conversion
• 045a452 refactor format functions to avoid unnecessary interface conversion
• b984f98 replace ncipollo/release-action with gh release create
• 8b2f146 update dependencies
• 7c7e71a fix JSON argument error to report the unexpected token after a value
• e661b6a fix --argjson and --jsonargs to reject empty and multiple JSON values (#332)
• Additional commits viewable in compare view

Updates github.com/posthog/posthog-go from 1.23.1 to 1.42.0

Release notes

Sourced from github.com/posthog/posthog-go's releases.

1.42.0

Unreleased

1.41.1

Unreleased

1.41.0

Unreleased

1.40.1

Unreleased

1.40.0

Unreleased

1.39.0

Unreleased

1.38.0

Unreleased

1.37.0

Unreleased

1.36.2

Unreleased

1.36.1

Unreleased

1.36.0

Unreleased

1.35.3

Unreleased

1.35.2

Unreleased

1.35.1

Unreleased

1.35.0

Unreleased

1.34.0

Unreleased

1.33.0

Unreleased

... (truncated)

Changelog

Sourced from github.com/posthog/posthog-go's changelog.

1.42.0

Minor Changes

• 761d995: Add posthogmcp.WithCaptureErrorMessages(false), which keeps a failed MCP tool call's error text out of $mcp_error_message and the $exception event. Tool errors often repeat their arguments, and only credentials are redacted from them. The failure is still recorded with its error type, and both carry Tool <name> returned an error instead. It applies to the manual API and to the posthogmcpsdk and posthogmcpgo adapters. An IsError result's content is still part of $mcp_response, so turn response capture off too to keep failure text out entirely.

Patch Changes

• a528b3f: Aligned posthogmcpsdk with the sdk-specs MCP spec. The get_more_tools virtual tool now advertises readOnlyHint, idempotentHint, destructiveHint and openWorldHint as false, since it records data, and no longer sets a title. The injected context argument has a shorter description that asks for a few words on why the tool is called, described by role. The injected llm_model argument is no longer listed as required. This changes your published tool definitions; if your server is listed in the ChatGPT or Claude directories, those platforms may re-review the updated tools.

1.41.1

Patch Changes

• 17365fe: Suppress local-evaluation definition warnings for client-only flags, including definitions loaded from a shared cache, without changing their evaluation behavior.

1.41.0

Minor Changes

• d4ea159: Add posthogmcpgo, MCP analytics for servers built on github.com/mark3labs/mcp-go. posthogmcpgo.Instrument returns one server.ServerOption that captures $mcp_tool_call events with the same properties as posthogmcpsdk, including the agent's intent from an added context argument. Tools whose input schema disallows other properties get no added arguments, so servers using WithInputSchemaValidation keep working.

1.40.1

Patch Changes

• 8fef83f: Reworded the descriptions of the injected conversation_id and llm_model arguments and the get_more_tools virtual tool so they describe the field instead of instructing the model. This changes your published tool definitions; if your server is listed in the ChatGPT or Claude directories, those platforms may re-review the updated tools.

1.40.0

Minor Changes

• 03e1647: The new Client.Emails() sends transactional email from your Go code and reads each email's delivery status.

  Breaking for custom clients. A type that implements Client itself now needs an Emails method.

  client, err := posthog.NewWithConfig("phc_...", posthog.Config{SecretKey: "phs_..."})
  if err != nil {
  	log.Fatal(err)
  }
  defer client.Close()
  result, err := client.Emails().Send(ctx, posthog.CodeEmail{
  To:          "user@example.com",
  DistinctID:  "user_123",
  TemplateKey: "password-reset",
  Subject:     "Reset your password",
  HTML:        renderedHTML,
  })

... (truncated)

Commits

• 2f949f1 chore: release v1.42.0 [version bump] [skip ci]
• 761d995 feat(mcp): add WithCaptureErrorMessages to keep tool error text out of events...
• a528b3f fix(mcp): align posthogmcpsdk annotations, context wording and llm_model with...
• 154e50b chore: release v1.41.1 [version bump] [skip ci]
• 17365fe fix(flags): skip client-only definition warnings (#419)
• 51f8b87 chore: release v1.41.0 [version bump] [skip ci]
• d4ea159 feat(mcp): add posthogmcpgo, MCP analytics for mark3labs/mcp-go servers (#409)
• b0c833a chore: release v1.40.1 [version bump] [skip ci]
• 8fef83f fix(mcp): reword injected descriptions so directory review stops flagging the...
• 6168aa4 chore: release v1.40.0 [version bump] [skip ci]
• Additional commits viewable in compare view

Updates github.com/sourcegraph/jsonrpc2 from 0.2.2 to 0.2.3

Release notes

Sourced from github.com/sourcegraph/jsonrpc2's releases.

v0.2.3

What's Changed

• docs: clarify reply and handler ordering by @​keegancsmith in sourcegraph/jsonrpc2#105
• fix/conn: prevent panic when closing during response processing by @​keegancsmith in sourcegraph/jsonrpc2#104

Full Changelog: sourcegraph/jsonrpc2@v0.2.2...v0.2.3

Commits

• f50bb34 Bump github.com/gorilla/websocket from 1.4.1 to 1.5.3 (#102)
• ae9a040 fix/conn: prevent close-response race panic (#104)
• bf8fe04 docs/conn: clarify ordering guarantees for bidirectional calls (#105)
• fb2b860 Bump actions/setup-go from 6 to 7 in the github-actions group (#101)
• bacb7f3 Merge pull request #100 from sourcegraph/k/remove-broken-scip-upload
• f0eebfe chore/ci: stop requiring unauthenticated SCIP uploads
• See full diff in compare view

Updates github.com/speakeasy-api/jsonpath from 0.6.3 to 0.7.0

Release notes

Sourced from github.com/speakeasy-api/jsonpath's releases.

v0.7.0

What's Changed

• feat: support for copy operators in playground, a few overlay 1.1 examples, and a better "compare" command. by @​ThomasRooney in speakeasy-api/jsonpath#25
• chore!: migrate from gopkg.in/yaml.v3 to go.yaml.in/yaml/v3 by @​TristanSpeakEasy in speakeasy-api/jsonpath#26

Full Changelog: speakeasy-api/jsonpath@v0.6.3...v0.6.4

Commits

• 427d852 chore!: migrate from gopkg.in/yaml.v3 to go.yaml.in/yaml/v3 (#26)
• 5923067 feat: support for copy operators in playground, a few overlay 1.1 examples, a...
• See full diff in compare view

Updates github.com/speakeasy-api/openapi from 1.24.1 to 1.25.7-0.20261016002657-683982d5baaf

Release notes

Sourced from github.com/speakeasy-api/openapi's releases.

v1.25.6

What's Changed

• fix(deps): bump the go-minor-patch group across 1 directory with 4 updates by @​dependabot[bot] in speakeasy-api/openapi#272
• ci(deps): bump jsonschema/oas3/tests/testsuite from 5b0ee16 to 7de0e6a by @​dependabot[bot] in speakeasy-api/openapi#270
• ci(deps): bump the github-actions group across 1 directory with 2 updates by @​dependabot[bot] in speakeasy-api/openapi#271
• chore: update submodule dependencies to latest main by @​speakeasy-openapi-dependencies[bot] in speakeasy-api/openapi#273
• feat(linter): lint referenced documents with source attribution and add semantic schema rules by @​TristanSpeakEasy in speakeasy-api/openapi#275
• perf: speed up linting by memoizing ref target validation and reducing allocations by @​TristanSpeakEasy in speakeasy-api/openapi#274
• chore: update submodule dependencies to latest main by @​speakeasy-openapi-dependencies[bot] in speakeasy-api/openapi#276

Full Changelog: speakeasy-api/openapi@v1.25.5...v1.25.6

OpenAPI CLI v1.25.6

This release includes binaries for Linux, macOS, and Windows on both x86_64 and ARM64 architectures.

Installation

Download the appropriate binary for your platform from the assets below, extract it, and add it to your PATH.

