Skip to content

chore(deps): bump five dependencies - #454

Merged
leggetter merged 1 commit into
mainfrom
chore/deps-3.0.3
Sep 25, 2026
Merged

leggetter merged 1 commit into
mainfrom
chore/deps-3.0.3

Conversation

@leggetter

Copy link
Copy Markdown
Collaborator

Supersedes #361, #374, #375, #385 and #386 — dependabot closes them once main has these versions.

Module From To
github.com/modelcontextprotocol/go-sdk 1.7.0 1.8.0
github.com/sirupsen/logrus 1.9.4 1.10.2
github.com/stretchr/testify 1.11.1 1.12.1
golang.org/x/sys 0.47.0 0.48.0
golang.org/x/term 0.45.0 0.46.0

go mod tidy also moved go.yaml.in/yaml/v3 to 3.0.5 and dropped four indirect dependencies testify no longer pulls in: go-spew, go-difflib, check.v1, gopkg.in/yaml.v3.

Why one PR

Each dependabot PR touches go.mod and go.sum, so merging one conflicts the rest, and each rebase queues another acceptance run in a concurrency group that keeps only one pending — they cancel each other. One change, one run.

Verified

  • go build ./... and the full unit suite pass.
  • Every tagged acceptance file compiles (go vet with all feature tags) — testify is used throughout, and go test ./... does not build them.
  • go-sdk 1.8 is the MCP protocol library, so it was smoke-tested on a built binary against a live project: initialize, tools/list (17 tools, no write tools in read-only), a real gateway_connections_read call, and an unregistered write tool still refused. Same behaviour as v3.0.2.

Intended for v3.0.3.

🤖 Generated with Claude Code

https://claude.ai/code/session_012XtSQ2kfpcRXXqweskgXkH

  github.com/modelcontextprotocol/go-sdk  1.7.0  -> 1.8.0
  github.com/sirupsen/logrus              1.9.4  -> 1.10.2
  github.com/stretchr/testify             1.11.1 -> 1.12.1
  golang.org/x/sys                        0.47.0 -> 0.48.0
  golang.org/x/term                       0.45.0 -> 0.46.0

go mod tidy also moved go.yaml.in/yaml/v3 to 3.0.5 and dropped four indirect
dependencies testify no longer pulls in: go-spew, go-difflib, check.v1 and
gopkg.in/yaml.v3.

One change instead of five dependabot PRs: each touches go.mod and go.sum, so
merging one conflicts the rest, and each rebase queues another acceptance run
in a concurrency group that keeps only one pending.

Supersedes #361, #374, #375, #385 and #386.

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_012XtSQ2kfpcRXXqweskgXkH
@leggetter
leggetter merged commit 2ae9991 into main Sep 25, 2026
18 of 19 checks passed
@leggetter
leggetter deleted the chore/deps-3.0.3 branch September 25, 2026 08:27
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant