Update Go module updates

[red-hat-konflux-kflux-prd-rh02]

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Confidence	Type	Update	Pending
cel.dev/expr	v0.25.2 → v0.25.3			indirect	patch
cloud.google.com/go/auth	v0.19.0 → v0.23.2			indirect	minor
github.com/ajeddeloh/go-json	5ae6071 → e49c886			indirect	digest
github.com/antchfx/xpath	v1.3.6 → v1.3.8			indirect	patch
github.com/anthropics/anthropic-sdk-go	v1.26.0 → v1.67.0			indirect	minor	v1.68.0
github.com/aws/aws-sdk-go-v2	v1.41.12 → v1.44.0			indirect	minor	v1.45.1 (+1)
github.com/coreos/fcct	v0.5.0 → v0.29.0			indirect	minor
github.com/coreos/ignition/v2	v2.26.0 → v2.27.0			require	minor
github.com/felixge/httpsnoop	v1.0.4 → v1.1.0			indirect	minor
github.com/fxamacker/cbor/v2	v2.9.2 → v2.9.3			indirect	patch
github.com/go-openapi/jsonreference	v1.0.0 → v1.0.1			indirect	patch
github.com/go-openapi/swag	v0.27.1 → v0.29.1			indirect	minor
github.com/go-openapi/swag/cmdutils	v0.27.1 → v0.29.1			indirect	minor
github.com/go-openapi/swag/conv	v0.27.1 → v0.29.1			indirect	minor
github.com/go-openapi/swag/fileutils	v0.27.1 → v0.29.1			indirect	minor
github.com/go-openapi/swag/jsonutils	v0.27.1 → v0.29.1			indirect	minor
github.com/go-openapi/swag/loading	v0.27.1 → v0.29.1			indirect	minor
github.com/go-openapi/swag/mangling	v0.27.1 → v0.29.1			indirect	minor
github.com/go-openapi/swag/netutils	v0.27.1 → v0.29.1			indirect	minor
github.com/go-openapi/swag/pools	v0.27.1 → v0.29.1			indirect	minor
github.com/go-openapi/swag/stringutils	v0.27.1 → v0.29.1			indirect	minor
github.com/go-openapi/swag/typeutils	v0.27.1 → v0.29.1			indirect	minor
github.com/go-openapi/swag/yamlutils	v0.27.1 → v0.29.1			indirect	minor
github.com/google/cel-go	v0.30.0 → v0.32.0			indirect	minor
github.com/googleapis/enterprise-certificate-proxy	v0.3.16 → v0.3.20			indirect	patch
github.com/googleapis/gax-go/v2	v2.20.0 → v2.24.0			indirect	minor
github.com/klauspost/compress	v1.18.5 → v1.19.2			indirect	minor
github.com/mattn/go-isatty	v0.0.22 → v0.0.24			indirect	patch
github.com/mattn/go-runewidth	v0.0.24 → v0.0.28			indirect	patch
github.com/olekukonko/errors	v1.2.0 → v1.3.0			indirect	minor
github.com/onsi/gomega	v1.39.1 → v1.42.1			require	minor	v1.43.0
github.com/openai/openai-go/v3	v3.28.0 → v3.52.0			indirect	minor	v3.54.0 (+1)
github.com/openshift/api	09730f8 → c7d4aa1			require	digest
github.com/openshift/client-go	deb4dc5 → ddca5e0			require	digest
github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring	v0.90.1 → v0.93.1			require	minor
github.com/prometheus-operator/prometheus-operator/pkg/client	v0.90.1 → v0.93.1			require	minor
github.com/prometheus/client_golang	v1.23.2 → v1.24.1			require	minor
github.com/prometheus/common	v0.67.5 → v0.70.1			indirect	minor
github.com/prometheus/procfs	v0.20.1 → v0.21.1			indirect	minor	v0.22.0
github.com/securego/gosec/v2	v2.25.0 → v2.29.0			require	minor
github.com/stretchr/testify	v1.11.1 → v1.12.1			require	minor
github.com/tidwall/gjson	v1.18.0 → v1.19.0			indirect	minor
github.com/tidwall/match	v1.1.1 → v1.2.0			indirect	minor
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp	v0.65.0 → v0.71.0			indirect	minor
go.opentelemetry.io/otel	v1.45.0 → v1.46.0			indirect	minor
go.opentelemetry.io/otel/metric	v1.45.0 → v1.46.0			indirect	minor
go.opentelemetry.io/otel/trace	v1.45.0 → v1.46.0			indirect	minor
go.yaml.in/yaml/v3	v3.0.4 → v3.0.5			indirect	patch
golang.org/x/crypto	v0.54.0 → v0.55.0			indirect	minor
golang.org/x/exp	b88d891 → e88cd73			indirect	digest
golang.org/x/mod	v0.38.0 → v0.40.0			require	minor
golang.org/x/net	v0.57.0 → v0.58.0			require	minor
golang.org/x/text	v0.40.0 → v0.41.0			indirect	minor
golang.org/x/tools	v0.48.0 → v0.49.0			indirect	minor
google.golang.org/api	v0.272.0 → v0.294.0			indirect	minor	v0.295.0
google.golang.org/genai	v1.50.0 → v1.70.0			indirect	minor
google.golang.org/genproto/googleapis/api	6ac0973 → da73d73			indirect	digest
google.golang.org/genproto/googleapis/rpc	6ac0973 → da73d73			indirect	digest
google.golang.org/grpc	v1.81.1 → v1.83.2			indirect	minor
google.golang.org/protobuf	v1.36.12-0.20260120151049-f2248ac996af → v1.36.12			indirect	patch
k8s.io/api	v0.35.7 → v0.37.0			require	minor
k8s.io/apiextensions-apiserver	v0.35.7 → v0.37.0			require	minor
k8s.io/apimachinery	v0.35.7 → v0.37.0			require	minor
k8s.io/apiserver	v0.35.7 → v0.37.0			require	minor
k8s.io/client-go	v0.35.7 → v0.37.0			require	minor
k8s.io/code-generator	v0.35.7 → v0.37.0			indirect	minor
k8s.io/component-base	v0.35.7 → v0.37.0			indirect	minor
k8s.io/kube-aggregator	v0.35.7 → v0.37.0			indirect	minor
k8s.io/kube-openapi	d427ff9 → be32def			indirect	digest
k8s.io/kubectl	v0.35.7 → v0.37.0			indirect	minor
k8s.io/pod-security-admission	v0.35.7 → v0.37.0			require	minor
open-cluster-management.io/api	v0.15.0 → v0.16.2			require	minor
sigs.k8s.io/controller-runtime	v0.23.3 → v0.24.1			require	minor
sigs.k8s.io/controller-tools	v0.20.1 → v0.21.0			require	minor

---

Warning

Some dependencies could not be looked up. Check the warning logs for more information.

---

Release Notes

cel-expr/cel-spec (cel.dev/expr)

v0.25.3

Compare Source

What's Changed

• Workaround inconsistent ? in proto textformat by @​jnthntatum in #​512
• Update README with repository relocation notice by @​dmitriplotnikov in #​514
• Add basic tests for out-of-range epoch int to timestamp conversions by @​l46kok in #​500
• Update README with new repository link by @​dmitriplotnikov in #​519
• Lint fixes for import by @​jnthntatum in #​521
• CEL conformance test documentation: fix links in markdown by @​AustinWise in #​518
• Avoid ? in textproto test cases. by @​jnthntatum in #​525
• Add initial conformance tests for lists ext by @​jnthntatum in #​528

New Contributors

• @​dmitriplotnikov made their first contribution in #​514
• @​AustinWise made their first contribution in #​518

Full Changelog: cel-expr/cel-spec@v0.25.2...v0.25.3

googleapis/google-cloud-go (cloud.google.com/go/auth)

v0.23.0

Compare Source

• bigquery: Add DDL stats to query statistics.
• bigtable:
  • cbt: Add cells-per-column limit for row lookup.
  • cbt: Make it possible to combine read filters.
• dlp: v2beta2 client removed. Use the v2 client instead.
• firestore, spanner: Fix compilation errors due to protobuf changes.

v0.22.0

Compare Source

• bigtable:

  • cbt: Support cells per column limit for row read.
  • bttest: Correctly handle empty RowSet.
  • Fix ReadModifyWrite operation in emulator.
  • Fix API path in GetCluster.

• bigquery:

  • BEHAVIOR CHANGE: Retry on 503 status code.
  • Add dataset.DeleteWithContents.
  • Add SchemaUpdateOptions for query jobs.
  • Add Timeline to QueryStatistics.
  • Add more stats to ExplainQueryStage.
  • Support Parquet data format.

• datastore:

  • Support omitempty for times.

• dlp:

  • BREAKING CHANGE: Remove v1beta1 client. Please migrate to the v2 client,
    which is now out of beta.
  • Add v2 client.

• firestore:

  • BEHAVIOR CHANGE: Treat set({}, MergeAll) as valid.

• iam:

  • Support JWT signing via SignJwt callopt.

• profiler:

  • BEHAVIOR CHANGE: PollForSerialOutput returns an error when context.Done.
  • BEHAVIOR CHANGE: Increase the initial backoff to 1 minute.
  • Avoid returning empty serial port output.

• pubsub:

  • BEHAVIOR CHANGE: Don't backoff during next retryable error once stream is healthy.
  • BEHAVIOR CHANGE: Don't backoff on EOF.
  • pstest: Support Acknowledge and ModifyAckDeadline RPCs.

• redis:

  • Add v1 beta Redis client.

• spanner:

  • Support SessionLabels.

• speech:

  • Add api v1 beta1 client.

• storage:

  • BEHAVIOR CHANGE: Retry reads when retryable error occurs.
  • Fix delete of object in requester-pays bucket.
  • Support KMS integration.

v0.21.0

Compare Source

• bigquery:

  • Add OpenCensus tracing.

• firestore:

  • BREAKING CHANGE: If a document does not exist, return a DocumentSnapshot
    whose Exists method returns false. DocumentRef.Get and Transaction.Get
    return the non-nil DocumentSnapshot in addition to a NotFound error.
    DocumentRef.GetAll and Transaction.GetAll return a non-nil
    DocumentSnapshot instead of nil.
  • Add DocumentIterator.Stop. Call Stop whenever you are done with a
    DocumentIterator.
  • Added Query.Snapshots and DocumentRef.Snapshots, which provide realtime
    notification of updates. See https://cloud.google.com/firestore/docs/query-data/listen.
  • Canceling an RPC now always returns a grpc.Status with codes.Canceled.

• spanner:

  • Add CommitTimestamp, which supports inserting the commit timestamp of a
    transaction into a column.

v0.20.0

Compare Source

• bigquery: Support SchemaUpdateOptions for load jobs.

• bigtable:

  • Add SampleRowKeys.
  • cbt: Support union, intersection GCPolicy.
  • Retry admin RPCS.
  • Add trace spans to retries.

• datastore: Add OpenCensus tracing.

• firestore:

  • Fix queries involving Null and NaN.
  • Allow Timestamp protobuffers for time values.

• logging: Add a WriteTimeout option.

• spanner: Support Batch API.

• storage: Add OpenCensus tracing.

antchfx/xpath (github.com/antchfx/xpath)

v1.3.8

Compare Source

What's Changed

• Format numbers per the XPath 1.0 string() rules by @​gaoflow in #​125
• Fix remaining XPath comparison coercion edge cases by @​floze-the-genius in #​127
• fix: round() and mod follow the XPath 1.0 numeric spec by @​gaoflow in #​128
• Reject undeclared variables nested in an expression by @​AruneshDwivedi in #​129
• parse: '' is not a name character (§3.7) — fix nameexpr lexing (#​126) by @​alonsoalpizar in #​130

v1.3.7

Compare Source

Merged PR:

• #​123 (@​c-tonneslan)
• #​124(@​3leapsdave)

anthropics/anthropic-sdk-go (github.com/anthropics/anthropic-sdk-go)

v1.67.0

Compare Source

Full Changelog: v1.67.0...v1.68.0

Features

• api: beta files/skills namespaces use GA shapes; drop dated beta header pins (90ee202)

Bug Fixes

• bedrock: leave non-JSON request bodies untouched (#​337) (3a2e758)
• client: report Windows correctly in X-Stainless-OS header (ceb299f)
• client: retry attempts that hit the per-request timeout (49b9527)
• sessions: deliver completed tool calls when the runner terminates (#​322) (642d6a0)
• sessions: read event fields via variant accessors in session helpers (#​336) (fb7ec8a)
• tools: let read return a view_range of a file over the size cap (#​341) (33d4f9d)
• webhooks: require headers to be passed to unwrap() (9a1023a)

