[dependabot]

Bumps the all group with 4 updates: github.com/anthropics/anthropic-sdk-go, github.com/github/copilot-sdk/go, github.com/openai/openai-go/v3 and google.golang.org/genai.

Updates github.com/anthropics/anthropic-sdk-go from 1.76.0 to 1.78.0

Release notes

Sourced from github.com/anthropics/anthropic-sdk-go's releases.

v1.78.0

1.78.0 (2026-09-30)

Full Changelog: v1.77.0...v1.78.0

Features

• api: add list spend limits endpoint (597ed95)

Chores

• api: mark Claude Sonnet 4.5 as deprecated (end-of-life November 30, 2026) (5464a3e)

v1.77.0

1.77.0 (2026-09-30)

Full Changelog: v1.76.0...v1.77.0

Features

• analytics: keep the per-user report actor a union (#416) (03b3feb)
• api: add a refusal stop reason and stop_details to Managed Agents session idle events (2225664)
• api: add Claude Enterprise analytics, spend limits, and RBAC groups and roles to the Admin API (9039d31)
• api: add per-user usage and cost reports to the Admin API analytics (14fa777)
• api: add Plugins and Plugin Marketplaces to the Admin API (785997a)
• api: add repository error types to Managed Agents session errors (9dfb79b)
• api: allow removing a plugin's org-wide installation setting (ef365f2)
• api: MCP tunnels beta: add read-only transport object to Tunnel and return the one-time relay token in the create response (f6572a5)
• api: Organization API endpoints are now GA (4fc56d2)

Bug Fixes

• api: make memory store description, metadata, archived_at required (b8bf04b)
• api: type admin plugin preference and marketplace fields as enums (9e2de19)
• client: redact sensitive headers in DumpRequest and DumpResponse (f57d275)
• pagination: auto-paging continues past an empty page while next_page is set (2c8cdd7)
• tools: stop the session tool runner after any idle that ends the turn (#413) (bb2421f)

Chores

• api: update MCP Tunnels types and descriptions (1b0aac7)
• docs: remove placeholder enum descriptions (d156e86)
• tests: platform clients do not mirror the Organization service (#414) (108cfae)

Changelog

Sourced from github.com/anthropics/anthropic-sdk-go's changelog.

1.78.0 (2026-09-30)

Full Changelog: v1.77.0...v1.78.0

Features

• api: add list spend limits endpoint (597ed95)

Chores

• api: mark Claude Sonnet 4.5 as deprecated (end-of-life November 30, 2026) (5464a3e)

1.77.0 (2026-09-30)

Full Changelog: v1.76.0...v1.77.0

Features

• analytics: keep the per-user report actor a union (#416) (03b3feb)
• api: add a refusal stop reason and stop_details to Managed Agents session idle events (2225664)
• api: add Claude Enterprise analytics, spend limits, and RBAC groups and roles to the Admin API (9039d31)
• api: add per-user usage and cost reports to the Admin API analytics (14fa777)
• api: add Plugins and Plugin Marketplaces to the Admin API (785997a)
• api: add repository error types to Managed Agents session errors (9dfb79b)
• api: allow removing a plugin's org-wide installation setting (ef365f2)
• api: MCP tunnels beta: add read-only transport object to Tunnel and return the one-time relay token in the create response (f6572a5)
• api: Organization API endpoints are now GA (4fc56d2)

Bug Fixes

• api: make memory store description, metadata, archived_at required (b8bf04b)
• api: type admin plugin preference and marketplace fields as enums (9e2de19)
• client: redact sensitive headers in DumpRequest and DumpResponse (f57d275)
• pagination: auto-paging continues past an empty page while next_page is set (2c8cdd7)
• tools: stop the session tool runner after any idle that ends the turn (#413) (bb2421f)

Chores

• api: update MCP Tunnels types and descriptions (1b0aac7)
• docs: remove placeholder enum descriptions (d156e86)
• tests: platform clients do not mirror the Organization service (#414) (108cfae)

Commits

• c9ebe44 Merge pull request #448 from anthropics/release-please--branches--main--chang...
• 1e8c4aa release: 1.78.0
• 5464a3e chore(api): mark Claude Sonnet 4.5 as deprecated (end-of-life November 30, 2026)
• 597ed95 feat(api): add list spend limits endpoint
• 4fb7c7f Merge branch 'main' into next
• ccc5e06 Merge pull request #447 from anthropics/release-please--branches--main--chang...
• 617823d release: 1.77.0
• 03b3feb feat(analytics): keep the per-user report actor a union (#416)
• bb2421f fix(tools): stop the session tool runner after any idle that ends the turn (#...
• 108cfae chore(tests): platform clients do not mirror the Organization service (#414)
• Additional commits viewable in compare view

Updates github.com/github/copilot-sdk/go from 1.0.15 to 1.0.16

Release notes

Sourced from github.com/github/copilot-sdk/go's releases.

v1.0.16

Internal dependency updates only: this release refreshes the SDK snapshot for Copilot CLI 1.0.90. It contains no other user-visible SDK changes since v1.0.15.

[!WARNING]

The following domain was blocked by the firewall during workflow execution:

• github.com

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "github.com"

See Network Configuration for more information.

Generated by Release Notes Generator · copilot · auto · 18.8 AIC · ⌖ 6.11 AIC · ⊞ 10.3K

v1.0.16-preview.0

Internal dependency updates only (SDK snapshot updated for Copilot CLI 1.0.90-6).

Full Changelog: github/copilot-sdk@runtime-1.0.89-1.unstable.r36638597907.ge270afd...v1.0.16-preview.0

[!WARNING]

The following domain was blocked by the firewall during workflow execution:

• github.com

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "github.com"

... (truncated)

Commits

• f8ae645 Update SDK snapshot for Copilot CLI 1.0.90
• 4dc774c Update SDK snapshot for Copilot CLI 1.0.90-7
• 5792c40 Update SDK snapshot for Copilot CLI 1.0.90-6
• a2b2c18 Update SDK snapshot for Copilot CLI 1.0.90-5
• 36ff7a2 Update SDK snapshot for Copilot CLI 1.0.90-4
• 2a67e4e Update SDK snapshot for Copilot CLI 1.0.90-3
• f5d9685 Update SDK snapshot for Copilot CLI 1.0.90-2
• d3e90e0 Update SDK snapshot for Copilot CLI 1.0.90-1
• 824bf9f Update SDK snapshot for Copilot CLI 1.0.90-0
• See full diff in compare view

Updates github.com/openai/openai-go/v3 from 3.66.0 to 3.70.0

Release notes

Sourced from github.com/openai/openai-go/v3's releases.

v3.70.0

3.70.0 (2026-10-01)

Features

• agents: Prepare files and download turn artifacts (#1010) (f7a562d)

Bug Fixes

• auth: isolate cloud metadata token requests (#1006) (f4cb102)

v3.69.0

3.69.0 (2026-10-01)

Features

• collect final output from beta Agents streams (#1002) (a29869f)
• agents: [1/n] Bind output schemas to typed results (#1008) (0c0abaf)
• api: add translation and session trace APIs (#995) (5312099)
• api: require secure credential transport (#1011) (8f74dea)

Bug Fixes

• api: allow original image detail in Chat Completions (#1003) (e4dc9a0)
• azure: isolate inherited headers when switching providers (#1001) (98700dd)
• azure: validate configured origin before authentication (#1000) (656aeb8)

Chores

• api: correct the eval run cancellation endpoint reference (#999) (431121b)
• api: retain WebRTC Live session transport types (#998) (91e28d4)

v3.68.0

3.68.0 (2026-09-29)

Features

• api: add computer use to beta agents (#989) (a435999)

v3.67.0

3.67.0 (2026-09-29)

Features

... (truncated)

Changelog

Sourced from github.com/openai/openai-go/v3's changelog.

3.70.0 (2026-10-01)

Features

• agents: Prepare files and download turn artifacts (#1010) (f7a562d)

Bug Fixes

• auth: isolate cloud metadata token requests (#1006) (f4cb102)

3.69.0 (2026-10-01)

Features

• collect final output from beta Agents streams (#1002) (a29869f)
• agents: [1/n] Bind output schemas to typed results (#1008) (0c0abaf)
• api: add translation and session trace APIs (#995) (5312099)
• api: require secure credential transport (#1011) (8f74dea)

Bug Fixes

• api: allow original image detail in Chat Completions (#1003) (e4dc9a0)
• azure: isolate inherited headers when switching providers (#1001) (98700dd)
• azure: validate configured origin before authentication (#1000) (656aeb8)

Chores

• api: correct the eval run cancellation endpoint reference (#999) (431121b)
• api: retain WebRTC Live session transport types (#998) (91e28d4)

3.68.0 (2026-09-29)

Features

• api: add computer use to beta agents (#989) (a435999)

3.67.0 (2026-09-29)

Features

• api: add Agents credential and session options (#980) (a5955cc)
• api: add Cyber access programs to Responses (#973) (399b02e)
• api: add GPT-6.1 Sol model identifier (#988) (eb3c1db)