Changes

Changelog

Features

• c753d0d6549bc062e9e44fb19c37b0d64061d00d feat(linter): lint referenced documents with source attribution and add semantic schema rules (#275)

Bug fixes

• c451c55b9b38a069615c6382dee7f163b26baa5d fix(deps): bump the go-minor-patch group across 1 directory with 4 updates (#272)

Others

• d98bc39e3e0f50d0f737acd42d89b4b2f6638a7f ci(deps): bump jsonschema/oas3/tests/testsuite (#270)
• 301e1e60e8ce9221562f63598cdbec1d9169c992 ci(deps): bump the github-actions group across 1 directory with 2 updates (#271)
• 577889a836ef513a820ec96a298548e8f3c29c38 perf: speed up linting by memoizing ref target validation and reducing allocations (#274)

---

Full Changelog: speakeasy-api/openapi@v1.25.5...v1.25.6

Released by GoReleaser.

v1.25.5

What's Changed

• ci: run dependency PR checks with a GitHub App by @​TristanSpeakEasy in speakeasy-api/openapi#265
• test: isolate overlay parse fixture from parallel readers by @​TristanSpeakEasy in speakeasy-api/openapi#267
• docs: restore the library README on GitHub by @​TristanSpeakEasy in speakeasy-api/openapi#268
• chore: update submodule dependencies to latest main by @​speakeasy-openapi-dependencies[bot] in speakeasy-api/openapi#266

New Contributors

• @​speakeasy-openapi-dependencies[bot] made their first contribution in speakeasy-api/openapi#266

... (truncated)

Commits

• See full diff in compare view

Updates github.com/speakeasy-api/sdk-gen-config from 1.60.0 to 1.61.0

Release notes

Sourced from github.com/speakeasy-api/sdk-gen-config's releases.

v1.61.0

What's Changed

• feat: support http auth for MCPRegistry publishing by @​const-cloudinary in speakeasy-api/sdk-gen-config#137

New Contributors

• @​const-cloudinary made their first contribution in speakeasy-api/sdk-gen-config#137

Full Changelog: speakeasy-api/sdk-gen-config@v1.60.0...v1.61.0

Commits

• c1c9d61 feat: support http auth for MCPRegistry publishing (#137)
• See full diff in compare view

Updates github.com/speakeasy-api/speakeasy-client-sdk-go/v3 from 3.26.7 to 3.28.1

Release notes

Sourced from github.com/speakeasy-api/speakeasy-client-sdk-go/v3's releases.

go - v3.28.1 - 2026-08-28 10:36:04

Generated by Speakeasy CLI

github.com/speakeasy-api/speakeasy-client-sdk-go 3.28.1

Go SDK Changes:

• Speakeasy.Auth.GetAccess(): response Changed

Generated with Speakeasy CLI 1.796.1

Changelog

Sourced from github.com/speakeasy-api/speakeasy-client-sdk-go/v3's changelog.

Version 1.1.0

Changes

Based on:

• OpenAPI Doc 0.3.0 https://docs.speakeasyapi.dev/openapi.yaml
• Speakeasy CLI 1.1.1 https://github.com/speakeasy-api/speakeasy

Releases

• [Go v1.1.0] https://github.com/speakeasy-api/speakeasy-client-sdk-go/releases/tag/v1.1.0 - .

Version 1.1.1

Changes

Based on:

• OpenAPI Doc 0.3.0 https://docs.speakeasyapi.dev/openapi.yaml
• Speakeasy CLI 1.1.2 https://github.com/speakeasy-api/speakeasy

Releases

• [Go v1.1.1] https://github.com/speakeasy-api/speakeasy-client-sdk-go/releases/tag/v1.1.1 - .

Version 1.2.0

Changes

Based on:

• OpenAPI Doc 0.3.0 https://docs.speakeasyapi.dev/openapi.yaml
• Speakeasy CLI 1.2.0 https://github.com/speakeasy-api/speakeasy

Releases

• [Go v1.2.0] https://github.com/speakeasy-api/speakeasy-client-sdk-go/releases/tag/v1.2.0 - .

Version 1.3.0

Changes

Based on:

• OpenAPI Doc 0.3.0 https://docs.speakeasyapi.dev/openapi.yaml
• Speakeasy CLI 1.3.1 https://github.com/speakeasy-api/speakeasy

Releases

• [Go v1.3.0] https://github.com/speakeasy-api/speakeasy-client-sdk-go/releases/tag/v1.3.0 - .

Version 1.3.1

Changes

Based on:

• OpenAPI Doc 0.3.0 https://docs.speakeasyapi.dev/openapi.yaml
• Speakeasy CLI 1.3.2 https://github.com/speakeasy-api/speakeasy

Releases

• [Go v1.3.1] https://github.com/speakeasy-api/speakeasy-client-sdk-go/releases/tag/v1.3.1 - .