Documentation

• api: clarify pagination on the organization rate-limit list endpoints (0b6ba47)

v1.66.0

Compare Source

Full Changelog: v1.66.0...v1.67.0

Features

• api: add updates thinking display mode (beta) (44fa7a6)
• api: add missing anthropic-beta values (118b499)
• api: add support for Organization API endpoints (713c567)

Bug Fixes

• messages: add missing ToParam methods and exhaustiveness test (#​245) (e385915)
• tools: keep the tool runner going on pause_turn (#​250) (2fa015b)

Chores

• docs: clarify skill version latest support and memory version retention (c5d5ac4)
• internal: cancel superseded CI runs (5413684)

Documentation

• api: clarify session thread agent and usage.iterations compaction descriptions (beta) (e017f63)

v1.65.0

Compare Source

Full Changelog: v1.65.0...v1.66.0

Features

• api: managed agents web search config and self hosted sandbox memory (694b03a)

v1.64.0

Compare Source

Full Changelog: v1.64.0...v1.65.0

Features

• api: Files and Skills APIs are now GA; add computer use and browser use toolsets (e7be7af)

v1.63.1

Compare Source

Full Changelog: v1.63.1...v1.64.0

Features

• api: additions to files and memory stores (5c105da)
• api: updates to skill, files, and user profiles (a0061d6)

Bug Fixes

• api: remove unsupported mid_conv_system content block (bced0f9)
• session-runner: retry tool-result sends for at least the lease TTL (#​299) (ebc9533)
• tool-runner: forward the server-assigned container on follow-up requests (#​277) (860620c)
• toolrunner: don't yield the final message twice from All() (#​314) (1e418f0)

Chores

• internal: remove leftover prism references (a1d9eab)

v1.63.0

Compare Source

Full Changelog: v1.63.0...v1.63.1

Bug Fixes

• auth: pin token exchange to the configured base URL and skip auth for other origins (#​258) (6e4141c)
• client: apply stop_details from every message_delta when accumulating (#​253) (c197a64)
• client: properly render maxLength and maxItems in generated schemas (84a57f5)
• sessions: post "(no output)" for empty text tool results instead of an empty text block (#​236) (a588842)

Chores

• ci: run breaking-change detection as a ci.yml job on every push (29aebdb)

Documentation

• api: clarify that user profile name is optional for resold profiles (1039f95)

v1.62.0

Compare Source

Full Changelog: v1.62.0...v1.63.0

Features

• api: add output_behavior to dream creation (create a new memory store or update the input store in place) (ba999d5)

Bug Fixes

• client: add models (a662a31)
• symlink-loop paths, special archive members, and 409 retry in the agent toolset and environment worker (#​226) (82aa034)
• vertex: preserve a user-supplied HTTP client by wrapping its transport with Google auth (#​242) (8e85a8e)

v1.61.0

Compare Source

Full Changelog: v1.61.0...v1.62.0

Features

• api: add mid-conversation-tool-changes-2026-07-01 beta (f53c3d3)
• api: add support for session budgets, advisor tool, pinned inference location and skills auto-loading from GitHub (89c04c2)

Bug Fixes

• client: preserve wire-faithful JSON in accumulated streaming messages (#​197) (9a01ac0)
• jsonl: prevent silent truncation of large results, and don't panic on close (#​203) (77dd33d)
• tools: name tool refusals and a dead shell so they can be matched (#​213) (da87d4d)

Chores

• api: remove retired Claude Opus 4.1 models (85fdf3b)
• docs: small updates to descriptions (487e6ea)
• docs: updates to a few documentation strings (03dc511)

v1.60.0

Compare Source

Full Changelog: v1.60.0...v1.61.0

Features

• api: add claude-opus-5 model (bb7dc83)
• api: add tool addition/removal blocks and tool_change events (bb7dc83)
• api: expand client-side fallback credit token types and add server-side fallbacks default option (bb7dc83)

v1.59.0

Compare Source

Full Changelog: v1.59.0...v1.60.0

Features

• api: add new stop reason 'model_context_window_exceeded' (94caa5d)