... (truncated)

Commits

• 0661c5a release: 3.70.0 (#1015)
• f7a562d feat(agents): Prepare files and download turn artifacts (#1010)
• f4cb102 fix(auth): isolate cloud metadata token requests (#1006)
• b632ae6 test: preserve Realtime model strings and Live tool choice params (#1007)
• 5820098 release: 3.69.0 (#997)
• 8f74dea feat(api): require secure credential transport (#1011)
• a9644fa ci: allow 20 minutes for lint workers (#1004)
• 656aeb8 fix(azure): validate configured origin before authentication (#1000)
• 0c0abaf feat(agents): [1/n] Bind output schemas to typed results (#1008)
• 98700dd fix(azure): isolate inherited headers when switching providers (#1001)
• Additional commits viewable in compare view

Updates google.golang.org/genai from 1.71.0 to 1.72.0

Release notes

Sourced from google.golang.org/genai's releases.

v1.72.0

1.72.0 (2026-10-01)

Features

• add gcs_metrics_uri for exporting tuning job metrics. (a2adbb5)
• Add interactions (b85860b)
• expose SpeechMetadata, VoiceConfig.voice, and SpeechAnnotation in public GenAI SDKs (c342626)
• genai: refresh examples and add build tests for Go SDK examples (a8402d6)
• implement environments files upload and download across .NET and Go SDKs (ee76a1c)
• include labels for LiveClientSetup (69b3fa3)
• support continuation_token in GenerateContent (3ecb7eb)
• support labels for Gemini API GenerateContent (bf539c0)
• update discovery doc (702e8d0)

Bug Fixes

• interactions: ignore unchecked returns in mock server handlers in interaction_test.go (1617851)
• Update GitHub Actions lint workflow for Node 24 compatibility (aeb441a)
• use CreateAgentInteraction for Trigger.interaction and TriggerCreateParams.interaction (d918e85)

Changelog

Sourced from google.golang.org/genai's changelog.

1.72.0 (2026-10-01)

Features

• add gcs_metrics_uri for exporting tuning job metrics. (a2adbb5)
• Add interactions (b85860b)
• expose SpeechMetadata, VoiceConfig.voice, and SpeechAnnotation in public GenAI SDKs (c342626)
• genai: refresh examples and add build tests for Go SDK examples (a8402d6)
• implement environments files upload and download across .NET and Go SDKs (ee76a1c)
• include labels for LiveClientSetup (69b3fa3)
• support continuation_token in GenerateContent (3ecb7eb)
• support labels for Gemini API GenerateContent (bf539c0)
• update discovery doc (702e8d0)

Bug Fixes

• interactions: ignore unchecked returns in mock server handlers in interaction_test.go (1617851)
• Update GitHub Actions lint workflow for Node 24 compatibility (aeb441a)
• use CreateAgentInteraction for Trigger.interaction and TriggerCreateParams.interaction (d918e85)

Commits

• 65c31e3 chore(main): release 1.72.0 (#918)
• 3ecb7eb feat: support continuation_token in GenerateContent
• ea49bd0 chore: internal
• 1617851 fix(interactions): ignore unchecked returns in mock server handlers in intera...
• 63d48cb chore: update easytemplate to v0.12.4 and regenerate SDKs
• bfc37d0 chore: update Speakeasy OpenAPI generator to v2.943.0
• d918e85 fix: use CreateAgentInteraction for Trigger.interaction and `TriggerCreat...
• a2adbb5 feat: add gcs_metrics_uri for exporting tuning job metrics.
• b70164a chore(go): regenerate Go Interactions SDK with Speakeasy v2.941.1
• 726e6b0 chore: update Speakeasy OpenAPI generator to v2.937.19 and regenerate GAOS SDKs
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[Copilot]

Copilot review overview

🟢 Approval recommended

Dependency declarations and checksums are consistent, with no source changes or identified compatibility issues.

Review effort: Balanced
Findings: None

What changed in this PR

Updates four provider SDK dependencies to their latest compatible releases.

Changes:

• Bumps Anthropic, GitHub Copilot, OpenAI, and Google GenAI SDKs.
• Refreshes module checksums.

File	Description
go.mod	Updates direct dependency versions.
go.sum	Updates corresponding module checksums.

---

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

[George Adams (gdams)]

Copilot fix the test failures

[Copilot]

Copilot fix the test failures

Fixed in b0c1270. OpenAI v3.70 requires HTTPS for authenticated requests; the four affected tests now use TLS mock servers and their trusted clients. go test -race -shuffle=on ./... passes.