Version 1.3.2

Changes

Based on:

• OpenAPI Doc 0.3.0 https://docs.speakeasyapi.dev/openapi.yaml
• Speakeasy CLI 1.3.3 https://github.com/speakeasy-api/speakeasy

Releases

• [Go v1.3.2] https://github.com/speakeasy-api/speakeasy-client-sdk-go/releases/tag/v1.3.2 - .

... (truncated)

Commits

• f77f00b chore: 🐝 Update SDK - Generate 3.28.1 (#54)
• b403b59 ci: bump sdk-generation-action to v15.60.10 (#53)
• b8cfaca Merge pull request #52 from speakeasy-api/chore/regen-post-4705
• 846d760 chore: drop the generated test suite and mock server
• ea65081 feat: regenerate from the post-4705 registry spec; re-enable the existing tes...
• fedef88 Merge pull request #50 from speakeasy-api/fix/regen-and-license-jwt
• 6ea6a42 ci: regenerate from the registry-published spec with a current CLI (v3.27.0)
• 9d505a3 Update sdk_generation.yaml
• See full diff in compare view

Updates github.com/stretchr/testify from 1.12.0 to 1.12.1

Release notes

Sourced from github.com/stretchr/testify's releases.

v1.12.1

This is the first release which has the minimum dependencies practical in testify v1. The last remaining dependencies are github.com/stretchr/objx which itself has no dependencies, and go.yaml.in/yaml/v3. Removing objx would require v2, it cannot be vendored. Removing YAML would require vendoring the yaml library, which would do more harm than good. It's better to become aware of vulnerabilities in the official yaml package than to attempt to maintain our own.

What's Changed

• Change yaml library to go.yaml.in/yaml/v3 by @​harryzcy in stretchr/testify#1935
• change yaml library to go.yaml.in/yaml/v3 by @​boekkooi-impossiblecloud in stretchr/testify#1772

New Contributors

• @​harryzcy made their first contribution in stretchr/testify#1935
• @​boekkooi-impossiblecloud made their first contribution in stretchr/testify#1772

Full Changelog: stretchr/testify@v1.12.0...v1.12.1

What's Changed

• Change yaml library to go.yaml.in/yaml/v3 by @​harryzcy in stretchr/testify#1935
• change yaml library to go.yaml.in/yaml/v3 by @​boekkooi-impossiblecloud in stretchr/testify#1772

New Contributors

• @​harryzcy made their first contribution in stretchr/testify#1935
• @​boekkooi-impossiblecloud made their first contribution in stretchr/testify#1772

Full Changelog: stretchr/testify@v1.12.0...v1.12.1

Commits

• 959dbda Merge pull request #1935 from harryzcy/yaml-update
• 9bb7176 Update go.yaml.in/yaml/v3 to v3.0.5
• 0358d0e change yaml library to go.yaml.in/yaml/v3
• See full diff in compare view

Updates github.com/testcontainers/testcontainers-go from 0.44.0 to 0.45.0

Release notes

Sourced from github.com/testcontainers/testcontainers-go's releases.

v0.45.0

What's Changed

⚠️ Breaking Changes

• chore(modules)!: extract CockroachDB and Dex client adapters (#4087) @​mdelapenya

Client SDK dependencies have moved into separate examples modules. For CockroachDB, ConnectionConfig is now available through cockroachdbexamples.NewContainer(c) in modules/cockroachdb/examples. The parent’s ConnectionString and MustConnectionString now return PostgreSQL URLs instead of registered pgx handles, and importing the parent no longer registers the pgx SQL driver. Use the examples adapter to retain the previous SDK behavior, or configure the driver yourself.

For Dex, AddClient, RemoveClient, AddUser, and RemoveUser have moved from *dex.Container to dexexamples.NewAdminClient(c) in modules/dex/examples. Static configuration through WithClient and WithUser is unchanged.

• chore(modules)!: isolate client examples across ten modules (#4081) @​mdelapenya

For Cosmos DB, ContainerPolicy and NewContainerPolicy have moved from modules/azure/cosmosdb to modules/azure/examples/cosmosdb. Update the adapter import; its constructor still accepts the parent container. Run, Container, and ConnectionString remain unchanged in the parent module.