Bug Fixes

• apijson: correct unmarshaling for param types (#​73) (661be2e)
• client: escape HTML in RawJSON overrides of nested properties (3b163e2)
• refer to the CLI as ant in auth error messages (#​194) (d6508c7)

v1.58.1

Compare Source

Full Changelog: v1.58.1...v1.59.0

Features

• api: add support for Managed Agents model effort, initial session events, and threads delta streaming (abca19a)

v1.58.0

Compare Source

Full Changelog: v1.58.0...v1.58.1

Bug Fixes

• client: copy all citation fields in ToParam conversions (#​191) (26ac1f9)
• vertex: default to the cloud-platform scope in WithGoogleAuth (#​190) (7931e70)

Chores

• api: add support for new refusal category (f77159c)
• docs: small updates (576dc36)
• docs: small updates (f618082)
• internal: codegen related update (03fee5d)

v1.57.0

Compare Source

Full Changelog: v1.57.0...v1.58.0

Features

• api: add support for MCP Tunnels (3465b89)

v1.56.0

Compare Source

Full Changelog: v1.56.0...v1.57.0

Features

• api: add support for dreaming (3736bf0)
• tools: gate session tool calls on evaluated_permission (#​151) (4d85a6f)

Bug Fixes

• helpers: distinguish canonical agent.message events from open previews (#​118) (c49c17c)

Chores

• docs: small updates to field descriptions (61bc396)
• docs: update model example (937a29c)
• docs: updates to descriptions and examples (2c59f79)

v1.55.1

Compare Source

Full Changelog: v1.55.1...v1.56.0

Features

• api: add agent-memory-2026-07-22 beta header (5bcfda4)

v1.55.0

Compare Source

Full Changelog: v1.55.0...v1.55.1

Chores

• api: remove some nonfunctional types from the SDKs (9bd3d09)

v1.54.0

Compare Source

Full Changelog: v1.54.0...v1.55.0

Features

• api: add support for Managed Agents event delta streaming, agent overrides, reverse pagination, vault credential injection scoping, and agent and deployment webhook events ([021ef45](https://redirect.github.com/anthropics/anthropi

✂ Note

PR body was truncated to here.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • "every weekend"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

To execute skipped test pipelines write comment /ok-to-test.

---

Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.

[red-hat-konflux-kflux-prd-rh02]

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

• any of the package files in this branch needs updating, or
• the branch becomes conflicted, or
• you click the rebase/retry checkbox if found above, or
• you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: go.sum

Command failed: go get -t ./...
go: github.com/ajeddeloh/go-json@v0.0.0-20231102161613-e49c8866685a: parsing go.mod:
	module declares its path as: github.com/coreos/go-json
	        but was required as: github.com/ajeddeloh/go-json

[openshift-ci]

Hi @red-hat-konflux-kflux-prd-rh02[bot]. Thanks for your PR.

I'm waiting for a ComplianceAsCode member to verify that this patch is reasonable to test. If it is, they should reply with /ok-to-test on its own line. Until that is done, I will not automatically test new commits in this PR, but the usual testing commands by org members will still work.

Regular contributors should join the org to skip this step.

Once the patch is verified, the new status will be reflected by the ok-to-test label.

I understand the commands that are listed here.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

[openshift-ci]

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: red-hat-konflux-kflux-prd-rh02[bot]
Once this PR has been reviewed and has the lgtm label, please assign mrogers950 for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Details

Needs approval from an approver in each of these files:

• OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[openshift-ci]

@red-hat-konflux-kflux-prd-rh02[bot]: The following tests failed, say /retest to rerun all failed tests or /retest-required to rerun all mandatory failed tests:

Test name	Commit	Details	Required	Rerun command
ci/prow/e2e-aws-deployment	d8d2b79	link	true	/test e2e-aws-deployment
ci/prow/e2e-aws-scan-config	d8d2b79	link	true	/test e2e-aws-scan-config
ci/prow/e2e-rosa	d8d2b79	link	true	/test e2e-rosa
ci/prow/e2e-aws-parallel-arm	d8d2b79	link	true	/test e2e-aws-parallel-arm
ci/prow/e2e-aws-serial-arm	d8d2b79	link	true	/test e2e-aws-serial-arm
ci/prow/unit	a1d0a4c	link	true	/test unit
ci/prow/verify	a1d0a4c	link	true	/test verify
ci/prow/e2e-aws-parallel	a1d0a4c	link	true	/test e2e-aws-parallel
ci/prow/e2e-aws-serial	a1d0a4c	link	true	/test e2e-aws-serial
ci/prow/images	a1d0a4c	link	true	/test images

Full PR test history. Your PR dashboard.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.