🔒 Security

• security(deps): upgrade otel log sdk to v0.21.0 (#4047) @​mdelapenya

🚀 Features

• feat(sbx): configure sandbox startup with Go options (#4057) @​mdelapenya
• feat: add Docker Sandboxes runtime provider (#3987) @​mdelapenya
• feat(garage): add single-node S3-compatible storage module (#3950) @​kanjih
• feat: register runtime providers and introduce the Podman module (#3946) @​mdelapenya
• feat: add the ability to configure the provider type in the properties file or as an env var (#3494) @​mkeeler
• feat(kafka): add TLS support (#3917) @​RuslanKarabalin

🐛 Bug Fixes

• fix(wait): fail fast when logs are unavailable on a stopped container (#3898) @​skartikey
• fix(wait): retry HostPortStrategy external check on connect timeout (#4055) @​pujitha24
• fix: handle OCI registry manifests and isolate k3s platform test (#4059) @​mdelapenya
• fix: setup ExposeHostPorts forward on container start hook (#3200) @​mdelapenya
• fix(wait): support non-pointer strategies in ForAny/ForAll nil checks (#4052) @​mdelapenya
• fix(rabbitmq): pass the node config from memory instead of a shared temp file (#3881) @​manduinca
• fix: dial the sshd container on the Docker daemon host (#3877) @​timofurrer
• fix: validate the configured session ID (#3849) @​mdelapenya

📖 Documentation

• docs: show cumulative clones and unique cloners (#4082) @​mdelapenya
• chore(metrics): update github clones for 2026-10 (#4079) @github-actions[bot]
• chore: update usage metrics (2026-11) (#4077) @github-actions[bot]
• docs: fix dead links in module docs and comments (#4071) @​sarankumar1325
• chore(docs): move Python tooling out of the Go module (#3942) @​mikey923
• docs: update Podman guide for the provider module (#4038) @​mdelapenya

🧹 Housekeeping

... (truncated)

Commits

• b4fe821 chore: use new version (v0.45.0) in modules and examples
• d40be72 chore(deps): bump github.com/go-jose/go-jose/v4 in /modules/dex/examples (#4088)
• 0d12cc6 chore(modules): finish test client isolation and document examples modules (#...
• 9cc89fd chore(modules): isolate eight remaining compatible client SDKs (#4086)
• 9ec5407 chore(modules)!: extract CockroachDB and Dex client adapters (#4087)
• 5c9480f chore(modules): isolate client examples across eleven more modules (#4084)
• 6aaef66 fix(ci): initialize sbx network policy before tests (#4085)
• 55f58fe chore(modules): isolate client examples across eleven modules (#4083)
• ea5a2e8 chore(deps): bump go.mongodb.org/mongo-driver (#4075)
• 60b08c4 docs: show cumulative clones and unique cloners (#4082)
• Additional commits viewable in compare view

Updates github.com/zclconf/go-cty from 1.19.0 to 1.20.0

Changelog

Sourced from github.com/zclconf/go-cty's changelog.

1.20.0

This release introduces a new concept called provenance marks, which is a subcategory of marks that get more conservative treatment in how they are propagated through operations involving unknown values.

Alongside that, it's now possible for an unknown value to track both direct marks (as before) and an approximation of what marks could be nested inside a final known value in the same position. This means that for unknown values it's now possible for Value.UnmarkDeep to return a larger set of marks than Value.Unmark, just as for known collection and structural values. This is an approximation, though: it tracks only that a certain mark could potentially appear anywhere within the final object, not a specific path where it will appear. This is just enough complexity to preserve the presence of nested provenance marks, at the expense of being more conservative in how marks might propagate in subsequent operations.

The development of the functionality related to provenance marks was sponsored by Spacelift on behalf of the OpenTofu Project, which is intending to make more extensive use of marks to track dependencies by dynamic analysis instead of by simply searching for syntactic references to other objects. That me...

Description has been truncated

---

Summary by cubic

Routine Dependabot update that bumps 23 Go module dependencies across 5 directories. The diff only touches go.mod and go.sum files.

Dependencies

• testcontainers-go v0.45.0 moves several client-adapter APIs (CockroachDB, Dex, Cosmos DB) into separate example modules.
• posthog-go 1.40.0 adds an Emails method to Client, breaking custom implementations of that interface.
• speakeasy-api/jsonpath 0.7.0 switches its YAML dependency from gopkg.in/yaml.v3 to go.yaml.in/yaml/v3.

^{Written for commit 02f103a. Summary will update on new commits.}